1 /*
2  *  linux/drivers/block/floppy.c
3  *
4  *  Copyright (C) 1991, 1992  Linus Torvalds
5  *  Copyright (C) 1993, 1994  Alain Knaff
6  *  Copyright (C) 1998 Alan Cox
7  */
8 
9 /*
10  * 02.12.91 - Changed to static variables to indicate need for reset
11  * and recalibrate. This makes some things easier (output_byte reset
12  * checking etc), and means less interrupt jumping in case of errors,
13  * so the code is hopefully easier to understand.
14  */
15 
16 /*
17  * This file is certainly a mess. I've tried my best to get it working,
18  * but I don't like programming floppies, and I have only one anyway.
19  * Urgel. I should check for more errors, and do more graceful error
20  * recovery. Seems there are problems with several drives. I've tried to
21  * correct them. No promises.
22  */
23 
24 /*
25  * As with hd.c, all routines within this file can (and will) be called
26  * by interrupts, so extreme caution is needed. A hardware interrupt
27  * handler may not sleep, or a kernel panic will happen. Thus I cannot
28  * call "floppy-on" directly, but have to set a special timer interrupt
29  * etc.
30  */
31 
32 /*
33  * 28.02.92 - made track-buffering routines, based on the routines written
34  * by entropy@wintermute.wpi.edu (Lawrence Foard). Linus.
35  */
36 
37 /*
38  * Automatic floppy-detection and formatting written by Werner Almesberger
39  * (almesber@nessie.cs.id.ethz.ch), who also corrected some problems with
40  * the floppy-change signal detection.
41  */
42 
43 /*
44  * 1992/7/22 -- Hennus Bergman: Added better error reporting, fixed
45  * FDC data overrun bug, added some preliminary stuff for vertical
46  * recording support.
47  *
48  * 1992/9/17: Added DMA allocation & DMA functions. -- hhb.
49  *
50  * TODO: Errors are still not counted properly.
51  */
52 
53 /* 1992/9/20
54  * Modifications for ``Sector Shifting'' by Rob Hooft (hooft@chem.ruu.nl)
55  * modeled after the freeware MS-DOS program fdformat/88 V1.8 by
56  * Christoph H. Hochst\"atter.
57  * I have fixed the shift values to the ones I always use. Maybe a new
58  * ioctl() should be created to be able to modify them.
59  * There is a bug in the driver that makes it impossible to format a
60  * floppy as the first thing after bootup.
61  */
62 
63 /*
64  * 1993/4/29 -- Linus -- cleaned up the timer handling in the kernel, and
65  * this helped the floppy driver as well. Much cleaner, and still seems to
66  * work.
67  */
68 
69 /* 1994/6/24 --bbroad-- added the floppy table entries and made
70  * minor modifications to allow 2.88 floppies to be run.
71  */
72 
73 /* 1994/7/13 -- Paul Vojta -- modified the probing code to allow three or more
74  * disk types.
75  */
76 
77 /*
78  * 1994/8/8 -- Alain Knaff -- Switched to fdpatch driver: Support for bigger
79  * format bug fixes, but unfortunately some new bugs too...
80  */
81 
82 /* 1994/9/17 -- Koen Holtman -- added logging of physical floppy write
83  * errors to allow safe writing by specialized programs.
84  */
85 
86 /* 1995/4/24 -- Dan Fandrich -- added support for Commodore 1581 3.5" disks
87  * by defining bit 1 of the "stretch" parameter to mean put sectors on the
88  * opposite side of the disk, leaving the sector IDs alone (i.e. Commodore's
89  * drives are "upside-down").
90  */
91 
92 /*
93  * 1995/8/26 -- Andreas Busse -- added Mips support.
94  */
95 
96 /*
97  * 1995/10/18 -- Ralf Baechle -- Portability cleanup; move machine dependent
98  * features to asm/floppy.h.
99  */
100 
101 /*
102  * 1998/1/21 -- Richard Gooch <rgooch@atnf.csiro.au> -- devfs support
103  */
104 
105 /*
106  * 1998/05/07 -- Russell King -- More portability cleanups; moved definition of
107  * interrupt and dma channel to asm/floppy.h. Cleaned up some formatting &
108  * use of '0' for NULL.
109  */
110 
111 /*
112  * 1998/06/07 -- Alan Cox -- Merged the 2.0.34 fixes for resource allocation
113  * failures.
114  */
115 
116 /*
117  * 1998/09/20 -- David Weinehall -- Added slow-down code for buggy PS/2-drives.
118  */
119 
120 /*
121  * 1999/08/13 -- Paul Slootman -- floppy stopped working on Alpha after 24
122  * days, 6 hours, 32 minutes and 32 seconds (i.e. MAXINT jiffies; ints were
123  * being used to store jiffies, which are unsigned longs).
124  */
125 
126 /*
127  * 2000/08/28 -- Arnaldo Carvalho de Melo <acme@conectiva.com.br>
128  * - get rid of check_region
129  * - s/suser/capable/
130  */
131 
132 /*
133  * 2001/08/26 -- Paul Gortmaker - fix insmod oops on machines with no
134  * floppy controller (lingering task on list after module is gone... boom.)
135  */
136 
137 /*
138  * 2002/02/07 -- Anton Altaparmakov - Fix io ports reservation to correct range
139  * (0x3f2-0x3f5, 0x3f7). This fix is a bit of a hack but the proper fix
140  * requires many non-obvious changes in arch dependent code.
141  */
142 
143 /* 2003/07/28 -- Daniele Bellucci <bellucda@tiscali.it>.
144  * Better audit of register_blkdev.
145  */
146 
147 #undef  FLOPPY_SILENT_DCL_CLEAR
148 
149 #define REALLY_SLOW_IO
150 
151 #define DEBUGT 2
152 
153 #define DPRINT(format, args...) \
154 	pr_info("floppy%d: " format, current_drive, ##args)
155 
156 #define DCL_DEBUG		/* debug disk change line */
157 #ifdef DCL_DEBUG
158 #define debug_dcl(test, fmt, args...) \
159 	do { if ((test) & FD_DEBUG) DPRINT(fmt, ##args); } while (0)
160 #else
161 #define debug_dcl(test, fmt, args...) \
162 	do { if (0) DPRINT(fmt, ##args); } while (0)
163 #endif
164 
165 /* do print messages for unexpected interrupts */
166 static int print_unex = 1;
167 #include <linux/module.h>
168 #include <linux/sched.h>
169 #include <linux/fs.h>
170 #include <linux/kernel.h>
171 #include <linux/timer.h>
172 #include <linux/workqueue.h>
173 #define FDPATCHES
174 #include <linux/fdreg.h>
175 #include <linux/fd.h>
176 #include <linux/hdreg.h>
177 #include <linux/errno.h>
178 #include <linux/slab.h>
179 #include <linux/mm.h>
180 #include <linux/bio.h>
181 #include <linux/string.h>
182 #include <linux/jiffies.h>
183 #include <linux/fcntl.h>
184 #include <linux/delay.h>
185 #include <linux/mc146818rtc.h>	/* CMOS defines */
186 #include <linux/ioport.h>
187 #include <linux/interrupt.h>
188 #include <linux/init.h>
189 #include <linux/platform_device.h>
190 #include <linux/mod_devicetable.h>
191 #include <linux/mutex.h>
192 #include <linux/io.h>
193 #include <linux/uaccess.h>
194 #include <linux/async.h>
195 #include <linux/compat.h>
196 
197 /*
198  * PS/2 floppies have much slower step rates than regular floppies.
199  * It's been recommended that take about 1/4 of the default speed
200  * in some more extreme cases.
201  */
202 static DEFINE_MUTEX(floppy_mutex);
203 static int slow_floppy;
204 
205 #include <asm/dma.h>
206 #include <asm/irq.h>
207 
208 static int FLOPPY_IRQ = 6;
209 static int FLOPPY_DMA = 2;
210 static int can_use_virtual_dma = 2;
211 /* =======
212  * can use virtual DMA:
213  * 0 = use of virtual DMA disallowed by config
214  * 1 = use of virtual DMA prescribed by config
215  * 2 = no virtual DMA preference configured.  By default try hard DMA,
216  * but fall back on virtual DMA when not enough memory available
217  */
218 
219 static int use_virtual_dma;
220 /* =======
221  * use virtual DMA
222  * 0 using hard DMA
223  * 1 using virtual DMA
224  * This variable is set to virtual when a DMA mem problem arises, and
225  * reset back in floppy_grab_irq_and_dma.
226  * It is not safe to reset it in other circumstances, because the floppy
227  * driver may have several buffers in use at once, and we do currently not
228  * record each buffers capabilities
229  */
230 
231 static DEFINE_SPINLOCK(floppy_lock);
232 
233 static unsigned short virtual_dma_port = 0x3f0;
234 irqreturn_t floppy_interrupt(int irq, void *dev_id);
235 static int set_dor(int fdc, char mask, char data);
236 
237 #define K_64	0x10000		/* 64KB */
238 
239 /* the following is the mask of allowed drives. By default units 2 and
240  * 3 of both floppy controllers are disabled, because switching on the
241  * motor of these drives causes system hangs on some PCI computers. drive
242  * 0 is the low bit (0x1), and drive 7 is the high bit (0x80). Bits are on if
243  * a drive is allowed.
244  *
245  * NOTE: This must come before we include the arch floppy header because
246  *       some ports reference this variable from there. -DaveM
247  */
248 
249 static int allowed_drive_mask = 0x33;
250 
251 #include <asm/floppy.h>
252 
253 static int irqdma_allocated;
254 
255 #include <linux/blkdev.h>
256 #include <linux/blkpg.h>
257 #include <linux/cdrom.h>	/* for the compatibility eject ioctl */
258 #include <linux/completion.h>
259 
260 static struct request *current_req;
261 static void do_fd_request(struct request_queue *q);
262 static int set_next_request(void);
263 
264 #ifndef fd_get_dma_residue
265 #define fd_get_dma_residue() get_dma_residue(FLOPPY_DMA)
266 #endif
267 
268 /* Dma Memory related stuff */
269 
270 #ifndef fd_dma_mem_free
271 #define fd_dma_mem_free(addr, size) free_pages(addr, get_order(size))
272 #endif
273 
274 #ifndef fd_dma_mem_alloc
275 #define fd_dma_mem_alloc(size) __get_dma_pages(GFP_KERNEL, get_order(size))
276 #endif
277 
278 #ifndef fd_cacheflush
279 #define fd_cacheflush(addr, size) /* nothing... */
280 #endif
281 
fallback_on_nodma_alloc(char ** addr,size_t l)282 static inline void fallback_on_nodma_alloc(char **addr, size_t l)
283 {
284 #ifdef FLOPPY_CAN_FALLBACK_ON_NODMA
285 	if (*addr)
286 		return;		/* we have the memory */
287 	if (can_use_virtual_dma != 2)
288 		return;		/* no fallback allowed */
289 	pr_info("DMA memory shortage. Temporarily falling back on virtual DMA\n");
290 	*addr = (char *)nodma_mem_alloc(l);
291 #else
292 	return;
293 #endif
294 }
295 
296 /* End dma memory related stuff */
297 
298 static unsigned long fake_change;
299 static bool initialized;
300 
301 #define ITYPE(x)	(((x) >> 2) & 0x1f)
302 #define TOMINOR(x)	((x & 3) | ((x & 4) << 5))
303 #define UNIT(x)		((x) & 0x03)		/* drive on fdc */
304 #define FDC(x)		(((x) & 0x04) >> 2)	/* fdc of drive */
305 	/* reverse mapping from unit and fdc to drive */
306 #define REVDRIVE(fdc, unit) ((unit) + ((fdc) << 2))
307 
308 #define DP	(&drive_params[current_drive])
309 #define DRS	(&drive_state[current_drive])
310 #define DRWE	(&write_errors[current_drive])
311 #define FDCS	(&fdc_state[fdc])
312 
313 #define UDP	(&drive_params[drive])
314 #define UDRS	(&drive_state[drive])
315 #define UDRWE	(&write_errors[drive])
316 #define UFDCS	(&fdc_state[FDC(drive)])
317 
318 #define PH_HEAD(floppy, head) (((((floppy)->stretch & 2) >> 1) ^ head) << 2)
319 #define STRETCH(floppy)	((floppy)->stretch & FD_STRETCH)
320 
321 /* read/write */
322 #define COMMAND		(raw_cmd->cmd[0])
323 #define DR_SELECT	(raw_cmd->cmd[1])
324 #define TRACK		(raw_cmd->cmd[2])
325 #define HEAD		(raw_cmd->cmd[3])
326 #define SECTOR		(raw_cmd->cmd[4])
327 #define SIZECODE	(raw_cmd->cmd[5])
328 #define SECT_PER_TRACK	(raw_cmd->cmd[6])
329 #define GAP		(raw_cmd->cmd[7])
330 #define SIZECODE2	(raw_cmd->cmd[8])
331 #define NR_RW 9
332 
333 /* format */
334 #define F_SIZECODE	(raw_cmd->cmd[2])
335 #define F_SECT_PER_TRACK (raw_cmd->cmd[3])
336 #define F_GAP		(raw_cmd->cmd[4])
337 #define F_FILL		(raw_cmd->cmd[5])
338 #define NR_F 6
339 
340 /*
341  * Maximum disk size (in kilobytes).
342  * This default is used whenever the current disk size is unknown.
343  * [Now it is rather a minimum]
344  */
345 #define MAX_DISK_SIZE 4		/* 3984 */
346 
347 /*
348  * globals used by 'result()'
349  */
350 #define MAX_REPLIES 16
351 static unsigned char reply_buffer[MAX_REPLIES];
352 static int inr;		/* size of reply buffer, when called from interrupt */
353 #define ST0		(reply_buffer[0])
354 #define ST1		(reply_buffer[1])
355 #define ST2		(reply_buffer[2])
356 #define ST3		(reply_buffer[0])	/* result of GETSTATUS */
357 #define R_TRACK		(reply_buffer[3])
358 #define R_HEAD		(reply_buffer[4])
359 #define R_SECTOR	(reply_buffer[5])
360 #define R_SIZECODE	(reply_buffer[6])
361 
362 #define SEL_DLY		(2 * HZ / 100)
363 
364 /*
365  * this struct defines the different floppy drive types.
366  */
367 static struct {
368 	struct floppy_drive_params params;
369 	const char *name;	/* name printed while booting */
370 } default_drive_params[] = {
371 /* NOTE: the time values in jiffies should be in msec!
372  CMOS drive type
373   |     Maximum data rate supported by drive type
374   |     |   Head load time, msec
375   |     |   |   Head unload time, msec (not used)
376   |     |   |   |     Step rate interval, usec
377   |     |   |   |     |       Time needed for spinup time (jiffies)
378   |     |   |   |     |       |      Timeout for spinning down (jiffies)
379   |     |   |   |     |       |      |   Spindown offset (where disk stops)
380   |     |   |   |     |       |      |   |     Select delay
381   |     |   |   |     |       |      |   |     |     RPS
382   |     |   |   |     |       |      |   |     |     |    Max number of tracks
383   |     |   |   |     |       |      |   |     |     |    |     Interrupt timeout
384   |     |   |   |     |       |      |   |     |     |    |     |   Max nonintlv. sectors
385   |     |   |   |     |       |      |   |     |     |    |     |   | -Max Errors- flags */
386 {{0,  500, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  80, 3*HZ, 20, {3,1,2,0,2}, 0,
387       0, { 7, 4, 8, 2, 1, 5, 3,10}, 3*HZ/2, 0 }, "unknown" },
388 
389 {{1,  300, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  40, 3*HZ, 17, {3,1,2,0,2}, 0,
390       0, { 1, 0, 0, 0, 0, 0, 0, 0}, 3*HZ/2, 1 }, "360K PC" }, /*5 1/4 360 KB PC*/
391 
392 {{2,  500, 16, 16, 6000, 4*HZ/10, 3*HZ, 14, SEL_DLY, 6,  83, 3*HZ, 17, {3,1,2,0,2}, 0,
393       0, { 2, 5, 6,23,10,20,12, 0}, 3*HZ/2, 2 }, "1.2M" }, /*5 1/4 HD AT*/
394 
395 {{3,  250, 16, 16, 3000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
396       0, { 4,22,21,30, 3, 0, 0, 0}, 3*HZ/2, 4 }, "720k" }, /*3 1/2 DD*/
397 
398 {{4,  500, 16, 16, 4000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
399       0, { 7, 4,25,22,31,21,29,11}, 3*HZ/2, 7 }, "1.44M" }, /*3 1/2 HD*/
400 
401 {{5, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
402       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M AMI BIOS" }, /*3 1/2 ED*/
403 
404 {{6, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
405       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M" } /*3 1/2 ED*/
406 /*    |  --autodetected formats---    |      |      |
407  *    read_track                      |      |    Name printed when booting
408  *				      |     Native format
409  *	            Frequency of disk change checks */
410 };
411 
412 static struct floppy_drive_params drive_params[N_DRIVE];
413 static struct floppy_drive_struct drive_state[N_DRIVE];
414 static struct floppy_write_errors write_errors[N_DRIVE];
415 static struct timer_list motor_off_timer[N_DRIVE];
416 static struct gendisk *disks[N_DRIVE];
417 static struct block_device *opened_bdev[N_DRIVE];
418 static DEFINE_MUTEX(open_lock);
419 static struct floppy_raw_cmd *raw_cmd, default_raw_cmd;
420 static int fdc_queue;
421 
422 /*
423  * This struct defines the different floppy types.
424  *
425  * Bit 0 of 'stretch' tells if the tracks need to be doubled for some
426  * types (e.g. 360kB diskette in 1.2MB drive, etc.).  Bit 1 of 'stretch'
427  * tells if the disk is in Commodore 1581 format, which means side 0 sectors
428  * are located on side 1 of the disk but with a side 0 ID, and vice-versa.
429  * This is the same as the Sharp MZ-80 5.25" CP/M disk format, except that the
430  * 1581's logical side 0 is on physical side 1, whereas the Sharp's logical
431  * side 0 is on physical side 0 (but with the misnamed sector IDs).
432  * 'stretch' should probably be renamed to something more general, like
433  * 'options'.
434  *
435  * Bits 2 through 9 of 'stretch' tell the number of the first sector.
436  * The LSB (bit 2) is flipped. For most disks, the first sector
437  * is 1 (represented by 0x00<<2).  For some CP/M and music sampler
438  * disks (such as Ensoniq EPS 16plus) it is 0 (represented as 0x01<<2).
439  * For Amstrad CPC disks it is 0xC1 (represented as 0xC0<<2).
440  *
441  * Other parameters should be self-explanatory (see also setfdprm(8)).
442  */
443 /*
444 	    Size
445 	     |  Sectors per track
446 	     |  | Head
447 	     |  | |  Tracks
448 	     |  | |  | Stretch
449 	     |  | |  | |  Gap 1 size
450 	     |  | |  | |    |  Data rate, | 0x40 for perp
451 	     |  | |  | |    |    |  Spec1 (stepping rate, head unload
452 	     |  | |  | |    |    |    |    /fmt gap (gap2) */
453 static struct floppy_struct floppy_type[32] = {
454 	{    0, 0,0, 0,0,0x00,0x00,0x00,0x00,NULL    },	/*  0 no testing    */
455 	{  720, 9,2,40,0,0x2A,0x02,0xDF,0x50,"d360"  }, /*  1 360KB PC      */
456 	{ 2400,15,2,80,0,0x1B,0x00,0xDF,0x54,"h1200" },	/*  2 1.2MB AT      */
457 	{  720, 9,1,80,0,0x2A,0x02,0xDF,0x50,"D360"  },	/*  3 360KB SS 3.5" */
458 	{ 1440, 9,2,80,0,0x2A,0x02,0xDF,0x50,"D720"  },	/*  4 720KB 3.5"    */
459 	{  720, 9,2,40,1,0x23,0x01,0xDF,0x50,"h360"  },	/*  5 360KB AT      */
460 	{ 1440, 9,2,80,0,0x23,0x01,0xDF,0x50,"h720"  },	/*  6 720KB AT      */
461 	{ 2880,18,2,80,0,0x1B,0x00,0xCF,0x6C,"H1440" },	/*  7 1.44MB 3.5"   */
462 	{ 5760,36,2,80,0,0x1B,0x43,0xAF,0x54,"E2880" },	/*  8 2.88MB 3.5"   */
463 	{ 6240,39,2,80,0,0x1B,0x43,0xAF,0x28,"E3120" },	/*  9 3.12MB 3.5"   */
464 
465 	{ 2880,18,2,80,0,0x25,0x00,0xDF,0x02,"h1440" }, /* 10 1.44MB 5.25"  */
466 	{ 3360,21,2,80,0,0x1C,0x00,0xCF,0x0C,"H1680" }, /* 11 1.68MB 3.5"   */
467 	{  820,10,2,41,1,0x25,0x01,0xDF,0x2E,"h410"  },	/* 12 410KB 5.25"   */
468 	{ 1640,10,2,82,0,0x25,0x02,0xDF,0x2E,"H820"  },	/* 13 820KB 3.5"    */
469 	{ 2952,18,2,82,0,0x25,0x00,0xDF,0x02,"h1476" },	/* 14 1.48MB 5.25"  */
470 	{ 3444,21,2,82,0,0x25,0x00,0xDF,0x0C,"H1722" },	/* 15 1.72MB 3.5"   */
471 	{  840,10,2,42,1,0x25,0x01,0xDF,0x2E,"h420"  },	/* 16 420KB 5.25"   */
472 	{ 1660,10,2,83,0,0x25,0x02,0xDF,0x2E,"H830"  },	/* 17 830KB 3.5"    */
473 	{ 2988,18,2,83,0,0x25,0x00,0xDF,0x02,"h1494" },	/* 18 1.49MB 5.25"  */
474 	{ 3486,21,2,83,0,0x25,0x00,0xDF,0x0C,"H1743" }, /* 19 1.74 MB 3.5"  */
475 
476 	{ 1760,11,2,80,0,0x1C,0x09,0xCF,0x00,"h880"  }, /* 20 880KB 5.25"   */
477 	{ 2080,13,2,80,0,0x1C,0x01,0xCF,0x00,"D1040" }, /* 21 1.04MB 3.5"   */
478 	{ 2240,14,2,80,0,0x1C,0x19,0xCF,0x00,"D1120" }, /* 22 1.12MB 3.5"   */
479 	{ 3200,20,2,80,0,0x1C,0x20,0xCF,0x2C,"h1600" }, /* 23 1.6MB 5.25"   */
480 	{ 3520,22,2,80,0,0x1C,0x08,0xCF,0x2e,"H1760" }, /* 24 1.76MB 3.5"   */
481 	{ 3840,24,2,80,0,0x1C,0x20,0xCF,0x00,"H1920" }, /* 25 1.92MB 3.5"   */
482 	{ 6400,40,2,80,0,0x25,0x5B,0xCF,0x00,"E3200" }, /* 26 3.20MB 3.5"   */
483 	{ 7040,44,2,80,0,0x25,0x5B,0xCF,0x00,"E3520" }, /* 27 3.52MB 3.5"   */
484 	{ 7680,48,2,80,0,0x25,0x63,0xCF,0x00,"E3840" }, /* 28 3.84MB 3.5"   */
485 	{ 3680,23,2,80,0,0x1C,0x10,0xCF,0x00,"H1840" }, /* 29 1.84MB 3.5"   */
486 
487 	{ 1600,10,2,80,0,0x25,0x02,0xDF,0x2E,"D800"  },	/* 30 800KB 3.5"    */
488 	{ 3200,20,2,80,0,0x1C,0x00,0xCF,0x2C,"H1600" }, /* 31 1.6MB 3.5"    */
489 };
490 
491 #define SECTSIZE (_FD_SECTSIZE(*floppy))
492 
493 /* Auto-detection: Disk type used until the next media change occurs. */
494 static struct floppy_struct *current_type[N_DRIVE];
495 
496 /*
497  * User-provided type information. current_type points to
498  * the respective entry of this array.
499  */
500 static struct floppy_struct user_params[N_DRIVE];
501 
502 static sector_t floppy_sizes[256];
503 
504 static char floppy_device_name[] = "floppy";
505 
506 /*
507  * The driver is trying to determine the correct media format
508  * while probing is set. rw_interrupt() clears it after a
509  * successful access.
510  */
511 static int probing;
512 
513 /* Synchronization of FDC access. */
514 #define FD_COMMAND_NONE		-1
515 #define FD_COMMAND_ERROR	2
516 #define FD_COMMAND_OKAY		3
517 
518 static volatile int command_status = FD_COMMAND_NONE;
519 static unsigned long fdc_busy;
520 static DECLARE_WAIT_QUEUE_HEAD(fdc_wait);
521 static DECLARE_WAIT_QUEUE_HEAD(command_done);
522 
523 /* Errors during formatting are counted here. */
524 static int format_errors;
525 
526 /* Format request descriptor. */
527 static struct format_descr format_req;
528 
529 /*
530  * Rate is 0 for 500kb/s, 1 for 300kbps, 2 for 250kbps
531  * Spec1 is 0xSH, where S is stepping rate (F=1ms, E=2ms, D=3ms etc),
532  * H is head unload time (1=16ms, 2=32ms, etc)
533  */
534 
535 /*
536  * Track buffer
537  * Because these are written to by the DMA controller, they must
538  * not contain a 64k byte boundary crossing, or data will be
539  * corrupted/lost.
