2 * JFFS2 -- Journalling Flash File System, Version 2.
4 * Copyright (C) 2001-2003 Red Hat, Inc.
5 * Copyright (C) 2004 Thomas Gleixner <tglx@linutronix.de>
7 * Created by David Woodhouse <dwmw2@infradead.org>
8 * Modified debugged and enhanced by Thomas Gleixner <tglx@linutronix.de>
10 * For licensing information, see the file 'LICENCE' in this directory.
12 * $Id: wbuf.c,v 1.100 2005/09/30 13:59:13 dedekind Exp $
16 #include <linux/kernel.h>
17 #include <linux/slab.h>
18 #include <linux/mtd/mtd.h>
19 #include <linux/crc32.h>
20 #include <linux/mtd/nand.h>
21 #include <linux/jiffies.h>
25 /* For testing write failures */
30 static unsigned char *brokenbuf;
33 #define PAGE_DIV(x) ( ((unsigned long)(x) / (unsigned long)(c->wbuf_pagesize)) * (unsigned long)(c->wbuf_pagesize) )
34 #define PAGE_MOD(x) ( (unsigned long)(x) % (unsigned long)(c->wbuf_pagesize) )
36 /* max. erase failures before we mark a block bad */
37 #define MAX_ERASE_FAILURES 2
39 struct jffs2_inodirty {
41 struct jffs2_inodirty *next;
44 static struct jffs2_inodirty inodirty_nomem;
46 static int jffs2_wbuf_pending_for_ino(struct jffs2_sb_info *c, uint32_t ino)
48 struct jffs2_inodirty *this = c->wbuf_inodes;
50 /* If a malloc failed, consider _everything_ dirty */
51 if (this == &inodirty_nomem)
54 /* If ino == 0, _any_ non-GC writes mean 'yes' */
58 /* Look to see if the inode in question is pending in the wbuf */
67 static void jffs2_clear_wbuf_ino_list(struct jffs2_sb_info *c)
69 struct jffs2_inodirty *this;
71 this = c->wbuf_inodes;
73 if (this != &inodirty_nomem) {
75 struct jffs2_inodirty *next = this->next;
80 c->wbuf_inodes = NULL;
83 static void jffs2_wbuf_dirties_inode(struct jffs2_sb_info *c, uint32_t ino)
85 struct jffs2_inodirty *new;
87 /* Mark the superblock dirty so that kupdated will flush... */
88 jffs2_erase_pending_trigger(c);
90 if (jffs2_wbuf_pending_for_ino(c, ino))
93 new = kmalloc(sizeof(*new), GFP_KERNEL);
95 D1(printk(KERN_DEBUG "No memory to allocate inodirty. Fallback to all considered dirty\n"));
96 jffs2_clear_wbuf_ino_list(c);
97 c->wbuf_inodes = &inodirty_nomem;
101 new->next = c->wbuf_inodes;
102 c->wbuf_inodes = new;
106 static inline void jffs2_refile_wbuf_blocks(struct jffs2_sb_info *c)
108 struct list_head *this, *next;
111 if (list_empty(&c->erasable_pending_wbuf_list))
114 list_for_each_safe(this, next, &c->erasable_pending_wbuf_list) {
115 struct jffs2_eraseblock *jeb = list_entry(this, struct jffs2_eraseblock, list);
117 D1(printk(KERN_DEBUG "Removing eraseblock at 0x%08x from erasable_pending_wbuf_list...\n", jeb->offset));
119 if ((jiffies + (n++)) & 127) {
120 /* Most of the time, we just erase it immediately. Otherwise we
121 spend ages scanning it on mount, etc. */
122 D1(printk(KERN_DEBUG "...and adding to erase_pending_list\n"));
123 list_add_tail(&jeb->list, &c->erase_pending_list);
124 c->nr_erasing_blocks++;
125 jffs2_erase_pending_trigger(c);
127 /* Sometimes, however, we leave it elsewhere so it doesn't get
128 immediately reused, and we spread the load a bit. */
129 D1(printk(KERN_DEBUG "...and adding to erasable_list\n"));
130 list_add_tail(&jeb->list, &c->erasable_list);
135 #define REFILE_NOTEMPTY 0
136 #define REFILE_ANYWAY 1
138 static void jffs2_block_refile(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, int allow_empty)
140 D1(printk("About to refile bad block at %08x\n", jeb->offset));
142 /* File the existing block on the bad_used_list.... */
143 if (c->nextblock == jeb)
