ide-cd: fix kernel crash on hppa regression
[linux-2.6] / drivers / ide / ide-cd.c
1 /*
2  * ATAPI CD-ROM driver.
3  *
4  * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
5  * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
6  * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
7  * Copyright (C) 2005, 2007-2009  Bartlomiej Zolnierkiewicz
8  *
9  * May be copied or modified under the terms of the GNU General Public
10  * License.  See linux/COPYING for more information.
11  *
12  * See Documentation/cdrom/ide-cd for usage information.
13  *
14  * Suggestions are welcome. Patches that work are more welcome though. ;-)
15  *
16  * Documentation:
17  *      Mt. Fuji (SFF8090 version 4) and ATAPI (SFF-8020i rev 2.6) standards.
18  *
19  * For historical changelog please see:
20  *      Documentation/ide/ChangeLog.ide-cd.1994-2004
21  */
22
23 #define DRV_NAME "ide-cd"
24 #define PFX DRV_NAME ": "
25
26 #define IDECD_VERSION "5.00"
27
28 #include <linux/module.h>
29 #include <linux/types.h>
30 #include <linux/kernel.h>
31 #include <linux/delay.h>
32 #include <linux/timer.h>
33 #include <linux/slab.h>
34 #include <linux/interrupt.h>
35 #include <linux/errno.h>
36 #include <linux/cdrom.h>
37 #include <linux/ide.h>
38 #include <linux/completion.h>
39 #include <linux/mutex.h>
40 #include <linux/bcd.h>
41
42 /* For SCSI -> ATAPI command conversion */
43 #include <scsi/scsi.h>
44
45 #include <linux/irq.h>
46 #include <linux/io.h>
47 #include <asm/byteorder.h>
48 #include <linux/uaccess.h>
49 #include <asm/unaligned.h>
50
51 #include "ide-cd.h"
52
53 static DEFINE_MUTEX(idecd_ref_mutex);
54
55 static void ide_cd_release(struct device *);
56
57 static struct cdrom_info *ide_cd_get(struct gendisk *disk)
58 {
59         struct cdrom_info *cd = NULL;
60
61         mutex_lock(&idecd_ref_mutex);
62         cd = ide_drv_g(disk, cdrom_info);
63         if (cd) {
64                 if (ide_device_get(cd->drive))
65                         cd = NULL;
66                 else
67                         get_device(&cd->dev);
68
69         }
70         mutex_unlock(&idecd_ref_mutex);
71         return cd;
72 }
73
74 static void ide_cd_put(struct cdrom_info *cd)
75 {
76         ide_drive_t *drive = cd->drive;
77
78         mutex_lock(&idecd_ref_mutex);
79         put_device(&cd->dev);
80         ide_device_put(drive);
81         mutex_unlock(&idecd_ref_mutex);
82 }
83
84 /*
85  * Generic packet command support and error handling routines.
86  */
87
88 /* Mark that we've seen a media change and invalidate our internal buffers. */
89 static void cdrom_saw_media_change(ide_drive_t *drive)
90 {
91         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
92         drive->atapi_flags &= ~IDE_AFLAG_TOC_VALID;
93 }
94
95 static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
96                            struct request_sense *sense)
97 {
98         int log = 0;
99
100         ide_debug_log(IDE_DBG_SENSE, "sense_key: 0x%x", sense->sense_key);
101
102         if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
103                 return 0;
104
105         switch (sense->sense_key) {
106         case NO_SENSE:
107         case RECOVERED_ERROR:
108                 break;
109         case NOT_READY:
110                 /*
111                  * don't care about tray state messages for e.g. capacity
112                  * commands or in-progress or becoming ready
113                  */
114                 if (sense->asc == 0x3a || sense->asc == 0x04)
115                         break;
116                 log = 1;
117                 break;
118         case ILLEGAL_REQUEST:
119                 /*
120                  * don't log START_STOP unit with LoEj set, since we cannot
121                  * reliably check if drive can auto-close
122                  */
123                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
124                         break;
125                 log = 1;
126                 break;
127         case UNIT_ATTENTION:
128                 /*
129                  * Make good and sure we've seen this potential media change.
130                  * Some drives (i.e. Creative) fail to present the correct sense
131                  * key in the error register.
132                  */
133                 cdrom_saw_media_change(drive);
134                 break;
135         default:
136                 log = 1;
137                 break;
138         }
139         return log;
140 }
141
142 static void cdrom_analyze_sense_data(ide_drive_t *drive,
143                               struct request *failed_command,
144                               struct request_sense *sense)
145 {
146         unsigned long sector;
147         unsigned long bio_sectors;
148         struct cdrom_info *info = drive->driver_data;
149
150         ide_debug_log(IDE_DBG_SENSE, "error_code: 0x%x, sense_key: 0x%x",
151                                      sense->error_code, sense->sense_key);
152
153         if (failed_command)
154                 ide_debug_log(IDE_DBG_SENSE, "failed cmd: 0x%x",
155                                              failed_command->cmd[0]);
156
157         if (!cdrom_log_sense(drive, failed_command, sense))
158                 return;
159
160         /*
161          * If a read toc is executed for a CD-R or CD-RW medium where the first
162          * toc has not been recorded yet, it will fail with 05/24/00 (which is a
163          * confusing error)
164          */
165         if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
166                 if (sense->sense_key == 0x05 && sense->asc == 0x24)
167                         return;
168
169         /* current error */
170         if (sense->error_code == 0x70) {
171                 switch (sense->sense_key) {
172                 case MEDIUM_ERROR:
173                 case VOLUME_OVERFLOW:
174                 case ILLEGAL_REQUEST:
175                         if (!sense->valid)
176                                 break;
177                         if (failed_command == NULL ||
178                                         !blk_fs_request(failed_command))
179                                 break;
180                         sector = (sense->information[0] << 24) |
181                                  (sense->information[1] << 16) |
182                                  (sense->information[2] <<  8) |
183                                  (sense->information[3]);
184
185                         if (drive->queue->hardsect_size == 2048)
186                                 /* device sector size is 2K */
187                                 sector <<= 2;
188
189                         bio_sectors = max(bio_sectors(failed_command->bio), 4U);
190                         sector &= ~(bio_sectors - 1);
191
192                         /*
193                          * The SCSI specification allows for the value
194                          * returned by READ CAPACITY to be up to 75 2K
195                          * sectors past the last readable block.
196                          * Therefore, if we hit a medium error within the
197                          * last 75 2K sectors, we decrease the saved size
198                          * value.
199                          */
200                         if (sector < get_capacity(info->disk) &&
201                             drive->probed_capacity - sector < 4 * 75)
202                                 set_capacity(info->disk, sector);
203                 }
204         }
205
206         ide_cd_log_error(drive->name, failed_command, sense);
207 }
208
209 static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
210                                       struct request *failed_command)
211 {
212         struct cdrom_info *info         = drive->driver_data;
213         struct request *rq              = &drive->request_sense_rq;
214
215         ide_debug_log(IDE_DBG_SENSE, "enter");
216
217         if (sense == NULL)
218                 sense = &info->sense_data;
219
220         /* stuff the sense request in front of our current request */
221         blk_rq_init(NULL, rq);
222         rq->cmd_type = REQ_TYPE_ATA_PC;
223         rq->rq_disk = info->disk;
224
225         rq->data = sense;
226         rq->cmd[0] = GPCMD_REQUEST_SENSE;
227         rq->cmd[4] = 18;
228         rq->data_len = 18;
229
230         rq->cmd_type = REQ_TYPE_SENSE;
231         rq->cmd_flags |= REQ_PREEMPT;
232
233         /* NOTE! Save the failed command in "rq->buffer" */
234         rq->buffer = (void *) failed_command;
235
236         if (failed_command)
237                 ide_debug_log(IDE_DBG_SENSE, "failed_cmd: 0x%x",
238                                              failed_command->cmd[0]);
239
240         drive->hwif->rq = NULL;
241
242         elv_add_request(drive->queue, rq, ELEVATOR_INSERT_FRONT, 0);
243 }
244
245 static void ide_cd_complete_failed_rq(ide_drive_t *drive, struct request *rq)
246 {
247         /*
248          * For REQ_TYPE_SENSE, "rq->buffer" points to the original
249          * failed request
250          */
251         struct request *failed = (struct request *)rq->buffer;
252         struct cdrom_info *info = drive->driver_data;
253         void *sense = &info->sense_data;
254
255         if (failed) {
256                 if (failed->sense) {
257                         sense = failed->sense;
258                         failed->sense_len = rq->sense_len;
259                 }
260                 cdrom_analyze_sense_data(drive, failed, sense);
261
262                 if (ide_end_rq(drive, failed, -EIO, blk_rq_bytes(failed)))
263                         BUG();
264         } else
265                 cdrom_analyze_sense_data(drive, NULL, sense);
266 }
267
268
269 /*
270  * Allow the drive 5 seconds to recover; some devices will return NOT_READY
271  * while flushing data from cache.
