Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...
[linux-2.6-microblaze.git] / drivers / block / floppy.c
1 /*
2  *  linux/drivers/block/floppy.c
3  *
4  *  Copyright (C) 1991, 1992  Linus Torvalds
5  *  Copyright (C) 1993, 1994  Alain Knaff
6  *  Copyright (C) 1998 Alan Cox
7  */
8
9 /*
10  * 02.12.91 - Changed to static variables to indicate need for reset
11  * and recalibrate. This makes some things easier (output_byte reset
12  * checking etc), and means less interrupt jumping in case of errors,
13  * so the code is hopefully easier to understand.
14  */
15
16 /*
17  * This file is certainly a mess. I've tried my best to get it working,
18  * but I don't like programming floppies, and I have only one anyway.
19  * Urgel. I should check for more errors, and do more graceful error
20  * recovery. Seems there are problems with several drives. I've tried to
21  * correct them. No promises.
22  */
23
24 /*
25  * As with hd.c, all routines within this file can (and will) be called
26  * by interrupts, so extreme caution is needed. A hardware interrupt
27  * handler may not sleep, or a kernel panic will happen. Thus I cannot
28  * call "floppy-on" directly, but have to set a special timer interrupt
29  * etc.
30  */
31
32 /*
33  * 28.02.92 - made track-buffering routines, based on the routines written
34  * by entropy@wintermute.wpi.edu (Lawrence Foard). Linus.
35  */
36
37 /*
38  * Automatic floppy-detection and formatting written by Werner Almesberger
39  * (almesber@nessie.cs.id.ethz.ch), who also corrected some problems with
40  * the floppy-change signal detection.
41  */
42
43 /*
44  * 1992/7/22 -- Hennus Bergman: Added better error reporting, fixed
45  * FDC data overrun bug, added some preliminary stuff for vertical
46  * recording support.
47  *
48  * 1992/9/17: Added DMA allocation & DMA functions. -- hhb.
49  *
50  * TODO: Errors are still not counted properly.
51  */
52
53 /* 1992/9/20
54  * Modifications for ``Sector Shifting'' by Rob Hooft (hooft@chem.ruu.nl)
55  * modeled after the freeware MS-DOS program fdformat/88 V1.8 by
56  * Christoph H. Hochst\"atter.
57  * I have fixed the shift values to the ones I always use. Maybe a new
58  * ioctl() should be created to be able to modify them.
59  * There is a bug in the driver that makes it impossible to format a
60  * floppy as the first thing after bootup.
61  */
62
63 /*
64  * 1993/4/29 -- Linus -- cleaned up the timer handling in the kernel, and
65  * this helped the floppy driver as well. Much cleaner, and still seems to
66  * work.
67  */
68
69 /* 1994/6/24 --bbroad-- added the floppy table entries and made
70  * minor modifications to allow 2.88 floppies to be run.
71  */
72
73 /* 1994/7/13 -- Paul Vojta -- modified the probing code to allow three or more
74  * disk types.
75  */
76
77 /*
78  * 1994/8/8 -- Alain Knaff -- Switched to fdpatch driver: Support for bigger
79  * format bug fixes, but unfortunately some new bugs too...
80  */
81
82 /* 1994/9/17 -- Koen Holtman -- added logging of physical floppy write
83  * errors to allow safe writing by specialized programs.
84  */
85
86 /* 1995/4/24 -- Dan Fandrich -- added support for Commodore 1581 3.5" disks
87  * by defining bit 1 of the "stretch" parameter to mean put sectors on the
88  * opposite side of the disk, leaving the sector IDs alone (i.e. Commodore's
89  * drives are "upside-down").
90  */
91
92 /*
93  * 1995/8/26 -- Andreas Busse -- added Mips support.
94  */
95
96 /*
97  * 1995/10/18 -- Ralf Baechle -- Portability cleanup; move machine dependent
98  * features to asm/floppy.h.
99  */
100
101 /*
102  * 1998/1/21 -- Richard Gooch <rgooch@atnf.csiro.au> -- devfs support
103  */
104
105 /*
106  * 1998/05/07 -- Russell King -- More portability cleanups; moved definition of
107  * interrupt and dma channel to asm/floppy.h. Cleaned up some formatting &
108  * use of '0' for NULL.
109  */
110
111 /*
112  * 1998/06/07 -- Alan Cox -- Merged the 2.0.34 fixes for resource allocation
113  * failures.
114  */
115
116 /*
117  * 1998/09/20 -- David Weinehall -- Added slow-down code for buggy PS/2-drives.
118  */
119
120 /*
121  * 1999/08/13 -- Paul Slootman -- floppy stopped working on Alpha after 24
122  * days, 6 hours, 32 minutes and 32 seconds (i.e. MAXINT jiffies; ints were
123  * being used to store jiffies, which are unsigned longs).
124  */
125
126 /*
127  * 2000/08/28 -- Arnaldo Carvalho de Melo <acme@conectiva.com.br>
128  * - get rid of check_region
129  * - s/suser/capable/
130  */
131
132 /*
133  * 2001/08/26 -- Paul Gortmaker - fix insmod oops on machines with no
134  * floppy controller (lingering task on list after module is gone... boom.)
135  */
136
137 /*
138  * 2002/02/07 -- Anton Altaparmakov - Fix io ports reservation to correct range
139  * (0x3f2-0x3f5, 0x3f7). This fix is a bit of a hack but the proper fix
140  * requires many non-obvious changes in arch dependent code.
141  */
142
143 /* 2003/07/28 -- Daniele Bellucci <bellucda@tiscali.it>.
144  * Better audit of register_blkdev.
145  */
146
147 #undef  FLOPPY_SILENT_DCL_CLEAR
148
149 #define REALLY_SLOW_IO
150
151 #define DEBUGT 2
152
153 #define DPRINT(format, args...) \
154         pr_info("floppy%d: " format, current_drive, ##args)
155
156 #define DCL_DEBUG               /* debug disk change line */
157 #ifdef DCL_DEBUG
158 #define debug_dcl(test, fmt, args...) \
159         do { if ((test) & FD_DEBUG) DPRINT(fmt, ##args); } while (0)
160 #else
161 #define debug_dcl(test, fmt, args...) \
162         do { if (0) DPRINT(fmt, ##args); } while (0)
163 #endif
164
165 /* do print messages for unexpected interrupts */
166 static int print_unex = 1;
167 #include <linux/module.h>
168 #include <linux/sched.h>
169 #include <linux/fs.h>
170 #include <linux/kernel.h>
171 #include <linux/timer.h>
172 #include <linux/workqueue.h>
173 #define FDPATCHES
174 #include <linux/fdreg.h>
175 #include <linux/fd.h>
176 #include <linux/hdreg.h>
177 #include <linux/errno.h>
178 #include <linux/slab.h>
179 #include <linux/mm.h>
180 #include <linux/bio.h>
181 #include <linux/string.h>
182 #include <linux/jiffies.h>
183 #include <linux/fcntl.h>
184 #include <linux/delay.h>
185 #include <linux/mc146818rtc.h>  /* CMOS defines */
186 #include <linux/ioport.h>
187 #include <linux/interrupt.h>
188 #include <linux/init.h>
189 #include <linux/platform_device.h>
190 #include <linux/mod_devicetable.h>
191 #include <linux/mutex.h>
192 #include <linux/io.h>
193 #include <linux/uaccess.h>
194 #include <linux/async.h>
195 #include <linux/compat.h>
196
197 /*
198  * PS/2 floppies have much slower step rates than regular floppies.
199  * It's been recommended that take about 1/4 of the default speed
200  * in some more extreme cases.
201  */
202 static DEFINE_MUTEX(floppy_mutex);
203 static int slow_floppy;
204
205 #include <asm/dma.h>
206 #include <asm/irq.h>
207
208 static int FLOPPY_IRQ = 6;
209 static int FLOPPY_DMA = 2;
210 static int can_use_virtual_dma = 2;
211 /* =======
212  * can use virtual DMA:
213  * 0 = use of virtual DMA disallowed by config
214  * 1 = use of virtual DMA prescribed by config
215  * 2 = no virtual DMA preference configured.  By default try hard DMA,
216  * but fall back on virtual DMA when not enough memory available
217  */
218
219 static int use_virtual_dma;
220 /* =======
221  * use virtual DMA
222  * 0 using hard DMA
223  * 1 using virtual DMA
224  * This variable is set to virtual when a DMA mem problem arises, and
225  * reset back in floppy_grab_irq_and_dma.
226  * It is not safe to reset it in other circumstances, because the floppy
227  * driver may have several buffers in use at once, and we do currently not
228  * record each buffers capabilities
229  */
230
231 static DEFINE_SPINLOCK(floppy_lock);
232
233 static unsigned short virtual_dma_port = 0x3f0;
234 irqreturn_t floppy_interrupt(int irq, void *dev_id);
235 static int set_dor(int fdc, char mask, char data);
236
237 #define K_64    0x10000         /* 64KB */
238
239 /* the following is the mask of allowed drives. By default units 2 and
240  * 3 of both floppy controllers are disabled, because switching on the
241  * motor of these drives causes system hangs on some PCI computers. drive
242  * 0 is the low bit (0x1), and drive 7 is the high bit (0x80). Bits are on if
243  * a drive is allowed.
244  *
245  * NOTE: This must come before we include the arch floppy header because
246  *       some ports reference this variable from there. -DaveM
247  */
248
249 static int allowed_drive_mask = 0x33;
250
251 #include <asm/floppy.h>
252
253 static int irqdma_allocated;
254
255 #include <linux/blkdev.h>
256 #include <linux/blkpg.h>
257 #include <linux/cdrom.h>        /* for the compatibility eject ioctl */
258 #include <linux/completion.h>
259
260 static struct request *current_req;
261 static void do_fd_request(struct request_queue *q);
262 static int set_next_request(void);
263
264 #ifndef fd_get_dma_residue
265 #define fd_get_dma_residue() get_dma_residue(FLOPPY_DMA)
266 #endif
267
268 /* Dma Memory related stuff */
269
270 #ifndef fd_dma_mem_free
271 #define fd_dma_mem_free(addr, size) free_pages(addr, get_order(size))
272 #endif
273
274 #ifndef fd_dma_mem_alloc
275 #define fd_dma_mem_alloc(size) __get_dma_pages(GFP_KERNEL, get_order(size))
276 #endif
277
278 #ifndef fd_cacheflush
279 #define fd_cacheflush(addr, size) /* nothing... */
280 #endif
281
282 static inline void fallback_on_nodma_alloc(char **addr, size_t l)
283 {
284 #ifdef FLOPPY_CAN_FALLBACK_ON_NODMA
285         if (*addr)
286                 return;         /* we have the memory */
287         if (can_use_virtual_dma != 2)
288                 return;         /* no fallback allowed */
289         pr_info("DMA memory shortage. Temporarily falling back on virtual DMA\n");
290         *addr = (char *)nodma_mem_alloc(l);
291 #else
292         return;
293 #endif
294 }
295
296 /* End dma memory related stuff */
297
298 static unsigned long fake_change;
299 static bool initialized;
300
301 #define ITYPE(x)        (((x) >> 2) & 0x1f)
302 #define TOMINOR(x)      ((x & 3) | ((x & 4) << 5))
303 #define UNIT(x)         ((x) & 0x03)            /* drive on fdc */
304 #define FDC(x)          (((x) & 0x04) >> 2)     /* fdc of drive */
305         /* reverse mapping from unit and fdc to drive */
306 #define REVDRIVE(fdc, unit) ((unit) + ((fdc) << 2))
307
308 #define DP      (&drive_params[current_drive])
309 #define DRS     (&drive_state[current_drive])
310 #define DRWE    (&write_errors[current_drive])
311 #define FDCS    (&fdc_state[fdc])
312
313 #define UDP     (&drive_params[drive])
314 #define UDRS    (&drive_state[drive])
315 #define UDRWE   (&write_errors[drive])
316 #define UFDCS   (&fdc_state[FDC(drive)])
317
318 #define PH_HEAD(floppy, head) (((((floppy)->stretch & 2) >> 1) ^ head) << 2)
319 #define STRETCH(floppy) ((floppy)->stretch & FD_STRETCH)
320
321 /* read/write */
322 #define COMMAND         (raw_cmd->cmd[0])
323 #define DR_SELECT       (raw_cmd->cmd[1])
324 #define TRACK           (raw_cmd->cmd[2])
325 #define HEAD            (raw_cmd->cmd[3])
326 #define SECTOR          (raw_cmd->cmd[4])
327 #define SIZECODE        (raw_cmd->cmd[5])
328 #define SECT_PER_TRACK  (raw_cmd->cmd[6])
329 #define GAP             (raw_cmd->cmd[7])
330 #define SIZECODE2       (raw_cmd->cmd[8])
331 #define NR_RW 9
332
333 /* format */
334 #define F_SIZECODE      (raw_cmd->cmd[2])
335 #define F_SECT_PER_TRACK (raw_cmd->cmd[3])
336 #define F_GAP           (raw_cmd->cmd[4])
337 #define F_FILL          (raw_cmd->cmd[5])
338 #define NR_F 6
339
340 /*
341  * Maximum disk size (in kilobytes).
342  * This default is used whenever the current disk size is unknown.
343  * [Now it is rather a minimum]
344  */
345 #define MAX_DISK_SIZE 4         /* 3984 */
346
347 /*
348  * globals used by 'result()'
349  */
350 #define MAX_REPLIES 16
351 static unsigned char reply_buffer[MAX_REPLIES];
352 static int inr;         /* size of reply buffer, when called from interrupt */
353 #define ST0             (reply_buffer[0])
354 #define ST1             (reply_buffer[1])
355 #define ST2             (reply_buffer[2])
356 #define ST3             (reply_buffer[0])       /* result of GETSTATUS */
357 #define R_TRACK         (reply_buffer[3])
358 #define R_HEAD          (reply_buffer[4])
359 #define R_SECTOR        (reply_buffer[5])
360 #define R_SIZECODE      (reply_buffer[6])
361
362 #define SEL_DLY         (2 * HZ / 100)
363
364 /*
365  * this struct defines the different floppy drive types.
366  */
367 static struct {
368         struct floppy_drive_params params;
369         const char *name;       /* name printed while booting */
370 } default_drive_params[] = {
371 /* NOTE: the time values in jiffies should be in msec!
372  CMOS drive type
373   |     Maximum data rate supported by drive type
374   |     |   Head load time, msec
375   |     |   |   Head unload time, msec (not used)
376   |     |   |   |     Step rate interval, usec
377   |     |   |   |     |       Time needed for spinup time (jiffies)
378   |     |   |   |     |       |      Timeout for spinning down (jiffies)
379   |     |   |   |     |       |      |   Spindown offset (where disk stops)
380   |     |   |   |     |       |      |   |     Select delay
381   |     |   |   |     |       |      |   |     |     RPS
382   |     |   |   |     |       |      |   |     |     |    Max number of tracks
383   |     |   |   |     |       |      |   |     |     |    |     Interrupt timeout
384   |     |   |   |     |       |      |   |     |     |    |     |   Max nonintlv. sectors
385   |     |   |   |     |       |      |   |     |     |    |     |   | -Max Errors- flags */
386 {{0,  500, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  80, 3*HZ, 20, {3,1,2,0,2}, 0,
387       0, { 7, 4, 8, 2, 1, 5, 3,10}, 3*HZ/2, 0 }, "unknown" },
388
389 {{1,  300, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  40, 3*HZ, 17, {3,1,2,0,2}, 0,
390       0, { 1, 0, 0, 0, 0, 0, 0, 0}, 3*HZ/2, 1 }, "360K PC" }, /*5 1/4 360 KB PC*/
391
392 {{2,  500, 16, 16, 6000, 4*HZ/10, 3*HZ, 14, SEL_DLY, 6,  83, 3*HZ, 17, {3,1,2,0,2}, 0,
393       0, { 2, 5, 6,23,10,20,12, 0}, 3*HZ/2, 2 }, "1.2M" }, /*5 1/4 HD AT*/
394
395 {{3,  250, 16, 16, 3000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
396       0, { 4,22,21,30, 3, 0, 0, 0}, 3*HZ/2, 4 }, "720k" }, /*3 1/2 DD*/
397
398 {{4,  500, 16, 16, 4000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
399       0, { 7, 4,25,22,31,21,29,11}, 3*HZ/2, 7 }, "1.44M" }, /*3 1/2 HD*/
400
401 {{5, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
402       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M AMI BIOS" }, /*3 1/2 ED*/
403
404 {{6, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
405       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M" } /*3 1/2 ED*/
406 /*    |  --autodetected formats---    |      |      |
407  *    read_track                      |      |    Name printed when booting
408  *                                    |     Native format
409  *                  Frequency of disk change checks */
410 };
411
412 static struct floppy_drive_params drive_params[N_DRIVE];
413 static struct floppy_drive_struct drive_state[N_DRIVE];
414 static struct floppy_write_errors write_errors[N_DRIVE];
415 static struct timer_list motor_off_timer[N_DRIVE];
416 static struct gendisk *disks[N_DRIVE];
417 static struct block_device *opened_bdev[N_DRIVE];
418 static DEFINE_MUTEX(open_lock);
419 static struct floppy_raw_cmd *raw_cmd, default_raw_cmd;
420 static int fdc_queue;
421
422 /*
423  * This struct defines the different floppy types.
424  *
425  * Bit 0 of 'stretch' tells if the tracks need to be doubled for some
426  * types (e.g. 360kB diskette in 1.2MB drive, etc.).  Bit 1 of 'stretch'
427  * tells if the disk is in Commodore 1581 format, which means side 0 sectors
428  * are located on side 1 of the disk but with a side 0 ID, and vice-versa.
429  * This is the same as the Sharp MZ-80 5.25" CP/M disk format, except that the
430  * 1581's logical side 0 is on physical side 1, whereas the Sharp's logical
431  * side 0 is on physical side 0 (but with the misnamed sector IDs).
432  * 'stretch' should probably be renamed to something more general, like
433  * 'options'.
434  *
435  * Bits 2 through 9 of 'stretch' tell the number of the first sector.
436  * The LSB (bit 2) is flipped. For most disks, the first sector
437  * is 1 (represented by 0x00<<2).  For some CP/M and music sampler
438  * disks (such as Ensoniq EPS 16plus) it is 0 (represented as 0x01<<2).
439  * For Amstrad CPC disks it is 0xC1 (represented as 0xC0<<2).
440  *
441  * Other parameters should be self-explanatory (see also setfdprm(8)).
442  */
443 /*
444             Size
445              |  Sectors per track
446              |  | Head
447              |  | |  Tracks
448              |  | |  | Stretch
449              |  | |  | |  Gap 1 size
450              |  | |  | |    |  Data rate, | 0x40 for perp
451              |  | |  | |    |    |  Spec1 (stepping rate, head unload
452              |  | |  | |    |    |    |    /fmt gap (gap2) */
453 static struct floppy_struct floppy_type[32] = {
454         {    0, 0,0, 0,0,0x00,0x00,0x00,0x00,NULL    }, /*  0 no testing    */
455         {  720, 9,2,40,0,0x2A,0x02,0xDF,0x50,"d360"  }, /*  1 360KB PC      */
456         { 2400,15,2,80,0,0x1B,0x00,0xDF,0x54,"h1200" }, /*  2 1.2MB AT      */
457         {  720, 9,1,80,0,0x2A,0x02,0xDF,0x50,"D360"  }, /*  3 360KB SS 3.5" */
458         { 1440, 9,2,80,0,0x2A,0x02,0xDF,0x50,"D720"  }, /*  4 720KB 3.5"    */
459         {  720, 9,2,40,1,0x23,0x01,0xDF,0x50,"h360"  }, /*  5 360KB AT      */
460         { 1440, 9,2,80,0,0x23,0x01,0xDF,0x50,"h720"  }, /*  6 720KB AT      */
461         { 2880,18,2,80,0,0x1B,0x00,0xCF,0x6C,"H1440" }, /*  7 1.44MB 3.5"   */
462         { 5760,36,2,80,0,0x1B,0x43,0xAF,0x54,"E2880" }, /*  8 2.88MB 3.5"   */
463         { 6240,39,2,80,0,0x1B,0x43,0xAF,0x28,"E3120" }, /*  9 3.12MB 3.5"   */
464
465         { 2880,18,2,80,0,0x25,0x00,0xDF,0x02,"h1440" }, /* 10 1.44MB 5.25"  */
466         { 3360,21,2,80,0,0x1C,0x00,0xCF,0x0C,"H1680" }, /* 11 1.68MB 3.5"   */
467         {  820,10,2,41,1,0x25,0x01,0xDF,0x2E,"h410"  }, /* 12 410KB 5.25"   */
468         { 1640,10,2,82,0,0x25,0x02,0xDF,0x2E,"H820"  }, /* 13 820KB 3.5"    */
469         { 2952,18,2,82,0,0x25,0x00,0xDF,0x02,"h1476" }, /* 14 1.48MB 5.25"  */
470         { 3444,21,2,82,0,0x25,0x00,0xDF,0x0C,"H1722" }, /* 15 1.72MB 3.5"   */
471         {  840,10,2,42,1,0x25,0x01,0xDF,0x2E,"h420"  }, /* 16 420KB 5.25"   */
472         { 1660,10,2,83,0,0x25,0x02,0xDF,0x2E,"H830"  }, /* 17 830KB 3.5"    */
473         { 2988,18,2,83,0,0x25,0x00,0xDF,0x02,"h1494" }, /* 18 1.49MB 5.25"  */
474         { 3486,21,2,83,0,0x25,0x00,0xDF,0x0C,"H1743" }, /* 19 1.74 MB 3.5"  */
475
476         { 1760,11,2,80,0,0x1C,0x09,0xCF,0x00,"h880"  }, /* 20 880KB 5.25"   */
477         { 2080,13,2,80,0,0x1C,0x01,0xCF,0x00,"D1040" }, /* 21 1.04MB 3.5"   */
478         { 2240,14,2,80,0,0x1C,0x19,0xCF,0x00,"D1120" }, /* 22 1.12MB 3.5"   */
479         { 3200,20,2,80,0,0x1C,0x20,0xCF,0x2C,"h1600" }, /* 23 1.6MB 5.25"   */
480         { 3520,22,2,80,0,0x1C,0x08,0xCF,0x2e,"H1760" }, /* 24 1.76MB 3.5"   */
481         { 3840,24,2,80,0,0x1C,0x20,0xCF,0x00,"H1920" }, /* 25 1.92MB 3.5"   */
482         { 6400,40,2,80,0,0x25,0x5B,0xCF,0x00,"E3200" }, /* 26 3.20MB 3.5"   */
483         { 7040,44,2,80,0,0x25,0x5B,0xCF,0x00,"E3520" }, /* 27 3.52MB 3.5"   */
484         { 7680,48,2,80,0,0x25,0x63,0xCF,0x00,"E3840" }, /* 28 3.84MB 3.5"   */
485         { 3680,23,2,80,0,0x1C,0x10,0xCF,0x00,"H1840" }, /* 29 1.84MB 3.5"   */
486
487         { 1600,10,2,80,0,0x25,0x02,0xDF,0x2E,"D800"  }, /* 30 800KB 3.5"    */
488         { 3200,20,2,80,0,0x1C,0x00,0xCF,0x2C,"H1600" }, /* 31 1.6MB 3.5"    */
489 };
490
491 #define SECTSIZE (_FD_SECTSIZE(*floppy))
492
493 /* Auto-detection: Disk type used until the next media change occurs. */
494 static struct floppy_struct *current_type[N_DRIVE];
495
496 /*
497  * User-provided type information. current_type points to
498  * the respective entry of this array.
