ide-atapi: accomodate transfer length calculation for ide-cd
[safe/jmp/linux-2.6] / drivers / ide / ide-cd.c
1 /*
2  * ATAPI CD-ROM driver.
3  *
4  * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
5  * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
6  * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
7  * Copyright (C) 2005, 2007  Bartlomiej Zolnierkiewicz
8  *
9  * May be copied or modified under the terms of the GNU General Public
10  * License.  See linux/COPYING for more information.
11  *
12  * See Documentation/cdrom/ide-cd for usage information.
13  *
14  * Suggestions are welcome. Patches that work are more welcome though. ;-)
15  * For those wishing to work on this driver, please be sure you download
16  * and comply with the latest Mt. Fuji (SFF8090 version 4) and ATAPI
17  * (SFF-8020i rev 2.6) standards. These documents can be obtained by
18  * anonymous ftp from:
19  * ftp://fission.dt.wdc.com/pub/standards/SFF_atapi/spec/SFF8020-r2.6/PS/8020r26.ps
20  * ftp://ftp.avc-pioneer.com/Mtfuji4/Spec/Fuji4r10.pdf
21  *
22  * For historical changelog please see:
23  *      Documentation/ide/ChangeLog.ide-cd.1994-2004
24  */
25
26 #define DRV_NAME "ide-cd"
27 #define PFX DRV_NAME ": "
28
29 #define IDECD_VERSION "5.00"
30
31 #include <linux/module.h>
32 #include <linux/types.h>
33 #include <linux/kernel.h>
34 #include <linux/delay.h>
35 #include <linux/timer.h>
36 #include <linux/slab.h>
37 #include <linux/interrupt.h>
38 #include <linux/errno.h>
39 #include <linux/cdrom.h>
40 #include <linux/ide.h>
41 #include <linux/completion.h>
42 #include <linux/mutex.h>
43 #include <linux/bcd.h>
44
45 /* For SCSI -> ATAPI command conversion */
46 #include <scsi/scsi.h>
47
48 #include <linux/irq.h>
49 #include <linux/io.h>
50 #include <asm/byteorder.h>
51 #include <linux/uaccess.h>
52 #include <asm/unaligned.h>
53
54 #include "ide-cd.h"
55
56 static DEFINE_MUTEX(idecd_ref_mutex);
57
58 static void ide_cd_release(struct kref *);
59
60 static struct cdrom_info *ide_cd_get(struct gendisk *disk)
61 {
62         struct cdrom_info *cd = NULL;
63
64         mutex_lock(&idecd_ref_mutex);
65         cd = ide_drv_g(disk, cdrom_info);
66         if (cd) {
67                 if (ide_device_get(cd->drive))
68                         cd = NULL;
69                 else
70                         kref_get(&cd->kref);
71
72         }
73         mutex_unlock(&idecd_ref_mutex);
74         return cd;
75 }
76
77 static void ide_cd_put(struct cdrom_info *cd)
78 {
79         ide_drive_t *drive = cd->drive;
80
81         mutex_lock(&idecd_ref_mutex);
82         kref_put(&cd->kref, ide_cd_release);
83         ide_device_put(drive);
84         mutex_unlock(&idecd_ref_mutex);
85 }
86
87 /*
88  * Generic packet command support and error handling routines.
89  */
90
91 /* Mark that we've seen a media change and invalidate our internal buffers. */
92 static void cdrom_saw_media_change(ide_drive_t *drive)
93 {
94         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
95         drive->atapi_flags &= ~IDE_AFLAG_TOC_VALID;
96 }
97
98 static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
99                            struct request_sense *sense)
100 {
101         int log = 0;
102
103         ide_debug_log(IDE_DBG_SENSE, "Call %s, sense_key: 0x%x\n", __func__,
104                       sense->sense_key);
105
106         if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
107                 return 0;
108
109         switch (sense->sense_key) {
110         case NO_SENSE:
111         case RECOVERED_ERROR:
112                 break;
113         case NOT_READY:
114                 /*
115                  * don't care about tray state messages for e.g. capacity
116                  * commands or in-progress or becoming ready
117                  */
118                 if (sense->asc == 0x3a || sense->asc == 0x04)
119                         break;
120                 log = 1;
121                 break;
122         case ILLEGAL_REQUEST:
123                 /*
124                  * don't log START_STOP unit with LoEj set, since we cannot
125                  * reliably check if drive can auto-close
126                  */
127                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
128                         break;
129                 log = 1;
130                 break;
131         case UNIT_ATTENTION:
132                 /*
133                  * Make good and sure we've seen this potential media change.
134                  * Some drives (i.e. Creative) fail to present the correct sense
135                  * key in the error register.
136                  */
137                 cdrom_saw_media_change(drive);
138                 break;
139         default:
140                 log = 1;
141                 break;
142         }
143         return log;
144 }
145
146 static void cdrom_analyze_sense_data(ide_drive_t *drive,
147                               struct request *failed_command,
148                               struct request_sense *sense)
149 {
150         unsigned long sector;
151         unsigned long bio_sectors;
152         struct cdrom_info *info = drive->driver_data;
153
154         ide_debug_log(IDE_DBG_SENSE, "Call %s, error_code: 0x%x, "
155                         "sense_key: 0x%x\n", __func__, sense->error_code,
156                         sense->sense_key);
157
158         if (failed_command)
159                 ide_debug_log(IDE_DBG_SENSE, "%s: failed cmd: 0x%x\n",
160                                 __func__, failed_command->cmd[0]);
161
162         if (!cdrom_log_sense(drive, failed_command, sense))
163                 return;
164
165         /*
166          * If a read toc is executed for a CD-R or CD-RW medium where the first
167          * toc has not been recorded yet, it will fail with 05/24/00 (which is a
168          * confusing error)
169          */
170         if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
171                 if (sense->sense_key == 0x05 && sense->asc == 0x24)
172                         return;
173
174         /* current error */
175         if (sense->error_code == 0x70) {
176                 switch (sense->sense_key) {
177                 case MEDIUM_ERROR:
178                 case VOLUME_OVERFLOW:
179                 case ILLEGAL_REQUEST:
180                         if (!sense->valid)
181                                 break;
182                         if (failed_command == NULL ||
183                                         !blk_fs_request(failed_command))
184                                 break;
185                         sector = (sense->information[0] << 24) |
186                                  (sense->information[1] << 16) |
187                                  (sense->information[2] <<  8) |
188                                  (sense->information[3]);
189
190                         if (drive->queue->hardsect_size == 2048)
191                                 /* device sector size is 2K */
192                                 sector <<= 2;
193
194                         bio_sectors = max(bio_sectors(failed_command->bio), 4U);
195                         sector &= ~(bio_sectors - 1);
196
197                         if (sector < get_capacity(info->disk) &&
198                             drive->probed_capacity - sector < 4 * 75)
199                                 set_capacity(info->disk, sector);
200                 }
201         }
202
203         ide_cd_log_error(drive->name, failed_command, sense);
204 }
205
206 static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
207                                       struct request *failed_command)
208 {
209         struct cdrom_info *info         = drive->driver_data;
210         struct request *rq              = &info->request_sense_request;
211
212         ide_debug_log(IDE_DBG_SENSE, "Call %s\n", __func__);
213
214         if (sense == NULL)
215                 sense = &info->sense_data;
216
217         /* stuff the sense request in front of our current request */
218         blk_rq_init(NULL, rq);
219         rq->cmd_type = REQ_TYPE_ATA_PC;
220         rq->rq_disk = info->disk;
221
222         rq->data = sense;
223         rq->cmd[0] = GPCMD_REQUEST_SENSE;
224         rq->cmd[4] = 18;
225         rq->data_len = 18;
226
227         rq->cmd_type = REQ_TYPE_SENSE;
228         rq->cmd_flags |= REQ_PREEMPT;
229
230         /* NOTE! Save the failed command in "rq->buffer" */
231         rq->buffer = (void *) failed_command;
232
233         if (failed_command)
234                 ide_debug_log(IDE_DBG_SENSE, "failed_cmd: 0x%x\n",
235                               failed_command->cmd[0]);
236
237         ide_do_drive_cmd(drive, rq);
238 }
239
240 static void cdrom_end_request(ide_drive_t *drive, int uptodate)
241 {
242         struct request *rq = HWGROUP(drive)->rq;
243         int nsectors = rq->hard_cur_sectors;
244
245         ide_debug_log(IDE_DBG_FUNC, "Call %s, cmd: 0x%x, uptodate: 0x%x, "
246                       "nsectors: %d\n", __func__, rq->cmd[0], uptodate,
247                       nsectors);
248
249         if (blk_sense_request(rq) && uptodate) {
250                 /*
251                  * For REQ_TYPE_SENSE, "rq->buffer" points to the original
252                  * failed request
253                  */
254                 struct request *failed = (struct request *) rq->buffer;
255                 struct cdrom_info *info = drive->driver_data;
256                 void *sense = &info->sense_data;
257
258                 if (failed) {
259                         if (failed->sense) {
260                                 sense = failed->sense;
261                                 failed->sense_len = rq->sense_len;
262                         }
263                         cdrom_analyze_sense_data(drive, failed, sense);
264                         /*
265                          * now end the failed request
266                          */
267                         if (blk_fs_request(failed)) {
268                                 if (ide_end_dequeued_request(drive, failed, 0,
269                                                 failed->hard_nr_sectors))
270                                         BUG();
271                         } else {
272                                 if (blk_end_request(failed, -EIO,
273                                                     failed->data_len))
274                                         BUG();
275                         }
276                 } else
277                         cdrom_analyze_sense_data(drive, NULL, sense);
278         }
279
280         if (!rq->current_nr_sectors && blk_fs_request(rq))
281                 uptodate = 1;
282         /* make sure it's fully ended */
283         if (blk_pc_request(rq))
284                 nsectors = (rq->data_len + 511) >> 9;
285         if (!nsectors)
286                 nsectors = 1;
287
288         ide_debug_log(IDE_DBG_FUNC, "Exit %s, uptodate: 0x%x, nsectors: %d\n",
289                       __func__, uptodate, nsectors);
290
291         ide_end_request(drive, uptodate, nsectors);
292 }
293
294 static void ide_dump_status_no_sense(ide_drive_t *drive, const char *msg, u8 st)
295 {
296         if (st & 0x80)
297                 return;
298         ide_dump_status(drive, msg, st);
299 }
300
301 /*
302  * Returns:
303  * 0: if the request should be continued.
