ide-taskfile.c 16.2 KB
Newer Older
L
Linus Torvalds 已提交
1
/*
2 3 4
 *  Copyright (C) 2000-2002	   Michael Cornwell <cornwell@acm.org>
 *  Copyright (C) 2000-2002	   Andre Hedrick <andre@linux-ide.org>
 *  Copyright (C) 2001-2002	   Klaus Smolin
L
Linus Torvalds 已提交
5
 *					IBM Storage Technology Division
6
 *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
L
Linus Torvalds 已提交
7 8 9 10 11 12 13
 *
 *  The big the bad and the ugly.
 */

#include <linux/types.h>
#include <linux/string.h>
#include <linux/kernel.h>
14
#include <linux/sched.h>
L
Linus Torvalds 已提交
15 16 17 18 19 20
#include <linux/interrupt.h>
#include <linux/errno.h>
#include <linux/slab.h>
#include <linux/delay.h>
#include <linux/hdreg.h>
#include <linux/ide.h>
J
Jens Axboe 已提交
21
#include <linux/scatterlist.h>
L
Linus Torvalds 已提交
22 23 24 25

#include <asm/uaccess.h>
#include <asm/io.h>

26
void ide_tf_dump(const char *s, struct ide_cmd *cmd)
27
{
28 29 30
#ifdef DEBUG
	printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
		"lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
31 32 33 34 35
	       s, cmd->tf.feature, cmd->tf.nsect,
	       cmd->tf.lbal, cmd->tf.lbam, cmd->tf.lbah,
	       cmd->tf.device, cmd->tf.command);
	printk("%s: hob: nsect 0x%02x lbal 0x%02x lbam 0x%02x lbah 0x%02x\n",
	       s, cmd->hob.nsect, cmd->hob.lbal, cmd->hob.lbam, cmd->hob.lbah);
36
#endif
37 38
}

L
Linus Torvalds 已提交
39 40
int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf)
{
41
	struct ide_cmd cmd;
42

43 44
	memset(&cmd, 0, sizeof(cmd));
	cmd.tf.nsect = 0x01;
L
Linus Torvalds 已提交
45
	if (drive->media == ide_disk)
46
		cmd.tf.command = ATA_CMD_ID_ATA;
L
Linus Torvalds 已提交
47
	else
48
		cmd.tf.command = ATA_CMD_ID_ATAPI;
49 50
	cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE;
	cmd.valid.in.tf  = IDE_VALID_IN_TF  | IDE_VALID_DEVICE;
51
	cmd.protocol = ATA_PROT_PIO;
52 53

	return ide_raw_taskfile(drive, &cmd, buf, 1);
L
Linus Torvalds 已提交
54 55
}

56
static ide_startstop_t task_no_data_intr(ide_drive_t *);
57
static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *);
58
static ide_startstop_t task_pio_intr(ide_drive_t *);
59

60
ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd)
L
Linus Torvalds 已提交
61
{
62
	ide_hwif_t *hwif = drive->hwif;
63
	struct ide_cmd *cmd = &hwif->cmd;
64
	struct ide_taskfile *tf = &cmd->tf;
65
	ide_handler_t *handler = NULL;
66
	const struct ide_tp_ops *tp_ops = hwif->tp_ops;
67
	const struct ide_dma_ops *dma_ops = hwif->dma_ops;
L
Linus Torvalds 已提交
68

69 70 71 72 73
	if (orig_cmd->protocol == ATA_PROT_PIO &&
	    (orig_cmd->tf_flags & IDE_TFLAG_MULTI_PIO) &&
	    drive->mult_count == 0) {
		printk(KERN_ERR "%s: multimode not set!\n", drive->name);
		return ide_stopped;
74 75
	}

76 77
	if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED)
		orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS;
78

