drivers/ide/ide-cd.c

   1 /*
   2  * ATAPI CD-ROM driver.
   3  *
   4  * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
   5  * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
   6  * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
   7  * Copyright (C) 2005, 2007  Bartlomiej Zolnierkiewicz
   8  *
   9  * May be copied or modified under the terms of the GNU General Public
  10  * License.  See linux/COPYING for more information.
  11  *
  12  * See Documentation/cdrom/ide-cd for usage information.
  13  *
  14  * Suggestions are welcome. Patches that work are more welcome though. ;-)
  15  * For those wishing to work on this driver, please be sure you download
  16  * and comply with the latest Mt. Fuji (SFF8090 version 4) and ATAPI
  17  * (SFF-8020i rev 2.6) standards. These documents can be obtained by
  18  * anonymous ftp from:
  19  * ftp://fission.dt.wdc.com/pub/standards/SFF_atapi/spec/SFF8020-r2.6/PS/8020r26.ps
  20  * ftp://ftp.avc-pioneer.com/Mtfuji4/Spec/Fuji4r10.pdf
  21  *
  22  * For historical changelog please see:
  23  *      Documentation/ide/ChangeLog.ide-cd.1994-2004
  24  */
  25
  26 #define DRV_NAME "ide-cd"
  27 #define PFX DRV_NAME ": "
  28
  29 #define IDECD_VERSION "5.00"
  30
  31 #include <linux/module.h>
  32 #include <linux/types.h>
  33 #include <linux/kernel.h>
  34 #include <linux/delay.h>
  35 #include <linux/timer.h>
  36 #include <linux/slab.h>
  37 #include <linux/interrupt.h>
  38 #include <linux/errno.h>
  39 #include <linux/cdrom.h>
  40 #include <linux/ide.h>
  41 #include <linux/completion.h>
  42 #include <linux/mutex.h>
  43 #include <linux/bcd.h>
  44
  45 /* For SCSI -> ATAPI command conversion */
  46 #include <scsi/scsi.h>
  47
  48 #include <linux/irq.h>
  49 #include <linux/io.h>
  50 #include <asm/byteorder.h>
  51 #include <linux/uaccess.h>
  52 #include <asm/unaligned.h>
  53
  54 #include "ide-cd.h"
  55
  56 #define IDECD_DEBUG_LOG         1
  57
  58 #if IDECD_DEBUG_LOG
  59 #define ide_debug_log(lvl, fmt, args...) __ide_debug_log(lvl, fmt, args)
  60 #else
  61 #define ide_debug_log(lvl, fmt, args...) do {} while (0)
  62 #endif
  63
  64 static DEFINE_MUTEX(idecd_ref_mutex);
  65
  66 static void ide_cd_release(struct kref *);
  67
  68 static struct cdrom_info *ide_cd_get(struct gendisk *disk)
  69 {
  70         struct cdrom_info *cd = NULL;
  71
  72         mutex_lock(&idecd_ref_mutex);
  73         cd = ide_drv_g(disk, cdrom_info);
  74         if (cd) {
  75                 if (ide_device_get(cd->drive))
  76                         cd = NULL;
  77                 else
  78                         kref_get(&cd->kref);
  79
  80         }
  81         mutex_unlock(&idecd_ref_mutex);
  82         return cd;
  83 }
  84
  85 static void ide_cd_put(struct cdrom_info *cd)
  86 {
  87         ide_drive_t *drive = cd->drive;
  88
  89         mutex_lock(&idecd_ref_mutex);
  90         kref_put(&cd->kref, ide_cd_release);
  91         ide_device_put(drive);
  92         mutex_unlock(&idecd_ref_mutex);
  93 }
  94
  95 /*
  96  * Generic packet command support and error handling routines.
  97  */
  98
  99 /* Mark that we've seen a media change and invalidate our internal buffers. */
 100 static void cdrom_saw_media_change(ide_drive_t *drive)
 101 {
 102         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
 103         drive->atapi_flags &= ~IDE_AFLAG_TOC_VALID;
 104 }
 105
 106 static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
 107                            struct request_sense *sense)
 108 {
 109         int log = 0;
 110
 111         ide_debug_log(IDE_DBG_SENSE, "Call %s, sense_key: 0x%x\n", __func__,
 112                       sense->sense_key);
 113
 114         if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
 115                 return 0;
 116
 117         switch (sense->sense_key) {
 118         case NO_SENSE:
 119         case RECOVERED_ERROR:
 120                 break;
 121         case NOT_READY:
 122                 /*
 123                  * don't care about tray state messages for e.g. capacity
 124                  * commands or in-progress or becoming ready
 125                  */
 126                 if (sense->asc == 0x3a || sense->asc == 0x04)
 127                         break;
 128                 log = 1;
 129                 break;
 130         case ILLEGAL_REQUEST:
 131                 /*
 132                  * don't log START_STOP unit with LoEj set, since we cannot
 133                  * reliably check if drive can auto-close
 134                  */
 135                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
 136                         break;
 137                 log = 1;
 138                 break;
 139         case UNIT_ATTENTION:
 140                 /*
 141                  * Make good and sure we've seen this potential media change.
 142                  * Some drives (i.e. Creative) fail to present the correct sense
 143                  * key in the error register.
 144                  */
 145                 cdrom_saw_media_change(drive);
 146                 break;
 147         default:
 148                 log = 1;
 149                 break;
 150         }
 151         return log;
 152 }
 153
 154 static void cdrom_analyze_sense_data(ide_drive_t *drive,
 155                               struct request *failed_command,
 156                               struct request_sense *sense)
 157 {
 158         unsigned long sector;
 159         unsigned long bio_sectors;
 160         struct cdrom_info *info = drive->driver_data;
 161
 162         ide_debug_log(IDE_DBG_SENSE, "Call %s, error_code: 0x%x, "
 163                         "sense_key: 0x%x\n", __func__, sense->error_code,
 164                         sense->sense_key);
 165
 166         if (failed_command)
 167                 ide_debug_log(IDE_DBG_SENSE, "%s: failed cmd: 0x%x\n",
 168                                 __func__, failed_command->cmd[0]);
 169
 170         if (!cdrom_log_sense(drive, failed_command, sense))
 171                 return;
 172
 173         /*
 174          * If a read toc is executed for a CD-R or CD-RW medium where the first
 175          * toc has not been recorded yet, it will fail with 05/24/00 (which is a
 176          * confusing error)
 177          */
 178         if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
 179                 if (sense->sense_key == 0x05 && sense->asc == 0x24)
 180                         return;
 181
 182         /* current error */
 183         if (sense->error_code == 0x70) {
 184                 switch (sense->sense_key) {
 185                 case MEDIUM_ERROR:
 186                 case VOLUME_OVERFLOW:
 187                 case ILLEGAL_REQUEST:
 188                         if (!sense->valid)
 189                                 break;
 190                         if (failed_command == NULL ||
 191                                         !blk_fs_request(failed_command))
 192                                 break;
 193                         sector = (sense->information[0] << 24) |
 194                                  (sense->information[1] << 16) |
 195                                  (sense->information[2] <<  8) |
 196                                  (sense->information[3]);
 197
 198                         if (drive->queue->hardsect_size == 2048)
 199                                 /* device sector size is 2K */
 200                                 sector <<= 2;
 201
 202                         bio_sectors = max(bio_sectors(failed_command->bio), 4U);
 203                         sector &= ~(bio_sectors - 1);
 204
 205                         if (sector < get_capacity(info->disk) &&
 206                             drive->probed_capacity - sector < 4 * 75)
 207                                 set_capacity(info->disk, sector);
 208                 }
 209         }
 210
 211         ide_cd_log_error(drive->name, failed_command, sense);
 212 }
 213
 214 static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
 215                                       struct request *failed_command)
 216 {
 217         struct cdrom_info *info         = drive->driver_data;
 218         struct request *rq              = &info->request_sense_request;
 219
 220         ide_debug_log(IDE_DBG_SENSE, "Call %s\n", __func__);
 221
 222         if (sense == NULL)
 223                 sense = &info->sense_data;
 224
 225         /* stuff the sense request in front of our current request */
 226         blk_rq_init(NULL, rq);
 227         rq->cmd_type = REQ_TYPE_ATA_PC;
 228         rq->rq_disk = info->disk;
 229
 230         rq->data = sense;
 231         rq->cmd[0] = GPCMD_REQUEST_SENSE;
 232         rq->cmd[4] = 18;
 233         rq->data_len = 18;
 234
 235         rq->cmd_type = REQ_TYPE_SENSE;
 236         rq->cmd_flags |= REQ_PREEMPT;
 237
 238         /* NOTE! Save the failed command in "rq->buffer" */
 239         rq->buffer = (void *) failed_command;
 240
 241         if (failed_command)
 242                 ide_debug_log(IDE_DBG_SENSE, "failed_cmd: 0x%x\n",
 243                               failed_command->cmd[0]);
 244
 245         ide_do_drive_cmd(drive, rq);
 246 }
 247
 248 static void cdrom_end_request(ide_drive_t *drive, int uptodate)
 249 {
 250         struct request *rq = HWGROUP(drive)->rq;
 251         int nsectors = rq->hard_cur_sectors;
 252
 253         ide_debug_log(IDE_DBG_FUNC, "Call %s, cmd: 0x%x, uptodate: 0x%x, "
 254                       "nsectors: %d\n", __func__, rq->cmd[0], uptodate,
 255                       nsectors);
 256
 257         if (blk_sense_request(rq) && uptodate) {
 258                 /*
 259                  * For REQ_TYPE_SENSE, "rq->buffer" points to the original
 260                  * failed request
 261                  */
 262                 struct request *failed = (struct request *) rq->buffer;
 263                 struct cdrom_info *info = drive->driver_data;
 264                 void *sense = &info->sense_data;
 265                 unsigned long flags;
 266
 267                 if (failed) {
 268                         if (failed->sense) {
 269                                 sense = failed->sense;
 270                                 failed->sense_len = rq->sense_len;
 271                         }
 272                         cdrom_analyze_sense_data(drive, failed, sense);
 273                         /*
 274                          * now end the failed request
 275                          */
 276                         if (blk_fs_request(failed)) {
 277                                 if (ide_end_dequeued_request(drive, failed, 0,
 278                                                 failed->hard_nr_sectors))
 279                                         BUG();
 280                         } else {
 281                                 spin_lock_irqsave(&ide_lock, flags);
 282                                 if (__blk_end_request(failed, -EIO,
 283                                                       failed->data_len))
 284                                         BUG();
 285                                 spin_unlock_irqrestore(&ide_lock, flags);
 286                         }
 287                 } else
 288                         cdrom_analyze_sense_data(drive, NULL, sense);
 289         }
 290
 291         if (!rq->current_nr_sectors && blk_fs_request(rq))
 292                 uptodate = 1;
 293         /* make sure it's fully ended */
 294         if (blk_pc_request(rq))
 295                 nsectors = (rq->data_len + 511) >> 9;
 296         if (!nsectors)
 297                 nsectors = 1;
 298
 299         ide_debug_log(IDE_DBG_FUNC, "Exit %s, uptodate: 0x%x, nsectors: %d\n",
 300                       __func__, uptodate, nsectors);
 301
 302         ide_end_request(drive, uptodate, nsectors);
 303 }
 304
 305 static void ide_dump_status_no_sense(ide_drive_t *drive, const char *msg, u8 st)
 306 {
 307         if (st & 0x80)
 308                 return;
 309         ide_dump_status(drive, msg, st);
 310 }
 311
 312 /*
 313  * Returns:
 314  * 0: if the request should be continued.
