SAFE public projects git trees. - safe/jmp/linux-2.6/blob - drivers/ide/ide-taskfile.c

   1 /*
   2  *  Copyright (C) 2000-2002        Michael Cornwell <cornwell@acm.org>
   3  *  Copyright (C) 2000-2002        Andre Hedrick <andre@linux-ide.org>
   4  *  Copyright (C) 2001-2002        Klaus Smolin
   5  *                                      IBM Storage Technology Division
   6  *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
   7  *
   8  *  The big the bad and the ugly.
   9  */
  10
  11 #include <linux/module.h>
  12 #include <linux/types.h>
  13 #include <linux/string.h>
  14 #include <linux/kernel.h>
  15 #include <linux/timer.h>
  16 #include <linux/mm.h>
  17 #include <linux/sched.h>
  18 #include <linux/interrupt.h>
  19 #include <linux/major.h>
  20 #include <linux/errno.h>
  21 #include <linux/genhd.h>
  22 #include <linux/blkpg.h>
  23 #include <linux/slab.h>
  24 #include <linux/pci.h>
  25 #include <linux/delay.h>
  26 #include <linux/hdreg.h>
  27 #include <linux/ide.h>
  28 #include <linux/bitops.h>
  29 #include <linux/scatterlist.h>
  30
  31 #include <asm/byteorder.h>
  32 #include <asm/irq.h>
  33 #include <asm/uaccess.h>
  34 #include <asm/io.h>
  35
  36 void ide_tf_load(ide_drive_t *drive, ide_task_t *task)
  37 {
  38         ide_hwif_t *hwif = drive->hwif;
  39         struct ide_io_ports *io_ports = &hwif->io_ports;
  40         struct ide_taskfile *tf = &task->tf;
  41         u8 HIHI = (task->tf_flags & IDE_TFLAG_LBA48) ? 0xE0 : 0xEF;
  42
  43         if (task->tf_flags & IDE_TFLAG_FLAGGED)
  44                 HIHI = 0xFF;
  45
  46 #ifdef DEBUG
  47         printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
  48                 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
  49                 drive->name, tf->feature, tf->nsect, tf->lbal,
  50                 tf->lbam, tf->lbah, tf->device, tf->command);
  51         printk("%s: hob: nsect 0x%02x lbal 0x%02x "
  52                 "lbam 0x%02x lbah 0x%02x\n",
  53                 drive->name, tf->hob_nsect, tf->hob_lbal,
  54                 tf->hob_lbam, tf->hob_lbah);
  55 #endif
  56
  57         ide_set_irq(drive, 1);
  58
  59         if ((task->tf_flags & IDE_TFLAG_NO_SELECT_MASK) == 0)
  60                 SELECT_MASK(drive, 0);
  61
  62         if (task->tf_flags & IDE_TFLAG_OUT_DATA)
  63                 hwif->OUTW((tf->hob_data << 8) | tf->data, io_ports->data_addr);
  64
  65         if (task->tf_flags & IDE_TFLAG_OUT_HOB_FEATURE)
  66                 hwif->OUTB(tf->hob_feature, io_ports->feature_addr);
  67         if (task->tf_flags & IDE_TFLAG_OUT_HOB_NSECT)
  68                 hwif->OUTB(tf->hob_nsect, io_ports->nsect_addr);
  69         if (task->tf_flags & IDE_TFLAG_OUT_HOB_LBAL)
  70                 hwif->OUTB(tf->hob_lbal, io_ports->lbal_addr);
  71         if (task->tf_flags & IDE_TFLAG_OUT_HOB_LBAM)
  72                 hwif->OUTB(tf->hob_lbam, io_ports->lbam_addr);
  73         if (task->tf_flags & IDE_TFLAG_OUT_HOB_LBAH)
  74                 hwif->OUTB(tf->hob_lbah, io_ports->lbah_addr);
  75
  76         if (task->tf_flags & IDE_TFLAG_OUT_FEATURE)
  77                 hwif->OUTB(tf->feature, io_ports->feature_addr);
  78         if (task->tf_flags & IDE_TFLAG_OUT_NSECT)
  79                 hwif->OUTB(tf->nsect, io_ports->nsect_addr);
  80         if (task->tf_flags & IDE_TFLAG_OUT_LBAL)
  81                 hwif->OUTB(tf->lbal, io_ports->lbal_addr);
  82         if (task->tf_flags & IDE_TFLAG_OUT_LBAM)
  83                 hwif->OUTB(tf->lbam, io_ports->lbam_addr);
  84         if (task->tf_flags & IDE_TFLAG_OUT_LBAH)
  85                 hwif->OUTB(tf->lbah, io_ports->lbah_addr);
  86
  87         if (task->tf_flags & IDE_TFLAG_OUT_DEVICE)
  88                 hwif->OUTB((tf->device & HIHI) | drive->select.all,
  89                            io_ports->device_addr);
  90 }
  91
  92 int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
  93 {
  94         ide_task_t args;
  95
  96         memset(&args, 0, sizeof(ide_task_t));
  97         args.tf.nsect = 0x01;
