ide-taskfile.c revision 151055ed84df7bebc77d88471302a7cd02c6e0a4
1/* 2 * Copyright (C) 2000-2002 Michael Cornwell <cornwell@acm.org> 3 * Copyright (C) 2000-2002 Andre Hedrick <andre@linux-ide.org> 4 * Copyright (C) 2001-2002 Klaus Smolin 5 * IBM Storage Technology Division 6 * Copyright (C) 2003-2004, 2007 Bartlomiej Zolnierkiewicz 7 * 8 * The big the bad and the ugly. 9 */ 10 11#include <linux/types.h> 12#include <linux/string.h> 13#include <linux/kernel.h> 14#include <linux/sched.h> 15#include <linux/interrupt.h> 16#include <linux/errno.h> 17#include <linux/slab.h> 18#include <linux/delay.h> 19#include <linux/hdreg.h> 20#include <linux/ide.h> 21#include <linux/scatterlist.h> 22 23#include <asm/uaccess.h> 24#include <asm/io.h> 25 26void ide_tf_dump(const char *s, struct ide_taskfile *tf) 27{ 28#ifdef DEBUG 29 printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x " 30 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n", 31 s, tf->feature, tf->nsect, tf->lbal, 32 tf->lbam, tf->lbah, tf->device, tf->command); 33 printk("%s: hob: nsect 0x%02x lbal 0x%02x " 34 "lbam 0x%02x lbah 0x%02x\n", 35 s, tf->hob_nsect, tf->hob_lbal, 36 tf->hob_lbam, tf->hob_lbah); 37#endif 38} 39 40int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf) 41{ 42 struct ide_cmd cmd; 43 44 memset(&cmd, 0, sizeof(cmd)); 45 cmd.tf.nsect = 0x01; 46 if (drive->media == ide_disk) 47 cmd.tf.command = ATA_CMD_ID_ATA; 48 else 49 cmd.tf.command = ATA_CMD_ID_ATAPI; 50 cmd.tf_flags = IDE_TFLAG_TF | IDE_TFLAG_DEVICE; 51 cmd.protocol = ATA_PROT_PIO; 52 53 return ide_raw_taskfile(drive, &cmd, buf, 1); 54} 55 56static ide_startstop_t task_no_data_intr(ide_drive_t *); 57static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *); 58static ide_startstop_t task_pio_intr(ide_drive_t *); 59 60ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd) 61{ 62 ide_hwif_t *hwif = drive->hwif; 63 struct ide_cmd *cmd = &hwif->cmd; 64 struct ide_taskfile *tf = &cmd->tf; 65 ide_handler_t *handler = NULL; 66 const struct ide_tp_ops *tp_ops = hwif->tp_ops; 67 const struct ide_dma_ops *dma_ops = hwif->dma_ops; 68 69 if (orig_cmd->protocol == ATA_PROT_PIO && 70 (orig_cmd->tf_flags & IDE_TFLAG_MULTI_PIO) && 71 drive->mult_count == 0) { 72 printk(KERN_ERR "%s: multimode not set!\n", drive->name); 73 return ide_stopped; 74 } 75 76 if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED) 77 orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS; 78 79 memcpy(cmd, orig_cmd, sizeof(*cmd)); 80 81 if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) { 82 ide_tf_dump(drive->name, tf); 83 tp_ops->set_irq(hwif, 1); 84 SELECT_MASK(drive, 0); 85 tp_ops->tf_load(drive, cmd); 86 } 87 88 switch (cmd->protocol) { 89 case ATA_PROT_PIO: 90 if (cmd->tf_flags & IDE_TFLAG_WRITE) { 91 tp_ops->exec_command(hwif, tf->command); 92 ndelay(400); /* FIXME */ 93 return pre_task_out_intr(drive, cmd); 94 } 95 handler = task_pio_intr; 96 /* fall-through */ 97 case ATA_PROT_NODATA: 98 if (handler == NULL) 99 handler = task_no_data_intr; 100 ide_execute_command(drive, tf->command, handler, 101 WAIT_WORSTCASE, NULL); 102 return ide_started; 103 default: 104 if ((drive->dev_flags & IDE_DFLAG_USING_DMA) == 0 || 105 ide_build_sglist(drive, hwif->rq) == 0 || 106 dma_ops->dma_setup(drive)) 107 return ide_stopped; 108 dma_ops->dma_exec_cmd(drive, tf->command); 109 dma_ops->dma_start(drive); 110 return ide_started; 111 } 112} 113EXPORT_SYMBOL_GPL(do_rw_taskfile); 114 115static ide_startstop_t task_no_data_intr(ide_drive_t *drive) 116{ 117 ide_hwif_t *hwif = drive->hwif; 118 struct ide_cmd *cmd = &hwif->cmd; 119 struct ide_taskfile *tf = &cmd->tf; 