ide: sanitize ide_end_rq()
[safe/jmp/linux-2.6] / drivers / ide / ide-cd.c
1 /*
2  * ATAPI CD-ROM driver.
3  *
4  * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
5  * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
6  * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
7  * Copyright (C) 2005, 2007  Bartlomiej Zolnierkiewicz
8  *
9  * May be copied or modified under the terms of the GNU General Public
10  * License.  See linux/COPYING for more information.
11  *
12  * See Documentation/cdrom/ide-cd for usage information.
13  *
14  * Suggestions are welcome. Patches that work are more welcome though. ;-)
15  * For those wishing to work on this driver, please be sure you download
16  * and comply with the latest Mt. Fuji (SFF8090 version 4) and ATAPI
17  * (SFF-8020i rev 2.6) standards. These documents can be obtained by
18  * anonymous ftp from:
19  * ftp://fission.dt.wdc.com/pub/standards/SFF_atapi/spec/SFF8020-r2.6/PS/8020r26.ps
20  * ftp://ftp.avc-pioneer.com/Mtfuji4/Spec/Fuji4r10.pdf
21  *
22  * For historical changelog please see:
23  *      Documentation/ide/ChangeLog.ide-cd.1994-2004
24  */
25
26 #define DRV_NAME "ide-cd"
27 #define PFX DRV_NAME ": "
28
29 #define IDECD_VERSION "5.00"
30
31 #include <linux/module.h>
32 #include <linux/types.h>
33 #include <linux/kernel.h>
34 #include <linux/delay.h>
35 #include <linux/timer.h>
36 #include <linux/slab.h>
37 #include <linux/interrupt.h>
38 #include <linux/errno.h>
39 #include <linux/cdrom.h>
40 #include <linux/ide.h>
41 #include <linux/completion.h>
42 #include <linux/mutex.h>
43 #include <linux/bcd.h>
44
45 /* For SCSI -> ATAPI command conversion */
46 #include <scsi/scsi.h>
47
48 #include <linux/irq.h>
49 #include <linux/io.h>
50 #include <asm/byteorder.h>
51 #include <linux/uaccess.h>
52 #include <asm/unaligned.h>
53
54 #include "ide-cd.h"
55
56 static DEFINE_MUTEX(idecd_ref_mutex);
57
58 static void ide_cd_release(struct device *);
59
60 static struct cdrom_info *ide_cd_get(struct gendisk *disk)
61 {
62         struct cdrom_info *cd = NULL;
63
64         mutex_lock(&idecd_ref_mutex);
65         cd = ide_drv_g(disk, cdrom_info);
66         if (cd) {
67                 if (ide_device_get(cd->drive))
68                         cd = NULL;
69                 else
70                         get_device(&cd->dev);
71
72         }
73         mutex_unlock(&idecd_ref_mutex);
74         return cd;
75 }
76
77 static void ide_cd_put(struct cdrom_info *cd)
78 {
79         ide_drive_t *drive = cd->drive;
80
81         mutex_lock(&idecd_ref_mutex);
82         put_device(&cd->dev);
83         ide_device_put(drive);
84         mutex_unlock(&idecd_ref_mutex);
85 }
86
87 /*
88  * Generic packet command support and error handling routines.
89  */
90
91 /* Mark that we've seen a media change and invalidate our internal buffers. */
92 static void cdrom_saw_media_change(ide_drive_t *drive)
93 {
94         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
95         drive->atapi_flags &= ~IDE_AFLAG_TOC_VALID;
96 }
97
98 static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
99                            struct request_sense *sense)
100 {
101         int log = 0;
102
103         ide_debug_log(IDE_DBG_SENSE, "sense_key: 0x%x", sense->sense_key);
104
105         if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
106                 return 0;
107
108         switch (sense->sense_key) {
109         case NO_SENSE:
110         case RECOVERED_ERROR:
111                 break;
112         case NOT_READY:
113                 /*
114                  * don't care about tray state messages for e.g. capacity
115                  * commands or in-progress or becoming ready
116                  */
117                 if (sense->asc == 0x3a || sense->asc == 0x04)
118                         break;
119                 log = 1;
120                 break;
121         case ILLEGAL_REQUEST:
122                 /*
123                  * don't log START_STOP unit with LoEj set, since we cannot
124                  * reliably check if drive can auto-close
125                  */
126                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
127                         break;
128                 log = 1;
129                 break;
130         case UNIT_ATTENTION:
131                 /*
132                  * Make good and sure we've seen this potential media change.
133                  * Some drives (i.e. Creative) fail to present the correct sense
134                  * key in the error register.
135                  */
136                 cdrom_saw_media_change(drive);
137                 break;
138         default:
139                 log = 1;
140                 break;
141         }
142         return log;
143 }
144
145 static void cdrom_analyze_sense_data(ide_drive_t *drive,
146                               struct request *failed_command,
147                               struct request_sense *sense)
148 {
149         unsigned long sector;
150         unsigned long bio_sectors;
151         struct cdrom_info *info = drive->driver_data;
152
153         ide_debug_log(IDE_DBG_SENSE, "error_code: 0x%x, sense_key: 0x%x",
154                                      sense->error_code, sense->sense_key);
155
156         if (failed_command)
157                 ide_debug_log(IDE_DBG_SENSE, "failed cmd: 0x%x",
158                                              failed_command->cmd[0]);
159
160         if (!cdrom_log_sense(drive, failed_command, sense))
161                 return;
162
163         /*
164          * If a read toc is executed for a CD-R or CD-RW medium where the first
165          * toc has not been recorded yet, it will fail with 05/24/00 (which is a
166          * confusing error)
167          */
168         if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
169                 if (sense->sense_key == 0x05 && sense->asc == 0x24)
170                         return;
171
172         /* current error */
173         if (sense->error_code == 0x70) {
174                 switch (sense->sense_key) {
175                 case MEDIUM_ERROR:
176                 case VOLUME_OVERFLOW:
177                 case ILLEGAL_REQUEST:
178                         if (!sense->valid)
179                                 break;
180                         if (failed_command == NULL ||
181                                         !blk_fs_request(failed_command))
182                                 break;
183                         sector = (sense->information[0] << 24) |
184                                  (sense->information[1] << 16) |
185                                  (sense->information[2] <<  8) |
186                                  (sense->information[3]);
187
188                         if (drive->queue->hardsect_size == 2048)
189                                 /* device sector size is 2K */
190                                 sector <<= 2;
191
192                         bio_sectors = max(bio_sectors(failed_command->bio), 4U);
193                         sector &= ~(bio_sectors - 1);
194
195                         /*
196                          * The SCSI specification allows for the value
197                          * returned by READ CAPACITY to be up to 75 2K
198                          * sectors past the last readable block.
199                          * Therefore, if we hit a medium error within the
200                          * last 75 2K sectors, we decrease the saved size
201                          * value.
202                          */
203                         if (sector < get_capacity(info->disk) &&
204                             drive->probed_capacity - sector < 4 * 75)
205                                 set_capacity(info->disk, sector);
206                 }
207         }
208
209         ide_cd_log_error(drive->name, failed_command, sense);
210 }
211
212 static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
213                                       struct request *failed_command)
214 {
215         struct cdrom_info *info         = drive->driver_data;
216         struct request *rq              = &drive->request_sense_rq;
217
218         ide_debug_log(IDE_DBG_SENSE, "enter");
219
220         if (sense == NULL)
221                 sense = &info->sense_data;
222
223         /* stuff the sense request in front of our current request */
224         blk_rq_init(NULL, rq);
225         rq->cmd_type = REQ_TYPE_ATA_PC;
226         rq->rq_disk = info->disk;
227
228         rq->data = sense;
229         rq->cmd[0] = GPCMD_REQUEST_SENSE;
230         rq->cmd[4] = 18;
231         rq->data_len = 18;
232
233         rq->cmd_type = REQ_TYPE_SENSE;
234         rq->cmd_flags |= REQ_PREEMPT;
235
236         /* NOTE! Save the failed command in "rq->buffer" */
237         rq->buffer = (void *) failed_command;
238
239         if (failed_command)
240                 ide_debug_log(IDE_DBG_SENSE, "failed_cmd: 0x%x",
241                                              failed_command->cmd[0]);
242
243         drive->hwif->rq = NULL;
244
245         elv_add_request(drive->queue, rq, ELEVATOR_INSERT_FRONT, 0);
246 }
247
248 static void cdrom_end_request(ide_drive_t *drive, int uptodate)
249 {
250         struct request *rq = drive->hwif->rq;
251         int nsectors = rq->hard_cur_sectors;
252
253         ide_debug_log(IDE_DBG_FUNC, "cmd: 0x%x, uptodate: 0x%x, nsectors: %d",
254                                     rq->cmd[0], uptodate, nsectors);
255
256         if (blk_sense_request(rq) && uptodate) {
257                 /*
258                  * For REQ_TYPE_SENSE, "rq->buffer" points to the original
259                  * failed request
260                  */
261                 struct request *failed = (struct request *) rq->buffer;
262                 struct cdrom_info *info = drive->driver_data;
263                 void *sense = &info->sense_data;
264
265                 if (failed) {
266                         if (failed->sense) {
267                                 sense = failed->sense;
268                                 failed->sense_len = rq->sense_len;
269                         }
270                         cdrom_analyze_sense_data(drive, failed, sense);
271                         /*
272                          * now end the failed request
273                          */
274                         if (blk_fs_request(failed)) {
275                                 if (ide_end_rq(drive, failed, -EIO,
276                                                 failed->hard_nr_sectors << 9))
277                                         BUG();
278                         } else {
279                                 if (blk_end_request(failed, -EIO,
280                                                     failed->data_len))
281                                         BUG();
282                         }
283                 } else
284                         cdrom_analyze_sense_data(drive, NULL, sense);
285         }
286
287         if (!rq->current_nr_sectors && blk_fs_request(rq))
288                 uptodate = 1;
289         /* make sure it's fully ended */
290         if (blk_pc_request(rq))
291                 nsectors = (rq->data_len + 511) >> 9;
292         if (!nsectors)
293                 nsectors = 1;
294
295         ide_debug_log(IDE_DBG_FUNC, "uptodate: 0x%x, nsectors: %d",
296                                     uptodate, nsectors);
297
298         ide_end_request(drive, uptodate, nsectors);
299 }
300
301 static void ide_dump_status_no_sense(ide_drive_t *drive, const char *msg, u8 st)
302 {
303         if (st & 0x80)
304                 return;
305         ide_dump_status(drive, msg, st);
306 }
307
308 /*
309  * Returns:
310  * 0: if the request should be continued.
