ide: avoid DMA on the stack for REQ_TYPE_ATA_PC
[firefly-linux-kernel-4.4.55.git] / drivers / ide / ide-cd.c
1 /*
2  * ATAPI CD-ROM driver.
3  *
4  * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
5  * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
6  * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
7  * Copyright (C) 2005, 2007  Bartlomiej Zolnierkiewicz
8  *
9  * May be copied or modified under the terms of the GNU General Public
10  * License.  See linux/COPYING for more information.
11  *
12  * See Documentation/cdrom/ide-cd for usage information.
13  *
14  * Suggestions are welcome. Patches that work are more welcome though. ;-)
15  * For those wishing to work on this driver, please be sure you download
16  * and comply with the latest Mt. Fuji (SFF8090 version 4) and ATAPI
17  * (SFF-8020i rev 2.6) standards. These documents can be obtained by
18  * anonymous ftp from:
19  * ftp://fission.dt.wdc.com/pub/standards/SFF_atapi/spec/SFF8020-r2.6/PS/8020r26.ps
20  * ftp://ftp.avc-pioneer.com/Mtfuji4/Spec/Fuji4r10.pdf
21  *
22  * For historical changelog please see:
23  *      Documentation/ide/ChangeLog.ide-cd.1994-2004
24  */
25
26 #define IDECD_VERSION "5.00"
27
28 #include <linux/module.h>
29 #include <linux/types.h>
30 #include <linux/kernel.h>
31 #include <linux/delay.h>
32 #include <linux/timer.h>
33 #include <linux/slab.h>
34 #include <linux/interrupt.h>
35 #include <linux/errno.h>
36 #include <linux/cdrom.h>
37 #include <linux/ide.h>
38 #include <linux/completion.h>
39 #include <linux/mutex.h>
40 #include <linux/bcd.h>
41
42 /* For SCSI -> ATAPI command conversion */
43 #include <scsi/scsi.h>
44
45 #include <linux/irq.h>
46 #include <linux/io.h>
47 #include <asm/byteorder.h>
48 #include <linux/uaccess.h>
49 #include <asm/unaligned.h>
50
51 #include "ide-cd.h"
52
53 static DEFINE_MUTEX(idecd_ref_mutex);
54
55 #define to_ide_cd(obj) container_of(obj, struct cdrom_info, kref)
56
57 #define ide_cd_g(disk) \
58         container_of((disk)->private_data, struct cdrom_info, driver)
59
60 static struct cdrom_info *ide_cd_get(struct gendisk *disk)
61 {
62         struct cdrom_info *cd = NULL;
63
64         mutex_lock(&idecd_ref_mutex);
65         cd = ide_cd_g(disk);
66         if (cd)
67                 kref_get(&cd->kref);
68         mutex_unlock(&idecd_ref_mutex);
69         return cd;
70 }
71
72 static void ide_cd_release(struct kref *);
73
74 static void ide_cd_put(struct cdrom_info *cd)
75 {
76         mutex_lock(&idecd_ref_mutex);
77         kref_put(&cd->kref, ide_cd_release);
78         mutex_unlock(&idecd_ref_mutex);
79 }
80
81 /*
82  * Generic packet command support and error handling routines.
83  */
84
85 /* Mark that we've seen a media change and invalidate our internal buffers. */
86 static void cdrom_saw_media_change(ide_drive_t *drive)
87 {
88         struct cdrom_info *cd = drive->driver_data;
89
90         cd->cd_flags |= IDE_CD_FLAG_MEDIA_CHANGED;
91         cd->cd_flags &= ~IDE_CD_FLAG_TOC_VALID;
92 }
93
94 static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
95                            struct request_sense *sense)
96 {
97         int log = 0;
98
99         if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
100                 return 0;
101
102         switch (sense->sense_key) {
103         case NO_SENSE:
104         case RECOVERED_ERROR:
105                 break;
106         case NOT_READY:
107                 /*
108                  * don't care about tray state messages for e.g. capacity
109                  * commands or in-progress or becoming ready
110                  */
111                 if (sense->asc == 0x3a || sense->asc == 0x04)
112                         break;
113                 log = 1;
114                 break;
115         case ILLEGAL_REQUEST:
116                 /*
117                  * don't log START_STOP unit with LoEj set, since we cannot
118                  * reliably check if drive can auto-close
119                  */
120                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
121                         break;
122                 log = 1;
123                 break;
124         case UNIT_ATTENTION:
125                 /*
126                  * Make good and sure we've seen this potential media change.
127                  * Some drives (i.e. Creative) fail to present the correct sense
128                  * key in the error register.
129                  */
130                 cdrom_saw_media_change(drive);
131                 break;
132         default:
133                 log = 1;
134                 break;
135         }
136         return log;
137 }
138
139 static void cdrom_analyze_sense_data(ide_drive_t *drive,
140                               struct request *failed_command,
141                               struct request_sense *sense)
142 {
143         unsigned long sector;
144         unsigned long bio_sectors;
145         struct cdrom_info *info = drive->driver_data;
146
147         if (!cdrom_log_sense(drive, failed_command, sense))
148                 return;
149
150         /*
151          * If a read toc is executed for a CD-R or CD-RW medium where the first
152          * toc has not been recorded yet, it will fail with 05/24/00 (which is a
153          * confusing error)
154          */
155         if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
156                 if (sense->sense_key == 0x05 && sense->asc == 0x24)
157                         return;
158
159         /* current error */
160         if (sense->error_code == 0x70) {
161                 switch (sense->sense_key) {
162                 case MEDIUM_ERROR:
163                 case VOLUME_OVERFLOW:
164                 case ILLEGAL_REQUEST:
165                         if (!sense->valid)
166                                 break;
167                         if (failed_command == NULL ||
168                                         !blk_fs_request(failed_command))
169                                 break;
170                         sector = (sense->information[0] << 24) |
171                                  (sense->information[1] << 16) |
172                                  (sense->information[2] <<  8) |
173                                  (sense->information[3]);
174
175                         if (drive->queue->hardsect_size == 2048)
176                                 /* device sector size is 2K */
177                                 sector <<= 2;
178
179                         bio_sectors = max(bio_sectors(failed_command->bio), 4U);
180                         sector &= ~(bio_sectors - 1);
181
182                         if (sector < get_capacity(info->disk) &&
183                             drive->probed_capacity - sector < 4 * 75)
184                                 set_capacity(info->disk, sector);
185                 }
186         }
187
188         ide_cd_log_error(drive->name, failed_command, sense);
189 }
190
191 static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
192                                       struct request *failed_command)
193 {
194         struct cdrom_info *info         = drive->driver_data;
195         struct request *rq              = &info->request_sense_request;
196
197         if (sense == NULL)
198                 sense = &info->sense_data;
199
200         /* stuff the sense request in front of our current request */
201         blk_rq_init(NULL, rq);
202         rq->cmd_type = REQ_TYPE_ATA_PC;
203         rq->rq_disk = info->disk;
204
205         rq->data = sense;
206         rq->cmd[0] = GPCMD_REQUEST_SENSE;
207         rq->cmd[4] = 18;
208         rq->data_len = 18;
209
210         rq->cmd_type = REQ_TYPE_SENSE;
211         rq->cmd_flags |= REQ_PREEMPT;
212
213         /* NOTE! Save the failed command in "rq->buffer" */
214         rq->buffer = (void *) failed_command;
215
216         ide_do_drive_cmd(drive, rq);
217 }
218
219 static void cdrom_end_request(ide_drive_t *drive, int uptodate)
220 {
221         struct request *rq = HWGROUP(drive)->rq;
222         int nsectors = rq->hard_cur_sectors;
223
224         if (blk_sense_request(rq) && uptodate) {
225                 /*
226                  * For REQ_TYPE_SENSE, "rq->buffer" points to the original
227                  * failed request
228                  */
229                 struct request *failed = (struct request *) rq->buffer;
230                 struct cdrom_info *info = drive->driver_data;
231                 void *sense = &info->sense_data;
232                 unsigned long flags;
233
234                 if (failed) {
235                         if (failed->sense) {
236                                 sense = failed->sense;
237                                 failed->sense_len = rq->sense_len;
238                         }
239                         cdrom_analyze_sense_data(drive, failed, sense);
240                         /*
241                          * now end the failed request
242                          */
243                         if (blk_fs_request(failed)) {
244                                 if (ide_end_dequeued_request(drive, failed, 0,
245                                                 failed->hard_nr_sectors))
246                                         BUG();
247                         } else {
248                                 spin_lock_irqsave(&ide_lock, flags);
249                                 if (__blk_end_request(failed, -EIO,
250                                                       failed->data_len))
251                                         BUG();
252                                 spin_unlock_irqrestore(&ide_lock, flags);
253                         }
254                 } else
255                         cdrom_analyze_sense_data(drive, NULL, sense);
256         }
257
258         if (!rq->current_nr_sectors && blk_fs_request(rq))
259                 uptodate = 1;
260         /* make sure it's fully ended */
261         if (blk_pc_request(rq))
262                 nsectors = (rq->data_len + 511) >> 9;
263         if (!nsectors)
264                 nsectors = 1;
265
266         ide_end_request(drive, uptodate, nsectors);
267 }
268
269 static void ide_dump_status_no_sense(ide_drive_t *drive, const char *msg, u8 st)
270 {
271         if (st & 0x80)
272                 return;
273         ide_dump_status(drive, msg, st);
274 }
275
276 /*
277  * Returns:
278  * 0: if the request should be continued.
279  * 1: if the request was ended.
