Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
[linux-2.6] / drivers / usb / storage / sddr55.c
1 /* Driver for SanDisk SDDR-55 SmartMedia reader
2  *
3  * $Id:$
4  *
5  * SDDR55 driver v0.1:
6  *
7  * First release
8  *
9  * Current development and maintenance by:
10  *   (c) 2002 Simon Munton
11  *
12  * This program is free software; you can redistribute it and/or modify it
13  * under the terms of the GNU General Public License as published by the
14  * Free Software Foundation; either version 2, or (at your option) any
15  * later version.
16  *
17  * This program is distributed in the hope that it will be useful, but
18  * WITHOUT ANY WARRANTY; without even the implied warranty of
19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
20  * General Public License for more details.
21  *
22  * You should have received a copy of the GNU General Public License along
23  * with this program; if not, write to the Free Software Foundation, Inc.,
24  * 675 Mass Ave, Cambridge, MA 02139, USA.
25  */
26
27 #include <linux/jiffies.h>
28 #include <linux/errno.h>
29 #include <linux/slab.h>
30
31 #include <scsi/scsi.h>
32 #include <scsi/scsi_cmnd.h>
33
34 #include "usb.h"
35 #include "transport.h"
36 #include "protocol.h"
37 #include "debug.h"
38 #include "sddr55.h"
39
40
41 #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) )
42 #define LSB_of(s) ((s)&0xFF)
43 #define MSB_of(s) ((s)>>8)
44 #define PAGESIZE  512
45
46 #define set_sense_info(sk, asc, ascq)   \
47     do {                                \
48         info->sense_data[2] = sk;       \
49         info->sense_data[12] = asc;     \
50         info->sense_data[13] = ascq;    \
51         } while (0)
52
53
54 struct sddr55_card_info {
55         unsigned long   capacity;       /* Size of card in bytes */
56         int             max_log_blks;   /* maximum number of logical blocks */
57         int             pageshift;      /* log2 of pagesize */
58         int             smallpageshift; /* 1 if pagesize == 256 */
59         int             blocksize;      /* Size of block in pages */
60         int             blockshift;     /* log2 of blocksize */
61         int             blockmask;      /* 2^blockshift - 1 */
62         int             read_only;      /* non zero if card is write protected */
63         int             force_read_only;        /* non zero if we find a map error*/
64         int             *lba_to_pba;    /* logical to physical map */
65         int             *pba_to_lba;    /* physical to logical map */
66         int             fatal_error;    /* set if we detect something nasty */
67         unsigned long   last_access;    /* number of jiffies since we last talked to device */
68         unsigned char   sense_data[18];
69 };
70
71
72 #define NOT_ALLOCATED           0xffffffff
73 #define BAD_BLOCK               0xffff
74 #define CIS_BLOCK               0x400
75 #define UNUSED_BLOCK            0x3ff
76
77 static int
78 sddr55_bulk_transport(struct us_data *us, int direction,
79                       unsigned char *data, unsigned int len) {
80         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
81         unsigned int pipe = (direction == DMA_FROM_DEVICE) ?
