drivers/ide/ide-taskfile.c

   1 /*
   2  *  Copyright (C) 2000-2002        Michael Cornwell <cornwell@acm.org>
   3  *  Copyright (C) 2000-2002        Andre Hedrick <andre@linux-ide.org>
   4  *  Copyright (C) 2001-2002        Klaus Smolin
   5  *                                      IBM Storage Technology Division
   6  *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
   7  *
   8  *  The big the bad and the ugly.
   9  */
  10
  11 #include <linux/module.h>
  12 #include <linux/types.h>
  13 #include <linux/string.h>
  14 #include <linux/kernel.h>
  15 #include <linux/timer.h>
  16 #include <linux/mm.h>
  17 #include <linux/sched.h>
  18 #include <linux/interrupt.h>
  19 #include <linux/major.h>
  20 #include <linux/errno.h>
  21 #include <linux/genhd.h>
  22 #include <linux/blkpg.h>
  23 #include <linux/slab.h>
  24 #include <linux/pci.h>
  25 #include <linux/delay.h>
  26 #include <linux/hdreg.h>
  27 #include <linux/ide.h>
  28 #include <linux/bitops.h>
  29 #include <linux/scatterlist.h>
  30
  31 #include <asm/byteorder.h>
  32 #include <asm/irq.h>
  33 #include <asm/uaccess.h>
  34 #include <asm/io.h>
  35
  36 void ide_tf_dump(const char *s, struct ide_taskfile *tf)
  37 {
  38 #ifdef DEBUG
  39         printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
  40                 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
  41                 s, tf->feature, tf->nsect, tf->lbal,
  42                 tf->lbam, tf->lbah, tf->device, tf->command);
  43         printk("%s: hob: nsect 0x%02x lbal 0x%02x "
  44                 "lbam 0x%02x lbah 0x%02x\n",
  45                 s, tf->hob_nsect, tf->hob_lbal,
  46                 tf->hob_lbam, tf->hob_lbah);
  47 #endif
  48 }
  49
  50 int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
  51 {
  52         ide_task_t args;
  53
  54         memset(&args, 0, sizeof(ide_task_t));
  55         args.tf.nsect = 0x01;
  56         if (drive->media == ide_disk)
  57                 args.tf.command = WIN_IDENTIFY;
  58         else
  59                 args.tf.command = WIN_PIDENTIFY;
  60         args.tf_flags   = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
  61         args.data_phase = TASKFILE_IN;
  62         return ide_raw_taskfile(drive, &args, buf, 1);
  63 }
  64
  65 static int inline task_dma_ok(ide_task_t *task)
  66 {
  67         if (blk_fs_request(task->rq) || (task->tf_flags & IDE_TFLAG_FLAGGED))
  68                 return 1;
  69
  70         switch (task->tf.command) {
  71                 case WIN_WRITEDMA_ONCE:
  72                 case WIN_WRITEDMA:
  73                 case WIN_WRITEDMA_EXT:
  74                 case WIN_READDMA_ONCE:
  75                 case WIN_READDMA:
  76                 case WIN_READDMA_EXT:
  77                 case WIN_IDENTIFY_DMA:
  78                         return 1;
  79         }
  80
  81         return 0;
  82 }
  83
  84 static ide_startstop_t task_no_data_intr(ide_drive_t *);
  85 static ide_startstop_t set_geometry_intr(ide_drive_t *);
  86 static ide_startstop_t recal_intr(ide_drive_t *);
  87 static ide_startstop_t set_multmode_intr(ide_drive_t *);
  88 static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct request *);
  89 static ide_startstop_t task_in_intr(ide_drive_t *);
  90
  91 ide_startstop_t do_rw_taskfile (ide_drive_t *drive, ide_task_t *task)
  92 {
  93         ide_hwif_t *hwif        = HWIF(drive);
  94         struct ide_taskfile *tf = &task->tf;
  95         ide_handler_t *handler = NULL;
  96         const struct ide_dma_ops *dma_ops = hwif->dma_ops;
  97
  98         if (task->data_phase == TASKFILE_MULTI_IN ||
  99             task->data_phase == TASKFILE_MULTI_OUT) {
