• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *  linux/drivers/block/floppy.c
4  *
5  *  Copyright (C) 1991, 1992  Linus Torvalds
6  *  Copyright (C) 1993, 1994  Alain Knaff
7  *  Copyright (C) 1998 Alan Cox
8  */
9 
10 /*
11  * 02.12.91 - Changed to static variables to indicate need for reset
12  * and recalibrate. This makes some things easier (output_byte reset
13  * checking etc), and means less interrupt jumping in case of errors,
14  * so the code is hopefully easier to understand.
15  */
16 
17 /*
18  * This file is certainly a mess. I've tried my best to get it working,
19  * but I don't like programming floppies, and I have only one anyway.
20  * Urgel. I should check for more errors, and do more graceful error
21  * recovery. Seems there are problems with several drives. I've tried to
22  * correct them. No promises.
23  */
24 
25 /*
26  * As with hd.c, all routines within this file can (and will) be called
27  * by interrupts, so extreme caution is needed. A hardware interrupt
28  * handler may not sleep, or a kernel panic will happen. Thus I cannot
29  * call "floppy-on" directly, but have to set a special timer interrupt
30  * etc.
31  */
32 
33 /*
34  * 28.02.92 - made track-buffering routines, based on the routines written
35  * by entropy@wintermute.wpi.edu (Lawrence Foard). Linus.
36  */
37 
38 /*
39  * Automatic floppy-detection and formatting written by Werner Almesberger
40  * (almesber@nessie.cs.id.ethz.ch), who also corrected some problems with
41  * the floppy-change signal detection.
42  */
43 
44 /*
45  * 1992/7/22 -- Hennus Bergman: Added better error reporting, fixed
46  * FDC data overrun bug, added some preliminary stuff for vertical
47  * recording support.
48  *
49  * 1992/9/17: Added DMA allocation & DMA functions. -- hhb.
50  *
51  * TODO: Errors are still not counted properly.
52  */
53 
54 /* 1992/9/20
55  * Modifications for ``Sector Shifting'' by Rob Hooft (hooft@chem.ruu.nl)
56  * modeled after the freeware MS-DOS program fdformat/88 V1.8 by
57  * Christoph H. Hochst\"atter.
58  * I have fixed the shift values to the ones I always use. Maybe a new
59  * ioctl() should be created to be able to modify them.
60  * There is a bug in the driver that makes it impossible to format a
61  * floppy as the first thing after bootup.
62  */
63 
64 /*
65  * 1993/4/29 -- Linus -- cleaned up the timer handling in the kernel, and
66  * this helped the floppy driver as well. Much cleaner, and still seems to
67  * work.
68  */
69 
70 /* 1994/6/24 --bbroad-- added the floppy table entries and made
71  * minor modifications to allow 2.88 floppies to be run.
72  */
73 
74 /* 1994/7/13 -- Paul Vojta -- modified the probing code to allow three or more
75  * disk types.
76  */
77 
78 /*
79  * 1994/8/8 -- Alain Knaff -- Switched to fdpatch driver: Support for bigger
80  * format bug fixes, but unfortunately some new bugs too...
81  */
82 
83 /* 1994/9/17 -- Koen Holtman -- added logging of physical floppy write
84  * errors to allow safe writing by specialized programs.
85  */
86 
87 /* 1995/4/24 -- Dan Fandrich -- added support for Commodore 1581 3.5" disks
88  * by defining bit 1 of the "stretch" parameter to mean put sectors on the
89  * opposite side of the disk, leaving the sector IDs alone (i.e. Commodore's
90  * drives are "upside-down").
91  */
92 
93 /*
94  * 1995/8/26 -- Andreas Busse -- added Mips support.
95  */
96 
97 /*
98  * 1995/10/18 -- Ralf Baechle -- Portability cleanup; move machine dependent
99  * features to asm/floppy.h.
