brcm47xx: add fallback sprom for pci devices without an own sprom.

If there is no sprom on an ssb based pci device on the brcm47xx
architecture ssb now asks the architecture code to look into the nvram
to get some sprom data for this device. Now we are able to read out
pci/1/1/ foo or pci/1/3/ foo config options.

This will fix some problems where the wireless devices does not got an 
mac address and the following message was show:
ssb: WARNING: Invalid SPROM CRC (corrupt SPROM)


git-svn-id: svn://svn.openwrt.org/openwrt/trunk@26801 3c298f89-4303-0410-b956-a3cf2f4a3e73

16 files changed, 794 insertions, 46 deletions

diff --git a/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch b/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch
new file mode 100644
index 0000000000..1bb2f0fc01
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/031-ssb-add-callback-for-sprom.patch
@@ -0,0 +1,142 @@
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -643,6 +643,17 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++
++int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
++{
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		memcpy(&bus->sprom, &bcm63xx_sprom, sizeof(struct ssb_sprom));
++		return 0;
++	} else {
++		printk(KERN_ERR PFX "unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
+ #endif
+ 
+ /*
+@@ -793,8 +804,9 @@ void __init board_prom_init(void)
+ 	if (!board_get_mac_address(bcm63xx_sprom.il0mac)) {
+ 		memcpy(bcm63xx_sprom.et0mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+ 		memcpy(bcm63xx_sprom.et1mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+-		if (ssb_arch_set_fallback_sprom(&bcm63xx_sprom) < 0)
+-			printk(KERN_ERR "failed to register fallback SPROM\n");
++		if (ssb_arch_register_fallback_sprom(
++				&bcm63xx_get_fallback_sprom) < 0)
++			printk(KERN_ERR PFX "failed to register fallback SPROM\n");
+ 	}
+ #endif
+ }
+--- a/drivers/ssb/pci.c
++++ b/drivers/ssb/pci.c
+@@ -662,7 +662,6 @@ static int sprom_extract(struct ssb_bus
+ static int ssb_pci_sprom_get(struct ssb_bus *bus,
+ 			     struct ssb_sprom *sprom)
+ {
+-	const struct ssb_sprom *fallback;
+ 	int err;
+ 	u16 *buf;
+ 
+@@ -707,10 +706,14 @@ static int ssb_pci_sprom_get(struct ssb_
+ 		if (err) {
+ 			/* All CRC attempts failed.
+ 			 * Maybe there is no SPROM on the device?
+-			 * If we have a fallback, use that. */
+-			fallback = ssb_get_fallback_sprom();
+-			if (fallback) {
+-				memcpy(sprom, fallback, sizeof(*sprom));
++			 * Now we ask the arch code if there is some sprom
++			 * avaliable for this device in some other storage */
++			err = ssb_fill_sprom_with_fallback(bus);
++			if (err) {
++				ssb_printk(KERN_WARNING PFX "WARNING: Using"
++					   " fallback SPROM failed (err %d)\n",
++					   err);
++			} else {
+ 				err = 0;
+ 				goto out_free;
+ 			}
+--- a/drivers/ssb/sprom.c
++++ b/drivers/ssb/sprom.c
+@@ -17,7 +17,7 @@
+ #include <linux/slab.h>
+ 
+ 
+-static const struct ssb_sprom *fallback_sprom;
++static int(*get_fallback_sprom)(struct ssb_bus *dev);
+ 
+ 
+ static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
+@@ -145,13 +145,14 @@ out:
+ }
+ 
+ /**
+- * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
++ * ssb_arch_register_fallback_sprom - Registers a method providing a fallback
++ * SPROM if no SPROM is found.
+  *
+- * @sprom: The SPROM data structure to register.
++ * @sprom_callback: The callbcak function.
+  *
+- * With this function the architecture implementation may register a fallback
+- * SPROM data structure. The fallback is only used for PCI based SSB devices,
+- * where no valid SPROM can be found in the shadow registers.
++ * With this function the architecture implementation may register a callback
++ * handler which wills the SPROM data structure. The fallback is only used for
++ * PCI based SSB devices, where no valid SPROM can be found in the shadow registers.
+  *
+  * This function is useful for weird architectures that have a half-assed SSB device
+  * hardwired to their PCI bus.
+@@ -163,18 +164,21 @@ out:
+  *
+  * This function is available for architecture code, only. So it is not exported.
+  */
+-int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
++int ssb_arch_register_fallback_sprom(int (*sprom_callback)(struct ssb_bus *bus))
+ {
+-	if (fallback_sprom)
++	if (get_fallback_sprom)
+ 		return -EEXIST;
+-	fallback_sprom = sprom;
++	get_fallback_sprom = sprom_callback;
+ 
+ 	return 0;
+ }
+ 
+-const struct ssb_sprom *ssb_get_fallback_sprom(void)
++int ssb_fill_sprom_with_fallback(struct ssb_bus *bus)
+ {
+-	return fallback_sprom;
++	if (!get_fallback_sprom)
++		return -ENOENT;
++
++	return get_fallback_sprom(bus);
+ }
+ 
+ /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
+--- a/drivers/ssb/ssb_private.h
++++ b/drivers/ssb/ssb_private.h
+@@ -171,7 +171,7 @@ ssize_t ssb_attr_sprom_store(struct ssb_
+ 			     const char *buf, size_t count,
+ 			     int (*sprom_check_crc)(const u16 *sprom, size_t size),
+ 			     int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom));
+-extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
++extern int ssb_fill_sprom_with_fallback(struct ssb_bus *bus);
+ 
+ 
+ /* core.c */
+--- a/include/linux/ssb/ssb.h
++++ b/include/linux/ssb/ssb.h
+@@ -404,7 +404,8 @@ extern bool ssb_is_sprom_available(struc
+ 
+ /* Set a fallback SPROM.