145 else /* Not sure this should ever happen... need more coffee */
146 list_del(&jeb->list);
147 if (jeb->first_node) {
148 D1(printk("Refiling block at %08x to bad_used_list\n", jeb->offset));
149 list_add(&jeb->list, &c->bad_used_list);
151 BUG_ON(allow_empty == REFILE_NOTEMPTY);
152 /* It has to have had some nodes or we couldn't be here */
153 D1(printk("Refiling block at %08x to erase_pending_list\n", jeb->offset));
154 list_add(&jeb->list, &c->erase_pending_list);
155 c->nr_erasing_blocks++;
156 jffs2_erase_pending_trigger(c);
159 /* Adjust its size counts accordingly */
160 c->wasted_size += jeb->free_size;
161 c->free_size -= jeb->free_size;
162 jeb->wasted_size += jeb->free_size;
165 jffs2_dbg_dump_block_lists_nolock(c);
166 jffs2_dbg_acct_sanity_check_nolock(c,jeb);
167 jffs2_dbg_acct_paranoia_check_nolock(c, jeb);
170 /* Recover from failure to write wbuf. Recover the nodes up to the
171 * wbuf, not the one which we were starting to try to write. */
173 static void jffs2_wbuf_recover(struct jffs2_sb_info *c)
175 struct jffs2_eraseblock *jeb, *new_jeb;
176 struct jffs2_raw_node_ref **first_raw, **raw;
180 uint32_t start, end, ofs, len;
182 if (jffs2_prealloc_raw_node_refs(c, c->reserved_refs + 1))
185 spin_lock(&c->erase_completion_lock);
187 jeb = &c->blocks[c->wbuf_ofs / c->sector_size];
189 jffs2_block_refile(c, jeb, REFILE_NOTEMPTY);
191 /* Find the first node to be recovered, by skipping over every
192 node which ends before the wbuf starts, or which is obsolete. */
193 first_raw = &jeb->first_node;
195 (ref_obsolete(*first_raw) ||
196 (ref_offset(*first_raw)+ref_totlen(c, jeb, *first_raw)) < c->wbuf_ofs)) {
197 D1(printk(KERN_DEBUG "Skipping node at 0x%08x(%d)-0x%08x which is either before 0x%08x or obsolete\n",
198 ref_offset(*first_raw), ref_flags(*first_raw),
199 (ref_offset(*first_raw) + ref_totlen(c, jeb, *first_raw)),
201 first_raw = &(*first_raw)->next_phys;
205 /* All nodes were obsolete. Nothing to recover. */
206 D1(printk(KERN_DEBUG "No non-obsolete nodes to be recovered. Just filing block bad\n"));
207 spin_unlock(&c->erase_completion_lock);
211 start = ref_offset(*first_raw);
212 end = ref_offset(*first_raw) + ref_totlen(c, jeb, *first_raw);
214 /* Find the last node to be recovered */
217 if (!ref_obsolete(*raw))
218 end = ref_offset(*raw) + ref_totlen(c, jeb, *raw);
220 raw = &(*raw)->next_phys;
222 spin_unlock(&c->erase_completion_lock);
224 D1(printk(KERN_DEBUG "wbuf recover %08x-%08x\n", start, end));
227 if (start < c->wbuf_ofs) {
228 /* First affected node was already partially written.
229 * Attempt to reread the old data into our buffer. */
231 buf = kmalloc(end - start, GFP_KERNEL);
233 printk(KERN_CRIT "Malloc failure in wbuf recovery. Data loss ensues.\n");
239 ret = c->mtd->read(c->mtd, start, c->wbuf_ofs - start, &retlen, buf);
241 if (ret == -EBADMSG && retlen == c->wbuf_ofs - start) {
245 if (ret || retlen != c->wbuf_ofs - start) {
246 printk(KERN_CRIT "Old data are already lost in wbuf recovery. Data loss ensues.\n");
251 first_raw = &(*first_raw)->next_phys;
252 /* If this was the only node to be recovered, give up */
256 /* It wasn't. Go on and try to recover nodes complete in the wbuf */
257 start = ref_offset(*first_raw);
259 /* Read succeeded. Copy the remaining data from the wbuf */
260 memcpy(buf + (c->wbuf_ofs - start), c->wbuf, end - c->wbuf_ofs);
263 /* OK... we're to rewrite (end-start) bytes of data from first_raw onwards.
