Merge branch 'core/stacktrace' of git://git.kernel.org/pub/scm/linux/kernel/git/tip...
[linux-2.6] / drivers / ide / ide-taskfile.c
1 /*
2  *  Copyright (C) 2000-2002        Michael Cornwell <cornwell@acm.org>
3  *  Copyright (C) 2000-2002        Andre Hedrick <andre@linux-ide.org>
4  *  Copyright (C) 2001-2002        Klaus Smolin
5  *                                      IBM Storage Technology Division
6  *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
7  *
8  *  The big the bad and the ugly.
9  */
10
11 #include <linux/module.h>
12 #include <linux/types.h>
13 #include <linux/string.h>
14 #include <linux/kernel.h>
15 #include <linux/timer.h>
16 #include <linux/mm.h>
17 #include <linux/sched.h>
18 #include <linux/interrupt.h>
19 #include <linux/major.h>
20 #include <linux/errno.h>
21 #include <linux/genhd.h>
22 #include <linux/blkpg.h>
23 #include <linux/slab.h>
24 #include <linux/pci.h>
25 #include <linux/delay.h>
26 #include <linux/hdreg.h>
27 #include <linux/ide.h>
28 #include <linux/bitops.h>
29 #include <linux/scatterlist.h>
30
31 #include <asm/byteorder.h>
32 #include <asm/irq.h>
33 #include <asm/uaccess.h>
34 #include <asm/io.h>
35
36 void ide_tf_dump(const char *s, struct ide_taskfile *tf)
37 {
38 #ifdef DEBUG
39         printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
40                 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
41                 s, tf->feature, tf->nsect, tf->lbal,
42                 tf->lbam, tf->lbah, tf->device, tf->command);
43         printk("%s: hob: nsect 0x%02x lbal 0x%02x "
44                 "lbam 0x%02x lbah 0x%02x\n",
45                 s, tf->hob_nsect, tf->hob_lbal,
46                 tf->hob_lbam, tf->hob_lbah);
47 #endif
48 }
49
50 int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
51 {
52         ide_task_t args;
53
54         memset(&args, 0, sizeof(ide_task_t));
55         args.tf.nsect = 0x01;
56         if (drive->media == ide_disk)
57                 args.tf.command = WIN_IDENTIFY;
58         else
59                 args.tf.command = WIN_PIDENTIFY;
60         args.tf_flags   = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
61         args.data_phase = TASKFILE_IN;
62         return ide_raw_taskfile(drive, &args, buf, 1);
63 }
64
65 static int inline task_dma_ok(ide_task_t *task)
66 {
67         if (blk_fs_request(task->rq) || (task->tf_flags & IDE_TFLAG_FLAGGED))
68                 return 1;
69
70         switch (task->tf.command) {
71                 case WIN_WRITEDMA_ONCE:
72                 case WIN_WRITEDMA:
73                 case WIN_WRITEDMA_EXT:
74                 case WIN_READDMA_ONCE:
75                 case WIN_READDMA:
76                 case WIN_READDMA_EXT:
77                 case WIN_IDENTIFY_DMA:
78                         return 1;
79         }
80
81         return 0;
82 }
83
84 static ide_startstop_t task_no_data_intr(ide_drive_t *);
85 static ide_startstop_t set_geometry_intr(ide_drive_t *);
86 static ide_startstop_t recal_intr(ide_drive_t *);
87 static ide_startstop_t set_multmode_intr(ide_drive_t *);
88 static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct request *);
89 static ide_startstop_t task_in_intr(ide_drive_t *);
90
91 ide_startstop_t do_rw_taskfile (ide_drive_t *drive, ide_task_t *task)
92 {
93         ide_hwif_t *hwif        = HWIF(drive);
94         struct ide_taskfile *tf = &task->tf;
95         ide_handler_t *handler = NULL;
96         const struct ide_dma_ops *dma_ops = hwif->dma_ops;
97
98         if (task->data_phase == TASKFILE_MULTI_IN ||
99             task->data_phase == TASKFILE_MULTI_OUT) {
100                 if (!drive->mult_count) {
