]> err.no Git - linux-2.6/blob - drivers/ide/ide-taskfile.c
ide: add missing rq.ref_count initialization to ide_diag_taskfile()
[linux-2.6] / drivers / ide / ide-taskfile.c
1 /*
2  * linux/drivers/ide/ide-taskfile.c     Version 0.38    March 05, 2003
3  *
4  *  Copyright (C) 2000-2002     Michael Cornwell <cornwell@acm.org>
5  *  Copyright (C) 2000-2002     Andre Hedrick <andre@linux-ide.org>
6  *  Copyright (C) 2001-2002     Klaus Smolin
7  *                                      IBM Storage Technology Division
8  *  Copyright (C) 2003-2004     Bartlomiej Zolnierkiewicz
9  *
10  *  The big the bad and the ugly.
11  */
12
13 #include <linux/module.h>
14 #include <linux/types.h>
15 #include <linux/string.h>
16 #include <linux/kernel.h>
17 #include <linux/timer.h>
18 #include <linux/mm.h>
19 #include <linux/sched.h>
20 #include <linux/interrupt.h>
21 #include <linux/major.h>
22 #include <linux/errno.h>
23 #include <linux/genhd.h>
24 #include <linux/blkpg.h>
25 #include <linux/slab.h>
26 #include <linux/pci.h>
27 #include <linux/delay.h>
28 #include <linux/hdreg.h>
29 #include <linux/ide.h>
30 #include <linux/bitops.h>
31 #include <linux/scatterlist.h>
32
33 #include <asm/byteorder.h>
34 #include <asm/irq.h>
35 #include <asm/uaccess.h>
36 #include <asm/io.h>
37
38 static void ata_bswap_data (void *buffer, int wcount)
39 {
40         u16 *p = buffer;
41
42         while (wcount--) {
43                 *p = *p << 8 | *p >> 8; p++;
44                 *p = *p << 8 | *p >> 8; p++;
45         }
46 }
47
48 static void taskfile_input_data(ide_drive_t *drive, void *buffer, u32 wcount)
49 {
50         HWIF(drive)->ata_input_data(drive, buffer, wcount);
51         if (drive->bswap)
52                 ata_bswap_data(buffer, wcount);
53 }
54
55 static void taskfile_output_data(ide_drive_t *drive, void *buffer, u32 wcount)
56 {
57         if (drive->bswap) {
58                 ata_bswap_data(buffer, wcount);
59                 HWIF(drive)->ata_output_data(drive, buffer, wcount);
60                 ata_bswap_data(buffer, wcount);
61         } else {
62                 HWIF(drive)->ata_output_data(drive, buffer, wcount);
63         }
64 }
65
66 int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
67 {
68         ide_task_t args;
69         memset(&args, 0, sizeof(ide_task_t));
70         args.tfRegister[IDE_NSECTOR_OFFSET]     = 0x01;
71         if (drive->media == ide_disk)
72                 args.tfRegister[IDE_COMMAND_OFFSET]     = WIN_IDENTIFY;
73         else
74                 args.tfRegister[IDE_COMMAND_OFFSET]     = WIN_PIDENTIFY;
75         args.command_type = IDE_DRIVE_TASK_IN;
76         args.data_phase   = TASKFILE_IN;
77         args.handler      = &task_in_intr;
78         return ide_raw_taskfile(drive, &args, buf);
79 }
80
81 ide_startstop_t do_rw_taskfile (ide_drive_t *drive, ide_task_t *task)
82 {
83         ide_hwif_t *hwif        = HWIF(drive);
84         task_struct_t *taskfile = (task_struct_t *) task->tfRegister;
85         hob_struct_t *hobfile   = (hob_struct_t *) task->hobRegister;
86         u8 HIHI                 = (drive->addressing == 1) ? 0xE0 : 0xEF;
87
88         /* ALL Command Block Executions SHALL clear nIEN, unless otherwise */
89         if (IDE_CONTROL_REG) {
90                 /* clear nIEN */
91                 hwif->OUTB(drive->ctl, IDE_CONTROL_REG);
92         }
93         SELECT_MASK(drive, 0);
94
95         if (drive->addressing == 1) {
96                 hwif->OUTB(hobfile->feature, IDE_FEATURE_REG);
97                 hwif->OUTB(hobfile->sector_count, IDE_NSECTOR_REG);