264 Either 'buf' contains the data, or we find it in the wbuf */
267 /* ... and get an allocation of space from a shiny new block instead */
268 ret = jffs2_reserve_space_gc(c, end-start, &len, JFFS2_SUMMARY_NOSUM_SIZE);
270 printk(KERN_WARNING "Failed to allocate space for wbuf recovery. Data loss ensues.\n");
276 if (end-start >= c->wbuf_pagesize) {
277 /* Need to do another write immediately, but it's possible
278 that this is just because the wbuf itself is completely
279 full, and there's nothing earlier read back from the
280 flash. Hence 'buf' isn't necessarily what we're writing
282 unsigned char *rewrite_buf = buf?:c->wbuf;
283 uint32_t towrite = (end-start) - ((end-start)%c->wbuf_pagesize);
285 D1(printk(KERN_DEBUG "Write 0x%x bytes at 0x%08x in wbuf recover\n",
290 if (breakme++ == 20) {
291 printk(KERN_NOTICE "Faking write error at 0x%08x\n", ofs);
293 c->mtd->write(c->mtd, ofs, towrite, &retlen,
298 ret = c->mtd->write(c->mtd, ofs, towrite, &retlen,
301 if (ret || retlen != towrite) {
302 /* Argh. We tried. Really we did. */
303 printk(KERN_CRIT "Recovery of wbuf failed due to a second write error\n");
307 jffs2_add_physical_node_ref(c, ofs | REF_OBSOLETE, ref_totlen(c, jeb, *first_raw), NULL);
311 printk(KERN_NOTICE "Recovery of wbuf succeeded to %08x\n", ofs);
313 c->wbuf_len = (end - start) - towrite;
314 c->wbuf_ofs = ofs + towrite;
315 memmove(c->wbuf, rewrite_buf + towrite, c->wbuf_len);
316 /* Don't muck about with c->wbuf_inodes. False positives are harmless. */
319 /* OK, now we're left with the dregs in whichever buffer we're using */
321 memcpy(c->wbuf, buf, end-start);
324 memmove(c->wbuf, c->wbuf + (start - c->wbuf_ofs), end - start);
327 c->wbuf_len = end - start;
330 /* Now sort out the jffs2_raw_node_refs, moving them from the old to the next block */
331 new_jeb = &c->blocks[ofs / c->sector_size];
333 spin_lock(&c->erase_completion_lock);
334 if (new_jeb->first_node) {
335 /* Odd, but possible with ST flash later maybe */
336 new_jeb->last_node->next_phys = *first_raw;
338 new_jeb->first_node = *first_raw;
343 uint32_t rawlen = ref_totlen(c, jeb, *raw);
345 D1(printk(KERN_DEBUG "Refiling block of %08x at %08x(%d) to %08x\n",
346 rawlen, ref_offset(*raw), ref_flags(*raw), ofs));
348 if (ref_obsolete(*raw)) {
349 /* Shouldn't really happen much */
350 new_jeb->dirty_size += rawlen;
351 new_jeb->free_size -= rawlen;
352 c->dirty_size += rawlen;
354 new_jeb->used_size += rawlen;
355 new_jeb->free_size -= rawlen;
356 jeb->dirty_size += rawlen;
357 jeb->used_size -= rawlen;
358 c->dirty_size += rawlen;
360 c->free_size -= rawlen;
361 (*raw)->flash_offset = ofs | ref_flags(*raw);
363 new_jeb->last_node = *raw;
365 raw = &(*raw)->next_phys;
368 /* Fix up the original jeb now it's on the bad_list */
370 if (first_raw == &jeb->first_node) {
371 jeb->last_node = NULL;
372 D1(printk(KERN_DEBUG "Failing block at %08x is now empty. Moving to erase_pending_list\n", jeb->offset));
373 list_del(&jeb->list);
374 list_add(&jeb->list, &c->erase_pending_list);
375 c->nr_erasing_blocks++;
376 jffs2_erase_pending_trigger(c);
379 jeb->last_node = container_of(first_raw, struct jffs2_raw_node_ref, next_phys);
381 jffs2_dbg_acct_sanity_check_nolock(c, jeb);
382 jffs2_dbg_acct_paranoia_check_nolock(c, jeb);
384 jffs2_dbg_acct_sanity_check_nolock(c, new_jeb);
385 jffs2_dbg_acct_paranoia_check_nolock(c, new_jeb);
387 spin_unlock(&c->erase_completion_lock);
389 D1(printk(KERN_DEBUG "wbuf recovery completed OK\n"));
392 /* Meaning of pad argument:
393 0: Do not pad. Probably pointless - we only ever use this when we can't pad anyway.
394 1: Pad, do not adjust nextblock free_size
395 2: Pad, adjust nextblock free_size
398 #define PAD_NOACCOUNT 1
399 #define PAD_ACCOUNTING 2
401 static int __jffs2_flush_wbuf(struct jffs2_sb_info *c, int pad)
406 /* Nothing to do if not write-buffering the flash. In particular, we shouldn't
407 del_timer() the timer we never initialised. */
408 if (!jffs2_is_writebuffered(c))
411 if (!down_trylock(&c->alloc_sem)) {
413 printk(KERN_CRIT "jffs2_flush_wbuf() called with alloc_sem not locked!\n");
417 if (!c->wbuf_len) /* already checked c->wbuf above */
420 if (jffs2_prealloc_raw_node_refs(c, c->reserved_refs + 1))
423 /* claim remaining space on the page
424 this happens, if we have a change to a new block,
425 or if fsync forces us to flush the writebuffer.
426 if we have a switch to next page, we will not have
427 enough remaining space for this.