304  * 1: if the request was ended.
305  */
306 static int cdrom_decode_status(ide_drive_t *drive, int good_stat, int *stat_ret)
307 {
308         ide_hwif_t *hwif = drive->hwif;
309         ide_hwgroup_t *hwgroup = hwif->hwgroup;
310         struct request *rq = hwgroup->rq;
311         int stat, err, sense_key;
312
313         /* check for errors */
314         stat = hwif->tp_ops->read_status(hwif);
315
316         if (stat_ret)
317                 *stat_ret = stat;
318
319         if (OK_STAT(stat, good_stat, BAD_R_STAT))
320                 return 0;
321
322         /* get the IDE error register */
323         err = ide_read_error(drive);
324         sense_key = err >> 4;
325
326         if (rq == NULL) {
327                 printk(KERN_ERR PFX "%s: missing rq in %s\n",
328                                 drive->name, __func__);
329                 return 1;
330         }
331
332         ide_debug_log(IDE_DBG_RQ, "%s: stat: 0x%x, good_stat: 0x%x, "
333                       "rq->cmd[0]: 0x%x, rq->cmd_type: 0x%x, err: 0x%x\n",
334                       __func__, stat, good_stat, rq->cmd[0], rq->cmd_type, err);
335
336         if (blk_sense_request(rq)) {
337                 /*
338                  * We got an error trying to get sense info from the drive
339                  * (probably while trying to recover from a former error).
340                  * Just give up.
341                  */
342                 rq->cmd_flags |= REQ_FAILED;
343                 cdrom_end_request(drive, 0);
344                 ide_error(drive, "request sense failure", stat);
345                 return 1;
346
347         } else if (blk_pc_request(rq) || rq->cmd_type == REQ_TYPE_ATA_PC) {
348                 /* All other functions, except for READ. */
349
350                 /*
351                  * if we have an error, pass back CHECK_CONDITION as the
352                  * scsi status byte
353                  */
354                 if (blk_pc_request(rq) && !rq->errors)
355                         rq->errors = SAM_STAT_CHECK_CONDITION;
356
357                 /* check for tray open */
358                 if (sense_key == NOT_READY) {
359                         cdrom_saw_media_change(drive);
360                 } else if (sense_key == UNIT_ATTENTION) {
361                         /* check for media change */
362                         cdrom_saw_media_change(drive);
363                         return 0;
364                 } else if (sense_key == ILLEGAL_REQUEST &&
365                            rq->cmd[0] == GPCMD_START_STOP_UNIT) {
366                         /*
367                          * Don't print error message for this condition--
368                          * SFF8090i indicates that 5/24/00 is the correct
369                          * response to a request to close the tray if the
370                          * drive doesn't have that capability.
371                          * cdrom_log_sense() knows this!
372                          */
373                 } else if (!(rq->cmd_flags & REQ_QUIET)) {
374                         /* otherwise, print an error */
375                         ide_dump_status(drive, "packet command error", stat);
376                 }
377
378                 rq->cmd_flags |= REQ_FAILED;
379
380                 /*
381                  * instead of playing games with moving completions around,
382                  * remove failed request completely and end it when the
383                  * request sense has completed
384                  */
385                 goto end_request;
386
387         } else if (blk_fs_request(rq)) {
388                 int do_end_request = 0;
389
390                 /* handle errors from READ and WRITE requests */
391
392                 if (blk_noretry_request(rq))
393                         do_end_request = 1;
394
395                 if (sense_key == NOT_READY) {
396                         /* tray open */
397                         if (rq_data_dir(rq) == READ) {
398                                 cdrom_saw_media_change(drive);
399
400                                 /* fail the request */
401                                 printk(KERN_ERR PFX "%s: tray open\n",
402                                                 drive->name);
403                                 do_end_request = 1;
404                         } else {
405                                 struct cdrom_info *info = drive->driver_data;
406
407                                 /*
408                                  * Allow the drive 5 seconds to recover, some
409                                  * devices will return this error while flushing
410                                  * data from cache.
411                                  */
412                                 if (!rq->errors)
413                                         info->write_timeout = jiffies +
414                                                         ATAPI_WAIT_WRITE_BUSY;
415                                 rq->errors = 1;
416                                 if (time_after(jiffies, info->write_timeout))
417                                         do_end_request = 1;
418                                 else {
419                                         struct request_queue *q = drive->queue;
420                                         unsigned long flags;
421
422                                         /*
423                                          * take a breather relying on the unplug
424                                          * timer to kick us again
425                                          */
426                                         spin_lock_irqsave(q->queue_lock, flags);
427                                         blk_plug_device(q);
428                                         spin_unlock_irqrestore(q->queue_lock, flags);
429
430                                         return 1;
431                                 }
432                         }
433                 } else if (sense_key == UNIT_ATTENTION) {
434                         /* media change */
435                         cdrom_saw_media_change(drive);
436
437                         /*
438                          * Arrange to retry the request but be sure to give up
439                          * if we've retried too many times.
440                          */
441                         if (++rq->errors > ERROR_MAX)
442                                 do_end_request = 1;
443                 } else if (sense_key == ILLEGAL_REQUEST ||
444                            sense_key == DATA_PROTECT) {
445                         /*
446                          * No point in retrying after an illegal request or data
447                          * protect error.
448                          */
449                         ide_dump_status_no_sense(drive, "command error", stat);
450                         do_end_request = 1;
451                 } else if (sense_key == MEDIUM_ERROR) {
452                         /*
453                          * No point in re-trying a zillion times on a bad
454                          * sector. If we got here the error is not correctable.
455                          */
456                         ide_dump_status_no_sense(drive,
457                                                  "media error (bad sector)",
458                                                  stat);
459                         do_end_request = 1;
460                 } else if (sense_key == BLANK_CHECK) {
461                         /* disk appears blank ?? */
462                         ide_dump_status_no_sense(drive, "media error (blank)",
463                                                  stat);
464                         do_end_request = 1;
465                 } else if ((err & ~ATA_ABORTED) != 0) {
466                         /* go to the default handler for other errors */
467                         ide_error(drive, "cdrom_decode_status", stat);
468                         return 1;
469                 } else if ((++rq->errors > ERROR_MAX)) {
470                         /* we've racked up too many retries, abort */
471                         do_end_request = 1;
472                 }
473
474                 /*
475                  * End a request through request sense analysis when we have
476                  * sense data. We need this in order to perform end of media
477                  * processing.
478                  */
479                 if (do_end_request)
480                         goto end_request;
481
482                 /*
483                  * If we got a CHECK_CONDITION status, queue
484                  * a request sense command.
485                  */
486                 if (stat & ATA_ERR)
487                         cdrom_queue_request_sense(drive, NULL, NULL);
488         } else {
489                 blk_dump_rq_flags(rq, PFX "bad rq");
490                 cdrom_end_request(drive, 0);
491         }
492
493         /* retry, or handle the next request */
494         return 1;
495
496 end_request:
497         if (stat & ATA_ERR) {
498                 struct request_queue *q = drive->queue;
499                 unsigned long flags;
500
501                 spin_lock_irqsave(q->queue_lock, flags);
502                 blkdev_dequeue_request(rq);
503                 spin_unlock_irqrestore(q->queue_lock, flags);
504
505                 hwgroup->rq = NULL;
506
507                 cdrom_queue_request_sense(drive, rq->sense, rq);
508         } else
509                 cdrom_end_request(drive, 0);
510
511         return 1;
512 }
513
514 static int cdrom_timer_expiry(ide_drive_t *drive)
515 {
516         struct request *rq = HWGROUP(drive)->rq;
517         unsigned long wait = 0;
518
519         ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd[0]: 0x%x\n", __func__,
520                       rq->cmd[0]);
521
522         /*
523          * Some commands are *slow* and normally take a long time to complete.
524          * Usually we can use the ATAPI "disconnect" to bypass this, but not all
525          * commands/drives support that. Let ide_timer_expiry keep polling us
526          * for these.
527          */
528         switch (rq->cmd[0]) {
529         case GPCMD_BLANK:
530         case GPCMD_FORMAT_UNIT:
531         case GPCMD_RESERVE_RZONE_TRACK:
532         case GPCMD_CLOSE_TRACK:
533         case GPCMD_FLUSH_CACHE:
534                 wait = ATAPI_WAIT_PC;
535                 break;
536         default:
537                 if (!(rq->cmd_flags & REQ_QUIET))
538                         printk(KERN_INFO PFX "cmd 0x%x timed out\n",
539                                          rq->cmd[0]);
540                 wait = 0;
541                 break;
542         }
543         return wait;
544 }
545
546 /*
547  * Set up the device registers for transferring a packet command on DEV,
548  * expecting to later transfer XFERLEN bytes.  HANDLER is the routine
549  * which actually transfers the command to the drive.  If this is a
550  * drq_interrupt device, this routine will arrange for HANDLER to be
551  * called when the interrupt from the drive arrives.  Otherwise, HANDLER
552  * will be called immediately after the drive is prepared for the transfer.