540  */
541 static char *floppy_track_buffer;
542 static int max_buffer_sectors;
543 
544 static int *errors;
545 typedef void (*done_f)(int);
546 static const struct cont_t {
547 	void (*interrupt)(void);
548 				/* this is called after the interrupt of the
549 				 * main command */
550 	void (*redo)(void);	/* this is called to retry the operation */
551 	void (*error)(void);	/* this is called to tally an error */
552 	done_f done;		/* this is called to say if the operation has
553 				 * succeeded/failed */
554 } *cont;
555 
556 static void floppy_ready(void);
557 static void floppy_start(void);
558 static void process_fd_request(void);
559 static void recalibrate_floppy(void);
560 static void floppy_shutdown(struct work_struct *);
561 
562 static int floppy_request_regions(int);
563 static void floppy_release_regions(int);
564 static int floppy_grab_irq_and_dma(void);
565 static void floppy_release_irq_and_dma(void);
566 
567 /*
568  * The "reset" variable should be tested whenever an interrupt is scheduled,
569  * after the commands have been sent. This is to ensure that the driver doesn't
570  * get wedged when the interrupt doesn't come because of a failed command.
571  * reset doesn't need to be tested before sending commands, because
572  * output_byte is automatically disabled when reset is set.
573  */
574 static void reset_fdc(void);
575 
576 /*
577  * These are global variables, as that's the easiest way to give
578  * information to interrupts. They are the data used for the current
579  * request.
580  */
581 #define NO_TRACK	-1
582 #define NEED_1_RECAL	-2
583 #define NEED_2_RECAL	-3
584 
585 static atomic_t usage_count = ATOMIC_INIT(0);
586 
587 /* buffer related variables */
588 static int buffer_track = -1;
589 static int buffer_drive = -1;
590 static int buffer_min = -1;
591 static int buffer_max = -1;
592 
593 /* fdc related variables, should end up in a struct */
594 static struct floppy_fdc_state fdc_state[N_FDC];
595 static int fdc;			/* current fdc */
596 
597 static struct workqueue_struct *floppy_wq;
598 
599 static struct floppy_struct *_floppy = floppy_type;
600 static unsigned char current_drive;
601 static long current_count_sectors;
602 static unsigned char fsector_t;	/* sector in track */
603 static unsigned char in_sector_offset;	/* offset within physical sector,
604 					 * expressed in units of 512 bytes */
605 
drive_no_geom(int drive)606 static inline bool drive_no_geom(int drive)
607 {
608 	return !current_type[drive] && !ITYPE(UDRS->fd_device);
609 }
610 
611 #ifndef fd_eject
fd_eject(int drive)612 static inline int fd_eject(int drive)
613 {
614 	return -EINVAL;
615 }
616 #endif
617 
618 /*
619  * Debugging
620  * =========
621  */
622 #ifdef DEBUGT
623 static long unsigned debugtimer;
624 
set_debugt(void)625 static inline void set_debugt(void)
626 {
627 	debugtimer = jiffies;
628 }
629 
debugt(const char * func,const char * msg)630 static inline void debugt(const char *func, const char *msg)
631 {
632 	if (DP->flags & DEBUGT)
633 		pr_info("%s:%s dtime=%lu\n", func, msg, jiffies - debugtimer);
634 }
635 #else
set_debugt(void)636 static inline void set_debugt(void) { }
debugt(const char * func,const char * msg)637 static inline void debugt(const char *func, const char *msg) { }
638 #endif /* DEBUGT */
639 
640 
641 static DECLARE_DELAYED_WORK(fd_timeout, floppy_shutdown);
642 static const char *timeout_message;
643 
is_alive(const char * func,const char * message)644 static void is_alive(const char *func, const char *message)
645 {
646 	/* this routine checks whether the floppy driver is "alive" */
647 	if (test_bit(0, &fdc_busy) && command_status < 2 &&
648 	    !delayed_work_pending(&fd_timeout)) {
649 		DPRINT("%s: timeout handler died.  %s\n", func, message);
650 	}
651 }
652 
653 static void (*do_floppy)(void) = NULL;
654 
655 #define OLOGSIZE 20
656 
657 static void (*lasthandler)(void);
658 static unsigned long interruptjiffies;
659 static unsigned long resultjiffies;
660 static int resultsize;
661 static unsigned long lastredo;
662 
663 static struct output_log {
664 	unsigned char data;
665 	unsigned char status;
666 	unsigned long jiffies;
667 } output_log[OLOGSIZE];
668 
669 static int output_log_pos;
670 
671 #define current_reqD -1
672 #define MAXTIMEOUT -2
673 
__reschedule_timeout(int drive,const char * message)674 static void __reschedule_timeout(int drive, const char *message)
675 {
676 	unsigned long delay;
677 
678 	if (drive == current_reqD)
679 		drive = current_drive;
680 
681 	if (drive < 0 || drive >= N_DRIVE) {
682 		delay = 20UL * HZ;
683 		drive = 0;
684 	} else
685 		delay = UDP->timeout;
686 
687 	mod_delayed_work(floppy_wq, &fd_timeout, delay);
688 	if (UDP->flags & FD_DEBUG)
689 		DPRINT("reschedule timeout %s\n", message);
690 	timeout_message = message;
691 }
692 
reschedule_timeout(int drive,const char * message)693 static void reschedule_timeout(int drive, const char *message)
694 {
695 	unsigned long flags;
696 
697 	spin_lock_irqsave(&floppy_lock, flags);
698 	__reschedule_timeout(drive, message);
699 	spin_unlock_irqrestore(&floppy_lock, flags);
700 }
701 
702 #define INFBOUND(a, b) (a) = max_t(int, a, b)
703 #define SUPBOUND(a, b) (a) = min_t(int, a, b)
704 
705 /*
706  * Bottom half floppy driver.
707  * ==========================
708  *
709  * This part of the file contains the code talking directly to the hardware,
710  * and also the main service loop (seek-configure-spinup-command)
711  */
712 
713 /*
714  * disk change.
715  * This routine is responsible for maintaining the FD_DISK_CHANGE flag,
716  * and the last_checked date.
717  *
718  * last_checked is the date of the last check which showed 'no disk change'
719  * FD_DISK_CHANGE is set under two conditions:
720  * 1. The floppy has been changed after some i/o to that floppy already
721  *    took place.
722  * 2. No floppy disk is in the drive. This is done in order to ensure that
723  *    requests are quickly flushed in case there is no disk in the drive. It
724  *    follows that FD_DISK_CHANGE can only be cleared if there is a disk in
725  *    the drive.
726  *
727  * For 1., maxblock is observed. Maxblock is 0 if no i/o has taken place yet.
728  * For 2., FD_DISK_NEWCHANGE is watched. FD_DISK_NEWCHANGE is cleared on
729  *  each seek. If a disk is present, the disk change line should also be
730  *  cleared on each seek. Thus, if FD_DISK_NEWCHANGE is clear, but the disk
731  *  change line is set, this means either that no disk is in the drive, or
732  *  that it has been removed since the last seek.
733  *
734  * This means that we really have a third possibility too:
735  *  The floppy has been changed after the last seek.
736  */
737 
disk_change(int drive)738 static int disk_change(int drive)
739 {
740 	int fdc = FDC(drive);
741 
742 	if (time_before(jiffies, UDRS->select_date + UDP->select_delay))
743 		DPRINT("WARNING disk change called early\n");
744 	if (!(FDCS->dor & (0x10 << UNIT(drive))) ||
745 	    (FDCS->dor & 3) != UNIT(drive) || fdc != FDC(drive)) {
746 		DPRINT("probing disk change on unselected drive\n");
747 		DPRINT("drive=%d fdc=%d dor=%x\n", drive, FDC(drive),
748 		       (unsigned int)FDCS->dor);
749 	}
750 
751 	debug_dcl(UDP->flags,
752 		  "checking disk change line for drive %d\n", drive);
753 	debug_dcl(UDP->flags, "jiffies=%lu\n", jiffies);
754 	debug_dcl(UDP->flags, "disk change line=%x\n", fd_inb(FD_DIR) & 0x80);
755 	debug_dcl(UDP->flags, "flags=%lx\n", UDRS->flags);
756 
757 	if (UDP->flags & FD_BROKEN_DCL)
758 		return test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
759 	if ((fd_inb(FD_DIR) ^ UDP->flags) & 0x80) {
760 		set_bit(FD_VERIFY_BIT, &UDRS->flags);
761 					/* verify write protection */
762 
763 		if (UDRS->maxblock)	/* mark it changed */
764 			set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
765 
766 		/* invalidate its geometry */
767 		if (UDRS->keep_data >= 0) {
768 			if ((UDP->flags & FTD_MSG) &&
769 			    current_type[drive] != NULL)
770 				DPRINT("Disk type is undefined after disk change\n");
771 			current_type[drive] = NULL;
772 			floppy_sizes[TOMINOR(drive)] = MAX_DISK_SIZE << 1;
773 		}
774 
775 		return 1;
776 	} else {
777 		UDRS->last_checked = jiffies;
778 		clear_bit(FD_DISK_NEWCHANGE_BIT, &UDRS->flags);
779 	}
780 	return 0;
781 }
782 
is_selected(int dor,int unit)783 static inline int is_selected(int dor, int unit)
784 {
785 	return ((dor & (0x10 << unit)) && (dor & 3) == unit);
786 }
787 
is_ready_state(int status)788 static bool is_ready_state(int status)
789 {
790 	int state = status & (STATUS_READY | STATUS_DIR | STATUS_DMA);
791 	return state == STATUS_READY;
792 }
793 
set_dor(int fdc,char mask,char data)794 static int set_dor(int fdc, char mask, char data)
795 {
796 	unsigned char unit;
797 	unsigned char drive;
798 	unsigned char newdor;
799 	unsigned char olddor;
800 
801 	if (FDCS->address == -1)
802 		return -1;
803 
804 	olddor = FDCS->dor;
805 	newdor = (olddor & mask) | data;
806 	if (newdor != olddor) {
807 		unit = olddor & 0x3;
808 		if (is_selected(olddor, unit) && !is_selected(newdor, unit)) {
809 			drive = REVDRIVE(fdc, unit);
810 			debug_dcl(UDP->flags,
811 				  "calling disk change from set_dor\n");
812 			disk_change(drive);
813 		}
814 		FDCS->dor = newdor;
815 		fd_outb(newdor, FD_DOR);
816 
817 		unit = newdor & 0x3;
818 		if (!is_selected(olddor, unit) && is_selected(newdor, unit)) {
819 			drive = REVDRIVE(fdc, unit);
820 			UDRS->select_date = jiffies;
821 		}
822 	}
823 	return olddor;
824 }
825 
twaddle(void)826 static void twaddle(void)
827 {
828 	if (DP->select_delay)
829 		return;
830 	fd_outb(FDCS->dor & ~(0x10 << UNIT(current_drive)), FD_DOR);
831 	fd_outb(FDCS->dor, FD_DOR);
832 	DRS->select_date = jiffies;
833 }
834 
835 /*
836  * Reset all driver information about the current fdc.
837  * This is needed after a reset, and after a raw command.
838  */
reset_fdc_info(int mode)839 static void reset_fdc_info(int mode)
840 {
841 	int drive;
842 
843 	FDCS->spec1 = FDCS->spec2 = -1;
844 	FDCS->need_configure = 1;
845 	FDCS->perp_mode = 1;
846 	FDCS->rawcmd = 0;
847 	for (drive = 0; drive < N_DRIVE; drive++)
848 		if (FDC(drive) == fdc && (mode || UDRS->track != NEED_1_RECAL))
849 			UDRS->track = NEED_2_RECAL;
850 }
851 
852 /* selects the fdc and drive, and enables the fdc's input/dma. */
set_fdc(int drive)853 static void set_fdc(int drive)
854 {
855 	if (drive >= 0 && drive < N_DRIVE) {
856 		fdc = FDC(drive);
857 		current_drive = drive;
858 	}
859 	if (fdc != 1 && fdc != 0) {
860 		pr_info("bad fdc value\n");
861 		return;
862 	}
863 	set_dor(fdc, ~0, 8);
864 #if N_FDC > 1
865 	set_dor(1 - fdc, ~8, 0);
866 #endif
867 	if (FDCS->rawcmd == 2)
868 		reset_fdc_info(1);
869 	if (fd_inb(FD_STATUS) != STATUS_READY)
870 		FDCS->reset = 1;
871 }
872 
873 /* locks the driver */
lock_fdc(int drive)874 static int lock_fdc(int drive)
875 {
876 	if (WARN(atomic_read(&usage_count) == 0,
877 		 "Trying to lock fdc while usage count=0\n"))
878 		return -1;
879 
880 	if (wait_event_interruptible(fdc_wait, !test_and_set_bit(0, &fdc_busy)))
881 		return -EINTR;
882 
883 	command_status = FD_COMMAND_NONE;
884 
885 	reschedule_timeout(drive, "lock fdc");
886 	set_fdc(drive);
887 	return 0;
888 }
889 
890 /* unlocks the driver */
unlock_fdc(void)891 static void unlock_fdc(void)
892 {
893 	if (!test_bit(0, &fdc_busy))
894 		DPRINT("FDC access conflict!\n");
895 
896 	raw_cmd = NULL;
897 	command_status = FD_COMMAND_NONE;
898 	cancel_delayed_work(&fd_timeout);
899 	do_floppy = NULL;
900 	cont = NULL;
901 	clear_bit(0, &fdc_busy);
902 	wake_up(&fdc_wait);
903 }
904 
905 /* switches the motor off after a given timeout */
motor_off_callback(struct timer_list * t)906 static void motor_off_callback(struct timer_list *t)
907 {
908 	unsigned long nr = t - motor_off_timer;
909 	unsigned char mask = ~(0x10 << UNIT(nr));
910 
911 	if (WARN_ON_ONCE(nr >= N_DRIVE))
912 		return;
913 
914 	set_dor(FDC(nr), mask, 0);
915 }
916 
917 /* schedules motor off */
floppy_off(unsigned int drive)918 static void floppy_off(unsigned int drive)
919 {
920 	unsigned long volatile delta;
921 	int fdc = FDC(drive);
922 
923 	if (!(FDCS->dor & (0x10 << UNIT(drive))))
924 		return;
925 
926 	del_timer(motor_off_timer + drive);
927 
928 	/* make spindle stop in a position which minimizes spinup time
929 	 * next time */
930 	if (UDP->rps) {
931 		delta = jiffies - UDRS->first_read_date + HZ -
932 		    UDP->spindown_offset;
933 		delta = ((delta * UDP->rps) % HZ) / UDP->rps;
934 		motor_off_timer[drive].expires =
935 		    jiffies + UDP->spindown - delta;
936 	}
937 	add_timer(motor_off_timer + drive);
938 }
939 
940 /*
941  * cycle through all N_DRIVE floppy drives, for disk change testing.
942  * stopping at current drive. This is done before any long operation, to
943  * be sure to have up to date disk change information.
944  */
scandrives(void)945 static void scandrives(void)
946 {
947 	int i;
948 	int drive;
949 	int saved_drive;
950 
951 	if (DP->select_delay)
952 		return;
953 
954 	saved_drive = current_drive;
955 	for (i = 0; i < N_DRIVE; i++) {
956 		drive = (saved_drive + i + 1) % N_DRIVE;
957 		if (UDRS->fd_ref == 0 || UDP->select_delay != 0)
958 			continue;	/* skip closed drives */
959 		set_fdc(drive);
960 		if (!(set_dor(fdc, ~3, UNIT(drive) | (0x10 << UNIT(drive))) &
961 		      (0x10 << UNIT(drive))))
962 			/* switch the motor off again, if it was off to
963 			 * begin with */
964 			set_dor(fdc, ~(0x10 << UNIT(drive)), 0);
965 	}
966 	set_fdc(saved_drive);
967 }
968 
empty(void)969 static void empty(void)
970 {
971 }
972 
973 static void (*floppy_work_fn)(void);
974 
floppy_work_workfn(struct work_struct * work)975 static void floppy_work_workfn(struct work_struct *work)
976 {
977 	floppy_work_fn();
978 }
979 
980 static DECLARE_WORK(floppy_work, floppy_work_workfn);
981 
schedule_bh(void (* handler)(void))982 static void schedule_bh(void (*handler)(void))
983 {
984 	WARN_ON(work_pending(&floppy_work));
985 
986 	floppy_work_fn = handler;
987 	queue_work(floppy_wq, &floppy_work);
988 }
989 
990 static void (*fd_timer_fn)(void) = NULL;
991 
fd_timer_workfn(struct work_struct * work)992 static void fd_timer_workfn(struct work_struct *work)
993 {
994 	fd_timer_fn();
995 }
996 
997 static DECLARE_DELAYED_WORK(fd_timer, fd_timer_workfn);
998 
cancel_activity(void)999 static void cancel_activity(void)
1000 {
1001 	do_floppy = NULL;
1002 	cancel_delayed_work_sync(&fd_timer);
1003 	cancel_work_sync(&floppy_work);
1004 }
1005 
1006 /* this function makes sure that the disk stays in the drive during the
1007  * transfer */
fd_watchdog(void)1008 static void fd_watchdog(void)
1009 {
1010 	debug_dcl(DP->flags, "calling disk change from watchdog\n");
1011 
1012 	if (disk_change(current_drive)) {
1013 		DPRINT("disk removed during i/o\n");
1014 		cancel_activity();
1015 		cont->done(0);
1016 		reset_fdc();
1017 	} else {
1018 		cancel_delayed_work(&fd_timer);
1019 		fd_timer_fn = fd_watchdog;
1020 		queue_delayed_work(floppy_wq, &fd_timer, HZ / 10);
1021 	}
1022 }
1023 
main_command_interrupt(void)1024 static void main_command_interrupt(void)
1025 {
1026 	cancel_delayed_work(&fd_timer);
1027 	cont->interrupt();
1028 }
1029 
1030 /* waits for a delay (spinup or select) to pass */
fd_wait_for_completion(unsigned long expires,void (* function)(void))1031 static int fd_wait_for_completion(unsigned long expires,
1032 				  void (*function)(void))
1033 {
1034 	if (FDCS->reset) {
1035 		reset_fdc();	/* do the reset during sleep to win time
1036 				 * if we don't need to sleep, it's a good
1037 				 * occasion anyways */
1038 		return 1;
1039 	}
1040 
1041 	if (time_before(jiffies, expires)) {
1042 		cancel_delayed_work(&fd_timer);
1043 		fd_timer_fn = function;
1044 		queue_delayed_work(floppy_wq, &fd_timer, expires - jiffies);
1045 		return 1;
1046 	}
1047 	return 0;
1048 }
1049 
setup_DMA(void)1050 static void setup_DMA(void)
1051 {
1052 	unsigned long f;
1053 
1054 	if (raw_cmd->length == 0) {
1055 		int i;
1056 
1057 		pr_info("zero dma transfer size:");
1058 		for (i = 0; i < raw_cmd->cmd_count; i++)
1059 			pr_cont("%x,", raw_cmd->cmd[i]);
1060 		pr_cont("\n");
1061 		cont->done(0);
1062 		FDCS->reset = 1;
1063 		return;
1064 	}
1065 	if (((unsigned long)raw_cmd->kernel_data) % 512) {
1066 		pr_info("non aligned address: %p\n", raw_cmd->kernel_data);
1067 		cont->done(0);
1068 		FDCS->reset = 1;
1069 		return;
1070 	}
1071 	f = claim_dma_lock();
1072 	fd_disable_dma();
1073 #ifdef fd_dma_setup
1074 	if (fd_dma_setup(raw_cmd->kernel_data, raw_cmd->length,
1075 			 (raw_cmd->flags & FD_RAW_READ) ?
1076 			 DMA_MODE_READ : DMA_MODE_WRITE, FDCS->address) < 0) {
1077 		release_dma_lock(f);
1078 		cont->done(0);
1079 		FDCS->reset = 1;
1080 		return;
1081 	}
1082 	release_dma_lock(f);
1083 #else
1084 	fd_clear_dma_ff();
1085 	fd_cacheflush(raw_cmd->kernel_data, raw_cmd->length);
1086 	fd_set_dma_mode((raw_cmd->flags & FD_RAW_READ) ?
1087 			DMA_MODE_READ : DMA_MODE_WRITE);
1088 	fd_set_dma_addr(raw_cmd->kernel_data);
1089 	fd_set_dma_count(raw_cmd->length);
1090 	virtual_dma_port = FDCS->address;
1091 	fd_enable_dma();
1092 	release_dma_lock(f);
1093 #endif
1094 }
1095 
1096 static void show_floppy(void);
1097 
1098 /* waits until the fdc becomes ready */
wait_til_ready(void)1099 static int wait_til_ready(void)
1100 {
1101 	int status;
1102 	int counter;
1103 
1104 	if (FDCS->reset)
1105 		return -1;
1106 	for (counter = 0; counter < 10000; counter++) {
1107 		status = fd_inb(FD_STATUS);
1108 		if (status & STATUS_READY)
1109 			return status;
1110 	}
1111 	if (initialized) {
1112 		DPRINT("Getstatus times out (%x) on fdc %d\n", status, fdc);
1113 		show_floppy();
1114 	}
1115 	FDCS->reset = 1;
1116 	return -1;
1117 }
1118 
1119 /* sends a command byte to the fdc */
output_byte(char byte)1120 static int output_byte(char byte)
1121 {
1122 	int status = wait_til_ready();
1123 
1124 	if (status < 0)
1125 		return -1;
1126 
1127 	if (is_ready_state(status)) {
1128 		fd_outb(byte, FD_DATA);
1129 		output_log[output_log_pos].data = byte;
1130 		output_log[output_log_pos].status = status;
1131 		output_log[output_log_pos].jiffies = jiffies;
1132 		output_log_pos = (output_log_pos + 1) % OLOGSIZE;
1133 		return 0;
1134 	}
1135 	FDCS->reset = 1;
1136 	if (initialized) {
1137 		DPRINT("Unable to send byte %x to FDC. Fdc=%x Status=%x\n",
1138 		       byte, fdc, status);
1139 		show_floppy();
1140 	}
1141 	return -1;
1142 }
1143 
1144 /* gets the response from the fdc */
result(void)1145 static int result(void)
1146 {
1147 	int i;
1148 	int status = 0;
1149 
1150 	for (i = 0; i < MAX_REPLIES; i++) {
1151 		status = wait_til_ready();
1152 		if (status < 0)
1153 			break;
1154 		status &= STATUS_DIR | STATUS_READY | STATUS_BUSY | STATUS_DMA;
1155 		if ((status & ~STATUS_BUSY) == STATUS_READY) {
1156 			resultjiffies = jiffies;
1157 			resultsize = i;
1158 			return i;
1159 		}
1160 		if (status == (STATUS_DIR | STATUS_READY | STATUS_BUSY))
1161 			reply_buffer[i] = fd_inb(FD_DATA);
1162 		else
1163 			break;
1164 	}
1165 	if (initialized) {
1166 		DPRINT("get result error. Fdc=%d Last status=%x Read bytes=%d\n",
1167 		       fdc, status, i);
1168 		show_floppy();
1169 	}
1170 	FDCS->reset = 1;
1171 	return -1;
1172 }
1173 
1174 #define MORE_OUTPUT -2
1175 /* does the fdc need more output? */
need_more_output(void)1176 static int need_more_output(void)
1177 {
1178 	int status = wait_til_ready();
1179 
1180 	if (status < 0)
1181 		return -1;
1182 
1183 	if (is_ready_state(status))
1184 		return MORE_OUTPUT;
1185 
1186 	return result();
1187 }
1188 
1189 /* Set perpendicular mode as required, based on data rate, if supported.
1190  * 82077 Now tested. 1Mbps data rate only possible with 82077-1.
1191  */
perpendicular_mode(void)1192 static void perpendicular_mode(void)
1193 {
1194 	unsigned char perp_mode;
1195 
1196 	if (raw_cmd->rate & 0x40) {
1197 		switch (raw_cmd->rate & 3) {
1198 		case 0:
1199 			perp_mode = 2;
1200 			break;
1201 		case 3:
1202 			perp_mode = 3;
1203 			break;
1204 		default:
1205 			DPRINT("Invalid data rate for perpendicular mode!\n");
1206 			cont->done(0);
1207 			FDCS->reset = 1;
1208 					/*
1209 					 * convenient way to return to
1210 					 * redo without too much hassle
1211 					 * (deep stack et al.)