280  */
281 static int cdrom_decode_status(ide_drive_t *drive, int good_stat, int *stat_ret)
282 {
283         struct request *rq = HWGROUP(drive)->rq;
284         int stat, err, sense_key;
285
286         /* check for errors */
287         stat = ide_read_status(drive);
288
289         if (stat_ret)
290                 *stat_ret = stat;
291
292         if (OK_STAT(stat, good_stat, BAD_R_STAT))
293                 return 0;
294
295         /* get the IDE error register */
296         err = ide_read_error(drive);
297         sense_key = err >> 4;
298
299         if (rq == NULL) {
300                 printk(KERN_ERR "%s: missing rq in %s\n",
301                                 drive->name, __func__);
302                 return 1;
303         }
304
305         if (blk_sense_request(rq)) {
306                 /*
307                  * We got an error trying to get sense info from the drive
308                  * (probably while trying to recover from a former error).
309                  * Just give up.
310                  */
311                 rq->cmd_flags |= REQ_FAILED;
312                 cdrom_end_request(drive, 0);
313                 ide_error(drive, "request sense failure", stat);
314                 return 1;
315
316         } else if (blk_pc_request(rq) || rq->cmd_type == REQ_TYPE_ATA_PC) {
317                 /* All other functions, except for READ. */
318
319                 /*
320                  * if we have an error, pass back CHECK_CONDITION as the
321                  * scsi status byte
322                  */
323                 if (blk_pc_request(rq) && !rq->errors)
324                         rq->errors = SAM_STAT_CHECK_CONDITION;
325
326                 /* check for tray open */
327                 if (sense_key == NOT_READY) {
328                         cdrom_saw_media_change(drive);
329                 } else if (sense_key == UNIT_ATTENTION) {
330                         /* check for media change */
331                         cdrom_saw_media_change(drive);
332                         return 0;
333                 } else if (sense_key == ILLEGAL_REQUEST &&
334                            rq->cmd[0] == GPCMD_START_STOP_UNIT) {
335                         /*
336                          * Don't print error message for this condition--
337                          * SFF8090i indicates that 5/24/00 is the correct
338                          * response to a request to close the tray if the
339                          * drive doesn't have that capability.
340                          * cdrom_log_sense() knows this!
341                          */
342                 } else if (!(rq->cmd_flags & REQ_QUIET)) {
343                         /* otherwise, print an error */
344                         ide_dump_status(drive, "packet command error", stat);
345                 }
346
347                 rq->cmd_flags |= REQ_FAILED;
348
349                 /*
350                  * instead of playing games with moving completions around,
351                  * remove failed request completely and end it when the
352                  * request sense has completed
353                  */
354                 goto end_request;
355
356         } else if (blk_fs_request(rq)) {
357                 int do_end_request = 0;
358
359                 /* handle errors from READ and WRITE requests */
360
361                 if (blk_noretry_request(rq))
362                         do_end_request = 1;
363
364                 if (sense_key == NOT_READY) {
365                         /* tray open */
366                         if (rq_data_dir(rq) == READ) {
367                                 cdrom_saw_media_change(drive);
368
369                                 /* fail the request */
370                                 printk(KERN_ERR "%s: tray open\n", drive->name);
371                                 do_end_request = 1;
372                         } else {
373                                 struct cdrom_info *info = drive->driver_data;
374
375                                 /*
376                                  * Allow the drive 5 seconds to recover, some
377                                  * devices will return this error while flushing
378                                  * data from cache.
379                                  */
380                                 if (!rq->errors)
381                                         info->write_timeout = jiffies +
382                                                         ATAPI_WAIT_WRITE_BUSY;
383                                 rq->errors = 1;
384                                 if (time_after(jiffies, info->write_timeout))
385                                         do_end_request = 1;
386                                 else {
387                                         unsigned long flags;
388
389                                         /*
390                                          * take a breather relying on the unplug
391                                          * timer to kick us again
392                                          */
393                                         spin_lock_irqsave(&ide_lock, flags);
394                                         blk_plug_device(drive->queue);
395                                         spin_unlock_irqrestore(&ide_lock,
396                                                                 flags);
397                                         return 1;
398                                 }
399                         }
400                 } else if (sense_key == UNIT_ATTENTION) {
401                         /* media change */
402                         cdrom_saw_media_change(drive);
403
404                         /*
405                          * Arrange to retry the request but be sure to give up
406                          * if we've retried too many times.
407                          */
408                         if (++rq->errors > ERROR_MAX)
409                                 do_end_request = 1;
410                 } else if (sense_key == ILLEGAL_REQUEST ||
411                            sense_key == DATA_PROTECT) {
412                         /*
413                          * No point in retrying after an illegal request or data
414                          * protect error.
415                          */
416                         ide_dump_status_no_sense(drive, "command error", stat);
417                         do_end_request = 1;
418                 } else if (sense_key == MEDIUM_ERROR) {
419                         /*
420                          * No point in re-trying a zillion times on a bad
421                          * sector. If we got here the error is not correctable.
422                          */
423                         ide_dump_status_no_sense(drive,
424                                                  "media error (bad sector)",
425                                                  stat);
426                         do_end_request = 1;
427                 } else if (sense_key == BLANK_CHECK) {
428                         /* disk appears blank ?? */
429                         ide_dump_status_no_sense(drive, "media error (blank)",
430                                                  stat);
431                         do_end_request = 1;
432                 } else if ((err & ~ABRT_ERR) != 0) {
433                         /* go to the default handler for other errors */
434                         ide_error(drive, "cdrom_decode_status", stat);
435                         return 1;
436                 } else if ((++rq->errors > ERROR_MAX)) {
437                         /* we've racked up too many retries, abort */
438                         do_end_request = 1;
439                 }
440
441                 /*
442                  * End a request through request sense analysis when we have
443                  * sense data. We need this in order to perform end of media
444                  * processing.
445                  */
446                 if (do_end_request)
447                         goto end_request;
448
449                 /*
450                  * If we got a CHECK_CONDITION status, queue
451                  * a request sense command.
452                  */
453                 if (stat & ERR_STAT)
454                         cdrom_queue_request_sense(drive, NULL, NULL);
455         } else {
456                 blk_dump_rq_flags(rq, "ide-cd: bad rq");
457                 cdrom_end_request(drive, 0);
458         }
459
460         /* retry, or handle the next request */
461         return 1;
462
463 end_request:
464         if (stat & ERR_STAT) {
465                 unsigned long flags;
466
467                 spin_lock_irqsave(&ide_lock, flags);
468                 blkdev_dequeue_request(rq);
469                 HWGROUP(drive)->rq = NULL;
470                 spin_unlock_irqrestore(&ide_lock, flags);
471
472                 cdrom_queue_request_sense(drive, rq->sense, rq);
473         } else
474                 cdrom_end_request(drive, 0);
475
476         return 1;
477 }
478
479 static int cdrom_timer_expiry(ide_drive_t *drive)
480 {
481         struct request *rq = HWGROUP(drive)->rq;
482         unsigned long wait = 0;
483
484         /*
485          * Some commands are *slow* and normally take a long time to complete.
486          * Usually we can use the ATAPI "disconnect" to bypass this, but not all
487          * commands/drives support that. Let ide_timer_expiry keep polling us
488          * for these.
489          */
490         switch (rq->cmd[0]) {
491         case GPCMD_BLANK:
492         case GPCMD_FORMAT_UNIT:
493         case GPCMD_RESERVE_RZONE_TRACK:
494         case GPCMD_CLOSE_TRACK:
495         case GPCMD_FLUSH_CACHE:
496                 wait = ATAPI_WAIT_PC;
497                 break;
498         default:
499                 if (!(rq->cmd_flags & REQ_QUIET))
500                         printk(KERN_INFO "ide-cd: cmd 0x%x timed out\n",
501                                          rq->cmd[0]);
502                 wait = 0;
503                 break;
504         }
505         return wait;
506 }
507
508 /*
509  * Set up the device registers for transferring a packet command on DEV,
510  * expecting to later transfer XFERLEN bytes.  HANDLER is the routine
511  * which actually transfers the command to the drive.  If this is a
512  * drq_interrupt device, this routine will arrange for HANDLER to be
513  * called when the interrupt from the drive arrives.  Otherwise, HANDLER
514  * will be called immediately after the drive is prepared for the transfer.
515  */
516 static ide_startstop_t cdrom_start_packet_command(ide_drive_t *drive,
517                                                   int xferlen,
518                                                   ide_handler_t *handler)
519 {
520         ide_startstop_t startstop;
521         struct cdrom_info *info = drive->driver_data;
522         ide_hwif_t *hwif = drive->hwif;
523
524         /* wait for the controller to be idle */
525         if (ide_wait_stat(&startstop, drive, 0, BUSY_STAT, WAIT_READY))
526                 return startstop;
527
528         /* FIXME: for Virtual DMA we must check harder */
529         if (info->dma)
530                 info->dma = !hwif->dma_ops->dma_setup(drive);
531
532         /* set up the controller registers */
533         ide_pktcmd_tf_load(drive, IDE_TFLAG_OUT_NSECT | IDE_TFLAG_OUT_LBAL,
534                            xferlen, info->dma);
535
536         if (info->cd_flags & IDE_CD_FLAG_DRQ_INTERRUPT) {
537                 /* waiting for CDB interrupt, not DMA yet. */
538                 if (info->dma)
539                         drive->waiting_for_dma = 0;
540
541                 /* packet command */
542                 ide_execute_command(drive, WIN_PACKETCMD, handler,
543                                     ATAPI_WAIT_PC, cdrom_timer_expiry);
544                 return ide_started;
545         } else {
546                 ide_execute_pkt_cmd(drive);
547
548                 return (*handler) (drive);
549         }
550 }
551
552 /*
553  * Send a packet command to DRIVE described by CMD_BUF and CMD_LEN. The device
554  * registers must have already been prepared by cdrom_start_packet_command.
555  * HANDLER is the interrupt handler to call when the command completes or
556  * there's data ready.
557  */
558 #define ATAPI_MIN_CDB_BYTES 12
559 static ide_startstop_t cdrom_transfer_packet_command(ide_drive_t *drive,
560                                           struct request *rq,
561                                           ide_handler_t *handler)
562 {
563         ide_hwif_t *hwif = drive->hwif;
564         int cmd_len;
565         struct cdrom_info *info = drive->driver_data;
566         ide_startstop_t startstop;
567
568         if (info->cd_flags & IDE_CD_FLAG_DRQ_INTERRUPT) {
569                 /*
570                  * Here we should have been called after receiving an interrupt
571                  * from the device.  DRQ should how be set.