101                         printk(KERN_ERR "%s: multimode not set!\n",
102                                         drive->name);
103                         return ide_stopped;
104                 }
105         }
106
107         if (task->tf_flags & IDE_TFLAG_FLAGGED)
108                 task->tf_flags |= IDE_TFLAG_FLAGGED_SET_IN_FLAGS;
109
110         if ((task->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
111                 ide_tf_dump(drive->name, tf);
112                 hwif->tf_load(drive, task);
113         }
114
115         switch (task->data_phase) {
116         case TASKFILE_MULTI_OUT:
117         case TASKFILE_OUT:
118                 hwif->OUTBSYNC(drive, tf->command, hwif->io_ports.command_addr);
119                 ndelay(400);    /* FIXME */
120                 return pre_task_out_intr(drive, task->rq);
121         case TASKFILE_MULTI_IN:
122         case TASKFILE_IN:
123                 handler = task_in_intr;
124                 /* fall-through */
125         case TASKFILE_NO_DATA:
126                 if (handler == NULL)
127                         handler = task_no_data_intr;
128                 /* WIN_{SPECIFY,RESTORE,SETMULT} use custom handlers */
129                 if (task->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) {
130                         switch (tf->command) {
131                         case WIN_SPECIFY: handler = set_geometry_intr;  break;
132                         case WIN_RESTORE: handler = recal_intr;         break;
133                         case WIN_SETMULT: handler = set_multmode_intr;  break;
134                         }
135                 }
136                 ide_execute_command(drive, tf->command, handler,
137                                     WAIT_WORSTCASE, NULL);
138                 return ide_started;
139         default:
140                 if (task_dma_ok(task) == 0 || drive->using_dma == 0 ||
141                     dma_ops->dma_setup(drive))
142                         return ide_stopped;
143                 dma_ops->dma_exec_cmd(drive, tf->command);
144                 dma_ops->dma_start(drive);
145                 return ide_started;
146         }
147 }
148 EXPORT_SYMBOL_GPL(do_rw_taskfile);
149
150 /*
151  * set_multmode_intr() is invoked on completion of a WIN_SETMULT cmd.
152  */
153 static ide_startstop_t set_multmode_intr(ide_drive_t *drive)
154 {
155         u8 stat = ide_read_status(drive);
156
157         if (OK_STAT(stat, READY_STAT, BAD_STAT))
158                 drive->mult_count = drive->mult_req;
159         else {
160                 drive->mult_req = drive->mult_count = 0;
161                 drive->special.b.recalibrate = 1;
162                 (void) ide_dump_status(drive, "set_multmode", stat);
163         }
164         return ide_stopped;
165 }
166
167 /*
168  * set_geometry_intr() is invoked on completion of a WIN_SPECIFY cmd.
169  */
170 static ide_startstop_t set_geometry_intr(ide_drive_t *drive)
171 {
172         int retries = 5;
173         u8 stat;
174
175         while (((stat = ide_read_status(drive)) & BUSY_STAT) && retries--)
176                 udelay(10);
177
178         if (OK_STAT(stat, READY_STAT, BAD_STAT))
179                 return ide_stopped;
180
181         if (stat & (ERR_STAT|DRQ_STAT))
182                 return ide_error(drive, "set_geometry_intr", stat);
183
184         BUG_ON(HWGROUP(drive)->handler != NULL);
185         ide_set_handler(drive, &set_geometry_intr, WAIT_WORSTCASE, NULL);
186         return ide_started;
187 }
188
189 /*
190  * recal_intr() is invoked on completion of a WIN_RESTORE (recalibrate) cmd.
