ide-cd.c revision 6ea52226ca131a99bb619bd56fbeee566ea5a966
1/*
2 * ATAPI CD-ROM driver.
3 *
4 * Copyright (C) 1994-1996   Scott Snyder <snyder@fnald0.fnal.gov>
5 * Copyright (C) 1996-1998   Erik Andersen <andersee@debian.org>
6 * Copyright (C) 1998-2000   Jens Axboe <axboe@suse.de>
7 * Copyright (C) 2005, 2007  Bartlomiej Zolnierkiewicz
8 *
9 * May be copied or modified under the terms of the GNU General Public
10 * License.  See linux/COPYING for more information.
11 *
12 * See Documentation/cdrom/ide-cd for usage information.
13 *
14 * Suggestions are welcome. Patches that work are more welcome though. ;-)
15 * For those wishing to work on this driver, please be sure you download
16 * and comply with the latest Mt. Fuji (SFF8090 version 4) and ATAPI
17 * (SFF-8020i rev 2.6) standards. These documents can be obtained by
18 * anonymous ftp from:
19 * ftp://fission.dt.wdc.com/pub/standards/SFF_atapi/spec/SFF8020-r2.6/PS/8020r26.ps
20 * ftp://ftp.avc-pioneer.com/Mtfuji4/Spec/Fuji4r10.pdf
21 *
22 * For historical changelog please see:
23 *	Documentation/ide/ChangeLog.ide-cd.1994-2004
24 */
25
26#define DRV_NAME "ide-cd"
27#define PFX DRV_NAME ": "
28
29#define IDECD_VERSION "5.00"
30
31#include <linux/module.h>
32#include <linux/types.h>
33#include <linux/kernel.h>
34#include <linux/delay.h>
35#include <linux/timer.h>
36#include <linux/slab.h>
37#include <linux/interrupt.h>
38#include <linux/errno.h>
39#include <linux/cdrom.h>
40#include <linux/ide.h>
41#include <linux/completion.h>
42#include <linux/mutex.h>
43#include <linux/bcd.h>
44
45/* For SCSI -> ATAPI command conversion */
46#include <scsi/scsi.h>
47
48#include <linux/irq.h>
49#include <linux/io.h>
50#include <asm/byteorder.h>
51#include <linux/uaccess.h>
52#include <asm/unaligned.h>
53
54#include "ide-cd.h"
55
56#define IDECD_DEBUG_LOG		1
57
58#if IDECD_DEBUG_LOG
59#define ide_debug_log(lvl, fmt, args...) __ide_debug_log(lvl, fmt, args)
60#else
61#define ide_debug_log(lvl, fmt, args...) do {} while (0)
62#endif
63
64static DEFINE_MUTEX(idecd_ref_mutex);
65
66static void ide_cd_release(struct kref *);
67
68static struct cdrom_info *ide_cd_get(struct gendisk *disk)
69{
70	struct cdrom_info *cd = NULL;
71
72	mutex_lock(&idecd_ref_mutex);
73	cd = ide_drv_g(disk, cdrom_info);
74	if (cd) {
75		if (ide_device_get(cd->drive))
76			cd = NULL;
77		else
78			kref_get(&cd->kref);
79
80	}
81	mutex_unlock(&idecd_ref_mutex);
82	return cd;
83}
84
85static void ide_cd_put(struct cdrom_info *cd)
86{
87	ide_drive_t *drive = cd->drive;
88
89	mutex_lock(&idecd_ref_mutex);
90	kref_put(&cd->kref, ide_cd_release);
91	ide_device_put(drive);
92	mutex_unlock(&idecd_ref_mutex);
93}
94
95/*
96 * Generic packet command support and error handling routines.
97 */
98
99/* Mark that we've seen a media change and invalidate our internal buffers. */
100static void cdrom_saw_media_change(ide_drive_t *drive)
101{
102	drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
103	drive->atapi_flags &= ~IDE_AFLAG_TOC_VALID;
104}
105
106static int cdrom_log_sense(ide_drive_t *drive, struct request *rq,
107			   struct request_sense *sense)
108{
109	int log = 0;
110
111	ide_debug_log(IDE_DBG_SENSE, "Call %s, sense_key: 0x%x\n", __func__,
112		      sense->sense_key);
113
114	if (!sense || !rq || (rq->cmd_flags & REQ_QUIET))
115		return 0;
116
117	switch (sense->sense_key) {
118	case NO_SENSE:
119	case RECOVERED_ERROR:
120		break;
121	case NOT_READY:
122		/*
123		 * don't care about tray state messages for e.g. capacity
124		 * commands or in-progress or becoming ready
125		 */
126		if (sense->asc == 0x3a || sense->asc == 0x04)
127			break;
128		log = 1;
129		break;
130	case ILLEGAL_REQUEST:
131		/*
132		 * don't log START_STOP unit with LoEj set, since we cannot
133		 * reliably check if drive can auto-close
134		 */
135		if (rq->cmd[0] == GPCMD_START_STOP_UNIT && sense->asc == 0x24)
136			break;
137		log = 1;
138		break;
139	case UNIT_ATTENTION:
140		/*
141		 * Make good and sure we've seen this potential media change.
142		 * Some drives (i.e. Creative) fail to present the correct sense
143		 * key in the error register.
144		 */
145		cdrom_saw_media_change(drive);
146		break;
147	default:
148		log = 1;
149		break;
150	}
151	return log;
152}
153
154static void cdrom_analyze_sense_data(ide_drive_t *drive,
155			      struct request *failed_command,
156			      struct request_sense *sense)
157{
158	unsigned long sector;
159	unsigned long bio_sectors;
160	struct cdrom_info *info = drive->driver_data;
161
162	ide_debug_log(IDE_DBG_SENSE, "Call %s, error_code: 0x%x, "
163			"sense_key: 0x%x\n", __func__, sense->error_code,
164			sense->sense_key);
165
166	if (failed_command)
167		ide_debug_log(IDE_DBG_SENSE, "%s: failed cmd: 0x%x\n",
168				__func__, failed_command->cmd[0]);
169
170	if (!cdrom_log_sense(drive, failed_command, sense))
171		return;
172
173	/*
174	 * If a read toc is executed for a CD-R or CD-RW medium where the first
175	 * toc has not been recorded yet, it will fail with 05/24/00 (which is a
176	 * confusing error)
177	 */
178	if (failed_command && failed_command->cmd[0] == GPCMD_READ_TOC_PMA_ATIP)
179		if (sense->sense_key == 0x05 && sense->asc == 0x24)
180			return;
181
182	/* current error */
183	if (sense->error_code == 0x70) {
184		switch (sense->sense_key) {
185		case MEDIUM_ERROR:
186		case VOLUME_OVERFLOW:
187		case ILLEGAL_REQUEST:
188			if (!sense->valid)
189				break;
190			if (failed_command == NULL ||
191					!blk_fs_request(failed_command))
192				break;
193			sector = (sense->information[0] << 24) |
194				 (sense->information[1] << 16) |
195				 (sense->information[2] <<  8) |
196				 (sense->information[3]);
197
198			if (drive->queue->hardsect_size == 2048)
199				/* device sector size is 2K */
200				sector <<= 2;
201
202			bio_sectors = max(bio_sectors(failed_command->bio), 4U);
203			sector &= ~(bio_sectors - 1);
204
205			if (sector < get_capacity(info->disk) &&
206			    drive->probed_capacity - sector < 4 * 75)
207				set_capacity(info->disk, sector);
208		}
209	}
210
211	ide_cd_log_error(drive->name, failed_command, sense);
212}
213
214static void cdrom_queue_request_sense(ide_drive_t *drive, void *sense,
215				      struct request *failed_command)
216{
217	struct cdrom_info *info		= drive->driver_data;
218	struct request *rq		= &info->request_sense_request;
219
220	ide_debug_log(IDE_DBG_SENSE, "Call %s\n", __func__);
221
222	if (sense == NULL)
223		sense = &info->sense_data;
224
225	/* stuff the sense request in front of our current request */
226	blk_rq_init(NULL, rq);
227	rq->cmd_type = REQ_TYPE_ATA_PC;
228	rq->rq_disk = info->disk;
229
230	rq->data = sense;
231	rq->cmd[0] = GPCMD_REQUEST_SENSE;
232	rq->cmd[4] = 18;
233	rq->data_len = 18;
234
235	rq->cmd_type = REQ_TYPE_SENSE;
236	rq->cmd_flags |= REQ_PREEMPT;
237
238	/* NOTE! Save the failed command in "rq->buffer" */
239	rq->buffer = (void *) failed_command;
240
241	if (failed_command)
242		ide_debug_log(IDE_DBG_SENSE, "failed_cmd: 0x%x\n",
243			      failed_command->cmd[0]);
244
245	ide_do_drive_cmd(drive, rq);
246}
247
248static void cdrom_end_request(ide_drive_t *drive, int uptodate)
249{
250	struct request *rq = HWGROUP(drive)->rq;
251	int nsectors = rq->hard_cur_sectors;
252
253	ide_debug_log(IDE_DBG_FUNC, "Call %s, cmd: 0x%x, uptodate: 0x%x, "
254		      "nsectors: %d\n", __func__, rq->cmd[0], uptodate,
255		      nsectors);
256
257	if (blk_sense_request(rq) && uptodate) {
258		/*
259		 * For REQ_TYPE_SENSE, "rq->buffer" points to the original
260		 * failed request
261		 */
262		struct request *failed = (struct request *) rq->buffer;
263		struct cdrom_info *info = drive->driver_data;
264		void *sense = &info->sense_data;
265
266		if (failed) {
267			if (failed->sense) {
268				sense = failed->sense;
269				failed->sense_len = rq->sense_len;
270			}
271			cdrom_analyze_sense_data(drive, failed, sense);
272			/*
273			 * now end the failed request
274			 */
275			if (blk_fs_request(failed)) {
276				if (ide_end_dequeued_request(drive, failed, 0,
277						failed->hard_nr_sectors))
278					BUG();
279			} else {
280				if (blk_end_request(failed, -EIO,
281						    failed->data_len))
282					BUG();
283			}
284		} else
285			cdrom_analyze_sense_data(drive, NULL, sense);
286	}
287
288	if (!rq->current_nr_sectors && blk_fs_request(rq))
289		uptodate = 1;
290	/* make sure it's fully ended */
291	if (blk_pc_request(rq))
292		nsectors = (rq->data_len + 511) >> 9;
293	if (!nsectors)
294		nsectors = 1;
295
296	ide_debug_log(IDE_DBG_FUNC, "Exit %s, uptodate: 0x%x, nsectors: %d\n",
297		      __func__, uptodate, nsectors);
298
299	ide_end_request(drive, uptodate, nsectors);
300}
301
302static void ide_dump_status_no_sense(ide_drive_t *drive, const char *msg, u8 st)
303{
304	if (st & 0x80)
305		return;
306	ide_dump_status(drive, msg, st);
307}
308
309/*
310 * Returns:
311 * 0: if the request should be continued.
312 * 1: if the request was ended.
