ide-taskfile.c 16.7 KB
Newer Older
L
Linus Torvalds 已提交
1
/*
2 3 4
 *  Copyright (C) 2000-2002	   Michael Cornwell <cornwell@acm.org>
 *  Copyright (C) 2000-2002	   Andre Hedrick <andre@linux-ide.org>
 *  Copyright (C) 2001-2002	   Klaus Smolin
L
Linus Torvalds 已提交
5
 *					IBM Storage Technology Division
6
 *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
L
Linus Torvalds 已提交
7 8 9 10 11 12 13
 *
 *  The big the bad and the ugly.
 */

#include <linux/types.h>
#include <linux/string.h>
#include <linux/kernel.h>
14
#include <linux/sched.h>
L
Linus Torvalds 已提交
15 16 17 18 19 20
#include <linux/interrupt.h>
#include <linux/errno.h>
#include <linux/slab.h>
#include <linux/delay.h>
#include <linux/hdreg.h>
#include <linux/ide.h>
J
Jens Axboe 已提交
21
#include <linux/scatterlist.h>
L
Linus Torvalds 已提交
22 23 24 25

#include <asm/uaccess.h>
#include <asm/io.h>

26
void ide_tf_dump(const char *s, struct ide_taskfile *tf)
27
{
28 29 30
#ifdef DEBUG
	printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
		"lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
31
		s, tf->feature, tf->nsect, tf->lbal,
32
		tf->lbam, tf->lbah, tf->device, tf->command);
33 34
	printk("%s: hob: nsect 0x%02x lbal 0x%02x "
		"lbam 0x%02x lbah 0x%02x\n",
35
		s, tf->hob_nsect, tf->hob_lbal,
36
		tf->hob_lbam, tf->hob_lbah);
37
#endif
38 39
}

L
Linus Torvalds 已提交
40 41
int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
{
42
	struct ide_cmd cmd;
43

44 45
	memset(&cmd, 0, sizeof(cmd));
	cmd.tf.nsect = 0x01;
L
Linus Torvalds 已提交
46
	if (drive->media == ide_disk)
47
		cmd.tf.command = ATA_CMD_ID_ATA;
L
Linus Torvalds 已提交
48
	else
49 50 51 52 53
		cmd.tf.command = ATA_CMD_ID_ATAPI;
	cmd.tf_flags	= IDE_TFLAG_TF | IDE_TFLAG_DEVICE;
	cmd.data_phase	= TASKFILE_IN;

	return ide_raw_taskfile(drive, &cmd, buf, 1);
L
Linus Torvalds 已提交
54 55
}

56
static ide_startstop_t task_no_data_intr(ide_drive_t *);
57
static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *);
58
static ide_startstop_t task_in_intr(ide_drive_t *);
59

60
ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd)
L
Linus Torvalds 已提交
61
{
62
	ide_hwif_t *hwif = drive->hwif;
63
	struct ide_cmd *cmd = &hwif->cmd;
64
	struct ide_taskfile *tf = &cmd->tf;
65
	ide_handler_t *handler = NULL;
66
	const struct ide_tp_ops *tp_ops = hwif->tp_ops;
67
	const struct ide_dma_ops *dma_ops = hwif->dma_ops;
L
Linus Torvalds 已提交
68

69 70
	if (orig_cmd->data_phase == TASKFILE_MULTI_IN ||
	    orig_cmd->data_phase == TASKFILE_MULTI_OUT) {
71 72 73 74 75 76 77
		if (!drive->mult_count) {
			printk(KERN_ERR "%s: multimode not set!\n",
					drive->name);
			return ide_stopped;
		}
	}

78 79
	if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED)
		orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS;
80

81
	memcpy(cmd, orig_cmd, sizeof(*cmd));
82

83
	if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
84
		ide_tf_dump(drive->name, tf);
85
		tp_ops->set_irq(hwif, 1);
86
		SELECT_MASK(drive, 0);
87
		tp_ops->tf_load(drive, cmd);
88
	}
L
Linus Torvalds 已提交
89