82                         us->recv_bulk_pipe : us->send_bulk_pipe;
83
84         if (!len)
85                 return USB_STOR_XFER_GOOD;
86         info->last_access = jiffies;
87         return usb_stor_bulk_transfer_buf(us, pipe, data, len, NULL);
88 }
89
90 /* check if card inserted, if there is, update read_only status
91  * return non zero if no card
92  */
93
94 static int sddr55_status(struct us_data *us)
95 {
96         int result;
97         unsigned char *command = us->iobuf;
98         unsigned char *status = us->iobuf;
99         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
100
101         /* send command */
102         memset(command, 0, 8);
103         command[5] = 0xB0;
104         command[7] = 0x80;
105         result = sddr55_bulk_transport(us,
106                 DMA_TO_DEVICE, command, 8);
107
108         US_DEBUGP("Result for send_command in status %d\n",
109                 result);
110
111         if (result != USB_STOR_XFER_GOOD) {
112                 set_sense_info (4, 0, 0);       /* hardware error */
113                 return USB_STOR_TRANSPORT_ERROR;
114         }
115
116         result = sddr55_bulk_transport(us,
117                 DMA_FROM_DEVICE, status,        4);
118
119         /* expect to get short transfer if no card fitted */
120         if (result == USB_STOR_XFER_SHORT || result == USB_STOR_XFER_STALLED) {
121                 /* had a short transfer, no card inserted, free map memory */
122                 kfree(info->lba_to_pba);
123                 kfree(info->pba_to_lba);
124                 info->lba_to_pba = NULL;
125                 info->pba_to_lba = NULL;
126
127                 info->fatal_error = 0;
128                 info->force_read_only = 0;
129
130                 set_sense_info (2, 0x3a, 0);    /* not ready, medium not present */
131                 return USB_STOR_TRANSPORT_FAILED;
132         }
133
134         if (result != USB_STOR_XFER_GOOD) {
135                 set_sense_info (4, 0, 0);       /* hardware error */
136                 return USB_STOR_TRANSPORT_FAILED;
137         }
138         
139         /* check write protect status */
140         info->read_only = (status[0] & 0x20);
141
142         /* now read status */
143         result = sddr55_bulk_transport(us,
144                 DMA_FROM_DEVICE, status,        2);
145
146         if (result != USB_STOR_XFER_GOOD) {
147                 set_sense_info (4, 0, 0);       /* hardware error */
148         }
149
150         return (result == USB_STOR_XFER_GOOD ?
151                         USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_FAILED);
152 }
153
154
155 static int sddr55_read_data(struct us_data *us,
156                 unsigned int lba,
157                 unsigned int page,
158                 unsigned short sectors) {
159
160         int result = USB_STOR_TRANSPORT_GOOD;
161         unsigned char *command = us->iobuf;
162         unsigned char *status = us->iobuf;
163         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
164         unsigned char *buffer;
165
166         unsigned int pba;
167         unsigned long address;
168
169         unsigned short pages;
170         unsigned int len, offset;
171         struct scatterlist *sg;
172
173         // Since we only read in one block at a time, we have to create
174         // a bounce buffer and move the data a piece at a time between the
175         // bounce buffer and the actual transfer buffer.
176
177         len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
178                         info->smallpageshift) * PAGESIZE;
179         buffer = kmalloc(len, GFP_NOIO);
180         if (buffer == NULL)
181                 return USB_STOR_TRANSPORT_ERROR; /* out of memory */
182         offset = 0;
183         sg = NULL;
184
185         while (sectors>0) {
186
187                 /* have we got to end? */
188                 if (lba >= info->max_log_blks)
189                         break;
190
191                 pba = info->lba_to_pba[lba];
192
193                 // Read as many sectors as possible in this block
194
195                 pages = min((unsigned int) sectors << info->smallpageshift,
196                                 info->blocksize - page);
197                 len = pages << info->pageshift;
198
199                 US_DEBUGP("Read %02X pages, from PBA %04X"
200                         " (LBA %04X) page %02X\n",
201                         pages, pba, lba, page);
202
203                 if (pba == NOT_ALLOCATED) {
204                         /* no pba for this lba, fill with zeroes */
205                         memset (buffer, 0, len);
206                 } else {
207
208                         address = (pba << info->blockshift) + page;
209
210                         command[0] = 0;
211                         command[1] = LSB_of(address>>16);
212                         command[2] = LSB_of(address>>8);
213                         command[3] = LSB_of(address);
214
215                         command[4] = 0;
216                         command[5] = 0xB0;
217                         command[6] = LSB_of(pages << (1 - info->smallpageshift));
218                         command[7] = 0x85;
219
220                         /* send command */
221                         result = sddr55_bulk_transport(us,
222                                 DMA_TO_DEVICE, command, 8);