+  * See kdoc at the function definition for complete documentation. */
+-extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
++extern int ssb_arch_register_fallback_sprom(
++		int (*sprom_callback)(struct ssb_bus *bus));
+ 
+ /* Suspend a SSB bus.
+  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch b/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
new file mode 100644
index 0000000000..acf65bd8c2
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
@@ -0,0 +1,69 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -59,10 +59,23 @@ static void bcm47xx_machine_halt(void)
+ }
+ 
+ #define READ_FROM_NVRAM(_outvar, name, buf) \
+-	if (nvram_getenv(name, buf, sizeof(buf)) >= 0)\
++	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
+-static void bcm47xx_fill_sprom(struct ssb_sprom *sprom)
++static inline int nvram_getprefix(const char *prefix, char *name,
++				  char *buf, int len)
++{
++	if (prefix) {
++		char key[100];
++
++		snprintf(key, sizeof(key), "%s%s", prefix, name);
++		return nvram_getenv(key, buf, len);
++	}
++
++	return nvram_getenv(name, buf, len);
++}
++
++static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+ 	u32 boardflags;
+@@ -71,11 +84,11 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getenv("il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+-	if (nvram_getenv("et0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+-	if (nvram_getenv("et1macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et1macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et1mac);
+ 	READ_FROM_NVRAM(et0phyaddr, "et0phyaddr", buf);
+ 	READ_FROM_NVRAM(et1phyaddr, "et1phyaddr", buf);
+@@ -127,14 +140,14 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+ 	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
+ 
+-	if (nvram_getenv("boardflags", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags_lo = (boardflags & 0x0000FFFFU);
+ 			sprom->boardflags_hi = (boardflags & 0xFFFF0000U) >> 16;
+ 		}
+ 	}
+-	if (nvram_getenv("boardflags2", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags2", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags2_lo = (boardflags & 0x0000FFFFU);
+@@ -160,7 +173,7 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("boardrev", buf, sizeof(buf)) >= 0)
+ 		iv->boardinfo.rev = (u16)simple_strtoul(buf, NULL, 0);
+ 
+-	bcm47xx_fill_sprom(&iv->sprom);
++	bcm47xx_fill_sprom(&iv->sprom, NULL);
+ 
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
diff --git a/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch b/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch
new file mode 100644
index 0000000000..f63deacddf
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/033-bcm47xx-register-fallback-callback.patch
@@ -0,0 +1,48 @@
+--- a/arch/mips/bcm47xx/nvram.c
++++ b/arch/mips/bcm47xx/nvram.c
+@@ -23,7 +23,7 @@
+ static char nvram_buf[NVRAM_SPACE];
+ 
+ /* Probe for NVRAM header */
+-static void __init early_nvram_init(void)
++static void early_nvram_init(void)
+ {
+ 	struct ssb_mipscore *mcore = &ssb_bcm47xx.mipscore;
+ 	struct nvram_header *header;
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -156,6 +156,22 @@ static void bcm47xx_fill_sprom(struct ss
+ 	}
+ }
+ 
++int bcm47xx_get_sprom(struct ssb_bus *bus)
++{
++	char prefix[10];
++
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		snprintf(prefix, sizeof(prefix), "pci/%x/%x/",
++			 bus->host_pci->bus->number + 1,
++			 PCI_SLOT(bus->host_pci->devfn));
++		bcm47xx_fill_sprom(&bus->sprom, prefix);
++		return 0;
++	} else {
++		printk(KERN_WARNING "bcm47xx: unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
++
+ static int bcm47xx_get_invariants(struct ssb_bus *bus,
+ 				   struct ssb_init_invariants *iv)
+ {
+@@ -212,6 +228,11 @@ void __init plat_mem_setup(void)
+ 	char buf[100];
+ 	struct ssb_mipscore *mcore;
+ 
++	err = ssb_arch_register_fallback_sprom(&bcm47xx_get_sprom);
++	if (err)
++		printk(KERN_WARNING "bcm47xx: someone else already registered"
++			" a ssb SPROM callback handler (err %d)\n", err);
++
+ 	err = ssb_bus_ssbbus_register(&ssb_bcm47xx, SSB_ENUM_BASE,
+ 				      bcm47xx_get_invariants);
+ 	if (err)
diff --git a/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch b/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch
new file mode 100644
index 0000000000..490ca67bdb
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/034-bcm47xx-extend-and-fix-fill-sprom.patch
@@ -0,0 +1,122 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -62,6 +62,11 @@ static void bcm47xx_machine_halt(void)
+ 	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
++#define READ_FROM_NVRAM2(_outvar, name1, name2, buf) \