499  */
500 static struct floppy_struct user_params[N_DRIVE];
501
502 static sector_t floppy_sizes[256];
503
504 static char floppy_device_name[] = "floppy";
505
506 /*
507  * The driver is trying to determine the correct media format
508  * while probing is set. rw_interrupt() clears it after a
509  * successful access.
510  */
511 static int probing;
512
513 /* Synchronization of FDC access. */
514 #define FD_COMMAND_NONE         -1
515 #define FD_COMMAND_ERROR        2
516 #define FD_COMMAND_OKAY         3
517
518 static volatile int command_status = FD_COMMAND_NONE;
519 static unsigned long fdc_busy;
520 static DECLARE_WAIT_QUEUE_HEAD(fdc_wait);
521 static DECLARE_WAIT_QUEUE_HEAD(command_done);
522
523 /* Errors during formatting are counted here. */
524 static int format_errors;
525
526 /* Format request descriptor. */
527 static struct format_descr format_req;
528
529 /*
530  * Rate is 0 for 500kb/s, 1 for 300kbps, 2 for 250kbps
531  * Spec1 is 0xSH, where S is stepping rate (F=1ms, E=2ms, D=3ms etc),
532  * H is head unload time (1=16ms, 2=32ms, etc)
533  */
534
535 /*
536  * Track buffer
537  * Because these are written to by the DMA controller, they must
538  * not contain a 64k byte boundary crossing, or data will be
539  * corrupted/lost.
540  */
541 static char *floppy_track_buffer;
542 static int max_buffer_sectors;
543
544 static int *errors;
545 typedef void (*done_f)(int);
546 static const struct cont_t {
547         void (*interrupt)(void);
548                                 /* this is called after the interrupt of the
549                                  * main command */
550         void (*redo)(void);     /* this is called to retry the operation */
551         void (*error)(void);    /* this is called to tally an error */
552         done_f done;            /* this is called to say if the operation has
553                                  * succeeded/failed */
554 } *cont;
555
556 static void floppy_ready(void);
557 static void floppy_start(void);
558 static void process_fd_request(void);
559 static void recalibrate_floppy(void);
560 static void floppy_shutdown(struct work_struct *);
561
562 static int floppy_request_regions(int);
563 static void floppy_release_regions(int);
564 static int floppy_grab_irq_and_dma(void);
565 static void floppy_release_irq_and_dma(void);
566
567 /*
568  * The "reset" variable should be tested whenever an interrupt is scheduled,
569  * after the commands have been sent. This is to ensure that the driver doesn't
570  * get wedged when the interrupt doesn't come because of a failed command.
571  * reset doesn't need to be tested before sending commands, because
572  * output_byte is automatically disabled when reset is set.
573  */
574 static void reset_fdc(void);
575
576 /*
577  * These are global variables, as that's the easiest way to give
578  * information to interrupts. They are the data used for the current
579  * request.
580  */
581 #define NO_TRACK        -1
582 #define NEED_1_RECAL    -2
583 #define NEED_2_RECAL    -3
584
585 static atomic_t usage_count = ATOMIC_INIT(0);
586
587 /* buffer related variables */
588 static int buffer_track = -1;
589 static int buffer_drive = -1;
590 static int buffer_min = -1;
591 static int buffer_max = -1;
592
593 /* fdc related variables, should end up in a struct */
594 static struct floppy_fdc_state fdc_state[N_FDC];
595 static int fdc;                 /* current fdc */
596
597 static struct workqueue_struct *floppy_wq;
598
599 static struct floppy_struct *_floppy = floppy_type;
600 static unsigned char current_drive;
601 static long current_count_sectors;
602 static unsigned char fsector_t; /* sector in track */
603 static unsigned char in_sector_offset;  /* offset within physical sector,
604                                          * expressed in units of 512 bytes */
605
606 static inline bool drive_no_geom(int drive)
607 {
608         return !current_type[drive] && !ITYPE(UDRS->fd_device);
609 }
610
611 #ifndef fd_eject
612 static inline int fd_eject(int drive)
613 {
614         return -EINVAL;
615 }
616 #endif
617
618 /*
619  * Debugging
620  * =========
621  */
622 #ifdef DEBUGT
623 static long unsigned debugtimer;
624
625 static inline void set_debugt(void)
626 {
627         debugtimer = jiffies;
628 }
629
630 static inline void debugt(const char *func, const char *msg)
631 {
632         if (DP->flags & DEBUGT)
633                 pr_info("%s:%s dtime=%lu\n", func, msg, jiffies - debugtimer);
634 }
635 #else
636 static inline void set_debugt(void) { }
637 static inline void debugt(const char *func, const char *msg) { }
638 #endif /* DEBUGT */
639
640
641 static DECLARE_DELAYED_WORK(fd_timeout, floppy_shutdown);
642 static const char *timeout_message;
643
644 static void is_alive(const char *func, const char *message)
645 {
646         /* this routine checks whether the floppy driver is "alive" */
647         if (test_bit(0, &fdc_busy) && command_status < 2 &&
648             !delayed_work_pending(&fd_timeout)) {
649                 DPRINT("%s: timeout handler died.  %s\n", func, message);
650         }
651 }
652
653 static void (*do_floppy)(void) = NULL;
654
655 #define OLOGSIZE 20
656
657 static void (*lasthandler)(void);
658 static unsigned long interruptjiffies;
659 static unsigned long resultjiffies;
660 static int resultsize;
661 static unsigned long lastredo;
662
663 static struct output_log {
664         unsigned char data;
665         unsigned char status;
666         unsigned long jiffies;
667 } output_log[OLOGSIZE];
668
669 static int output_log_pos;
670
671 #define current_reqD -1
672 #define MAXTIMEOUT -2
673
674 static void __reschedule_timeout(int drive, const char *message)
675 {
676         unsigned long delay;
677
678         if (drive == current_reqD)
679                 drive = current_drive;
680
681         if (drive < 0 || drive >= N_DRIVE) {
682                 delay = 20UL * HZ;
683                 drive = 0;
684         } else
685                 delay = UDP->timeout;
686
687         mod_delayed_work(floppy_wq, &fd_timeout, delay);
688         if (UDP->flags & FD_DEBUG)
689                 DPRINT("reschedule timeout %s\n", message);
690         timeout_message = message;
691 }
692
693 static void reschedule_timeout(int drive, const char *message)
694 {
695         unsigned long flags;
696
697         spin_lock_irqsave(&floppy_lock, flags);
698         __reschedule_timeout(drive, message);
699         spin_unlock_irqrestore(&floppy_lock, flags);
700 }
701
702 #define INFBOUND(a, b) (a) = max_t(int, a, b)
703 #define SUPBOUND(a, b) (a) = min_t(int, a, b)
704
705 /*
706  * Bottom half floppy driver.
707  * ==========================
708  *
709  * This part of the file contains the code talking directly to the hardware,
710  * and also the main service loop (seek-configure-spinup-command)
711  */
712
713 /*
714  * disk change.
715  * This routine is responsible for maintaining the FD_DISK_CHANGE flag,
716  * and the last_checked date.
717  *
718  * last_checked is the date of the last check which showed 'no disk change'
719  * FD_DISK_CHANGE is set under two conditions:
720  * 1. The floppy has been changed after some i/o to that floppy already
721  *    took place.
722  * 2. No floppy disk is in the drive. This is done in order to ensure that
723  *    requests are quickly flushed in case there is no disk in the drive. It
724  *    follows that FD_DISK_CHANGE can only be cleared if there is a disk in
725  *    the drive.
726  *
727  * For 1., maxblock is observed. Maxblock is 0 if no i/o has taken place yet.
728  * For 2., FD_DISK_NEWCHANGE is watched. FD_DISK_NEWCHANGE is cleared on
729  *  each seek. If a disk is present, the disk change line should also be
730  *  cleared on each seek. Thus, if FD_DISK_NEWCHANGE is clear, but the disk
731  *  change line is set, this means either that no disk is in the drive, or
732  *  that it has been removed since the last seek.
733  *
734  * This means that we really have a third possibility too:
735  *  The floppy has been changed after the last seek.
736  */
737
738 static int disk_change(int drive)
739 {
740         int fdc = FDC(drive);
741
742         if (time_before(jiffies, UDRS->select_date + UDP->select_delay))
743                 DPRINT("WARNING disk change called early\n");
744         if (!(FDCS->dor & (0x10 << UNIT(drive))) ||
745             (FDCS->dor & 3) != UNIT(drive) || fdc != FDC(drive)) {
746                 DPRINT("probing disk change on unselected drive\n");
747                 DPRINT("drive=%d fdc=%d dor=%x\n", drive, FDC(drive),
748                        (unsigned int)FDCS->dor);
749         }
750
751         debug_dcl(UDP->flags,
752                   "checking disk change line for drive %d\n", drive);
753         debug_dcl(UDP->flags, "jiffies=%lu\n", jiffies);
754         debug_dcl(UDP->flags, "disk change line=%x\n", fd_inb(FD_DIR) & 0x80);
755         debug_dcl(UDP->flags, "flags=%lx\n", UDRS->flags);
756
757         if (UDP->flags & FD_BROKEN_DCL)
758                 return test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
759         if ((fd_inb(FD_DIR) ^ UDP->flags) & 0x80) {
760                 set_bit(FD_VERIFY_BIT, &UDRS->flags);
761                                         /* verify write protection */
762
763                 if (UDRS->maxblock)     /* mark it changed */
764                         set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
765
766                 /* invalidate its geometry */
767                 if (UDRS->keep_data >= 0) {
768                         if ((UDP->flags & FTD_MSG) &&
769                             current_type[drive] != NULL)
770                                 DPRINT("Disk type is undefined after disk change\n");
771                         current_type[drive] = NULL;
772                         floppy_sizes[TOMINOR(drive)] = MAX_DISK_SIZE << 1;
773                 }
774
775                 return 1;
776         } else {
777                 UDRS->last_checked = jiffies;
778                 clear_bit(FD_DISK_NEWCHANGE_BIT, &UDRS->flags);
779         }
780         return 0;
781 }
782
783 static inline int is_selected(int dor, int unit)
784 {
785         return ((dor & (0x10 << unit)) && (dor & 3) == unit);
786 }
787
788 static bool is_ready_state(int status)
789 {
790         int state = status & (STATUS_READY | STATUS_DIR | STATUS_DMA);
791         return state == STATUS_READY;
792 }
793
794 static int set_dor(int fdc, char mask, char data)
795 {
796         unsigned char unit;
797         unsigned char drive;
798         unsigned char newdor;
799         unsigned char olddor;
800
801         if (FDCS->address == -1)
802                 return -1;
803
804         olddor = FDCS->dor;
805         newdor = (olddor & mask) | data;
806         if (newdor != olddor) {
807                 unit = olddor & 0x3;
808                 if (is_selected(olddor, unit) && !is_selected(newdor, unit)) {
809                         drive = REVDRIVE(fdc, unit);
810                         debug_dcl(UDP->flags,
811                                   "calling disk change from set_dor\n");
812                         disk_change(drive);
813                 }
814                 FDCS->dor = newdor;
815                 fd_outb(newdor, FD_DOR);
816
817                 unit = newdor & 0x3;
818                 if (!is_selected(olddor, unit) && is_selected(newdor, unit)) {
819                         drive = REVDRIVE(fdc, unit);
820                         UDRS->select_date = jiffies;
821                 }
822         }
823         return olddor;
824 }
825
826 static void twaddle(void)
827 {
828         if (DP->select_delay)
829                 return;
830         fd_outb(FDCS->dor & ~(0x10 << UNIT(current_drive)), FD_DOR);
831         fd_outb(FDCS->dor, FD_DOR);
832         DRS->select_date = jiffies;
833 }
834
835 /*
836  * Reset all driver information about the current fdc.
837  * This is needed after a reset, and after a raw command.
838  */
839 static void reset_fdc_info(int mode)
840 {
841         int drive;
842
843         FDCS->spec1 = FDCS->spec2 = -1;
844         FDCS->need_configure = 1;
845         FDCS->perp_mode = 1;
846         FDCS->rawcmd = 0;
847         for (drive = 0; drive < N_DRIVE; drive++)
848                 if (FDC(drive) == fdc && (mode || UDRS->track != NEED_1_RECAL))
849                         UDRS->track = NEED_2_RECAL;
850 }
851
852 /* selects the fdc and drive, and enables the fdc's input/dma. */
853 static void set_fdc(int drive)
854 {
855         if (drive >= 0 && drive < N_DRIVE) {
856                 fdc = FDC(drive);
857                 current_drive = drive;
858         }
859         if (fdc != 1 && fdc != 0) {
860                 pr_info("bad fdc value\n");
861                 return;
862         }
863         set_dor(fdc, ~0, 8);
864 #if N_FDC > 1
865         set_dor(1 - fdc, ~8, 0);
866 #endif
867         if (FDCS->rawcmd == 2)
868                 reset_fdc_info(1);
869         if (fd_inb(FD_STATUS) != STATUS_READY)
870                 FDCS->reset = 1;
871 }
872
873 /* locks the driver */
874 static int lock_fdc(int drive)
875 {
876         if (WARN(atomic_read(&usage_count) == 0,
877                  "Trying to lock fdc while usage count=0\n"))
878                 return -1;
879
880         if (wait_event_interruptible(fdc_wait, !test_and_set_bit(0, &fdc_busy)))
881                 return -EINTR;
882
883         command_status = FD_COMMAND_NONE;
884
885         reschedule_timeout(drive, "lock fdc");
886         set_fdc(drive);
887         return 0;
888 }
889
890 /* unlocks the driver */
891 static void unlock_fdc(void)
892 {
893         if (!test_bit(0, &fdc_busy))
894                 DPRINT("FDC access conflict!\n");
895
896         raw_cmd = NULL;
897         command_status = FD_COMMAND_NONE;
898         cancel_delayed_work(&fd_timeout);
899         do_floppy = NULL;
900         cont = NULL;
901         clear_bit(0, &fdc_busy);
902         wake_up(&fdc_wait);
903 }
904
905 /* switches the motor off after a given timeout */
906 static void motor_off_callback(struct timer_list *t)
907 {
908         unsigned long nr = t - motor_off_timer;
909         unsigned char mask = ~(0x10 << UNIT(nr));
910
911         if (WARN_ON_ONCE(nr >= N_DRIVE))
912                 return;
913
914         set_dor(FDC(nr), mask, 0);
915 }
916
917 /* schedules motor off */
918 static void floppy_off(unsigned int drive)
919 {
920         unsigned long volatile delta;
921         int fdc = FDC(drive);
922
923         if (!(FDCS->dor & (0x10 << UNIT(drive))))
924                 return;
925
926         del_timer(motor_off_timer + drive);
927
928         /* make spindle stop in a position which minimizes spinup time
929          * next time */
930         if (UDP->rps) {
931                 delta = jiffies - UDRS->first_read_date + HZ -
932                     UDP->spindown_offset;
933                 delta = ((delta * UDP->rps) % HZ) / UDP->rps;
934                 motor_off_timer[drive].expires =
935                     jiffies + UDP->spindown - delta;
936         }
937         add_timer(motor_off_timer + drive);
938 }
939
940 /*
941  * cycle through all N_DRIVE floppy drives, for disk change testing.
942  * stopping at current drive. This is done before any long operation, to
943  * be sure to have up to date disk change information.
944  */
945 static void scandrives(void)
946 {
947         int i;
948         int drive;
949         int saved_drive;
950
951         if (DP->select_delay)
952                 return;
953
954         saved_drive = current_drive;
955         for (i = 0; i < N_DRIVE; i++) {
956                 drive = (saved_drive + i + 1) % N_DRIVE;
957                 if (UDRS->fd_ref == 0 || UDP->select_delay != 0)
958                         continue;       /* skip closed drives */
959                 set_fdc(drive);
960                 if (!(set_dor(fdc, ~3, UNIT(drive) | (0x10 << UNIT(drive))) &
961                       (0x10 << UNIT(drive))))
962                         /* switch the motor off again, if it was off to
963                          * begin with */
964                         set_dor(fdc, ~(0x10 << UNIT(drive)), 0);
965         }
966         set_fdc(saved_drive);
967 }
968
969 static void empty(void)
970 {
971 }
972
973 static void (*floppy_work_fn)(void);
974
975 static void floppy_work_workfn(struct work_struct *work)
976 {
977         floppy_work_fn();
978 }
979
980 static DECLARE_WORK(floppy_work, floppy_work_workfn);
981
982 static void schedule_bh(void (*handler)(void))
983 {
984         WARN_ON(work_pending(&floppy_work));
985
986         floppy_work_fn = handler;
987         queue_work(floppy_wq, &floppy_work);
988 }
989
990 static void (*fd_timer_fn)(void) = NULL;
991
992 static void fd_timer_workfn(struct work_struct *work)
993 {
994         fd_timer_fn();
995 }
996
997 static DECLARE_DELAYED_WORK(fd_timer, fd_timer_workfn);
998
999 static void cancel_activity(void)
1000 {
1001         do_floppy = NULL;
1002         cancel_delayed_work_sync(&fd_timer);
1003         cancel_work_sync(&floppy_work);
1004 }
1005
1006 /* this function makes sure that the disk stays in the drive during the
1007  * transfer */
1008 static void fd_watchdog(void)
1009 {
1010         debug_dcl(DP->flags, "calling disk change from watchdog\n");
1011
1012         if (disk_change(current_drive)) {
1013                 DPRINT("disk removed during i/o\n");
1014                 cancel_activity();
1015                 cont->done(0);
1016                 reset_fdc();
1017         } else {
1018                 cancel_delayed_work(&fd_timer);
1019                 fd_timer_fn = fd_watchdog;
1020                 queue_delayed_work(floppy_wq, &fd_timer, HZ / 10);
1021         }
1022 }
1023
1024 static void main_command_interrupt(void)
1025 {
1026         cancel_delayed_work(&fd_timer);
1027         cont->interrupt();
1028 }
1029
1030 /* waits for a delay (spinup or select) to pass */
1031 static int fd_wait_for_completion(unsigned long expires,
1032                                   void (*function)(void))
1033 {
1034         if (FDCS->reset) {
1035                 reset_fdc();    /* do the reset during sleep to win time
1036                                  * if we don't need to sleep, it's a good
1037                                  * occasion anyways */
1038                 return 1;
1039         }
1040
1041         if (time_before(jiffies, expires)) {
1042                 cancel_delayed_work(&fd_timer);
1043                 fd_timer_fn = function;
1044                 queue_delayed_work(floppy_wq, &fd_timer, expires - jiffies);
1045                 return 1;
1046         }
1047         return 0;
1048 }
1049
1050 static void setup_DMA(void)
1051 {
1052         unsigned long f;
1053
1054         if (raw_cmd->length == 0) {
1055                 int i;
1056
1057                 pr_info("zero dma transfer size:");
1058                 for (i = 0; i < raw_cmd->cmd_count; i++)
1059                         pr_cont("%x,", raw_cmd->cmd[i]);
1060                 pr_cont("\n");
1061                 cont->done(0);
1062                 FDCS->reset = 1;
1063                 return;
1064         }
1065         if (((unsigned long)raw_cmd->kernel_data) % 512) {
1066                 pr_info("non aligned address: %p\n", raw_cmd->kernel_data);
1067                 cont->done(0);
1068                 FDCS->reset = 1;
1069                 return;
1070         }
1071         f = claim_dma_lock();
1072         fd_disable_dma();
1073 #ifdef fd_dma_setup
1074         if (fd_dma_setup(raw_cmd->kernel_data, raw_cmd->length,
1075                          (raw_cmd->flags & FD_RAW_READ) ?
1076                          DMA_MODE_READ : DMA_MODE_WRITE, FDCS->address) < 0) {
1077                 release_dma_lock(f);
1078                 cont->done(0);
1079                 FDCS->reset = 1;
1080                 return;
1081         }
1082         release_dma_lock(f);
1083 #else
1084         fd_clear_dma_ff();
1085         fd_cacheflush(raw_cmd->kernel_data, raw_cmd->length);
1086         fd_set_dma_mode((raw_cmd->flags & FD_RAW_READ) ?
1087                         DMA_MODE_READ : DMA_MODE_WRITE);
1088         fd_set_dma_addr(raw_cmd->kernel_data);
1089         fd_set_dma_count(raw_cmd->length);
1090         virtual_dma_port = FDCS->address;
1091         fd_enable_dma();
1092         release_dma_lock(f);
1093 #endif
1094 }
1095
1096 static void show_floppy(void);
1097
1098 /* waits until the fdc becomes ready */
1099 static int wait_til_ready(void)
1100 {
1101         int status;
1102         int counter;
1103
1104         if (FDCS->reset)
1105                 return -1;
1106         for (counter = 0; counter < 10000; counter++) {
1107                 status = fd_inb(FD_STATUS);
1108                 if (status & STATUS_READY)
1109                         return status;
1110         }
1111         if (initialized) {
1112                 DPRINT("Getstatus times out (%x) on fdc %d\n", status, fdc);
1113                 show_floppy();
1114         }
1115         FDCS->reset = 1;
1116         return -1;
1117 }
1118
1119 /* sends a command byte to the fdc */
1120 static int output_byte(char byte)
1121 {
1122         int status = wait_til_ready();
1123
1124         if (status < 0)
1125                 return -1;
1126
1127         if (is_ready_state(status)) {
1128                 fd_outb(byte, FD_DATA);
1129                 output_log[output_log_pos].data = byte;
1130                 output_log[output_log_pos].status = status;
1131                 output_log[output_log_pos].jiffies = jiffies;
1132                 output_log_pos = (output_log_pos + 1) % OLOGSIZE;
1133                 return 0;
1134         }
1135         FDCS->reset = 1;
1136         if (initialized) {
1137                 DPRINT("Unable to send byte %x to FDC. Fdc=%x Status=%x\n",
1138                        byte, fdc, status);
1139                 show_floppy();
1140         }
1141         return -1;
1142 }
1143
1144 /* gets the response from the fdc */
1145 static int result(void)
1146 {
1147         int i;
1148         int status = 0;
1149
1150         for (i = 0; i < MAX_REPLIES; i++) {
1151                 status = wait_til_ready();
1152                 if (status < 0)
1153                         break;
1154                 status &= STATUS_DIR | STATUS_READY | STATUS_BUSY | STATUS_DMA;
1155                 if ((status & ~STATUS_BUSY) == STATUS_READY) {
1156                         resultjiffies = jiffies;
1157                         resultsize = i;
1158                         return i;
1159                 }
1160                 if (status == (STATUS_DIR | STATUS_READY | STATUS_BUSY))
1161                         reply_buffer[i] = fd_inb(FD_DATA);
1162                 else
1163                         break;
1164         }
1165         if (initialized) {
1166                 DPRINT("get result error. Fdc=%d Last status=%x Read bytes=%d\n",
1167                        fdc, status, i);
1168                 show_floppy();
1169         }
1170         FDCS->reset = 1;
1171         return -1;
1172 }
1173
1174 #define MORE_OUTPUT -2
1175 /* does the fdc need more output? */
1176 static int need_more_output(void)
1177 {
1178         int status = wait_til_ready();
1179
1180         if (status < 0)
1181                 return -1;
1182
1183         if (is_ready_state(status))
1184                 return MORE_OUTPUT;
1185
1186         return result();
1187 }
1188
1189 /* Set perpendicular mode as required, based on data rate, if supported.
1190  * 82077 Now tested. 1Mbps data rate only possible with 82077-1.
