Enable BCM4358A1submit/tizen_mobile/20150507.010402submit/tizen_mobile/20150504.081034submit/tizen_mobile/20150504.041750tizen

Change-Id: Ifeb2c2bae1dee178291fd97df64dedf88c0abe6b

7 files changed, 1918 insertions, 10 deletions

diff --git a/firmware/BT_FW_BCM4358A1_001.002.005.0032.0066.hcd b/firmware/BT_FW_BCM4358A1_001.002.005.0032.0066.hcd
new file mode 100755
index 0000000..d5d7795
--- /dev/null
+++ b/firmware/BT_FW_BCM4358A1_001.002.005.0032.0066.hcd
diff --git a/firmware/CMakeLists.txt b/firmware/CMakeLists.txt
index a795312..503ae47 100755
--- a/firmware/CMakeLists.txt
+++ b/firmware/CMakeLists.txt
@@ -1,2 +1,3 @@
 # install firmware
-INSTALL(FILES ${CMAKE_CURRENT_SOURCE_DIR}/BCM4330B1_002.001.003.0221.0265.hcd DESTINATION ${PLUGIN_INSTALL_PREFIX}/etc/bluetooth)
+#INSTALL(FILES ${CMAKE_CURRENT_SOURCE_DIR}/BT_FW_BCM4330B1_002.001.003.0221.0265.hcd DESTINATION ${PLUGIN_INSTALL_PREFIX}/etc/bluetooth)
+INSTALL(FILES ${CMAKE_CURRENT_SOURCE_DIR}/BT_FW_BCM4358A1_001.002.005.0032.0066.hcd DESTINATION ${PLUGIN_INSTALL_PREFIX}/etc/bluetooth)
diff --git a/packaging/bluetooth-firmware-bcm.spec b/packaging/bluetooth-firmware-bcm.spec
index 5c06516..907fc89 100644
--- a/packaging/bluetooth-firmware-bcm.spec
+++ b/packaging/bluetooth-firmware-bcm.spec
@@ -29,9 +29,11 @@ rm -rf %{buildroot}
 
 %files
 %defattr(-,root,root,-)
-%{_bindir}/bcmtool_4330b1
+#%{_bindir}/bcmtool_4330b1
+%{_bindir}/bcmtool_4358a1
 %{_bindir}/setbd
-%{_prefix}/etc/bluetooth/BCM4330B1_002.001.003.0221.0265.hcd
+#%{_prefix}/etc/bluetooth/BT_FW_BCM4330B1_002.001.003.0221.0265.hcd
+%{_prefix}/etc/bluetooth/BT_FW_BCM4358A1_001.002.005.0032.0066.hcd
 %attr(755,-,-) %{_prefix}/etc/bluetooth/bt-dev-end.sh
 %attr(755,-,-) %{_prefix}/etc/bluetooth/bt-dev-start.sh
 %attr(755,-,-) %{_prefix}/etc/bluetooth/bt-set-addr.sh
diff --git a/scripts/bt-dev-start.sh b/scripts/bt-dev-start.sh
index 7a3e70f..42d4d3b 100755
--- a/scripts/bt-dev-start.sh
+++ b/scripts/bt-dev-start.sh
@@ -1,15 +1,17 @@
 #!/bin/sh
 
 # Script for registering Broadcom UART BT device
-BT_UART_DEVICE=/dev/ttySAC0
+BT_UART_DEVICE=/dev/ttySAC3
 BT_CHIP_TYPE=bcm2035
-BCM_TOOL=/usr/bin/bcmtool_4330b1
+#BCM_TOOL=/usr/bin/bcmtool_4330b1
+BCM_TOOL=/usr/bin/bcmtool_4358a1
 
 BT_PLATFORM_DEFAULT_HCI_NAME="TIZEN-Mobile"
-UART_SPEED=921600
+UART_SPEED=3000000
 
 #set default firmware
-BCM_FIRMWARE=BCM4330B1_002.001.003.0221.0265.hcd
+#BCM_FIRMWARE=BT_FW_BCM4330B1_002.001.003.0221.0265.hcd
+BCM_FIRMWARE=BT_FW_BCM4358A1_001.002.005.0032.0066.hcd
 
 REVISION_NUM=`grep Revision /proc/cpuinfo | awk "{print \\$3}"`
 REVISION_HIGH=`echo $REVISION_NUM| cut -c1-2`
diff --git a/tools/CMakeLists.txt b/tools/CMakeLists.txt
index 85e215b..d37148e 100644
--- a/tools/CMakeLists.txt
+++ b/tools/CMakeLists.txt
@@ -2,9 +2,11 @@ CMAKE_MINIMUM_REQUIRED(VERSION 2.6)
 PROJECT(bcmtool C)
 
 SET(SRCS_4330B1 bcmtool_4330b1.c)
-
 SET(BCMTOOL_4330B1 ${PROJECT_NAME}_4330b1)
 
+SET(SRCS_4358A1 bcmtool_4358a1.c)
+SET(BCMTOOL_4358A1 ${PROJECT_NAME}_4358a1)
+
 SET(PREFIX ${CMAKE_INSTALL_PREFIX})
 
 FIND_PROGRAM(UNAME NAMES uname)
@@ -18,8 +20,10 @@ ADD_DEFINITIONS("-DPREFIX=\"${CMAKE_INSTALL_PREFIX}\"")
 ADD_DEFINITIONS("-DFACTORYFS=\"$ENV{FACTORYFS}\"")
 
 ADD_EXECUTABLE(${BCMTOOL_4330B1} ${SRCS_4330B1})
-
 TARGET_LINK_LIBRARIES(${BCMTOOL_4330B1} ${package_LDFLAGS})
 
+ADD_EXECUTABLE(${BCMTOOL_4358A1} ${SRCS_4358A1})
+TARGET_LINK_LIBRARIES(${BCMTOOL_4358A1} ${package_LDFLAGS})
+
 # install binary file
-INSTALL(TARGETS ${BCMTOOL_4330B1} DESTINATION ${PLUGIN_INSTALL_PREFIX}/bin)
+INSTALL(TARGETS ${BCMTOOL_4358A1} DESTINATION ${PLUGIN_INSTALL_PREFIX}/bin)
diff --git a/tools/bcmtool_4330b1_m.c b/tools/bcmtool_4330b1_m.c
new file mode 100644
index 0000000..4934020
--- /dev/null
+++ b/tools/bcmtool_4330b1_m.c
@@ -0,0 +1,1034 @@
+/*
+ * Name: bcmtool_4330b1.c
+ *
+ * Description: Download a patchram files for the HCD format
+ *
+ * Copyright (c) 2012-2013, Broadcom Corp., All Rights Reserved.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *              http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ */
+
+#include <stdio.h>
+#include <errno.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <time.h>
+#include <string.h>
+#include <signal.h>
+#include <unistd.h>
+#include <sys/termios.h>
+#include <sys/ioctl.h>
+#include <limits.h>
+
+#define N_HCI	15
+#define HCI_UART_H4		0
+#define HCI_UART_BCSP	1
+#define HCI_UART_3WIRE	2
+#define HCI_UART_H4DS	3
+#define HCI_UART_LL		4
+#define HCIUARTSETPROTO		_IOW('U', 200, int)
+#define HCIUARTGETPROTO		_IOR('U', 201, int)
+#define HCIUARTGETDEVICE	_IOR('U', 202, int)
+
+/* Pre baudrate change for fast download */
+#define HIGH_SPEED_PATCHRAM_DOWNLOAD  TRUE
+
+/* Host Stack Idle Threshold */
+#define HCILP_IDLE_THRESHOLD          0x01
+
+/* Host Controller Idle Threshold */
+#define HCILP_HC_IDLE_THRESHOLD       0x01
+
+/* BT_WAKE Polarity - 0=Active Low, 1= Active High */
+#define HCILP_BT_WAKE_POLARITY        1
+
+/* HOST_WAKE Polarity - 0=Active Low, 1= Active High */
+#define HCILP_HOST_WAKE_POLARITY      1
+
+/* Local Feature */
+#define BCM_DISABLE_RF_PWRCTRL        FALSE
+
+#define RELEASE_DATE "2011.02.07"
+#define DEBUG 1
+
+/*  Broadcom AXI patch for BCM4335 chipset only */
+#define DEPLOY_4335A_AXI_BRIDGE_PATCH TRUE
+
+/* The fix for AXI bridge contention between BT and WLAN:
+ *
+ *  Set this TRUE only when
+ *      1. the platform is using BCM4335A or BCM4335B0, and
+ *      2. Kernel source has implemented AXI BRIDGE lock logic.