  98         if (drive->media == ide_disk)
  99                 args.tf.command = WIN_IDENTIFY;
 100         else
 101                 args.tf.command = WIN_PIDENTIFY;
 102         args.tf_flags   = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
 103         args.data_phase = TASKFILE_IN;
 104         return ide_raw_taskfile(drive, &args, buf, 1);
 105 }
 106
 107 static int inline task_dma_ok(ide_task_t *task)
 108 {
 109         if (blk_fs_request(task->rq) || (task->tf_flags & IDE_TFLAG_FLAGGED))
 110                 return 1;
 111
 112         switch (task->tf.command) {
 113                 case WIN_WRITEDMA_ONCE:
 114                 case WIN_WRITEDMA:
 115                 case WIN_WRITEDMA_EXT:
 116                 case WIN_READDMA_ONCE:
 117                 case WIN_READDMA:
 118                 case WIN_READDMA_EXT:
 119                 case WIN_IDENTIFY_DMA:
 120                         return 1;
 121         }
 122
 123         return 0;
 124 }
 125
 126 static ide_startstop_t task_no_data_intr(ide_drive_t *);
 127 static ide_startstop_t set_geometry_intr(ide_drive_t *);
 128 static ide_startstop_t recal_intr(ide_drive_t *);
 129 static ide_startstop_t set_multmode_intr(ide_drive_t *);
 130 static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct request *);
 131 static ide_startstop_t task_in_intr(ide_drive_t *);
 132
 133 ide_startstop_t do_rw_taskfile (ide_drive_t *drive, ide_task_t *task)
 134 {
 135         ide_hwif_t *hwif        = HWIF(drive);
 136         struct ide_taskfile *tf = &task->tf;
 137         ide_handler_t *handler = NULL;
 138         const struct ide_dma_ops *dma_ops = hwif->dma_ops;
 139
 140         if (task->data_phase == TASKFILE_MULTI_IN ||
 141             task->data_phase == TASKFILE_MULTI_OUT) {
 142                 if (!drive->mult_count) {
 143                         printk(KERN_ERR "%s: multimode not set!\n",
 144                                         drive->name);
 145                         return ide_stopped;
 146                 }
 147         }
 148
 149         if (task->tf_flags & IDE_TFLAG_FLAGGED)
 150                 task->tf_flags |= IDE_TFLAG_FLAGGED_SET_IN_FLAGS;
 151
 152         if ((task->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0)
 153                 ide_tf_load(drive, task);
 154
 155         switch (task->data_phase) {
 156         case TASKFILE_MULTI_OUT:
 157         case TASKFILE_OUT:
 158                 hwif->OUTBSYNC(drive, tf->command, hwif->io_ports.command_addr);
 159                 ndelay(400);    /* FIXME */
 160                 return pre_task_out_intr(drive, task->rq);
 161         case TASKFILE_MULTI_IN:
 162         case TASKFILE_IN:
 163                 handler = task_in_intr;
 164                 /* fall-through */
 165         case TASKFILE_NO_DATA:
 166                 if (handler == NULL)
 167                         handler = task_no_data_intr;
 168                 /* WIN_{SPECIFY,RESTORE,SETMULT} use custom handlers */
 169                 if (task->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) {
 170                         switch (tf->command) {
 171                         case WIN_SPECIFY: handler = set_geometry_intr;  break;
 172                         case WIN_RESTORE: handler = recal_intr;         break;
 173                         case WIN_SETMULT: handler = set_multmode_intr;  break;
 174                         }
 175                 }
 176                 ide_execute_command(drive, tf->command, handler,
 177                                     WAIT_WORSTCASE, NULL);
 178                 return ide_started;
 179         default:
 180                 if (task_dma_ok(task) == 0 || drive->using_dma == 0 ||
 181                     dma_ops->dma_setup(drive))
 182                         return ide_stopped;
 183                 dma_ops->dma_exec_cmd(drive, tf->command);
 184                 dma_ops->dma_start(drive);
 185                 return ide_started;
 186         }
 187 }
 188 EXPORT_SYMBOL_GPL(do_rw_taskfile);
 189
 190 /*
 191  * set_multmode_intr() is invoked on completion of a WIN_SETMULT cmd.