1212 					 */
1213 			return;
1214 		}
1215 	} else
1216 		perp_mode = 0;
1217 
1218 	if (FDCS->perp_mode == perp_mode)
1219 		return;
1220 	if (FDCS->version >= FDC_82077_ORIG) {
1221 		output_byte(FD_PERPENDICULAR);
1222 		output_byte(perp_mode);
1223 		FDCS->perp_mode = perp_mode;
1224 	} else if (perp_mode) {
1225 		DPRINT("perpendicular mode not supported by this FDC.\n");
1226 	}
1227 }				/* perpendicular_mode */
1228 
1229 static int fifo_depth = 0xa;
1230 static int no_fifo;
1231 
fdc_configure(void)1232 static int fdc_configure(void)
1233 {
1234 	/* Turn on FIFO */
1235 	output_byte(FD_CONFIGURE);
1236 	if (need_more_output() != MORE_OUTPUT)
1237 		return 0;
1238 	output_byte(0);
1239 	output_byte(0x10 | (no_fifo & 0x20) | (fifo_depth & 0xf));
1240 	output_byte(0);		/* pre-compensation from track
1241 				   0 upwards */
1242 	return 1;
1243 }
1244 
1245 #define NOMINAL_DTR 500
1246 
1247 /* Issue a "SPECIFY" command to set the step rate time, head unload time,
1248  * head load time, and DMA disable flag to values needed by floppy.
1249  *
1250  * The value "dtr" is the data transfer rate in Kbps.  It is needed
1251  * to account for the data rate-based scaling done by the 82072 and 82077
1252  * FDC types.  This parameter is ignored for other types of FDCs (i.e.
1253  * 8272a).
1254  *
1255  * Note that changing the data transfer rate has a (probably deleterious)
1256  * effect on the parameters subject to scaling for 82072/82077 FDCs, so
1257  * fdc_specify is called again after each data transfer rate
1258  * change.
1259  *
1260  * srt: 1000 to 16000 in microseconds
1261  * hut: 16 to 240 milliseconds
1262  * hlt: 2 to 254 milliseconds
1263  *
1264  * These values are rounded up to the next highest available delay time.
1265  */
fdc_specify(void)1266 static void fdc_specify(void)
1267 {
1268 	unsigned char spec1;
1269 	unsigned char spec2;
1270 	unsigned long srt;
1271 	unsigned long hlt;
1272 	unsigned long hut;
1273 	unsigned long dtr = NOMINAL_DTR;
1274 	unsigned long scale_dtr = NOMINAL_DTR;
1275 	int hlt_max_code = 0x7f;
1276 	int hut_max_code = 0xf;
1277 
1278 	if (FDCS->need_configure && FDCS->version >= FDC_82072A) {
1279 		fdc_configure();
1280 		FDCS->need_configure = 0;
1281 	}
1282 
1283 	switch (raw_cmd->rate & 0x03) {
1284 	case 3:
1285 		dtr = 1000;
1286 		break;
1287 	case 1:
1288 		dtr = 300;
1289 		if (FDCS->version >= FDC_82078) {
1290 			/* chose the default rate table, not the one
1291 			 * where 1 = 2 Mbps */
1292 			output_byte(FD_DRIVESPEC);
1293 			if (need_more_output() == MORE_OUTPUT) {
1294 				output_byte(UNIT(current_drive));
1295 				output_byte(0xc0);
1296 			}
1297 		}
1298 		break;
1299 	case 2:
1300 		dtr = 250;
1301 		break;
1302 	}
1303 
1304 	if (FDCS->version >= FDC_82072) {
1305 		scale_dtr = dtr;
1306 		hlt_max_code = 0x00;	/* 0==256msec*dtr0/dtr (not linear!) */
1307 		hut_max_code = 0x0;	/* 0==256msec*dtr0/dtr (not linear!) */
1308 	}
1309 
1310 	/* Convert step rate from microseconds to milliseconds and 4 bits */
1311 	srt = 16 - DIV_ROUND_UP(DP->srt * scale_dtr / 1000, NOMINAL_DTR);
1312 	if (slow_floppy)
1313 		srt = srt / 4;
1314 
1315 	SUPBOUND(srt, 0xf);
1316 	INFBOUND(srt, 0);
1317 
1318 	hlt = DIV_ROUND_UP(DP->hlt * scale_dtr / 2, NOMINAL_DTR);
1319 	if (hlt < 0x01)
1320 		hlt = 0x01;
1321 	else if (hlt > 0x7f)
1322 		hlt = hlt_max_code;
1323 
1324 	hut = DIV_ROUND_UP(DP->hut * scale_dtr / 16, NOMINAL_DTR);
1325 	if (hut < 0x1)
1326 		hut = 0x1;
1327 	else if (hut > 0xf)
1328 		hut = hut_max_code;
1329 
1330 	spec1 = (srt << 4) | hut;
1331 	spec2 = (hlt << 1) | (use_virtual_dma & 1);
1332 
1333 	/* If these parameters did not change, just return with success */
1334 	if (FDCS->spec1 != spec1 || FDCS->spec2 != spec2) {
1335 		/* Go ahead and set spec1 and spec2 */
1336 		output_byte(FD_SPECIFY);
1337 		output_byte(FDCS->spec1 = spec1);
1338 		output_byte(FDCS->spec2 = spec2);
1339 	}
1340 }				/* fdc_specify */
1341 
1342 /* Set the FDC's data transfer rate on behalf of the specified drive.
1343  * NOTE: with 82072/82077 FDCs, changing the data rate requires a reissue
1344  * of the specify command (i.e. using the fdc_specify function).
1345  */
fdc_dtr(void)1346 static int fdc_dtr(void)
1347 {
1348 	/* If data rate not already set to desired value, set it. */
1349 	if ((raw_cmd->rate & 3) == FDCS->dtr)
1350 		return 0;
1351 
1352 	/* Set dtr */
1353 	fd_outb(raw_cmd->rate & 3, FD_DCR);
1354 
1355 	/* TODO: some FDC/drive combinations (C&T 82C711 with TEAC 1.2MB)
1356 	 * need a stabilization period of several milliseconds to be
1357 	 * enforced after data rate changes before R/W operations.
1358 	 * Pause 5 msec to avoid trouble. (Needs to be 2 jiffies)
1359 	 */
1360 	FDCS->dtr = raw_cmd->rate & 3;
1361 	return fd_wait_for_completion(jiffies + 2UL * HZ / 100, floppy_ready);
1362 }				/* fdc_dtr */
1363 
tell_sector(void)1364 static void tell_sector(void)
1365 {
1366 	pr_cont(": track %d, head %d, sector %d, size %d",
1367 		R_TRACK, R_HEAD, R_SECTOR, R_SIZECODE);
1368 }				/* tell_sector */
1369 
print_errors(void)1370 static void print_errors(void)
1371 {
1372 	DPRINT("");
1373 	if (ST0 & ST0_ECE) {
1374 		pr_cont("Recalibrate failed!");
1375 	} else if (ST2 & ST2_CRC) {
1376 		pr_cont("data CRC error");
1377 		tell_sector();
1378 	} else if (ST1 & ST1_CRC) {
1379 		pr_cont("CRC error");
1380 		tell_sector();
1381 	} else if ((ST1 & (ST1_MAM | ST1_ND)) ||
1382 		   (ST2 & ST2_MAM)) {
1383 		if (!probing) {
1384 			pr_cont("sector not found");
1385 			tell_sector();
1386 		} else
1387 			pr_cont("probe failed...");
1388 	} else if (ST2 & ST2_WC) {	/* seek error */
1389 		pr_cont("wrong cylinder");
1390 	} else if (ST2 & ST2_BC) {	/* cylinder marked as bad */
1391 		pr_cont("bad cylinder");
1392 	} else {
1393 		pr_cont("unknown error. ST[0..2] are: 0x%x 0x%x 0x%x",
1394 			ST0, ST1, ST2);
1395 		tell_sector();
1396 	}
1397 	pr_cont("\n");
1398 }
1399 
1400 /*
1401  * OK, this error interpreting routine is called after a
1402  * DMA read/write has succeeded
1403  * or failed, so we check the results, and copy any buffers.
1404  * hhb: Added better error reporting.
1405  * ak: Made this into a separate routine.
1406  */
interpret_errors(void)1407 static int interpret_errors(void)
1408 {
1409 	char bad;
1410 
1411 	if (inr != 7) {
1412 		DPRINT("-- FDC reply error\n");
1413 		FDCS->reset = 1;
1414 		return 1;
1415 	}
1416 
1417 	/* check IC to find cause of interrupt */
1418 	switch (ST0 & ST0_INTR) {
1419 	case 0x40:		/* error occurred during command execution */
1420 		if (ST1 & ST1_EOC)
1421 			return 0;	/* occurs with pseudo-DMA */
1422 		bad = 1;
1423 		if (ST1 & ST1_WP) {
1424 			DPRINT("Drive is write protected\n");
1425 			clear_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1426 			cont->done(0);
1427 			bad = 2;
1428 		} else if (ST1 & ST1_ND) {
1429 			set_bit(FD_NEED_TWADDLE_BIT, &DRS->flags);
1430 		} else if (ST1 & ST1_OR) {
1431 			if (DP->flags & FTD_MSG)
1432 				DPRINT("Over/Underrun - retrying\n");
1433 			bad = 0;
1434 		} else if (*errors >= DP->max_errors.reporting) {
1435 			print_errors();
1436 		}
1437 		if (ST2 & ST2_WC || ST2 & ST2_BC)
1438 			/* wrong cylinder => recal */
1439 			DRS->track = NEED_2_RECAL;
1440 		return bad;
1441 	case 0x80:		/* invalid command given */
1442 		DPRINT("Invalid FDC command given!\n");
1443 		cont->done(0);
1444 		return 2;
1445 	case 0xc0:
1446 		DPRINT("Abnormal termination caused by polling\n");
1447 		cont->error();
1448 		return 2;
1449 	default:		/* (0) Normal command termination */
1450 		return 0;
1451 	}
1452 }
1453 
1454 /*
1455  * This routine is called when everything should be correctly set up
1456  * for the transfer (i.e. floppy motor is on, the correct floppy is
1457  * selected, and the head is sitting on the right track).
1458  */
setup_rw_floppy(void)1459 static void setup_rw_floppy(void)
1460 {
1461 	int i;
1462 	int r;
1463 	int flags;
1464 	unsigned long ready_date;
1465 	void (*function)(void);
1466 
1467 	flags = raw_cmd->flags;
1468 	if (flags & (FD_RAW_READ | FD_RAW_WRITE))
1469 		flags |= FD_RAW_INTR;
1470 
1471 	if ((flags & FD_RAW_SPIN) && !(flags & FD_RAW_NO_MOTOR)) {
1472 		ready_date = DRS->spinup_date + DP->spinup;
1473 		/* If spinup will take a long time, rerun scandrives
1474 		 * again just before spinup completion. Beware that
1475 		 * after scandrives, we must again wait for selection.
1476 		 */
1477 		if (time_after(ready_date, jiffies + DP->select_delay)) {
1478 			ready_date -= DP->select_delay;
1479 			function = floppy_start;
1480 		} else
1481 			function = setup_rw_floppy;
1482 
1483 		/* wait until the floppy is spinning fast enough */
1484 		if (fd_wait_for_completion(ready_date, function))
1485 			return;
1486 	}
1487 	if ((flags & FD_RAW_READ) || (flags & FD_RAW_WRITE))
1488 		setup_DMA();
1489 
1490 	if (flags & FD_RAW_INTR)
1491 		do_floppy = main_command_interrupt;
1492 
1493 	r = 0;
1494 	for (i = 0; i < raw_cmd->cmd_count; i++)
1495 		r |= output_byte(raw_cmd->cmd[i]);
1496 
1497 	debugt(__func__, "rw_command");
1498 
1499 	if (r) {
1500 		cont->error();
1501 		reset_fdc();
1502 		return;
1503 	}
1504 
1505 	if (!(flags & FD_RAW_INTR)) {
1506 		inr = result();
1507 		cont->interrupt();
1508 	} else if (flags & FD_RAW_NEED_DISK)
1509 		fd_watchdog();
1510 }
1511 
1512 static int blind_seek;
1513 
1514 /*
1515  * This is the routine called after every seek (or recalibrate) interrupt
1516  * from the floppy controller.
1517  */
seek_interrupt(void)1518 static void seek_interrupt(void)
1519 {
1520 	debugt(__func__, "");
1521 	if (inr != 2 || (ST0 & 0xF8) != 0x20) {
1522 		DPRINT("seek failed\n");
1523 		DRS->track = NEED_2_RECAL;
1524 		cont->error();
1525 		cont->redo();
1526 		return;
1527 	}
1528 	if (DRS->track >= 0 && DRS->track != ST1 && !blind_seek) {
1529 		debug_dcl(DP->flags,
1530 			  "clearing NEWCHANGE flag because of effective seek\n");
1531 		debug_dcl(DP->flags, "jiffies=%lu\n", jiffies);
1532 		clear_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1533 					/* effective seek */
1534 		DRS->select_date = jiffies;
1535 	}
1536 	DRS->track = ST1;
1537 	floppy_ready();
1538 }
1539 
check_wp(void)1540 static void check_wp(void)
1541 {
1542 	if (test_bit(FD_VERIFY_BIT, &DRS->flags)) {
1543 					/* check write protection */
1544 		output_byte(FD_GETSTATUS);
1545 		output_byte(UNIT(current_drive));
1546 		if (result() != 1) {
1547 			FDCS->reset = 1;
1548 			return;
1549 		}
1550 		clear_bit(FD_VERIFY_BIT, &DRS->flags);
1551 		clear_bit(FD_NEED_TWADDLE_BIT, &DRS->flags);
1552 		debug_dcl(DP->flags,
1553 			  "checking whether disk is write protected\n");
1554 		debug_dcl(DP->flags, "wp=%x\n", ST3 & 0x40);
1555 		if (!(ST3 & 0x40))
1556 			set_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1557 		else
1558 			clear_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1559 	}
1560 }
1561 
seek_floppy(void)1562 static void seek_floppy(void)
1563 {
1564 	int track;
1565 
1566 	blind_seek = 0;
1567 
1568 	debug_dcl(DP->flags, "calling disk change from %s\n", __func__);
1569 
1570 	if (!test_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags) &&
1571 	    disk_change(current_drive) && (raw_cmd->flags & FD_RAW_NEED_DISK)) {
1572 		/* the media changed flag should be cleared after the seek.
1573 		 * If it isn't, this means that there is really no disk in
1574 		 * the drive.
1575 		 */
1576 		set_bit(FD_DISK_CHANGED_BIT, &DRS->flags);
1577 		cont->done(0);
1578 		cont->redo();
1579 		return;
1580 	}
1581 	if (DRS->track <= NEED_1_RECAL) {
1582 		recalibrate_floppy();
1583 		return;
1584 	} else if (test_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags) &&
1585 		   (raw_cmd->flags & FD_RAW_NEED_DISK) &&
1586 		   (DRS->track <= NO_TRACK || DRS->track == raw_cmd->track)) {
1587 		/* we seek to clear the media-changed condition. Does anybody
1588 		 * know a more elegant way, which works on all drives? */
1589 		if (raw_cmd->track)
1590 			track = raw_cmd->track - 1;
1591 		else {
1592 			if (DP->flags & FD_SILENT_DCL_CLEAR) {
1593 				set_dor(fdc, ~(0x10 << UNIT(current_drive)), 0);
1594 				blind_seek = 1;
1595 				raw_cmd->flags |= FD_RAW_NEED_SEEK;
1596 			}
1597 			track = 1;
1598 		}
1599 	} else {
1600 		check_wp();
1601 		if (raw_cmd->track != DRS->track &&
1602 		    (raw_cmd->flags & FD_RAW_NEED_SEEK))
1603 			track = raw_cmd->track;
1604 		else {
1605 			setup_rw_floppy();
1606 			return;
1607 		}
1608 	}
1609 
1610 	do_floppy = seek_interrupt;
1611 	output_byte(FD_SEEK);
1612 	output_byte(UNIT(current_drive));
1613 	if (output_byte(track) < 0) {
1614 		reset_fdc();
1615 		return;
1616 	}
1617 	debugt(__func__, "");
1618 }
1619 
recal_interrupt(void)1620 static void recal_interrupt(void)
1621 {
1622 	debugt(__func__, "");
1623 	if (inr != 2)
1624 		FDCS->reset = 1;
1625 	else if (ST0 & ST0_ECE) {
1626 		switch (DRS->track) {
1627 		case NEED_1_RECAL:
1628 			debugt(__func__, "need 1 recal");
1629 			/* after a second recalibrate, we still haven't
1630 			 * reached track 0. Probably no drive. Raise an
1631 			 * error, as failing immediately might upset
1632 			 * computers possessed by the Devil :-) */
1633 			cont->error();
1634 			cont->redo();
1635 			return;
1636 		case NEED_2_RECAL:
1637 			debugt(__func__, "need 2 recal");
1638 			/* If we already did a recalibrate,
1639 			 * and we are not at track 0, this
1640 			 * means we have moved. (The only way
1641 			 * not to move at recalibration is to
1642 			 * be already at track 0.) Clear the
1643 			 * new change flag */
1644 			debug_dcl(DP->flags,
1645 				  "clearing NEWCHANGE flag because of second recalibrate\n");
1646 
1647 			clear_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1648 			DRS->select_date = jiffies;
1649 			/* fall through */
1650 		default:
1651 			debugt(__func__, "default");
1652 			/* Recalibrate moves the head by at
1653 			 * most 80 steps. If after one
1654 			 * recalibrate we don't have reached
1655 			 * track 0, this might mean that we
1656 			 * started beyond track 80.  Try
1657 			 * again.  */
1658 			DRS->track = NEED_1_RECAL;
1659 			break;
1660 		}
1661 	} else
1662 		DRS->track = ST1;
1663 	floppy_ready();
1664 }
1665 
print_result(char * message,int inr)1666 static void print_result(char *message, int inr)
1667 {
1668 	int i;
1669 
1670 	DPRINT("%s ", message);
1671 	if (inr >= 0)
1672 		for (i = 0; i < inr; i++)
1673 			pr_cont("repl[%d]=%x ", i, reply_buffer[i]);
1674 	pr_cont("\n");
1675 }
1676 
1677 /* interrupt handler. Note that this can be called externally on the Sparc */
floppy_interrupt(int irq,void * dev_id)1678 irqreturn_t floppy_interrupt(int irq, void *dev_id)
1679 {
1680 	int do_print;
1681 	unsigned long f;
1682 	void (*handler)(void) = do_floppy;
1683 
1684 	lasthandler = handler;
1685 	interruptjiffies = jiffies;
1686 
1687 	f = claim_dma_lock();
1688 	fd_disable_dma();
1689 	release_dma_lock(f);
1690 
1691 	do_floppy = NULL;
1692 	if (fdc >= N_FDC || FDCS->address == -1) {
1693 		/* we don't even know which FDC is the culprit */
1694 		pr_info("DOR0=%x\n", fdc_state[0].dor);
1695 		pr_info("floppy interrupt on bizarre fdc %d\n", fdc);
1696 		pr_info("handler=%pf\n", handler);
1697 		is_alive(__func__, "bizarre fdc");
1698 		return IRQ_NONE;
1699 	}
1700 
1701 	FDCS->reset = 0;
1702 	/* We have to clear the reset flag here, because apparently on boxes
1703 	 * with level triggered interrupts (PS/2, Sparc, ...), it is needed to
1704 	 * emit SENSEI's to clear the interrupt line. And FDCS->reset blocks the
1705 	 * emission of the SENSEI's.
1706 	 * It is OK to emit floppy commands because we are in an interrupt
1707 	 * handler here, and thus we have to fear no interference of other
1708 	 * activity.
1709 	 */
1710 
1711 	do_print = !handler && print_unex && initialized;
1712 
1713 	inr = result();
1714 	if (do_print)
1715 		print_result("unexpected interrupt", inr);
1716 	if (inr == 0) {
1717 		int max_sensei = 4;
1718 		do {
1719 			output_byte(FD_SENSEI);
1720 			inr = result();
1721 			if (do_print)
1722 				print_result("sensei", inr);
1723 			max_sensei--;
1724 		} while ((ST0 & 0x83) != UNIT(current_drive) &&
1725 			 inr == 2 && max_sensei);
1726 	}
1727 	if (!handler) {
1728 		FDCS->reset = 1;
1729 		return IRQ_NONE;
1730 	}
1731 	schedule_bh(handler);
1732 	is_alive(__func__, "normal interrupt end");
1733 
1734 	/* FIXME! Was it really for us? */
1735 	return IRQ_HANDLED;
1736 }
1737 
recalibrate_floppy(void)1738 static void recalibrate_floppy(void)
1739 {
1740 	debugt(__func__, "");
1741 	do_floppy = recal_interrupt;
1742 	output_byte(FD_RECALIBRATE);
1743 	if (output_byte(UNIT(current_drive)) < 0)
1744 		reset_fdc();
1745 }
1746 
1747 /*
1748  * Must do 4 FD_SENSEIs after reset because of ``drive polling''.
1749  */
reset_interrupt(void)1750 static void reset_interrupt(void)
1751 {
1752 	debugt(__func__, "");
1753 	result();		/* get the status ready for set_fdc */
1754 	if (FDCS->reset) {
1755 		pr_info("reset set in interrupt, calling %pf\n", cont->error);
1756 		cont->error();	/* a reset just after a reset. BAD! */
1757 	}
1758 	cont->redo();
1759 }
1760 
1761 /*
1762  * reset is done by pulling bit 2 of DOR low for a while (old FDCs),
1763  * or by setting the self clearing bit 7 of STATUS (newer FDCs)
1764  */
reset_fdc(void)1765 static void reset_fdc(void)
1766 {
1767 	unsigned long flags;
1768 
1769 	do_floppy = reset_interrupt;
1770 	FDCS->reset = 0;
1771 	reset_fdc_info(0);
1772 
1773 	/* Pseudo-DMA may intercept 'reset finished' interrupt.  */
1774 	/* Irrelevant for systems with true DMA (i386).          */
1775 
1776 	flags = claim_dma_lock();
1777 	fd_disable_dma();
1778 	release_dma_lock(flags);
1779 
1780 	if (FDCS->version >= FDC_82072A)
1781 		fd_outb(0x80 | (FDCS->dtr & 3), FD_STATUS);
1782 	else {
1783 		fd_outb(FDCS->dor & ~0x04, FD_DOR);
1784 		udelay(FD_RESET_DELAY);
1785 		fd_outb(FDCS->dor, FD_DOR);
1786 	}
1787 }
1788 
show_floppy(void)1789 static void show_floppy(void)
1790 {
1791 	int i;
1792 
1793 	pr_info("\n");
1794 	pr_info("floppy driver state\n");
1795 	pr_info("-------------------\n");
1796 	pr_info("now=%lu last interrupt=%lu diff=%lu last called handler=%pf\n",
1797 		jiffies, interruptjiffies, jiffies - interruptjiffies,
1798 		lasthandler);
1799 
1800 	pr_info("timeout_message=%s\n", timeout_message);
1801 	pr_info("last output bytes:\n");
1802 	for (i = 0; i < OLOGSIZE; i++)
1803 		pr_info("%2x %2x %lu\n",
1804 			output_log[(i + output_log_pos) % OLOGSIZE].data,
1805 			output_log[(i + output_log_pos) % OLOGSIZE].status,
1806 			output_log[(i + output_log_pos) % OLOGSIZE].jiffies);
1807 	pr_info("last result at %lu\n", resultjiffies);
1808 	pr_info("last redo_fd_request at %lu\n", lastredo);
1809 	print_hex_dump(KERN_INFO, "", DUMP_PREFIX_NONE, 16, 1,
1810 		       reply_buffer, resultsize, true);
1811 
1812 	pr_info("status=%x\n", fd_inb(FD_STATUS));
1813 	pr_info("fdc_busy=%lu\n", fdc_busy);
1814 	if (do_floppy)
1815 		pr_info("do_floppy=%pf\n", do_floppy);
1816 	if (work_pending(&floppy_work))
1817 		pr_info("floppy_work.func=%pf\n", floppy_work.func);
1818 	if (delayed_work_pending(&fd_timer))
1819 		pr_info("delayed work.function=%p expires=%ld\n",
1820 		       fd_timer.work.func,
1821 		       fd_timer.timer.expires - jiffies);
1822 	if (delayed_work_pending(&fd_timeout))
1823 		pr_info("timer_function=%p expires=%ld\n",
1824 		       fd_timeout.work.func,
1825 		       fd_timeout.timer.expires - jiffies);
1826 
1827 	pr_info("cont=%p\n", cont);
1828 	pr_info("current_req=%p\n", current_req);
1829 	pr_info("command_status=%d\n", command_status);
1830 	pr_info("\n");
1831 }
1832 
floppy_shutdown(struct work_struct * arg)1833 static void floppy_shutdown(struct work_struct *arg)
1834 {
1835 	unsigned long flags;
1836 
1837 	if (initialized)
1838 		show_floppy();
1839 	cancel_activity();
1840 
1841 	flags = claim_dma_lock();
1842 	fd_disable_dma();
1843 	release_dma_lock(flags);
1844 
1845 	/* avoid dma going to a random drive after shutdown */
1846 
1847 	if (initialized)
1848 		DPRINT("floppy timeout called\n");
1849 	FDCS->reset = 1;
1850 	if (cont) {
1851 		cont->done(0);
1852 		cont->redo();	/* this will recall reset when needed */
1853 	} else {
1854 		pr_info("no cont in shutdown!\n");
1855 		process_fd_request();
1856 	}
1857 	is_alive(__func__, "");
1858 }
1859 
1860 /* start motor, check media-changed condition and write protection */
start_motor(void (* function)(void))1861 static int start_motor(void (*function)(void))
1862 {
1863 	int mask;
1864 	int data;
1865 
1866 	mask = 0xfc;
1867 	data = UNIT(current_drive);
1868 	if (!(raw_cmd->flags & FD_RAW_NO_MOTOR)) {
1869 		if (!(FDCS->dor & (0x10 << UNIT(current_drive)))) {
1870 			set_debugt();
1871 			/* no read since this drive is running */
1872 			DRS->first_read_date = 0;
1873 			/* note motor start time if motor is not yet running */
1874 			DRS->spinup_date = jiffies;
1875 			data |= (0x10 << UNIT(current_drive));
1876 		}
1877 	} else if (FDCS->dor & (0x10 << UNIT(current_drive)))
1878 		mask &= ~(0x10 << UNIT(current_drive));
1879 
1880 	/* starts motor and selects floppy */
1881 	del_timer(motor_off_timer + current_drive);
1882 	set_dor(fdc, mask, data);
1883 
1884 	/* wait_for_completion also schedules reset if needed. */
1885 	return fd_wait_for_completion(DRS->select_date + DP->select_delay,
1886 				      function);
1887 }
1888 
floppy_ready(void)1889 static void floppy_ready(void)
1890 {
1891 	if (FDCS->reset) {
1892 		reset_fdc();
1893 		return;
1894 	}
1895 	if (start_motor(floppy_ready))
1896 		return;
1897 	if (fdc_dtr())
1898 		return;
1899 
1900 	debug_dcl(DP->flags, "calling disk change from floppy_ready\n");
1901 	if (!(raw_cmd->flags & FD_RAW_NO_MOTOR) &&
1902 	    disk_change(current_drive) && !DP->select_delay)
1903 		twaddle();	/* this clears the dcl on certain
1904 				 * drive/controller combinations */
1905 
1906 #ifdef fd_chose_dma_mode
1907 	if ((raw_cmd->flags & FD_RAW_READ) || (raw_cmd->flags & FD_RAW_WRITE)) {
1908 		unsigned long flags = claim_dma_lock();
1909 		fd_chose_dma_mode(raw_cmd->kernel_data, raw_cmd->length);
1910 		release_dma_lock(flags);
1911 	}
1912 #endif
1913 
1914 	if (raw_cmd->flags & (FD_RAW_NEED_SEEK | FD_RAW_NEED_DISK)) {
1915 		perpendicular_mode();
1916 		fdc_specify();	/* must be done here because of hut, hlt ... */
1917 		seek_floppy();
1918 	} else {
1919 		if ((raw_cmd->flags & FD_RAW_READ) ||
1920 		    (raw_cmd->flags & FD_RAW_WRITE))
1921 			fdc_specify();
1922 		setup_rw_floppy();
1923 	}
1924 }
1925 
floppy_start(void)1926 static void floppy_start(void)
1927 {
1928 	reschedule_timeout(current_reqD, "floppy start");
1929 
1930 	scandrives();
1931 	debug_dcl(DP->flags, "setting NEWCHANGE in floppy_start\n");
1932 	set_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1933 	floppy_ready();
1934 }
1935 
1936 /*
1937  * ========================================================================
1938  * here ends the bottom half. Exported routines are:
1939  * floppy_start, floppy_off, floppy_ready, lock_fdc, unlock_fdc, set_fdc,
1940  * start_motor, reset_fdc, reset_fdc_info, interpret_errors.