553  */
554 static ide_startstop_t cdrom_start_packet_command(ide_drive_t *drive,
555                                                   int xferlen,
556                                                   ide_handler_t *handler)
557 {
558         ide_hwif_t *hwif = drive->hwif;
559
560         ide_debug_log(IDE_DBG_PC, "Call %s, xferlen: %d\n", __func__, xferlen);
561
562         /* FIXME: for Virtual DMA we must check harder */
563         if (drive->dma)
564                 drive->dma = !hwif->dma_ops->dma_setup(drive);
565
566         /* set up the controller registers */
567         ide_pktcmd_tf_load(drive, IDE_TFLAG_OUT_NSECT | IDE_TFLAG_OUT_LBAL,
568                            xferlen, drive->dma);
569
570         if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
571                 /* waiting for CDB interrupt, not DMA yet. */
572                 if (drive->dma)
573                         drive->waiting_for_dma = 0;
574
575                 /* packet command */
576                 ide_execute_command(drive, ATA_CMD_PACKET, handler,
577                                     ATAPI_WAIT_PC, cdrom_timer_expiry);
578                 return ide_started;
579         } else {
580                 ide_execute_pkt_cmd(drive);
581
582                 return (*handler) (drive);
583         }
584 }
585
586 /*
587  * Send a packet command to DRIVE described by CMD_BUF and CMD_LEN. The device
588  * registers must have already been prepared by cdrom_start_packet_command.
589  * HANDLER is the interrupt handler to call when the command completes or
590  * there's data ready.
591  */
592 #define ATAPI_MIN_CDB_BYTES 12
593 static ide_startstop_t cdrom_transfer_packet_command(ide_drive_t *drive,
594                                           struct request *rq,
595                                           ide_handler_t *handler)
596 {
597         ide_hwif_t *hwif = drive->hwif;
598         int cmd_len;
599         ide_startstop_t startstop;
600
601         ide_debug_log(IDE_DBG_PC, "Call %s\n", __func__);
602
603         if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
604                 /*
605                  * Here we should have been called after receiving an interrupt
606                  * from the device.  DRQ should how be set.
607                  */
608
609                 /* check for errors */
610                 if (cdrom_decode_status(drive, ATA_DRQ, NULL))
611                         return ide_stopped;
612
613                 /* ok, next interrupt will be DMA interrupt */
614                 if (drive->dma)
615                         drive->waiting_for_dma = 1;
616         } else {
617                 /* otherwise, we must wait for DRQ to get set */
618                 if (ide_wait_stat(&startstop, drive, ATA_DRQ,
619                                   ATA_BUSY, WAIT_READY))
620                         return startstop;
621         }
622
623         /* arm the interrupt handler */
624         ide_set_handler(drive, handler, rq->timeout, cdrom_timer_expiry);
625
626         /* ATAPI commands get padded out to 12 bytes minimum */
627         cmd_len = COMMAND_SIZE(rq->cmd[0]);
628         if (cmd_len < ATAPI_MIN_CDB_BYTES)
629                 cmd_len = ATAPI_MIN_CDB_BYTES;
630
631         /* send the command to the device */
632         hwif->tp_ops->output_data(drive, NULL, rq->cmd, cmd_len);
633
634         /* start the DMA if need be */
635         if (drive->dma)
636                 hwif->dma_ops->dma_start(drive);
637
638         return ide_started;
639 }
640
641 /*
642  * Check the contents of the interrupt reason register from the cdrom
643  * and attempt to recover if there are problems.  Returns  0 if everything's
644  * ok; nonzero if the request has been terminated.
645  */
646 static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
647                                 int len, int ireason, int rw)
648 {
649         ide_hwif_t *hwif = drive->hwif;
650
651         ide_debug_log(IDE_DBG_FUNC, "Call %s, ireason: 0x%x, rw: 0x%x\n",
652                       __func__, ireason, rw);
653
654         /*
655          * ireason == 0: the drive wants to receive data from us
656          * ireason == 2: the drive is expecting to transfer data to us
657          */
658         if (ireason == (!rw << 1))
659                 return 0;
660         else if (ireason == (rw << 1)) {
661
662                 /* whoops... */
663                 printk(KERN_ERR PFX "%s: %s: wrong transfer direction!\n",
664                                 drive->name, __func__);
665
666                 ide_pad_transfer(drive, rw, len);
667         } else  if (rw == 0 && ireason == 1) {
668                 /*
669                  * Some drives (ASUS) seem to tell us that status info is
670                  * available.  Just get it and ignore.
671                  */
672                 (void)hwif->tp_ops->read_status(hwif);
673                 return 0;
674         } else {
675                 /* drive wants a command packet, or invalid ireason... */
676                 printk(KERN_ERR PFX "%s: %s: bad interrupt reason 0x%02x\n",
677                                 drive->name, __func__, ireason);
678         }
679
680         if (rq->cmd_type == REQ_TYPE_ATA_PC)
681                 rq->cmd_flags |= REQ_FAILED;
682
683         cdrom_end_request(drive, 0);
684         return -1;
685 }
686
687 /*
688  * Assume that the drive will always provide data in multiples of at least
689  * SECTOR_SIZE, as it gets hairy to keep track of the transfers otherwise.
690  */
691 static int ide_cd_check_transfer_size(ide_drive_t *drive, int len)
692 {
693         ide_debug_log(IDE_DBG_FUNC, "Call %s, len: %d\n", __func__, len);
694
695         if ((len % SECTOR_SIZE) == 0)
696                 return 0;
697
698         printk(KERN_ERR PFX "%s: %s: Bad transfer size %d\n", drive->name,
699                         __func__, len);
700
701         if (drive->atapi_flags & IDE_AFLAG_LIMIT_NFRAMES)
702                 printk(KERN_ERR PFX "This drive is not supported by this "
703                                 "version of the driver\n");
704         else {
705                 printk(KERN_ERR PFX "Trying to limit transfer sizes\n");
706                 drive->atapi_flags |= IDE_AFLAG_LIMIT_NFRAMES;
707         }
708
709         return 1;
710 }
711
712 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *);
713
714 static ide_startstop_t ide_cd_prepare_rw_request(ide_drive_t *drive,
715                                                  struct request *rq)
716 {
717         ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd_flags: 0x%x\n", __func__,
718                       rq->cmd_flags);
719
720         if (rq_data_dir(rq) == READ) {
721                 unsigned short sectors_per_frame =
722                         queue_hardsect_size(drive->queue) >> SECTOR_BITS;
723                 int nskip = rq->sector & (sectors_per_frame - 1);
724
725                 /*
726                  * If the requested sector doesn't start on a frame boundary,
727                  * we must adjust the start of the transfer so that it does,
728                  * and remember to skip the first few sectors.
729                  *
730                  * If the rq->current_nr_sectors field is larger than the size
731                  * of the buffer, it will mean that we're to skip a number of
732                  * sectors equal to the amount by which rq->current_nr_sectors
733                  * is larger than the buffer size.
734                  */
735                 if (nskip > 0) {
736                         /* sanity check... */
737                         if (rq->current_nr_sectors !=
738                             bio_cur_sectors(rq->bio)) {
739                                 printk(KERN_ERR PFX "%s: %s: buffer botch (%u)\n",
740                                                 drive->name, __func__,
741                                                 rq->current_nr_sectors);
742                                 cdrom_end_request(drive, 0);
743                                 return ide_stopped;
744                         }
745                         rq->current_nr_sectors += nskip;
746                 }
747         }
748
749         /* set up the command */
750         rq->timeout = ATAPI_WAIT_PC;
751
752         return ide_started;
753 }
754
755 /*
756  * Routine to send a read/write packet command to the drive. This is usually
757  * called directly from cdrom_start_{read,write}(). However, for drq_interrupt
758  * devices, it is called from an interrupt when the drive is ready to accept
759  * the command.
760  */
761 static ide_startstop_t cdrom_start_rw_cont(ide_drive_t *drive)
762 {
763         struct request *rq = drive->hwif->hwgroup->rq;
764
765         /* send the command to the drive and return */
766         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
767 }
768
769 /*
770  * Fix up a possibly partially-processed request so that we can start it over
771  * entirely, or even put it back on the request queue.
772  */
773 static void ide_cd_restore_request(ide_drive_t *drive, struct request *rq)
774 {
775
776         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
777
778         if (rq->buffer != bio_data(rq->bio)) {
779                 sector_t n =
780                         (rq->buffer - (char *)bio_data(rq->bio)) / SECTOR_SIZE;
781
782                 rq->buffer = bio_data(rq->bio);
783                 rq->nr_sectors += n;
784                 rq->sector -= n;
785         }
786         rq->current_nr_sectors = bio_cur_sectors(rq->bio);
787         rq->hard_cur_sectors = rq->current_nr_sectors;
788         rq->hard_nr_sectors = rq->nr_sectors;
789         rq->hard_sector = rq->sector;
790         rq->q->prep_rq_fn(rq->q, rq);
791 }
792
793 static void ide_cd_request_sense_fixup(ide_drive_t *drive, struct request *rq)
794 {
795         ide_debug_log(IDE_DBG_FUNC, "Call %s, rq->cmd[0]: 0x%x\n",
796                       __func__, rq->cmd[0]);
797
798         /*
799          * Some of the trailing request sense fields are optional,
800          * and some drives don't send them.  Sigh.
