brcm47xx: add fallback sprom for pci devices without an own sprom.

If there is no sprom on an ssb based pci device on the brcm47xx
architecture ssb now asks the architecture code to look into the nvram
to get some sprom data for this device. Now we are able to read out
pci/1/1/ foo or pci/1/3/ foo config options.

This will fix some problems where the wireless devices does not got an
mac address and the following message was show:
ssb: WARNING: Invalid SPROM CRC (corrupt SPROM)

SVN-Revision: 26801

24 files changed, 976 insertions, 72 deletions

diff --git a/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch b/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch
new file mode 100644
index 0000000000..1bb2f0fc01
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch
@@ -0,0 +1,142 @@
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -643,6 +643,17 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++
++int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
++{
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		memcpy(&bus->sprom, &bcm63xx_sprom, sizeof(struct ssb_sprom));
++		return 0;
++	} else {
++		printk(KERN_ERR PFX "unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
+ #endif
+ 
+ /*
+@@ -793,8 +804,9 @@ void __init board_prom_init(void)
+ 	if (!board_get_mac_address(bcm63xx_sprom.il0mac)) {
+ 		memcpy(bcm63xx_sprom.et0mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+ 		memcpy(bcm63xx_sprom.et1mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+-		if (ssb_arch_set_fallback_sprom(&bcm63xx_sprom) < 0)
+-			printk(KERN_ERR "failed to register fallback SPROM\n");
++		if (ssb_arch_register_fallback_sprom(
++				&bcm63xx_get_fallback_sprom) < 0)
++			printk(KERN_ERR PFX "failed to register fallback SPROM\n");
+ 	}
+ #endif
+ }
+--- a/drivers/ssb/pci.c
++++ b/drivers/ssb/pci.c
+@@ -662,7 +662,6 @@ static int sprom_extract(struct ssb_bus
+ static int ssb_pci_sprom_get(struct ssb_bus *bus,
+ 			     struct ssb_sprom *sprom)
+ {
+-	const struct ssb_sprom *fallback;
+ 	int err;
+ 	u16 *buf;
+ 
+@@ -707,10 +706,14 @@ static int ssb_pci_sprom_get(struct ssb_
+ 		if (err) {
+ 			/* All CRC attempts failed.
+ 			 * Maybe there is no SPROM on the device?
+-			 * If we have a fallback, use that. */
+-			fallback = ssb_get_fallback_sprom();
+-			if (fallback) {
+-				memcpy(sprom, fallback, sizeof(*sprom));
++			 * Now we ask the arch code if there is some sprom
++			 * avaliable for this device in some other storage */
++			err = ssb_fill_sprom_with_fallback(bus);
++			if (err) {
++				ssb_printk(KERN_WARNING PFX "WARNING: Using"
++					   " fallback SPROM failed (err %d)\n",
++					   err);
++			} else {
+ 				err = 0;
+ 				goto out_free;
+ 			}
+--- a/drivers/ssb/sprom.c
++++ b/drivers/ssb/sprom.c
+@@ -17,7 +17,7 @@
+ #include <linux/slab.h>
+ 
+ 
+-static const struct ssb_sprom *fallback_sprom;
++static int(*get_fallback_sprom)(struct ssb_bus *dev);
+ 
+ 
+ static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
+@@ -145,13 +145,14 @@ out:
+ }
+ 
+ /**
+- * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
++ * ssb_arch_register_fallback_sprom - Registers a method providing a fallback
++ * SPROM if no SPROM is found.
+  *
+- * @sprom: The SPROM data structure to register.
++ * @sprom_callback: The callbcak function.
+  *
+- * With this function the architecture implementation may register a fallback
+- * SPROM data structure. The fallback is only used for PCI based SSB devices,
+- * where no valid SPROM can be found in the shadow registers.
++ * With this function the architecture implementation may register a callback
++ * handler which wills the SPROM data structure. The fallback is only used for
++ * PCI based SSB devices, where no valid SPROM can be found in the shadow registers.
+  *
+  * This function is useful for weird architectures that have a half-assed SSB device
+  * hardwired to their PCI bus.
+@@ -163,18 +164,21 @@ out:
+  *
+  * This function is available for architecture code, only. So it is not exported.
+  */
+-int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
++int ssb_arch_register_fallback_sprom(int (*sprom_callback)(struct ssb_bus *bus))
+ {
+-	if (fallback_sprom)
++	if (get_fallback_sprom)
+ 		return -EEXIST;
+-	fallback_sprom = sprom;
++	get_fallback_sprom = sprom_callback;
+ 
+ 	return 0;
+ }
+ 
+-const struct ssb_sprom *ssb_get_fallback_sprom(void)
++int ssb_fill_sprom_with_fallback(struct ssb_bus *bus)
+ {
+-	return fallback_sprom;
++	if (!get_fallback_sprom)
++		return -ENOENT;
++
++	return get_fallback_sprom(bus);
+ }
+ 
+ /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
+--- a/drivers/ssb/ssb_private.h
++++ b/drivers/ssb/ssb_private.h
+@@ -171,7 +171,7 @@ ssize_t ssb_attr_sprom_store(struct ssb_
+ 			     const char *buf, size_t count,
+ 			     int (*sprom_check_crc)(const u16 *sprom, size_t size),
+ 			     int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom));
+-extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
++extern int ssb_fill_sprom_with_fallback(struct ssb_bus *bus);
+ 
+ 
+ /* core.c */
+--- a/include/linux/ssb/ssb.h
++++ b/include/linux/ssb/ssb.h
+@@ -404,7 +404,8 @@ extern bool ssb_is_sprom_available(struc
+ 
+ /* Set a fallback SPROM.
+  * See kdoc at the function definition for complete documentation. */
+-extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
++extern int ssb_arch_register_fallback_sprom(
++		int (*sprom_callback)(struct ssb_bus *bus));
+ 
+ /* Suspend a SSB bus.
+  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch b/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
new file mode 100644
index 0000000000..acf65bd8c2
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
@@ -0,0 +1,69 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -59,10 +59,23 @@ static void bcm47xx_machine_halt(void)
+ }
+ 
+ #define READ_FROM_NVRAM(_outvar, name, buf) \
+-	if (nvram_getenv(name, buf, sizeof(buf)) >= 0)\
++	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
+-static void bcm47xx_fill_sprom(struct ssb_sprom *sprom)
++static inline int nvram_getprefix(const char *prefix, char *name,
++				  char *buf, int len)
++{
++	if (prefix) {
++		char key[100];
++
++		snprintf(key, sizeof(key), "%s%s", prefix, name);
++		return nvram_getenv(key, buf, len);
++	}
++
++	return nvram_getenv(name, buf, len);
++}
++
++static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+ 	u32 boardflags;
+@@ -71,11 +84,11 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getenv("il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+-	if (nvram_getenv("et0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+-	if (nvram_getenv("et1macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et1macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et1mac);
+ 	READ_FROM_NVRAM(et0phyaddr, "et0phyaddr", buf);
+ 	READ_FROM_NVRAM(et1phyaddr, "et1phyaddr", buf);
+@@ -127,14 +140,14 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+ 	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
+ 
+-	if (nvram_getenv("boardflags", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags_lo = (boardflags & 0x0000FFFFU);
+ 			sprom->boardflags_hi = (boardflags & 0xFFFF0000U) >> 16;
+ 		}
+ 	}
+-	if (nvram_getenv("boardflags2", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags2", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags2_lo = (boardflags & 0x0000FFFFU);
+@@ -160,7 +173,7 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("boardrev", buf, sizeof(buf)) >= 0)
+ 		iv->boardinfo.rev = (u16)simple_strtoul(buf, NULL, 0);
+ 
+-	bcm47xx_fill_sprom(&iv->sprom);
++	bcm47xx_fill_sprom(&iv->sprom, NULL);
+ 
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
diff --git a/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch b/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch
new file mode 100644
index 0000000000..f63deacddf
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch
@@ -0,0 +1,48 @@
+--- a/arch/mips/bcm47xx/nvram.c
++++ b/arch/mips/bcm47xx/nvram.c
+@@ -23,7 +23,7 @@
+ static char nvram_buf[NVRAM_SPACE];
+ 
+ /* Probe for NVRAM header */
+-static void __init early_nvram_init(void)
++static void early_nvram_init(void)
+ {
+ 	struct ssb_mipscore *mcore = &ssb_bcm47xx.mipscore;
+ 	struct nvram_header *header;
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -156,6 +156,22 @@ static void bcm47xx_fill_sprom(struct ss
+ 	}
+ }
+ 
++int bcm47xx_get_sprom(struct ssb_bus *bus)
++{
++	char prefix[10];
++
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		snprintf(prefix, sizeof(prefix), "pci/%x/%x/",
++			 bus->host_pci->bus->number + 1,
++			 PCI_SLOT(bus->host_pci->devfn));
++		bcm47xx_fill_sprom(&bus->sprom, prefix);
++		return 0;
++	} else {
++		printk(KERN_WARNING "bcm47xx: unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
++
+ static int bcm47xx_get_invariants(struct ssb_bus *bus,
+ 				   struct ssb_init_invariants *iv)
+ {
+@@ -212,6 +228,11 @@ void __init plat_mem_setup(void)
+ 	char buf[100];
+ 	struct ssb_mipscore *mcore;
+ 
++	err = ssb_arch_register_fallback_sprom(&bcm47xx_get_sprom);
++	if (err)
++		printk(KERN_WARNING "bcm47xx: someone else already registered"
++			" a ssb SPROM callback handler (err %d)\n", err);
++
+ 	err = ssb_bus_ssbbus_register(&ssb_bcm47xx, SSB_ENUM_BASE,
+ 				      bcm47xx_get_invariants);
+ 	if (err)
diff --git a/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch b/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch
new file mode 100644
index 0000000000..490ca67bdb
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch
@@ -0,0 +1,122 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -62,6 +62,11 @@ static void bcm47xx_machine_halt(void)
+ 	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
++#define READ_FROM_NVRAM2(_outvar, name1, name2, buf) \
++	if (nvram_getprefix(prefix, name1, buf, sizeof(buf)) >= 0 || \
++	    nvram_getprefix(prefix, name2, buf, sizeof(buf)) >= 0)\
++		sprom->_outvar = simple_strtoul(buf, NULL, 0);
++
+ static inline int nvram_getprefix(const char *prefix, char *name,
+ 				  char *buf, int len)
+ {
+@@ -75,6 +80,27 @@ static inline int nvram_getprefix(const
+ 	return nvram_getenv(name, buf, len);
+ }
+ 
++static u32 nvram_getu32(const char *name, char *buf, int len)
++{
++	int rv;
++	char key[100];
++	u16 var0, var1;
++
++	snprintf(key, sizeof(key), "%s0", name);
++	rv = nvram_getenv(key, buf, len);
++	/* return 0 here so this looks like unset */
++	if (rv < 0)
++		return 0;
++	var0 = simple_strtoul(buf, NULL, 0);
++
++	snprintf(key, sizeof(key), "%s1", name);
++	rv = nvram_getenv(key, buf, len);
++	if (rv < 0)
++		return 0;
++	var1 = simple_strtoul(buf, NULL, 0);
++	return var1 << 16 | var0;
++}
++
+ static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+@@ -84,7 +110,8 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0 ||
+++	    nvram_getprefix(prefix, "macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+ 	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+@@ -110,20 +137,36 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(pa1hib0, "pa1hib0", buf);
+ 	READ_FROM_NVRAM(pa1hib2, "pa1hib1", buf);
+ 	READ_FROM_NVRAM(pa1hib1, "pa1hib2", buf);
+-	READ_FROM_NVRAM(gpio0, "wl0gpio0", buf);
+-	READ_FROM_NVRAM(gpio1, "wl0gpio1", buf);
+-	READ_FROM_NVRAM(gpio2, "wl0gpio2", buf);
+-	READ_FROM_NVRAM(gpio3, "wl0gpio3", buf);
+-	READ_FROM_NVRAM(maxpwr_bg, "pa0maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_al, "pa1lomaxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_a, "pa1maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_ah, "pa1himaxpwr", buf);
+-	READ_FROM_NVRAM(itssi_a, "pa1itssit", buf);
+-	READ_FROM_NVRAM(itssi_bg, "pa0itssit", buf);
++	READ_FROM_NVRAM2(gpio0, "ledbh0", "wl0gpio0", buf);
++	READ_FROM_NVRAM2(gpio1, "ledbh1", "wl0gpio1", buf);
++	READ_FROM_NVRAM2(gpio2, "ledbh2", "wl0gpio2", buf);
++	READ_FROM_NVRAM2(gpio3, "ledbh3", "wl0gpio3", buf);
++	READ_FROM_NVRAM2(maxpwr_bg, "maxp2ga0", "pa0maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_al, "maxp5gla0", "pa1lomaxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_a, "maxp5ga0", "pa1maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_ah, "maxp5gha0", "pa1himaxpwr", buf);
++	READ_FROM_NVRAM2(itssi_bg, "itt5ga0", "pa0itssit", buf);
++	READ_FROM_NVRAM2(itssi_a, "itt2ga0", "pa1itssit", buf);
+ 	READ_FROM_NVRAM(tri2g, "tri2g", buf);
+ 	READ_FROM_NVRAM(tri5gl, "tri5gl", buf);
+ 	READ_FROM_NVRAM(tri5g, "tri5g", buf);
+ 	READ_FROM_NVRAM(tri5gh, "tri5gh", buf);
++	READ_FROM_NVRAM(txpid2g[0], "txpid2ga0", buf);
++	READ_FROM_NVRAM(txpid2g[1], "txpid2ga1", buf);
++	READ_FROM_NVRAM(txpid2g[2], "txpid2ga2", buf);
++	READ_FROM_NVRAM(txpid2g[3], "txpid2ga3", buf);
++	READ_FROM_NVRAM(txpid5g[0], "txpid5ga0", buf);
++	READ_FROM_NVRAM(txpid5g[1], "txpid5ga1", buf);
++	READ_FROM_NVRAM(txpid5g[2], "txpid5ga2", buf);
++	READ_FROM_NVRAM(txpid5g[3], "txpid5ga3", buf);
++	READ_FROM_NVRAM(txpid5gl[0], "txpid5gla0", buf);
++	READ_FROM_NVRAM(txpid5gl[1], "txpid5gla1", buf);
++	READ_FROM_NVRAM(txpid5gl[2], "txpid5gla2", buf);
++	READ_FROM_NVRAM(txpid5gl[3], "txpid5gla3", buf);
++	READ_FROM_NVRAM(txpid5gh[0], "txpid5gha0", buf);
++	READ_FROM_NVRAM(txpid5gh[1], "txpid5gha1", buf);
++	READ_FROM_NVRAM(txpid5gh[2], "txpid5gha2", buf);
++	READ_FROM_NVRAM(txpid5gh[3], "txpid5gha3", buf);
+ 	READ_FROM_NVRAM(rxpo2g, "rxpo2g", buf);
+ 	READ_FROM_NVRAM(rxpo5g, "rxpo5g", buf);
+ 	READ_FROM_NVRAM(rssisav2g, "rssisav2g", buf);
+@@ -135,10 +178,18 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(rssismf5g, "rssismf5g", buf);
+ 	READ_FROM_NVRAM(bxa5g, "bxa5g", buf);
+ 	READ_FROM_NVRAM(cck2gpo, "cck2gpo", buf);
+-	READ_FROM_NVRAM(ofdm2gpo, "ofdm2gpo", buf);
+-	READ_FROM_NVRAM(ofdm5glpo, "ofdm5glpo", buf);
+-	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+-	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
++
++	sprom->ofdm2gpo = nvram_getu32("ofdm2gpo", buf, sizeof(buf));
++	sprom->ofdm5glpo = nvram_getu32("ofdm5glpo", buf, sizeof(buf));
++	sprom->ofdm5gpo = nvram_getu32("ofdm5gpo", buf, sizeof(buf));
++	sprom->ofdm5ghpo = nvram_getu32("ofdm5ghpo", buf, sizeof(buf));
++
++	READ_FROM_NVRAM(antenna_gain.ghz24.a0, "ag0", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a1, "ag1", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a2, "ag2", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a3, "ag3", buf);
++	memcpy(&sprom->antenna_gain.ghz5, &sprom->antenna_gain.ghz24,
++	       sizeof(sprom->antenna_gain.ghz5));
+ 
+ 	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
diff --git a/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch b/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
index abb2044f78..5ccb62fc6f 100644
--- a/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
+++ b/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
@@ -33,7 +33,7 @@
 +EXPORT_SYMBOL(nvram_get);
 --- a/arch/mips/bcm47xx/setup.c
 +++ b/arch/mips/bcm47xx/setup.c
-@@ -226,3 +226,20 @@ void __init plat_mem_setup(void)
+@@ -311,3 +311,20 @@ void __init plat_mem_setup(void)
  	_machine_halt = bcm47xx_machine_halt;
  	pm_power_off = bcm47xx_machine_halt;
  }
diff --git a/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch b/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
index 9ed4a4de4a..29e12a81b9 100644
--- a/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
+++ b/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
@@ -253,8 +253,8 @@ out the configuration than the in kernel cfe config reader.
 +extern char *cfe_env_get(char *nv_buf, const char *name);
  