1941  * Initialization also uses output_byte, result, set_dor, floppy_interrupt
1942  * and set_dor.
1943  * ========================================================================
1944  */
1945 /*
1946  * General purpose continuations.
1947  * ==============================
1948  */
1949 
do_wakeup(void)1950 static void do_wakeup(void)
1951 {
1952 	reschedule_timeout(MAXTIMEOUT, "do wakeup");
1953 	cont = NULL;
1954 	command_status += 2;
1955 	wake_up(&command_done);
1956 }
1957 
1958 static const struct cont_t wakeup_cont = {
1959 	.interrupt	= empty,
1960 	.redo		= do_wakeup,
1961 	.error		= empty,
1962 	.done		= (done_f)empty
1963 };
1964 
1965 static const struct cont_t intr_cont = {
1966 	.interrupt	= empty,
1967 	.redo		= process_fd_request,
1968 	.error		= empty,
1969 	.done		= (done_f)empty
1970 };
1971 
wait_til_done(void (* handler)(void),bool interruptible)1972 static int wait_til_done(void (*handler)(void), bool interruptible)
1973 {
1974 	int ret;
1975 
1976 	schedule_bh(handler);
1977 
1978 	if (interruptible)
1979 		wait_event_interruptible(command_done, command_status >= 2);
1980 	else
1981 		wait_event(command_done, command_status >= 2);
1982 
1983 	if (command_status < 2) {
1984 		cancel_activity();
1985 		cont = &intr_cont;
1986 		reset_fdc();
1987 		return -EINTR;
1988 	}
1989 
1990 	if (FDCS->reset)
1991 		command_status = FD_COMMAND_ERROR;
1992 	if (command_status == FD_COMMAND_OKAY)
1993 		ret = 0;
1994 	else
1995 		ret = -EIO;
1996 	command_status = FD_COMMAND_NONE;
1997 	return ret;
1998 }
1999 
generic_done(int result)2000 static void generic_done(int result)
2001 {
2002 	command_status = result;
2003 	cont = &wakeup_cont;
2004 }
2005 
generic_success(void)2006 static void generic_success(void)
2007 {
2008 	cont->done(1);
2009 }
2010 
generic_failure(void)2011 static void generic_failure(void)
2012 {
2013 	cont->done(0);
2014 }
2015 
success_and_wakeup(void)2016 static void success_and_wakeup(void)
2017 {
2018 	generic_success();
2019 	cont->redo();
2020 }
2021 
2022 /*
2023  * formatting and rw support.
2024  * ==========================
2025  */
2026 
next_valid_format(void)2027 static int next_valid_format(void)
2028 {
2029 	int probed_format;
2030 
2031 	probed_format = DRS->probed_format;
2032 	while (1) {
2033 		if (probed_format >= 8 || !DP->autodetect[probed_format]) {
2034 			DRS->probed_format = 0;
2035 			return 1;
2036 		}
2037 		if (floppy_type[DP->autodetect[probed_format]].sect) {
2038 			DRS->probed_format = probed_format;
2039 			return 0;
2040 		}
2041 		probed_format++;
2042 	}
2043 }
2044 
bad_flp_intr(void)2045 static void bad_flp_intr(void)
2046 {
2047 	int err_count;
2048 
2049 	if (probing) {
2050 		DRS->probed_format++;
2051 		if (!next_valid_format())
2052 			return;
2053 	}
2054 	err_count = ++(*errors);
2055 	INFBOUND(DRWE->badness, err_count);
2056 	if (err_count > DP->max_errors.abort)
2057 		cont->done(0);
2058 	if (err_count > DP->max_errors.reset)
2059 		FDCS->reset = 1;
2060 	else if (err_count > DP->max_errors.recal)
2061 		DRS->track = NEED_2_RECAL;
2062 }
2063 
set_floppy(int drive)2064 static void set_floppy(int drive)
2065 {
2066 	int type = ITYPE(UDRS->fd_device);
2067 
2068 	if (type)
2069 		_floppy = floppy_type + type;
2070 	else
2071 		_floppy = current_type[drive];
2072 }
2073 
2074 /*
2075  * formatting support.
2076  * ===================
2077  */
format_interrupt(void)2078 static void format_interrupt(void)
2079 {
2080 	switch (interpret_errors()) {
2081 	case 1:
2082 		cont->error();
2083 	case 2:
2084 		break;
2085 	case 0:
2086 		cont->done(1);
2087 	}
2088 	cont->redo();
2089 }
2090 
2091 #define FM_MODE(x, y) ((y) & ~(((x)->rate & 0x80) >> 1))
2092 #define CT(x) ((x) | 0xc0)
2093 
setup_format_params(int track)2094 static void setup_format_params(int track)
2095 {
2096 	int n;
2097 	int il;
2098 	int count;
2099 	int head_shift;
2100 	int track_shift;
2101 	struct fparm {
2102 		unsigned char track, head, sect, size;
2103 	} *here = (struct fparm *)floppy_track_buffer;
2104 
2105 	raw_cmd = &default_raw_cmd;
2106 	raw_cmd->track = track;
2107 
2108 	raw_cmd->flags = (FD_RAW_WRITE | FD_RAW_INTR | FD_RAW_SPIN |
2109 			  FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK);
2110 	raw_cmd->rate = _floppy->rate & 0x43;
2111 	raw_cmd->cmd_count = NR_F;
2112 	COMMAND = FM_MODE(_floppy, FD_FORMAT);
2113 	DR_SELECT = UNIT(current_drive) + PH_HEAD(_floppy, format_req.head);
2114 	F_SIZECODE = FD_SIZECODE(_floppy);
2115 	F_SECT_PER_TRACK = _floppy->sect << 2 >> F_SIZECODE;
2116 	F_GAP = _floppy->fmt_gap;
2117 	F_FILL = FD_FILL_BYTE;
2118 
2119 	raw_cmd->kernel_data = floppy_track_buffer;
2120 	raw_cmd->length = 4 * F_SECT_PER_TRACK;
2121 
2122 	/* allow for about 30ms for data transport per track */
2123 	head_shift = (F_SECT_PER_TRACK + 5) / 6;
2124 
2125 	/* a ``cylinder'' is two tracks plus a little stepping time */
2126 	track_shift = 2 * head_shift + 3;
2127 
2128 	/* position of logical sector 1 on this track */
2129 	n = (track_shift * format_req.track + head_shift * format_req.head)
2130 	    % F_SECT_PER_TRACK;
2131 
2132 	/* determine interleave */
2133 	il = 1;
2134 	if (_floppy->fmt_gap < 0x22)
2135 		il++;
2136 
2137 	/* initialize field */
2138 	for (count = 0; count < F_SECT_PER_TRACK; ++count) {
2139 		here[count].track = format_req.track;
2140 		here[count].head = format_req.head;
2141 		here[count].sect = 0;
2142 		here[count].size = F_SIZECODE;
2143 	}
2144 	/* place logical sectors */
2145 	for (count = 1; count <= F_SECT_PER_TRACK; ++count) {
2146 		here[n].sect = count;
2147 		n = (n + il) % F_SECT_PER_TRACK;
2148 		if (here[n].sect) {	/* sector busy, find next free sector */
2149 			++n;
2150 			if (n >= F_SECT_PER_TRACK) {
2151 				n -= F_SECT_PER_TRACK;
2152 				while (here[n].sect)
2153 					++n;
2154 			}
2155 		}
2156 	}
2157 	if (_floppy->stretch & FD_SECTBASEMASK) {
2158 		for (count = 0; count < F_SECT_PER_TRACK; count++)
2159 			here[count].sect += FD_SECTBASE(_floppy) - 1;
2160 	}
2161 }
2162 
redo_format(void)2163 static void redo_format(void)
2164 {
2165 	buffer_track = -1;
2166 	setup_format_params(format_req.track << STRETCH(_floppy));
2167 	floppy_start();
2168 	debugt(__func__, "queue format request");
2169 }
2170 
2171 static const struct cont_t format_cont = {
2172 	.interrupt	= format_interrupt,
2173 	.redo		= redo_format,
2174 	.error		= bad_flp_intr,
2175 	.done		= generic_done
2176 };
2177 
do_format(int drive,struct format_descr * tmp_format_req)2178 static int do_format(int drive, struct format_descr *tmp_format_req)
2179 {
2180 	int ret;
2181 
2182 	if (lock_fdc(drive))
2183 		return -EINTR;
2184 
2185 	set_floppy(drive);
2186 	if (!_floppy ||
2187 	    _floppy->track > DP->tracks ||
2188 	    tmp_format_req->track >= _floppy->track ||
2189 	    tmp_format_req->head >= _floppy->head ||
2190 	    (_floppy->sect << 2) % (1 << FD_SIZECODE(_floppy)) ||
2191 	    !_floppy->fmt_gap) {
2192 		process_fd_request();
2193 		return -EINVAL;
2194 	}
2195 	format_req = *tmp_format_req;
2196 	format_errors = 0;
2197 	cont = &format_cont;
2198 	errors = &format_errors;
2199 	ret = wait_til_done(redo_format, true);
2200 	if (ret == -EINTR)
2201 		return -EINTR;
2202 	process_fd_request();
2203 	return ret;
2204 }
2205 
2206 /*
2207  * Buffer read/write and support
2208  * =============================
2209  */
2210 
floppy_end_request(struct request * req,blk_status_t error)2211 static void floppy_end_request(struct request *req, blk_status_t error)
2212 {
2213 	unsigned int nr_sectors = current_count_sectors;
2214 	unsigned int drive = (unsigned long)req->rq_disk->private_data;
2215 
2216 	/* current_count_sectors can be zero if transfer failed */
2217 	if (error)
2218 		nr_sectors = blk_rq_cur_sectors(req);
2219 	if (__blk_end_request(req, error, nr_sectors << 9))
2220 		return;
2221 
2222 	/* We're done with the request */
2223 	floppy_off(drive);
2224 	current_req = NULL;
2225 }
2226 
2227 /* new request_done. Can handle physical sectors which are smaller than a
2228  * logical buffer */
request_done(int uptodate)2229 static void request_done(int uptodate)
2230 {
2231 	struct request *req = current_req;
2232 	struct request_queue *q;
2233 	unsigned long flags;
2234 	int block;
2235 	char msg[sizeof("request done ") + sizeof(int) * 3];
2236 
2237 	probing = 0;
2238 	snprintf(msg, sizeof(msg), "request done %d", uptodate);
2239 	reschedule_timeout(MAXTIMEOUT, msg);
2240 
2241 	if (!req) {
2242 		pr_info("floppy.c: no request in request_done\n");
2243 		return;
2244 	}
2245 
2246 	q = req->q;
2247 
2248 	if (uptodate) {
2249 		/* maintain values for invalidation on geometry
2250 		 * change */
2251 		block = current_count_sectors + blk_rq_pos(req);
2252 		INFBOUND(DRS->maxblock, block);
2253 		if (block > _floppy->sect)
2254 			DRS->maxtrack = 1;
2255 
2256 		/* unlock chained buffers */
2257 		spin_lock_irqsave(q->queue_lock, flags);
2258 		floppy_end_request(req, 0);
2259 		spin_unlock_irqrestore(q->queue_lock, flags);
2260 	} else {
2261 		if (rq_data_dir(req) == WRITE) {
2262 			/* record write error information */
2263 			DRWE->write_errors++;
2264 			if (DRWE->write_errors == 1) {
2265 				DRWE->first_error_sector = blk_rq_pos(req);
2266 				DRWE->first_error_generation = DRS->generation;
2267 			}
2268 			DRWE->last_error_sector = blk_rq_pos(req);
2269 			DRWE->last_error_generation = DRS->generation;
2270 		}
2271 		spin_lock_irqsave(q->queue_lock, flags);
2272 		floppy_end_request(req, BLK_STS_IOERR);
2273 		spin_unlock_irqrestore(q->queue_lock, flags);
2274 	}
2275 }
2276 
2277 /* Interrupt handler evaluating the result of the r/w operation */
rw_interrupt(void)2278 static void rw_interrupt(void)
2279 {
2280 	int eoc;
2281 	int ssize;
2282 	int heads;
2283 	int nr_sectors;
2284 
2285 	if (R_HEAD >= 2) {
2286 		/* some Toshiba floppy controllers occasionnally seem to
2287 		 * return bogus interrupts after read/write operations, which
2288 		 * can be recognized by a bad head number (>= 2) */
2289 		return;
2290 	}
2291 
2292 	if (!DRS->first_read_date)
2293 		DRS->first_read_date = jiffies;
2294 
2295 	nr_sectors = 0;
2296 	ssize = DIV_ROUND_UP(1 << SIZECODE, 4);
2297 
2298 	if (ST1 & ST1_EOC)
2299 		eoc = 1;
2300 	else
2301 		eoc = 0;
2302 
2303 	if (COMMAND & 0x80)
2304 		heads = 2;
2305 	else
2306 		heads = 1;
2307 
2308 	nr_sectors = (((R_TRACK - TRACK) * heads +
2309 		       R_HEAD - HEAD) * SECT_PER_TRACK +
2310 		      R_SECTOR - SECTOR + eoc) << SIZECODE >> 2;
2311 
2312 	if (nr_sectors / ssize >
2313 	    DIV_ROUND_UP(in_sector_offset + current_count_sectors, ssize)) {
2314 		DPRINT("long rw: %x instead of %lx\n",
2315 		       nr_sectors, current_count_sectors);
2316 		pr_info("rs=%d s=%d\n", R_SECTOR, SECTOR);
2317 		pr_info("rh=%d h=%d\n", R_HEAD, HEAD);
2318 		pr_info("rt=%d t=%d\n", R_TRACK, TRACK);
2319 		pr_info("heads=%d eoc=%d\n", heads, eoc);
2320 		pr_info("spt=%d st=%d ss=%d\n",
2321 			SECT_PER_TRACK, fsector_t, ssize);
2322 		pr_info("in_sector_offset=%d\n", in_sector_offset);
2323 	}
2324 
2325 	nr_sectors -= in_sector_offset;
2326 	INFBOUND(nr_sectors, 0);
2327 	SUPBOUND(current_count_sectors, nr_sectors);
2328 
2329 	switch (interpret_errors()) {
2330 	case 2:
2331 		cont->redo();
2332 		return;
2333 	case 1:
2334 		if (!current_count_sectors) {
2335 			cont->error();
2336 			cont->redo();
2337 			return;
2338 		}
2339 		break;
2340 	case 0:
2341 		if (!current_count_sectors) {
2342 			cont->redo();
2343 			return;
2344 		}
2345 		current_type[current_drive] = _floppy;
2346 		floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2347 		break;
2348 	}
2349 
2350 	if (probing) {
2351 		if (DP->flags & FTD_MSG)
2352 			DPRINT("Auto-detected floppy type %s in fd%d\n",
2353 			       _floppy->name, current_drive);
2354 		current_type[current_drive] = _floppy;
2355 		floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2356 		probing = 0;
2357 	}
2358 
2359 	if (CT(COMMAND) != FD_READ ||
2360 	    raw_cmd->kernel_data == bio_data(current_req->bio)) {
2361 		/* transfer directly from buffer */
2362 		cont->done(1);
2363 	} else if (CT(COMMAND) == FD_READ) {
2364 		buffer_track = raw_cmd->track;
2365 		buffer_drive = current_drive;
2366 		INFBOUND(buffer_max, nr_sectors + fsector_t);
2367 	}
2368 	cont->redo();
2369 }
2370 
2371 /* Compute maximal contiguous buffer size. */
buffer_chain_size(void)2372 static int buffer_chain_size(void)
2373 {
2374 	struct bio_vec bv;
2375 	int size;
2376 	struct req_iterator iter;
2377 	char *base;
2378 
2379 	base = bio_data(current_req->bio);
2380 	size = 0;
2381 
2382 	rq_for_each_segment(bv, current_req, iter) {
2383 		if (page_address(bv.bv_page) + bv.bv_offset != base + size)
2384 			break;
2385 
2386 		size += bv.bv_len;
2387 	}
2388 
2389 	return size >> 9;
2390 }
2391 
2392 /* Compute the maximal transfer size */
transfer_size(int ssize,int max_sector,int max_size)2393 static int transfer_size(int ssize, int max_sector, int max_size)
2394 {
2395 	SUPBOUND(max_sector, fsector_t + max_size);
2396 
2397 	/* alignment */
2398 	max_sector -= (max_sector % _floppy->sect) % ssize;
2399 
2400 	/* transfer size, beginning not aligned */
2401 	current_count_sectors = max_sector - fsector_t;
2402 
2403 	return max_sector;
2404 }
2405 
2406 /*
2407  * Move data from/to the track buffer to/from the buffer cache.
2408  */
copy_buffer(int ssize,int max_sector,int max_sector_2)2409 static void copy_buffer(int ssize, int max_sector, int max_sector_2)
2410 {
2411 	int remaining;		/* number of transferred 512-byte sectors */
2412 	struct bio_vec bv;
2413 	char *buffer;
2414 	char *dma_buffer;
2415 	int size;
2416 	struct req_iterator iter;
2417 
2418 	max_sector = transfer_size(ssize,
2419 				   min(max_sector, max_sector_2),
2420 				   blk_rq_sectors(current_req));
2421 
2422 	if (current_count_sectors <= 0 && CT(COMMAND) == FD_WRITE &&
2423 	    buffer_max > fsector_t + blk_rq_sectors(current_req))
2424 		current_count_sectors = min_t(int, buffer_max - fsector_t,
2425 					      blk_rq_sectors(current_req));
2426 
2427 	remaining = current_count_sectors << 9;
2428 	if (remaining > blk_rq_bytes(current_req) && CT(COMMAND) == FD_WRITE) {
2429 		DPRINT("in copy buffer\n");
2430 		pr_info("current_count_sectors=%ld\n", current_count_sectors);
2431 		pr_info("remaining=%d\n", remaining >> 9);
2432 		pr_info("current_req->nr_sectors=%u\n",
2433 			blk_rq_sectors(current_req));
2434 		pr_info("current_req->current_nr_sectors=%u\n",
2435 			blk_rq_cur_sectors(current_req));
2436 		pr_info("max_sector=%d\n", max_sector);
2437 		pr_info("ssize=%d\n", ssize);
2438 	}
2439 
2440 	buffer_max = max(max_sector, buffer_max);
2441 
2442 	dma_buffer = floppy_track_buffer + ((fsector_t - buffer_min) << 9);
2443 
2444 	size = blk_rq_cur_bytes(current_req);
2445 
2446 	rq_for_each_segment(bv, current_req, iter) {
2447 		if (!remaining)
2448 			break;
2449 
2450 		size = bv.bv_len;
2451 		SUPBOUND(size, remaining);
2452 
2453 		buffer = page_address(bv.bv_page) + bv.bv_offset;
2454 		if (dma_buffer + size >
2455 		    floppy_track_buffer + (max_buffer_sectors << 10) ||
2456 		    dma_buffer < floppy_track_buffer) {
2457 			DPRINT("buffer overrun in copy buffer %d\n",
2458 			       (int)((floppy_track_buffer - dma_buffer) >> 9));
2459 			pr_info("fsector_t=%d buffer_min=%d\n",
2460 				fsector_t, buffer_min);
2461 			pr_info("current_count_sectors=%ld\n",
2462 				current_count_sectors);
2463 			if (CT(COMMAND) == FD_READ)
2464 				pr_info("read\n");
2465 			if (CT(COMMAND) == FD_WRITE)
2466 				pr_info("write\n");
2467 			break;
2468 		}
2469 		if (((unsigned long)buffer) % 512)
2470 			DPRINT("%p buffer not aligned\n", buffer);
2471 
2472 		if (CT(COMMAND) == FD_READ)
2473 			memcpy(buffer, dma_buffer, size);
2474 		else
2475 			memcpy(dma_buffer, buffer, size);
2476 
2477 		remaining -= size;
2478 		dma_buffer += size;
2479 	}
2480 	if (remaining) {
2481 		if (remaining > 0)
2482 			max_sector -= remaining >> 9;
2483 		DPRINT("weirdness: remaining %d\n", remaining >> 9);
2484 	}
2485 }
2486 
2487 /* work around a bug in pseudo DMA
2488  * (on some FDCs) pseudo DMA does not stop when the CPU stops
2489  * sending data.  Hence we need a different way to signal the
2490  * transfer length:  We use SECT_PER_TRACK.  Unfortunately, this
2491  * does not work with MT, hence we can only transfer one head at
2492  * a time
2493  */
virtualdmabug_workaround(void)2494 static void virtualdmabug_workaround(void)
2495 {
2496 	int hard_sectors;
2497 	int end_sector;
2498 
2499 	if (CT(COMMAND) == FD_WRITE) {
2500 		COMMAND &= ~0x80;	/* switch off multiple track mode */
2501 
2502 		hard_sectors = raw_cmd->length >> (7 + SIZECODE);
2503 		end_sector = SECTOR + hard_sectors - 1;
2504 		if (end_sector > SECT_PER_TRACK) {
2505 			pr_info("too many sectors %d > %d\n",
2506 				end_sector, SECT_PER_TRACK);
2507 			return;
2508 		}
2509 		SECT_PER_TRACK = end_sector;
2510 					/* make sure SECT_PER_TRACK
2511 					 * points to end of transfer */
2512 	}
2513 }
2514 
2515 /*
2516  * Formulate a read/write request.