223
224                         US_DEBUGP("Result for send_command in read_data %d\n",
225                                 result);
226
227                         if (result != USB_STOR_XFER_GOOD) {
228                                 result = USB_STOR_TRANSPORT_ERROR;
229                                 goto leave;
230                         }
231
232                         /* read data */
233                         result = sddr55_bulk_transport(us,
234                                 DMA_FROM_DEVICE, buffer, len);
235
236                         if (result != USB_STOR_XFER_GOOD) {
237                                 result = USB_STOR_TRANSPORT_ERROR;
238                                 goto leave;
239                         }
240
241                         /* now read status */
242                         result = sddr55_bulk_transport(us,
243                                 DMA_FROM_DEVICE, status, 2);
244
245                         if (result != USB_STOR_XFER_GOOD) {
246                                 result = USB_STOR_TRANSPORT_ERROR;
247                                 goto leave;
248                         }
249
250                         /* check status for error */
251                         if (status[0] == 0xff && status[1] == 0x4) {
252                                 set_sense_info (3, 0x11, 0);
253                                 result = USB_STOR_TRANSPORT_FAILED;
254                                 goto leave;
255                         }
256                 }
257
258                 // Store the data in the transfer buffer
259                 usb_stor_access_xfer_buf(buffer, len, us->srb,
260                                 &sg, &offset, TO_XFER_BUF);
261
262                 page = 0;
263                 lba++;
264                 sectors -= pages >> info->smallpageshift;
265         }
266
267         result = USB_STOR_TRANSPORT_GOOD;
268
269 leave:
270         kfree(buffer);
271
272         return result;
273 }
274
275 static int sddr55_write_data(struct us_data *us,
276                 unsigned int lba,
277                 unsigned int page,
278                 unsigned short sectors) {
279
280         int result = USB_STOR_TRANSPORT_GOOD;
281         unsigned char *command = us->iobuf;
282         unsigned char *status = us->iobuf;
283         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
284         unsigned char *buffer;
285
286         unsigned int pba;
287         unsigned int new_pba;
288         unsigned long address;
289
290         unsigned short pages;
291         int i;
292         unsigned int len, offset;
293         struct scatterlist *sg;
294
295         /* check if we are allowed to write */
296         if (info->read_only || info->force_read_only) {
297                 set_sense_info (7, 0x27, 0);    /* read only */
298                 return USB_STOR_TRANSPORT_FAILED;
299         }
300
301         // Since we only write one block at a time, we have to create
302         // a bounce buffer and move the data a piece at a time between the
303         // bounce buffer and the actual transfer buffer.
304
305         len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
306                         info->smallpageshift) * PAGESIZE;
307         buffer = kmalloc(len, GFP_NOIO);
308         if (buffer == NULL)
309                 return USB_STOR_TRANSPORT_ERROR;
310         offset = 0;
311         sg = NULL;
312
313         while (sectors > 0) {
314
315                 /* have we got to end? */
316                 if (lba >= info->max_log_blks)
317                         break;
318
319                 pba = info->lba_to_pba[lba];
320
321                 // Write as many sectors as possible in this block
322
323                 pages = min((unsigned int) sectors << info->smallpageshift,
324                                 info->blocksize - page);
325                 len = pages << info->pageshift;
326
327                 // Get the data from the transfer buffer
328                 usb_stor_access_xfer_buf(buffer, len, us->srb,
329                                 &sg, &offset, FROM_XFER_BUF);
330
331                 US_DEBUGP("Write %02X pages, to PBA %04X"
332                         " (LBA %04X) page %02X\n",
333                         pages, pba, lba, page);
334                         
335                 command[4] = 0;
336
337                 if (pba == NOT_ALLOCATED) {
338                         /* no pba allocated for this lba, find a free pba to use */
339
340                         int max_pba = (info->max_log_blks / 250 ) * 256;
341                         int found_count = 0;
342                         int found_pba = -1;
343
344                         /* set pba to first block in zone lba is in */
345                         pba = (lba / 1000) * 1024;
346
347                         US_DEBUGP("No PBA for LBA %04X\n",lba);
348
349                         if (max_pba > 1024)
350                                 max_pba = 1024;
351
352                         /*
353                          * Scan through the map looking for an unused block
354                          * leave 16 unused blocks at start (or as many as
355                          * possible) since the sddr55 seems to reuse a used
356                          * block when it shouldn't if we don't leave space.