79
	memcpy(cmd, orig_cmd, sizeof(*cmd));
80

81
	if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
82
		ide_tf_dump(drive->name, cmd);
83
		tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS);
84
		SELECT_MASK(drive, 0);
85 86

		if (cmd->ftf_flags & IDE_FTFLAG_OUT_DATA) {
87
			u8 data[2] = { cmd->tf.data, cmd->hob.data };
88 89 90

			tp_ops->output_data(drive, cmd, data, 2);
		}
91 92 93 94 95 96 97 98 99 100

		if (cmd->valid.out.tf & IDE_VALID_DEVICE) {
			u8 HIHI = (cmd->tf_flags & IDE_TFLAG_LBA48) ?
				  0xE0 : 0xEF;

			if (!(cmd->ftf_flags & IDE_FTFLAG_FLAGGED))
				cmd->tf.device &= HIHI;
			cmd->tf.device |= drive->select;
		}

S
Sergei Shtylyov 已提交
101 102
		tp_ops->tf_load(drive, &cmd->hob, cmd->valid.out.hob);
		tp_ops->tf_load(drive, &cmd->tf,  cmd->valid.out.tf);
103
	}
L
Linus Torvalds 已提交
104

105 106 107 108 109 110 111
	switch (cmd->protocol) {
	case ATA_PROT_PIO:
		if (cmd->tf_flags & IDE_TFLAG_WRITE) {
			tp_ops->exec_command(hwif, tf->command);
			ndelay(400);	/* FIXME */
			return pre_task_out_intr(drive, cmd);
		}
112
		handler = task_pio_intr;
113
		/* fall-through */
114
	case ATA_PROT_NODATA:
115 116
		if (handler == NULL)
			handler = task_no_data_intr;
117
		ide_execute_command(drive, cmd, handler, WAIT_WORSTCASE);
L
Linus Torvalds 已提交
118
		return ide_started;
119
	case ATA_PROT_DMA:
120
		if (ide_dma_prepare(drive, cmd))
121
			return ide_stopped;
122
		hwif->expiry = dma_ops->dma_timer_expiry;
123
		ide_execute_command(drive, cmd, ide_dma_intr, 2 * WAIT_CMD);
124
		dma_ops->dma_start(drive);
125
	default:
126
		return ide_started;
L
Linus Torvalds 已提交
127 128
	}
}
129
EXPORT_SYMBOL_GPL(do_rw_taskfile);
L
Linus Torvalds 已提交
130

131
static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
L
Linus Torvalds 已提交
132
{
133
	ide_hwif_t *hwif = drive->hwif;
134 135 136
	struct ide_cmd *cmd = &hwif->cmd;
	struct ide_taskfile *tf = &cmd->tf;
	int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0;
137
	int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1;
L
Linus Torvalds 已提交
138 139
	u8 stat;

140 141
	local_irq_enable_in_hardirq();

142 143
	while (1) {
		stat = hwif->tp_ops->read_status(hwif);
144
		if ((stat & ATA_BUSY) == 0 || retries-- == 0)
145
			break;
L
Linus Torvalds 已提交
146
		udelay(10);
147
	};
L
Linus Torvalds 已提交
148

149 150 151 152 153 154 155 156 157
	if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) {
		if (custom && tf->command == ATA_CMD_SET_MULTI) {
			drive->mult_req = drive->mult_count = 0;
			drive->special.b.recalibrate = 1;
			(void)ide_dump_status(drive, __func__, stat);
			return ide_stopped;
		} else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) {
			if ((stat & (ATA_ERR | ATA_DRQ)) == 0) {
				ide_set_handler(drive, &task_no_data_intr,
158
						WAIT_WORSTCASE);
159 160 161
				return ide_started;
			}
		}
L
Linus Torvalds 已提交
162
		return ide_error(drive, "task_no_data_intr", stat);
163
	}
164

165
	if (custom && tf->command == ATA_CMD_SET_MULTI)
166
		drive->mult_count = drive->mult_req;
L
Linus Torvalds 已提交
167

168 169
	if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE ||
	    tf->command == ATA_CMD_CHK_POWER) {
170 171 172 173
		struct request *rq = hwif->rq;

		if (blk_pm_request(rq))
			ide_complete_pm_rq(drive, rq);
174 175
		else
			ide_finish_cmd(drive, cmd, stat);
176 177
	}