801          */
802         if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
803             rq->data_len > 0 && rq->data_len <= 5)
804                 while (rq->data_len > 0) {
805                         *(u8 *)rq->data++ = 0;
806                         --rq->data_len;
807                 }
808 }
809
810 int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
811                     int write, void *buffer, unsigned *bufflen,
812                     struct request_sense *sense, int timeout,
813                     unsigned int cmd_flags)
814 {
815         struct cdrom_info *info = drive->driver_data;
816         struct request_sense local_sense;
817         int retries = 10;
818         unsigned int flags = 0;
819
820         if (!sense)
821                 sense = &local_sense;
822
823         ide_debug_log(IDE_DBG_PC, "Call %s, cmd[0]: 0x%x, write: 0x%x, "
824                       "timeout: %d, cmd_flags: 0x%x\n", __func__, cmd[0], write,
825                       timeout, cmd_flags);
826
827         /* start of retry loop */
828         do {
829                 struct request *rq;
830                 int error;
831
832                 rq = blk_get_request(drive->queue, write, __GFP_WAIT);
833
834                 memcpy(rq->cmd, cmd, BLK_MAX_CDB);
835                 rq->cmd_type = REQ_TYPE_ATA_PC;
836                 rq->sense = sense;
837                 rq->cmd_flags |= cmd_flags;
838                 rq->timeout = timeout;
839                 if (buffer) {
840                         rq->data = buffer;
841                         rq->data_len = *bufflen;
842                 }
843
844                 error = blk_execute_rq(drive->queue, info->disk, rq, 0);
845
846                 if (buffer)
847                         *bufflen = rq->data_len;
848
849                 flags = rq->cmd_flags;
850                 blk_put_request(rq);
851
852                 /*
853                  * FIXME: we should probably abort/retry or something in case of
854                  * failure.
855                  */
856                 if (flags & REQ_FAILED) {
857                         /*
858                          * The request failed.  Retry if it was due to a unit
859                          * attention status (usually means media was changed).
860                          */
861                         struct request_sense *reqbuf = sense;
862
863                         if (reqbuf->sense_key == UNIT_ATTENTION)
864                                 cdrom_saw_media_change(drive);
865                         else if (reqbuf->sense_key == NOT_READY &&
866                                  reqbuf->asc == 4 && reqbuf->ascq != 4) {
867                                 /*
868                                  * The drive is in the process of loading
869                                  * a disk.  Retry, but wait a little to give
870                                  * the drive time to complete the load.
871                                  */
872                                 ssleep(2);
873                         } else {
874                                 /* otherwise, don't retry */
875                                 retries = 0;
876                         }
877                         --retries;
878                 }
879
880                 /* end of retry loop */
881         } while ((flags & REQ_FAILED) && retries >= 0);
882
883         /* return an error if the command failed */
884         return (flags & REQ_FAILED) ? -EIO : 0;
885 }
886
887 /*
888  * Called from blk_end_request_callback() after the data of the request is
889  * completed and before the request itself is completed. By returning value '1',
890  * blk_end_request_callback() returns immediately without completing it.
891  */
892 static int cdrom_newpc_intr_dummy_cb(struct request *rq)
893 {
894         return 1;
895 }
896
897 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
898 {
899         ide_hwif_t *hwif = drive->hwif;
900         ide_hwgroup_t *hwgroup = hwif->hwgroup;
901         struct request *rq = hwgroup->rq;
902         xfer_func_t *xferfunc;
903         ide_expiry_t *expiry = NULL;
904         int dma_error = 0, dma, stat, thislen, uptodate = 0;
905         int write = (rq_data_dir(rq) == WRITE) ? 1 : 0;
906         unsigned int timeout;
907         u16 len;
908         u8 ireason;
909
910         ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x\n",
911                       __func__, rq->cmd[0], write);
912
913         /* check for errors */
914         dma = drive->dma;
915         if (dma) {
916                 drive->dma = 0;
917                 dma_error = hwif->dma_ops->dma_end(drive);
918                 if (dma_error) {
919                         printk(KERN_ERR PFX "%s: DMA %s error\n", drive->name,
920                                         write ? "write" : "read");
921                         ide_dma_off(drive);
922                 }
923         }
924
925         if (cdrom_decode_status(drive, 0, &stat))
926                 return ide_stopped;
927
928         /* using dma, transfer is complete now */
929         if (dma) {
930                 if (dma_error)
931                         return ide_error(drive, "dma error", stat);
932                 if (blk_fs_request(rq)) {
933                         ide_end_request(drive, 1, rq->nr_sectors);
934                         return ide_stopped;
935                 }
936                 goto end_request;
937         }
938
939         ide_read_bcount_and_ireason(drive, &len, &ireason);
940
941         thislen = blk_fs_request(rq) ? len : rq->data_len;
942         if (thislen > len)
943                 thislen = len;
944
945         ide_debug_log(IDE_DBG_PC, "%s: DRQ: stat: 0x%x, thislen: %d\n",
946                       __func__, stat, thislen);
947
948         /* If DRQ is clear, the command has completed. */
949         if ((stat & ATA_DRQ) == 0) {
950                 if (blk_fs_request(rq)) {
951                         /*
952                          * If we're not done reading/writing, complain.
953                          * Otherwise, complete the command normally.
954                          */
955                         uptodate = 1;
956                         if (rq->current_nr_sectors > 0) {
957                                 printk(KERN_ERR PFX "%s: %s: data underrun "
958                                                 "(%d blocks)\n",
959                                                 drive->name, __func__,
960                                                 rq->current_nr_sectors);
961                                 if (!write)
962                                         rq->cmd_flags |= REQ_FAILED;
963                                 uptodate = 0;
964                         }
965                         cdrom_end_request(drive, uptodate);
966                         return ide_stopped;
967                 } else if (!blk_pc_request(rq)) {
968                         ide_cd_request_sense_fixup(drive, rq);
969                         /* complain if we still have data left to transfer */
970                         uptodate = rq->data_len ? 0 : 1;
971                 }
972                 goto end_request;
973         }
974
975         /* check which way to transfer data */
976         if (ide_cd_check_ireason(drive, rq, len, ireason, write))
977                 return ide_stopped;
978
979         if (blk_fs_request(rq)) {
980                 if (write == 0) {
981                         int nskip;
982
983                         if (ide_cd_check_transfer_size(drive, len)) {
984                                 cdrom_end_request(drive, 0);
985                                 return ide_stopped;
986                         }
987
988                         /*
989                          * First, figure out if we need to bit-bucket
990                          * any of the leading sectors.
991                          */
992                         nskip = min_t(int, rq->current_nr_sectors
993                                            - bio_cur_sectors(rq->bio),
994                                            thislen >> 9);
995                         if (nskip > 0) {
996                                 ide_pad_transfer(drive, write, nskip << 9);
997                                 rq->current_nr_sectors -= nskip;
998                                 thislen -= (nskip << 9);
999                         }
1000                 }
1001         }
1002
1003         if (ireason == 0) {
1004                 write = 1;
1005                 xferfunc = hwif->tp_ops->output_data;
1006         } else {
1007                 write = 0;
1008                 xferfunc = hwif->tp_ops->input_data;
1009         }
1010
1011         ide_debug_log(IDE_DBG_PC, "%s: data transfer, rq->cmd_type: 0x%x, "
1012                       "ireason: 0x%x\n", __func__, rq->cmd_type, ireason);
1013
1014         /* transfer data */
1015         while (thislen > 0) {
1016                 u8 *ptr = blk_fs_request(rq) ? NULL : rq->data;
1017                 int blen = rq->data_len;
1018
1019                 /* bio backed? */
1020                 if (rq->bio) {
1021                         if (blk_fs_request(rq)) {
1022                                 ptr = rq->buffer;
1023                                 blen = rq->current_nr_sectors << 9;
1024                         } else {
1025                                 ptr = bio_data(rq->bio);
1026                                 blen = bio_iovec(rq->bio)->bv_len;
1027                         }
1028                 }
1029
1030                 if (!ptr) {
1031                         if (blk_fs_request(rq) && !write)
1032                                 /*
1033                                  * If the buffers are full, pipe the rest into
1034                                  * oblivion.
1035                                  */
1036                                 ide_pad_transfer(drive, 0, thislen);
1037                         else {
1038                                 printk(KERN_ERR PFX "%s: confused, missing data\n",
1039                                                 drive->name);
1040                                 blk_dump_rq_flags(rq, rq_data_dir(rq)
1041                                                   ? "cdrom_newpc_intr, write"
1042                                                   : "cdrom_newpc_intr, read");
1043                         }
1044                         break;
1045                 }
1046
1047                 if (blen > thislen)
1048                         blen = thislen;
1049
1050                 xferfunc(drive, NULL, ptr, blen);
1051
1052                 thislen -= blen;
1053                 len -= blen;
1054
1055                 if (blk_fs_request(rq)) {
1056                         rq->buffer += blen;
1057                         rq->nr_sectors -= (blen >> 9);
1058                         rq->current_nr_sectors -= (blen >> 9);
1059                         rq->sector += (blen >> 9);
1060
1061                         if (rq->current_nr_sectors == 0 && rq->nr_sectors)
1062                                 cdrom_end_request(drive, 1);
1063                 } else {
1064                         rq->data_len -= blen;
1065
1066                         /*
1067                          * The request can't be completed until DRQ is cleared.
1068                          * So complete the data, but don't complete the request
1069                          * using the dummy function for the callback feature
1070                          * of blk_end_request_callback().