313 */
314static int cdrom_decode_status(ide_drive_t *drive, int good_stat, int *stat_ret)
315{
316	ide_hwif_t *hwif = drive->hwif;
317	ide_hwgroup_t *hwgroup = hwif->hwgroup;
318	struct request *rq = hwgroup->rq;
319	int stat, err, sense_key;
320
321	/* check for errors */
322	stat = hwif->tp_ops->read_status(hwif);
323
324	if (stat_ret)
325		*stat_ret = stat;
326
327	if (OK_STAT(stat, good_stat, BAD_R_STAT))
328		return 0;
329
330	/* get the IDE error register */
331	err = ide_read_error(drive);
332	sense_key = err >> 4;
333
334	if (rq == NULL) {
335		printk(KERN_ERR PFX "%s: missing rq in %s\n",
336				drive->name, __func__);
337		return 1;
338	}
339
340	ide_debug_log(IDE_DBG_RQ, "%s: stat: 0x%x, good_stat: 0x%x, "
341		      "rq->cmd[0]: 0x%x, rq->cmd_type: 0x%x, err: 0x%x\n",
342		      __func__, stat, good_stat, rq->cmd[0], rq->cmd_type, err);
343
344	if (blk_sense_request(rq)) {
345		/*
346		 * We got an error trying to get sense info from the drive
347		 * (probably while trying to recover from a former error).
348		 * Just give up.
349		 */
350		rq->cmd_flags |= REQ_FAILED;
351		cdrom_end_request(drive, 0);
352		ide_error(drive, "request sense failure", stat);
353		return 1;
354
355	} else if (blk_pc_request(rq) || rq->cmd_type == REQ_TYPE_ATA_PC) {
356		/* All other functions, except for READ. */
357
358		/*
359		 * if we have an error, pass back CHECK_CONDITION as the
360		 * scsi status byte
361		 */
362		if (blk_pc_request(rq) && !rq->errors)
363			rq->errors = SAM_STAT_CHECK_CONDITION;
364
365		/* check for tray open */
366		if (sense_key == NOT_READY) {
367			cdrom_saw_media_change(drive);
368		} else if (sense_key == UNIT_ATTENTION) {
369			/* check for media change */
370			cdrom_saw_media_change(drive);
371			return 0;
372		} else if (sense_key == ILLEGAL_REQUEST &&
373			   rq->cmd[0] == GPCMD_START_STOP_UNIT) {
374			/*
375			 * Don't print error message for this condition--
376			 * SFF8090i indicates that 5/24/00 is the correct
377			 * response to a request to close the tray if the
378			 * drive doesn't have that capability.
379			 * cdrom_log_sense() knows this!
380			 */
381		} else if (!(rq->cmd_flags & REQ_QUIET)) {
382			/* otherwise, print an error */
383			ide_dump_status(drive, "packet command error", stat);
384		}
385
386		rq->cmd_flags |= REQ_FAILED;
387
388		/*
389		 * instead of playing games with moving completions around,
390		 * remove failed request completely and end it when the
391		 * request sense has completed
392		 */
393		goto end_request;
394
395	} else if (blk_fs_request(rq)) {
396		int do_end_request = 0;
397
398		/* handle errors from READ and WRITE requests */
399
400		if (blk_noretry_request(rq))
401			do_end_request = 1;
402
403		if (sense_key == NOT_READY) {
404			/* tray open */
405			if (rq_data_dir(rq) == READ) {
406				cdrom_saw_media_change(drive);
407
408				/* fail the request */
409				printk(KERN_ERR PFX "%s: tray open\n",
410						drive->name);
411				do_end_request = 1;
412			} else {
413				struct cdrom_info *info = drive->driver_data;
414
415				/*
416				 * Allow the drive 5 seconds to recover, some
417				 * devices will return this error while flushing
418				 * data from cache.
419				 */
420				if (!rq->errors)
421					info->write_timeout = jiffies +
422							ATAPI_WAIT_WRITE_BUSY;
423				rq->errors = 1;
424				if (time_after(jiffies, info->write_timeout))
425					do_end_request = 1;
426				else {
427					struct request_queue *q = drive->queue;
428					unsigned long flags;
429
430					/*
431					 * take a breather relying on the unplug
432					 * timer to kick us again
433					 */
434					spin_lock_irqsave(q->queue_lock, flags);
435					blk_plug_device(q);
436					spin_unlock_irqrestore(q->queue_lock, flags);
437
438					return 1;
439				}
440			}
441		} else if (sense_key == UNIT_ATTENTION) {
442			/* media change */
443			cdrom_saw_media_change(drive);
444
445			/*
446			 * Arrange to retry the request but be sure to give up
447			 * if we've retried too many times.
448			 */
449			if (++rq->errors > ERROR_MAX)
450				do_end_request = 1;
451		} else if (sense_key == ILLEGAL_REQUEST ||
452			   sense_key == DATA_PROTECT) {
453			/*
454			 * No point in retrying after an illegal request or data
455			 * protect error.
456			 */
457			ide_dump_status_no_sense(drive, "command error", stat);
458			do_end_request = 1;
459		} else if (sense_key == MEDIUM_ERROR) {
460			/*
461			 * No point in re-trying a zillion times on a bad
462			 * sector. If we got here the error is not correctable.
463			 */
464			ide_dump_status_no_sense(drive,
465						 "media error (bad sector)",
466						 stat);
467			do_end_request = 1;
468		} else if (sense_key == BLANK_CHECK) {
469			/* disk appears blank ?? */
470			ide_dump_status_no_sense(drive, "media error (blank)",
471						 stat);
472			do_end_request = 1;
473		} else if ((err & ~ATA_ABORTED) != 0) {
474			/* go to the default handler for other errors */
475			ide_error(drive, "cdrom_decode_status", stat);
476			return 1;
477		} else if ((++rq->errors > ERROR_MAX)) {
478			/* we've racked up too many retries, abort */
479			do_end_request = 1;
480		}
481
482		/*
483		 * End a request through request sense analysis when we have
484		 * sense data. We need this in order to perform end of media
485		 * processing.
486		 */
487		if (do_end_request)
488			goto end_request;
489
490		/*
491		 * If we got a CHECK_CONDITION status, queue
492		 * a request sense command.
493		 */
494		if (stat & ATA_ERR)
495			cdrom_queue_request_sense(drive, NULL, NULL);
496	} else {
497		blk_dump_rq_flags(rq, PFX "bad rq");
498		cdrom_end_request(drive, 0);
499	}
500
501	/* retry, or handle the next request */
502	return 1;
503
504end_request:
505	if (stat & ATA_ERR) {
506		struct request_queue *q = drive->queue;
507		unsigned long flags;
508
509		spin_lock_irqsave(q->queue_lock, flags);
510		blkdev_dequeue_request(rq);
511		spin_unlock_irqrestore(q->queue_lock, flags);
512
513		hwgroup->rq = NULL;
514
515		cdrom_queue_request_sense(drive, rq->sense, rq);
516	} else
517		cdrom_end_request(drive, 0);
518
519	return 1;
520}
521
522static int cdrom_timer_expiry(ide_drive_t *drive)
523{
524	struct request *rq = HWGROUP(drive)->rq;
525	unsigned long wait = 0;
526
527	ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd[0]: 0x%x\n", __func__,
528		      rq->cmd[0]);
529
530	/*
531	 * Some commands are *slow* and normally take a long time to complete.
532	 * Usually we can use the ATAPI "disconnect" to bypass this, but not all
533	 * commands/drives support that. Let ide_timer_expiry keep polling us
534	 * for these.
535	 */
536	switch (rq->cmd[0]) {
537	case GPCMD_BLANK:
538	case GPCMD_FORMAT_UNIT:
539	case GPCMD_RESERVE_RZONE_TRACK:
540	case GPCMD_CLOSE_TRACK:
541	case GPCMD_FLUSH_CACHE:
542		wait = ATAPI_WAIT_PC;
543		break;
544	default:
545		if (!(rq->cmd_flags & REQ_QUIET))
546			printk(KERN_INFO PFX "cmd 0x%x timed out\n",
547					 rq->cmd[0]);
548		wait = 0;
549		break;
550	}
551	return wait;
552}
553
554/*
555 * Set up the device registers for transferring a packet command on DEV,
556 * expecting to later transfer XFERLEN bytes.  HANDLER is the routine
557 * which actually transfers the command to the drive.  If this is a
558 * drq_interrupt device, this routine will arrange for HANDLER to be
559 * called when the interrupt from the drive arrives.  Otherwise, HANDLER
560 * will be called immediately after the drive is prepared for the transfer.
561 */
562static ide_startstop_t cdrom_start_packet_command(ide_drive_t *drive,
563						  int xferlen,
564						  ide_handler_t *handler)
565{
566	ide_hwif_t *hwif = drive->hwif;
567
568	ide_debug_log(IDE_DBG_PC, "Call %s, xferlen: %d\n", __func__, xferlen);
569
570	/* FIXME: for Virtual DMA we must check harder */
571	if (drive->dma)
572		drive->dma = !hwif->dma_ops->dma_setup(drive);
573
574	/* set up the controller registers */
575	ide_pktcmd_tf_load(drive, IDE_TFLAG_OUT_NSECT | IDE_TFLAG_OUT_LBAL,
576			   xferlen, drive->dma);
577
578	if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
579		/* waiting for CDB interrupt, not DMA yet. */
580		if (drive->dma)
581			drive->waiting_for_dma = 0;
582
583		/* packet command */
584		ide_execute_command(drive, ATA_CMD_PACKET, handler,
585				    ATAPI_WAIT_PC, cdrom_timer_expiry);
586		return ide_started;
587	} else {
588		ide_execute_pkt_cmd(drive);
589
590		return (*handler) (drive);
591	}
592}
593
594/*
595 * Send a packet command to DRIVE described by CMD_BUF and CMD_LEN. The device
596 * registers must have already been prepared by cdrom_start_packet_command.
597 * HANDLER is the interrupt handler to call when the command completes or
598 * there's data ready.
599 */
600#define ATAPI_MIN_CDB_BYTES 12
601static ide_startstop_t cdrom_transfer_packet_command(ide_drive_t *drive,
602					  struct request *rq,
603					  ide_handler_t *handler)
604{
605	ide_hwif_t *hwif = drive->hwif;
606	int cmd_len;
607	ide_startstop_t startstop;
608
609	ide_debug_log(IDE_DBG_PC, "Call %s\n", __func__);
610
611	if (drive->atapi_flags & IDE_AFLAG_DRQ_INTERRUPT) {
612		/*
613		 * Here we should have been called after receiving an interrupt
614		 * from the device.  DRQ should how be set.