430 c->wbuf_len = PAD(c->wbuf_len);
432 /* Pad with JFFS2_DIRTY_BITMASK initially. this helps out ECC'd NOR
433 with 8 byte page size */
434 memset(c->wbuf + c->wbuf_len, 0, c->wbuf_pagesize - c->wbuf_len);
436 if ( c->wbuf_len + sizeof(struct jffs2_unknown_node) < c->wbuf_pagesize) {
437 struct jffs2_unknown_node *padnode = (void *)(c->wbuf + c->wbuf_len);
438 padnode->magic = cpu_to_je16(JFFS2_MAGIC_BITMASK);
439 padnode->nodetype = cpu_to_je16(JFFS2_NODETYPE_PADDING);
440 padnode->totlen = cpu_to_je32(c->wbuf_pagesize - c->wbuf_len);
441 padnode->hdr_crc = cpu_to_je32(crc32(0, padnode, sizeof(*padnode)-4));
444 /* else jffs2_flash_writev has actually filled in the rest of the
445 buffer for us, and will deal with the node refs etc. later. */
449 if (breakme++ == 20) {
450 printk(KERN_NOTICE "Faking write error at 0x%08x\n", c->wbuf_ofs);
452 c->mtd->write(c->mtd, c->wbuf_ofs, c->wbuf_pagesize, &retlen,
458 ret = c->mtd->write(c->mtd, c->wbuf_ofs, c->wbuf_pagesize, &retlen, c->wbuf);
460 if (ret || retlen != c->wbuf_pagesize) {
462 printk(KERN_WARNING "jffs2_flush_wbuf(): Write failed with %d\n",ret);
464 printk(KERN_WARNING "jffs2_flush_wbuf(): Write was short: %zd instead of %d\n",
465 retlen, c->wbuf_pagesize);
469 jffs2_wbuf_recover(c);
474 /* Adjust free size of the block if we padded. */
476 struct jffs2_eraseblock *jeb;
477 uint32_t waste = c->wbuf_pagesize - c->wbuf_len;
479 jeb = &c->blocks[c->wbuf_ofs / c->sector_size];
481 D1(printk(KERN_DEBUG "jffs2_flush_wbuf() adjusting free_size of %sblock at %08x\n",
482 (jeb==c->nextblock)?"next":"", jeb->offset));
484 /* wbuf_pagesize - wbuf_len is the amount of space that's to be
485 padded. If there is less free space in the block than that,
486 something screwed up */
487 if (jeb->free_size < waste) {
488 printk(KERN_CRIT "jffs2_flush_wbuf(): Accounting error. wbuf at 0x%08x has 0x%03x bytes, 0x%03x left.\n",
489 c->wbuf_ofs, c->wbuf_len, waste);
490 printk(KERN_CRIT "jffs2_flush_wbuf(): But free_size for block at 0x%08x is only 0x%08x\n",
491 jeb->offset, jeb->free_size);
495 spin_lock(&c->erase_completion_lock);
497 jffs2_link_node_ref(c, jeb, (c->wbuf_ofs + c->wbuf_len) | REF_OBSOLETE, waste, NULL);
498 /* FIXME: that made it count as dirty. Convert to wasted */
499 jeb->dirty_size -= waste;
500 c->dirty_size -= waste;
501 jeb->wasted_size += waste;
502 c->wasted_size += waste;
504 spin_lock(&c->erase_completion_lock);
506 /* Stick any now-obsoleted blocks on the erase_pending_list */
507 jffs2_refile_wbuf_blocks(c);
508 jffs2_clear_wbuf_ino_list(c);
509 spin_unlock(&c->erase_completion_lock);
511 memset(c->wbuf,0xff,c->wbuf_pagesize);
512 /* adjust write buffer offset, else we get a non contiguous write bug */
513 c->wbuf_ofs += c->wbuf_pagesize;
518 /* Trigger garbage collection to flush the write-buffer.