 315  * 1: if the request was ended.
 316  */
 317 static int cdrom_decode_status(ide_drive_t *drive, int good_stat, int *stat_ret)
 318 {
 319         ide_hwif_t *hwif = drive->hwif;
 320         struct request *rq = hwif->hwgroup->rq;
 321         int stat, err, sense_key;
 322
 323         /* check for errors */
 324         stat = hwif->tp_ops->read_status(hwif);
 325
 326         if (stat_ret)
 327                 *stat_ret = stat;
 328
 329         if (OK_STAT(stat, good_stat, BAD_R_STAT))
 330                 return 0;
 331
 332         /* get the IDE error register */
 333         err = ide_read_error(drive);
 334         sense_key = err >> 4;
 335
 336         if (rq == NULL) {
 337                 printk(KERN_ERR PFX "%s: missing rq in %s\n",
 338                                 drive->name, __func__);
 339                 return 1;
 340         }
 341
 342         ide_debug_log(IDE_DBG_RQ, "%s: stat: 0x%x, good_stat: 0x%x, "
 343                       "rq->cmd[0]: 0x%x, rq->cmd_type: 0x%x, err: 0x%x\n",
 344                       __func__, stat, good_stat, rq->cmd[0], rq->cmd_type, err);
 345
 346         if (blk_sense_request(rq)) {
 347                 /*
 348                  * We got an error trying to get sense info from the drive
 349                  * (probably while trying to recover from a former error).
 350                  * Just give up.
 351                  */
 352                 rq->cmd_flags |= REQ_FAILED;
 353                 cdrom_end_request(drive, 0);
 354                 ide_error(drive, "request sense failure", stat);
 355                 return 1;
 356
 357         } else if (blk_pc_request(rq) || rq->cmd_type == REQ_TYPE_ATA_PC) {
 358                 /* All other functions, except for READ. */
 359
 360                 /*
 361                  * if we have an error, pass back CHECK_CONDITION as the
 362                  * scsi status byte
 363                  */
 364                 if (blk_pc_request(rq) && !rq->errors)
 365                         rq->errors = SAM_STAT_CHECK_CONDITION;
 366
 367                 /* check for tray open */
 368                 if (sense_key == NOT_READY) {
 369                         cdrom_saw_media_change(drive);
 370                 } else if (sense_key == UNIT_ATTENTION) {
 371                         /* check for media change */
 372                         cdrom_saw_media_change(drive);
 373                         return 0;
 374                 } else if (sense_key == ILLEGAL_REQUEST &&
 375                            rq->cmd[0] == GPCMD_START_STOP_UNIT) {
 376                         /*
 377                          * Don't print error message for this condition--
 378                          * SFF8090i indicates that 5/24/00 is the correct
 379                          * response to a request to close the tray if the
 380                          * drive doesn't have that capability.
 381                          * cdrom_log_sense() knows this!
 382                          */
 383                 } else if (!(rq->cmd_flags & REQ_QUIET)) {
 384                         /* otherwise, print an error */
 385                         ide_dump_status(drive, "packet command error", stat);
 386                 }
 387
 388                 rq->cmd_flags |= REQ_FAILED;
 389
 390                 /*
 391                  * instead of playing games with moving completions around,
 392                  * remove failed request completely and end it when the
 393                  * request sense has completed
 394                  */
 395                 goto end_request;
 396
 397         } else if (blk_fs_request(rq)) {
 398                 int do_end_request = 0;
 399
 400                 /* handle errors from READ and WRITE requests */
 401
 402                 if (blk_noretry_request(rq))
 403                         do_end_request = 1;
 404
 405                 if (sense_key == NOT_READY) {
 406                         /* tray open */
 407                         if (rq_data_dir(rq) == READ) {
 408                                 cdrom_saw_media_change(drive);
 409
 410                                 /* fail the request */
 411                                 printk(KERN_ERR PFX "%s: tray open\n",
 412                                                 drive->name);
 413                                 do_end_request = 1;
 414                         } else {
 415                                 struct cdrom_info *info = drive->driver_data;
 416
 417                                 /*
 418                                  * Allow the drive 5 seconds to recover, some
 419                                  * devices will return this error while flushing
 420                                  * data from cache.
 421                                  */
 422                                 if (!rq->errors)
 423                                         info->write_timeout = jiffies +
 424                                                         ATAPI_WAIT_WRITE_BUSY;
 425                                 rq->errors = 1;
 426                                 if (time_after(jiffies, info->write_timeout))
 427                                         do_end_request = 1;
 428                                 else {
 429                                         unsigned long flags;
 430
 431                                         /*
 432                                          * take a breather relying on the unplug
 433                                          * timer to kick us again
 434                                          */
 435                                         spin_lock_irqsave(&ide_lock, flags);
 436                                         blk_plug_device(drive->queue);
 437                                         spin_unlock_irqrestore(&ide_lock,
 438                                                                 flags);
 439                                         return 1;
 440                                 }
 441                         }
 442                 } else if (sense_key == UNIT_ATTENTION) {
 443                         /* media change */
 444                         cdrom_saw_media_change(drive);
 445
 446                         /*
 447                          * Arrange to retry the request but be sure to give up
 448                          * if we've retried too many times.
 449                          */
 450                         if (++rq->errors > ERROR_MAX)
 451                                 do_end_request = 1;
 452                 } else if (sense_key == ILLEGAL_REQUEST ||
 453                            sense_key == DATA_PROTECT) {
 454                         /*
 455                          * No point in retrying after an illegal request or data
 456                          * protect error.
 457                          */
 458                         ide_dump_status_no_sense(drive, "command error", stat);
 459                         do_end_request = 1;
 460                 } else if (sense_key == MEDIUM_ERROR) {
 461                         /*
 462                          * No point in re-trying a zillion times on a bad
 463                          * sector. If we got here the error is not correctable.
 464                          */
 465                         ide_dump_status_no_sense(drive,
 466                                                  "media error (bad sector)",
 467                                                  stat);
 468                         do_end_request = 1;
 469                 } else if (sense_key == BLANK_CHECK) {
 470                         /* disk appears blank ?? */
 471                         ide_dump_status_no_sense(drive, "media error (blank)",
 472                                                  stat);
 473                         do_end_request = 1;
 474                 } else if ((err & ~ATA_ABORTED) != 0) {
 475                         /* go to the default handler for other errors */
 476                         ide_error(drive, "cdrom_decode_status", stat);
 477                         return 1;
 478                 } else if ((++rq->errors > ERROR_MAX)) {
 479                         /* we've racked up too many retries, abort */
 480                         do_end_request = 1;
 481                 }
 482
 483                 /*
 484                  * End a request through request sense analysis when we have
 485                  * sense data. We need this in order to perform end of media
 486                  * processing.
 487                  */
 488                 if (do_end_request)
 489                         goto end_request;
 490
 491                 /*
 492                  * If we got a CHECK_CONDITION status, queue
 493                  * a request sense command.
 494                  */
 495                 if (stat & ATA_ERR)
 496                         cdrom_queue_request_sense(drive, NULL, NULL);
 497         } else {
 498                 blk_dump_rq_flags(rq, PFX "bad rq");
 499                 cdrom_end_request(drive, 0);
 500         }
 501
 502         /* retry, or handle the next request */
 503         return 1;
 504
 505 end_request:
 506         if (stat & ATA_ERR) {
 507                 unsigned long flags;
 508
 509                 spin_lock_irqsave(&ide_lock, flags);
 510                 blkdev_dequeue_request(rq);
 511                 HWGROUP(drive)->rq = NULL;
 512                 spin_unlock_irqrestore(&ide_lock, flags);
 513
 514                 cdrom_queue_request_sense(drive, rq->sense, rq);
 515         } else
 516                 cdrom_end_request(drive, 0);
 517
 518         return 1;
 519 }
 520
 521 static int cdrom_timer_expiry(ide_drive_t *drive)
 522 {
 523         struct request *rq = HWGROUP(drive)->rq;
 524         unsigned long wait = 0;
 525
 526         ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd[0]: 0x%x\n", __func__,
 527                       rq->cmd[0]);
 528
 529         /*
 530          * Some commands are *slow* and normally take a long time to complete.
 531          * Usually we can use the ATAPI "disconnect" to bypass this, but not all
 532          * commands/drives support that. Let ide_timer_expiry keep polling us
 533          * for these.
 534          */
 535         switch (rq->cmd[0]) {
 536         case GPCMD_BLANK:
 537         case GPCMD_FORMAT_UNIT:
 538         case GPCMD_RESERVE_RZONE_TRACK:
 539         case GPCMD_CLOSE_TRACK:
 540         case GPCMD_FLUSH_CACHE:
 541                 wait = ATAPI_WAIT_PC;
 542                 break;
 543         default:
 544                 if (!(rq->cmd_flags & REQ_QUIET))
 545                         printk(KERN_INFO PFX "cmd 0x%x timed out\n",
 546                                          rq->cmd[0]);
 547                 wait = 0;
 548                 break;
 549         }
 550         return wait;
 551 }
 552
 553 /*
 554  * Set up the device registers for transferring a packet command on DEV,
 555  * expecting to later transfer XFERLEN bytes.  HANDLER is the routine
 556  * which actually transfers the command to the drive.  If this is a
 557  * drq_interrupt device, this routine will arrange for HANDLER to be
 558  * called when the interrupt from the drive arrives.  Otherwise, HANDLER
 559  * will be called immediately after the drive is prepared for the transfer.