L
Linus Torvalds 已提交
178 179 180
	return ide_stopped;
}

181
static u8 wait_drive_not_busy(ide_drive_t *drive)
L
Linus Torvalds 已提交
182
{
183
	ide_hwif_t *hwif = drive->hwif;
184
	int retries;
L
Linus Torvalds 已提交
185 186 187
	u8 stat;

	/*
188 189
	 * Last sector was transfered, wait until device is ready.  This can
	 * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
L
Linus Torvalds 已提交
190
	 */
191
	for (retries = 0; retries < 1000; retries++) {
192
		stat = hwif->tp_ops->read_status(hwif);
193

194
		if (stat & ATA_BUSY)
195 196 197 198
			udelay(10);
		else
			break;
	}
L
Linus Torvalds 已提交
199

200
	if (stat & ATA_BUSY)
L
Linus Torvalds 已提交
201 202 203 204 205
		printk(KERN_ERR "%s: drive still BUSY!\n", drive->name);

	return stat;
}

206 207
void ide_pio_bytes(ide_drive_t *drive, struct ide_cmd *cmd,
		   unsigned int write, unsigned int len)
L
Linus Torvalds 已提交
208 209 210
{
	ide_hwif_t *hwif = drive->hwif;
	struct scatterlist *sg = hwif->sg_table;
211
	struct scatterlist *cursg = cmd->cursg;
L
Linus Torvalds 已提交
212 213 214 215 216
	struct page *page;
	unsigned long flags;
	unsigned int offset;
	u8 *buf;

217
	cursg = cmd->cursg;
218 219 220 221 222
	if (cursg == NULL)
		cursg = cmd->cursg = sg;

	while (len) {
		unsigned nr_bytes = min(len, cursg->length - cmd->cursg_ofs);
J
Jens Axboe 已提交
223

224 225
		if (nr_bytes > PAGE_SIZE)
			nr_bytes = PAGE_SIZE;
L
Linus Torvalds 已提交
226

227 228 229 230 231 232
		page = sg_page(cursg);
		offset = cursg->offset + cmd->cursg_ofs;

		/* get the current page and offset */
		page = nth_page(page, (offset >> PAGE_SHIFT));
		offset %= PAGE_SIZE;
L
Linus Torvalds 已提交
233

234 235 236
		if (PageHighMem(page))
			local_irq_save(flags);

237
		buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
L
Linus Torvalds 已提交
238

239 240
		cmd->nleft -= nr_bytes;
		cmd->cursg_ofs += nr_bytes;
L
Linus Torvalds 已提交
241

242 243 244 245
		if (cmd->cursg_ofs == cursg->length) {
			cursg = cmd->cursg = sg_next(cmd->cursg);
			cmd->cursg_ofs = 0;
		}
L
Linus Torvalds 已提交
246

247 248 249 250 251
		/* do the actual data transfer */
		if (write)
			hwif->tp_ops->output_data(drive, cmd, buf, nr_bytes);
		else
			hwif->tp_ops->input_data(drive, cmd, buf, nr_bytes);
L
Linus Torvalds 已提交
252

253
		kunmap_atomic(buf, KM_BIO_SRC_IRQ);
254 255 256

		if (PageHighMem(page))
			local_irq_restore(flags);
L
Linus Torvalds 已提交
257

258 259
		len -= nr_bytes;
	}
L
Linus Torvalds 已提交
260
}
261
EXPORT_SYMBOL_GPL(ide_pio_bytes);
L
Linus Torvalds 已提交
262

263 264
static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd,
			      unsigned int write)
L
Linus Torvalds 已提交
265
{
266 267
	unsigned int nr_bytes;

268 269
	u8 saved_io_32bit = drive->io_32bit;

270 271
	if (cmd->tf_flags & IDE_TFLAG_FS)
		cmd->rq->errors = 0;
L
Linus Torvalds 已提交
272

273
	if (cmd->tf_flags & IDE_TFLAG_IO_16BIT)
274
		drive->io_32bit = 0;
275

276 277
	touch_softlockup_watchdog();