98                 hwif->OUTB(hobfile->sector_number, IDE_SECTOR_REG);
99                 hwif->OUTB(hobfile->low_cylinder, IDE_LCYL_REG);
100                 hwif->OUTB(hobfile->high_cylinder, IDE_HCYL_REG);
101         }
102
103         hwif->OUTB(taskfile->feature, IDE_FEATURE_REG);
104         hwif->OUTB(taskfile->sector_count, IDE_NSECTOR_REG);
105         hwif->OUTB(taskfile->sector_number, IDE_SECTOR_REG);
106         hwif->OUTB(taskfile->low_cylinder, IDE_LCYL_REG);
107         hwif->OUTB(taskfile->high_cylinder, IDE_HCYL_REG);
108
109         hwif->OUTB((taskfile->device_head & HIHI) | drive->select.all, IDE_SELECT_REG);
110
111         if (task->handler != NULL) {
112                 if (task->prehandler != NULL) {
113                         hwif->OUTBSYNC(drive, taskfile->command, IDE_COMMAND_REG);
114                         ndelay(400);    /* FIXME */
115                         return task->prehandler(drive, task->rq);
116                 }
117                 ide_execute_command(drive, taskfile->command, task->handler, WAIT_WORSTCASE, NULL);
118                 return ide_started;
119         }
120
121         if (!drive->using_dma)
122                 return ide_stopped;
123
124         switch (taskfile->command) {
125                 case WIN_WRITEDMA_ONCE:
126                 case WIN_WRITEDMA:
127                 case WIN_WRITEDMA_EXT:
128                 case WIN_READDMA_ONCE:
129                 case WIN_READDMA:
130                 case WIN_READDMA_EXT:
131                 case WIN_IDENTIFY_DMA:
132                         if (!hwif->dma_setup(drive)) {
133                                 hwif->dma_exec_cmd(drive, taskfile->command);
134                                 hwif->dma_start(drive);
135                                 return ide_started;
136                         }
137                         break;
138                 default:
139                         if (task->handler == NULL)
140                                 return ide_stopped;
141         }
142
143         return ide_stopped;
144 }
145
146 /*
147  * set_multmode_intr() is invoked on completion of a WIN_SETMULT cmd.
148  */
149 ide_startstop_t set_multmode_intr (ide_drive_t *drive)
150 {
151         ide_hwif_t *hwif = HWIF(drive);
152         u8 stat;
153
154         if (OK_STAT(stat = hwif->INB(IDE_STATUS_REG),READY_STAT,BAD_STAT)) {
155                 drive->mult_count = drive->mult_req;
156         } else {
157                 drive->mult_req = drive->mult_count = 0;
158                 drive->special.b.recalibrate = 1;
159                 (void) ide_dump_status(drive, "set_multmode", stat);
160         }
161         return ide_stopped;
162 }
163
164 /*
165  * set_geometry_intr() is invoked on completion of a WIN_SPECIFY cmd.
166  */
167 ide_startstop_t set_geometry_intr (ide_drive_t *drive)
168 {
169         ide_hwif_t *hwif = HWIF(drive);
170         int retries = 5;
171         u8 stat;
172
173         while (((stat = hwif->INB(IDE_STATUS_REG)) & BUSY_STAT) && retries--)
174                 udelay(10);
175
176         if (OK_STAT(stat, READY_STAT, BAD_STAT))
177                 return ide_stopped;
178
179         if (stat & (ERR_STAT|DRQ_STAT))
180                 return ide_error(drive, "set_geometry_intr", stat);
181
182         BUG_ON(HWGROUP(drive)->handler != NULL);
183         ide_set_handler(drive, &set_geometry_intr, WAIT_WORSTCASE, NULL);
184         return ide_started;
185 }
186
187 /*
188  * recal_intr() is invoked on completion of a WIN_RESTORE (recalibrate) cmd.