100  */
101 
102 /*
103  * 1998/1/21 -- Richard Gooch <rgooch@atnf.csiro.au> -- devfs support
104  */
105 
106 /*
107  * 1998/05/07 -- Russell King -- More portability cleanups; moved definition of
108  * interrupt and dma channel to asm/floppy.h. Cleaned up some formatting &
109  * use of '0' for NULL.
110  */
111 
112 /*
113  * 1998/06/07 -- Alan Cox -- Merged the 2.0.34 fixes for resource allocation
114  * failures.
115  */
116 
117 /*
118  * 1998/09/20 -- David Weinehall -- Added slow-down code for buggy PS/2-drives.
119  */
120 
121 /*
122  * 1999/08/13 -- Paul Slootman -- floppy stopped working on Alpha after 24
123  * days, 6 hours, 32 minutes and 32 seconds (i.e. MAXINT jiffies; ints were
124  * being used to store jiffies, which are unsigned longs).
125  */
126 
127 /*
128  * 2000/08/28 -- Arnaldo Carvalho de Melo <acme@conectiva.com.br>
129  * - get rid of check_region
130  * - s/suser/capable/
131  */
132 
133 /*
134  * 2001/08/26 -- Paul Gortmaker - fix insmod oops on machines with no
135  * floppy controller (lingering task on list after module is gone... boom.)
136  */
137 
138 /*
139  * 2002/02/07 -- Anton Altaparmakov - Fix io ports reservation to correct range
140  * (0x3f2-0x3f5, 0x3f7). This fix is a bit of a hack but the proper fix
141  * requires many non-obvious changes in arch dependent code.
142  */
143 
144 /* 2003/07/28 -- Daniele Bellucci <bellucda@tiscali.it>.
145  * Better audit of register_blkdev.
146  */
147 
148 #undef  FLOPPY_SILENT_DCL_CLEAR
149 
150 #define REALLY_SLOW_IO
151 
152 #define DEBUGT 2
153 
154 #define DPRINT(format, args...) \
155 	pr_info("floppy%d: " format, current_drive, ##args)
156 
157 #define DCL_DEBUG		/* debug disk change line */
158 #ifdef DCL_DEBUG
159 #define debug_dcl(test, fmt, args...) \
160 	do { if ((test) & FD_DEBUG) DPRINT(fmt, ##args); } while (0)
161 #else
162 #define debug_dcl(test, fmt, args...) \
163 	do { if (0) DPRINT(fmt, ##args); } while (0)
164 #endif
165 
166 /* do print messages for unexpected interrupts */
167 static int print_unex = 1;
168 #include <linux/module.h>
169 #include <linux/sched.h>
170 #include <linux/fs.h>
171 #include <linux/kernel.h>
172 #include <linux/timer.h>
173 #include <linux/workqueue.h>
174 #include <linux/fdreg.h>
175 #include <linux/fd.h>
176 #include <linux/hdreg.h>
177 #include <linux/errno.h>
178 #include <linux/slab.h>
179 #include <linux/mm.h>
180 #include <linux/bio.h>
181 #include <linux/string.h>
182 #include <linux/jiffies.h>
183 #include <linux/fcntl.h>
184 #include <linux/delay.h>
185 #include <linux/mc146818rtc.h>	/* CMOS defines */
186 #include <linux/ioport.h>
187 #include <linux/interrupt.h>
188 #include <linux/init.h>
189 #include <linux/platform_device.h>
190 #include <linux/mod_devicetable.h>
191 #include <linux/mutex.h>
192 #include <linux/io.h>
193 #include <linux/uaccess.h>
194 #include <linux/async.h>
195 #include <linux/compat.h>
196 
197 /*
198  * PS/2 floppies have much slower step rates than regular floppies.
199  * It's been recommended that take about 1/4 of the default speed
200  * in some more extreme cases.