615		 */
616
617		/* check for errors */
618		if (cdrom_decode_status(drive, ATA_DRQ, NULL))
619			return ide_stopped;
620
621		/* ok, next interrupt will be DMA interrupt */
622		if (drive->dma)
623			drive->waiting_for_dma = 1;
624	} else {
625		/* otherwise, we must wait for DRQ to get set */
626		if (ide_wait_stat(&startstop, drive, ATA_DRQ,
627				  ATA_BUSY, WAIT_READY))
628			return startstop;
629	}
630
631	/* arm the interrupt handler */
632	ide_set_handler(drive, handler, rq->timeout, cdrom_timer_expiry);
633
634	/* ATAPI commands get padded out to 12 bytes minimum */
635	cmd_len = COMMAND_SIZE(rq->cmd[0]);
636	if (cmd_len < ATAPI_MIN_CDB_BYTES)
637		cmd_len = ATAPI_MIN_CDB_BYTES;
638
639	/* send the command to the device */
640	hwif->tp_ops->output_data(drive, NULL, rq->cmd, cmd_len);
641
642	/* start the DMA if need be */
643	if (drive->dma)
644		hwif->dma_ops->dma_start(drive);
645
646	return ide_started;
647}
648
649/*
650 * Check the contents of the interrupt reason register from the cdrom
651 * and attempt to recover if there are problems.  Returns  0 if everything's
652 * ok; nonzero if the request has been terminated.
653 */
654static int ide_cd_check_ireason(ide_drive_t *drive, struct request *rq,
655				int len, int ireason, int rw)
656{
657	ide_hwif_t *hwif = drive->hwif;
658
659	ide_debug_log(IDE_DBG_FUNC, "Call %s, ireason: 0x%x, rw: 0x%x\n",
660		      __func__, ireason, rw);
661
662	/*
663	 * ireason == 0: the drive wants to receive data from us
664	 * ireason == 2: the drive is expecting to transfer data to us
665	 */
666	if (ireason == (!rw << 1))
667		return 0;
668	else if (ireason == (rw << 1)) {
669
670		/* whoops... */
671		printk(KERN_ERR PFX "%s: %s: wrong transfer direction!\n",
672				drive->name, __func__);
673
674		ide_pad_transfer(drive, rw, len);
675	} else  if (rw == 0 && ireason == 1) {
676		/*
677		 * Some drives (ASUS) seem to tell us that status info is
678		 * available.  Just get it and ignore.
679		 */
680		(void)hwif->tp_ops->read_status(hwif);
681		return 0;
682	} else {
683		/* drive wants a command packet, or invalid ireason... */
684		printk(KERN_ERR PFX "%s: %s: bad interrupt reason 0x%02x\n",
685				drive->name, __func__, ireason);
686	}
687
688	if (rq->cmd_type == REQ_TYPE_ATA_PC)
689		rq->cmd_flags |= REQ_FAILED;
690
691	cdrom_end_request(drive, 0);
692	return -1;
693}
694
695/*
696 * Assume that the drive will always provide data in multiples of at least
697 * SECTOR_SIZE, as it gets hairy to keep track of the transfers otherwise.
698 */
699static int ide_cd_check_transfer_size(ide_drive_t *drive, int len)
700{
701	ide_debug_log(IDE_DBG_FUNC, "Call %s, len: %d\n", __func__, len);
702
703	if ((len % SECTOR_SIZE) == 0)
704		return 0;
705
706	printk(KERN_ERR PFX "%s: %s: Bad transfer size %d\n", drive->name,
707			__func__, len);
708
709	if (drive->atapi_flags & IDE_AFLAG_LIMIT_NFRAMES)
710		printk(KERN_ERR PFX "This drive is not supported by this "
711				"version of the driver\n");
712	else {
713		printk(KERN_ERR PFX "Trying to limit transfer sizes\n");
714		drive->atapi_flags |= IDE_AFLAG_LIMIT_NFRAMES;
715	}
716
717	return 1;
718}
719
720static ide_startstop_t cdrom_newpc_intr(ide_drive_t *);
721
722static ide_startstop_t ide_cd_prepare_rw_request(ide_drive_t *drive,
723						 struct request *rq)
724{
725	ide_debug_log(IDE_DBG_RQ, "Call %s: rq->cmd_flags: 0x%x\n", __func__,
726		      rq->cmd_flags);
727
728	if (rq_data_dir(rq) == READ) {
729		unsigned short sectors_per_frame =
730			queue_hardsect_size(drive->queue) >> SECTOR_BITS;
731		int nskip = rq->sector & (sectors_per_frame - 1);
732
733		/*
734		 * If the requested sector doesn't start on a frame boundary,
735		 * we must adjust the start of the transfer so that it does,
736		 * and remember to skip the first few sectors.
737		 *
738		 * If the rq->current_nr_sectors field is larger than the size
739		 * of the buffer, it will mean that we're to skip a number of
740		 * sectors equal to the amount by which rq->current_nr_sectors
741		 * is larger than the buffer size.
742		 */
743		if (nskip > 0) {
744			/* sanity check... */
745			if (rq->current_nr_sectors !=
746			    bio_cur_sectors(rq->bio)) {
747				printk(KERN_ERR PFX "%s: %s: buffer botch (%u)\n",
748						drive->name, __func__,
749						rq->current_nr_sectors);
750				cdrom_end_request(drive, 0);
751				return ide_stopped;
752			}
753			rq->current_nr_sectors += nskip;
754		}
755	}
756
757	/* set up the command */
758	rq->timeout = ATAPI_WAIT_PC;
759
760	return ide_started;
761}
762
763/*
764 * Routine to send a read/write packet command to the drive. This is usually
765 * called directly from cdrom_start_{read,write}(). However, for drq_interrupt
766 * devices, it is called from an interrupt when the drive is ready to accept
767 * the command.
768 */
769static ide_startstop_t cdrom_start_rw_cont(ide_drive_t *drive)
770{
771	struct request *rq = drive->hwif->hwgroup->rq;
772
773	/* send the command to the drive and return */
774	return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
775}
776
777#define IDECD_SEEK_THRESHOLD	(1000)			/* 1000 blocks */
778#define IDECD_SEEK_TIMER	(5 * WAIT_MIN_SLEEP)	/* 100 ms */
779#define IDECD_SEEK_TIMEOUT	(2 * WAIT_CMD)		/* 20 sec */
780
781static ide_startstop_t cdrom_seek_intr(ide_drive_t *drive)
782{
783	struct cdrom_info *info = drive->driver_data;
784	int stat;
785	static int retry = 10;
786
787	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
788
789	if (cdrom_decode_status(drive, 0, &stat))
790		return ide_stopped;
791
792	drive->atapi_flags |= IDE_AFLAG_SEEKING;
793
794	if (retry && time_after(jiffies, info->start_seek + IDECD_SEEK_TIMER)) {
795		if (--retry == 0)
796			drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
797	}
798	return ide_stopped;
799}
800
801static void ide_cd_prepare_seek_request(ide_drive_t *drive, struct request *rq)
802{
803	sector_t frame = rq->sector;
804
805	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
806
807	sector_div(frame, queue_hardsect_size(drive->queue) >> SECTOR_BITS);
808
809	memset(rq->cmd, 0, BLK_MAX_CDB);
810	rq->cmd[0] = GPCMD_SEEK;
811	put_unaligned(cpu_to_be32(frame), (unsigned int *) &rq->cmd[2]);
812
813	rq->timeout = ATAPI_WAIT_PC;
814}
815
816static ide_startstop_t cdrom_start_seek_continuation(ide_drive_t *drive)
817{
818	struct request *rq = drive->hwif->hwgroup->rq;
819
820	return cdrom_transfer_packet_command(drive, rq, &cdrom_seek_intr);
821}
822
823/*
824 * Fix up a possibly partially-processed request so that we can start it over
825 * entirely, or even put it back on the request queue.
826 */
827static void ide_cd_restore_request(ide_drive_t *drive, struct request *rq)
828{
829
830	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
831
832	if (rq->buffer != bio_data(rq->bio)) {
833		sector_t n =
834			(rq->buffer - (char *)bio_data(rq->bio)) / SECTOR_SIZE;
835
836		rq->buffer = bio_data(rq->bio);
837		rq->nr_sectors += n;
838		rq->sector -= n;
839	}
840	rq->current_nr_sectors = bio_cur_sectors(rq->bio);
841	rq->hard_cur_sectors = rq->current_nr_sectors;
842	rq->hard_nr_sectors = rq->nr_sectors;
843	rq->hard_sector = rq->sector;
844	rq->q->prep_rq_fn(rq->q, rq);
845}
846
847static void ide_cd_request_sense_fixup(ide_drive_t *drive, struct request *rq)
848{
849	ide_debug_log(IDE_DBG_FUNC, "Call %s, rq->cmd[0]: 0x%x\n",
850		      __func__, rq->cmd[0]);
851
852	/*
853	 * Some of the trailing request sense fields are optional,
854	 * and some drives don't send them.  Sigh.
855	 */
856	if (rq->cmd[0] == GPCMD_REQUEST_SENSE &&
857	    rq->data_len > 0 && rq->data_len <= 5)
858		while (rq->data_len > 0) {
859			*(u8 *)rq->data++ = 0;
860			--rq->data_len;
861		}
862}
863
864int ide_cd_queue_pc(ide_drive_t *drive, const unsigned char *cmd,
865		    int write, void *buffer, unsigned *bufflen,
866		    struct request_sense *sense, int timeout,
867		    unsigned int cmd_flags)
868{
869	struct cdrom_info *info = drive->driver_data;
870	struct request_sense local_sense;
871	int retries = 10;
872	unsigned int flags = 0;
873
874	if (!sense)
875		sense = &local_sense;
876
877	ide_debug_log(IDE_DBG_PC, "Call %s, cmd[0]: 0x%x, write: 0x%x, "
878		      "timeout: %d, cmd_flags: 0x%x\n", __func__, cmd[0], write,
879		      timeout, cmd_flags);
880
881	/* start of retry loop */
882	do {
883		struct request *rq;
884		int error;
885
886		rq = blk_get_request(drive->queue, write, __GFP_WAIT);
887
888		memcpy(rq->cmd, cmd, BLK_MAX_CDB);
889		rq->cmd_type = REQ_TYPE_ATA_PC;
890		rq->sense = sense;
891		rq->cmd_flags |= cmd_flags;
892		rq->timeout = timeout;
893		if (buffer) {
894			rq->data = buffer;
895			rq->data_len = *bufflen;
896		}
897
898		error = blk_execute_rq(drive->queue, info->disk, rq, 0);
899
900		if (buffer)
901			*bufflen = rq->data_len;
902
903		flags = rq->cmd_flags;
904		blk_put_request(rq);
905
906		/*
907		 * FIXME: we should probably abort/retry or something in case of
908		 * failure.
909		 */
910		if (flags & REQ_FAILED) {
911			/*
912			 * The request failed.  Retry if it was due to a unit
913			 * attention status (usually means media was changed).
914			 */
915			struct request_sense *reqbuf = sense;
916
917			if (reqbuf->sense_key == UNIT_ATTENTION)
918				cdrom_saw_media_change(drive);
919			else if (reqbuf->sense_key == NOT_READY &&
920				 reqbuf->asc == 4 && reqbuf->ascq != 4) {
921				/*
922				 * The drive is in the process of loading
923				 * a disk.  Retry, but wait a little to give
924				 * the drive time to complete the load.
