at v2.6.31-rc2 678 lines 17 kB view raw
1/* 2 * Copyright (C) 2000-2002 Michael Cornwell <cornwell@acm.org> 3 * Copyright (C) 2000-2002 Andre Hedrick <andre@linux-ide.org> 4 * Copyright (C) 2001-2002 Klaus Smolin 5 * IBM Storage Technology Division 6 * Copyright (C) 2003-2004, 2007 Bartlomiej Zolnierkiewicz 7 * 8 * The big the bad and the ugly. 9 */ 10 11#include <linux/types.h> 12#include <linux/string.h> 13#include <linux/kernel.h> 14#include <linux/sched.h> 15#include <linux/interrupt.h> 16#include <linux/errno.h> 17#include <linux/slab.h> 18#include <linux/delay.h> 19#include <linux/hdreg.h> 20#include <linux/ide.h> 21#include <linux/scatterlist.h> 22 23#include <asm/uaccess.h> 24#include <asm/io.h> 25 26void ide_tf_readback(ide_drive_t *drive, struct ide_cmd *cmd) 27{ 28 ide_hwif_t *hwif = drive->hwif; 29 const struct ide_tp_ops *tp_ops = hwif->tp_ops; 30 31 /* Be sure we're looking at the low order bytes */ 32 tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS); 33 34 tp_ops->tf_read(drive, &cmd->tf, cmd->valid.in.tf); 35 36 if (cmd->tf_flags & IDE_TFLAG_LBA48) { 37 tp_ops->write_devctl(hwif, ATA_HOB | ATA_DEVCTL_OBS); 38 39 tp_ops->tf_read(drive, &cmd->hob, cmd->valid.in.hob); 40 } 41} 42 43void ide_tf_dump(const char *s, struct ide_cmd *cmd) 44{ 45#ifdef DEBUG 46 printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x " 47 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n", 48 s, cmd->tf.feature, cmd->tf.nsect, 49 cmd->tf.lbal, cmd->tf.lbam, cmd->tf.lbah, 50 cmd->tf.device, cmd->tf.command); 51 printk("%s: hob: nsect 0x%02x lbal 0x%02x lbam 0x%02x lbah 0x%02x\n", 52 s, cmd->hob.nsect, cmd->hob.lbal, cmd->hob.lbam, cmd->hob.lbah); 53#endif 54} 55 56int taskfile_lib_get_identify (ide_drive_t *drive, u8 *buf) 57{ 58 struct ide_cmd cmd; 59 60 memset(&cmd, 0, sizeof(cmd)); 61 cmd.tf.nsect = 0x01; 62 if (drive->media == ide_disk) 63 cmd.tf.command = ATA_CMD_ID_ATA; 64 else 65 cmd.tf.command = ATA_CMD_ID_ATAPI; 66 cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE; 67 cmd.valid.in.tf = IDE_VALID_IN_TF | IDE_VALID_DEVICE; 68 cmd.protocol = ATA_PROT_PIO; 69 70 return ide_raw_taskfile(drive, &cmd, buf, 1); 71} 72 73static ide_startstop_t task_no_data_intr(ide_drive_t *); 74static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *); 75static ide_startstop_t task_pio_intr(ide_drive_t *); 76 77ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd) 78{ 79 ide_hwif_t *hwif = drive->hwif; 80 struct ide_cmd *cmd = &hwif->cmd; 81 struct ide_taskfile *tf = &cmd->tf; 82 ide_handler_t *handler = NULL; 83 const struct ide_tp_ops *tp_ops = hwif->tp_ops; 84 const struct ide_dma_ops *dma_ops = hwif->dma_ops; 85 86 if (orig_cmd->protocol == ATA_PROT_PIO && 87 (orig_cmd->tf_flags & IDE_TFLAG_MULTI_PIO) && 88 drive->mult_count == 0) { 89 printk(KERN_ERR "%s: multimode not set!