 192  */
 193 static ide_startstop_t set_multmode_intr(ide_drive_t *drive)
 194 {
 195         u8 stat = ide_read_status(drive);
 196
 197         if (OK_STAT(stat, READY_STAT, BAD_STAT))
 198                 drive->mult_count = drive->mult_req;
 199         else {
 200                 drive->mult_req = drive->mult_count = 0;
 201                 drive->special.b.recalibrate = 1;
 202                 (void) ide_dump_status(drive, "set_multmode", stat);
 203         }
 204         return ide_stopped;
 205 }
 206
 207 /*
 208  * set_geometry_intr() is invoked on completion of a WIN_SPECIFY cmd.
 209  */
 210 static ide_startstop_t set_geometry_intr(ide_drive_t *drive)
 211 {
 212         int retries = 5;
 213         u8 stat;
 214
 215         while (((stat = ide_read_status(drive)) & BUSY_STAT) && retries--)
 216                 udelay(10);
 217
 218         if (OK_STAT(stat, READY_STAT, BAD_STAT))
 219                 return ide_stopped;
 220
 221         if (stat & (ERR_STAT|DRQ_STAT))
 222                 return ide_error(drive, "set_geometry_intr", stat);
 223
 224         BUG_ON(HWGROUP(drive)->handler != NULL);
 225         ide_set_handler(drive, &set_geometry_intr, WAIT_WORSTCASE, NULL);
 226         return ide_started;
 227 }
 228
 229 /*
 230  * recal_intr() is invoked on completion of a WIN_RESTORE (recalibrate) cmd.
 231  */
 232 static ide_startstop_t recal_intr(ide_drive_t *drive)
 233 {
 234         u8 stat = ide_read_status(drive);
 235
 236         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
 237                 return ide_error(drive, "recal_intr", stat);
 238         return ide_stopped;
 239 }
 240
 241 /*
 242  * Handler for commands without a data phase
 243  */
 244 static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
 245 {
 246         ide_task_t *args        = HWGROUP(drive)->rq->special;
 247         u8 stat;
 248
 249         local_irq_enable_in_hardirq();
 250         stat = ide_read_status(drive);
 251
 252         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
 253                 return ide_error(drive, "task_no_data_intr", stat);
 254                 /* calls ide_end_drive_cmd */
 255
 256         if (args)
 257                 ide_end_drive_cmd(drive, stat, ide_read_error(drive));
 258
 259         return ide_stopped;
 260 }
 261
 262 static u8 wait_drive_not_busy(ide_drive_t *drive)
 263 {
 264         int retries;
 265         u8 stat;
 266
 267         /*
 268          * Last sector was transfered, wait until drive is ready.
 269          * This can take up to 10 usec, but we will wait max 1 ms.