1191  */
1192 static void perpendicular_mode(void)
1193 {
1194         unsigned char perp_mode;
1195
1196         if (raw_cmd->rate & 0x40) {
1197                 switch (raw_cmd->rate & 3) {
1198                 case 0:
1199                         perp_mode = 2;
1200                         break;
1201                 case 3:
1202                         perp_mode = 3;
1203                         break;
1204                 default:
1205                         DPRINT("Invalid data rate for perpendicular mode!\n");
1206                         cont->done(0);
1207                         FDCS->reset = 1;
1208                                         /*
1209                                          * convenient way to return to
1210                                          * redo without too much hassle
1211                                          * (deep stack et al.)
1212                                          */
1213                         return;
1214                 }
1215         } else
1216                 perp_mode = 0;
1217
1218         if (FDCS->perp_mode == perp_mode)
1219                 return;
1220         if (FDCS->version >= FDC_82077_ORIG) {
1221                 output_byte(FD_PERPENDICULAR);
1222                 output_byte(perp_mode);
1223                 FDCS->perp_mode = perp_mode;
1224         } else if (perp_mode) {
1225                 DPRINT("perpendicular mode not supported by this FDC.\n");
1226         }
1227 }                               /* perpendicular_mode */
1228
1229 static int fifo_depth = 0xa;
1230 static int no_fifo;
1231
1232 static int fdc_configure(void)
1233 {
1234         /* Turn on FIFO */
1235         output_byte(FD_CONFIGURE);
1236         if (need_more_output() != MORE_OUTPUT)
1237                 return 0;
1238         output_byte(0);
1239         output_byte(0x10 | (no_fifo & 0x20) | (fifo_depth & 0xf));
1240         output_byte(0);         /* pre-compensation from track
1241                                    0 upwards */
1242         return 1;
1243 }
1244
1245 #define NOMINAL_DTR 500
1246
1247 /* Issue a "SPECIFY" command to set the step rate time, head unload time,
1248  * head load time, and DMA disable flag to values needed by floppy.
1249  *
1250  * The value "dtr" is the data transfer rate in Kbps.  It is needed
1251  * to account for the data rate-based scaling done by the 82072 and 82077
1252  * FDC types.  This parameter is ignored for other types of FDCs (i.e.
1253  * 8272a).
1254  *
1255  * Note that changing the data transfer rate has a (probably deleterious)
1256  * effect on the parameters subject to scaling for 82072/82077 FDCs, so
1257  * fdc_specify is called again after each data transfer rate
1258  * change.
1259  *
1260  * srt: 1000 to 16000 in microseconds
1261  * hut: 16 to 240 milliseconds
1262  * hlt: 2 to 254 milliseconds
1263  *
1264  * These values are rounded up to the next highest available delay time.
1265  */
1266 static void fdc_specify(void)
1267 {
1268         unsigned char spec1;
1269         unsigned char spec2;
1270         unsigned long srt;
1271         unsigned long hlt;
1272         unsigned long hut;
1273         unsigned long dtr = NOMINAL_DTR;
1274         unsigned long scale_dtr = NOMINAL_DTR;
1275         int hlt_max_code = 0x7f;
1276         int hut_max_code = 0xf;
1277
1278         if (FDCS->need_configure && FDCS->version >= FDC_82072A) {
1279                 fdc_configure();
1280                 FDCS->need_configure = 0;
1281         }
1282
1283         switch (raw_cmd->rate & 0x03) {
1284         case 3:
1285                 dtr = 1000;
1286                 break;
1287         case 1:
1288                 dtr = 300;
1289                 if (FDCS->version >= FDC_82078) {
1290                         /* chose the default rate table, not the one
1291                          * where 1 = 2 Mbps */
1292                         output_byte(FD_DRIVESPEC);
1293                         if (need_more_output() == MORE_OUTPUT) {
1294                                 output_byte(UNIT(current_drive));
1295                                 output_byte(0xc0);
1296                         }
1297                 }
1298                 break;
1299         case 2:
1300                 dtr = 250;
1301                 break;
1302         }
1303
1304         if (FDCS->version >= FDC_82072) {
1305                 scale_dtr = dtr;
1306                 hlt_max_code = 0x00;    /* 0==256msec*dtr0/dtr (not linear!) */
1307                 hut_max_code = 0x0;     /* 0==256msec*dtr0/dtr (not linear!) */
1308         }
1309
1310         /* Convert step rate from microseconds to milliseconds and 4 bits */
1311         srt = 16 - DIV_ROUND_UP(DP->srt * scale_dtr / 1000, NOMINAL_DTR);
1312         if (slow_floppy)
1313                 srt = srt / 4;
1314
1315         SUPBOUND(srt, 0xf);
1316         INFBOUND(srt, 0);
1317
1318         hlt = DIV_ROUND_UP(DP->hlt * scale_dtr / 2, NOMINAL_DTR);
1319         if (hlt < 0x01)
1320                 hlt = 0x01;
1321         else if (hlt > 0x7f)
1322                 hlt = hlt_max_code;
1323
1324         hut = DIV_ROUND_UP(DP->hut * scale_dtr / 16, NOMINAL_DTR);
1325         if (hut < 0x1)
1326                 hut = 0x1;
1327         else if (hut > 0xf)
1328                 hut = hut_max_code;
1329
1330         spec1 = (srt << 4) | hut;
1331         spec2 = (hlt << 1) | (use_virtual_dma & 1);
1332
1333         /* If these parameters did not change, just return with success */
1334         if (FDCS->spec1 != spec1 || FDCS->spec2 != spec2) {
1335                 /* Go ahead and set spec1 and spec2 */
1336                 output_byte(FD_SPECIFY);
1337                 output_byte(FDCS->spec1 = spec1);
1338                 output_byte(FDCS->spec2 = spec2);
1339         }
1340 }                               /* fdc_specify */
1341
1342 /* Set the FDC's data transfer rate on behalf of the specified drive.
1343  * NOTE: with 82072/82077 FDCs, changing the data rate requires a reissue
1344  * of the specify command (i.e. using the fdc_specify function).
1345  */
1346 static int fdc_dtr(void)
1347 {
1348         /* If data rate not already set to desired value, set it. */
1349         if ((raw_cmd->rate & 3) == FDCS->dtr)
1350                 return 0;
1351
1352         /* Set dtr */
1353         fd_outb(raw_cmd->rate & 3, FD_DCR);
1354
1355         /* TODO: some FDC/drive combinations (C&T 82C711 with TEAC 1.2MB)
1356          * need a stabilization period of several milliseconds to be
1357          * enforced after data rate changes before R/W operations.
1358          * Pause 5 msec to avoid trouble. (Needs to be 2 jiffies)
1359          */
1360         FDCS->dtr = raw_cmd->rate & 3;
1361         return fd_wait_for_completion(jiffies + 2UL * HZ / 100, floppy_ready);
1362 }                               /* fdc_dtr */
1363
1364 static void tell_sector(void)
1365 {
1366         pr_cont(": track %d, head %d, sector %d, size %d",
1367                 R_TRACK, R_HEAD, R_SECTOR, R_SIZECODE);
1368 }                               /* tell_sector */
1369
1370 static void print_errors(void)
1371 {
1372         DPRINT("");
1373         if (ST0 & ST0_ECE) {
1374                 pr_cont("Recalibrate failed!");
1375         } else if (ST2 & ST2_CRC) {
1376                 pr_cont("data CRC error");
1377                 tell_sector();
1378         } else if (ST1 & ST1_CRC) {
1379                 pr_cont("CRC error");
1380                 tell_sector();
1381         } else if ((ST1 & (ST1_MAM | ST1_ND)) ||
1382                    (ST2 & ST2_MAM)) {
1383                 if (!probing) {
1384                         pr_cont("sector not found");
1385                         tell_sector();
1386                 } else
1387                         pr_cont("probe failed...");
1388         } else if (ST2 & ST2_WC) {      /* seek error */
1389                 pr_cont("wrong cylinder");
1390         } else if (ST2 & ST2_BC) {      /* cylinder marked as bad */
1391                 pr_cont("bad cylinder");
1392         } else {
1393                 pr_cont("unknown error. ST[0..2] are: 0x%x 0x%x 0x%x",
1394                         ST0, ST1, ST2);
1395                 tell_sector();
1396         }
1397         pr_cont("\n");
1398 }
1399
1400 /*
1401  * OK, this error interpreting routine is called after a
1402  * DMA read/write has succeeded
1403  * or failed, so we check the results, and copy any buffers.
1404  * hhb: Added better error reporting.
1405  * ak: Made this into a separate routine.
1406  */
1407 static int interpret_errors(void)
1408 {
1409         char bad;
1410
1411         if (inr != 7) {
1412                 DPRINT("-- FDC reply error\n");
1413                 FDCS->reset = 1;
1414                 return 1;
1415         }
1416
1417         /* check IC to find cause of interrupt */
1418         switch (ST0 & ST0_INTR) {
1419         case 0x40:              /* error occurred during command execution */
1420                 if (ST1 & ST1_EOC)
1421                         return 0;       /* occurs with pseudo-DMA */
1422                 bad = 1;
1423                 if (ST1 & ST1_WP) {
1424                         DPRINT("Drive is write protected\n");
1425                         clear_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1426                         cont->done(0);
1427                         bad = 2;
1428                 } else if (ST1 & ST1_ND) {
1429                         set_bit(FD_NEED_TWADDLE_BIT, &DRS->flags);
1430                 } else if (ST1 & ST1_OR) {
1431                         if (DP->flags & FTD_MSG)
1432                                 DPRINT("Over/Underrun - retrying\n");
1433                         bad = 0;
1434                 } else if (*errors >= DP->max_errors.reporting) {
1435                         print_errors();
1436                 }
1437                 if (ST2 & ST2_WC || ST2 & ST2_BC)
1438                         /* wrong cylinder => recal */
1439                         DRS->track = NEED_2_RECAL;
1440                 return bad;
1441         case 0x80:              /* invalid command given */
1442                 DPRINT("Invalid FDC command given!\n");
1443                 cont->done(0);
1444                 return 2;
1445         case 0xc0:
1446                 DPRINT("Abnormal termination caused by polling\n");
1447                 cont->error();
1448                 return 2;
1449         default:                /* (0) Normal command termination */
1450                 return 0;
1451         }
1452 }
1453
1454 /*
1455  * This routine is called when everything should be correctly set up
1456  * for the transfer (i.e. floppy motor is on, the correct floppy is
1457  * selected, and the head is sitting on the right track).
1458  */
1459 static void setup_rw_floppy(void)
1460 {
1461         int i;
1462         int r;
1463         int flags;
1464         int dflags;
1465         unsigned long ready_date;
1466         void (*function)(void);
1467
1468         flags = raw_cmd->flags;
1469         if (flags & (FD_RAW_READ | FD_RAW_WRITE))
1470                 flags |= FD_RAW_INTR;
1471
1472         if ((flags & FD_RAW_SPIN) && !(flags & FD_RAW_NO_MOTOR)) {
1473                 ready_date = DRS->spinup_date + DP->spinup;
1474                 /* If spinup will take a long time, rerun scandrives
1475                  * again just before spinup completion. Beware that
1476                  * after scandrives, we must again wait for selection.
1477                  */
1478                 if (time_after(ready_date, jiffies + DP->select_delay)) {
1479                         ready_date -= DP->select_delay;
1480                         function = floppy_start;
1481                 } else
1482                         function = setup_rw_floppy;
1483
1484                 /* wait until the floppy is spinning fast enough */
1485                 if (fd_wait_for_completion(ready_date, function))
1486                         return;
1487         }
1488         dflags = DRS->flags;
1489
1490         if ((flags & FD_RAW_READ) || (flags & FD_RAW_WRITE))
1491                 setup_DMA();
1492
1493         if (flags & FD_RAW_INTR)
1494                 do_floppy = main_command_interrupt;
1495
1496         r = 0;
1497         for (i = 0; i < raw_cmd->cmd_count; i++)
1498                 r |= output_byte(raw_cmd->cmd[i]);
1499
1500         debugt(__func__, "rw_command");
1501
1502         if (r) {
1503                 cont->error();
1504                 reset_fdc();
1505                 return;
1506         }
1507
1508         if (!(flags & FD_RAW_INTR)) {
1509                 inr = result();
1510                 cont->interrupt();
1511         } else if (flags & FD_RAW_NEED_DISK)
1512                 fd_watchdog();
1513 }
1514
1515 static int blind_seek;
1516
1517 /*
1518  * This is the routine called after every seek (or recalibrate) interrupt
1519  * from the floppy controller.
1520  */
1521 static void seek_interrupt(void)
1522 {
1523         debugt(__func__, "");
1524         if (inr != 2 || (ST0 & 0xF8) != 0x20) {
1525                 DPRINT("seek failed\n");
1526                 DRS->track = NEED_2_RECAL;
1527                 cont->error();
1528                 cont->redo();
1529                 return;
1530         }
1531         if (DRS->track >= 0 && DRS->track != ST1 && !blind_seek) {
1532                 debug_dcl(DP->flags,
1533                           "clearing NEWCHANGE flag because of effective seek\n");
1534                 debug_dcl(DP->flags, "jiffies=%lu\n", jiffies);
1535                 clear_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1536                                         /* effective seek */
1537                 DRS->select_date = jiffies;
1538         }
1539         DRS->track = ST1;
1540         floppy_ready();
1541 }
1542
1543 static void check_wp(void)
1544 {
1545         if (test_bit(FD_VERIFY_BIT, &DRS->flags)) {
1546                                         /* check write protection */
1547                 output_byte(FD_GETSTATUS);
1548                 output_byte(UNIT(current_drive));
1549                 if (result() != 1) {
1550                         FDCS->reset = 1;
1551                         return;
1552                 }
1553                 clear_bit(FD_VERIFY_BIT, &DRS->flags);
1554                 clear_bit(FD_NEED_TWADDLE_BIT, &DRS->flags);
1555                 debug_dcl(DP->flags,
1556                           "checking whether disk is write protected\n");
1557                 debug_dcl(DP->flags, "wp=%x\n", ST3 & 0x40);
1558                 if (!(ST3 & 0x40))
1559                         set_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1560                 else
1561                         clear_bit(FD_DISK_WRITABLE_BIT, &DRS->flags);
1562         }
1563 }
1564
1565 static void seek_floppy(void)
1566 {
1567         int track;
1568
1569         blind_seek = 0;
1570
1571         debug_dcl(DP->flags, "calling disk change from %s\n", __func__);
1572
1573         if (!test_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags) &&
1574             disk_change(current_drive) && (raw_cmd->flags & FD_RAW_NEED_DISK)) {
1575                 /* the media changed flag should be cleared after the seek.
1576                  * If it isn't, this means that there is really no disk in
1577                  * the drive.
1578                  */
1579                 set_bit(FD_DISK_CHANGED_BIT, &DRS->flags);
1580                 cont->done(0);
1581                 cont->redo();
1582                 return;
1583         }
1584         if (DRS->track <= NEED_1_RECAL) {
1585                 recalibrate_floppy();
1586                 return;
1587         } else if (test_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags) &&
1588                    (raw_cmd->flags & FD_RAW_NEED_DISK) &&
1589                    (DRS->track <= NO_TRACK || DRS->track == raw_cmd->track)) {
1590                 /* we seek to clear the media-changed condition. Does anybody
1591                  * know a more elegant way, which works on all drives? */
1592                 if (raw_cmd->track)
1593                         track = raw_cmd->track - 1;
1594                 else {
1595                         if (DP->flags & FD_SILENT_DCL_CLEAR) {
1596                                 set_dor(fdc, ~(0x10 << UNIT(current_drive)), 0);
1597                                 blind_seek = 1;
1598                                 raw_cmd->flags |= FD_RAW_NEED_SEEK;
1599                         }
1600                         track = 1;
1601                 }
1602         } else {
1603                 check_wp();
1604                 if (raw_cmd->track != DRS->track &&
1605                     (raw_cmd->flags & FD_RAW_NEED_SEEK))
1606                         track = raw_cmd->track;
1607                 else {
1608                         setup_rw_floppy();
1609                         return;
1610                 }
1611         }
1612
1613         do_floppy = seek_interrupt;
1614         output_byte(FD_SEEK);
1615         output_byte(UNIT(current_drive));
1616         if (output_byte(track) < 0) {
1617                 reset_fdc();
1618                 return;
1619         }
1620         debugt(__func__, "");
1621 }
1622
1623 static void recal_interrupt(void)
1624 {
1625         debugt(__func__, "");
1626         if (inr != 2)
1627                 FDCS->reset = 1;
1628         else if (ST0 & ST0_ECE) {
1629                 switch (DRS->track) {
1630                 case NEED_1_RECAL:
1631                         debugt(__func__, "need 1 recal");
1632                         /* after a second recalibrate, we still haven't
1633                          * reached track 0. Probably no drive. Raise an
1634                          * error, as failing immediately might upset
1635                          * computers possessed by the Devil :-) */
1636                         cont->error();
1637                         cont->redo();
1638                         return;
1639                 case NEED_2_RECAL:
1640                         debugt(__func__, "need 2 recal");
1641                         /* If we already did a recalibrate,
1642                          * and we are not at track 0, this
1643                          * means we have moved. (The only way
1644                          * not to move at recalibration is to
1645                          * be already at track 0.) Clear the
1646                          * new change flag */
1647                         debug_dcl(DP->flags,
1648                                   "clearing NEWCHANGE flag because of second recalibrate\n");
1649
1650                         clear_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1651                         DRS->select_date = jiffies;
1652                         /* fall through */
1653                 default:
1654                         debugt(__func__, "default");
1655                         /* Recalibrate moves the head by at
1656                          * most 80 steps. If after one
1657                          * recalibrate we don't have reached
1658                          * track 0, this might mean that we
1659                          * started beyond track 80.  Try
1660                          * again.  */
1661                         DRS->track = NEED_1_RECAL;
1662                         break;
1663                 }
1664         } else
1665                 DRS->track = ST1;
1666         floppy_ready();
1667 }
1668
1669 static void print_result(char *message, int inr)
1670 {
1671         int i;
1672
1673         DPRINT("%s ", message);
1674         if (inr >= 0)
1675                 for (i = 0; i < inr; i++)
1676                         pr_cont("repl[%d]=%x ", i, reply_buffer[i]);
1677         pr_cont("\n");
1678 }
1679
1680 /* interrupt handler. Note that this can be called externally on the Sparc */
1681 irqreturn_t floppy_interrupt(int irq, void *dev_id)
1682 {
1683         int do_print;
1684         unsigned long f;
1685         void (*handler)(void) = do_floppy;
1686
1687         lasthandler = handler;
1688         interruptjiffies = jiffies;
1689
1690         f = claim_dma_lock();
1691         fd_disable_dma();
1692         release_dma_lock(f);
1693
1694         do_floppy = NULL;
1695         if (fdc >= N_FDC || FDCS->address == -1) {
1696                 /* we don't even know which FDC is the culprit */
1697                 pr_info("DOR0=%x\n", fdc_state[0].dor);
1698                 pr_info("floppy interrupt on bizarre fdc %d\n", fdc);
1699                 pr_info("handler=%pf\n", handler);
1700                 is_alive(__func__, "bizarre fdc");
1701                 return IRQ_NONE;
1702         }
1703
1704         FDCS->reset = 0;
1705         /* We have to clear the reset flag here, because apparently on boxes
1706          * with level triggered interrupts (PS/2, Sparc, ...), it is needed to
1707          * emit SENSEI's to clear the interrupt line. And FDCS->reset blocks the
1708          * emission of the SENSEI's.
1709          * It is OK to emit floppy commands because we are in an interrupt
1710          * handler here, and thus we have to fear no interference of other
1711          * activity.
1712          */
1713
1714         do_print = !handler && print_unex && initialized;
1715
1716         inr = result();
1717         if (do_print)
1718                 print_result("unexpected interrupt", inr);
1719         if (inr == 0) {
1720                 int max_sensei = 4;
1721                 do {
1722                         output_byte(FD_SENSEI);
1723                         inr = result();
1724                         if (do_print)
1725                                 print_result("sensei", inr);
1726                         max_sensei--;
1727                 } while ((ST0 & 0x83) != UNIT(current_drive) &&
1728                          inr == 2 && max_sensei);
1729         }
1730         if (!handler) {
1731                 FDCS->reset = 1;
1732                 return IRQ_NONE;
1733         }
1734         schedule_bh(handler);
1735         is_alive(__func__, "normal interrupt end");
1736
1737         /* FIXME! Was it really for us? */
1738         return IRQ_HANDLED;
1739 }
1740
1741 static void recalibrate_floppy(void)
1742 {
1743         debugt(__func__, "");
1744         do_floppy = recal_interrupt;
1745         output_byte(FD_RECALIBRATE);
1746         if (output_byte(UNIT(current_drive)) < 0)
1747                 reset_fdc();
1748 }
1749
1750 /*
1751  * Must do 4 FD_SENSEIs after reset because of ``drive polling''.