189  */
190 ide_startstop_t recal_intr (ide_drive_t *drive)
191 {
192         ide_hwif_t *hwif = HWIF(drive);
193         u8 stat;
194
195         if (!OK_STAT(stat = hwif->INB(IDE_STATUS_REG), READY_STAT, BAD_STAT))
196                 return ide_error(drive, "recal_intr", stat);
197         return ide_stopped;
198 }
199
200 /*
201  * Handler for commands without a data phase
202  */
203 ide_startstop_t task_no_data_intr (ide_drive_t *drive)
204 {
205         ide_task_t *args        = HWGROUP(drive)->rq->special;
206         ide_hwif_t *hwif        = HWIF(drive);
207         u8 stat;
208
209         local_irq_enable_in_hardirq();
210         if (!OK_STAT(stat = hwif->INB(IDE_STATUS_REG),READY_STAT,BAD_STAT)) {
211                 return ide_error(drive, "task_no_data_intr", stat);
212                 /* calls ide_end_drive_cmd */
213         }
214         if (args)
215                 ide_end_drive_cmd(drive, stat, hwif->INB(IDE_ERROR_REG));
216
217         return ide_stopped;
218 }
219
220 EXPORT_SYMBOL(task_no_data_intr);
221
222 static u8 wait_drive_not_busy(ide_drive_t *drive)
223 {
224         ide_hwif_t *hwif = HWIF(drive);
225         int retries;
226         u8 stat;
227
228         /*
229          * Last sector was transfered, wait until drive is ready.
230          * This can take up to 10 usec, but we will wait max 1 ms
231          * (drive_cmd_intr() waits that long).
232          */
233         for (retries = 0; retries < 100; retries++) {
234                 if ((stat = hwif->INB(IDE_STATUS_REG)) & BUSY_STAT)
235                         udelay(10);
236                 else
237                         break;
238         }
239
240         if (stat & BUSY_STAT)
241                 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);
242
243         return stat;
244 }
245
246 static void ide_pio_sector(ide_drive_t *drive, unsigned int write)
247 {
248         ide_hwif_t *hwif = drive->hwif;
249         struct scatterlist *sg = hwif->sg_table;
250         struct scatterlist *cursg = hwif->cursg;
251         struct page *page;
252 #ifdef CONFIG_HIGHMEM
253         unsigned long flags;
254 #endif
255         unsigned int offset;
256         u8 *buf;
257
258         cursg = hwif->cursg;
259         if (!cursg) {
260                 cursg = sg;
261                 hwif->cursg = sg;
262         }
263
264         page = sg_page(cursg);
265         offset = cursg->offset + hwif->cursg_ofs * SECTOR_SIZE;
266
267         /* get the current page and offset */
268         page = nth_page(page, (offset >> PAGE_SHIFT));
269         offset %= PAGE_SIZE;
270
271 #ifdef CONFIG_HIGHMEM
272         local_irq_save(flags);
273 #endif
274         buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
275
276         hwif->nleft--;
277         hwif->cursg_ofs++;
278
279         if ((hwif->cursg_ofs * SECTOR_SIZE) == cursg->length) {
280                 hwif->cursg = sg_next(hwif->cursg);
281                 hwif->cursg_ofs = 0;
282         }
283
284         /* do the actual data transfer */
285         if (write)
286                 taskfile_output_data(drive, buf, SECTOR_WORDS);
287         else
288                 taskfile_input_data(drive, buf, SECTOR_WORDS);
289
290         kunmap_atomic(buf, KM_BIO_SRC_IRQ);
291 #ifdef CONFIG_HIGHMEM
292         local_irq_restore(flags);
293 #endif
294 }
295
296 static void ide_pio_multi(ide_drive_t *drive, unsigned int write)
297 {
298         unsigned int nsect;
299
300         nsect = min_t(unsigned int, drive->hwif->nleft, drive->mult_count);
301         while (nsect--)
302                 ide_pio_sector(drive, write);
303 }
304
305 static void ide_pio_datablock(ide_drive_t *drive, struct request *rq,
306                                      unsigned int write)
307 {
308         if (rq->bio)    /* fs request */
309                 rq->errors = 0;
310
311         touch_softlockup_watchdog();
312
313         switch (drive->hwif->data_phase) {