2517  * this routine decides where to load the data (directly to buffer, or to
2518  * tmp floppy area), how much data to load (the size of the buffer, the whole
2519  * track, or a single sector)
2520  * All floppy_track_buffer handling goes in here. If we ever add track buffer
2521  * allocation on the fly, it should be done here. No other part should need
2522  * modification.
2523  */
2524 
make_raw_rw_request(void)2525 static int make_raw_rw_request(void)
2526 {
2527 	int aligned_sector_t;
2528 	int max_sector;
2529 	int max_size;
2530 	int tracksize;
2531 	int ssize;
2532 
2533 	if (WARN(max_buffer_sectors == 0, "VFS: Block I/O scheduled on unopened device\n"))
2534 		return 0;
2535 
2536 	set_fdc((long)current_req->rq_disk->private_data);
2537 
2538 	raw_cmd = &default_raw_cmd;
2539 	raw_cmd->flags = FD_RAW_SPIN | FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK;
2540 	raw_cmd->cmd_count = NR_RW;
2541 	if (rq_data_dir(current_req) == READ) {
2542 		raw_cmd->flags |= FD_RAW_READ;
2543 		COMMAND = FM_MODE(_floppy, FD_READ);
2544 	} else if (rq_data_dir(current_req) == WRITE) {
2545 		raw_cmd->flags |= FD_RAW_WRITE;
2546 		COMMAND = FM_MODE(_floppy, FD_WRITE);
2547 	} else {
2548 		DPRINT("%s: unknown command\n", __func__);
2549 		return 0;
2550 	}
2551 
2552 	max_sector = _floppy->sect * _floppy->head;
2553 
2554 	TRACK = (int)blk_rq_pos(current_req) / max_sector;
2555 	fsector_t = (int)blk_rq_pos(current_req) % max_sector;
2556 	if (_floppy->track && TRACK >= _floppy->track) {
2557 		if (blk_rq_cur_sectors(current_req) & 1) {
2558 			current_count_sectors = 1;
2559 			return 1;
2560 		} else
2561 			return 0;
2562 	}
2563 	HEAD = fsector_t / _floppy->sect;
2564 
2565 	if (((_floppy->stretch & (FD_SWAPSIDES | FD_SECTBASEMASK)) ||
2566 	     test_bit(FD_NEED_TWADDLE_BIT, &DRS->flags)) &&
2567 	    fsector_t < _floppy->sect)
2568 		max_sector = _floppy->sect;
2569 
2570 	/* 2M disks have phantom sectors on the first track */
2571 	if ((_floppy->rate & FD_2M) && (!TRACK) && (!HEAD)) {
2572 		max_sector = 2 * _floppy->sect / 3;
2573 		if (fsector_t >= max_sector) {
2574 			current_count_sectors =
2575 			    min_t(int, _floppy->sect - fsector_t,
2576 				  blk_rq_sectors(current_req));
2577 			return 1;
2578 		}
2579 		SIZECODE = 2;
2580 	} else
2581 		SIZECODE = FD_SIZECODE(_floppy);
2582 	raw_cmd->rate = _floppy->rate & 0x43;
2583 	if ((_floppy->rate & FD_2M) && (TRACK || HEAD) && raw_cmd->rate == 2)
2584 		raw_cmd->rate = 1;
2585 
2586 	if (SIZECODE)
2587 		SIZECODE2 = 0xff;
2588 	else
2589 		SIZECODE2 = 0x80;
2590 	raw_cmd->track = TRACK << STRETCH(_floppy);
2591 	DR_SELECT = UNIT(current_drive) + PH_HEAD(_floppy, HEAD);
2592 	GAP = _floppy->gap;
2593 	ssize = DIV_ROUND_UP(1 << SIZECODE, 4);
2594 	SECT_PER_TRACK = _floppy->sect << 2 >> SIZECODE;
2595 	SECTOR = ((fsector_t % _floppy->sect) << 2 >> SIZECODE) +
2596 	    FD_SECTBASE(_floppy);
2597 
2598 	/* tracksize describes the size which can be filled up with sectors
2599 	 * of size ssize.
2600 	 */
2601 	tracksize = _floppy->sect - _floppy->sect % ssize;
2602 	if (tracksize < _floppy->sect) {
2603 		SECT_PER_TRACK++;
2604 		if (tracksize <= fsector_t % _floppy->sect)
2605 			SECTOR--;
2606 
2607 		/* if we are beyond tracksize, fill up using smaller sectors */
2608 		while (tracksize <= fsector_t % _floppy->sect) {
2609 			while (tracksize + ssize > _floppy->sect) {
2610 				SIZECODE--;
2611 				ssize >>= 1;
2612 			}
2613 			SECTOR++;
2614 			SECT_PER_TRACK++;
2615 			tracksize += ssize;
2616 		}
2617 		max_sector = HEAD * _floppy->sect + tracksize;
2618 	} else if (!TRACK && !HEAD && !(_floppy->rate & FD_2M) && probing) {
2619 		max_sector = _floppy->sect;
2620 	} else if (!HEAD && CT(COMMAND) == FD_WRITE) {
2621 		/* for virtual DMA bug workaround */
2622 		max_sector = _floppy->sect;
2623 	}
2624 
2625 	in_sector_offset = (fsector_t % _floppy->sect) % ssize;
2626 	aligned_sector_t = fsector_t - in_sector_offset;
2627 	max_size = blk_rq_sectors(current_req);
2628 	if ((raw_cmd->track == buffer_track) &&
2629 	    (current_drive == buffer_drive) &&
2630 	    (fsector_t >= buffer_min) && (fsector_t < buffer_max)) {
2631 		/* data already in track buffer */
2632 		if (CT(COMMAND) == FD_READ) {
2633 			copy_buffer(1, max_sector, buffer_max);
2634 			return 1;
2635 		}
2636 	} else if (in_sector_offset || blk_rq_sectors(current_req) < ssize) {
2637 		if (CT(COMMAND) == FD_WRITE) {
2638 			unsigned int sectors;
2639 
2640 			sectors = fsector_t + blk_rq_sectors(current_req);
2641 			if (sectors > ssize && sectors < ssize + ssize)
2642 				max_size = ssize + ssize;
2643 			else
2644 				max_size = ssize;
2645 		}
2646 		raw_cmd->flags &= ~FD_RAW_WRITE;
2647 		raw_cmd->flags |= FD_RAW_READ;
2648 		COMMAND = FM_MODE(_floppy, FD_READ);
2649 	} else if ((unsigned long)bio_data(current_req->bio) < MAX_DMA_ADDRESS) {
2650 		unsigned long dma_limit;
2651 		int direct, indirect;
2652 
2653 		indirect =
2654 		    transfer_size(ssize, max_sector,
2655 				  max_buffer_sectors * 2) - fsector_t;
2656 
2657 		/*
2658 		 * Do NOT use minimum() here---MAX_DMA_ADDRESS is 64 bits wide
2659 		 * on a 64 bit machine!
2660 		 */
2661 		max_size = buffer_chain_size();
2662 		dma_limit = (MAX_DMA_ADDRESS -
2663 			     ((unsigned long)bio_data(current_req->bio))) >> 9;
2664 		if ((unsigned long)max_size > dma_limit)
2665 			max_size = dma_limit;
2666 		/* 64 kb boundaries */
2667 		if (CROSS_64KB(bio_data(current_req->bio), max_size << 9))
2668 			max_size = (K_64 -
2669 				    ((unsigned long)bio_data(current_req->bio)) %
2670 				    K_64) >> 9;
2671 		direct = transfer_size(ssize, max_sector, max_size) - fsector_t;
2672 		/*
2673 		 * We try to read tracks, but if we get too many errors, we
2674 		 * go back to reading just one sector at a time.
2675 		 *
2676 		 * This means we should be able to read a sector even if there
2677 		 * are other bad sectors on this track.
2678 		 */
2679 		if (!direct ||
2680 		    (indirect * 2 > direct * 3 &&
2681 		     *errors < DP->max_errors.read_track &&
2682 		     ((!probing ||
2683 		       (DP->read_track & (1 << DRS->probed_format)))))) {
2684 			max_size = blk_rq_sectors(current_req);
2685 		} else {
2686 			raw_cmd->kernel_data = bio_data(current_req->bio);
2687 			raw_cmd->length = current_count_sectors << 9;
2688 			if (raw_cmd->length == 0) {
2689 				DPRINT("%s: zero dma transfer attempted\n", __func__);
2690 				DPRINT("indirect=%d direct=%d fsector_t=%d\n",
2691 				       indirect, direct, fsector_t);
2692 				return 0;
2693 			}
2694 			virtualdmabug_workaround();
2695 			return 2;
2696 		}
2697 	}
2698 
2699 	if (CT(COMMAND) == FD_READ)
2700 		max_size = max_sector;	/* unbounded */
2701 
2702 	/* claim buffer track if needed */
2703 	if (buffer_track != raw_cmd->track ||	/* bad track */
2704 	    buffer_drive != current_drive ||	/* bad drive */
2705 	    fsector_t > buffer_max ||
2706 	    fsector_t < buffer_min ||
2707 	    ((CT(COMMAND) == FD_READ ||
2708 	      (!in_sector_offset && blk_rq_sectors(current_req) >= ssize)) &&
2709 	     max_sector > 2 * max_buffer_sectors + buffer_min &&
2710 	     max_size + fsector_t > 2 * max_buffer_sectors + buffer_min)) {
2711 		/* not enough space */
2712 		buffer_track = -1;
2713 		buffer_drive = current_drive;
2714 		buffer_max = buffer_min = aligned_sector_t;
2715 	}
2716 	raw_cmd->kernel_data = floppy_track_buffer +
2717 		((aligned_sector_t - buffer_min) << 9);
2718 
2719 	if (CT(COMMAND) == FD_WRITE) {
2720 		/* copy write buffer to track buffer.
2721 		 * if we get here, we know that the write
2722 		 * is either aligned or the data already in the buffer
2723 		 * (buffer will be overwritten) */
2724 		if (in_sector_offset && buffer_track == -1)
2725 			DPRINT("internal error offset !=0 on write\n");
2726 		buffer_track = raw_cmd->track;
2727 		buffer_drive = current_drive;
2728 		copy_buffer(ssize, max_sector,
2729 			    2 * max_buffer_sectors + buffer_min);
2730 	} else
2731 		transfer_size(ssize, max_sector,
2732 			      2 * max_buffer_sectors + buffer_min -
2733 			      aligned_sector_t);
2734 
2735 	/* round up current_count_sectors to get dma xfer size */
2736 	raw_cmd->length = in_sector_offset + current_count_sectors;
2737 	raw_cmd->length = ((raw_cmd->length - 1) | (ssize - 1)) + 1;
2738 	raw_cmd->length <<= 9;
2739 	if ((raw_cmd->length < current_count_sectors << 9) ||
2740 	    (raw_cmd->kernel_data != bio_data(current_req->bio) &&
2741 	     CT(COMMAND) == FD_WRITE &&
2742 	     (aligned_sector_t + (raw_cmd->length >> 9) > buffer_max ||
2743 	      aligned_sector_t < buffer_min)) ||
2744 	    raw_cmd->length % (128 << SIZECODE) ||
2745 	    raw_cmd->length <= 0 || current_count_sectors <= 0) {
2746 		DPRINT("fractionary current count b=%lx s=%lx\n",
2747 		       raw_cmd->length, current_count_sectors);
2748 		if (raw_cmd->kernel_data != bio_data(current_req->bio))
2749 			pr_info("addr=%d, length=%ld\n",
2750 				(int)((raw_cmd->kernel_data -
2751 				       floppy_track_buffer) >> 9),
2752 				current_count_sectors);
2753 		pr_info("st=%d ast=%d mse=%d msi=%d\n",
2754 			fsector_t, aligned_sector_t, max_sector, max_size);
2755 		pr_info("ssize=%x SIZECODE=%d\n", ssize, SIZECODE);
2756 		pr_info("command=%x SECTOR=%d HEAD=%d, TRACK=%d\n",
2757 			COMMAND, SECTOR, HEAD, TRACK);
2758 		pr_info("buffer drive=%d\n", buffer_drive);
2759 		pr_info("buffer track=%d\n", buffer_track);
2760 		pr_info("buffer_min=%d\n", buffer_min);
2761 		pr_info("buffer_max=%d\n", buffer_max);
2762 		return 0;
2763 	}
2764 
2765 	if (raw_cmd->kernel_data != bio_data(current_req->bio)) {
2766 		if (raw_cmd->kernel_data < floppy_track_buffer ||
2767 		    current_count_sectors < 0 ||
2768 		    raw_cmd->length < 0 ||
2769 		    raw_cmd->kernel_data + raw_cmd->length >
2770 		    floppy_track_buffer + (max_buffer_sectors << 10)) {
2771 			DPRINT("buffer overrun in schedule dma\n");
2772 			pr_info("fsector_t=%d buffer_min=%d current_count=%ld\n",
2773 				fsector_t, buffer_min, raw_cmd->length >> 9);
2774 			pr_info("current_count_sectors=%ld\n",
2775 				current_count_sectors);
2776 			if (CT(COMMAND) == FD_READ)
2777 				pr_info("read\n");
2778 			if (CT(COMMAND) == FD_WRITE)
2779 				pr_info("write\n");
2780 			return 0;
2781 		}
2782 	} else if (raw_cmd->length > blk_rq_bytes(current_req) ||
2783 		   current_count_sectors > blk_rq_sectors(current_req)) {
2784 		DPRINT("buffer overrun in direct transfer\n");
2785 		return 0;
2786 	} else if (raw_cmd->length < current_count_sectors << 9) {
2787 		DPRINT("more sectors than bytes\n");
2788 		pr_info("bytes=%ld\n", raw_cmd->length >> 9);
2789 		pr_info("sectors=%ld\n", current_count_sectors);
2790 	}
2791 	if (raw_cmd->length == 0) {
2792 		DPRINT("zero dma transfer attempted from make_raw_request\n");
2793 		return 0;
2794 	}
2795 
2796 	virtualdmabug_workaround();
2797 	return 2;
2798 }
2799 
2800 /*
2801  * Round-robin between our available drives, doing one request from each
2802  */
set_next_request(void)2803 static int set_next_request(void)
2804 {
2805 	struct request_queue *q;
2806 	int old_pos = fdc_queue;
2807 
2808 	do {
2809 		q = disks[fdc_queue]->queue;
2810 		if (++fdc_queue == N_DRIVE)
2811 			fdc_queue = 0;
2812 		if (q) {
2813 			current_req = blk_fetch_request(q);
2814 			if (current_req) {
2815 				current_req->error_count = 0;
2816 				break;
2817 			}
2818 		}
2819 	} while (fdc_queue != old_pos);
2820 
2821 	return current_req != NULL;
2822 }
2823 
redo_fd_request(void)2824 static void redo_fd_request(void)
2825 {
2826 	int drive;
2827 	int tmp;
2828 
2829 	lastredo = jiffies;
2830 	if (current_drive < N_DRIVE)
2831 		floppy_off(current_drive);
2832 
2833 do_request:
2834 	if (!current_req) {
2835 		int pending;
2836 
2837 		spin_lock_irq(&floppy_lock);
2838 		pending = set_next_request();
2839 		spin_unlock_irq(&floppy_lock);
2840 		if (!pending) {
2841 			do_floppy = NULL;
2842 			unlock_fdc();
2843 			return;
2844 		}
2845 	}
2846 	drive = (long)current_req->rq_disk->private_data;
2847 	set_fdc(drive);
2848 	reschedule_timeout(current_reqD, "redo fd request");
2849 
2850 	set_floppy(drive);
2851 	raw_cmd = &default_raw_cmd;
2852 	raw_cmd->flags = 0;
2853 	if (start_motor(redo_fd_request))
2854 		return;
2855 
2856 	disk_change(current_drive);
2857 	if (test_bit(current_drive, &fake_change) ||
2858 	    test_bit(FD_DISK_CHANGED_BIT, &DRS->flags)) {
2859 		DPRINT("disk absent or changed during operation\n");
2860 		request_done(0);
2861 		goto do_request;
2862 	}
2863 	if (!_floppy) {	/* Autodetection */
2864 		if (!probing) {
2865 			DRS->probed_format = 0;
2866 			if (next_valid_format()) {
2867 				DPRINT("no autodetectable formats\n");
2868 				_floppy = NULL;
2869 				request_done(0);
2870 				goto do_request;
2871 			}
2872 		}
2873 		probing = 1;
2874 		_floppy = floppy_type + DP->autodetect[DRS->probed_format];
2875 	} else
2876 		probing = 0;
2877 	errors = &(current_req->error_count);
2878 	tmp = make_raw_rw_request();
2879 	if (tmp < 2) {
2880 		request_done(tmp);
2881 		goto do_request;
2882 	}
2883 
2884 	if (test_bit(FD_NEED_TWADDLE_BIT, &DRS->flags))
2885 		twaddle();
2886 	schedule_bh(floppy_start);
2887 	debugt(__func__, "queue fd request");
2888 	return;
2889 }
2890 
2891 static const struct cont_t rw_cont = {
2892 	.interrupt	= rw_interrupt,
2893 	.redo		= redo_fd_request,
2894 	.error		= bad_flp_intr,
2895 	.done		= request_done
2896 };
2897 
process_fd_request(void)2898 static void process_fd_request(void)
2899 {
2900 	cont = &rw_cont;
2901 	schedule_bh(redo_fd_request);
2902 }
2903 
do_fd_request(struct request_queue * q)2904 static void do_fd_request(struct request_queue *q)
2905 {
2906 	if (WARN(max_buffer_sectors == 0,
2907 		 "VFS: %s called on non-open device\n", __func__))
2908 		return;
2909 
2910 	if (WARN(atomic_read(&usage_count) == 0,
2911 		 "warning: usage count=0, current_req=%p sect=%ld flags=%llx\n",
2912 		 current_req, (long)blk_rq_pos(current_req),
2913 		 (unsigned long long) current_req->cmd_flags))
2914 		return;
2915 
2916 	if (test_and_set_bit(0, &fdc_busy)) {
2917 		/* fdc busy, this new request will be treated when the
2918 		   current one is done */
2919 		is_alive(__func__, "old request running");
2920 		return;
2921 	}
2922 	command_status = FD_COMMAND_NONE;
2923 	__reschedule_timeout(MAXTIMEOUT, "fd_request");
2924 	set_fdc(0);
2925 	process_fd_request();
2926 	is_alive(__func__, "");
2927 }
2928 
2929 static const struct cont_t poll_cont = {
2930 	.interrupt	= success_and_wakeup,
2931 	.redo		= floppy_ready,
2932 	.error		= generic_failure,
2933 	.done		= generic_done
2934 };
2935 
poll_drive(bool interruptible,int flag)2936 static int poll_drive(bool interruptible, int flag)
2937 {
2938 	/* no auto-sense, just clear dcl */
2939 	raw_cmd = &default_raw_cmd;
2940 	raw_cmd->flags = flag;
2941 	raw_cmd->track = 0;
2942 	raw_cmd->cmd_count = 0;
2943 	cont = &poll_cont;
2944 	debug_dcl(DP->flags, "setting NEWCHANGE in poll_drive\n");
2945 	set_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
2946 
2947 	return wait_til_done(floppy_ready, interruptible);
2948 }
2949 
2950 /*
2951  * User triggered reset
2952  * ====================
2953  */
2954 
reset_intr(void)2955 static void reset_intr(void)
2956 {
2957 	pr_info("weird, reset interrupt called\n");
2958 }
2959 
2960 static const struct cont_t reset_cont = {
2961 	.interrupt	= reset_intr,
2962 	.redo		= success_and_wakeup,
2963 	.error		= generic_failure,
2964 	.done		= generic_done
2965 };
2966 
user_reset_fdc(int drive,int arg,bool interruptible)2967 static int user_reset_fdc(int drive, int arg, bool interruptible)
2968 {
2969 	int ret;
2970 
2971 	if (lock_fdc(drive))
2972 		return -EINTR;
2973 
2974 	if (arg == FD_RESET_ALWAYS)
2975 		FDCS->reset = 1;
2976 	if (FDCS->reset) {
2977 		cont = &reset_cont;
2978 		ret = wait_til_done(reset_fdc, interruptible);
2979 		if (ret == -EINTR)
2980 			return -EINTR;
2981 	}
2982 	process_fd_request();
2983 	return 0;
2984 }
2985 
2986 /*
2987  * Misc Ioctl's and support
2988  * ========================
2989  */
fd_copyout(void __user * param,const void * address,unsigned long size)2990 static inline int fd_copyout(void __user *param, const void *address,
2991 			     unsigned long size)
2992 {
2993 	return copy_to_user(param, address, size) ? -EFAULT : 0;
2994 }
2995 
fd_copyin(void __user * param,void * address,unsigned long size)2996 static inline int fd_copyin(void __user *param, void *address,
2997 			    unsigned long size)
2998 {
2999 	return copy_from_user(address, param, size) ? -EFAULT : 0;
3000 }
3001 
drive_name(int type,int drive)3002 static const char *drive_name(int type, int drive)
3003 {
3004 	struct floppy_struct *floppy;
3005 
3006 	if (type)
3007 		floppy = floppy_type + type;
3008 	else {
3009 		if (UDP->native_format)
3010 			floppy = floppy_type + UDP->native_format;
3011 		else
3012 			return "(null)";
3013 	}
3014 	if (floppy->name)
3015 		return floppy->name;
3016 	else
3017 		return "(null)";
3018 }
3019 
3020 /* raw commands */
raw_cmd_done(int flag)3021 static void raw_cmd_done(int flag)
3022 {
3023 	int i;
3024 
3025 	if (!flag) {
3026 		raw_cmd->flags |= FD_RAW_FAILURE;
3027 		raw_cmd->flags |= FD_RAW_HARDFAILURE;
3028 	} else {
3029 		raw_cmd->reply_count = inr;
3030 		if (raw_cmd->reply_count > MAX_REPLIES)
3031 			raw_cmd->reply_count = 0;
3032 		for (i = 0; i < raw_cmd->reply_count; i++)
3033 			raw_cmd->reply[i] = reply_buffer[i];
3034 
3035 		if (raw_cmd->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3036 			unsigned long flags;
3037 			flags = claim_dma_lock();
3038 			raw_cmd->length = fd_get_dma_residue();
3039 			release_dma_lock(flags);
3040 		}
3041 
3042 		if ((raw_cmd->flags & FD_RAW_SOFTFAILURE) &&
3043 		    (!raw_cmd->reply_count || (raw_cmd->reply[0] & 0xc0)))
3044 			raw_cmd->flags |= FD_RAW_FAILURE;
3045 
3046 		if (disk_change(current_drive))
3047 			raw_cmd->flags |= FD_RAW_DISK_CHANGE;
3048 		else
3049 			raw_cmd->flags &= ~FD_RAW_DISK_CHANGE;
3050 		if (raw_cmd->flags & FD_RAW_NO_MOTOR_AFTER)
3051 			motor_off_callback(&motor_off_timer[current_drive]);
3052 
3053 		if (raw_cmd->next &&
3054 		    (!(raw_cmd->flags & FD_RAW_FAILURE) ||
3055 		     !(raw_cmd->flags & FD_RAW_STOP_IF_FAILURE)) &&
3056 		    ((raw_cmd->flags & FD_RAW_FAILURE) ||
3057 		     !(raw_cmd->flags & FD_RAW_STOP_IF_SUCCESS))) {
3058 			raw_cmd = raw_cmd->next;
3059 			return;
3060 		}
3061 	}
3062 	generic_done(flag);
3063 }
3064 
3065 static const struct cont_t raw_cmd_cont = {
3066 	.interrupt	= success_and_wakeup,
3067 	.redo		= floppy_start,
3068 	.error		= generic_failure,
3069 	.done		= raw_cmd_done
3070 };
3071 
raw_cmd_copyout(int cmd,void __user * param,struct floppy_raw_cmd * ptr)3072 static int raw_cmd_copyout(int cmd, void __user *param,
3073 				  struct floppy_raw_cmd *ptr)
3074 {
3075 	int ret;
3076 
3077 	while (ptr) {
3078 		struct floppy_raw_cmd cmd = *ptr;
3079 		cmd.next = NULL;
3080 		cmd.kernel_data = NULL;
3081 		ret = copy_to_user(param, &cmd, sizeof(cmd));
3082 		if (ret)
3083 			return -EFAULT;
3084 		param += sizeof(struct floppy_raw_cmd);
3085 		if ((ptr->flags & FD_RAW_READ) && ptr->buffer_length) {
3086 			if (ptr->length >= 0 &&
3087 			    ptr->length <= ptr->buffer_length) {
3088 				long length = ptr->buffer_length - ptr->length;
3089 				ret = fd_copyout(ptr->data, ptr->kernel_data,
3090 						 length);
3091 				if (ret)
3092 					return ret;
3093 			}
3094 		}
3095 		ptr = ptr->next;
3096 	}
3097 
3098 	return 0;
3099 }
3100 
raw_cmd_free(struct floppy_raw_cmd ** ptr)3101 static void raw_cmd_free(struct floppy_raw_cmd **ptr)
3102 {
3103 	struct floppy_raw_cmd *next;
3104 	struct floppy_raw_cmd *this;
3105 
3106 	this = *ptr;
3107 	*ptr = NULL;
3108 	while (this) {
3109 		if (this->buffer_length) {
3110 			fd_dma_mem_free((unsigned long)this->kernel_data,
3111 					this->buffer_length);
3112 			this->buffer_length = 0;
3113 		}
3114 		next = this->next;
3115 		kfree(this);
3116 		this = next;
3117 	}
3118 }
3119 
raw_cmd_copyin(int cmd,void __user * param,struct floppy_raw_cmd ** rcmd)3120 static int raw_cmd_copyin(int cmd, void __user *param,
3121 				 struct floppy_raw_cmd **rcmd)
3122 {
3123 	struct floppy_raw_cmd *ptr;
3124 	int ret;
3125 	int i;
3126 
3127 	*rcmd = NULL;
3128 
3129 loop:
3130 	ptr = kmalloc(sizeof(struct floppy_raw_cmd), GFP_KERNEL);
3131 	if (!ptr)
3132 		return -ENOMEM;
3133 	*rcmd = ptr;
3134 	ret = copy_from_user(ptr, param, sizeof(*ptr));
3135 	ptr->next = NULL;
3136 	ptr->buffer_length = 0;
3137 	ptr->kernel_data = NULL;
3138 	if (ret)
3139 		return -EFAULT;
3140 	param += sizeof(struct floppy_raw_cmd);
3141 	if (ptr->cmd_count > 33)
3142 			/* the command may now also take up the space
3143 			 * initially intended for the reply & the
3144 			 * reply count. Needed for long 82078 commands
3145 			 * such as RESTORE, which takes ... 17 command
3146 			 * bytes. Murphy's law #137: When you reserve
3147 			 * 16 bytes for a structure, you'll one day
3148 			 * discover that you really need 17...