572                  */
573
574                 /* check for errors */
575                 if (cdrom_decode_status(drive, DRQ_STAT, NULL))
576                         return ide_stopped;
577
578                 /* ok, next interrupt will be DMA interrupt */
579                 if (info->dma)
580                         drive->waiting_for_dma = 1;
581         } else {
582                 /* otherwise, we must wait for DRQ to get set */
583                 if (ide_wait_stat(&startstop, drive, DRQ_STAT,
584                                 BUSY_STAT, WAIT_READY))
585                         return startstop;
586         }
587
588         /* arm the interrupt handler */
589         ide_set_handler(drive, handler, rq->timeout, cdrom_timer_expiry);
590
591         /* ATAPI commands get padded out to 12 bytes minimum */
592         cmd_len = COMMAND_SIZE(rq->cmd[0]);
593         if (cmd_len < ATAPI_MIN_CDB_BYTES)
594                 cmd_len = ATAPI_MIN_CDB_BYTES;
595
596         /* send the command to the device */
597         hwif->output_data(drive, NULL, rq->cmd, cmd_len);
598
599         /* start the DMA if need be */
600         if (info->dma)
601                 hwif->dma_ops->dma_start(drive);
602
603         return ide_started;
604 }
605
606 /*
607  * Block read functions.
608  */
609 static void ide_cd_pad_transfer(ide_drive_t *drive, xfer_func_t *xf, int len)
610 {
611         while (len > 0) {
612                 int dum = 0;
613                 xf(drive, NULL, &dum, sizeof(dum));
614                 len -= sizeof(dum);
615         }
616 }
617
618 static void ide_cd_drain_data(ide_drive_t *drive, int nsects)
619 {
620         while (nsects > 0) {
621                 static char dum[SECTOR_SIZE];
622
623                 drive->hwif->input_data(drive, NULL, dum, sizeof(dum));
624                 nsects--;
625         }
626 }
627
628 /*
629  * Check the contents of the interrupt reason register from the cdrom
630  * and attempt to recover if there are problems.  Returns  0 if everything's
631  * ok; nonzero if the request has been terminated.
632  */
633 static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
634                                 int len, int ireason, int rw)
635 {
636         /*
637          * ireason == 0: the drive wants to receive data from us
638          * ireason == 2: the drive is expecting to transfer data to us
639          */
640         if (ireason == (!rw << 1))
641                 return 0;
642         else if (ireason == (rw << 1)) {
643                 ide_hwif_t *hwif = drive->hwif;
644                 xfer_func_t *xf;
645
646                 /* whoops... */
647                 printk(KERN_ERR "%s: %s: wrong transfer direction!\n",
648                                 drive->name, __func__);
649
650                 xf = rw ? hwif->output_data : hwif->input_data;
651                 ide_cd_pad_transfer(drive, xf, len);
652         } else  if (rw == 0 && ireason == 1) {
653                 /*
654                  * Some drives (ASUS) seem to tell us that status info is
655                  * available.  Just get it and ignore.
656                  */
657                 (void)ide_read_status(drive);
658                 return 0;
659         } else {
660                 /* drive wants a command packet, or invalid ireason... */
661                 printk(KERN_ERR "%s: %s: bad interrupt reason 0x%02x\n",
662                                 drive->name, __func__, ireason);
663         }
664
665         if (rq->cmd_type == REQ_TYPE_ATA_PC)
666                 rq->cmd_flags |= REQ_FAILED;
667
668         cdrom_end_request(drive, 0);
669         return -1;
670 }
671
672 /*
673  * Assume that the drive will always provide data in multiples of at least
674  * SECTOR_SIZE, as it gets hairy to keep track of the transfers otherwise.
675  */
676 static int ide_cd_check_transfer_size(ide_drive_t *drive, int len)
677 {
678         struct cdrom_info *cd = drive->driver_data;
679
680         if ((len % SECTOR_SIZE) == 0)
681                 return 0;
682
683         printk(KERN_ERR "%s: %s: Bad transfer size %d\n",
684                         drive->name, __func__, len);
685
686         if (cd->cd_flags & IDE_CD_FLAG_LIMIT_NFRAMES)
687                 printk(KERN_ERR "  This drive is not supported by "
688                                 "this version of the driver\n");
689         else {
690                 printk(KERN_ERR "  Trying to limit transfer sizes\n");
691                 cd->cd_flags |= IDE_CD_FLAG_LIMIT_NFRAMES;
692         }
693
694         return 1;
695 }
696
697 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *);
698
699 /*
700  * Routine to send a read/write packet command to the drive. This is usually
701  * called directly from cdrom_start_{read,write}(). However, for drq_interrupt
702  * devices, it is called from an interrupt when the drive is ready to accept
703  * the command.
704  */
705 static ide_startstop_t cdrom_start_rw_cont(ide_drive_t *drive)
706 {
707         struct request *rq = HWGROUP(drive)->rq;
708
709         if (rq_data_dir(rq) == READ) {
710                 unsigned short sectors_per_frame =
711                         queue_hardsect_size(drive->queue) >> SECTOR_BITS;
712                 int nskip = rq->sector & (sectors_per_frame - 1);
713
714                 /*
715                  * If the requested sector doesn't start on a frame boundary,
716                  * we must adjust the start of the transfer so that it does,
717                  * and remember to skip the first few sectors.
718                  *
719                  * If the rq->current_nr_sectors field is larger than the size
720                  * of the buffer, it will mean that we're to skip a number of
721                  * sectors equal to the amount by which rq->current_nr_sectors
722                  * is larger than the buffer size.
723                  */
724                 if (nskip > 0) {
725                         /* sanity check... */
726                         if (rq->current_nr_sectors !=
727                             bio_cur_sectors(rq->bio)) {
728                                 printk(KERN_ERR "%s: %s: buffer botch (%u)\n",
729                                                 drive->name, __func__,
730                                                 rq->current_nr_sectors);
731                                 cdrom_end_request(drive, 0);
732                                 return ide_stopped;
733                         }
734                         rq->current_nr_sectors += nskip;
735                 }
736         }
737 #if 0
738         else
739                 /* the immediate bit */
740                 rq->cmd[1] = 1 << 3;
741 #endif
742         /* set up the command */
743         rq->timeout = ATAPI_WAIT_PC;
744
745         /* send the command to the drive and return */
746         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
747 }
748
749 #define IDECD_SEEK_THRESHOLD    (1000)                  /* 1000 blocks */
750 #define IDECD_SEEK_TIMER        (5 * WAIT_MIN_SLEEP)    /* 100 ms */
751 #define IDECD_SEEK_TIMEOUT      (2 * WAIT_CMD)          /* 20 sec */
752
753 static ide_startstop_t cdrom_seek_intr(ide_drive_t *drive)
754 {
755         struct cdrom_info *info = drive->driver_data;
756         int stat;
757         static int retry = 10;
758
759         if (cdrom_decode_status(drive, 0, &stat))
760                 return ide_stopped;
761
762         info->cd_flags |= IDE_CD_FLAG_SEEKING;
763
764         if (retry && time_after(jiffies, info->start_seek + IDECD_SEEK_TIMER)) {
765                 if (--retry == 0)
766                         drive->dsc_overlap = 0;
767         }
768         return ide_stopped;
769 }
770
771 static ide_startstop_t cdrom_start_seek_continuation(ide_drive_t *drive)
772 {
773         struct request *rq = HWGROUP(drive)->rq;
774         sector_t frame = rq->sector;
775
776         sector_div(frame, queue_hardsect_size(drive->queue) >> SECTOR_BITS);
777
778         memset(rq->cmd, 0, BLK_MAX_CDB);
779         rq->cmd[0] = GPCMD_SEEK;
780         put_unaligned(cpu_to_be32(frame), (unsigned int *) &rq->cmd[2]);
781
782         rq->timeout = ATAPI_WAIT_PC;
783         return cdrom_transfer_packet_command(drive, rq, &cdrom_seek_intr);
784 }
785
786 static ide_startstop_t cdrom_start_seek(ide_drive_t *drive, unsigned int block)
787 {
788         struct cdrom_info *info = drive->driver_data;
789
790         info->dma = 0;
791         info->start_seek = jiffies;
792         return cdrom_start_packet_command(drive, 0,
793                                           cdrom_start_seek_continuation);
794 }
795
796 /*
797  * Fix up a possibly partially-processed request so that we can start it over
798  * entirely, or even put it back on the request queue.
799  */
800 static void restore_request(struct request *rq)
801 {
802         if (rq->buffer != bio_data(rq->bio)) {
803                 sector_t n =
804                         (rq->buffer - (char *)bio_data(rq->bio)) / SECTOR_SIZE;
805
806                 rq->buffer = bio_data(rq->bio);
807                 rq->nr_sectors += n;
808                 rq->sector -= n;
809         }
810         rq->current_nr_sectors = bio_cur_sectors(rq->bio);
811         rq->hard_cur_sectors = rq->current_nr_sectors;
812         rq->hard_nr_sectors = rq->nr_sectors;
813         rq->hard_sector = rq->sector;
814         rq->q->prep_rq_fn(rq->q, rq);
815 }
816
817 /*
818  * All other packet commands.
819  */
820 static void ide_cd_request_sense_fixup(struct request *rq)
821 {
822         /*
823          * Some of the trailing request sense fields are optional,
824          * and some drives don't send them.  Sigh.