 560  */
 561 static ide_startstop_t cdrom_start_packet_command(ide_drive_t *drive,
 562                                                   int xferlen,
 563                                                   ide_handler_t *handler)
 564 {
 565         ide_hwif_t *hwif = drive->hwif;
 566
 567         ide_debug_log(IDE_DBG_PC, "Call %s, xferlen: %d\n", __func__, xferlen);
 568
 569         /* FIXME: for Virtual DMA we must check harder */
 570         if (drive->dma)
 571                 drive->dma = !hwif->dma_ops->dma_setup(drive);
 572
 573         /* set up the controller registers */
 574         ide_pktcmd_tf_load(drive, IDE_TFLAG_OUT_NSECT | IDE_TFLAG_OUT_LBAL,
 575                            xferlen, drive->dma);
 576
 577         if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
 578                 /* waiting for CDB interrupt, not DMA yet. */
 579                 if (drive->dma)
 580                         drive->waiting_for_dma = 0;
 581
 582                 /* packet command */
 583                 ide_execute_command(drive, ATA_CMD_PACKET, handler,
 584                                     ATAPI_WAIT_PC, cdrom_timer_expiry);
 585                 return ide_started;
 586         } else {
 587                 ide_execute_pkt_cmd(drive);
 588
 589                 return (*handler) (drive);
 590         }
 591 }
 592
 593 /*
 594  * Send a packet command to DRIVE described by CMD_BUF and CMD_LEN. The device
 595  * registers must have already been prepared by cdrom_start_packet_command.
 596  * HANDLER is the interrupt handler to call when the command completes or
 597  * there's data ready.
 598  */
 599 #define ATAPI_MIN_CDB_BYTES 12
 600 static ide_startstop_t cdrom_transfer_packet_command(ide_drive_t *drive,
 601                                           struct request *rq,
 602                                           ide_handler_t *handler)
 603 {
 604         ide_hwif_t *hwif = drive->hwif;
 605         int cmd_len;
 606         ide_startstop_t startstop;
 607
 608         ide_debug_log(IDE_DBG_PC, "Call %s\n", __func__);
 609
 610         if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
 611                 /*
 612                  * Here we should have been called after receiving an interrupt
 613                  * from the device.  DRQ should how be set.
 614                  */
 615
 616                 /* check for errors */
 617                 if (cdrom_decode_status(drive, ATA_DRQ, NULL))
 618                         return ide_stopped;
 619
 620                 /* ok, next interrupt will be DMA interrupt */
 621                 if (drive->dma)
 622                         drive->waiting_for_dma = 1;
 623         } else {
 624                 /* otherwise, we must wait for DRQ to get set */
 625                 if (ide_wait_stat(&startstop, drive, ATA_DRQ,
 626                                   ATA_BUSY, WAIT_READY))
 627                         return startstop;
 628         }
 629
 630         /* arm the interrupt handler */
 631         ide_set_handler(drive, handler, rq->timeout, cdrom_timer_expiry);
 632
 633         /* ATAPI commands get padded out to 12 bytes minimum */
 634         cmd_len = COMMAND_SIZE(rq->cmd[0]);
 635         if (cmd_len < ATAPI_MIN_CDB_BYTES)
 636                 cmd_len = ATAPI_MIN_CDB_BYTES;
 637
 638         /* send the command to the device */
 639         hwif->tp_ops->output_data(drive, NULL, rq->cmd, cmd_len);
 640
 641         /* start the DMA if need be */
 642         if (drive->dma)
 643                 hwif->dma_ops->dma_start(drive);
 644
 645         return ide_started;
 646 }
 647
 648 /*
 649  * Check the contents of the interrupt reason register from the cdrom
 650  * and attempt to recover if there are problems.  Returns  0 if everything's
 651  * ok; nonzero if the request has been terminated.
 652  */
 653 static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
 654                                 int len, int ireason, int rw)
 655 {
 656         ide_hwif_t *hwif = drive->hwif;
 657
 658         ide_debug_log(IDE_DBG_FUNC, "Call %s, ireason: 0x%x, rw: 0x%x\n",
 659                       __func__, ireason, rw);
 660
 661         /*
 662          * ireason == 0: the drive wants to receive data from us
 663          * ireason == 2: the drive is expecting to transfer data to us
 664          */
 665         if (ireason == (!rw << 1))
 666                 return 0;
 667         else if (ireason == (rw << 1)) {
 668
 669                 /* whoops... */
 670                 printk(KERN_ERR PFX "%s: %s: wrong transfer direction!\n",
 671                                 drive->name, __func__);
 672
 673                 ide_pad_transfer(drive, rw, len);
 674         } else  if (rw == 0 && ireason == 1) {
 675                 /*
 676                  * Some drives (ASUS) seem to tell us that status info is
 677                  * available.  Just get it and ignore.
 678                  */
 679                 (void)hwif->tp_ops->read_status(hwif);
 680                 return 0;
 681         } else {
 682                 /* drive wants a command packet, or invalid ireason... */
 683                 printk(KERN_ERR PFX "%s: %s: bad interrupt reason 0x%02x\n",
 684                                 drive->name, __func__, ireason);
 685         }
 686
 687         if (rq->cmd_type == REQ_TYPE_ATA_PC)
 688                 rq->cmd_flags |= REQ_FAILED;
 689
 690         cdrom_end_request(drive, 0);
 691         return -1;
 692 }
 693
 694 /*
 695  * Assume that the drive will always provide data in multiples of at least
 696  * SECTOR_SIZE, as it gets hairy to keep track of the transfers otherwise.
 697  */
 698 static int ide_cd_check_transfer_size(ide_drive_t *drive, int len)
 699 {
 700         ide_debug_log(IDE_DBG_FUNC, "Call %s, len: %d\n", __func__, len);
 701
 702         if ((len % SECTOR_SIZE) == 0)
 703                 return 0;
 704
 705         printk(KERN_ERR PFX "%s: %s: Bad transfer size %d\n", drive->name,
 706                         __func__, len);
 707
 708         if (drive->atapi_flags & IDE_AFLAG_LIMIT_NFRAMES)
 709                 printk(KERN_ERR PFX "This drive is not supported by this "
 710                                 "version of the driver\n");
 711         else {
 712                 printk(KERN_ERR PFX "Trying to limit transfer sizes\n");
 713                 drive->atapi_flags |= IDE_AFLAG_LIMIT_NFRAMES;
 714         }
 715
 716         return 1;
 717 }
 718
 719 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *);
 720
 721 static ide_startstop_t ide_cd_prepare_rw_request(ide_drive_t *drive,
 722                                                  struct request *rq)
 723 {
 724         ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd_flags: 0x%x\n", __func__,
 725                       rq->cmd_flags);
 726
 727         if (rq_data_dir(rq) == READ) {
 728                 unsigned short sectors_per_frame =
 729                         queue_hardsect_size(drive->queue) >> SECTOR_BITS;
 730                 int nskip = rq->sector & (sectors_per_frame - 1);
 731
 732                 /*
 733                  * If the requested sector doesn't start on a frame boundary,
 734                  * we must adjust the start of the transfer so that it does,
 735                  * and remember to skip the first few sectors.
 736                  *
 737                  * If the rq->current_nr_sectors field is larger than the size
 738                  * of the buffer, it will mean that we're to skip a number of
 739                  * sectors equal to the amount by which rq->current_nr_sectors
 740                  * is larger than the buffer size.
 741                  */
 742                 if (nskip > 0) {
 743                         /* sanity check... */
 744                         if (rq->current_nr_sectors !=
 745                             bio_cur_sectors(rq->bio)) {
 746                                 printk(KERN_ERR PFX "%s: %s: buffer botch (%u)\n",
 747                                                 drive->name, __func__,
 748                                                 rq->current_nr_sectors);
 749                                 cdrom_end_request(drive, 0);
 750                                 return ide_stopped;
 751                         }
 752                         rq->current_nr_sectors += nskip;
 753                 }
 754         }
 755
 756         /* set up the command */
 757         rq->timeout = ATAPI_WAIT_PC;
 758
 759         return ide_started;
 760 }
 761
 762 /*
 763  * Routine to send a read/write packet command to the drive. This is usually
 764  * called directly from cdrom_start_{read,write}(). However, for drq_interrupt
 765  * devices, it is called from an interrupt when the drive is ready to accept
 766  * the command.
 767  */
 768 static ide_startstop_t cdrom_start_rw_cont(ide_drive_t *drive)
 769 {
 770         struct request *rq = drive->hwif->hwgroup->rq;
 771
 772         /* send the command to the drive and return */
 773         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
 774 }
 775
 776 #define IDECD_SEEK_THRESHOLD    (1000)                  /* 1000 blocks */
 777 #define IDECD_SEEK_TIMER        (5 * WAIT_MIN_SLEEP)    /* 100 ms */
 778 #define IDECD_SEEK_TIMEOUT      (2 * WAIT_CMD)          /* 20 sec */
 779
 780 static ide_startstop_t cdrom_seek_intr(ide_drive_t *drive)
 781 {
 782         struct cdrom_info *info = drive->driver_data;
 783         int stat;
 784         static int retry = 10;
 785
 786         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
 787
 788         if (cdrom_decode_status(drive, 0, &stat))
 789                 return ide_stopped;
 790
 791         drive->atapi_flags |= IDE_AFLAG_SEEKING;
 792
 793         if (retry && time_after(jiffies, info->start_seek + IDECD_SEEK_TIMER)) {
 794                 if (--retry == 0)
 795                         drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
 796         }
 797         return ide_stopped;
 798 }
 799
 800 static void ide_cd_prepare_seek_request(ide_drive_t *drive, struct request *rq)
 801 {
 802         sector_t frame = rq->sector;
 803
 804         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
 805
 806         sector_div(frame, queue_hardsect_size(drive->queue) >> SECTOR_BITS);
 807
 808         memset(rq->cmd, 0, BLK_MAX_CDB);
 809         rq->cmd[0] = GPCMD_SEEK;
 810         put_unaligned(cpu_to_be32(frame), (unsigned int *) &rq->cmd[2]);
 811
 812         rq->timeout = ATAPI_WAIT_PC;
 813 }
 814
 815 static ide_startstop_t cdrom_start_seek_continuation(ide_drive_t *drive)
 816 {
 817         struct request *rq = drive->hwif->hwgroup->rq;
 818
 819         return cdrom_transfer_packet_command(drive, rq, &cdrom_seek_intr);
 820 }
 821
 822 /*
 823  * Fix up a possibly partially-processed request so that we can start it over
 824  * entirely, or even put it back on the request queue.