191  */
192 static ide_startstop_t recal_intr(ide_drive_t *drive)
193 {
194         u8 stat = ide_read_status(drive);
195
196         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
197                 return ide_error(drive, "recal_intr", stat);
198         return ide_stopped;
199 }
200
201 /*
202  * Handler for commands without a data phase
203  */
204 static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
205 {
206         ide_task_t *args        = HWGROUP(drive)->rq->special;
207         u8 stat;
208
209         local_irq_enable_in_hardirq();
210         stat = ide_read_status(drive);
211
212         if (!OK_STAT(stat, READY_STAT, BAD_STAT))
213                 return ide_error(drive, "task_no_data_intr", stat);
214                 /* calls ide_end_drive_cmd */
215
216         if (args)
217                 ide_end_drive_cmd(drive, stat, ide_read_error(drive));
218
219         return ide_stopped;
220 }
221
222 static u8 wait_drive_not_busy(ide_drive_t *drive)
223 {
224         int retries;
225         u8 stat;
226
227         /*
228          * Last sector was transfered, wait until device is ready.  This can
229          * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
230          */
231         for (retries = 0; retries < 1000; retries++) {
232                 stat = ide_read_status(drive);
233
234                 if (stat & BUSY_STAT)
235                         udelay(10);
236                 else
237                         break;
238         }
239
240         if (stat & BUSY_STAT)
241                 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);
242
243         return stat;
244 }
245
246 static void ide_pio_sector(ide_drive_t *drive, struct request *rq,
247                            unsigned int write)
248 {
249         ide_hwif_t *hwif = drive->hwif;
250         struct scatterlist *sg = hwif->sg_table;
251         struct scatterlist *cursg = hwif->cursg;
252         struct page *page;
253 #ifdef CONFIG_HIGHMEM
254         unsigned long flags;
255 #endif
256         unsigned int offset;
257         u8 *buf;
258
259         cursg = hwif->cursg;
260         if (!cursg) {
261                 cursg = sg;
262                 hwif->cursg = sg;
263         }
264
265         page = sg_page(cursg);
266         offset = cursg->offset + hwif->cursg_ofs * SECTOR_SIZE;
267
268         /* get the current page and offset */
269         page = nth_page(page, (offset >> PAGE_SHIFT));
270         offset %= PAGE_SIZE;
271
272 #ifdef CONFIG_HIGHMEM
273         local_irq_save(flags);
274 #endif
275         buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
276
277         hwif->nleft--;
278         hwif->cursg_ofs++;
279
280         if ((hwif->cursg_ofs * SECTOR_SIZE) == cursg->length) {
281                 hwif->cursg = sg_next(hwif->cursg);
282                 hwif->cursg_ofs = 0;
283         }
284
285         /* do the actual data transfer */
286         if (write)
287                 hwif->output_data(drive, rq, buf, SECTOR_SIZE);
288         else
289                 hwif->input_data(drive, rq, buf, SECTOR_SIZE);
290
291         kunmap_atomic(buf, KM_BIO_SRC_IRQ);
292 #ifdef CONFIG_HIGHMEM
293         local_irq_restore(flags);
294 #endif
295 }
296
297 static void ide_pio_multi(ide_drive_t *drive, struct request *rq,
298                           unsigned int write)
299 {
300         unsigned int nsect;
301
302         nsect = min_t(unsigned int, drive->hwif->nleft, drive->mult_count);
303         while (nsect--)
304                 ide_pio_sector(drive, rq, write);
305 }
306
307 static void ide_pio_datablock(ide_drive_t *drive, struct request *rq,
308                                      unsigned int write)
309 {
310         u8 saved_io_32bit = drive->io_32bit;
311
312         if (rq->bio)    /* fs request */
313                 rq->errors = 0;
314
315         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
316                 ide_task_t *task = rq->special;
317
318                 if (task->tf_flags & IDE_TFLAG_IO_16BIT)
319                         drive->io_32bit = 0;
320         }
321
322         touch_softlockup_watchdog();
323
324         switch (drive->hwif->data_phase) {
325         case TASKFILE_MULTI_IN:
326         case TASKFILE_MULTI_OUT:
327                 ide_pio_multi(drive, rq, write);
328                 break;
329         default:
330                 ide_pio_sector(drive, rq, write);
331                 break;
332         }
333
334         drive->io_32bit = saved_io_32bit;
335 }
336
337 static ide_startstop_t task_error(ide_drive_t *drive, struct request *rq,
338                                   const char *s, u8 stat)
339 {
340         if (rq->bio) {
341                 ide_hwif_t *hwif = drive->hwif;
342                 int sectors = hwif->nsect - hwif->nleft;
343
344                 switch (hwif->data_phase) {
345                 case TASKFILE_IN:
346                         if (hwif->nleft)
347                                 break;
348                         /* fall through */
349                 case TASKFILE_OUT:
350                         sectors--;
351                         break;
352                 case TASKFILE_MULTI_IN:
353                         if (hwif->nleft)
354                                 break;
355                         /* fall through */
356                 case TASKFILE_MULTI_OUT:
357                         sectors -= drive->mult_count;
358                 default:
359                         break;
360                 }
361
362                 if (sectors > 0) {
363                         ide_driver_t *drv;
364
365                         drv = *(ide_driver_t **)rq->rq_disk->private_data;
366                         drv->end_request(drive, 1, sectors);
367                 }
368         }
369         return ide_error(drive, s, stat);
370 }
371
372 void task_end_request(ide_drive_t *drive, struct request *rq, u8 stat)
373 {
374         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
375                 u8 err = ide_read_error(drive);
376
377                 ide_end_drive_cmd(drive, stat, err);
378                 return;
379         }
380
381         if (rq->rq_disk) {
382                 ide_driver_t *drv;
383
384                 drv = *(ide_driver_t **)rq->rq_disk->private_data;;
385                 drv->end_request(drive, 1, rq->nr_sectors);
386         } else
387                 ide_end_request(drive, 1, rq->nr_sectors);
388 }
389
390 /*
391  * We got an interrupt on a task_in case, but no errors and no DRQ.