925				 */
926				ssleep(2);
927			} else {
928				/* otherwise, don't retry */
929				retries = 0;
930			}
931			--retries;
932		}
933
934		/* end of retry loop */
935	} while ((flags & REQ_FAILED) && retries >= 0);
936
937	/* return an error if the command failed */
938	return (flags & REQ_FAILED) ? -EIO : 0;
939}
940
941/*
942 * Called from blk_end_request_callback() after the data of the request is
943 * completed and before the request itself is completed. By returning value '1',
944 * blk_end_request_callback() returns immediately without completing it.
945 */
946static int cdrom_newpc_intr_dummy_cb(struct request *rq)
947{
948	return 1;
949}
950
951static ide_startstop_t cdrom_newpc_intr(ide_drive_t *drive)
952{
953	ide_hwif_t *hwif = drive->hwif;
954	ide_hwgroup_t *hwgroup = hwif->hwgroup;
955	struct request *rq = hwgroup->rq;
956	xfer_func_t *xferfunc;
957	ide_expiry_t *expiry = NULL;
958	int dma_error = 0, dma, stat, thislen, uptodate = 0;
959	int write = (rq_data_dir(rq) == WRITE) ? 1 : 0;
960	unsigned int timeout;
961	u16 len;
962	u8 ireason;
963
964	ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x\n",
965		      __func__, rq->cmd[0], write);
966
967	/* check for errors */
968	dma = drive->dma;
969	if (dma) {
970		drive->dma = 0;
971		dma_error = hwif->dma_ops->dma_end(drive);
972		if (dma_error) {
973			printk(KERN_ERR PFX "%s: DMA %s error\n", drive->name,
974					write ? "write" : "read");
975			ide_dma_off(drive);
976		}
977	}
978
979	if (cdrom_decode_status(drive, 0, &stat))
980		return ide_stopped;
981
982	/* using dma, transfer is complete now */
983	if (dma) {
984		if (dma_error)
985			return ide_error(drive, "dma error", stat);
986		if (blk_fs_request(rq)) {
987			ide_end_request(drive, 1, rq->nr_sectors);
988			return ide_stopped;
989		}
990		goto end_request;
991	}
992
993	ide_read_bcount_and_ireason(drive, &len, &ireason);
994
995	thislen = blk_fs_request(rq) ? len : rq->data_len;
996	if (thislen > len)
997		thislen = len;
998
999	ide_debug_log(IDE_DBG_PC, "%s: DRQ: stat: 0x%x, thislen: %d\n",
1000		      __func__, stat, thislen);
1001
1002	/* If DRQ is clear, the command has completed. */
1003	if ((stat & ATA_DRQ) == 0) {
1004		if (blk_fs_request(rq)) {
1005			/*
1006			 * If we're not done reading/writing, complain.
1007			 * Otherwise, complete the command normally.
1008			 */
1009			uptodate = 1;
1010			if (rq->current_nr_sectors > 0) {
1011				printk(KERN_ERR PFX "%s: %s: data underrun "
1012						"(%d blocks)\n",
1013						drive->name, __func__,
1014						rq->current_nr_sectors);
1015				if (!write)
1016					rq->cmd_flags |= REQ_FAILED;
1017				uptodate = 0;
1018			}
1019			cdrom_end_request(drive, uptodate);
1020			return ide_stopped;
1021		} else if (!blk_pc_request(rq)) {
1022			ide_cd_request_sense_fixup(drive, rq);
1023			/* complain if we still have data left to transfer */
1024			uptodate = rq->data_len ? 0 : 1;
1025		}
1026		goto end_request;
1027	}
1028
1029	/* check which way to transfer data */
1030	if (ide_cd_check_ireason(drive, rq, len, ireason, write))
1031		return ide_stopped;
1032
1033	if (blk_fs_request(rq)) {
1034		if (write == 0) {
1035			int nskip;
1036
1037			if (ide_cd_check_transfer_size(drive, len)) {
1038				cdrom_end_request(drive, 0);
1039				return ide_stopped;
1040			}
1041
1042			/*
1043			 * First, figure out if we need to bit-bucket
1044			 * any of the leading sectors.
1045			 */
1046			nskip = min_t(int, rq->current_nr_sectors
1047					   - bio_cur_sectors(rq->bio),
1048					   thislen >> 9);
1049			if (nskip > 0) {
1050				ide_pad_transfer(drive, write, nskip << 9);
1051				rq->current_nr_sectors -= nskip;
1052				thislen -= (nskip << 9);
1053			}
1054		}
1055	}
1056
1057	if (ireason == 0) {
1058		write = 1;
1059		xferfunc = hwif->tp_ops->output_data;
1060	} else {
1061		write = 0;
1062		xferfunc = hwif->tp_ops->input_data;
1063	}
1064
1065	ide_debug_log(IDE_DBG_PC, "%s: data transfer, rq->cmd_type: 0x%x, "
1066		      "ireason: 0x%x\n", __func__, rq->cmd_type, ireason);
1067
1068	/* transfer data */
1069	while (thislen > 0) {
1070		u8 *ptr = blk_fs_request(rq) ? NULL : rq->data;
1071		int blen = rq->data_len;
1072
1073		/* bio backed? */
1074		if (rq->bio) {
1075			if (blk_fs_request(rq)) {
1076				ptr = rq->buffer;
1077				blen = rq->current_nr_sectors << 9;
1078			} else {
1079				ptr = bio_data(rq->bio);
1080				blen = bio_iovec(rq->bio)->bv_len;
1081			}
1082		}
1083
1084		if (!ptr) {
1085			if (blk_fs_request(rq) && !write)
1086				/*
1087				 * If the buffers are full, pipe the rest into
1088				 * oblivion.
1089				 */
1090				ide_pad_transfer(drive, 0, thislen);
1091			else {
1092				printk(KERN_ERR PFX "%s: confused, missing data\n",
1093						drive->name);
1094				blk_dump_rq_flags(rq, rq_data_dir(rq)
1095						  ? "cdrom_newpc_intr, write"
1096						  : "cdrom_newpc_intr, read");
1097			}
1098			break;
1099		}
1100
1101		if (blen > thislen)
1102			blen = thislen;
1103
1104		xferfunc(drive, NULL, ptr, blen);
1105
1106		thislen -= blen;
1107		len -= blen;
1108
1109		if (blk_fs_request(rq)) {
1110			rq->buffer += blen;
1111			rq->nr_sectors -= (blen >> 9);
1112			rq->current_nr_sectors -= (blen >> 9);
1113			rq->sector += (blen >> 9);
1114
1115			if (rq->current_nr_sectors == 0 && rq->nr_sectors)
1116				cdrom_end_request(drive, 1);
1117		} else {
1118			rq->data_len -= blen;
1119
1120			/*
1121			 * The request can't be completed until DRQ is cleared.
1122			 * So complete the data, but don't complete the request
1123			 * using the dummy function for the callback feature
1124			 * of blk_end_request_callback().
1125			 */
1126			if (rq->bio)
1127				blk_end_request_callback(rq, 0, blen,
1128						 cdrom_newpc_intr_dummy_cb);
1129			else
1130				rq->data += blen;
1131		}
1132		if (!write && blk_sense_request(rq))
1133			rq->sense_len += blen;
1134	}
1135
1136	/* pad, if necessary */
1137	if (!blk_fs_request(rq) && len > 0)
1138		ide_pad_transfer(drive, write, len);
1139
1140	if (blk_pc_request(rq)) {
1141		timeout = rq->timeout;
1142	} else {
1143		timeout = ATAPI_WAIT_PC;
1144		if (!blk_fs_request(rq))
1145			expiry = cdrom_timer_expiry;
1146	}
1147
1148	ide_set_handler(drive, cdrom_newpc_intr, timeout, expiry);
1149	return ide_started;
1150
1151end_request:
1152	if (blk_pc_request(rq)) {
1153		unsigned int dlen = rq->data_len;
1154
1155		if (dma)
1156			rq->data_len = 0;
1157
1158		if (blk_end_request(rq, 0, dlen))
1159			BUG();
1160
1161		hwgroup->rq = NULL;
1162	} else {
1163		if (!uptodate)
1164			rq->cmd_flags |= REQ_FAILED;
1165		cdrom_end_request(drive, uptodate);
1166	}
1167	return ide_stopped;
1168}
1169
1170static ide_startstop_t cdrom_start_rw(ide_drive_t *drive, struct request *rq)
1171{
1172	struct cdrom_info *cd = drive->driver_data;
1173	int write = rq_data_dir(rq) == WRITE;
1174	unsigned short sectors_per_frame =
1175		queue_hardsect_size(drive->queue) >> SECTOR_BITS;
1176
1177	ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, write: 0x%x, "
1178		      "secs_per_frame: %u\n",
1179		      __func__, rq->cmd[0], write, sectors_per_frame);
1180
1181	if (write) {
1182		/* disk has become write protected */
1183		if (get_disk_ro(cd->disk)) {
1184			cdrom_end_request(drive, 0);
1185			return ide_stopped;
1186		}
1187	} else {
1188		/*
1189		 * We may be retrying this request after an error.  Fix up any
1190		 * weirdness which might be present in the request packet.
1191		 */
1192		ide_cd_restore_request(drive, rq);
1193	}
1194
1195	/* use DMA, if possible / writes *must* be hardware frame aligned */
1196	if ((rq->nr_sectors & (sectors_per_frame - 1)) ||
1197	    (rq->sector & (sectors_per_frame - 1))) {
1198		if (write) {
1199			cdrom_end_request(drive, 0);
1200			return ide_stopped;
1201		}
1202		drive->dma = 0;
1203	} else
1204		drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1205
1206	if (write)
1207		cd->devinfo.media_written = 1;
1208
1209	return ide_started;
1210}
1211
1212static ide_startstop_t cdrom_do_newpc_cont(ide_drive_t *drive)
1213{
1214	struct request *rq = HWGROUP(drive)->rq;
1215
1216	return cdrom_transfer_packet_command(drive, rq, cdrom_newpc_intr);
1217}
1218
1219static void cdrom_do_block_pc(ide_drive_t *drive, struct request *rq)
1220{
1221
1222	ide_debug_log(IDE_DBG_PC, "Call %s, rq->cmd[0]: 0x%x, "
1223		      "rq->cmd_type: 0x%x\n", __func__, rq->cmd[0],
1224		      rq->cmd_type);
1225
1226	if (blk_pc_request(rq))
1227		rq->cmd_flags |= REQ_QUIET;
1228	else
1229		rq->cmd_flags &= ~REQ_FAILED;
1230
1231	drive->dma = 0;
1232
1233	/* sg request */
1234	if (rq->bio || ((rq->cmd_type == REQ_TYPE_ATA_PC) && rq->data_len)) {
1235		struct request_queue *q = drive->queue;
1236		unsigned int alignment;
1237		char *buf;
1238
1239		if (rq->bio)
1240			buf = bio_data(rq->bio);
1241		else
1242			buf = rq->data;
1243
1244		drive->dma = !!(drive->dev_flags & IDE_DFLAG_USING_DMA);
1245
1246		/*
1247		 * check if dma is safe
1248		 *
1249		 * NOTE! The "len" and "addr" checks should possibly have
1250		 * separate masks.