311  * 1: if the request was ended.
312  */
313 static int cdrom_decode_status(ide_drive_t *drive, int good_stat, int *stat_ret)
314 {
315         ide_hwif_t *hwif = drive->hwif;
316         struct request *rq = hwif->rq;
317         int stat, err, sense_key;
318
319         /* check for errors */
320         stat = hwif->tp_ops->read_status(hwif);
321
322         if (stat_ret)
323                 *stat_ret = stat;
324
325         if (OK_STAT(stat, good_stat, BAD_R_STAT))
326                 return 0;
327
328         /* get the IDE error register */
329         err = ide_read_error(drive);
330         sense_key = err >> 4;
331
332         if (rq == NULL) {
333                 printk(KERN_ERR PFX "%s: missing rq in %s\n",
334                                 drive->name, __func__);
335                 return 1;
336         }
337
338         ide_debug_log(IDE_DBG_RQ, "stat: 0x%x, good_stat: 0x%x, cmd[0]: 0x%x, "
339                                   "rq->cmd_type: 0x%x, err: 0x%x",
340                                   stat, good_stat, rq->cmd[0], rq->cmd_type,
341                                   err);
342
343         if (blk_sense_request(rq)) {
344                 /*
345                  * We got an error trying to get sense info from the drive
346                  * (probably while trying to recover from a former error).
347                  * Just give up.
348                  */
349                 rq->cmd_flags |= REQ_FAILED;
350                 cdrom_end_request(drive, 0);
351                 ide_error(drive, "request sense failure", stat);
352                 return 1;
353
354         } else if (blk_pc_request(rq) || rq->cmd_type == REQ_TYPE_ATA_PC) {
355                 /* All other functions, except for READ. */
356
357                 /*
358                  * if we have an error, pass back CHECK_CONDITION as the
359                  * scsi status byte
360                  */
361                 if (blk_pc_request(rq) && !rq->errors)
362                         rq->errors = SAM_STAT_CHECK_CONDITION;
363
364                 /* check for tray open */
365                 if (sense_key == NOT_READY) {
366                         cdrom_saw_media_change(drive);
367                 } else if (sense_key == UNIT_ATTENTION) {
368                         /* check for media change */
369                         cdrom_saw_media_change(drive);
370                         return 0;
371                 } else if (sense_key == ILLEGAL_REQUEST &&
372                            rq->cmd[0] == GPCMD_START_STOP_UNIT) {
373                         /*
374                          * Don't print error message for this condition--
375                          * SFF8090i indicates that 5/24/00 is the correct
376                          * response to a request to close the tray if the
377                          * drive doesn't have that capability.
378                          * cdrom_log_sense() knows this!
379                          */
380                 } else if (!(rq->cmd_flags & REQ_QUIET)) {
381                         /* otherwise, print an error */
382                         ide_dump_status(drive, "packet command error", stat);
383                 }
384
385                 rq->cmd_flags |= REQ_FAILED;
386
387                 /*
388                  * instead of playing games with moving completions around,
389                  * remove failed request completely and end it when the
390                  * request sense has completed
391                  */
392                 goto end_request;
393
394         } else if (blk_fs_request(rq)) {
395                 int do_end_request = 0;
396
397                 /* handle errors from READ and WRITE requests */
398
399                 if (blk_noretry_request(rq))
400                         do_end_request = 1;
401
402                 if (sense_key == NOT_READY) {
403                         /* tray open */
404                         if (rq_data_dir(rq) == READ) {
405                                 cdrom_saw_media_change(drive);
406
407                                 /* fail the request */
408                                 printk(KERN_ERR PFX "%s: tray open\n",
409                                                 drive->name);
410                                 do_end_request = 1;
411                         } else {
412                                 struct cdrom_info *info = drive->driver_data;
413
414                                 /*
415                                  * Allow the drive 5 seconds to recover, some
416                                  * devices will return this error while flushing
417                                  * data from cache.
418                                  */
419                                 if (!rq->errors)
420                                         info->write_timeout = jiffies +
421                                                         ATAPI_WAIT_WRITE_BUSY;
422                                 rq->errors = 1;
423                                 if (time_after(jiffies, info->write_timeout))
424                                         do_end_request = 1;
425                                 else {
426                                         struct request_queue *q = drive->queue;
427                                         unsigned long flags;
428
429                                         /*
430                                          * take a breather relying on the unplug
431                                          * timer to kick us again
432                                          */
433                                         spin_lock_irqsave(q->queue_lock, flags);
434                                         blk_plug_device(q);
435                                         spin_unlock_irqrestore(q->queue_lock, flags);
436
437                                         return 1;
438                                 }
439                         }
440                 } else if (sense_key == UNIT_ATTENTION) {
441                         /* media change */
442                         cdrom_saw_media_change(drive);
443
444                         /*
445                          * Arrange to retry the request but be sure to give up
446                          * if we've retried too many times.
447                          */
448                         if (++rq->errors > ERROR_MAX)
449                                 do_end_request = 1;
450                 } else if (sense_key == ILLEGAL_REQUEST ||
451                            sense_key == DATA_PROTECT) {
452                         /*
453                          * No point in retrying after an illegal request or data
454                          * protect error.
455                          */
456                         ide_dump_status_no_sense(drive, "command error", stat);
457                         do_end_request = 1;
458                 } else if (sense_key == MEDIUM_ERROR) {
459                         /*
460                          * No point in re-trying a zillion times on a bad
461                          * sector. If we got here the error is not correctable.
462                          */
463                         ide_dump_status_no_sense(drive,
464                                                  "media error (bad sector)",
465                                                  stat);
466                         do_end_request = 1;
467                 } else if (sense_key == BLANK_CHECK) {
468                         /* disk appears blank ?? */
469                         ide_dump_status_no_sense(drive, "media error (blank)",
470                                                  stat);
471                         do_end_request = 1;
472                 } else if ((err & ~ATA_ABORTED) != 0) {
473                         /* go to the default handler for other errors */
474                         ide_error(drive, "cdrom_decode_status", stat);
475                         return 1;
476                 } else if ((++rq->errors > ERROR_MAX)) {
477                         /* we've racked up too many retries, abort */
478                         do_end_request = 1;
479                 }
480
481                 /*
482                  * End a request through request sense analysis when we have
483                  * sense data. We need this in order to perform end of media
484                  * processing.
485                  */
486                 if (do_end_request)
487                         goto end_request;
488
489                 /*
490                  * If we got a CHECK_CONDITION status, queue
491                  * a request sense command.
492                  */
493                 if (stat & ATA_ERR)
494                         cdrom_queue_request_sense(drive, NULL, NULL);
495         } else {
496                 blk_dump_rq_flags(rq, PFX "bad rq");
497                 cdrom_end_request(drive, 0);
498         }
499
500         /* retry, or handle the next request */
501         return 1;
502
503 end_request:
504         if (stat & ATA_ERR) {
505                 struct request_queue *q = drive->queue;
506                 unsigned long flags;
507
508                 spin_lock_irqsave(q->queue_lock, flags);
509                 blkdev_dequeue_request(rq);
510                 spin_unlock_irqrestore(q->queue_lock, flags);
511
512                 hwif->rq = NULL;
513
514                 cdrom_queue_request_sense(drive, rq->sense, rq);
515         } else
516                 cdrom_end_request(drive, 0);
517
518         return 1;
519 }
520
521 /*
522  * Check the contents of the interrupt reason register from the cdrom
523  * and attempt to recover if there are problems.  Returns  0 if everything's
524  * ok; nonzero if the request has been terminated.
