Merge git://git.infradead.org/~dwmw2/firmware-2.6
[linux-2.6] / drivers / ide / ide-taskfile.c
1 /*
2  *  Copyright (C) 2000-2002        Michael Cornwell <cornwell@acm.org>
3  *  Copyright (C) 2000-2002        Andre Hedrick <andre@linux-ide.org>
4  *  Copyright (C) 2001-2002        Klaus Smolin
5  *                                      IBM Storage Technology Division
6  *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
7  *
8  *  The big the bad and the ugly.
9  */
10
11 #include <linux/types.h>
12 #include <linux/string.h>
13 #include <linux/kernel.h>
14 #include <linux/sched.h>
15 #include <linux/interrupt.h>
16 #include <linux/errno.h>
17 #include <linux/slab.h>
18 #include <linux/delay.h>
19 #include <linux/hdreg.h>
20 #include <linux/ide.h>
21 #include <linux/scatterlist.h>
22
23 #include <asm/uaccess.h>
24 #include <asm/io.h>
25
26 void ide_tf_readback(ide_drive_t *drive, struct ide_cmd *cmd)
27 {
28         ide_hwif_t *hwif = drive->hwif;
29         const struct ide_tp_ops *tp_ops = hwif->tp_ops;
30
31         /* Be sure we're looking at the low order bytes */
32         tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS);
33
34         tp_ops->tf_read(drive, &cmd->tf, cmd->valid.in.tf);
35
36         if (cmd->tf_flags & IDE_TFLAG_LBA48) {
37                 tp_ops->write_devctl(hwif, ATA_HOB | ATA_DEVCTL_OBS);
38
39                 tp_ops->tf_read(drive, &cmd->hob, cmd->valid.in.hob);
40         }
41 }
42
43 void ide_tf_dump(const char *s, struct ide_cmd *cmd)
44 {
45 #ifdef DEBUG
46         printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
47                 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
48                s, cmd->tf.feature, cmd->tf.nsect,
49                cmd->tf.lbal, cmd->tf.lbam, cmd->tf.lbah,
50                cmd->tf.device, cmd->tf.command);
51         printk("%s: hob: nsect 0x%02x lbal 0x%02x lbam 0x%02x lbah 0x%02x\n",
52                s, cmd->hob.nsect, cmd->hob.lbal, cmd->hob.lbam, cmd->hob.lbah);
53 #endif
54 }
55
56 int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
57 {
58         struct ide_cmd cmd;
59
60         memset(&cmd, 0, sizeof(cmd));
61         cmd.tf.nsect = 0x01;
62         if (drive->media == ide_disk)
63                 cmd.tf.command = ATA_CMD_ID_ATA;
64         else
65                 cmd.tf.command = ATA_CMD_ID_ATAPI;
66         cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE;
67         cmd.valid.in.tf  = IDE_VALID_IN_TF  | IDE_VALID_DEVICE;
68         cmd.protocol = ATA_PROT_PIO;
69
70         return ide_raw_taskfile(drive, &cmd, buf, 1);
71 }
72
73 static ide_startstop_t task_no_data_intr(ide_drive_t *);
74 static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *);
75 static ide_startstop_t task_pio_intr(ide_drive_t *);
76
77 ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd)
78 {
79         ide_hwif_t *hwif = drive->hwif;
80         struct ide_cmd *cmd = &hwif->cmd;
81         struct ide_taskfile *tf = &cmd->tf;
82         ide_handler_t *handler = NULL;
83         const struct ide_tp_ops *tp_ops = hwif->tp_ops;
84         const struct ide_dma_ops *dma_ops = hwif->dma_ops;
85
86         if (orig_cmd->protocol == ATA_PROT_PIO &&
87             (orig_cmd->tf_flags & IDE_TFLAG_MULTI_PIO) &&
88             drive->mult_count == 0) {
89                 printk(KERN_ERR "%s: multimode not set!\n", drive->name);
90                 return ide_stopped;
91         }
92
93         if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED)
94                 orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS;
95
96         memcpy(cmd, orig_cmd, sizeof(*cmd));
97
98         if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
99                 ide_tf_dump(drive->name, cmd);
100                 tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS);
101                 SELECT_MASK(drive, 0);
102
103                 if (cmd->ftf_flags & IDE_FTFLAG_OUT_DATA) {
104                         u8 data[2] = { cmd->tf.data, cmd->hob.data };
105
106                         tp_ops->output_data(drive, cmd, data, 2);
107                 }
108
109                 if (cmd->valid.out.tf & IDE_VALID_DEVICE) {
110                         u8 HIHI = (cmd->tf_flags & IDE_TFLAG_LBA48) ?