1251		 */
1252		alignment = queue_dma_alignment(q) | q->dma_pad_mask;
1253		if ((unsigned long)buf & alignment
1254		    || rq->data_len & q->dma_pad_mask
1255		    || object_is_on_stack(buf))
1256			drive->dma = 0;
1257	}
1258}
1259
1260static ide_startstop_t ide_cd_do_request(ide_drive_t *drive, struct request *rq,
1261					sector_t block)
1262{
1263	struct cdrom_info *info = drive->driver_data;
1264	ide_handler_t *fn;
1265	int xferlen;
1266
1267	ide_debug_log(IDE_DBG_RQ, "Call %s, rq->cmd[0]: 0x%x, "
1268		      "rq->cmd_type: 0x%x, block: %llu\n",
1269		      __func__, rq->cmd[0], rq->cmd_type,
1270		      (unsigned long long)block);
1271
1272	if (blk_fs_request(rq)) {
1273		if (drive->atapi_flags & IDE_AFLAG_SEEKING) {
1274			ide_hwif_t *hwif = drive->hwif;
1275			unsigned long elapsed = jiffies - info->start_seek;
1276			int stat = hwif->tp_ops->read_status(hwif);
1277
1278			if ((stat & ATA_DSC) != ATA_DSC) {
1279				if (elapsed < IDECD_SEEK_TIMEOUT) {
1280					ide_stall_queue(drive,
1281							IDECD_SEEK_TIMER);
1282					return ide_stopped;
1283				}
1284				printk(KERN_ERR PFX "%s: DSC timeout\n",
1285						drive->name);
1286			}
1287			drive->atapi_flags &= ~IDE_AFLAG_SEEKING;
1288		}
1289		if (rq_data_dir(rq) == READ &&
1290		    IDE_LARGE_SEEK(info->last_block, block,
1291			    IDECD_SEEK_THRESHOLD) &&
1292		    (drive->dev_flags & IDE_DFLAG_DSC_OVERLAP)) {
1293			xferlen = 0;
1294			fn = cdrom_start_seek_continuation;
1295
1296			drive->dma = 0;
1297			info->start_seek = jiffies;
1298
1299			ide_cd_prepare_seek_request(drive, rq);
1300		} else {
1301			xferlen = 32768;
1302			fn = cdrom_start_rw_cont;
1303
1304			if (cdrom_start_rw(drive, rq) == ide_stopped)
1305				return ide_stopped;
1306
1307			if (ide_cd_prepare_rw_request(drive, rq) == ide_stopped)
1308				return ide_stopped;
1309		}
1310		info->last_block = block;
1311	} else if (blk_sense_request(rq) || blk_pc_request(rq) ||
1312		   rq->cmd_type == REQ_TYPE_ATA_PC) {
1313		xferlen = rq->data_len;
1314		fn = cdrom_do_newpc_cont;
1315
1316		if (!rq->timeout)
1317			rq->timeout = ATAPI_WAIT_PC;
1318
1319		cdrom_do_block_pc(drive, rq);
1320	} else if (blk_special_request(rq)) {
1321		/* right now this can only be a reset... */
1322		cdrom_end_request(drive, 1);
1323		return ide_stopped;
1324	} else {
1325		blk_dump_rq_flags(rq, DRV_NAME " bad flags");
1326		cdrom_end_request(drive, 0);
1327		return ide_stopped;
1328	}
1329
1330	return cdrom_start_packet_command(drive, xferlen, fn);
1331}
1332
1333/*
1334 * Ioctl handling.
1335 *
1336 * Routines which queue packet commands take as a final argument a pointer to a
1337 * request_sense struct. If execution of the command results in an error with a
1338 * CHECK CONDITION status, this structure will be filled with the results of the
1339 * subsequent request sense command. The pointer can also be NULL, in which case
1340 * no sense information is returned.
1341 */
1342static void msf_from_bcd(struct atapi_msf *msf)
1343{
1344	msf->minute = bcd2bin(msf->minute);
1345	msf->second = bcd2bin(msf->second);
1346	msf->frame  = bcd2bin(msf->frame);
1347}
1348
1349int cdrom_check_status(ide_drive_t *drive, struct request_sense *sense)
1350{
1351	struct cdrom_info *info = drive->driver_data;
1352	struct cdrom_device_info *cdi = &info->devinfo;
1353	unsigned char cmd[BLK_MAX_CDB];
1354
1355	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1356
1357	memset(cmd, 0, BLK_MAX_CDB);
1358	cmd[0] = GPCMD_TEST_UNIT_READY;
1359
1360	/*
1361	 * Sanyo 3 CD changer uses byte 7 of TEST_UNIT_READY to switch CDs
1362	 * instead of supporting the LOAD_UNLOAD opcode.
1363	 */
1364	cmd[7] = cdi->sanyo_slot % 3;
1365
1366	return ide_cd_queue_pc(drive, cmd, 0, NULL, NULL, sense, 0, REQ_QUIET);
1367}
1368
1369static int cdrom_read_capacity(ide_drive_t *drive, unsigned long *capacity,
1370			       unsigned long *sectors_per_frame,
1371			       struct request_sense *sense)
1372{
1373	struct {
1374		__be32 lba;
1375		__be32 blocklen;
1376	} capbuf;
1377
1378	int stat;
1379	unsigned char cmd[BLK_MAX_CDB];
1380	unsigned len = sizeof(capbuf);
1381	u32 blocklen;
1382
1383	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1384
1385	memset(cmd, 0, BLK_MAX_CDB);
1386	cmd[0] = GPCMD_READ_CDVD_CAPACITY;
1387
1388	stat = ide_cd_queue_pc(drive, cmd, 0, &capbuf, &len, sense, 0,
1389			       REQ_QUIET);
1390	if (stat)
1391		return stat;
1392
1393	/*
1394	 * Sanity check the given block size
1395	 */
1396	blocklen = be32_to_cpu(capbuf.blocklen);
1397	switch (blocklen) {
1398	case 512:
1399	case 1024:
1400	case 2048:
1401	case 4096:
1402		break;
1403	default:
1404		printk(KERN_ERR PFX "%s: weird block size %u\n",
1405				drive->name, blocklen);
1406		printk(KERN_ERR PFX "%s: default to 2kb block size\n",
1407				drive->name);
1408		blocklen = 2048;
1409		break;
1410	}
1411
1412	*capacity = 1 + be32_to_cpu(capbuf.lba);
1413	*sectors_per_frame = blocklen >> SECTOR_BITS;
1414
1415	ide_debug_log(IDE_DBG_PROBE, "%s: cap: %lu, sectors_per_frame: %lu\n",
1416		      __func__, *capacity, *sectors_per_frame);
1417
1418	return 0;
1419}
1420
1421static int cdrom_read_tocentry(ide_drive_t *drive, int trackno, int msf_flag,
1422				int format, char *buf, int buflen,
1423				struct request_sense *sense)
1424{
1425	unsigned char cmd[BLK_MAX_CDB];
1426
1427	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1428
1429	memset(cmd, 0, BLK_MAX_CDB);
1430
1431	cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
1432	cmd[6] = trackno;
1433	cmd[7] = (buflen >> 8);
1434	cmd[8] = (buflen & 0xff);
1435	cmd[9] = (format << 6);
1436
1437	if (msf_flag)
1438		cmd[1] = 2;
1439
1440	return ide_cd_queue_pc(drive, cmd, 0, buf, &buflen, sense, 0, REQ_QUIET);
1441}
1442
1443/* Try to read the entire TOC for the disk into our internal buffer. */
1444int ide_cd_read_toc(ide_drive_t *drive, struct request_sense *sense)
1445{
1446	int stat, ntracks, i;
1447	struct cdrom_info *info = drive->driver_data;
1448	struct cdrom_device_info *cdi = &info->devinfo;
1449	struct atapi_toc *toc = info->toc;
1450	struct {
1451		struct atapi_toc_header hdr;
1452		struct atapi_toc_entry  ent;
1453	} ms_tmp;
1454	long last_written;
1455	unsigned long sectors_per_frame = SECTORS_PER_FRAME;
1456
1457	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1458
1459	if (toc == NULL) {
1460		/* try to allocate space */
1461		toc = kmalloc(sizeof(struct atapi_toc), GFP_KERNEL);
1462		if (toc == NULL) {
1463			printk(KERN_ERR PFX "%s: No cdrom TOC buffer!\n",
1464					drive->name);
1465			return -ENOMEM;
1466		}
1467		info->toc = toc;
1468	}
1469
1470	/*
1471	 * Check to see if the existing data is still valid. If it is,
1472	 * just return.
1473	 */
1474	(void) cdrom_check_status(drive, sense);
1475
1476	if (drive->atapi_flags & IDE_AFLAG_TOC_VALID)
1477		return 0;
1478
1479	/* try to get the total cdrom capacity and sector size */
1480	stat = cdrom_read_capacity(drive, &toc->capacity, &sectors_per_frame,
1481				   sense);
1482	if (stat)
1483		toc->capacity = 0x1fffff;
1484
1485	set_capacity(info->disk, toc->capacity * sectors_per_frame);
1486	/* save a private copy of the TOC capacity for error handling */
1487	drive->probed_capacity = toc->capacity * sectors_per_frame;
1488
1489	blk_queue_hardsect_size(drive->queue,
1490				sectors_per_frame << SECTOR_BITS);
1491
1492	/* first read just the header, so we know how long the TOC is */
1493	stat = cdrom_read_tocentry(drive, 0, 1, 0, (char *) &toc->hdr,
1494				    sizeof(struct atapi_toc_header), sense);
1495	if (stat)
1496		return stat;
1497
1498	if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1499		toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1500		toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1501	}
1502
1503	ntracks = toc->hdr.last_track - toc->hdr.first_track + 1;
1504	if (ntracks <= 0)
1505		return -EIO;
1506	if (ntracks > MAX_TRACKS)
1507		ntracks = MAX_TRACKS;
1508
1509	/* now read the whole schmeer */
1510	stat = cdrom_read_tocentry(drive, toc->hdr.first_track, 1, 0,
1511				  (char *)&toc->hdr,
1512				   sizeof(struct atapi_toc_header) +
1513				   (ntracks + 1) *
1514				   sizeof(struct atapi_toc_entry), sense);
1515
1516	if (stat && toc->hdr.first_track > 1) {
1517		/*
1518		 * Cds with CDI tracks only don't have any TOC entries, despite
1519		 * of this the returned values are
1520		 * first_track == last_track = number of CDI tracks + 1,
1521		 * so that this case is indistinguishable from the same layout
1522		 * plus an additional audio track. If we get an error for the
1523		 * regular case, we assume a CDI without additional audio
1524		 * tracks. In this case the readable TOC is empty (CDI tracks
1525		 * are not included) and only holds the Leadout entry.
1526		 *
1527		 * Heiko Eißfeldt.