\n", drive->name); 90 return ide_stopped; 91 } 92 93 if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED) 94 orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS; 95 96 memcpy(cmd, orig_cmd, sizeof(*cmd)); 97 98 if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) { 99 ide_tf_dump(drive->name, cmd); 100 tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS); 101 102 if (cmd->ftf_flags & IDE_FTFLAG_OUT_DATA) { 103 u8 data[2] = { cmd->tf.data, cmd->hob.data }; 104 105 tp_ops->output_data(drive, cmd, data, 2); 106 } 107 108 if (cmd->valid.out.tf & IDE_VALID_DEVICE) { 109 u8 HIHI = (cmd->tf_flags & IDE_TFLAG_LBA48) ? 110 0xE0 : 0xEF; 111 112 if (!(cmd->ftf_flags & IDE_FTFLAG_FLAGGED)) 113 cmd->tf.device &= HIHI; 114 cmd->tf.device |= drive->select; 115 } 116 117 tp_ops->tf_load(drive, &cmd->hob, cmd->valid.out.hob); 118 tp_ops->tf_load(drive, &cmd->tf, cmd->valid.out.tf); 119 } 120 121 switch (cmd->protocol) { 122 case ATA_PROT_PIO: 123 if (cmd->tf_flags & IDE_TFLAG_WRITE) { 124 tp_ops->exec_command(hwif, tf->command); 125 ndelay(400); /* FIXME */ 126 return pre_task_out_intr(drive, cmd); 127 } 128 handler = task_pio_intr; 129 /* fall-through */ 130 case ATA_PROT_NODATA: 131 if (handler == NULL) 132 handler = task_no_data_intr; 133 ide_execute_command(drive, cmd, handler, WAIT_WORSTCASE); 134 return ide_started; 135 case ATA_PROT_DMA: 136 if (ide_dma_prepare(drive, cmd)) 137 return ide_stopped; 138 hwif->expiry = dma_ops->dma_timer_expiry; 139 ide_execute_command(drive, cmd, ide_dma_intr, 2 * WAIT_CMD); 140 dma_ops->dma_start(drive); 141 default: 142 return ide_started; 143 } 144} 145EXPORT_SYMBOL_GPL(do_rw_taskfile); 146 147static ide_startstop_t task_no_data_intr(ide_drive_t *drive) 148{ 149 ide_hwif_t *hwif = drive->hwif; 150 struct ide_cmd *cmd = &hwif->cmd; 151 struct ide_taskfile *tf = &cmd->tf; 152 int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0; 153 int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1; 154 u8 stat; 155 156 local_irq_enable_in_hardirq(); 157 158 while (1) { 159 stat = hwif->tp_ops->read_status(hwif); 160 if ((stat & ATA_BUSY) == 0 || retries-- == 0) 161 break; 162 udelay(10); 163 }; 164 165 if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) { 166 if (custom && tf->command == ATA_CMD_SET_MULTI) { 167 drive->mult_req = drive->mult_count = 0; 168 drive->special_flags |= IDE_SFLAG_RECALIBRATE; 169 (void)ide_dump_status(drive, __func__, stat); 170 return ide_stopped; 171 } else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) { 172 if ((stat & (ATA_ERR | ATA_DRQ)) == 0) { 173 ide_set_handler(drive, &task_no_data_intr, 174 WAIT_WORSTCASE); 175 return ide_started; 176 } 177 } 178 return ide_error(drive, "task_no_data_intr", stat); 179 } 180 181 if (custom && tf->command == ATA_CMD_SET_MULTI) 182 drive->mult_count = drive->mult_req; 183 184 if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE || 185 tf->command == ATA_CMD_CHK_POWER) { 186 struct request *rq = hwif->rq; 187 188 if (blk_pm_request(rq)) 189 ide_complete_pm_rq(drive, rq); 190 else 191 ide_finish_cmd(drive, cmd, stat); 192 } 193 194 return ide_stopped; 195} 196 197static u8 wait_drive_not_busy(ide_drive_t *drive) 198{ 199 ide_hwif_t *hwif = drive->hwif; 200 int retries; 201 u8 stat; 202 203 /* 204 * Last sector was transfered, wait until device is ready. This can 205 * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms. 206 */ 207 for (retries = 0; retries < 1000; retries++) { 208 stat = hwif->tp_ops->read_status(hwif); 209 210 if (stat & ATA_BUSY) 211 udelay(10); 212 else 213 break; 214 } 215 216 if (stat & ATA_BUSY) 217 printk(KERN_ERR "%s: drive still BUSY!