 825  */
 826 static void ide_cd_restore_request(ide_drive_t *drive, struct request *rq)
 827 {
 828
 829         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
 830
 831         if (rq->buffer != bio_data(rq->bio)) {
 832                 sector_t n =
 833                         (rq->buffer - (char *)bio_data(rq->bio)) / SECTOR_SIZE;
 834
 835                 rq->buffer = bio_data(rq->bio);
 836                 rq->nr_sectors += n;
 837                 rq->sector -= n;
 838         }
 839         rq->current_nr_sectors = bio_cur_sectors(rq->bio);
 840         rq->hard_cur_sectors = rq->current_nr_sectors;
 841         rq->hard_nr_sectors = rq->nr_sectors;
 842         rq->hard_sector = rq->sector;
 843         rq->q->prep_rq_fn(rq->q, rq);
 844 }
 845
 846 /*
 847  * All other packet commands.
 848  */
 849 static void ide_cd_request_sense_fixup(ide_drive_t *drive, struct request *rq)
 850 {
 851
 852         ide_debug_log(IDE_DBG_FUNC, "Call %s, rq->cmd[0]: 0x%x\n",
 853                       __func__, rq->cmd[0]);
 854
 855         /*
 856          * Some of the trailing request sense fields are optional,
 857          * and some drives don't send them.  Sigh.
 858          */
 859         if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
 860             rq->data_len > 0 && rq->data_len <= 5)
 861                 while (rq->data_len > 0) {
 862                         *(u8 *)rq->data++ = 0;
 863                         --rq->data_len;
 864                 }
 865 }
 866
 867 int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
 868                     int write, void *buffer, unsigned *bufflen,
 869                     struct request_sense *sense, int timeout,
 870                     unsigned int cmd_flags)
 871 {
 872         struct cdrom_info *info = drive->driver_data;
 873         struct request_sense local_sense;
 874         int retries = 10;
 875         unsigned int flags = 0;
 876
 877         if (!sense)
 878                 sense = &local_sense;
 879
 880         ide_debug_log(IDE_DBG_PC, "Call %s, cmd[0]: 0x%x, write: 0x%x, "
 881                       "timeout: %d, cmd_flags: 0x%x\n", __func__, cmd[0], write,
 882                       timeout, cmd_flags);
 883
 884         /* start of retry loop */
 885         do {
 886                 struct request *rq;
 887                 int error;
 888
 889                 rq = blk_get_request(drive->queue, write, __GFP_WAIT);
 890
 891                 memcpy(rq->cmd, cmd, BLK_MAX_CDB);
 892                 rq->cmd_type = REQ_TYPE_ATA_PC;
 893                 rq->sense = sense;
 894                 rq->cmd_flags |= cmd_flags;
 895                 rq->timeout = timeout;
 896                 if (buffer) {
 897                         rq->data = buffer;
 898                         rq->data_len = *bufflen;
 899                 }
 900
 901                 error = blk_execute_rq(drive->queue, info->disk, rq, 0);
 902
 903                 if (buffer)
 904                         *bufflen = rq->data_len;
 905
 906                 flags = rq->cmd_flags;
 907                 blk_put_request(rq);
 908
 909                 /*
 910                  * FIXME: we should probably abort/retry or something in case of
 911                  * failure.
 912                  */
 913                 if (flags & REQ_FAILED) {
 914                         /*
 915                          * The request failed.  Retry if it was due to a unit
 916                          * attention status (usually means media was changed).
 917                          */
 918                         struct request_sense *reqbuf = sense;
 919
 920                         if (reqbuf->sense_key == UNIT_ATTENTION)
 921                                 cdrom_saw_media_change(drive);
 922                         else if (reqbuf->sense_key == NOT_READY &&
 923                                  reqbuf->asc == 4 && reqbuf->ascq != 4) {
 924                                 /*
 925                                  * The drive is in the process of loading
 926                                  * a disk.  Retry, but wait a little to give
 927                                  * the drive time to complete the load.
 928                                  */
 929                                 ssleep(2);
 930                         } else {
 931                                 /* otherwise, don't retry */
 932                                 retries = 0;
 933                         }
 934                         --retries;
 935                 }
 936
 937                 /* end of retry loop */
 938         } while ((flags & REQ_FAILED) && retries >= 0);
 939
 940         /* return an error if the command failed */
 941         return (flags & REQ_FAILED) ? -EIO : 0;
 942 }
 943
 944 /*
 945  * Called from blk_end_request_callback() after the data of the request is
 946  * completed and before the request itself is completed. By returning value '1',
 947  * blk_end_request_callback() returns immediately without completing it.
 948  */
 949 static int cdrom_newpc_intr_dummy_cb(struct request *rq)
 950 {
 951         return 1;
 952 }
 953
 954 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
 955 {
 956         ide_hwif_t *hwif = drive->hwif;
 957         struct request *rq = HWGROUP(drive)->rq;
 958         xfer_func_t *xferfunc;
 959         ide_expiry_t *expiry = NULL;
 960         int dma_error = 0, dma, stat, thislen, uptodate = 0;
 961         int write = (rq_data_dir(rq) == WRITE) ? 1 : 0;
 962         unsigned int timeout;
 963         u16 len;
 964         u8 ireason;
 965
 966         ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x\n",
 967                       __func__, rq->cmd[0], write);
 968
 969         /* check for errors */
 970         dma = drive->dma;
 971         if (dma) {
 972                 drive->dma = 0;
 973                 dma_error = hwif->dma_ops->dma_end(drive);
 974                 if (dma_error) {
 975                         printk(KERN_ERR PFX "%s: DMA %s error\n", drive->name,
 976                                         write ? "write" : "read");
 977                         ide_dma_off(drive);
 978                 }
 979         }
 980
 981         if (cdrom_decode_status(drive, 0, &stat))
 982                 return ide_stopped;
 983
 984         /* using dma, transfer is complete now */
 985         if (dma) {
 986                 if (dma_error)
 987                         return ide_error(drive, "dma error", stat);
 988                 if (blk_fs_request(rq)) {
 989                         ide_end_request(drive, 1, rq->nr_sectors);
 990                         return ide_stopped;
 991                 }
 992                 goto end_request;
 993         }
 994
 995         ide_read_bcount_and_ireason(drive, &len, &ireason);
 996
 997         thislen = blk_fs_request(rq) ? len : rq->data_len;
 998         if (thislen > len)
 999                 thislen = len;
1000
1001         ide_debug_log(IDE_DBG_PC, "%s: DRQ: stat: 0x%x, thislen: %d\n",
1002                       __func__, stat, thislen);
1003
1004         /* If DRQ is clear, the command has completed. */
1005         if ((stat & ATA_DRQ) == 0) {
1006                 if (blk_fs_request(rq)) {
1007                         /*
1008                          * If we're not done reading/writing, complain.
1009                          * Otherwise, complete the command normally.
1010                          */
1011                         uptodate = 1;
1012                         if (rq->current_nr_sectors > 0) {
1013                                 printk(KERN_ERR PFX "%s: %s: data underrun "
1014                                                 "(%d blocks)\n",
1015                                                 drive->name, __func__,
1016                                                 rq->current_nr_sectors);
1017                                 if (!write)
1018                                         rq->cmd_flags |= REQ_FAILED;
1019                                 uptodate = 0;
1020                         }
1021                         cdrom_end_request(drive, uptodate);
1022                         return ide_stopped;
1023                 } else if (!blk_pc_request(rq)) {
1024                         ide_cd_request_sense_fixup(drive, rq);
1025                         /* complain if we still have data left to transfer */
1026                         uptodate = rq->data_len ? 0 : 1;
1027                 }
1028                 goto end_request;
1029         }
1030
1031         /* check which way to transfer data */
1032         if (ide_cd_check_ireason(drive, rq, len, ireason, write))
1033                 return ide_stopped;
1034
1035         if (blk_fs_request(rq)) {
1036                 if (write == 0) {
1037                         int nskip;
1038
1039                         if (ide_cd_check_transfer_size(drive, len)) {
1040                                 cdrom_end_request(drive, 0);
1041                                 return ide_stopped;
1042                         }
1043
1044                         /*
1045                          * First, figure out if we need to bit-bucket
1046                          * any of the leading sectors.
1047                          */
1048                         nskip = min_t(int, rq->current_nr_sectors
1049                                            - bio_cur_sectors(rq->bio),
1050                                            thislen >> 9);
1051                         if (nskip > 0) {
1052                                 ide_pad_transfer(drive, write, nskip << 9);
1053                                 rq->current_nr_sectors -= nskip;
1054                                 thislen -= (nskip << 9);
1055                         }
1056                 }
1057         }
1058
1059         if (ireason == 0) {
1060                 write = 1;
1061                 xferfunc = hwif->tp_ops->output_data;
1062         } else {
1063                 write = 0;
1064                 xferfunc = hwif->tp_ops->input_data;
1065         }
1066
1067         ide_debug_log(IDE_DBG_PC, "%s: data transfer, rq->cmd_type: 0x%x, "
1068                       "ireason: 0x%x\n", __func__, rq->cmd_type, ireason);
1069
1070         /* transfer data */
1071         while (thislen > 0) {
1072                 u8 *ptr = blk_fs_request(rq) ? NULL : rq->data;
1073                 int blen = rq->data_len;
1074
1075                 /* bio backed? */
1076                 if (rq->bio) {
1077                         if (blk_fs_request(rq)) {
1078                                 ptr = rq->buffer;
1079                                 blen = rq->current_nr_sectors << 9;
1080                         } else {
1081                                 ptr = bio_data(rq->bio);
1082                                 blen = bio_iovec(rq->bio)->bv_len;
1083                         }
1084                 }
1085
1086                 if (!ptr) {
1087                         if (blk_fs_request(rq) && !write)
1088                                 /*
1089                                  * If the buffers are full, pipe the rest into
1090                                  * oblivion.
1091                                  */
1092                                 ide_pad_transfer(drive, 0, thislen);
1093                         else {
1094                                 printk(KERN_ERR PFX "%s: confused, missing data\n",
1095                                                 drive->name);
1096                                 blk_dump_rq_flags(rq, rq_data_dir(rq)
1097                                                   ? "cdrom_newpc_intr, write"
1098                                                   : "cdrom_newpc_intr, read");
1099                         }
1100                         break;
1101                 }
1102
1103                 if (blen > thislen)
1104                         blen = thislen;
1105
1106                 xferfunc(drive, NULL, ptr, blen);
1107
1108                 thislen -= blen;
1109                 len -= blen;
1110
1111                 if (blk_fs_request(rq)) {
1112                         rq->buffer += blen;
1113                         rq->nr_sectors -= (blen >> 9);
1114                         rq->current_nr_sectors -= (blen >> 9);
1115                         rq->sector += (blen >> 9);
1116
1117                         if (rq->current_nr_sectors == 0 && rq->nr_sectors)
1118                                 cdrom_end_request(drive, 1);
1119                 } else {
1120                         rq->data_len -= blen;
1121
1122                         /*
1123                          * The request can't be completed until DRQ is cleared.