1752  */
1753 static void reset_interrupt(void)
1754 {
1755         debugt(__func__, "");
1756         result();               /* get the status ready for set_fdc */
1757         if (FDCS->reset) {
1758                 pr_info("reset set in interrupt, calling %pf\n", cont->error);
1759                 cont->error();  /* a reset just after a reset. BAD! */
1760         }
1761         cont->redo();
1762 }
1763
1764 /*
1765  * reset is done by pulling bit 2 of DOR low for a while (old FDCs),
1766  * or by setting the self clearing bit 7 of STATUS (newer FDCs)
1767  */
1768 static void reset_fdc(void)
1769 {
1770         unsigned long flags;
1771
1772         do_floppy = reset_interrupt;
1773         FDCS->reset = 0;
1774         reset_fdc_info(0);
1775
1776         /* Pseudo-DMA may intercept 'reset finished' interrupt.  */
1777         /* Irrelevant for systems with true DMA (i386).          */
1778
1779         flags = claim_dma_lock();
1780         fd_disable_dma();
1781         release_dma_lock(flags);
1782
1783         if (FDCS->version >= FDC_82072A)
1784                 fd_outb(0x80 | (FDCS->dtr & 3), FD_STATUS);
1785         else {
1786                 fd_outb(FDCS->dor & ~0x04, FD_DOR);
1787                 udelay(FD_RESET_DELAY);
1788                 fd_outb(FDCS->dor, FD_DOR);
1789         }
1790 }
1791
1792 static void show_floppy(void)
1793 {
1794         int i;
1795
1796         pr_info("\n");
1797         pr_info("floppy driver state\n");
1798         pr_info("-------------------\n");
1799         pr_info("now=%lu last interrupt=%lu diff=%lu last called handler=%pf\n",
1800                 jiffies, interruptjiffies, jiffies - interruptjiffies,
1801                 lasthandler);
1802
1803         pr_info("timeout_message=%s\n", timeout_message);
1804         pr_info("last output bytes:\n");
1805         for (i = 0; i < OLOGSIZE; i++)
1806                 pr_info("%2x %2x %lu\n",
1807                         output_log[(i + output_log_pos) % OLOGSIZE].data,
1808                         output_log[(i + output_log_pos) % OLOGSIZE].status,
1809                         output_log[(i + output_log_pos) % OLOGSIZE].jiffies);
1810         pr_info("last result at %lu\n", resultjiffies);
1811         pr_info("last redo_fd_request at %lu\n", lastredo);
1812         print_hex_dump(KERN_INFO, "", DUMP_PREFIX_NONE, 16, 1,
1813                        reply_buffer, resultsize, true);
1814
1815         pr_info("status=%x\n", fd_inb(FD_STATUS));
1816         pr_info("fdc_busy=%lu\n", fdc_busy);
1817         if (do_floppy)
1818                 pr_info("do_floppy=%pf\n", do_floppy);
1819         if (work_pending(&floppy_work))
1820                 pr_info("floppy_work.func=%pf\n", floppy_work.func);
1821         if (delayed_work_pending(&fd_timer))
1822                 pr_info("delayed work.function=%p expires=%ld\n",
1823                        fd_timer.work.func,
1824                        fd_timer.timer.expires - jiffies);
1825         if (delayed_work_pending(&fd_timeout))
1826                 pr_info("timer_function=%p expires=%ld\n",
1827                        fd_timeout.work.func,
1828                        fd_timeout.timer.expires - jiffies);
1829
1830         pr_info("cont=%p\n", cont);
1831         pr_info("current_req=%p\n", current_req);
1832         pr_info("command_status=%d\n", command_status);
1833         pr_info("\n");
1834 }
1835
1836 static void floppy_shutdown(struct work_struct *arg)
1837 {
1838         unsigned long flags;
1839
1840         if (initialized)
1841                 show_floppy();
1842         cancel_activity();
1843
1844         flags = claim_dma_lock();
1845         fd_disable_dma();
1846         release_dma_lock(flags);
1847
1848         /* avoid dma going to a random drive after shutdown */
1849
1850         if (initialized)
1851                 DPRINT("floppy timeout called\n");
1852         FDCS->reset = 1;
1853         if (cont) {
1854                 cont->done(0);
1855                 cont->redo();   /* this will recall reset when needed */
1856         } else {
1857                 pr_info("no cont in shutdown!\n");
1858                 process_fd_request();
1859         }
1860         is_alive(__func__, "");
1861 }
1862
1863 /* start motor, check media-changed condition and write protection */
1864 static int start_motor(void (*function)(void))
1865 {
1866         int mask;
1867         int data;
1868
1869         mask = 0xfc;
1870         data = UNIT(current_drive);
1871         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR)) {
1872                 if (!(FDCS->dor & (0x10 << UNIT(current_drive)))) {
1873                         set_debugt();
1874                         /* no read since this drive is running */
1875                         DRS->first_read_date = 0;
1876                         /* note motor start time if motor is not yet running */
1877                         DRS->spinup_date = jiffies;
1878                         data |= (0x10 << UNIT(current_drive));
1879                 }
1880         } else if (FDCS->dor & (0x10 << UNIT(current_drive)))
1881                 mask &= ~(0x10 << UNIT(current_drive));
1882
1883         /* starts motor and selects floppy */
1884         del_timer(motor_off_timer + current_drive);
1885         set_dor(fdc, mask, data);
1886
1887         /* wait_for_completion also schedules reset if needed. */
1888         return fd_wait_for_completion(DRS->select_date + DP->select_delay,
1889                                       function);
1890 }
1891
1892 static void floppy_ready(void)
1893 {
1894         if (FDCS->reset) {
1895                 reset_fdc();
1896                 return;
1897         }
1898         if (start_motor(floppy_ready))
1899                 return;
1900         if (fdc_dtr())
1901                 return;
1902
1903         debug_dcl(DP->flags, "calling disk change from floppy_ready\n");
1904         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR) &&
1905             disk_change(current_drive) && !DP->select_delay)
1906                 twaddle();      /* this clears the dcl on certain
1907                                  * drive/controller combinations */
1908
1909 #ifdef fd_chose_dma_mode
1910         if ((raw_cmd->flags & FD_RAW_READ) || (raw_cmd->flags & FD_RAW_WRITE)) {
1911                 unsigned long flags = claim_dma_lock();
1912                 fd_chose_dma_mode(raw_cmd->kernel_data, raw_cmd->length);
1913                 release_dma_lock(flags);
1914         }
1915 #endif
1916
1917         if (raw_cmd->flags & (FD_RAW_NEED_SEEK | FD_RAW_NEED_DISK)) {
1918                 perpendicular_mode();
1919                 fdc_specify();  /* must be done here because of hut, hlt ... */
1920                 seek_floppy();
1921         } else {
1922                 if ((raw_cmd->flags & FD_RAW_READ) ||
1923                     (raw_cmd->flags & FD_RAW_WRITE))
1924                         fdc_specify();
1925                 setup_rw_floppy();
1926         }
1927 }
1928
1929 static void floppy_start(void)
1930 {
1931         reschedule_timeout(current_reqD, "floppy start");
1932
1933         scandrives();
1934         debug_dcl(DP->flags, "setting NEWCHANGE in floppy_start\n");
1935         set_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
1936         floppy_ready();
1937 }
1938
1939 /*
1940  * ========================================================================
1941  * here ends the bottom half. Exported routines are:
1942  * floppy_start, floppy_off, floppy_ready, lock_fdc, unlock_fdc, set_fdc,
1943  * start_motor, reset_fdc, reset_fdc_info, interpret_errors.
1944  * Initialization also uses output_byte, result, set_dor, floppy_interrupt
1945  * and set_dor.
1946  * ========================================================================
1947  */
1948 /*
1949  * General purpose continuations.
1950  * ==============================
1951  */
1952
1953 static void do_wakeup(void)
1954 {
1955         reschedule_timeout(MAXTIMEOUT, "do wakeup");
1956         cont = NULL;
1957         command_status += 2;
1958         wake_up(&command_done);
1959 }
1960
1961 static const struct cont_t wakeup_cont = {
1962         .interrupt      = empty,
1963         .redo           = do_wakeup,
1964         .error          = empty,
1965         .done           = (done_f)empty
1966 };
1967
1968 static const struct cont_t intr_cont = {
1969         .interrupt      = empty,
1970         .redo           = process_fd_request,
1971         .error          = empty,
1972         .done           = (done_f)empty
1973 };
1974
1975 static int wait_til_done(void (*handler)(void), bool interruptible)
1976 {
1977         int ret;
1978
1979         schedule_bh(handler);
1980
1981         if (interruptible)
1982                 wait_event_interruptible(command_done, command_status >= 2);
1983         else
1984                 wait_event(command_done, command_status >= 2);
1985
1986         if (command_status < 2) {
1987                 cancel_activity();
1988                 cont = &intr_cont;
1989                 reset_fdc();
1990                 return -EINTR;
1991         }
1992
1993         if (FDCS->reset)
1994                 command_status = FD_COMMAND_ERROR;
1995         if (command_status == FD_COMMAND_OKAY)
1996                 ret = 0;
1997         else
1998                 ret = -EIO;
1999         command_status = FD_COMMAND_NONE;
2000         return ret;
2001 }
2002
2003 static void generic_done(int result)
2004 {
2005         command_status = result;
2006         cont = &wakeup_cont;
2007 }
2008
2009 static void generic_success(void)
2010 {
2011         cont->done(1);
2012 }
2013
2014 static void generic_failure(void)
2015 {
2016         cont->done(0);
2017 }
2018
2019 static void success_and_wakeup(void)
2020 {
2021         generic_success();
2022         cont->redo();
2023 }
2024
2025 /*
2026  * formatting and rw support.
2027  * ==========================
2028  */
2029
2030 static int next_valid_format(void)
2031 {
2032         int probed_format;
2033
2034         probed_format = DRS->probed_format;
2035         while (1) {
2036                 if (probed_format >= 8 || !DP->autodetect[probed_format]) {
2037                         DRS->probed_format = 0;
2038                         return 1;
2039                 }
2040                 if (floppy_type[DP->autodetect[probed_format]].sect) {
2041                         DRS->probed_format = probed_format;
2042                         return 0;
2043                 }
2044                 probed_format++;
2045         }
2046 }
2047
2048 static void bad_flp_intr(void)
2049 {
2050         int err_count;
2051
2052         if (probing) {
2053                 DRS->probed_format++;
2054                 if (!next_valid_format())
2055                         return;
2056         }
2057         err_count = ++(*errors);
2058         INFBOUND(DRWE->badness, err_count);
2059         if (err_count > DP->max_errors.abort)
2060                 cont->done(0);
2061         if (err_count > DP->max_errors.reset)
2062                 FDCS->reset = 1;
2063         else if (err_count > DP->max_errors.recal)
2064                 DRS->track = NEED_2_RECAL;
2065 }
2066
2067 static void set_floppy(int drive)
2068 {
2069         int type = ITYPE(UDRS->fd_device);
2070
2071         if (type)
2072                 _floppy = floppy_type + type;
2073         else
2074                 _floppy = current_type[drive];
2075 }
2076
2077 /*
2078  * formatting support.
2079  * ===================
2080  */
2081 static void format_interrupt(void)
2082 {
2083         switch (interpret_errors()) {
2084         case 1:
2085                 cont->error();
2086         case 2:
2087                 break;
2088         case 0:
2089                 cont->done(1);
2090         }
2091         cont->redo();
2092 }
2093
2094 #define FM_MODE(x, y) ((y) & ~(((x)->rate & 0x80) >> 1))
2095 #define CT(x) ((x) | 0xc0)
2096
2097 static void setup_format_params(int track)
2098 {
2099         int n;
2100         int il;
2101         int count;
2102         int head_shift;
2103         int track_shift;
2104         struct fparm {
2105                 unsigned char track, head, sect, size;
2106         } *here = (struct fparm *)floppy_track_buffer;
2107
2108         raw_cmd = &default_raw_cmd;
2109         raw_cmd->track = track;
2110
2111         raw_cmd->flags = (FD_RAW_WRITE | FD_RAW_INTR | FD_RAW_SPIN |
2112                           FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK);
2113         raw_cmd->rate = _floppy->rate & 0x43;
2114         raw_cmd->cmd_count = NR_F;
2115         COMMAND = FM_MODE(_floppy, FD_FORMAT);
2116         DR_SELECT = UNIT(current_drive) + PH_HEAD(_floppy, format_req.head);
2117         F_SIZECODE = FD_SIZECODE(_floppy);
2118         F_SECT_PER_TRACK = _floppy->sect << 2 >> F_SIZECODE;
2119         F_GAP = _floppy->fmt_gap;
2120         F_FILL = FD_FILL_BYTE;
2121
2122         raw_cmd->kernel_data = floppy_track_buffer;
2123         raw_cmd->length = 4 * F_SECT_PER_TRACK;
2124
2125         /* allow for about 30ms for data transport per track */
2126         head_shift = (F_SECT_PER_TRACK + 5) / 6;
2127
2128         /* a ``cylinder'' is two tracks plus a little stepping time */
2129         track_shift = 2 * head_shift + 3;
2130
2131         /* position of logical sector 1 on this track */
2132         n = (track_shift * format_req.track + head_shift * format_req.head)
2133             % F_SECT_PER_TRACK;
2134
2135         /* determine interleave */
2136         il = 1;
2137         if (_floppy->fmt_gap < 0x22)
2138                 il++;
2139
2140         /* initialize field */
2141         for (count = 0; count < F_SECT_PER_TRACK; ++count) {
2142                 here[count].track = format_req.track;
2143                 here[count].head = format_req.head;
2144                 here[count].sect = 0;
2145                 here[count].size = F_SIZECODE;
2146         }
2147         /* place logical sectors */
2148         for (count = 1; count <= F_SECT_PER_TRACK; ++count) {
2149                 here[n].sect = count;
2150                 n = (n + il) % F_SECT_PER_TRACK;
2151                 if (here[n].sect) {     /* sector busy, find next free sector */
2152                         ++n;
2153                         if (n >= F_SECT_PER_TRACK) {
2154                                 n -= F_SECT_PER_TRACK;
2155                                 while (here[n].sect)
2156                                         ++n;
2157                         }
2158                 }
2159         }
2160         if (_floppy->stretch & FD_SECTBASEMASK) {
2161                 for (count = 0; count < F_SECT_PER_TRACK; count++)
2162                         here[count].sect += FD_SECTBASE(_floppy) - 1;
2163         }
2164 }
2165
2166 static void redo_format(void)
2167 {
2168         buffer_track = -1;
2169         setup_format_params(format_req.track << STRETCH(_floppy));
2170         floppy_start();
2171         debugt(__func__, "queue format request");
2172 }
2173
2174 static const struct cont_t format_cont = {
2175         .interrupt      = format_interrupt,
2176         .redo           = redo_format,
2177         .error          = bad_flp_intr,
2178         .done           = generic_done
2179 };
2180
2181 static int do_format(int drive, struct format_descr *tmp_format_req)
2182 {
2183         int ret;
2184
2185         if (lock_fdc(drive))
2186                 return -EINTR;
2187
2188         set_floppy(drive);
2189         if (!_floppy ||
2190             _floppy->track > DP->tracks ||
2191             tmp_format_req->track >= _floppy->track ||
2192             tmp_format_req->head >= _floppy->head ||
2193             (_floppy->sect << 2) % (1 << FD_SIZECODE(_floppy)) ||
2194             !_floppy->fmt_gap) {
2195                 process_fd_request();
2196                 return -EINVAL;
2197         }
2198         format_req = *tmp_format_req;
2199         format_errors = 0;
2200         cont = &format_cont;
2201         errors = &format_errors;
2202         ret = wait_til_done(redo_format, true);
2203         if (ret == -EINTR)
2204                 return -EINTR;
2205         process_fd_request();
2206         return ret;
2207 }
2208
2209 /*
2210  * Buffer read/write and support
2211  * =============================
2212  */
2213
2214 static void floppy_end_request(struct request *req, blk_status_t error)
2215 {
2216         unsigned int nr_sectors = current_count_sectors;
2217         unsigned int drive = (unsigned long)req->rq_disk->private_data;
2218
2219         /* current_count_sectors can be zero if transfer failed */
2220         if (error)
2221                 nr_sectors = blk_rq_cur_sectors(req);
2222         if (__blk_end_request(req, error, nr_sectors << 9))
2223                 return;
2224
2225         /* We're done with the request */
2226         floppy_off(drive);
2227         current_req = NULL;
2228 }
2229
2230 /* new request_done. Can handle physical sectors which are smaller than a
2231  * logical buffer */
2232 static void request_done(int uptodate)
2233 {
2234         struct request *req = current_req;
2235         struct request_queue *q;
2236         unsigned long flags;
2237         int block;
2238         char msg[sizeof("request done ") + sizeof(int) * 3];
2239
2240         probing = 0;
2241         snprintf(msg, sizeof(msg), "request done %d", uptodate);
2242         reschedule_timeout(MAXTIMEOUT, msg);
2243
2244         if (!req) {
2245                 pr_info("floppy.c: no request in request_done\n");
2246                 return;
2247         }
2248
2249         q = req->q;
2250
2251         if (uptodate) {
2252                 /* maintain values for invalidation on geometry
2253                  * change */
2254                 block = current_count_sectors + blk_rq_pos(req);
2255                 INFBOUND(DRS->maxblock, block);
2256                 if (block > _floppy->sect)
2257                         DRS->maxtrack = 1;
2258
2259                 /* unlock chained buffers */
2260                 spin_lock_irqsave(q->queue_lock, flags);
2261                 floppy_end_request(req, 0);
2262                 spin_unlock_irqrestore(q->queue_lock, flags);
2263         } else {
2264                 if (rq_data_dir(req) == WRITE) {
2265                         /* record write error information */
2266                         DRWE->write_errors++;
2267                         if (DRWE->write_errors == 1) {
2268                                 DRWE->first_error_sector = blk_rq_pos(req);
2269                                 DRWE->first_error_generation = DRS->generation;
2270                         }
2271                         DRWE->last_error_sector = blk_rq_pos(req);
2272                         DRWE->last_error_generation = DRS->generation;
2273                 }
2274                 spin_lock_irqsave(q->queue_lock, flags);
2275                 floppy_end_request(req, BLK_STS_IOERR);
2276                 spin_unlock_irqrestore(q->queue_lock, flags);
2277         }
2278 }
2279
2280 /* Interrupt handler evaluating the result of the r/w operation */
2281 static void rw_interrupt(void)
2282 {
2283         int eoc;
2284         int ssize;
2285         int heads;
2286         int nr_sectors;
2287
2288         if (R_HEAD >= 2) {
2289                 /* some Toshiba floppy controllers occasionnally seem to
2290                  * return bogus interrupts after read/write operations, which
2291                  * can be recognized by a bad head number (>= 2) */
2292                 return;
2293         }
2294
2295         if (!DRS->first_read_date)
2296                 DRS->first_read_date = jiffies;
2297
2298         nr_sectors = 0;
2299         ssize = DIV_ROUND_UP(1 << SIZECODE, 4);
2300
2301         if (ST1 & ST1_EOC)
2302                 eoc = 1;
2303         else
2304                 eoc = 0;
2305
2306         if (COMMAND & 0x80)
2307                 heads = 2;
2308         else
2309                 heads = 1;
2310
2311         nr_sectors = (((R_TRACK - TRACK) * heads +
2312                        R_HEAD - HEAD) * SECT_PER_TRACK +
2313                       R_SECTOR - SECTOR + eoc) << SIZECODE >> 2;
2314
2315         if (nr_sectors / ssize >
2316             DIV_ROUND_UP(in_sector_offset + current_count_sectors, ssize)) {
2317                 DPRINT("long rw: %x instead of %lx\n",
2318                        nr_sectors, current_count_sectors);
2319                 pr_info("rs=%d s=%d\n", R_SECTOR, SECTOR);
2320                 pr_info("rh=%d h=%d\n", R_HEAD, HEAD);
2321                 pr_info("rt=%d t=%d\n", R_TRACK, TRACK);
2322                 pr_info("heads=%d eoc=%d\n", heads, eoc);
2323                 pr_info("spt=%d st=%d ss=%d\n",
2324                         SECT_PER_TRACK, fsector_t, ssize);
2325                 pr_info("in_sector_offset=%d\n", in_sector_offset);
2326         }
2327
2328         nr_sectors -= in_sector_offset;
2329         INFBOUND(nr_sectors, 0);
2330         SUPBOUND(current_count_sectors, nr_sectors);
2331
2332         switch (interpret_errors()) {
2333         case 2:
2334                 cont->redo();
2335                 return;
2336         case 1:
2337                 if (!current_count_sectors) {
2338                         cont->error();
2339                         cont->redo();
2340                         return;
2341                 }
2342                 break;
2343         case 0:
2344                 if (!current_count_sectors) {
2345                         cont->redo();
2346                         return;
2347                 }
2348                 current_type[current_drive] = _floppy;
2349                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2350                 break;
2351         }
2352
2353         if (probing) {
2354                 if (DP->flags & FTD_MSG)
2355                         DPRINT("Auto-detected floppy type %s in fd%d\n",
2356                                _floppy->name, current_drive);
2357                 current_type[current_drive] = _floppy;
2358                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2359                 probing = 0;
2360         }
2361
2362         if (CT(COMMAND) != FD_READ ||
2363             raw_cmd->kernel_data == bio_data(current_req->bio)) {
2364                 /* transfer directly from buffer */
2365                 cont->done(1);
2366         } else if (CT(COMMAND) == FD_READ) {
2367                 buffer_track = raw_cmd->track;
2368                 buffer_drive = current_drive;
2369                 INFBOUND(buffer_max, nr_sectors + fsector_t);
2370         }
2371         cont->redo();
2372 }
2373
2374 /* Compute maximal contiguous buffer size. */
2375 static int buffer_chain_size(void)
2376 {
2377         struct bio_vec bv;
2378         int size;
2379         struct req_iterator iter;
2380         char *base;
2381
2382         base = bio_data(current_req->bio);
2383         size = 0;
2384
2385         rq_for_each_segment(bv, current_req, iter) {
2386                 if (page_address(bv.bv_page) + bv.bv_offset != base + size)
2387                         break;
2388
2389                 size += bv.bv_len;
2390         }
2391
2392         return size >> 9;
2393 }
2394
2395 /* Compute the maximal transfer size */
2396 static int transfer_size(int ssize, int max_sector, int max_size)
2397 {
2398         SUPBOUND(max_sector, fsector_t + max_size);
2399
2400         /* alignment */
2401         max_sector -= (max_sector % _floppy->sect) % ssize;
2402
2403         /* transfer size, beginning not aligned */
2404         current_count_sectors = max_sector - fsector_t;
2405
2406         return max_sector;
2407 }
2408
2409 /*
2410  * Move data from/to the track buffer to/from the buffer cache.
2411  */
2412 static void copy_buffer(int ssize, int max_sector, int max_sector_2)
2413 {
2414         int remaining;          /* number of transferred 512-byte sectors */
2415         struct bio_vec bv;
2416         char *buffer;
2417         char *dma_buffer;
2418         int size;
2419         struct req_iterator iter;
2420
2421         max_sector = transfer_size(ssize,
2422                                    min(max_sector, max_sector_2),
2423                                    blk_rq_sectors(current_req));
2424
2425         if (current_count_sectors <= 0 && CT(COMMAND) == FD_WRITE &&
2426             buffer_max > fsector_t + blk_rq_sectors(current_req))
2427                 current_count_sectors = min_t(int, buffer_max - fsector_t,
2428                                               blk_rq_sectors(current_req));
2429
2430         remaining = current_count_sectors << 9;
2431         if (remaining > blk_rq_bytes(current_req) && CT(COMMAND) == FD_WRITE) {
2432                 DPRINT("in copy buffer\n");
2433                 pr_info("current_count_sectors=%ld\n", current_count_sectors);
2434                 pr_info("remaining=%d\n", remaining >> 9);
2435                 pr_info("current_req->nr_sectors=%u\n",
2436                         blk_rq_sectors(current_req));
2437                 pr_info("current_req->current_nr_sectors=%u\n",
2438                         blk_rq_cur_sectors(current_req));
2439                 pr_info("max_sector=%d\n", max_sector);
2440                 pr_info("ssize=%d\n", ssize);
2441         }
2442
2443         buffer_max = max(max_sector, buffer_max);
2444
2445         dma_buffer = floppy_track_buffer + ((fsector_t - buffer_min) << 9);
2446
2447         size = blk_rq_cur_bytes(current_req);
2448
2449         rq_for_each_segment(bv, current_req, iter) {
2450                 if (!remaining)
2451                         break;
2452
2453                 size = bv.bv_len;
2454                 SUPBOUND(size, remaining);
2455
2456                 buffer = page_address(bv.bv_page) + bv.bv_offset;
2457                 if (dma_buffer + size >
2458                     floppy_track_buffer + (max_buffer_sectors << 10) ||
2459                     dma_buffer < floppy_track_buffer) {
2460                         DPRINT("buffer overrun in copy buffer %d\n",
2461                                (int)((floppy_track_buffer - dma_buffer) >> 9));
2462                         pr_info("fsector_t=%d buffer_min=%d\n",
2463                                 fsector_t, buffer_min);
2464                         pr_info("current_count_sectors=%ld\n",
2465                                 current_count_sectors);
2466                         if (CT(COMMAND) == FD_READ)
2467                                 pr_info("read\n");
2468                         if (CT(COMMAND) == FD_WRITE)
2469                                 pr_info("write\n");
2470                         break;
2471                 }
2472                 if (((unsigned long)buffer) % 512)
2473                         DPRINT("%p buffer not aligned\n", buffer);
2474
2475                 if (CT(COMMAND) == FD_READ)
2476                         memcpy(buffer, dma_buffer, size);
2477                 else
2478                         memcpy(dma_buffer, buffer, size);
2479
2480                 remaining -= size;
2481                 dma_buffer += size;
2482         }
2483         if (remaining) {
2484                 if (remaining > 0)
2485                         max_sector -= remaining >> 9;
2486                 DPRINT("weirdness: remaining %d\n", remaining >> 9);
2487         }
2488 }
2489
2490 /* work around a bug in pseudo DMA
2491  * (on some FDCs) pseudo DMA does not stop when the CPU stops
2492  * sending data.  Hence we need a different way to signal the
2493  * transfer length:  We use SECT_PER_TRACK.  Unfortunately, this
2494  * does not work with MT, hence we can only transfer one head at
2495  * a time
2496  */
2497 static void virtualdmabug_workaround(void)
2498 {
2499         int hard_sectors;
2500         int end_sector;
2501
2502         if (CT(COMMAND) == FD_WRITE) {
2503                 COMMAND &= ~0x80;       /* switch off multiple track mode */
2504
2505                 hard_sectors = raw_cmd->length >> (7 + SIZECODE);
2506                 end_sector = SECTOR + hard_sectors - 1;
2507                 if (end_sector > SECT_PER_TRACK) {
2508                         pr_info("too many sectors %d > %d\n",
2509                                 end_sector, SECT_PER_TRACK);
2510                         return;
2511                 }
2512                 SECT_PER_TRACK = end_sector;
2513                                         /* make sure SECT_PER_TRACK
2514                                          * points to end of transfer */
2515         }
2516 }
2517
2518 /*
2519  * Formulate a read/write request.