201  */
202 static DEFINE_MUTEX(floppy_mutex);
203 static int slow_floppy;
204 
205 #include <asm/dma.h>
206 #include <asm/irq.h>
207 
208 static int FLOPPY_IRQ = 6;
209 static int FLOPPY_DMA = 2;
210 static int can_use_virtual_dma = 2;
211 /* =======
212  * can use virtual DMA:
213  * 0 = use of virtual DMA disallowed by config
214  * 1 = use of virtual DMA prescribed by config
215  * 2 = no virtual DMA preference configured.  By default try hard DMA,
216  * but fall back on virtual DMA when not enough memory available
217  */
218 
219 static int use_virtual_dma;
220 /* =======
221  * use virtual DMA
222  * 0 using hard DMA
223  * 1 using virtual DMA
224  * This variable is set to virtual when a DMA mem problem arises, and
225  * reset back in floppy_grab_irq_and_dma.
226  * It is not safe to reset it in other circumstances, because the floppy
227  * driver may have several buffers in use at once, and we do currently not
228  * record each buffers capabilities
229  */
230 
231 static DEFINE_SPINLOCK(floppy_lock);
232 
233 static unsigned short virtual_dma_port = 0x3f0;
234 irqreturn_t floppy_interrupt(int irq, void *dev_id);
235 static int set_dor(int fdc, char mask, char data);
236 
237 #define K_64	0x10000		/* 64KB */
238 
239 /* the following is the mask of allowed drives. By default units 2 and
240  * 3 of both floppy controllers are disabled, because switching on the
241  * motor of these drives causes system hangs on some PCI computers. drive
242  * 0 is the low bit (0x1), and drive 7 is the high bit (0x80). Bits are on if
243  * a drive is allowed.
244  *
245  * NOTE: This must come before we include the arch floppy header because
246  *       some ports reference this variable from there. -DaveM
247  */
248 
249 static int allowed_drive_mask = 0x33;
250 
251 #include <asm/floppy.h>
252 
253 static int irqdma_allocated;
254 
255 #include <linux/blk-mq.h>
256 #include <linux/blkpg.h>
257 #include <linux/cdrom.h>	/* for the compatibility eject ioctl */
258 #include <linux/completion.h>
259 
260 static LIST_HEAD(floppy_reqs);
261 static struct request *current_req;
262 static int set_next_request(void);
263 
264 #ifndef fd_get_dma_residue
265 #define fd_get_dma_residue() get_dma_residue(FLOPPY_DMA)
266 #endif
267 
268 /* Dma Memory related stuff */
269 
270 #ifndef fd_dma_mem_free
271 #define fd_dma_mem_free(addr, size) free_pages(addr, get_order(size))
272 #endif
273 
274 #ifndef fd_dma_mem_alloc
275 #define fd_dma_mem_alloc(size) __get_dma_pages(GFP_KERNEL, get_order(size))
276 #endif
277 
278 #ifndef fd_cacheflush
279 #define fd_cacheflush(addr, size) /* nothing... */
280 #endif
281 
fallback_on_nodma_alloc(char ** addr,size_t l)282 static inline void fallback_on_nodma_alloc(char **addr, size_t l)
283 {
284 #ifdef FLOPPY_CAN_FALLBACK_ON_NODMA
285 	if (*addr)
286 		return;		/* we have the memory */
287 	if (can_use_virtual_dma != 2)
288 		return;		/* no fallback allowed */
289 	pr_info("DMA memory shortage. Temporarily falling back on virtual DMA\n");
290 	*addr = (char *)nodma_mem_alloc(l);
291 #else
292 	return;
293 #endif
294 }
295 
296 /* End dma memory related stuff */
297 
298 static unsigned long fake_change;
299 static bool initialized;
300 
301 #define ITYPE(x)	(((x) >> 2) & 0x1f)
302 #define TOMINOR(x)	((x & 3) | ((x & 4) << 5))
303 #define UNIT(x)		((x) & 0x03)		/* drive on fdc */
304 #define FDC(x)		(((x) & 0x04) >> 2)	/* fdc of drive */
305 	/* reverse mapping from unit and fdc to drive */
306 #define REVDRIVE(fdc, unit) ((unit) + ((fdc) << 2))
307 
308 #define PH_HEAD(floppy, head) (((((floppy)->stretch & 2) >> 1) ^ head) << 2)
309 #define STRETCH(floppy)	((floppy)->stretch & FD_STRETCH)
310 
311 /* read/write commands */
312 #define COMMAND			0
313 #define DR_SELECT		1
314 #define TRACK			2
315 #define HEAD			3
316 #define SECTOR			4
317 #define SIZECODE		5
318 #define SECT_PER_TRACK		6
319 #define GAP			7
320 #define SIZECODE2		8
321 #define NR_RW 9
322 
323 /* format commands */
324 #define F_SIZECODE		2
325 #define F_SECT_PER_TRACK	3
326 #define F_GAP			4
327 #define F_FILL			5
328 #define NR_F 6
329 
330 /*
331  * Maximum disk size (in kilobytes).