825          */
826         if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
827             rq->data_len > 0 && rq->data_len <= 5)
828                 while (rq->data_len > 0) {
829                         *(u8 *)rq->data++ = 0;
830                         --rq->data_len;
831                 }
832 }
833
834 int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
835                     int write, void *buffer, unsigned *bufflen,
836                     struct request_sense *sense, int timeout,
837                     unsigned int cmd_flags)
838 {
839         struct cdrom_info *info = drive->driver_data;
840         struct request_sense local_sense;
841         int retries = 10;
842         unsigned int flags = 0;
843
844         if (!sense)
845                 sense = &local_sense;
846
847         /* start of retry loop */
848         do {
849                 struct request *rq;
850                 int error;
851
852                 rq = blk_get_request(drive->queue, write, __GFP_WAIT);
853
854                 memcpy(rq->cmd, cmd, BLK_MAX_CDB);
855                 rq->cmd_type = REQ_TYPE_ATA_PC;
856                 rq->sense = sense;
857                 rq->cmd_flags |= cmd_flags;
858                 rq->timeout = timeout;
859                 if (buffer) {
860                         rq->data = buffer;
861                         rq->data_len = *bufflen;
862                 }
863
864                 error = blk_execute_rq(drive->queue, info->disk, rq, 0);
865
866                 if (buffer)
867                         *bufflen = rq->data_len;
868
869                 flags = rq->cmd_flags;
870                 blk_put_request(rq);
871
872                 /*
873                  * FIXME: we should probably abort/retry or something in case of
874                  * failure.
875                  */
876                 if (flags & REQ_FAILED) {
877                         /*
878                          * The request failed.  Retry if it was due to a unit
879                          * attention status (usually means media was changed).
880                          */
881                         struct request_sense *reqbuf = sense;
882
883                         if (reqbuf->sense_key == UNIT_ATTENTION)
884                                 cdrom_saw_media_change(drive);
885                         else if (reqbuf->sense_key == NOT_READY &&
886                                  reqbuf->asc == 4 && reqbuf->ascq != 4) {
887                                 /*
888                                  * The drive is in the process of loading
889                                  * a disk.  Retry, but wait a little to give
890                                  * the drive time to complete the load.
891                                  */
892                                 ssleep(2);
893                         } else {
894                                 /* otherwise, don't retry */
895                                 retries = 0;
896                         }
897                         --retries;
898                 }
899
900                 /* end of retry loop */
901         } while ((flags & REQ_FAILED) && retries >= 0);
902
903         /* return an error if the command failed */
904         return (flags & REQ_FAILED) ? -EIO : 0;
905 }
906
907 /*
908  * Called from blk_end_request_callback() after the data of the request is
909  * completed and before the request itself is completed. By returning value '1',
910  * blk_end_request_callback() returns immediately without completing it.
911  */
912 static int cdrom_newpc_intr_dummy_cb(struct request *rq)
913 {
914         return 1;
915 }
916
917 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
918 {
919         ide_hwif_t *hwif = drive->hwif;
920         struct cdrom_info *info = drive->driver_data;
921         struct request *rq = HWGROUP(drive)->rq;
922         xfer_func_t *xferfunc;
923         ide_expiry_t *expiry = NULL;
924         int dma_error = 0, dma, stat, ireason, len, thislen, uptodate = 0;
925         int write = (rq_data_dir(rq) == WRITE) ? 1 : 0;
926         unsigned int timeout;
927         u8 lowcyl, highcyl;
928
929         /* check for errors */
930         dma = info->dma;
931         if (dma) {
932                 info->dma = 0;
933                 dma_error = hwif->dma_ops->dma_end(drive);
934                 if (dma_error) {
935                         printk(KERN_ERR "%s: DMA %s error\n", drive->name,
936                                         write ? "write" : "read");
937                         ide_dma_off(drive);
938                 }
939         }
940
941         if (cdrom_decode_status(drive, 0, &stat))
942                 return ide_stopped;
943
944         /* using dma, transfer is complete now */
945         if (dma) {
946                 if (dma_error)
947                         return ide_error(drive, "dma error", stat);
948                 if (blk_fs_request(rq)) {
949                         ide_end_request(drive, 1, rq->nr_sectors);
950                         return ide_stopped;
951                 }
952                 goto end_request;
953         }
954
955         /* ok we fall to pio :/ */
956         ireason = hwif->INB(hwif->io_ports.nsect_addr) & 0x3;
957         lowcyl  = hwif->INB(hwif->io_ports.lbam_addr);
958         highcyl = hwif->INB(hwif->io_ports.lbah_addr);
959
960         len = lowcyl + (256 * highcyl);
961
962         thislen = blk_fs_request(rq) ? len : rq->data_len;
963         if (thislen > len)
964                 thislen = len;
965
966         /* If DRQ is clear, the command has completed. */
967         if ((stat & DRQ_STAT) == 0) {
968                 if (blk_fs_request(rq)) {
969                         /*
970                          * If we're not done reading/writing, complain.
971                          * Otherwise, complete the command normally.
972                          */
973                         uptodate = 1;
974                         if (rq->current_nr_sectors > 0) {
975                                 printk(KERN_ERR "%s: %s: data underrun "
976                                                 "(%d blocks)\n",
977                                                 drive->name, __func__,
978                                                 rq->current_nr_sectors);
979                                 if (!write)
980                                         rq->cmd_flags |= REQ_FAILED;
981                                 uptodate = 0;
982                         }
983                         cdrom_end_request(drive, uptodate);
984                         return ide_stopped;
985                 } else if (!blk_pc_request(rq)) {
986                         ide_cd_request_sense_fixup(rq);
987                         /* complain if we still have data left to transfer */
988                         uptodate = rq->data_len ? 0 : 1;
989                 }
990                 goto end_request;
991         }
992
993         /* check which way to transfer data */
994         if (ide_cd_check_ireason(drive, rq, len, ireason, write))
995                 return ide_stopped;
996
997         if (blk_fs_request(rq)) {
998                 if (write == 0) {
999                         int nskip;
1000
1001                         if (ide_cd_check_transfer_size(drive, len)) {
1002                                 cdrom_end_request(drive, 0);
1003                                 return ide_stopped;
1004                         }
1005
1006                         /*
1007                          * First, figure out if we need to bit-bucket
1008                          * any of the leading sectors.
1009                          */
1010                         nskip = min_t(int, rq->current_nr_sectors
1011                                            - bio_cur_sectors(rq->bio),
1012                                            thislen >> 9);
1013                         if (nskip > 0) {
1014                                 ide_cd_drain_data(drive, nskip);
1015                                 rq->current_nr_sectors -= nskip;
1016                                 thislen -= (nskip << 9);
1017                         }
1018                 }
1019         }
1020
1021         if (ireason == 0) {
1022                 write = 1;
1023                 xferfunc = hwif->output_data;
1024         } else {
1025                 write = 0;
1026                 xferfunc = hwif->input_data;
1027         }
1028
1029         /* transfer data */
1030         while (thislen > 0) {
1031                 u8 *ptr = blk_fs_request(rq) ? NULL : rq->data;
1032                 int blen = rq->data_len;
1033
1034                 /* bio backed? */
1035                 if (rq->bio) {
1036                         if (blk_fs_request(rq)) {
1037                                 ptr = rq->buffer;
1038                                 blen = rq->current_nr_sectors << 9;
1039                         } else {
1040                                 ptr = bio_data(rq->bio);
1041                                 blen = bio_iovec(rq->bio)->bv_len;
1042                         }
1043                 }
1044
1045                 if (!ptr) {
1046                         if (blk_fs_request(rq) && !write)
1047                                 /*
1048                                  * If the buffers are full, pipe the rest into
1049                                  * oblivion.
1050                                  */
1051                                 ide_cd_drain_data(drive, thislen >> 9);
1052                         else {
1053                                 printk(KERN_ERR "%s: confused, missing data\n",
1054                                                 drive->name);
1055                                 blk_dump_rq_flags(rq, rq_data_dir(rq)
1056                                                   ? "cdrom_newpc_intr, write"
1057                                                   : "cdrom_newpc_intr, read");
1058                         }
1059                         break;
1060                 }
1061
1062                 if (blen > thislen)
1063                         blen = thislen;
1064
1065                 xferfunc(drive, NULL, ptr, blen);
1066
1067                 thislen -= blen;
1068                 len -= blen;
1069
1070                 if (blk_fs_request(rq)) {
1071                         rq->buffer += blen;
1072                         rq->nr_sectors -= (blen >> 9);
1073                         rq->current_nr_sectors -= (blen >> 9);
1074                         rq->sector += (blen >> 9);
1075
1076                         if (rq->current_nr_sectors == 0 && rq->nr_sectors)
1077                                 cdrom_end_request(drive, 1);
1078                 } else {
1079                         rq->data_len -= blen;
1080
1081                         /*
1082                          * The request can't be completed until DRQ is cleared.
1083                          * So complete the data, but don't complete the request
1084                          * using the dummy function for the callback feature
1085                          * of blk_end_request_callback().
1086                          */
1087                         if (rq->bio)
1088                                 blk_end_request_callback(rq, 0, blen,
1089                                                  cdrom_newpc_intr_dummy_cb);
1090                         else
1091                                 rq->data += blen;
1092                 }
1093                 if (!write && blk_sense_request(rq))
1094                         rq->sense_len += blen;
1095         }
1096
1097         /* pad, if necessary */
1098         if (!blk_fs_request(rq) && len > 0)
1099                 ide_cd_pad_transfer(drive, xferfunc, len);
1100
1101         if (blk_pc_request(rq)) {
1102                 timeout = rq->timeout;
1103         } else {
1104                 timeout = ATAPI_WAIT_PC;
1105                 if (!blk_fs_request(rq))
1106                         expiry = cdrom_timer_expiry;
1107         }
1108
1109         ide_set_handler(drive, cdrom_newpc_intr, timeout, expiry);
1110         return ide_started;
1111
1112 end_request:
1113         if (blk_pc_request(rq)) {
1114                 unsigned long flags;
1115                 unsigned int dlen = rq->data_len;
1116
1117                 if (dma)
1118                         rq->data_len = 0;
1119
1120                 spin_lock_irqsave(&ide_lock, flags);
1121                 if (__blk_end_request(rq, 0, dlen))
1122                         BUG();
1123                 HWGROUP(drive)->rq = NULL;
1124                 spin_unlock_irqrestore(&ide_lock, flags);
1125         } else {
1126                 if (!uptodate)
1127                         rq->cmd_flags |= REQ_FAILED;
1128                 cdrom_end_request(drive, uptodate);
1129         }
1130         return ide_stopped;
1131 }
1132
1133 static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
1134 {
1135         struct cdrom_info *cd = drive->driver_data;
1136         int write = rq_data_dir(rq) == WRITE;
1137         unsigned short sectors_per_frame =
1138                 queue_hardsect_size(drive->queue) >> SECTOR_BITS;
1139
1140         if (write) {
1141                 /* disk has become write protected */
1142                 if (cd->disk->policy) {
1143                         cdrom_end_request(drive, 0);
1144                         return ide_stopped;
1145                 }
1146         } else {
1147                 /*
1148                  * We may be retrying this request after an error.  Fix up any
1149                  * weirdness which might be present in the request packet.