314         case TASKFILE_MULTI_IN:
315         case TASKFILE_MULTI_OUT:
316                 ide_pio_multi(drive, write);
317                 break;
318         default:
319                 ide_pio_sector(drive, write);
320                 break;
321         }
322 }
323
324 static ide_startstop_t task_error(ide_drive_t *drive, struct request *rq,
325                                   const char *s, u8 stat)
326 {
327         if (rq->bio) {
328                 ide_hwif_t *hwif = drive->hwif;
329                 int sectors = hwif->nsect - hwif->nleft;
330
331                 switch (hwif->data_phase) {
332                 case TASKFILE_IN:
333                         if (hwif->nleft)
334                                 break;
335                         /* fall through */
336                 case TASKFILE_OUT:
337                         sectors--;
338                         break;
339                 case TASKFILE_MULTI_IN:
340                         if (hwif->nleft)
341                                 break;
342                         /* fall through */
343                 case TASKFILE_MULTI_OUT:
344                         sectors -= drive->mult_count;
345                 default:
346                         break;
347                 }
348
349                 if (sectors > 0) {
350                         ide_driver_t *drv;
351
352                         drv = *(ide_driver_t **)rq->rq_disk->private_data;
353                         drv->end_request(drive, 1, sectors);
354                 }
355         }
356         return ide_error(drive, s, stat);
357 }
358
359 static void task_end_request(ide_drive_t *drive, struct request *rq, u8 stat)
360 {
361         HWIF(drive)->cursg = NULL;
362
363         if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE) {
364                 ide_task_t *task = rq->special;
365
366                 if (task->tf_out_flags.all) {
367                         u8 err = drive->hwif->INB(IDE_ERROR_REG);
368                         ide_end_drive_cmd(drive, stat, err);
369                         return;
370                 }
371         }
372
373         if (rq->rq_disk) {
374                 ide_driver_t *drv;
375
376                 drv = *(ide_driver_t **)rq->rq_disk->private_data;;
377                 drv->end_request(drive, 1, rq->hard_nr_sectors);
378         } else
379                 ide_end_request(drive, 1, rq->hard_nr_sectors);
380 }
381
382 /*
383  * Handler for command with PIO data-in phase (Read/Read Multiple).
384  */
385 ide_startstop_t task_in_intr (ide_drive_t *drive)
386 {
387         ide_hwif_t *hwif = drive->hwif;
388         struct request *rq = HWGROUP(drive)->rq;
389         u8 stat = hwif->INB(IDE_STATUS_REG);
390
391         /* new way for dealing with premature shared PCI interrupts */
392         if (!OK_STAT(stat, DATA_READY, BAD_R_STAT)) {
393                 if (stat & (ERR_STAT | DRQ_STAT))
394                         return task_error(drive, rq, __FUNCTION__, stat);
395                 /* No data yet, so wait for another IRQ. */
396                 ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
397                 return ide_started;
398         }
399
400         ide_pio_datablock(drive, rq, 0);
401
402         /* If it was the last datablock check status and finish transfer. */
403         if (!hwif->nleft) {
404                 stat = wait_drive_not_busy(drive);
405                 if (!OK_STAT(stat, 0, BAD_R_STAT))
406                         return task_error(drive, rq, __FUNCTION__, stat);
407                 task_end_request(drive, rq, stat);
408                 return ide_stopped;
409         }
410
411         /* Still data left to transfer. */
412         ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
413
414         return ide_started;
415 }
416 EXPORT_SYMBOL(task_in_intr);
417
418 /*
419  * Handler for command with PIO data-out phase (Write/Write Multiple).