++	if (nvram_getprefix(prefix, name1, buf, sizeof(buf)) >= 0 || \
++	    nvram_getprefix(prefix, name2, buf, sizeof(buf)) >= 0)\
++		sprom->_outvar = simple_strtoul(buf, NULL, 0);
++
+ static inline int nvram_getprefix(const char *prefix, char *name,
+ 				  char *buf, int len)
+ {
+@@ -75,6 +80,27 @@ static inline int nvram_getprefix(const
+ 	return nvram_getenv(name, buf, len);
+ }
+ 
++static u32 nvram_getu32(const char *name, char *buf, int len)
++{
++	int rv;
++	char key[100];
++	u16 var0, var1;
++
++	snprintf(key, sizeof(key), "%s0", name);
++	rv = nvram_getenv(key, buf, len);
++	/* return 0 here so this looks like unset */
++	if (rv < 0)
++		return 0;
++	var0 = simple_strtoul(buf, NULL, 0);
++
++	snprintf(key, sizeof(key), "%s1", name);
++	rv = nvram_getenv(key, buf, len);
++	if (rv < 0)
++		return 0;
++	var1 = simple_strtoul(buf, NULL, 0);
++	return var1 << 16 | var0;
++}
++
+ static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+@@ -84,7 +110,8 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0 ||
+++	    nvram_getprefix(prefix, "macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+ 	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+@@ -110,20 +137,36 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(pa1hib0, "pa1hib0", buf);
+ 	READ_FROM_NVRAM(pa1hib2, "pa1hib1", buf);
+ 	READ_FROM_NVRAM(pa1hib1, "pa1hib2", buf);
+-	READ_FROM_NVRAM(gpio0, "wl0gpio0", buf);
+-	READ_FROM_NVRAM(gpio1, "wl0gpio1", buf);
+-	READ_FROM_NVRAM(gpio2, "wl0gpio2", buf);
+-	READ_FROM_NVRAM(gpio3, "wl0gpio3", buf);
+-	READ_FROM_NVRAM(maxpwr_bg, "pa0maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_al, "pa1lomaxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_a, "pa1maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_ah, "pa1himaxpwr", buf);
+-	READ_FROM_NVRAM(itssi_a, "pa1itssit", buf);
+-	READ_FROM_NVRAM(itssi_bg, "pa0itssit", buf);
++	READ_FROM_NVRAM2(gpio0, "ledbh0", "wl0gpio0", buf);
++	READ_FROM_NVRAM2(gpio1, "ledbh1", "wl0gpio1", buf);
++	READ_FROM_NVRAM2(gpio2, "ledbh2", "wl0gpio2", buf);
++	READ_FROM_NVRAM2(gpio3, "ledbh3", "wl0gpio3", buf);
++	READ_FROM_NVRAM2(maxpwr_bg, "maxp2ga0", "pa0maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_al, "maxp5gla0", "pa1lomaxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_a, "maxp5ga0", "pa1maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_ah, "maxp5gha0", "pa1himaxpwr", buf);
++	READ_FROM_NVRAM2(itssi_bg, "itt5ga0", "pa0itssit", buf);
++	READ_FROM_NVRAM2(itssi_a, "itt2ga0", "pa1itssit", buf);
+ 	READ_FROM_NVRAM(tri2g, "tri2g", buf);
+ 	READ_FROM_NVRAM(tri5gl, "tri5gl", buf);
+ 	READ_FROM_NVRAM(tri5g, "tri5g", buf);
+ 	READ_FROM_NVRAM(tri5gh, "tri5gh", buf);
++	READ_FROM_NVRAM(txpid2g[0], "txpid2ga0", buf);
++	READ_FROM_NVRAM(txpid2g[1], "txpid2ga1", buf);
++	READ_FROM_NVRAM(txpid2g[2], "txpid2ga2", buf);
++	READ_FROM_NVRAM(txpid2g[3], "txpid2ga3", buf);
++	READ_FROM_NVRAM(txpid5g[0], "txpid5ga0", buf);
++	READ_FROM_NVRAM(txpid5g[1], "txpid5ga1", buf);
++	READ_FROM_NVRAM(txpid5g[2], "txpid5ga2", buf);
++	READ_FROM_NVRAM(txpid5g[3], "txpid5ga3", buf);
++	READ_FROM_NVRAM(txpid5gl[0], "txpid5gla0", buf);
++	READ_FROM_NVRAM(txpid5gl[1], "txpid5gla1", buf);
++	READ_FROM_NVRAM(txpid5gl[2], "txpid5gla2", buf);
++	READ_FROM_NVRAM(txpid5gl[3], "txpid5gla3", buf);
++	READ_FROM_NVRAM(txpid5gh[0], "txpid5gha0", buf);
++	READ_FROM_NVRAM(txpid5gh[1], "txpid5gha1", buf);
++	READ_FROM_NVRAM(txpid5gh[2], "txpid5gha2", buf);
++	READ_FROM_NVRAM(txpid5gh[3], "txpid5gha3", buf);
+ 	READ_FROM_NVRAM(rxpo2g, "rxpo2g", buf);
+ 	READ_FROM_NVRAM(rxpo5g, "rxpo5g", buf);
+ 	READ_FROM_NVRAM(rssisav2g, "rssisav2g", buf);
+@@ -135,10 +178,18 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(rssismf5g, "rssismf5g", buf);
+ 	READ_FROM_NVRAM(bxa5g, "bxa5g", buf);
+ 	READ_FROM_NVRAM(cck2gpo, "cck2gpo", buf);
+-	READ_FROM_NVRAM(ofdm2gpo, "ofdm2gpo", buf);
+-	READ_FROM_NVRAM(ofdm5glpo, "ofdm5glpo", buf);
+-	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+-	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
++
++	sprom->ofdm2gpo = nvram_getu32("ofdm2gpo", buf, sizeof(buf));
++	sprom->ofdm5glpo = nvram_getu32("ofdm5glpo", buf, sizeof(buf));
++	sprom->ofdm5gpo = nvram_getu32("ofdm5gpo", buf, sizeof(buf));
++	sprom->ofdm5ghpo = nvram_getu32("ofdm5ghpo", buf, sizeof(buf));
++
++	READ_FROM_NVRAM(antenna_gain.ghz24.a0, "ag0", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a1, "ag1", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a2, "ag2", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a3, "ag3", buf);
++	memcpy(&sprom->antenna_gain.ghz5, &sprom->antenna_gain.ghz24,
++	       sizeof(sprom->antenna_gain.ghz5));
+ 