2520  * this routine decides where to load the data (directly to buffer, or to
2521  * tmp floppy area), how much data to load (the size of the buffer, the whole
2522  * track, or a single sector)
2523  * All floppy_track_buffer handling goes in here. If we ever add track buffer
2524  * allocation on the fly, it should be done here. No other part should need
2525  * modification.
2526  */
2527
2528 static int make_raw_rw_request(void)
2529 {
2530         int aligned_sector_t;
2531         int max_sector;
2532         int max_size;
2533         int tracksize;
2534         int ssize;
2535
2536         if (WARN(max_buffer_sectors == 0, "VFS: Block I/O scheduled on unopened device\n"))
2537                 return 0;
2538
2539         set_fdc((long)current_req->rq_disk->private_data);
2540
2541         raw_cmd = &default_raw_cmd;
2542         raw_cmd->flags = FD_RAW_SPIN | FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK;
2543         raw_cmd->cmd_count = NR_RW;
2544         if (rq_data_dir(current_req) == READ) {
2545                 raw_cmd->flags |= FD_RAW_READ;
2546                 COMMAND = FM_MODE(_floppy, FD_READ);
2547         } else if (rq_data_dir(current_req) == WRITE) {
2548                 raw_cmd->flags |= FD_RAW_WRITE;
2549                 COMMAND = FM_MODE(_floppy, FD_WRITE);
2550         } else {
2551                 DPRINT("%s: unknown command\n", __func__);
2552                 return 0;
2553         }
2554
2555         max_sector = _floppy->sect * _floppy->head;
2556
2557         TRACK = (int)blk_rq_pos(current_req) / max_sector;
2558         fsector_t = (int)blk_rq_pos(current_req) % max_sector;
2559         if (_floppy->track && TRACK >= _floppy->track) {
2560                 if (blk_rq_cur_sectors(current_req) & 1) {
2561                         current_count_sectors = 1;
2562                         return 1;
2563                 } else
2564                         return 0;
2565         }
2566         HEAD = fsector_t / _floppy->sect;
2567
2568         if (((_floppy->stretch & (FD_SWAPSIDES | FD_SECTBASEMASK)) ||
2569              test_bit(FD_NEED_TWADDLE_BIT, &DRS->flags)) &&
2570             fsector_t < _floppy->sect)
2571                 max_sector = _floppy->sect;
2572
2573         /* 2M disks have phantom sectors on the first track */
2574         if ((_floppy->rate & FD_2M) && (!TRACK) && (!HEAD)) {
2575                 max_sector = 2 * _floppy->sect / 3;
2576                 if (fsector_t >= max_sector) {
2577                         current_count_sectors =
2578                             min_t(int, _floppy->sect - fsector_t,
2579                                   blk_rq_sectors(current_req));
2580                         return 1;
2581                 }
2582                 SIZECODE = 2;
2583         } else
2584                 SIZECODE = FD_SIZECODE(_floppy);
2585         raw_cmd->rate = _floppy->rate & 0x43;
2586         if ((_floppy->rate & FD_2M) && (TRACK || HEAD) && raw_cmd->rate == 2)
2587                 raw_cmd->rate = 1;
2588
2589         if (SIZECODE)
2590                 SIZECODE2 = 0xff;
2591         else
2592                 SIZECODE2 = 0x80;
2593         raw_cmd->track = TRACK << STRETCH(_floppy);
2594         DR_SELECT = UNIT(current_drive) + PH_HEAD(_floppy, HEAD);
2595         GAP = _floppy->gap;
2596         ssize = DIV_ROUND_UP(1 << SIZECODE, 4);
2597         SECT_PER_TRACK = _floppy->sect << 2 >> SIZECODE;
2598         SECTOR = ((fsector_t % _floppy->sect) << 2 >> SIZECODE) +
2599             FD_SECTBASE(_floppy);
2600
2601         /* tracksize describes the size which can be filled up with sectors
2602          * of size ssize.
2603          */
2604         tracksize = _floppy->sect - _floppy->sect % ssize;
2605         if (tracksize < _floppy->sect) {
2606                 SECT_PER_TRACK++;
2607                 if (tracksize <= fsector_t % _floppy->sect)
2608                         SECTOR--;
2609
2610                 /* if we are beyond tracksize, fill up using smaller sectors */
2611                 while (tracksize <= fsector_t % _floppy->sect) {
2612                         while (tracksize + ssize > _floppy->sect) {
2613                                 SIZECODE--;
2614                                 ssize >>= 1;
2615                         }
2616                         SECTOR++;
2617                         SECT_PER_TRACK++;
2618                         tracksize += ssize;
2619                 }
2620                 max_sector = HEAD * _floppy->sect + tracksize;
2621         } else if (!TRACK && !HEAD && !(_floppy->rate & FD_2M) && probing) {
2622                 max_sector = _floppy->sect;
2623         } else if (!HEAD && CT(COMMAND) == FD_WRITE) {
2624                 /* for virtual DMA bug workaround */
2625                 max_sector = _floppy->sect;
2626         }
2627
2628         in_sector_offset = (fsector_t % _floppy->sect) % ssize;
2629         aligned_sector_t = fsector_t - in_sector_offset;
2630         max_size = blk_rq_sectors(current_req);
2631         if ((raw_cmd->track == buffer_track) &&
2632             (current_drive == buffer_drive) &&
2633             (fsector_t >= buffer_min) && (fsector_t < buffer_max)) {
2634                 /* data already in track buffer */
2635                 if (CT(COMMAND) == FD_READ) {
2636                         copy_buffer(1, max_sector, buffer_max);
2637                         return 1;
2638                 }
2639         } else if (in_sector_offset || blk_rq_sectors(current_req) < ssize) {
2640                 if (CT(COMMAND) == FD_WRITE) {
2641                         unsigned int sectors;
2642
2643                         sectors = fsector_t + blk_rq_sectors(current_req);
2644                         if (sectors > ssize && sectors < ssize + ssize)
2645                                 max_size = ssize + ssize;
2646                         else
2647                                 max_size = ssize;
2648                 }
2649                 raw_cmd->flags &= ~FD_RAW_WRITE;
2650                 raw_cmd->flags |= FD_RAW_READ;
2651                 COMMAND = FM_MODE(_floppy, FD_READ);
2652         } else if ((unsigned long)bio_data(current_req->bio) < MAX_DMA_ADDRESS) {
2653                 unsigned long dma_limit;
2654                 int direct, indirect;
2655
2656                 indirect =
2657                     transfer_size(ssize, max_sector,
2658                                   max_buffer_sectors * 2) - fsector_t;
2659
2660                 /*
2661                  * Do NOT use minimum() here---MAX_DMA_ADDRESS is 64 bits wide
2662                  * on a 64 bit machine!
2663                  */
2664                 max_size = buffer_chain_size();
2665                 dma_limit = (MAX_DMA_ADDRESS -
2666                              ((unsigned long)bio_data(current_req->bio))) >> 9;
2667                 if ((unsigned long)max_size > dma_limit)
2668                         max_size = dma_limit;
2669                 /* 64 kb boundaries */
2670                 if (CROSS_64KB(bio_data(current_req->bio), max_size << 9))
2671                         max_size = (K_64 -
2672                                     ((unsigned long)bio_data(current_req->bio)) %
2673                                     K_64) >> 9;
2674                 direct = transfer_size(ssize, max_sector, max_size) - fsector_t;
2675                 /*
2676                  * We try to read tracks, but if we get too many errors, we
2677                  * go back to reading just one sector at a time.
2678                  *
2679                  * This means we should be able to read a sector even if there
2680                  * are other bad sectors on this track.
2681                  */
2682                 if (!direct ||
2683                     (indirect * 2 > direct * 3 &&
2684                      *errors < DP->max_errors.read_track &&
2685                      ((!probing ||
2686                        (DP->read_track & (1 << DRS->probed_format)))))) {
2687                         max_size = blk_rq_sectors(current_req);
2688                 } else {
2689                         raw_cmd->kernel_data = bio_data(current_req->bio);
2690                         raw_cmd->length = current_count_sectors << 9;
2691                         if (raw_cmd->length == 0) {
2692                                 DPRINT("%s: zero dma transfer attempted\n", __func__);
2693                                 DPRINT("indirect=%d direct=%d fsector_t=%d\n",
2694                                        indirect, direct, fsector_t);
2695                                 return 0;
2696                         }
2697                         virtualdmabug_workaround();
2698                         return 2;
2699                 }
2700         }
2701
2702         if (CT(COMMAND) == FD_READ)
2703                 max_size = max_sector;  /* unbounded */
2704
2705         /* claim buffer track if needed */
2706         if (buffer_track != raw_cmd->track ||   /* bad track */
2707             buffer_drive != current_drive ||    /* bad drive */
2708             fsector_t > buffer_max ||
2709             fsector_t < buffer_min ||
2710             ((CT(COMMAND) == FD_READ ||
2711               (!in_sector_offset && blk_rq_sectors(current_req) >= ssize)) &&
2712              max_sector > 2 * max_buffer_sectors + buffer_min &&
2713              max_size + fsector_t > 2 * max_buffer_sectors + buffer_min)) {
2714                 /* not enough space */
2715                 buffer_track = -1;
2716                 buffer_drive = current_drive;
2717                 buffer_max = buffer_min = aligned_sector_t;
2718         }
2719         raw_cmd->kernel_data = floppy_track_buffer +
2720                 ((aligned_sector_t - buffer_min) << 9);
2721
2722         if (CT(COMMAND) == FD_WRITE) {
2723                 /* copy write buffer to track buffer.
2724                  * if we get here, we know that the write
2725                  * is either aligned or the data already in the buffer
2726                  * (buffer will be overwritten) */
2727                 if (in_sector_offset && buffer_track == -1)
2728                         DPRINT("internal error offset !=0 on write\n");
2729                 buffer_track = raw_cmd->track;
2730                 buffer_drive = current_drive;
2731                 copy_buffer(ssize, max_sector,
2732                             2 * max_buffer_sectors + buffer_min);
2733         } else
2734                 transfer_size(ssize, max_sector,
2735                               2 * max_buffer_sectors + buffer_min -
2736                               aligned_sector_t);
2737
2738         /* round up current_count_sectors to get dma xfer size */
2739         raw_cmd->length = in_sector_offset + current_count_sectors;
2740         raw_cmd->length = ((raw_cmd->length - 1) | (ssize - 1)) + 1;
2741         raw_cmd->length <<= 9;
2742         if ((raw_cmd->length < current_count_sectors << 9) ||
2743             (raw_cmd->kernel_data != bio_data(current_req->bio) &&
2744              CT(COMMAND) == FD_WRITE &&
2745              (aligned_sector_t + (raw_cmd->length >> 9) > buffer_max ||
2746               aligned_sector_t < buffer_min)) ||
2747             raw_cmd->length % (128 << SIZECODE) ||
2748             raw_cmd->length <= 0 || current_count_sectors <= 0) {
2749                 DPRINT("fractionary current count b=%lx s=%lx\n",
2750                        raw_cmd->length, current_count_sectors);
2751                 if (raw_cmd->kernel_data != bio_data(current_req->bio))
2752                         pr_info("addr=%d, length=%ld\n",
2753                                 (int)((raw_cmd->kernel_data -
2754                                        floppy_track_buffer) >> 9),
2755                                 current_count_sectors);
2756                 pr_info("st=%d ast=%d mse=%d msi=%d\n",
2757                         fsector_t, aligned_sector_t, max_sector, max_size);
2758                 pr_info("ssize=%x SIZECODE=%d\n", ssize, SIZECODE);
2759                 pr_info("command=%x SECTOR=%d HEAD=%d, TRACK=%d\n",
2760                         COMMAND, SECTOR, HEAD, TRACK);
2761                 pr_info("buffer drive=%d\n", buffer_drive);
2762                 pr_info("buffer track=%d\n", buffer_track);
2763                 pr_info("buffer_min=%d\n", buffer_min);
2764                 pr_info("buffer_max=%d\n", buffer_max);
2765                 return 0;
2766         }
2767
2768         if (raw_cmd->kernel_data != bio_data(current_req->bio)) {
2769                 if (raw_cmd->kernel_data < floppy_track_buffer ||
2770                     current_count_sectors < 0 ||
2771                     raw_cmd->length < 0 ||
2772                     raw_cmd->kernel_data + raw_cmd->length >
2773                     floppy_track_buffer + (max_buffer_sectors << 10)) {
2774                         DPRINT("buffer overrun in schedule dma\n");
2775                         pr_info("fsector_t=%d buffer_min=%d current_count=%ld\n",
2776                                 fsector_t, buffer_min, raw_cmd->length >> 9);
2777                         pr_info("current_count_sectors=%ld\n",
2778                                 current_count_sectors);
2779                         if (CT(COMMAND) == FD_READ)
2780                                 pr_info("read\n");
2781                         if (CT(COMMAND) == FD_WRITE)
2782                                 pr_info("write\n");
2783                         return 0;
2784                 }
2785         } else if (raw_cmd->length > blk_rq_bytes(current_req) ||
2786                    current_count_sectors > blk_rq_sectors(current_req)) {
2787                 DPRINT("buffer overrun in direct transfer\n");
2788                 return 0;
2789         } else if (raw_cmd->length < current_count_sectors << 9) {
2790                 DPRINT("more sectors than bytes\n");
2791                 pr_info("bytes=%ld\n", raw_cmd->length >> 9);
2792                 pr_info("sectors=%ld\n", current_count_sectors);
2793         }
2794         if (raw_cmd->length == 0) {
2795                 DPRINT("zero dma transfer attempted from make_raw_request\n");
2796                 return 0;
2797         }
2798
2799         virtualdmabug_workaround();
2800         return 2;
2801 }
2802
2803 /*
2804  * Round-robin between our available drives, doing one request from each
2805  */
2806 static int set_next_request(void)
2807 {
2808         struct request_queue *q;
2809         int old_pos = fdc_queue;
2810
2811         do {
2812                 q = disks[fdc_queue]->queue;
2813                 if (++fdc_queue == N_DRIVE)
2814                         fdc_queue = 0;
2815                 if (q) {
2816                         current_req = blk_fetch_request(q);
2817                         if (current_req) {
2818                                 current_req->error_count = 0;
2819                                 break;
2820                         }
2821                 }
2822         } while (fdc_queue != old_pos);
2823
2824         return current_req != NULL;
2825 }
2826
2827 static void redo_fd_request(void)
2828 {
2829         int drive;
2830         int tmp;
2831
2832         lastredo = jiffies;
2833         if (current_drive < N_DRIVE)
2834                 floppy_off(current_drive);
2835
2836 do_request:
2837         if (!current_req) {
2838                 int pending;
2839
2840                 spin_lock_irq(&floppy_lock);
2841                 pending = set_next_request();
2842                 spin_unlock_irq(&floppy_lock);
2843                 if (!pending) {
2844                         do_floppy = NULL;
2845                         unlock_fdc();
2846                         return;
2847                 }
2848         }
2849         drive = (long)current_req->rq_disk->private_data;
2850         set_fdc(drive);
2851         reschedule_timeout(current_reqD, "redo fd request");
2852
2853         set_floppy(drive);
2854         raw_cmd = &default_raw_cmd;
2855         raw_cmd->flags = 0;
2856         if (start_motor(redo_fd_request))
2857                 return;
2858
2859         disk_change(current_drive);
2860         if (test_bit(current_drive, &fake_change) ||
2861             test_bit(FD_DISK_CHANGED_BIT, &DRS->flags)) {
2862                 DPRINT("disk absent or changed during operation\n");
2863                 request_done(0);
2864                 goto do_request;
2865         }
2866         if (!_floppy) { /* Autodetection */
2867                 if (!probing) {
2868                         DRS->probed_format = 0;
2869                         if (next_valid_format()) {
2870                                 DPRINT("no autodetectable formats\n");
2871                                 _floppy = NULL;
2872                                 request_done(0);
2873                                 goto do_request;
2874                         }
2875                 }
2876                 probing = 1;
2877                 _floppy = floppy_type + DP->autodetect[DRS->probed_format];
2878         } else
2879                 probing = 0;
2880         errors = &(current_req->error_count);
2881         tmp = make_raw_rw_request();
2882         if (tmp < 2) {
2883                 request_done(tmp);
2884                 goto do_request;
2885         }
2886
2887         if (test_bit(FD_NEED_TWADDLE_BIT, &DRS->flags))
2888                 twaddle();
2889         schedule_bh(floppy_start);
2890         debugt(__func__, "queue fd request");
2891         return;
2892 }
2893
2894 static const struct cont_t rw_cont = {
2895         .interrupt      = rw_interrupt,
2896         .redo           = redo_fd_request,
2897         .error          = bad_flp_intr,
2898         .done           = request_done
2899 };
2900
2901 static void process_fd_request(void)
2902 {
2903         cont = &rw_cont;
2904         schedule_bh(redo_fd_request);
2905 }
2906
2907 static void do_fd_request(struct request_queue *q)
2908 {
2909         if (WARN(max_buffer_sectors == 0,
2910                  "VFS: %s called on non-open device\n", __func__))
2911                 return;
2912
2913         if (WARN(atomic_read(&usage_count) == 0,
2914                  "warning: usage count=0, current_req=%p sect=%ld flags=%llx\n",
2915                  current_req, (long)blk_rq_pos(current_req),
2916                  (unsigned long long) current_req->cmd_flags))
2917                 return;
2918
2919         if (test_and_set_bit(0, &fdc_busy)) {
2920                 /* fdc busy, this new request will be treated when the
2921                    current one is done */
2922                 is_alive(__func__, "old request running");
2923                 return;
2924         }
2925         command_status = FD_COMMAND_NONE;
2926         __reschedule_timeout(MAXTIMEOUT, "fd_request");
2927         set_fdc(0);
2928         process_fd_request();
2929         is_alive(__func__, "");
2930 }
2931
2932 static const struct cont_t poll_cont = {
2933         .interrupt      = success_and_wakeup,
2934         .redo           = floppy_ready,
2935         .error          = generic_failure,
2936         .done           = generic_done
2937 };
2938
2939 static int poll_drive(bool interruptible, int flag)
2940 {
2941         /* no auto-sense, just clear dcl */
2942         raw_cmd = &default_raw_cmd;
2943         raw_cmd->flags = flag;
2944         raw_cmd->track = 0;
2945         raw_cmd->cmd_count = 0;
2946         cont = &poll_cont;
2947         debug_dcl(DP->flags, "setting NEWCHANGE in poll_drive\n");
2948         set_bit(FD_DISK_NEWCHANGE_BIT, &DRS->flags);
2949
2950         return wait_til_done(floppy_ready, interruptible);
2951 }
2952
2953 /*
2954  * User triggered reset
2955  * ====================
2956  */
2957
2958 static void reset_intr(void)
2959 {
2960         pr_info("weird, reset interrupt called\n");
2961 }
2962
2963 static const struct cont_t reset_cont = {
2964         .interrupt      = reset_intr,
2965         .redo           = success_and_wakeup,
2966         .error          = generic_failure,
2967         .done           = generic_done
2968 };
2969
2970 static int user_reset_fdc(int drive, int arg, bool interruptible)
2971 {
2972         int ret;
2973
2974         if (lock_fdc(drive))
2975                 return -EINTR;
2976
2977         if (arg == FD_RESET_ALWAYS)
2978                 FDCS->reset = 1;
2979         if (FDCS->reset) {
2980                 cont = &reset_cont;
2981                 ret = wait_til_done(reset_fdc, interruptible);
2982                 if (ret == -EINTR)
2983                         return -EINTR;
2984         }
2985         process_fd_request();
2986         return 0;
2987 }
2988
2989 /*
2990  * Misc Ioctl's and support
2991  * ========================
2992  */
2993 static inline int fd_copyout(void __user *param, const void *address,
2994                              unsigned long size)
2995 {
2996         return copy_to_user(param, address, size) ? -EFAULT : 0;
2997 }
2998
2999 static inline int fd_copyin(void __user *param, void *address,
3000                             unsigned long size)
3001 {
3002         return copy_from_user(address, param, size) ? -EFAULT : 0;
3003 }
3004
3005 static const char *drive_name(int type, int drive)
3006 {
3007         struct floppy_struct *floppy;
3008
3009         if (type)
3010                 floppy = floppy_type + type;
3011         else {
3012                 if (UDP->native_format)
3013                         floppy = floppy_type + UDP->native_format;
3014                 else
3015                         return "(null)";
3016         }
3017         if (floppy->name)
3018                 return floppy->name;
3019         else
3020                 return "(null)";
3021 }
3022
3023 /* raw commands */
3024 static void raw_cmd_done(int flag)
3025 {
3026         int i;
3027
3028         if (!flag) {
3029                 raw_cmd->flags |= FD_RAW_FAILURE;
3030                 raw_cmd->flags |= FD_RAW_HARDFAILURE;
3031         } else {
3032                 raw_cmd->reply_count = inr;
3033                 if (raw_cmd->reply_count > MAX_REPLIES)
3034                         raw_cmd->reply_count = 0;
3035                 for (i = 0; i < raw_cmd->reply_count; i++)
3036                         raw_cmd->reply[i] = reply_buffer[i];
3037
3038                 if (raw_cmd->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3039                         unsigned long flags;
3040                         flags = claim_dma_lock();
3041                         raw_cmd->length = fd_get_dma_residue();
3042                         release_dma_lock(flags);
3043                 }
3044
3045                 if ((raw_cmd->flags & FD_RAW_SOFTFAILURE) &&
3046                     (!raw_cmd->reply_count || (raw_cmd->reply[0] & 0xc0)))
3047                         raw_cmd->flags |= FD_RAW_FAILURE;
3048
3049                 if (disk_change(current_drive))
3050                         raw_cmd->flags |= FD_RAW_DISK_CHANGE;
3051                 else
3052                         raw_cmd->flags &= ~FD_RAW_DISK_CHANGE;
3053                 if (raw_cmd->flags & FD_RAW_NO_MOTOR_AFTER)
3054                         motor_off_callback(&motor_off_timer[current_drive]);
3055
3056                 if (raw_cmd->next &&
3057                     (!(raw_cmd->flags & FD_RAW_FAILURE) ||
3058                      !(raw_cmd->flags & FD_RAW_STOP_IF_FAILURE)) &&
3059                     ((raw_cmd->flags & FD_RAW_FAILURE) ||
3060                      !(raw_cmd->flags & FD_RAW_STOP_IF_SUCCESS))) {
3061                         raw_cmd = raw_cmd->next;
3062                         return;
3063                 }
3064         }
3065         generic_done(flag);
3066 }
3067
3068 static const struct cont_t raw_cmd_cont = {
3069         .interrupt      = success_and_wakeup,
3070         .redo           = floppy_start,
3071         .error          = generic_failure,
3072         .done           = raw_cmd_done
3073 };
3074
3075 static int raw_cmd_copyout(int cmd, void __user *param,
3076                                   struct floppy_raw_cmd *ptr)
3077 {
3078         int ret;
3079
3080         while (ptr) {
3081                 struct floppy_raw_cmd cmd = *ptr;
3082                 cmd.next = NULL;
3083                 cmd.kernel_data = NULL;
3084                 ret = copy_to_user(param, &cmd, sizeof(cmd));
3085                 if (ret)
3086                         return -EFAULT;
3087                 param += sizeof(struct floppy_raw_cmd);
3088                 if ((ptr->flags & FD_RAW_READ) && ptr->buffer_length) {
3089                         if (ptr->length >= 0 &&
3090                             ptr->length <= ptr->buffer_length) {
3091                                 long length = ptr->buffer_length - ptr->length;
3092                                 ret = fd_copyout(ptr->data, ptr->kernel_data,
3093                                                  length);
3094                                 if (ret)
3095                                         return ret;
3096                         }
3097                 }
3098                 ptr = ptr->next;
3099         }
3100
3101         return 0;
3102 }
3103
3104 static void raw_cmd_free(struct floppy_raw_cmd **ptr)
3105 {
3106         struct floppy_raw_cmd *next;
3107         struct floppy_raw_cmd *this;
3108
3109         this = *ptr;
3110         *ptr = NULL;
3111         while (this) {
3112                 if (this->buffer_length) {
3113                         fd_dma_mem_free((unsigned long)this->kernel_data,
3114                                         this->buffer_length);
3115                         this->buffer_length = 0;
3116                 }
3117                 next = this->next;
3118                 kfree(this);
3119                 this = next;
3120         }
3121 }
3122
3123 static int raw_cmd_copyin(int cmd, void __user *param,
3124                                  struct floppy_raw_cmd **rcmd)
3125 {
3126         struct floppy_raw_cmd *ptr;
3127         int ret;
3128         int i;
3129
3130         *rcmd = NULL;
3131
3132 loop:
3133         ptr = kmalloc(sizeof(struct floppy_raw_cmd), GFP_KERNEL);
3134         if (!ptr)
3135                 return -ENOMEM;
3136         *rcmd = ptr;
3137         ret = copy_from_user(ptr, param, sizeof(*ptr));
3138         ptr->next = NULL;
3139         ptr->buffer_length = 0;
3140         ptr->kernel_data = NULL;
3141         if (ret)
3142                 return -EFAULT;
3143         param += sizeof(struct floppy_raw_cmd);
3144         if (ptr->cmd_count > 33)
3145                         /* the command may now also take up the space
3146                          * initially intended for the reply & the
3147                          * reply count. Needed for long 82078 commands
3148                          * such as RESTORE, which takes ... 17 command
3149                          * bytes. Murphy's law #137: When you reserve
3150                          * 16 bytes for a structure, you'll one day
3151                          * discover that you really need 17...