120 int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0; 121 int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1; 122 u8 stat; 123 124 local_irq_enable_in_hardirq(); 125 126 while (1) { 127 stat = hwif->tp_ops->read_status(hwif); 128 if ((stat & ATA_BUSY) == 0 || retries-- == 0) 129 break; 130 udelay(10); 131 }; 132 133 if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) { 134 if (custom && tf->command == ATA_CMD_SET_MULTI) { 135 drive->mult_req = drive->mult_count = 0; 136 drive->special.b.recalibrate = 1; 137 (void)ide_dump_status(drive, __func__, stat); 138 return ide_stopped; 139 } else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) { 140 if ((stat & (ATA_ERR | ATA_DRQ)) == 0) { 141 ide_set_handler(drive, &task_no_data_intr, 142 WAIT_WORSTCASE, NULL); 143 return ide_started; 144 } 145 } 146 return ide_error(drive, "task_no_data_intr", stat); 147 } 148 149 if (custom && tf->command == ATA_CMD_IDLEIMMEDIATE) { 150 hwif->tp_ops->tf_read(drive, cmd); 151 if (tf->lbal != 0xc4) { 152 printk(KERN_ERR "%s: head unload failed!\n", 153 drive->name); 154 ide_tf_dump(drive->name, tf); 155 } else 156 drive->dev_flags |= IDE_DFLAG_PARKED; 157 } else if (custom && tf->command == ATA_CMD_SET_MULTI) 158 drive->mult_count = drive->mult_req; 159 160 if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE) { 161 struct request *rq = hwif->rq; 162 u8 err = ide_read_error(drive); 163 164 if (blk_pm_request(rq)) 165 ide_complete_pm_rq(drive, rq); 166 else { 167 if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) 168 ide_complete_cmd(drive, cmd, stat, err); 169 ide_complete_rq(drive, err); 170 } 171 } 172 173 return ide_stopped; 174} 175 176static u8 wait_drive_not_busy(ide_drive_t *drive) 177{ 178 ide_hwif_t *hwif = drive->hwif; 179 int retries; 180 u8 stat; 181 182 /* 183 * Last sector was transfered, wait until device is ready. This can 184 * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms. 185 */ 186 for (retries = 0; retries < 1000; retries++) { 187 stat = hwif->tp_ops->read_status(hwif); 188 189 if (stat & ATA_BUSY) 190 udelay(10); 191 else 192 break; 193 } 194 195 if (stat & ATA_BUSY) 196 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name); 197 198 return stat; 199} 200 201static void ide_pio_sector(ide_drive_t *drive, struct ide_cmd *cmd, 202 unsigned int write) 203{ 204 ide_hwif_t *hwif = drive->hwif; 205 struct scatterlist *sg = hwif->sg_table; 206 struct scatterlist *cursg = cmd->cursg; 207 struct page *page; 208#ifdef CONFIG_HIGHMEM 209 unsigned long flags; 210#endif 211 unsigned int offset; 212 u8 *buf; 213 214 cursg = cmd->cursg; 215 if (!cursg) { 216 cursg = sg; 217 cmd->cursg = sg; 218 } 219 220 page = sg_page(cursg); 221 offset = cursg->offset + cmd->cursg_ofs * SECTOR_SIZE; 222 223 /* get the current page and offset */ 224 page = nth_page(page, (offset >> PAGE_SHIFT)); 225 offset %= PAGE_SIZE; 226 227#ifdef CONFIG_HIGHMEM 228 local_irq_save(flags); 229#endif 230 buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset; 231 232 cmd->nleft--; 233 cmd->cursg_ofs++; 234 235 if ((cmd->cursg_ofs * SECTOR_SIZE) == cursg->length) { 236 cmd->cursg = sg_next(cmd->cursg); 237 cmd->cursg_ofs = 0; 238 } 239 240 /* do the actual data transfer */ 241 if (write) 242 hwif->tp_ops->output_data(drive, cmd, buf, SECTOR_SIZE); 243 else 244 hwif->tp_ops->input_data(drive, cmd, buf, SECTOR_SIZE); 245 246 kunmap_atomic(buf, KM_BIO_SRC_IRQ); 247#ifdef CONFIG_HIGHMEM 248 local_irq_restore(flags); 249#endif 250} 251 252static void ide_pio_multi(ide_drive_t *drive, struct ide_cmd *cmd, 253 unsigned int write) 254{ 255 unsigned int nsect; 256 257 