1150                  */
1151                 restore_request(rq);
1152         }
1153
1154         /* use DMA, if possible / writes *must* be hardware frame aligned */
1155         if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
1156             (rq->sector & (sectors_per_frame - 1))) {
1157                 if (write) {
1158                         cdrom_end_request(drive, 0);
1159                         return ide_stopped;
1160                 }
1161                 cd->dma = 0;
1162         } else
1163                 cd->dma = drive->using_dma;
1164
1165         if (write)
1166                 cd->devinfo.media_written = 1;
1167
1168         /* start sending the read/write request to the drive */
1169         return cdrom_start_packet_command(drive, 32768, cdrom_start_rw_cont);
1170 }
1171
1172 static ide_startstop_t cdrom_do_newpc_cont(ide_drive_t *drive)
1173 {
1174         struct request *rq = HWGROUP(drive)->rq;
1175
1176         if (!rq->timeout)
1177                 rq->timeout = ATAPI_WAIT_PC;
1178
1179         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
1180 }
1181
1182 static ide_startstop_t cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
1183 {
1184         struct cdrom_info *info = drive->driver_data;
1185
1186         if (blk_pc_request(rq))
1187                 rq->cmd_flags |= REQ_QUIET;
1188         else
1189                 rq->cmd_flags &= ~REQ_FAILED;
1190
1191         info->dma = 0;
1192
1193         /* sg request */
1194         if (rq->bio) {
1195                 int mask = drive->queue->dma_alignment;
1196                 unsigned long addr =
1197                         (unsigned long)page_address(bio_page(rq->bio));
1198                 unsigned long stack_mask = ~(THREAD_SIZE - 1);
1199
1200                 info->dma = drive->using_dma;
1201
1202                 /*
1203                  * check if dma is safe
1204                  *
1205                  * NOTE! The "len" and "addr" checks should possibly have
1206                  * separate masks.
1207                  */
1208                 if ((rq->data_len & 15) || (addr & mask))
1209                         info->dma = 0;
1210
1211                 if (!((addr & stack_mask) ^
1212                       ((unsigned long)current->stack & stack_mask)))
1213                         info->dma = 0;
1214         }
1215
1216         /* start sending the command to the drive */
1217         return cdrom_start_packet_command(drive, rq->data_len,
1218                                           cdrom_do_newpc_cont);
1219 }
1220
1221 /*
1222  * cdrom driver request routine.
1223  */
1224 static ide_startstop_t ide_do_rw_cdrom(ide_drive_t *drive, struct request *rq,
1225                                         sector_t block)
1226 {
1227         ide_startstop_t action;
1228         struct cdrom_info *info = drive->driver_data;
1229
1230         if (blk_fs_request(rq)) {
1231                 if (info->cd_flags & IDE_CD_FLAG_SEEKING) {
1232                         unsigned long elapsed = jiffies - info->start_seek;
1233                         int stat = ide_read_status(drive);
1234
1235                         if ((stat & SEEK_STAT) != SEEK_STAT) {
1236                                 if (elapsed < IDECD_SEEK_TIMEOUT) {
1237                                         ide_stall_queue(drive,
1238                                                         IDECD_SEEK_TIMER);
1239                                         return ide_stopped;
1240                                 }
1241                                 printk(KERN_ERR "%s: DSC timeout\n",
1242                                                 drive->name);
1243                         }
1244                         info->cd_flags &= ~IDE_CD_FLAG_SEEKING;
1245                 }
1246                 if (rq_data_dir(rq) == READ &&
1247                     IDE_LARGE_SEEK(info->last_block, block,
1248                                    IDECD_SEEK_THRESHOLD) &&
1249                     drive->dsc_overlap)
1250                         action = cdrom_start_seek(drive, block);
1251                 else
1252                         action = cdrom_start_rw(drive, rq);
1253                 info->last_block = block;
1254                 return action;
1255         } else if (blk_sense_request(rq) || blk_pc_request(rq) ||
1256                    rq->cmd_type == REQ_TYPE_ATA_PC) {
1257                 return cdrom_do_block_pc(drive, rq);
1258         } else if (blk_special_request(rq)) {
1259                 /* right now this can only be a reset... */
1260                 cdrom_end_request(drive, 1);
1261                 return ide_stopped;
1262         }
1263
1264         blk_dump_rq_flags(rq, "ide-cd bad flags");
1265         cdrom_end_request(drive, 0);
1266         return ide_stopped;
1267 }
1268
1269
1270
1271 /*
1272  * Ioctl handling.
1273  *
1274  * Routines which queue packet commands take as a final argument a pointer to a
1275  * request_sense struct. If execution of the command results in an error with a
1276  * CHECK CONDITION status, this structure will be filled with the results of the
1277  * subsequent request sense command. The pointer can also be NULL, in which case
1278  * no sense information is returned.
1279  */
1280 static void msf_from_bcd(struct atapi_msf *msf)
1281 {
1282         msf->minute = BCD2BIN(msf->minute);
1283         msf->second = BCD2BIN(msf->second);
1284         msf->frame  = BCD2BIN(msf->frame);
1285 }
1286
1287 int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
1288 {
1289         struct cdrom_info *info = drive->driver_data;
1290         struct cdrom_device_info *cdi = &info->devinfo;
1291         unsigned char cmd[BLK_MAX_CDB];
1292
1293         memset(cmd, 0, BLK_MAX_CDB);
1294         cmd[0] = GPCMD_TEST_UNIT_READY;
1295
1296         /*
1297          * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
1298          * instead of supporting the LOAD_UNLOAD opcode.
1299          */
1300         cmd[7] = cdi->sanyo_slot % 3;
1301
1302         return ide_cd_queue_pc(drive, cmd, 0, NULL, 0, sense, 0, REQ_QUIET);
1303 }
1304
1305 static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
1306                                unsigned long *sectors_per_frame,
1307                                struct request_sense *sense)
1308 {
1309         struct {
1310                 __u32 lba;
1311                 __u32 blocklen;
1312         } capbuf;
1313
1314         int stat;
1315         unsigned char cmd[BLK_MAX_CDB];
1316         unsigned len = sizeof(capbuf);
1317
1318         memset(cmd, 0, BLK_MAX_CDB);
1319         cmd[0] = GPCMD_READ_CDVD_CAPACITY;
1320
1321         stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
1322                                REQ_QUIET);
1323         if (stat == 0) {
1324                 *capacity = 1 + be32_to_cpu(capbuf.lba);
1325                 *sectors_per_frame =
1326                         be32_to_cpu(capbuf.blocklen) >> SECTOR_BITS;
1327         }
1328
1329         return stat;
1330 }
1331
1332 static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1333                                 int format, char *buf, int buflen,
1334                                 struct request_sense *sense)
1335 {
1336         unsigned char cmd[BLK_MAX_CDB];
1337
1338         memset(cmd, 0, BLK_MAX_CDB);
1339
1340         cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1341         cmd[6] = trackno;
1342         cmd[7] = (buflen >> 8);
1343         cmd[8] = (buflen & 0xff);
1344         cmd[9] = (format << 6);
1345
1346         if (msf_flag)
1347                 cmd[1] = 2;
1348
1349         return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1350 }
1351
1352 /* Try to read the entire TOC for the disk into our internal buffer. */
1353 int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1354 {
1355         int stat, ntracks, i;
1356         struct cdrom_info *info = drive->driver_data;
1357         struct cdrom_device_info *cdi = &info->devinfo;
1358         struct atapi_toc *toc = info->toc;
1359         struct {
1360                 struct atapi_toc_header hdr;
1361                 struct atapi_toc_entry  ent;
1362         } ms_tmp;
1363         long last_written;
1364         unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1365
1366         if (toc == NULL) {
1367                 /* try to allocate space */
1368                 toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1369                 if (toc == NULL) {
1370                         printk(KERN_ERR "%s: No cdrom TOC buffer!\n",
1371                                         drive->name);
1372                         return -ENOMEM;
1373                 }
1374                 info->toc = toc;
1375         }
1376
1377         /*
1378          * Check to see if the existing data is still valid. If it is,
1379          * just return.