272  *
273  * returns: 0 failed (write timeout expired)
274  *          1 success
275  */
276 static int ide_cd_breathe(ide_drive_t *drive, struct request *rq)
277 {
278
279         struct cdrom_info *info = drive->driver_data;
280
281         if (!rq->errors)
282                 info->write_timeout = jiffies + ATAPI_WAIT_WRITE_BUSY;
283
284         rq->errors = 1;
285
286         if (time_after(jiffies, info->write_timeout))
287                 return 0;
288         else {
289                 struct request_queue *q = drive->queue;
290                 unsigned long flags;
291
292                 /*
293                  * take a breather relying on the unplug timer to kick us again
294                  */
295
296                 spin_lock_irqsave(q->queue_lock, flags);
297                 blk_plug_device(q);
298                 spin_unlock_irqrestore(q->queue_lock, flags);
299
300                 return 1;
301         }
302 }
303
304 /**
305  * Returns:
306  * 0: if the request should be continued.
307  * 1: if the request will be going through error recovery.
308  * 2: if the request should be ended.
309  */
310 static int cdrom_decode_status(ide_drive_t *drive, u8 stat)
311 {
312         ide_hwif_t *hwif = drive->hwif;
313         struct request *rq = hwif->rq;
314         int err, sense_key, do_end_request = 0;
315         u8 quiet = rq->cmd_flags & REQ_QUIET;
316
317         /* get the IDE error register */
318         err = ide_read_error(drive);
319         sense_key = err >> 4;
320
321         ide_debug_log(IDE_DBG_RQ, "cmd: 0x%x, rq->cmd_type: 0x%x, err: 0x%x, "
322                                   "stat 0x%x",
323                                   rq->cmd[0], rq->cmd_type, err, stat);
324
325         if (blk_sense_request(rq)) {
326                 /*
327                  * We got an error trying to get sense info from the drive
328                  * (probably while trying to recover from a former error).
329                  * Just give up.
330                  */
331                 rq->cmd_flags |= REQ_FAILED;
332                 return 2;
333         }
334
335         /* if we have an error, pass CHECK_CONDITION as the SCSI status byte */
336         if (blk_pc_request(rq) && !rq->errors)
337                 rq->errors = SAM_STAT_CHECK_CONDITION;
338
339         if (blk_noretry_request(rq))
340                 do_end_request = 1;
341
342         switch (sense_key) {
343         case NOT_READY:
344                 if (blk_fs_request(rq) && rq_data_dir(rq) == WRITE) {
345                         if (ide_cd_breathe(drive, rq))
346                                 return 1;
347                 } else {
348                         cdrom_saw_media_change(drive);
349
350                         if (blk_fs_request(rq) && !quiet)
351                                 printk(KERN_ERR PFX "%s: tray open\n",
352                                         drive->name);
353                 }
354                 do_end_request = 1;
355                 break;
356         case UNIT_ATTENTION:
357                 cdrom_saw_media_change(drive);
358
359                 if (blk_fs_request(rq) == 0)
360                         return 0;
361
362                 /*
363                  * Arrange to retry the request but be sure to give up if we've
364                  * retried too many times.
365                  */
366                 if (++rq->errors > ERROR_MAX)
367                         do_end_request = 1;
368                 break;
369         case ILLEGAL_REQUEST:
370                 /*
371                  * Don't print error message for this condition -- SFF8090i
372                  * indicates that 5/24/00 is the correct response to a request
373                  * to close the tray if the drive doesn't have that capability.
374                  *
375                  * cdrom_log_sense() knows this!
376                  */
377                 if (rq->cmd[0] == GPCMD_START_STOP_UNIT)
378                         break;
379                 /* fall-through */
380         case DATA_PROTECT:
381                 /*
382                  * No point in retrying after an illegal request or data
383                  * protect error.
384                  */
385                 if (!quiet)
386                         ide_dump_status(drive, "command error", stat);
387                 do_end_request = 1;
388                 break;
389         case MEDIUM_ERROR:
390                 /*
391                  * No point in re-trying a zillion times on a bad sector.
392                  * If we got here the error is not correctable.
393                  */
394                 if (!quiet)
395                         ide_dump_status(drive, "media error "
396                                         "(bad sector)", stat);
397                 do_end_request = 1;
398                 break;
399         case BLANK_CHECK:
400                 /* disk appears blank? */
401                 if (!quiet)
402                         ide_dump_status(drive, "media error (blank)",
403                                         stat);
404                 do_end_request = 1;
405                 break;
406         default:
407                 if (blk_fs_request(rq) == 0)
408                         break;
409                 if (err & ~ATA_ABORTED) {
410                         /* go to the default handler for other errors */
411                         ide_error(drive, "cdrom_decode_status", stat);
412                         return 1;
413                 } else if (++rq->errors > ERROR_MAX)
414                         /* we've racked up too many retries, abort */
415                         do_end_request = 1;
416         }
417
418         if (blk_fs_request(rq) == 0) {
419                 rq->cmd_flags |= REQ_FAILED;
420                 do_end_request = 1;
421         }
422
423         /*
424          * End a request through request sense analysis when we have sense data.
425          * We need this in order to perform end of media processing.
426          */
427         if (do_end_request)
428                 goto end_request;
429
430         /* if we got a CHECK_CONDITION status, queue a request sense command */
431         if (stat & ATA_ERR)
432                 cdrom_queue_request_sense(drive, NULL, NULL);
433         return 1;
434
435 end_request:
436         if (stat & ATA_ERR) {
437                 struct request_queue *q = drive->queue;
438                 unsigned long flags;
439
440                 spin_lock_irqsave(q->queue_lock, flags);
441                 blkdev_dequeue_request(rq);
442                 spin_unlock_irqrestore(q->queue_lock, flags);
443
444                 hwif->rq = NULL;
445
446                 cdrom_queue_request_sense(drive, rq->sense, rq);
447                 return 1;
448         } else
449                 return 2;
450 }
451
452 /*
453  * Check the contents of the interrupt reason register from the cdrom
454  * and attempt to recover if there are problems.  Returns  0 if everything's
455  * ok; nonzero if the request has been terminated.
456  */
457 static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
458                                 int len, int ireason, int rw)
459 {
460         ide_hwif_t *hwif = drive->hwif;
461
462         ide_debug_log(IDE_DBG_FUNC, "ireason: 0x%x, rw: 0x%x", ireason, rw);
463
464         /*
465          * ireason == 0: the drive wants to receive data from us
466          * ireason == 2: the drive is expecting to transfer data to us
467          */
468         if (ireason == (!rw << 1))
469                 return 0;
470         else if (ireason == (rw << 1)) {
471
472                 /* whoops... */
473                 printk(KERN_ERR PFX "%s: %s: wrong transfer direction!\n",
474                                 drive->name, __func__);
475
476                 ide_pad_transfer(drive, rw, len);
477         } else  if (rw == 0 && ireason == 1) {
478                 /*
479                  * Some drives (ASUS) seem to tell us that status info is
480                  * available.  Just get it and ignore.