nsect = min_t(unsigned int, cmd->nleft, drive->mult_count); 258 while (nsect--) 259 ide_pio_sector(drive, cmd, write); 260} 261 262static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd, 263 unsigned int write) 264{ 265 u8 saved_io_32bit = drive->io_32bit; 266 267 if (cmd->tf_flags & IDE_TFLAG_FS) 268 cmd->rq->errors = 0; 269 270 if (cmd->tf_flags & IDE_TFLAG_IO_16BIT) 271 drive->io_32bit = 0; 272 273 touch_softlockup_watchdog(); 274 275 if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) 276 ide_pio_multi(drive, cmd, write); 277 else 278 ide_pio_sector(drive, cmd, write); 279 280 drive->io_32bit = saved_io_32bit; 281} 282 283static ide_startstop_t task_error(ide_drive_t *drive, struct ide_cmd *cmd, 284 const char *s, u8 stat) 285{ 286 if (cmd->tf_flags & IDE_TFLAG_FS) { 287 int sectors = cmd->nsect - cmd->nleft; 288 289 if (cmd->protocol == ATA_PROT_PIO && 290 ((cmd->tf_flags & IDE_TFLAG_WRITE) || cmd->nleft == 0)) { 291 if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) 292 sectors -= drive->mult_count; 293 else 294 sectors--; 295 } 296 297 if (sectors > 0) 298 ide_end_request(drive, 1, sectors); 299 } 300 return ide_error(drive, s, stat); 301} 302 303void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat) 304{ 305 if ((cmd->tf_flags & IDE_TFLAG_FS) == 0) { 306 u8 err = ide_read_error(drive); 307 308 ide_complete_cmd(drive, cmd, stat, err); 309 ide_complete_rq(drive, err); 310 return; 311 } 312 313 ide_end_request(drive, 1, cmd->rq->nr_sectors); 314} 315 316/* 317 * Handler for command with PIO data phase. 318 */ 319static ide_startstop_t task_pio_intr(ide_drive_t *drive) 320{ 321 ide_hwif_t *hwif = drive->hwif; 322 struct ide_cmd *cmd = &drive->hwif->cmd; 323 u8 stat = hwif->tp_ops->read_status(hwif); 324 u8 write = !!(cmd->tf_flags & IDE_TFLAG_WRITE); 325 326 if (write == 0) { 327 /* Error? */ 328 if (stat & ATA_ERR) 329 return task_error(drive, cmd, __func__, stat); 330 331 /* Didn't want any data? Odd. */ 332 if ((stat & ATA_DRQ) == 0) { 333 /* Command all done? */ 334 if (OK_STAT(stat, ATA_DRDY, ATA_BUSY)) { 335 ide_finish_cmd(drive, cmd, stat); 336 return ide_stopped; 337 } 338 339 /* Assume it was a spurious irq */ 340 ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE, 341 NULL); 342 343 return ide_started; 344 } 345 } else { 346 if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat)) 347 return task_error(drive, cmd, __func__, stat); 348 349 /* Deal with unexpected ATA data phase. */ 350 if (((stat & ATA_DRQ) == 0) ^ (cmd->nleft == 0)) 351 return task_error(drive, cmd, __func__, stat); 352 } 353 354 if (write && cmd->nleft == 0) { 355 ide_finish_cmd(drive, cmd, stat); 356 return ide_stopped; 357 } 358 359 /* Still data left to transfer. */ 360 ide_pio_datablock(drive, cmd, write); 361 362 /* Are we done? Check status and finish transfer. */ 363 if (write == 0 && cmd->nleft == 0) { 364 stat = wait_drive_not_busy(drive); 365 if (!OK_STAT(stat, 0, BAD_STAT)) 366 return task_error(drive, cmd, __func__, stat); 367 ide_finish_cmd(drive, cmd, stat); 368 return ide_stopped; 369 } 370 371 /* Still data left to transfer. */ 372 ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE, NULL); 373 374 return ide_started; 375} 376 377static ide_startstop_t pre_task_out_intr(ide_drive_t *drive, 378 struct ide_cmd *cmd) 379{ 380 ide_startstop_t startstop; 381 382 if (ide_wait_stat(&startstop, drive, ATA_DRQ, 383 drive->bad_wstat, WAIT_DRQ)) { 384 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n", 385 drive->name, 386 (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) ? "MULT" : "", 387 (drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : ""); 388 return startstop; 389 } 390 391 if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0) 392 local_irq_disable(); 393 394 ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE, NULL); 395 396 ide_pio_datablock(drive, cmd, 1); 397 398 return ide_started; 399} 400 401int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf, 402 u16 nsect) 403{ 404 struct request *rq; 405 int error; 406 407 rq = blk_get_request(drive->queue, READ, __GFP_WAIT); 408 rq->cmd_type = REQ_TYPE_ATA_TASKFILE; 409 rq->buffer = buf; 410 411 /* 412 * (ks) We transfer currently only whole sectors. 413 * This is suffient for now. But, it would be great, 414 * if we would find a solution to transfer any size. 415 * To support special commands like READ LONG. 416 */ 417 rq->hard_nr_sectors = rq->nr_sectors = nsect; 418 rq->hard_cur_sectors = rq->current_nr_sectors = nsect; 419 420 if (cmd->tf_flags & IDE_TFLAG_WRITE) 421 rq->cmd_flags |= REQ_RW; 422 423 rq->special = cmd; 424 cmd->rq = rq; 425 426 error = blk_execute_rq(drive->queue, NULL, rq, 0); 427 blk_put_request(rq); 428 429 return error; 430} 431 432EXPORT_SYMBOL(ide_raw_taskfile); 433 434int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd) 435{ 436 cmd->protocol = ATA_PROT_NODATA; 437 438 return ide_raw_taskfile(drive, cmd, NULL, 0); 439} 440EXPORT_SYMBOL_GPL(ide_no_data_taskfile); 441 442#ifdef CONFIG_IDE_TASK_IOCTL 443int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg) 444{ 445 ide_task_request_t *req_task; 446 struct ide_cmd cmd; 447 u8 *outbuf = NULL; 448 u8 *inbuf = NULL; 449 u8 *data_buf = NULL; 450 int err = 0; 451 int tasksize = sizeof(struct ide_task_request_s); 452 unsigned int taskin = 0; 453 unsigned int taskout = 0; 454 u16 nsect = 0; 455 char __user *buf = (char __user *)arg; 456 457// printk("IDE Taskfile ...\n"); 458 459 req_task = kzalloc(tasksize, GFP_KERNEL); 460 if (req_task == NULL) return -ENOMEM; 461 if (copy_from_user(req_task, buf, tasksize)) { 462 kfree(req_task); 463 return -EFAULT; 464 } 465 466 taskout = req_task->out_size; 467 taskin = req_task->in_size; 468 469 if (taskin > 65536 || taskout > 65536) { 470 err = -EINVAL; 471 goto abort; 472 } 473 474 if (taskout) { 475 int outtotal = tasksize; 476 outbuf = kzalloc(taskout, GFP_KERNEL); 477 if (outbuf == NULL) { 478 err = -ENOMEM; 479 goto abort; 480 } 481 if (copy_from_user(outbuf, buf + outtotal, taskout)) { 482 err = -EFAULT; 483 goto abort; 484 } 485 } 486 487 if (taskin) { 488 int intotal = tasksize + taskout; 489 inbuf = kzalloc(taskin, GFP_KERNEL); 490 if (inbuf == NULL) { 491 err = -ENOMEM; 492 goto abort; 493 } 494 if (copy_from_user(inbuf, buf + intotal, taskin)) { 495 err = -EFAULT; 496 goto abort; 497 } 498 } 499 500 memset(&cmd, 0, sizeof(cmd)); 501 502 memcpy(&cmd.tf_array[0], req_task->hob_ports, 503 HDIO_DRIVE_HOB_HDR_SIZE - 2); 504 memcpy(&cmd.tf_array[6], req_task->io_ports, 505 HDIO_DRIVE_TASK_HDR_SIZE); 506 507 cmd.tf_flags = IDE_TFLAG_IO_16BIT | IDE_TFLAG_DEVICE | 508 IDE_TFLAG_IN_TF; 509 510 if (drive->dev_flags & IDE_DFLAG_LBA48) 511 cmd.tf_flags |= (IDE_TFLAG_LBA48 | IDE_TFLAG_IN_HOB); 512 513 if (req_task->out_flags.all) { 514 cmd.ftf_flags |= IDE_FTFLAG_FLAGGED; 515 516 if (req_task->out_flags.b.data) 517 cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA; 518 519 if (req_task->out_flags.b.nsector_hob) 520 cmd.tf_flags |= IDE_TFLAG_OUT_HOB_NSECT; 521 if (req_task->out_flags.b.sector_hob) 522 cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAL; 523 if (req_task->out_flags.b.lcyl_hob) 524 cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAM; 525 if (req_task->out_flags.b.hcyl_hob) 