357                          */
358                         for (i = 0; i < max_pba; i++, pba++) {
359                                 if (info->pba_to_lba[pba] == UNUSED_BLOCK) {
360                                         found_pba = pba;
361                                         if (found_count++ > 16)
362                                                 break;
363                                 }
364                         }
365
366                         pba = found_pba;
367
368                         if (pba == -1) {
369                                 /* oh dear */
370                                 US_DEBUGP("Couldn't find unallocated block\n");
371
372                                 set_sense_info (3, 0x31, 0);    /* medium error */
373                                 result = USB_STOR_TRANSPORT_FAILED;
374                                 goto leave;
375                         }
376
377                         US_DEBUGP("Allocating PBA %04X for LBA %04X\n", pba, lba);
378
379                         /* set writing to unallocated block flag */
380                         command[4] = 0x40;
381                 }
382
383                 address = (pba << info->blockshift) + page;
384
385                 command[1] = LSB_of(address>>16);
386                 command[2] = LSB_of(address>>8); 
387                 command[3] = LSB_of(address);
388
389                 /* set the lba into the command, modulo 1000 */
390                 command[0] = LSB_of(lba % 1000);
391                 command[6] = MSB_of(lba % 1000);
392
393                 command[4] |= LSB_of(pages >> info->smallpageshift);
394                 command[5] = 0xB0;
395                 command[7] = 0x86;
396
397                 /* send command */
398                 result = sddr55_bulk_transport(us,
399                         DMA_TO_DEVICE, command, 8);
400
401                 if (result != USB_STOR_XFER_GOOD) {
402                         US_DEBUGP("Result for send_command in write_data %d\n",
403                         result);
404
405                         /* set_sense_info is superfluous here? */
406                         set_sense_info (3, 0x3, 0);/* peripheral write error */
407                         result = USB_STOR_TRANSPORT_FAILED;
408                         goto leave;
409                 }
410
411                 /* send the data */
412                 result = sddr55_bulk_transport(us,
413                         DMA_TO_DEVICE, buffer, len);
414
415                 if (result != USB_STOR_XFER_GOOD) {
416                         US_DEBUGP("Result for send_data in write_data %d\n",
417                                   result);
418
419                         /* set_sense_info is superfluous here? */
420                         set_sense_info (3, 0x3, 0);/* peripheral write error */
421                         result = USB_STOR_TRANSPORT_FAILED;
422                         goto leave;
423                 }
424
425                 /* now read status */
426                 result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, status, 6);
427
428                 if (result != USB_STOR_XFER_GOOD) {
429                         US_DEBUGP("Result for get_status in write_data %d\n",
430                                   result);
431
432                         /* set_sense_info is superfluous here? */
433                         set_sense_info (3, 0x3, 0);/* peripheral write error */
434                         result = USB_STOR_TRANSPORT_FAILED;
435                         goto leave;
436                 }
437
438                 new_pba = (status[3] + (status[4] << 8) + (status[5] << 16))
439                                                   >> info->blockshift;
440
441                 /* check status for error */
442                 if (status[0] == 0xff && status[1] == 0x4) {
443                         info->pba_to_lba[new_pba] = BAD_BLOCK;
444
445                         set_sense_info (3, 0x0c, 0);