 100                 if (!drive->mult_count) {
 101                         printk(KERN_ERR "%s: multimode not set!\n",
 102                                         drive->name);
 103                         return ide_stopped;
 104                 }
 105         }
 106
 107         if (task->tf_flags & IDE_TFLAG_FLAGGED)
 108                 task->tf_flags |= IDE_TFLAG_FLAGGED_SET_IN_FLAGS;
 109
 110         if ((task->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
 111                 ide_tf_dump(drive->name, tf);
 112                 hwif->tf_load(drive, task);
 113         }
 114
 115         switch (task->data_phase) {
 116         case TASKFILE_MULTI_OUT:
 117         case TASKFILE_OUT:
 118                 hwif->OUTBSYNC(drive, tf->command, hwif->io_ports.command_addr);
 119                 ndelay(400);    /* FIXME */
 120                 return pre_task_out_intr(drive, task->rq);
 121         case TASKFILE_MULTI_IN:
 122         case TASKFILE_IN:
 123                 handler = task_in_intr;
 124                 /* fall-through */
 125         case TASKFILE_NO_DATA:
 126                 if (handler == NULL)
 127                         handler = task_no_data_intr;
 128                 /* WIN_{SPECIFY,RESTORE,SETMULT} use custom handlers */
 129                 if (task->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) {
 130                         switch (tf->command) {
 131                         case WIN_SPECIFY: handler = set_geometry_intr;  break;
 132                         case WIN_RESTORE: handler = recal_intr;         break;
 133                         case WIN_SETMULT: handler = set_multmode_intr;  break;
 134                         }
 135                 }
 136                 ide_execute_command(drive, tf->command, handler,
 137                                     WAIT_WORSTCASE, NULL);
 138                 return ide_started;
 139         default:
 140                 if (task_dma_ok(task) == 0 || drive->using_dma == 0 ||
 141                     dma_ops->dma_setup(drive))
 142                         return ide_stopped;
 143                 dma_ops->dma_exec_cmd(drive, tf->command);
 144                 dma_ops->dma_start(drive);
 145                 return ide_started;
 146         }
 147 }
 148 EXPORT_SYMBOL_GPL(do_rw_taskfile);
 149
 150 /*
 151  * set_multmode_intr() is invoked on completion of a WIN_SETMULT cmd.
 152  */
 153 static ide_startstop_t set_multmode_intr(ide_drive_t *drive)
 154 {
 155         u8 stat = ide_read_status(drive);
 156
 157         if (OK_STAT(stat, READY_STAT, BAD_STAT))
 158                 drive->mult_count = drive->mult_req;
 159         else {
 160                 drive->mult_req = drive->mult_count = 0;
 161                 drive->special.b.recalibrate = 1;
 162                 (void) ide_dump_status(drive, "set_multmode", stat);
 163         }
 164         return ide_stopped;
 165 }
 166
 167 /*
 168  * set_geometry_intr() is invoked on completion of a WIN_SPECIFY cmd.
 169  */
 170 static ide_startstop_t set_geometry_intr(ide_drive_t *drive)
 171 {
 172         int retries = 5;
 173         u8 stat;
 174
 175         while (((stat = ide_read_status(drive)) & BUSY_STAT) && retries--)
 176                 udelay(10);
 177
 178         if (OK_STAT(stat, READY_STAT, BAD_STAT))
 179                 return ide_stopped;
 180
 181         if (stat & (ERR_STAT|DRQ_STAT))
 182                 return ide_error(drive, "set_geometry_intr", stat);
 183
 184         BUG_ON(HWGROUP(drive)->handler != NULL);
 185         ide_set_handler(drive, &set_geometry_intr, WAIT_WORSTCASE, NULL);
 186         return ide_started;
 187 }
 188
 189 /*
 190  * recal_intr() is invoked on completion of a WIN_RESTORE (recalibrate) cmd.