+ 	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
diff --git a/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch b/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
index abb2044f78..5ccb62fc6f 100644
--- a/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
+++ b/target/linux/brcm47xx/patches-2.6.37/400-arch-bcm47xx.patch
@@ -33,7 +33,7 @@
 +EXPORT_SYMBOL(nvram_get);
 --- a/arch/mips/bcm47xx/setup.c
 +++ b/arch/mips/bcm47xx/setup.c
-@@ -226,3 +226,20 @@ void __init plat_mem_setup(void)
+@@ -311,3 +311,20 @@ void __init plat_mem_setup(void)
  	_machine_halt = bcm47xx_machine_halt;
  	pm_power_off = bcm47xx_machine_halt;
  }
diff --git a/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch b/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
index 9ed4a4de4a..29e12a81b9 100644
--- a/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
+++ b/target/linux/brcm47xx/patches-2.6.37/820-wgt634u-nvram-fix.patch
@@ -253,8 +253,8 @@ out the configuration than the in kernel cfe config reader.
 +extern char *cfe_env_get(char *nv_buf, const char *name);
  
  /* Probe for NVRAM header */
- static void __init early_nvram_init(void)
-@@ -33,6 +35,25 @@ static void __init early_nvram_init(void
+ static void early_nvram_init(void)
+@@ -33,6 +35,25 @@ static void early_nvram_init(void)
  
  	base = mcore->flash_window;
  	lim = mcore->flash_window_size;
diff --git a/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch b/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
deleted file mode 100644
index 4ce9ba1a2c..0000000000
--- a/target/linux/brcm47xx/patches-2.6.37/977-ssb_export_fallback_sprom.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/drivers/ssb/sprom.c
-+++ b/drivers/ssb/sprom.c
-@@ -176,6 +176,7 @@ const struct ssb_sprom *ssb_get_fallback
- {
- 	return fallback_sprom;
- }
-+EXPORT_SYMBOL(ssb_get_fallback_sprom);
- 
- /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
- bool ssb_is_sprom_available(struct ssb_bus *bus)
---- a/include/linux/ssb/ssb.h
-+++ b/include/linux/ssb/ssb.h
-@@ -412,6 +412,7 @@ extern bool ssb_is_sprom_available(struc
- /* Set a fallback SPROM.
-  * See kdoc at the function definition for complete documentation. */
- extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
-+extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
- 
- /* Suspend a SSB bus.
-  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch b/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch
new file mode 100644
index 0000000000..1d6e069e6b
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.37/980-wnr834b_no_cardbus_invariant.patch
@@ -0,0 +1,13 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -245,6 +245,10 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
+ 
++	/* Do not indicate cardbus for Netgear WNR834B V1 and V2 */
++	if (iv->boardinfo.type == 0x0472 && iv->has_cardbus_slot)
++		iv->has_cardbus_slot = 0;
++
+ 	return 0;
+ }
+ 
diff --git a/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch b/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch
new file mode 100644
index 0000000000..1bb2f0fc01
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/031-ssb-add-callback-for-sprom.patch
@@ -0,0 +1,142 @@
+--- a/arch/mips/bcm63xx/boards/board_bcm963xx.c
++++ b/arch/mips/bcm63xx/boards/board_bcm963xx.c
+@@ -643,6 +643,17 @@ static struct ssb_sprom bcm63xx_sprom =
+ 	.boardflags_lo		= 0x2848,
+ 	.boardflags_hi		= 0x0000,
+ };
++
++int bcm63xx_get_fallback_sprom(struct ssb_bus *bus)
++{
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		memcpy(&bus->sprom, &bcm63xx_sprom, sizeof(struct ssb_sprom));
++		return 0;
++	} else {
++		printk(KERN_ERR PFX "unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
+ #endif
+ 
+ /*
+@@ -793,8 +804,9 @@ void __init board_prom_init(void)
+ 	if (!board_get_mac_address(bcm63xx_sprom.il0mac)) {
+ 		memcpy(bcm63xx_sprom.et0mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+ 		memcpy(bcm63xx_sprom.et1mac, bcm63xx_sprom.il0mac, ETH_ALEN);
+-		if (ssb_arch_set_fallback_sprom(&bcm63xx_sprom) < 0)
+-			printk(KERN_ERR "failed to register fallback SPROM\n");
++		if (ssb_arch_register_fallback_sprom(
++				&bcm63xx_get_fallback_sprom) < 0)
++			printk(KERN_ERR PFX "failed to register fallback SPROM\n");
+ 	}
+ #endif
+ }
+--- a/drivers/ssb/pci.c
++++ b/drivers/ssb/pci.c
+@@ -662,7 +662,6 @@ static int sprom_extract(struct ssb_bus
+ static int ssb_pci_sprom_get(struct ssb_bus *bus,
+ 			     struct ssb_sprom *sprom)
+ {
+-	const struct ssb_sprom *fallback;
+ 	int err;
+ 	u16 *buf;
+ 
+@@ -707,10 +706,14 @@ static int ssb_pci_sprom_get(struct ssb_
+ 		if (err) {
+ 			/* All CRC attempts failed.