481                  */
482                 (void)hwif->tp_ops->read_status(hwif);
483                 return 0;
484         } else {
485                 /* drive wants a command packet, or invalid ireason... */
486                 printk(KERN_ERR PFX "%s: %s: bad interrupt reason 0x%02x\n",
487                                 drive->name, __func__, ireason);
488         }
489
490         if (rq->cmd_type == REQ_TYPE_ATA_PC)
491                 rq->cmd_flags |= REQ_FAILED;
492
493         return -1;
494 }
495
496 static void ide_cd_request_sense_fixup(ide_drive_t *drive, struct ide_cmd *cmd)
497 {
498         struct request *rq = cmd->rq;
499
500         ide_debug_log(IDE_DBG_FUNC, "rq->cmd[0]: 0x%x", rq->cmd[0]);
501
502         /*
503          * Some of the trailing request sense fields are optional,
504          * and some drives don't send them.  Sigh.
505          */
506         if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
507             cmd->nleft > 0 && cmd->nleft <= 5) {
508                 unsigned int ofs = cmd->nbytes - cmd->nleft;
509
510                 while (cmd->nleft > 0) {
511                         *((u8 *)rq->data + ofs++) = 0;
512                         cmd->nleft--;
513                 }
514         }
515 }
516
517 int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
518                     int write, void *buffer, unsigned *bufflen,
519                     struct request_sense *sense, int timeout,
520                     unsigned int cmd_flags)
521 {
522         struct cdrom_info *info = drive->driver_data;
523         struct request_sense local_sense;
524         int retries = 10;
525         unsigned int flags = 0;
526
527         if (!sense)
528                 sense = &local_sense;
529
530         ide_debug_log(IDE_DBG_PC, "cmd[0]: 0x%x, write: 0x%x, timeout: %d, "
531                                   "cmd_flags: 0x%x",
532                                   cmd[0], write, timeout, cmd_flags);
533
534         /* start of retry loop */
535         do {
536                 struct request *rq;
537                 int error;
538
539                 rq = blk_get_request(drive->queue, write, __GFP_WAIT);
540
541                 memcpy(rq->cmd, cmd, BLK_MAX_CDB);
542                 rq->cmd_type = REQ_TYPE_ATA_PC;
543                 rq->sense = sense;
544                 rq->cmd_flags |= cmd_flags;
545                 rq->timeout = timeout;
546                 if (buffer) {
547                         rq->data = buffer;
548                         rq->data_len = *bufflen;
549                 }
550
551                 error = blk_execute_rq(drive->queue, info->disk, rq, 0);
552
553                 if (buffer)
554                         *bufflen = rq->data_len;
555
556                 flags = rq->cmd_flags;
557                 blk_put_request(rq);
558
559                 /*
560                  * FIXME: we should probably abort/retry or something in case of
561                  * failure.
562                  */
563                 if (flags & REQ_FAILED) {
564                         /*
565                          * The request failed.  Retry if it was due to a unit
566                          * attention status (usually means media was changed).
567                          */
568                         struct request_sense *reqbuf = sense;
569
570                         if (reqbuf->sense_key == UNIT_ATTENTION)
571                                 cdrom_saw_media_change(drive);
572                         else if (reqbuf->sense_key == NOT_READY &&
573                                  reqbuf->asc == 4 && reqbuf->ascq != 4) {
574                                 /*
575                                  * The drive is in the process of loading
576                                  * a disk.  Retry, but wait a little to give
577                                  * the drive time to complete the load.
578                                  */
579                                 ssleep(2);
580                         } else {
581                                 /* otherwise, don't retry */
582                                 retries = 0;
583                         }
584                         --retries;
585                 }
586
587                 /* end of retry loop */
588         } while ((flags & REQ_FAILED) && retries >= 0);
589
590         /* return an error if the command failed */
591         return (flags & REQ_FAILED) ? -EIO : 0;
592 }
593
594 static void ide_cd_error_cmd(ide_drive_t *drive, struct ide_cmd *cmd)
595 {
596         unsigned int nr_bytes = cmd->nbytes - cmd->nleft;
597
598         if (cmd->tf_flags & IDE_TFLAG_WRITE)
599                 nr_bytes -= cmd->last_xfer_len;
600
601         if (nr_bytes > 0)
602                 ide_complete_rq(drive, 0, nr_bytes);
603 }
604
605 static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
606 {
607         ide_hwif_t *hwif = drive->hwif;
608         struct ide_cmd *cmd = &hwif->cmd;
609         struct request *rq = hwif->rq;
610         ide_expiry_t *expiry = NULL;
611         int dma_error = 0, dma, thislen, uptodate = 0;
612         int write = (rq_data_dir(rq) == WRITE) ? 1 : 0, rc = 0, nsectors;
613         int sense = blk_sense_request(rq);
614         unsigned int timeout;
615         u16 len;
616         u8 ireason, stat;
617
618         ide_debug_log(IDE_DBG_PC, "cmd: 0x%x, write: 0x%x", rq->cmd[0], write);
619
620         /* check for errors */
621         dma = drive->dma;
622         if (dma) {
623                 drive->dma = 0;
624                 drive->waiting_for_dma = 0;
625                 dma_error = hwif->dma_ops->dma_end(drive);
626                 ide_dma_unmap_sg(drive, cmd);
627                 if (dma_error) {
628                         printk(KERN_ERR PFX "%s: DMA %s error\n", drive->name,
629                                         write ? "write" : "read");
630                         ide_dma_off(drive);
631                 }
632         }
633
634         /* check status */
635         stat = hwif->tp_ops->read_status(hwif);
636
637         if (!OK_STAT(stat, 0, BAD_R_STAT)) {
638                 rc = cdrom_decode_status(drive, stat);
639                 if (rc) {
640                         if (rc == 2)
641                                 goto out_end;
642                         return ide_stopped;
643                 }
644         }
645
646         /* using dma, transfer is complete now */
647         if (dma) {
648                 if (dma_error)
649                         return ide_error(drive, "dma error", stat);
650                 uptodate = 1;
651                 goto out_end;
652         }
653
654         ide_read_bcount_and_ireason(drive, &len, &ireason);
655
656         thislen = blk_fs_request(rq) ? len : cmd->nleft;
657         if (thislen > len)
658                 thislen = len;
659
660         ide_debug_log(IDE_DBG_PC, "DRQ: stat: 0x%x, thislen: %d",
661                                   stat, thislen);
662
663         /* If DRQ is clear, the command has completed. */
664         if ((stat & ATA_DRQ) == 0) {
665                 if (blk_fs_request(rq)) {
666                         /*
667                          * If we're not done reading/writing, complain.
668                          * Otherwise, complete the command normally.