  /* Probe for NVRAM header */
- static void __init early_nvram_init(void)
-@@ -33,6 +35,25 @@ static void __init early_nvram_init(void
+ static void early_nvram_init(void)
+@@ -33,6 +35,25 @@ static void early_nvram_init(void)
  
  	base = mcore->flash_window;
  	lim = mcore->flash_window_size;
diff --git a/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch b/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
deleted file mode 100644
index 4ce9ba1a2c..0000000000
--- a/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/drivers/ssb/sprom.c
-+++ b/drivers/ssb/sprom.c
-@@ -176,6 +176,7 @@ const struct ssb_sprom *ssb_get_fallback
- {
- 	return fallback_sprom;
- }
-+EXPORT_SYMBOL(ssb_get_fallback_sprom);
- 
- /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
- bool ssb_is_sprom_available(struct ssb_bus *bus)
---- a/include/linux/ssb/ssb.h
-+++ b/include/linux/ssb/ssb.h
-@@ -412,6 +412,7 @@ extern bool ssb_is_sprom_available(struc
- /* Set a fallback SPROM.
-  * See kdoc at the function definition for complete documentation. */
- extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
-+extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
- 
- /* Suspend a SSB bus.
-  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch b/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch
new file mode 100644
index 0000000000..1d6e069e6b
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch
@@ -0,0 +1,13 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -245,6 +245,10 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
+ 
++	/* Do not indicate cardbus for Netgear WNR834B V1 and V2 */
++	if (iv->boardinfo.type == 0x0472 && iv->has_cardbus_slot)
++		iv->has_cardbus_slot = 0;
++
+ 	return 0;
+ }
+ 
diff --git a/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch b/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch
new file mode 100644
index 0000000000..1bb2f0fc01
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch
@@ -0,0 +1,142 @@
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -643,6 +643,17 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++
++int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
++{
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		memcpy(&bus->sprom, &bcm63xx_sprom, sizeof(struct ssb_sprom));
++		return 0;
++	} else {
++		printk(KERN_ERR PFX "unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
+ #endif
+ 
+ /*
+@@ -793,8 +804,9 @@ void __init board_prom_init(void)
+ 	if (!board_get_mac_address(bcm63xx_sprom.il0mac)) {
+ 		memcpy(bcm63xx_sprom.et0mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+ 		memcpy(bcm63xx_sprom.et1mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+-		if (ssb_arch_set_fallback_sprom(&bcm63xx_sprom) < 0)
+-			printk(KERN_ERR "failed to register fallback SPROM\n");
++		if (ssb_arch_register_fallback_sprom(
++				&bcm63xx_get_fallback_sprom) < 0)
++			printk(KERN_ERR PFX "failed to register fallback SPROM\n");
+ 	}
+ #endif
+ }
+--- a/drivers/ssb/pci.c
++++ b/drivers/ssb/pci.c
+@@ -662,7 +662,6 @@ static int sprom_extract(struct ssb_bus
+ static int ssb_pci_sprom_get(struct ssb_bus *bus,
+ 			     struct ssb_sprom *sprom)
+ {
+-	const struct ssb_sprom *fallback;
+ 	int err;
+ 	u16 *buf;
+ 
+@@ -707,10 +706,14 @@ static int ssb_pci_sprom_get(struct ssb_
+ 		if (err) {
+ 			/* All CRC attempts failed.
+ 			 * Maybe there is no SPROM on the device?
+-			 * If we have a fallback, use that. */
+-			fallback = ssb_get_fallback_sprom();
+-			if (fallback) {
+-				memcpy(sprom, fallback, sizeof(*sprom));
++			 * Now we ask the arch code if there is some sprom
++			 * avaliable for this device in some other storage */
++			err = ssb_fill_sprom_with_fallback(bus);
++			if (err) {
++				ssb_printk(KERN_WARNING PFX "WARNING: Using"
++					   " fallback SPROM failed (err %d)\n",
++					   err);
++			} else {
+ 				err = 0;
+ 				goto out_free;
+ 			}
+--- a/drivers/ssb/sprom.c
++++ b/drivers/ssb/sprom.c
+@@ -17,7 +17,7 @@
+ #include <linux/slab.h>
+ 
+ 
+-static const struct ssb_sprom *fallback_sprom;
++static int(*get_fallback_sprom)(struct ssb_bus *dev);
+ 
+ 
+ static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
+@@ -145,13 +145,14 @@ out:
+ }
+ 
+ /**
+- * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
++ * ssb_arch_register_fallback_sprom - Registers a method providing a fallback
++ * SPROM if no SPROM is found.
+  *
+- * @sprom: The SPROM data structure to register.
++ * @sprom_callback: The callbcak function.
+  *
+- * With this function the architecture implementation may register a fallback
+- * SPROM data structure. The fallback is only used for PCI based SSB devices,
+- * where no valid SPROM can be found in the shadow registers.
++ * With this function the architecture implementation may register a callback
++ * handler which wills the SPROM data structure. The fallback is only used for
++ * PCI based SSB devices, where no valid SPROM can be found in the shadow registers.
+  *
+  * This function is useful for weird architectures that have a half-assed SSB device
+  * hardwired to their PCI bus.
+@@ -163,18 +164,21 @@ out:
+  *
+  * This function is available for architecture code, only. So it is not exported.
+  */
+-int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
++int ssb_arch_register_fallback_sprom(int (*sprom_callback)(struct ssb_bus *bus))
+ {
+-	if (fallback_sprom)
++	if (get_fallback_sprom)
+ 		return -EEXIST;
+-	fallback_sprom = sprom;
++	get_fallback_sprom = sprom_callback;
+ 
+ 	return 0;
+ }
+ 
+-const struct ssb_sprom *ssb_get_fallback_sprom(void)