111                                   0xE0 : 0xEF;
112
113                         if (!(cmd->ftf_flags & IDE_FTFLAG_FLAGGED))
114                                 cmd->tf.device &= HIHI;
115                         cmd->tf.device |= drive->select;
116                 }
117
118                 tp_ops->tf_load(drive, &cmd->hob, cmd->valid.out.hob);
119                 tp_ops->tf_load(drive, &cmd->tf,  cmd->valid.out.tf);
120         }
121
122         switch (cmd->protocol) {
123         case ATA_PROT_PIO:
124                 if (cmd->tf_flags & IDE_TFLAG_WRITE) {
125                         tp_ops->exec_command(hwif, tf->command);
126                         ndelay(400);    /* FIXME */
127                         return pre_task_out_intr(drive, cmd);
128                 }
129                 handler = task_pio_intr;
130                 /* fall-through */
131         case ATA_PROT_NODATA:
132                 if (handler == NULL)
133                         handler = task_no_data_intr;
134                 ide_execute_command(drive, cmd, handler, WAIT_WORSTCASE);
135                 return ide_started;
136         case ATA_PROT_DMA:
137                 if (ide_dma_prepare(drive, cmd))
138                         return ide_stopped;
139                 hwif->expiry = dma_ops->dma_timer_expiry;
140                 ide_execute_command(drive, cmd, ide_dma_intr, 2 * WAIT_CMD);
141                 dma_ops->dma_start(drive);
142         default:
143                 return ide_started;
144         }
145 }
146 EXPORT_SYMBOL_GPL(do_rw_taskfile);
147
148 static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
149 {
150         ide_hwif_t *hwif = drive->hwif;
151         struct ide_cmd *cmd = &hwif->cmd;
152         struct ide_taskfile *tf = &cmd->tf;
153         int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0;
154         int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1;
155         u8 stat;
156
157         local_irq_enable_in_hardirq();
158
159         while (1) {
160                 stat = hwif->tp_ops->read_status(hwif);
161                 if ((stat & ATA_BUSY) == 0 || retries-- == 0)
162                         break;
163                 udelay(10);
164         };
165
166         if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) {
167                 if (custom && tf->command == ATA_CMD_SET_MULTI) {
168                         drive->mult_req = drive->mult_count = 0;
169                         drive->special.b.recalibrate = 1;
170                         (void)ide_dump_status(drive, __func__, stat);
171                         return ide_stopped;
172                 } else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) {
173                         if ((stat & (ATA_ERR | ATA_DRQ)) == 0) {
174                                 ide_set_handler(drive, &task_no_data_intr,
175                                                 WAIT_WORSTCASE);
176                                 return ide_started;
177                         }
178                 }
179                 return ide_error(drive, "task_no_data_intr", stat);
180         }
181
182         if (custom && tf->command == ATA_CMD_SET_MULTI)
183                 drive->mult_count = drive->mult_req;
184
185         if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE ||
186             tf->command == ATA_CMD_CHK_POWER) {
187                 struct request *rq = hwif->rq;
188
189                 if (blk_pm_request(rq))
190                         ide_complete_pm_rq(drive, rq);
191                 else
192                         ide_finish_cmd(drive, cmd, stat);
193         }
194
195         return ide_stopped;
196 }
197
198 static u8 wait_drive_not_busy(ide_drive_t *drive)
199 {
200         ide_hwif_t *hwif = drive->hwif;
201         int retries;
202         u8 stat;
203
204         /*
205          * Last sector was transfered, wait until device is ready.  This can
206          * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
207          */
208         for (retries = 0; retries < 1000; retries++) {
209                 stat = hwif->tp_ops->read_status(hwif);
210
211                 if (stat & ATA_BUSY)