+ 			 * Maybe there is no SPROM on the device?
+-			 * If we have a fallback, use that. */
+-			fallback = ssb_get_fallback_sprom();
+-			if (fallback) {
+-				memcpy(sprom, fallback, sizeof(*sprom));
++			 * Now we ask the arch code if there is some sprom
++			 * avaliable for this device in some other storage */
++			err = ssb_fill_sprom_with_fallback(bus);
++			if (err) {
++				ssb_printk(KERN_WARNING PFX "WARNING: Using"
++					   " fallback SPROM failed (err %d)\n",
++					   err);
++			} else {
+ 				err = 0;
+ 				goto out_free;
+ 			}
+--- a/drivers/ssb/sprom.c
++++ b/drivers/ssb/sprom.c
+@@ -17,7 +17,7 @@
+ #include <linux/slab.h>
+ 
+ 
+-static const struct ssb_sprom *fallback_sprom;
++static int(*get_fallback_sprom)(struct ssb_bus *dev);
+ 
+ 
+ static int sprom2hex(const u16 *sprom, char *buf, size_t buf_len,
+@@ -145,13 +145,14 @@ out:
+ }
+ 
+ /**
+- * ssb_arch_set_fallback_sprom - Set a fallback SPROM for use if no SPROM is found.
++ * ssb_arch_register_fallback_sprom - Registers a method providing a fallback
++ * SPROM if no SPROM is found.
+  *
+- * @sprom: The SPROM data structure to register.
++ * @sprom_callback: The callbcak function.
+  *
+- * With this function the architecture implementation may register a fallback
+- * SPROM data structure. The fallback is only used for PCI based SSB devices,
+- * where no valid SPROM can be found in the shadow registers.
++ * With this function the architecture implementation may register a callback
++ * handler which wills the SPROM data structure. The fallback is only used for
++ * PCI based SSB devices, where no valid SPROM can be found in the shadow registers.
+  *
+  * This function is useful for weird architectures that have a half-assed SSB device
+  * hardwired to their PCI bus.
+@@ -163,18 +164,21 @@ out:
+  *
+  * This function is available for architecture code, only. So it is not exported.
+  */
+-int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom)
++int ssb_arch_register_fallback_sprom(int (*sprom_callback)(struct ssb_bus *bus))
+ {
+-	if (fallback_sprom)
++	if (get_fallback_sprom)
+ 		return -EEXIST;
+-	fallback_sprom = sprom;
++	get_fallback_sprom = sprom_callback;
+ 
+ 	return 0;
+ }
+ 
+-const struct ssb_sprom *ssb_get_fallback_sprom(void)
++int ssb_fill_sprom_with_fallback(struct ssb_bus *bus)
+ {
+-	return fallback_sprom;
++	if (!get_fallback_sprom)
++		return -ENOENT;
++
++	return get_fallback_sprom(bus);
+ }
+ 
+ /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
+--- a/drivers/ssb/ssb_private.h
++++ b/drivers/ssb/ssb_private.h
+@@ -171,7 +171,7 @@ ssize_t ssb_attr_sprom_store(struct ssb_
+ 			     const char *buf, size_t count,
+ 			     int (*sprom_check_crc)(const u16 *sprom, size_t size),
+ 			     int (*sprom_write)(struct ssb_bus *bus, const u16 *sprom));
+-extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
++extern int ssb_fill_sprom_with_fallback(struct ssb_bus *bus);
+ 
+ 
+ /* core.c */
+--- a/include/linux/ssb/ssb.h
++++ b/include/linux/ssb/ssb.h
+@@ -404,7 +404,8 @@ extern bool ssb_is_sprom_available(struc
+ 
+ /* Set a fallback SPROM.
+  * See kdoc at the function definition for complete documentation. */
+-extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
++extern int ssb_arch_register_fallback_sprom(
++		int (*sprom_callback)(struct ssb_bus *bus));
+ 
+ /* Suspend a SSB bus.