332  * This default is used whenever the current disk size is unknown.
333  * [Now it is rather a minimum]
334  */
335 #define MAX_DISK_SIZE 4		/* 3984 */
336 
337 /*
338  * globals used by 'result()'
339  */
340 static unsigned char reply_buffer[FD_RAW_REPLY_SIZE];
341 static int inr;		/* size of reply buffer, when called from interrupt */
342 #define ST0		0
343 #define ST1		1
344 #define ST2		2
345 #define ST3		0	/* result of GETSTATUS */
346 #define R_TRACK		3
347 #define R_HEAD		4
348 #define R_SECTOR	5
349 #define R_SIZECODE	6
350 
351 #define SEL_DLY		(2 * HZ / 100)
352 
353 /*
354  * this struct defines the different floppy drive types.
355  */
356 static struct {
357 	struct floppy_drive_params params;
358 	const char *name;	/* name printed while booting */
359 } default_drive_params[] = {
360 /* NOTE: the time values in jiffies should be in msec!
361  CMOS drive type
362   |     Maximum data rate supported by drive type
363   |     |   Head load time, msec
364   |     |   |   Head unload time, msec (not used)
365   |     |   |   |     Step rate interval, usec
366   |     |   |   |     |       Time needed for spinup time (jiffies)
367   |     |   |   |     |       |      Timeout for spinning down (jiffies)
368   |     |   |   |     |       |      |   Spindown offset (where disk stops)
369   |     |   |   |     |       |      |   |     Select delay
370   |     |   |   |     |       |      |   |     |     RPS
371   |     |   |   |     |       |      |   |     |     |    Max number of tracks
372   |     |   |   |     |       |      |   |     |     |    |     Interrupt timeout
373   |     |   |   |     |       |      |   |     |     |    |     |   Max nonintlv. sectors
374   |     |   |   |     |       |      |   |     |     |    |     |   | -Max Errors- flags */
375 {{0,  500, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  80, 3*HZ, 20, {3,1,2,0,2}, 0,
376       0, { 7, 4, 8, 2, 1, 5, 3,10}, 3*HZ/2, 0 }, "unknown" },
377 
378 {{1,  300, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  40, 3*HZ, 17, {3,1,2,0,2}, 0,
379       0, { 1, 0, 0, 0, 0, 0, 0, 0}, 3*HZ/2, 1 }, "360K PC" }, /*5 1/4 360 KB PC*/
380 
381 {{2,  500, 16, 16, 6000, 4*HZ/10, 3*HZ, 14, SEL_DLY, 6,  83, 3*HZ, 17, {3,1,2,0,2}, 0,
382       0, { 2, 5, 6,23,10,20,12, 0}, 3*HZ/2, 2 }, "1.2M" }, /*5 1/4 HD AT*/
383 
384 {{3,  250, 16, 16, 3000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
385       0, { 4,22,21,30, 3, 0, 0, 0}, 3*HZ/2, 4 }, "720k" }, /*3 1/2 DD*/
386 
387 {{4,  500, 16, 16, 4000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
388       0, { 7, 4,25,22,31,21,29,11}, 3*HZ/2, 7 }, "1.44M" }, /*3 1/2 HD*/
389 
390 {{5, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
391       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M AMI BIOS" }, /*3 1/2 ED*/
392 
393 {{6, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
394       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M" } /*3 1/2 ED*/
395 /*    |  --autodetected formats---    |      |      |
396  *    read_track                      |      |    Name printed when booting
397  *				      |     Native format
398  *	            Frequency of disk change checks */
399 };
400 
401 static struct floppy_drive_params drive_params[N_DRIVE];
402 static struct floppy_drive_struct drive_state[N_DRIVE];
403 static struct floppy_write_errors write_errors[N_DRIVE];
404 static struct timer_list motor_off_timer[N_DRIVE];
405 static struct gendisk *disks[N_DRIVE];
406 static struct blk_mq_tag_set tag_sets[N_DRIVE];
407 static struct block_device *opened_bdev[N_DRIVE];
408 static DEFINE_MUTEX(open_lock);
409 static struct floppy_raw_cmd *raw_cmd, default_raw_cmd;
410 
411 /*
412  * This struct defines the different floppy types.