525  */
526 static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
527                                 int len, int ireason, int rw)
528 {
529         ide_hwif_t *hwif = drive->hwif;
530
531         ide_debug_log(IDE_DBG_FUNC, "ireason: 0x%x, rw: 0x%x", ireason, rw);
532
533         /*
534          * ireason == 0: the drive wants to receive data from us
535          * ireason == 2: the drive is expecting to transfer data to us
536          */
537         if (ireason == (!rw << 1))
538                 return 0;
539         else if (ireason == (rw << 1)) {
540
541                 /* whoops... */
542                 printk(KERN_ERR PFX "%s: %s: wrong transfer direction!\n",
543                                 drive->name, __func__);
544
545                 ide_pad_transfer(drive, rw, len);
546         } else  if (rw == 0 && ireason == 1) {
547                 /*
548                  * Some drives (ASUS) seem to tell us that status info is
549                  * available.  Just get it and ignore.
550                  */
551                 (void)hwif->tp_ops->read_status(hwif);
552                 return 0;
553         } else {
554                 /* drive wants a command packet, or invalid ireason... */
555                 printk(KERN_ERR PFX "%s: %s: bad interrupt reason 0x%02x\n",
556                                 drive->name, __func__, ireason);
557         }
558
559         if (rq->cmd_type == REQ_TYPE_ATA_PC)
560                 rq->cmd_flags |= REQ_FAILED;
561
562         cdrom_end_request(drive, 0);
563         return -1;
564 }
565
566 /*
567  * Assume that the drive will always provide data in multiples of at least
568  * SECTOR_SIZE, as it gets hairy to keep track of the transfers otherwise.
569  */
570 static int ide_cd_check_transfer_size(ide_drive_t *drive, int len)
571 {
572         ide_debug_log(IDE_DBG_FUNC, "len: %d", len);
573
574         if ((len % SECTOR_SIZE) == 0)
575                 return 0;
576
577         printk(KERN_ERR PFX "%s: %s: Bad transfer size %d\n", drive->name,
578                         __func__, len);
579
580         if (drive->atapi_flags & IDE_AFLAG_LIMIT_NFRAMES)
581                 printk(KERN_ERR PFX "This drive is not supported by this "
582                                 "version of the driver\n");
583         else {
584                 printk(KERN_ERR PFX "Trying to limit transfer sizes\n");
585                 drive->atapi_flags |= IDE_AFLAG_LIMIT_NFRAMES;
586         }
587
588         return 1;
589 }
590
591 static ide_startstop_t ide_cd_prepare_rw_request(ide_drive_t *drive,
592                                                  struct request *rq)
593 {
594         ide_debug_log(IDE_DBG_RQ, "rq->cmd_flags: 0x%x", rq->cmd_flags);
595
596         if (rq_data_dir(rq) == READ) {
597                 unsigned short sectors_per_frame =
598                         queue_hardsect_size(drive->queue) >> SECTOR_BITS;
599                 int nskip = rq->sector & (sectors_per_frame - 1);
600
601                 /*
602                  * If the requested sector doesn't start on a frame boundary,
603                  * we must adjust the start of the transfer so that it does,
604                  * and remember to skip the first few sectors.
605                  *
606                  * If the rq->current_nr_sectors field is larger than the size
607                  * of the buffer, it will mean that we're to skip a number of
608                  * sectors equal to the amount by which rq->current_nr_sectors
609                  * is larger than the buffer size.
610                  */
611                 if (nskip > 0) {
612                         /* sanity check... */
613                         if (rq->current_nr_sectors !=
614                             bio_cur_sectors(rq->bio)) {
615                                 printk(KERN_ERR PFX "%s: %s: buffer botch (%u)\n",
616                                                 drive->name, __func__,
617                                                 rq->current_nr_sectors);
618                                 cdrom_end_request(drive, 0);
619                                 return ide_stopped;
620                         }
621                         rq->current_nr_sectors += nskip;
622                 }
623         }
624
625         /* set up the command */
626         rq->timeout = ATAPI_WAIT_PC;
627
628         return ide_started;
629 }
630
631 /*
632  * Fix up a possibly partially-processed request so that we can start it over
633  * entirely, or even put it back on the request queue.
634  */
635 static void ide_cd_restore_request(ide_drive_t *drive, struct request *rq)
636 {
637
638         ide_debug_log(IDE_DBG_FUNC, "enter");
639
640         if (rq->buffer != bio_data(rq->bio)) {
641                 sector_t n =
642                         (rq->buffer - (char *)bio_data(rq->bio)) / SECTOR_SIZE;
643
644                 rq->buffer = bio_data(rq->bio);
645                 rq->nr_sectors += n;
646                 rq->sector -= n;
647         }
648         rq->current_nr_sectors = bio_cur_sectors(rq->bio);
649         rq->hard_cur_sectors = rq->current_nr_sectors;
650         rq->hard_nr_sectors = rq->nr_sectors;
651         rq->hard_sector = rq->sector;
652         rq->q->prep_rq_fn(rq->q, rq);
653 }
654
655 static void ide_cd_request_sense_fixup(ide_drive_t *drive, struct request *rq)
656 {
657         ide_debug_log(IDE_DBG_FUNC, "rq->cmd[0]: 0x%x", rq->cmd[0]);
658
659         /*
660          * Some of the trailing request sense fields are optional,
661          * and some drives don't send them.  Sigh.
662          */
663         if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
664             rq->data_len > 0 && rq->data_len <= 5)
665                 while (rq->data_len > 0) {
666                         *(u8 *)rq->data++ = 0;
667                         --rq->data_len;
668                 }
669 }
670
671 int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
672                     int write, void *buffer, unsigned *bufflen,
673                     struct request_sense *sense, int timeout,
674                     unsigned int cmd_flags)
675 {
676         struct cdrom_info *info = drive->driver_data;
677         struct request_sense local_sense;
678         int retries = 10;
679         unsigned int flags = 0;
680
681         if (!sense)
682                 sense = &local_sense;
683
684         ide_debug_log(IDE_DBG_PC, "cmd[0]: 0x%x, write: 0x%x, timeout: %d, "
685                                   "cmd_flags: 0x%x",
686                                   cmd[0], write, timeout, cmd_flags);
687
688         /* start of retry loop */
689         do {
690                 struct request *rq;
691                 int error;
692
693                 rq = blk_get_request(drive->queue, write, __GFP_WAIT);
694
695                 memcpy(rq->cmd, cmd, BLK_MAX_CDB);
696                 rq->cmd_type = REQ_TYPE_ATA_PC;
697                 rq->sense = sense;
698                 rq->cmd_flags |= cmd_flags;
699                 rq->timeout = timeout;
700                 if (buffer) {
701                         rq->data = buffer;
702                         rq->data_len = *bufflen;
703                 }
704
705                 error = blk_execute_rq(drive->queue, info->disk, rq, 0);
706
707                 if (buffer)
708                         *bufflen = rq->data_len;
709
710                 flags = rq->cmd_flags;
711                 blk_put_request(rq);
712
713                 /*
714                  * FIXME: we should probably abort/retry or something in case of
715                  * failure.
716                  */
717                 if (flags & REQ_FAILED) {
718                         /*
719                          * The request failed.  Retry if it was due to a unit
720                          * attention status (usually means media was changed).
721                          */
722                         struct request_sense *reqbuf = sense;
723
724                         if (reqbuf->sense_key == UNIT_ATTENTION)
725                                 cdrom_saw_media_change(drive);
726                         else if (reqbuf->sense_key == NOT_READY &&
727                                  reqbuf->asc == 4 && reqbuf->ascq != 4) {
728                                 /*
729                                  * The drive is in the process of loading
730                                  * a disk.  Retry, but wait a little to give
731                                  * the drive time to complete the load.
732                                  */
733                                 ssleep(2);
734                         } else {
735                                 /* otherwise, don't retry */
736                                 retries = 0;
737                         }
738                         --retries;
739                 }
740
741                 /* end of retry loop */
742         } while ((flags & REQ_FAILED) && retries >= 0);
743
744         /* return an error if the command failed */
745         return (flags & REQ_FAILED) ? -EIO : 0;
746 }
747
748 /*
749  * Called from blk_end_request_callback() after the data of the request is
750  * completed and before the request itself is completed. By returning value '1',
751  * blk_end_request_callback() returns immediately without completing it.