 191  */
 192 static ide_startstop_t recal_intr(ide_drive_t *drive)
 193 {
 194         u8 stat = ide_read_status(drive);
 195
 196         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
 197                 return ide_error(drive, "recal_intr", stat);
 198         return ide_stopped;
 199 }
 200
 201 /*
 202  * Handler for commands without a data phase
 203  */
 204 static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
 205 {
 206         ide_task_t *args        = HWGROUP(drive)->rq->special;
 207         u8 stat;
 208
 209         local_irq_enable_in_hardirq();
 210         stat = ide_read_status(drive);
 211
 212         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
 213                 return ide_error(drive, "task_no_data_intr", stat);
 214                 /* calls ide_end_drive_cmd */
 215
 216         if (args)
 217                 ide_end_drive_cmd(drive, stat, ide_read_error(drive));
 218
 219         return ide_stopped;
 220 }
 221
 222 static u8 wait_drive_not_busy(ide_drive_t *drive)
 223 {
 224         int retries;
 225         u8 stat;
 226
 227         /*
 228          * Last sector was transfered, wait until device is ready.  This can
 229          * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
 230          */
 231         for (retries = 0; retries < 1000; retries++) {
 232                 stat = ide_read_status(drive);
 233
 234                 if (stat & BUSY_STAT)
 235                         udelay(10);
 236                 else
 237                         break;
 238         }
 239
 240         if (stat & BUSY_STAT)
 241                 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);
 242
 243         return stat;
 244 }
 245
 246 static void ide_pio_sector(ide_drive_t *drive, struct request *rq,
 247                            unsigned int write)
 248 {
 249         ide_hwif_t *hwif = drive->hwif;
 250         struct scatterlist *sg = hwif->sg_table;
 251         struct scatterlist *cursg = hwif->cursg;
 252         struct page *page;
 253 #ifdef CONFIG_HIGHMEM
 254         unsigned long flags;
 255 #endif
 256         unsigned int offset;
 257         u8 *buf;
 258
 259         cursg = hwif->cursg;
 260         if (!cursg) {
 261                 cursg = sg;
 262                 hwif->cursg = sg;
 263         }
 264
 265         page = sg_page(cursg);
 266         offset = cursg->offset + hwif->cursg_ofs * SECTOR_SIZE;
 267
 268         /* get the current page and offset */
 269         page = nth_page(page, (offset >> PAGE_SHIFT));
 270         offset %= PAGE_SIZE;
 271
 272 #ifdef CONFIG_HIGHMEM
 273         local_irq_save(flags);
 274 #endif
 275         buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
 276
 277         hwif->nleft--;
 278         hwif->cursg_ofs++;
 279
 280         if ((hwif->cursg_ofs * SECTOR_SIZE) == cursg->length) {
 281                 hwif->cursg = sg_next(hwif->cursg);
 282                 hwif->cursg_ofs = 0;
 283         }
 284
 285         /* do the actual data transfer */
 286         if (write)
 287                 hwif->output_data(drive, rq, buf, SECTOR_SIZE);
 288         else
 289                 hwif->input_data(drive, rq, buf, SECTOR_SIZE);
 290
 291         kunmap_atomic(buf, KM_BIO_SRC_IRQ);
 292 #ifdef CONFIG_HIGHMEM
 293         local_irq_restore(flags);
 294 #endif
 295 }
 296
 297 static void ide_pio_multi(ide_drive_t *drive, struct request *rq,
 298                           unsigned int write)
 299 {
 300         unsigned int nsect;
 301
 302         nsect = min_t(unsigned int, drive->hwif->nleft, drive->mult_count);
 303         while (nsect--)
 304                 ide_pio_sector(drive, rq, write);
 305 }
 306