 270          */
 271         for (retries = 0; retries < 100; retries++) {
 272                 stat = ide_read_status(drive);
 273
 274                 if (stat & BUSY_STAT)
 275                         udelay(10);
 276                 else
 277                         break;
 278         }
 279
 280         if (stat & BUSY_STAT)
 281                 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);
 282
 283         return stat;
 284 }
 285
 286 static void ide_pio_sector(ide_drive_t *drive, struct request *rq,
 287                            unsigned int write)
 288 {
 289         ide_hwif_t *hwif = drive->hwif;
 290         struct scatterlist *sg = hwif->sg_table;
 291         struct scatterlist *cursg = hwif->cursg;
 292         struct page *page;
 293 #ifdef CONFIG_HIGHMEM
 294         unsigned long flags;
 295 #endif
 296         unsigned int offset;
 297         u8 *buf;
 298
 299         cursg = hwif->cursg;
 300         if (!cursg) {
 301                 cursg = sg;
 302                 hwif->cursg = sg;
 303         }
 304
 305         page = sg_page(cursg);
 306         offset = cursg->offset + hwif->cursg_ofs * SECTOR_SIZE;
 307
 308         /* get the current page and offset */
 309         page = nth_page(page, (offset >> PAGE_SHIFT));
 310         offset %= PAGE_SIZE;
 311
 312 #ifdef CONFIG_HIGHMEM
 313         local_irq_save(flags);
 314 #endif
 315         buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
 316
 317         hwif->nleft--;
 318         hwif->cursg_ofs++;
 319
 320         if ((hwif->cursg_ofs * SECTOR_SIZE) == cursg->length) {
 321                 hwif->cursg = sg_next(hwif->cursg);
 322                 hwif->cursg_ofs = 0;
 323         }
 324
 325         /* do the actual data transfer */
 326         if (write)
 327                 hwif->output_data(drive, rq, buf, SECTOR_SIZE);
 328         else
 329                 hwif->input_data(drive, rq, buf, SECTOR_SIZE);
 330
 331         kunmap_atomic(buf, KM_BIO_SRC_IRQ);
 332 #ifdef CONFIG_HIGHMEM
 333         local_irq_restore(flags);
 334 #endif
 335 }
 336
 337 static void ide_pio_multi(ide_drive_t *drive, struct request *rq,
 338                           unsigned int write)
 339 {
 340         unsigned int nsect;
 341
 342         nsect = min_t(unsigned int, drive->hwif->nleft, drive->mult_count);
 343         while (nsect--)
 344                 ide_pio_sector(drive, rq, write);
 345 }
 346
 347 static void ide_pio_datablock(ide_drive_t *drive, struct request *rq,
 348                                      unsigned int write)
 349 {
 350         u8 saved_io_32bit = drive->io_32bit;
 351
 352         if (rq->bio)    /* fs request */
 353                 rq->errors = 0;
 354
 355         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
 356                 ide_task_t *task = rq->special;
 357
 358                 if (task->tf_flags & IDE_TFLAG_IO_16BIT)
 359                         drive->io_32bit = 0;
 360         }
 361
 362         touch_softlockup_watchdog();
 363
 364         switch (drive->hwif->data_phase) {
 365         case TASKFILE_MULTI_IN:
 366         case TASKFILE_MULTI_OUT:
 367                 ide_pio_multi(drive, rq, write);
 368                 break;
 369         default:
 370                 ide_pio_sector(drive, rq, write);
 371                 break;
 372         }
 373
 374         drive->io_32bit = saved_io_32bit;
 375 }
 376
 377 static ide_startstop_t task_error(ide_drive_t *drive, struct request *rq,
 378                                   const char *s, u8 stat)
 379 {
 380         if (rq->bio) {
 381                 ide_hwif_t *hwif = drive->hwif;
 382                 int sectors = hwif->nsect - hwif->nleft;
 383
 384                 switch (hwif->data_phase) {
 385                 case TASKFILE_IN:
 386                         if (hwif->nleft)
 387                                 break;
 388                         /* fall through */
 389                 case TASKFILE_OUT:
 390                         sectors--;
 391                         break;
 392                 case TASKFILE_MULTI_IN:
 393                         if (hwif->nleft)
 394                                 break;
 395                         /* fall through */
 396                 case TASKFILE_MULTI_OUT:
 397                         sectors -= drive->mult_count;
 398                 default:
 399                         break;
 400                 }
 401
 402                 if (sectors > 0) {
 403                         ide_driver_t *drv;
 404
 405                         drv = *(ide_driver_t **)rq->rq_disk->private_data;
 406                         drv->end_request(drive, 1, sectors);
 407                 }
 408         }
 409         return ide_error(drive, s, stat);
 410 }
 411
 412 void task_end_request(ide_drive_t *drive, struct request *rq, u8 stat)
 413 {
 414         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
 415                 u8 err = ide_read_error(drive);
 416
 417                 ide_end_drive_cmd(drive, stat, err);
 418                 return;
 419         }
 420
 421         if (rq->rq_disk) {
 422                 ide_driver_t *drv;
 423
 424                 drv = *(ide_driver_t **)rq->rq_disk->private_data;;
 425                 drv->end_request(drive, 1, rq->nr_sectors);
 426         } else
 427                 ide_end_request(drive, 1, rq->nr_sectors);
 428 }
 429
 430 /*
 431  * We got an interrupt on a task_in case, but no errors and no DRQ.