752  */
753 static int cdrom_newpc_intr_dummy_cb(struct request *rq)
754 {
755         return 1;
756 }
757
758 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
759 {
760         ide_hwif_t *hwif = drive->hwif;
761         struct request *rq = hwif->rq;
762         xfer_func_t *xferfunc;
763         ide_expiry_t *expiry = NULL;
764         int dma_error = 0, dma, stat, thislen, uptodate = 0;
765         int write = (rq_data_dir(rq) == WRITE) ? 1 : 0;
766         unsigned int timeout;
767         u16 len;
768         u8 ireason;
769
770         ide_debug_log(IDE_DBG_PC, "cmd[0]: 0x%x, write: 0x%x",
771                                   rq->cmd[0], write);
772
773         /* check for errors */
774         dma = drive->dma;
775         if (dma) {
776                 drive->dma = 0;
777                 dma_error = hwif->dma_ops->dma_end(drive);
778                 if (dma_error) {
779                         printk(KERN_ERR PFX "%s: DMA %s error\n", drive->name,
780                                         write ? "write" : "read");
781                         ide_dma_off(drive);
782                 }
783         }
784
785         if (cdrom_decode_status(drive, 0, &stat))
786                 return ide_stopped;
787
788         /* using dma, transfer is complete now */
789         if (dma) {
790                 if (dma_error)
791                         return ide_error(drive, "dma error", stat);
792                 if (blk_fs_request(rq)) {
793                         ide_end_request(drive, 1, rq->nr_sectors);
794                         return ide_stopped;
795                 } else if (rq->cmd_type == REQ_TYPE_ATA_PC && !rq->bio) {
796                         ide_end_request(drive, 1, 1);
797                         return ide_stopped;
798                 }
799                 goto end_request;
800         }
801
802         ide_read_bcount_and_ireason(drive, &len, &ireason);
803
804         thislen = blk_fs_request(rq) ? len : rq->data_len;
805         if (thislen > len)
806                 thislen = len;
807
808         ide_debug_log(IDE_DBG_PC, "DRQ: stat: 0x%x, thislen: %d",
809                                   stat, thislen);
810
811         /* If DRQ is clear, the command has completed. */
812         if ((stat & ATA_DRQ) == 0) {
813                 if (blk_fs_request(rq)) {
814                         /*
815                          * If we're not done reading/writing, complain.
816                          * Otherwise, complete the command normally.
817                          */
818                         uptodate = 1;
819                         if (rq->current_nr_sectors > 0) {
820                                 printk(KERN_ERR PFX "%s: %s: data underrun "
821                                                 "(%d blocks)\n",
822                                                 drive->name, __func__,
823                                                 rq->current_nr_sectors);
824                                 if (!write)
825                                         rq->cmd_flags |= REQ_FAILED;
826                                 uptodate = 0;
827                         }
828                         cdrom_end_request(drive, uptodate);
829                         return ide_stopped;
830                 } else if (!blk_pc_request(rq)) {
831                         ide_cd_request_sense_fixup(drive, rq);
832                         /* complain if we still have data left to transfer */
833                         uptodate = rq->data_len ? 0 : 1;
834                 }
835                 goto end_request;
836         }
837
838         /* check which way to transfer data */
839         if (ide_cd_check_ireason(drive, rq, len, ireason, write))
840                 return ide_stopped;
841
842         if (blk_fs_request(rq)) {
843                 if (write == 0) {
844                         int nskip;
845
846                         if (ide_cd_check_transfer_size(drive, len)) {
847                                 cdrom_end_request(drive, 0);
848                                 return ide_stopped;
849                         }
850
851                         /*
852                          * First, figure out if we need to bit-bucket
853                          * any of the leading sectors.
854                          */
855                         nskip = min_t(int, rq->current_nr_sectors
856                                            - bio_cur_sectors(rq->bio),
857                                            thislen >> 9);
858                         if (nskip > 0) {
859                                 ide_pad_transfer(drive, write, nskip << 9);
860                                 rq->current_nr_sectors -= nskip;
861                                 thislen -= (nskip << 9);
862                         }
863                 }
864         }
865
866         if (ireason == 0) {
867                 write = 1;
868                 xferfunc = hwif->tp_ops->output_data;
869         } else {
870                 write = 0;
871                 xferfunc = hwif->tp_ops->input_data;
872         }
873
874         ide_debug_log(IDE_DBG_PC, "data transfer, rq->cmd_type: 0x%x, "
875                                   "ireason: 0x%x",
876                                   rq->cmd_type, ireason);
877
878         /* transfer data */
879         while (thislen > 0) {
880                 u8 *ptr = blk_fs_request(rq) ? NULL : rq->data;
881                 int blen = rq->data_len;
882
883                 /* bio backed? */
884                 if (rq->bio) {
885                         if (blk_fs_request(rq)) {
886                                 ptr = rq->buffer;
887                                 blen = rq->current_nr_sectors << 9;
888                         } else {
889                                 ptr = bio_data(rq->bio);
890                                 blen = bio_iovec(rq->bio)->bv_len;
891                         }
892                 }
893
894                 if (!ptr) {
895                         if (blk_fs_request(rq) && !write)
896                                 /*
897                                  * If the buffers are full, pipe the rest into
898                                  * oblivion.
899                                  */
900                                 ide_pad_transfer(drive, 0, thislen);
901                         else {
902                                 printk(KERN_ERR PFX "%s: confused, missing data\n",
903                                                 drive->name);
904                                 blk_dump_rq_flags(rq, rq_data_dir(rq)
905                                                   ? "cdrom_newpc_intr, write"
906                                                   : "cdrom_newpc_intr, read");
907                         }
908                         break;
909                 }
910
911                 if (blen > thislen)
912                         blen = thislen;
913
914                 xferfunc(drive, NULL, ptr, blen);
915
916                 thislen -= blen;
917                 len -= blen;
918
919                 if (blk_fs_request(rq)) {
920                         rq->buffer += blen;
921                         rq->nr_sectors -= (blen >> 9);
922                         rq->current_nr_sectors -= (blen >> 9);
923                         rq->sector += (blen >> 9);
924
925                         if (rq->current_nr_sectors == 0 && rq->nr_sectors)
926                                 cdrom_end_request(drive, 1);
927                 } else {
928                         rq->data_len -= blen;
929
930                         /*
931                          * The request can't be completed until DRQ is cleared.
932                          * So complete the data, but don't complete the request
933                          * using the dummy function for the callback feature
934                          * of blk_end_request_callback().
935                          */
936                         if (rq->bio)
937                                 blk_end_request_callback(rq, 0, blen,
938                                                  cdrom_newpc_intr_dummy_cb);
939                         else
940                                 rq->data += blen;
941                 }
942                 if (!write && blk_sense_request(rq))
943                         rq->sense_len += blen;
944         }
945
946         /* pad, if necessary */
947         if (!blk_fs_request(rq) && len > 0)
948                 ide_pad_transfer(drive, write, len);
949
950         if (blk_pc_request(rq)) {
951                 timeout = rq->timeout;
952         } else {
953                 timeout = ATAPI_WAIT_PC;
954                 if (!blk_fs_request(rq))
955                         expiry = ide_cd_expiry;
956         }
957
958         ide_set_handler(drive, cdrom_newpc_intr, timeout, expiry);
959         return ide_started;
960
961 end_request:
962         if (blk_pc_request(rq)) {
963                 unsigned int dlen = rq->data_len;
964
965                 if (dma)
966                         rq->data_len = 0;
967
968                 if (blk_end_request(rq, 0, dlen))
969                         BUG();
970
971                 hwif->rq = NULL;
972         } else {
973                 if (!uptodate)
974                         rq->cmd_flags |= REQ_FAILED;
975                 cdrom_end_request(drive, uptodate);
976         }
977         return ide_stopped;
978 }
979
980 static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
981 {
982         struct cdrom_info *cd = drive->driver_data;
983         int write = rq_data_dir(rq) == WRITE;
984         unsigned short sectors_per_frame =
985                 queue_hardsect_size(drive->queue) >> SECTOR_BITS;
986
987         ide_debug_log(IDE_DBG_RQ, "rq->cmd[0]: 0x%x, write: 0x%x, "
988                                   "secs_per_frame: %u",
989                                   rq->cmd[0], write, sectors_per_frame);
990
991         if (write) {
992                 /* disk has become write protected */
993                 if (get_disk_ro(cd->disk)) {
994                         cdrom_end_request(drive, 0);
995                         return ide_stopped;
996                 }
997         } else {
998                 /*
999                  * We may be retrying this request after an error.  Fix up any
1000                  * weirdness which might be present in the request packet.
1001                  */
1002                 ide_cd_restore_request(drive, rq);
1003         }
1004
1005         /* use DMA, if possible / writes *must* be hardware frame aligned */
1006         if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
1007             (rq->sector & (sectors_per_frame - 1))) {
1008                 if (write) {
1009                         cdrom_end_request(drive, 0);
1010                         return ide_stopped;
1011                 }
1012                 drive->dma = 0;
1013         } else
1014                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1015
1016         if (write)
1017                 cd->devinfo.media_written = 1;
1018
1019         return ide_started;
1020 }
1021
1022 static void cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
1023 {
1024
1025         ide_debug_log(IDE_DBG_PC, "rq->cmd[0]: 0x%x, rq->cmd_type: 0x%x",
1026                                   rq->cmd[0], rq->cmd_type);
1027
1028         if (blk_pc_request(rq))
1029                 rq->cmd_flags |= REQ_QUIET;
1030         else
1031                 rq->cmd_flags &= ~REQ_FAILED;
1032
1033         drive->dma = 0;
1034
1035         /* sg request */
1036         if (rq->bio || ((rq->cmd_type == REQ_TYPE_ATA_PC) && rq->data_len)) {
1037                 struct request_queue *q = drive->queue;
1038                 unsigned int alignment;
1039                 char *buf;
1040
1041                 if (rq->bio)
1042                         buf = bio_data(rq->bio);
1043                 else
1044                         buf = rq->data;
1045
1046                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1047
1048                 /*
1049                  * check if dma is safe
1050                  *
1051                  * NOTE! The "len" and "addr" checks should possibly have
1052                  * separate masks.