669                          */
670                         uptodate = 1;
671                         if (cmd->nleft > 0) {
672                                 printk(KERN_ERR PFX "%s: %s: data underrun "
673                                         "(%u bytes)\n", drive->name, __func__,
674                                         cmd->nleft);
675                                 if (!write)
676                                         rq->cmd_flags |= REQ_FAILED;
677                                 uptodate = 0;
678                         }
679                 } else if (!blk_pc_request(rq)) {
680                         ide_cd_request_sense_fixup(drive, cmd);
681                         /* complain if we still have data left to transfer */
682                         uptodate = cmd->nleft ? 0 : 1;
683                         if (uptodate == 0)
684                                 rq->cmd_flags |= REQ_FAILED;
685                 }
686                 goto out_end;
687         }
688
689         /* check which way to transfer data */
690         rc = ide_cd_check_ireason(drive, rq, len, ireason, write);
691         if (rc)
692                 goto out_end;
693
694         cmd->last_xfer_len = 0;
695
696         ide_debug_log(IDE_DBG_PC, "data transfer, rq->cmd_type: 0x%x, "
697                                   "ireason: 0x%x",
698                                   rq->cmd_type, ireason);
699
700         /* transfer data */
701         while (thislen > 0) {
702                 int blen = min_t(int, thislen, cmd->nleft);
703
704                 if (cmd->nleft == 0)
705                         break;
706
707                 ide_pio_bytes(drive, cmd, write, blen);
708                 cmd->last_xfer_len += blen;
709
710                 thislen -= blen;
711                 len -= blen;
712
713                 if (sense && write == 0)
714                         rq->sense_len += blen;
715         }
716
717         /* pad, if necessary */
718         if (len > 0) {
719                 if (blk_fs_request(rq) == 0 || write == 0)
720                         ide_pad_transfer(drive, write, len);
721                 else {
722                         printk(KERN_ERR PFX "%s: confused, missing data\n",
723                                 drive->name);
724                         blk_dump_rq_flags(rq, "cdrom_newpc_intr");
725                 }
726         }
727
728         if (blk_pc_request(rq)) {
729                 timeout = rq->timeout;
730         } else {
731                 timeout = ATAPI_WAIT_PC;
732                 if (!blk_fs_request(rq))
733                         expiry = ide_cd_expiry;
734         }
735
736         hwif->expiry = expiry;
737         ide_set_handler(drive, cdrom_newpc_intr, timeout);
738         return ide_started;
739
740 out_end:
741         if (blk_pc_request(rq) && rc == 0) {
742                 unsigned int dlen = rq->data_len;
743
744                 rq->data_len = 0;
745
746                 if (blk_end_request(rq, 0, dlen))
747                         BUG();
748
749                 hwif->rq = NULL;
750         } else {
751                 if (sense && uptodate)
752                         ide_cd_complete_failed_rq(drive, rq);
753
754                 if (blk_fs_request(rq)) {
755                         if (cmd->nleft == 0)
756                                 uptodate = 1;
757                 } else {
758                         if (uptodate <= 0 && rq->errors == 0)
759                                 rq->errors = -EIO;
760                 }
761
762                 if (uptodate == 0)
763                         ide_cd_error_cmd(drive, cmd);
764
765                 /* make sure it's fully ended */
766                 if (blk_pc_request(rq))
767                         nsectors = (rq->data_len + 511) >> 9;
768                 else
769                         nsectors = rq->hard_nr_sectors;
770
771                 if (nsectors == 0)
772                         nsectors = 1;
773
774                 if (blk_fs_request(rq) == 0) {
775                         rq->data_len -= (cmd->nbytes - cmd->nleft);
776                         if (uptodate == 0 && (cmd->tf_flags & IDE_TFLAG_WRITE))
777                                 rq->data_len += cmd->last_xfer_len;
778                 }
779
780                 ide_complete_rq(drive, uptodate ? 0 : -EIO, nsectors << 9);
781
782                 if (sense && rc == 2)
783                         ide_error(drive, "request sense failure", stat);
784         }
785         return ide_stopped;
786 }
787
788 static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
789 {
790         struct cdrom_info *cd = drive->driver_data;
791         struct request_queue *q = drive->queue;
792         int write = rq_data_dir(rq) == WRITE;
793         unsigned short sectors_per_frame =
794                 queue_hardsect_size(q) >> SECTOR_BITS;
795
796         ide_debug_log(IDE_DBG_RQ, "rq->cmd[0]: 0x%x, rq->cmd_flags: 0x%x, "
797                                   "secs_per_frame: %u",
798                                   rq->cmd[0], rq->cmd_flags, sectors_per_frame);
799
800         if (write) {
801                 /* disk has become write protected */
802                 if (get_disk_ro(cd->disk))
803                         return ide_stopped;
804         } else {
805                 /*
806                  * We may be retrying this request after an error.  Fix up any
807                  * weirdness which might be present in the request packet.
808                  */
809                 q->prep_rq_fn(q, rq);
810         }
811
812         /* fs requests *must* be hardware frame aligned */
813         if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
814             (rq->sector & (sectors_per_frame - 1)))
815                 return ide_stopped;
816
817         /* use DMA, if possible */
818         drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
819
820         if (write)
821                 cd->devinfo.media_written = 1;
822
823         rq->timeout = ATAPI_WAIT_PC;
824
825         return ide_started;
826 }
827
828 static void cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
829 {
830
831         ide_debug_log(IDE_DBG_PC, "rq->cmd[0]: 0x%x, rq->cmd_type: 0x%x",
832                                   rq->cmd[0], rq->cmd_type);
833
834         if (blk_pc_request(rq))
835                 rq->cmd_flags |= REQ_QUIET;
836         else
837                 rq->cmd_flags &= ~REQ_FAILED;
838
839         drive->dma = 0;
840
841         /* sg request */
842         if (rq->bio || ((rq->cmd_type == REQ_TYPE_ATA_PC) && rq->data_len)) {
843                 struct request_queue *q = drive->queue;
844                 unsigned int alignment;
845                 char *buf;
846
847                 if (rq->bio)
848                         buf = bio_data(rq->bio);
849                 else
850                         buf = rq->data;
851
852                 drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
853
854                 /*
855                  * check if dma is safe
856                  *
857                  * NOTE! The "len" and "addr" checks should possibly have
858                  * separate masks.
859                  */
860                 alignment = queue_dma_alignment(q) | q->dma_pad_mask;
861                 if ((unsigned long)buf & alignment
862                     || rq->data_len & q->dma_pad_mask
863                     || object_is_on_stack(buf))
864                         drive->dma = 0;
865         }
866 }
867
868 static ide_startstop_t ide_cd_do_request(ide_drive_t *drive, struct request *rq,
869                                         sector_t block)
870 {
871         struct ide_cmd cmd;
872         int uptodate = 0, nsectors;
873
874         ide_debug_log(IDE_DBG_RQ, "cmd: 0x%x, block: %llu",
875                                   rq->cmd[0], (unsigned long long)block);
876
877         if (drive->debug_mask & IDE_DBG_RQ)
878                 blk_dump_rq_flags(rq, "ide_cd_do_request");
879
880         if (blk_fs_request(rq)) {
881                 if (cdrom_start_rw(drive, rq) == ide_stopped)
882                         goto out_end;
883         } else if (blk_sense_request(rq) || blk_pc_request(rq) ||
884                    rq->cmd_type == REQ_TYPE_ATA_PC) {
885                 if (!rq->timeout)
886                         rq->timeout = ATAPI_WAIT_PC;
887
888                 cdrom_do_block_pc(drive, rq);
889         } else if (blk_special_request(rq)) {
890                 /* right now this can only be a reset... */
891                 uptodate = 1;
892                 goto out_end;
893         } else {
894                 blk_dump_rq_flags(rq, DRV_NAME " bad flags");
895                 if (rq->errors == 0)
896                         rq->errors = -EIO;
897                 goto out_end;
898         }
899
900         memset(&cmd, 0, sizeof(cmd));
901
902         if (rq_data_dir(rq))
903                 cmd.tf_flags |= IDE_TFLAG_WRITE;
904
905         cmd.rq = rq;
906
907         if (blk_fs_request(rq) || rq->data_len) {
908                 ide_init_sg_cmd(&cmd, blk_fs_request(rq) ? (rq->nr_sectors << 9)
909                                                          : rq->data_len);
910                 ide_map_sg(drive, &cmd);
911         }
912
913         return ide_issue_pc(drive, &cmd);
914 out_end:
915         nsectors = rq->hard_nr_sectors;
916
917         if (nsectors == 0)
918                 nsectors = 1;
919
920         ide_complete_rq(drive, uptodate ? 0 : -EIO, nsectors << 9);
921
922         return ide_stopped;
923 }
924
925 /*
926  * Ioctl handling.
927  *
928  * Routines which queue packet commands take as a final argument a pointer to a
929  * request_sense struct. If execution of the command results in an error with a
930  * CHECK CONDITION status, this structure will be filled with the results of the
931  * subsequent request sense command. The pointer can also be NULL, in which case
932  * no sense information is returned.
933  */
934 static void msf_from_bcd(struct atapi_msf *msf)
935 {
936         msf->minute = bcd2bin(msf->minute);
937         msf->second = bcd2bin(msf->second);
938         msf->frame  = bcd2bin(msf->frame);
939 }
940
941 int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
942 {
943         struct cdrom_info *info = drive->driver_data;
944         struct cdrom_device_info *cdi = &info->devinfo;
945         unsigned char cmd[BLK_MAX_CDB];
946
947         ide_debug_log(IDE_DBG_FUNC, "enter");
948
949         memset(cmd, 0, BLK_MAX_CDB);
950         cmd[0] = GPCMD_TEST_UNIT_READY;
951
952         /*
953          * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
954          * instead of supporting the LOAD_UNLOAD opcode.