++int ssb_fill_sprom_with_fallback(struct ssb_bus *bus)
+ {
+-	return fallback_sprom;
++	if (!get_fallback_sprom)
++		return -ENOENT;
++
++	return get_fallback_sprom(bus);
+ }
+ 
+ /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
+--- a/drivers/ssb/ssb_private.h
++++ b/drivers/ssb/ssb_private.h
+@@ -171,7 +171,7 @@ ssize_t ssb_attr_sprom_store(struct ssb_
+ 			     const char *buf, size_t count,
+ 			     int (*sprom_check_crc)(const u16 *sprom, size_t size),
+ 			     int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom));
+-extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
++extern int ssb_fill_sprom_with_fallback(struct ssb_bus *bus);
+ 
+ 
+ /* core.c */
+--- a/include/linux/ssb/ssb.h
++++ b/include/linux/ssb/ssb.h
+@@ -404,7 +404,8 @@ extern bool ssb_is_sprom_available(struc
+ 
+ /* Set a fallback SPROM.
+  * See kdoc at the function definition for complete documentation. */
+-extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
++extern int ssb_arch_register_fallback_sprom(
++		int (*sprom_callback)(struct ssb_bus *bus));
+ 
+ /* Suspend a SSB bus.
+  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch b/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
new file mode 100644
index 0000000000..acf65bd8c2
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
@@ -0,0 +1,69 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -59,10 +59,23 @@ static void bcm47xx_machine_halt(void)
+ }
+ 
+ #define READ_FROM_NVRAM(_outvar, name, buf) \
+-	if (nvram_getenv(name, buf, sizeof(buf)) >= 0)\
++	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
+-static void bcm47xx_fill_sprom(struct ssb_sprom *sprom)
++static inline int nvram_getprefix(const char *prefix, char *name,
++				  char *buf, int len)
++{
++	if (prefix) {
++		char key[100];
++
++		snprintf(key, sizeof(key), "%s%s", prefix, name);
++		return nvram_getenv(key, buf, len);
++	}
++
++	return nvram_getenv(name, buf, len);
++}
++
++static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+ 	u32 boardflags;
+@@ -71,11 +84,11 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getenv("il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+-	if (nvram_getenv("et0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+-	if (nvram_getenv("et1macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et1macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et1mac);
+ 	READ_FROM_NVRAM(et0phyaddr, "et0phyaddr", buf);
+ 	READ_FROM_NVRAM(et1phyaddr, "et1phyaddr", buf);
+@@ -127,14 +140,14 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+ 	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
+ 
+-	if (nvram_getenv("boardflags", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags_lo = (boardflags & 0x0000FFFFU);
+ 			sprom->boardflags_hi = (boardflags & 0xFFFF0000U) >> 16;
+ 		}
+ 	}
+-	if (nvram_getenv("boardflags2", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags2", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags2_lo = (boardflags & 0x0000FFFFU);
+@@ -160,7 +173,7 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("boardrev", buf, sizeof(buf)) >= 0)
+ 		iv->boardinfo.rev = (u16)simple_strtoul(buf, NULL, 0);
+ 
+-	bcm47xx_fill_sprom(&iv->sprom);
++	bcm47xx_fill_sprom(&iv->sprom, NULL);
+ 
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
diff --git a/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch b/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch
new file mode 100644
index 0000000000..f63deacddf
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch
@@ -0,0 +1,48 @@
+--- a/arch/mips/bcm47xx/nvram.c
++++ b/arch/mips/bcm47xx/nvram.c
+@@ -23,7 +23,7 @@
+ static char nvram_buf[NVRAM_SPACE];
+ 
+ /* Probe for NVRAM header */
+-static void __init early_nvram_init(void)
++static void early_nvram_init(void)
+ {
+ 	struct ssb_mipscore *mcore = &ssb_bcm47xx.mipscore;
+ 	struct nvram_header *header;
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -156,6 +156,22 @@ static void bcm47xx_fill_sprom(struct ss
+ 	}
+ }
+ 
++int bcm47xx_get_sprom(struct ssb_bus *bus)
++{
++	char prefix[10];
++
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		snprintf(prefix, sizeof(prefix), "pci/%x/%x/",
++			 bus->host_pci->bus->number + 1,
++			 PCI_SLOT(bus->host_pci->devfn));
++		bcm47xx_fill_sprom(&bus->sprom, prefix);
++		return 0;
++	} else {
++		printk(KERN_WARNING "bcm47xx: unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
++
+ static int bcm47xx_get_invariants(struct ssb_bus *bus,
+ 				   struct ssb_init_invariants *iv)
+ {
+@@ -212,6 +228,11 @@ void __init plat_mem_setup(void)
+ 	char buf[100];
+ 	struct ssb_mipscore *mcore;
+ 
++	err = ssb_arch_register_fallback_sprom(&bcm47xx_get_sprom);
++	if (err)
++		printk(KERN_WARNING "bcm47xx: someone else already registered"
++			" a ssb SPROM callback handler (err %d)\n", err);
++
+ 	err = ssb_bus_ssbbus_register(&ssb_bcm47xx, SSB_ENUM_BASE,
+ 				      bcm47xx_get_invariants);
+ 	if (err)
diff --git a/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch b/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch
new file mode 100644
index 0000000000..490ca67bdb
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch
@@ -0,0 +1,122 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -62,6 +62,11 @@ static void bcm47xx_machine_halt(void)
+ 	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
++#define READ_FROM_NVRAM2(_outvar, name1, name2, buf) \
++	if (nvram_getprefix(prefix, name1, buf, sizeof(buf)) >= 0 || \
++	    nvram_getprefix(prefix, name2, buf, sizeof(buf)) >= 0)\
++		sprom->_outvar = simple_strtoul(buf, NULL, 0);