+ */
+#ifndef DEPLOY_4335A_AXI_BRIDGE_PATCH
+#define DEPLOY_4335A_AXI_BRIDGE_PATCH   FALSE
+#endif
+
+typedef unsigned char UINT8;
+typedef unsigned short UINT16;
+typedef unsigned long UINT32;
+typedef signed long INT32;
+typedef signed char INT8;
+typedef signed short INT16;
+typedef unsigned char BOOLEAN;
+
+#define FALSE    0
+#define TRUE     (!FALSE)
+
+#define BD_ADDR_LEN     6	/* Device address length */
+typedef UINT8 BD_ADDR[BD_ADDR_LEN];	/* Device address */
+
+#define HCI_GRP_LINK_CONTROL_CMDS                 (0x01 << 10)
+#define HCI_GRP_LINK_POLICY_CMDS                  (0x02 << 10)
+#define HCI_GRP_HOST_CONT_BASEBAND_CMDS           (0x03 << 10)
+#define HCI_GRP_INFORMATIONAL_PARAMS              (0x04 << 10)
+#define HCI_GRP_STATUS_PARAMS                     (0x05 << 10)
+#define HCI_GRP_TESTING_CMDS                      (0x06 << 10)
+#define HCI_GRP_L2CAP_CMDS                        (0x07 << 10)
+#define HCI_GRP_L2CAP_HCI_EVTS                    (0x08 << 10)
+#define HCI_GRP_VENDOR_SPECIFIC                   (0x3F << 10)
+
+#define HCI_RESET                                 (0x0003 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_SET_EVENT_FILTER                      (0x0005 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_READ_LOCAL_NAME                       (0x0014 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_READ_SCAN_ENABLE                      (0x0019 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_WRITE_SCAN_ENABLE                     (0x001A | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+
+#define HCI_READ_LOCAL_VERSION_INFO               (0x0001 | HCI_GRP_INFORMATIONAL_PARAMS)
+#define HCI_READ_LOCAL_FEATURES                   (0x0003 | HCI_GRP_INFORMATIONAL_PARAMS)
+
+#define HCI_ENABLE_DEV_UNDER_TEST_MODE            (0x0003 | HCI_GRP_TESTING_CMDS)
+
+#define HCI_BRCM_SUPER_PEEK_POKE                  (0x000A | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_BD_ADDR                         (0x0001 | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_HCI_CMD_SET_LOC_FEATURES_CMD          (0x000B | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_UPDATE_BAUDRATE_CMD              (0x0018 | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_WRITE_SCO_PCM_INT_PARAM          (0x001C | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_PCM_DATA_FORMAT_PARAM           (0x001E | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_WRITE_SLEEP_MODE                 (0x0027 | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_DOWNLOAD_MINI_DRV                (0x002E | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_UART_CLOCK_SETTING              (0x0045 | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_VSC_WRITE_RAM                         (0x004C | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_VSC_LAUNCH_RAM                        (0x004E | HCI_GRP_VENDOR_SPECIFIC)
+
+#define VOICE_SETTING_MU_LAW_MD                   0x0100
+#define VOICE_SETTING_LINEAR_MD                   0x0060
+
+#define HCI_ARM_MEM_PEEK                          0x04
+#define HCI_ARM_MEM_POKE                          0x05
+
+#define BTUI_MAX_STRING_LENGTH_PER_LINE           255
+#define HCI_BRCM_WRITE_SLEEP_MODE_LENGTH          10
+
+#define HCI_BRCM_UPDATE_BAUD_RATE_ENCODED_LENGTH    0x02
+#define HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH  0x06
+
+#define VSC_WRITE_UART_CLOCK_SETTING_LEN          1
+
+/* print string with time stamp */
+#define TDEBUG0(m)                               if(debug_mode) {print_time();fprintf(stderr,m);}
+#define TDEBUG1(m,n1)                            if(debug_mode) {print_time();fprintf(stderr,m,n1);}
+#define TDEBUG2(m,n1,n2)                         if(debug_mode) {print_time();fprintf(stderr,m,n1,n2);}
+#define TDEBUG3(m,n1,n2,n3)                      if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3);}
+#define TDEBUG4(m,n1,n2,n3,n4)                   if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4);}
+#define TDEBUG5(m,n1,n2,n3,n4,n5)                if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4,n5);}
+#define TDEBUG6(m,n1,n2,n3,n4,n5,n6)             if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4,n5,n6);}
+
+/* print just string */
+#define DEBUG0(m)                               if(debug_mode) {fprintf(stderr,m);}
+#define DEBUG1(m,n1)                            if(debug_mode) {fprintf(stderr,m,n1);}
+#define DEBUG2(m,n1,n2)                         if(debug_mode) {fprintf(stderr,m,n1,n2);}
+#define DEBUG3(m,n1,n2,n3)                      if(debug_mode) {fprintf(stderr,m,n1,n2,n3);}
+#define DEBUG4(m,n1,n2,n3,n4)                   if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4);}
+#define DEBUG5(m,n1,n2,n3,n4,n5)                if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4,n5);}
+#define DEBUG6(m,n1,n2,n3,n4,n5,n6)             if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4,n5,n6);}
+
+#define STREAM_TO_UINT8(u8, p)   {u8 = (UINT8)(*(p)); (p) += 1;}
+#define STREAM_TO_UINT16(u16, p) {u16 = ((UINT16)(*(p)) + (((UINT16)(*((p) + 1))) << 8)); (p) += 2;}
+#define STREAM_TO_UINT32(u32, p) {u32 = (((UINT32)(*(p))) + ((((UINT32)(*((p) + 1)))) << 8) + ((((UINT32)(*((p) + 2)))) << 16) + ((((UINT32)(*((p) + 3)))) << 24)); (p) += 4;}
+
+#define ROTATE_BD_ADDR(p1, p2)    \
+									do		   \
+									{							\
+										p1[0] = p2[5];		\
+										p1[1] = p2[4];		\
+										p1[2] = p2[3];		\
+										p1[3] = p2[2];		\
+										p1[4] = p2[1];		\
+										p1[5] = p2[0];		\
+									} while (0)
+
+UINT8 vsc_for_pcm_config[5] = { 0x00, 0x00, 0x03, 0x03, 0x00 };
+
+/*
+                    Byte1 -- 0 for MSb first
+                    Byte2 -- 0 Fill value
+                    Byte3 -- 1 Fill option (0:0's, 1:1's , 2:Signed, 3:Programmable)
+                    Byte4 -- 1 Number of fill bits
+                    Byte5 -- 1 Right justified (0 for left justified)
+*/
+
+UINT8 vsc_for_sco_pcm[5] = { 0x00, 0x01, 0x00, 0x01, 0x01 };
+
+/*
+                    Neverland : PCM, 256, short, master ,master
+                    Volance   : PCM, 256, short, master ,master
+
+                    Byte1 -- 0 for PCM 1 for UART or USB
+                    Byte2 -- 0 : 128, 1: 256, 2:512, 3:1024, 4:2048 Khz
+                    Byte3 -- 0 for short frame sync 1 for long frame sync
+                    Byte4 -- 0 Clock direction 0 for same as sync 1 for opposite direction
+                    Byte5 -- 0 for slave 1 for master
+*/
+
+int fd;				/* HCI handle */
+
+BOOLEAN debug_mode = FALSE;	/* Debug Mode Enable */
+
+BOOLEAN use_two_stop_bits = FALSE;     /* Flag of two stop bits for tty */
+
+unsigned char buffer[1024];
+
+struct termios termios;
+
+void ChangeBaudRate(UINT32 baudrate);
+
+void exit_err(UINT8 err)
+{
+#if ( HIGH_SPEED_PATCHRAM_DOWNLOAD == TRUE )
+	ChangeBaudRate(115200);
+#endif
+	exit(err);
+}
+
+void print_time(void)
+{
+#if 0
+	struct timespec tp;
+	int rs;
+
+	rs = clock_gettime(CLOCK_REALTIME, &tp);
+	fprintf(stderr, "[%04d : %06d]\n", tp.tv_sec, tp.tv_nsec / 1000);
+	return;
+#endif
+}
+
+void dump(unsigned char *out, int len)
+{
+	int i;
+
+	for (i = 0; i < len; i++) {
+		if (!(i % 16)) {
+			DEBUG0("\n");
+		}
+		DEBUG1("%02x ", out[i]);
+	}
+	DEBUG0("\n\n");
+}
+
+UINT8 SendCommand(UINT16 opcode, UINT8 param_len, UINT8 * p_param_buf)
+{
+	UINT8 pbuf[255] = { 0, };
+	UINT8 i = 0;
+
+	pbuf[0] = 0x1;
+	pbuf[1] = (UINT8) (opcode);