3149 			 */
3150 		return -EINVAL;
3151 
3152 	for (i = 0; i < 16; i++)
3153 		ptr->reply[i] = 0;
3154 	ptr->resultcode = 0;
3155 
3156 	if (ptr->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3157 		if (ptr->length <= 0)
3158 			return -EINVAL;
3159 		ptr->kernel_data = (char *)fd_dma_mem_alloc(ptr->length);
3160 		fallback_on_nodma_alloc(&ptr->kernel_data, ptr->length);
3161 		if (!ptr->kernel_data)
3162 			return -ENOMEM;
3163 		ptr->buffer_length = ptr->length;
3164 	}
3165 	if (ptr->flags & FD_RAW_WRITE) {
3166 		ret = fd_copyin(ptr->data, ptr->kernel_data, ptr->length);
3167 		if (ret)
3168 			return ret;
3169 	}
3170 
3171 	if (ptr->flags & FD_RAW_MORE) {
3172 		rcmd = &(ptr->next);
3173 		ptr->rate &= 0x43;
3174 		goto loop;
3175 	}
3176 
3177 	return 0;
3178 }
3179 
raw_cmd_ioctl(int cmd,void __user * param)3180 static int raw_cmd_ioctl(int cmd, void __user *param)
3181 {
3182 	struct floppy_raw_cmd *my_raw_cmd;
3183 	int drive;
3184 	int ret2;
3185 	int ret;
3186 
3187 	if (FDCS->rawcmd <= 1)
3188 		FDCS->rawcmd = 1;
3189 	for (drive = 0; drive < N_DRIVE; drive++) {
3190 		if (FDC(drive) != fdc)
3191 			continue;
3192 		if (drive == current_drive) {
3193 			if (UDRS->fd_ref > 1) {
3194 				FDCS->rawcmd = 2;
3195 				break;
3196 			}
3197 		} else if (UDRS->fd_ref) {
3198 			FDCS->rawcmd = 2;
3199 			break;
3200 		}
3201 	}
3202 
3203 	if (FDCS->reset)
3204 		return -EIO;
3205 
3206 	ret = raw_cmd_copyin(cmd, param, &my_raw_cmd);
3207 	if (ret) {
3208 		raw_cmd_free(&my_raw_cmd);
3209 		return ret;
3210 	}
3211 
3212 	raw_cmd = my_raw_cmd;
3213 	cont = &raw_cmd_cont;
3214 	ret = wait_til_done(floppy_start, true);
3215 	debug_dcl(DP->flags, "calling disk change from raw_cmd ioctl\n");
3216 
3217 	if (ret != -EINTR && FDCS->reset)
3218 		ret = -EIO;
3219 
3220 	DRS->track = NO_TRACK;
3221 
3222 	ret2 = raw_cmd_copyout(cmd, param, my_raw_cmd);
3223 	if (!ret)
3224 		ret = ret2;
3225 	raw_cmd_free(&my_raw_cmd);
3226 	return ret;
3227 }
3228 
invalidate_drive(struct block_device * bdev)3229 static int invalidate_drive(struct block_device *bdev)
3230 {
3231 	/* invalidate the buffer track to force a reread */
3232 	set_bit((long)bdev->bd_disk->private_data, &fake_change);
3233 	process_fd_request();
3234 	check_disk_change(bdev);
3235 	return 0;
3236 }
3237 
set_geometry(unsigned int cmd,struct floppy_struct * g,int drive,int type,struct block_device * bdev)3238 static int set_geometry(unsigned int cmd, struct floppy_struct *g,
3239 			       int drive, int type, struct block_device *bdev)
3240 {
3241 	int cnt;
3242 
3243 	/* sanity checking for parameters. */
3244 	if (g->sect <= 0 ||
3245 	    g->head <= 0 ||
3246 	    g->track <= 0 || g->track > UDP->tracks >> STRETCH(g) ||
3247 	    /* check if reserved bits are set */
3248 	    (g->stretch & ~(FD_STRETCH | FD_SWAPSIDES | FD_SECTBASEMASK)) != 0)
3249 		return -EINVAL;
3250 	if (type) {
3251 		if (!capable(CAP_SYS_ADMIN))
3252 			return -EPERM;
3253 		mutex_lock(&open_lock);
3254 		if (lock_fdc(drive)) {
3255 			mutex_unlock(&open_lock);
3256 			return -EINTR;
3257 		}
3258 		floppy_type[type] = *g;
3259 		floppy_type[type].name = "user format";
3260 		for (cnt = type << 2; cnt < (type << 2) + 4; cnt++)
3261 			floppy_sizes[cnt] = floppy_sizes[cnt + 0x80] =
3262 			    floppy_type[type].size + 1;
3263 		process_fd_request();
3264 		for (cnt = 0; cnt < N_DRIVE; cnt++) {
3265 			struct block_device *bdev = opened_bdev[cnt];
3266 			if (!bdev || ITYPE(drive_state[cnt].fd_device) != type)
3267 				continue;
3268 			__invalidate_device(bdev, true);
3269 		}
3270 		mutex_unlock(&open_lock);
3271 	} else {
3272 		int oldStretch;
3273 
3274 		if (lock_fdc(drive))
3275 			return -EINTR;
3276 		if (cmd != FDDEFPRM) {
3277 			/* notice a disk change immediately, else
3278 			 * we lose our settings immediately*/
3279 			if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3280 				return -EINTR;
3281 		}
3282 		oldStretch = g->stretch;
3283 		user_params[drive] = *g;
3284 		if (buffer_drive == drive)
3285 			SUPBOUND(buffer_max, user_params[drive].sect);
3286 		current_type[drive] = &user_params[drive];
3287 		floppy_sizes[drive] = user_params[drive].size;
3288 		if (cmd == FDDEFPRM)
3289 			DRS->keep_data = -1;
3290 		else
3291 			DRS->keep_data = 1;
3292 		/* invalidation. Invalidate only when needed, i.e.
3293 		 * when there are already sectors in the buffer cache
3294 		 * whose number will change. This is useful, because
3295 		 * mtools often changes the geometry of the disk after
3296 		 * looking at the boot block */
3297 		if (DRS->maxblock > user_params[drive].sect ||
3298 		    DRS->maxtrack ||
3299 		    ((user_params[drive].sect ^ oldStretch) &
3300 		     (FD_SWAPSIDES | FD_SECTBASEMASK)))
3301 			invalidate_drive(bdev);
3302 		else
3303 			process_fd_request();
3304 	}
3305 	return 0;
3306 }
3307 
3308 /* handle obsolete ioctl's */
3309 static unsigned int ioctl_table[] = {
3310 	FDCLRPRM,
3311 	FDSETPRM,
3312 	FDDEFPRM,
3313 	FDGETPRM,
3314 	FDMSGON,
3315 	FDMSGOFF,
3316 	FDFMTBEG,
3317 	FDFMTTRK,
3318 	FDFMTEND,
3319 	FDSETEMSGTRESH,
3320 	FDFLUSH,
3321 	FDSETMAXERRS,
3322 	FDGETMAXERRS,
3323 	FDGETDRVTYP,
3324 	FDSETDRVPRM,
3325 	FDGETDRVPRM,
3326 	FDGETDRVSTAT,
3327 	FDPOLLDRVSTAT,
3328 	FDRESET,
3329 	FDGETFDCSTAT,
3330 	FDWERRORCLR,
3331 	FDWERRORGET,
3332 	FDRAWCMD,
3333 	FDEJECT,
3334 	FDTWADDLE
3335 };
3336 
normalize_ioctl(unsigned int * cmd,int * size)3337 static int normalize_ioctl(unsigned int *cmd, int *size)
3338 {
3339 	int i;
3340 
3341 	for (i = 0; i < ARRAY_SIZE(ioctl_table); i++) {
3342 		if ((*cmd & 0xffff) == (ioctl_table[i] & 0xffff)) {
3343 			*size = _IOC_SIZE(*cmd);
3344 			*cmd = ioctl_table[i];
3345 			if (*size > _IOC_SIZE(*cmd)) {
3346 				pr_info("ioctl not yet supported\n");
3347 				return -EFAULT;
3348 			}
3349 			return 0;
3350 		}
3351 	}
3352 	return -EINVAL;
3353 }
3354 
get_floppy_geometry(int drive,int type,struct floppy_struct ** g)3355 static int get_floppy_geometry(int drive, int type, struct floppy_struct **g)
3356 {
3357 	if (type)
3358 		*g = &floppy_type[type];
3359 	else {
3360 		if (lock_fdc(drive))
3361 			return -EINTR;
3362 		if (poll_drive(false, 0) == -EINTR)
3363 			return -EINTR;
3364 		process_fd_request();
3365 		*g = current_type[drive];
3366 	}
3367 	if (!*g)
3368 		return -ENODEV;
3369 	return 0;
3370 }
3371 
fd_getgeo(struct block_device * bdev,struct hd_geometry * geo)3372 static int fd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
3373 {
3374 	int drive = (long)bdev->bd_disk->private_data;
3375 	int type = ITYPE(drive_state[drive].fd_device);
3376 	struct floppy_struct *g;
3377 	int ret;
3378 
3379 	ret = get_floppy_geometry(drive, type, &g);
3380 	if (ret)
3381 		return ret;
3382 
3383 	geo->heads = g->head;
3384 	geo->sectors = g->sect;
3385 	geo->cylinders = g->track;
3386 	return 0;
3387 }
3388 
fd_locked_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3389 static int fd_locked_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3390 		    unsigned long param)
3391 {
3392 	int drive = (long)bdev->bd_disk->private_data;
3393 	int type = ITYPE(UDRS->fd_device);
3394 	int i;
3395 	int ret;
3396 	int size;
3397 	union inparam {
3398 		struct floppy_struct g;	/* geometry */
3399 		struct format_descr f;
3400 		struct floppy_max_errors max_errors;
3401 		struct floppy_drive_params dp;
3402 	} inparam;		/* parameters coming from user space */
3403 	const void *outparam;	/* parameters passed back to user space */
3404 
3405 	/* convert compatibility eject ioctls into floppy eject ioctl.
3406 	 * We do this in order to provide a means to eject floppy disks before
3407 	 * installing the new fdutils package */
3408 	if (cmd == CDROMEJECT ||	/* CD-ROM eject */
3409 	    cmd == 0x6470) {		/* SunOS floppy eject */
3410 		DPRINT("obsolete eject ioctl\n");
3411 		DPRINT("please use floppycontrol --eject\n");
3412 		cmd = FDEJECT;
3413 	}
3414 
3415 	if (!((cmd & 0xff00) == 0x0200))
3416 		return -EINVAL;
3417 
3418 	/* convert the old style command into a new style command */
3419 	ret = normalize_ioctl(&cmd, &size);
3420 	if (ret)
3421 		return ret;
3422 
3423 	/* permission checks */
3424 	if (((cmd & 0x40) && !(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL))) ||
3425 	    ((cmd & 0x80) && !capable(CAP_SYS_ADMIN)))
3426 		return -EPERM;
3427 
3428 	if (WARN_ON(size < 0 || size > sizeof(inparam)))
3429 		return -EINVAL;
3430 
3431 	/* copyin */
3432 	memset(&inparam, 0, sizeof(inparam));
3433 	if (_IOC_DIR(cmd) & _IOC_WRITE) {
3434 		ret = fd_copyin((void __user *)param, &inparam, size);
3435 		if (ret)
3436 			return ret;
3437 	}
3438 
3439 	switch (cmd) {
3440 	case FDEJECT:
3441 		if (UDRS->fd_ref != 1)
3442 			/* somebody else has this drive open */
3443 			return -EBUSY;
3444 		if (lock_fdc(drive))
3445 			return -EINTR;
3446 
3447 		/* do the actual eject. Fails on
3448 		 * non-Sparc architectures */
3449 		ret = fd_eject(UNIT(drive));
3450 
3451 		set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
3452 		set_bit(FD_VERIFY_BIT, &UDRS->flags);
3453 		process_fd_request();
3454 		return ret;
3455 	case FDCLRPRM:
3456 		if (lock_fdc(drive))
3457 			return -EINTR;
3458 		current_type[drive] = NULL;
3459 		floppy_sizes[drive] = MAX_DISK_SIZE << 1;
3460 		UDRS->keep_data = 0;
3461 		return invalidate_drive(bdev);
3462 	case FDSETPRM:
3463 	case FDDEFPRM:
3464 		return set_geometry(cmd, &inparam.g, drive, type, bdev);
3465 	case FDGETPRM:
3466 		ret = get_floppy_geometry(drive, type,
3467 					  (struct floppy_struct **)&outparam);
3468 		if (ret)
3469 			return ret;
3470 		memcpy(&inparam.g, outparam,
3471 				offsetof(struct floppy_struct, name));
3472 		outparam = &inparam.g;
3473 		break;
3474 	case FDMSGON:
3475 		UDP->flags |= FTD_MSG;
3476 		return 0;
3477 	case FDMSGOFF:
3478 		UDP->flags &= ~FTD_MSG;
3479 		return 0;
3480 	case FDFMTBEG:
3481 		if (lock_fdc(drive))
3482 			return -EINTR;
3483 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3484 			return -EINTR;
3485 		ret = UDRS->flags;
3486 		process_fd_request();
3487 		if (ret & FD_VERIFY)
3488 			return -ENODEV;
3489 		if (!(ret & FD_DISK_WRITABLE))
3490 			return -EROFS;
3491 		return 0;
3492 	case FDFMTTRK:
3493 		if (UDRS->fd_ref != 1)
3494 			return -EBUSY;
3495 		return do_format(drive, &inparam.f);
3496 	case FDFMTEND:
3497 	case FDFLUSH:
3498 		if (lock_fdc(drive))
3499 			return -EINTR;
3500 		return invalidate_drive(bdev);
3501 	case FDSETEMSGTRESH:
3502 		UDP->max_errors.reporting = (unsigned short)(param & 0x0f);
3503 		return 0;
3504 	case FDGETMAXERRS:
3505 		outparam = &UDP->max_errors;
3506 		break;
3507 	case FDSETMAXERRS:
3508 		UDP->max_errors = inparam.max_errors;
3509 		break;
3510 	case FDGETDRVTYP:
3511 		outparam = drive_name(type, drive);
3512 		SUPBOUND(size, strlen((const char *)outparam) + 1);
3513 		break;
3514 	case FDSETDRVPRM:
3515 		*UDP = inparam.dp;
3516 		break;
3517 	case FDGETDRVPRM:
3518 		outparam = UDP;
3519 		break;
3520 	case FDPOLLDRVSTAT:
3521 		if (lock_fdc(drive))
3522 			return -EINTR;
3523 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3524 			return -EINTR;
3525 		process_fd_request();
3526 		/* fall through */
3527 	case FDGETDRVSTAT:
3528 		outparam = UDRS;
3529 		break;
3530 	case FDRESET:
3531 		return user_reset_fdc(drive, (int)param, true);
3532 	case FDGETFDCSTAT:
3533 		outparam = UFDCS;
3534 		break;
3535 	case FDWERRORCLR:
3536 		memset(UDRWE, 0, sizeof(*UDRWE));
3537 		return 0;
3538 	case FDWERRORGET:
3539 		outparam = UDRWE;
3540 		break;
3541 	case FDRAWCMD:
3542 		if (type)
3543 			return -EINVAL;
3544 		if (lock_fdc(drive))
3545 			return -EINTR;
3546 		set_floppy(drive);
3547 		i = raw_cmd_ioctl(cmd, (void __user *)param);
3548 		if (i == -EINTR)
3549 			return -EINTR;
3550 		process_fd_request();
3551 		return i;
3552 	case FDTWADDLE:
3553 		if (lock_fdc(drive))
3554 			return -EINTR;
3555 		twaddle();
3556 		process_fd_request();
3557 		return 0;
3558 	default:
3559 		return -EINVAL;
3560 	}
3561 
3562 	if (_IOC_DIR(cmd) & _IOC_READ)
3563 		return fd_copyout((void __user *)param, outparam, size);
3564 
3565 	return 0;
3566 }
3567 
fd_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3568 static int fd_ioctl(struct block_device *bdev, fmode_t mode,
3569 			     unsigned int cmd, unsigned long param)
3570 {
3571 	int ret;
3572 
3573 	mutex_lock(&floppy_mutex);
3574 	ret = fd_locked_ioctl(bdev, mode, cmd, param);
3575 	mutex_unlock(&floppy_mutex);
3576 
3577 	return ret;
3578 }
3579 
3580 #ifdef CONFIG_COMPAT
3581 
3582 struct compat_floppy_drive_params {
3583 	char		cmos;
3584 	compat_ulong_t	max_dtr;
3585 	compat_ulong_t	hlt;
3586 	compat_ulong_t	hut;
3587 	compat_ulong_t	srt;
3588 	compat_ulong_t	spinup;
3589 	compat_ulong_t	spindown;
3590 	unsigned char	spindown_offset;
3591 	unsigned char	select_delay;
3592 	unsigned char	rps;
3593 	unsigned char	tracks;
3594 	compat_ulong_t	timeout;
3595 	unsigned char	interleave_sect;
3596 	struct floppy_max_errors max_errors;
3597 	char		flags;
3598 	char		read_track;
3599 	short		autodetect[8];
3600 	compat_int_t	checkfreq;
3601 	compat_int_t	native_format;
3602 };
3603 
3604 struct compat_floppy_drive_struct {
3605 	signed char	flags;
3606 	compat_ulong_t	spinup_date;
3607 	compat_ulong_t	select_date;
3608 	compat_ulong_t	first_read_date;
3609 	short		probed_format;
3610 	short		track;
3611 	short		maxblock;
3612 	short		maxtrack;
3613 	compat_int_t	generation;
3614 	compat_int_t	keep_data;
3615 	compat_int_t	fd_ref;
3616 	compat_int_t	fd_device;
3617 	compat_int_t	last_checked;
3618 	compat_caddr_t dmabuf;
3619 	compat_int_t	bufblocks;
3620 };
3621 
3622 struct compat_floppy_fdc_state {
3623 	compat_int_t	spec1;
3624 	compat_int_t	spec2;
3625 	compat_int_t	dtr;
3626 	unsigned char	version;
3627 	unsigned char	dor;
3628 	compat_ulong_t	address;
3629 	unsigned int	rawcmd:2;
3630 	unsigned int	reset:1;
3631 	unsigned int	need_configure:1;
3632 	unsigned int	perp_mode:2;
3633 	unsigned int	has_fifo:1;
3634 	unsigned int	driver_version;
3635 	unsigned char	track[4];
3636 };
3637 
3638 struct compat_floppy_write_errors {
3639 	unsigned int	write_errors;
3640 	compat_ulong_t	first_error_sector;
3641 	compat_int_t	first_error_generation;
3642 	compat_ulong_t	last_error_sector;
3643 	compat_int_t	last_error_generation;
3644 	compat_uint_t	badness;
3645 };
3646 
3647 #define FDSETPRM32 _IOW(2, 0x42, struct compat_floppy_struct)
3648 #define FDDEFPRM32 _IOW(2, 0x43, struct compat_floppy_struct)
3649 #define FDSETDRVPRM32 _IOW(2, 0x90, struct compat_floppy_drive_params)
3650 #define FDGETDRVPRM32 _IOR(2, 0x11, struct compat_floppy_drive_params)
3651 #define FDGETDRVSTAT32 _IOR(2, 0x12, struct compat_floppy_drive_struct)
3652 #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct compat_floppy_drive_struct)
3653 #define FDGETFDCSTAT32 _IOR(2, 0x15, struct compat_floppy_fdc_state)
3654 #define FDWERRORGET32  _IOR(2, 0x17, struct compat_floppy_write_errors)
3655 
compat_set_geometry(struct block_device * bdev,fmode_t mode,unsigned int cmd,struct compat_floppy_struct __user * arg)3656 static int compat_set_geometry(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3657 		    struct compat_floppy_struct __user *arg)
3658 {
3659 	struct floppy_struct v;
3660 	int drive, type;
3661 	int err;
3662 
3663 	BUILD_BUG_ON(offsetof(struct floppy_struct, name) !=
3664 		     offsetof(struct compat_floppy_struct, name));
3665 
3666 	if (!(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL)))
3667 		return -EPERM;
3668 
3669 	memset(&v, 0, sizeof(struct floppy_struct));
3670 	if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))
3671 		return -EFAULT;
3672 
3673 	mutex_lock(&floppy_mutex);
3674 	drive = (long)bdev->bd_disk->private_data;
3675 	type = ITYPE(UDRS->fd_device);
3676 	err = set_geometry(cmd == FDSETPRM32 ? FDSETPRM : FDDEFPRM,
3677 			&v, drive, type, bdev);
3678 	mutex_unlock(&floppy_mutex);
3679 	return err;
3680 }
3681 
compat_get_prm(int drive,struct compat_floppy_struct __user * arg)3682 static int compat_get_prm(int drive,
3683 			  struct compat_floppy_struct __user *arg)
3684 {
3685 	struct compat_floppy_struct v;
3686 	struct floppy_struct *p;
3687 	int err;
3688 
3689 	memset(&v, 0, sizeof(v));
3690 	mutex_lock(&floppy_mutex);
3691 	err = get_floppy_geometry(drive, ITYPE(UDRS->fd_device), &p);
3692 	if (err) {
3693 		mutex_unlock(&floppy_mutex);
3694 		return err;
3695 	}
3696 	memcpy(&v, p, offsetof(struct floppy_struct, name));
3697 	mutex_unlock(&floppy_mutex);
3698 	if (copy_to_user(arg, &v, sizeof(struct compat_floppy_struct)))
3699 		return -EFAULT;
3700 	return 0;
3701 }
3702 
compat_setdrvprm(int drive,struct compat_floppy_drive_params __user * arg)3703 static int compat_setdrvprm(int drive,
3704 			    struct compat_floppy_drive_params __user *arg)
3705 {
3706 	struct compat_floppy_drive_params v;
3707 
3708 	if (!capable(CAP_SYS_ADMIN))
3709 		return -EPERM;
3710 	if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))
3711 		return -EFAULT;
3712 	mutex_lock(&floppy_mutex);
3713 	UDP->cmos = v.cmos;
3714 	UDP->max_dtr = v.max_dtr;
3715 	UDP->hlt = v.hlt;
3716 	UDP->hut = v.hut;
3717 	UDP->srt = v.srt;
3718 	UDP->spinup = v.spinup;
3719 	UDP->spindown = v.spindown;
3720 	UDP->spindown_offset = v.spindown_offset;
3721 	UDP->select_delay = v.select_delay;
3722 	UDP->rps = v.rps;
3723 	UDP->tracks = v.tracks;
3724 	UDP->timeout = v.timeout;
3725 	UDP->interleave_sect = v.interleave_sect;
3726 	UDP->max_errors = v.max_errors;
3727 	UDP->flags = v.flags;
3728 	UDP->read_track = v.read_track;
3729 	memcpy(UDP->autodetect, v.autodetect, sizeof(v.autodetect));
3730 	UDP->checkfreq = v.checkfreq;
3731 	UDP->native_format = v.native_format;
3732 	mutex_unlock(&floppy_mutex);
3733 	return 0;
3734 }
3735 
compat_getdrvprm(int drive,struct compat_floppy_drive_params __user * arg)3736 static int compat_getdrvprm(int drive,
3737 			    struct compat_floppy_drive_params __user *arg)
3738 {
3739 	struct compat_floppy_drive_params v;
3740 
3741 	memset(&v, 0, sizeof(struct compat_floppy_drive_params));
3742 	mutex_lock(&floppy_mutex);
3743 	v.cmos = UDP->cmos;
3744 	v.max_dtr = UDP->max_dtr;
3745 	v.hlt = UDP->hlt;
3746 	v.hut = UDP->hut;
3747 	v.srt = UDP->srt;
3748 	v.spinup = UDP->spinup;
3749 	v.spindown = UDP->spindown;
3750 	v.spindown_offset = UDP->spindown_offset;
3751 	v.select_delay = UDP->select_delay;
3752 	v.rps = UDP->rps;
3753 	v.tracks = UDP->tracks;
3754 	v.timeout = UDP->timeout;
3755 	v.interleave_sect = UDP->interleave_sect;
3756 	v.max_errors = UDP->max_errors;
3757 	v.flags = UDP->flags;
3758 	v.read_track = UDP->read_track;
3759 	memcpy(v.autodetect, UDP->autodetect, sizeof(v.autodetect));
3760 	v.checkfreq = UDP->checkfreq;
3761 	v.native_format = UDP->native_format;
3762 	mutex_unlock(&floppy_mutex);
3763 
3764 	if (copy_from_user(arg, &v, sizeof(struct compat_floppy_drive_params)))
3765 		return -EFAULT;
3766 	return 0;
3767 }
3768 
compat_getdrvstat(int drive,bool poll,struct compat_floppy_drive_struct __user * arg)3769 static int compat_getdrvstat(int drive, bool poll,
3770 			    struct compat_floppy_drive_struct __user *arg)
3771 {
3772 	struct compat_floppy_drive_struct v;
3773 
3774 	memset(&v, 0, sizeof(struct compat_floppy_drive_struct));
3775 	mutex_lock(&floppy_mutex);
3776 
3777 	if (poll) {
3778 		if (lock_fdc(drive))
3779 			goto Eintr;
3780 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3781 			goto Eintr;
3782 		process_fd_request();
3783 	}
3784 	v.spinup_date = UDRS->spinup_date;
3785 	v.select_date = UDRS->select_date;
3786 	v.first_read_date = UDRS->first_read_date;
3787 	v.probed_format = UDRS->probed_format;
3788 	v.track = UDRS->track;
3789 	v.maxblock = UDRS->maxblock;
3790 	v.maxtrack = UDRS->maxtrack;
3791 	v.generation = UDRS->generation;
3792 	v.keep_data = UDRS->keep_data;
3793 	v.fd_ref = UDRS->fd_ref;
3794 	v.fd_device = UDRS->fd_device;