 307 static void ide_pio_datablock(ide_drive_t *drive, struct request *rq,
 308                                      unsigned int write)
 309 {
 310         u8 saved_io_32bit = drive->io_32bit;
 311
 312         if (rq->bio)    /* fs request */
 313                 rq->errors = 0;
 314
 315         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
 316                 ide_task_t *task = rq->special;
 317
 318                 if (task->tf_flags & IDE_TFLAG_IO_16BIT)
 319                         drive->io_32bit = 0;
 320         }
 321
 322         touch_softlockup_watchdog();
 323
 324         switch (drive->hwif->data_phase) {
 325         case TASKFILE_MULTI_IN:
 326         case TASKFILE_MULTI_OUT:
 327                 ide_pio_multi(drive, rq, write);
 328                 break;
 329         default:
 330                 ide_pio_sector(drive, rq, write);
 331                 break;
 332         }
 333
 334         drive->io_32bit = saved_io_32bit;
 335 }
 336
 337 static ide_startstop_t task_error(ide_drive_t *drive, struct request *rq,
 338                                   const char *s, u8 stat)
 339 {
 340         if (rq->bio) {
 341                 ide_hwif_t *hwif = drive->hwif;
 342                 int sectors = hwif->nsect - hwif->nleft;
 343
 344                 switch (hwif->data_phase) {
 345                 case TASKFILE_IN:
 346                         if (hwif->nleft)
 347                                 break;
 348                         /* fall through */
 349                 case TASKFILE_OUT:
 350                         sectors--;
 351                         break;
 352                 case TASKFILE_MULTI_IN:
 353                         if (hwif->nleft)
 354                                 break;
 355                         /* fall through */
 356                 case TASKFILE_MULTI_OUT:
 357                         sectors -= drive->mult_count;
 358                 default:
 359                         break;
 360                 }
 361
 362                 if (sectors > 0) {
 363                         ide_driver_t *drv;
 364
 365                         drv = *(ide_driver_t **)rq->rq_disk->private_data;
 366                         drv->end_request(drive, 1, sectors);
 367                 }
 368         }
 369         return ide_error(drive, s, stat);
 370 }
 371
 372 void task_end_request(ide_drive_t *drive, struct request *rq, u8 stat)
 373 {
 374         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
 375                 u8 err = ide_read_error(drive);
 376
 377                 ide_end_drive_cmd(drive, stat, err);
 378                 return;
 379         }
 380
 381         if (rq->rq_disk) {
 382                 ide_driver_t *drv;
 383
 384                 drv = *(ide_driver_t **)rq->rq_disk->private_data;;
 385                 drv->end_request(drive, 1, rq->nr_sectors);
 386         } else
 387                 ide_end_request(drive, 1, rq->nr_sectors);
 388 }
 389
 390 /*
 391  * We got an interrupt on a task_in case, but no errors and no DRQ.
 392  *
 393  * It might be a spurious irq (shared irq), but it might be a
 394  * command that had no output.
 395  */
 396 static ide_startstop_t task_in_unexpected(ide_drive_t *drive, struct request *rq, u8 stat)
 397 {
 398         /* Command all done? */
 399         if (OK_STAT(stat, READY_STAT, BUSY_STAT)) {
 400                 task_end_request(drive, rq, stat);
 401                 return ide_stopped;
 402         }
 403
 404         /* Assume it was a spurious irq */
 405         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
 406         return ide_started;
 407 }
 408
 409 /*
 410  * Handler for command with PIO data-in phase (Read/Read Multiple).