1528		 */
1529		ntracks = 0;
1530		stat = cdrom_read_tocentry(drive, CDROM_LEADOUT, 1, 0,
1531					   (char *)&toc->hdr,
1532					   sizeof(struct atapi_toc_header) +
1533					   (ntracks + 1) *
1534					   sizeof(struct atapi_toc_entry),
1535					   sense);
1536		if (stat)
1537			return stat;
1538
1539		if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1540			toc->hdr.first_track = (u8)bin2bcd(CDROM_LEADOUT);
1541			toc->hdr.last_track = (u8)bin2bcd(CDROM_LEADOUT);
1542		} else {
1543			toc->hdr.first_track = CDROM_LEADOUT;
1544			toc->hdr.last_track = CDROM_LEADOUT;
1545		}
1546	}
1547
1548	if (stat)
1549		return stat;
1550
1551	toc->hdr.toc_length = be16_to_cpu(toc->hdr.toc_length);
1552
1553	if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD) {
1554		toc->hdr.first_track = bcd2bin(toc->hdr.first_track);
1555		toc->hdr.last_track  = bcd2bin(toc->hdr.last_track);
1556	}
1557
1558	for (i = 0; i <= ntracks; i++) {
1559		if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1560			if (drive->atapi_flags & IDE_AFLAG_TOCTRACKS_AS_BCD)
1561				toc->ent[i].track = bcd2bin(toc->ent[i].track);
1562			msf_from_bcd(&toc->ent[i].addr.msf);
1563		}
1564		toc->ent[i].addr.lba = msf_to_lba(toc->ent[i].addr.msf.minute,
1565						  toc->ent[i].addr.msf.second,
1566						  toc->ent[i].addr.msf.frame);
1567	}
1568
1569	if (toc->hdr.first_track != CDROM_LEADOUT) {
1570		/* read the multisession information */
1571		stat = cdrom_read_tocentry(drive, 0, 0, 1, (char *)&ms_tmp,
1572					   sizeof(ms_tmp), sense);
1573		if (stat)
1574			return stat;
1575
1576		toc->last_session_lba = be32_to_cpu(ms_tmp.ent.addr.lba);
1577	} else {
1578		ms_tmp.hdr.last_track = CDROM_LEADOUT;
1579		ms_tmp.hdr.first_track = ms_tmp.hdr.last_track;
1580		toc->last_session_lba = msf_to_lba(0, 2, 0); /* 0m 2s 0f */
1581	}
1582
1583	if (drive->atapi_flags & IDE_AFLAG_TOCADDR_AS_BCD) {
1584		/* re-read multisession information using MSF format */
1585		stat = cdrom_read_tocentry(drive, 0, 1, 1, (char *)&ms_tmp,
1586					   sizeof(ms_tmp), sense);
1587		if (stat)
1588			return stat;
1589
1590		msf_from_bcd(&ms_tmp.ent.addr.msf);
1591		toc->last_session_lba = msf_to_lba(ms_tmp.ent.addr.msf.minute,
1592						   ms_tmp.ent.addr.msf.second,
1593						   ms_tmp.ent.addr.msf.frame);
1594	}
1595
1596	toc->xa_flag = (ms_tmp.hdr.first_track != ms_tmp.hdr.last_track);
1597
1598	/* now try to get the total cdrom capacity */
1599	stat = cdrom_get_last_written(cdi, &last_written);
1600	if (!stat && (last_written > toc->capacity)) {
1601		toc->capacity = last_written;
1602		set_capacity(info->disk, toc->capacity * sectors_per_frame);
1603		drive->probed_capacity = toc->capacity * sectors_per_frame;
1604	}
1605
1606	/* Remember that we've read this stuff. */
1607	drive->atapi_flags |= IDE_AFLAG_TOC_VALID;
1608
1609	return 0;
1610}
1611
1612int ide_cdrom_get_capabilities(ide_drive_t *drive, u8 *buf)
1613{
1614	struct cdrom_info *info = drive->driver_data;
1615	struct cdrom_device_info *cdi = &info->devinfo;
1616	struct packet_command cgc;
1617	int stat, attempts = 3, size = ATAPI_CAPABILITIES_PAGE_SIZE;
1618
1619	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1620
1621	if ((drive->atapi_flags & IDE_AFLAG_FULL_CAPS_PAGE) == 0)
1622		size -= ATAPI_CAPABILITIES_PAGE_PAD_SIZE;
1623
1624	init_cdrom_command(&cgc, buf, size, CGC_DATA_UNKNOWN);
1625	do {
1626		/* we seem to get stat=0x01,err=0x00 the first time (??) */
1627		stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CAPABILITIES_PAGE, 0);
1628		if (!stat)
1629			break;
1630	} while (--attempts);
1631	return stat;
1632}
1633
1634void ide_cdrom_update_speed(ide_drive_t *drive, u8 *buf)
1635{
1636	struct cdrom_info *cd = drive->driver_data;
1637	u16 curspeed, maxspeed;
1638
1639	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
1640
1641	if (drive->atapi_flags & IDE_AFLAG_LE_SPEED_FIELDS) {
1642		curspeed = le16_to_cpup((__le16 *)&buf[8 + 14]);
1643		maxspeed = le16_to_cpup((__le16 *)&buf[8 + 8]);
1644	} else {
1645		curspeed = be16_to_cpup((__be16 *)&buf[8 + 14]);
1646		maxspeed = be16_to_cpup((__be16 *)&buf[8 + 8]);
1647	}
1648
1649	ide_debug_log(IDE_DBG_PROBE, "%s: curspeed: %u, maxspeed: %u\n",
1650		      __func__, curspeed, maxspeed);
1651
1652	cd->current_speed = (curspeed + (176/2)) / 176;
1653	cd->max_speed = (maxspeed + (176/2)) / 176;
1654}
1655
1656#define IDE_CD_CAPABILITIES \
1657	(CDC_CLOSE_TRAY | CDC_OPEN_TRAY | CDC_LOCK | CDC_SELECT_SPEED | \
1658	 CDC_SELECT_DISC | CDC_MULTI_SESSION | CDC_MCN | CDC_MEDIA_CHANGED | \
1659	 CDC_PLAY_AUDIO | CDC_RESET | CDC_DRIVE_STATUS | CDC_CD_R | \
1660	 CDC_CD_RW | CDC_DVD | CDC_DVD_R | CDC_DVD_RAM | CDC_GENERIC_PACKET | \
1661	 CDC_MO_DRIVE | CDC_MRW | CDC_MRW_W | CDC_RAM)
1662
1663static struct cdrom_device_ops ide_cdrom_dops = {
1664	.open			= ide_cdrom_open_real,
1665	.release		= ide_cdrom_release_real,
1666	.drive_status		= ide_cdrom_drive_status,
1667	.media_changed		= ide_cdrom_check_media_change_real,
1668	.tray_move		= ide_cdrom_tray_move,
1669	.lock_door		= ide_cdrom_lock_door,
1670	.select_speed		= ide_cdrom_select_speed,
1671	.get_last_session	= ide_cdrom_get_last_session,
1672	.get_mcn		= ide_cdrom_get_mcn,
1673	.reset			= ide_cdrom_reset,
1674	.audio_ioctl		= ide_cdrom_audio_ioctl,
1675	.capability		= IDE_CD_CAPABILITIES,
1676	.generic_packet		= ide_cdrom_packet,
1677};
1678
1679static int ide_cdrom_register(ide_drive_t *drive, int nslots)
1680{
1681	struct cdrom_info *info = drive->driver_data;
1682	struct cdrom_device_info *devinfo = &info->devinfo;
1683
1684	ide_debug_log(IDE_DBG_PROBE, "Call %s, nslots: %d\n", __func__, nslots);
1685
1686	devinfo->ops = &ide_cdrom_dops;
1687	devinfo->speed = info->current_speed;
1688	devinfo->capacity = nslots;
1689	devinfo->handle = drive;
1690	strcpy(devinfo->name, drive->name);
1691
1692	if (drive->atapi_flags & IDE_AFLAG_NO_SPEED_SELECT)
1693		devinfo->mask |= CDC_SELECT_SPEED;
1694
1695	devinfo->disk = info->disk;
1696	return register_cdrom(devinfo);
1697}
1698
1699static int ide_cdrom_probe_capabilities(ide_drive_t *drive)
1700{
1701	struct cdrom_info *cd = drive->driver_data;
1702	struct cdrom_device_info *cdi = &cd->devinfo;
1703	u8 buf[ATAPI_CAPABILITIES_PAGE_SIZE];
1704	mechtype_t mechtype;
1705	int nslots = 1;
1706
1707	ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->media: 0x%x, "
1708		      "drive->atapi_flags: 0x%lx\n", __func__, drive->media,
1709		      drive->atapi_flags);
1710
1711	cdi->mask = (CDC_CD_R | CDC_CD_RW | CDC_DVD | CDC_DVD_R |
1712		     CDC_DVD_RAM | CDC_SELECT_DISC | CDC_PLAY_AUDIO |
1713		     CDC_MO_DRIVE | CDC_RAM);
1714
1715	if (drive->media == ide_optical) {
1716		cdi->mask &= ~(CDC_MO_DRIVE | CDC_RAM);
1717		printk(KERN_ERR PFX "%s: ATAPI magneto-optical drive\n",
1718				drive->name);
1719		return nslots;
1720	}
1721
1722	if (drive->atapi_flags & IDE_AFLAG_PRE_ATAPI12) {
1723		drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1724		cdi->mask &= ~CDC_PLAY_AUDIO;
1725		return nslots;
1726	}
1727
1728	/*
1729	 * We have to cheat a little here. the packet will eventually be queued
1730	 * with ide_cdrom_packet(), which extracts the drive from cdi->handle.
1731	 * Since this device hasn't been registered with the Uniform layer yet,
1732	 * it can't do this. Same goes for cdi->ops.