+	pbuf[2] = (UINT8) (opcode >> 8);
+	pbuf[3] = param_len;
+
+	for (i = 0; i < param_len; i++) {
+		pbuf[i + 4] = *p_param_buf++;
+	}
+
+	DEBUG1("Send %d", param_len + 4);
+
+	dump(pbuf, param_len + 4);
+
+	write(fd, pbuf, param_len + 4);
+	return 0;
+}
+
+void expired(int sig)
+{
+	static UINT8 count = 0;
+	DEBUG0("expired try again\n");
+	SendCommand(HCI_RESET, 0, NULL);
+	alarm(1);
+	count++;
+
+	if (count > 3) {
+		fprintf(stderr, "[ERR] HCI reset time expired\n");
+		exit(1);
+	}
+}
+
+void read_event(int fd, unsigned char *buffer)
+{
+	int i = 0;
+	int len = 3;
+	int count;
+
+	while ((count = read(fd, &buffer[i], len)) < len) {
+		i += count;
+		len -= count;
+	}
+
+	i += count;
+	len = buffer[2];
+
+	while ((count = read(fd, &buffer[i], len)) < len) {
+		i += count;
+		len -= count;
+	}
+
+#ifdef DEBUG
+	count += i;
+
+	DEBUG1("\nreceived %d", count);
+	dump(buffer, count);
+#endif
+}
+
+INT32 filesize(char *name)
+{
+	INT32 size;
+	int flag;
+	struct stat buf;
+
+	flag = stat(name, &buf);
+	if (flag == -1)
+		return -1;
+
+	size = buf.st_size;
+	return (size);
+}
+
+void DisplayProgress(int total, int val)
+{
+#if 0
+#define PROGRESS_NUM 20
+
+	int p;
+	int i;
+	char text[PROGRESS_NUM + 2] = { 0, };
+
+	text[0] = '[';
+	text[PROGRESS_NUM + 1] = ']';
+	p = (val * PROGRESS_NUM) / total;
+
+	for (i = 1; i <= p; i++) {
+		text[i] = '=';
+	}
+
+	for (i = p + 1; i <= PROGRESS_NUM; i++) {
+		text[i] = ' ';
+	}
+
+	for (i = 0; i <= (PROGRESS_NUM + 1); i++) {
+		fprintf(stderr, "%c", text[i]);
+	}
+
+	if (p >= PROGRESS_NUM)
+		fprintf(stderr, "  %6d/%6d\n", val, total);
+	else
+		fprintf(stderr, "  %6d/%6d\r", val, total);
+#else
+	if (val == total)
+		fprintf(stderr, " %6d/%6d\n", val, total);
+	else
+		fprintf(stderr, " %6d/%6d\r", val, total);
+#endif
+}
+
+#if (DEPLOY_4335A_AXI_BRIDGE_PATCH == TRUE)
+/* 4335A/B0 AXI BRIDEG lock cookie */
+struct btlock {
+    int lock;
+    int cookie;
+};
+
+#define AXI_LOCK_COOKIE ('B' | 'T'<<8 | '3'<<16 | '5'<<24)  /* BT35 */
+#define AXI_LOCK_FS_NODE "/dev/btlock"
+
+static const UINT8 bcm4335a_axi_patch_addr[4] =
+{
+    0x00, 0x02, 0x0d, 0x00
+};
+
+static const UINT8 bcm4335a_axi_patch[] =
+{
+    0x00, 0x02, 0x0d, 0x00,		/* bcm4335a_axi_patch_addr */
+    0x70, 0xb5, 0x0c, 0x49, 0x4c, 0xf6, 0x20, 0x30,
+    0x8a, 0xf7, 0xbb, 0xf9, 0x01, 0x28, 0x0d, 0xd1,
+    0x8a, 0xf7, 0x80, 0xf9, 0x08, 0xb1, 0x04, 0x25,
+    0x00, 0xe0, 0x05, 0x25, 0x00, 0x24, 0x03, 0xe0,
+    0x8a, 0xf7, 0x74, 0xf9, 0x64, 0x1c, 0xe4, 0xb2,
+    0xac, 0x42, 0xf9, 0xd3, 0xbd, 0xe8, 0x70, 0x40,
+    0x8a, 0xf7, 0x7f, 0xb9, 0xb0, 0x9b, 0x04, 0x00
+};
+
+/*******************************************************************************
+**
+** Function         hw_4335_dl_axi_patch
+**
+** Description      Download 4335Ax/4335B0 AXI BRIDGE patch
+**
+** Returns          TRUE, if fw patch is sent
+**                  FALSE, otherwise
+**
+*******************************************************************************/
+static UINT8 hw_4335_dl_axi_patch(void)
+{
+	SendCommand(HCI_VSC_WRITE_RAM, sizeof(bcm4335a_axi_patch),
+					(UINT8 *) bcm4335a_axi_patch);
+	read_event(fd, buffer);
+
+	DEBUG0("hw_4335_dl_axi_patch downloading done");
+
+	SendCommand(HCI_VSC_LAUNCH_RAM, sizeof(bcm4335a_axi_patch_addr),
+					(UINT8 *) bcm4335a_axi_patch_addr);
+	read_event(fd, buffer);
+
+	DEBUG0("hw_4335_dl_axi_patch launching done");
+
+	return TRUE;
+}
+
+/*******************************************************************************
+**
+** Function         hw_4335_release_axi_bridge_lock
+**
+** Description      Notify kernel to release the AXI BRIDGE lock which was
+**                  acquired earlier in rfkill driver when powering on BT
+**                  Controller
+**
+** Returns          None
+**
+*******************************************************************************/
+void hw_4335_axi_bridge_lock(void)
+{
+    int fd, ret;
+    struct btlock lock;
+
+    lock.cookie = AXI_LOCK_COOKIE;
+    lock.lock = 1;
+
+    fd = open(AXI_LOCK_FS_NODE, O_RDWR);
+    if (fd >= 0)
+    {
+        ret = write(fd, &lock, sizeof(lock));
+        DEBUG0("4335 AXI BRIDGE lock");
+        close(fd);
+    }
+    else
+    {
+        DEBUG1("Failed to unlock AXI LOCK -- can't open %s", AXI_LOCK_FS_NODE);
+    }
+}
+
+/*******************************************************************************
+**
+** Function         hw_4335_release_axi_bridge_lock
+**
+** Description      Notify kernel to release the AXI BRIDGE lock which was
+**                  acquired earlier in rfkill driver when powering on BT
+**                  Controller
+**
+** Returns          None
+**
+*******************************************************************************/
+void hw_4335_release_axi_bridge_lock(void)
+{
+    int fd, ret;
+    struct btlock lock;
+
+    lock.cookie = AXI_LOCK_COOKIE;
+    lock.lock = 0;
+
+    fd = open(AXI_LOCK_FS_NODE, O_RDWR);
+    if (fd >= 0)
+    {
+        ret = write(fd, &lock, sizeof(lock));
+        DEBUG0("Releasing 4335 AXI BRIDGE lock");
+        close(fd);
+    }
+    else
+    {
+        DEBUG1("Failed to unlock AXI LOCK -- can't open %s", AXI_LOCK_FS_NODE);
+    }
+}
+#endif 	/* (DEPLOY_4335A_AXI_BRIDGE_PATCH == TRUE) */
+
+UINT8 DownloadPatchram(char *patchram1)
+{
+	UINT32 len;
+	char prm[128] = { 0, };
+	FILE *pFile = NULL;
+
+	INT32 FileSize = 0;
+	INT32 SentSize = 0;
+
+	DEBUG1("\n%s\n", patchram1);
+
+	/* HCI reset */
+	DEBUG0("HCI reset\n");
+	SendCommand(HCI_RESET, 0, NULL);
+	alarm(1);
+	read_event(fd, buffer);
+	alarm(0);
+
+#if (DEPLOY_4335A_AXI_BRIDGE_PATCH == TRUE)
+	char *p_tmp;
+
+	SendCommand(HCI_READ_LOCAL_NAME, 0, NULL);
+	read_event(fd, buffer);
+
+	p_tmp = strstr((char *)(buffer + 7), "BCM4335");
+	DEBUG1( "chip_name [%s]\n", p_tmp);
+
+	if ((p_tmp != NULL) &&
+	    ((p_tmp[7] == 'A') /* 4335A */||
+	     ((p_tmp[7] == 'B') && (p_tmp[8] == '0')) /* 4335B0 */)) {
+		hw_4335_dl_axi_patch();
+	}
+	hw_4335_release_axi_bridge_lock();
+#endif
+
+#if ( HIGH_SPEED_PATCHRAM_DOWNLOAD == TRUE )
+	ChangeBaudRate(921600);
+#endif
+
+	strncpy(prm, patchram1, 127);
+
+	fprintf(stderr, "Download Start\n");
+
+	if ((pFile = fopen(prm, "r")) == NULL) {
+		fprintf(stderr, "file %s could not be opened, error %d\n", prm,
+			errno);
+		exit_err(1);
+	}
+	FileSize = filesize(prm);
+
+	SendCommand(HCI_BRCM_DOWNLOAD_MINI_DRV, 0, NULL);
+	read_event(fd, buffer);
+
+	usleep(50000);
+
+	while (fread(&buffer[1], sizeof(UINT8), 3, pFile)) {
+		buffer[0] = 0x01;
+
+		len = buffer[3];
+
+		fread(&buffer[4], sizeof(UINT8), len, pFile);
+
+		write(fd, buffer, len + 4);
+
+		/* dispaly progress */
+		SentSize += (len + 3);
+#if 0
+		DisplayProgress(FileSize, SentSize);
+#endif
+		/* dispaly progress */
+
+		read_event(fd, buffer);
+
+	}
+	fclose(pFile);
+
+	usleep(100000);		/*100ms delay */
+
+	tcflush(fd, TCIOFLUSH);
+	tcgetattr(fd, &termios);
+	cfmakeraw(&termios);
+	termios.c_cflag |= CRTSCTS;
+
+	if (use_two_stop_bits)
+		termios.c_cflag |= CSTOPB;
+
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcflush(fd, TCIOFLUSH);
+	cfsetospeed(&termios, B115200);
+	cfsetispeed(&termios, B115200);
+	tcsetattr(fd, TCSANOW, &termios);
+
+	/* Send HCI_RESET Command and process event */
+	DEBUG0("HCI reset\n");
+	SendCommand(HCI_RESET, 0, NULL);
+	alarm(1);
+	read_event(fd, buffer);
+	alarm(0);
+	fprintf(stderr, "Download Complete\n");
+
+	return 0;
+}
+
+void SetScanEnable(void)
+{
+	UINT8 scan_data[1];
+