1124                          * So complete the data, but don't complete the request
1125                          * using the dummy function for the callback feature
1126                          * of blk_end_request_callback().
1127                          */
1128                         if (rq->bio)
1129                                 blk_end_request_callback(rq, 0, blen,
1130                                                  cdrom_newpc_intr_dummy_cb);
1131                         else
1132                                 rq->data += blen;
1133                 }
1134                 if (!write && blk_sense_request(rq))
1135                         rq->sense_len += blen;
1136         }
1137
1138         /* pad, if necessary */
1139         if (!blk_fs_request(rq) && len > 0)
1140                 ide_pad_transfer(drive, write, len);
1141
1142         if (blk_pc_request(rq)) {
1143                 timeout = rq->timeout;
1144         } else {
1145                 timeout = ATAPI_WAIT_PC;
1146                 if (!blk_fs_request(rq))
1147                         expiry = cdrom_timer_expiry;
1148         }
1149
1150         ide_set_handler(drive, cdrom_newpc_intr, timeout, expiry);
1151         return ide_started;
1152
1153 end_request:
1154         if (blk_pc_request(rq)) {
1155                 unsigned long flags;
1156                 unsigned int dlen = rq->data_len;
1157
1158                 if (dma)
1159                         rq->data_len = 0;
1160
1161                 spin_lock_irqsave(&ide_lock, flags);
1162                 if (__blk_end_request(rq, 0, dlen))
1163                         BUG();
1164                 HWGROUP(drive)->rq = NULL;
1165                 spin_unlock_irqrestore(&ide_lock, flags);
1166         } else {
1167                 if (!uptodate)
1168                         rq->cmd_flags |= REQ_FAILED;
1169                 cdrom_end_request(drive, uptodate);
1170         }
1171         return ide_stopped;
1172 }
1173
1174 static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
1175 {
1176         struct cdrom_info *cd = drive->driver_data;
1177         int write = rq_data_dir(rq) == WRITE;
1178         unsigned short sectors_per_frame =
1179                 queue_hardsect_size(drive->queue) >> SECTOR_BITS;
1180
1181         ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x, "
1182                       "secs_per_frame: %u\n",
1183                       __func__, rq->cmd[0], write, sectors_per_frame);
1184
1185         if (write) {
1186                 /* disk has become write protected */
1187                 if (get_disk_ro(cd->disk)) {
1188                         cdrom_end_request(drive, 0);
1189                         return ide_stopped;
1190                 }
1191         } else {
1192                 /*
1193                  * We may be retrying this request after an error.  Fix up any
1194                  * weirdness which might be present in the request packet.
1195                  */
1196                 ide_cd_restore_request(drive, rq);
1197         }
1198
1199         /* use DMA, if possible / writes *must* be hardware frame aligned */
1200         if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
1201             (rq->sector & (sectors_per_frame - 1))) {
1202                 if (write) {
1203                         cdrom_end_request(drive, 0);
1204                         return ide_stopped;
1205                 }
1206                 drive->dma = 0;
1207         } else
1208                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1209
1210         if (write)
1211                 cd->devinfo.media_written = 1;
1212
1213         return ide_started;
1214 }
1215
1216 static ide_startstop_t cdrom_do_newpc_cont(ide_drive_t *drive)
1217 {
1218         struct request *rq = HWGROUP(drive)->rq;
1219
1220         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
1221 }
1222
1223 static void cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
1224 {
1225
1226         ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, "
1227                       "rq->cmd_type: 0x%x\n", __func__, rq->cmd[0],
1228                       rq->cmd_type);
1229
1230         if (blk_pc_request(rq))
1231                 rq->cmd_flags |= REQ_QUIET;
1232         else
1233                 rq->cmd_flags &= ~REQ_FAILED;
1234
1235         drive->dma = 0;
1236
1237         /* sg request */
1238         if (rq->bio || ((rq->cmd_type == REQ_TYPE_ATA_PC) && rq->data_len)) {
1239                 struct request_queue *q = drive->queue;
1240                 unsigned int alignment;
1241                 char *buf;
1242
1243                 if (rq->bio)
1244                         buf = bio_data(rq->bio);
1245                 else
1246                         buf = rq->data;
1247
1248                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1249
1250                 /*
1251                  * check if dma is safe
1252                  *
1253                  * NOTE! The "len" and "addr" checks should possibly have
1254                  * separate masks.
1255                  */
1256                 alignment = queue_dma_alignment(q) | q->dma_pad_mask;
1257                 if ((unsigned long)buf & alignment || rq->data_len & alignment
1258                     || object_is_on_stack(buf))
1259                         drive->dma = 0;
1260         }
1261 }
1262
1263 static ide_startstop_t ide_cd_do_request(ide_drive_t *drive, struct request *rq,
1264                                         sector_t block)
1265 {
1266         struct cdrom_info *info = drive->driver_data;
1267         ide_handler_t *fn;
1268         int xferlen;
1269
1270         ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, "
1271                       "rq->cmd_type: 0x%x, block: %llu\n",
1272                       __func__, rq->cmd[0], rq->cmd_type,
1273                       (unsigned long long)block);
1274
1275         if (blk_fs_request(rq)) {
1276                 if (drive->atapi_flags & IDE_AFLAG_SEEKING) {
1277                         ide_hwif_t *hwif = drive->hwif;
1278                         unsigned long elapsed = jiffies - info->start_seek;
1279                         int stat = hwif->tp_ops->read_status(hwif);
1280
1281                         if ((stat & ATA_DSC) != ATA_DSC) {
1282                                 if (elapsed < IDECD_SEEK_TIMEOUT) {
1283                                         ide_stall_queue(drive,
1284                                                         IDECD_SEEK_TIMER);
1285                                         return ide_stopped;
1286                                 }
1287                                 printk(KERN_ERR PFX "%s: DSC timeout\n",
1288                                                 drive->name);
1289                         }
1290                         drive->atapi_flags &= ~IDE_AFLAG_SEEKING;
1291                 }
1292                 if (rq_data_dir(rq) == READ &&
1293                     IDE_LARGE_SEEK(info->last_block, block,
1294                             IDECD_SEEK_THRESHOLD) &&
1295                     (drive->dev_flags & IDE_DFLAG_DSC_OVERLAP)) {
1296                         xferlen = 0;
1297                         fn = cdrom_start_seek_continuation;
1298
1299                         drive->dma = 0;
1300                         info->start_seek = jiffies;
1301
1302                         ide_cd_prepare_seek_request(drive, rq);
1303                 } else {
1304                         xferlen = 32768;
1305                         fn = cdrom_start_rw_cont;
1306
1307                         if (cdrom_start_rw(drive, rq) == ide_stopped)
1308                                 return ide_stopped;
1309
1310                         if (ide_cd_prepare_rw_request(drive, rq) == ide_stopped)
1311                                 return ide_stopped;
1312                 }
1313                 info->last_block = block;
1314         } else if (blk_sense_request(rq) || blk_pc_request(rq) ||
1315                    rq->cmd_type == REQ_TYPE_ATA_PC) {
1316                 xferlen = rq->data_len;
1317                 fn = cdrom_do_newpc_cont;
1318
1319                 if (!rq->timeout)
1320                         rq->timeout = ATAPI_WAIT_PC;
1321
1322                 cdrom_do_block_pc(drive, rq);
1323         } else if (blk_special_request(rq)) {
1324                 /* right now this can only be a reset... */
1325                 cdrom_end_request(drive, 1);
1326                 return ide_stopped;
1327         } else {
1328                 blk_dump_rq_flags(rq, DRV_NAME " bad flags");
1329                 cdrom_end_request(drive, 0);
1330                 return ide_stopped;
1331         }
1332
1333         return cdrom_start_packet_command(drive, xferlen, fn);
1334 }
1335
1336 /*
1337  * Ioctl handling.
1338  *
1339  * Routines which queue packet commands take as a final argument a pointer to a
1340  * request_sense struct. If execution of the command results in an error with a
1341  * CHECK CONDITION status, this structure will be filled with the results of the
1342  * subsequent request sense command. The pointer can also be NULL, in which case
1343  * no sense information is returned.
1344  */
1345 static void msf_from_bcd(struct atapi_msf *msf)
1346 {
1347         msf->minute = bcd2bin(msf->minute);
1348         msf->second = bcd2bin(msf->second);
1349         msf->frame  = bcd2bin(msf->frame);
1350 }
1351
1352 int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
1353 {
1354         struct cdrom_info *info = drive->driver_data;
1355         struct cdrom_device_info *cdi = &info->devinfo;
1356         unsigned char cmd[BLK_MAX_CDB];
1357
1358         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1359
1360         memset(cmd, 0, BLK_MAX_CDB);
1361         cmd[0] = GPCMD_TEST_UNIT_READY;
1362
1363         /*
1364          * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
1365          * instead of supporting the LOAD_UNLOAD opcode.