413  *
414  * Bit 0 of 'stretch' tells if the tracks need to be doubled for some
415  * types (e.g. 360kB diskette in 1.2MB drive, etc.).  Bit 1 of 'stretch'
416  * tells if the disk is in Commodore 1581 format, which means side 0 sectors
417  * are located on side 1 of the disk but with a side 0 ID, and vice-versa.
418  * This is the same as the Sharp MZ-80 5.25" CP/M disk format, except that the
419  * 1581's logical side 0 is on physical side 1, whereas the Sharp's logical
420  * side 0 is on physical side 0 (but with the misnamed sector IDs).
421  * 'stretch' should probably be renamed to something more general, like
422  * 'options'.
423  *
424  * Bits 2 through 9 of 'stretch' tell the number of the first sector.
425  * The LSB (bit 2) is flipped. For most disks, the first sector
426  * is 1 (represented by 0x00<<2).  For some CP/M and music sampler
427  * disks (such as Ensoniq EPS 16plus) it is 0 (represented as 0x01<<2).
428  * For Amstrad CPC disks it is 0xC1 (represented as 0xC0<<2).
429  *
430  * Other parameters should be self-explanatory (see also setfdprm(8)).
431  */
432 /*
433 	    Size
434 	     |  Sectors per track
435 	     |  | Head
436 	     |  | |  Tracks
437 	     |  | |  | Stretch
438 	     |  | |  | |  Gap 1 size
439 	     |  | |  | |    |  Data rate, | 0x40 for perp
440 	     |  | |  | |    |    |  Spec1 (stepping rate, head unload
441 	     |  | |  | |    |    |    |    /fmt gap (gap2) */
442 static struct floppy_struct floppy_type[32] = {
443 	{    0, 0,0, 0,0,0x00,0x00,0x00,0x00,NULL    },	/*  0 no testing    */
444 	{  720, 9,2,40,0,0x2A,0x02,0xDF,0x50,"d360"  }, /*  1 360KB PC      */
445 	{ 2400,15,2,80,0,0x1B,0x00,0xDF,0x54,"h1200" },	/*  2 1.2MB AT      */
446 	{  720, 9,1,80,0,0x2A,0x02,0xDF,0x50,"D360"  },	/*  3 360KB SS 3.5" */
447 	{ 1440, 9,2,80,0,0x2A,0x02,0xDF,0x50,"D720"  },	/*  4 720KB 3.5"    */
448 	{  720, 9,2,40,1,0x23,0x01,0xDF,0x50,"h360"  },	/*  5 360KB AT      */
449 	{ 1440, 9,2,80,0,0x23,0x01,0xDF,0x50,"h720"  },	/*  6 720KB AT      */
450 	{ 2880,18,2,80,0,0x1B,0x00,0xCF,0x6C,"H1440" },	/*  7 1.44MB 3.5"   */
451 	{ 5760,36,2,80,0,0x1B,0x43,0xAF,0x54,"E2880" },	/*  8 2.88MB 3.5"   */