+	/* 0x00: No scan enabled                            */
+	/* 0x01: Inquiry scan enabled  | Page scan disabled */
+	/* 0x02: Inquiry scan disabled | Page scan enabled  */
+	/* 0x03: Inquiry scan enabled  | Page scan enabled  */
+
+	scan_data[0] = 0x03;
+	SendCommand(HCI_WRITE_SCAN_ENABLE, 1, &scan_data[0]);
+	read_event(fd, buffer);
+}
+
+void SetAudio(void)
+{
+	fprintf(stderr, "Write Audio parameter\n");
+
+	DEBUG5("vsc_for_sco_pcm = {%d,%d,%d,%d,%d}\n", vsc_for_sco_pcm[0],
+	       vsc_for_sco_pcm[1], vsc_for_sco_pcm[2],
+	       vsc_for_sco_pcm[3], vsc_for_sco_pcm[4]);
+
+	SendCommand(HCI_BRCM_WRITE_SCO_PCM_INT_PARAM, 5,
+		    (UINT8 *) vsc_for_sco_pcm);
+	read_event(fd, buffer);
+
+	DEBUG5("vsc_for_pcm_config = {%d,%d,%d,%d,%d}\n", vsc_for_pcm_config[0],
+	       vsc_for_pcm_config[1], vsc_for_pcm_config[2],
+	       vsc_for_pcm_config[3], vsc_for_pcm_config[4]);
+
+	SendCommand(VSC_WRITE_PCM_DATA_FORMAT_PARAM, 5,
+		    (UINT8 *) vsc_for_pcm_config);
+	read_event(fd, buffer);
+}
+
+void SetPcmConf(UINT8 p0, UINT8 p1, UINT8 p2, UINT8 p3, UINT8 p4)
+{
+	vsc_for_pcm_config[0] = p0;
+	vsc_for_pcm_config[1] = p1;
+	vsc_for_pcm_config[2] = p2;
+	vsc_for_pcm_config[3] = p3;
+	vsc_for_pcm_config[4] = p4;
+}
+
+void SetScoConf(UINT8 p0, UINT8 p1, UINT8 p2, UINT8 p3, UINT8 p4)
+{
+	vsc_for_sco_pcm[0] = p0;
+	vsc_for_sco_pcm[1] = p1;
+	vsc_for_sco_pcm[2] = p2;
+	vsc_for_sco_pcm[3] = p3;
+	vsc_for_sco_pcm[4] = p4;
+}
+
+void HCILP_Enable(BOOLEAN on)
+{
+	fprintf(stderr, "Set Low Power mode %d\n", on);
+	UINT8 data[HCI_BRCM_WRITE_SLEEP_MODE_LENGTH] = {
+		0x01,		/* Sleep Mode algorithm 1 */
+		HCILP_IDLE_THRESHOLD,	/* Host Idle Treshold in 300ms */
+		HCILP_HC_IDLE_THRESHOLD,	/* Host Controller Idle Treshold in 300ms *//* this should be less than scan interval. */
+		HCILP_BT_WAKE_POLARITY,	/* BT_WAKE Polarity - 0=Active Low, 1= Active High */
+		HCILP_HOST_WAKE_POLARITY,	/* HOST_WAKE Polarity - 0=Active Low, 1= Active High */
+		0x01,		/* Allow host Sleep during SCO */
+		0x01,		/* Combine Sleep Mode and LPM - The device will not sleep in mode 0 if this flag is set to 1, */
+		0x00,		/* UART_TXD Tri-State : 0x00 = Do not tri-state UART_TXD in sleep mode */
+		0x00,		/* NA to Mode 1 */
+		0x00,		/* NA to Mode 1 */
+	};
+
+	if (on) {
+		data[0] = 0x01;
+	} else {
+		data[0] = 0x00;
+	}
+
+	SendCommand(HCI_BRCM_WRITE_SLEEP_MODE, HCI_BRCM_WRITE_SLEEP_MODE_LENGTH,
+		    (UINT8 *) data);
+	read_event(fd, buffer);
+}
+
+UINT32 uart_speed(UINT32 Speed)
+{
+	switch (Speed) {
+	case 115200:
+		return B115200;
+	case 230400:
+		return B230400;
+	case 460800:
+		return B460800;
+	case 921600:
+		return B921600;
+	case 1000000:
+		return B1000000;
+	case 1500000:
+		return B1500000;
+	case 2000000:
+		return B2000000;
+	case 2500000:
+		return B2500000;
+	case 3000000:
+		return B3000000;
+	case 4000000:
+		return B4000000;
+	default:
+		return B115200;
+	}
+}
+
+void ChangeBaudRate(UINT32 baudrate)
+{
+	UINT8 hci_data[HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH] =
+	    { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+	UINT8 uart_clock_24 = 0x2;	/* 0x1 - UART Clock 48MHz, 0x2 - UART Clock 24MHz */
+	UINT8 uart_clock_48 = 0x1;	/* 0x1 - UART Clock 48MHz, 0x2 - UART Clock 24MHz */
+
+	switch (baudrate) {
+	case 115200:
+	case 230400:
+	case 460800:
+	case 921600:
+	case 1000000:
+	case 1500000:
+	case 2000000:
+	case 2500000:
+		/* Write UART Clock setting of 24MHz */
+		DEBUG0("Change UART_CLOCK 24Mhz\n");
+		SendCommand(VSC_WRITE_UART_CLOCK_SETTING,
+			    VSC_WRITE_UART_CLOCK_SETTING_LEN,
+			    (UINT8 *) & uart_clock_24);
+		read_event(fd, buffer);
+		break;
+
+	case 3000000:
+	case 4000000:
+		/* Write UART Clock setting of 48MHz */
+		DEBUG0("Change UART_CLOCK 48Mh\nz");
+		SendCommand(VSC_WRITE_UART_CLOCK_SETTING,
+			    VSC_WRITE_UART_CLOCK_SETTING_LEN,
+			    (UINT8 *) & uart_clock_48);
+		read_event(fd, buffer);
+		break;
+
+	default:
+		fprintf(stderr, "Not Support baudrate = %ld\n", baudrate);
+		exit_err(1);
+		break;
+	}
+
+	hci_data[2] = baudrate & 0xFF;
+	hci_data[3] = (baudrate >> 8) & 0xFF;
+	hci_data[4] = (baudrate >> 16) & 0xFF;
+	hci_data[5] = (baudrate >> 24) & 0xFF;
+
+	DEBUG1("Change Baudrate %ld\n", baudrate);
+
+	SendCommand(HCI_BRCM_UPDATE_BAUDRATE_CMD,
+		    HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH,
+		    (UINT8 *) hci_data);
+	read_event(fd, buffer);
+
+	tcflush(fd, TCIOFLUSH);
+	tcgetattr(fd, &termios);
+	cfmakeraw(&termios);
+	termios.c_cflag |= CRTSCTS;
+
+	if (use_two_stop_bits)
+		termios.c_cflag |= CSTOPB;
+
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcflush(fd, TCIOFLUSH);
+	cfsetospeed(&termios, uart_speed(baudrate));
+	cfsetispeed(&termios, uart_speed(baudrate));
+	tcsetattr(fd, TCSANOW, &termios);
+
+}
+
+void EnableTestMode(void)
+{
+	UINT8 filter_data[] = { 0x02, 0x00, 0x02 };
+
+	/* bt sleep  disable */
+	HCILP_Enable(FALSE);
+
+	/* Enable both Inquiry & Page Scans */
+	SetScanEnable();
+
+	/* Set Event Filter: Enable Auto Connect */
+	SendCommand(HCI_SET_EVENT_FILTER, 0x03, (UINT8 *) filter_data);
+	read_event(fd, buffer);
+
+	/* Enable Device under test */
+	SendCommand(HCI_ENABLE_DEV_UNDER_TEST_MODE, 0x0, NULL);
+	read_event(fd, buffer);
+
+	fprintf(stderr, "Enable Device Under Test\n");
+}
+
+void SetLocalFeatures(void)
+{
+	UINT8 *data = NULL;
+
+	DEBUG0("Read Local Feature\n");
+	SendCommand(HCI_READ_LOCAL_FEATURES, 0, NULL);
+	read_event(fd, buffer);
+
+	data = &buffer[7];
+
+#if (BCM_DISABLE_RF_PWRCTRL == TRUE)
+	fprintf(stderr, "Remove Power Control\n");
+	data[2] &= 0xFB;	/* Power contrel */
+#endif
+	DEBUG0("Write Local Feature\n");
+	SendCommand(VSC_HCI_CMD_SET_LOC_FEATURES_CMD, 0x08, (UINT8 *) data);
+	read_event(fd, buffer);
+}
+
+void EnbleHCI(void)
+{
+	int i = N_HCI;
+	int proto = HCI_UART_H4;
+
+	if (ioctl(fd, TIOCSETD, &i) < 0) {
+		fprintf(stderr, "Can't set line discipline\n");
+		return;
+	}
+
+	if (ioctl(fd, HCIUARTSETPROTO, proto) < 0) {
+		fprintf(stderr, "Can't set hci protocol\n");
+		return;
+	}
+	fprintf(stderr, "Done setting line discpline\n");
+	return;
+
+}
+
+void print_usage(void)
+{
+	fprintf(stderr, "\n");
+	fprintf(stderr, "BRCM BT tool for Linux    release %s\n", RELEASE_DATE);
+	fprintf(stderr, "\n");
+	fprintf(stderr,
+		" Usage: bcmtool <tty Device> <command> [command parameter],....\n\n");
+	fprintf(stderr,
+		"  -FILE    Patchram file name     EX) -FILE=BCM43xx_xxx.hcd\n");
+	fprintf(stderr,
+		"  -BAUD    Set Baudrate           EX) -BAUD=3000000\n");
+	fprintf(stderr,
+		"  -ADDR    BD addr file name      EX) -ADDR=.bdaddr\n");
+	fprintf(stderr, "  -SCO     Enable SCO/PCM config  EX) -SCO\n");
+	fprintf(stderr,
+		"  -SETSCO  SCO/PCM values verify  EX) -SETSCO=0,1,0,1,1,0,0,3,3,0\n");
+	fprintf(stderr, "  -LP      Enable Low power       EX) -LP\n");
+	fprintf(stderr, "  -FEATURE Set local Feature      EX) -FEATURE\n");
+	fprintf(stderr,
+		"  -DUT     Enable DUT mode(do not use with -LP) EX) -DUT\n");
+	fprintf(stderr,
+		"  -ATTACH  Attach BT controller to BlueZ stack  EX) -ATTACH\n");
+	fprintf(stderr, "  -DEBUG   Debug message          EX) -DEBUG\n");
+	fprintf(stderr, "  -CSTOPB  Set two stop bits for tty EX) -CSTOPB\n");
+	fprintf(stderr, "\n");
+}
+
+int main(int argc, char *argv[])
+{
+	UINT8 i = 0;
+
+	if (argc < 2) {
+		print_usage();
+		exit(1);
+	} else {
+		fprintf(stderr, "BRCM BT tool for Linux    release %s\n",
+			RELEASE_DATE);
+	}
+
+#if (DEPLOY_4335A_AXI_BRIDGE_PATCH == TRUE)
+	hw_4335_axi_bridge_lock();