90
	switch (cmd->data_phase) {
91 92
	case TASKFILE_MULTI_OUT:
	case TASKFILE_OUT:
93
		tp_ops->exec_command(hwif, tf->command);
94
		ndelay(400);	/* FIXME */
95
		return pre_task_out_intr(drive, cmd);
96 97
	case TASKFILE_MULTI_IN:
	case TASKFILE_IN:
98
		handler = task_in_intr;
99
		/* fall-through */
100
	case TASKFILE_NO_DATA:
101 102 103 104
		if (handler == NULL)
			handler = task_no_data_intr;
		ide_execute_command(drive, tf->command, handler,
				    WAIT_WORSTCASE, NULL);
L
Linus Torvalds 已提交
105
		return ide_started;
106
	default:
B
Bartlomiej Zolnierkiewicz 已提交
107
		if ((drive->dev_flags & IDE_DFLAG_USING_DMA) == 0 ||
108
		    ide_build_sglist(drive, hwif->rq) == 0 ||
B
Bartlomiej Zolnierkiewicz 已提交
109
		    dma_ops->dma_setup(drive))
110
			return ide_stopped;
111 112
		dma_ops->dma_exec_cmd(drive, tf->command);
		dma_ops->dma_start(drive);
113
		return ide_started;
L
Linus Torvalds 已提交
114 115
	}
}
116
EXPORT_SYMBOL_GPL(do_rw_taskfile);
L
Linus Torvalds 已提交
117 118

/*
119
 * Handler for commands without a data phase
L
Linus Torvalds 已提交
120
 */
121
static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
L
Linus Torvalds 已提交
122
{
123
	ide_hwif_t *hwif = drive->hwif;
124 125 126
	struct ide_cmd *cmd = &hwif->cmd;
	struct ide_taskfile *tf = &cmd->tf;
	int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0;
127
	int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1;
L
Linus Torvalds 已提交
128 129
	u8 stat;

130 131
	local_irq_enable_in_hardirq();

132 133
	while (1) {
		stat = hwif->tp_ops->read_status(hwif);
134
		if ((stat & ATA_BUSY) == 0 || retries-- == 0)
135
			break;
L
Linus Torvalds 已提交
136
		udelay(10);
137
	};
L
Linus Torvalds 已提交
138

139 140 141 142 143 144 145 146 147 148 149 150 151
	if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) {
		if (custom && tf->command == ATA_CMD_SET_MULTI) {
			drive->mult_req = drive->mult_count = 0;
			drive->special.b.recalibrate = 1;
			(void)ide_dump_status(drive, __func__, stat);
			return ide_stopped;
		} else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) {
			if ((stat & (ATA_ERR | ATA_DRQ)) == 0) {
				ide_set_handler(drive, &task_no_data_intr,
						WAIT_WORSTCASE, NULL);
				return ide_started;
			}
		}
L
Linus Torvalds 已提交
152
		return ide_error(drive, "task_no_data_intr", stat);
153
	}
154

155
	if (custom && tf->command == ATA_CMD_IDLEIMMEDIATE) {
156
		hwif->tp_ops->tf_read(drive, cmd);
157 158 159 160 161 162
		if (tf->lbal != 0xc4) {
			printk(KERN_ERR "%s: head unload failed!\n",
			       drive->name);
			ide_tf_dump(drive->name, tf);
		} else
			drive->dev_flags |= IDE_DFLAG_PARKED;
163
	} else if (custom && tf->command == ATA_CMD_SET_MULTI)
164
		drive->mult_count = drive->mult_req;
L
Linus Torvalds 已提交
165

166 167 168 169 170 171 172 173
	if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE) {
		struct request *rq = hwif->rq;
		u8 err = ide_read_error(drive);

		if (blk_pm_request(rq))
			ide_complete_pm_rq(drive, rq);
		else {
			if (rq->cmd_type == REQ_TYPE_ATA_TASKFILE)
174
				ide_complete_cmd(drive, cmd, stat, err);
175 176 177 178
			ide_complete_rq(drive, err);
		}
	}

L
Linus Torvalds 已提交
179 180 181
	return ide_stopped;
}

182
static u8 wait_drive_not_busy(ide_drive_t *drive)
L
Linus Torvalds 已提交
183
{
184
	ide_hwif_t *hwif = drive->hwif;
185
	int retries;
L
Linus Torvalds 已提交
186 187 188
	u8 stat;