+  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch b/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
new file mode 100644
index 0000000000..acf65bd8c2
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/032-bcm47xx-extend-bcm47xx_fill_sprom-with-prefix.patch
@@ -0,0 +1,69 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -59,10 +59,23 @@ static void bcm47xx_machine_halt(void)
+ }
+ 
+ #define READ_FROM_NVRAM(_outvar, name, buf) \
+-	if (nvram_getenv(name, buf, sizeof(buf)) >= 0)\
++	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
+-static void bcm47xx_fill_sprom(struct ssb_sprom *sprom)
++static inline int nvram_getprefix(const char *prefix, char *name,
++				  char *buf, int len)
++{
++	if (prefix) {
++		char key[100];
++
++		snprintf(key, sizeof(key), "%s%s", prefix, name);
++		return nvram_getenv(key, buf, len);
++	}
++
++	return nvram_getenv(name, buf, len);
++}
++
++static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+ 	u32 boardflags;
+@@ -71,11 +84,11 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getenv("il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+-	if (nvram_getenv("et0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+-	if (nvram_getenv("et1macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "et1macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et1mac);
+ 	READ_FROM_NVRAM(et0phyaddr, "et0phyaddr", buf);
+ 	READ_FROM_NVRAM(et1phyaddr, "et1phyaddr", buf);
+@@ -127,14 +140,14 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+ 	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
+ 
+-	if (nvram_getenv("boardflags", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags_lo = (boardflags & 0x0000FFFFU);
+ 			sprom->boardflags_hi = (boardflags & 0xFFFF0000U) >> 16;
+ 		}
+ 	}
+-	if (nvram_getenv("boardflags2", buf, sizeof(buf)) >= 0) {
++	if (nvram_getprefix(prefix, "boardflags2", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
+ 		if (boardflags) {
+ 			sprom->boardflags2_lo = (boardflags & 0x0000FFFFU);
+@@ -160,7 +173,7 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("boardrev", buf, sizeof(buf)) >= 0)
+ 		iv->boardinfo.rev = (u16)simple_strtoul(buf, NULL, 0);
+ 
+-	bcm47xx_fill_sprom(&iv->sprom);
++	bcm47xx_fill_sprom(&iv->sprom, NULL);
+ 
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
diff --git a/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch b/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch
new file mode 100644
index 0000000000..f63deacddf
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/033-bcm47xx-register-fallback-callback.patch
@@ -0,0 +1,48 @@
+--- a/arch/mips/bcm47xx/nvram.c
++++ b/arch/mips/bcm47xx/nvram.c
+@@ -23,7 +23,7 @@
+ static char nvram_buf[NVRAM_SPACE];
+ 
+ /* Probe for NVRAM header */
+-static void __init early_nvram_init(void)
++static void early_nvram_init(void)
+ {
+ 	struct ssb_mipscore *mcore = &ssb_bcm47xx.mipscore;
+ 	struct nvram_header *header;
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -156,6 +156,22 @@ static void bcm47xx_fill_sprom(struct ss
+ 	}
+ }
+ 
++int bcm47xx_get_sprom(struct ssb_bus *bus)
++{
++	char prefix[10];
++
++	if (bus->bustype == SSB_BUSTYPE_PCI) {
++		snprintf(prefix, sizeof(prefix), "pci/%x/%x/",
++			 bus->host_pci->bus->number + 1,
++			 PCI_SLOT(bus->host_pci->devfn));
++		bcm47xx_fill_sprom(&bus->sprom, prefix);
++		return 0;
++	} else {
++		printk(KERN_WARNING "bcm47xx: unable to fill SPROM for given bustype.\n");
++		return -EINVAL;
++	}
++}
++
+ static int bcm47xx_get_invariants(struct ssb_bus *bus,
+ 				   struct ssb_init_invariants *iv)
+ {
+@@ -212,6 +228,11 @@ void __init plat_mem_setup(void)
+ 	char buf[100];
+ 	struct ssb_mipscore *mcore;
+ 
++	err = ssb_arch_register_fallback_sprom(&bcm47xx_get_sprom);
++	if (err)
++		printk(KERN_WARNING "bcm47xx: someone else already registered"
++			" a ssb SPROM callback handler (err %d)\n", err);
++
+ 	err = ssb_bus_ssbbus_register(&ssb_bcm47xx, SSB_ENUM_BASE,
+ 				      bcm47xx_get_invariants);
+ 	if (err)
diff --git a/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch b/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch
new file mode 100644
index 0000000000..490ca67bdb
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/034-bcm47xx-extend-and-fix-fill-sprom.patch