+	usleep(50000);
+#endif
+
+	/* Open dev port */
+	if ((fd = open(argv[1], O_RDWR | O_NOCTTY)) == -1) {
+		fprintf(stderr, "port %s could not be opened, error %d\n",
+			argv[1], errno);
+		exit(2);
+	}
+
+	tcflush(fd, TCIOFLUSH);
+	tcgetattr(fd, &termios);
+	cfmakeraw(&termios);
+	termios.c_cflag |= CRTSCTS;
+
+	if (use_two_stop_bits)
+		termios.c_cflag |= CSTOPB;
+
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcsetattr(fd, TCSANOW, &termios);
+	tcflush(fd, TCIOFLUSH);
+	tcflush(fd, TCIOFLUSH);
+	cfsetospeed(&termios, B115200);
+	cfsetispeed(&termios, B115200);
+	tcsetattr(fd, TCSANOW, &termios);
+
+	signal(SIGALRM, expired);
+
+	for (i = 2; i < argc; i++) {
+		char *ptr = argv[i];
+
+		if (strstr(ptr, "-DEBUG")) {
+			debug_mode = TRUE;
+			DEBUG0("DEBUG On\n");
+			break;
+		}
+
+		if (strstr(ptr, "-CSTOPB")) {
+			use_two_stop_bits = TRUE;
+			DEBUG0("Use two stop bits for tty\n");
+			break;
+		}
+	}
+
+	for (i = 2; i < argc; i++) {
+		char *ptr = argv[i];
+
+		if (ptr == NULL)
+			continue;
+
+		fprintf(stderr, "[%d] %s\n", i - 1, ptr);
+
+		if (strstr(ptr, "-FILE=")) {
+			char prm_name[128];
+
+			ptr += 6;
+
+			strncpy(prm_name, ptr, 127);
+			DownloadPatchram(prm_name);
+
+		} else if (strstr(ptr, "-BAUD=")) {
+			UINT32 baudrate;
+
+			ptr += 6;
+			baudrate = atoi(ptr);
+
+			ChangeBaudRate(baudrate);
+		} else if (strstr(ptr, "-ADDR=")) {
+			char *bdaddr_filename;
+			FILE *pFile = NULL;
+
+			int bdaddr[10];	/* Displayed BD Address */
+
+			BD_ADDR local_addr;	/* BD Address for write */
+
+#if 0
+			ptr += 6;
+			if (sscanf
+			    (ptr, "%02X:%02X:%02X:%02X:%02X:%02X", &bdaddr[0],
+			     &bdaddr[1], &bdaddr[2], &bdaddr[3], &bdaddr[4],
+			     &bdaddr[5]) != 6) {
+				fprintf(stderr, "-ADDR: Parameter error");
+				exit_err(1);
+			}
+			bte_write_bdaddr(bdaddr);
+#endif
+			ptr += 6;
+			bdaddr_filename = ptr;
+
+			if (bdaddr_filename) {
+				pFile = fopen(bdaddr_filename, "r");
+			}
+
+			if (pFile) {
+				char text[BTUI_MAX_STRING_LENGTH_PER_LINE];
+
+				fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE,
+				      pFile);
+				sscanf(text, "%02x%02x", &bdaddr[0],
+				       &bdaddr[1]);
+
+				fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE,
+				      pFile);
+				sscanf(text, "%02x", &bdaddr[2]);
+
+				fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE,
+				      pFile);
+				sscanf(text, "%02x%02x%02x", &bdaddr[3],
+				       &bdaddr[4], &bdaddr[5]);
+
+				fprintf(stderr,
+					"Writing B/D Address = %02X:%02X:%02X:%02X:%02X:%02X\n",
+					bdaddr[0], bdaddr[1], bdaddr[2],
+					bdaddr[3], bdaddr[4], bdaddr[5]);
+
+				ROTATE_BD_ADDR(local_addr, bdaddr);
+
+				SendCommand(VSC_WRITE_BD_ADDR, BD_ADDR_LEN,
+					    (UINT8 *) local_addr);
+				read_event(fd, buffer);
+			} else {
+				fprintf(stderr, "-ADDR: file open fail\n");
+				exit_err(1);
+			}
+
+		} else if (strstr(ptr, "-SCO")) {
+			SetAudio();
+
+		} else if (strstr(ptr, "-SETSCO=")) {
+			ptr += 8;
+			int value[10];
+
+			if (sscanf
+			    (ptr, "%d,%d,%d,%d,%d,%d,%d,%d,%d,%d", &value[0],
+			     &value[1], &value[2], &value[3], &value[4],
+			     &value[5], &value[6], &value[7], &value[8],
+			     &value[9]) != 10) {
+				DEBUG0("PCM / SCO configuration value err\n");
+				DEBUG0
+				    ("SCO_Routing,PCM_Interface_Rate,Frame_Type,Sync_Mode,Clock_Mode,LSB_First,Fill_bits,Fill_Method,Fill_Num,Right_Justify\n");
+				exit_err(1);
+			}
+
+			SetScoConf(value[0], value[1], value[2], value[3],
+				   value[4]);
+			SetPcmConf(value[5], value[6], value[7], value[8],
+				   value[9]);
+			SetAudio();
+		} else if (strstr(ptr, "-LP")) {
+			HCILP_Enable(TRUE);
+		} else if (strstr(ptr, "-DUT")) {
+			EnableTestMode();
+		} else if (strstr(ptr, "-FEATURE")) {
+			SetLocalFeatures();
+		} else if (strstr(ptr, "-ATTACH")) {
+			EnbleHCI();
+			while (1) {
+				sleep(UINT_MAX);
+			}
+		} else if (strstr(ptr, "-DEBUG")) {
+		} else if (strstr(ptr, "-CSTOPB")) {
+
+		} else {
+			fprintf(stderr, "Invalid parameter(s)!\n");
+			exit_err(1);
+		}
+	}
+
+	fprintf(stderr, "EXIT\n");
+	close(fd);
+	exit(0);
+
+	return 0;
+}
diff --git a/tools/bcmtool_4358a1.c b/tools/bcmtool_4358a1.c
new file mode 100644
index 0000000..b35da8e
--- /dev/null
+++ b/tools/bcmtool_4358a1.c
@@ -0,0 +1,865 @@
+/*****************************************************************************
+**
+**  Name:          bcmtool.c
+**
+**  Description:   Download a patchram files for the HCD format
+**
+**  Copyright (c) 2000-2009, Broadcom Corp., All Rights Reserved.
+******************************************************************************/
+
+#include <stdio.h>
+#include <errno.h>
+#include <sys/types.h>
+#include <sys/stat.h>
+#include <fcntl.h>
+#include <stdlib.h>
+#include <time.h>
+#include <string.h>
+#include <signal.h>
+#include <unistd.h>
+#include <sys/termios.h>
+#include <sys/ioctl.h>
+#include <limits.h>
+
+#define N_HCI	15
+#define HCI_UART_H4		0
+#define HCI_UART_BCSP	1
+#define HCI_UART_3WIRE	2
+#define HCI_UART_H4DS	3
+#define HCI_UART_LL		4
+#define HCIUARTSETPROTO		_IOW('U', 200, int)
+#define HCIUARTGETPROTO		_IOR('U', 201, int)
+#define HCIUARTGETDEVICE	_IOR('U', 202, int)
+
+/* Pre baudrate change for fast download */
+#define HIGH_SPEED_PATCHRAM_DOWNLOAD  TRUE
+
+/* Host Stack Idle Threshold */
+#define HCILP_IDLE_THRESHOLD          0x01
+
+/* Host Controller Idle Threshold */
+#define HCILP_HC_IDLE_THRESHOLD       0x01
+
+/* BT_WAKE Polarity - 0=Active Low, 1= Active High */
+#define HCILP_BT_WAKE_POLARITY        1
+
+/* HOST_WAKE Polarity - 0=Active Low, 1= Active High */
+#define HCILP_HOST_WAKE_POLARITY      1
+
+/* Local Feature */
+#define BCM_DISABLE_RF_PWRCTRL        FALSE
+
+
+
+
+#define RELEASE_DATE "2011.02.07"
+#define DEBUG 1
+
+typedef unsigned char   UINT8;
+typedef unsigned short  UINT16;
+typedef unsigned long   UINT32;
+typedef signed   long   INT32;
+typedef signed   char   INT8;
+typedef signed   short  INT16;
+typedef unsigned char   BOOLEAN;
+
+#define FALSE    0
+#define TRUE     (!FALSE)
+
+#define BD_ADDR_LEN     6                   /* Device address length */
+typedef UINT8 BD_ADDR[BD_ADDR_LEN];         /* Device address */
+
+
+
+#define HCI_GRP_LINK_CONTROL_CMDS                 (0x01 << 10)
+#define HCI_GRP_LINK_POLICY_CMDS                  (0x02 << 10)
+#define HCI_GRP_HOST_CONT_BASEBAND_CMDS           (0x03 << 10)
+#define HCI_GRP_INFORMATIONAL_PARAMS              (0x04 << 10)
+#define HCI_GRP_STATUS_PARAMS                     (0x05 << 10)
+#define HCI_GRP_TESTING_CMDS                      (0x06 << 10)
+#define HCI_GRP_L2CAP_CMDS                        (0x07 << 10)
+#define HCI_GRP_L2CAP_HCI_EVTS                    (0x08 << 10)
+#define HCI_GRP_VENDOR_SPECIFIC                   (0x3F << 10)
+
+
+#define HCI_RESET                                 (0x0003 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_SET_EVENT_FILTER                      (0x0005 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_READ_SCAN_ENABLE                      (0x0019 | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+#define HCI_WRITE_SCAN_ENABLE                     (0x001A | HCI_GRP_HOST_CONT_BASEBAND_CMDS)
+
+#define HCI_READ_LOCAL_VERSION_INFO               (0x0001 | HCI_GRP_INFORMATIONAL_PARAMS)
+#define HCI_READ_LOCAL_FEATURES                   (0x0003 | HCI_GRP_INFORMATIONAL_PARAMS)
+
+#define HCI_ENABLE_DEV_UNDER_TEST_MODE            (0x0003 | HCI_GRP_TESTING_CMDS)
+