	/*
189 190
	 * Last sector was transfered, wait until device is ready.  This can
	 * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
L
Linus Torvalds 已提交
191
	 */
192
	for (retries = 0; retries < 1000; retries++) {
193
		stat = hwif->tp_ops->read_status(hwif);
194

195
		if (stat & ATA_BUSY)
196 197 198 199
			udelay(10);
		else
			break;
	}
L
Linus Torvalds 已提交
200

201
	if (stat & ATA_BUSY)
L
Linus Torvalds 已提交
202 203 204 205 206
		printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);

	return stat;
}

207
static void ide_pio_sector(ide_drive_t *drive, struct ide_cmd *cmd,
208
			   unsigned int write)
L
Linus Torvalds 已提交
209 210 211
{
	ide_hwif_t *hwif = drive->hwif;
	struct scatterlist *sg = hwif->sg_table;
J
Jens Axboe 已提交
212
	struct scatterlist *cursg = hwif->cursg;
L
Linus Torvalds 已提交
213 214 215 216 217 218 219
	struct page *page;
#ifdef CONFIG_HIGHMEM
	unsigned long flags;
#endif
	unsigned int offset;
	u8 *buf;

J
Jens Axboe 已提交
220 221 222 223 224 225
	cursg = hwif->cursg;
	if (!cursg) {
		cursg = sg;
		hwif->cursg = sg;
	}

J
Jens Axboe 已提交
226
	page = sg_page(cursg);
J
Jens Axboe 已提交
227
	offset = cursg->offset + hwif->cursg_ofs * SECTOR_SIZE;
L
Linus Torvalds 已提交
228 229 230 231 232 233 234 235 236 237 238 239 240

	/* get the current page and offset */
	page = nth_page(page, (offset >> PAGE_SHIFT));
	offset %= PAGE_SIZE;

#ifdef CONFIG_HIGHMEM
	local_irq_save(flags);
#endif
	buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;

	hwif->nleft--;
	hwif->cursg_ofs++;

J
Jens Axboe 已提交
241 242
	if ((hwif->cursg_ofs * SECTOR_SIZE) == cursg->length) {
		hwif->cursg = sg_next(hwif->cursg);
L
Linus Torvalds 已提交
243 244 245 246 247
		hwif->cursg_ofs = 0;
	}

	/* do the actual data transfer */
	if (write)
248
		hwif->tp_ops->output_data(drive, cmd, buf, SECTOR_SIZE);
L
Linus Torvalds 已提交
249
	else
250
		hwif->tp_ops->input_data(drive, cmd, buf, SECTOR_SIZE);
L
Linus Torvalds 已提交
251 252 253 254 255 256 257

	kunmap_atomic(buf, KM_BIO_SRC_IRQ);
#ifdef CONFIG_HIGHMEM
	local_irq_restore(flags);
#endif
}

258
static void ide_pio_multi(ide_drive_t *drive, struct ide_cmd *cmd,
259
			  unsigned int write)
L
Linus Torvalds 已提交
260 261 262 263 264
{
	unsigned int nsect;

	nsect = min_t(unsigned int, drive->hwif->nleft, drive->mult_count);
	while (nsect--)
265
		ide_pio_sector(drive, cmd, write);
L
Linus Torvalds 已提交
266 267
}

268 269
static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd,
			      unsigned int write)
L
Linus Torvalds 已提交
270
{
271 272
	u8 saved_io_32bit = drive->io_32bit;

273 274
	if (cmd->tf_flags & IDE_TFLAG_FS)
		cmd->rq->errors = 0;
L
Linus Torvalds 已提交
275

276
	if (cmd->tf_flags & IDE_TFLAG_IO_16BIT)
277
		drive->io_32bit = 0;
278

279 280
	touch_softlockup_watchdog();