1733	 */
1734	cdi->handle = drive;
1735	cdi->ops = &ide_cdrom_dops;
1736
1737	if (ide_cdrom_get_capabilities(drive, buf))
1738		return 0;
1739
1740	if ((buf[8 + 6] & 0x01) == 0)
1741		drive->dev_flags &= ~IDE_DFLAG_DOORLOCKING;
1742	if (buf[8 + 6] & 0x08)
1743		drive->atapi_flags &= ~IDE_AFLAG_NO_EJECT;
1744	if (buf[8 + 3] & 0x01)
1745		cdi->mask &= ~CDC_CD_R;
1746	if (buf[8 + 3] & 0x02)
1747		cdi->mask &= ~(CDC_CD_RW | CDC_RAM);
1748	if (buf[8 + 2] & 0x38)
1749		cdi->mask &= ~CDC_DVD;
1750	if (buf[8 + 3] & 0x20)
1751		cdi->mask &= ~(CDC_DVD_RAM | CDC_RAM);
1752	if (buf[8 + 3] & 0x10)
1753		cdi->mask &= ~CDC_DVD_R;
1754	if ((buf[8 + 4] & 0x01) || (drive->atapi_flags & IDE_AFLAG_PLAY_AUDIO_OK))
1755		cdi->mask &= ~CDC_PLAY_AUDIO;
1756
1757	mechtype = buf[8 + 6] >> 5;
1758	if (mechtype == mechtype_caddy ||
1759	    mechtype == mechtype_popup ||
1760	    (drive->atapi_flags & IDE_AFLAG_NO_AUTOCLOSE))
1761		cdi->mask |= CDC_CLOSE_TRAY;
1762
1763	if (cdi->sanyo_slot > 0) {
1764		cdi->mask &= ~CDC_SELECT_DISC;
1765		nslots = 3;
1766	} else if (mechtype == mechtype_individual_changer ||
1767		   mechtype == mechtype_cartridge_changer) {
1768		nslots = cdrom_number_of_slots(cdi);
1769		if (nslots > 1)
1770			cdi->mask &= ~CDC_SELECT_DISC;
1771	}
1772
1773	ide_cdrom_update_speed(drive, buf);
1774
1775	printk(KERN_INFO PFX "%s: ATAPI", drive->name);
1776
1777	/* don't print speed if the drive reported 0 */
1778	if (cd->max_speed)
1779		printk(KERN_CONT " %dX", cd->max_speed);
1780
1781	printk(KERN_CONT " %s", (cdi->mask & CDC_DVD) ? "CD-ROM" : "DVD-ROM");
1782
1783	if ((cdi->mask & CDC_DVD_R) == 0 || (cdi->mask & CDC_DVD_RAM) == 0)
1784		printk(KERN_CONT " DVD%s%s",
1785				 (cdi->mask & CDC_DVD_R) ? "" : "-R",
1786				 (cdi->mask & CDC_DVD_RAM) ? "" : "/RAM");
1787
1788	if ((cdi->mask & CDC_CD_R) == 0 || (cdi->mask & CDC_CD_RW) == 0)
1789		printk(KERN_CONT " CD%s%s",
1790				 (cdi->mask & CDC_CD_R) ? "" : "-R",
1791				 (cdi->mask & CDC_CD_RW) ? "" : "/RW");
1792
1793	if ((cdi->mask & CDC_SELECT_DISC) == 0)
1794		printk(KERN_CONT " changer w/%d slots", nslots);
1795	else
1796		printk(KERN_CONT " drive");
1797
1798	printk(KERN_CONT ", %dkB Cache\n",
1799			 be16_to_cpup((__be16 *)&buf[8 + 12]));
1800
1801	return nslots;
1802}
1803
1804/* standard prep_rq_fn that builds 10 byte cmds */
1805static int ide_cdrom_prep_fs(struct request_queue *q, struct request *rq)
1806{
1807	int hard_sect = queue_hardsect_size(q);
1808	long block = (long)rq->hard_sector / (hard_sect >> 9);
1809	unsigned long blocks = rq->hard_nr_sectors / (hard_sect >> 9);
1810
1811	memset(rq->cmd, 0, BLK_MAX_CDB);
1812
1813	if (rq_data_dir(rq) == READ)
1814		rq->cmd[0] = GPCMD_READ_10;
1815	else
1816		rq->cmd[0] = GPCMD_WRITE_10;
1817
1818	/*
1819	 * fill in lba
1820	 */
1821	rq->cmd[2] = (block >> 24) & 0xff;
1822	rq->cmd[3] = (block >> 16) & 0xff;
1823	rq->cmd[4] = (block >>  8) & 0xff;
1824	rq->cmd[5] = block & 0xff;
1825
1826	/*
1827	 * and transfer length
1828	 */
1829	rq->cmd[7] = (blocks >> 8) & 0xff;
1830	rq->cmd[8] = blocks & 0xff;
1831	rq->cmd_len = 10;
1832	return BLKPREP_OK;
1833}
1834
1835/*
1836 * Most of the SCSI commands are supported directly by ATAPI devices.
1837 * This transform handles the few exceptions.
1838 */
1839static int ide_cdrom_prep_pc(struct request *rq)
1840{
1841	u8 *c = rq->cmd;
1842
1843	/* transform 6-byte read/write commands to the 10-byte version */
1844	if (c[0] == READ_6 || c[0] == WRITE_6) {
1845		c[8] = c[4];
1846		c[5] = c[3];
1847		c[4] = c[2];
1848		c[3] = c[1] & 0x1f;
1849		c[2] = 0;
1850		c[1] &= 0xe0;
1851		c[0] += (READ_10 - READ_6);
1852		rq->cmd_len = 10;
1853		return BLKPREP_OK;
1854	}
1855
1856	/*
1857	 * it's silly to pretend we understand 6-byte sense commands, just
1858	 * reject with ILLEGAL_REQUEST and the caller should take the
1859	 * appropriate action
1860	 */
1861	if (c[0] == MODE_SENSE || c[0] == MODE_SELECT) {
1862		rq->errors = ILLEGAL_REQUEST;
1863		return BLKPREP_KILL;
1864	}
1865
1866	return BLKPREP_OK;
1867}
1868
1869static int ide_cdrom_prep_fn(struct request_queue *q, struct request *rq)
1870{
1871	if (blk_fs_request(rq))
1872		return ide_cdrom_prep_fs(q, rq);
1873	else if (blk_pc_request(rq))
1874		return ide_cdrom_prep_pc(rq);
1875
1876	return 0;
1877}
1878
1879struct cd_list_entry {
1880	const char	*id_model;
1881	const char	*id_firmware;
1882	unsigned int	cd_flags;
1883};
1884
1885#ifdef CONFIG_IDE_PROC_FS
1886static sector_t ide_cdrom_capacity(ide_drive_t *drive)
1887{
1888	unsigned long capacity, sectors_per_frame;
1889
1890	if (cdrom_read_capacity(drive, &capacity, &sectors_per_frame, NULL))
1891		return 0;
1892
1893	return capacity * sectors_per_frame;
1894}
1895
1896static int proc_idecd_read_capacity(char *page, char **start, off_t off,
1897					int count, int *eof, void *data)
1898{
1899	ide_drive_t *drive = data;
1900	int len;
1901
1902	len = sprintf(page, "%llu\n", (long long)ide_cdrom_capacity(drive));
1903	PROC_IDE_READ_RETURN(page, start, off, count, eof, len);
1904}
1905
1906static ide_proc_entry_t idecd_proc[] = {
1907	{ "capacity", S_IFREG|S_IRUGO, proc_idecd_read_capacity, NULL },
1908	{ NULL, 0, NULL, NULL }
1909};
1910
1911ide_devset_rw_flag(dsc_overlap, IDE_DFLAG_DSC_OVERLAP);
1912
1913static const struct ide_proc_devset idecd_settings[] = {
1914	IDE_PROC_DEVSET(dsc_overlap, 0, 1),
1915	{ 0 },
1916};
1917
1918static ide_proc_entry_t *ide_cd_proc_entries(ide_drive_t *drive)
1919{
1920	return idecd_proc;
1921}
1922
1923static const struct ide_proc_devset *ide_cd_proc_devsets(ide_drive_t *drive)
1924{
1925	return idecd_settings;
1926}
1927#endif
1928
1929static const struct cd_list_entry ide_cd_quirks_list[] = {
1930	/* Limit transfer size per interrupt. */
1931	{ "SAMSUNG CD-ROM SCR-2430", NULL,   IDE_AFLAG_LIMIT_NFRAMES	     },
1932	{ "SAMSUNG CD-ROM SCR-2432", NULL,   IDE_AFLAG_LIMIT_NFRAMES	     },
1933	/* SCR-3231 doesn't support the SET_CD_SPEED command. */
1934	{ "SAMSUNG CD-ROM SCR-3231", NULL,   IDE_AFLAG_NO_SPEED_SELECT	     },
1935	/* Old NEC260 (not R) was released before ATAPI 1.2 spec. */
1936	{ "NEC CD-ROM DRIVE:260",    "1.01", IDE_AFLAG_TOCADDR_AS_BCD |
1937					     IDE_AFLAG_PRE_ATAPI12,	     },
1938	/* Vertos 300, some versions of this drive like to talk BCD. */
1939	{ "V003S0DS",		     NULL,   IDE_AFLAG_VERTOS_300_SSD,	     },
1940	/* Vertos 600 ESD. */
1941	{ "V006E0DS",		     NULL,   IDE_AFLAG_VERTOS_600_ESD,	     },
1942	/*
1943	 * Sanyo 3 CD changer uses a non-standard command for CD changing
1944	 * (by default standard ATAPI support for CD changers is used).
1945	 */
1946	{ "CD-ROM CDR-C3 G",	     NULL,   IDE_AFLAG_SANYO_3CD	     },
1947	{ "CD-ROM CDR-C3G",	     NULL,   IDE_AFLAG_SANYO_3CD	     },
1948	{ "CD-ROM CDR_C36",	     NULL,   IDE_AFLAG_SANYO_3CD	     },
1949	/* Stingray 8X CD-ROM. */
1950	{ "STINGRAY 8422 IDE 8X CD-ROM 7-27-95", NULL, IDE_AFLAG_PRE_ATAPI12 },
1951	/*
1952	 * ACER 50X CD-ROM and WPI 32X CD-ROM require the full spec length
1953	 * mode sense page capabilities size, but older drives break.
1954	 */
1955	{ "ATAPI CD ROM DRIVE 50X MAX",	NULL,	IDE_AFLAG_FULL_CAPS_PAGE     },
1956	{ "WPI CDS-32X",		NULL,	IDE_AFLAG_FULL_CAPS_PAGE     },
1957	/* ACER/AOpen 24X CD-ROM has the speed fields byte-swapped. */
1958	{ "",			     "241N", IDE_AFLAG_LE_SPEED_FIELDS       },
1959	/*
1960	 * Some drives used by Apple don't advertise audio play
1961	 * but they do support reading TOC & audio datas.