1366          */
1367         cmd[7] = cdi->sanyo_slot % 3;
1368
1369         return ide_cd_queue_pc(drive, cmd, 0, NULL, NULL, sense, 0, REQ_QUIET);
1370 }
1371
1372 static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
1373                                unsigned long *sectors_per_frame,
1374                                struct request_sense *sense)
1375 {
1376         struct {
1377                 __be32 lba;
1378                 __be32 blocklen;
1379         } capbuf;
1380
1381         int stat;
1382         unsigned char cmd[BLK_MAX_CDB];
1383         unsigned len = sizeof(capbuf);
1384         u32 blocklen;
1385
1386         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1387
1388         memset(cmd, 0, BLK_MAX_CDB);
1389         cmd[0] = GPCMD_READ_CDVD_CAPACITY;
1390
1391         stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
1392                                REQ_QUIET);
1393         if (stat)
1394                 return stat;
1395
1396         /*
1397          * Sanity check the given block size
1398          */
1399         blocklen = be32_to_cpu(capbuf.blocklen);
1400         switch (blocklen) {
1401         case 512:
1402         case 1024:
1403         case 2048:
1404         case 4096:
1405                 break;
1406         default:
1407                 printk(KERN_ERR PFX "%s: weird block size %u\n",
1408                                 drive->name, blocklen);
1409                 printk(KERN_ERR PFX "%s: default to 2kb block size\n",
1410                                 drive->name);
1411                 blocklen = 2048;
1412                 break;
1413         }
1414
1415         *capacity = 1 + be32_to_cpu(capbuf.lba);
1416         *sectors_per_frame = blocklen >> SECTOR_BITS;
1417
1418         ide_debug_log(IDE_DBG_PROBE, "%s: cap: %lu, sectors_per_frame: %lu\n",
1419                       __func__, *capacity, *sectors_per_frame);
1420
1421         return 0;
1422 }
1423
1424 static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1425                                 int format, char *buf, int buflen,
1426                                 struct request_sense *sense)
1427 {
1428         unsigned char cmd[BLK_MAX_CDB];
1429
1430         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1431
1432         memset(cmd, 0, BLK_MAX_CDB);
1433
1434         cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1435         cmd[6] = trackno;
1436         cmd[7] = (buflen >> 8);
1437         cmd[8] = (buflen & 0xff);
1438         cmd[9] = (format << 6);
1439
1440         if (msf_flag)
1441                 cmd[1] = 2;
1442
1443         return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1444 }
1445
1446 /* Try to read the entire TOC for the disk into our internal buffer. */
1447 int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1448 {
1449         int stat, ntracks, i;
1450         struct cdrom_info *info = drive->driver_data;
1451         struct cdrom_device_info *cdi = &info->devinfo;
1452         struct atapi_toc *toc = info->toc;
1453         struct {
1454                 struct atapi_toc_header hdr;
1455                 struct atapi_toc_entry  ent;
1456         } ms_tmp;
1457         long last_written;
1458         unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1459
1460         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1461
1462         if (toc == NULL) {
1463                 /* try to allocate space */
1464                 toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1465                 if (toc == NULL) {
1466                         printk(KERN_ERR PFX "%s: No cdrom TOC buffer!\n",
1467                                         drive->name);
1468                         return -ENOMEM;
1469                 }
1470                 info->toc = toc;
1471         }
1472
1473         /*
1474          * Check to see if the existing data is still valid. If it is,
1475          * just return.
1476          */
1477         (void) cdrom_check_status(drive, sense);
1478
1479         if (drive->atapi_flags & IDE_AFLAG_TOC_VALID)
1480                 return 0;
1481
1482         /* try to get the total cdrom capacity and sector size */
1483         stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1484                                    sense);
1485         if (stat)
1486                 toc->capacity = 0x1fffff;
1487
1488         set_capacity(info->disk, toc->capacity * sectors_per_frame);
1489         /* save a private copy of the TOC capacity for error handling */
1490         drive->probed_capacity = toc->capacity * sectors_per_frame;
1491
1492         blk_queue_hardsect_size(drive->queue,
1493                                 sectors_per_frame << SECTOR_BITS);
1494
1495         /* first read just the header, so we know how long the TOC is */
1496         stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1497                                     sizeof(struct atapi_toc_header), sense);
1498         if (stat)
1499                 return stat;
1500
1501         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1502                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1503                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1504         }
1505
1506         ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1507         if (ntracks <= 0)
1508                 return -EIO;
1509         if (ntracks > MAX_TRACKS)
1510                 ntracks = MAX_TRACKS;
1511
1512         /* now read the whole schmeer */
1513         stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1514                                   (char *)&toc->hdr,
1515                                    sizeof(struct atapi_toc_header) +
1516                                    (ntracks + 1) *
1517                                    sizeof(struct atapi_toc_entry), sense);
1518
1519         if (stat && toc->hdr.first_track > 1) {
1520                 /*
1521                  * Cds with CDI tracks only don't have any TOC entries, despite
1522                  * of this the returned values are
1523                  * first_track == last_track = number of CDI tracks + 1,
1524                  * so that this case is indistinguishable from the same layout
1525                  * plus an additional audio track. If we get an error for the
1526                  * regular case, we assume a CDI without additional audio
1527                  * tracks. In this case the readable TOC is empty (CDI tracks
1528                  * are not included) and only holds the Leadout entry.
1529                  *
1530                  * Heiko Eißfeldt.
1531                  */
1532                 ntracks = 0;
1533                 stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1534                                            (char *)&toc->hdr,
1535                                            sizeof(struct atapi_toc_header) +
1536                                            (ntracks + 1) *
1537                                            sizeof(struct atapi_toc_entry),
1538                                            sense);
1539                 if (stat)
1540                         return stat;
1541
1542                 if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1543                         toc->hdr.first_track = (u8)bin2bcd(CDROM_LEADOUT);
1544                         toc->hdr.last_track = (u8)bin2bcd(CDROM_LEADOUT);
1545                 } else {
1546                         toc->hdr.first_track = CDROM_LEADOUT;
1547                         toc->hdr.last_track = CDROM_LEADOUT;
1548                 }
1549         }
1550
1551         if (stat)
1552                 return stat;
1553
1554         toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1555
1556         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1557                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1558                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1559         }
1560
1561         for (i = 0; i <= ntracks; i++) {
1562                 if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1563                         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD)
1564                                 toc->ent[i].track = bcd2bin(toc->ent[i].track);
1565                         msf_from_bcd(&toc->ent[i].addr.msf);
1566                 }
1567                 toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1568                                                   toc->ent[i].addr.msf.second,
1569                                                   toc->ent[i].addr.msf.frame);
1570         }
1571
1572         if (toc->hdr.first_track != CDROM_LEADOUT) {
1573                 /* read the multisession information */
1574                 stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1575                                            sizeof(ms_tmp), sense);
1576                 if (stat)
1577                         return stat;
1578
1579                 toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1580         } else {
1581                 ms_tmp.hdr.last_track = CDROM_LEADOUT;
1582                 ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1583                 toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1584         }
1585
1586         if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1587                 /* re-read multisession information using MSF format */
1588                 stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1589                                            sizeof(ms_tmp), sense);
1590                 if (stat)
1591                         return stat;
1592
1593                 msf_from_bcd(&ms_tmp.ent.addr.msf);
1594                 toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1595                                                    ms_tmp.ent.addr.msf.second,
1596                                                    ms_tmp.ent.addr.msf.frame);
1597         }
1598
1599         toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1600
1601         /* now try to get the total cdrom capacity */
1602         stat = cdrom_get_last_written(cdi, &last_written);
1603         if (!stat && (last_written > toc->capacity)) {
1604                 toc->capacity = last_written;
1605                 set_capacity(info->disk, toc->capacity * sectors_per_frame);
1606                 drive->probed_capacity = toc->capacity * sectors_per_frame;
1607         }
1608
1609         /* Remember that we've read this stuff. */
1610         drive->atapi_flags |= IDE_AFLAG_TOC_VALID;
1611
1612         return 0;
1613 }
1614
1615 int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1616 {
1617         struct cdrom_info *info = drive->driver_data;
1618         struct cdrom_device_info *cdi = &info->devinfo;
1619         struct packet_command cgc;
1620         int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1621
1622         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1623
1624         if ((drive->atapi_flags & IDE_AFLAG_FULL_CAPS_PAGE) == 0)
1625                 size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1626
1627         init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1628         do {
1629                 /* we seem to get stat=0x01,err=0x00 the first time (??) */
1630                 stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1631                 if (!stat)
1632                         break;
1633         } while (--attempts);
1634         return stat;
1635 }
1636
1637 void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1638 {
1639         struct cdrom_info *cd = drive->driver_data;
1640         u16 curspeed, maxspeed;
1641
1642         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1643
1644         if (drive->atapi_flags & IDE_AFLAG_LE_SPEED_FIELDS) {
1645                 curspeed = le16_to_cpup((__le16 *)&buf[8 + 14]);
1646                 maxspeed = le16_to_cpup((__le16 *)&buf[8 + 8]);
1647         } else {
1648                 curspeed = be16_to_cpup((__be16 *)&buf[8 + 14]);
1649                 maxspeed = be16_to_cpup((__be16 *)&buf[8 + 8]);
1650         }
1651
1652         ide_debug_log(IDE_DBG_PROBE, "%s: curspeed: %u, maxspeed: %u\n",
1653                       __func__, curspeed, maxspeed);
1654
1655         cd->current_speed = (curspeed + (176/2)) / 176;
1656         cd->max_speed = (maxspeed + (176/2)) / 176;
1657 }
1658
1659 #define IDE_CD_CAPABILITIES \
1660         (CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1661          CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1662          CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1663          CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1664          CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1665
1666 static struct cdrom_device_ops ide_cdrom_dops = {
1667         .open                   = ide_cdrom_open_real,
1668         .release                = ide_cdrom_release_real,
1669         .drive_status           = ide_cdrom_drive_status,
1670         .media_changed          = ide_cdrom_check_media_change_real,
1671         .tray_move              = ide_cdrom_tray_move,
1672         .lock_door              = ide_cdrom_lock_door,
1673         .select_speed           = ide_cdrom_select_speed,
1674         .get_last_session       = ide_cdrom_get_last_session,
1675         .get_mcn                = ide_cdrom_get_mcn,
1676         .reset                  = ide_cdrom_reset,
1677         .audio_ioctl            = ide_cdrom_audio_ioctl,
1678         .capability             = IDE_CD_CAPABILITIES,
1679         .generic_packet         = ide_cdrom_packet,
1680 };
1681
1682 static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1683 {
1684         struct cdrom_info *info = drive->driver_data;
1685         struct cdrom_device_info *devinfo = &info->devinfo;
1686
1687         ide_debug_log(IDE_DBG_PROBE, "Call %s, nslots: %d\n", __func__, nslots);
1688
1689         devinfo->ops = &ide_cdrom_dops;
1690         devinfo->speed = info->current_speed;
1691         devinfo->capacity = nslots;
1692         devinfo->handle = drive;
1693         strcpy(devinfo->name, drive->name);
1694
1695         if (drive->atapi_flags & IDE_AFLAG_NO_SPEED_SELECT)
1696                 devinfo->mask |= CDC_SELECT_SPEED;
1697
1698         devinfo->disk = info->disk;
1699         return register_cdrom(devinfo);
1700 }
1701
1702 static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1703 {
1704         struct cdrom_info *cd = drive->driver_data;
1705         struct cdrom_device_info *cdi = &cd->devinfo;
1706         u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1707         mechtype_t mechtype;
1708         int nslots = 1;
1709
1710         ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->media: 0x%x, "
1711                       "drive->atapi_flags: 0x%lx\n", __func__, drive->media,
1712                       drive->atapi_flags);
1713
1714         cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1715                      CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1716                      CDC_MO_DRIVE | CDC_RAM);
1717
1718         if (drive->media == ide_optical) {
1719                 cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1720                 printk(KERN_ERR PFX "%s: ATAPI magneto-optical drive\n",
1721                                 drive->name);
1722                 return nslots;
1723         }
1724
1725         if (drive->atapi_flags & IDE_AFLAG_PRE_ATAPI12) {
1726                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1727                 cdi->mask &= ~CDC_PLAY_AUDIO;
1728                 return nslots;
1729         }
1730
1731         /*
1732          * We have to cheat a little here. the packet will eventually be queued
1733          * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1734          * Since this device hasn't been registered with the Uniform layer yet,
1735          * it can't do this. Same goes for cdi->ops.