++
+ static inline int nvram_getprefix(const char *prefix, char *name,
+ 				  char *buf, int len)
+ {
+@@ -75,6 +80,27 @@ static inline int nvram_getprefix(const
+ 	return nvram_getenv(name, buf, len);
+ }
+ 
++static u32 nvram_getu32(const char *name, char *buf, int len)
++{
++	int rv;
++	char key[100];
++	u16 var0, var1;
++
++	snprintf(key, sizeof(key), "%s0", name);
++	rv = nvram_getenv(key, buf, len);
++	/* return 0 here so this looks like unset */
++	if (rv < 0)
++		return 0;
++	var0 = simple_strtoul(buf, NULL, 0);
++
++	snprintf(key, sizeof(key), "%s1", name);
++	rv = nvram_getenv(key, buf, len);
++	if (rv < 0)
++		return 0;
++	var1 = simple_strtoul(buf, NULL, 0);
++	return var1 << 16 | var0;
++}
++
+ static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+@@ -84,7 +110,8 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0 ||
+++	    nvram_getprefix(prefix, "macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+ 	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+@@ -110,20 +137,36 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(pa1hib0, "pa1hib0", buf);
+ 	READ_FROM_NVRAM(pa1hib2, "pa1hib1", buf);
+ 	READ_FROM_NVRAM(pa1hib1, "pa1hib2", buf);
+-	READ_FROM_NVRAM(gpio0, "wl0gpio0", buf);
+-	READ_FROM_NVRAM(gpio1, "wl0gpio1", buf);
+-	READ_FROM_NVRAM(gpio2, "wl0gpio2", buf);
+-	READ_FROM_NVRAM(gpio3, "wl0gpio3", buf);
+-	READ_FROM_NVRAM(maxpwr_bg, "pa0maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_al, "pa1lomaxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_a, "pa1maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_ah, "pa1himaxpwr", buf);
+-	READ_FROM_NVRAM(itssi_a, "pa1itssit", buf);
+-	READ_FROM_NVRAM(itssi_bg, "pa0itssit", buf);
++	READ_FROM_NVRAM2(gpio0, "ledbh0", "wl0gpio0", buf);
++	READ_FROM_NVRAM2(gpio1, "ledbh1", "wl0gpio1", buf);
++	READ_FROM_NVRAM2(gpio2, "ledbh2", "wl0gpio2", buf);
++	READ_FROM_NVRAM2(gpio3, "ledbh3", "wl0gpio3", buf);
++	READ_FROM_NVRAM2(maxpwr_bg, "maxp2ga0", "pa0maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_al, "maxp5gla0", "pa1lomaxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_a, "maxp5ga0", "pa1maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_ah, "maxp5gha0", "pa1himaxpwr", buf);
++	READ_FROM_NVRAM2(itssi_bg, "itt5ga0", "pa0itssit", buf);
++	READ_FROM_NVRAM2(itssi_a, "itt2ga0", "pa1itssit", buf);
+ 	READ_FROM_NVRAM(tri2g, "tri2g", buf);
+ 	READ_FROM_NVRAM(tri5gl, "tri5gl", buf);
+ 	READ_FROM_NVRAM(tri5g, "tri5g", buf);
+ 	READ_FROM_NVRAM(tri5gh, "tri5gh", buf);
++	READ_FROM_NVRAM(txpid2g[0], "txpid2ga0", buf);
++	READ_FROM_NVRAM(txpid2g[1], "txpid2ga1", buf);
++	READ_FROM_NVRAM(txpid2g[2], "txpid2ga2", buf);
++	READ_FROM_NVRAM(txpid2g[3], "txpid2ga3", buf);
++	READ_FROM_NVRAM(txpid5g[0], "txpid5ga0", buf);
++	READ_FROM_NVRAM(txpid5g[1], "txpid5ga1", buf);
++	READ_FROM_NVRAM(txpid5g[2], "txpid5ga2", buf);
++	READ_FROM_NVRAM(txpid5g[3], "txpid5ga3", buf);
++	READ_FROM_NVRAM(txpid5gl[0], "txpid5gla0", buf);
++	READ_FROM_NVRAM(txpid5gl[1], "txpid5gla1", buf);
++	READ_FROM_NVRAM(txpid5gl[2], "txpid5gla2", buf);
++	READ_FROM_NVRAM(txpid5gl[3], "txpid5gla3", buf);
++	READ_FROM_NVRAM(txpid5gh[0], "txpid5gha0", buf);
++	READ_FROM_NVRAM(txpid5gh[1], "txpid5gha1", buf);
++	READ_FROM_NVRAM(txpid5gh[2], "txpid5gha2", buf);
++	READ_FROM_NVRAM(txpid5gh[3], "txpid5gha3", buf);
+ 	READ_FROM_NVRAM(rxpo2g, "rxpo2g", buf);
+ 	READ_FROM_NVRAM(rxpo5g, "rxpo5g", buf);
+ 	READ_FROM_NVRAM(rssisav2g, "rssisav2g", buf);
+@@ -135,10 +178,18 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(rssismf5g, "rssismf5g", buf);
+ 	READ_FROM_NVRAM(bxa5g, "bxa5g", buf);
+ 	READ_FROM_NVRAM(cck2gpo, "cck2gpo", buf);
+-	READ_FROM_NVRAM(ofdm2gpo, "ofdm2gpo", buf);
+-	READ_FROM_NVRAM(ofdm5glpo, "ofdm5glpo", buf);
+-	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+-	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
++
++	sprom->ofdm2gpo = nvram_getu32("ofdm2gpo", buf, sizeof(buf));
++	sprom->ofdm5glpo = nvram_getu32("ofdm5glpo", buf, sizeof(buf));
++	sprom->ofdm5gpo = nvram_getu32("ofdm5gpo", buf, sizeof(buf));
++	sprom->ofdm5ghpo = nvram_getu32("ofdm5ghpo", buf, sizeof(buf));
++
++	READ_FROM_NVRAM(antenna_gain.ghz24.a0, "ag0", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a1, "ag1", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a2, "ag2", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a3, "ag3", buf);
++	memcpy(&sprom->antenna_gain.ghz5, &sprom->antenna_gain.ghz24,
++	       sizeof(sprom->antenna_gain.ghz5));
+ 
+ 	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
diff --git a/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch b/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
index abb2044f78..5ccb62fc6f 100644
--- a/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
+++ b/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
@@ -33,7 +33,7 @@
 +EXPORT_SYMBOL(nvram_get);
 --- a/arch/mips/bcm47xx/setup.c
 +++ b/arch/mips/bcm47xx/setup.c
-@@ -226,3 +226,20 @@ void __init plat_mem_setup(void)
+@@ -311,3 +311,20 @@ void __init plat_mem_setup(void)
  	_machine_halt = bcm47xx_machine_halt;
  	pm_power_off = bcm47xx_machine_halt;
  }
diff --git a/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch b/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
index 9ed4a4de4a..29e12a81b9 100644
--- a/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
+++ b/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
@@ -253,8 +253,8 @@ out the configuration than the in kernel cfe config reader.
 +extern char *cfe_env_get(char *nv_buf, const char *name);
  