955          */
956         cmd[7] = cdi->sanyo_slot % 3;
957
958         return ide_cd_queue_pc(drive, cmd, 0, NULL, NULL, sense, 0, REQ_QUIET);
959 }
960
961 static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
962                                unsigned long *sectors_per_frame,
963                                struct request_sense *sense)
964 {
965         struct {
966                 __be32 lba;
967                 __be32 blocklen;
968         } capbuf;
969
970         int stat;
971         unsigned char cmd[BLK_MAX_CDB];
972         unsigned len = sizeof(capbuf);
973         u32 blocklen;
974
975         ide_debug_log(IDE_DBG_FUNC, "enter");
976
977         memset(cmd, 0, BLK_MAX_CDB);
978         cmd[0] = GPCMD_READ_CDVD_CAPACITY;
979
980         stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
981                                REQ_QUIET);
982         if (stat)
983                 return stat;
984
985         /*
986          * Sanity check the given block size
987          */
988         blocklen = be32_to_cpu(capbuf.blocklen);
989         switch (blocklen) {
990         case 512:
991         case 1024:
992         case 2048:
993         case 4096:
994                 break;
995         default:
996                 printk(KERN_ERR PFX "%s: weird block size %u\n",
997                                 drive->name, blocklen);
998                 printk(KERN_ERR PFX "%s: default to 2kb block size\n",
999                                 drive->name);
1000                 blocklen = 2048;
1001                 break;
1002         }
1003
1004         *capacity = 1 + be32_to_cpu(capbuf.lba);
1005         *sectors_per_frame = blocklen >> SECTOR_BITS;
1006
1007         ide_debug_log(IDE_DBG_PROBE, "cap: %lu, sectors_per_frame: %lu",
1008                                      *capacity, *sectors_per_frame);
1009
1010         return 0;
1011 }
1012
1013 static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1014                                 int format, char *buf, int buflen,
1015                                 struct request_sense *sense)
1016 {
1017         unsigned char cmd[BLK_MAX_CDB];
1018
1019         ide_debug_log(IDE_DBG_FUNC, "enter");
1020
1021         memset(cmd, 0, BLK_MAX_CDB);
1022
1023         cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1024         cmd[6] = trackno;
1025         cmd[7] = (buflen >> 8);
1026         cmd[8] = (buflen & 0xff);
1027         cmd[9] = (format << 6);
1028
1029         if (msf_flag)
1030                 cmd[1] = 2;
1031
1032         return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1033 }
1034
1035 /* Try to read the entire TOC for the disk into our internal buffer. */
1036 int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1037 {
1038         int stat, ntracks, i;
1039         struct cdrom_info *info = drive->driver_data;
1040         struct cdrom_device_info *cdi = &info->devinfo;
1041         struct atapi_toc *toc = info->toc;
1042         struct {
1043                 struct atapi_toc_header hdr;
1044                 struct atapi_toc_entry  ent;
1045         } ms_tmp;
1046         long last_written;
1047         unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1048
1049         ide_debug_log(IDE_DBG_FUNC, "enter");
1050
1051         if (toc == NULL) {
1052                 /* try to allocate space */
1053                 toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1054                 if (toc == NULL) {
1055                         printk(KERN_ERR PFX "%s: No cdrom TOC buffer!\n",
1056                                         drive->name);
1057                         return -ENOMEM;
1058                 }
1059                 info->toc = toc;
1060         }
1061
1062         /*
1063          * Check to see if the existing data is still valid. If it is,
1064          * just return.
1065          */
1066         (void) cdrom_check_status(drive, sense);
1067
1068         if (drive->atapi_flags & IDE_AFLAG_TOC_VALID)
1069                 return 0;
1070
1071         /* try to get the total cdrom capacity and sector size */
1072         stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1073                                    sense);
1074         if (stat)
1075                 toc->capacity = 0x1fffff;
1076
1077         set_capacity(info->disk, toc->capacity * sectors_per_frame);
1078         /* save a private copy of the TOC capacity for error handling */
1079         drive->probed_capacity = toc->capacity * sectors_per_frame;
1080
1081         blk_queue_hardsect_size(drive->queue,
1082                                 sectors_per_frame << SECTOR_BITS);
1083
1084         /* first read just the header, so we know how long the TOC is */
1085         stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1086                                     sizeof(struct atapi_toc_header), sense);
1087         if (stat)
1088                 return stat;
1089
1090         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1091                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1092                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1093         }
1094
1095         ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1096         if (ntracks <= 0)
1097                 return -EIO;
1098         if (ntracks > MAX_TRACKS)
1099                 ntracks = MAX_TRACKS;
1100
1101         /* now read the whole schmeer */
1102         stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1103                                   (char *)&toc->hdr,
1104                                    sizeof(struct atapi_toc_header) +
1105                                    (ntracks + 1) *
1106                                    sizeof(struct atapi_toc_entry), sense);
1107
1108         if (stat && toc->hdr.first_track > 1) {
1109                 /*
1110                  * Cds with CDI tracks only don't have any TOC entries, despite
1111                  * of this the returned values are
1112                  * first_track == last_track = number of CDI tracks + 1,
1113                  * so that this case is indistinguishable from the same layout
1114                  * plus an additional audio track. If we get an error for the
1115                  * regular case, we assume a CDI without additional audio
1116                  * tracks. In this case the readable TOC is empty (CDI tracks
1117                  * are not included) and only holds the Leadout entry.
1118                  *
1119                  * Heiko Eißfeldt.
1120                  */
1121                 ntracks = 0;
1122                 stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1123                                            (char *)&toc->hdr,
1124                                            sizeof(struct atapi_toc_header) +
1125                                            (ntracks + 1) *
1126                                            sizeof(struct atapi_toc_entry),
1127                                            sense);
1128                 if (stat)
1129                         return stat;
1130
1131                 if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1132                         toc->hdr.first_track = (u8)bin2bcd(CDROM_LEADOUT);
1133                         toc->hdr.last_track = (u8)bin2bcd(CDROM_LEADOUT);
1134                 } else {
1135                         toc->hdr.first_track = CDROM_LEADOUT;
1136                         toc->hdr.last_track = CDROM_LEADOUT;
1137                 }
1138         }
1139
1140         if (stat)
1141                 return stat;
1142
1143         toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1144
1145         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1146                 toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1147                 toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1148         }
1149
1150         for (i = 0; i <= ntracks; i++) {
1151                 if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1152                         if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD)
1153                                 toc->ent[i].track = bcd2bin(toc->ent[i].track);
1154                         msf_from_bcd(&toc->ent[i].addr.msf);
1155                 }
1156                 toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1157                                                   toc->ent[i].addr.msf.second,
1158                                                   toc->ent[i].addr.msf.frame);
1159         }
1160
1161         if (toc->hdr.first_track != CDROM_LEADOUT) {
1162                 /* read the multisession information */
1163                 stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1164                                            sizeof(ms_tmp), sense);
1165                 if (stat)
1166                         return stat;
1167
1168                 toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1169         } else {
1170                 ms_tmp.hdr.last_track = CDROM_LEADOUT;
1171                 ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1172                 toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1173         }
1174
1175         if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1176                 /* re-read multisession information using MSF format */
1177                 stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1178                                            sizeof(ms_tmp), sense);
1179                 if (stat)
1180                         return stat;
1181
1182                 msf_from_bcd(&ms_tmp.ent.addr.msf);
1183                 toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1184                                                    ms_tmp.ent.addr.msf.second,
1185                                                    ms_tmp.ent.addr.msf.frame);
1186         }
1187
1188         toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1189