\n", drive->name); 218 219 return stat; 220} 221 222void ide_pio_bytes(ide_drive_t *drive, struct ide_cmd *cmd, 223 unsigned int write, unsigned int len) 224{ 225 ide_hwif_t *hwif = drive->hwif; 226 struct scatterlist *sg = hwif->sg_table; 227 struct scatterlist *cursg = cmd->cursg; 228 struct page *page; 229 unsigned long flags; 230 unsigned int offset; 231 u8 *buf; 232 233 cursg = cmd->cursg; 234 if (cursg == NULL) 235 cursg = cmd->cursg = sg; 236 237 while (len) { 238 unsigned nr_bytes = min(len, cursg->length - cmd->cursg_ofs); 239 240 if (nr_bytes > PAGE_SIZE) 241 nr_bytes = PAGE_SIZE; 242 243 page = sg_page(cursg); 244 offset = cursg->offset + cmd->cursg_ofs; 245 246 /* get the current page and offset */ 247 page = nth_page(page, (offset >> PAGE_SHIFT)); 248 offset %= PAGE_SIZE; 249 250 if (PageHighMem(page)) 251 local_irq_save(flags); 252 253 buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset; 254 255 cmd->nleft -= nr_bytes; 256 cmd->cursg_ofs += nr_bytes; 257 258 if (cmd->cursg_ofs == cursg->length) { 259 cursg = cmd->cursg = sg_next(cmd->cursg); 260 cmd->cursg_ofs = 0; 261 } 262 263 /* do the actual data transfer */ 264 if (write) 265 hwif->tp_ops->output_data(drive, cmd, buf, nr_bytes); 266 else 267 hwif->tp_ops->input_data(drive, cmd, buf, nr_bytes); 268 269 kunmap_atomic(buf, KM_BIO_SRC_IRQ); 270 271 if (PageHighMem(page)) 272 local_irq_restore(flags); 273 274 len -= nr_bytes; 275 } 276} 277EXPORT_SYMBOL_GPL(ide_pio_bytes); 278 279static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd, 280 unsigned int write) 281{ 282 unsigned int nr_bytes; 283 284 u8 saved_io_32bit = drive->io_32bit; 285 286 if (cmd->tf_flags & IDE_TFLAG_FS) 287 cmd->rq->errors = 0; 288 289 if (cmd->tf_flags & IDE_TFLAG_IO_16BIT) 290 drive->io_32bit = 0; 291 292 touch_softlockup_watchdog(); 293 294 if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) 295 nr_bytes = min_t(unsigned, cmd->nleft, drive->mult_count << 9); 296 else 297 nr_bytes = SECTOR_SIZE; 298 299 ide_pio_bytes(drive, cmd, write, nr_bytes); 300 301 drive->io_32bit = saved_io_32bit; 302} 303 304static void ide_error_cmd(ide_drive_t *drive, struct ide_cmd *cmd) 305{ 306 if (cmd->tf_flags & IDE_TFLAG_FS) { 307 int nr_bytes = cmd->nbytes - cmd->nleft; 308 309 if (cmd->protocol == ATA_PROT_PIO && 310 ((cmd->tf_flags & IDE_TFLAG_WRITE) || cmd->nleft == 0)) { 311 if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) 312 nr_bytes -= drive->mult_count << 9; 313 else 314 nr_bytes -= SECTOR_SIZE; 315 } 316 317 if (nr_bytes > 0) 318 ide_complete_rq(drive, 0, nr_bytes); 319 } 320} 321 322void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat) 323{ 324 struct request *rq = drive->hwif->rq; 325 u8 err = ide_read_error(drive); 326 327 ide_complete_cmd(drive, cmd, stat, err); 328 rq->errors = err; 329 ide_complete_rq(drive, err ? -EIO : 0, blk_rq_bytes(rq)); 330} 331 332/* 333 * Handler for command with PIO data phase. 