  /* Probe for NVRAM header */
- static void __init early_nvram_init(void)
-@@ -33,6 +35,25 @@ static void __init early_nvram_init(void
+ static void early_nvram_init(void)
+@@ -33,6 +35,25 @@ static void early_nvram_init(void)
  
  	base = mcore->flash_window;
  	lim = mcore->flash_window_size;
diff --git a/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch b/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch
deleted file mode 100644
index 4ce9ba1a2c..0000000000
--- a/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/drivers/ssb/sprom.c
-+++ b/drivers/ssb/sprom.c
-@@ -176,6 +176,7 @@ const struct ssb_sprom *ssb_get_fallback
- {
- 	return fallback_sprom;
- }
-+EXPORT_SYMBOL(ssb_get_fallback_sprom);
- 
- /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
- bool ssb_is_sprom_available(struct ssb_bus *bus)
---- a/include/linux/ssb/ssb.h
-+++ b/include/linux/ssb/ssb.h
-@@ -412,6 +412,7 @@ extern bool ssb_is_sprom_available(struc
- /* Set a fallback SPROM.
-  * See kdoc at the function definition for complete documentation. */
- extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
-+extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
- 
- /* Suspend a SSB bus.
-  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch b/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch
new file mode 100644
index 0000000000..1d6e069e6b
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch
@@ -0,0 +1,13 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -245,6 +245,10 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
+ 
++	/* Do not indicate cardbus for Netgear WNR834B V1 and V2 */
++	if (iv->boardinfo.type == 0x0472 && iv->has_cardbus_slot)
++		iv->has_cardbus_slot = 0;
++
+ 	return 0;
+ }
+ 
diff --git a/target/linux/brcm63xx/patches-2.6.37/110-gpiodev.patch b/target/linux/brcm63xx/patches-2.6.37/110-gpiodev.patch
index 99ee29f910..fc99f53455 100644
--- a/target/linux/brcm63xx/patches-2.6.37/110-gpiodev.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/110-gpiodev.patch
@@ -1,6 +1,6 @@
 --- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
 +++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
-@@ -852,6 +852,10 @@ static struct platform_device mtd_dev = 
+@@ -852,6 +852,10 @@ static struct platform_device mtd_dev =
  	.num_resources		= ARRAY_SIZE(mtd_resources),
  };
  