1380          */
1381         (void) cdrom_check_status(drive, sense);
1382
1383         if (info->cd_flags & IDE_CD_FLAG_TOC_VALID)
1384                 return 0;
1385
1386         /* try to get the total cdrom capacity and sector size */
1387         stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1388                                    sense);
1389         if (stat)
1390                 toc->capacity = 0x1fffff;
1391
1392         set_capacity(info->disk, toc->capacity * sectors_per_frame);
1393         /* save a private copy of the TOC capacity for error handling */
1394         drive->probed_capacity = toc->capacity * sectors_per_frame;
1395
1396         blk_queue_hardsect_size(drive->queue,
1397                                 sectors_per_frame << SECTOR_BITS);
1398
1399         /* first read just the header, so we know how long the TOC is */
1400         stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1401                                     sizeof(struct atapi_toc_header), sense);
1402         if (stat)
1403                 return stat;
1404
1405         if (info->cd_flags & IDE_CD_FLAG_TOCTRACKS_AS_BCD) {
1406                 toc->hdr.first_track = BCD2BIN(toc->hdr.first_track);
1407                 toc->hdr.last_track  = BCD2BIN(toc->hdr.last_track);
1408         }
1409
1410         ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1411         if (ntracks <= 0)
1412                 return -EIO;
1413         if (ntracks > MAX_TRACKS)
1414                 ntracks = MAX_TRACKS;
1415
1416         /* now read the whole schmeer */
1417         stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1418                                   (char *)&toc->hdr,
1419                                    sizeof(struct atapi_toc_header) +
1420                                    (ntracks + 1) *
1421                                    sizeof(struct atapi_toc_entry), sense);
1422
1423         if (stat && toc->hdr.first_track > 1) {
1424                 /*
1425                  * Cds with CDI tracks only don't have any TOC entries, despite
1426                  * of this the returned values are
1427                  * first_track == last_track = number of CDI tracks + 1,
1428                  * so that this case is indistinguishable from the same layout
1429                  * plus an additional audio track. If we get an error for the
1430                  * regular case, we assume a CDI without additional audio
1431                  * tracks. In this case the readable TOC is empty (CDI tracks
1432                  * are not included) and only holds the Leadout entry.
1433                  *
1434                  * Heiko Eißfeldt.
1435                  */
1436                 ntracks = 0;
1437                 stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1438                                            (char *)&toc->hdr,
1439                                            sizeof(struct atapi_toc_header) +
1440                                            (ntracks + 1) *
1441                                            sizeof(struct atapi_toc_entry),
1442                                            sense);
1443                 if (stat)
1444                         return stat;
1445
1446                 if (info->cd_flags & IDE_CD_FLAG_TOCTRACKS_AS_BCD) {
1447                         toc->hdr.first_track = (u8)BIN2BCD(CDROM_LEADOUT);
1448                         toc->hdr.last_track = (u8)BIN2BCD(CDROM_LEADOUT);
1449                 } else {
1450                         toc->hdr.first_track = CDROM_LEADOUT;
1451                         toc->hdr.last_track = CDROM_LEADOUT;
1452                 }
1453         }
1454
1455         if (stat)
1456                 return stat;
1457
1458         toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1459
1460         if (info->cd_flags & IDE_CD_FLAG_TOCTRACKS_AS_BCD) {
1461                 toc->hdr.first_track = BCD2BIN(toc->hdr.first_track);
1462                 toc->hdr.last_track  = BCD2BIN(toc->hdr.last_track);
1463         }
1464
1465         for (i = 0; i <= ntracks; i++) {
1466                 if (info->cd_flags & IDE_CD_FLAG_TOCADDR_AS_BCD) {
1467                         if (info->cd_flags & IDE_CD_FLAG_TOCTRACKS_AS_BCD)
1468                                 toc->ent[i].track = BCD2BIN(toc->ent[i].track);
1469                         msf_from_bcd(&toc->ent[i].addr.msf);
1470                 }
1471                 toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1472                                                   toc->ent[i].addr.msf.second,
1473                                                   toc->ent[i].addr.msf.frame);
1474         }
1475
1476         if (toc->hdr.first_track != CDROM_LEADOUT) {
1477                 /* read the multisession information */
1478                 stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1479                                            sizeof(ms_tmp), sense);
1480                 if (stat)
1481                         return stat;
1482
1483                 toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1484         } else {
1485                 ms_tmp.hdr.last_track = CDROM_LEADOUT;
1486                 ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1487                 toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1488         }
1489
1490         if (info->cd_flags & IDE_CD_FLAG_TOCADDR_AS_BCD) {
1491                 /* re-read multisession information using MSF format */
1492                 stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1493                                            sizeof(ms_tmp), sense);
1494                 if (stat)
1495                         return stat;
1496
1497                 msf_from_bcd(&ms_tmp.ent.addr.msf);
1498                 toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1499                                                    ms_tmp.ent.addr.msf.second,
1500                                                    ms_tmp.ent.addr.msf.frame);
1501         }
1502
1503         toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1504
1505         /* now try to get the total cdrom capacity */
1506         stat = cdrom_get_last_written(cdi, &last_written);
1507         if (!stat && (last_written > toc->capacity)) {
1508                 toc->capacity = last_written;
1509                 set_capacity(info->disk, toc->capacity * sectors_per_frame);
1510                 drive->probed_capacity = toc->capacity * sectors_per_frame;
1511         }
1512
1513         /* Remember that we've read this stuff. */
1514         info->cd_flags |= IDE_CD_FLAG_TOC_VALID;
1515
1516         return 0;
1517 }
1518
1519 int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1520 {
1521         struct cdrom_info *info = drive->driver_data;
1522         struct cdrom_device_info *cdi = &info->devinfo;
1523         struct packet_command cgc;
1524         int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1525
1526         if ((info->cd_flags & IDE_CD_FLAG_FULL_CAPS_PAGE) == 0)
1527                 size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1528
1529         init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1530         do {
1531                 /* we seem to get stat=0x01,err=0x00 the first time (??) */
1532                 stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1533                 if (!stat)
1534                         break;
1535         } while (--attempts);
1536         return stat;
1537 }
1538
1539 void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1540 {
1541         struct cdrom_info *cd = drive->driver_data;
1542         u16 curspeed, maxspeed;
1543
1544         curspeed = *(u16 *)&buf[8 + 14];
1545         maxspeed = *(u16 *)&buf[8 +  8];
1546
1547         if (cd->cd_flags & IDE_CD_FLAG_LE_SPEED_FIELDS) {
1548                 curspeed = le16_to_cpu(curspeed);
1549                 maxspeed = le16_to_cpu(maxspeed);
1550         } else {
1551                 curspeed = be16_to_cpu(curspeed);
1552                 maxspeed = be16_to_cpu(maxspeed);
1553         }
1554
1555         cd->current_speed = (curspeed + (176/2)) / 176;
1556         cd->max_speed = (maxspeed + (176/2)) / 176;
1557 }
1558
1559 #define IDE_CD_CAPABILITIES \
1560         (CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1561          CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1562          CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1563          CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1564          CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1565
1566 static struct cdrom_device_ops ide_cdrom_dops = {
1567         .open                   = ide_cdrom_open_real,
1568         .release                = ide_cdrom_release_real,
1569         .drive_status           = ide_cdrom_drive_status,
1570         .media_changed          = ide_cdrom_check_media_change_real,
1571         .tray_move              = ide_cdrom_tray_move,
1572         .lock_door              = ide_cdrom_lock_door,
1573         .select_speed           = ide_cdrom_select_speed,
1574         .get_last_session       = ide_cdrom_get_last_session,
1575         .get_mcn                = ide_cdrom_get_mcn,
1576         .reset                  = ide_cdrom_reset,
1577         .audio_ioctl            = ide_cdrom_audio_ioctl,
1578         .capability             = IDE_CD_CAPABILITIES,
1579         .generic_packet         = ide_cdrom_packet,
1580 };
1581
1582 static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1583 {
1584         struct cdrom_info *info = drive->driver_data;
1585         struct cdrom_device_info *devinfo = &info->devinfo;
1586
1587         devinfo->ops = &ide_cdrom_dops;
1588         devinfo->speed = info->current_speed;
1589         devinfo->capacity = nslots;
1590         devinfo->handle = drive;
1591         strcpy(devinfo->name, drive->name);
1592
1593         if (info->cd_flags & IDE_CD_FLAG_NO_SPEED_SELECT)
1594                 devinfo->mask |= CDC_SELECT_SPEED;
1595
1596         devinfo->disk = info->disk;
1597         return register_cdrom(devinfo);
1598 }
1599
1600 static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1601 {
1602         struct cdrom_info *cd = drive->driver_data;
1603         struct cdrom_device_info *cdi = &cd->devinfo;
1604         u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1605         mechtype_t mechtype;
1606         int nslots = 1;
1607
1608         cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1609                      CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1610                      CDC_MO_DRIVE | CDC_RAM);
1611
1612         if (drive->media == ide_optical) {
1613                 cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1614                 printk(KERN_ERR "%s: ATAPI magneto-optical drive\n",
1615                                 drive->name);
1616                 return nslots;
1617         }
1618
1619         if (cd->cd_flags & IDE_CD_FLAG_PRE_ATAPI12) {
1620                 cd->cd_flags &= ~IDE_CD_FLAG_NO_EJECT;
1621                 cdi->mask &= ~CDC_PLAY_AUDIO;
1622                 return nslots;
1623         }
1624
1625         /*
1626          * We have to cheat a little here. the packet will eventually be queued
1627          * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1628          * Since this device hasn't been registered with the Uniform layer yet,
1629          * it can't do this. Same goes for cdi->ops.