1190         /* now try to get the total cdrom capacity */
1191         stat = cdrom_get_last_written(cdi, &last_written);
1192         if (!stat && (last_written > toc->capacity)) {
1193                 toc->capacity = last_written;
1194                 set_capacity(info->disk, toc->capacity * sectors_per_frame);
1195                 drive->probed_capacity = toc->capacity * sectors_per_frame;
1196         }
1197
1198         /* Remember that we've read this stuff. */
1199         drive->atapi_flags |= IDE_AFLAG_TOC_VALID;
1200
1201         return 0;
1202 }
1203
1204 int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1205 {
1206         struct cdrom_info *info = drive->driver_data;
1207         struct cdrom_device_info *cdi = &info->devinfo;
1208         struct packet_command cgc;
1209         int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1210
1211         ide_debug_log(IDE_DBG_FUNC, "enter");
1212
1213         if ((drive->atapi_flags & IDE_AFLAG_FULL_CAPS_PAGE) == 0)
1214                 size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1215
1216         init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1217         do {
1218                 /* we seem to get stat=0x01,err=0x00 the first time (??) */
1219                 stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1220                 if (!stat)
1221                         break;
1222         } while (--attempts);
1223         return stat;
1224 }
1225
1226 void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1227 {
1228         struct cdrom_info *cd = drive->driver_data;
1229         u16 curspeed, maxspeed;
1230
1231         ide_debug_log(IDE_DBG_FUNC, "enter");
1232
1233         if (drive->atapi_flags & IDE_AFLAG_LE_SPEED_FIELDS) {
1234                 curspeed = le16_to_cpup((__le16 *)&buf[8 + 14]);
1235                 maxspeed = le16_to_cpup((__le16 *)&buf[8 + 8]);
1236         } else {
1237                 curspeed = be16_to_cpup((__be16 *)&buf[8 + 14]);
1238                 maxspeed = be16_to_cpup((__be16 *)&buf[8 + 8]);
1239         }
1240
1241         ide_debug_log(IDE_DBG_PROBE, "curspeed: %u, maxspeed: %u",
1242                                      curspeed, maxspeed);
1243
1244         cd->current_speed = (curspeed + (176/2)) / 176;
1245         cd->max_speed = (maxspeed + (176/2)) / 176;
1246 }
1247
1248 #define IDE_CD_CAPABILITIES \
1249         (CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1250          CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1251          CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1252          CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1253          CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1254
1255 static struct cdrom_device_ops ide_cdrom_dops = {
1256         .open                   = ide_cdrom_open_real,
1257         .release                = ide_cdrom_release_real,
1258         .drive_status           = ide_cdrom_drive_status,
1259         .media_changed          = ide_cdrom_check_media_change_real,
1260         .tray_move              = ide_cdrom_tray_move,
1261         .lock_door              = ide_cdrom_lock_door,
1262         .select_speed           = ide_cdrom_select_speed,
1263         .get_last_session       = ide_cdrom_get_last_session,
1264         .get_mcn                = ide_cdrom_get_mcn,
1265         .reset                  = ide_cdrom_reset,
1266         .audio_ioctl            = ide_cdrom_audio_ioctl,
1267         .capability             = IDE_CD_CAPABILITIES,
1268         .generic_packet         = ide_cdrom_packet,
1269 };
1270
1271 static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1272 {
1273         struct cdrom_info *info = drive->driver_data;
1274         struct cdrom_device_info *devinfo = &info->devinfo;
1275
1276         ide_debug_log(IDE_DBG_PROBE, "nslots: %d", nslots);
1277
1278         devinfo->ops = &ide_cdrom_dops;
1279         devinfo->speed = info->current_speed;
1280         devinfo->capacity = nslots;
1281         devinfo->handle = drive;
1282         strcpy(devinfo->name, drive->name);
1283
1284         if (drive->atapi_flags & IDE_AFLAG_NO_SPEED_SELECT)
1285                 devinfo->mask |= CDC_SELECT_SPEED;
1286
1287         devinfo->disk = info->disk;
1288         return register_cdrom(devinfo);
1289 }
1290
1291 static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1292 {
1293         struct cdrom_info *cd = drive->driver_data;
1294         struct cdrom_device_info *cdi = &cd->devinfo;
1295         u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1296         mechtype_t mechtype;
1297         int nslots = 1;
1298
1299         ide_debug_log(IDE_DBG_PROBE, "media: 0x%x, atapi_flags: 0x%lx",
1300                                      drive->media, drive->atapi_flags);
1301
1302         cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1303                      CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1304                      CDC_MO_DRIVE | CDC_RAM);
1305
1306         if (drive->media == ide_optical) {
1307                 cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1308                 printk(KERN_ERR PFX "%s: ATAPI magneto-optical drive\n",
1309                                 drive->name);
1310                 return nslots;
1311         }
1312
1313         if (drive->atapi_flags & IDE_AFLAG_PRE_ATAPI12) {
1314                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1315                 cdi->mask &= ~CDC_PLAY_AUDIO;
1316                 return nslots;
1317         }
1318
1319         /*
1320          * We have to cheat a little here. the packet will eventually be queued
1321          * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1322          * Since this device hasn't been registered with the Uniform layer yet,
1323          * it can't do this. Same goes for cdi->ops.
1324          */
1325         cdi->handle = drive;
1326         cdi->ops = &ide_cdrom_dops;
1327
1328         if (ide_cdrom_get_capabilities(drive, buf))
1329                 return 0;
1330
1331         if ((buf[8 + 6] & 0x01) == 0)
1332                 drive->dev_flags &= ~IDE_DFLAG_DOORLOCKING;
1333         if (buf[8 + 6] & 0x08)
1334                 drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1335         if (buf[8 + 3] & 0x01)
1336                 cdi->mask &= ~CDC_CD_R;
1337         if (buf[8 + 3] & 0x02)
1338                 cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1339         if (buf[8 + 2] & 0x38)
1340                 cdi->mask &= ~CDC_DVD;
1341         if (buf[8 + 3] & 0x20)
1342                 cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1343         if (buf[8 + 3] & 0x10)
1344                 cdi->mask &= ~CDC_DVD_R;
1345         if ((buf[8 + 4] & 0x01) || (drive->atapi_flags & IDE_AFLAG_PLAY_AUDIO_OK))
1346                 cdi->mask &= ~CDC_PLAY_AUDIO;
1347
1348         mechtype = buf[8 + 6] >> 5;
1349         if (mechtype == mechtype_caddy ||
1350             mechtype == mechtype_popup ||
1351             (drive->atapi_flags & IDE_AFLAG_NO_AUTOCLOSE))
1352                 cdi->mask |= CDC_CLOSE_TRAY;
1353
1354         if (cdi->sanyo_slot > 0) {
1355                 cdi->mask &= ~CDC_SELECT_DISC;
1356                 nslots = 3;
1357         } else if (mechtype == mechtype_individual_changer ||
1358                    mechtype == mechtype_cartridge_changer) {
1359                 nslots = cdrom_number_of_slots(cdi);
1360                 if (nslots > 1)
1361                         cdi->mask &= ~CDC_SELECT_DISC;
1362         }
1363
1364         ide_cdrom_update_speed(drive, buf);
1365
1366         printk(KERN_INFO PFX "%s: ATAPI", drive->name);
1367
1368         /* don't print speed if the drive reported 0 */
1369         if (cd->max_speed)
1370                 printk(KERN_CONT " %dX", cd->max_speed);
1371
1372         printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1373
1374         if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1375                 printk(KERN_CONT " DVD%s%s",
1376                                  (cdi->mask & CDC_DVD_R) ? "" : "-R",
1377                                  (cdi->mask & CDC_DVD_RAM) ? "" : "/RAM");
1378
1379         if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1380                 printk(KERN_CONT " CD%s%s",
1381                                  (cdi->mask & CDC_CD_R) ? "" : "-R",
1382                                  (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1383
1384         if ((cdi->mask & CDC_SELECT_DISC) == 0)
1385                 printk(KERN_CONT " changer w/%d slots", nslots);
1386         else
1387                 printk(KERN_CONT " drive");
1388
1389         printk(KERN_CONT ", %dkB Cache\n",
1390                          be16_to_cpup((__be16 *)&buf[8 + 12]));
1391
1392         return nslots;
1393 }
1394
1395 /* standard prep_rq_fn that builds 10 byte cmds */
1396 static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1397 {
1398         int hard_sect = queue_hardsect_size(q);
1399         long block = (long)rq->hard_sector / (hard_sect >> 9);
1400         unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1401
1402         memset(rq->cmd, 0, BLK_MAX_CDB);
1403
1404         if (rq_data_dir(rq) == READ)
1405                 rq->cmd[0] = GPCMD_READ_10;
1406         else
1407                 rq->cmd[0] = GPCMD_WRITE_10;
1408
1409         /*
1410          * fill in lba
1411          */
1412         rq->cmd[2] = (block >> 24) & 0xff;
1413         rq->cmd[3] = (block >> 16) & 0xff;
1414         rq->cmd[4] = (block >>  8) & 0xff;
1415         rq->cmd[5] = block & 0xff;
1416
1417         /*
1418          * and transfer length
1419          */
1420         rq->cmd[7] = (blocks >> 8) & 0xff;
1421         rq->cmd[8] = blocks & 0xff;
1422         rq->cmd_len = 10;
1423         return BLKPREP_OK;
1424 }
1425
1426 /*
1427  * Most of the SCSI commands are supported directly by ATAPI devices.