 411  */
 412 static ide_startstop_t task_in_intr(ide_drive_t *drive)
 413 {
 414         ide_hwif_t *hwif = drive->hwif;
 415         struct request *rq = HWGROUP(drive)->rq;
 416         u8 stat = ide_read_status(drive);
 417
 418         /* Error? */
 419         if (stat & ERR_STAT)
 420                 return task_error(drive, rq, __func__, stat);
 421
 422         /* Didn't want any data? Odd. */
 423         if (!(stat & DRQ_STAT))
 424                 return task_in_unexpected(drive, rq, stat);
 425
 426         ide_pio_datablock(drive, rq, 0);
 427
 428         /* Are we done? Check status and finish transfer. */
 429         if (!hwif->nleft) {
 430                 stat = wait_drive_not_busy(drive);
 431                 if (!OK_STAT(stat, 0, BAD_STAT))
 432                         return task_error(drive, rq, __func__, stat);
 433                 task_end_request(drive, rq, stat);
 434                 return ide_stopped;
 435         }
 436
 437         /* Still data left to transfer. */
 438         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
 439
 440         return ide_started;
 441 }
 442
 443 /*
 444  * Handler for command with PIO data-out phase (Write/Write Multiple).
 445  */
 446 static ide_startstop_t task_out_intr (ide_drive_t *drive)
 447 {
 448         ide_hwif_t *hwif = drive->hwif;
 449         struct request *rq = HWGROUP(drive)->rq;
 450         u8 stat = ide_read_status(drive);
 451
 452         if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
 453                 return task_error(drive, rq, __func__, stat);
 454
 455         /* Deal with unexpected ATA data phase. */
 456         if (((stat & DRQ_STAT) == 0) ^ !hwif->nleft)
 457                 return task_error(drive, rq, __func__, stat);
 458
 459         if (!hwif->nleft) {
 460                 task_end_request(drive, rq, stat);
 461                 return ide_stopped;
 462         }
 463
 464         /* Still data left to transfer. */
 465         ide_pio_datablock(drive, rq, 1);
 466         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
 467
 468         return ide_started;
 469 }
 470
 471 static ide_startstop_t pre_task_out_intr(ide_drive_t *drive, struct request *rq)
 472 {
 473         ide_startstop_t startstop;
 474
 475         if (ide_wait_stat(&startstop, drive, DRQ_STAT,
 476                           drive->bad_wstat, WAIT_DRQ)) {
 477                 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
 478                                 drive->name,
 479                                 drive->hwif->data_phase ? "MULT" : "",
 480                                 drive->addressing ? "_EXT" : "");
 481                 return startstop;
 482         }
 483
 484         if (!drive->unmask)
 485                 local_irq_disable();
 486
 487         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
 488         ide_pio_datablock(drive, rq, 1);
 489
 490         return ide_started;
 491 }
 492
 493 int ide_raw_taskfile(ide_drive_t *drive, ide_task_t *task, u8 *buf, u16 nsect)
 494 {
 495         struct request *rq;
 496         int error;
 497
 498         rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
 499         rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
 500         rq->buffer = buf;
 501
 502         /*
 503          * (ks) We transfer currently only whole sectors.
 504          * This is suffient for now.  But, it would be great,
 505          * if we would find a solution to transfer any size.
 506          * To support special commands like READ LONG.