@@ -0,0 +1,122 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -62,6 +62,11 @@ static void bcm47xx_machine_halt(void)
+ 	if (nvram_getprefix(prefix, name, buf, sizeof(buf)) >= 0)\
+ 		sprom->_outvar = simple_strtoul(buf, NULL, 0);
+ 
++#define READ_FROM_NVRAM2(_outvar, name1, name2, buf) \
++	if (nvram_getprefix(prefix, name1, buf, sizeof(buf)) >= 0 || \
++	    nvram_getprefix(prefix, name2, buf, sizeof(buf)) >= 0)\
++		sprom->_outvar = simple_strtoul(buf, NULL, 0);
++
+ static inline int nvram_getprefix(const char *prefix, char *name,
+ 				  char *buf, int len)
+ {
+@@ -75,6 +80,27 @@ static inline int nvram_getprefix(const
+ 	return nvram_getenv(name, buf, len);
+ }
+ 
++static u32 nvram_getu32(const char *name, char *buf, int len)
++{
++	int rv;
++	char key[100];
++	u16 var0, var1;
++
++	snprintf(key, sizeof(key), "%s0", name);
++	rv = nvram_getenv(key, buf, len);
++	/* return 0 here so this looks like unset */
++	if (rv < 0)
++		return 0;
++	var0 = simple_strtoul(buf, NULL, 0);
++
++	snprintf(key, sizeof(key), "%s1", name);
++	rv = nvram_getenv(key, buf, len);
++	if (rv < 0)
++		return 0;
++	var1 = simple_strtoul(buf, NULL, 0);
++	return var1 << 16 | var0;
++}
++
+ static void bcm47xx_fill_sprom(struct ssb_sprom *sprom, const char *prefix)
+ {
+ 	char buf[100];
+@@ -84,7 +110,8 @@ static void bcm47xx_fill_sprom(struct ss
+ 
+ 	sprom->revision = 1; /* Fallback: Old hardware does not define this. */
+ 	READ_FROM_NVRAM(revision, "sromrev", buf);
+-	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0)
++	if (nvram_getprefix(prefix, "il0macaddr", buf, sizeof(buf)) >= 0 ||
+++	    nvram_getprefix(prefix, "macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->il0mac);
+ 	if (nvram_getprefix(prefix, "et0macaddr", buf, sizeof(buf)) >= 0)
+ 		nvram_parse_macaddr(buf, sprom->et0mac);
+@@ -110,20 +137,36 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(pa1hib0, "pa1hib0", buf);
+ 	READ_FROM_NVRAM(pa1hib2, "pa1hib1", buf);
+ 	READ_FROM_NVRAM(pa1hib1, "pa1hib2", buf);
+-	READ_FROM_NVRAM(gpio0, "wl0gpio0", buf);
+-	READ_FROM_NVRAM(gpio1, "wl0gpio1", buf);
+-	READ_FROM_NVRAM(gpio2, "wl0gpio2", buf);
+-	READ_FROM_NVRAM(gpio3, "wl0gpio3", buf);
+-	READ_FROM_NVRAM(maxpwr_bg, "pa0maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_al, "pa1lomaxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_a, "pa1maxpwr", buf);
+-	READ_FROM_NVRAM(maxpwr_ah, "pa1himaxpwr", buf);
+-	READ_FROM_NVRAM(itssi_a, "pa1itssit", buf);
+-	READ_FROM_NVRAM(itssi_bg, "pa0itssit", buf);
++	READ_FROM_NVRAM2(gpio0, "ledbh0", "wl0gpio0", buf);
++	READ_FROM_NVRAM2(gpio1, "ledbh1", "wl0gpio1", buf);
++	READ_FROM_NVRAM2(gpio2, "ledbh2", "wl0gpio2", buf);
++	READ_FROM_NVRAM2(gpio3, "ledbh3", "wl0gpio3", buf);
++	READ_FROM_NVRAM2(maxpwr_bg, "maxp2ga0", "pa0maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_al, "maxp5gla0", "pa1lomaxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_a, "maxp5ga0", "pa1maxpwr", buf);
++	READ_FROM_NVRAM2(maxpwr_ah, "maxp5gha0", "pa1himaxpwr", buf);
++	READ_FROM_NVRAM2(itssi_bg, "itt5ga0", "pa0itssit", buf);
++	READ_FROM_NVRAM2(itssi_a, "itt2ga0", "pa1itssit", buf);
+ 	READ_FROM_NVRAM(tri2g, "tri2g", buf);
+ 	READ_FROM_NVRAM(tri5gl, "tri5gl", buf);
+ 	READ_FROM_NVRAM(tri5g, "tri5g", buf);
+ 	READ_FROM_NVRAM(tri5gh, "tri5gh", buf);
++	READ_FROM_NVRAM(txpid2g[0], "txpid2ga0", buf);
++	READ_FROM_NVRAM(txpid2g[1], "txpid2ga1", buf);
++	READ_FROM_NVRAM(txpid2g[2], "txpid2ga2", buf);
++	READ_FROM_NVRAM(txpid2g[3], "txpid2ga3", buf);
++	READ_FROM_NVRAM(txpid5g[0], "txpid5ga0", buf);
++	READ_FROM_NVRAM(txpid5g[1], "txpid5ga1", buf);
++	READ_FROM_NVRAM(txpid5g[2], "txpid5ga2", buf);
++	READ_FROM_NVRAM(txpid5g[3], "txpid5ga3", buf);
++	READ_FROM_NVRAM(txpid5gl[0], "txpid5gla0", buf);
++	READ_FROM_NVRAM(txpid5gl[1], "txpid5gla1", buf);
++	READ_FROM_NVRAM(txpid5gl[2], "txpid5gla2", buf);
++	READ_FROM_NVRAM(txpid5gl[3], "txpid5gla3", buf);
++	READ_FROM_NVRAM(txpid5gh[0], "txpid5gha0", buf);
++	READ_FROM_NVRAM(txpid5gh[1], "txpid5gha1", buf);
++	READ_FROM_NVRAM(txpid5gh[2], "txpid5gha2", buf);
++	READ_FROM_NVRAM(txpid5gh[3], "txpid5gha3", buf);
+ 	READ_FROM_NVRAM(rxpo2g, "rxpo2g", buf);
+ 	READ_FROM_NVRAM(rxpo5g, "rxpo5g", buf);