420  */
421 static ide_startstop_t task_out_intr (ide_drive_t *drive)
422 {
423         ide_hwif_t *hwif = drive->hwif;
424         struct request *rq = HWGROUP(drive)->rq;
425         u8 stat = hwif->INB(IDE_STATUS_REG);
426
427         if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
428                 return task_error(drive, rq, __FUNCTION__, stat);
429
430         /* Deal with unexpected ATA data phase. */
431         if (((stat & DRQ_STAT) == 0) ^ !hwif->nleft)
432                 return task_error(drive, rq, __FUNCTION__, stat);
433
434         if (!hwif->nleft) {
435                 task_end_request(drive, rq, stat);
436                 return ide_stopped;
437         }
438
439         /* Still data left to transfer. */
440         ide_pio_datablock(drive, rq, 1);
441         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
442
443         return ide_started;
444 }
445
446 ide_startstop_t pre_task_out_intr (ide_drive_t *drive, struct request *rq)
447 {
448         ide_startstop_t startstop;
449
450         if (ide_wait_stat(&startstop, drive, DATA_READY,
451                           drive->bad_wstat, WAIT_DRQ)) {
452                 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
453                                 drive->name,
454                                 drive->hwif->data_phase ? "MULT" : "",
455                                 drive->addressing ? "_EXT" : "");
456                 return startstop;
457         }
458
459         if (!drive->unmask)
460                 local_irq_disable();
461
462         ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
463         ide_pio_datablock(drive, rq, 1);
464
465         return ide_started;
466 }
467 EXPORT_SYMBOL(pre_task_out_intr);
468
469 static int ide_diag_taskfile(ide_drive_t *drive, ide_task_t *args, unsigned long data_size, u8 *buf)
470 {
471         struct request rq;
472
473         memset(&rq, 0, sizeof(rq));
474         rq.ref_count = 1;
475         rq.cmd_type = REQ_TYPE_ATA_TASKFILE;
476         rq.buffer = buf;
477
478         /*
479          * (ks) We transfer currently only whole sectors.
480          * This is suffient for now.  But, it would be great,
481          * if we would find a solution to transfer any size.
482          * To support special commands like READ LONG.
483          */
484         if (args->command_type != IDE_DRIVE_TASK_NO_DATA) {
485                 if (data_size == 0)
486                         rq.nr_sectors = (args->hobRegister[IDE_NSECTOR_OFFSET] << 8) | args->tfRegister[IDE_NSECTOR_OFFSET];
487                 else
488                         rq.nr_sectors = data_size / SECTOR_SIZE;
489
490                 if (!rq.nr_sectors) {
491                         printk(KERN_ERR "%s: in/out command without data\n",
492                                         drive->name);
493                         return -EFAULT;
494                 }
495
496                 rq.hard_nr_sectors = rq.nr_sectors;
497                 rq.hard_cur_sectors = rq.current_nr_sectors = rq.nr_sectors;
498
499                 if (args->command_type == IDE_DRIVE_TASK_RAW_WRITE)
500                         rq.cmd_flags |= REQ_RW;
501         }
502
503         rq.special = args;
504         args->rq = &rq;
505         return ide_do_drive_cmd(drive, &rq, ide_wait);
506 }
507
508 int ide_raw_taskfile (ide_drive_t *drive, ide_task_t *args, u8 *buf)
509 {
510         return ide_diag_taskfile(drive, args, 0, buf);
511 }
512
513 EXPORT_SYMBOL(ide_raw_taskfile);
514
515 int ide_taskfile_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
516 {
517         ide_task_request_t      *req_task;
518         ide_task_t              args;
519         u8 *outbuf              = NULL;
520         u8 *inbuf               = NULL;
521         task_ioreg_t *argsptr   = args.tfRegister;
522         task_ioreg_t *hobsptr   = args.hobRegister;
523         int err                 = 0;
524         int tasksize            = sizeof(struct ide_task_request_s);
525         unsigned int taskin     = 0;
526         unsigned int taskout    = 0;
527         u8 io_32bit             = drive->io_32bit;
528         char __user *buf = (char __user *)arg;
529
530 //      printk("IDE Taskfile ...\n");
531
532         req_task = kzalloc(tasksize, GFP_KERNEL);
533         if (req_task == NULL) return -ENOMEM;
534         if (copy_from_user(req_task, buf, tasksize)) {
535                 kfree(req_task);
536                 return -EFAULT;
537         }
538
539         taskout = req_task->out_size;
540         taskin  = req_task->in_size;
541         
542         if (taskin > 65536 || taskout > 65536) {
543                 err = -EINVAL;