diff --git a/target/linux/brcm63xx/patches-2.6.37/180-udc_preliminary_support.patch b/target/linux/brcm63xx/patches-2.6.37/180-udc_preliminary_support.patch
index 2f6a27e06a..6011db71e2 100644
--- a/target/linux/brcm63xx/patches-2.6.37/180-udc_preliminary_support.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/180-udc_preliminary_support.patch
@@ -17,7 +17,7 @@
  };
  
  static struct board_info __initdata board_rta1025w_16 = {
-@@ -1001,6 +1004,9 @@ int __init board_register_devices(void)
+@@ -1002,6 +1005,9 @@ int __init board_register_devices(void)
  	if (board.has_dsp)
  		bcm63xx_dsp_register(&board.dsp);
  
@@ -214,7 +214,7 @@
   * SPI clock
   */
  static void spi_set(struct clk *clk, int enable)
-@@ -208,6 +232,8 @@ struct clk *clk_get(struct device *dev, 
+@@ -208,6 +232,8 @@ struct clk *clk_get(struct device *dev,
  		return &clk_ephy;
  	if (!strcmp(id, "usbh"))
  		return &clk_usbh;
diff --git a/target/linux/brcm63xx/patches-2.6.37/200-extended-platform-devices.patch b/target/linux/brcm63xx/patches-2.6.37/200-extended-platform-devices.patch
index 70637e5d48..e9619d4723 100644
--- a/target/linux/brcm63xx/patches-2.6.37/200-extended-platform-devices.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/200-extended-platform-devices.patch
@@ -1,6 +1,6 @@
 --- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
 +++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
-@@ -1007,6 +1007,9 @@ int __init board_register_devices(void)
+@@ -1008,6 +1008,9 @@ int __init board_register_devices(void)
  	if (board.has_udc0)
  		bcm63xx_udc_register();
  
diff --git a/target/linux/brcm63xx/patches-2.6.37/200-spi-board-info.patch b/target/linux/brcm63xx/patches-2.6.37/200-spi-board-info.patch
index d73d6f0ac7..fc39eb4ce9 100644
--- a/target/linux/brcm63xx/patches-2.6.37/200-spi-board-info.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/200-spi-board-info.patch
@@ -1,6 +1,6 @@
 --- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
 +++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
-@@ -1010,6 +1010,9 @@ int __init board_register_devices(void)
+@@ -1011,6 +1011,9 @@ int __init board_register_devices(void)
  	if (board.num_devs)
  		platform_add_devices(board.devs, board.num_devs);
  
diff --git a/target/linux/brcm63xx/patches-2.6.37/240-spi.patch b/target/linux/brcm63xx/patches-2.6.37/240-spi.patch
index 5a81a08995..35c490c4df 100644
--- a/target/linux/brcm63xx/patches-2.6.37/240-spi.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/240-spi.patch
@@ -990,7 +990,7 @@
  #include <board_bcm963xx.h>
  
  #define PFX	"board_bcm963xx: "
-@@ -1586,6 +1587,9 @@ int __init board_register_devices(void)
+@@ -1587,6 +1588,9 @@ int __init board_register_devices(void)
  	if (board.num_spis)
  		spi_register_board_info(board.spis, board.num_spis);
  