1071                          */
1072                         if (rq->bio)
1073                                 blk_end_request_callback(rq, 0, blen,
1074                                                  cdrom_newpc_intr_dummy_cb);
1075                         else
1076                                 rq->data += blen;
1077                 }
1078                 if (!write && blk_sense_request(rq))
1079                         rq->sense_len += blen;
1080         }
1081
1082         /* pad, if necessary */
1083         if (!blk_fs_request(rq) && len > 0)
1084                 ide_pad_transfer(drive, write, len);
1085
1086         if (blk_pc_request(rq)) {
1087                 timeout = rq->timeout;
1088         } else {
1089                 timeout = ATAPI_WAIT_PC;
1090                 if (!blk_fs_request(rq))
1091                         expiry = cdrom_timer_expiry;
1092         }
1093
1094         ide_set_handler(drive, cdrom_newpc_intr, timeout, expiry);
1095         return ide_started;
1096
1097 end_request:
1098         if (blk_pc_request(rq)) {
1099                 unsigned int dlen = rq->data_len;
1100
1101                 if (dma)
1102                         rq->data_len = 0;
1103
1104                 if (blk_end_request(rq, 0, dlen))
1105                         BUG();
1106
1107                 hwgroup->rq = NULL;
1108         } else {
1109                 if (!uptodate)
1110                         rq->cmd_flags |= REQ_FAILED;
1111                 cdrom_end_request(drive, uptodate);
1112         }
1113         return ide_stopped;
1114 }
1115
1116 static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
1117 {
1118         struct cdrom_info *cd = drive->driver_data;
1119         int write = rq_data_dir(rq) == WRITE;
1120         unsigned short sectors_per_frame =
1121                 queue_hardsect_size(drive->queue) >> SECTOR_BITS;
1122
1123         ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x, "
1124                       "secs_per_frame: %u\n",
1125                       __func__, rq->cmd[0], write, sectors_per_frame);
1126
1127         if (write) {
1128                 /* disk has become write protected */
1129                 if (get_disk_ro(cd->disk)) {
1130                         cdrom_end_request(drive, 0);
1131                         return ide_stopped;
1132                 }
1133         } else {
1134                 /*
1135                  * We may be retrying this request after an error.  Fix up any
1136                  * weirdness which might be present in the request packet.
1137                  */
1138                 ide_cd_restore_request(drive, rq);
1139         }
1140
1141         /* use DMA, if possible / writes *must* be hardware frame aligned */
1142         if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
1143             (rq->sector & (sectors_per_frame - 1))) {
1144                 if (write) {
1145                         cdrom_end_request(drive, 0);
1146                         return ide_stopped;
1147                 }
1148                 drive->dma = 0;
1149         } else
1150                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1151
1152         if (write)
1153                 cd->devinfo.media_written = 1;
1154
1155         return ide_started;
1156 }
1157
1158 static ide_startstop_t cdrom_do_newpc_cont(ide_drive_t *drive)
1159 {
1160         struct request *rq = HWGROUP(drive)->rq;
1161
1162         return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
1163 }
1164
1165 static void cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
1166 {
1167
1168         ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, "
1169                       "rq->cmd_type: 0x%x\n", __func__, rq->cmd[0],
1170                       rq->cmd_type);
1171
1172         if (blk_pc_request(rq))
1173                 rq->cmd_flags |= REQ_QUIET;
1174         else
1175                 rq->cmd_flags &= ~REQ_FAILED;
1176
1177         drive->dma = 0;
1178
1179         /* sg request */
1180         if (rq->bio || ((rq->cmd_type == REQ_TYPE_ATA_PC) && rq->data_len)) {
1181                 struct request_queue *q = drive->queue;
1182                 unsigned int alignment;
1183                 char *buf;
1184
1185                 if (rq->bio)
1186                         buf = bio_data(rq->bio);
1187                 else
1188                         buf = rq->data;
1189
1190                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1191
1192                 /*
1193                  * check if dma is safe
1194                  *
1195                  * NOTE! The "len" and "addr" checks should possibly have
1196                  * separate masks.
1197                  */
1198                 alignment = queue_dma_alignment(q) | q->dma_pad_mask;
1199                 if ((unsigned long)buf & alignment
1200                     || rq->data_len & q->dma_pad_mask
1201                     || object_is_on_stack(buf))
1202                         drive->dma = 0;
1203         }
1204 }
1205
1206 static ide_startstop_t ide_cd_do_request(ide_drive_t *drive, struct request *rq,
1207                                         sector_t block)
1208 {
1209         ide_handler_t *fn;
1210         int xferlen;
1211
1212         ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, "
1213                       "rq->cmd_type: 0x%x, block: %llu\n",
1214                       __func__, rq->cmd[0], rq->cmd_type,
1215                       (unsigned long long)block);
1216
1217         xferlen = ide_cd_get_xferlen(rq);
1218
1219         if (blk_fs_request(rq)) {
1220                 fn = cdrom_start_rw_cont;
1221
1222                 if (cdrom_start_rw(drive, rq) == ide_stopped)
1223                         return ide_stopped;
1224
1225                 if (ide_cd_prepare_rw_request(drive, rq) == ide_stopped)
1226                         return ide_stopped;
1227         } else if (blk_sense_request(rq) || blk_pc_request(rq) ||
1228                    rq->cmd_type == REQ_TYPE_ATA_PC) {
1229                 fn = cdrom_do_newpc_cont;
1230
1231                 if (!rq->timeout)
1232                         rq->timeout = ATAPI_WAIT_PC;
1233
1234                 cdrom_do_block_pc(drive, rq);
1235         } else if (blk_special_request(rq)) {
1236                 /* right now this can only be a reset... */
1237                 cdrom_end_request(drive, 1);
1238                 return ide_stopped;
1239         } else {
1240                 blk_dump_rq_flags(rq, DRV_NAME " bad flags");
1241                 cdrom_end_request(drive, 0);
1242                 return ide_stopped;
1243         }
1244
1245         return cdrom_start_packet_command(drive, xferlen, fn);
1246 }
1247
1248 /*
1249  * Ioctl handling.
1250  *
1251  * Routines which queue packet commands take as a final argument a pointer to a
1252  * request_sense struct. If execution of the command results in an error with a
1253  * CHECK CONDITION status, this structure will be filled with the results of the
1254  * subsequent request sense command. The pointer can also be NULL, in which case
1255  * no sense information is returned.
1256  */
1257 static void msf_from_bcd(struct atapi_msf *msf)
1258 {
1259         msf->minute = bcd2bin(msf->minute);
1260         msf->second = bcd2bin(msf->second);
1261         msf->frame  = bcd2bin(msf->frame);
1262 }
1263
1264 int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
1265 {
1266         struct cdrom_info *info = drive->driver_data;
1267         struct cdrom_device_info *cdi = &info->devinfo;
1268         unsigned char cmd[BLK_MAX_CDB];
1269
1270         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1271
1272         memset(cmd, 0, BLK_MAX_CDB);
1273         cmd[0] = GPCMD_TEST_UNIT_READY;
1274
1275         /*
1276          * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
1277          * instead of supporting the LOAD_UNLOAD opcode.
1278          */
1279         cmd[7] = cdi->sanyo_slot % 3;
1280
1281         return ide_cd_queue_pc(drive, cmd, 0, NULL, NULL, sense, 0, REQ_QUIET);
1282 }
1283
1284 static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
1285                                unsigned long *sectors_per_frame,
1286                                struct request_sense *sense)
1287 {
1288         struct {
1289                 __be32 lba;
1290                 __be32 blocklen;
1291         } capbuf;
1292
1293         int stat;
1294         unsigned char cmd[BLK_MAX_CDB];
1295         unsigned len = sizeof(capbuf);
1296         u32 blocklen;
1297
1298         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1299
1300         memset(cmd, 0, BLK_MAX_CDB);
1301         cmd[0] = GPCMD_READ_CDVD_CAPACITY;
1302
1303         stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
1304                                REQ_QUIET);
1305         if (stat)
1306                 return stat;
1307
1308         /*
1309          * Sanity check the given block size
1310          */
1311         blocklen = be32_to_cpu(capbuf.blocklen);
1312         switch (blocklen) {
1313         case 512:
1314         case 1024:
1315         case 2048:
1316         case 4096:
1317                 break;
1318         default:
1319                 printk(KERN_ERR PFX "%s: weird block size %u\n",
1320                                 drive->name, blocklen);
1321                 printk(KERN_ERR PFX "%s: default to 2kb block size\n",
1322                                 drive->name);
1323                 blocklen = 2048;
1324                 break;
1325         }
1326
1327         *capacity = 1 + be32_to_cpu(capbuf.lba);
1328         *sectors_per_frame = blocklen >> SECTOR_BITS;
1329
1330         ide_debug_log(IDE_DBG_PROBE, "%s: cap: %lu, sectors_per_frame: %lu\n",
1331                       __func__, *capacity, *sectors_per_frame);
1332
1333         return 0;
1334 }
1335
1336 static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1337                                 int format, char *buf, int buflen,
1338                                 struct request_sense *sense)
1339 {
1340         unsigned char cmd[BLK_MAX_CDB];
1341
1342         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1343
1344         memset(cmd, 0, BLK_MAX_CDB);
1345
1346         cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1347         cmd[6] = trackno;
1348         cmd[7] = (buflen >> 8);
1349         cmd[8] = (buflen & 0xff);
1350         cmd[9] = (format << 6);
1351
1352         if (msf_flag)
1353                 cmd[1] = 2;
1354
1355         return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1356 }
1357
1358 /* Try to read the entire TOC for the disk into our internal buffer. */
1359 int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1360 {
1361         int stat, ntracks, i;
1362         struct cdrom_info *info = drive->driver_data;
1363         struct cdrom_device_info *cdi = &info->devinfo;
1364         struct atapi_toc *toc = info->toc;
1365         struct {
1366                 struct atapi_toc_header hdr;
1367                 struct atapi_toc_entry  ent;
1368         } ms_tmp;
1369         long last_written;
1370         unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1371
1372         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1373
1374         if (toc == NULL) {
1375                 /* try to allocate space */
1376                 toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1377                 if (toc == NULL) {
1378                         printk(KERN_ERR PFX "%s: No cdrom TOC buffer!\n",
1379                                         drive->name);
1380                         return -ENOMEM;
1381                 }
1382                 info->toc = toc;
1383         }
1384
1385         /*
1386          * Check to see if the existing data is still valid. If it is,
1387          * just return.