+ 	READ_FROM_NVRAM(rssisav2g, "rssisav2g", buf);
+@@ -135,10 +178,18 @@ static void bcm47xx_fill_sprom(struct ss
+ 	READ_FROM_NVRAM(rssismf5g, "rssismf5g", buf);
+ 	READ_FROM_NVRAM(bxa5g, "bxa5g", buf);
+ 	READ_FROM_NVRAM(cck2gpo, "cck2gpo", buf);
+-	READ_FROM_NVRAM(ofdm2gpo, "ofdm2gpo", buf);
+-	READ_FROM_NVRAM(ofdm5glpo, "ofdm5glpo", buf);
+-	READ_FROM_NVRAM(ofdm5gpo, "ofdm5gpo", buf);
+-	READ_FROM_NVRAM(ofdm5ghpo, "ofdm5ghpo", buf);
++
++	sprom->ofdm2gpo = nvram_getu32("ofdm2gpo", buf, sizeof(buf));
++	sprom->ofdm5glpo = nvram_getu32("ofdm5glpo", buf, sizeof(buf));
++	sprom->ofdm5gpo = nvram_getu32("ofdm5gpo", buf, sizeof(buf));
++	sprom->ofdm5ghpo = nvram_getu32("ofdm5ghpo", buf, sizeof(buf));
++
++	READ_FROM_NVRAM(antenna_gain.ghz24.a0, "ag0", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a1, "ag1", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a2, "ag2", buf);
++	READ_FROM_NVRAM(antenna_gain.ghz24.a3, "ag3", buf);
++	memcpy(&sprom->antenna_gain.ghz5, &sprom->antenna_gain.ghz24,
++	       sizeof(sprom->antenna_gain.ghz5));
+ 
+ 	if (nvram_getprefix(prefix, "boardflags", buf, sizeof(buf)) >= 0) {
+ 		boardflags = simple_strtoul(buf, NULL, 0);
diff --git a/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch b/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
index abb2044f78..5ccb62fc6f 100644
--- a/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
+++ b/target/linux/brcm47xx/patches-2.6.38/400-arch-bcm47xx.patch
@@ -33,7 +33,7 @@
 +EXPORT_SYMBOL(nvram_get);
 --- a/arch/mips/bcm47xx/setup.c
 +++ b/arch/mips/bcm47xx/setup.c
-@@ -226,3 +226,20 @@ void __init plat_mem_setup(void)
+@@ -311,3 +311,20 @@ void __init plat_mem_setup(void)
  	_machine_halt = bcm47xx_machine_halt;
  	pm_power_off = bcm47xx_machine_halt;
  }
diff --git a/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch b/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
index 9ed4a4de4a..29e12a81b9 100644
--- a/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
+++ b/target/linux/brcm47xx/patches-2.6.38/820-wgt634u-nvram-fix.patch
@@ -253,8 +253,8 @@ out the configuration than the in kernel cfe config reader.
 +extern char *cfe_env_get(char *nv_buf, const char *name);
  
  /* Probe for NVRAM header */
- static void __init early_nvram_init(void)
-@@ -33,6 +35,25 @@ static void __init early_nvram_init(void
+ static void early_nvram_init(void)
+@@ -33,6 +35,25 @@ static void early_nvram_init(void)
  
  	base = mcore->flash_window;
  	lim = mcore->flash_window_size;
diff --git a/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch b/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch
deleted file mode 100644
index 4ce9ba1a2c..0000000000
--- a/target/linux/brcm47xx/patches-2.6.38/977-ssb_export_fallback_sprom.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/drivers/ssb/sprom.c
-+++ b/drivers/ssb/sprom.c
-@@ -176,6 +176,7 @@ const struct ssb_sprom *ssb_get_fallback
- {
- 	return fallback_sprom;
- }
-+EXPORT_SYMBOL(ssb_get_fallback_sprom);
- 
- /* http://bcm-v4.sipsolutions.net/802.11/IsSpromAvailable */
- bool ssb_is_sprom_available(struct ssb_bus *bus)
---- a/include/linux/ssb/ssb.h
-+++ b/include/linux/ssb/ssb.h
-@@ -412,6 +412,7 @@ extern bool ssb_is_sprom_available(struc
- /* Set a fallback SPROM.
-  * See kdoc at the function definition for complete documentation. */
- extern int ssb_arch_set_fallback_sprom(const struct ssb_sprom *sprom);
-+extern const struct ssb_sprom *ssb_get_fallback_sprom(void);
- 
- /* Suspend a SSB bus.
-  * Call this from the parent bus suspend routine. */
diff --git a/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch b/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch
new file mode 100644
index 0000000000..1d6e069e6b
--- /dev/null
+++ b/target/linux/brcm47xx/patches-2.6.38/980-wnr834b_no_cardbus_invariant.patch
@@ -0,0 +1,13 @@
+--- a/arch/mips/bcm47xx/setup.c
++++ b/arch/mips/bcm47xx/setup.c
+@@ -245,6 +245,10 @@ static int bcm47xx_get_invariants(struct
+ 	if (nvram_getenv("cardbus", buf, sizeof(buf)) >= 0)
+ 		iv->has_cardbus_slot = !!simple_strtoul(buf, NULL, 10);
+ 
++	/* Do not indicate cardbus for Netgear WNR834B V1 and V2 */
++	if (iv->boardinfo.type == 0x0472 && iv->has_cardbus_slot)
++		iv->has_cardbus_slot = 0;
++
+ 	return 0;
+ }
+