544                 goto abort;
545         }
546
547         if (taskout) {
548                 int outtotal = tasksize;
549                 outbuf = kzalloc(taskout, GFP_KERNEL);
550                 if (outbuf == NULL) {
551                         err = -ENOMEM;
552                         goto abort;
553                 }
554                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
555                         err = -EFAULT;
556                         goto abort;
557                 }
558         }
559
560         if (taskin) {
561                 int intotal = tasksize + taskout;
562                 inbuf = kzalloc(taskin, GFP_KERNEL);
563                 if (inbuf == NULL) {
564                         err = -ENOMEM;
565                         goto abort;
566                 }
567                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
568                         err = -EFAULT;
569                         goto abort;
570                 }
571         }
572
573         memset(&args, 0, sizeof(ide_task_t));
574         memcpy(argsptr, req_task->io_ports, HDIO_DRIVE_TASK_HDR_SIZE);
575         memcpy(hobsptr, req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE);
576
577         args.tf_in_flags  = req_task->in_flags;
578         args.tf_out_flags = req_task->out_flags;
579         args.data_phase   = req_task->data_phase;
580         args.command_type = req_task->req_cmd;
581
582         drive->io_32bit = 0;
583         switch(req_task->data_phase) {
584                 case TASKFILE_OUT_DMAQ:
585                 case TASKFILE_OUT_DMA:
586                         err = ide_diag_taskfile(drive, &args, taskout, outbuf);
587                         break;
588                 case TASKFILE_IN_DMAQ:
589                 case TASKFILE_IN_DMA:
590                         err = ide_diag_taskfile(drive, &args, taskin, inbuf);
591                         break;
592                 case TASKFILE_MULTI_OUT:
593                         if (!drive->mult_count) {
594                                 /* (hs): give up if multcount is not set */
595                                 printk(KERN_ERR "%s: %s Multimode Write " \
596                                         "multcount is not set\n",
597                                         drive->name, __FUNCTION__);
598                                 err = -EPERM;
599                                 goto abort;
600                         }
601                         /* fall through */
602                 case TASKFILE_OUT:
603                         args.prehandler = &pre_task_out_intr;
604                         args.handler = &task_out_intr;
605                         err = ide_diag_taskfile(drive, &args, taskout, outbuf);
606                         break;
607                 case TASKFILE_MULTI_IN:
608                         if (!drive->mult_count) {
609                                 /* (hs): give up if multcount is not set */
610                                 printk(KERN_ERR "%s: %s Multimode Read failure " \
611                                         "multcount is not set\n",
612                                         drive->name, __FUNCTION__);
613                                 err = -EPERM;
614                                 goto abort;
615                         }
616                         /* fall through */
617                 case TASKFILE_IN:
618                         args.handler = &task_in_intr;
619                         err = ide_diag_taskfile(drive, &args, taskin, inbuf);
620                         break;
621                 case TASKFILE_NO_DATA:
622                         args.handler = &task_no_data_intr;
623                         err = ide_diag_taskfile(drive, &args, 0, NULL);
624                         break;
625                 default:
626                         err = -EFAULT;
627                         goto abort;
628         }
629
630         memcpy(req_task->io_ports, &(args.tfRegister), HDIO_DRIVE_TASK_HDR_SIZE);
631         memcpy(req_task->hob_ports, &(args.hobRegister), HDIO_DRIVE_HOB_HDR_SIZE);
632         req_task->in_flags  = args.tf_in_flags;
633         req_task->out_flags = args.tf_out_flags;
634
635         if (copy_to_user(buf, req_task, tasksize)) {
636                 err = -EFAULT;
637                 goto abort;
638         }
639         if (taskout) {
640                 int outtotal = tasksize;
641                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
642                         err = -EFAULT;
643                         goto abort;
644                 }
645         }
646         if (taskin) {