1428  * This transform handles the few exceptions.
1429  */
1430 static int ide_cdrom_prep_pc(struct request *rq)
1431 {
1432         u8 *c = rq->cmd;
1433
1434         /* transform 6-byte read/write commands to the 10-byte version */
1435         if (c[0] == READ_6 || c[0] == WRITE_6) {
1436                 c[8] = c[4];
1437                 c[5] = c[3];
1438                 c[4] = c[2];
1439                 c[3] = c[1] & 0x1f;
1440                 c[2] = 0;
1441                 c[1] &= 0xe0;
1442                 c[0] += (READ_10 - READ_6);
1443                 rq->cmd_len = 10;
1444                 return BLKPREP_OK;
1445         }
1446
1447         /*
1448          * it's silly to pretend we understand 6-byte sense commands, just
1449          * reject with ILLEGAL_REQUEST and the caller should take the
1450          * appropriate action
1451          */
1452         if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1453                 rq->errors = ILLEGAL_REQUEST;
1454                 return BLKPREP_KILL;
1455         }
1456
1457         return BLKPREP_OK;
1458 }
1459
1460 static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1461 {
1462         if (blk_fs_request(rq))
1463                 return ide_cdrom_prep_fs(q, rq);
1464         else if (blk_pc_request(rq))
1465                 return ide_cdrom_prep_pc(rq);
1466
1467         return 0;
1468 }
1469
1470 struct cd_list_entry {
1471         const char      *id_model;
1472         const char      *id_firmware;
1473         unsigned int    cd_flags;
1474 };
1475
1476 #ifdef CONFIG_IDE_PROC_FS
1477 static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1478 {
1479         unsigned long capacity, sectors_per_frame;
1480
1481         if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1482                 return 0;
1483
1484         return capacity * sectors_per_frame;
1485 }
1486
1487 static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1488                                         int count, int *eof, void *data)
1489 {
1490         ide_drive_t *drive = data;
1491         int len;
1492
1493         len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1494         PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1495 }
1496
1497 static ide_proc_entry_t idecd_proc[] = {
1498         { "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1499         { NULL, 0, NULL, NULL }
1500 };
1501
1502 static ide_proc_entry_t *ide_cd_proc_entries(ide_drive_t *drive)
1503 {
1504         return idecd_proc;
1505 }
1506
1507 static const struct ide_proc_devset *ide_cd_proc_devsets(ide_drive_t *drive)
1508 {
1509         return NULL;
1510 }
1511 #endif
1512
1513 static const struct cd_list_entry ide_cd_quirks_list[] = {
1514         /* SCR-3231 doesn't support the SET_CD_SPEED command. */
1515         { "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_AFLAG_NO_SPEED_SELECT       },
1516         /* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1517         { "NEC CD-ROM DRIVE:260",    "1.01", IDE_AFLAG_TOCADDR_AS_BCD |
1518                                              IDE_AFLAG_PRE_ATAPI12,          },
1519         /* Vertos 300, some versions of this drive like to talk BCD. */
1520         { "V003S0DS",                NULL,   IDE_AFLAG_VERTOS_300_SSD,       },
1521         /* Vertos 600 ESD. */
1522         { "V006E0DS",                NULL,   IDE_AFLAG_VERTOS_600_ESD,       },
1523         /*
1524          * Sanyo 3 CD changer uses a non-standard command for CD changing
1525          * (by default standard ATAPI support for CD changers is used).
1526          */
1527         { "CD-ROM CDR-C3 G",         NULL,   IDE_AFLAG_SANYO_3CD             },
1528         { "CD-ROM CDR-C3G",          NULL,   IDE_AFLAG_SANYO_3CD             },
1529         { "CD-ROM CDR_C36",          NULL,   IDE_AFLAG_SANYO_3CD             },
1530         /* Stingray 8X CD-ROM. */
1531         { "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_AFLAG_PRE_ATAPI12 },
1532         /*
1533          * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1534          * mode sense page capabilities size, but older drives break.
1535          */
1536         { "ATAPI CD ROM DRIVE 50X MAX", NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1537         { "WPI CDS-32X",                NULL,   IDE_AFLAG_FULL_CAPS_PAGE     },
1538         /* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1539         { "",                        "241N", IDE_AFLAG_LE_SPEED_FIELDS       },
1540         /*
1541          * Some drives used by Apple don't advertise audio play
1542          * but they do support reading TOC & audio datas.
1543          */
1544         { "MATSHITADVD-ROM SR-8187", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1545         { "MATSHITADVD-ROM SR-8186", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1546         { "MATSHITADVD-ROM SR-8176", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1547         { "MATSHITADVD-ROM SR-8174", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1548         { "Optiarc DVD RW AD-5200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1549         { "Optiarc DVD RW AD-7200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK         },
1550         { "Optiarc DVD RW AD-7543A", NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1551         { "TEAC CD-ROM CD-224E",     NULL,   IDE_AFLAG_NO_AUTOCLOSE          },
1552         { NULL, NULL, 0 }
1553 };
1554
1555 static unsigned int ide_cd_flags(u16 *id)
1556 {
1557         const struct cd_list_entry *cle = ide_cd_quirks_list;
1558
1559         while (cle->id_model) {
1560                 if (strcmp(cle->id_model, (char *)&id[ATA_ID_PROD]) == 0 &&
1561                     (cle->id_firmware == NULL ||
1562                      strstr((char *)&id[ATA_ID_FW_REV], cle->id_firmware)))
1563                         return cle->cd_flags;
1564                 cle++;
1565         }
1566
1567         return 0;
1568 }
1569
1570 static int ide_cdrom_setup(ide_drive_t *drive)
1571 {
1572         struct cdrom_info *cd = drive->driver_data;
1573         struct cdrom_device_info *cdi = &cd->devinfo;
1574         struct request_queue *q = drive->queue;
1575         u16 *id = drive->id;
1576         char *fw_rev = (char *)&id[ATA_ID_FW_REV];
1577         int nslots;
1578
1579         ide_debug_log(IDE_DBG_PROBE, "enter");
1580
1581         blk_queue_prep_rq(q, ide_cdrom_prep_fn);
1582         blk_queue_dma_alignment(q, 31);
1583         blk_queue_update_dma_pad(q, 15);
1584
1585         q->unplug_delay = max((1 * HZ) / 1000, 1);
1586
1587         drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
1588         drive->atapi_flags = IDE_AFLAG_NO_EJECT | ide_cd_flags(id);
1589
1590         if ((drive->atapi_flags & IDE_AFLAG_VERTOS_300_SSD) &&
1591             fw_rev[4] == '1' && fw_rev[6] <= '2')
1592                 drive->atapi_flags |= (IDE_AFLAG_TOCTRACKS_AS_BCD |
1593                                      IDE_AFLAG_TOCADDR_AS_BCD);
1594         else if ((drive->atapi_flags & IDE_AFLAG_VERTOS_600_ESD) &&
1595                  fw_rev[4] == '1' && fw_rev[6] <= '2')
1596                 drive->atapi_flags |= IDE_AFLAG_TOCTRACKS_AS_BCD;
1597         else if (drive->atapi_flags & IDE_AFLAG_SANYO_3CD)
1598                 /* 3 => use CD in slot 0 */
1599                 cdi->sanyo_slot = 3;
1600
1601         nslots = ide_cdrom_probe_capabilities(drive);
1602
1603         blk_queue_hardsect_size(q, CD_FRAMESIZE);
1604
1605         if (ide_cdrom_register(drive, nslots)) {
1606                 printk(KERN_ERR PFX "%s: %s failed to register device with the"
1607                                 " cdrom driver.\n", drive->name, __func__);
1608                 cd->devinfo.handle = NULL;
1609                 return 1;
1610         }
1611
1612         ide_proc_register_driver(drive, cd->driver);
1613         return 0;
1614 }
1615
1616 static void ide_cd_remove(ide_drive_t *drive)
1617 {
1618         struct cdrom_info *info = drive->driver_data;
1619
1620         ide_debug_log(IDE_DBG_FUNC, "enter");