 507          */
 508         rq->hard_nr_sectors = rq->nr_sectors = nsect;
 509         rq->hard_cur_sectors = rq->current_nr_sectors = nsect;
 510
 511         if (task->tf_flags & IDE_TFLAG_WRITE)
 512                 rq->cmd_flags |= REQ_RW;
 513
 514         rq->special = task;
 515         task->rq = rq;
 516
 517         error = blk_execute_rq(drive->queue, NULL, rq, 0);
 518         blk_put_request(rq);
 519
 520         return error;
 521 }
 522
 523 EXPORT_SYMBOL(ide_raw_taskfile);
 524
 525 int ide_no_data_taskfile(ide_drive_t *drive, ide_task_t *task)
 526 {
 527         task->data_phase = TASKFILE_NO_DATA;
 528
 529         return ide_raw_taskfile(drive, task, NULL, 0);
 530 }
 531 EXPORT_SYMBOL_GPL(ide_no_data_taskfile);
 532
 533 #ifdef CONFIG_IDE_TASK_IOCTL
 534 int ide_taskfile_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 535 {
 536         ide_task_request_t      *req_task;
 537         ide_task_t              args;
 538         u8 *outbuf              = NULL;
 539         u8 *inbuf               = NULL;
 540         u8 *data_buf            = NULL;
 541         int err                 = 0;
 542         int tasksize            = sizeof(struct ide_task_request_s);
 543         unsigned int taskin     = 0;
 544         unsigned int taskout    = 0;
 545         u16 nsect               = 0;
 546         char __user *buf = (char __user *)arg;
 547
 548 //      printk("IDE Taskfile ...\n");
 549
 550         req_task = kzalloc(tasksize, GFP_KERNEL);
 551         if (req_task == NULL) return -ENOMEM;
 552         if (copy_from_user(req_task, buf, tasksize)) {
 553                 kfree(req_task);
 554                 return -EFAULT;
 555         }
 556
 557         taskout = req_task->out_size;
 558         taskin  = req_task->in_size;
 559
 560         if (taskin > 65536 || taskout > 65536) {
 561                 err = -EINVAL;
 562                 goto abort;
 563         }
 564
 565         if (taskout) {
 566                 int outtotal = tasksize;
 567                 outbuf = kzalloc(taskout, GFP_KERNEL);
 568                 if (outbuf == NULL) {
 569                         err = -ENOMEM;
 570                         goto abort;
 571                 }
 572                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
 573                         err = -EFAULT;
 574                         goto abort;
 575                 }
 576         }
 577
 578         if (taskin) {
 579                 int intotal = tasksize + taskout;
 580                 inbuf = kzalloc(taskin, GFP_KERNEL);
 581                 if (inbuf == NULL) {
 582                         err = -ENOMEM;
 583                         goto abort;
 584                 }
 585                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
 586                         err = -EFAULT;
 587                         goto abort;
 588                 }
 589         }
 590
 591         memset(&args, 0, sizeof(ide_task_t));
 592
 593         memcpy(&args.tf_array[0], req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
 594         memcpy(&args.tf_array[6], req_task->io_ports, HDIO_DRIVE_TASK_HDR_SIZE);
 595
 596         args.data_phase = req_task->data_phase;
 597
 598         args.tf_flags = IDE_TFLAG_IO_16BIT | IDE_TFLAG_DEVICE |
 599                         IDE_TFLAG_IN_TF;
 600         if (drive->addressing == 1)
 601                 args.tf_flags |= (IDE_TFLAG_LBA48 | IDE_TFLAG_IN_HOB);
 602
 603         if (req_task->out_flags.all) {
 604                 args.tf_flags |= IDE_TFLAG_FLAGGED;
 605
 606                 if (req_task->out_flags.b.data)
 607                         args.tf_flags |= IDE_TFLAG_OUT_DATA;
 608
 609                 if (req_task->out_flags.b.nsector_hob)
 610                         args.tf_flags |= IDE_TFLAG_OUT_HOB_NSECT;
 611                 if (req_task->out_flags.b.sector_hob)
 612                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAL;
 613                 if (req_task->out_flags.b.lcyl_hob)
 614                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAM;
 615                 if (req_task->out_flags.b.hcyl_hob)
 616                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAH;
 617
 618                 if (req_task->out_flags.b.error_feature)
 619                         args.tf_flags |= IDE_TFLAG_OUT_FEATURE;
 620                 if (req_task->out_flags.b.nsector)
 621                         args.tf_flags |= IDE_TFLAG_OUT_NSECT;