 432  *
 433  * It might be a spurious irq (shared irq), but it might be a
 434  * command that had no output.
 435  */
 436 static ide_startstop_t task_in_unexpected(ide_drive_t *drive, struct request *rq, u8 stat)
 437 {
 438         /* Command all done? */
 439         if (OK_STAT(stat, READY_STAT, BUSY_STAT)) {
 440                 task_end_request(drive, rq, stat);
 441                 return ide_stopped;
 442         }
 443
 444         /* Assume it was a spurious irq */
 445         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
 446         return ide_started;
 447 }
 448
 449 /*
 450  * Handler for command with PIO data-in phase (Read/Read Multiple).
 451  */
 452 static ide_startstop_t task_in_intr(ide_drive_t *drive)
 453 {
 454         ide_hwif_t *hwif = drive->hwif;
 455         struct request *rq = HWGROUP(drive)->rq;
 456         u8 stat = ide_read_status(drive);
 457
 458         /* Error? */
 459         if (stat & ERR_STAT)
 460                 return task_error(drive, rq, __func__, stat);
 461
 462         /* Didn't want any data? Odd. */
 463         if (!(stat & DRQ_STAT))
 464                 return task_in_unexpected(drive, rq, stat);
 465
 466         ide_pio_datablock(drive, rq, 0);
 467
 468         /* Are we done? Check status and finish transfer. */
 469         if (!hwif->nleft) {
 470                 stat = wait_drive_not_busy(drive);
 471                 if (!OK_STAT(stat, 0, BAD_STAT))
 472                         return task_error(drive, rq, __func__, stat);
 473                 task_end_request(drive, rq, stat);
 474                 return ide_stopped;
 475         }
 476
 477         /* Still data left to transfer. */
 478         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
 479
 480         return ide_started;
 481 }
 482
 483 /*
 484  * Handler for command with PIO data-out phase (Write/Write Multiple).
 485  */
 486 static ide_startstop_t task_out_intr (ide_drive_t *drive)
 487 {
 488         ide_hwif_t *hwif = drive->hwif;
 489         struct request *rq = HWGROUP(drive)->rq;
 490         u8 stat = ide_read_status(drive);
 491
 492         if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
 493                 return task_error(drive, rq, __func__, stat);
 494
 495         /* Deal with unexpected ATA data phase. */
 496         if (((stat & DRQ_STAT) == 0) ^ !hwif->nleft)
 497                 return task_error(drive, rq, __func__, stat);
 498
 499         if (!hwif->nleft) {
 500                 task_end_request(drive, rq, stat);
 501                 return ide_stopped;
 502         }
 503
 504         /* Still data left to transfer. */
 505         ide_pio_datablock(drive, rq, 1);
 506         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
 507
 508         return ide_started;
 509 }
 510
 511 static ide_startstop_t pre_task_out_intr(ide_drive_t *drive, struct request *rq)
 512 {
 513         ide_startstop_t startstop;
 514
 515         if (ide_wait_stat(&startstop, drive, DRQ_STAT,
 516                           drive->bad_wstat, WAIT_DRQ)) {
 517                 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
 518                                 drive->name,
 519                                 drive->hwif->data_phase ? "MULT" : "",
 520                                 drive->addressing ? "_EXT" : "");
 521                 return startstop;
 522         }
 523
 524         if (!drive->unmask)
 525                 local_irq_disable();
 526
 527         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
 528         ide_pio_datablock(drive, rq, 1);
 529
 530         return ide_started;
 531 }
 532
 533 int ide_raw_taskfile(ide_drive_t *drive, ide_task_t *task, u8 *buf, u16 nsect)
 534 {
 535         struct request rq;
 536
 537         memset(&rq, 0, sizeof(rq));
 538         rq.ref_count = 1;
 539         rq.cmd_type = REQ_TYPE_ATA_TASKFILE;
 540         rq.buffer = buf;
 541
 542         /*
 543          * (ks) We transfer currently only whole sectors.
 544          * This is suffient for now.  But, it would be great,
 545          * if we would find a solution to transfer any size.
 546          * To support special commands like READ LONG.