392  *
393  * It might be a spurious irq (shared irq), but it might be a
394  * command that had no output.
395  */
396 static ide_startstop_t task_in_unexpected(ide_drive_t *drive, struct request *rq, u8 stat)
397 {
398         /* Command all done? */
399         if (OK_STAT(stat, READY_STAT, BUSY_STAT)) {
400                 task_end_request(drive, rq, stat);
401                 return ide_stopped;
402         }
403
404         /* Assume it was a spurious irq */
405         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
406         return ide_started;
407 }
408
409 /*
410  * Handler for command with PIO data-in phase (Read/Read Multiple).
411  */
412 static ide_startstop_t task_in_intr(ide_drive_t *drive)
413 {
414         ide_hwif_t *hwif = drive->hwif;
415         struct request *rq = HWGROUP(drive)->rq;
416         u8 stat = ide_read_status(drive);
417
418         /* Error? */
419         if (stat & ERR_STAT)
420                 return task_error(drive, rq, __func__, stat);
421
422         /* Didn't want any data? Odd. */
423         if (!(stat & DRQ_STAT))
424                 return task_in_unexpected(drive, rq, stat);
425
426         ide_pio_datablock(drive, rq, 0);
427
428         /* Are we done? Check status and finish transfer. */
429         if (!hwif->nleft) {
430                 stat = wait_drive_not_busy(drive);
431                 if (!OK_STAT(stat, 0, BAD_STAT))
432                         return task_error(drive, rq, __func__, stat);
433                 task_end_request(drive, rq, stat);
434                 return ide_stopped;
435         }
436
437         /* Still data left to transfer. */
438         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
439
440         return ide_started;
441 }
442
443 /*
444  * Handler for command with PIO data-out phase (Write/Write Multiple).
445  */
446 static ide_startstop_t task_out_intr (ide_drive_t *drive)
447 {
448         ide_hwif_t *hwif = drive->hwif;
449         struct request *rq = HWGROUP(drive)->rq;
450         u8 stat = ide_read_status(drive);
451
452         if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
453                 return task_error(drive, rq, __func__, stat);
454
455         /* Deal with unexpected ATA data phase. */
456         if (((stat & DRQ_STAT) == 0) ^ !hwif->nleft)
457                 return task_error(drive, rq, __func__, stat);
458
459         if (!hwif->nleft) {
460                 task_end_request(drive, rq, stat);
461                 return ide_stopped;
462         }
463
464         /* Still data left to transfer. */
465         ide_pio_datablock(drive, rq, 1);
466         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
467
468         return ide_started;
469 }
470
471 static ide_startstop_t pre_task_out_intr(ide_drive_t *drive, struct request *rq)
472 {
473         ide_startstop_t startstop;
474
475         if (ide_wait_stat(&startstop, drive, DRQ_STAT,
476                           drive->bad_wstat, WAIT_DRQ)) {
477                 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
478                                 drive->name,
479                                 drive->hwif->data_phase ? "MULT" : "",
480                                 drive->addressing ? "_EXT" : "");
481                 return startstop;
482         }
483
484         if (!drive->unmask)
485                 local_irq_disable();
486
487         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
488         ide_pio_datablock(drive, rq, 1);
489
490         return ide_started;
491 }
492
493 int ide_raw_taskfile(ide_drive_t *drive, ide_task_t *task, u8 *buf, u16 nsect)
494 {
495         struct request rq;
496
497         blk_rq_init(NULL, &rq);
498         rq.cmd_type = REQ_TYPE_ATA_TASKFILE;
499         rq.buffer = buf;
500
501         /*
502          * (ks) We transfer currently only whole sectors.