1621
1622         ide_proc_unregister_driver(drive, info->driver);
1623         device_del(&info->dev);
1624         del_gendisk(info->disk);
1625
1626         mutex_lock(&idecd_ref_mutex);
1627         put_device(&info->dev);
1628         mutex_unlock(&idecd_ref_mutex);
1629 }
1630
1631 static void ide_cd_release(struct device *dev)
1632 {
1633         struct cdrom_info *info = to_ide_drv(dev, cdrom_info);
1634         struct cdrom_device_info *devinfo = &info->devinfo;
1635         ide_drive_t *drive = info->drive;
1636         struct gendisk *g = info->disk;
1637
1638         ide_debug_log(IDE_DBG_FUNC, "enter");
1639
1640         kfree(info->toc);
1641         if (devinfo->handle == drive)
1642                 unregister_cdrom(devinfo);
1643         drive->driver_data = NULL;
1644         blk_queue_prep_rq(drive->queue, NULL);
1645         g->private_data = NULL;
1646         put_disk(g);
1647         kfree(info);
1648 }
1649
1650 static int ide_cd_probe(ide_drive_t *);
1651
1652 static struct ide_driver ide_cdrom_driver = {
1653         .gen_driver = {
1654                 .owner          = THIS_MODULE,
1655                 .name           = "ide-cdrom",
1656                 .bus            = &ide_bus_type,
1657         },
1658         .probe                  = ide_cd_probe,
1659         .remove                 = ide_cd_remove,
1660         .version                = IDECD_VERSION,
1661         .do_request             = ide_cd_do_request,
1662 #ifdef CONFIG_IDE_PROC_FS
1663         .proc_entries           = ide_cd_proc_entries,
1664         .proc_devsets           = ide_cd_proc_devsets,
1665 #endif
1666 };
1667
1668 static int idecd_open(struct block_device *bdev, fmode_t mode)
1669 {
1670         struct cdrom_info *info = ide_cd_get(bdev->bd_disk);
1671         int rc = -ENOMEM;
1672
1673         if (!info)
1674                 return -ENXIO;
1675
1676         rc = cdrom_open(&info->devinfo, bdev, mode);
1677
1678         if (rc < 0)
1679                 ide_cd_put(info);
1680
1681         return rc;
1682 }
1683
1684 static int idecd_release(struct gendisk *disk, fmode_t mode)
1685 {
1686         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1687
1688         cdrom_release(&info->devinfo, mode);
1689
1690         ide_cd_put(info);
1691
1692         return 0;
1693 }
1694
1695 static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
1696 {
1697         struct packet_command cgc;
1698         char buffer[16];
1699         int stat;
1700         char spindown;
1701
1702         if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
1703                 return -EFAULT;
1704
1705         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
1706
1707         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
1708         if (stat)
1709                 return stat;
1710
1711         buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
1712         return cdrom_mode_select(cdi, &cgc);
1713 }
1714
1715 static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
1716 {
1717         struct packet_command cgc;
1718         char buffer[16];
1719         int stat;
1720         char spindown;
1721
1722         init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
1723
1724         stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
1725         if (stat)
1726                 return stat;
1727
1728         spindown = buffer[11] & 0x0f;
1729         if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
1730                 return -EFAULT;
1731         return 0;
1732 }
1733
1734 static int idecd_ioctl(struct block_device *bdev, fmode_t mode,
1735                         unsigned int cmd, unsigned long arg)
1736 {
1737         struct cdrom_info *info = ide_drv_g(bdev->bd_disk, cdrom_info);
1738         int err;
1739
1740         switch (cmd) {
1741         case CDROMSETSPINDOWN:
1742                 return idecd_set_spindown(&info->devinfo, arg);
1743         case CDROMGETSPINDOWN:
1744                 return idecd_get_spindown(&info->devinfo, arg);
1745         default:
1746                 break;
1747         }
1748
1749         err = generic_ide_ioctl(info->drive, bdev, cmd, arg);
1750         if (err == -EINVAL)
1751                 err = cdrom_ioctl(&info->devinfo, bdev, mode, cmd, arg);
1752
1753         return err;
1754 }
1755
1756 static int idecd_media_changed(struct gendisk *disk)
1757 {
1758         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1759         return cdrom_media_changed(&info->devinfo);
1760 }
1761
1762 static int idecd_revalidate_disk(struct gendisk *disk)
1763 {
1764         struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
1765         struct request_sense sense;
1766
1767         ide_cd_read_toc(info->drive, &sense);
1768
1769         return  0;
1770 }
1771
1772 static struct block_device_operations idecd_ops = {
1773         .owner                  = THIS_MODULE,
1774         .open                   = idecd_open,
1775         .release                = idecd_release,
1776         .locked_ioctl           = idecd_ioctl,
1777         .media_changed          = idecd_media_changed,
1778         .revalidate_disk        = idecd_revalidate_disk
1779 };
1780
1781 /* module options */
1782 static unsigned long debug_mask;
1783 module_param(debug_mask, ulong, 0644);
1784
1785 MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
1786
1787 static int ide_cd_probe(ide_drive_t *drive)
1788 {
1789         struct cdrom_info *info;
1790         struct gendisk *g;
1791         struct request_sense sense;
1792
1793         ide_debug_log(IDE_DBG_PROBE, "driver_req: %s, media: 0x%x",
1794                                      drive->driver_req, drive->media);
1795
1796         if (!strstr("ide-cdrom", drive->driver_req))
1797                 goto failed;
1798
1799         if (drive->media != ide_cdrom && drive->media != ide_optical)
1800                 goto failed;
1801
1802         drive->debug_mask = debug_mask;
1803         drive->irq_handler = cdrom_newpc_intr;
1804
1805         info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
1806         if (info == NULL) {
1807                 printk(KERN_ERR PFX "%s: Can't allocate a cdrom structure\n",
1808                                 drive->name);
1809                 goto failed;
1810         }
1811
1812         g = alloc_disk(1 << PARTN_BITS);
1813         if (!g)
1814                 goto out_free_cd;
1815
1816         ide_init_disk(g, drive);
1817
1818         info->dev.parent = &drive->gendev;
1819         info->dev.release = ide_cd_release;
1820         dev_set_name(&info->dev, dev_name(&drive->gendev));
1821
1822         if (device_register(&info->dev))
1823                 goto out_free_disk;
1824
1825         info->drive = drive;
1826         info->driver = &ide_cdrom_driver;
1827         info->disk = g;
1828
1829         g->private_data = &info->driver;
1830
1831         drive->driver_data = info;
1832
1833         g->minors = 1;
1834         g->driverfs_dev = &drive->gendev;
1835         g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
1836         if (ide_cdrom_setup(drive)) {
1837                 put_device(&info->dev);
1838                 goto failed;
1839         }
1840
1841         ide_cd_read_toc(drive, &sense);
1842         g->fops = &idecd_ops;
1843         g->flags |= GENHD_FL_REMOVABLE;
1844         add_disk(g);
1845         return 0;
1846
1847 out_free_disk:
1848         put_disk(g);
1849 out_free_cd:
1850         kfree(info);
1851 failed:
1852         return -ENODEV;
1853 }
1854
1855 static void __exit ide_cdrom_exit(void)
1856 {
1857         driver_unregister(&ide_cdrom_driver.gen_driver);
1858 }
1859
1860 static int __init ide_cdrom_init(void)
1861 {
1862         printk(KERN_INFO DRV_NAME " driver " IDECD_VERSION "\n");
1863         return driver_register(&ide_cdrom_driver.gen_driver);
1864 }
1865
1866 MODULE_ALIAS("ide:*m-cdrom*");
1867 MODULE_ALIAS("ide-cd");
1868 module_init(ide_cdrom_init);
1869 module_exit(ide_cdrom_exit);
1870 MODULE_LICENSE("GPL");