1630          */
1631         cdi->handle = drive;
1632         cdi->ops = &ide_cdrom_dops;
1633
1634         if (ide_cdrom_get_capabilities(drive, buf))
1635                 return 0;
1636
1637         if ((buf[8 + 6] & 0x01) == 0)
1638                 cd->cd_flags |= IDE_CD_FLAG_NO_DOORLOCK;
1639         if (buf[8 + 6] & 0x08)
1640                 cd->cd_flags &= ~IDE_CD_FLAG_NO_EJECT;
1641         if (buf[8 + 3] & 0x01)
1642                 cdi->mask &= ~CDC_CD_R;
1643         if (buf[8 + 3] & 0x02)
1644                 cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1645         if (buf[8 + 2] & 0x38)
1646                 cdi->mask &= ~CDC_DVD;
1647         if (buf[8 + 3] & 0x20)
1648                 cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1649         if (buf[8 + 3] & 0x10)
1650                 cdi->mask &= ~CDC_DVD_R;
1651         if ((buf[8 + 4] & 0x01) || (cd->cd_flags & IDE_CD_FLAG_PLAY_AUDIO_OK))
1652                 cdi->mask &= ~CDC_PLAY_AUDIO;
1653
1654         mechtype = buf[8 + 6] >> 5;
1655         if (mechtype == mechtype_caddy || mechtype == mechtype_popup)
1656                 cdi->mask |= CDC_CLOSE_TRAY;
1657
1658         if (cdi->sanyo_slot > 0) {
1659                 cdi->mask &= ~CDC_SELECT_DISC;
1660                 nslots = 3;
1661         } else if (mechtype == mechtype_individual_changer ||
1662                    mechtype == mechtype_cartridge_changer) {
1663                 nslots = cdrom_number_of_slots(cdi);
1664                 if (nslots > 1)
1665                         cdi->mask &= ~CDC_SELECT_DISC;
1666         }
1667
1668         ide_cdrom_update_speed(drive, buf);
1669
1670         printk(KERN_INFO "%s: ATAPI", drive->name);
1671
1672         /* don't print speed if the drive reported 0 */
1673         if (cd->max_speed)
1674                 printk(KERN_CONT " %dX", cd->max_speed);
1675
1676         printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1677
1678         if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1679                 printk(KERN_CONT " DVD%s%s",
1680                                  (cdi->mask & CDC_DVD_R) ? "" : "-R",
1681                                  (cdi->mask & CDC_DVD_RAM) ? "" : "-RAM");
1682
1683         if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1684                 printk(KERN_CONT " CD%s%s",
1685                                  (cdi->mask & CDC_CD_R) ? "" : "-R",
1686                                  (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1687
1688         if ((cdi->mask & CDC_SELECT_DISC) == 0)
1689                 printk(KERN_CONT " changer w/%d slots", nslots);
1690         else
1691                 printk(KERN_CONT " drive");
1692
1693         printk(KERN_CONT ", %dkB Cache\n", be16_to_cpu(*(u16 *)&buf[8 + 12]));
1694
1695         return nslots;
1696 }
1697
1698 /* standard prep_rq_fn that builds 10 byte cmds */
1699 static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1700 {
1701         int hard_sect = queue_hardsect_size(q);
1702         long block = (long)rq->hard_sector / (hard_sect >> 9);
1703         unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1704
1705         memset(rq->cmd, 0, BLK_MAX_CDB);
1706
1707         if (rq_data_dir(rq) == READ)
1708                 rq->cmd[0] = GPCMD_READ_10;
1709         else
1710                 rq->cmd[0] = GPCMD_WRITE_10;
1711
1712         /*
1713          * fill in lba
1714          */
1715         rq->cmd[2] = (block >> 24) & 0xff;
1716         rq->cmd[3] = (block >> 16) & 0xff;
1717         rq->cmd[4] = (block >>  8) & 0xff;
1718         rq->cmd[5] = block & 0xff;
1719
1720         /*
1721          * and transfer length
1722          */
1723         rq->cmd[7] = (blocks >> 8) & 0xff;
1724         rq->cmd[8] = blocks & 0xff;
1725         rq->cmd_len = 10;
1726         return BLKPREP_OK;
1727 }
1728
1729 /*
1730  * Most of the SCSI commands are supported directly by ATAPI devices.
1731  * This transform handles the few exceptions.
1732  */
1733 static int ide_cdrom_prep_pc(struct request *rq)
1734 {
1735         u8 *c = rq->cmd;
1736
1737         /* transform 6-byte read/write commands to the 10-byte version */
1738         if (c[0] == READ_6 || c[0] == WRITE_6) {
1739                 c[8] = c[4];
1740                 c[5] = c[3];
1741                 c[4] = c[2];
1742                 c[3] = c[1] & 0x1f;
1743                 c[2] = 0;
1744                 c[1] &= 0xe0;
1745                 c[0] += (READ_10 - READ_6);
1746                 rq->cmd_len = 10;
1747                 return BLKPREP_OK;
1748         }
1749
1750         /*
1751          * it's silly to pretend we understand 6-byte sense commands, just
1752          * reject with ILLEGAL_REQUEST and the caller should take the
1753          * appropriate action
1754          */
1755         if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1756                 rq->errors = ILLEGAL_REQUEST;
1757                 return BLKPREP_KILL;
1758         }
1759
1760         return BLKPREP_OK;
1761 }
1762
1763 static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1764 {
1765         if (blk_fs_request(rq))
1766                 return ide_cdrom_prep_fs(q, rq);
1767         else if (blk_pc_request(rq))
1768                 return ide_cdrom_prep_pc(rq);
1769
1770         return 0;
1771 }
1772
1773 struct cd_list_entry {
1774         const char      *id_model;
1775         const char      *id_firmware;
1776         unsigned int    cd_flags;
1777 };
1778
1779 #ifdef CONFIG_IDE_PROC_FS
1780 static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1781 {
1782         unsigned long capacity, sectors_per_frame;
1783
1784         if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1785                 return 0;
1786
1787         return capacity * sectors_per_frame;
1788 }
1789
1790 static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1791                                         int count, int *eof, void *data)
1792 {
1793         ide_drive_t *drive = data;
1794         int len;
1795
1796         len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1797         PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1798 }
1799
1800 static ide_proc_entry_t idecd_proc[] = {
1801         { "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1802         { NULL, 0, NULL, NULL }
1803 };
1804
1805 static void ide_cdrom_add_settings(ide_drive_t *drive)
1806 {
1807         ide_add_setting(drive, "dsc_overlap", SETTING_RW, TYPE_BYTE, 0, 1, 1, 1,
1808                         &drive->dsc_overlap, NULL);
1809 }
1810 #else
1811 static inline void ide_cdrom_add_settings(ide_drive_t *drive) { ; }
1812 #endif
1813
1814 static const struct cd_list_entry ide_cd_quirks_list[] = {
1815         /* Limit transfer size per interrupt. */
1816         { "SAMSUNG CD-ROM SCR-2430", NULL,   IDE_CD_FLAG_LIMIT_NFRAMES      },
1817         { "SAMSUNG CD-ROM SCR-2432", NULL,   IDE_CD_FLAG_LIMIT_NFRAMES      },
1818         /* SCR-3231 doesn't support the SET_CD_SPEED command. */
1819         { "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_CD_FLAG_NO_SPEED_SELECT    },
1820         /* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1821         { "NEC CD-ROM DRIVE:260",    "1.01", IDE_CD_FLAG_TOCADDR_AS_BCD |
1822                                              IDE_CD_FLAG_PRE_ATAPI12,       },
1823         /* Vertos 300, some versions of this drive like to talk BCD. */
1824         { "V003S0DS",                NULL,   IDE_CD_FLAG_VERTOS_300_SSD,    },
1825         /* Vertos 600 ESD. */
1826         { "V006E0DS",                NULL,   IDE_CD_FLAG_VERTOS_600_ESD,    },
1827         /*
1828          * Sanyo 3 CD changer uses a non-standard command for CD changing
1829          * (by default standard ATAPI support for CD changers is used).
1830          */
1831         { "CD-ROM CDR-C3 G",         NULL,   IDE_CD_FLAG_SANYO_3CD          },
1832         { "CD-ROM CDR-C3G",          NULL,   IDE_CD_FLAG_SANYO_3CD          },
1833         { "CD-ROM CDR_C36",          NULL,   IDE_CD_FLAG_SANYO_3CD          },
1834         /* Stingray 8X CD-ROM. */
1835         { "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_CD_FLAG_PRE_ATAPI12},
1836         /*
1837          * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1838          * mode sense page capabilities size, but older drives break.
1839          */
1840         { "ATAPI CD ROM DRIVE 50X MAX", NULL,   IDE_CD_FLAG_FULL_CAPS_PAGE  },
1841         { "WPI CDS-32X",                NULL,   IDE_CD_FLAG_FULL_CAPS_PAGE  },
1842         /* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1843         { "",                        "241N", IDE_CD_FLAG_LE_SPEED_FIELDS    },
1844         /*
1845          * Some drives used by Apple don't advertise audio play
1846          * but they do support reading TOC & audio datas.