647                 int intotal = tasksize + taskout;
648                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
649                         err = -EFAULT;
650                         goto abort;
651                 }
652         }
653 abort:
654         kfree(req_task);
655         kfree(outbuf);
656         kfree(inbuf);
657
658 //      printk("IDE Taskfile ioctl ended. rc = %i\n", err);
659
660         drive->io_32bit = io_32bit;
661
662         return err;
663 }
664
665 int ide_wait_cmd (ide_drive_t *drive, u8 cmd, u8 nsect, u8 feature, u8 sectors, u8 *buf)
666 {
667         struct request rq;
668         u8 buffer[4];
669
670         if (!buf)
671                 buf = buffer;
672         memset(buf, 0, 4 + SECTOR_WORDS * 4 * sectors);
673         ide_init_drive_cmd(&rq);
674         rq.buffer = buf;
675         *buf++ = cmd;
676         *buf++ = nsect;
677         *buf++ = feature;
678         *buf++ = sectors;
679         return ide_do_drive_cmd(drive, &rq, ide_wait);
680 }
681
682 int ide_cmd_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
683 {
684         int err = 0;
685         u8 args[4], *argbuf = args;
686         u8 xfer_rate = 0;
687         int argsize = 4;
688         ide_task_t tfargs;
689
690         if (NULL == (void *) arg) {
691                 struct request rq;
692                 ide_init_drive_cmd(&rq);
693                 return ide_do_drive_cmd(drive, &rq, ide_wait);
694         }
695
696         if (copy_from_user(args, (void __user *)arg, 4))
697                 return -EFAULT;
698
699         memset(&tfargs, 0, sizeof(ide_task_t));
700         tfargs.tfRegister[IDE_FEATURE_OFFSET] = args[2];
701         tfargs.tfRegister[IDE_NSECTOR_OFFSET] = args[3];
702         tfargs.tfRegister[IDE_SECTOR_OFFSET]  = args[1];
703         tfargs.tfRegister[IDE_LCYL_OFFSET]    = 0x00;
704         tfargs.tfRegister[IDE_HCYL_OFFSET]    = 0x00;
705         tfargs.tfRegister[IDE_SELECT_OFFSET]  = 0x00;
706         tfargs.tfRegister[IDE_COMMAND_OFFSET] = args[0];
707
708         if (args[3]) {
709                 argsize = 4 + (SECTOR_WORDS * 4 * args[3]);
710                 argbuf = kzalloc(argsize, GFP_KERNEL);
711                 if (argbuf == NULL)
712                         return -ENOMEM;
713         }
714         if (set_transfer(drive, &tfargs)) {
715                 xfer_rate = args[1];
716                 if (ide_ata66_check(drive, &tfargs))
717                         goto abort;
718         }
719
720         err = ide_wait_cmd(drive, args[0], args[1], args[2], args[3], argbuf);
721
722         if (!err && xfer_rate) {
723                 /* active-retuning-calls future */
724                 ide_set_xfer_rate(drive, xfer_rate);
725                 ide_driveid_update(drive);
726         }
727 abort:
728         if (copy_to_user((void __user *)arg, argbuf, argsize))
729                 err = -EFAULT;
730         if (argsize > 4)
731                 kfree(argbuf);
732         return err;
733 }
734
735 static int ide_wait_cmd_task(ide_drive_t *drive, u8 *buf)
736 {
737         struct request rq;
738
739         ide_init_drive_cmd(&rq);
740         rq.cmd_type = REQ_TYPE_ATA_TASK;
741         rq.buffer = buf;
742         return ide_do_drive_cmd(drive, &rq, ide_wait);
743 }
744
745 int ide_task_ioctl (ide_drive_t *drive, unsigned int cmd, unsigned long arg)
746 {
747         void __user *p = (void __user *)arg;
748         int err = 0;
749         u8 args[7], *argbuf = args;
750         int argsize = 7;
751
752         if (copy_from_user(args, p, 7))
753                 return -EFAULT;
754         err = ide_wait_cmd_task(drive, argbuf);
755         if (copy_to_user(p, argbuf, argsize))
756                 err = -EFAULT;
757         return err;
758 }
759
760 /*
761  * NOTICE: This is additions from IBM to provide a discrete interface,
762  * for selective taskregister access operations.  Nice JOB Klaus!!!
763  * Glad to be able to work and co-develop this with you and IBM.
764  */
765 ide_startstop_t flagged_taskfile (ide_drive_t *drive, ide_task_t *task)
766 {
767         ide_hwif_t *hwif        = HWIF(drive);
768         task_struct_t *taskfile = (task_struct_t *) task->tfRegister;
769         hob_struct_t *hobfile   = (hob_struct_t *) task->hobRegister;
770
771         if (task->data_phase == TASKFILE_MULTI_IN ||
772             task->data_phase == TASKFILE_MULTI_OUT) {
773                 if (!drive->mult_count) {
774                         printk(KERN_ERR "%s: multimode not set!\n", drive->name);
775                         return ide_stopped;
776                 }
777         }
778
779         /*
780          * (ks) Check taskfile in flags.