3152                          */
3153                 return -EINVAL;
3154
3155         for (i = 0; i < 16; i++)
3156                 ptr->reply[i] = 0;
3157         ptr->resultcode = 0;
3158
3159         if (ptr->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3160                 if (ptr->length <= 0)
3161                         return -EINVAL;
3162                 ptr->kernel_data = (char *)fd_dma_mem_alloc(ptr->length);
3163                 fallback_on_nodma_alloc(&ptr->kernel_data, ptr->length);
3164                 if (!ptr->kernel_data)
3165                         return -ENOMEM;
3166                 ptr->buffer_length = ptr->length;
3167         }
3168         if (ptr->flags & FD_RAW_WRITE) {
3169                 ret = fd_copyin(ptr->data, ptr->kernel_data, ptr->length);
3170                 if (ret)
3171                         return ret;
3172         }
3173
3174         if (ptr->flags & FD_RAW_MORE) {
3175                 rcmd = &(ptr->next);
3176                 ptr->rate &= 0x43;
3177                 goto loop;
3178         }
3179
3180         return 0;
3181 }
3182
3183 static int raw_cmd_ioctl(int cmd, void __user *param)
3184 {
3185         struct floppy_raw_cmd *my_raw_cmd;
3186         int drive;
3187         int ret2;
3188         int ret;
3189
3190         if (FDCS->rawcmd <= 1)
3191                 FDCS->rawcmd = 1;
3192         for (drive = 0; drive < N_DRIVE; drive++) {
3193                 if (FDC(drive) != fdc)
3194                         continue;
3195                 if (drive == current_drive) {
3196                         if (UDRS->fd_ref > 1) {
3197                                 FDCS->rawcmd = 2;
3198                                 break;
3199                         }
3200                 } else if (UDRS->fd_ref) {
3201                         FDCS->rawcmd = 2;
3202                         break;
3203                 }
3204         }
3205
3206         if (FDCS->reset)
3207                 return -EIO;
3208
3209         ret = raw_cmd_copyin(cmd, param, &my_raw_cmd);
3210         if (ret) {
3211                 raw_cmd_free(&my_raw_cmd);
3212                 return ret;
3213         }
3214
3215         raw_cmd = my_raw_cmd;
3216         cont = &raw_cmd_cont;
3217         ret = wait_til_done(floppy_start, true);
3218         debug_dcl(DP->flags, "calling disk change from raw_cmd ioctl\n");
3219
3220         if (ret != -EINTR && FDCS->reset)
3221                 ret = -EIO;
3222
3223         DRS->track = NO_TRACK;
3224
3225         ret2 = raw_cmd_copyout(cmd, param, my_raw_cmd);
3226         if (!ret)
3227                 ret = ret2;
3228         raw_cmd_free(&my_raw_cmd);
3229         return ret;
3230 }
3231
3232 static int invalidate_drive(struct block_device *bdev)
3233 {
3234         /* invalidate the buffer track to force a reread */
3235         set_bit((long)bdev->bd_disk->private_data, &fake_change);
3236         process_fd_request();
3237         check_disk_change(bdev);
3238         return 0;
3239 }
3240
3241 static int set_geometry(unsigned int cmd, struct floppy_struct *g,
3242                                int drive, int type, struct block_device *bdev)
3243 {
3244         int cnt;
3245
3246         /* sanity checking for parameters. */
3247         if (g->sect <= 0 ||
3248             g->head <= 0 ||
3249             g->track <= 0 || g->track > UDP->tracks >> STRETCH(g) ||
3250             /* check if reserved bits are set */
3251             (g->stretch & ~(FD_STRETCH | FD_SWAPSIDES | FD_SECTBASEMASK)) != 0)
3252                 return -EINVAL;
3253         if (type) {
3254                 if (!capable(CAP_SYS_ADMIN))
3255                         return -EPERM;
3256                 mutex_lock(&open_lock);
3257                 if (lock_fdc(drive)) {
3258                         mutex_unlock(&open_lock);
3259                         return -EINTR;
3260                 }
3261                 floppy_type[type] = *g;
3262                 floppy_type[type].name = "user format";
3263                 for (cnt = type << 2; cnt < (type << 2) + 4; cnt++)
3264                         floppy_sizes[cnt] = floppy_sizes[cnt + 0x80] =
3265                             floppy_type[type].size + 1;
3266                 process_fd_request();
3267                 for (cnt = 0; cnt < N_DRIVE; cnt++) {
3268                         struct block_device *bdev = opened_bdev[cnt];
3269                         if (!bdev || ITYPE(drive_state[cnt].fd_device) != type)
3270                                 continue;
3271                         __invalidate_device(bdev, true);
3272                 }
3273                 mutex_unlock(&open_lock);
3274         } else {
3275                 int oldStretch;
3276
3277                 if (lock_fdc(drive))
3278                         return -EINTR;
3279                 if (cmd != FDDEFPRM) {
3280                         /* notice a disk change immediately, else
3281                          * we lose our settings immediately*/
3282                         if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3283                                 return -EINTR;
3284                 }
3285                 oldStretch = g->stretch;
3286                 user_params[drive] = *g;
3287                 if (buffer_drive == drive)
3288                         SUPBOUND(buffer_max, user_params[drive].sect);
3289                 current_type[drive] = &user_params[drive];
3290                 floppy_sizes[drive] = user_params[drive].size;
3291                 if (cmd == FDDEFPRM)
3292                         DRS->keep_data = -1;
3293                 else
3294                         DRS->keep_data = 1;
3295                 /* invalidation. Invalidate only when needed, i.e.
3296                  * when there are already sectors in the buffer cache
3297                  * whose number will change. This is useful, because
3298                  * mtools often changes the geometry of the disk after
3299                  * looking at the boot block */
3300                 if (DRS->maxblock > user_params[drive].sect ||
3301                     DRS->maxtrack ||
3302                     ((user_params[drive].sect ^ oldStretch) &
3303                      (FD_SWAPSIDES | FD_SECTBASEMASK)))
3304                         invalidate_drive(bdev);
3305                 else
3306                         process_fd_request();
3307         }
3308         return 0;
3309 }
3310
3311 /* handle obsolete ioctl's */
3312 static unsigned int ioctl_table[] = {
3313         FDCLRPRM,
3314         FDSETPRM,
3315         FDDEFPRM,
3316         FDGETPRM,
3317         FDMSGON,
3318         FDMSGOFF,
3319         FDFMTBEG,
3320         FDFMTTRK,
3321         FDFMTEND,
3322         FDSETEMSGTRESH,
3323         FDFLUSH,
3324         FDSETMAXERRS,
3325         FDGETMAXERRS,
3326         FDGETDRVTYP,
3327         FDSETDRVPRM,
3328         FDGETDRVPRM,
3329         FDGETDRVSTAT,
3330         FDPOLLDRVSTAT,
3331         FDRESET,
3332         FDGETFDCSTAT,
3333         FDWERRORCLR,
3334         FDWERRORGET,
3335         FDRAWCMD,
3336         FDEJECT,
3337         FDTWADDLE
3338 };
3339
3340 static int normalize_ioctl(unsigned int *cmd, int *size)
3341 {
3342         int i;
3343
3344         for (i = 0; i < ARRAY_SIZE(ioctl_table); i++) {
3345                 if ((*cmd & 0xffff) == (ioctl_table[i] & 0xffff)) {
3346                         *size = _IOC_SIZE(*cmd);
3347                         *cmd = ioctl_table[i];
3348                         if (*size > _IOC_SIZE(*cmd)) {
3349                                 pr_info("ioctl not yet supported\n");
3350                                 return -EFAULT;
3351                         }
3352                         return 0;
3353                 }
3354         }
3355         return -EINVAL;
3356 }
3357
3358 static int get_floppy_geometry(int drive, int type, struct floppy_struct **g)
3359 {
3360         if (type)
3361                 *g = &floppy_type[type];
3362         else {
3363                 if (lock_fdc(drive))
3364                         return -EINTR;
3365                 if (poll_drive(false, 0) == -EINTR)
3366                         return -EINTR;
3367                 process_fd_request();
3368                 *g = current_type[drive];
3369         }
3370         if (!*g)
3371                 return -ENODEV;
3372         return 0;
3373 }
3374
3375 static int fd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
3376 {
3377         int drive = (long)bdev->bd_disk->private_data;
3378         int type = ITYPE(drive_state[drive].fd_device);
3379         struct floppy_struct *g;
3380         int ret;
3381
3382         ret = get_floppy_geometry(drive, type, &g);
3383         if (ret)
3384                 return ret;
3385
3386         geo->heads = g->head;
3387         geo->sectors = g->sect;
3388         geo->cylinders = g->track;
3389         return 0;
3390 }
3391
3392 static int fd_locked_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3393                     unsigned long param)
3394 {
3395         int drive = (long)bdev->bd_disk->private_data;
3396         int type = ITYPE(UDRS->fd_device);
3397         int i;
3398         int ret;
3399         int size;
3400         union inparam {
3401                 struct floppy_struct g; /* geometry */
3402                 struct format_descr f;
3403                 struct floppy_max_errors max_errors;
3404                 struct floppy_drive_params dp;
3405         } inparam;              /* parameters coming from user space */
3406         const void *outparam;   /* parameters passed back to user space */
3407
3408         /* convert compatibility eject ioctls into floppy eject ioctl.
3409          * We do this in order to provide a means to eject floppy disks before
3410          * installing the new fdutils package */
3411         if (cmd == CDROMEJECT ||        /* CD-ROM eject */
3412             cmd == 0x6470) {            /* SunOS floppy eject */
3413                 DPRINT("obsolete eject ioctl\n");
3414                 DPRINT("please use floppycontrol --eject\n");
3415                 cmd = FDEJECT;
3416         }
3417
3418         if (!((cmd & 0xff00) == 0x0200))
3419                 return -EINVAL;
3420
3421         /* convert the old style command into a new style command */
3422         ret = normalize_ioctl(&cmd, &size);
3423         if (ret)
3424                 return ret;
3425
3426         /* permission checks */
3427         if (((cmd & 0x40) && !(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL))) ||
3428             ((cmd & 0x80) && !capable(CAP_SYS_ADMIN)))
3429                 return -EPERM;
3430
3431         if (WARN_ON(size < 0 || size > sizeof(inparam)))
3432                 return -EINVAL;
3433
3434         /* copyin */
3435         memset(&inparam, 0, sizeof(inparam));
3436         if (_IOC_DIR(cmd) & _IOC_WRITE) {
3437                 ret = fd_copyin((void __user *)param, &inparam, size);
3438                 if (ret)
3439                         return ret;
3440         }
3441
3442         switch (cmd) {
3443         case FDEJECT:
3444                 if (UDRS->fd_ref != 1)
3445                         /* somebody else has this drive open */
3446                         return -EBUSY;
3447                 if (lock_fdc(drive))
3448                         return -EINTR;
3449
3450                 /* do the actual eject. Fails on
3451                  * non-Sparc architectures */
3452                 ret = fd_eject(UNIT(drive));
3453
3454                 set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
3455                 set_bit(FD_VERIFY_BIT, &UDRS->flags);
3456                 process_fd_request();
3457                 return ret;
3458         case FDCLRPRM:
3459                 if (lock_fdc(drive))
3460                         return -EINTR;
3461                 current_type[drive] = NULL;
3462                 floppy_sizes[drive] = MAX_DISK_SIZE << 1;
3463                 UDRS->keep_data = 0;
3464                 return invalidate_drive(bdev);
3465         case FDSETPRM:
3466         case FDDEFPRM:
3467                 return set_geometry(cmd, &inparam.g, drive, type, bdev);
3468         case FDGETPRM:
3469                 ret = get_floppy_geometry(drive, type,
3470                                           (struct floppy_struct **)&outparam);
3471                 if (ret)
3472                         return ret;
3473                 break;
3474         case FDMSGON:
3475                 UDP->flags |= FTD_MSG;
3476                 return 0;
3477         case FDMSGOFF:
3478                 UDP->flags &= ~FTD_MSG;
3479                 return 0;
3480         case FDFMTBEG:
3481                 if (lock_fdc(drive))
3482                         return -EINTR;
3483                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3484                         return -EINTR;
3485                 ret = UDRS->flags;
3486                 process_fd_request();
3487                 if (ret & FD_VERIFY)
3488                         return -ENODEV;
3489                 if (!(ret & FD_DISK_WRITABLE))
3490                         return -EROFS;
3491                 return 0;
3492         case FDFMTTRK:
3493                 if (UDRS->fd_ref != 1)
3494                         return -EBUSY;
3495                 return do_format(drive, &inparam.f);
3496         case FDFMTEND:
3497         case FDFLUSH:
3498                 if (lock_fdc(drive))
3499                         return -EINTR;
3500                 return invalidate_drive(bdev);
3501         case FDSETEMSGTRESH:
3502                 UDP->max_errors.reporting = (unsigned short)(param & 0x0f);
3503                 return 0;
3504         case FDGETMAXERRS:
3505                 outparam = &UDP->max_errors;
3506                 break;
3507         case FDSETMAXERRS:
3508                 UDP->max_errors = inparam.max_errors;
3509                 break;
3510         case FDGETDRVTYP:
3511                 outparam = drive_name(type, drive);
3512                 SUPBOUND(size, strlen((const char *)outparam) + 1);
3513                 break;
3514         case FDSETDRVPRM:
3515                 *UDP = inparam.dp;
3516                 break;
3517         case FDGETDRVPRM:
3518                 outparam = UDP;
3519                 break;
3520         case FDPOLLDRVSTAT:
3521                 if (lock_fdc(drive))
3522                         return -EINTR;
3523                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3524                         return -EINTR;
3525                 process_fd_request();
3526                 /* fall through */
3527         case FDGETDRVSTAT:
3528                 outparam = UDRS;
3529                 break;
3530         case FDRESET:
3531                 return user_reset_fdc(drive, (int)param, true);
3532         case FDGETFDCSTAT:
3533                 outparam = UFDCS;
3534                 break;
3535         case FDWERRORCLR:
3536                 memset(UDRWE, 0, sizeof(*UDRWE));
3537                 return 0;
3538         case FDWERRORGET:
3539                 outparam = UDRWE;
3540                 break;
3541         case FDRAWCMD:
3542                 if (type)
3543                         return -EINVAL;
3544                 if (lock_fdc(drive))
3545                         return -EINTR;
3546                 set_floppy(drive);
3547                 i = raw_cmd_ioctl(cmd, (void __user *)param);
3548                 if (i == -EINTR)
3549                         return -EINTR;
3550                 process_fd_request();
3551                 return i;
3552         case FDTWADDLE:
3553                 if (lock_fdc(drive))
3554                         return -EINTR;
3555                 twaddle();
3556                 process_fd_request();
3557                 return 0;
3558         default:
3559                 return -EINVAL;
3560         }
3561
3562         if (_IOC_DIR(cmd) & _IOC_READ)
3563                 return fd_copyout((void __user *)param, outparam, size);
3564
3565         return 0;
3566 }
3567
3568 static int fd_ioctl(struct block_device *bdev, fmode_t mode,
3569                              unsigned int cmd, unsigned long param)
3570 {
3571         int ret;
3572
3573         mutex_lock(&floppy_mutex);
3574         ret = fd_locked_ioctl(bdev, mode, cmd, param);
3575         mutex_unlock(&floppy_mutex);
3576
3577         return ret;
3578 }
3579
3580 #ifdef CONFIG_COMPAT
3581
3582 struct compat_floppy_drive_params {
3583         char            cmos;
3584         compat_ulong_t  max_dtr;
3585         compat_ulong_t  hlt;
3586         compat_ulong_t  hut;
3587         compat_ulong_t  srt;
3588         compat_ulong_t  spinup;
3589         compat_ulong_t  spindown;
3590         unsigned char   spindown_offset;
3591         unsigned char   select_delay;
3592         unsigned char   rps;
3593         unsigned char   tracks;
3594         compat_ulong_t  timeout;
3595         unsigned char   interleave_sect;
3596         struct floppy_max_errors max_errors;
3597         char            flags;
3598         char            read_track;
3599         short           autodetect[8];
3600         compat_int_t    checkfreq;
3601         compat_int_t    native_format;
3602 };
3603
3604 struct compat_floppy_drive_struct {
3605         signed char     flags;
3606         compat_ulong_t  spinup_date;
3607         compat_ulong_t  select_date;
3608         compat_ulong_t  first_read_date;
3609         short           probed_format;
3610         short           track;
3611         short           maxblock;
3612         short           maxtrack;
3613         compat_int_t    generation;
3614         compat_int_t    keep_data;
3615         compat_int_t    fd_ref;
3616         compat_int_t    fd_device;
3617         compat_int_t    last_checked;
3618         compat_caddr_t dmabuf;
3619         compat_int_t    bufblocks;
3620 };
3621
3622 struct compat_floppy_fdc_state {
3623         compat_int_t    spec1;
3624         compat_int_t    spec2;
3625         compat_int_t    dtr;
3626         unsigned char   version;
3627         unsigned char   dor;
3628         compat_ulong_t  address;
3629         unsigned int    rawcmd:2;
3630         unsigned int    reset:1;
3631         unsigned int    need_configure:1;
3632         unsigned int    perp_mode:2;
3633         unsigned int    has_fifo:1;
3634         unsigned int    driver_version;
3635         unsigned char   track[4];
3636 };
3637
3638 struct compat_floppy_write_errors {
3639         unsigned int    write_errors;
3640         compat_ulong_t  first_error_sector;
3641         compat_int_t    first_error_generation;
3642         compat_ulong_t  last_error_sector;
3643         compat_int_t    last_error_generation;
3644         compat_uint_t   badness;
3645 };
3646
3647 #define FDSETPRM32 _IOW(2, 0x42, struct compat_floppy_struct)
3648 #define FDDEFPRM32 _IOW(2, 0x43, struct compat_floppy_struct)
3649 #define FDSETDRVPRM32 _IOW(2, 0x90, struct compat_floppy_drive_params)
3650 #define FDGETDRVPRM32 _IOR(2, 0x11, struct compat_floppy_drive_params)
3651 #define FDGETDRVSTAT32 _IOR(2, 0x12, struct compat_floppy_drive_struct)
3652 #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct compat_floppy_drive_struct)
3653 #define FDGETFDCSTAT32 _IOR(2, 0x15, struct compat_floppy_fdc_state)
3654 #define FDWERRORGET32  _IOR(2, 0x17, struct compat_floppy_write_errors)
3655
3656 static int compat_set_geometry(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3657                     struct compat_floppy_struct __user *arg)
3658 {
3659         struct floppy_struct v;
3660         int drive, type;
3661         int err;
3662
3663         BUILD_BUG_ON(offsetof(struct floppy_struct, name) !=
3664                      offsetof(struct compat_floppy_struct, name));
3665
3666         if (!(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL)))
3667                 return -EPERM;
3668
3669         memset(&v, 0, sizeof(struct floppy_struct));
3670         if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))
3671                 return -EFAULT;
3672
3673         mutex_lock(&floppy_mutex);
3674         drive = (long)bdev->bd_disk->private_data;
3675         type = ITYPE(UDRS->fd_device);
3676         err = set_geometry(cmd == FDSETPRM32 ? FDSETPRM : FDDEFPRM,
3677                         &v, drive, type, bdev);
3678         mutex_unlock(&floppy_mutex);
3679         return err;
3680 }
3681
3682 static int compat_get_prm(int drive,
3683                           struct compat_floppy_struct __user *arg)
3684 {
3685         struct compat_floppy_struct v;
3686         struct floppy_struct *p;
3687         int err;
3688
3689         memset(&v, 0, sizeof(v));
3690         mutex_lock(&floppy_mutex);
3691         err = get_floppy_geometry(drive, ITYPE(UDRS->fd_device), &p);
3692         if (err) {
3693                 mutex_unlock(&floppy_mutex);
3694                 return err;
3695         }
3696         memcpy(&v, p, offsetof(struct floppy_struct, name));
3697         mutex_unlock(&floppy_mutex);
3698         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_struct)))
3699                 return -EFAULT;
3700         return 0;
3701 }
3702
3703 static int compat_setdrvprm(int drive,
3704                             struct compat_floppy_drive_params __user *arg)
3705 {
3706         struct compat_floppy_drive_params v;
3707
3708         if (!capable(CAP_SYS_ADMIN))
3709                 return -EPERM;
3710         if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))
3711                 return -EFAULT;
3712         mutex_lock(&floppy_mutex);
3713         UDP->cmos = v.cmos;
3714         UDP->max_dtr = v.max_dtr;
3715         UDP->hlt = v.hlt;
3716         UDP->hut = v.hut;
3717         UDP->srt = v.srt;
3718         UDP->spinup = v.spinup;
3719         UDP->spindown = v.spindown;
3720         UDP->spindown_offset = v.spindown_offset;
3721         UDP->select_delay = v.select_delay;
3722         UDP->rps = v.rps;
3723         UDP->tracks = v.tracks;
3724         UDP->timeout = v.timeout;
3725         UDP->interleave_sect = v.interleave_sect;
3726         UDP->max_errors = v.max_errors;
3727         UDP->flags = v.flags;
3728         UDP->read_track = v.read_track;
3729         memcpy(UDP->autodetect, v.autodetect, sizeof(v.autodetect));
3730         UDP->checkfreq = v.checkfreq;
3731         UDP->native_format = v.native_format;
3732         mutex_unlock(&floppy_mutex);
3733         return 0;
3734 }
3735
3736 static int compat_getdrvprm(int drive,
3737                             struct compat_floppy_drive_params __user *arg)
3738 {
3739         struct compat_floppy_drive_params v;
3740
3741         memset(&v, 0, sizeof(struct compat_floppy_drive_params));
3742         mutex_lock(&floppy_mutex);
3743         v.cmos = UDP->cmos;
3744         v.max_dtr = UDP->max_dtr;
3745         v.hlt = UDP->hlt;
3746         v.hut = UDP->hut;
3747         v.srt = UDP->srt;
3748         v.spinup = UDP->spinup;
3749         v.spindown = UDP->spindown;
3750         v.spindown_offset = UDP->spindown_offset;
3751         v.select_delay = UDP->select_delay;
3752         v.rps = UDP->rps;
3753         v.tracks = UDP->tracks;
3754         v.timeout = UDP->timeout;
3755         v.interleave_sect = UDP->interleave_sect;
3756         v.max_errors = UDP->max_errors;
3757         v.flags = UDP->flags;
3758         v.read_track = UDP->read_track;
3759         memcpy(v.autodetect, UDP->autodetect, sizeof(v.autodetect));
3760         v.checkfreq = UDP->checkfreq;
3761         v.native_format = UDP->native_format;
3762         mutex_unlock(&floppy_mutex);
3763
3764         if (copy_from_user(arg, &v, sizeof(struct compat_floppy_drive_params)))
3765                 return -EFAULT;
3766         return 0;
3767 }
3768
3769 static int compat_getdrvstat(int drive, bool poll,
3770                             struct compat_floppy_drive_struct __user *arg)
3771 {
3772         struct compat_floppy_drive_struct v;
3773
3774         memset(&v, 0, sizeof(struct compat_floppy_drive_struct));
3775         mutex_lock(&floppy_mutex);
3776
3777         if (poll) {
3778                 if (lock_fdc(drive))
3779                         goto Eintr;
3780                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3781                         goto Eintr;
3782                 process_fd_request();
3783         }
3784         v.spinup_date = UDRS->spinup_date;
3785         v.select_date = UDRS->select_date;
3786         v.first_read_date = UDRS->first_read_date;
3787         v.probed_format = UDRS->probed_format;
3788         v.track = UDRS->track;
3789         v.maxblock = UDRS->maxblock;
3790         v.maxtrack = UDRS->maxtrack;
3791         v.generation = UDRS->generation;
3792         v.keep_data = UDRS->keep_data;
3793         v.fd_ref = UDRS->fd_ref;
3794         v.fd_device = UDRS->fd_device;