1736          */
1737         cdi->handle = drive;
1738         cdi->ops = &ide_cdrom_dops;
1739
1740         if (ide_cdrom_get_capabilities(drive, buf))
1741                 return 0;
1742
1743         if ((buf[8 + 6] & 0x01) == 0)
1744                 drive->dev_flags &= ~IDE_DFLAG_DOORLOCKING;
1745         if (buf[8 + 6] & 0x08)
1746                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1747         if (buf[8 + 3] & 0x01)
1748                 cdi->mask &= ~CDC_CD_R;
1749         if (buf[8 + 3] & 0x02)
1750                 cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1751         if (buf[8 + 2] & 0x38)
1752                 cdi->mask &= ~CDC_DVD;
1753         if (buf[8 + 3] & 0x20)
1754                 cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1755         if (buf[8 + 3] & 0x10)
1756                 cdi->mask &= ~CDC_DVD_R;
1757         if ((buf[8 + 4] & 0x01) || (drive->atapi_flags & IDE_AFLAG_PLAY_AUDIO_OK))
1758                 cdi->mask &= ~CDC_PLAY_AUDIO;
1759
1760         mechtype = buf[8 + 6] >> 5;
1761         if (mechtype == mechtype_caddy ||
1762             mechtype == mechtype_popup ||
1763             (drive->atapi_flags & IDE_AFLAG_NO_AUTOCLOSE))
1764                 cdi->mask |= CDC_CLOSE_TRAY;
1765
1766         if (cdi->sanyo_slot > 0) {
1767                 cdi->mask &= ~CDC_SELECT_DISC;
1768                 nslots = 3;
1769         } else if (mechtype == mechtype_individual_changer ||
1770                    mechtype == mechtype_cartridge_changer) {
1771                 nslots = cdrom_number_of_slots(cdi);
1772                 if (nslots > 1)
1773                         cdi->mask &= ~CDC_SELECT_DISC;
1774         }
1775
1776         ide_cdrom_update_speed(drive, buf);
1777
1778         printk(KERN_INFO PFX "%s: ATAPI", drive->name);
1779
1780         /* don't print speed if the drive reported 0 */
1781         if (cd->max_speed)
1782                 printk(KERN_CONT " %dX", cd->max_speed);
1783
1784         printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1785
1786         if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1787                 printk(KERN_CONT " DVD%s%s",
1788                                  (cdi->mask & CDC_DVD_R) ? "" : "-R",
1789                                  (cdi->mask & CDC_DVD_RAM) ? "" : "/RAM");
1790
1791         if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1792                 printk(KERN_CONT " CD%s%s",
1793                                  (cdi->mask & CDC_CD_R) ? "" : "-R",
1794                                  (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1795
1796         if ((cdi->mask & CDC_SELECT_DISC) == 0)
1797                 printk(KERN_CONT " changer w/%d slots", nslots);
1798         else
1799                 printk(KERN_CONT " drive");
1800
1801         printk(KERN_CONT ", %dkB Cache\n",
1802                          be16_to_cpup((__be16 *)&buf[8 + 12]));
1803
1804         return nslots;
1805 }
1806
1807 /* standard prep_rq_fn that builds 10 byte cmds */
1808 static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1809 {
1810         int hard_sect = queue_hardsect_size(q);
1811         long block = (long)rq->hard_sector / (hard_sect >> 9);
1812         unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1813
1814         memset(rq->cmd, 0, BLK_MAX_CDB);
1815
1816         if (rq_data_dir(rq) == READ)
1817                 rq->cmd[0] = GPCMD_READ_10;
1818         else
1819                 rq->cmd[0] = GPCMD_WRITE_10;
1820
1821         /*
1822          * fill in lba
1823          */
1824         rq->cmd[2] = (block >> 24) & 0xff;
1825         rq->cmd[3] = (block >> 16) & 0xff;
1826         rq->cmd[4] = (block >>  8) & 0xff;
1827         rq->cmd[5] = block & 0xff;
1828
1829         /*
1830          * and transfer length
1831          */
1832         rq->cmd[7] = (blocks >> 8) & 0xff;
1833         rq->cmd[8] = blocks & 0xff;
1834         rq->cmd_len = 10;
1835         return BLKPREP_OK;
1836 }
1837
1838 /*
1839  * Most of the SCSI commands are supported directly by ATAPI devices.
1840  * This transform handles the few exceptions.
1841  */
1842 static int ide_cdrom_prep_pc(struct request *rq)
1843 {
1844         u8 *c = rq->cmd;
1845
1846         /* transform 6-byte read/write commands to the 10-byte version */
1847         if (c[0] == READ_6 || c[0] == WRITE_6) {
1848                 c[8] = c[4];
1849                 c[5] = c[3];
1850                 c[4] = c[2];
1851                 c[3] = c[1] & 0x1f;
1852                 c[2] = 0;
1853                 c[1] &= 0xe0;
1854                 c[0] += (READ_10 - READ_6);
1855                 rq->cmd_len = 10;
1856                 return BLKPREP_OK;
1857         }
1858
1859         /*
1860          * it's silly to pretend we understand 6-byte sense commands, just
1861          * reject with ILLEGAL_REQUEST and the caller should take the
1862          * appropriate action
1863          */
1864         if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1865                 rq->errors = ILLEGAL_REQUEST;
1866                 return BLKPREP_KILL;
1867         }
1868
1869         return BLKPREP_OK;
1870 }
1871
1872 static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1873 {
1874         if (blk_fs_request(rq))
1875                 return ide_cdrom_prep_fs(q, rq);
1876         else if (blk_pc_request(rq))
1877                 return ide_cdrom_prep_pc(rq);
1878
1879         return 0;
1880 }
1881
1882 struct cd_list_entry {
1883         const char      *id_model;
1884         const char      *id_firmware;
1885         unsigned int    cd_flags;
1886 };
1887
1888 #ifdef CONFIG_IDE_PROC_FS
1889 static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1890 {
1891         unsigned long capacity, sectors_per_frame;
1892
1893         if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1894                 return 0;
1895
1896         return capacity * sectors_per_frame;
1897 }
1898
1899 static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1900                                         int count, int *eof, void *data)
1901 {
1902         ide_drive_t *drive = data;
1903         int len;
1904
1905         len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1906         PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1907 }
1908
1909 static ide_proc_entry_t idecd_proc[] = {
1910         { "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1911         { NULL, 0, NULL, NULL }
1912 };
1913
1914 ide_devset_rw_flag(dsc_overlap, IDE_DFLAG_DSC_OVERLAP);
1915
1916 static const struct ide_proc_devset idecd_settings[] = {
1917         IDE_PROC_DEVSET(dsc_overlap, 0, 1),
1918         { 0 },
1919 };
1920
1921 static ide_proc_entry_t *ide_cd_proc_entries(ide_drive_t *drive)
1922 {
1923         return idecd_proc;
1924 }
1925
1926 static const struct ide_proc_devset *ide_cd_proc_devsets(ide_drive_t *drive)
1927 {
1928         return idecd_settings;
1929 }
1930 #endif
1931
1932 static const struct cd_list_entry ide_cd_quirks_list[] = {
1933         /* Limit transfer size per interrupt. */
1934         { "SAMSUNG CD-ROM SCR-2430", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1935         { "SAMSUNG CD-ROM SCR-2432", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1936         /* SCR-3231 doesn't support the SET_CD_SPEED command. */
1937         { "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_AFLAG_NO_SPEED_SELECT       },
1938         /* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1939         { "NEC CD-ROM DRIVE:260",    "1.01", IDE_AFLAG_TOCADDR_AS_BCD |
1940                                              IDE_AFLAG_PRE_ATAPI12,          },
1941         /* Vertos 300, some versions of this drive like to talk BCD. */
1942         { "V003S0DS",                NULL,   IDE_AFLAG_VERTOS_300_SSD,       },
1943         /* Vertos 600 ESD. */
1944         { "V006E0DS",                NULL,   IDE_AFLAG_VERTOS_600_ESD,       },
1945         /*
1946          * Sanyo 3 CD changer uses a non-standard command for CD changing
1947          * (by default standard ATAPI support for CD changers is used).
1948          */
1949         { "CD-ROM CDR-C3 G",         NULL,   IDE_AFLAG_SANYO_3CD             },
1950         { "CD-ROM CDR-C3G",          NULL,   IDE_AFLAG_SANYO_3CD             },
1951         { "CD-ROM CDR_C36",          NULL,   IDE_AFLAG_SANYO_3CD             },
1952         /* Stingray 8X CD-ROM. */
1953         { "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_AFLAG_PRE_ATAPI12 },
1954         /*
1955          * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1956          * mode sense page capabilities size, but older drives break.
1957          */
1958         { "ATAPI CD ROM DRIVE 50X MAX", NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1959         { "WPI CDS-32X",                NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1960         /* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1961         { "",                        "241N", IDE_AFLAG_LE_SPEED_FIELDS       },
1962         /*
1963          * Some drives used by Apple don't advertise audio play
1964          * but they do support reading TOC & audio datas.