 547          */
 548         rq.hard_nr_sectors = rq.nr_sectors = nsect;
 549         rq.hard_cur_sectors = rq.current_nr_sectors = nsect;
 550
 551         if (task->tf_flags & IDE_TFLAG_WRITE)
 552                 rq.cmd_flags |= REQ_RW;
 553
 554         rq.special = task;
 555         task->rq = &rq;
 556
 557         return ide_do_drive_cmd(drive, &rq, ide_wait);
 558 }
 559
 560 EXPORT_SYMBOL(ide_raw_taskfile);
 561
 562 int ide_no_data_taskfile(ide_drive_t *drive, ide_task_t *task)
 563 {
 564         task->data_phase = TASKFILE_NO_DATA;
 565
 566         return ide_raw_taskfile(drive, task, NULL, 0);
 567 }
 568 EXPORT_SYMBOL_GPL(ide_no_data_taskfile);
 569
 570 #ifdef CONFIG_IDE_TASK_IOCTL
 571 int ide_taskfile_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 572 {
 573         ide_task_request_t      *req_task;
 574         ide_task_t              args;
 575         u8 *outbuf              = NULL;
 576         u8 *inbuf               = NULL;
 577         u8 *data_buf            = NULL;
 578         int err                 = 0;
 579         int tasksize            = sizeof(struct ide_task_request_s);
 580         unsigned int taskin     = 0;
 581         unsigned int taskout    = 0;
 582         u16 nsect               = 0;
 583         char __user *buf = (char __user *)arg;
 584
 585 //      printk("IDE Taskfile ...\n");
 586
 587         req_task = kzalloc(tasksize, GFP_KERNEL);
 588         if (req_task == NULL) return -ENOMEM;
 589         if (copy_from_user(req_task, buf, tasksize)) {
 590                 kfree(req_task);
 591                 return -EFAULT;
 592         }
 593
 594         taskout = req_task->out_size;
 595         taskin  = req_task->in_size;
 596
 597         if (taskin > 65536 || taskout > 65536) {
 598                 err = -EINVAL;
 599                 goto abort;
 600         }
 601
 602         if (taskout) {
 603                 int outtotal = tasksize;
 604                 outbuf = kzalloc(taskout, GFP_KERNEL);
 605                 if (outbuf == NULL) {
 606                         err = -ENOMEM;
 607                         goto abort;
 608                 }
 609                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
 610                         err = -EFAULT;
 611                         goto abort;
 612                 }
 613         }
 614
 615         if (taskin) {
 616                 int intotal = tasksize + taskout;
 617                 inbuf = kzalloc(taskin, GFP_KERNEL);
 618                 if (inbuf == NULL) {
 619                         err = -ENOMEM;
 620                         goto abort;
 621                 }
 622                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
 623                         err = -EFAULT;
 624                         goto abort;
 625                 }
 626         }
 627
 628         memset(&args, 0, sizeof(ide_task_t));
 629
 630         memcpy(&args.tf_array[0], req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
 631         memcpy(&args.tf_array[6], req_task->io_ports, HDIO_DRIVE_TASK_HDR_SIZE);
 632
 633         args.data_phase = req_task->data_phase;
 634
 635         args.tf_flags = IDE_TFLAG_IO_16BIT | IDE_TFLAG_DEVICE |
 636                         IDE_TFLAG_IN_TF;
 637         if (drive->addressing == 1)
 638                 args.tf_flags |= (IDE_TFLAG_LBA48 | IDE_TFLAG_IN_HOB);
 639
 640         if (req_task->out_flags.all) {
 641                 args.tf_flags |= IDE_TFLAG_FLAGGED;
 642
 643                 if (req_task->out_flags.b.data)
 644                         args.tf_flags |= IDE_TFLAG_OUT_DATA;
 645
 646                 if (req_task->out_flags.b.nsector_hob)
 647                         args.tf_flags |= IDE_TFLAG_OUT_HOB_NSECT;
 648                 if (req_task->out_flags.b.sector_hob)
 649                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAL;
 650                 if (req_task->out_flags.b.lcyl_hob)
 651                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAM;
 652                 if (req_task->out_flags.b.hcyl_hob)
 653                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAH;
 654
 655                 if (req_task->out_flags.b.error_feature)
 656                         args.tf_flags |= IDE_TFLAG_OUT_FEATURE;
 657                 if (req_task->out_flags.b.nsector)
 658                         args.tf_flags |= IDE_TFLAG_OUT_NSECT;