3795         v.last_checked = UDRS->last_checked;
3796         v.dmabuf = (uintptr_t)UDRS->dmabuf;
3797         v.bufblocks = UDRS->bufblocks;
3798         mutex_unlock(&floppy_mutex);
3799
3800         if (copy_from_user(arg, &v, sizeof(struct compat_floppy_drive_struct)))
3801                 return -EFAULT;
3802         return 0;
3803 Eintr:
3804         mutex_unlock(&floppy_mutex);
3805         return -EINTR;
3806 }
3807
3808 static int compat_getfdcstat(int drive,
3809                             struct compat_floppy_fdc_state __user *arg)
3810 {
3811         struct compat_floppy_fdc_state v32;
3812         struct floppy_fdc_state v;
3813
3814         mutex_lock(&floppy_mutex);
3815         v = *UFDCS;
3816         mutex_unlock(&floppy_mutex);
3817
3818         memset(&v32, 0, sizeof(struct compat_floppy_fdc_state));
3819         v32.spec1 = v.spec1;
3820         v32.spec2 = v.spec2;
3821         v32.dtr = v.dtr;
3822         v32.version = v.version;
3823         v32.dor = v.dor;
3824         v32.address = v.address;
3825         v32.rawcmd = v.rawcmd;
3826         v32.reset = v.reset;
3827         v32.need_configure = v.need_configure;
3828         v32.perp_mode = v.perp_mode;
3829         v32.has_fifo = v.has_fifo;
3830         v32.driver_version = v.driver_version;
3831         memcpy(v32.track, v.track, 4);
3832         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_fdc_state)))
3833                 return -EFAULT;
3834         return 0;
3835 }
3836
3837 static int compat_werrorget(int drive,
3838                             struct compat_floppy_write_errors __user *arg)
3839 {
3840         struct compat_floppy_write_errors v32;
3841         struct floppy_write_errors v;
3842
3843         memset(&v32, 0, sizeof(struct compat_floppy_write_errors));
3844         mutex_lock(&floppy_mutex);
3845         v = *UDRWE;
3846         mutex_unlock(&floppy_mutex);
3847         v32.write_errors = v.write_errors;
3848         v32.first_error_sector = v.first_error_sector;
3849         v32.first_error_generation = v.first_error_generation;
3850         v32.last_error_sector = v.last_error_sector;
3851         v32.last_error_generation = v.last_error_generation;
3852         v32.badness = v.badness;
3853         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_write_errors)))
3854                 return -EFAULT;
3855         return 0;
3856 }
3857
3858 static int fd_compat_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3859                     unsigned long param)
3860 {
3861         int drive = (long)bdev->bd_disk->private_data;
3862         switch (cmd) {
3863         case FDMSGON:
3864         case FDMSGOFF:
3865         case FDSETEMSGTRESH:
3866         case FDFLUSH:
3867         case FDWERRORCLR:
3868         case FDEJECT:
3869         case FDCLRPRM:
3870         case FDFMTBEG:
3871         case FDRESET:
3872         case FDTWADDLE:
3873                 return fd_ioctl(bdev, mode, cmd, param);
3874         case FDSETMAXERRS:
3875         case FDGETMAXERRS:
3876         case FDGETDRVTYP:
3877         case FDFMTEND:
3878         case FDFMTTRK:
3879         case FDRAWCMD:
3880                 return fd_ioctl(bdev, mode, cmd,
3881                                 (unsigned long)compat_ptr(param));
3882         case FDSETPRM32:
3883         case FDDEFPRM32:
3884                 return compat_set_geometry(bdev, mode, cmd, compat_ptr(param));
3885         case FDGETPRM32:
3886                 return compat_get_prm(drive, compat_ptr(param));
3887         case FDSETDRVPRM32:
3888                 return compat_setdrvprm(drive, compat_ptr(param));
3889         case FDGETDRVPRM32:
3890                 return compat_getdrvprm(drive, compat_ptr(param));
3891         case FDPOLLDRVSTAT32:
3892                 return compat_getdrvstat(drive, true, compat_ptr(param));
3893         case FDGETDRVSTAT32:
3894                 return compat_getdrvstat(drive, false, compat_ptr(param));
3895         case FDGETFDCSTAT32:
3896                 return compat_getfdcstat(drive, compat_ptr(param));
3897         case FDWERRORGET32:
3898                 return compat_werrorget(drive, compat_ptr(param));
3899         }
3900         return -EINVAL;
3901 }
3902 #endif
3903
3904 static void __init config_types(void)
3905 {
3906         bool has_drive = false;
3907         int drive;
3908
3909         /* read drive info out of physical CMOS */
3910         drive = 0;
3911         if (!UDP->cmos)
3912                 UDP->cmos = FLOPPY0_TYPE;
3913         drive = 1;
3914         if (!UDP->cmos && FLOPPY1_TYPE)
3915                 UDP->cmos = FLOPPY1_TYPE;
3916
3917         /* FIXME: additional physical CMOS drive detection should go here */
3918
3919         for (drive = 0; drive < N_DRIVE; drive++) {
3920                 unsigned int type = UDP->cmos;
3921                 struct floppy_drive_params *params;
3922                 const char *name = NULL;
3923                 char temparea[32];
3924
3925                 if (type < ARRAY_SIZE(default_drive_params)) {
3926                         params = &default_drive_params[type].params;
3927                         if (type) {
3928                                 name = default_drive_params[type].name;
3929                                 allowed_drive_mask |= 1 << drive;
3930                         } else
3931                                 allowed_drive_mask &= ~(1 << drive);
3932                 } else {
3933                         params = &default_drive_params[0].params;
3934                         snprintf(temparea, sizeof(temparea),
3935                                  "unknown type %d (usb?)", type);
3936                         name = temparea;
3937                 }
3938                 if (name) {
3939                         const char *prepend;
3940                         if (!has_drive) {
3941                                 prepend = "";
3942                                 has_drive = true;
3943                                 pr_info("Floppy drive(s):");
3944                         } else {
3945                                 prepend = ",";
3946                         }
3947
3948                         pr_cont("%s fd%d is %s", prepend, drive, name);
3949                 }
3950                 *UDP = *params;
3951         }
3952
3953         if (has_drive)
3954                 pr_cont("\n");
3955 }
3956
3957 static void floppy_release(struct gendisk *disk, fmode_t mode)
3958 {
3959         int drive = (long)disk->private_data;
3960
3961         mutex_lock(&floppy_mutex);
3962         mutex_lock(&open_lock);
3963         if (!UDRS->fd_ref--) {
3964                 DPRINT("floppy_release with fd_ref == 0");
3965                 UDRS->fd_ref = 0;
3966         }
3967         if (!UDRS->fd_ref)
3968                 opened_bdev[drive] = NULL;
3969         mutex_unlock(&open_lock);
3970         mutex_unlock(&floppy_mutex);
3971 }
3972
3973 /*
3974  * floppy_open check for aliasing (/dev/fd0 can be the same as
3975  * /dev/PS0 etc), and disallows simultaneous access to the same
3976  * drive with different device numbers.
3977  */
3978 static int floppy_open(struct block_device *bdev, fmode_t mode)
3979 {
3980         int drive = (long)bdev->bd_disk->private_data;
3981         int old_dev, new_dev;
3982         int try;
3983         int res = -EBUSY;
3984         char *tmp;
3985
3986         mutex_lock(&floppy_mutex);
3987         mutex_lock(&open_lock);
3988         old_dev = UDRS->fd_device;
3989         if (opened_bdev[drive] && opened_bdev[drive] != bdev)
3990                 goto out2;
3991
3992         if (!UDRS->fd_ref && (UDP->flags & FD_BROKEN_DCL)) {
3993                 set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
3994                 set_bit(FD_VERIFY_BIT, &UDRS->flags);
3995         }
3996
3997         UDRS->fd_ref++;
3998
3999         opened_bdev[drive] = bdev;
4000
4001         res = -ENXIO;
4002
4003         if (!floppy_track_buffer) {
4004                 /* if opening an ED drive, reserve a big buffer,
4005                  * else reserve a small one */
4006                 if ((UDP->cmos == 6) || (UDP->cmos == 5))
4007                         try = 64;       /* Only 48 actually useful */
4008                 else
4009                         try = 32;       /* Only 24 actually useful */
4010
4011                 tmp = (char *)fd_dma_mem_alloc(1024 * try);
4012                 if (!tmp && !floppy_track_buffer) {
4013                         try >>= 1;      /* buffer only one side */
4014                         INFBOUND(try, 16);
4015                         tmp = (char *)fd_dma_mem_alloc(1024 * try);
4016                 }
4017                 if (!tmp && !floppy_track_buffer)
4018                         fallback_on_nodma_alloc(&tmp, 2048 * try);
4019                 if (!tmp && !floppy_track_buffer) {
4020                         DPRINT("Unable to allocate DMA memory\n");
4021                         goto out;
4022                 }
4023                 if (floppy_track_buffer) {
4024                         if (tmp)
4025                                 fd_dma_mem_free((unsigned long)tmp, try * 1024);
4026                 } else {
4027                         buffer_min = buffer_max = -1;
4028                         floppy_track_buffer = tmp;
4029                         max_buffer_sectors = try;
4030                 }
4031         }
4032
4033         new_dev = MINOR(bdev->bd_dev);
4034         UDRS->fd_device = new_dev;
4035         set_capacity(disks[drive], floppy_sizes[new_dev]);
4036         if (old_dev != -1 && old_dev != new_dev) {
4037                 if (buffer_drive == drive)
4038                         buffer_track = -1;
4039         }
4040
4041         if (UFDCS->rawcmd == 1)
4042                 UFDCS->rawcmd = 2;
4043
4044         if (!(mode & FMODE_NDELAY)) {
4045                 if (mode & (FMODE_READ|FMODE_WRITE)) {
4046                         UDRS->last_checked = 0;
4047                         clear_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags);
4048                         check_disk_change(bdev);
4049                         if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags))
4050                                 goto out;
4051                         if (test_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags))
4052                                 goto out;
4053                 }
4054                 res = -EROFS;
4055                 if ((mode & FMODE_WRITE) &&
4056                     !test_bit(FD_DISK_WRITABLE_BIT, &UDRS->flags))
4057                         goto out;
4058         }
4059         mutex_unlock(&open_lock);
4060         mutex_unlock(&floppy_mutex);
4061         return 0;
4062 out:
4063         UDRS->fd_ref--;
4064
4065         if (!UDRS->fd_ref)
4066                 opened_bdev[drive] = NULL;
4067 out2:
4068         mutex_unlock(&open_lock);
4069         mutex_unlock(&floppy_mutex);
4070         return res;
4071 }
4072
4073 /*
4074  * Check if the disk has been changed or if a change has been faked.
4075  */
4076 static unsigned int floppy_check_events(struct gendisk *disk,
4077                                         unsigned int clearing)
4078 {
4079         int drive = (long)disk->private_data;
4080
4081         if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4082             test_bit(FD_VERIFY_BIT, &UDRS->flags))
4083                 return DISK_EVENT_MEDIA_CHANGE;
4084
4085         if (time_after(jiffies, UDRS->last_checked + UDP->checkfreq)) {
4086                 if (lock_fdc(drive))
4087                         return -EINTR;
4088                 poll_drive(false, 0);
4089                 process_fd_request();
4090         }
4091
4092         if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4093             test_bit(FD_VERIFY_BIT, &UDRS->flags) ||
4094             test_bit(drive, &fake_change) ||
4095             drive_no_geom(drive))
4096                 return DISK_EVENT_MEDIA_CHANGE;
4097         return 0;
4098 }
4099
4100 /*
4101  * This implements "read block 0" for floppy_revalidate().
4102  * Needed for format autodetection, checking whether there is
4103  * a disk in the drive, and whether that disk is writable.
4104  */
4105
4106 struct rb0_cbdata {
4107         int drive;
4108         struct completion complete;
4109 };
4110
4111 static void floppy_rb0_cb(struct bio *bio)
4112 {
4113         struct rb0_cbdata *cbdata = (struct rb0_cbdata *)bio->bi_private;
4114         int drive = cbdata->drive;
4115
4116         if (bio->bi_status) {
4117                 pr_info("floppy: error %d while reading block 0\n",
4118                         bio->bi_status);
4119                 set_bit(FD_OPEN_SHOULD_FAIL_BIT, &UDRS->flags);
4120         }
4121         complete(&cbdata->complete);
4122 }
4123
4124 static int __floppy_read_block_0(struct block_device *bdev, int drive)
4125 {
4126         struct bio bio;
4127         struct bio_vec bio_vec;
4128         struct page *page;
4129         struct rb0_cbdata cbdata;
4130         size_t size;
4131
4132         page = alloc_page(GFP_NOIO);
4133         if (!page) {
4134                 process_fd_request();
4135                 return -ENOMEM;
4136         }
4137
4138         size = bdev->bd_block_size;
4139         if (!size)
4140                 size = 1024;
4141
4142         cbdata.drive = drive;
4143
4144         bio_init(&bio, &bio_vec, 1);
4145         bio_set_dev(&bio, bdev);
4146         bio_add_page(&bio, page, size, 0);
4147
4148         bio.bi_iter.bi_sector = 0;
4149         bio.bi_flags |= (1 << BIO_QUIET);
4150         bio.bi_private = &cbdata;
4151         bio.bi_end_io = floppy_rb0_cb;
4152         bio_set_op_attrs(&bio, REQ_OP_READ, 0);
4153
4154         submit_bio(&bio);
4155         process_fd_request();
4156
4157         init_completion(&cbdata.complete);
4158         wait_for_completion(&cbdata.complete);
4159
4160         __free_page(page);
4161
4162         return 0;
4163 }
4164
4165 /* revalidate the floppy disk, i.e. trigger format autodetection by reading
4166  * the bootblock (block 0). "Autodetection" is also needed to check whether
4167  * there is a disk in the drive at all... Thus we also do it for fixed
4168  * geometry formats */
4169 static int floppy_revalidate(struct gendisk *disk)
4170 {
4171         int drive = (long)disk->private_data;
4172         int cf;
4173         int res = 0;
4174
4175         if (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4176             test_bit(FD_VERIFY_BIT, &UDRS->flags) ||
4177             test_bit(drive, &fake_change) ||
4178             drive_no_geom(drive)) {
4179                 if (WARN(atomic_read(&usage_count) == 0,
4180                          "VFS: revalidate called on non-open device.\n"))
4181                         return -EFAULT;
4182
4183                 res = lock_fdc(drive);
4184                 if (res)
4185                         return res;
4186                 cf = (test_bit(FD_DISK_CHANGED_BIT, &UDRS->flags) ||
4187                       test_bit(FD_VERIFY_BIT, &UDRS->flags));
4188                 if (!(cf || test_bit(drive, &fake_change) || drive_no_geom(drive))) {
4189                         process_fd_request();   /*already done by another thread */
4190                         return 0;
4191                 }
4192                 UDRS->maxblock = 0;
4193                 UDRS->maxtrack = 0;
4194                 if (buffer_drive == drive)
4195                         buffer_track = -1;
4196                 clear_bit(drive, &fake_change);
4197                 clear_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
4198                 if (cf)
4199                         UDRS->generation++;
4200                 if (drive_no_geom(drive)) {
4201                         /* auto-sensing */
4202                         res = __floppy_read_block_0(opened_bdev[drive], drive);
4203                 } else {
4204                         if (cf)
4205                                 poll_drive(false, FD_RAW_NEED_DISK);
4206                         process_fd_request();
4207                 }
4208         }
4209         set_capacity(disk, floppy_sizes[UDRS->fd_device]);
4210         return res;
4211 }
4212
4213 static const struct block_device_operations floppy_fops = {
4214         .owner                  = THIS_MODULE,
4215         .open                   = floppy_open,
4216         .release                = floppy_release,
4217         .ioctl                  = fd_ioctl,
4218         .getgeo                 = fd_getgeo,
4219         .check_events           = floppy_check_events,
4220         .revalidate_disk        = floppy_revalidate,
4221 #ifdef CONFIG_COMPAT
4222         .compat_ioctl           = fd_compat_ioctl,
4223 #endif
4224 };
4225
4226 /*
4227  * Floppy Driver initialization
4228  * =============================
4229  */
4230
4231 /* Determine the floppy disk controller type */
4232 /* This routine was written by David C. Niemi */
4233 static char __init get_fdc_version(void)
4234 {
4235         int r;
4236
4237         output_byte(FD_DUMPREGS);       /* 82072 and better know DUMPREGS */
4238         if (FDCS->reset)
4239                 return FDC_NONE;
4240         r = result();
4241         if (r <= 0x00)
4242                 return FDC_NONE;        /* No FDC present ??? */
4243         if ((r == 1) && (reply_buffer[0] == 0x80)) {
4244                 pr_info("FDC %d is an 8272A\n", fdc);
4245                 return FDC_8272A;       /* 8272a/765 don't know DUMPREGS */
4246         }
4247         if (r != 10) {
4248                 pr_info("FDC %d init: DUMPREGS: unexpected return of %d bytes.\n",
4249                         fdc, r);
4250                 return FDC_UNKNOWN;
4251         }
4252
4253         if (!fdc_configure()) {
4254                 pr_info("FDC %d is an 82072\n", fdc);
4255                 return FDC_82072;       /* 82072 doesn't know CONFIGURE */
4256         }
4257
4258         output_byte(FD_PERPENDICULAR);
4259         if (need_more_output() == MORE_OUTPUT) {
4260                 output_byte(0);
4261         } else {
4262                 pr_info("FDC %d is an 82072A\n", fdc);
4263                 return FDC_82072A;      /* 82072A as found on Sparcs. */
4264         }
4265
4266         output_byte(FD_UNLOCK);
4267         r = result();
4268         if ((r == 1) && (reply_buffer[0] == 0x80)) {
4269                 pr_info("FDC %d is a pre-1991 82077\n", fdc);
4270                 return FDC_82077_ORIG;  /* Pre-1991 82077, doesn't know
4271                                          * LOCK/UNLOCK */
4272         }
4273         if ((r != 1) || (reply_buffer[0] != 0x00)) {
4274                 pr_info("FDC %d init: UNLOCK: unexpected return of %d bytes.\n",
4275                         fdc, r);
4276                 return FDC_UNKNOWN;
4277         }
4278         output_byte(FD_PARTID);
4279         r = result();
4280         if (r != 1) {
4281                 pr_info("FDC %d init: PARTID: unexpected return of %d bytes.\n",
4282                         fdc, r);
4283                 return FDC_UNKNOWN;
4284         }
4285         if (reply_buffer[0] == 0x80) {
4286                 pr_info("FDC %d is a post-1991 82077\n", fdc);
4287                 return FDC_82077;       /* Revised 82077AA passes all the tests */
4288         }
4289         switch (reply_buffer[0] >> 5) {
4290         case 0x0:
4291                 /* Either a 82078-1 or a 82078SL running at 5Volt */
4292                 pr_info("FDC %d is an 82078.\n", fdc);
4293                 return FDC_82078;
4294         case 0x1:
4295                 pr_info("FDC %d is a 44pin 82078\n", fdc);
4296                 return FDC_82078;
4297         case 0x2:
4298                 pr_info("FDC %d is a S82078B\n", fdc);
4299                 return FDC_S82078B;
4300         case 0x3:
4301                 pr_info("FDC %d is a National Semiconductor PC87306\n", fdc);
4302                 return FDC_87306;
4303         default:
4304                 pr_info("FDC %d init: 82078 variant with unknown PARTID=%d.\n",
4305                         fdc, reply_buffer[0] >> 5);
4306                 return FDC_82078_UNKN;
4307         }
4308 }                               /* get_fdc_version */
4309
4310 /* lilo configuration */
4311
4312 static void __init floppy_set_flags(int *ints, int param, int param2)
4313 {
4314         int i;
4315
4316         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4317                 if (param)
4318                         default_drive_params[i].params.flags |= param2;
4319                 else
4320                         default_drive_params[i].params.flags &= ~param2;
4321         }
4322         DPRINT("%s flag 0x%x\n", param2 ? "Setting" : "Clearing", param);
4323 }
4324
4325 static void __init daring(int *ints, int param, int param2)
4326 {
4327         int i;
4328
4329         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4330                 if (param) {
4331                         default_drive_params[i].params.select_delay = 0;
4332                         default_drive_params[i].params.flags |=
4333                             FD_SILENT_DCL_CLEAR;
4334                 } else {
4335                         default_drive_params[i].params.select_delay =
4336                             2 * HZ / 100;
4337                         default_drive_params[i].params.flags &=
4338                             ~FD_SILENT_DCL_CLEAR;
4339                 }
4340         }
4341         DPRINT("Assuming %s floppy hardware\n", param ? "standard" : "broken");
4342 }
4343
4344 static void __init set_cmos(int *ints, int dummy, int dummy2)
4345 {
4346         int current_drive = 0;
4347
4348         if (ints[0] != 2) {
4349                 DPRINT("wrong number of parameters for CMOS\n");
4350                 return;
4351         }
4352         current_drive = ints[1];
4353         if (current_drive < 0 || current_drive >= 8) {
4354                 DPRINT("bad drive for set_cmos\n");
4355                 return;
4356         }
4357 #if N_FDC > 1
4358         if (current_drive >= 4 && !FDC2)
4359                 FDC2 = 0x370;
4360 #endif
4361         DP->cmos = ints[2];
4362         DPRINT("setting CMOS code to %d\n", ints[2]);
4363 }
4364
4365 static struct param_table {
4366         const char *name;
4367         void (*fn) (int *ints, int param, int param2);
4368         int *var;
4369         int def_param;
4370         int param2;
4371 } config_params[] __initdata = {
4372         {"allowed_drive_mask", NULL, &allowed_drive_mask, 0xff, 0}, /* obsolete */
4373         {"all_drives", NULL, &allowed_drive_mask, 0xff, 0},     /* obsolete */
4374         {"asus_pci", NULL, &allowed_drive_mask, 0x33, 0},
4375         {"irq", NULL, &FLOPPY_IRQ, 6, 0},
4376         {"dma", NULL, &FLOPPY_DMA, 2, 0},
4377         {"daring", daring, NULL, 1, 0},
4378 #if N_FDC > 1
4379         {"two_fdc", NULL, &FDC2, 0x370, 0},
4380         {"one_fdc", NULL, &FDC2, 0, 0},
4381 #endif
4382         {"thinkpad", floppy_set_flags, NULL, 1, FD_INVERTED_DCL},
4383         {"broken_dcl", floppy_set_flags, NULL, 1, FD_BROKEN_DCL},
4384         {"messages", floppy_set_flags, NULL, 1, FTD_MSG},
4385         {"silent_dcl_clear", floppy_set_flags, NULL, 1, FD_SILENT_DCL_CLEAR},
4386         {"debug", floppy_set_flags, NULL, 1, FD_DEBUG},
4387         {"nodma", NULL, &can_use_virtual_dma, 1, 0},
4388         {"omnibook", NULL, &can_use_virtual_dma, 1, 0},
4389         {"yesdma", NULL, &can_use_virtual_dma, 0, 0},
4390         {"fifo_depth", NULL, &fifo_depth, 0xa, 0},
4391         {"nofifo", NULL, &no_fifo, 0x20, 0},
4392         {"usefifo", NULL, &no_fifo, 0, 0},
4393         {"cmos", set_cmos, NULL, 0, 0},
4394         {"slow", NULL, &slow_floppy, 1, 0},
4395         {"unexpected_interrupts", NULL, &print_unex, 1, 0},
4396         {"no_unexpected_interrupts", NULL, &print_unex, 0, 0},
4397         {"L40SX", NULL, &print_unex, 0, 0}
4398
4399         EXTRA_FLOPPY_PARAMS
4400 };
4401
4402 static int __init floppy_setup(char *str)
4403 {
4404         int i;
4405         int param;
4406         int ints[11];
4407
4408         str = get_options(str, ARRAY_SIZE(ints), ints);
4409         if (str) {
4410                 for (i = 0; i < ARRAY_SIZE(config_params); i++) {
4411                         if (strcmp(str, config_params[i].name) == 0) {
4412                                 if (ints[0])
4413                                         param = ints[1];
4414                                 else
4415                                         param = config_params[i].def_param;
4416                                 if (config_params[i].fn)
4417                                         config_params[i].fn(ints, param,
4418                                                             config_params[i].