781          * If set, then execute as it is defined.
782          * If not set, then define default settings.
783          * The default values are:
784          *      read all taskfile registers (except data)
785          *      read the hob registers (sector, nsector, lcyl, hcyl)
786          */
787         if (task->tf_in_flags.all == 0) {
788                 task->tf_in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
789                 if (drive->addressing == 1)
790                         task->tf_in_flags.all |= (IDE_HOB_STD_IN_FLAGS  << 8);
791         }
792
793         /* ALL Command Block Executions SHALL clear nIEN, unless otherwise */
794         if (IDE_CONTROL_REG)
795                 /* clear nIEN */
796                 hwif->OUTB(drive->ctl, IDE_CONTROL_REG);
797         SELECT_MASK(drive, 0);
798
799         if (task->tf_out_flags.b.data) {
800                 u16 data =  taskfile->data + (hobfile->data << 8);
801                 hwif->OUTW(data, IDE_DATA_REG);
802         }
803
804         /* (ks) send hob registers first */
805         if (task->tf_out_flags.b.nsector_hob)
806                 hwif->OUTB(hobfile->sector_count, IDE_NSECTOR_REG);
807         if (task->tf_out_flags.b.sector_hob)
808                 hwif->OUTB(hobfile->sector_number, IDE_SECTOR_REG);
809         if (task->tf_out_flags.b.lcyl_hob)
810                 hwif->OUTB(hobfile->low_cylinder, IDE_LCYL_REG);
811         if (task->tf_out_flags.b.hcyl_hob)
812                 hwif->OUTB(hobfile->high_cylinder, IDE_HCYL_REG);
813
814         /* (ks) Send now the standard registers */
815         if (task->tf_out_flags.b.error_feature)
816                 hwif->OUTB(taskfile->feature, IDE_FEATURE_REG);
817         /* refers to number of sectors to transfer */
818         if (task->tf_out_flags.b.nsector)
819                 hwif->OUTB(taskfile->sector_count, IDE_NSECTOR_REG);
820         /* refers to sector offset or start sector */
821         if (task->tf_out_flags.b.sector)
822                 hwif->OUTB(taskfile->sector_number, IDE_SECTOR_REG);
823         if (task->tf_out_flags.b.lcyl)
824                 hwif->OUTB(taskfile->low_cylinder, IDE_LCYL_REG);
825         if (task->tf_out_flags.b.hcyl)
826                 hwif->OUTB(taskfile->high_cylinder, IDE_HCYL_REG);
827
828         /*
829          * (ks) In the flagged taskfile approch, we will use all specified
830          * registers and the register value will not be changed, except the
831          * select bit (master/slave) in the drive_head register. We must make
832          * sure that the desired drive is selected.
833          */
834         hwif->OUTB(taskfile->device_head | drive->select.all, IDE_SELECT_REG);
835         switch(task->data_phase) {
836
837                 case TASKFILE_OUT_DMAQ:
838                 case TASKFILE_OUT_DMA:
839                 case TASKFILE_IN_DMAQ:
840                 case TASKFILE_IN_DMA:
841                         if (!drive->using_dma)
842                                 break;
843
844                         if (!hwif->dma_setup(drive)) {
845                                 hwif->dma_exec_cmd(drive, taskfile->command);
846                                 hwif->dma_start(drive);
847                                 return ide_started;
848                         }
849                         break;
850
851                 default:
852                         if (task->handler == NULL)
853                                 return ide_stopped;
854
855                         /* Issue the command */
856                         if (task->prehandler) {
857                                 hwif->OUTBSYNC(drive, taskfile->command, IDE_COMMAND_REG);
858                                 ndelay(400);    /* FIXME */
859                                 return task->prehandler(drive, task->rq);
860                         }
861                         ide_execute_command(drive, taskfile->command, task->handler, WAIT_WORSTCASE, NULL);
862                         return ide_started;
863         }
864
865         return ide_stopped;
866 }