519 If ino arg is zero, do it if _any_ real (i.e. not GC) writes are
520 outstanding. If ino arg non-zero, do it only if a write for the
521 given inode is outstanding. */
522 int jffs2_flush_wbuf_gc(struct jffs2_sb_info *c, uint32_t ino)
524 uint32_t old_wbuf_ofs;
525 uint32_t old_wbuf_len;
528 D1(printk(KERN_DEBUG "jffs2_flush_wbuf_gc() called for ino #%u...\n", ino));
534 if (!jffs2_wbuf_pending_for_ino(c, ino)) {
535 D1(printk(KERN_DEBUG "Ino #%d not pending in wbuf. Returning\n", ino));
540 old_wbuf_ofs = c->wbuf_ofs;
541 old_wbuf_len = c->wbuf_len;
543 if (c->unchecked_size) {
544 /* GC won't make any progress for a while */
545 D1(printk(KERN_DEBUG "jffs2_flush_wbuf_gc() padding. Not finished checking\n"));
546 down_write(&c->wbuf_sem);
547 ret = __jffs2_flush_wbuf(c, PAD_ACCOUNTING);
548 /* retry flushing wbuf in case jffs2_wbuf_recover
549 left some data in the wbuf */
551 ret = __jffs2_flush_wbuf(c, PAD_ACCOUNTING);
552 up_write(&c->wbuf_sem);
553 } else while (old_wbuf_len &&
554 old_wbuf_ofs == c->wbuf_ofs) {
558 D1(printk(KERN_DEBUG "jffs2_flush_wbuf_gc() calls gc pass\n"));
560 ret = jffs2_garbage_collect_pass(c);
562 /* GC failed. Flush it with padding instead */
564 down_write(&c->wbuf_sem);
565 ret = __jffs2_flush_wbuf(c, PAD_ACCOUNTING);
566 /* retry flushing wbuf in case jffs2_wbuf_recover
567 left some data in the wbuf */
569 ret = __jffs2_flush_wbuf(c, PAD_ACCOUNTING);
570 up_write(&c->wbuf_sem);
576 D1(printk(KERN_DEBUG "jffs2_flush_wbuf_gc() ends...\n"));
582 /* Pad write-buffer to end and write it, wasting space. */
583 int jffs2_flush_wbuf_pad(struct jffs2_sb_info *c)
590 down_write(&c->wbuf_sem);
591 ret = __jffs2_flush_wbuf(c, PAD_NOACCOUNT);
592 /* retry - maybe wbuf recover left some data in wbuf. */
594 ret = __jffs2_flush_wbuf(c, PAD_NOACCOUNT);
595 up_write(&c->wbuf_sem);
600 static size_t jffs2_fill_wbuf(struct jffs2_sb_info *c, const uint8_t *buf,
603 if (len && !c->wbuf_len && (len >= c->wbuf_pagesize))
606 if (len > (c->wbuf_pagesize - c->wbuf_len))
607 len = c->wbuf_pagesize - c->wbuf_len;
608 memcpy(c->wbuf + c->wbuf_len, buf, len);
609 c->wbuf_len += (uint32_t) len;
613 int jffs2_flash_writev(struct jffs2_sb_info *c, const struct kvec *invecs,
614 unsigned long count, loff_t to, size_t *retlen,
617 struct jffs2_eraseblock *jeb;
618 size_t wbuf_retlen, donelen = 0;
619 uint32_t outvec_to = to;
622 /* If not writebuffered flash, don't bother */
623 if (!jffs2_is_writebuffered(c))
624 return jffs2_flash_direct_writev(c, invecs, count, to, retlen);
626 down_write(&c->wbuf_sem);
628 /* If wbuf_ofs is not initialized, set it to target address */
629 if (c->wbuf_ofs == 0xFFFFFFFF) {
630 c->wbuf_ofs = PAGE_DIV(to);
631 c->wbuf_len = PAGE_MOD(to);
632 memset(c->wbuf,0xff,c->wbuf_pagesize);
636 * Sanity checks on target address. It's permitted to write
637 * at PAD(c->wbuf_len+c->wbuf_ofs), and it's permitted to
638 * write at the beginning of a new erase block. Anything else,
639 * and you die. New block starts at xxx000c (0-b = block
642 if (SECTOR_ADDR(to) != SECTOR_ADDR(c->wbuf_ofs)) {
643 /* It's a write to a new block */
645 D1(printk(KERN_DEBUG "jffs2_flash_writev() to 0x%lx "
646 "causes flush of wbuf at 0x%08x\n",
647 (unsigned long)to, c->wbuf_ofs));
648 ret = __jffs2_flush_wbuf(c, PAD_NOACCOUNT);
652 /* set pointer to new block */
653 c->wbuf_ofs = PAGE_DIV(to);
654 c->wbuf_len = PAGE_MOD(to);
657 if (to != PAD(c->wbuf_ofs + c->wbuf_len)) {
658 /* We're not writing immediately after the writebuffer. Bad. */
659 printk(KERN_CRIT "jffs2_flash_writev(): Non-contiguous write "
660 "to %08lx\n", (unsigned long)to);
662 printk(KERN_CRIT "wbuf was previously %08x-%08x\n",
663 c->wbuf_ofs, c->wbuf_ofs+c->wbuf_len);
667 /* adjust alignment offset */
668 if (c->wbuf_len != PAGE_MOD(to)) {
669 c->wbuf_len = PAGE_MOD(to);
670 /* take care of alignment to next page */
672 c->wbuf_len = c->wbuf_pagesize;
673 ret = __jffs2_flush_wbuf(c, NOPAD);
679 for (invec = 0; invec < count; invec++) {
680 int vlen = invecs[invec].iov_len;
681 uint8_t *v = invecs[invec].iov_base;
683 wbuf_retlen = jffs2_fill_wbuf(c, v, vlen);
685 if (c->wbuf_len == c->wbuf_pagesize) {
686 ret = __jffs2_flush_wbuf(c, NOPAD);
691 outvec_to += wbuf_retlen;
692 donelen += wbuf_retlen;
695 if (vlen >= c->wbuf_pagesize) {
696 ret = c->mtd->write(c->mtd, outvec_to, PAGE_DIV(vlen),
698 if (ret < 0 || wbuf_retlen != PAGE_DIV(vlen))
702 outvec_to += wbuf_retlen;
703 c->wbuf_ofs = outvec_to;
704 donelen += wbuf_retlen;
708 wbuf_retlen = jffs2_fill_wbuf(c, v, vlen);
709 if (c->wbuf_len == c->wbuf_pagesize) {
710 ret = __jffs2_flush_wbuf(c, NOPAD);
715 outvec_to += wbuf_retlen;
716 donelen += wbuf_retlen;
720 * If there's a remainder in the wbuf and it's a non-GC write,
721 * remember that the wbuf affects this ino
725 if (jffs2_sum_active()) {
726 int res = jffs2_sum_add_kvec(c, invecs, count, (uint32_t) to);
731 if (c->wbuf_len && ino)
732 jffs2_wbuf_dirties_inode(c, ino);
735 up_write(&c->wbuf_sem);
740 * At this point we have no problem, c->wbuf is empty. However
741 * refile nextblock to avoid writing again to same address.