446                         result = USB_STOR_TRANSPORT_FAILED;
447                         goto leave;
448                 }
449
450                 US_DEBUGP("Updating maps for LBA %04X: old PBA %04X, new PBA %04X\n",
451                         lba, pba, new_pba);
452
453                 /* update the lba<->pba maps, note new_pba might be the same as pba */
454                 info->lba_to_pba[lba] = new_pba;
455                 info->pba_to_lba[pba] = UNUSED_BLOCK;
456
457                 /* check that new_pba wasn't already being used */
458                 if (info->pba_to_lba[new_pba] != UNUSED_BLOCK) {
459                         printk(KERN_ERR "sddr55 error: new PBA %04X already in use for LBA %04X\n",
460                                 new_pba, info->pba_to_lba[new_pba]);
461                         info->fatal_error = 1;
462                         set_sense_info (3, 0x31, 0);
463                         result = USB_STOR_TRANSPORT_FAILED;
464                         goto leave;
465                 }
466
467                 /* update the pba<->lba maps for new_pba */
468                 info->pba_to_lba[new_pba] = lba % 1000;
469
470                 page = 0;
471                 lba++;
472                 sectors -= pages >> info->smallpageshift;
473         }
474         result = USB_STOR_TRANSPORT_GOOD;
475
476  leave:
477         kfree(buffer);
478         return result;
479 }
480
481 static int sddr55_read_deviceID(struct us_data *us,
482                 unsigned char *manufacturerID,
483                 unsigned char *deviceID) {
484
485         int result;
486         unsigned char *command = us->iobuf;
487         unsigned char *content = us->iobuf;
488
489         memset(command, 0, 8);
490         command[5] = 0xB0;
491         command[7] = 0x84;
492         result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
493
494         US_DEBUGP("Result of send_control for device ID is %d\n",
495                 result);
496
497         if (result != USB_STOR_XFER_GOOD)
498                 return USB_STOR_TRANSPORT_ERROR;
499
500         result = sddr55_bulk_transport(us,
501                 DMA_FROM_DEVICE, content, 4);
502
503         if (result != USB_STOR_XFER_GOOD)
504                 return USB_STOR_TRANSPORT_ERROR;
505
506         *manufacturerID = content[0];
507         *deviceID = content[1];
508
509         if (content[0] != 0xff) {
510                 result = sddr55_bulk_transport(us,
511                         DMA_FROM_DEVICE, content, 2);
512         }
513
514         return USB_STOR_TRANSPORT_GOOD;
515 }
516
517
518 int sddr55_reset(struct us_data *us) {
519         return 0;
520 }
521
522
523 static unsigned long sddr55_get_capacity(struct us_data *us) {
524
525         unsigned char manufacturerID;
526         unsigned char deviceID;
527         int result;
528         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
529
530         US_DEBUGP("Reading capacity...\n");
531
532         result = sddr55_read_deviceID(us,
533                 &manufacturerID,
534                 &deviceID);
535
536         US_DEBUGP("Result of read_deviceID is %d\n",
537                 result);
538
539         if (result != USB_STOR_XFER_GOOD)
540                 return 0;
541
542         US_DEBUGP("Device ID = %02X\n", deviceID);
543         US_DEBUGP("Manuf  ID = %02X\n", manufacturerID);
544
545         info->pageshift = 9;
546         info->smallpageshift = 0;
547         info->blocksize = 16;
548         info->blockshift = 4;
549         info->blockmask = 15;
550
551         switch (deviceID) {
552
553         case 0x6e: // 1MB
554         case 0xe8:
555         case 0xec:
556                 info->pageshift = 8;
557                 info->smallpageshift = 1;
558                 return 0x00100000;
559
560         case 0xea: // 2MB
561         case 0x64:
562                 info->pageshift = 8;
563                 info->smallpageshift = 1;
564         case 0x5d: // 5d is a ROM card with pagesize 512.