3795 	v.last_checked = UDRS->last_checked;
3796 	v.dmabuf = (uintptr_t)UDRS->dmabuf;
3797 	v.bufblocks = UDRS->bufblocks;
3798 	mutex_unlock(&floppy_mutex);
3799 
3800 	if (copy_from_user(arg, &v, sizeof(struct compat_floppy_drive_struct)))
3801 		return -EFAULT;
3802 	return 0;
3803 Eintr:
3804 	mutex_unlock(&floppy_mutex);
3805 	return -EINTR;
3806 }
3807 
compat_getfdcstat(int drive,struct compat_floppy_fdc_state __user * arg)3808 static int compat_getfdcstat(int drive,
3809 			    struct compat_floppy_fdc_state __user *arg)
3810 {
3811 	struct compat_floppy_fdc_state v32;
3812 	struct floppy_fdc_state v;
3813 
3814 	mutex_lock(&floppy_mutex);
3815 	v = *UFDCS;
3816 	mutex_unlock(&floppy_mutex);
3817 
3818 	memset(&v32, 0, sizeof(struct compat_floppy_fdc_state));
3819 	v32.spec1 = v.spec1;
3820 	v32.spec2 = v.spec2;
3821 	v32.dtr = v.dtr;
3822 	v32.version = v.version;
3823 	v32.dor = v.dor;
3824 	v32.address = v.address;
3825 	v32.rawcmd = v.rawcmd;
3826 	v32.reset = v.reset;
3827 	v32.need_configure = v.need_configure;
3828 	v32.perp_mode = v.perp_mode;
3829 	v32.has_fifo = v.has_fifo;
3830 	v32.driver_version = v.driver_version;
3831 	memcpy(v32.track, v.track, 4);
3832 	if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_fdc_state)))
3833 		return -EFAULT;
3834 	return 0;
3835 }
3836 
compat_werrorget(int drive,struct compat_floppy_write_errors __user * arg)3837 static int compat_werrorget(int drive,
3838 			    struct compat_floppy_write_errors __user *arg)
3839 {
3840 	struct compat_floppy_write_errors v32;
3841 	struct floppy_write_errors v;
3842 
3843 	memset(&v32, 0, sizeof(struct compat_floppy_write_errors));
3844 	mutex_lock(&floppy_mutex);
3845 	v = *UDRWE;
3846 	mutex_unlock(&floppy_mutex);
3847 	v32.write_errors = v.write_errors;
3848 	v32.first_error_sector = v.first_error_sector;
3849 	v32.first_error_generation = v.first_error_generation;
3850 	v32.last_error_sector = v.last_error_sector;
3851 	v32.last_error_generation = v.last_error_generation;
3852 	v32.badness = v.badness;
3853 	if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_write_errors)))
3854 		return -EFAULT;
3855 	return 0;
3856 }
3857 
fd_compat_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3858 static int fd_compat_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3859 		    unsigned long param)
3860 {
3861 	int drive = (long)bdev->bd_disk->private_data;
3862 	switch (cmd) {
3863 	case FDMSGON:
3864 	case FDMSGOFF:
3865 	case FDSETEMSGTRESH:
3866 	case FDFLUSH:
3867 	case FDWERRORCLR:
3868 	case FDEJECT:
3869 	case FDCLRPRM:
3870 	case FDFMTBEG:
3871 	case FDRESET:
3872 	case FDTWADDLE:
3873 		return fd_ioctl(bdev, mode, cmd, param);
3874 	case FDSETMAXERRS:
3875 	case FDGETMAXERRS:
3876 	case FDGETDRVTYP:
3877 	case FDFMTEND:
3878 	case FDFMTTRK:
3879 	case FDRAWCMD:
3880 		return fd_ioctl(bdev, mode, cmd,
3881 				(unsigned long)compat_ptr(param));
3882 	case FDSETPRM32:
3883 	case FDDEFPRM32:
3884 		return compat_set_geometry(bdev, mode, cmd, compat_ptr(param));
3885 	case FDGETPRM32:
3886 		return compat_get_prm(drive, compat_ptr(param));
3887 	case FDSETDRVPRM32:
3888 		return compat_setdrvprm(drive, compat_ptr(param));
3889 	case FDGETDRVPRM32:
3890 		return compat_getdrvprm(drive, compat_ptr(param));
3891 	case FDPOLLDRVSTAT32:
3892 		return compat_getdrvstat(drive, true, compat_ptr(param));
3893 	case FDGETDRVSTAT32:
3894 		return compat_getdrvstat(drive, false, compat_ptr(param));
3895 	case FDGETFDCSTAT32:
3896 		return compat_getfdcstat(drive, compat_ptr(param));
3897 	case FDWERRORGET32:
3898 		return compat_werrorget(drive, compat_ptr(param));
3899 	}
3900 	return -EINVAL;
3901 }
3902 #endif
3903 
config_types(void)3904 static void __init config_types(void)
3905 {
3906 	bool has_drive = false;
3907 	int drive;
3908 
3909 	/* read drive info out of physical CMOS */
3910 	drive = 0;
3911 	if (!UDP->cmos)
3912 		UDP->cmos = FLOPPY0_TYPE;
3913 	drive = 1;
3914 	if (!UDP->cmos && FLOPPY1_TYPE)
3915 		UDP->cmos = FLOPPY1_TYPE;
3916 
3917 	/* FIXME: additional physical CMOS drive detection should go here */
3918 
3919 	for (drive = 0; drive < N_DRIVE; drive++) {
3920 		unsigned int type = UDP->cmos;
3921 		struct floppy_drive_params *params;
3922 		const char *name = NULL;
3923 		char temparea[32];
3924 
3925 		if (type < ARRAY_SIZE(default_drive_params)) {
3926 			params = &default_drive_params[type].params;
3927 			if (type) {
3928 				name = default_drive_params[type].name;
3929 				allowed_drive_mask |= 1 << drive;
3930 			} else
3931 				allowed_drive_mask &= ~(1 << drive);
3932 		} else {
3933 			params = &default_drive_params[0].params;
3934 			snprintf(temparea, sizeof(temparea),
3935 				 "unknown type %d (usb?)", type);
3936 			name = temparea;
3937 		}
3938 		if (name) {
3939 			const char *prepend;
3940 			if (!has_drive) {
3941 				prepend = "";
3942 				has_drive = true;
3943 				pr_info("Floppy drive(s):");
3944 			} else {
3945 				prepend = ",";
3946 			}
3947 
3948 			pr_cont("%s fd%d is %s", prepend, drive, name);
3949 		}
3950 		*UDP = *params;
3951 	}
3952 
3953 	if (has_drive)
3954 		pr_cont("\n");
3955 }
3956 
floppy_release(struct gendisk * disk,fmode_t mode)3957 static void floppy_release(struct gendisk *disk, fmode_t mode)
3958 {
3959 	int drive = (long)disk->private_data;
3960 
3961 	mutex_lock(&floppy_mutex);
3962 	mutex_lock(&open_lock);
3963 	if (!UDRS->fd_ref--) {
3964 		DPRINT("floppy_release with fd_ref == 0");
3965 		UDRS->fd_ref = 0;
3966 	}
3967 	if (!UDRS->fd_ref)
3968 		opened_bdev[drive] = NULL;
3969 	mutex_unlock(&open_lock);
3970 	mutex_unlock(&floppy_mutex);
3971 }
3972 
3973 /*
3974  * floppy_open check for aliasing (/dev/fd0 can be the same as
3975  * /dev/PS0 etc), and disallows simultaneous access to the same
3976  * drive with different device numbers.
3977  */
floppy_open(struct block_device * bdev,fmode_t mode)3978 static int floppy_open(struct block_device *bdev, fmode_t mode)
3979 {
3980 	int drive = (long)bdev->bd_disk->private_data;
3981 	int old_dev, new_dev;
3982 	int try;
3983 	int res = -EBUSY;
3984 	char *tmp;
3985 
3986 	mutex_lock(&floppy_mutex);
3987 	mutex_lock(&open_lock);
3988 	old_dev = UDRS->fd_device;
3989 	if (opened_bdev[drive] && opened_bdev[drive] != bdev)
3990 		goto out2;
3991 
3992 	if (!UDRS->fd_ref && (UDP->flags & FD_BROKEN_DCL)) {
3993 		set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
3994 		set_bit(FD_VERIFY_BIT, &UDRS->flags);
3995 	}
3996 
3997 	UDRS->fd_ref++;
3998 
3999 	opened_bdev[drive] = bdev;
4000 
4001 	res = -ENXIO;
4002 
4003 	if (!floppy_track_buffer) {
4004 		/* if opening an ED drive, reserve a big buffer,
4005 		 * else reserve a small one */
4006 		if ((UDP->cmos == 6) || (UDP->cmos == 5))
4007 			try = 64;	/* Only 48 actually useful */
4008 		else
4009 			try = 32;	/* Only 24 actually useful */
4010 
4011 		tmp = (char *)fd_dma_mem_alloc(1024 * try);
4012 		if (!tmp && !floppy_track_buffer) {
4013 			try >>= 1;	/* buffer only one side */
4014 			INFBOUND(try, 16);
4015 			tmp = (char *)fd_dma_mem_alloc(1024 * try);
4016 		}
4017 		if (!tmp && !floppy_track_buffer)
4018 			fallback_on_nodma_alloc(&tmp, 2048 * try);
4019 		if (!tmp && !floppy_track_buffer) {
4020 			DPRINT("Unable to allocate DMA memory\n");
4021 			goto out;
4022 		}
4023 		if (floppy_track_buffer) {
4024 			if (tmp)
4025 				fd_dma_mem_free((unsigned long)tmp, try * 1024);
4026 		} else {
4027 			buffer_min = buffer_max = -1;
4028 			floppy_track_buffer = tmp;
4029 			max_buffer_sectors = try;
4030 		}
4031 	}
4032 
4033 	new_dev = MINOR(bdev->bd_dev);
4034 	UDRS->fd_device = new_dev;
4035 	set_capacity(disks[drive], floppy_sizes[new_dev]);
4036 	if (old_dev != -1 && old_dev != new_dev) {
4037 		if (buffer_drive == drive)
4038 			buffer_track = -1;
4039 	}
4040 
4041 	if (UFDCS->rawcmd == 1)
4042 		UFDCS->rawcmd = 2;
4043 
4044 	if (!(mode & FMODE_NDELAY)) {
4045 		if (mode & (FMODE_READ|FMODE_WRITE)) {
4046 			UDRS->last_checked = 0;
4047 			clear_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags);
4048 			check_disk_change(bdev);
4049 			if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags))
4050 				goto out;
4051 			if (test_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags))
4052 				goto out;
4053 		}
4054 		res = -EROFS;
4055 		if ((mode & FMODE_WRITE) &&
4056 		    !test_bit(FD_DISK_WRITABLE_BIT, &UDRS->flags))
4057 			goto out;
4058 	}
4059 	mutex_unlock(&open_lock);
4060 	mutex_unlock(&floppy_mutex);
4061 	return 0;
4062 out:
4063 	UDRS->fd_ref--;
4064 
4065 	if (!UDRS->fd_ref)
4066 		opened_bdev[drive] = NULL;
4067 out2:
4068 	mutex_unlock(&open_lock);
4069 	mutex_unlock(&floppy_mutex);
4070 	return res;
4071 }
4072 
4073 /*
4074  * Check if the disk has been changed or if a change has been faked.
4075  */
floppy_check_events(struct gendisk * disk,unsigned int clearing)4076 static unsigned int floppy_check_events(struct gendisk *disk,
4077 					unsigned int clearing)
4078 {
4079 	int drive = (long)disk->private_data;
4080 
4081 	if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4082 	    test_bit(FD_VERIFY_BIT, &UDRS->flags))
4083 		return DISK_EVENT_MEDIA_CHANGE;
4084 
4085 	if (time_after(jiffies, UDRS->last_checked + UDP->checkfreq)) {
4086 		if (lock_fdc(drive))
4087 			return -EINTR;
4088 		poll_drive(false, 0);
4089 		process_fd_request();
4090 	}
4091 
4092 	if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4093 	    test_bit(FD_VERIFY_BIT, &UDRS->flags) ||
4094 	    test_bit(drive, &fake_change) ||
4095 	    drive_no_geom(drive))
4096 		return DISK_EVENT_MEDIA_CHANGE;
4097 	return 0;
4098 }
4099 
4100 /*
4101  * This implements "read block 0" for floppy_revalidate().
4102  * Needed for format autodetection, checking whether there is
4103  * a disk in the drive, and whether that disk is writable.
4104  */
4105 
4106 struct rb0_cbdata {
4107 	int drive;
4108 	struct completion complete;
4109 };
4110 
floppy_rb0_cb(struct bio * bio)4111 static void floppy_rb0_cb(struct bio *bio)
4112 {
4113 	struct rb0_cbdata *cbdata = (struct rb0_cbdata *)bio->bi_private;
4114 	int drive = cbdata->drive;
4115 
4116 	if (bio->bi_status) {
4117 		pr_info("floppy: error %d while reading block 0\n",
4118 			bio->bi_status);
4119 		set_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags);
4120 	}
4121 	complete(&cbdata->complete);
4122 }
4123 
__floppy_read_block_0(struct block_device * bdev,int drive)4124 static int __floppy_read_block_0(struct block_device *bdev, int drive)
4125 {
4126 	struct bio bio;
4127 	struct bio_vec bio_vec;
4128 	struct page *page;
4129 	struct rb0_cbdata cbdata;
4130 	size_t size;
4131 
4132 	page = alloc_page(GFP_NOIO);
4133 	if (!page) {
4134 		process_fd_request();
4135 		return -ENOMEM;
4136 	}
4137 
4138 	size = bdev->bd_block_size;
4139 	if (!size)
4140 		size = 1024;
4141 
4142 	cbdata.drive = drive;
4143 
4144 	bio_init(&bio, &bio_vec, 1);
4145 	bio_set_dev(&bio, bdev);
4146 	bio_add_page(&bio, page, size, 0);
4147 
4148 	bio.bi_iter.bi_sector = 0;
4149 	bio.bi_flags |= (1 << BIO_QUIET);
4150 	bio.bi_private = &cbdata;
4151 	bio.bi_end_io = floppy_rb0_cb;
4152 	bio_set_op_attrs(&bio, REQ_OP_READ, 0);
4153 
4154 	submit_bio(&bio);
4155 	process_fd_request();
4156 
4157 	init_completion(&cbdata.complete);
4158 	wait_for_completion(&cbdata.complete);
4159 
4160 	__free_page(page);
4161 
4162 	return 0;
4163 }
4164 
4165 /* revalidate the floppy disk, i.e. trigger format autodetection by reading
4166  * the bootblock (block 0). "Autodetection" is also needed to check whether
4167  * there is a disk in the drive at all... Thus we also do it for fixed
4168  * geometry formats */
floppy_revalidate(struct gendisk * disk)4169 static int floppy_revalidate(struct gendisk *disk)
4170 {
4171 	int drive = (long)disk->private_data;
4172 	int cf;
4173 	int res = 0;
4174 
4175 	if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4176 	    test_bit(FD_VERIFY_BIT, &UDRS->flags) ||
4177 	    test_bit(drive, &fake_change) ||
4178 	    drive_no_geom(drive)) {
4179 		if (WARN(atomic_read(&usage_count) == 0,
4180 			 "VFS: revalidate called on non-open device.\n"))
4181 			return -EFAULT;
4182 
4183 		res = lock_fdc(drive);
4184 		if (res)
4185 			return res;
4186 		cf = (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4187 		      test_bit(FD_VERIFY_BIT, &UDRS->flags));
4188 		if (!(cf || test_bit(drive, &fake_change) || drive_no_geom(drive))) {
4189 			process_fd_request();	/*already done by another thread */
4190 			return 0;
4191 		}
4192 		UDRS->maxblock = 0;
4193 		UDRS->maxtrack = 0;
4194 		if (buffer_drive == drive)
4195 			buffer_track = -1;
4196 		clear_bit(drive, &fake_change);
4197 		clear_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
4198 		if (cf)
4199 			UDRS->generation++;
4200 		if (drive_no_geom(drive)) {
4201 			/* auto-sensing */
4202 			res = __floppy_read_block_0(opened_bdev[drive], drive);
4203 		} else {
4204 			if (cf)
4205 				poll_drive(false, FD_RAW_NEED_DISK);
4206 			process_fd_request();
4207 		}
4208 	}
4209 	set_capacity(disk, floppy_sizes[UDRS->fd_device]);
4210 	return res;
4211 }
4212 
4213 static const struct block_device_operations floppy_fops = {
4214 	.owner			= THIS_MODULE,
4215 	.open			= floppy_open,
4216 	.release		= floppy_release,
4217 	.ioctl			= fd_ioctl,
4218 	.getgeo			= fd_getgeo,
4219 	.check_events		= floppy_check_events,
4220 	.revalidate_disk	= floppy_revalidate,
4221 #ifdef CONFIG_COMPAT
4222 	.compat_ioctl		= fd_compat_ioctl,
4223 #endif
4224 };
4225 
4226 /*
4227  * Floppy Driver initialization
4228  * =============================
4229  */
4230 
4231 /* Determine the floppy disk controller type */
4232 /* This routine was written by David C. Niemi */
get_fdc_version(void)4233 static char __init get_fdc_version(void)
4234 {
4235 	int r;
4236 
4237 	output_byte(FD_DUMPREGS);	/* 82072 and better know DUMPREGS */
4238 	if (FDCS->reset)
4239 		return FDC_NONE;
4240 	r = result();
4241 	if (r <= 0x00)
4242 		return FDC_NONE;	/* No FDC present ??? */
4243 	if ((r == 1) && (reply_buffer[0] == 0x80)) {
4244 		pr_info("FDC %d is an 8272A\n", fdc);
4245 		return FDC_8272A;	/* 8272a/765 don't know DUMPREGS */
4246 	}
4247 	if (r != 10) {
4248 		pr_info("FDC %d init: DUMPREGS: unexpected return of %d bytes.\n",
4249 			fdc, r);
4250 		return FDC_UNKNOWN;
4251 	}
4252 
4253 	if (!fdc_configure()) {
4254 		pr_info("FDC %d is an 82072\n", fdc);
4255 		return FDC_82072;	/* 82072 doesn't know CONFIGURE */
4256 	}
4257 
4258 	output_byte(FD_PERPENDICULAR);
4259 	if (need_more_output() == MORE_OUTPUT) {
4260 		output_byte(0);
4261 	} else {
4262 		pr_info("FDC %d is an 82072A\n", fdc);
4263 		return FDC_82072A;	/* 82072A as found on Sparcs. */
4264 	}
4265 
4266 	output_byte(FD_UNLOCK);
4267 	r = result();
4268 	if ((r == 1) && (reply_buffer[0] == 0x80)) {
4269 		pr_info("FDC %d is a pre-1991 82077\n", fdc);
4270 		return FDC_82077_ORIG;	/* Pre-1991 82077, doesn't know
4271 					 * LOCK/UNLOCK */
4272 	}
4273 	if ((r != 1) || (reply_buffer[0] != 0x00)) {
4274 		pr_info("FDC %d init: UNLOCK: unexpected return of %d bytes.\n",
4275 			fdc, r);
4276 		return FDC_UNKNOWN;
4277 	}
4278 	output_byte(FD_PARTID);
4279 	r = result();
4280 	if (r != 1) {
4281 		pr_info("FDC %d init: PARTID: unexpected return of %d bytes.\n",
4282 			fdc, r);
4283 		return FDC_UNKNOWN;
4284 	}
4285 	if (reply_buffer[0] == 0x80) {
4286 		pr_info("FDC %d is a post-1991 82077\n", fdc);
4287 		return FDC_82077;	/* Revised 82077AA passes all the tests */
4288 	}
4289 	switch (reply_buffer[0] >> 5) {
4290 	case 0x0:
4291 		/* Either a 82078-1 or a 82078SL running at 5Volt */
4292 		pr_info("FDC %d is an 82078.\n", fdc);
4293 		return FDC_82078;
4294 	case 0x1:
4295 		pr_info("FDC %d is a 44pin 82078\n", fdc);
4296 		return FDC_82078;
4297 	case 0x2:
4298 		pr_info("FDC %d is a S82078B\n", fdc);
4299 		return FDC_S82078B;
4300 	case 0x3:
4301 		pr_info("FDC %d is a National Semiconductor PC87306\n", fdc);
4302 		return FDC_87306;
4303 	default:
4304 		pr_info("FDC %d init: 82078 variant with unknown PARTID=%d.\n",
4305 			fdc, reply_buffer[0] >> 5);
4306 		return FDC_82078_UNKN;
4307 	}
4308 }				/* get_fdc_version */
4309 
4310 /* lilo configuration */
4311 
floppy_set_flags(int * ints,int param,int param2)4312 static void __init floppy_set_flags(int *ints, int param, int param2)
4313 {
4314 	int i;
4315 
4316 	for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4317 		if (param)
4318 			default_drive_params[i].params.flags |= param2;
4319 		else
4320 			default_drive_params[i].params.flags &= ~param2;
4321 	}
4322 	DPRINT("%s flag 0x%x\n", param2 ? "Setting" : "Clearing", param);
4323 }
4324 
daring(int * ints,int param,int param2)4325 static void __init daring(int *ints, int param, int param2)
4326 {
4327 	int i;
4328 
4329 	for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4330 		if (param) {
4331 			default_drive_params[i].params.select_delay = 0;
4332 			default_drive_params[i].params.flags |=
4333 			    FD_SILENT_DCL_CLEAR;
4334 		} else {
4335 			default_drive_params[i].params.select_delay =
4336 			    2 * HZ / 100;
4337 			default_drive_params[i].params.flags &=
4338 			    ~FD_SILENT_DCL_CLEAR;
4339 		}
4340 	}
4341 	DPRINT("Assuming %s floppy hardware\n", param ? "standard" : "broken");
4342 }
4343 
set_cmos(int * ints,int dummy,int dummy2)4344 static void __init set_cmos(int *ints, int dummy, int dummy2)
4345 {
4346 	int current_drive = 0;
4347 
4348 	if (ints[0] != 2) {
4349 		DPRINT("wrong number of parameters for CMOS\n");
4350 		return;
4351 	}
4352 	current_drive = ints[1];
4353 	if (current_drive < 0 || current_drive >= 8) {
4354 		DPRINT("bad drive for set_cmos\n");
4355 		return;
4356 	}
4357 #if N_FDC > 1
4358 	if (current_drive >= 4 && !FDC2)
4359 		FDC2 = 0x370;
4360 #endif
4361 	DP->cmos = ints[2];
4362 	DPRINT("setting CMOS code to %d\n", ints[2]);
4363 }
4364 
4365 static struct param_table {
4366 	const char *name;
4367 	void (*fn) (int *ints, int param, int param2);
4368 	int *var;
4369 	int def_param;
4370 	int param2;
4371 } config_params[] __initdata = {
4372 	{"allowed_drive_mask", NULL, &allowed_drive_mask, 0xff, 0}, /* obsolete */
4373 	{"all_drives", NULL, &allowed_drive_mask, 0xff, 0},	/* obsolete */
4374 	{"asus_pci", NULL, &allowed_drive_mask, 0x33, 0},
4375 	{"irq", NULL, &FLOPPY_IRQ, 6, 0},
4376 	{"dma", NULL, &FLOPPY_DMA, 2, 0},
4377 	{"daring", daring, NULL, 1, 0},
4378 #if N_FDC > 1
4379 	{"two_fdc", NULL, &FDC2, 0x370, 0},
4380 	{"one_fdc", NULL, &FDC2, 0, 0},
4381 #endif
4382 	{"thinkpad", floppy_set_flags, NULL, 1, FD_INVERTED_DCL},
4383 	{"broken_dcl", floppy_set_flags, NULL, 1, FD_BROKEN_DCL},
4384 	{"messages", floppy_set_flags, NULL, 1, FTD_MSG},
4385 	{"silent_dcl_clear", floppy_set_flags, NULL, 1, FD_SILENT_DCL_CLEAR},
4386 	{"debug", floppy_set_flags, NULL, 1, FD_DEBUG},
4387 	{"nodma", NULL, &can_use_virtual_dma, 1, 0},
4388 	{"omnibook", NULL, &can_use_virtual_dma, 1, 0},
4389 	{"yesdma", NULL, &can_use_virtual_dma, 0, 0},
4390 	{"fifo_depth", NULL, &fifo_depth, 0xa, 0},
4391 	{"nofifo", NULL, &no_fifo, 0x20, 0},
4392 	{"usefifo", NULL, &no_fifo, 0, 0},
4393 	{"cmos", set_cmos, NULL, 0, 0},
4394 	{"slow", NULL, &slow_floppy, 1, 0},
4395 	{"unexpected_interrupts", NULL, &print_unex, 1, 0},
4396 	{"no_unexpected_interrupts", NULL, &print_unex, 0, 0},
4397 	{"L40SX", NULL, &print_unex, 0, 0}
4398 
4399 	EXTRA_FLOPPY_PARAMS
4400 };
4401 
floppy_setup(char * str)4402 static int __init floppy_setup(char *str)
4403 {
4404 	int i;
4405 	int param;
4406 	int ints[11];
4407 
4408 	str = get_options(str, ARRAY_SIZE(ints), ints);
4409 	if (str) {
4410 		for (i = 0; i < ARRAY_SIZE(config_params); i++) {
4411 			if (strcmp(str, config_params[i].name) == 0) {
4412 				if (ints[0])
4413 					param = ints[1];
4414 				else
4415 					param = config_params[i].def_param;
4416 				if (config_params[i].fn)
4417 					config_params[i].fn(ints, param,
4418 							    config_params[i].