1847          */
1848         { "MATSHITADVD-ROM SR-8187", NULL,   IDE_CD_FLAG_PLAY_AUDIO_OK      },
1849         { "MATSHITADVD-ROM SR-8186", NULL,   IDE_CD_FLAG_PLAY_AUDIO_OK      },
1850         { "MATSHITADVD-ROM SR-8176", NULL,   IDE_CD_FLAG_PLAY_AUDIO_OK      },
1851         { "MATSHITADVD-ROM SR-8174", NULL,   IDE_CD_FLAG_PLAY_AUDIO_OK      },
1852         { "Optiarc DVD RW AD-5200A", NULL,   IDE_CD_FLAG_PLAY_AUDIO_OK      },
1853         { NULL, NULL, 0 }
1854 };
1855
1856 static unsigned int ide_cd_flags(struct hd_driveid *id)
1857 {
1858         const struct cd_list_entry *cle = ide_cd_quirks_list;
1859
1860         while (cle->id_model) {
1861                 if (strcmp(cle->id_model, id->model) == 0 &&
1862                     (cle->id_firmware == NULL ||
1863                      strstr(id->fw_rev, cle->id_firmware)))
1864                         return cle->cd_flags;
1865                 cle++;
1866         }
1867
1868         return 0;
1869 }
1870
1871 static int ide_cdrom_setup(ide_drive_t *drive)
1872 {
1873         struct cdrom_info *cd = drive->driver_data;
1874         struct cdrom_device_info *cdi = &cd->devinfo;
1875         struct hd_driveid *id = drive->id;
1876         int nslots;
1877
1878         blk_queue_prep_rq(drive->queue, ide_cdrom_prep_fn);
1879         blk_queue_dma_alignment(drive->queue, 31);
1880         drive->queue->unplug_delay = (1 * HZ) / 1000;
1881         if (!drive->queue->unplug_delay)
1882                 drive->queue->unplug_delay = 1;
1883
1884         drive->special.all      = 0;
1885
1886         cd->cd_flags = IDE_CD_FLAG_MEDIA_CHANGED | IDE_CD_FLAG_NO_EJECT |
1887                        ide_cd_flags(id);
1888
1889         if ((id->config & 0x0060) == 0x20)
1890                 cd->cd_flags |= IDE_CD_FLAG_DRQ_INTERRUPT;
1891
1892         if ((cd->cd_flags & IDE_CD_FLAG_VERTOS_300_SSD) &&
1893             id->fw_rev[4] == '1' && id->fw_rev[6] <= '2')
1894                 cd->cd_flags |= (IDE_CD_FLAG_TOCTRACKS_AS_BCD |
1895                                  IDE_CD_FLAG_TOCADDR_AS_BCD);
1896         else if ((cd->cd_flags & IDE_CD_FLAG_VERTOS_600_ESD) &&
1897                  id->fw_rev[4] == '1' && id->fw_rev[6] <= '2')
1898                 cd->cd_flags |= IDE_CD_FLAG_TOCTRACKS_AS_BCD;
1899         else if (cd->cd_flags & IDE_CD_FLAG_SANYO_3CD)
1900                 /* 3 => use CD in slot 0 */
1901                 cdi->sanyo_slot = 3;
1902
1903         nslots = ide_cdrom_probe_capabilities(drive);
1904
1905         /* set correct block size */
1906         blk_queue_hardsect_size(drive->queue, CD_FRAMESIZE);
1907
1908         drive->dsc_overlap = (drive->next != drive);
1909
1910         if (ide_cdrom_register(drive, nslots)) {
1911                 printk(KERN_ERR "%s: %s failed to register device with the"
1912                                 " cdrom driver.\n", drive->name, __func__);
1913                 cd->devinfo.handle = NULL;
1914                 return 1;
1915         }
1916         ide_cdrom_add_settings(drive);
1917         return 0;
1918 }
1919
1920 static void ide_cd_remove(ide_drive_t *drive)
1921 {
1922         struct cdrom_info *info = drive->driver_data;
1923
1924         ide_proc_unregister_driver(drive, info->driver);
1925
1926         del_gendisk(info->disk);
1927
1928         ide_cd_put(info);
1929 }
1930
1931 static void ide_cd_release(struct kref *kref)
1932 {
1933         struct cdrom_info *info = to_ide_cd(kref);
1934         struct cdrom_device_info *devinfo = &info->devinfo;
1935         ide_drive_t *drive = info->drive;
1936         struct gendisk *g = info->disk;
1937
1938         kfree(info->toc);
1939         if (devinfo->handle == drive)
1940                 unregister_cdrom(devinfo);
1941         drive->dsc_overlap = 0;
1942         drive->driver_data = NULL;
1943         blk_queue_prep_rq(drive->queue, NULL);
1944         g->private_data = NULL;
1945         put_disk(g);
1946         kfree(info);
1947 }
1948
1949 static int ide_cd_probe(ide_drive_t *);
1950
1951 static ide_driver_t ide_cdrom_driver = {
1952         .gen_driver = {
1953                 .owner          = THIS_MODULE,
1954                 .name           = "ide-cdrom",
1955                 .bus            = &ide_bus_type,
1956         },
1957         .probe                  = ide_cd_probe,
1958         .remove                 = ide_cd_remove,
1959         .version                = IDECD_VERSION,
1960         .media                  = ide_cdrom,
1961         .supports_dsc_overlap   = 1,
1962         .do_request             = ide_do_rw_cdrom,
1963         .end_request            = ide_end_request,
1964         .error                  = __ide_error,
1965         .abort                  = __ide_abort,
1966 #ifdef CONFIG_IDE_PROC_FS
1967         .proc                   = idecd_proc,
1968 #endif
1969 };
1970
1971 static int idecd_open(struct inode *inode, struct file *file)
1972 {
1973         struct gendisk *disk = inode->i_bdev->bd_disk;
1974         struct cdrom_info *info;
1975         int rc = -ENOMEM;
1976
1977         info = ide_cd_get(disk);
1978         if (!info)
1979                 return -ENXIO;
1980
1981         rc = cdrom_open(&info->devinfo, inode, file);
1982
1983         if (rc < 0)
1984                 ide_cd_put(info);
1985
1986         return rc;
1987 }
1988
1989 static int idecd_release(struct inode *inode, struct file *file)
1990 {
1991         struct gendisk *disk = inode->i_bdev->bd_disk;
1992         struct cdrom_info *info = ide_cd_g(disk);
1993
1994         cdrom_release(&info->devinfo, file);
1995
1996         ide_cd_put(info);
1997
1998         return 0;
1999 }
2000
2001 static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2002 {
2003         struct packet_command cgc;
2004         char buffer[16];
2005         int stat;
2006         char spindown;
2007
2008         if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
2009                 return -EFAULT;
2010
2011         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2012
2013         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2014         if (stat)
2015                 return stat;
2016
2017         buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
2018         return cdrom_mode_select(cdi, &cgc);
2019 }
2020
2021 static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2022 {
2023         struct packet_command cgc;
2024         char buffer[16];
2025         int stat;
2026         char spindown;
2027
2028         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2029
2030         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2031         if (stat)
2032                 return stat;
2033
2034         spindown = buffer[11] & 0x0f;
2035         if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
2036                 return -EFAULT;
2037         return 0;
2038 }
2039
2040 static int idecd_ioctl(struct inode *inode, struct file *file,
2041                         unsigned int cmd, unsigned long arg)
2042 {
2043         struct block_device *bdev = inode->i_bdev;
2044         struct cdrom_info *info = ide_cd_g(bdev->bd_disk);
2045         int err;
2046
2047         switch (cmd) {
2048         case CDROMSETSPINDOWN:
2049                 return idecd_set_spindown(&info->devinfo, arg);
2050         case CDROMGETSPINDOWN:
2051                 return idecd_get_spindown(&info->devinfo, arg);
2052         default:
2053                 break;
2054         }
2055
2056         err = generic_ide_ioctl(info->drive, file, bdev, cmd, arg);
2057         if (err == -EINVAL)
2058                 err = cdrom_ioctl(file, &info->devinfo, inode, cmd, arg);
2059
2060         return err;
2061 }
2062
2063 static int idecd_media_changed(struct gendisk *disk)
2064 {
2065         struct cdrom_info *info = ide_cd_g(disk);
2066         return cdrom_media_changed(&info->devinfo);
2067 }
2068
2069 static int idecd_revalidate_disk(struct gendisk *disk)
2070 {
2071         struct cdrom_info *info = ide_cd_g(disk);
2072         struct request_sense sense;
2073
2074         ide_cd_read_toc(info->drive, &sense);
2075
2076         return  0;
2077 }
2078
2079 static struct block_device_operations idecd_ops = {
2080         .owner                  = THIS_MODULE,
2081         .open                   = idecd_open,
2082         .release                = idecd_release,
2083         .ioctl                  = idecd_ioctl,
2084         .media_changed          = idecd_media_changed,
2085         .revalidate_disk        = idecd_revalidate_disk
2086 };
2087
2088 /* module options */
2089 static char *ignore;
2090
2091 module_param(ignore, charp, 0400);
2092 MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
2093
2094 static int ide_cd_probe(ide_drive_t *drive)
2095 {
2096         struct cdrom_info *info;
2097         struct gendisk *g;
2098         struct request_sense sense;
2099
2100         if (!strstr("ide-cdrom", drive->driver_req))
2101                 goto failed;
2102         if (!drive->present)
2103                 goto failed;
2104         if (drive->media != ide_cdrom && drive->media != ide_optical)
2105                 goto failed;
2106         /* skip drives that we were told to ignore */
2107         if (ignore != NULL) {
2108                 if (strstr(ignore, drive->name)) {
2109                         printk(KERN_INFO "ide-cd: ignoring drive %s\n",
2110                                          drive->name);
2111                         goto failed;
2112                 }
2113         }
2114         info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
2115         if (info == NULL) {
2116                 printk(KERN_ERR "%s: Can't allocate a cdrom structure\n",
2117                                 drive->name);
2118                 goto failed;
2119         }
2120
2121         g = alloc_disk(1 << PARTN_BITS);
2122         if (!g)
2123                 goto out_free_cd;
2124
2125         ide_init_disk(g, drive);
2126
2127         ide_proc_register_driver(drive, &ide_cdrom_driver);
2128
2129         kref_init(&info->kref);
2130
2131         info->drive = drive;
2132         info->driver = &ide_cdrom_driver;
2133         info->disk = g;
2134
2135         g->private_data = &info->driver;
2136
2137         drive->driver_data = info;
2138
2139         g->minors = 1;
2140         g->driverfs_dev = &drive->gendev;
2141         g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
2142         if (ide_cdrom_setup(drive)) {
2143                 ide_proc_unregister_driver(drive, &ide_cdrom_driver);
2144                 ide_cd_release(&info->kref);
2145                 goto failed;
2146         }
2147
2148         ide_cd_read_toc(drive, &sense);
2149         g->fops = &idecd_ops;
2150         g->flags |= GENHD_FL_REMOVABLE;
2151         add_disk(g);
2152         return 0;
2153
2154 out_free_cd:
2155         kfree(info);
2156 failed:
2157         return -ENODEV;
2158 }
2159
2160 static void __exit ide_cdrom_exit(void)
2161 {
2162         driver_unregister(&ide_cdrom_driver.gen_driver);
2163 }
2164
2165 static int __init ide_cdrom_init(void)
2166 {
2167         return driver_register(&ide_cdrom_driver.gen_driver);
2168 }
2169
2170 MODULE_ALIAS("ide:*m-cdrom*");
2171 MODULE_ALIAS("ide-cd");
2172 module_init(ide_cdrom_init);
2173 module_exit(ide_cdrom_exit);
2174 MODULE_LICENSE("GPL");