1388          */
1389         (void) cdrom_check_status(drive, sense);
1390
1391         if (drive->atapi_flags & IDE_AFLAG_TOC_VALID)
1392                 return 0;
1393
1394         /* try to get the total cdrom capacity and sector size */
1395         stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1396                                    sense);
1397         if (stat)
1398                 toc->capacity = 0x1fffff;
1399
1400         set_capacity(info->disk, toc->capacity * sectors_per_frame);
1401         /* save a private copy of the TOC capacity for error handling */
1402         drive->probed_capacity = toc->capacity * sectors_per_frame;
1403
1404         blk_queue_hardsect_size(drive->queue,
1405                                 sectors_per_frame << SECTOR_BITS);
1406
1407         /* first read just the header, so we know how long the TOC is */
1408         stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1409                                     sizeof(struct atapi_toc_header), sense);
1410         if (stat)
1411                 return stat;
1412
1413         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1414                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1415                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1416         }
1417
1418         ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1419         if (ntracks <= 0)
1420                 return -EIO;
1421         if (ntracks > MAX_TRACKS)
1422                 ntracks = MAX_TRACKS;
1423
1424         /* now read the whole schmeer */
1425         stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1426                                   (char *)&toc->hdr,
1427                                    sizeof(struct atapi_toc_header) +
1428                                    (ntracks + 1) *
1429                                    sizeof(struct atapi_toc_entry), sense);
1430
1431         if (stat && toc->hdr.first_track > 1) {
1432                 /*
1433                  * Cds with CDI tracks only don't have any TOC entries, despite
1434                  * of this the returned values are
1435                  * first_track == last_track = number of CDI tracks + 1,
1436                  * so that this case is indistinguishable from the same layout
1437                  * plus an additional audio track. If we get an error for the
1438                  * regular case, we assume a CDI without additional audio
1439                  * tracks. In this case the readable TOC is empty (CDI tracks
1440                  * are not included) and only holds the Leadout entry.
1441                  *
1442                  * Heiko Eißfeldt.
1443                  */
1444                 ntracks = 0;
1445                 stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1446                                            (char *)&toc->hdr,
1447                                            sizeof(struct atapi_toc_header) +
1448                                            (ntracks + 1) *
1449                                            sizeof(struct atapi_toc_entry),
1450                                            sense);
1451                 if (stat)
1452                         return stat;
1453
1454                 if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1455                         toc->hdr.first_track = (u8)bin2bcd(CDROM_LEADOUT);
1456                         toc->hdr.last_track = (u8)bin2bcd(CDROM_LEADOUT);
1457                 } else {
1458                         toc->hdr.first_track = CDROM_LEADOUT;
1459                         toc->hdr.last_track = CDROM_LEADOUT;
1460                 }
1461         }
1462
1463         if (stat)
1464                 return stat;
1465
1466         toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1467
1468         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1469                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1470                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1471         }
1472
1473         for (i = 0; i <= ntracks; i++) {
1474                 if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1475                         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD)
1476                                 toc->ent[i].track = bcd2bin(toc->ent[i].track);
1477                         msf_from_bcd(&toc->ent[i].addr.msf);
1478                 }
1479                 toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1480                                                   toc->ent[i].addr.msf.second,
1481                                                   toc->ent[i].addr.msf.frame);
1482         }
1483
1484         if (toc->hdr.first_track != CDROM_LEADOUT) {
1485                 /* read the multisession information */
1486                 stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1487                                            sizeof(ms_tmp), sense);
1488                 if (stat)
1489                         return stat;
1490
1491                 toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1492         } else {
1493                 ms_tmp.hdr.last_track = CDROM_LEADOUT;
1494                 ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1495                 toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1496         }
1497
1498         if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1499                 /* re-read multisession information using MSF format */
1500                 stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1501                                            sizeof(ms_tmp), sense);
1502                 if (stat)
1503                         return stat;
1504
1505                 msf_from_bcd(&ms_tmp.ent.addr.msf);
1506                 toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1507                                                    ms_tmp.ent.addr.msf.second,
1508                                                    ms_tmp.ent.addr.msf.frame);
1509         }
1510
1511         toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1512
1513         /* now try to get the total cdrom capacity */
1514         stat = cdrom_get_last_written(cdi, &last_written);
1515         if (!stat && (last_written > toc->capacity)) {
1516                 toc->capacity = last_written;
1517                 set_capacity(info->disk, toc->capacity * sectors_per_frame);
1518                 drive->probed_capacity = toc->capacity * sectors_per_frame;
1519         }
1520
1521         /* Remember that we've read this stuff. */
1522         drive->atapi_flags |= IDE_AFLAG_TOC_VALID;
1523
1524         return 0;
1525 }
1526
1527 int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1528 {
1529         struct cdrom_info *info = drive->driver_data;
1530         struct cdrom_device_info *cdi = &info->devinfo;
1531         struct packet_command cgc;
1532         int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1533
1534         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1535
1536         if ((drive->atapi_flags & IDE_AFLAG_FULL_CAPS_PAGE) == 0)
1537                 size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1538
1539         init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1540         do {
1541                 /* we seem to get stat=0x01,err=0x00 the first time (??) */
1542                 stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1543                 if (!stat)
1544                         break;
1545         } while (--attempts);
1546         return stat;
1547 }
1548
1549 void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1550 {
1551         struct cdrom_info *cd = drive->driver_data;
1552         u16 curspeed, maxspeed;
1553
1554         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1555
1556         if (drive->atapi_flags & IDE_AFLAG_LE_SPEED_FIELDS) {
1557                 curspeed = le16_to_cpup((__le16 *)&buf[8 + 14]);
1558                 maxspeed = le16_to_cpup((__le16 *)&buf[8 + 8]);
1559         } else {
1560                 curspeed = be16_to_cpup((__be16 *)&buf[8 + 14]);
1561                 maxspeed = be16_to_cpup((__be16 *)&buf[8 + 8]);
1562         }
1563
1564         ide_debug_log(IDE_DBG_PROBE, "%s: curspeed: %u, maxspeed: %u\n",
1565                       __func__, curspeed, maxspeed);
1566
1567         cd->current_speed = (curspeed + (176/2)) / 176;
1568         cd->max_speed = (maxspeed + (176/2)) / 176;
1569 }
1570
1571 #define IDE_CD_CAPABILITIES \
1572         (CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1573          CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1574          CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1575          CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1576          CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1577
1578 static struct cdrom_device_ops ide_cdrom_dops = {
1579         .open                   = ide_cdrom_open_real,
1580         .release                = ide_cdrom_release_real,
1581         .drive_status           = ide_cdrom_drive_status,
1582         .media_changed          = ide_cdrom_check_media_change_real,
1583         .tray_move              = ide_cdrom_tray_move,
1584         .lock_door              = ide_cdrom_lock_door,
1585         .select_speed           = ide_cdrom_select_speed,
1586         .get_last_session       = ide_cdrom_get_last_session,
1587         .get_mcn                = ide_cdrom_get_mcn,
1588         .reset                  = ide_cdrom_reset,
1589         .audio_ioctl            = ide_cdrom_audio_ioctl,
1590         .capability             = IDE_CD_CAPABILITIES,
1591         .generic_packet         = ide_cdrom_packet,
1592 };
1593
1594 static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1595 {
1596         struct cdrom_info *info = drive->driver_data;
1597         struct cdrom_device_info *devinfo = &info->devinfo;
1598
1599         ide_debug_log(IDE_DBG_PROBE, "Call %s, nslots: %d\n", __func__, nslots);
1600
1601         devinfo->ops = &ide_cdrom_dops;
1602         devinfo->speed = info->current_speed;
1603         devinfo->capacity = nslots;
1604         devinfo->handle = drive;
1605         strcpy(devinfo->name, drive->name);
1606
1607         if (drive->atapi_flags & IDE_AFLAG_NO_SPEED_SELECT)
1608                 devinfo->mask |= CDC_SELECT_SPEED;
1609
1610         devinfo->disk = info->disk;
1611         return register_cdrom(devinfo);
1612 }
1613
1614 static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1615 {
1616         struct cdrom_info *cd = drive->driver_data;
1617         struct cdrom_device_info *cdi = &cd->devinfo;
1618         u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1619         mechtype_t mechtype;
1620         int nslots = 1;
1621
1622         ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->media: 0x%x, "
1623                       "drive->atapi_flags: 0x%lx\n", __func__, drive->media,
1624                       drive->atapi_flags);
1625
1626         cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1627                      CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1628                      CDC_MO_DRIVE | CDC_RAM);
1629
1630         if (drive->media == ide_optical) {
1631                 cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1632                 printk(KERN_ERR PFX "%s: ATAPI magneto-optical drive\n",
1633                                 drive->name);
1634                 return nslots;
1635         }
1636
1637         if (drive->atapi_flags & IDE_AFLAG_PRE_ATAPI12) {
1638                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1639                 cdi->mask &= ~CDC_PLAY_AUDIO;
1640                 return nslots;
1641         }
1642
1643         /*
1644          * We have to cheat a little here. the packet will eventually be queued
1645          * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1646          * Since this device hasn't been registered with the Uniform layer yet,
1647          * it can't do this. Same goes for cdi->ops.