281
	switch (cmd->data_phase) {
L
Linus Torvalds 已提交
282 283
	case TASKFILE_MULTI_IN:
	case TASKFILE_MULTI_OUT:
284
		ide_pio_multi(drive, cmd, write);
L
Linus Torvalds 已提交
285 286
		break;
	default:
287
		ide_pio_sector(drive, cmd, write);
L
Linus Torvalds 已提交
288 289
		break;
	}
290 291

	drive->io_32bit = saved_io_32bit;
L
Linus Torvalds 已提交
292 293
}

294
static ide_startstop_t task_error(ide_drive_t *drive, struct ide_cmd *cmd,
L
Linus Torvalds 已提交
295 296
				  const char *s, u8 stat)
{
297
	if (cmd->tf_flags & IDE_TFLAG_FS) {
L
Linus Torvalds 已提交
298 299 300
		ide_hwif_t *hwif = drive->hwif;
		int sectors = hwif->nsect - hwif->nleft;

301
		switch (cmd->data_phase) {
L
Linus Torvalds 已提交
302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318
		case TASKFILE_IN:
			if (hwif->nleft)
				break;
			/* fall through */
		case TASKFILE_OUT:
			sectors--;
			break;
		case TASKFILE_MULTI_IN:
			if (hwif->nleft)
				break;
			/* fall through */
		case TASKFILE_MULTI_OUT:
			sectors -= drive->mult_count;
		default:
			break;
		}

319 320
		if (sectors > 0)
			ide_end_request(drive, 1, sectors);
L
Linus Torvalds 已提交
321 322 323 324
	}
	return ide_error(drive, s, stat);
}

325
void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat)
L
Linus Torvalds 已提交
326
{
327
	if ((cmd->tf_flags & IDE_TFLAG_FS) == 0) {
328
		u8 err = ide_read_error(drive);
L
Linus Torvalds 已提交
329

330
		ide_complete_cmd(drive, cmd, stat, err);
331
		ide_complete_rq(drive, err);
T
Tejun Heo 已提交
332
		return;
L
Linus Torvalds 已提交
333 334
	}

335
	ide_end_request(drive, 1, cmd->rq->nr_sectors);
L
Linus Torvalds 已提交
336 337
}

338 339 340 341 342 343
/*
 * We got an interrupt on a task_in case, but no errors and no DRQ.
 *
 * It might be a spurious irq (shared irq), but it might be a
 * command that had no output.
 */
344 345
static ide_startstop_t task_in_unexpected(ide_drive_t *drive,
					  struct ide_cmd *cmd, u8 stat)
346 347
{
	/* Command all done? */
348
	if (OK_STAT(stat, ATA_DRDY, ATA_BUSY)) {
349
		ide_finish_cmd(drive, cmd, stat);
350 351 352 353 354 355 356 357
		return ide_stopped;
	}

	/* Assume it was a spurious irq */
	ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);
	return ide_started;
}

L
Linus Torvalds 已提交
358 359 360
/*
 * Handler for command with PIO data-in phase (Read/Read Multiple).
 */
361
static ide_startstop_t task_in_intr(ide_drive_t *drive)
L
Linus Torvalds 已提交
362 363
{
	ide_hwif_t *hwif = drive->hwif;
364
	struct ide_cmd *cmd = &drive->hwif->cmd;
365
	u8 stat = hwif->tp_ops->read_status(hwif);
L
Linus Torvalds 已提交
366

367
	/* Error? */
368
	if (stat & ATA_ERR)
369
		return task_error(drive, cmd, __func__, stat);
370 371

	/* Didn't want any data? Odd. */
372
	if ((stat & ATA_DRQ) == 0)
373
		return task_in_unexpected(drive, cmd, stat);
L
Linus Torvalds 已提交
374

375
	ide_pio_datablock(drive, cmd, 0);
L
Linus Torvalds 已提交
376

377
	/* Are we done? Check status and finish transfer. */
L
Linus Torvalds 已提交
378 379
	if (!hwif->nleft) {
		stat = wait_drive_not_busy(drive);
380
		if (!OK_STAT(stat, 0, BAD_STAT))
381 382
			return task_error(drive, cmd, __func__, stat);
		ide_finish_cmd(drive, cmd, stat);
L
Linus Torvalds 已提交
383 384 385 386 387 388 389 390 391 392 393 394 395 396 397
		return ide_stopped;
	}