503          * This is suffient for now.  But, it would be great,
504          * if we would find a solution to transfer any size.
505          * To support special commands like READ LONG.
506          */
507         rq.hard_nr_sectors = rq.nr_sectors = nsect;
508         rq.hard_cur_sectors = rq.current_nr_sectors = nsect;
509
510         if (task->tf_flags & IDE_TFLAG_WRITE)
511                 rq.cmd_flags |= REQ_RW;
512
513         rq.special = task;
514         task->rq = &rq;
515
516         return ide_do_drive_cmd(drive, &rq, ide_wait);
517 }
518
519 EXPORT_SYMBOL(ide_raw_taskfile);
520
521 int ide_no_data_taskfile(ide_drive_t *drive, ide_task_t *task)
522 {
523         task->data_phase = TASKFILE_NO_DATA;
524
525         return ide_raw_taskfile(drive, task, NULL, 0);
526 }
527 EXPORT_SYMBOL_GPL(ide_no_data_taskfile);
528
529 #ifdef CONFIG_IDE_TASK_IOCTL
530 int ide_taskfile_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
531 {
532         ide_task_request_t      *req_task;
533         ide_task_t              args;
534         u8 *outbuf              = NULL;
535         u8 *inbuf               = NULL;
536         u8 *data_buf            = NULL;
537         int err                 = 0;
538         int tasksize            = sizeof(struct ide_task_request_s);
539         unsigned int taskin     = 0;
540         unsigned int taskout    = 0;
541         u16 nsect               = 0;
542         char __user *buf = (char __user *)arg;
543
544 //      printk("IDE Taskfile ...\n");
545
546         req_task = kzalloc(tasksize, GFP_KERNEL);
547         if (req_task == NULL) return -ENOMEM;
548         if (copy_from_user(req_task, buf, tasksize)) {
549                 kfree(req_task);
550                 return -EFAULT;
551         }
552
553         taskout = req_task->out_size;
554         taskin  = req_task->in_size;
555         
556         if (taskin > 65536 || taskout > 65536) {
557                 err = -EINVAL;
558                 goto abort;
559         }
560
561         if (taskout) {
562                 int outtotal = tasksize;
563                 outbuf = kzalloc(taskout, GFP_KERNEL);
564                 if (outbuf == NULL) {
565                         err = -ENOMEM;
566                         goto abort;
567                 }
568                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
569                         err = -EFAULT;
570                         goto abort;
571                 }
572         }
573
574         if (taskin) {
575                 int intotal = tasksize + taskout;
576                 inbuf = kzalloc(taskin, GFP_KERNEL);
577                 if (inbuf == NULL) {
578                         err = -ENOMEM;
579                         goto abort;
580                 }
581                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
582                         err = -EFAULT;
583                         goto abort;
584                 }
585         }
586
587         memset(&args, 0, sizeof(ide_task_t));
588
589         memcpy(&args.tf_array[0], req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
590         memcpy(&args.tf_array[6], req_task->io_ports, HDIO_DRIVE_TASK_HDR_SIZE);
591
592         args.data_phase = req_task->data_phase;
593
594         args.tf_flags = IDE_TFLAG_IO_16BIT | IDE_TFLAG_DEVICE |
595                         IDE_TFLAG_IN_TF;
596         if (drive->addressing == 1)
597                 args.tf_flags |= (IDE_TFLAG_LBA48 | IDE_TFLAG_IN_HOB);
598
599         if (req_task->out_flags.all) {
600                 args.tf_flags |= IDE_TFLAG_FLAGGED;
601
602                 if (req_task->out_flags.b.data)
603                         args.tf_flags |= IDE_TFLAG_OUT_DATA;
604
605                 if (req_task->out_flags.b.nsector_hob)
606                         args.tf_flags |= IDE_TFLAG_OUT_HOB_NSECT;
607                 if (req_task->out_flags.b.sector_hob)
608                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAL;
609                 if (req_task->out_flags.b.lcyl_hob)
610                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAM;
611                 if (req_task->out_flags.b.hcyl_hob)
612                         args.tf_flags |= IDE_TFLAG_OUT_HOB_LBAH;
613
614                 if (req_task->out_flags.b.error_feature)
615                         args.tf_flags |= IDE_TFLAG_OUT_FEATURE;