1648          */
1649         cdi->handle = drive;
1650         cdi->ops = &ide_cdrom_dops;
1651
1652         if (ide_cdrom_get_capabilities(drive, buf))
1653                 return 0;
1654
1655         if ((buf[8 + 6] & 0x01) == 0)
1656                 drive->dev_flags &= ~IDE_DFLAG_DOORLOCKING;
1657         if (buf[8 + 6] & 0x08)
1658                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1659         if (buf[8 + 3] & 0x01)
1660                 cdi->mask &= ~CDC_CD_R;
1661         if (buf[8 + 3] & 0x02)
1662                 cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1663         if (buf[8 + 2] & 0x38)
1664                 cdi->mask &= ~CDC_DVD;
1665         if (buf[8 + 3] & 0x20)
1666                 cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1667         if (buf[8 + 3] & 0x10)
1668                 cdi->mask &= ~CDC_DVD_R;
1669         if ((buf[8 + 4] & 0x01) || (drive->atapi_flags & IDE_AFLAG_PLAY_AUDIO_OK))
1670                 cdi->mask &= ~CDC_PLAY_AUDIO;
1671
1672         mechtype = buf[8 + 6] >> 5;
1673         if (mechtype == mechtype_caddy ||
1674             mechtype == mechtype_popup ||
1675             (drive->atapi_flags & IDE_AFLAG_NO_AUTOCLOSE))
1676                 cdi->mask |= CDC_CLOSE_TRAY;
1677
1678         if (cdi->sanyo_slot > 0) {
1679                 cdi->mask &= ~CDC_SELECT_DISC;
1680                 nslots = 3;
1681         } else if (mechtype == mechtype_individual_changer ||
1682                    mechtype == mechtype_cartridge_changer) {
1683                 nslots = cdrom_number_of_slots(cdi);
1684                 if (nslots > 1)
1685                         cdi->mask &= ~CDC_SELECT_DISC;
1686         }
1687
1688         ide_cdrom_update_speed(drive, buf);
1689
1690         printk(KERN_INFO PFX "%s: ATAPI", drive->name);
1691
1692         /* don't print speed if the drive reported 0 */
1693         if (cd->max_speed)
1694                 printk(KERN_CONT " %dX", cd->max_speed);
1695
1696         printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1697
1698         if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1699                 printk(KERN_CONT " DVD%s%s",
1700                                  (cdi->mask & CDC_DVD_R) ? "" : "-R",
1701                                  (cdi->mask & CDC_DVD_RAM) ? "" : "/RAM");
1702
1703         if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1704                 printk(KERN_CONT " CD%s%s",
1705                                  (cdi->mask & CDC_CD_R) ? "" : "-R",
1706                                  (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1707
1708         if ((cdi->mask & CDC_SELECT_DISC) == 0)
1709                 printk(KERN_CONT " changer w/%d slots", nslots);
1710         else
1711                 printk(KERN_CONT " drive");
1712
1713         printk(KERN_CONT ", %dkB Cache\n",
1714                          be16_to_cpup((__be16 *)&buf[8 + 12]));
1715
1716         return nslots;
1717 }
1718
1719 /* standard prep_rq_fn that builds 10 byte cmds */
1720 static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1721 {
1722         int hard_sect = queue_hardsect_size(q);
1723         long block = (long)rq->hard_sector / (hard_sect >> 9);
1724         unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1725
1726         memset(rq->cmd, 0, BLK_MAX_CDB);
1727
1728         if (rq_data_dir(rq) == READ)
1729                 rq->cmd[0] = GPCMD_READ_10;
1730         else
1731                 rq->cmd[0] = GPCMD_WRITE_10;
1732
1733         /*
1734          * fill in lba
1735          */
1736         rq->cmd[2] = (block >> 24) & 0xff;
1737         rq->cmd[3] = (block >> 16) & 0xff;
1738         rq->cmd[4] = (block >>  8) & 0xff;
1739         rq->cmd[5] = block & 0xff;
1740
1741         /*
1742          * and transfer length
1743          */
1744         rq->cmd[7] = (blocks >> 8) & 0xff;
1745         rq->cmd[8] = blocks & 0xff;
1746         rq->cmd_len = 10;
1747         return BLKPREP_OK;
1748 }
1749
1750 /*
1751  * Most of the SCSI commands are supported directly by ATAPI devices.
1752  * This transform handles the few exceptions.
1753  */
1754 static int ide_cdrom_prep_pc(struct request *rq)
1755 {
1756         u8 *c = rq->cmd;
1757
1758         /* transform 6-byte read/write commands to the 10-byte version */
1759         if (c[0] == READ_6 || c[0] == WRITE_6) {
1760                 c[8] = c[4];
1761                 c[5] = c[3];
1762                 c[4] = c[2];
1763                 c[3] = c[1] & 0x1f;
1764                 c[2] = 0;
1765                 c[1] &= 0xe0;
1766                 c[0] += (READ_10 - READ_6);
1767                 rq->cmd_len = 10;
1768                 return BLKPREP_OK;
1769         }
1770
1771         /*
1772          * it's silly to pretend we understand 6-byte sense commands, just
1773          * reject with ILLEGAL_REQUEST and the caller should take the
1774          * appropriate action
1775          */
1776         if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1777                 rq->errors = ILLEGAL_REQUEST;
1778                 return BLKPREP_KILL;
1779         }
1780
1781         return BLKPREP_OK;
1782 }
1783
1784 static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1785 {
1786         if (blk_fs_request(rq))
1787                 return ide_cdrom_prep_fs(q, rq);
1788         else if (blk_pc_request(rq))
1789                 return ide_cdrom_prep_pc(rq);
1790
1791         return 0;
1792 }
1793
1794 struct cd_list_entry {
1795         const char      *id_model;
1796         const char      *id_firmware;
1797         unsigned int    cd_flags;
1798 };
1799
1800 #ifdef CONFIG_IDE_PROC_FS
1801 static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1802 {
1803         unsigned long capacity, sectors_per_frame;
1804
1805         if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1806                 return 0;
1807
1808         return capacity * sectors_per_frame;
1809 }
1810
1811 static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1812                                         int count, int *eof, void *data)
1813 {
1814         ide_drive_t *drive = data;
1815         int len;
1816
1817         len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1818         PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1819 }
1820
1821 static ide_proc_entry_t idecd_proc[] = {
1822         { "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1823         { NULL, 0, NULL, NULL }
1824 };
1825
1826 static ide_proc_entry_t *ide_cd_proc_entries(ide_drive_t *drive)
1827 {
1828         return idecd_proc;
1829 }
1830
1831 static const struct ide_proc_devset *ide_cd_proc_devsets(ide_drive_t *drive)
1832 {
1833         return NULL;
1834 }
1835 #endif
1836
1837 static const struct cd_list_entry ide_cd_quirks_list[] = {
1838         /* Limit transfer size per interrupt. */
1839         { "SAMSUNG CD-ROM SCR-2430", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1840         { "SAMSUNG CD-ROM SCR-2432", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1841         /* SCR-3231 doesn't support the SET_CD_SPEED command. */
1842         { "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_AFLAG_NO_SPEED_SELECT       },
1843         /* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1844         { "NEC CD-ROM DRIVE:260",    "1.01", IDE_AFLAG_TOCADDR_AS_BCD |
1845                                              IDE_AFLAG_PRE_ATAPI12,          },
1846         /* Vertos 300, some versions of this drive like to talk BCD. */
1847         { "V003S0DS",                NULL,   IDE_AFLAG_VERTOS_300_SSD,       },
1848         /* Vertos 600 ESD. */
1849         { "V006E0DS",                NULL,   IDE_AFLAG_VERTOS_600_ESD,       },
1850         /*
1851          * Sanyo 3 CD changer uses a non-standard command for CD changing
1852          * (by default standard ATAPI support for CD changers is used).
1853          */
1854         { "CD-ROM CDR-C3 G",         NULL,   IDE_AFLAG_SANYO_3CD             },
1855         { "CD-ROM CDR-C3G",          NULL,   IDE_AFLAG_SANYO_3CD             },
1856         { "CD-ROM CDR_C36",          NULL,   IDE_AFLAG_SANYO_3CD             },
1857         /* Stingray 8X CD-ROM. */
1858         { "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_AFLAG_PRE_ATAPI12 },
1859         /*
1860          * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1861          * mode sense page capabilities size, but older drives break.
1862          */
1863         { "ATAPI CD ROM DRIVE 50X MAX", NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1864         { "WPI CDS-32X",                NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1865         /* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1866         { "",                        "241N", IDE_AFLAG_LE_SPEED_FIELDS       },
1867         /*
1868          * Some drives used by Apple don't advertise audio play
1869          * but they do support reading TOC & audio datas.