4419 							    param2);
4420 				if (config_params[i].var) {
4421 					DPRINT("%s=%d\n", str, param);
4422 					*config_params[i].var = param;
4423 				}
4424 				return 1;
4425 			}
4426 		}
4427 	}
4428 	if (str) {
4429 		DPRINT("unknown floppy option [%s]\n", str);
4430 
4431 		DPRINT("allowed options are:");
4432 		for (i = 0; i < ARRAY_SIZE(config_params); i++)
4433 			pr_cont(" %s", config_params[i].name);
4434 		pr_cont("\n");
4435 	} else
4436 		DPRINT("botched floppy option\n");
4437 	DPRINT("Read Documentation/blockdev/floppy.txt\n");
4438 	return 0;
4439 }
4440 
4441 static int have_no_fdc = -ENODEV;
4442 
floppy_cmos_show(struct device * dev,struct device_attribute * attr,char * buf)4443 static ssize_t floppy_cmos_show(struct device *dev,
4444 				struct device_attribute *attr, char *buf)
4445 {
4446 	struct platform_device *p = to_platform_device(dev);
4447 	int drive;
4448 
4449 	drive = p->id;
4450 	return sprintf(buf, "%X\n", UDP->cmos);
4451 }
4452 
4453 static DEVICE_ATTR(cmos, 0444, floppy_cmos_show, NULL);
4454 
4455 static struct attribute *floppy_dev_attrs[] = {
4456 	&dev_attr_cmos.attr,
4457 	NULL
4458 };
4459 
4460 ATTRIBUTE_GROUPS(floppy_dev);
4461 
floppy_device_release(struct device * dev)4462 static void floppy_device_release(struct device *dev)
4463 {
4464 }
4465 
floppy_resume(struct device * dev)4466 static int floppy_resume(struct device *dev)
4467 {
4468 	int fdc;
4469 
4470 	for (fdc = 0; fdc < N_FDC; fdc++)
4471 		if (FDCS->address != -1)
4472 			user_reset_fdc(-1, FD_RESET_ALWAYS, false);
4473 
4474 	return 0;
4475 }
4476 
4477 static const struct dev_pm_ops floppy_pm_ops = {
4478 	.resume = floppy_resume,
4479 	.restore = floppy_resume,
4480 };
4481 
4482 static struct platform_driver floppy_driver = {
4483 	.driver = {
4484 		   .name = "floppy",
4485 		   .pm = &floppy_pm_ops,
4486 	},
4487 };
4488 
4489 static struct platform_device floppy_device[N_DRIVE];
4490 
floppy_available(int drive)4491 static bool floppy_available(int drive)
4492 {
4493 	if (!(allowed_drive_mask & (1 << drive)))
4494 		return false;
4495 	if (fdc_state[FDC(drive)].version == FDC_NONE)
4496 		return false;
4497 	return true;
4498 }
4499 
floppy_find(dev_t dev,int * part,void * data)4500 static struct kobject *floppy_find(dev_t dev, int *part, void *data)
4501 {
4502 	int drive = (*part & 3) | ((*part & 0x80) >> 5);
4503 	if (drive >= N_DRIVE || !floppy_available(drive))
4504 		return NULL;
4505 	if (((*part >> 2) & 0x1f) >= ARRAY_SIZE(floppy_type))
4506 		return NULL;
4507 	*part = 0;
4508 	return get_disk_and_module(disks[drive]);
4509 }
4510 
do_floppy_init(void)4511 static int __init do_floppy_init(void)
4512 {
4513 	int i, unit, drive, err;
4514 
4515 	set_debugt();
4516 	interruptjiffies = resultjiffies = jiffies;
4517 
4518 #if defined(CONFIG_PPC)
4519 	if (check_legacy_ioport(FDC1))
4520 		return -ENODEV;
4521 #endif
4522 
4523 	raw_cmd = NULL;
4524 
4525 	floppy_wq = alloc_ordered_workqueue("floppy", 0);
4526 	if (!floppy_wq)
4527 		return -ENOMEM;
4528 
4529 	for (drive = 0; drive < N_DRIVE; drive++) {
4530 		disks[drive] = alloc_disk(1);
4531 		if (!disks[drive]) {
4532 			err = -ENOMEM;
4533 			goto out_put_disk;
4534 		}
4535 
4536 		disks[drive]->queue = blk_init_queue(do_fd_request, &floppy_lock);
4537 		if (!disks[drive]->queue) {
4538 			err = -ENOMEM;
4539 			goto out_put_disk;
4540 		}
4541 
4542 		blk_queue_bounce_limit(disks[drive]->queue, BLK_BOUNCE_HIGH);
4543 		blk_queue_max_hw_sectors(disks[drive]->queue, 64);
4544 		disks[drive]->major = FLOPPY_MAJOR;
4545 		disks[drive]->first_minor = TOMINOR(drive);
4546 		disks[drive]->fops = &floppy_fops;
4547 		sprintf(disks[drive]->disk_name, "fd%d", drive);
4548 
4549 		timer_setup(&motor_off_timer[drive], motor_off_callback, 0);
4550 	}
4551 
4552 	err = register_blkdev(FLOPPY_MAJOR, "fd");
4553 	if (err)
4554 		goto out_put_disk;
4555 
4556 	err = platform_driver_register(&floppy_driver);
4557 	if (err)
4558 		goto out_unreg_blkdev;
4559 
4560 	blk_register_region(MKDEV(FLOPPY_MAJOR, 0), 256, THIS_MODULE,
4561 			    floppy_find, NULL, NULL);
4562 
4563 	for (i = 0; i < 256; i++)
4564 		if (ITYPE(i))
4565 			floppy_sizes[i] = floppy_type[ITYPE(i)].size;
4566 		else
4567 			floppy_sizes[i] = MAX_DISK_SIZE << 1;
4568 
4569 	reschedule_timeout(MAXTIMEOUT, "floppy init");
4570 	config_types();
4571 
4572 	for (i = 0; i < N_FDC; i++) {
4573 		fdc = i;
4574 		memset(FDCS, 0, sizeof(*FDCS));
4575 		FDCS->dtr = -1;
4576 		FDCS->dor = 0x4;
4577 #if defined(__sparc__) || defined(__mc68000__)
4578 	/*sparcs/sun3x don't have a DOR reset which we can fall back on to */
4579 #ifdef __mc68000__
4580 		if (MACH_IS_SUN3X)
4581 #endif
4582 			FDCS->version = FDC_82072A;
4583 #endif
4584 	}
4585 
4586 	use_virtual_dma = can_use_virtual_dma & 1;
4587 	fdc_state[0].address = FDC1;
4588 	if (fdc_state[0].address == -1) {
4589 		cancel_delayed_work(&fd_timeout);
4590 		err = -ENODEV;
4591 		goto out_unreg_region;
4592 	}
4593 #if N_FDC > 1
4594 	fdc_state[1].address = FDC2;
4595 #endif
4596 
4597 	fdc = 0;		/* reset fdc in case of unexpected interrupt */
4598 	err = floppy_grab_irq_and_dma();
4599 	if (err) {
4600 		cancel_delayed_work(&fd_timeout);
4601 		err = -EBUSY;
4602 		goto out_unreg_region;
4603 	}
4604 
4605 	/* initialise drive state */
4606 	for (drive = 0; drive < N_DRIVE; drive++) {
4607 		memset(UDRS, 0, sizeof(*UDRS));
4608 		memset(UDRWE, 0, sizeof(*UDRWE));
4609 		set_bit(FD_DISK_NEWCHANGE_BIT, &UDRS->flags);
4610 		set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
4611 		set_bit(FD_VERIFY_BIT, &UDRS->flags);
4612 		UDRS->fd_device = -1;
4613 		floppy_track_buffer = NULL;
4614 		max_buffer_sectors = 0;
4615 	}
4616 	/*
4617 	 * Small 10 msec delay to let through any interrupt that
4618 	 * initialization might have triggered, to not
4619 	 * confuse detection:
4620 	 */
4621 	msleep(10);
4622 
4623 	for (i = 0; i < N_FDC; i++) {
4624 		fdc = i;
4625 		FDCS->driver_version = FD_DRIVER_VERSION;
4626 		for (unit = 0; unit < 4; unit++)
4627 			FDCS->track[unit] = 0;
4628 		if (FDCS->address == -1)
4629 			continue;
4630 		FDCS->rawcmd = 2;
4631 		if (user_reset_fdc(-1, FD_RESET_ALWAYS, false)) {
4632 			/* free ioports reserved by floppy_grab_irq_and_dma() */
4633 			floppy_release_regions(fdc);
4634 			FDCS->address = -1;
4635 			FDCS->version = FDC_NONE;
4636 			continue;
4637 		}
4638 		/* Try to determine the floppy controller type */
4639 		FDCS->version = get_fdc_version();
4640 		if (FDCS->version == FDC_NONE) {
4641 			/* free ioports reserved by floppy_grab_irq_and_dma() */
4642 			floppy_release_regions(fdc);
4643 			FDCS->address = -1;
4644 			continue;
4645 		}
4646 		if (can_use_virtual_dma == 2 && FDCS->version < FDC_82072A)
4647 			can_use_virtual_dma = 0;
4648 
4649 		have_no_fdc = 0;
4650 		/* Not all FDCs seem to be able to handle the version command
4651 		 * properly, so force a reset for the standard FDC clones,
4652 		 * to avoid interrupt garbage.
4653 		 */
4654 		user_reset_fdc(-1, FD_RESET_ALWAYS, false);
4655 	}
4656 	fdc = 0;
4657 	cancel_delayed_work(&fd_timeout);
4658 	current_drive = 0;
4659 	initialized = true;
4660 	if (have_no_fdc) {
4661 		DPRINT("no floppy controllers found\n");
4662 		err = have_no_fdc;
4663 		goto out_release_dma;
4664 	}
4665 
4666 	for (drive = 0; drive < N_DRIVE; drive++) {
4667 		if (!floppy_available(drive))
4668 			continue;
4669 
4670 		floppy_device[drive].name = floppy_device_name;
4671 		floppy_device[drive].id = drive;
4672 		floppy_device[drive].dev.release = floppy_device_release;
4673 		floppy_device[drive].dev.groups = floppy_dev_groups;
4674 
4675 		err = platform_device_register(&floppy_device[drive]);
4676 		if (err)
4677 			goto out_remove_drives;
4678 
4679 		/* to be cleaned up... */
4680 		disks[drive]->private_data = (void *)(long)drive;
4681 		disks[drive]->flags |= GENHD_FL_REMOVABLE;
4682 		device_add_disk(&floppy_device[drive].dev, disks[drive]);
4683 	}
4684 
4685 	return 0;
4686 
4687 out_remove_drives:
4688 	while (drive--) {
4689 		if (floppy_available(drive)) {
4690 			del_gendisk(disks[drive]);
4691 			platform_device_unregister(&floppy_device[drive]);
4692 		}
4693 	}
4694 out_release_dma:
4695 	if (atomic_read(&usage_count))
4696 		floppy_release_irq_and_dma();
4697 out_unreg_region:
4698 	blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
4699 	platform_driver_unregister(&floppy_driver);
4700 out_unreg_blkdev:
4701 	unregister_blkdev(FLOPPY_MAJOR, "fd");
4702 out_put_disk:
4703 	destroy_workqueue(floppy_wq);
4704 	for (drive = 0; drive < N_DRIVE; drive++) {
4705 		if (!disks[drive])
4706 			break;
4707 		if (disks[drive]->queue) {
4708 			del_timer_sync(&motor_off_timer[drive]);
4709 			blk_cleanup_queue(disks[drive]->queue);
4710 			disks[drive]->queue = NULL;
4711 		}
4712 		put_disk(disks[drive]);
4713 	}
4714 	return err;
4715 }
4716 
4717 #ifndef MODULE
floppy_async_init(void * data,async_cookie_t cookie)4718 static __init void floppy_async_init(void *data, async_cookie_t cookie)
4719 {
4720 	do_floppy_init();
4721 }
4722 #endif
4723 
floppy_init(void)4724 static int __init floppy_init(void)
4725 {
4726 #ifdef MODULE
4727 	return do_floppy_init();
4728 #else
4729 	/* Don't hold up the bootup by the floppy initialization */
4730 	async_schedule(floppy_async_init, NULL);
4731 	return 0;
4732 #endif
4733 }
4734 
4735 static const struct io_region {
4736 	int offset;
4737 	int size;
4738 } io_regions[] = {
4739 	{ 2, 1 },
4740 	/* address + 3 is sometimes reserved by pnp bios for motherboard */
4741 	{ 4, 2 },
4742 	/* address + 6 is reserved, and may be taken by IDE.
4743 	 * Unfortunately, Adaptec doesn't know this :-(, */
4744 	{ 7, 1 },
4745 };
4746 
floppy_release_allocated_regions(int fdc,const struct io_region * p)4747 static void floppy_release_allocated_regions(int fdc, const struct io_region *p)
4748 {
4749 	while (p != io_regions) {
4750 		p--;
4751 		release_region(FDCS->address + p->offset, p->size);
4752 	}
4753 }
4754 
4755 #define ARRAY_END(X) (&((X)[ARRAY_SIZE(X)]))
4756 
floppy_request_regions(int fdc)4757 static int floppy_request_regions(int fdc)
4758 {
4759 	const struct io_region *p;
4760 
4761 	for (p = io_regions; p < ARRAY_END(io_regions); p++) {
4762 		if (!request_region(FDCS->address + p->offset,
4763 				    p->size, "floppy")) {
4764 			DPRINT("Floppy io-port 0x%04lx in use\n",
4765 			       FDCS->address + p->offset);
4766 			floppy_release_allocated_regions(fdc, p);
4767 			return -EBUSY;
4768 		}
4769 	}
4770 	return 0;
4771 }
4772 
floppy_release_regions(int fdc)4773 static void floppy_release_regions(int fdc)
4774 {
4775 	floppy_release_allocated_regions(fdc, ARRAY_END(io_regions));
4776 }
4777 
floppy_grab_irq_and_dma(void)4778 static int floppy_grab_irq_and_dma(void)
4779 {
4780 	if (atomic_inc_return(&usage_count) > 1)
4781 		return 0;
4782 
4783 	/*
4784 	 * We might have scheduled a free_irq(), wait it to
4785 	 * drain first:
4786 	 */
4787 	flush_workqueue(floppy_wq);
4788 
4789 	if (fd_request_irq()) {
4790 		DPRINT("Unable to grab IRQ%d for the floppy driver\n",
4791 		       FLOPPY_IRQ);
4792 		atomic_dec(&usage_count);
4793 		return -1;
4794 	}
4795 	if (fd_request_dma()) {
4796 		DPRINT("Unable to grab DMA%d for the floppy driver\n",
4797 		       FLOPPY_DMA);
4798 		if (can_use_virtual_dma & 2)
4799 			use_virtual_dma = can_use_virtual_dma = 1;
4800 		if (!(can_use_virtual_dma & 1)) {
4801 			fd_free_irq();
4802 			atomic_dec(&usage_count);
4803 			return -1;
4804 		}
4805 	}
4806 
4807 	for (fdc = 0; fdc < N_FDC; fdc++) {
4808 		if (FDCS->address != -1) {
4809 			if (floppy_request_regions(fdc))
4810 				goto cleanup;
4811 		}
4812 	}
4813 	for (fdc = 0; fdc < N_FDC; fdc++) {
4814 		if (FDCS->address != -1) {
4815 			reset_fdc_info(1);
4816 			fd_outb(FDCS->dor, FD_DOR);
4817 		}
4818 	}
4819 	fdc = 0;
4820 	set_dor(0, ~0, 8);	/* avoid immediate interrupt */
4821 
4822 	for (fdc = 0; fdc < N_FDC; fdc++)
4823 		if (FDCS->address != -1)
4824 			fd_outb(FDCS->dor, FD_DOR);
4825 	/*
4826 	 * The driver will try and free resources and relies on us
4827 	 * to know if they were allocated or not.
4828 	 */
4829 	fdc = 0;
4830 	irqdma_allocated = 1;
4831 	return 0;
4832 cleanup:
4833 	fd_free_irq();
4834 	fd_free_dma();
4835 	while (--fdc >= 0)
4836 		floppy_release_regions(fdc);
4837 	atomic_dec(&usage_count);
4838 	return -1;
4839 }
4840 
floppy_release_irq_and_dma(void)4841 static void floppy_release_irq_and_dma(void)
4842 {
4843 	int old_fdc;
4844 #ifndef __sparc__
4845 	int drive;
4846 #endif
4847 	long tmpsize;
4848 	unsigned long tmpaddr;
4849 
4850 	if (!atomic_dec_and_test(&usage_count))
4851 		return;
4852 
4853 	if (irqdma_allocated) {
4854 		fd_disable_dma();
4855 		fd_free_dma();
4856 		fd_free_irq();
4857 		irqdma_allocated = 0;
4858 	}
4859 	set_dor(0, ~0, 8);
4860 #if N_FDC > 1
4861 	set_dor(1, ~8, 0);
4862 #endif
4863 
4864 	if (floppy_track_buffer && max_buffer_sectors) {
4865 		tmpsize = max_buffer_sectors * 1024;
4866 		tmpaddr = (unsigned long)floppy_track_buffer;
4867 		floppy_track_buffer = NULL;
4868 		max_buffer_sectors = 0;
4869 		buffer_min = buffer_max = -1;
4870 		fd_dma_mem_free(tmpaddr, tmpsize);
4871 	}
4872 #ifndef __sparc__
4873 	for (drive = 0; drive < N_FDC * 4; drive++)
4874 		if (timer_pending(motor_off_timer + drive))
4875 			pr_info("motor off timer %d still active\n", drive);
4876 #endif
4877 
4878 	if (delayed_work_pending(&fd_timeout))
4879 		pr_info("floppy timer still active:%s\n", timeout_message);
4880 	if (delayed_work_pending(&fd_timer))
4881 		pr_info("auxiliary floppy timer still active\n");
4882 	if (work_pending(&floppy_work))
4883 		pr_info("work still pending\n");
4884 	old_fdc = fdc;
4885 	for (fdc = 0; fdc < N_FDC; fdc++)
4886 		if (FDCS->address != -1)
4887 			floppy_release_regions(fdc);
4888 	fdc = old_fdc;
4889 }
4890 
4891 #ifdef MODULE
4892 
4893 static char *floppy;
4894 
parse_floppy_cfg_string(char * cfg)4895 static void __init parse_floppy_cfg_string(char *cfg)
4896 {
4897 	char *ptr;
4898 
4899 	while (*cfg) {
4900 		ptr = cfg;
4901 		while (*cfg && *cfg != ' ' && *cfg != '\t')
4902 			cfg++;
4903 		if (*cfg) {
4904 			*cfg = '\0';
4905 			cfg++;
4906 		}
4907 		if (*ptr)
4908 			floppy_setup(ptr);
4909 	}
4910 }
4911 
floppy_module_init(void)4912 static int __init floppy_module_init(void)
4913 {
4914 	if (floppy)
4915 		parse_floppy_cfg_string(floppy);
4916 	return floppy_init();
4917 }
4918 module_init(floppy_module_init);
4919 
floppy_module_exit(void)4920 static void __exit floppy_module_exit(void)
4921 {
4922 	int drive;
4923 
4924 	blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
4925 	unregister_blkdev(FLOPPY_MAJOR, "fd");
4926 	platform_driver_unregister(&floppy_driver);
4927 
4928 	destroy_workqueue(floppy_wq);
4929 
4930 	for (drive = 0; drive < N_DRIVE; drive++) {
4931 		del_timer_sync(&motor_off_timer[drive]);
4932 
4933 		if (floppy_available(drive)) {
4934 			del_gendisk(disks[drive]);
4935 			platform_device_unregister(&floppy_device[drive]);
4936 		}
4937 		blk_cleanup_queue(disks[drive]->queue);
4938 
4939 		/*
4940 		 * These disks have not called add_disk().  Don't put down
4941 		 * queue reference in put_disk().
4942 		 */
4943 		if (!(allowed_drive_mask & (1 << drive)) ||
4944 		    fdc_state[FDC(drive)].version == FDC_NONE)
4945 			disks[drive]->queue = NULL;
4946 
4947 		put_disk(disks[drive]);
4948 	}
4949 
4950 	cancel_delayed_work_sync(&fd_timeout);
4951 	cancel_delayed_work_sync(&fd_timer);
4952 
4953 	if (atomic_read(&usage_count))
4954 		floppy_release_irq_and_dma();
4955 
4956 	/* eject disk, if any */
4957 	fd_eject(0);
4958 }
4959 
4960 module_exit(floppy_module_exit);
4961 
4962 module_param(floppy, charp, 0);
4963 module_param(FLOPPY_IRQ, int, 0);
4964 module_param(FLOPPY_DMA, int, 0);
4965 MODULE_AUTHOR("Alain L. Knaff");
4966 MODULE_SUPPORTED_DEVICE("fd");
4967 MODULE_LICENSE("GPL");
4968 
4969 /* This doesn't actually get used other than for module information */
4970 static const struct pnp_device_id floppy_pnpids[] = {
4971 	{"PNP0700", 0},
4972 	{}
4973 };
4974 
4975 MODULE_DEVICE_TABLE(pnp, floppy_pnpids);
4976 
4977 #else
4978 
4979 __setup("floppy=", floppy_setup);
4980 module_init(floppy_init)
4981 #endif
4982 
4983 MODULE_ALIAS_BLOCKDEV_MAJOR(FLOPPY_MAJOR);
4984