744 spin_lock(&c->erase_completion_lock);
746 jeb = &c->blocks[outvec_to / c->sector_size];
747 jffs2_block_refile(c, jeb, REFILE_ANYWAY);
749 spin_unlock(&c->erase_completion_lock);
753 up_write(&c->wbuf_sem);
758 * This is the entry for flash write.
759 * Check, if we work on NAND FLASH, if so build an kvec and write it via vritev
761 int jffs2_flash_write(struct jffs2_sb_info *c, loff_t ofs, size_t len, size_t *retlen, const u_char *buf)
765 if (!jffs2_is_writebuffered(c))
766 return jffs2_flash_direct_write(c, ofs, len, retlen, buf);
768 vecs[0].iov_base = (unsigned char *) buf;
769 vecs[0].iov_len = len;
770 return jffs2_flash_writev(c, vecs, 1, ofs, retlen, 0);
774 Handle readback from writebuffer and ECC failure return
776 int jffs2_flash_read(struct jffs2_sb_info *c, loff_t ofs, size_t len, size_t *retlen, u_char *buf)
778 loff_t orbf = 0, owbf = 0, lwbf = 0;
781 if (!jffs2_is_writebuffered(c))
782 return c->mtd->read(c->mtd, ofs, len, retlen, buf);
785 down_read(&c->wbuf_sem);
786 ret = c->mtd->read(c->mtd, ofs, len, retlen, buf);
788 if ( (ret == -EBADMSG) && (*retlen == len) ) {
789 printk(KERN_WARNING "mtd->read(0x%zx bytes from 0x%llx) returned ECC error\n",
792 * We have the raw data without ECC correction in the buffer, maybe
793 * we are lucky and all data or parts are correct. We check the node.
794 * If data are corrupted node check will sort it out.
795 * We keep this block, it will fail on write or erase and the we
796 * mark it bad. Or should we do that now? But we should give him a chance.
797 * Maybe we had a system crash or power loss before the ecc write or
798 * a erase was completed.
799 * So we return success. :)
804 /* if no writebuffer available or write buffer empty, return */
805 if (!c->wbuf_pagesize || !c->wbuf_len)
808 /* if we read in a different block, return */
809 if (SECTOR_ADDR(ofs) != SECTOR_ADDR(c->wbuf_ofs))
812 if (ofs >= c->wbuf_ofs) {
813 owbf = (ofs - c->wbuf_ofs); /* offset in write buffer */
814 if (owbf > c->wbuf_len) /* is read beyond write buffer ? */
816 lwbf = c->wbuf_len - owbf; /* number of bytes to copy */
820 orbf = (c->wbuf_ofs - ofs); /* offset in read buffer */
821 if (orbf > len) /* is write beyond write buffer ? */
823 lwbf = len - orbf; /* number of bytes to copy */
824 if (lwbf > c->wbuf_len)
828 memcpy(buf+orbf,c->wbuf+owbf,lwbf);
831 up_read(&c->wbuf_sem);
836 * Check, if the out of band area is empty
838 int jffs2_check_oob_empty( struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, int mode)
846 /* allocate a buffer for all oob data in this sector */
847 oob_size = c->mtd->oobsize;
849 buf = kmalloc(len, GFP_KERNEL);
851 printk(KERN_NOTICE "jffs2_check_oob_empty(): allocation of temporary data buffer for oob check failed\n");
855 * if mode = 0, we scan for a total empty oob area, else we have
856 * to take care of the cleanmarker in the first page of the block
858 ret = jffs2_flash_read_oob(c, jeb->offset, len , &retlen, buf);
860 D1(printk(KERN_WARNING "jffs2_check_oob_empty(): Read OOB failed %d for block at %08x\n", ret, jeb->offset));
865 D1(printk(KERN_WARNING "jffs2_check_oob_empty(): Read OOB return short read "
866 "(%zd bytes not %d) for block at %08x\n", retlen, len, jeb->offset));
871 /* Special check for first page */
872 for(i = 0; i < oob_size ; i++) {
873 /* Yeah, we know about the cleanmarker. */
874 if (mode && i >= c->fsdata_pos &&
875 i < c->fsdata_pos + c->fsdata_len)
878 if (buf[i] != 0xFF) {
879 D2(printk(KERN_DEBUG "Found %02x at %x in OOB for %08x\n",