 659                 if (req_task->out_flags.b.sector)
 660                         args.tf_flags |= IDE_TFLAG_OUT_LBAL;
 661                 if (req_task->out_flags.b.lcyl)
 662                         args.tf_flags |= IDE_TFLAG_OUT_LBAM;
 663                 if (req_task->out_flags.b.hcyl)
 664                         args.tf_flags |= IDE_TFLAG_OUT_LBAH;
 665         } else {
 666                 args.tf_flags |= IDE_TFLAG_OUT_TF;
 667                 if (args.tf_flags & IDE_TFLAG_LBA48)
 668                         args.tf_flags |= IDE_TFLAG_OUT_HOB;
 669         }
 670
 671         if (req_task->in_flags.b.data)
 672                 args.tf_flags |= IDE_TFLAG_IN_DATA;
 673
 674         switch(req_task->data_phase) {
 675                 case TASKFILE_MULTI_OUT:
 676                         if (!drive->mult_count) {
 677                                 /* (hs): give up if multcount is not set */
 678                                 printk(KERN_ERR "%s: %s Multimode Write " \
 679                                         "multcount is not set\n",
 680                                         drive->name, __func__);
 681                                 err = -EPERM;
 682                                 goto abort;
 683                         }
 684                         /* fall through */
 685                 case TASKFILE_OUT:
 686                         /* fall through */
 687                 case TASKFILE_OUT_DMAQ:
 688                 case TASKFILE_OUT_DMA:
 689                         nsect = taskout / SECTOR_SIZE;
 690                         data_buf = outbuf;
 691                         break;
 692                 case TASKFILE_MULTI_IN:
 693                         if (!drive->mult_count) {
 694                                 /* (hs): give up if multcount is not set */
 695                                 printk(KERN_ERR "%s: %s Multimode Read failure " \
 696                                         "multcount is not set\n",
 697                                         drive->name, __func__);
 698                                 err = -EPERM;
 699                                 goto abort;
 700                         }
 701                         /* fall through */
 702                 case TASKFILE_IN:
 703                         /* fall through */
 704                 case TASKFILE_IN_DMAQ:
 705                 case TASKFILE_IN_DMA:
 706                         nsect = taskin / SECTOR_SIZE;
 707                         data_buf = inbuf;
 708                         break;
 709                 case TASKFILE_NO_DATA:
 710                         break;
 711                 default:
 712                         err = -EFAULT;
 713                         goto abort;
 714         }
 715
 716         if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
 717                 nsect = 0;
 718         else if (!nsect) {
 719                 nsect = (args.tf.hob_nsect << 8) | args.tf.nsect;
 720
 721                 if (!nsect) {
 722                         printk(KERN_ERR "%s: in/out command without data\n",
 723                                         drive->name);
 724                         err = -EFAULT;
 725                         goto abort;
 726                 }
 727         }
 728
 729         if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE)
 730                 args.tf_flags |= IDE_TFLAG_WRITE;
 731
 732         err = ide_raw_taskfile(drive, &args, data_buf, nsect);
 733
 734         memcpy(req_task->hob_ports, &args.tf_array[0], HDIO_DRIVE_HOB_HDR_SIZE - 2);
 735         memcpy(req_task->io_ports, &args.tf_array[6], HDIO_DRIVE_TASK_HDR_SIZE);
 736
 737         if ((args.tf_flags & IDE_TFLAG_FLAGGED_SET_IN_FLAGS) &&
 738             req_task->in_flags.all == 0) {
 739                 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
 740                 if (drive->addressing == 1)
 741                         req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
 742         }
 743
 744         if (copy_to_user(buf, req_task, tasksize)) {
 745                 err = -EFAULT;
 746                 goto abort;
 747         }
 748         if (taskout) {
 749                 int outtotal = tasksize;
 750                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
 751                         err = -EFAULT;
 752                         goto abort;