1053                  */
1054                 alignment = queue_dma_alignment(q) | q->dma_pad_mask;
1055                 if ((unsigned long)buf & alignment
1056                     || rq->data_len & q->dma_pad_mask
1057                     || object_is_on_stack(buf))
1058                         drive->dma = 0;
1059         }
1060 }
1061
1062 static ide_startstop_t ide_cd_do_request(ide_drive_t *drive, struct request *rq,
1063                                         sector_t block)
1064 {
1065         ide_debug_log(IDE_DBG_RQ, "cmd: 0x%x, block: %llu",
1066                                   rq->cmd[0], (unsigned long long)block);
1067
1068         if (drive->debug_mask & IDE_DBG_RQ)
1069                 blk_dump_rq_flags(rq, "ide_cd_do_request");
1070
1071         if (blk_fs_request(rq)) {
1072                 if (cdrom_start_rw(drive, rq) == ide_stopped)
1073                         return ide_stopped;
1074
1075                 if (ide_cd_prepare_rw_request(drive, rq) == ide_stopped)
1076                         return ide_stopped;
1077         } else if (blk_sense_request(rq) || blk_pc_request(rq) ||
1078                    rq->cmd_type == REQ_TYPE_ATA_PC) {
1079                 if (!rq->timeout)
1080                         rq->timeout = ATAPI_WAIT_PC;
1081
1082                 cdrom_do_block_pc(drive, rq);
1083         } else if (blk_special_request(rq)) {
1084                 /* right now this can only be a reset... */
1085                 cdrom_end_request(drive, 1);
1086                 return ide_stopped;
1087         } else {
1088                 blk_dump_rq_flags(rq, DRV_NAME " bad flags");
1089                 cdrom_end_request(drive, 0);
1090                 return ide_stopped;
1091         }
1092
1093         return ide_issue_pc(drive);
1094 }
1095
1096 /*
1097  * Ioctl handling.
1098  *
1099  * Routines which queue packet commands take as a final argument a pointer to a
1100  * request_sense struct. If execution of the command results in an error with a
1101  * CHECK CONDITION status, this structure will be filled with the results of the
1102  * subsequent request sense command. The pointer can also be NULL, in which case
1103  * no sense information is returned.
1104  */
1105 static void msf_from_bcd(struct atapi_msf *msf)
1106 {
1107         msf->minute = bcd2bin(msf->minute);
1108         msf->second = bcd2bin(msf->second);
1109         msf->frame  = bcd2bin(msf->frame);
1110 }
1111
1112 int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
1113 {
1114         struct cdrom_info *info = drive->driver_data;
1115         struct cdrom_device_info *cdi = &info->devinfo;
1116         unsigned char cmd[BLK_MAX_CDB];
1117
1118         ide_debug_log(IDE_DBG_FUNC, "enter");
1119
1120         memset(cmd, 0, BLK_MAX_CDB);
1121         cmd[0] = GPCMD_TEST_UNIT_READY;
1122
1123         /*
1124          * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
1125          * instead of supporting the LOAD_UNLOAD opcode.
1126          */
1127         cmd[7] = cdi->sanyo_slot % 3;
1128
1129         return ide_cd_queue_pc(drive, cmd, 0, NULL, NULL, sense, 0, REQ_QUIET);
1130 }
1131
1132 static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
1133                                unsigned long *sectors_per_frame,
1134                                struct request_sense *sense)
1135 {
1136         struct {
1137                 __be32 lba;
1138                 __be32 blocklen;
1139         } capbuf;
1140
1141         int stat;
1142         unsigned char cmd[BLK_MAX_CDB];
1143         unsigned len = sizeof(capbuf);
1144         u32 blocklen;
1145
1146         ide_debug_log(IDE_DBG_FUNC, "enter");
1147
1148         memset(cmd, 0, BLK_MAX_CDB);
1149         cmd[0] = GPCMD_READ_CDVD_CAPACITY;
1150
1151         stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
1152                                REQ_QUIET);
1153         if (stat)
1154                 return stat;
1155
1156         /*
1157          * Sanity check the given block size
1158          */
1159         blocklen = be32_to_cpu(capbuf.blocklen);
1160         switch (blocklen) {
1161         case 512:
1162         case 1024:
1163         case 2048:
1164         case 4096:
1165                 break;
1166         default:
1167                 printk(KERN_ERR PFX "%s: weird block size %u\n",
1168                                 drive->name, blocklen);
1169                 printk(KERN_ERR PFX "%s: default to 2kb block size\n",
1170                                 drive->name);
1171                 blocklen = 2048;
1172                 break;
1173         }
1174
1175         *capacity = 1 + be32_to_cpu(capbuf.lba);
1176         *sectors_per_frame = blocklen >> SECTOR_BITS;
1177
1178         ide_debug_log(IDE_DBG_PROBE, "cap: %lu, sectors_per_frame: %lu",
1179                                      *capacity, *sectors_per_frame);
1180
1181         return 0;
1182 }
1183
1184 static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1185                                 int format, char *buf, int buflen,
1186                                 struct request_sense *sense)
1187 {
1188         unsigned char cmd[BLK_MAX_CDB];
1189
1190         ide_debug_log(IDE_DBG_FUNC, "enter");
1191
1192         memset(cmd, 0, BLK_MAX_CDB);
1193
1194         cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1195         cmd[6] = trackno;
1196         cmd[7] = (buflen >> 8);
1197         cmd[8] = (buflen & 0xff);
1198         cmd[9] = (format << 6);
1199
1200         if (msf_flag)
1201                 cmd[1] = 2;
1202
1203         return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1204 }
1205
1206 /* Try to read the entire TOC for the disk into our internal buffer. */
1207 int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1208 {
1209         int stat, ntracks, i;
1210         struct cdrom_info *info = drive->driver_data;
1211         struct cdrom_device_info *cdi = &info->devinfo;
1212         struct atapi_toc *toc = info->toc;
1213         struct {
1214                 struct atapi_toc_header hdr;
1215                 struct atapi_toc_entry  ent;
1216         } ms_tmp;
1217         long last_written;
1218         unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1219
1220         ide_debug_log(IDE_DBG_FUNC, "enter");
1221
1222         if (toc == NULL) {
1223                 /* try to allocate space */
1224                 toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1225                 if (toc == NULL) {
1226                         printk(KERN_ERR PFX "%s: No cdrom TOC buffer!\n",
1227                                         drive->name);
1228                         return -ENOMEM;
1229                 }
1230                 info->toc = toc;
1231         }
1232
1233         /*
1234          * Check to see if the existing data is still valid. If it is,
1235          * just return.
1236          */
1237         (void) cdrom_check_status(drive, sense);
1238
1239         if (drive->atapi_flags & IDE_AFLAG_TOC_VALID)
1240                 return 0;
1241
1242         /* try to get the total cdrom capacity and sector size */
1243         stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1244                                    sense);
1245         if (stat)
1246                 toc->capacity = 0x1fffff;
1247
1248         set_capacity(info->disk, toc->capacity * sectors_per_frame);
1249         /* save a private copy of the TOC capacity for error handling */
1250         drive->probed_capacity = toc->capacity * sectors_per_frame;
1251
1252         blk_queue_hardsect_size(drive->queue,
1253                                 sectors_per_frame << SECTOR_BITS);
1254
1255         /* first read just the header, so we know how long the TOC is */
1256         stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1257                                     sizeof(struct atapi_toc_header), sense);
1258         if (stat)
1259                 return stat;
1260
1261         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1262                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1263                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1264         }
1265
1266         ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1267         if (ntracks <= 0)
1268                 return -EIO;
1269         if (ntracks > MAX_TRACKS)
1270                 ntracks = MAX_TRACKS;
1271
1272         /* now read the whole schmeer */
1273         stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1274                                   (char *)&toc->hdr,
1275                                    sizeof(struct atapi_toc_header) +
1276                                    (ntracks + 1) *
1277                                    sizeof(struct atapi_toc_entry), sense);
1278
1279         if (stat && toc->hdr.first_track > 1) {
1280                 /*
1281                  * Cds with CDI tracks only don't have any TOC entries, despite
1282                  * of this the returned values are
1283                  * first_track == last_track = number of CDI tracks + 1,
1284                  * so that this case is indistinguishable from the same layout
1285                  * plus an additional audio track. If we get an error for the
1286                  * regular case, we assume a CDI without additional audio
1287                  * tracks. In this case the readable TOC is empty (CDI tracks
1288                  * are not included) and only holds the Leadout entry.
1289                  *
1290                  * Heiko Eißfeldt.