334 */ 335static ide_startstop_t task_pio_intr(ide_drive_t *drive) 336{ 337 ide_hwif_t *hwif = drive->hwif; 338 struct ide_cmd *cmd = &drive->hwif->cmd; 339 u8 stat = hwif->tp_ops->read_status(hwif); 340 u8 write = !!(cmd->tf_flags & IDE_TFLAG_WRITE); 341 342 if (write == 0) { 343 /* Error? */ 344 if (stat & ATA_ERR) 345 goto out_err; 346 347 /* Didn't want any data? Odd. */ 348 if ((stat & ATA_DRQ) == 0) { 349 /* Command all done? */ 350 if (OK_STAT(stat, ATA_DRDY, ATA_BUSY)) 351 goto out_end; 352 353 /* Assume it was a spurious irq */ 354 goto out_wait; 355 } 356 } else { 357 if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat)) 358 goto out_err; 359 360 /* Deal with unexpected ATA data phase. */ 361 if (((stat & ATA_DRQ) == 0) ^ (cmd->nleft == 0)) 362 goto out_err; 363 } 364 365 if (write && cmd->nleft == 0) 366 goto out_end; 367 368 /* Still data left to transfer. */ 369 ide_pio_datablock(drive, cmd, write); 370 371 /* Are we done? Check status and finish transfer. */ 372 if (write == 0 && cmd->nleft == 0) { 373 stat = wait_drive_not_busy(drive); 374 if (!OK_STAT(stat, 0, BAD_STAT)) 375 goto out_err; 376 377 goto out_end; 378 } 379out_wait: 380 /* Still data left to transfer. */ 381 ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE); 382 return ide_started; 383out_end: 384 if ((cmd->tf_flags & IDE_TFLAG_FS) == 0) 385 ide_finish_cmd(drive, cmd, stat); 386 else 387 ide_complete_rq(drive, 0, blk_rq_sectors(cmd->rq) << 9); 388 return ide_stopped; 389out_err: 390 ide_error_cmd(drive, cmd); 391 return ide_error(drive, __func__, stat); 392} 393 394static ide_startstop_t pre_task_out_intr(ide_drive_t *drive, 395 struct ide_cmd *cmd) 396{ 397 ide_startstop_t startstop; 398 399 if (ide_wait_stat(&startstop, drive, ATA_DRQ, 400 drive->bad_wstat, WAIT_DRQ)) { 401 printk(KERN_ERR "%s: no DRQ after issuing %sWRITE%s\n", 402 drive->name, 403 (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) ? "MULT" : "", 404 (drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : ""); 405 return startstop; 406 } 407 408 if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0) 409 local_irq_disable(); 410 411 ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE); 412 413 ide_pio_datablock(drive, cmd, 1); 414 415 return ide_started; 416} 417 418int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf, 419 u16 nsect) 420{ 421 struct request *rq; 422 int error; 423 424 rq = blk_get_request(drive->queue, READ, __GFP_WAIT); 425 rq->cmd_type = REQ_TYPE_ATA_TASKFILE; 426 427 if (cmd->tf_flags & IDE_TFLAG_WRITE) 428 rq->cmd_flags |= REQ_RW; 429 430 /* 431 * (ks) We transfer currently only whole sectors. 