212                         udelay(10);
213                 else
214                         break;
215         }
216
217         if (stat & ATA_BUSY)
218                 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);
219
220         return stat;
221 }
222
223 void ide_pio_bytes(ide_drive_t *drive, struct ide_cmd *cmd,
224                    unsigned int write, unsigned int len)
225 {
226         ide_hwif_t *hwif = drive->hwif;
227         struct scatterlist *sg = hwif->sg_table;
228         struct scatterlist *cursg = cmd->cursg;
229         struct page *page;
230         unsigned long flags;
231         unsigned int offset;
232         u8 *buf;
233
234         cursg = cmd->cursg;
235         if (cursg == NULL)
236                 cursg = cmd->cursg = sg;
237
238         while (len) {
239                 unsigned nr_bytes = min(len, cursg->length - cmd->cursg_ofs);
240
241                 if (nr_bytes > PAGE_SIZE)
242                         nr_bytes = PAGE_SIZE;
243
244                 page = sg_page(cursg);
245                 offset = cursg->offset + cmd->cursg_ofs;
246
247                 /* get the current page and offset */
248                 page = nth_page(page, (offset >> PAGE_SHIFT));
249                 offset %= PAGE_SIZE;
250
251                 if (PageHighMem(page))
252                         local_irq_save(flags);
253
254                 buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
255
256                 cmd->nleft -= nr_bytes;
257                 cmd->cursg_ofs += nr_bytes;
258
259                 if (cmd->cursg_ofs == cursg->length) {
260                         cursg = cmd->cursg = sg_next(cmd->cursg);
261                         cmd->cursg_ofs = 0;
262                 }
263
264                 /* do the actual data transfer */
265                 if (write)
266                         hwif->tp_ops->output_data(drive, cmd, buf, nr_bytes);
267                 else
268                         hwif->tp_ops->input_data(drive, cmd, buf, nr_bytes);
269
270                 kunmap_atomic(buf, KM_BIO_SRC_IRQ);
271
272                 if (PageHighMem(page))
273                         local_irq_restore(flags);
274
275                 len -= nr_bytes;
276         }
277 }
278 EXPORT_SYMBOL_GPL(ide_pio_bytes);
279
280 static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd,
281                               unsigned int write)
282 {
283         unsigned int nr_bytes;
284
285         u8 saved_io_32bit = drive->io_32bit;
286
287         if (cmd->tf_flags & IDE_TFLAG_FS)
288                 cmd->rq->errors = 0;
289
290         if (cmd->tf_flags & IDE_TFLAG_IO_16BIT)
291                 drive->io_32bit = 0;
292
293         touch_softlockup_watchdog();
294
295         if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
296                 nr_bytes = min_t(unsigned, cmd->nleft, drive->mult_count << 9);
297         else
298                 nr_bytes = SECTOR_SIZE;
299
300         ide_pio_bytes(drive, cmd, write, nr_bytes);
301
302         drive->io_32bit = saved_io_32bit;
303 }
304
305 static void ide_error_cmd(ide_drive_t *drive, struct ide_cmd *cmd)
306 {
307         if (cmd->tf_flags & IDE_TFLAG_FS) {
308                 int nr_bytes = cmd->nbytes - cmd->nleft;
309
310                 if (cmd->protocol == ATA_PROT_PIO &&
311                     ((cmd->tf_flags & IDE_TFLAG_WRITE) || cmd->nleft == 0)) {
312                         if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
313                                 nr_bytes -= drive->mult_count << 9;
314                         else
315                                 nr_bytes -= SECTOR_SIZE;
316                 }
317
318                 if (nr_bytes > 0)
319                         ide_complete_rq(drive, 0, nr_bytes);
320         }
321 }
322
323 void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat)
324 {
325         struct request *rq = drive->hwif->rq;
326         u8 err = ide_read_error(drive);
327
328         ide_complete_cmd(drive, cmd, stat, err);
329         rq->errors = err;
330         ide_complete_rq(drive, err ? -EIO : 0, blk_rq_bytes(rq));
331 }
332
333 /*
334  * Handler for command with PIO data phase.