1291                  */
1292                 ntracks = 0;
1293                 stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1294                                            (char *)&toc->hdr,
1295                                            sizeof(struct atapi_toc_header) +
1296                                            (ntracks + 1) *
1297                                            sizeof(struct atapi_toc_entry),
1298                                            sense);
1299                 if (stat)
1300                         return stat;
1301
1302                 if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1303                         toc->hdr.first_track = (u8)bin2bcd(CDROM_LEADOUT);
1304                         toc->hdr.last_track = (u8)bin2bcd(CDROM_LEADOUT);
1305                 } else {
1306                         toc->hdr.first_track = CDROM_LEADOUT;
1307                         toc->hdr.last_track = CDROM_LEADOUT;
1308                 }
1309         }
1310
1311         if (stat)
1312                 return stat;
1313
1314         toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1315
1316         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1317                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1318                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1319         }
1320
1321         for (i = 0; i <= ntracks; i++) {
1322                 if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1323                         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD)
1324                                 toc->ent[i].track = bcd2bin(toc->ent[i].track);
1325                         msf_from_bcd(&toc->ent[i].addr.msf);
1326                 }
1327                 toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1328                                                   toc->ent[i].addr.msf.second,
1329                                                   toc->ent[i].addr.msf.frame);
1330         }
1331
1332         if (toc->hdr.first_track != CDROM_LEADOUT) {
1333                 /* read the multisession information */
1334                 stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1335                                            sizeof(ms_tmp), sense);
1336                 if (stat)
1337                         return stat;
1338
1339                 toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1340         } else {
1341                 ms_tmp.hdr.last_track = CDROM_LEADOUT;
1342                 ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1343                 toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1344         }
1345
1346         if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1347                 /* re-read multisession information using MSF format */
1348                 stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1349                                            sizeof(ms_tmp), sense);
1350                 if (stat)
1351                         return stat;
1352
1353                 msf_from_bcd(&ms_tmp.ent.addr.msf);
1354                 toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1355                                                    ms_tmp.ent.addr.msf.second,
1356                                                    ms_tmp.ent.addr.msf.frame);
1357         }
1358
1359         toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1360
1361         /* now try to get the total cdrom capacity */
1362         stat = cdrom_get_last_written(cdi, &last_written);
1363         if (!stat && (last_written > toc->capacity)) {
1364                 toc->capacity = last_written;
1365                 set_capacity(info->disk, toc->capacity * sectors_per_frame);
1366                 drive->probed_capacity = toc->capacity * sectors_per_frame;
1367         }
1368
1369         /* Remember that we've read this stuff. */
1370         drive->atapi_flags |= IDE_AFLAG_TOC_VALID;
1371
1372         return 0;
1373 }
1374
1375 int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1376 {
1377         struct cdrom_info *info = drive->driver_data;
1378         struct cdrom_device_info *cdi = &info->devinfo;
1379         struct packet_command cgc;
1380         int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1381
1382         ide_debug_log(IDE_DBG_FUNC, "enter");
1383
1384         if ((drive->atapi_flags & IDE_AFLAG_FULL_CAPS_PAGE) == 0)
1385                 size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1386
1387         init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1388         do {
1389                 /* we seem to get stat=0x01,err=0x00 the first time (??) */
1390                 stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1391                 if (!stat)
1392                         break;
1393         } while (--attempts);
1394         return stat;
1395 }
1396
1397 void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1398 {
1399         struct cdrom_info *cd = drive->driver_data;
1400         u16 curspeed, maxspeed;
1401
1402         ide_debug_log(IDE_DBG_FUNC, "enter");
1403
1404         if (drive->atapi_flags & IDE_AFLAG_LE_SPEED_FIELDS) {
1405                 curspeed = le16_to_cpup((__le16 *)&buf[8 + 14]);
1406                 maxspeed = le16_to_cpup((__le16 *)&buf[8 + 8]);
1407         } else {
1408                 curspeed = be16_to_cpup((__be16 *)&buf[8 + 14]);
1409                 maxspeed = be16_to_cpup((__be16 *)&buf[8 + 8]);
1410         }
1411
1412         ide_debug_log(IDE_DBG_PROBE, "curspeed: %u, maxspeed: %u",
1413                                      curspeed, maxspeed);
1414
1415         cd->current_speed = (curspeed + (176/2)) / 176;
1416         cd->max_speed = (maxspeed + (176/2)) / 176;
1417 }
1418
1419 #define IDE_CD_CAPABILITIES \
1420         (CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1421          CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1422          CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1423          CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1424          CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1425
1426 static struct cdrom_device_ops ide_cdrom_dops = {
1427         .open                   = ide_cdrom_open_real,
1428         .release                = ide_cdrom_release_real,
1429         .drive_status           = ide_cdrom_drive_status,
1430         .media_changed          = ide_cdrom_check_media_change_real,
1431         .tray_move              = ide_cdrom_tray_move,
1432         .lock_door              = ide_cdrom_lock_door,
1433         .select_speed           = ide_cdrom_select_speed,
1434         .get_last_session       = ide_cdrom_get_last_session,
1435         .get_mcn                = ide_cdrom_get_mcn,
1436         .reset                  = ide_cdrom_reset,
1437         .audio_ioctl            = ide_cdrom_audio_ioctl,
1438         .capability             = IDE_CD_CAPABILITIES,
1439         .generic_packet         = ide_cdrom_packet,
1440 };
1441
1442 static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1443 {
1444         struct cdrom_info *info = drive->driver_data;
1445         struct cdrom_device_info *devinfo = &info->devinfo;
1446
1447         ide_debug_log(IDE_DBG_PROBE, "nslots: %d", nslots);
1448
1449         devinfo->ops = &ide_cdrom_dops;
1450         devinfo->speed = info->current_speed;
1451         devinfo->capacity = nslots;
1452         devinfo->handle = drive;
1453         strcpy(devinfo->name, drive->name);
1454
1455         if (drive->atapi_flags & IDE_AFLAG_NO_SPEED_SELECT)
1456                 devinfo->mask |= CDC_SELECT_SPEED;
1457
1458         devinfo->disk = info->disk;
1459         return register_cdrom(devinfo);
1460 }
1461
1462 static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1463 {
1464         struct cdrom_info *cd = drive->driver_data;
1465         struct cdrom_device_info *cdi = &cd->devinfo;
1466         u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1467         mechtype_t mechtype;
1468         int nslots = 1;
1469
1470         ide_debug_log(IDE_DBG_PROBE, "media: 0x%x, atapi_flags: 0x%lx",
1471                                      drive->media, drive->atapi_flags);
1472
1473         cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1474                      CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1475                      CDC_MO_DRIVE | CDC_RAM);
1476
1477         if (drive->media == ide_optical) {
1478                 cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1479                 printk(KERN_ERR PFX "%s: ATAPI magneto-optical drive\n",
1480                                 drive->name);
1481                 return nslots;
1482         }
1483
1484         if (drive->atapi_flags & IDE_AFLAG_PRE_ATAPI12) {
1485                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1486                 cdi->mask &= ~CDC_PLAY_AUDIO;
1487                 return nslots;
1488         }
1489
1490         /*
1491          * We have to cheat a little here. the packet will eventually be queued
1492          * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1493          * Since this device hasn't been registered with the Uniform layer yet,
1494          * it can't do this. Same goes for cdi->ops.
1495          */
1496         cdi->handle = drive;
1497         cdi->ops = &ide_cdrom_dops;
1498
1499         if (ide_cdrom_get_capabilities(drive, buf))
1500                 return 0;
1501
1502         if ((buf[8 + 6] & 0x01) == 0)
1503                 drive->dev_flags &= ~IDE_DFLAG_DOORLOCKING;
1504         if (buf[8 + 6] & 0x08)
1505                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1506         if (buf[8 + 3] & 0x01)
1507                 cdi->mask &= ~CDC_CD_R;
1508         if (buf[8 + 3] & 0x02)
1509                 cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1510         if (buf[8 + 2] & 0x38)
1511                 cdi->mask &= ~CDC_DVD;
1512         if (buf[8 + 3] & 0x20)
1513                 cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1514         if (buf[8 + 3] & 0x10)
1515                 cdi->mask &= ~CDC_DVD_R;
1516         if ((buf[8 + 4] & 0x01) || (drive->atapi_flags & IDE_AFLAG_PLAY_AUDIO_OK))
1517                 cdi->mask &= ~CDC_PLAY_AUDIO;
1518
1519         mechtype = buf[8 + 6] >> 5;
1520         if (mechtype == mechtype_caddy ||
1521             mechtype == mechtype_popup ||
1522             (drive->atapi_flags & IDE_AFLAG_NO_AUTOCLOSE))
1523                 cdi->mask |= CDC_CLOSE_TRAY;
1524
1525         if (cdi->sanyo_slot > 0) {
1526                 cdi->mask &= ~CDC_SELECT_DISC;
1527                 nslots = 3;
1528         } else if (mechtype == mechtype_individual_changer ||
1529                    mechtype == mechtype_cartridge_changer) {
1530                 nslots = cdrom_number_of_slots(cdi);
1531                 if (nslots > 1)
1532                         cdi->mask &= ~CDC_SELECT_DISC;
1533         }
1534
1535         ide_cdrom_update_speed(drive, buf);
1536
1537         printk(KERN_INFO PFX "%s: ATAPI", drive->name);
1538
1539         /* don't print speed if the drive reported 0 */
1540         if (cd->max_speed)
1541                 printk(KERN_CONT " %dX", cd->max_speed);
1542
1543         printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1544
1545         if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1546                 printk(KERN_CONT " DVD%s%s",
1547                                  (cdi->mask & CDC_DVD_R) ? "" : "-R",
1548                                  (cdi->mask & CDC_DVD_RAM) ? "" : "/RAM");
1549
1550         if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1551                 printk(KERN_CONT " CD%s%s",
1552                                  (cdi->mask & CDC_CD_R) ? "" : "-R",
1553                                  (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1554
1555         if ((cdi->mask & CDC_SELECT_DISC) == 0)
1556                 printk(KERN_CONT " changer w/%d slots", nslots);
1557         else
1558                 printk(KERN_CONT " drive");
1559
1560         printk(KERN_CONT ", %dkB Cache\n",
1561                          be16_to_cpup((__be16 *)&buf[8 + 12]));
1562
1563         return nslots;
1564 }
1565
1566 /* standard prep_rq_fn that builds 10 byte cmds */
1567 static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1568 {
1569         int hard_sect = queue_hardsect_size(q);
1570         long block = (long)rq->hard_sector / (hard_sect >> 9);
1571         unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1572
1573         memset(rq->cmd, 0, BLK_MAX_CDB);
1574
1575         if (rq_data_dir(rq) == READ)
1576                 rq->cmd[0] = GPCMD_READ_10;
1577         else
1578                 rq->cmd[0] = GPCMD_WRITE_10;
1579
1580         /*
1581          * fill in lba
1582          */
1583         rq->cmd[2] = (block >> 24) & 0xff;
1584         rq->cmd[3] = (block >> 16) & 0xff;
1585         rq->cmd[4] = (block >>  8) & 0xff;
1586         rq->cmd[5] = block & 0xff;
1587
1588         /*
1589          * and transfer length
1590          */
1591         rq->cmd[7] = (blocks >> 8) & 0xff;
1592         rq->cmd[8] = blocks & 0xff;
1593         rq->cmd_len = 10;
1594         return BLKPREP_OK;
1595 }
1596
1597 /*
1598  * Most of the SCSI commands are supported directly by ATAPI devices.