278
	if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
279
		nr_bytes = min_t(unsigned, cmd->nleft, drive->mult_count << 9);
280
	else
281 282 283
		nr_bytes = SECTOR_SIZE;

	ide_pio_bytes(drive, cmd, write, nr_bytes);
284 285

	drive->io_32bit = saved_io_32bit;
L
Linus Torvalds 已提交
286 287
}

288
static void ide_error_cmd(ide_drive_t *drive, struct ide_cmd *cmd)
L
Linus Torvalds 已提交
289
{
290
	if (cmd->tf_flags & IDE_TFLAG_FS) {
291
		int nr_bytes = cmd->nbytes - cmd->nleft;
L
Linus Torvalds 已提交
292

293 294 295
		if (cmd->protocol == ATA_PROT_PIO &&
		    ((cmd->tf_flags & IDE_TFLAG_WRITE) || cmd->nleft == 0)) {
			if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
296
				nr_bytes -= drive->mult_count << 9;
297
			else
298
				nr_bytes -= SECTOR_SIZE;
L
Linus Torvalds 已提交
299 300
		}

301 302
		if (nr_bytes > 0)
			ide_complete_rq(drive, 0, nr_bytes);
L
Linus Torvalds 已提交
303 304 305
	}
}

306
void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat)
L
Linus Torvalds 已提交
307
{
308
	struct request *rq = drive->hwif->rq;
309
	u8 err = ide_read_error(drive);
L
Linus Torvalds 已提交
310

311
	ide_complete_cmd(drive, cmd, stat, err);
312
	rq->errors = err;
313
	ide_complete_rq(drive, err ? -EIO : 0, blk_rq_bytes(rq));
L
Linus Torvalds 已提交
314 315 316
}

/*
317
 * Handler for command with PIO data phase.
L
Linus Torvalds 已提交
318
 */
319
static ide_startstop_t task_pio_intr(ide_drive_t *drive)
L
Linus Torvalds 已提交
320 321
{
	ide_hwif_t *hwif = drive->hwif;
322
	struct ide_cmd *cmd = &drive->hwif->cmd;
323
	u8 stat = hwif->tp_ops->read_status(hwif);
324
	u8 write = !!(cmd->tf_flags & IDE_TFLAG_WRITE);
L
Linus Torvalds 已提交
325

326 327 328
	if (write == 0) {
		/* Error? */
		if (stat & ATA_ERR)
329
			goto out_err;
L
Linus Torvalds 已提交
330

331
		/* Didn't want any data? Odd. */
332 333
		if ((stat & ATA_DRQ) == 0) {
			/* Command all done? */
334 335
			if (OK_STAT(stat, ATA_DRDY, ATA_BUSY))
				goto out_end;
336 337

			/* Assume it was a spurious irq */
338
			goto out_wait;
339
		}
340 341
	} else {
		if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
342
			goto out_err;
L
Linus Torvalds 已提交
343

344 345
		/* Deal with unexpected ATA data phase. */
		if (((stat & ATA_DRQ) == 0) ^ (cmd->nleft == 0))
346
			goto out_err;
347 348
	}

349 350
	if (write && cmd->nleft == 0)
		goto out_end;
L
Linus Torvalds 已提交
351 352

	/* Still data left to transfer. */
353
	ide_pio_datablock(drive, cmd, write);
L
Linus Torvalds 已提交
354

355 356 357 358
	/* Are we done? Check status and finish transfer. */
	if (write == 0 && cmd->nleft == 0) {
		stat = wait_drive_not_busy(drive);
		if (!OK_STAT(stat, 0, BAD_STAT))
359
			goto out_err;
L
Linus Torvalds 已提交
360

361 362 363
		goto out_end;
	}
out_wait:
L
Linus Torvalds 已提交
364
	/* Still data left to transfer. */
365
	ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
L
Linus Torvalds 已提交
366
	return ide_started;
367
out_end:
368 369 370
	if ((cmd->tf_flags & IDE_TFLAG_FS) == 0)
		ide_finish_cmd(drive, cmd, stat);
	else
371
		ide_complete_rq(drive, 0, cmd->rq->nr_sectors << 9);
372 373
	return ide_stopped;
out_err:
374 375
	ide_error_cmd(drive, cmd);
	return ide_error(drive, __func__, stat);
L
Linus Torvalds 已提交
376 377
}