335  */
336 static ide_startstop_t task_pio_intr(ide_drive_t *drive)
337 {
338         ide_hwif_t *hwif = drive->hwif;
339         struct ide_cmd *cmd = &drive->hwif->cmd;
340         u8 stat = hwif->tp_ops->read_status(hwif);
341         u8 write = !!(cmd->tf_flags & IDE_TFLAG_WRITE);
342
343         if (write == 0) {
344                 /* Error? */
345                 if (stat & ATA_ERR)
346                         goto out_err;
347
348                 /* Didn't want any data? Odd. */
349                 if ((stat & ATA_DRQ) == 0) {
350                         /* Command all done? */
351                         if (OK_STAT(stat, ATA_DRDY, ATA_BUSY))
352                                 goto out_end;
353
354                         /* Assume it was a spurious irq */
355                         goto out_wait;
356                 }
357         } else {
358                 if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
359                         goto out_err;
360
361                 /* Deal with unexpected ATA data phase. */
362                 if (((stat & ATA_DRQ) == 0) ^ (cmd->nleft == 0))
363                         goto out_err;
364         }
365
366         if (write && cmd->nleft == 0)
367                 goto out_end;
368
369         /* Still data left to transfer. */
370         ide_pio_datablock(drive, cmd, write);
371
372         /* Are we done? Check status and finish transfer. */
373         if (write == 0 && cmd->nleft == 0) {
374                 stat = wait_drive_not_busy(drive);
375                 if (!OK_STAT(stat, 0, BAD_STAT))
376                         goto out_err;
377
378                 goto out_end;
379         }
380 out_wait:
381         /* Still data left to transfer. */
382         ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
383         return ide_started;
384 out_end:
385         if ((cmd->tf_flags & IDE_TFLAG_FS) == 0)
386                 ide_finish_cmd(drive, cmd, stat);
387         else
388                 ide_complete_rq(drive, 0, cmd->rq->nr_sectors << 9);
389         return ide_stopped;
390 out_err:
391         ide_error_cmd(drive, cmd);
392         return ide_error(drive, __func__, stat);
393 }
394
395 static ide_startstop_t pre_task_out_intr(ide_drive_t *drive,
396                                          struct ide_cmd *cmd)
397 {
398         ide_startstop_t startstop;
399
400         if (ide_wait_stat(&startstop, drive, ATA_DRQ,
401                           drive->bad_wstat, WAIT_DRQ)) {
402                 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
403                         drive->name,
404                         (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) ? "MULT" : "",
405                         (drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : "");
406                 return startstop;
407         }
408
409         if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0)
410                 local_irq_disable();
411
412         ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
413
414         ide_pio_datablock(drive, cmd, 1);
415
416         return ide_started;
417 }
418
419 int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf,
420                      u16 nsect)
421 {
422         struct request *rq;
423         int error;
424
425         rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
426         rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
427         rq->buffer = buf;
428
429         /*
430          * (ks) We transfer currently only whole sectors.
431          * This is suffient for now.  But, it would be great,
432          * if we would find a solution to transfer any size.
433          * To support special commands like READ LONG.