 622                 if (req_task->out_flags.b.sector)
 623                         args.tf_flags |= IDE_TFLAG_OUT_LBAL;
 624                 if (req_task->out_flags.b.lcyl)
 625                         args.tf_flags |= IDE_TFLAG_OUT_LBAM;
 626                 if (req_task->out_flags.b.hcyl)
 627                         args.tf_flags |= IDE_TFLAG_OUT_LBAH;
 628         } else {
 629                 args.tf_flags |= IDE_TFLAG_OUT_TF;
 630                 if (args.tf_flags & IDE_TFLAG_LBA48)
 631                         args.tf_flags |= IDE_TFLAG_OUT_HOB;
 632         }
 633
 634         if (req_task->in_flags.b.data)
 635                 args.tf_flags |= IDE_TFLAG_IN_DATA;
 636
 637         switch(req_task->data_phase) {
 638                 case TASKFILE_MULTI_OUT:
 639                         if (!drive->mult_count) {
 640                                 /* (hs): give up if multcount is not set */
 641                                 printk(KERN_ERR "%s: %s Multimode Write " \
 642                                         "multcount is not set\n",
 643                                         drive->name, __func__);
 644                                 err = -EPERM;
 645                                 goto abort;
 646                         }
 647                         /* fall through */
 648                 case TASKFILE_OUT:
 649                         /* fall through */
 650                 case TASKFILE_OUT_DMAQ:
 651                 case TASKFILE_OUT_DMA:
 652                         nsect = taskout / SECTOR_SIZE;
 653                         data_buf = outbuf;
 654                         break;
 655                 case TASKFILE_MULTI_IN:
 656                         if (!drive->mult_count) {
 657                                 /* (hs): give up if multcount is not set */
 658                                 printk(KERN_ERR "%s: %s Multimode Read failure " \
 659                                         "multcount is not set\n",
 660                                         drive->name, __func__);
 661                                 err = -EPERM;
 662                                 goto abort;
 663                         }
 664                         /* fall through */
 665                 case TASKFILE_IN:
 666                         /* fall through */
 667                 case TASKFILE_IN_DMAQ:
 668                 case TASKFILE_IN_DMA:
 669                         nsect = taskin / SECTOR_SIZE;
 670                         data_buf = inbuf;
 671                         break;
 672                 case TASKFILE_NO_DATA:
 673                         break;
 674                 default:
 675                         err = -EFAULT;
 676                         goto abort;
 677         }
 678
 679         if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
 680                 nsect = 0;
 681         else if (!nsect) {
 682                 nsect = (args.tf.hob_nsect << 8) | args.tf.nsect;
 683
 684                 if (!nsect) {
 685                         printk(KERN_ERR "%s: in/out command without data\n",
 686                                         drive->name);
 687                         err = -EFAULT;
 688                         goto abort;
 689                 }
 690         }
 691
 692         if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE)
 693                 args.tf_flags |= IDE_TFLAG_WRITE;
 694
 695         err = ide_raw_taskfile(drive, &args, data_buf, nsect);
 696
 697         memcpy(req_task->hob_ports, &args.tf_array[0], HDIO_DRIVE_HOB_HDR_SIZE - 2);
 698         memcpy(req_task->io_ports, &args.tf_array[6], HDIO_DRIVE_TASK_HDR_SIZE);
 699
 700         if ((args.tf_flags & IDE_TFLAG_FLAGGED_SET_IN_FLAGS) &&
 701             req_task->in_flags.all == 0) {
 702                 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
 703                 if (drive->addressing == 1)
 704                         req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
 705         }
 706
 707         if (copy_to_user(buf, req_task, tasksize)) {
 708                 err = -EFAULT;
 709                 goto abort;
 710         }
 711         if (taskout) {
 712                 int outtotal = tasksize;
 713                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
 714                         err = -EFAULT;
 715                         goto abort;
 716                 }
 717         }
 718         if (taskin) {