880 buf[i], i, jeb->offset));
886 /* we know, we are aligned :) */
887 for (page = oob_size; page < len; page += sizeof(long)) {
888 unsigned long dat = *(unsigned long *)(&buf[page]);
902 * Scan for a valid cleanmarker and for bad blocks
903 * For virtual blocks (concatenated physical blocks) check the cleanmarker
904 * only in the first page of the first physical block, but scan for bad blocks in all
907 int jffs2_check_nand_cleanmarker (struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb)
909 struct jffs2_unknown_node n;
910 unsigned char buf[2 * NAND_MAX_OOBSIZE];
912 int ret, i, cnt, retval = 0;
913 size_t retlen, offset;
916 offset = jeb->offset;
917 oob_size = c->mtd->oobsize;
919 /* Loop through the physical blocks */
920 for (cnt = 0; cnt < (c->sector_size / c->mtd->erasesize); cnt++) {
921 /* Check first if the block is bad. */
922 if (c->mtd->block_isbad (c->mtd, offset)) {
923 D1 (printk (KERN_WARNING "jffs2_check_nand_cleanmarker(): Bad block at %08x\n", jeb->offset));
927 * We read oob data from page 0 and 1 of the block.
928 * page 0 contains cleanmarker and badblock info
929 * page 1 contains failure count of this block
931 ret = c->mtd->read_oob (c->mtd, offset, oob_size << 1, &retlen, buf);
934 D1 (printk (KERN_WARNING "jffs2_check_nand_cleanmarker(): Read OOB failed %d for block at %08x\n", ret, jeb->offset));
937 if (retlen < (oob_size << 1)) {
938 D1 (printk (KERN_WARNING "jffs2_check_nand_cleanmarker(): Read OOB return short read (%zd bytes not %d) for block at %08x\n", retlen, oob_size << 1, jeb->offset));
942 /* Check cleanmarker only on the first physical block */
944 n.magic = cpu_to_je16 (JFFS2_MAGIC_BITMASK);
945 n.nodetype = cpu_to_je16 (JFFS2_NODETYPE_CLEANMARKER);
946 n.totlen = cpu_to_je32 (8);
947 p = (unsigned char *) &n;
949 for (i = 0; i < c->fsdata_len; i++) {
950 if (buf[c->fsdata_pos + i] != p[i]) {
954 D1(if (retval == 1) {
955 printk(KERN_WARNING "jffs2_check_nand_cleanmarker(): Cleanmarker node not detected in block at %08x\n", jeb->offset);
956 printk(KERN_WARNING "OOB at %08x was ", offset);
957 for (i=0; i < oob_size; i++) {
958 printk("%02x ", buf[i]);
963 offset += c->mtd->erasesize;
968 int jffs2_write_nand_cleanmarker(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb)
970 struct jffs2_unknown_node n;
974 n.magic = cpu_to_je16(JFFS2_MAGIC_BITMASK);
975 n.nodetype = cpu_to_je16(JFFS2_NODETYPE_CLEANMARKER);
976 n.totlen = cpu_to_je32(8);
978 ret = jffs2_flash_write_oob(c, jeb->offset + c->fsdata_pos, c->fsdata_len, &retlen, (unsigned char *)&n);
981 D1(printk(KERN_WARNING "jffs2_write_nand_cleanmarker(): Write failed for block at %08x: error %d\n", jeb->offset, ret));
984 if (retlen != c->fsdata_len) {
985 D1(printk(KERN_WARNING "jffs2_write_nand_cleanmarker(): Short write for block at %08x: %zd not %d\n", jeb->offset, retlen, c->fsdata_len));
992 * On NAND we try to mark this block bad. If the block was erased more
993 * than MAX_ERASE_FAILURES we mark it finaly bad.
994 * Don't care about failures. This block remains on the erase-pending
995 * or badblock list as long as nobody manipulates the flash with
996 * a bootloader or something like that.
999 int jffs2_write_nand_badblock(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t bad_offset)
1003 /* if the count is < max, we try to write the counter to the 2nd page oob area */
1004 if( ++jeb->bad_count < MAX_ERASE_FAILURES)
1007 if (!c->mtd->block_markbad)
1008 return 1; // What else can we do?