	/* Still data left to transfer. */
	ide_set_handler(drive, &task_in_intr, WAIT_WORSTCASE, NULL);

	return ide_started;
}

/*
 * Handler for command with PIO data-out phase (Write/Write Multiple).
 */
static ide_startstop_t task_out_intr (ide_drive_t *drive)
{
	ide_hwif_t *hwif = drive->hwif;
398
	struct ide_cmd *cmd = &drive->hwif->cmd;
399
	u8 stat = hwif->tp_ops->read_status(hwif);
L
Linus Torvalds 已提交
400 401

	if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
402
		return task_error(drive, cmd, __func__, stat);
L
Linus Torvalds 已提交
403 404

	/* Deal with unexpected ATA data phase. */
405
	if (((stat & ATA_DRQ) == 0) ^ !hwif->nleft)
406
		return task_error(drive, cmd, __func__, stat);
L
Linus Torvalds 已提交
407 408

	if (!hwif->nleft) {
409
		ide_finish_cmd(drive, cmd, stat);
L
Linus Torvalds 已提交
410 411 412 413
		return ide_stopped;
	}

	/* Still data left to transfer. */
414
	ide_pio_datablock(drive, cmd, 1);
L
Linus Torvalds 已提交
415 416 417 418 419
	ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);

	return ide_started;
}

420 421
static ide_startstop_t pre_task_out_intr(ide_drive_t *drive,
					 struct ide_cmd *cmd)
L
Linus Torvalds 已提交
422 423 424
{
	ide_startstop_t startstop;

425
	if (ide_wait_stat(&startstop, drive, ATA_DRQ,
L
Linus Torvalds 已提交
426 427
			  drive->bad_wstat, WAIT_DRQ)) {
		printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
428
			drive->name,
429
			cmd->data_phase == TASKFILE_MULTI_OUT ? "MULT" : "",
B
Bartlomiej Zolnierkiewicz 已提交
430
			(drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : "");
L
Linus Torvalds 已提交
431 432 433
		return startstop;
	}

B
Bartlomiej Zolnierkiewicz 已提交
434
	if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0)
L
Linus Torvalds 已提交
435 436 437
		local_irq_disable();

	ide_set_handler(drive, &task_out_intr, WAIT_WORSTCASE, NULL);
438
	ide_pio_datablock(drive, cmd, 1);
L
Linus Torvalds 已提交
439 440 441 442

	return ide_started;
}

443 444
int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf,
		     u16 nsect)
L
Linus Torvalds 已提交
445
{
446 447
	struct request *rq;
	int error;
L
Linus Torvalds 已提交
448

449 450 451
	rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
	rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
	rq->buffer = buf;
L
Linus Torvalds 已提交
452 453 454 455 456 457 458

	/*
	 * (ks) We transfer currently only whole sectors.
	 * This is suffient for now.  But, it would be great,
	 * if we would find a solution to transfer any size.
	 * To support special commands like READ LONG.
	 */
459 460
	rq->hard_nr_sectors = rq->nr_sectors = nsect;
	rq->hard_cur_sectors = rq->current_nr_sectors = nsect;
L
Linus Torvalds 已提交
461

462
	if (cmd->tf_flags & IDE_TFLAG_WRITE)
463
		rq->cmd_flags |= REQ_RW;
L
Linus Torvalds 已提交
464

465 466
	rq->special = cmd;
	cmd->rq = rq;
L
Linus Torvalds 已提交
467

468 469 470 471
	error = blk_execute_rq(drive->queue, NULL, rq, 0);
	blk_put_request(rq);

	return error;
L
Linus Torvalds 已提交
472 473 474 475
}

EXPORT_SYMBOL(ide_raw_taskfile);

476
int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd)
477
{
478
	cmd->data_phase = TASKFILE_NO_DATA;
479

480
	return ide_raw_taskfile(drive, cmd, NULL, 0);
481 482 483
}
EXPORT_SYMBOL_GPL(ide_no_data_taskfile);