434          */
435         rq->hard_nr_sectors = rq->nr_sectors = nsect;
436         rq->hard_cur_sectors = rq->current_nr_sectors = nsect;
437
438         if (cmd->tf_flags & IDE_TFLAG_WRITE)
439                 rq->cmd_flags |= REQ_RW;
440
441         rq->special = cmd;
442         cmd->rq = rq;
443
444         error = blk_execute_rq(drive->queue, NULL, rq, 0);
445         blk_put_request(rq);
446
447         return error;
448 }
449
450 EXPORT_SYMBOL(ide_raw_taskfile);
451
452 int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd)
453 {
454         cmd->protocol = ATA_PROT_NODATA;
455
456         return ide_raw_taskfile(drive, cmd, NULL, 0);
457 }
458 EXPORT_SYMBOL_GPL(ide_no_data_taskfile);
459
460 #ifdef CONFIG_IDE_TASK_IOCTL
461 int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg)
462 {
463         ide_task_request_t      *req_task;
464         struct ide_cmd          cmd;
465         u8 *outbuf              = NULL;
466         u8 *inbuf               = NULL;
467         u8 *data_buf            = NULL;
468         int err                 = 0;
469         int tasksize            = sizeof(struct ide_task_request_s);
470         unsigned int taskin     = 0;
471         unsigned int taskout    = 0;
472         u16 nsect               = 0;
473         char __user *buf = (char __user *)arg;
474
475 //      printk("IDE Taskfile ...\n");
476
477         req_task = kzalloc(tasksize, GFP_KERNEL);
478         if (req_task == NULL) return -ENOMEM;
479         if (copy_from_user(req_task, buf, tasksize)) {
480                 kfree(req_task);
481                 return -EFAULT;
482         }
483
484         taskout = req_task->out_size;
485         taskin  = req_task->in_size;
486         
487         if (taskin > 65536 || taskout > 65536) {
488                 err = -EINVAL;
489                 goto abort;
490         }
491
492         if (taskout) {
493                 int outtotal = tasksize;
494                 outbuf = kzalloc(taskout, GFP_KERNEL);
495                 if (outbuf == NULL) {
496                         err = -ENOMEM;
497                         goto abort;
498                 }
499                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
500                         err = -EFAULT;
501                         goto abort;
502                 }
503         }
504
505         if (taskin) {
506                 int intotal = tasksize + taskout;
507                 inbuf = kzalloc(taskin, GFP_KERNEL);
508                 if (inbuf == NULL) {
509                         err = -ENOMEM;
510                         goto abort;
511                 }
512                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
513                         err = -EFAULT;
514                         goto abort;
515                 }
516         }
517
518         memset(&cmd, 0, sizeof(cmd));
519
520         memcpy(&cmd.hob, req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
521         memcpy(&cmd.tf,  req_task->io_ports,  HDIO_DRIVE_TASK_HDR_SIZE);
522
523         cmd.valid.out.tf = IDE_VALID_DEVICE;
524         cmd.valid.in.tf  = IDE_VALID_DEVICE | IDE_VALID_IN_TF;
525         cmd.tf_flags = IDE_TFLAG_IO_16BIT;
526
527         if (drive->dev_flags & IDE_DFLAG_LBA48) {
528                 cmd.tf_flags |= IDE_TFLAG_LBA48;
529                 cmd.valid.in.hob = IDE_VALID_IN_HOB;
530         }
531
532         if (req_task->out_flags.all) {
533                 cmd.ftf_flags |= IDE_FTFLAG_FLAGGED;
534
535                 if (req_task->out_flags.b.data)
536                         cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA;
537
538                 if (req_task->out_flags.b.nsector_hob)
539                         cmd.valid.out.hob |= IDE_VALID_NSECT;
540                 if (req_task->out_flags.b.sector_hob)
541                         cmd.valid.out.hob |= IDE_VALID_LBAL;
542                 if (req_task->out_flags.b.lcyl_hob)
543                         cmd.valid.out.hob |= IDE_VALID_LBAM;
544                 if (req_task->out_flags.b.hcyl_hob)
545                         cmd.valid.out.hob |= IDE_VALID_LBAH;
546
547                 if (req_task->out_flags.b.error_feature)
548                         cmd.valid.out.tf  |= IDE_VALID_FEATURE;
549                 if (req_task->out_flags.b.nsector)
550                         cmd.valid.out.tf  |= IDE_VALID_NSECT;
551                 if (req_task->out_flags.b.sector)
552                         cmd.valid.out.tf  |= IDE_VALID_LBAL;
553                 if (req_task->out_flags.b.lcyl)
554                         cmd.valid.out.tf  |= IDE_VALID_LBAM;
555                 if (req_task->out_flags.b.hcyl)
556                         cmd.valid.out.tf  |= IDE_VALID_LBAH;
557         } else {
558                 cmd.valid.out.tf |= IDE_VALID_OUT_TF;
559                 if (cmd.tf_flags & IDE_TFLAG_LBA48)
560                         cmd.valid.out.hob |= IDE_VALID_OUT_HOB;