1010 D1(printk(KERN_WARNING "jffs2_write_nand_badblock(): Marking bad block at %08x\n", bad_offset));
1011 ret = c->mtd->block_markbad(c->mtd, bad_offset);
1014 D1(printk(KERN_WARNING "jffs2_write_nand_badblock(): Write failed for block at %08x: error %d\n", jeb->offset, ret));
1020 #define NAND_JFFS2_OOB16_FSDALEN 8
1022 static struct nand_oobinfo jffs2_oobinfo_docecc = {
1023 .useecc = MTD_NANDECC_PLACE,
1025 .eccpos = {0,1,2,3,4,5}
1029 static int jffs2_nand_set_oobinfo(struct jffs2_sb_info *c)
1031 struct nand_oobinfo *oinfo = &c->mtd->oobinfo;
1033 /* Do this only, if we have an oob buffer */
1034 if (!c->mtd->oobsize)
1037 /* Cleanmarker is out-of-band, so inline size zero */
1038 c->cleanmarker_size = 0;
1040 /* Should we use autoplacement ? */
1041 if (oinfo && oinfo->useecc == MTD_NANDECC_AUTOPLACE) {
1042 D1(printk(KERN_DEBUG "JFFS2 using autoplace on NAND\n"));
1043 /* Get the position of the free bytes */
1044 if (!oinfo->oobfree[0][1]) {
1045 printk (KERN_WARNING "jffs2_nand_set_oobinfo(): Eeep. Autoplacement selected and no empty space in oob\n");
1048 c->fsdata_pos = oinfo->oobfree[0][0];
1049 c->fsdata_len = oinfo->oobfree[0][1];
1050 if (c->fsdata_len > 8)
1053 /* This is just a legacy fallback and should go away soon */
1054 switch(c->mtd->ecctype) {
1055 case MTD_ECC_RS_DiskOnChip:
1056 printk(KERN_WARNING "JFFS2 using DiskOnChip hardware ECC without autoplacement. Fix it!\n");
1057 c->oobinfo = &jffs2_oobinfo_docecc;
1059 c->fsdata_len = NAND_JFFS2_OOB16_FSDALEN;
1060 c->badblock_pos = 15;
1064 D1(printk(KERN_DEBUG "JFFS2 on NAND. No autoplacment info found\n"));
1071 int jffs2_nand_flash_setup(struct jffs2_sb_info *c)
1075 /* Initialise write buffer */
1076 init_rwsem(&c->wbuf_sem);
1077 c->wbuf_pagesize = c->mtd->writesize;
1078 c->wbuf_ofs = 0xFFFFFFFF;
1080 c->wbuf = kmalloc(c->wbuf_pagesize, GFP_KERNEL);
1084 res = jffs2_nand_set_oobinfo(c);
1088 brokenbuf = kmalloc(c->wbuf_pagesize, GFP_KERNEL);
1093 memset(brokenbuf, 0xdb, c->wbuf_pagesize);
1098 void jffs2_nand_flash_cleanup(struct jffs2_sb_info *c)
1103 int jffs2_dataflash_setup(struct jffs2_sb_info *c) {
1104 c->cleanmarker_size = 0; /* No cleanmarkers needed */
1106 /* Initialize write buffer */
1107 init_rwsem(&c->wbuf_sem);
1110 c->wbuf_pagesize = c->mtd->erasesize;
1112 /* Find a suitable c->sector_size
1113 * - Not too much sectors
1114 * - Sectors have to be at least 4 K + some bytes
1115 * - All known dataflashes have erase sizes of 528 or 1056
1116 * - we take at least 8 eraseblocks and want to have at least 8K size
1117 * - The concatenation should be a power of 2
1120 c->sector_size = 8 * c->mtd->erasesize;
1122 while (c->sector_size < 8192) {
1123 c->sector_size *= 2;
1126 /* It may be necessary to adjust the flash size */
1127 c->flash_size = c->mtd->size;
1129 if ((c->flash_size % c->sector_size) != 0) {
1130 c->flash_size = (c->flash_size / c->sector_size) * c->sector_size;
1131 printk(KERN_WARNING "JFFS2 flash size adjusted to %dKiB\n", c->flash_size);
1134 c->wbuf_ofs = 0xFFFFFFFF;
1135 c->wbuf = kmalloc(c->wbuf_pagesize, GFP_KERNEL);
1139 printk(KERN_INFO "JFFS2 write-buffering enabled buffer (%d) erasesize (%d)\n", c->wbuf_pagesize, c->sector_size);
1144 void jffs2_dataflash_cleanup(struct jffs2_sb_info *c) {
1148 int jffs2_nor_wbuf_flash_setup(struct jffs2_sb_info *c) {
1149 /* Cleanmarker currently occupies whole programming regions,
1150 * either one or 2 for 8Byte STMicro flashes. */
1151 c->cleanmarker_size = max(16u, c->mtd->writesize);
1153 /* Initialize write buffer */
1154 init_rwsem(&c->wbuf_sem);
1155 c->wbuf_pagesize = c->mtd->writesize;
1156 c->wbuf_ofs = 0xFFFFFFFF;
1158 c->wbuf = kmalloc(c->wbuf_pagesize, GFP_KERNEL);
1165 void jffs2_nor_wbuf_flash_cleanup(struct jffs2_sb_info *c) {