 753                 }
 754         }
 755         if (taskin) {
 756                 int intotal = tasksize + taskout;
 757                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
 758                         err = -EFAULT;
 759                         goto abort;
 760                 }
 761         }
 762 abort:
 763         kfree(req_task);
 764         kfree(outbuf);
 765         kfree(inbuf);
 766
 767 //      printk("IDE Taskfile ioctl ended. rc = %i\n", err);
 768
 769         return err;
 770 }
 771 #endif
 772
 773 int ide_cmd_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 774 {
 775         u8 *buf = NULL;
 776         int bufsize = 0, err = 0;
 777         u8 args[4], xfer_rate = 0;
 778         ide_task_t tfargs;
 779         struct ide_taskfile *tf = &tfargs.tf;
 780         struct hd_driveid *id = drive->id;
 781
 782         if (NULL == (void *) arg) {
 783                 struct request rq;
 784
 785                 ide_init_drive_cmd(&rq);
 786                 rq.cmd_type = REQ_TYPE_ATA_TASKFILE;
 787
 788                 return ide_do_drive_cmd(drive, &rq, ide_wait);
 789         }
 790
 791         if (copy_from_user(args, (void __user *)arg, 4))
 792                 return -EFAULT;
 793
 794         memset(&tfargs, 0, sizeof(ide_task_t));
 795         tf->feature = args[2];
 796         if (args[0] == WIN_SMART) {
 797                 tf->nsect = args[3];
 798                 tf->lbal  = args[1];
 799                 tf->lbam  = 0x4f;
 800                 tf->lbah  = 0xc2;
 801                 tfargs.tf_flags = IDE_TFLAG_OUT_TF | IDE_TFLAG_IN_NSECT;
 802         } else {
 803                 tf->nsect = args[1];
 804                 tfargs.tf_flags = IDE_TFLAG_OUT_FEATURE |
 805                                   IDE_TFLAG_OUT_NSECT | IDE_TFLAG_IN_NSECT;
 806         }
 807         tf->command = args[0];
 808         tfargs.data_phase = args[3] ? TASKFILE_IN : TASKFILE_NO_DATA;
 809
 810         if (args[3]) {
 811                 tfargs.tf_flags |= IDE_TFLAG_IO_16BIT;
 812                 bufsize = SECTOR_WORDS * 4 * args[3];
 813                 buf = kzalloc(bufsize, GFP_KERNEL);
 814                 if (buf == NULL)
 815                         return -ENOMEM;
 816         }
 817
 818         if (tf->command == WIN_SETFEATURES &&
 819             tf->feature == SETFEATURES_XFER &&
 820             tf->nsect >= XFER_SW_DMA_0 &&
 821             (id->dma_ultra || id->dma_mword || id->dma_1word)) {
 822                 xfer_rate = args[1];
 823                 if (tf->nsect > XFER_UDMA_2 && !eighty_ninty_three(drive)) {
 824                         printk(KERN_WARNING "%s: UDMA speeds >UDMA33 cannot "
 825                                             "be set\n", drive->name);
 826                         goto abort;
 827                 }
 828         }
 829
 830         err = ide_raw_taskfile(drive, &tfargs, buf, args[3]);
 831
 832         args[0] = tf->status;
 833         args[1] = tf->error;
 834         args[2] = tf->nsect;
 835
 836         if (!err && xfer_rate) {
 837                 /* active-retuning-calls future */
 838                 ide_set_xfer_rate(drive, xfer_rate);
 839                 ide_driveid_update(drive);
 840         }
 841 abort:
 842         if (copy_to_user((void __user *)arg, &args, 4))
 843                 err = -EFAULT;
 844         if (buf) {
 845                 if (copy_to_user((void __user *)(arg + 4), buf, bufsize))
 846                         err = -EFAULT;
 847                 kfree(buf);
 848         }
 849         return err;
 850 }
 851
 852 int ide_task_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
 853 {
 854         void __user *p = (void __user *)arg;
 855         int err = 0;
 856         u8 args[7];
 857         ide_task_t task;
 858
 859         if (copy_from_user(args, p, 7))
 860                 return -EFAULT;
 861
 862         memset(&task, 0, sizeof(task));
 863         memcpy(&task.tf_array[7], &args[1], 6);
 864         task.tf.command = args[0];
 865         task.tf_flags = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
 866
 867         err = ide_no_data_taskfile(drive, &task);
 868
 869         args[0] = task.tf.command;
 870         memcpy(&args[1], &task.tf_array[7], 6);
 871
 872         if (copy_to_user(p, args, 7))
 873                 err = -EFAULT;
 874
 875         return err;
 876 }