616                 if (req_task->out_flags.b.nsector)
617                         args.tf_flags |= IDE_TFLAG_OUT_NSECT;
618                 if (req_task->out_flags.b.sector)
619                         args.tf_flags |= IDE_TFLAG_OUT_LBAL;
620                 if (req_task->out_flags.b.lcyl)
621                         args.tf_flags |= IDE_TFLAG_OUT_LBAM;
622                 if (req_task->out_flags.b.hcyl)
623                         args.tf_flags |= IDE_TFLAG_OUT_LBAH;
624         } else {
625                 args.tf_flags |= IDE_TFLAG_OUT_TF;
626                 if (args.tf_flags & IDE_TFLAG_LBA48)
627                         args.tf_flags |= IDE_TFLAG_OUT_HOB;
628         }
629
630         if (req_task->in_flags.b.data)
631                 args.tf_flags |= IDE_TFLAG_IN_DATA;
632
633         switch(req_task->data_phase) {
634                 case TASKFILE_MULTI_OUT:
635                         if (!drive->mult_count) {
636                                 /* (hs): give up if multcount is not set */
637                                 printk(KERN_ERR "%s: %s Multimode Write " \
638                                         "multcount is not set\n",
639                                         drive->name, __func__);
640                                 err = -EPERM;
641                                 goto abort;
642                         }
643                         /* fall through */
644                 case TASKFILE_OUT:
645                         /* fall through */
646                 case TASKFILE_OUT_DMAQ:
647                 case TASKFILE_OUT_DMA:
648                         nsect = taskout / SECTOR_SIZE;
649                         data_buf = outbuf;
650                         break;
651                 case TASKFILE_MULTI_IN:
652                         if (!drive->mult_count) {
653                                 /* (hs): give up if multcount is not set */
654                                 printk(KERN_ERR "%s: %s Multimode Read failure " \
655                                         "multcount is not set\n",
656                                         drive->name, __func__);
657                                 err = -EPERM;
658                                 goto abort;
659                         }
660                         /* fall through */
661                 case TASKFILE_IN:
662                         /* fall through */
663                 case TASKFILE_IN_DMAQ:
664                 case TASKFILE_IN_DMA:
665                         nsect = taskin / SECTOR_SIZE;
666                         data_buf = inbuf;
667                         break;
668                 case TASKFILE_NO_DATA:
669                         break;
670                 default:
671                         err = -EFAULT;
672                         goto abort;
673         }
674
675         if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
676                 nsect = 0;
677         else if (!nsect) {
678                 nsect = (args.tf.hob_nsect << 8) | args.tf.nsect;
679
680                 if (!nsect) {
681                         printk(KERN_ERR "%s: in/out command without data\n",
682                                         drive->name);
683                         err = -EFAULT;
684                         goto abort;
685                 }
686         }
687
688         if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE)
689                 args.tf_flags |= IDE_TFLAG_WRITE;
690
691         err = ide_raw_taskfile(drive, &args, data_buf, nsect);
692
693         memcpy(req_task->hob_ports, &args.tf_array[0], HDIO_DRIVE_HOB_HDR_SIZE - 2);
694         memcpy(req_task->io_ports, &args.tf_array[6], HDIO_DRIVE_TASK_HDR_SIZE);
695
696         if ((args.tf_flags & IDE_TFLAG_FLAGGED_SET_IN_FLAGS) &&
697             req_task->in_flags.all == 0) {
698                 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
699                 if (drive->addressing == 1)
700                         req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
701         }
702
703         if (copy_to_user(buf, req_task, tasksize)) {
704                 err = -EFAULT;
705                 goto abort;
706         }
707         if (taskout) {
708                 int outtotal = tasksize;
709                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