484
#ifdef CONFIG_IDE_TASK_IOCTL
485
int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg)
L
Linus Torvalds 已提交
486 487
{
	ide_task_request_t	*req_task;
488
	struct ide_cmd		cmd;
L
Linus Torvalds 已提交
489 490
	u8 *outbuf		= NULL;
	u8 *inbuf		= NULL;
491
	u8 *data_buf		= NULL;
L
Linus Torvalds 已提交
492 493
	int err			= 0;
	int tasksize		= sizeof(struct ide_task_request_s);
494 495
	unsigned int taskin	= 0;
	unsigned int taskout	= 0;
496
	u16 nsect		= 0;
L
Linus Torvalds 已提交
497 498 499 500
	char __user *buf = (char __user *)arg;

//	printk("IDE Taskfile ...\n");

501
	req_task = kzalloc(tasksize, GFP_KERNEL);
L
Linus Torvalds 已提交
502 503 504 505 506 507
	if (req_task == NULL) return -ENOMEM;
	if (copy_from_user(req_task, buf, tasksize)) {
		kfree(req_task);
		return -EFAULT;
	}

508 509 510 511 512 513 514
	taskout = req_task->out_size;
	taskin  = req_task->in_size;
	
	if (taskin > 65536 || taskout > 65536) {
		err = -EINVAL;
		goto abort;
	}
L
Linus Torvalds 已提交
515 516 517

	if (taskout) {
		int outtotal = tasksize;
518
		outbuf = kzalloc(taskout, GFP_KERNEL);
L
Linus Torvalds 已提交
519 520 521 522 523 524 525 526 527 528 529 530
		if (outbuf == NULL) {
			err = -ENOMEM;
			goto abort;
		}
		if (copy_from_user(outbuf, buf + outtotal, taskout)) {
			err = -EFAULT;
			goto abort;
		}
	}

	if (taskin) {
		int intotal = tasksize + taskout;
531
		inbuf = kzalloc(taskin, GFP_KERNEL);
L
Linus Torvalds 已提交
532 533 534 535 536 537 538 539 540 541
		if (inbuf == NULL) {
			err = -ENOMEM;
			goto abort;
		}
		if (copy_from_user(inbuf, buf + intotal, taskin)) {
			err = -EFAULT;
			goto abort;
		}
	}

542
	memset(&cmd, 0, sizeof(cmd));
L
Linus Torvalds 已提交
543

544 545 546 547
	memcpy(&cmd.tf_array[0], req_task->hob_ports,
	       HDIO_DRIVE_HOB_HDR_SIZE - 2);
	memcpy(&cmd.tf_array[6], req_task->io_ports,
	       HDIO_DRIVE_TASK_HDR_SIZE);
548

549 550 551
	cmd.data_phase = req_task->data_phase;
	cmd.tf_flags   = IDE_TFLAG_IO_16BIT | IDE_TFLAG_DEVICE |
			 IDE_TFLAG_IN_TF;
L
Linus Torvalds 已提交
552

B
Bartlomiej Zolnierkiewicz 已提交
553
	if (drive->dev_flags & IDE_DFLAG_LBA48)
554
		cmd.tf_flags |= (IDE_TFLAG_LBA48 | IDE_TFLAG_IN_HOB);
555

556
	if (req_task->out_flags.all) {
557
		cmd.ftf_flags |= IDE_FTFLAG_FLAGGED;
558 559

		if (req_task->out_flags.b.data)
560
			cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA;
561 562

		if (req_task->out_flags.b.nsector_hob)
563
			cmd.tf_flags |= IDE_TFLAG_OUT_HOB_NSECT;
564
		if (req_task->out_flags.b.sector_hob)
565
			cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAL;
566
		if (req_task->out_flags.b.lcyl_hob)
567
			cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAM;
568
		if (req_task->out_flags.b.hcyl_hob)
569
			cmd.tf_flags |= IDE_TFLAG_OUT_HOB_LBAH;
570 571

		if (req_task->out_flags.b.error_feature)
572
			cmd.tf_flags |= IDE_TFLAG_OUT_FEATURE;
573
		if (req_task->out_flags.b.nsector)
574
			cmd.tf_flags |= IDE_TFLAG_OUT_NSECT;
575
		if (req_task->out_flags.b.sector)
576
			cmd.tf_flags |= IDE_TFLAG_OUT_LBAL;
577
		if (req_task->out_flags.b.lcyl)
578
			cmd.tf_flags |= IDE_TFLAG_OUT_LBAM;
579
		if (req_task->out_flags.b.hcyl)
580
			cmd.tf_flags |= IDE_TFLAG_OUT_LBAH;
581
	} else {
582 583 584
		cmd.tf_flags |= IDE_TFLAG_OUT_TF;
		if (cmd.tf_flags & IDE_TFLAG_LBA48)
			cmd.tf_flags |= IDE_TFLAG_OUT_HOB;
585 586
	}