+#define HCI_BRCM_SUPER_PEEK_POKE                  (0x000A | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_BD_ADDR                         (0x0001 | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_HCI_CMD_SET_LOC_FEATURES_CMD          (0x000B | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_UPDATE_BAUDRATE_CMD              (0x0018 | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_WRITE_SCO_PCM_INT_PARAM          (0x001C | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_PCM_DATA_FORMAT_PARAM           (0x001E | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_WRITE_SLEEP_MODE                 (0x0027 | HCI_GRP_VENDOR_SPECIFIC)
+#define HCI_BRCM_DOWNLOAD_MINI_DRV                (0x002E | HCI_GRP_VENDOR_SPECIFIC)
+#define VSC_WRITE_UART_CLOCK_SETTING              (0x0045 | HCI_GRP_VENDOR_SPECIFIC)
+
+
+#define VOICE_SETTING_MU_LAW_MD                   0x0100
+#define VOICE_SETTING_LINEAR_MD                   0x0060
+
+#define HCI_ARM_MEM_PEEK                          0x04
+#define HCI_ARM_MEM_POKE                          0x05
+
+#define BTUI_MAX_STRING_LENGTH_PER_LINE           255
+#define HCI_BRCM_WRITE_SLEEP_MODE_LENGTH          10
+
+#define HCI_BRCM_UPDATE_BAUD_RATE_ENCODED_LENGTH    0x02
+#define HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH  0x06
+
+#define VSC_WRITE_UART_CLOCK_SETTING_LEN          1
+
+/* print string with time stamp */
+#define TDEBUG0(m)                               if(debug_mode) {print_time();fprintf(stderr,m);}
+#define TDEBUG1(m,n1)                            if(debug_mode) {print_time();fprintf(stderr,m,n1);}
+#define TDEBUG2(m,n1,n2)                         if(debug_mode) {print_time();fprintf(stderr,m,n1,n2);}
+#define TDEBUG3(m,n1,n2,n3)                      if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3);}
+#define TDEBUG4(m,n1,n2,n3,n4)                   if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4);}
+#define TDEBUG5(m,n1,n2,n3,n4,n5)                if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4,n5);}
+#define TDEBUG6(m,n1,n2,n3,n4,n5,n6)             if(debug_mode) {print_time();fprintf(stderr,m,n1,n2,n3,n4,n5,n6);}
+
+/* print just string */
+#define DEBUG0(m)                               if(debug_mode) {fprintf(stderr,m);}
+#define DEBUG1(m,n1)                            if(debug_mode) {fprintf(stderr,m,n1);}
+#define DEBUG2(m,n1,n2)                         if(debug_mode) {fprintf(stderr,m,n1,n2);}
+#define DEBUG3(m,n1,n2,n3)                      if(debug_mode) {fprintf(stderr,m,n1,n2,n3);}
+#define DEBUG4(m,n1,n2,n3,n4)                   if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4);}
+#define DEBUG5(m,n1,n2,n3,n4,n5)                if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4,n5);}
+#define DEBUG6(m,n1,n2,n3,n4,n5,n6)             if(debug_mode) {fprintf(stderr,m,n1,n2,n3,n4,n5,n6);}
+
+
+#define STREAM_TO_UINT8(u8, p)   {u8 = (UINT8)(*(p)); (p) += 1;}
+#define STREAM_TO_UINT16(u16, p) {u16 = ((UINT16)(*(p)) + (((UINT16)(*((p) + 1))) << 8)); (p) += 2;}
+#define STREAM_TO_UINT32(u32, p) {u32 = (((UINT32)(*(p))) + ((((UINT32)(*((p) + 1)))) << 8) + ((((UINT32)(*((p) + 2)))) << 16) + ((((UINT32)(*((p) + 3)))) << 24)); (p) += 4;}
+
+#define ROTATE_BD_ADDR(p1, p2)    \
+									do		   \
+									{							\
+										p1[0] = p2[5];		\
+										p1[1] = p2[4];		\
+										p1[2] = p2[3];		\
+										p1[3] = p2[2];		\
+										p1[4] = p2[1];		\
+										p1[5] = p2[0];		\
+									} while (0)	
+
+
+UINT8 vsc_for_pcm_config[5] = {0x00, 0x00, 0x03, 0x03, 0x00};
+/*
+                    Byte1 -- 0 for MSb first
+                    Byte2 -- 0 Fill value
+                    Byte3 -- 1 Fill option (0:0's, 1:1's , 2:Signed, 3:Programmable)
+                    Byte4 -- 1 Number of fill bits
+                    Byte5 -- 1 Right justified (0 for left justified)
+*/
+
+UINT8 vsc_for_sco_pcm[5]    = {0x00, 0x01, 0x00, 0x01, 0x01};
+/*
+                    Neverland : PCM, 256, short, master ,master
+                    Volance   : PCM, 256, short, master ,master
+                    
+                    Byte1 -- 0 for PCM 1 for UART or USB
+                    Byte2 -- 0 : 128, 1: 256, 2:512, 3:1024, 4:2048 Khz
+                    Byte3 -- 0 for short frame sync 1 for long frame sync
+                    Byte4 -- 0 Clock direction 0 for same as sync 1 for opposite direction
+                    Byte5 -- 0 for slave 1 for master
+*/                    
+
+int fd;    /* HCI handle */
+
+BOOLEAN debug_mode = FALSE;    /* Debug Mode Enable */
+
+unsigned char buffer[1024];
+
+struct termios termios;
+
+void ChangeBaudRate(UINT32 baudrate);
+
+
+void exit_err(UINT8 err)
+{
+#if ( HIGH_SPEED_PATCHRAM_DOWNLOAD == TRUE )
+    ChangeBaudRate(115200);
+#endif
+    exit(err);
+}
+
+void print_time(void)
+{
+#if 0
+    struct timespec tp;
+    int rs;
+
+    rs = clock_gettime(CLOCK_REALTIME,&tp);
+    fprintf(stderr, "[%04d : %06d]\n", tp.tv_sec, tp.tv_nsec/1000);
+    return;
+#endif
+}
+
+void dump(unsigned char *out, int len)
+{
+    int i;
+    
+    for (i = 0; i < len; i++)
+    {
+        if (!(i % 16)) 
+        {
+            DEBUG0( "\n");
+        }    
+        DEBUG1( "%02x ", out[i]);
+    }
+    DEBUG0( "\n\n");
+}
+
+UINT8 SendCommand(UINT16 opcode, UINT8 param_len, UINT8 *p_param_buf)
+{
+    UINT8 pbuf[255] = {0,};
+    UINT8 i=0;
+    
+    pbuf[0] = 0x1;
+    pbuf[1] = (UINT8)(opcode);
+    pbuf[2] = (UINT8)(opcode >>8);
+    pbuf[3] = param_len;
+
+    for (i=0; i<param_len; i++)
+    {        
+        pbuf[i+4] = *p_param_buf++;
+    }
+
+    DEBUG1( "Send %d",param_len+4);     
+
+    dump(pbuf, param_len+4);
+
+    write(fd, pbuf, param_len+4);
+    return 0;
+}
+
+void expired(int sig)
+{
+    static UINT8 count = 0;
+    DEBUG0( "expired try again\n");
+    SendCommand(HCI_RESET, 0, NULL);
+    alarm(1);
+    count++;
+
+    if(count > 3)
+    {
+        fprintf(stderr, "[ERR] HCI reset time expired\n");
+        exit(1);
+    }
+}
+
+void read_event(int fd, unsigned char *buffer)
+{
+    int i = 0;
+    int len = 3;
+    int count;
+
+    while ((count = read(fd, &buffer[i], len)) < len) 
+    {
+        i += count;
+        len -= count;
+    }
+
+    i += count;
+    len = buffer[2];
+
+    while ((count = read(fd, &buffer[i], len)) < len) 
+    {
+        i += count;
+        len -= count;
+    }
+
+#ifdef DEBUG
+    count += i;
+
+    DEBUG1( "\nreceived %d", count);
+    dump(buffer, count);
+#endif
+}
+
+INT32 filesize (char *name) 
+{
+    INT32 size;
+    int flag;
+    struct stat buf;
+
+    flag = stat (name,&buf);
+    if (flag == -1) 
+        return -1;
+
+    size = buf.st_size;
+    return (size);
+}
+
+void DisplayProgress(int total, int val)
+{
+#if 0
+    #define PROGRESS_NUM 20
+    
+    int p;
+    int i;
+    char text[PROGRESS_NUM+2]={0,};
+    
+    text[0]='[';
+    text[PROGRESS_NUM+1]=']';
+    p=(val*PROGRESS_NUM)/total;
+    
+    for ( i=1; i<=p; i++)
+    {
+        text[i]='=';
+    }
+    
+    for ( i=p+1; i<=PROGRESS_NUM; i++)
+    {
+        text[i]=' ';
+    }
+    
+    
+    for ( i=0; i<=(PROGRESS_NUM+1); i++)
+    {
+        fprintf(stderr, "%c",text[i]);
+    }
+    
+    if( p >= PROGRESS_NUM)
+        fprintf(stderr, "  %6d/%6d\n",val,total);
+    else
+        fprintf(stderr, "  %6d/%6d\r",val,total);
+#else
+    if( val == total)
+        fprintf(stderr, " %6d/%6d\n",val,total);
+    else
+        fprintf(stderr, " %6d/%6d\r",val,total);