378 379
static ide_startstop_t pre_task_out_intr(ide_drive_t *drive,
					 struct ide_cmd *cmd)
L
Linus Torvalds 已提交
380 381 382
{
	ide_startstop_t startstop;

383
	if (ide_wait_stat(&startstop, drive, ATA_DRQ,
L
Linus Torvalds 已提交
384 385
			  drive->bad_wstat, WAIT_DRQ)) {
		printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n",
386
			drive->name,
387
			(cmd->tf_flags & IDE_TFLAG_MULTI_PIO) ? "MULT" : "",
B
Bartlomiej Zolnierkiewicz 已提交
388
			(drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : "");
L
Linus Torvalds 已提交
389 390 391
		return startstop;
	}

B
Bartlomiej Zolnierkiewicz 已提交
392
	if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0)
L
Linus Torvalds 已提交
393 394
		local_irq_disable();

395
	ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
396

397
	ide_pio_datablock(drive, cmd, 1);
L
Linus Torvalds 已提交
398 399 400 401

	return ide_started;
}

402 403
int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf,
		     u16 nsect)
L
Linus Torvalds 已提交
404
{
405 406
	struct request *rq;
	int error;
L
Linus Torvalds 已提交
407

408 409 410
	rq = blk_get_request(drive->queue, READ, __GFP_WAIT);
	rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
	rq->buffer = buf;
L
Linus Torvalds 已提交
411 412 413 414 415 416 417

	/*
	 * (ks) We transfer currently only whole sectors.
	 * This is suffient for now.  But, it would be great,
	 * if we would find a solution to transfer any size.
	 * To support special commands like READ LONG.
	 */
418 419
	rq->hard_nr_sectors = rq->nr_sectors = nsect;
	rq->hard_cur_sectors = rq->current_nr_sectors = nsect;
L
Linus Torvalds 已提交
420

421
	if (cmd->tf_flags & IDE_TFLAG_WRITE)
422
		rq->cmd_flags |= REQ_RW;
L
Linus Torvalds 已提交
423

424 425
	rq->special = cmd;
	cmd->rq = rq;
L
Linus Torvalds 已提交
426

427 428 429 430
	error = blk_execute_rq(drive->queue, NULL, rq, 0);
	blk_put_request(rq);

	return error;
L
Linus Torvalds 已提交
431 432 433 434
}

EXPORT_SYMBOL(ide_raw_taskfile);

435
int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd)
436
{
437
	cmd->protocol = ATA_PROT_NODATA;
438

439
	return ide_raw_taskfile(drive, cmd, NULL, 0);
440 441 442
}
EXPORT_SYMBOL_GPL(ide_no_data_taskfile);

443
#ifdef CONFIG_IDE_TASK_IOCTL
444
int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg)
L
Linus Torvalds 已提交
445 446
{
	ide_task_request_t	*req_task;
447
	struct ide_cmd		cmd;
L
Linus Torvalds 已提交
448 449
	u8 *outbuf		= NULL;
	u8 *inbuf		= NULL;
450
	u8 *data_buf		= NULL;
L
Linus Torvalds 已提交
451 452
	int err			= 0;
	int tasksize		= sizeof(struct ide_task_request_s);
453 454
	unsigned int taskin	= 0;
	unsigned int taskout	= 0;
455
	u16 nsect		= 0;
L
Linus Torvalds 已提交
456 457 458 459
	char __user *buf = (char __user *)arg;

//	printk("IDE Taskfile ...\n");

460
	req_task = kzalloc(tasksize, GFP_KERNEL);
L
Linus Torvalds 已提交
461 462 463 464 465 466
	if (req_task == NULL) return -ENOMEM;
	if (copy_from_user(req_task, buf, tasksize)) {
		kfree(req_task);
		return -EFAULT;
	}