565                 return 0x00200000;
566
567         case 0xe3: // 4MB
568         case 0xe5:
569         case 0x6b:
570         case 0xd5:
571                 return 0x00400000;
572
573         case 0xe6: // 8MB
574         case 0xd6:
575                 return 0x00800000;
576
577         case 0x73: // 16MB
578                 info->blocksize = 32;
579                 info->blockshift = 5;
580                 info->blockmask = 31;
581                 return 0x01000000;
582
583         case 0x75: // 32MB
584                 info->blocksize = 32;
585                 info->blockshift = 5;
586                 info->blockmask = 31;
587                 return 0x02000000;
588
589         case 0x76: // 64MB
590                 info->blocksize = 32;
591                 info->blockshift = 5;
592                 info->blockmask = 31;
593                 return 0x04000000;
594
595         case 0x79: // 128MB
596                 info->blocksize = 32;
597                 info->blockshift = 5;
598                 info->blockmask = 31;
599                 return 0x08000000;
600
601         default: // unknown
602                 return 0;
603
604         }
605 }
606
607 static int sddr55_read_map(struct us_data *us) {
608
609         struct sddr55_card_info *info = (struct sddr55_card_info *)(us->extra);
610         int numblocks;
611         unsigned char *buffer;
612         unsigned char *command = us->iobuf;
613         int i;
614         unsigned short lba;
615         unsigned short max_lba;
616         int result;
617
618         if (!info->capacity)
619                 return -1;
620
621         numblocks = info->capacity >> (info->blockshift + info->pageshift);
622         
623         buffer = kmalloc( numblocks * 2, GFP_NOIO );
624         
625         if (!buffer)
626                 return -1;
627
628         memset(command, 0, 8);
629         command[5] = 0xB0;
630         command[6] = numblocks * 2 / 256;
631         command[7] = 0x8A;
632
633         result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
634
635         if ( result != USB_STOR_XFER_GOOD) {
636                 kfree (buffer);
637                 return -1;
638         }
639
640         result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, buffer, numblocks * 2);
641
642         if ( result != USB_STOR_XFER_GOOD) {
643                 kfree (buffer);
644                 return -1;
645         }
646
647         result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, command, 2);
648
649         if ( result != USB_STOR_XFER_GOOD) {
650                 kfree (buffer);
651                 return -1;
652         }
653
654         kfree(info->lba_to_pba);
655         kfree(info->pba_to_lba);
656         info->lba_to_pba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
657         info->pba_to_lba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
658
659         if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) {
660                 kfree(info->lba_to_pba);
661                 kfree(info->pba_to_lba);
662                 info->lba_to_pba = NULL;
663                 info->pba_to_lba = NULL;
664                 kfree(buffer);
665                 return -1;
666         }
667
668         memset(info->lba_to_pba, 0xff, numblocks*sizeof(int));
669         memset(info->pba_to_lba, 0xff, numblocks*sizeof(int));
670
671         /* set maximum lba */
672         max_lba = info->max_log_blks;
673         if (max_lba > 1000)
674                 max_lba = 1000;
675
676         // Each block is 64 bytes of control data, so block i is located in
677         // scatterlist block i*64/128k = i*(2^6)*(2^-17) = i*(2^-11)
678
679         for (i=0; i<numblocks; i++) {
680                 int zone = i / 1024;
681
682                 lba = short_pack(buffer[i * 2], buffer[i * 2 + 1]);
683
684                         /* Every 1024 physical blocks ("zone"), the LBA numbers
685                          * go back to zero, but are within a higher
686                          * block of LBA's. Also, there is a maximum of
687                          * 1000 LBA's per zone. In other words, in PBA
688                          * 1024-2047 you will find LBA 0-999 which are
689                          * really LBA 1000-1999. Yes, this wastes 24
690                          * physical blocks per zone. Go figure. 
691                          * These devices can have blocks go bad, so there
692                          * are 24 spare blocks to use when blocks do go bad.
693                          */
694
695                         /* SDDR55 returns 0xffff for a bad block, and 0x400 for the 
696                          * CIS block. (Is this true for cards 8MB or less??)