587
	if (req_task->in_flags.b.data)
588
		cmd.ftf_flags |= IDE_FTFLAG_IN_DATA;
589

L
Linus Torvalds 已提交
590 591 592 593 594 595
	switch(req_task->data_phase) {
		case TASKFILE_MULTI_OUT:
			if (!drive->mult_count) {
				/* (hs): give up if multcount is not set */
				printk(KERN_ERR "%s: %s Multimode Write " \
					"multcount is not set\n",
596
					drive->name, __func__);
L
Linus Torvalds 已提交
597 598 599 600 601
				err = -EPERM;
				goto abort;
			}
			/* fall through */
		case TASKFILE_OUT:
602 603 604 605 606
			/* fall through */
		case TASKFILE_OUT_DMAQ:
		case TASKFILE_OUT_DMA:
			nsect = taskout / SECTOR_SIZE;
			data_buf = outbuf;
L
Linus Torvalds 已提交
607 608 609 610 611 612
			break;
		case TASKFILE_MULTI_IN:
			if (!drive->mult_count) {
				/* (hs): give up if multcount is not set */
				printk(KERN_ERR "%s: %s Multimode Read failure " \
					"multcount is not set\n",
613
					drive->name, __func__);
L
Linus Torvalds 已提交
614 615 616 617 618
				err = -EPERM;
				goto abort;
			}
			/* fall through */
		case TASKFILE_IN:
619 620 621 622 623
			/* fall through */
		case TASKFILE_IN_DMAQ:
		case TASKFILE_IN_DMA:
			nsect = taskin / SECTOR_SIZE;
			data_buf = inbuf;
L
Linus Torvalds 已提交
624 625 626 627 628 629 630 631
			break;
		case TASKFILE_NO_DATA:
			break;
		default:
			err = -EFAULT;
			goto abort;
	}

632 633 634
	if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
		nsect = 0;
	else if (!nsect) {
635
		nsect = (cmd.tf.hob_nsect << 8) | cmd.tf.nsect;
636 637 638 639 640 641 642 643 644 645

		if (!nsect) {
			printk(KERN_ERR "%s: in/out command without data\n",
					drive->name);
			err = -EFAULT;
			goto abort;
		}
	}

	if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE)
646
		cmd.tf_flags |= IDE_TFLAG_WRITE;
647

648
	err = ide_raw_taskfile(drive, &cmd, data_buf, nsect);
649

650 651 652 653
	memcpy(req_task->hob_ports, &cmd.tf_array[0],
	       HDIO_DRIVE_HOB_HDR_SIZE - 2);
	memcpy(req_task->io_ports, &cmd.tf_array[6],
	       HDIO_DRIVE_TASK_HDR_SIZE);
654

655
	if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) &&
656 657
	    req_task->in_flags.all == 0) {
		req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
B
Bartlomiej Zolnierkiewicz 已提交
658
		if (drive->dev_flags & IDE_DFLAG_LBA48)
659 660
			req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
	}
L
Linus Torvalds 已提交
661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681

	if (copy_to_user(buf, req_task, tasksize)) {
		err = -EFAULT;
		goto abort;
	}
	if (taskout) {
		int outtotal = tasksize;
		if (copy_to_user(buf + outtotal, outbuf, taskout)) {
			err = -EFAULT;
			goto abort;
		}
	}
	if (taskin) {
		int intotal = tasksize + taskout;
		if (copy_to_user(buf + intotal, inbuf, taskin)) {
			err = -EFAULT;
			goto abort;
		}
	}
abort:
	kfree(req_task);
682 683
	kfree(outbuf);
	kfree(inbuf);
L
Linus Torvalds 已提交
684 685 686 687 688

//	printk("IDE Taskfile ioctl ended. rc = %i\n", err);

	return err;
}
689
#endif