1599  * This transform handles the few exceptions.
1600  */
1601 static int ide_cdrom_prep_pc(struct request *rq)
1602 {
1603         u8 *c = rq->cmd;
1604
1605         /* transform 6-byte read/write commands to the 10-byte version */
1606         if (c[0] == READ_6 || c[0] == WRITE_6) {
1607                 c[8] = c[4];
1608                 c[5] = c[3];
1609                 c[4] = c[2];
1610                 c[3] = c[1] & 0x1f;
1611                 c[2] = 0;
1612                 c[1] &= 0xe0;
1613                 c[0] += (READ_10 - READ_6);
1614                 rq->cmd_len = 10;
1615                 return BLKPREP_OK;
1616         }
1617
1618         /*
1619          * it's silly to pretend we understand 6-byte sense commands, just
1620          * reject with ILLEGAL_REQUEST and the caller should take the
1621          * appropriate action
1622          */
1623         if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1624                 rq->errors = ILLEGAL_REQUEST;
1625                 return BLKPREP_KILL;
1626         }
1627
1628         return BLKPREP_OK;
1629 }
1630
1631 static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1632 {
1633         if (blk_fs_request(rq))
1634                 return ide_cdrom_prep_fs(q, rq);
1635         else if (blk_pc_request(rq))
1636                 return ide_cdrom_prep_pc(rq);
1637
1638         return 0;
1639 }
1640
1641 struct cd_list_entry {
1642         const char      *id_model;
1643         const char      *id_firmware;
1644         unsigned int    cd_flags;
1645 };
1646
1647 #ifdef CONFIG_IDE_PROC_FS
1648 static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1649 {
1650         unsigned long capacity, sectors_per_frame;
1651
1652         if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1653                 return 0;
1654
1655         return capacity * sectors_per_frame;
1656 }
1657
1658 static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1659                                         int count, int *eof, void *data)
1660 {
1661         ide_drive_t *drive = data;
1662         int len;
1663
1664         len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1665         PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1666 }
1667
1668 static ide_proc_entry_t idecd_proc[] = {
1669         { "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1670         { NULL, 0, NULL, NULL }
1671 };
1672
1673 static ide_proc_entry_t *ide_cd_proc_entries(ide_drive_t *drive)
1674 {
1675         return idecd_proc;
1676 }
1677
1678 static const struct ide_proc_devset *ide_cd_proc_devsets(ide_drive_t *drive)
1679 {
1680         return NULL;
1681 }
1682 #endif
1683
1684 static const struct cd_list_entry ide_cd_quirks_list[] = {
1685         /* Limit transfer size per interrupt. */
1686         { "SAMSUNG CD-ROM SCR-2430", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1687         { "SAMSUNG CD-ROM SCR-2432", NULL,   IDE_AFLAG_LIMIT_NFRAMES         },
1688         /* SCR-3231 doesn't support the SET_CD_SPEED command. */
1689         { "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_AFLAG_NO_SPEED_SELECT       },
1690         /* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1691         { "NEC CD-ROM DRIVE:260",    "1.01", IDE_AFLAG_TOCADDR_AS_BCD |
1692                                              IDE_AFLAG_PRE_ATAPI12,          },
1693         /* Vertos 300, some versions of this drive like to talk BCD. */
1694         { "V003S0DS",                NULL,   IDE_AFLAG_VERTOS_300_SSD,       },
1695         /* Vertos 600 ESD. */
1696         { "V006E0DS",                NULL,   IDE_AFLAG_VERTOS_600_ESD,       },
1697         /*
1698          * Sanyo 3 CD changer uses a non-standard command for CD changing
1699          * (by default standard ATAPI support for CD changers is used).
1700          */
1701         { "CD-ROM CDR-C3 G",         NULL,   IDE_AFLAG_SANYO_3CD             },
1702         { "CD-ROM CDR-C3G",          NULL,   IDE_AFLAG_SANYO_3CD             },
1703         { "CD-ROM CDR_C36",          NULL,   IDE_AFLAG_SANYO_3CD             },
1704         /* Stingray 8X CD-ROM. */
1705         { "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_AFLAG_PRE_ATAPI12 },
1706         /*
1707          * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1708          * mode sense page capabilities size, but older drives break.
1709          */
1710         { "ATAPI CD ROM DRIVE 50X MAX", NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1711         { "WPI CDS-32X",                NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1712         /* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1713         { "",                        "241N", IDE_AFLAG_LE_SPEED_FIELDS       },
1714         /*
1715          * Some drives used by Apple don't advertise audio play
1716          * but they do support reading TOC & audio datas.