4419                                                             param2);
4420                                 if (config_params[i].var) {
4421                                         DPRINT("%s=%d\n", str, param);
4422                                         *config_params[i].var = param;
4423                                 }
4424                                 return 1;
4425                         }
4426                 }
4427         }
4428         if (str) {
4429                 DPRINT("unknown floppy option [%s]\n", str);
4430
4431                 DPRINT("allowed options are:");
4432                 for (i = 0; i < ARRAY_SIZE(config_params); i++)
4433                         pr_cont(" %s", config_params[i].name);
4434                 pr_cont("\n");
4435         } else
4436                 DPRINT("botched floppy option\n");
4437         DPRINT("Read Documentation/blockdev/floppy.txt\n");
4438         return 0;
4439 }
4440
4441 static int have_no_fdc = -ENODEV;
4442
4443 static ssize_t floppy_cmos_show(struct device *dev,
4444                                 struct device_attribute *attr, char *buf)
4445 {
4446         struct platform_device *p = to_platform_device(dev);
4447         int drive;
4448
4449         drive = p->id;
4450         return sprintf(buf, "%X\n", UDP->cmos);
4451 }
4452
4453 static DEVICE_ATTR(cmos, 0444, floppy_cmos_show, NULL);
4454
4455 static struct attribute *floppy_dev_attrs[] = {
4456         &dev_attr_cmos.attr,
4457         NULL
4458 };
4459
4460 ATTRIBUTE_GROUPS(floppy_dev);
4461
4462 static void floppy_device_release(struct device *dev)
4463 {
4464 }
4465
4466 static int floppy_resume(struct device *dev)
4467 {
4468         int fdc;
4469
4470         for (fdc = 0; fdc < N_FDC; fdc++)
4471                 if (FDCS->address != -1)
4472                         user_reset_fdc(-1, FD_RESET_ALWAYS, false);
4473
4474         return 0;
4475 }
4476
4477 static const struct dev_pm_ops floppy_pm_ops = {
4478         .resume = floppy_resume,
4479         .restore = floppy_resume,
4480 };
4481
4482 static struct platform_driver floppy_driver = {
4483         .driver = {
4484                    .name = "floppy",
4485                    .pm = &floppy_pm_ops,
4486         },
4487 };
4488
4489 static struct platform_device floppy_device[N_DRIVE];
4490
4491 static bool floppy_available(int drive)
4492 {
4493         if (!(allowed_drive_mask & (1 << drive)))
4494                 return false;
4495         if (fdc_state[FDC(drive)].version == FDC_NONE)
4496                 return false;
4497         return true;
4498 }
4499
4500 static struct kobject *floppy_find(dev_t dev, int *part, void *data)
4501 {
4502         int drive = (*part & 3) | ((*part & 0x80) >> 5);
4503         if (drive >= N_DRIVE || !floppy_available(drive))
4504                 return NULL;
4505         if (((*part >> 2) & 0x1f) >= ARRAY_SIZE(floppy_type))
4506                 return NULL;
4507         *part = 0;
4508         return get_disk_and_module(disks[drive]);
4509 }
4510
4511 static int __init do_floppy_init(void)
4512 {
4513         int i, unit, drive, err;
4514
4515         set_debugt();
4516         interruptjiffies = resultjiffies = jiffies;
4517
4518 #if defined(CONFIG_PPC)
4519         if (check_legacy_ioport(FDC1))
4520                 return -ENODEV;
4521 #endif
4522
4523         raw_cmd = NULL;
4524
4525         floppy_wq = alloc_ordered_workqueue("floppy", 0);
4526         if (!floppy_wq)
4527                 return -ENOMEM;
4528
4529         for (drive = 0; drive < N_DRIVE; drive++) {
4530                 disks[drive] = alloc_disk(1);
4531                 if (!disks[drive]) {
4532                         err = -ENOMEM;
4533                         goto out_put_disk;
4534                 }
4535
4536                 disks[drive]->queue = blk_init_queue(do_fd_request, &floppy_lock);
4537                 if (!disks[drive]->queue) {
4538                         err = -ENOMEM;
4539                         goto out_put_disk;
4540                 }
4541
4542                 blk_queue_bounce_limit(disks[drive]->queue, BLK_BOUNCE_HIGH);
4543                 blk_queue_max_hw_sectors(disks[drive]->queue, 64);
4544                 disks[drive]->major = FLOPPY_MAJOR;
4545                 disks[drive]->first_minor = TOMINOR(drive);
4546                 disks[drive]->fops = &floppy_fops;
4547                 sprintf(disks[drive]->disk_name, "fd%d", drive);
4548
4549                 timer_setup(&motor_off_timer[drive], motor_off_callback, 0);
4550         }
4551
4552         err = register_blkdev(FLOPPY_MAJOR, "fd");
4553         if (err)
4554                 goto out_put_disk;
4555
4556         err = platform_driver_register(&floppy_driver);
4557         if (err)
4558                 goto out_unreg_blkdev;
4559
4560         blk_register_region(MKDEV(FLOPPY_MAJOR, 0), 256, THIS_MODULE,
4561                             floppy_find, NULL, NULL);
4562
4563         for (i = 0; i < 256; i++)
4564                 if (ITYPE(i))
4565                         floppy_sizes[i] = floppy_type[ITYPE(i)].size;
4566                 else
4567                         floppy_sizes[i] = MAX_DISK_SIZE << 1;
4568
4569         reschedule_timeout(MAXTIMEOUT, "floppy init");
4570         config_types();
4571
4572         for (i = 0; i < N_FDC; i++) {
4573                 fdc = i;
4574                 memset(FDCS, 0, sizeof(*FDCS));
4575                 FDCS->dtr = -1;
4576                 FDCS->dor = 0x4;
4577 #if defined(__sparc__) || defined(__mc68000__)
4578         /*sparcs/sun3x don't have a DOR reset which we can fall back on to */
4579 #ifdef __mc68000__
4580                 if (MACH_IS_SUN3X)
4581 #endif
4582                         FDCS->version = FDC_82072A;
4583 #endif
4584         }
4585
4586         use_virtual_dma = can_use_virtual_dma & 1;
4587         fdc_state[0].address = FDC1;
4588         if (fdc_state[0].address == -1) {
4589                 cancel_delayed_work(&fd_timeout);
4590                 err = -ENODEV;
4591                 goto out_unreg_region;
4592         }
4593 #if N_FDC > 1
4594         fdc_state[1].address = FDC2;
4595 #endif
4596
4597         fdc = 0;                /* reset fdc in case of unexpected interrupt */
4598         err = floppy_grab_irq_and_dma();
4599         if (err) {
4600                 cancel_delayed_work(&fd_timeout);
4601                 err = -EBUSY;
4602                 goto out_unreg_region;
4603         }
4604
4605         /* initialise drive state */
4606         for (drive = 0; drive < N_DRIVE; drive++) {
4607                 memset(UDRS, 0, sizeof(*UDRS));
4608                 memset(UDRWE, 0, sizeof(*UDRWE));
4609                 set_bit(FD_DISK_NEWCHANGE_BIT, &UDRS->flags);
4610                 set_bit(FD_DISK_CHANGED_BIT, &UDRS->flags);
4611                 set_bit(FD_VERIFY_BIT, &UDRS->flags);
4612                 UDRS->fd_device = -1;
4613                 floppy_track_buffer = NULL;
4614                 max_buffer_sectors = 0;
4615         }
4616         /*
4617          * Small 10 msec delay to let through any interrupt that
4618          * initialization might have triggered, to not
4619          * confuse detection:
4620          */
4621         msleep(10);
4622
4623         for (i = 0; i < N_FDC; i++) {
4624                 fdc = i;
4625                 FDCS->driver_version = FD_DRIVER_VERSION;
4626                 for (unit = 0; unit < 4; unit++)
4627                         FDCS->track[unit] = 0;
4628                 if (FDCS->address == -1)
4629                         continue;
4630                 FDCS->rawcmd = 2;
4631                 if (user_reset_fdc(-1, FD_RESET_ALWAYS, false)) {
4632                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4633                         floppy_release_regions(fdc);
4634                         FDCS->address = -1;
4635                         FDCS->version = FDC_NONE;
4636                         continue;
4637                 }
4638                 /* Try to determine the floppy controller type */
4639                 FDCS->version = get_fdc_version();
4640                 if (FDCS->version == FDC_NONE) {
4641                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4642                         floppy_release_regions(fdc);
4643                         FDCS->address = -1;
4644                         continue;
4645                 }
4646                 if (can_use_virtual_dma == 2 && FDCS->version < FDC_82072A)
4647                         can_use_virtual_dma = 0;
4648
4649                 have_no_fdc = 0;
4650                 /* Not all FDCs seem to be able to handle the version command
4651                  * properly, so force a reset for the standard FDC clones,
4652                  * to avoid interrupt garbage.
4653                  */
4654                 user_reset_fdc(-1, FD_RESET_ALWAYS, false);
4655         }
4656         fdc = 0;
4657         cancel_delayed_work(&fd_timeout);
4658         current_drive = 0;
4659         initialized = true;
4660         if (have_no_fdc) {
4661                 DPRINT("no floppy controllers found\n");
4662                 err = have_no_fdc;
4663                 goto out_release_dma;
4664         }
4665
4666         for (drive = 0; drive < N_DRIVE; drive++) {
4667                 if (!floppy_available(drive))
4668                         continue;
4669
4670                 floppy_device[drive].name = floppy_device_name;
4671                 floppy_device[drive].id = drive;
4672                 floppy_device[drive].dev.release = floppy_device_release;
4673                 floppy_device[drive].dev.groups = floppy_dev_groups;
4674
4675                 err = platform_device_register(&floppy_device[drive]);
4676                 if (err)
4677                         goto out_remove_drives;
4678
4679                 /* to be cleaned up... */
4680                 disks[drive]->private_data = (void *)(long)drive;
4681                 disks[drive]->flags |= GENHD_FL_REMOVABLE;
4682                 device_add_disk(&floppy_device[drive].dev, disks[drive]);
4683         }
4684
4685         return 0;
4686
4687 out_remove_drives:
4688         while (drive--) {
4689                 if (floppy_available(drive)) {
4690                         del_gendisk(disks[drive]);
4691                         platform_device_unregister(&floppy_device[drive]);
4692                 }
4693         }
4694 out_release_dma:
4695         if (atomic_read(&usage_count))
4696                 floppy_release_irq_and_dma();
4697 out_unreg_region:
4698         blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
4699         platform_driver_unregister(&floppy_driver);
4700 out_unreg_blkdev:
4701         unregister_blkdev(FLOPPY_MAJOR, "fd");
4702 out_put_disk:
4703         destroy_workqueue(floppy_wq);
4704         for (drive = 0; drive < N_DRIVE; drive++) {
4705                 if (!disks[drive])
4706                         break;
4707                 if (disks[drive]->queue) {
4708                         del_timer_sync(&motor_off_timer[drive]);
4709                         blk_cleanup_queue(disks[drive]->queue);
4710                         disks[drive]->queue = NULL;
4711                 }
4712                 put_disk(disks[drive]);
4713         }
4714         return err;
4715 }
4716
4717 #ifndef MODULE
4718 static __init void floppy_async_init(void *data, async_cookie_t cookie)
4719 {
4720         do_floppy_init();
4721 }
4722 #endif
4723
4724 static int __init floppy_init(void)
4725 {
4726 #ifdef MODULE
4727         return do_floppy_init();
4728 #else
4729         /* Don't hold up the bootup by the floppy initialization */
4730         async_schedule(floppy_async_init, NULL);
4731         return 0;
4732 #endif
4733 }
4734
4735 static const struct io_region {
4736         int offset;
4737         int size;
4738 } io_regions[] = {
4739         { 2, 1 },
4740         /* address + 3 is sometimes reserved by pnp bios for motherboard */
4741         { 4, 2 },
4742         /* address + 6 is reserved, and may be taken by IDE.
4743          * Unfortunately, Adaptec doesn't know this :-(, */
4744         { 7, 1 },
4745 };
4746
4747 static void floppy_release_allocated_regions(int fdc, const struct io_region *p)
4748 {
4749         while (p != io_regions) {
4750                 p--;
4751                 release_region(FDCS->address + p->offset, p->size);
4752         }
4753 }
4754
4755 #define ARRAY_END(X) (&((X)[ARRAY_SIZE(X)]))
4756
4757 static int floppy_request_regions(int fdc)
4758 {
4759         const struct io_region *p;
4760
4761         for (p = io_regions; p < ARRAY_END(io_regions); p++) {
4762                 if (!request_region(FDCS->address + p->offset,
4763                                     p->size, "floppy")) {
4764                         DPRINT("Floppy io-port 0x%04lx in use\n",
4765                                FDCS->address + p->offset);
4766                         floppy_release_allocated_regions(fdc, p);
4767                         return -EBUSY;
4768                 }
4769         }
4770         return 0;
4771 }
4772
4773 static void floppy_release_regions(int fdc)
4774 {
4775         floppy_release_allocated_regions(fdc, ARRAY_END(io_regions));
4776 }
4777
4778 static int floppy_grab_irq_and_dma(void)
4779 {
4780         if (atomic_inc_return(&usage_count) > 1)
4781                 return 0;
4782
4783         /*
4784          * We might have scheduled a free_irq(), wait it to
4785          * drain first:
4786          */
4787         flush_workqueue(floppy_wq);
4788
4789         if (fd_request_irq()) {
4790                 DPRINT("Unable to grab IRQ%d for the floppy driver\n",
4791                        FLOPPY_IRQ);
4792                 atomic_dec(&usage_count);
4793                 return -1;
4794         }
4795         if (fd_request_dma()) {
4796                 DPRINT("Unable to grab DMA%d for the floppy driver\n",
4797                        FLOPPY_DMA);
4798                 if (can_use_virtual_dma & 2)
4799                         use_virtual_dma = can_use_virtual_dma = 1;
4800                 if (!(can_use_virtual_dma & 1)) {
4801                         fd_free_irq();
4802                         atomic_dec(&usage_count);
4803                         return -1;
4804                 }
4805         }
4806
4807         for (fdc = 0; fdc < N_FDC; fdc++) {
4808                 if (FDCS->address != -1) {
4809                         if (floppy_request_regions(fdc))
4810                                 goto cleanup;
4811                 }
4812         }
4813         for (fdc = 0; fdc < N_FDC; fdc++) {
4814                 if (FDCS->address != -1) {
4815                         reset_fdc_info(1);
4816                         fd_outb(FDCS->dor, FD_DOR);
4817                 }
4818         }
4819         fdc = 0;
4820         set_dor(0, ~0, 8);      /* avoid immediate interrupt */
4821
4822         for (fdc = 0; fdc < N_FDC; fdc++)
4823                 if (FDCS->address != -1)
4824                         fd_outb(FDCS->dor, FD_DOR);
4825         /*
4826          * The driver will try and free resources and relies on us
4827          * to know if they were allocated or not.
4828          */
4829         fdc = 0;
4830         irqdma_allocated = 1;
4831         return 0;
4832 cleanup:
4833         fd_free_irq();
4834         fd_free_dma();
4835         while (--fdc >= 0)
4836                 floppy_release_regions(fdc);
4837         atomic_dec(&usage_count);
4838         return -1;
4839 }
4840
4841 static void floppy_release_irq_and_dma(void)
4842 {
4843         int old_fdc;
4844 #ifndef __sparc__
4845         int drive;
4846 #endif
4847         long tmpsize;
4848         unsigned long tmpaddr;
4849
4850         if (!atomic_dec_and_test(&usage_count))
4851                 return;
4852
4853         if (irqdma_allocated) {
4854                 fd_disable_dma();
4855                 fd_free_dma();
4856                 fd_free_irq();
4857                 irqdma_allocated = 0;
4858         }
4859         set_dor(0, ~0, 8);
4860 #if N_FDC > 1
4861         set_dor(1, ~8, 0);
4862 #endif
4863
4864         if (floppy_track_buffer && max_buffer_sectors) {
4865                 tmpsize = max_buffer_sectors * 1024;
4866                 tmpaddr = (unsigned long)floppy_track_buffer;
4867                 floppy_track_buffer = NULL;
4868                 max_buffer_sectors = 0;
4869                 buffer_min = buffer_max = -1;
4870                 fd_dma_mem_free(tmpaddr, tmpsize);
4871         }
4872 #ifndef __sparc__
4873         for (drive = 0; drive < N_FDC * 4; drive++)
4874                 if (timer_pending(motor_off_timer + drive))
4875                         pr_info("motor off timer %d still active\n", drive);
4876 #endif
4877
4878         if (delayed_work_pending(&fd_timeout))
4879                 pr_info("floppy timer still active:%s\n", timeout_message);
4880         if (delayed_work_pending(&fd_timer))
4881                 pr_info("auxiliary floppy timer still active\n");
4882         if (work_pending(&floppy_work))
4883                 pr_info("work still pending\n");
4884         old_fdc = fdc;
4885         for (fdc = 0; fdc < N_FDC; fdc++)
4886                 if (FDCS->address != -1)
4887                         floppy_release_regions(fdc);
4888         fdc = old_fdc;
4889 }
4890
4891 #ifdef MODULE
4892
4893 static char *floppy;
4894
4895 static void __init parse_floppy_cfg_string(char *cfg)
4896 {
4897         char *ptr;
4898
4899         while (*cfg) {
4900                 ptr = cfg;
4901                 while (*cfg && *cfg != ' ' && *cfg != '\t')
4902                         cfg++;
4903                 if (*cfg) {
4904                         *cfg = '\0';
4905                         cfg++;
4906                 }
4907                 if (*ptr)
4908                         floppy_setup(ptr);
4909         }
4910 }
4911
4912 static int __init floppy_module_init(void)
4913 {
4914         if (floppy)
4915                 parse_floppy_cfg_string(floppy);
4916         return floppy_init();
4917 }
4918 module_init(floppy_module_init);
4919
4920 static void __exit floppy_module_exit(void)
4921 {
4922         int drive;
4923
4924         blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
4925         unregister_blkdev(FLOPPY_MAJOR, "fd");
4926         platform_driver_unregister(&floppy_driver);
4927
4928         destroy_workqueue(floppy_wq);
4929
4930         for (drive = 0; drive < N_DRIVE; drive++) {
4931                 del_timer_sync(&motor_off_timer[drive]);
4932
4933                 if (floppy_available(drive)) {
4934                         del_gendisk(disks[drive]);
4935                         platform_device_unregister(&floppy_device[drive]);
4936                 }
4937                 blk_cleanup_queue(disks[drive]->queue);
4938
4939                 /*
4940                  * These disks have not called add_disk().  Don't put down
4941                  * queue reference in put_disk().
4942                  */
4943                 if (!(allowed_drive_mask & (1 << drive)) ||
4944                     fdc_state[FDC(drive)].version == FDC_NONE)
4945                         disks[drive]->queue = NULL;
4946
4947                 put_disk(disks[drive]);
4948         }
4949
4950         cancel_delayed_work_sync(&fd_timeout);
4951         cancel_delayed_work_sync(&fd_timer);
4952
4953         if (atomic_read(&usage_count))
4954                 floppy_release_irq_and_dma();
4955
4956         /* eject disk, if any */
4957         fd_eject(0);
4958 }
4959
4960 module_exit(floppy_module_exit);
4961
4962 module_param(floppy, charp, 0);
4963 module_param(FLOPPY_IRQ, int, 0);
4964 module_param(FLOPPY_DMA, int, 0);
4965 MODULE_AUTHOR("Alain L. Knaff");
4966 MODULE_SUPPORTED_DEVICE("fd");
4967 MODULE_LICENSE("GPL");
4968
4969 /* This doesn't actually get used other than for module information */
4970 static const struct pnp_device_id floppy_pnpids[] = {
4971         {"PNP0700", 0},
4972         {}
4973 };
4974
4975 MODULE_DEVICE_TABLE(pnp, floppy_pnpids);
4976
4977 #else
4978
4979 __setup("floppy=", floppy_setup);
4980 module_init(floppy_init)
4981 #endif
4982
4983 MODULE_ALIAS_BLOCKDEV_MAJOR(FLOPPY_MAJOR);