432 * This is suffient for now. But, it would be great, 433 * if we would find a solution to transfer any size. 434 * To support special commands like READ LONG. 435 */ 436 if (nsect) { 437 error = blk_rq_map_kern(drive->queue, rq, buf, 438 nsect * SECTOR_SIZE, __GFP_WAIT); 439 if (error) 440 goto put_req; 441 } 442 443 rq->special = cmd; 444 cmd->rq = rq; 445 446 error = blk_execute_rq(drive->queue, NULL, rq, 0); 447 448put_req: 449 blk_put_request(rq); 450 return error; 451} 452 453EXPORT_SYMBOL(ide_raw_taskfile); 454 455int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd) 456{ 457 cmd->protocol = ATA_PROT_NODATA; 458 459 return ide_raw_taskfile(drive, cmd, NULL, 0); 460} 461EXPORT_SYMBOL_GPL(ide_no_data_taskfile); 462 463#ifdef CONFIG_IDE_TASK_IOCTL 464int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg) 465{ 466 ide_task_request_t *req_task; 467 struct ide_cmd cmd; 468 u8 *outbuf = NULL; 469 u8 *inbuf = NULL; 470 u8 *data_buf = NULL; 471 int err = 0; 472 int tasksize = sizeof(struct ide_task_request_s); 473 unsigned int taskin = 0; 474 unsigned int taskout = 0; 475 u16 nsect = 0; 476 char __user *buf = (char __user *)arg; 477 478// printk("IDE Taskfile ...\n"); 479 480 req_task = kzalloc(tasksize, GFP_KERNEL); 481 if (req_task == NULL) return -ENOMEM; 482 if (copy_from_user(req_task, buf, tasksize)) { 483 kfree(req_task); 484 return -EFAULT; 485 } 486 487 taskout = req_task->out_size; 488 taskin = req_task->in_size; 489 490 if (taskin > 65536 || taskout > 65536) { 491 err = -EINVAL; 492 goto abort; 493 } 494 495 if (taskout) { 496 int outtotal = tasksize; 497 outbuf = kzalloc(taskout, GFP_KERNEL); 498 if (outbuf == NULL) { 499 err = -ENOMEM; 500 goto abort; 501 } 502 if (copy_from_user(outbuf, buf + outtotal, taskout)) { 503 err = -EFAULT; 504 goto abort; 505 } 506 } 507 508 if (taskin) { 509 int intotal = tasksize + taskout; 510 inbuf = kzalloc(taskin, GFP_KERNEL); 511 if (inbuf == NULL) { 512 err = -ENOMEM; 513 goto abort; 514 } 515 if (copy_from_user(inbuf, buf + intotal, taskin)) { 516 err = -EFAULT; 517 goto abort; 518 } 519 } 520 521 memset(&cmd, 0, sizeof(cmd)); 522 523 memcpy(&cmd.hob, req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2); 524 memcpy(&cmd.tf, req_task->io_ports, HDIO_DRIVE_TASK_HDR_SIZE); 525 526 cmd.valid.out.tf = IDE_VALID_DEVICE; 527 cmd.valid.in.tf = IDE_VALID_DEVICE | IDE_VALID_IN_TF; 528 cmd.tf_flags = IDE_TFLAG_IO_16BIT; 529 530 if (drive->dev_flags & IDE_DFLAG_LBA48) { 531 cmd.tf_flags |= IDE_TFLAG_LBA48; 532 cmd.valid.in.hob = IDE_VALID_IN_HOB; 533 } 534 535 if (req_task->out_flags.all) { 536 cmd.ftf_flags |= IDE_FTFLAG_FLAGGED; 537 538 if (req_task->out_flags.b.data) 539 cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA; 540 541 if (req_task->out_flags.b.nsector_hob) 542 cmd.valid.out.hob |= IDE_VALID_NSECT; 543 if (req_task->out_flags.b.sector_hob) 544 cmd.valid.out.hob |= IDE_VALID_LBAL; 545 if (req_task->out_flags.b.lcyl_hob) 546 cmd.valid.out.hob |= IDE_VALID_LBAM; 547 if (req_task->out_flags.b.hcyl_hob) 548 cmd.valid.out.hob |= IDE_VALID_LBAH; 549 550 if (req_task->out_flags.b.error_feature) 551 cmd.valid.out.tf |= IDE_VALID_FEATURE; 552 if (req_task->out_flags.b.nsector) 553 cmd.valid.out.tf |= IDE_VALID_NSECT; 554 if (req_task->out_flags.b.sector) 555 cmd.valid.out.tf |= IDE_VALID_LBAL; 556 if (req_task->out_flags.b.lcyl) 557 cmd.valid.out.tf |= IDE_VALID_LBAM; 558 if (req_task->out_flags.b.hcyl) 559 cmd.valid.out.tf |= IDE_VALID_LBAH; 560 } else { 561 cmd.valid.out.tf |= IDE_VALID_OUT_TF; 562 if (cmd.tf_flags & IDE_TFLAG_LBA48) 563 cmd.valid.out.hob |= IDE_VALID_OUT_HOB; 564 } 565 566 if (req_task->in_flags.b.data) 567 cmd.ftf_flags |= IDE_FTFLAG_IN_DATA; 568 569 if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE) { 570 /* fixup data phase if needed */ 571 if (req_task->data_phase == TASKFILE_IN_DMAQ || 572 req_task->data_phase == TASKFILE_IN_DMA) 573 cmd.tf_flags |= IDE_TFLAG_WRITE; 574 } 575 576 cmd.protocol = ATA_PROT_DMA; 577 578 switch (req_task->data_phase) { 579 case TASKFILE_MULTI_OUT: 580 if (!drive->mult_count) { 581 /* (hs): give up if multcount is not set */ 582 printk(KERN_ERR "%s: %s Multimode Write " \ 583 "multcount is not set\n", 584 drive->name, __func__); 585 err = -EPERM; 586 goto abort; 587 } 588 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO; 589 /* fall through */ 590 case TASKFILE_OUT: 591 cmd.protocol = ATA_PROT_PIO; 592 /* fall through */ 593 case TASKFILE_OUT_DMAQ: 594 case TASKFILE_OUT_DMA: 595 cmd.tf_flags |= IDE_TFLAG_WRITE; 596 nsect = taskout / SECTOR_SIZE; 597 data_buf = outbuf; 598 break; 599 case TASKFILE_MULTI_IN: 600 if (!drive->mult_count) { 601 /* (hs): give up if multcount is not set */ 602 printk(KERN_ERR "%s: %s Multimode Read failure " \ 603 "multcount is not set\n", 604 drive->name, __func__); 605 err = -EPERM; 606 goto abort; 607 } 608 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO; 609 /* fall through */ 610 case TASKFILE_IN: 611 cmd.protocol = ATA_PROT_PIO; 612 /* fall through */ 613 case TASKFILE_IN_DMAQ: 614 case TASKFILE_IN_DMA: 615 nsect = taskin / SECTOR_SIZE; 616 data_buf = inbuf; 617 break; 618 case TASKFILE_NO_DATA: 619 cmd.protocol = ATA_PROT_NODATA; 620 break; 621 default: 622 err = -EFAULT; 623 goto abort; 624 } 625 626 if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA) 627 nsect = 0; 628 else if (!nsect) { 629 nsect = (cmd.hob.nsect << 8) | cmd.tf.nsect; 630 631 if (!nsect) { 632 printk(KERN_ERR "%s: in/out command without data\n", 633 drive->name); 634 err = -EFAULT; 635 goto abort; 636 } 637 } 638 639 err = ide_raw_taskfile(drive, &cmd, data_buf, nsect); 640 641 memcpy(req_task->hob_ports, &cmd.hob, HDIO_DRIVE_HOB_HDR_SIZE - 2); 642 memcpy(req_task->io_ports, &cmd.tf, HDIO_DRIVE_TASK_HDR_SIZE); 643 644 if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) && 645 req_task->in_flags.all == 0) { 646 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS; 647 if (drive->dev_flags & IDE_DFLAG_LBA48) 648 req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8); 649 } 650 651 if (copy_to_user(buf, req_task, tasksize)) { 652 err = -EFAULT; 653 goto abort; 654 } 655 if (taskout) { 656 int outtotal = tasksize; 657 if (copy_to_user(buf + outtotal, outbuf, taskout)) { 658 err = -EFAULT; 659 goto abort; 660 } 661 } 662 if (taskin) { 663 int intotal = tasksize + taskout; 664 if (copy_to_user(buf + intotal, inbuf, taskin)) { 665 err = -EFAULT; 666 goto abort; 667 } 668 } 669abort: 670 kfree(req_task); 671 kfree(outbuf); 672 kfree(inbuf); 673 674// printk("IDE Taskfile ioctl ended. rc = %i\n", err); 675 676 return err; 677} 678#endif