561         }
562
563         if (req_task->in_flags.b.data)
564                 cmd.ftf_flags |= IDE_FTFLAG_IN_DATA;
565
566         if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE) {
567                 /* fixup data phase if needed */
568                 if (req_task->data_phase == TASKFILE_IN_DMAQ ||
569                     req_task->data_phase == TASKFILE_IN_DMA)
570                         cmd.tf_flags |= IDE_TFLAG_WRITE;
571         }
572
573         cmd.protocol = ATA_PROT_DMA;
574
575         switch (req_task->data_phase) {
576                 case TASKFILE_MULTI_OUT:
577                         if (!drive->mult_count) {
578                                 /* (hs): give up if multcount is not set */
579                                 printk(KERN_ERR "%s: %s Multimode Write " \
580                                         "multcount is not set\n",
581                                         drive->name, __func__);
582                                 err = -EPERM;
583                                 goto abort;
584                         }
585                         cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
586                         /* fall through */
587                 case TASKFILE_OUT:
588                         cmd.protocol = ATA_PROT_PIO;
589                         /* fall through */
590                 case TASKFILE_OUT_DMAQ:
591                 case TASKFILE_OUT_DMA:
592                         cmd.tf_flags |= IDE_TFLAG_WRITE;
593                         nsect = taskout / SECTOR_SIZE;
594                         data_buf = outbuf;
595                         break;
596                 case TASKFILE_MULTI_IN:
597                         if (!drive->mult_count) {
598                                 /* (hs): give up if multcount is not set */
599                                 printk(KERN_ERR "%s: %s Multimode Read failure " \
600                                         "multcount is not set\n",
601                                         drive->name, __func__);
602                                 err = -EPERM;
603                                 goto abort;
604                         }
605                         cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
606                         /* fall through */
607                 case TASKFILE_IN:
608                         cmd.protocol = ATA_PROT_PIO;
609                         /* fall through */
610                 case TASKFILE_IN_DMAQ:
611                 case TASKFILE_IN_DMA:
612                         nsect = taskin / SECTOR_SIZE;
613                         data_buf = inbuf;
614                         break;
615                 case TASKFILE_NO_DATA:
616                         cmd.protocol = ATA_PROT_NODATA;
617                         break;
618                 default:
619                         err = -EFAULT;
620                         goto abort;
621         }
622
623         if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
624                 nsect = 0;
625         else if (!nsect) {
626                 nsect = (cmd.hob.nsect << 8) | cmd.tf.nsect;
627
628                 if (!nsect) {
629                         printk(KERN_ERR "%s: in/out command without data\n",
630                                         drive->name);
631                         err = -EFAULT;
632                         goto abort;
633                 }
634         }
635
636         err = ide_raw_taskfile(drive, &cmd, data_buf, nsect);
637
638         memcpy(req_task->hob_ports, &cmd.hob, HDIO_DRIVE_HOB_HDR_SIZE - 2);
639         memcpy(req_task->io_ports,  &cmd.tf,  HDIO_DRIVE_TASK_HDR_SIZE);
640
641         if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) &&
642             req_task->in_flags.all == 0) {
643                 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
644                 if (drive->dev_flags & IDE_DFLAG_LBA48)
645                         req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
646         }
647
648         if (copy_to_user(buf, req_task, tasksize)) {
649                 err = -EFAULT;
650                 goto abort;
651         }
652         if (taskout) {
653                 int outtotal = tasksize;
654                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
655                         err = -EFAULT;
656                         goto abort;
657                 }
658         }
659         if (taskin) {
660                 int intotal = tasksize + taskout;
661                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
662                         err = -EFAULT;
663                         goto abort;
664                 }
665         }
666 abort:
667         kfree(req_task);
668         kfree(outbuf);
669         kfree(inbuf);
670
671 //      printk("IDE Taskfile ioctl ended. rc = %i\n", err);
672
673         return err;
674 }
675 #endif