 719                 int intotal = tasksize + taskout;
 720                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
 721                         err = -EFAULT;
 722                         goto abort;
 723                 }
 724         }
 725 abort:
 726         kfree(req_task);
 727         kfree(outbuf);
 728         kfree(inbuf);
 729
 730 //      printk("IDE Taskfile ioctl ended. rc = %i\n", err);
 731
 732         return err;
 733 }
 734 #endif
 735
 736 int ide_cmd_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 737 {
 738         u8 *buf = NULL;
 739         int bufsize = 0, err = 0;
 740         u8 args[4], xfer_rate = 0;
 741         ide_task_t tfargs;
 742         struct ide_taskfile *tf = &tfargs.tf;
 743         struct hd_driveid *id = drive->id;
 744
 745         if (NULL == (void *) arg) {
 746                 struct request *rq;
 747
 748                 rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
 749                 rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
 750                 err = blk_execute_rq(drive->queue, NULL, rq, 0);
 751                 blk_put_request(rq);
 752
 753                 return err;
 754         }
 755
 756         if (copy_from_user(args, (void __user *)arg, 4))
 757                 return -EFAULT;
 758
 759         memset(&tfargs, 0, sizeof(ide_task_t));
 760         tf->feature = args[2];
 761         if (args[0] == WIN_SMART) {
 762                 tf->nsect = args[3];
 763                 tf->lbal  = args[1];
 764                 tf->lbam  = 0x4f;
 765                 tf->lbah  = 0xc2;
 766                 tfargs.tf_flags = IDE_TFLAG_OUT_TF | IDE_TFLAG_IN_NSECT;
 767         } else {
 768                 tf->nsect = args[1];
 769                 tfargs.tf_flags = IDE_TFLAG_OUT_FEATURE |
 770                                   IDE_TFLAG_OUT_NSECT | IDE_TFLAG_IN_NSECT;
 771         }
 772         tf->command = args[0];
 773         tfargs.data_phase = args[3] ? TASKFILE_IN : TASKFILE_NO_DATA;
 774
 775         if (args[3]) {
 776                 tfargs.tf_flags |= IDE_TFLAG_IO_16BIT;
 777                 bufsize = SECTOR_WORDS * 4 * args[3];
 778                 buf = kzalloc(bufsize, GFP_KERNEL);
 779                 if (buf == NULL)
 780                         return -ENOMEM;
 781         }
 782
 783         if (tf->command == WIN_SETFEATURES &&
 784             tf->feature == SETFEATURES_XFER &&
 785             tf->nsect >= XFER_SW_DMA_0 &&
 786             (id->dma_ultra || id->dma_mword || id->dma_1word)) {
 787                 xfer_rate = args[1];
 788                 if (tf->nsect > XFER_UDMA_2 && !eighty_ninty_three(drive)) {
 789                         printk(KERN_WARNING "%s: UDMA speeds >UDMA33 cannot "
 790                                             "be set\n", drive->name);
 791                         goto abort;
 792                 }
 793         }
 794
 795         err = ide_raw_taskfile(drive, &tfargs, buf, args[3]);
 796
 797         args[0] = tf->status;
 798         args[1] = tf->error;
 799         args[2] = tf->nsect;
 800
 801         if (!err && xfer_rate) {
 802                 /* active-retuning-calls future */
 803                 ide_set_xfer_rate(drive, xfer_rate);
 804                 ide_driveid_update(drive);
 805         }
 806 abort:
 807         if (copy_to_user((void __user *)arg, &args, 4))
 808                 err = -EFAULT;
 809         if (buf) {
 810                 if (copy_to_user((void __user *)(arg + 4), buf, bufsize))
 811                         err = -EFAULT;
 812                 kfree(buf);
 813         }
 814         return err;
 815 }
 816
 817 int ide_task_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 818 {
 819         void __user *p = (void __user *)arg;
 820         int err = 0;
 821         u8 args[7];
 822         ide_task_t task;
 823
 824         if (copy_from_user(args, p, 7))
 825                 return -EFAULT;
 826
 827         memset(&task, 0, sizeof(task));
 828         memcpy(&task.tf_array[7], &args[1], 6);
 829         task.tf.command = args[0];
 830         task.tf_flags = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
 831
 832         err = ide_no_data_taskfile(drive, &task);
 833
 834         args[0] = task.tf.command;
 835         memcpy(&args[1], &task.tf_array[7], 6);
 836
 837         if (copy_to_user(p, args, 7))
 838                 err = -EFAULT;
 839
 840         return err;
 841 }