1962	 */
1963	{ "MATSHITADVD-ROM SR-8187", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1964	{ "MATSHITADVD-ROM SR-8186", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1965	{ "MATSHITADVD-ROM SR-8176", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1966	{ "MATSHITADVD-ROM SR-8174", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1967	{ "Optiarc DVD RW AD-5200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1968	{ "Optiarc DVD RW AD-7200A", NULL,   IDE_AFLAG_PLAY_AUDIO_OK	     },
1969	{ "Optiarc DVD RW AD-7543A", NULL,   IDE_AFLAG_NO_AUTOCLOSE	     },
1970	{ "TEAC CD-ROM CD-224E",     NULL,   IDE_AFLAG_NO_AUTOCLOSE	     },
1971	{ NULL, NULL, 0 }
1972};
1973
1974static unsigned int ide_cd_flags(u16 *id)
1975{
1976	const struct cd_list_entry *cle = ide_cd_quirks_list;
1977
1978	while (cle->id_model) {
1979		if (strcmp(cle->id_model, (char *)&id[ATA_ID_PROD]) == 0 &&
1980		    (cle->id_firmware == NULL ||
1981		     strstr((char *)&id[ATA_ID_FW_REV], cle->id_firmware)))
1982			return cle->cd_flags;
1983		cle++;
1984	}
1985
1986	return 0;
1987}
1988
1989static int ide_cdrom_setup(ide_drive_t *drive)
1990{
1991	struct cdrom_info *cd = drive->driver_data;
1992	struct cdrom_device_info *cdi = &cd->devinfo;
1993	u16 *id = drive->id;
1994	char *fw_rev = (char *)&id[ATA_ID_FW_REV];
1995	int nslots;
1996
1997	ide_debug_log(IDE_DBG_PROBE, "Call %s\n", __func__);
1998
1999	blk_queue_prep_rq(drive->queue, ide_cdrom_prep_fn);
2000	blk_queue_dma_alignment(drive->queue, 31);
2001	blk_queue_update_dma_pad(drive->queue, 15);
2002	drive->queue->unplug_delay = (1 * HZ) / 1000;
2003	if (!drive->queue->unplug_delay)
2004		drive->queue->unplug_delay = 1;
2005
2006	drive->dev_flags |= IDE_DFLAG_MEDIA_CHANGED;
2007	drive->atapi_flags = IDE_AFLAG_NO_EJECT | ide_cd_flags(id);
2008
2009	if ((drive->atapi_flags & IDE_AFLAG_VERTOS_300_SSD) &&
2010	    fw_rev[4] == '1' && fw_rev[6] <= '2')
2011		drive->atapi_flags |= (IDE_AFLAG_TOCTRACKS_AS_BCD |
2012				     IDE_AFLAG_TOCADDR_AS_BCD);
2013	else if ((drive->atapi_flags & IDE_AFLAG_VERTOS_600_ESD) &&
2014		 fw_rev[4] == '1' && fw_rev[6] <= '2')
2015		drive->atapi_flags |= IDE_AFLAG_TOCTRACKS_AS_BCD;
2016	else if (drive->atapi_flags & IDE_AFLAG_SANYO_3CD)
2017		/* 3 => use CD in slot 0 */
2018		cdi->sanyo_slot = 3;
2019
2020	nslots = ide_cdrom_probe_capabilities(drive);
2021
2022	/* set correct block size */
2023	blk_queue_hardsect_size(drive->queue, CD_FRAMESIZE);
2024
2025	if (drive->next != drive)
2026		drive->dev_flags |= IDE_DFLAG_DSC_OVERLAP;
2027	else
2028		drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
2029
2030	if (ide_cdrom_register(drive, nslots)) {
2031		printk(KERN_ERR PFX "%s: %s failed to register device with the"
2032				" cdrom driver.\n", drive->name, __func__);
2033		cd->devinfo.handle = NULL;
2034		return 1;
2035	}
2036
2037	ide_proc_register_driver(drive, cd->driver);
2038	return 0;
2039}
2040
2041static void ide_cd_remove(ide_drive_t *drive)
2042{
2043	struct cdrom_info *info = drive->driver_data;
2044
2045	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
2046
2047	ide_proc_unregister_driver(drive, info->driver);
2048
2049	del_gendisk(info->disk);
2050
2051	ide_cd_put(info);
2052}
2053
2054static void ide_cd_release(struct kref *kref)
2055{
2056	struct cdrom_info *info = to_ide_drv(kref, cdrom_info);
2057	struct cdrom_device_info *devinfo = &info->devinfo;
2058	ide_drive_t *drive = info->drive;
2059	struct gendisk *g = info->disk;
2060
2061	ide_debug_log(IDE_DBG_FUNC, "Call %s\n", __func__);
2062
2063	kfree(info->toc);
2064	if (devinfo->handle == drive)
2065		unregister_cdrom(devinfo);
2066	drive->dev_flags &= ~IDE_DFLAG_DSC_OVERLAP;
2067	drive->driver_data = NULL;
2068	blk_queue_prep_rq(drive->queue, NULL);
2069	g->private_data = NULL;
2070	put_disk(g);
2071	kfree(info);
2072}
2073
2074static int ide_cd_probe(ide_drive_t *);
2075
2076static ide_driver_t ide_cdrom_driver = {
2077	.gen_driver = {
2078		.owner		= THIS_MODULE,
2079		.name		= "ide-cdrom",
2080		.bus		= &ide_bus_type,
2081	},
2082	.probe			= ide_cd_probe,
2083	.remove			= ide_cd_remove,
2084	.version		= IDECD_VERSION,
2085	.do_request		= ide_cd_do_request,
2086	.end_request		= ide_end_request,
2087	.error			= __ide_error,
2088#ifdef CONFIG_IDE_PROC_FS
2089	.proc_entries		= ide_cd_proc_entries,
2090	.proc_devsets		= ide_cd_proc_devsets,
2091#endif
2092};
2093
2094static int idecd_open(struct block_device *bdev, fmode_t mode)
2095{
2096	struct cdrom_info *info = ide_cd_get(bdev->bd_disk);
2097	int rc = -ENOMEM;
2098
2099	if (!info)
2100		return -ENXIO;
2101
2102	rc = cdrom_open(&info->devinfo, bdev, mode);
2103
2104	if (rc < 0)
2105		ide_cd_put(info);
2106
2107	return rc;
2108}
2109
2110static int idecd_release(struct gendisk *disk, fmode_t mode)
2111{
2112	struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2113
2114	cdrom_release(&info->devinfo, mode);
2115
2116	ide_cd_put(info);
2117
2118	return 0;
2119}
2120
2121static int idecd_set_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2122{
2123	struct packet_command cgc;
2124	char buffer[16];
2125	int stat;
2126	char spindown;
2127
2128	if (copy_from_user(&spindown, (void __user *)arg, sizeof(char)))
2129		return -EFAULT;
2130
2131	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2132
2133	stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2134	if (stat)
2135		return stat;
2136
2137	buffer[11] = (buffer[11] & 0xf0) | (spindown & 0x0f);
2138	return cdrom_mode_select(cdi, &cgc);
2139}
2140
2141static int idecd_get_spindown(struct cdrom_device_info *cdi, unsigned long arg)
2142{
2143	struct packet_command cgc;
2144	char buffer[16];
2145	int stat;
2146	char spindown;
2147
2148	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_UNKNOWN);
2149
2150	stat = cdrom_mode_sense(cdi, &cgc, GPMODE_CDROM_PAGE, 0);
2151	if (stat)
2152		return stat;
2153
2154	spindown = buffer[11] & 0x0f;
2155	if (copy_to_user((void __user *)arg, &spindown, sizeof(char)))
2156		return -EFAULT;
2157	return 0;
2158}
2159
2160static int idecd_ioctl(struct block_device *bdev, fmode_t mode,
2161			unsigned int cmd, unsigned long arg)
2162{
2163	struct cdrom_info *info = ide_drv_g(bdev->bd_disk, cdrom_info);
2164	int err;
2165
2166	switch (cmd) {
2167	case CDROMSETSPINDOWN:
2168		return idecd_set_spindown(&info->devinfo, arg);
2169	case CDROMGETSPINDOWN:
2170		return idecd_get_spindown(&info->devinfo, arg);
2171	default:
2172		break;
2173	}
2174
2175	err = generic_ide_ioctl(info->drive, bdev, cmd, arg);
2176	if (err == -EINVAL)
2177		err = cdrom_ioctl(&info->devinfo, bdev, mode, cmd, arg);
2178
2179	return err;
2180}
2181
2182static int idecd_media_changed(struct gendisk *disk)
2183{
2184	struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2185	return cdrom_media_changed(&info->devinfo);
2186}
2187
2188static int idecd_revalidate_disk(struct gendisk *disk)
2189{
2190	struct cdrom_info *info = ide_drv_g(disk, cdrom_info);
2191	struct request_sense sense;
2192
2193	ide_cd_read_toc(info->drive, &sense);
2194
2195	return  0;
2196}
2197
2198static struct block_device_operations idecd_ops = {
2199	.owner			= THIS_MODULE,
2200	.open			= idecd_open,
2201	.release		= idecd_release,
2202	.locked_ioctl		= idecd_ioctl,
2203	.media_changed		= idecd_media_changed,
2204	.revalidate_disk	= idecd_revalidate_disk
2205};
2206
2207/* module options */
2208static char *ignore;
2209module_param(ignore, charp, 0400);
2210
2211static unsigned long debug_mask;
2212module_param(debug_mask, ulong, 0644);
2213
2214MODULE_DESCRIPTION("ATAPI CD-ROM Driver");
2215
2216static int ide_cd_probe(ide_drive_t *drive)
2217{
2218	struct cdrom_info *info;
2219	struct gendisk *g;
2220	struct request_sense sense;
2221
2222	ide_debug_log(IDE_DBG_PROBE, "Call %s, drive->driver_req: %s, "
2223		      "drive->media: 0x%x\n", __func__, drive->driver_req,
2224		      drive->media);
2225
2226	if (!strstr("ide-cdrom", drive->driver_req))
2227		goto failed;
2228
2229	if (drive->media != ide_cdrom && drive->media != ide_optical)
2230		goto failed;
2231
2232	/* skip drives that we were told to ignore */
2233	if (ignore != NULL) {
2234		if (strstr(ignore, drive->name)) {
2235			printk(KERN_INFO PFX "ignoring drive %s\n",
2236					 drive->name);
2237			goto failed;
2238		}
2239	}
2240
2241	drive->debug_mask = debug_mask;
2242
2243	info = kzalloc(sizeof(struct cdrom_info), GFP_KERNEL);
2244	if (info == NULL) {
2245		printk(KERN_ERR PFX "%s: Can't allocate a cdrom structure\n",
2246				drive->name);
2247		goto failed;
2248	}
2249
2250	g = alloc_disk(1 << PARTN_BITS);
2251	if (!g)
2252		goto out_free_cd;
2253
2254	ide_init_disk(g, drive);
2255
2256	kref_init(&info->kref);
2257
2258	info->drive = drive;
2259	info->driver = &ide_cdrom_driver;
2260	info->disk = g;
2261
2262	g->private_data = &info->driver;
2263
2264	drive->driver_data = info;
2265
2266	g->minors = 1;
2267	g->driverfs_dev = &drive->gendev;
2268	g->flags = GENHD_FL_CD | GENHD_FL_REMOVABLE;
2269	if (ide_cdrom_setup(drive)) {
2270		ide_cd_release(&info->kref);
2271		goto failed;
2272	}
2273
2274	ide_cd_read_toc(drive, &sense);
2275	g->fops = &idecd_ops;
2276	g->flags |= GENHD_FL_REMOVABLE;
2277	add_disk(g);
2278	return 0;
2279
2280out_free_cd:
2281	kfree(info);
2282failed:
2283	return -ENODEV;
2284}
2285
2286static void __exit ide_cdrom_exit(void)
2287{
2288	driver_unregister(&ide_cdrom_driver.gen_driver);
2289}
2290
2291static int __init ide_cdrom_init(void)
2292{
2293	printk(KERN_INFO DRV_NAME " driver " IDECD_VERSION "\n");
2294	return driver_register(&ide_cdrom_driver.gen_driver);
2295}
2296
2297MODULE_ALIAS("ide:*m-cdrom*");
2298MODULE_ALIAS("ide-cd");
2299module_init(ide_cdrom_init);
2300module_exit(ide_cdrom_exit);
2301MODULE_LICENSE("GPL");
2302