1870          */
1871         { "MATSHITADVD-ROM SR-8187", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1872         { "MATSHITADVD-ROM SR-8186", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1873         { "MATSHITADVD-ROM SR-8176", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1874         { "MATSHITADVD-ROM SR-8174", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1875         { "Optiarc DVD RW AD-5200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1876         { "Optiarc DVD RW AD-7200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1877         { "Optiarc DVD RW AD-7543A", NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1878         { "TEAC CD-ROM CD-224E",     NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1879         { NULL, NULL, 0 }
1880 };
1881
1882 static unsigned int ide_cd_flags(u16 *id)
1883 {
1884         const struct cd_list_entry *cle = ide_cd_quirks_list;
1885
1886         while (cle->id_model) {
1887                 if (strcmp(cle->id_model, (char *)&id[ATA_ID_PROD]) == 0 &&
1888                     (cle->id_firmware == NULL ||
1889                      strstr((char *)&id[ATA_ID_FW_REV], cle->id_firmware)))
1890                         return cle->cd_flags;
1891                 cle++;
1892         }
1893
1894         return 0;
1895 }
1896
1897 static int ide_cdrom_setup(ide_drive_t *drive)
1898 {
1899         struct cdrom_info *cd = drive->driver_data;
1900         struct cdrom_device_info *cdi = &cd->devinfo;
1901         u16 *id = drive->id;
1902         char *fw_rev = (char *)&id[ATA_ID_FW_REV];
1903         int nslots;
1904
1905         ide_debug_log(IDE_DBG_PROBE, "Call %s\n", __func__);
1906
1907         blk_queue_prep_rq(drive->queue, ide_cdrom_prep_fn);
1908         blk_queue_dma_alignment(drive->queue, 31);
1909         blk_queue_update_dma_pad(drive->queue, 15);
1910         drive->queue->unplug_delay = (1 * HZ) / 1000;
1911         if (!drive->queue->unplug_delay)
1912                 drive->queue->unplug_delay = 1;
1913
1914         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
1915         drive->atapi_flags = IDE_AFLAG_NO_EJECT | ide_cd_flags(id);
1916
1917         if ((drive->atapi_flags & IDE_AFLAG_VERTOS_300_SSD) &&
1918             fw_rev[4] == '1' && fw_rev[6] <= '2')
1919                 drive->atapi_flags |= (IDE_AFLAG_TOCTRACKS_AS_BCD |
1920                                      IDE_AFLAG_TOCADDR_AS_BCD);
1921         else if ((drive->atapi_flags & IDE_AFLAG_VERTOS_600_ESD) &&
1922                  fw_rev[4] == '1' && fw_rev[6] <= '2')
1923                 drive->atapi_flags |= IDE_AFLAG_TOCTRACKS_AS_BCD;
1924         else if (drive->atapi_flags & IDE_AFLAG_SANYO_3CD)
1925                 /* 3 => use CD in slot 0 */
1926                 cdi->sanyo_slot = 3;
1927
1928         nslots = ide_cdrom_probe_capabilities(drive);
1929
1930         /* set correct block size */
1931         blk_queue_hardsect_size(drive->queue, CD_FRAMESIZE);
1932
1933         if (ide_cdrom_register(drive, nslots)) {
1934                 printk(KERN_ERR PFX "%s: %s failed to register device with the"
1935                                 " cdrom driver.\n", drive->name, __func__);
1936                 cd->devinfo.handle = NULL;
1937                 return 1;
1938         }
1939
1940         ide_proc_register_driver(drive, cd->driver);
1941         return 0;
1942 }
1943
1944 static void ide_cd_remove(ide_drive_t *drive)
1945 {
1946         struct cdrom_info *info = drive->driver_data;
1947
1948         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1949
1950         ide_proc_unregister_driver(drive, info->driver);
1951
1952         del_gendisk(info->disk);
1953
1954         ide_cd_put(info);
1955 }
1956
1957 static void ide_cd_release(struct kref *kref)
1958 {
1959         struct cdrom_info *info = to_ide_drv(kref, cdrom_info);
1960         struct cdrom_device_info *devinfo = &info->devinfo;
1961         ide_drive_t *drive = info->drive;
1962         struct gendisk *g = info->disk;
1963
1964         ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1965
1966         kfree(info->toc);
1967         if (devinfo->handle == drive)
1968                 unregister_cdrom(devinfo);
1969         drive->driver_data = NULL;
1970         blk_queue_prep_rq(drive->queue, NULL);
1971         g->private_data = NULL;
1972         put_disk(g);
1973         kfree(info);
1974 }
1975
1976 static int ide_cd_probe(ide_drive_t *);
1977
1978 static ide_driver_t ide_cdrom_driver = {
1979         .gen_driver = {
1980                 .owner          = THIS_MODULE,
1981                 .name           = "ide-cdrom",
1982                 .bus            = &ide_bus_type,
1983         },
1984         .probe                  = ide_cd_probe,
1985         .remove                 = ide_cd_remove,
1986         .version                = IDECD_VERSION,
1987         .do_request             = ide_cd_do_request,
1988         .end_request            = ide_end_request,
1989         .error                  = __ide_error,
1990 #ifdef CONFIG_IDE_PROC_FS
1991         .proc_entries           = ide_cd_proc_entries,
1992         .proc_devsets           = ide_cd_proc_devsets,
1993 #endif
1994 };
1995
1996 static int idecd_open(struct block_device *bdev, fmode_t mode)
1997 {
1998         struct cdrom_info *info = ide_cd_get(bdev->bd_disk);
1999         int rc = -ENOMEM;
2000
2001         if (!info)
2002                 return -ENXIO;
2003
2004         rc = cdrom_open(&info->devinfo, bdev, mode);
2005
2006         if (rc < 0)
2007                 ide_cd_put(info);
2008
2009         return rc;
2010 }
2011
2012 static int idecd_release(struct gendisk *disk, fmode_t mode)
2013 {
2014         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2015
2016         cdrom_release(&info->devinfo, mode);
2017
2018         ide_cd_put(info);
2019
2020         return 0;
2021 }
2022
2023 static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2024 {
2025         struct packet_command cgc;
2026         char buffer[16];
2027         int stat;
2028         char spindown;
2029
2030         if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
2031                 return -EFAULT;
2032
2033         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2034
2035         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2036         if (stat)
2037                 return stat;
2038
2039         buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
2040         return cdrom_mode_select(cdi, &cgc);
2041 }
2042
2043 static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2044 {
2045         struct packet_command cgc;
2046         char buffer[16];
2047         int stat;
2048         char spindown;
2049
2050         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2051
2052         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2053         if (stat)
2054                 return stat;
2055
2056         spindown = buffer[11] & 0x0f;
2057         if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
2058                 return -EFAULT;
2059         return 0;
2060 }
2061
2062 static int idecd_ioctl(struct block_device *bdev, fmode_t mode,
2063                         unsigned int cmd, unsigned long arg)
2064 {
2065         struct cdrom_info *info = ide_drv_g(bdev->bd_disk, cdrom_info);
2066         int err;
2067
2068         switch (cmd) {
2069         case CDROMSETSPINDOWN:
2070                 return idecd_set_spindown(&info->devinfo, arg);
2071         case CDROMGETSPINDOWN:
2072                 return idecd_get_spindown(&info->devinfo, arg);
2073         default:
2074                 break;
2075         }
2076
2077         err = generic_ide_ioctl(info->drive, bdev, cmd, arg);
2078         if (err == -EINVAL)
2079                 err = cdrom_ioctl(&info->devinfo, bdev, mode, cmd, arg);
2080
2081         return err;
2082 }
2083
2084 static int idecd_media_changed(struct gendisk *disk)
2085 {
2086         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2087         return cdrom_media_changed(&info->devinfo);
2088 }
2089
2090 static int idecd_revalidate_disk(struct gendisk *disk)
2091 {
2092         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2093         struct request_sense sense;
2094
2095         ide_cd_read_toc(info->drive, &sense);
2096
2097         return  0;
2098 }
2099
2100 static struct block_device_operations idecd_ops = {
2101         .owner                  = THIS_MODULE,
2102         .open                   = idecd_open,
2103         .release                = idecd_release,
2104         .locked_ioctl           = idecd_ioctl,
2105         .media_changed          = idecd_media_changed,
2106         .revalidate_disk        = idecd_revalidate_disk
2107 };
2108
2109 /* module options */
2110 static char *ignore;
2111 module_param(ignore, charp, 0400);
2112
2113 static unsigned long debug_mask;
2114 module_param(debug_mask, ulong, 0644);
2115
2116 MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
2117
2118 static int ide_cd_probe(ide_drive_t *drive)
2119 {
2120         struct cdrom_info *info;
2121         struct gendisk *g;
2122         struct request_sense sense;
2123
2124         ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->driver_req: %s, "
2125                       "drive->media: 0x%x\n", __func__, drive->driver_req,
2126                       drive->media);
2127
2128         if (!strstr("ide-cdrom", drive->driver_req))
2129                 goto failed;
2130
2131         if (drive->media != ide_cdrom && drive->media != ide_optical)
2132                 goto failed;
2133
2134         /* skip drives that we were told to ignore */
2135         if (ignore != NULL) {
2136                 if (strstr(ignore, drive->name)) {
2137                         printk(KERN_INFO PFX "ignoring drive %s\n",
2138                                          drive->name);
2139                         goto failed;
2140                 }
2141         }
2142
2143         drive->debug_mask = debug_mask;
2144
2145         info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
2146         if (info == NULL) {
2147                 printk(KERN_ERR PFX "%s: Can't allocate a cdrom structure\n",
2148                                 drive->name);
2149                 goto failed;
2150         }
2151
2152         g = alloc_disk(1 << PARTN_BITS);
2153         if (!g)
2154                 goto out_free_cd;
2155
2156         ide_init_disk(g, drive);
2157
2158         kref_init(&info->kref);
2159
2160         info->drive = drive;
2161         info->driver = &ide_cdrom_driver;
2162         info->disk = g;
2163
2164         g->private_data = &info->driver;
2165
2166         drive->driver_data = info;
2167
2168         g->minors = 1;
2169         g->driverfs_dev = &drive->gendev;
2170         g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
2171         if (ide_cdrom_setup(drive)) {
2172                 ide_cd_release(&info->kref);
2173                 goto failed;
2174         }
2175
2176         ide_cd_read_toc(drive, &sense);
2177         g->fops = &idecd_ops;
2178         g->flags |= GENHD_FL_REMOVABLE;
2179         add_disk(g);
2180         return 0;
2181
2182 out_free_cd:
2183         kfree(info);
2184 failed:
2185         return -ENODEV;
2186 }
2187
2188 static void __exit ide_cdrom_exit(void)
2189 {
2190         driver_unregister(&ide_cdrom_driver.gen_driver);
2191 }
2192
2193 static int __init ide_cdrom_init(void)
2194 {
2195         printk(KERN_INFO DRV_NAME " driver " IDECD_VERSION "\n");
2196         return driver_register(&ide_cdrom_driver.gen_driver);
2197 }
2198
2199 MODULE_ALIAS("ide:*m-cdrom*");
2200 MODULE_ALIAS("ide-cd");
2201 module_init(ide_cdrom_init);
2202 module_exit(ide_cdrom_exit);
2203 MODULE_LICENSE("GPL");