+#endif
+}
+
+UINT8 DownloadPatchram( char *patchram1 )
+{
+    UINT32 len;
+    char   prm[128] ={0,};
+    FILE* pFile = NULL;
+
+    INT32 FileSize=0;
+    INT32 SentSize=0;
+    
+    DEBUG1( "\n%s\n", patchram1);
+
+    /* HCI reset */
+    DEBUG0( "HCI reset\n");
+    SendCommand(HCI_RESET, 0, NULL);
+    alarm(1);
+    read_event(fd, buffer);
+    alarm(0);
+    
+#if ( HIGH_SPEED_PATCHRAM_DOWNLOAD == TRUE )
+    ChangeBaudRate(921600);
+#endif
+
+    strcpy(prm, patchram1);    
+
+    fprintf(stderr, "Download Start\n");
+
+    if ((pFile = fopen(prm, "r")) == NULL) 
+    {
+        fprintf(stderr, "file %s could not be opened, error %d\n", prm, errno);
+        exit_err(1);
+    }
+    FileSize = filesize(prm);
+	
+    SendCommand(HCI_BRCM_DOWNLOAD_MINI_DRV, 0, NULL);
+    read_event(fd, buffer);
+
+	usleep(50000);
+
+    while (fread(&buffer[1], sizeof(UINT8), 3 ,pFile)) 
+    {
+        buffer[0] = 0x01;
+
+        len = buffer[3];
+
+        fread(&buffer[4],sizeof(UINT8),len, pFile);
+
+        write(fd, buffer, len + 4);
+
+        /* dispaly progress*/
+        SentSize += (len + 3);
+        DisplayProgress(FileSize,SentSize);
+        /* dispaly progress*/
+        
+        read_event(fd, buffer);
+
+    }
+    fclose(pFile);
+
+    usleep(100000);    /*100ms delay */
+
+    tcflush(fd, TCIOFLUSH);
+    tcgetattr(fd, &termios);
+    cfmakeraw(&termios);
+    termios.c_cflag |= CRTSCTS;
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcflush(fd, TCIOFLUSH);
+    cfsetospeed(&termios, B115200);
+    cfsetispeed(&termios, B115200);
+    tcsetattr(fd, TCSANOW, &termios);
+
+    /* Send HCI_RESET Command and process event */
+    DEBUG0( "HCI reset\n");
+    SendCommand(HCI_RESET, 0, NULL);
+    alarm(1);
+    read_event(fd, buffer);
+    alarm(0);
+    fprintf(stderr,"Download Complete\n");
+
+    return 0;
+}
+
+void SetScanEnable(void)
+{
+    UINT8 scan_data[1] ;
+
+   /* 0x00: No scan enabled                            */
+   /* 0x01: Inquiry scan enabled  | Page scan disabled */
+   /* 0x02: Inquiry scan disabled | Page scan enabled  */
+   /* 0x03: Inquiry scan enabled  | Page scan enabled  */
+
+    scan_data[0]= 0x03;
+    SendCommand(HCI_WRITE_SCAN_ENABLE, 1, &scan_data[0]);
+    read_event(fd, buffer);
+}
+
+void SetAudio(void)
+{
+    fprintf(stderr,"Write Audio parameter\n");
+
+    DEBUG5( "vsc_for_sco_pcm = {%d,%d,%d,%d,%d}\n", vsc_for_sco_pcm[0],
+                                         vsc_for_sco_pcm[1],vsc_for_sco_pcm[2],
+                                         vsc_for_sco_pcm[3],vsc_for_sco_pcm[4]);
+
+    SendCommand(HCI_BRCM_WRITE_SCO_PCM_INT_PARAM, 5, (UINT8 *)vsc_for_sco_pcm);
+    read_event(fd, buffer);
+
+    DEBUG5( "vsc_for_pcm_config = {%d,%d,%d,%d,%d}\n", vsc_for_pcm_config[0],
+                                        vsc_for_pcm_config[1], vsc_for_pcm_config[2],
+                                        vsc_for_pcm_config[3], vsc_for_pcm_config[4]);
+
+    SendCommand(VSC_WRITE_PCM_DATA_FORMAT_PARAM, 5, (UINT8 *)vsc_for_pcm_config);
+    read_event(fd, buffer);
+}
+
+void SetPcmConf( UINT8 p0, UINT8 p1, UINT8 p2, UINT8 p3, UINT8 p4 )
+{
+    vsc_for_pcm_config[0] = p0;
+    vsc_for_pcm_config[1] = p1;
+    vsc_for_pcm_config[2] = p2;
+    vsc_for_pcm_config[3] = p3;
+    vsc_for_pcm_config[4] = p4;
+}
+
+void SetScoConf( UINT8 p0, UINT8 p1, UINT8 p2, UINT8 p3, UINT8 p4 )
+{
+    vsc_for_sco_pcm[0] = p0;
+    vsc_for_sco_pcm[1] = p1;
+    vsc_for_sco_pcm[2] = p2;
+    vsc_for_sco_pcm[3] = p3;
+    vsc_for_sco_pcm[4] = p4;
+}
+
+void HCILP_Enable(BOOLEAN on)
+{
+    fprintf(stderr,"Set Low Power mode %d\n",on);
+    UINT8 data[HCI_BRCM_WRITE_SLEEP_MODE_LENGTH] = {
+    0x01,                        /* Sleep Mode algorithm 1 */
+    HCILP_IDLE_THRESHOLD,        /* Host Idle Treshold in 300ms */
+    HCILP_HC_IDLE_THRESHOLD,     /* Host Controller Idle Treshold in 300ms */ /* this should be less than scan interval.*/
+    HCILP_BT_WAKE_POLARITY,      /* BT_WAKE Polarity - 0=Active Low, 1= Active High*/
+    HCILP_HOST_WAKE_POLARITY,    /* HOST_WAKE Polarity - 0=Active Low, 1= Active High */
+    0x01,                        /* Allow host Sleep during SCO */
+    0x01,                        /* Combine Sleep Mode and LPM - The device will not sleep in mode 0 if this flag is set to 1,*/
+    0x00,                        /* UART_TXD Tri-State : 0x00 = Do not tri-state UART_TXD in sleep mode */
+    0x00,                        /* NA to Mode 1 */
+    0x00,                        /* NA to Mode 1 */
+    };
+
+    if(on)
+    {
+        data[0] = 0x01;
+    }
+    else
+    {
+        data[0] = 0x00;
+    }
+
+    SendCommand(HCI_BRCM_WRITE_SLEEP_MODE, HCI_BRCM_WRITE_SLEEP_MODE_LENGTH, (UINT8 *)data);
+    read_event(fd, buffer);
+}
+
+UINT32 uart_speed(UINT32 Speed)
+{
+	switch (Speed) 
+	{
+	case 115200:
+		return B115200;
+	case 230400:
+		return B230400;
+	case 460800:
+		return B460800;
+	case 921600:
+		return B921600;
+	case 1000000:
+		return B1000000;
+	case 1500000:
+		return B1500000;
+	case 2000000:
+		return B2000000;
+	case 2500000:
+		return B2500000;
+	case 3000000:
+		return B3000000;
+	case 4000000:
+		return B4000000;
+	default:
+		return B115200;
+	}
+}
+
+void ChangeBaudRate(UINT32 baudrate)
+{
+    UINT8 hci_data[HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
+    UINT8 uart_clock_24 = 0x2;    /* 0x1 - UART Clock 48MHz, 0x2 - UART Clock 24MHz */    
+    UINT8 uart_clock_48 = 0x1;    /* 0x1 - UART Clock 48MHz, 0x2 - UART Clock 24MHz */
+
+    switch(baudrate)
+    {
+        case 115200:
+        case 230400:
+        case 460800:
+        case 921600:
+        case 1000000:
+        case 1500000:
+        case 2000000:
+        case 2500000:
+            /* Write UART Clock setting of 24MHz */
+            DEBUG0( "Change UART_CLOCK 24Mhz\n");    
+            SendCommand( VSC_WRITE_UART_CLOCK_SETTING, VSC_WRITE_UART_CLOCK_SETTING_LEN, (UINT8 *)&uart_clock_24);
+            read_event(fd, buffer);        
+            break;        
+
+        case 3000000:
+        case 4000000:
+            /* Write UART Clock setting of 48MHz */
+            DEBUG0( "Change UART_CLOCK 48Mh\nz");    
+            SendCommand( VSC_WRITE_UART_CLOCK_SETTING, VSC_WRITE_UART_CLOCK_SETTING_LEN, (UINT8 *)&uart_clock_48);
+            read_event(fd, buffer);        
+            break;
+            
+        default:
+            fprintf(stderr,"Not Support baudrate = %ld\n", baudrate);
+            exit_err(1);
+            break;
+    }
+
+    hci_data[2] = baudrate & 0xFF;
+    hci_data[3] = (baudrate >> 8) & 0xFF;
+    hci_data[4] = (baudrate >> 16) & 0xFF;
+    hci_data[5] = (baudrate >> 24) & 0xFF;
+    
+    DEBUG1( "Change Baudrate %ld\n",baudrate);    
+
+    SendCommand( HCI_BRCM_UPDATE_BAUDRATE_CMD, HCI_BRCM_UPDATE_BAUD_RATE_UNENCODED_LENGTH, (UINT8 *)hci_data);
+    read_event(fd, buffer);
+
+    
+    tcflush(fd, TCIOFLUSH);
+    tcgetattr(fd, &termios);
+    cfmakeraw(&termios);
+    termios.c_cflag |= CRTSCTS;
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcflush(fd, TCIOFLUSH);
+    cfsetospeed(&termios, uart_speed(baudrate));
+    cfsetispeed(&termios, uart_speed(baudrate));
+    tcsetattr(fd, TCSANOW, &termios);
+
+}
+
+void EnableTestMode(void)
+{
+    UINT8 filter_data[] = { 0x02, 0x00, 0x02 };
+    
+    /* bt sleep  disable */
+    HCILP_Enable(FALSE);
+
+    /* Enable both Inquiry & Page Scans */
+    SetScanEnable();
+