697                          * Record these in the physical to logical map
698                          */ 
699
700                 info->pba_to_lba[i] = lba;
701
702                 if (lba >= max_lba) {
703                         continue;
704                 }
705                 
706                 if (info->lba_to_pba[lba + zone * 1000] != NOT_ALLOCATED &&
707                     !info->force_read_only) {
708                         printk("sddr55: map inconsistency at LBA %04X\n", lba + zone * 1000);
709                         info->force_read_only = 1;
710                 }
711
712                 if (lba<0x10 || (lba>=0x3E0 && lba<0x3EF))
713                         US_DEBUGP("LBA %04X <-> PBA %04X\n", lba, i);
714
715                 info->lba_to_pba[lba + zone * 1000] = i;
716         }
717
718         kfree(buffer);
719         return 0;
720 }
721
722
723 static void sddr55_card_info_destructor(void *extra) {
724         struct sddr55_card_info *info = (struct sddr55_card_info *)extra;
725
726         if (!extra)
727                 return;
728
729         kfree(info->lba_to_pba);
730         kfree(info->pba_to_lba);
731 }
732
733
734 /*
735  * Transport for the Sandisk SDDR-55
736  */
737 int sddr55_transport(struct scsi_cmnd *srb, struct us_data *us)
738 {
739         int result;
740         static unsigned char inquiry_response[8] = {
741                 0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00
742         };
743         // write-protected for now, no block descriptor support
744         static unsigned char mode_page_01[20] = {
745                 0x0, 0x12, 0x00, 0x80, 0x0, 0x0, 0x0, 0x0,
746                 0x01, 0x0A,
747                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
748         };
749         unsigned char *ptr = us->iobuf;
750         unsigned long capacity;
751         unsigned int lba;
752         unsigned int pba;
753         unsigned int page;
754         unsigned short pages;
755         struct sddr55_card_info *info;
756
757         if (!us->extra) {
758                 us->extra = kzalloc(
759                         sizeof(struct sddr55_card_info), GFP_NOIO);
760                 if (!us->extra)
761                         return USB_STOR_TRANSPORT_ERROR;
762                 us->extra_destructor = sddr55_card_info_destructor;
763         }
764
765         info = (struct sddr55_card_info *)(us->extra);
766
767         if (srb->cmnd[0] == REQUEST_SENSE) {
768                 US_DEBUGP("SDDR55: request sense %02x/%02x/%02x\n", info->sense_data[2], info->sense_data[12], info->sense_data[13]);
769
770                 memcpy (ptr, info->sense_data, sizeof info->sense_data);
771                 ptr[0] = 0x70;
772                 ptr[7] = 11;
773                 usb_stor_set_xfer_buf (ptr, sizeof info->sense_data, srb);
774                 memset (info->sense_data, 0, sizeof info->sense_data);
775
776                 return USB_STOR_TRANSPORT_GOOD;
777         }
778
779         memset (info->sense_data, 0, sizeof info->sense_data);
780
781         /* Dummy up a response for INQUIRY since SDDR55 doesn't
782            respond to INQUIRY commands */
783
784         if (srb->cmnd[0] == INQUIRY) {
785                 memcpy(ptr, inquiry_response, 8);
786                 fill_inquiry_response(us, ptr, 36);
787                 return USB_STOR_TRANSPORT_GOOD;
788         }
789
790         /* only check card status if the map isn't allocated, ie no card seen yet
791          * or if it's been over half a second since we last accessed it
792          */
793         if (info->lba_to_pba == NULL || time_after(jiffies, info->last_access + HZ/2)) {
794
795                 /* check to see if a card is fitted */
796                 result = sddr55_status (us);
797                 if (result) {
798                         result = sddr55_status (us);
799                         if (!result) {
800                         set_sense_info (6, 0x28, 0);    /* new media, set unit attention, not ready to ready */
801                         }
802                         return USB_STOR_TRANSPORT_FAILED;
803                 }
804         }
805
806         /* if we detected a problem with the map when writing,
807            don't allow any more access */
808         if (info->fatal_error) {
809
810                 set_sense_info (3, 0x31, 0);
811                 return USB_STOR_TRANSPORT_FAILED;
812         }
813
814         if (srb->cmnd[0] == READ_CAPACITY) {
815
816                 capacity = sddr55_get_capacity(us);
817
818                 if (!capacity) {