526 cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAH; 527 528 if (req_task->out_flags.b.error_feature) 529 cmd.tf_flags |= IDE_TFLAG_OUT_FEATURE; 530 if (req_task->out_flags.b.nsector) 531 cmd.tf_flags |= IDE_TFLAG_OUT_NSECT; 532 if (req_task->out_flags.b.sector) 533 cmd.tf_flags |= IDE_TFLAG_OUT_LBAL; 534 if (req_task->out_flags.b.lcyl) 535 cmd.tf_flags |= IDE_TFLAG_OUT_LBAM; 536 if (req_task->out_flags.b.hcyl) 537 cmd.tf_flags |= IDE_TFLAG_OUT_LBAH; 538 } else { 539 cmd.tf_flags |= IDE_TFLAG_OUT_TF; 540 if (cmd.tf_flags & IDE_TFLAG_LBA48) 541 cmd.tf_flags |= IDE_TFLAG_OUT_HOB; 542 } 543 544 if (req_task->in_flags.b.data) 545 cmd.ftf_flags |= IDE_FTFLAG_IN_DATA; 546 547 if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE) { 548 /* fixup data phase if needed */ 549 if (req_task->data_phase == TASKFILE_IN_DMAQ || 550 req_task->data_phase == TASKFILE_IN_DMA) 551 cmd.tf_flags |= IDE_TFLAG_WRITE; 552 } 553 554 cmd.protocol = ATA_PROT_DMA; 555 556 switch (req_task->data_phase) { 557 case TASKFILE_MULTI_OUT: 558 if (!drive->mult_count) { 559 /* (hs): give up if multcount is not set */ 560 printk(KERN_ERR "%s: %s Multimode Write " \ 561 "multcount is not set\n", 562 drive->name, __func__); 563 err = -EPERM; 564 goto abort; 565 } 566 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO; 567 /* fall through */ 568 case TASKFILE_OUT: 569 cmd.protocol = ATA_PROT_PIO; 570 /* fall through */ 571 case TASKFILE_OUT_DMAQ: 572 case TASKFILE_OUT_DMA: 573 cmd.tf_flags |= IDE_TFLAG_WRITE; 574 nsect = taskout / SECTOR_SIZE; 575 data_buf = outbuf; 576 break; 577 case TASKFILE_MULTI_IN: 578 if (!drive->mult_count) { 579 /* (hs): give up if multcount is not set */ 580 printk(KERN_ERR "%s: %s Multimode Read failure " \ 581 "multcount is not set\n", 582 drive->name, __func__); 583 err = -EPERM; 584 goto abort; 585 } 586 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO; 587 /* fall through */ 588 case TASKFILE_IN: 589 cmd.protocol = ATA_PROT_PIO; 590 /* fall through */ 591 case TASKFILE_IN_DMAQ: 592 case TASKFILE_IN_DMA: 593 nsect = taskin / SECTOR_SIZE; 594 data_buf = inbuf; 595 break; 596 case TASKFILE_NO_DATA: 597 cmd.protocol = ATA_PROT_NODATA; 598 break; 599 default: 600 err = -EFAULT; 601 goto abort; 602 } 603 604 if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA) 605 nsect = 0; 606 else if (!nsect) { 607 nsect = (cmd.tf.hob_nsect << 8) | cmd.tf.nsect; 608 609 if (!nsect) { 610 printk(KERN_ERR "%s: in/out command without data\n", 611 drive->name); 612 err = -EFAULT; 613 goto abort; 614 } 615 } 616 617 err = ide_raw_taskfile(drive, &cmd, data_buf, nsect); 618 619 memcpy(req_task->hob_ports, &cmd.tf_array[0], 620 HDIO_DRIVE_HOB_HDR_SIZE - 2); 621 memcpy(req_task->io_ports, &cmd.tf_array[6], 622 HDIO_DRIVE_TASK_HDR_SIZE); 623 624 if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) && 625 req_task->in_flags.all == 0) { 626 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS; 627 if (drive->dev_flags & IDE_DFLAG_LBA48) 628 req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8); 629 } 630 631 if (copy_to_user(buf, req_task, tasksize)) { 632 err = -EFAULT; 633 goto abort; 634 } 635 if (taskout) { 636 int outtotal = tasksize; 637 if (copy_to_user(buf + outtotal, outbuf, taskout)) { 638 err = -EFAULT; 639 goto abort; 640 } 641 } 642 if (taskin) { 643 int intotal = tasksize + taskout; 644 if (copy_to_user(buf + intotal, inbuf, taskin)) { 645 err = -EFAULT; 646 goto abort; 647 } 648 } 649abort: 650 kfree(req_task); 651 kfree(outbuf); 652 kfree(inbuf); 653 654// printk("IDE Taskfile ioctl ended. rc = %i\n", err); 655 656 return err; 657} 658#endif 659