diff --git a/target/linux/brcm63xx/patches-2.6.37/260-no_ehci_over_current_check.patch b/target/linux/brcm63xx/patches-2.6.37/260-no_ehci_over_current_check.patch
index 816343e639..513ff999a0 100644
--- a/target/linux/brcm63xx/patches-2.6.37/260-no_ehci_over_current_check.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/260-no_ehci_over_current_check.patch
@@ -1,6 +1,6 @@
 --- a/drivers/usb/host/ehci-hub.c
 +++ b/drivers/usb/host/ehci-hub.c
-@@ -861,11 +861,13 @@ static int ehci_hub_control (
+@@ -882,11 +882,13 @@ static int ehci_hub_control (
  			 * power switching; they're allowed to just limit the
  			 * current.  khubd will turn the power back on.
  			 */
diff --git a/target/linux/brcm63xx/patches-2.6.37/500-ssb-add-callback-for-sprom.patch b/target/linux/brcm63xx/patches-2.6.37/500-ssb-add-callback-for-sprom.patch
new file mode 100644
index 0000000000..7e153a1ef6
--- /dev/null
+++ b/target/linux/brcm63xx/patches-2.6.37/500-ssb-add-callback-for-sprom.patch
@@ -0,0 +1,157 @@
+From 62a518124cff3970d99f7ccdab457f4289e3b982 Mon Sep 17 00:00:00 2001
+From: Hauke Mehrtens <hauke@hauke-m.de>
+Date: Sat, 30 Apr 2011 15:42:30 +0200
+Subject: [PATCH 1/4] ssb: add callback for sprom
+
+
+Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
+---
+ arch/mips/bcm63xx/boards/board_bcm963xx.c |   16 ++++++++++++++--
+ drivers/ssb/pci.c                         |   13 ++++++++-----
+ drivers/ssb/sprom.c                       |   26 +++++++++++++++-----------
+ drivers/ssb/ssb_private.h                 |    2 +-
+ include/linux/ssb/ssb.h                   |    3 ++-
+ 5 files changed, 40 insertions(+), 20 deletions(-)
+
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -1927,6 +1927,17 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++
++int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
++{
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		memcpy(&bus->sprom, &bcm63xx_sprom, sizeof(struct ssb_sprom));
++		return 0;
++	} else {
++		printk(KERN_ERR PFX "unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
+ #endif
+ 
+ /*
+@@ -2111,8 +2122,9 @@ void __init board_prom_init(void)
+ 	if (!board_get_mac_address(bcm63xx_sprom.il0mac)) {
+ 		memcpy(bcm63xx_sprom.et0mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+ 		memcpy(bcm63xx_sprom.et1mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+-		if (ssb_arch_set_fallback_sprom(&bcm63xx_sprom) < 0)
+-			printk(KERN_ERR "failed to register fallback SPROM\n");
++		if (ssb_arch_register_fallback_sprom(
++				&bcm63xx_get_fallback_sprom) < 0)
++			printk(KERN_ERR PFX "failed to register fallback SPROM\n");
+ 	}
+ #endif
+ }
+--- a/drivers/ssb/pci.c
++++ b/drivers/ssb/pci.c
+@@ -662,7 +662,6 @@ static int sprom_extract(struct ssb_bus
+ static int ssb_pci_sprom_get(struct ssb_bus *bus,
+ 			     struct ssb_sprom *sprom)
+ {
+-	const struct ssb_sprom *fallback;
+ 	int err;
+ 	u16 *buf;
+ 
+@@ -707,10 +706,14 @@ static int ssb_pci_sprom_get(struct ssb_
+ 		if (err) {
+ 			/* All CRC attempts failed.
+ 			 * Maybe there is no SPROM on the device?
+-			 * If we have a fallback, use that. */
+-			fallback = ssb_get_fallback_sprom();
+-			if (fallback) {
+-				memcpy(sprom, fallback, sizeof(*sprom));
++			 * Now we ask the arch code if there is some sprom
++			 * avaliable for this device in some other storage */
++			err = ssb_fill_sprom_with_fallback(bus);
++			if (err) {
++				ssb_printk(KERN_WARNING PFX "WARNING: Using"
++					   " fallback SPROM failed (err %d)\n",
++					   err);
++			} else {
+ 				err = 0;
+ 				goto out_free;
+ 			}
+--- a/drivers/ssb/sprom.c
++++ b/drivers/ssb/sprom.c
+@@ -17,7 +17,7 @@
+ #include <linux/slab.h>
+ 
+ 
+-static const struct ssb_sprom *fallback_sprom;
++static int(*get_fallback_sprom)(struct ssb_bus *dev);
+ 
+ 
+ static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
+@@ -145,13 +145,14 @@ out:
+ }
+ 
+ /**
+- * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
++ * ssb_arch_register_fallback_sprom - Registers a method providing a fallback
++ * SPROM if no SPROM is found.
+  *
+- * @sprom: The SPROM data structure to register.
++ * @sprom_callback: The callbcak function.
+  *
+- * With this function the architecture implementation may register a fallback
+- * SPROM data structure. The fallback is only used for PCI based SSB devices,
+- * where no valid SPROM can be found in the shadow registers.
++ * With this function the architecture implementation may register a callback
++ * handler which wills the SPROM data structure. The fallback is only used for
++ * PCI based SSB devices, where no valid SPROM can be found in the shadow registers.
+  *
+  * This function is useful for weird architectures that have a half-assed SSB device
+  * hardwired to their PCI bus.
+@@ -163,18 +164,21 @@ out:
+  *
+  * This function is available for architecture code, only. So it is not exported.
+  */
+-int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
++int ssb_arch_register_fallback_sprom(int (*sprom_callback)(struct ssb_bus *bus))
+ {
+-	if (fallback_sprom)
++	if (get_fallback_sprom)
+ 		return -EEXIST;
+-	fallback_sprom = sprom;
++	get_fallback_sprom = sprom_callback;
+ 
+ 	return 0;
+ }
+ 
+-const struct ssb_sprom *ssb_get_fallback_sprom(void)
++int ssb_fill_sprom_with_fallback(struct ssb_bus *bus)
+ {
+-	return fallback_sprom;
++	if (!get_fallback_sprom)
++		return -ENOENT;
++
++	return get_fallback_sprom(bus);
+ }
+ 
+ /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
+--- a/drivers/ssb/ssb_private.h
++++ b/drivers/ssb/ssb_private.h
+@@ -171,7 +171,7 @@ ssize_t ssb_attr_sprom_store(struct ssb_
+ 			     const char *buf, size_t count,
+ 			     int (*sprom_check_crc)(const u16 *sprom, size_t size),
+ 			     int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom));
+-extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
++extern int ssb_fill_sprom_with_fallback(struct ssb_bus *bus);
+ 
+ 
+ /* core.c */
+--- a/include/linux/ssb/ssb.h
++++ b/include/linux/ssb/ssb.h
+@@ -404,7 +404,8 @@ extern bool ssb_is_sprom_available(struc
+ 
+ /* Set a fallback SPROM.
+  * See kdoc at the function definition for complete documentation. */
+-extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
++extern int ssb_arch_register_fallback_sprom(
++		int (*sprom_callback)(struct ssb_bus *bus));
+ 
+ /* Suspend a SSB bus.
+  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm63xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch b/target/linux/brcm63xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
index 2a22a3a38f..3447c37a3c 100644
--- a/target/linux/brcm63xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
+++ b/target/linux/brcm63xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
@@ -1,20 +1,19 @@
---- a/drivers/ssb/sprom.c
-+++ b/drivers/ssb/sprom.c
-@@ -176,6 +176,7 @@ const struct ssb_sprom *ssb_get_fallback
- {
- 	return fallback_sprom;
- }
-+EXPORT_SYMBOL(ssb_get_fallback_sprom);
- 
- /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
- bool ssb_is_sprom_available(struct ssb_bus *bus)
---- a/include/linux/ssb/ssb.h
-+++ b/include/linux/ssb/ssb.h
-@@ -401,6 +401,7 @@ extern bool ssb_is_sprom_available(struc
- /* Set a fallback SPROM.
-  * See kdoc at the function definition for complete documentation. */
- extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
-+extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -1907,7 +1907,7 @@ static void __init nb4_nvram_fixup(void)
+  * bcm4318 WLAN work
+  */
+ #ifdef CONFIG_SSB_PCIHOST
+-static struct ssb_sprom bcm63xx_sprom = {
++struct ssb_sprom bcm63xx_sprom = {
+ 	.revision		= 0x02,
+ 	.board_rev		= 0x17,
+ 	.country_code		= 0x0,
+@@ -1927,6 +1927,7 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++EXPORT_SYMBOL(bcm63xx_sprom);
  
- /* Suspend a SSB bus.
-  * Call this from the parent bus suspend routine. */
+ int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
+ {