1965          */
1966         { "MATSHITADVD-ROM SR-8187", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1967         { "MATSHITADVD-ROM SR-8186", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1968         { "MATSHITADVD-ROM SR-8176", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1969         { "MATSHITADVD-ROM SR-8174", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1970         { "Optiarc DVD RW AD-5200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1971         { "Optiarc DVD RW AD-7200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1972         { "Optiarc DVD RW AD-7543A", NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1973         { NULL, NULL, 0 }
1974 };
1975
1976 static unsigned int ide_cd_flags(u16 *id)
1977 {
1978         const struct cd_list_entry *cle = ide_cd_quirks_list;
1979
1980         while (cle->id_model) {
1981                 if (strcmp(cle->id_model, (char *)&id[ATA_ID_PROD]) == 0 &&
1982                     (cle->id_firmware == NULL ||
1983                      strstr((char *)&id[ATA_ID_FW_REV], cle->id_firmware)))
1984                         return cle->cd_flags;
1985                 cle++;
1986         }
1987
1988         return 0;
1989 }
1990
1991 static int ide_cdrom_setup(ide_drive_t *drive)
1992 {
1993         struct cdrom_info *cd = drive->driver_data;
1994         struct cdrom_device_info *cdi = &cd->devinfo;
1995         u16 *id = drive->id;
1996         char *fw_rev = (char *)&id[ATA_ID_FW_REV];
1997         int nslots;
1998
1999         ide_debug_log(IDE_DBG_PROBE, "Call %s\n", __func__);
2000
2001         blk_queue_prep_rq(drive->queue, ide_cdrom_prep_fn);
2002         blk_queue_dma_alignment(drive->queue, 31);
2003         blk_queue_update_dma_pad(drive->queue, 15);
2004         drive->queue->unplug_delay = (1 * HZ) / 1000;
2005         if (!drive->queue->unplug_delay)
2006                 drive->queue->unplug_delay = 1;
2007
2008         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
2009         drive->atapi_flags = IDE_AFLAG_NO_EJECT | ide_cd_flags(id);
2010
2011         if ((drive->atapi_flags & IDE_AFLAG_VERTOS_300_SSD) &&
2012             fw_rev[4] == '1' && fw_rev[6] <= '2')
2013                 drive->atapi_flags |= (IDE_AFLAG_TOCTRACKS_AS_BCD |
2014                                      IDE_AFLAG_TOCADDR_AS_BCD);
2015         else if ((drive->atapi_flags & IDE_AFLAG_VERTOS_600_ESD) &&
2016                  fw_rev[4] == '1' && fw_rev[6] <= '2')
2017                 drive->atapi_flags |= IDE_AFLAG_TOCTRACKS_AS_BCD;
2018         else if (drive->atapi_flags & IDE_AFLAG_SANYO_3CD)
2019                 /* 3 => use CD in slot 0 */
2020                 cdi->sanyo_slot = 3;
2021
2022         nslots = ide_cdrom_probe_capabilities(drive);
2023
2024         /* set correct block size */
2025         blk_queue_hardsect_size(drive->queue, CD_FRAMESIZE);
2026
2027         if (drive->next != drive)
2028                 drive->dev_flags |= IDE_DFLAG_DSC_OVERLAP;
2029         else
2030                 drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
2031
2032         if (ide_cdrom_register(drive, nslots)) {
2033                 printk(KERN_ERR PFX "%s: %s failed to register device with the"
2034                                 " cdrom driver.\n", drive->name, __func__);
2035                 cd->devinfo.handle = NULL;
2036                 return 1;
2037         }
2038
2039         ide_proc_register_driver(drive, cd->driver);
2040         return 0;
2041 }
2042
2043 static void ide_cd_remove(ide_drive_t *drive)
2044 {
2045         struct cdrom_info *info = drive->driver_data;
2046
2047         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
2048
2049         ide_proc_unregister_driver(drive, info->driver);
2050
2051         del_gendisk(info->disk);
2052
2053         ide_cd_put(info);
2054 }
2055
2056 static void ide_cd_release(struct kref *kref)
2057 {
2058         struct cdrom_info *info = to_ide_drv(kref, cdrom_info);
2059         struct cdrom_device_info *devinfo = &info->devinfo;
2060         ide_drive_t *drive = info->drive;
2061         struct gendisk *g = info->disk;
2062
2063         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
2064
2065         kfree(info->toc);
2066         if (devinfo->handle == drive)
2067                 unregister_cdrom(devinfo);
2068         drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
2069         drive->driver_data = NULL;
2070         blk_queue_prep_rq(drive->queue, NULL);
2071         g->private_data = NULL;
2072         put_disk(g);
2073         kfree(info);
2074 }
2075
2076 static int ide_cd_probe(ide_drive_t *);
2077
2078 static ide_driver_t ide_cdrom_driver = {
2079         .gen_driver = {
2080                 .owner          = THIS_MODULE,
2081                 .name           = "ide-cdrom",
2082                 .bus            = &ide_bus_type,
2083         },
2084         .probe                  = ide_cd_probe,
2085         .remove                 = ide_cd_remove,
2086         .version                = IDECD_VERSION,
2087         .do_request             = ide_cd_do_request,
2088         .end_request            = ide_end_request,
2089         .error                  = __ide_error,
2090 #ifdef CONFIG_IDE_PROC_FS
2091         .proc_entries           = ide_cd_proc_entries,
2092         .proc_devsets           = ide_cd_proc_devsets,
2093 #endif
2094 };
2095
2096 static int idecd_open(struct inode *inode, struct file *file)
2097 {
2098         struct gendisk *disk = inode->i_bdev->bd_disk;
2099         struct cdrom_info *info;
2100         int rc = -ENOMEM;
2101
2102         info = ide_cd_get(disk);
2103         if (!info)
2104                 return -ENXIO;
2105
2106         rc = cdrom_open(&info->devinfo, inode, file);
2107
2108         if (rc < 0)
2109                 ide_cd_put(info);
2110
2111         return rc;
2112 }
2113
2114 static int idecd_release(struct inode *inode, struct file *file)
2115 {
2116         struct gendisk *disk = inode->i_bdev->bd_disk;
2117         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2118
2119         cdrom_release(&info->devinfo, file);
2120
2121         ide_cd_put(info);
2122
2123         return 0;
2124 }
2125
2126 static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2127 {
2128         struct packet_command cgc;
2129         char buffer[16];
2130         int stat;
2131         char spindown;
2132
2133         if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
2134                 return -EFAULT;
2135
2136         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2137
2138         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2139         if (stat)
2140                 return stat;
2141
2142         buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
2143         return cdrom_mode_select(cdi, &cgc);
2144 }
2145
2146 static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2147 {
2148         struct packet_command cgc;
2149         char buffer[16];
2150         int stat;
2151         char spindown;
2152
2153         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2154
2155         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2156         if (stat)
2157                 return stat;
2158
2159         spindown = buffer[11] & 0x0f;
2160         if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
2161                 return -EFAULT;
2162         return 0;
2163 }
2164
2165 static int idecd_ioctl(struct inode *inode, struct file *file,
2166                         unsigned int cmd, unsigned long arg)
2167 {
2168         struct block_device *bdev = inode->i_bdev;
2169         struct cdrom_info *info = ide_drv_g(bdev->bd_disk, cdrom_info);
2170         int err;
2171
2172         switch (cmd) {
2173         case CDROMSETSPINDOWN:
2174                 return idecd_set_spindown(&info->devinfo, arg);
2175         case CDROMGETSPINDOWN:
2176                 return idecd_get_spindown(&info->devinfo, arg);
2177         default:
2178                 break;
2179         }
2180
2181         err = generic_ide_ioctl(info->drive, file, bdev, cmd, arg);
2182         if (err == -EINVAL)
2183                 err = cdrom_ioctl(file, &info->devinfo, inode, cmd, arg);
2184
2185         return err;
2186 }
2187
2188 static int idecd_media_changed(struct gendisk *disk)
2189 {
2190         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2191         return cdrom_media_changed(&info->devinfo);
2192 }
2193
2194 static int idecd_revalidate_disk(struct gendisk *disk)
2195 {
2196         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2197         struct request_sense sense;
2198
2199         ide_cd_read_toc(info->drive, &sense);
2200
2201         return  0;
2202 }
2203
2204 static struct block_device_operations idecd_ops = {
2205         .owner                  = THIS_MODULE,
2206         .open                   = idecd_open,
2207         .release                = idecd_release,
2208         .ioctl                  = idecd_ioctl,
2209         .media_changed          = idecd_media_changed,
2210         .revalidate_disk        = idecd_revalidate_disk
2211 };
2212
2213 /* module options */
2214 static char *ignore;
2215 module_param(ignore, charp, 0400);
2216
2217 static unsigned long debug_mask;
2218 module_param(debug_mask, ulong, 0644);
2219
2220 MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
2221
2222 static int ide_cd_probe(ide_drive_t *drive)
2223 {
2224         struct cdrom_info *info;
2225         struct gendisk *g;
2226         struct request_sense sense;
2227
2228         ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->driver_req: %s, "
2229                       "drive->media: 0x%x\n", __func__, drive->driver_req,
2230                       drive->media);
2231
2232         if (!strstr("ide-cdrom", drive->driver_req))
2233                 goto failed;
2234
2235         if (drive->media != ide_cdrom && drive->media != ide_optical)
2236                 goto failed;
2237
2238         /* skip drives that we were told to ignore */
2239         if (ignore != NULL) {
2240                 if (strstr(ignore, drive->name)) {
2241                         printk(KERN_INFO PFX "ignoring drive %s\n",
2242                                          drive->name);
2243                         goto failed;
2244                 }
2245         }
2246
2247         drive->debug_mask = debug_mask;
2248
2249         info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
2250         if (info == NULL) {
2251                 printk(KERN_ERR PFX "%s: Can't allocate a cdrom structure\n",
2252                                 drive->name);
2253                 goto failed;
2254         }
2255
2256         g = alloc_disk(1 << PARTN_BITS);
2257         if (!g)
2258                 goto out_free_cd;
2259
2260         ide_init_disk(g, drive);
2261
2262         kref_init(&info->kref);
2263
2264         info->drive = drive;
2265         info->driver = &ide_cdrom_driver;
2266         info->disk = g;
2267
2268         g->private_data = &info->driver;
2269
2270         drive->driver_data = info;
2271
2272         g->minors = 1;
2273         g->driverfs_dev = &drive->gendev;
2274         g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
2275         if (ide_cdrom_setup(drive)) {
2276                 ide_cd_release(&info->kref);
2277                 goto failed;
2278         }
2279
2280         ide_cd_read_toc(drive, &sense);
2281         g->fops = &idecd_ops;
2282         g->flags |= GENHD_FL_REMOVABLE;
2283         add_disk(g);
2284         return 0;
2285
2286 out_free_cd:
2287         kfree(info);
2288 failed:
2289         return -ENODEV;
2290 }
2291
2292 static void __exit ide_cdrom_exit(void)
2293 {
2294         driver_unregister(&ide_cdrom_driver.gen_driver);
2295 }
2296
2297 static int __init ide_cdrom_init(void)
2298 {
2299         printk(KERN_INFO DRV_NAME " driver " IDECD_VERSION "\n");
2300         return driver_register(&ide_cdrom_driver.gen_driver);
2301 }
2302
2303 MODULE_ALIAS("ide:*m-cdrom*");
2304 MODULE_ALIAS("ide-cd");
2305 module_init(ide_cdrom_init);
2306 module_exit(ide_cdrom_exit);
2307 MODULE_LICENSE("GPL");