710                         err = -EFAULT;
711                         goto abort;
712                 }
713         }
714         if (taskin) {
715                 int intotal = tasksize + taskout;
716                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
717                         err = -EFAULT;
718                         goto abort;
719                 }
720         }
721 abort:
722         kfree(req_task);
723         kfree(outbuf);
724         kfree(inbuf);
725
726 //      printk("IDE Taskfile ioctl ended. rc = %i\n", err);
727
728         return err;
729 }
730 #endif
731
732 int ide_cmd_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
733 {
734         u8 *buf = NULL;
735         int bufsize = 0, err = 0;
736         u8 args[4], xfer_rate = 0;
737         ide_task_t tfargs;
738         struct ide_taskfile *tf = &tfargs.tf;
739         struct hd_driveid *id = drive->id;
740
741         if (NULL == (void *) arg) {
742                 struct request rq;
743
744                 ide_init_drive_cmd(&rq);
745                 rq.cmd_type = REQ_TYPE_ATA_TASKFILE;
746
747                 return ide_do_drive_cmd(drive, &rq, ide_wait);
748         }
749
750         if (copy_from_user(args, (void __user *)arg, 4))
751                 return -EFAULT;
752
753         memset(&tfargs, 0, sizeof(ide_task_t));
754         tf->feature = args[2];
755         if (args[0] == WIN_SMART) {
756                 tf->nsect = args[3];
757                 tf->lbal  = args[1];
758                 tf->lbam  = 0x4f;
759                 tf->lbah  = 0xc2;
760                 tfargs.tf_flags = IDE_TFLAG_OUT_TF | IDE_TFLAG_IN_NSECT;
761         } else {
762                 tf->nsect = args[1];
763                 tfargs.tf_flags = IDE_TFLAG_OUT_FEATURE |
764                                   IDE_TFLAG_OUT_NSECT | IDE_TFLAG_IN_NSECT;
765         }
766         tf->command = args[0];
767         tfargs.data_phase = args[3] ? TASKFILE_IN : TASKFILE_NO_DATA;
768
769         if (args[3]) {
770                 tfargs.tf_flags |= IDE_TFLAG_IO_16BIT;
771                 bufsize = SECTOR_WORDS * 4 * args[3];
772                 buf = kzalloc(bufsize, GFP_KERNEL);
773                 if (buf == NULL)
774                         return -ENOMEM;
775         }
776
777         if (tf->command == WIN_SETFEATURES &&
778             tf->feature == SETFEATURES_XFER &&
779             tf->nsect >= XFER_SW_DMA_0 &&
780             (id->dma_ultra || id->dma_mword || id->dma_1word)) {
781                 xfer_rate = args[1];
782                 if (tf->nsect > XFER_UDMA_2 && !eighty_ninty_three(drive)) {
783                         printk(KERN_WARNING "%s: UDMA speeds >UDMA33 cannot "
784                                             "be set\n", drive->name);
785                         goto abort;
786                 }
787         }
788
789         err = ide_raw_taskfile(drive, &tfargs, buf, args[3]);
790
791         args[0] = tf->status;
792         args[1] = tf->error;
793         args[2] = tf->nsect;
794
795         if (!err && xfer_rate) {
796                 /* active-retuning-calls future */
797                 ide_set_xfer_rate(drive, xfer_rate);
798                 ide_driveid_update(drive);
799         }
800 abort:
801         if (copy_to_user((void __user *)arg, &args, 4))
802                 err = -EFAULT;
803         if (buf) {
804                 if (copy_to_user((void __user *)(arg + 4), buf, bufsize))
805                         err = -EFAULT;
806                 kfree(buf);
807         }
808         return err;
809 }
810
811 int ide_task_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
812 {
813         void __user *p = (void __user *)arg;
814         int err = 0;
815         u8 args[7];
816         ide_task_t task;
817
818         if (copy_from_user(args, p, 7))
819                 return -EFAULT;
820
821         memset(&task, 0, sizeof(task));
822         memcpy(&task.tf_array[7], &args[1], 6);
823         task.tf.command = args[0];
824         task.tf_flags = IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
825
826         err = ide_no_data_taskfile(drive, &task);
827
828         args[0] = task.tf.command;
829         memcpy(&args[1], &task.tf_array[7], 6);
830
831         if (copy_to_user(p, args, 7))
832                 err = -EFAULT;
833
834         return err;
835 }