+    /* Set Event Filter: Enable Auto Connect */
+    SendCommand( HCI_SET_EVENT_FILTER, 0x03, (UINT8 *)filter_data);
+    read_event(fd, buffer);
+
+    /* Enable Device under test */
+    SendCommand( HCI_ENABLE_DEV_UNDER_TEST_MODE, 0x0, NULL);
+    read_event(fd, buffer);
+
+    fprintf(stderr,"Enable Device Under Test\n");
+}
+
+void SetLocalFeatures(void)
+{
+    UINT8  *data = NULL;
+
+    DEBUG0("Read Local Feature\n");    
+    SendCommand(HCI_READ_LOCAL_FEATURES, 0, NULL);
+    read_event(fd, buffer);
+
+    data = &buffer[7];
+
+#if (BCM_DISABLE_RF_PWRCTRL == TRUE)
+    fprintf(stderr,"Remove Power Control\n");
+    data[2] &= 0xFB;    /* Power contrel */
+#endif
+    DEBUG0("Write Local Feature\n");    
+    SendCommand(VSC_HCI_CMD_SET_LOC_FEATURES_CMD, 0x08, (UINT8 *)data);
+    read_event(fd, buffer);
+}
+
+void EnbleHCI(void)
+{
+    int i = N_HCI;
+    int proto = HCI_UART_H4;
+
+    if (ioctl(fd, TIOCSETD, &i) < 0) 
+    {
+        fprintf(stderr, "Can't set line discipline\n");
+        return;
+    }
+    
+    if (ioctl(fd, HCIUARTSETPROTO, proto) < 0) 
+    {
+        fprintf(stderr, "Can't set hci protocol\n");
+        return;
+    }
+    fprintf(stderr, "Done setting line discpline\n");
+    return;
+    
+}
+void print_usage( void )
+{
+    fprintf(stderr,"\n");
+    fprintf(stderr,"BRCM BT tool for Linux    release %s\n",RELEASE_DATE);
+    fprintf(stderr,"\n");
+    fprintf(stderr," Usage: bcmtool <tty Device> <command> [command parameter],....\n\n");    
+    fprintf(stderr,"  -FILE    Patchram file name     EX) -FILE=BCM43xx_xxx.hcd\n");
+    fprintf(stderr,"  -BAUD    Set Baudrate           EX) -BAUD=3000000\n");
+    fprintf(stderr,"  -ADDR    BD addr file name      EX) -ADDR=.bdaddr\n");
+    fprintf(stderr,"  -SCO     Enable SCO/PCM config  EX) -SCO\n");
+    fprintf(stderr,"  -SETSCO  SCO/PCM values verify  EX) -SETSCO=0,1,0,1,1,0,0,3,3,0\n");
+    fprintf(stderr,"  -LP      Enable Low power       EX) -LP\n");
+    fprintf(stderr,"  -FEATURE Set local Feature      EX) -FEATURE\n");
+    fprintf(stderr,"  -DUT     Enable DUT mode(do not use with -LP) EX) -DUT\n");
+    fprintf(stderr,"  -ATTACH  Attach BT controller to BlueZ stack  EX) -ATTACH\n");    
+    fprintf(stderr,"  -DEBUG   Debug message          EX) -DEBUG\n");
+    fprintf(stderr,"\n");
+}
+
+int main(int argc, char *argv[])
+{
+    UINT8 i = 0;
+    
+    if (argc < 2) 
+    {
+        print_usage();
+        exit(1);
+    }
+    else
+    {
+        fprintf(stderr,"BRCM BT tool for Linux    release %s\n",RELEASE_DATE);
+    }
+    
+    /* Open dev port */
+    if ((fd = open(argv[1], O_RDWR | O_NOCTTY)) == -1) 
+    {
+        fprintf(stderr, "port %s could not be opened, error %d\n", argv[1], errno);
+        exit(2);
+    }
+    
+    tcflush(fd, TCIOFLUSH);
+    tcgetattr(fd, &termios);
+    cfmakeraw(&termios);
+    termios.c_cflag |= CRTSCTS;
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcsetattr(fd, TCSANOW, &termios);
+    tcflush(fd, TCIOFLUSH);
+    tcflush(fd, TCIOFLUSH);
+    cfsetospeed(&termios, B115200);
+    cfsetispeed(&termios, B115200);
+    tcsetattr(fd, TCSANOW, &termios);
+    
+    signal(SIGALRM, expired);
+
+    for( i=2; i<argc; i++ )
+    {
+        char *ptr = argv[i];
+
+        if( strstr(ptr,"-DEBUG") )
+        {
+            debug_mode = TRUE;
+            DEBUG0("DEBUG On\n");
+            break;
+        }
+    }
+    
+    for( i=2; i<argc; i++ )
+    {
+        char *ptr = argv[i];
+	
+	if(ptr == NULL)
+		continue;
+	
+        fprintf(stderr,"[%d] %s\n", i-1, ptr);
+        
+        if( strstr(ptr,"-FILE=") )
+        {
+            char prm_name[128];
+
+            ptr += 6;
+
+            strncpy(prm_name,ptr, 127);
+            DownloadPatchram( prm_name );
+
+        }
+        else if( strstr(ptr,"-BAUD=") )
+        {
+            UINT32  baudrate;
+
+            ptr += 6;
+            baudrate = atoi(ptr);
+
+            ChangeBaudRate(baudrate);
+        }
+        else if( strstr(ptr,"-ADDR=") )
+        {
+            char *bdaddr_filename;
+            FILE* pFile = NULL;
+
+            int bdaddr[10];         /* Displayed BD Address */
+            
+            BD_ADDR local_addr;       /* BD Address for write */
+
+#if 0            
+            ptr += 6;
+            if( sscanf(ptr,"%02X:%02X:%02X:%02X:%02X:%02X",&bdaddr[0],&bdaddr[1],&bdaddr[2],&bdaddr[3],&bdaddr[4],&bdaddr[5]) != 6 )
+            {
+                fprintf(stderr,"-ADDR: Parameter error");
+                exit_err(1);
+            }
+            bte_write_bdaddr(bdaddr);
+#endif
+            ptr += 6;
+            bdaddr_filename = ptr;
+
+            if(bdaddr_filename)
+            {
+               pFile = fopen(bdaddr_filename, "r");
+            }          
+
+            if(pFile)
+            {
+                char text[BTUI_MAX_STRING_LENGTH_PER_LINE];
+
+                fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE, pFile);
+                sscanf(text,"%02x%02x",&bdaddr[0],&bdaddr[1]);
+
+                fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE, pFile);
+                sscanf(text,"%02x",&bdaddr[2]);
+
+                fgets(text, BTUI_MAX_STRING_LENGTH_PER_LINE, pFile);
+                sscanf(text,"%02x%02x%02x",&bdaddr[3],&bdaddr[4],&bdaddr[5]);
+
+                fprintf(stderr,"Writing B/D Address = %02X:%02X:%02X:%02X:%02X:%02X\n",bdaddr[0],bdaddr[1],bdaddr[2],bdaddr[3],bdaddr[4],bdaddr[5]);
+
+                ROTATE_BD_ADDR(local_addr,bdaddr);
+
+                SendCommand(VSC_WRITE_BD_ADDR, BD_ADDR_LEN, (UINT8 *)local_addr);
+                read_event(fd, buffer);
+            }    
+            else
+            {
+                fprintf(stderr, "-ADDR: file open fail\n");
+                exit_err(1);
+            }
+
+        }
+        else if( strstr(ptr,"-SCO") )
+        {
+            SetAudio();
+        
+        }
+        else if( strstr(ptr,"-SETSCO=") )
+        {
+            ptr += 8;
+            int value[10];
+            
+            if( sscanf(ptr,"%d,%d,%d,%d,%d,%d,%d,%d,%d,%d",&value[0],&value[1],&value[2],&value[3],&value[4],
+                                                           &value[5],&value[6],&value[7],&value[8],&value[9]) != 10 )
+            {
+                DEBUG0("PCM / SCO configuration value err\n");
+                DEBUG0("SCO_Routing,PCM_Interface_Rate,Frame_Type,Sync_Mode,Clock_Mode,LSB_First,Fill_bits,Fill_Method,Fill_Num,Right_Justify\n");
+                exit_err(1);
+            }
+
+            SetScoConf( value[0],value[1],value[2],value[3],value[4] );
+            SetPcmConf( value[5],value[6],value[7],value[8],value[9] );
+            SetAudio();
+        }
+        else if( strstr(ptr,"-LP") )
+        {
+            HCILP_Enable(TRUE);
+        }
+        else if( strstr(ptr,"-DUT") )
+        {
+            EnableTestMode();
+        }
+        else if( strstr(ptr,"-FEATURE") )
+        {
+            SetLocalFeatures();
+        }
+        else if( strstr(ptr,"-ATTACH") )
+        {
+            EnbleHCI();
+            while (1) 
+            {
+                sleep(UINT_MAX);
+            }            
+        }
+        else if( strstr(ptr,"-DEBUG") )
+        {
+
+        }
+        else
+        {
+            fprintf(stderr,"Invalid parameter(s)!\n");
+            exit_err(1);
+        }
+    }
+
+    fprintf(stderr, "EXIT\n");
+    close(fd);
+    exit(0);
+
+    return 0;
+}