819                         set_sense_info (3, 0x30, 0); /* incompatible medium */
820                         return USB_STOR_TRANSPORT_FAILED;
821                 }
822
823                 info->capacity = capacity;
824
825                 /* figure out the maximum logical block number, allowing for
826                  * the fact that only 250 out of every 256 are used */
827                 info->max_log_blks = ((info->capacity >> (info->pageshift + info->blockshift)) / 256) * 250;
828
829                 /* Last page in the card, adjust as we only use 250 out of
830                  * every 256 pages */
831                 capacity = (capacity / 256) * 250;
832
833                 capacity /= PAGESIZE;
834                 capacity--;
835
836                 ((__be32 *) ptr)[0] = cpu_to_be32(capacity);
837                 ((__be32 *) ptr)[1] = cpu_to_be32(PAGESIZE);
838                 usb_stor_set_xfer_buf(ptr, 8, srb);
839
840                 sddr55_read_map(us);
841
842                 return USB_STOR_TRANSPORT_GOOD;
843         }
844
845         if (srb->cmnd[0] == MODE_SENSE_10) {
846
847                 memcpy(ptr, mode_page_01, sizeof mode_page_01);
848                 ptr[3] = (info->read_only || info->force_read_only) ? 0x80 : 0;
849                 usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb);
850
851                 if ( (srb->cmnd[2] & 0x3F) == 0x01 ) {
852                         US_DEBUGP(
853                           "SDDR55: Dummy up request for mode page 1\n");
854                         return USB_STOR_TRANSPORT_GOOD;
855
856                 } else if ( (srb->cmnd[2] & 0x3F) == 0x3F ) {
857                         US_DEBUGP(
858                           "SDDR55: Dummy up request for all mode pages\n");
859                         return USB_STOR_TRANSPORT_GOOD;
860                 }
861
862                 set_sense_info (5, 0x24, 0);    /* invalid field in command */
863                 return USB_STOR_TRANSPORT_FAILED;
864         }
865
866         if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL) {
867
868                 US_DEBUGP(
869                   "SDDR55: %s medium removal. Not that I can do"
870                   " anything about it...\n",
871                   (srb->cmnd[4]&0x03) ? "Prevent" : "Allow");
872
873                 return USB_STOR_TRANSPORT_GOOD;
874
875         }
876
877         if (srb->cmnd[0] == READ_10 || srb->cmnd[0] == WRITE_10) {
878
879                 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
880                 page <<= 16;
881                 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
882                 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
883
884                 page <<= info->smallpageshift;
885
886                 // convert page to block and page-within-block
887
888                 lba = page >> info->blockshift;
889                 page = page & info->blockmask;
890
891                 // locate physical block corresponding to logical block
892
893                 if (lba >= info->max_log_blks) {
894
895                         US_DEBUGP("Error: Requested LBA %04X exceeds maximum "
896                           "block %04X\n", lba, info->max_log_blks-1);
897
898                         set_sense_info (5, 0x24, 0);    /* invalid field in command */
899
900                         return USB_STOR_TRANSPORT_FAILED;
901                 }
902
903                 pba = info->lba_to_pba[lba];
904
905                 if (srb->cmnd[0] == WRITE_10) {
906                         US_DEBUGP("WRITE_10: write block %04X (LBA %04X) page %01X"
907                                 " pages %d\n",
908                                 pba, lba, page, pages);
909
910                         return sddr55_write_data(us, lba, page, pages);
911                 } else {
912                         US_DEBUGP("READ_10: read block %04X (LBA %04X) page %01X"
913                                 " pages %d\n",
914                                 pba, lba, page, pages);
915
916                         return sddr55_read_data(us, lba, page, pages);
917                 }
918         }
919
920
921         if (srb->cmnd[0] == TEST_UNIT_READY) {
922                 return USB_STOR_TRANSPORT_GOOD;
923         }
924
925         if (srb->cmnd[0] == START_STOP) {
926                 return USB_STOR_TRANSPORT_GOOD;
927         }
928
929         set_sense_info (5, 0x20, 0);    /* illegal command */
930
931         return USB_STOR_TRANSPORT_FAILED; // FIXME: sense buffer?
932 }
933