1717          */
1718         { "MATSHITADVD-ROM SR-8187", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1719         { "MATSHITADVD-ROM SR-8186", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1720         { "MATSHITADVD-ROM SR-8176", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1721         { "MATSHITADVD-ROM SR-8174", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1722         { "Optiarc DVD RW AD-5200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1723         { "Optiarc DVD RW AD-7200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1724         { "Optiarc DVD RW AD-7543A", NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1725         { "TEAC CD-ROM CD-224E",     NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1726         { NULL, NULL, 0 }
1727 };
1728
1729 static unsigned int ide_cd_flags(u16 *id)
1730 {
1731         const struct cd_list_entry *cle = ide_cd_quirks_list;
1732
1733         while (cle->id_model) {
1734                 if (strcmp(cle->id_model, (char *)&id[ATA_ID_PROD]) == 0 &&
1735                     (cle->id_firmware == NULL ||
1736                      strstr((char *)&id[ATA_ID_FW_REV], cle->id_firmware)))
1737                         return cle->cd_flags;
1738                 cle++;
1739         }
1740
1741         return 0;
1742 }
1743
1744 static int ide_cdrom_setup(ide_drive_t *drive)
1745 {
1746         struct cdrom_info *cd = drive->driver_data;
1747         struct cdrom_device_info *cdi = &cd->devinfo;
1748         u16 *id = drive->id;
1749         char *fw_rev = (char *)&id[ATA_ID_FW_REV];
1750         int nslots;
1751
1752         ide_debug_log(IDE_DBG_PROBE, "enter");
1753
1754         blk_queue_prep_rq(drive->queue, ide_cdrom_prep_fn);
1755         blk_queue_dma_alignment(drive->queue, 31);
1756         blk_queue_update_dma_pad(drive->queue, 15);
1757         drive->queue->unplug_delay = (1 * HZ) / 1000;
1758         if (!drive->queue->unplug_delay)
1759                 drive->queue->unplug_delay = 1;
1760
1761         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
1762         drive->atapi_flags = IDE_AFLAG_NO_EJECT | ide_cd_flags(id);
1763
1764         if ((drive->atapi_flags & IDE_AFLAG_VERTOS_300_SSD) &&
1765             fw_rev[4] == '1' && fw_rev[6] <= '2')
1766                 drive->atapi_flags |= (IDE_AFLAG_TOCTRACKS_AS_BCD |
1767                                      IDE_AFLAG_TOCADDR_AS_BCD);
1768         else if ((drive->atapi_flags & IDE_AFLAG_VERTOS_600_ESD) &&
1769                  fw_rev[4] == '1' && fw_rev[6] <= '2')
1770                 drive->atapi_flags |= IDE_AFLAG_TOCTRACKS_AS_BCD;
1771         else if (drive->atapi_flags & IDE_AFLAG_SANYO_3CD)
1772                 /* 3 => use CD in slot 0 */
1773                 cdi->sanyo_slot = 3;
1774
1775         nslots = ide_cdrom_probe_capabilities(drive);
1776
1777         /* set correct block size */
1778         blk_queue_hardsect_size(drive->queue, CD_FRAMESIZE);
1779
1780         if (ide_cdrom_register(drive, nslots)) {
1781                 printk(KERN_ERR PFX "%s: %s failed to register device with the"
1782                                 " cdrom driver.\n", drive->name, __func__);
1783                 cd->devinfo.handle = NULL;
1784                 return 1;
1785         }
1786
1787         ide_proc_register_driver(drive, cd->driver);
1788         return 0;
1789 }
1790
1791 static void ide_cd_remove(ide_drive_t *drive)
1792 {
1793         struct cdrom_info *info = drive->driver_data;
1794
1795         ide_debug_log(IDE_DBG_FUNC, "enter");
1796
1797         ide_proc_unregister_driver(drive, info->driver);
1798         device_del(&info->dev);
1799         del_gendisk(info->disk);
1800
1801         mutex_lock(&idecd_ref_mutex);
1802         put_device(&info->dev);
1803         mutex_unlock(&idecd_ref_mutex);
1804 }
1805
1806 static void ide_cd_release(struct device *dev)
1807 {
1808         struct cdrom_info *info = to_ide_drv(dev, cdrom_info);
1809         struct cdrom_device_info *devinfo = &info->devinfo;
1810         ide_drive_t *drive = info->drive;
1811         struct gendisk *g = info->disk;
1812
1813         ide_debug_log(IDE_DBG_FUNC, "enter");
1814
1815         kfree(info->toc);
1816         if (devinfo->handle == drive)
1817                 unregister_cdrom(devinfo);
1818         drive->driver_data = NULL;
1819         blk_queue_prep_rq(drive->queue, NULL);
1820         g->private_data = NULL;
1821         put_disk(g);
1822         kfree(info);
1823 }
1824
1825 static int ide_cd_probe(ide_drive_t *);
1826
1827 static struct ide_driver ide_cdrom_driver = {
1828         .gen_driver = {
1829                 .owner          = THIS_MODULE,
1830                 .name           = "ide-cdrom",
1831                 .bus            = &ide_bus_type,
1832         },
1833         .probe                  = ide_cd_probe,
1834         .remove                 = ide_cd_remove,
1835         .version                = IDECD_VERSION,
1836         .do_request             = ide_cd_do_request,
1837 #ifdef CONFIG_IDE_PROC_FS
1838         .proc_entries           = ide_cd_proc_entries,
1839         .proc_devsets           = ide_cd_proc_devsets,
1840 #endif
1841 };
1842
1843 static int idecd_open(struct block_device *bdev, fmode_t mode)
1844 {
1845         struct cdrom_info *info = ide_cd_get(bdev->bd_disk);
1846         int rc = -ENOMEM;
1847
1848         if (!info)
1849                 return -ENXIO;
1850
1851         rc = cdrom_open(&info->devinfo, bdev, mode);
1852
1853         if (rc < 0)
1854                 ide_cd_put(info);
1855
1856         return rc;
1857 }
1858
1859 static int idecd_release(struct gendisk *disk, fmode_t mode)
1860 {
1861         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1862
1863         cdrom_release(&info->devinfo, mode);
1864
1865         ide_cd_put(info);
1866
1867         return 0;
1868 }
1869
1870 static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
1871 {
1872         struct packet_command cgc;
1873         char buffer[16];
1874         int stat;
1875         char spindown;
1876
1877         if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
1878                 return -EFAULT;
1879
1880         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
1881
1882         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
1883         if (stat)
1884                 return stat;
1885
1886         buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
1887         return cdrom_mode_select(cdi, &cgc);
1888 }
1889
1890 static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
1891 {
1892         struct packet_command cgc;
1893         char buffer[16];
1894         int stat;
1895         char spindown;
1896
1897         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
1898
1899         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
1900         if (stat)
1901                 return stat;
1902
1903         spindown = buffer[11] & 0x0f;
1904         if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
1905                 return -EFAULT;
1906         return 0;
1907 }
1908
1909 static int idecd_ioctl(struct block_device *bdev, fmode_t mode,
1910                         unsigned int cmd, unsigned long arg)
1911 {
1912         struct cdrom_info *info = ide_drv_g(bdev->bd_disk, cdrom_info);
1913         int err;
1914
1915         switch (cmd) {
1916         case CDROMSETSPINDOWN:
1917                 return idecd_set_spindown(&info->devinfo, arg);
1918         case CDROMGETSPINDOWN:
1919                 return idecd_get_spindown(&info->devinfo, arg);
1920         default:
1921                 break;
1922         }
1923
1924         err = generic_ide_ioctl(info->drive, bdev, cmd, arg);
1925         if (err == -EINVAL)
1926                 err = cdrom_ioctl(&info->devinfo, bdev, mode, cmd, arg);
1927
1928         return err;
1929 }
1930
1931 static int idecd_media_changed(struct gendisk *disk)
1932 {
1933         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1934         return cdrom_media_changed(&info->devinfo);
1935 }
1936
1937 static int idecd_revalidate_disk(struct gendisk *disk)
1938 {
1939         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1940         struct request_sense sense;
1941
1942         ide_cd_read_toc(info->drive, &sense);
1943
1944         return  0;
1945 }
1946
1947 static struct block_device_operations idecd_ops = {
1948         .owner                  = THIS_MODULE,
1949         .open                   = idecd_open,
1950         .release                = idecd_release,
1951         .locked_ioctl           = idecd_ioctl,
1952         .media_changed          = idecd_media_changed,
1953         .revalidate_disk        = idecd_revalidate_disk
1954 };
1955
1956 /* module options */
1957 static char *ignore;
1958 module_param(ignore, charp, 0400);
1959
1960 static unsigned long debug_mask;
1961 module_param(debug_mask, ulong, 0644);
1962
1963 MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
1964
1965 static int ide_cd_probe(ide_drive_t *drive)
1966 {
1967         struct cdrom_info *info;
1968         struct gendisk *g;
1969         struct request_sense sense;
1970
1971         ide_debug_log(IDE_DBG_PROBE, "driver_req: %s, media: 0x%x",
1972                                      drive->driver_req, drive->media);
1973
1974         if (!strstr("ide-cdrom", drive->driver_req))
1975                 goto failed;
1976
1977         if (drive->media != ide_cdrom && drive->media != ide_optical)
1978                 goto failed;
1979
1980         /* skip drives that we were told to ignore */
1981         if (ignore != NULL) {
1982                 if (strstr(ignore, drive->name)) {
1983                         printk(KERN_INFO PFX "ignoring drive %s\n",
1984                                          drive->name);
1985                         goto failed;
1986                 }
1987         }
1988
1989         drive->debug_mask = debug_mask;
1990         drive->irq_handler = cdrom_newpc_intr;
1991
1992         info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
1993         if (info == NULL) {
1994                 printk(KERN_ERR PFX "%s: Can't allocate a cdrom structure\n",
1995                                 drive->name);
1996                 goto failed;
1997         }
1998
1999         g = alloc_disk(1 << PARTN_BITS);
2000         if (!g)
2001                 goto out_free_cd;
2002
2003         ide_init_disk(g, drive);
2004
2005         info->dev.parent = &drive->gendev;
2006         info->dev.release = ide_cd_release;
2007         dev_set_name(&info->dev, dev_name(&drive->gendev));
2008
2009         if (device_register(&info->dev))
2010                 goto out_free_disk;
2011
2012         info->drive = drive;
2013         info->driver = &ide_cdrom_driver;
2014         info->disk = g;
2015
2016         g->private_data = &info->driver;
2017
2018         drive->driver_data = info;
2019
2020         g->minors = 1;
2021         g->driverfs_dev = &drive->gendev;
2022         g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
2023         if (ide_cdrom_setup(drive)) {
2024                 put_device(&info->dev);
2025                 goto failed;
2026         }
2027
2028         ide_cd_read_toc(drive, &sense);
2029         g->fops = &idecd_ops;
2030         g->flags |= GENHD_FL_REMOVABLE;
2031         add_disk(g);
2032         return 0;
2033
2034 out_free_disk:
2035         put_disk(g);
2036 out_free_cd:
2037         kfree(info);
2038 failed:
2039         return -ENODEV;
2040 }
2041
2042 static void __exit ide_cdrom_exit(void)
2043 {
2044         driver_unregister(&ide_cdrom_driver.gen_driver);
2045 }
2046
2047 static int __init ide_cdrom_init(void)
2048 {
2049         printk(KERN_INFO DRV_NAME " driver " IDECD_VERSION "\n");
2050         return driver_register(&ide_cdrom_driver.gen_driver);
2051 }
2052
2053 MODULE_ALIAS("ide:*m-cdrom*");
2054 MODULE_ALIAS("ide-cd");
2055 module_init(ide_cdrom_init);
2056 module_exit(ide_cdrom_exit);
2057 MODULE_LICENSE("GPL");