467 468 469 470 471 472 473
	taskout = req_task->out_size;
	taskin  = req_task->in_size;
	
	if (taskin > 65536 || taskout > 65536) {
		err = -EINVAL;
		goto abort;
	}
L
Linus Torvalds 已提交
474 475 476

	if (taskout) {
		int outtotal = tasksize;
477
		outbuf = kzalloc(taskout, GFP_KERNEL);
L
Linus Torvalds 已提交
478 479 480 481 482 483 484 485 486 487 488 489
		if (outbuf == NULL) {
			err = -ENOMEM;
			goto abort;
		}
		if (copy_from_user(outbuf, buf + outtotal, taskout)) {
			err = -EFAULT;
			goto abort;
		}
	}

	if (taskin) {
		int intotal = tasksize + taskout;
490
		inbuf = kzalloc(taskin, GFP_KERNEL);
L
Linus Torvalds 已提交
491 492 493 494 495 496 497 498 499 500
		if (inbuf == NULL) {
			err = -ENOMEM;
			goto abort;
		}
		if (copy_from_user(inbuf, buf + intotal, taskin)) {
			err = -EFAULT;
			goto abort;
		}
	}

501
	memset(&cmd, 0, sizeof(cmd));
L
Linus Torvalds 已提交
502

503 504
	memcpy(&cmd.hob, req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
	memcpy(&cmd.tf,  req_task->io_ports,  HDIO_DRIVE_TASK_HDR_SIZE);
505

506 507 508
	cmd.valid.out.tf = IDE_VALID_DEVICE;
	cmd.valid.in.tf  = IDE_VALID_DEVICE | IDE_VALID_IN_TF;
	cmd.tf_flags = IDE_TFLAG_IO_16BIT;
L
Linus Torvalds 已提交
509

510 511 512 513
	if (drive->dev_flags & IDE_DFLAG_LBA48) {
		cmd.tf_flags |= IDE_TFLAG_LBA48;
		cmd.valid.in.hob = IDE_VALID_IN_HOB;
	}
514

515
	if (req_task->out_flags.all) {
516
		cmd.ftf_flags |= IDE_FTFLAG_FLAGGED;
517 518

		if (req_task->out_flags.b.data)
519
			cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA;
520 521

		if (req_task->out_flags.b.nsector_hob)
522
			cmd.valid.out.hob |= IDE_VALID_NSECT;
523
		if (req_task->out_flags.b.sector_hob)
524
			cmd.valid.out.hob |= IDE_VALID_LBAL;
525
		if (req_task->out_flags.b.lcyl_hob)
526
			cmd.valid.out.hob |= IDE_VALID_LBAM;
527
		if (req_task->out_flags.b.hcyl_hob)
528
			cmd.valid.out.hob |= IDE_VALID_LBAH;
529 530

		if (req_task->out_flags.b.error_feature)
531
			cmd.valid.out.tf  |= IDE_VALID_FEATURE;
532
		if (req_task->out_flags.b.nsector)
533
			cmd.valid.out.tf  |= IDE_VALID_NSECT;
534
		if (req_task->out_flags.b.sector)
535
			cmd.valid.out.tf  |= IDE_VALID_LBAL;
536
		if (req_task->out_flags.b.lcyl)
537
			cmd.valid.out.tf  |= IDE_VALID_LBAM;
538
		if (req_task->out_flags.b.hcyl)
539
			cmd.valid.out.tf  |= IDE_VALID_LBAH;
540
	} else {
541
		cmd.valid.out.tf |= IDE_VALID_OUT_TF;
542
		if (cmd.tf_flags & IDE_TFLAG_LBA48)
543
			cmd.valid.out.hob |= IDE_VALID_OUT_HOB;
544 545
	}

546
	if (req_task->in_flags.b.data)
547
		cmd.ftf_flags |= IDE_FTFLAG_IN_DATA;
548

549 550 551 552
	if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE) {
		/* fixup data phase if needed */
		if (req_task->data_phase == TASKFILE_IN_DMAQ ||
		    req_task->data_phase == TASKFILE_IN_DMA)
553
			cmd.tf_flags |= IDE_TFLAG_WRITE;
554 555
	}

556 557 558
	cmd.protocol = ATA_PROT_DMA;

	switch (req_task->data_phase) {
L
Linus Torvalds 已提交
559 560 561 562 563
		case TASKFILE_MULTI_OUT:
			if (!drive->mult_count) {
				/* (hs): give up if multcount is not set */
				printk(KERN_ERR "%s: %s Multimode Write " \
					"multcount is not set\n",
564
					drive->name, __func__);
L
Linus Torvalds 已提交
565 566 567
				err = -EPERM;
				goto abort;
			}
568
			cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
L
Linus Torvalds 已提交
569 570
			/* fall through */
		case TASKFILE_OUT:
571
			cmd.protocol = ATA_PROT_PIO;
572 573 574
			/* fall through */
		case TASKFILE_OUT_DMAQ:
		case TASKFILE_OUT_DMA:
575
			cmd.tf_flags |= IDE_TFLAG_WRITE;
576 577
			nsect = taskout / SECTOR_SIZE;
			data_buf = outbuf;
L
Linus Torvalds 已提交
578 579 580 581 582 583
			break;
		case TASKFILE_MULTI_IN:
			if (!drive->mult_count) {
				/* (hs): give up if multcount is not set */
				printk(KERN_ERR "%s: %s Multimode Read failure " \
					"multcount is not set\n",
584
					drive->name, __func__);
L
Linus Torvalds 已提交
585 586 587
				err = -EPERM;
				goto abort;
			}
588
			cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
L
Linus Torvalds 已提交
589 590
			/* fall through */
		case TASKFILE_IN:
591
			cmd.protocol = ATA_PROT_PIO;
592 593 594 595 596
			/* fall through */
		case TASKFILE_IN_DMAQ:
		case TASKFILE_IN_DMA:
			nsect = taskin / SECTOR_SIZE;
			data_buf = inbuf;
L
Linus Torvalds 已提交
597 598
			break;
		case TASKFILE_NO_DATA:
599
			cmd.protocol = ATA_PROT_NODATA;
L
Linus Torvalds 已提交
600 601 602 603 604 605
			break;
		default:
			err = -EFAULT;
			goto abort;
	}

606 607 608
	if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
		nsect = 0;
	else if (!nsect) {
609
		nsect = (cmd.hob.nsect << 8) | cmd.tf.nsect;
610 611 612 613 614 615 616 617 618

		if (!nsect) {
			printk(KERN_ERR "%s: in/out command without data\n",
					drive->name);
			err = -EFAULT;
			goto abort;
		}
	}

619
	err = ide_raw_taskfile(drive, &cmd, data_buf, nsect);
620

621 622
	memcpy(req_task->hob_ports, &cmd.hob, HDIO_DRIVE_HOB_HDR_SIZE - 2);
	memcpy(req_task->io_ports,  &cmd.tf,  HDIO_DRIVE_TASK_HDR_SIZE);
623

624
	if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) &&
625 626
	    req_task->in_flags.all == 0) {
		req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
B
Bartlomiej Zolnierkiewicz 已提交
627
		if (drive->dev_flags & IDE_DFLAG_LBA48)
628 629
			req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
	}
L
Linus Torvalds 已提交
630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650

	if (copy_to_user(buf, req_task, tasksize)) {
		err = -EFAULT;
		goto abort;
	}
	if (taskout) {
		int outtotal = tasksize;
		if (copy_to_user(buf + outtotal, outbuf, taskout)) {
			err = -EFAULT;
			goto abort;
		}
	}
	if (taskin) {
		int intotal = tasksize + taskout;
		if (copy_to_user(buf + intotal, inbuf, taskin)) {
			err = -EFAULT;
			goto abort;
		}
	}
abort:
	kfree(req_task);
651 652
	kfree(outbuf);
	kfree(inbuf);
L
Linus Torvalds 已提交
653 654 655 656 657

//	printk("IDE Taskfile ioctl ended. rc = %i\n", err);

	return err;
}
658
#endif