452 	{ 6240,39,2,80,0,0x1B,0x43,0xAF,0x28,"E3120" },	/*  9 3.12MB 3.5"   */
453 
454 	{ 2880,18,2,80,0,0x25,0x00,0xDF,0x02,"h1440" }, /* 10 1.44MB 5.25"  */
455 	{ 3360,21,2,80,0,0x1C,0x00,0xCF,0x0C,"H1680" }, /* 11 1.68MB 3.5"   */
456 	{  820,10,2,41,1,0x25,0x01,0xDF,0x2E,"h410"  },	/* 12 410KB 5.25"   */
457 	{ 1640,10,2,82,0,0x25,0x02,0xDF,0x2E,"H820"  },	/* 13 820KB 3.5"    */
458 	{ 2952,18,2,82,0,0x25,0x00,0xDF,0x02,"h1476" },	/* 14 1.48MB 5.25"  */
459 	{ 3444,21,2,82,0,0x25,0x00,0xDF,0x0C,"H1722" },	/* 15 1.72MB 3.5"   */
460 	{  840,10,2,42,1,0x25,0x01,0xDF,0x2E,"h420"  },	/* 16 420KB 5.25"   */
461 	{ 1660,10,2,83,0,0x25,0x02,0xDF,0x2E,"H830"  },	/* 17 830KB 3.5"    */
462 	{ 2988,18,2,83,0,0x25,0x00,0xDF,0x02,"h1494" },	/* 18 1.49MB 5.25"  */
463 	{ 3486,21,2,83,0,0x25,0x00,0xDF,0x0C,"H1743" }, /* 19 1.74 MB 3.5"  */
464 
465 	{ 1760,11,2,80,0,0x1C,0x09,0xCF,0x00,"h880"  }, /* 20 880KB 5.25"   */
466 	{ 2080,13,2,80,0,0x1C,0x01,0xCF,0x00,"D1040" }, /* 21 1.04MB 3.5"   */
467 	{ 2240,14,2,80,0,0x1C,0x19,0xCF,0x00,"D1120" }, /* 22 1.12MB 3.5"   */
468 	{ 3200,20,2,80,0,0x1C,0x20,0xCF,0x2C,"h1600" }, /* 23 1.6MB 5.25"   */
469 	{ 3520,22,2,80,0,0x1C,0x08,0xCF,0x2e,"H1760" }, /* 24 1.76MB 3.5"   */
470 	{ 3840,24,2,80,0,0x1C,0x20,0xCF,0x00,"H1920" }, /* 25 1.92MB 3.5"   */
471 	{ 6400,40,2,80,0,0x25,0x5B,0xCF,0x00,"E3200" }, /* 26 3.20MB 3.5"   */
472 	{ 7040,44,2,80,0,0x25,0x5B,0xCF,0x00,"E3520" }, /* 27 3.52MB 3.5"   */
473 	{ 7680,48,2,80,0,0x25,0x63,0xCF,0x00,"E3840" }, /* 28 3.84MB 3.5"   */
474 	{ 3680,23,2,80,0,0x1C,0x10,0xCF,0x00,"H1840" }, /* 29 1.84MB 3.5"   */
475 
476 	{ 1600,10,2,80,0,0x25,0x02,0xDF,0x2E,"D800"  },	/* 30 800KB 3.5"    */
477 	{ 3200,20,2,80,0,0x1C,0x00,0xCF,0x2C,"H1600" }, /* 31 1.6MB 3.5"    */
478 };
479 
480 #define SECTSIZE (_FD_SECTSIZE(*floppy))
481 
482 /* Auto-detection: Disk type used until the next media change occurs. */
483 static struct floppy_struct *current_type[N_DRIVE];
484 
485 /*
486  * User-provided type information. current_type points to
487  * the respective entry of this array.
488  */
489 static struct floppy_struct user_params[N_DRIVE];
490 
491 static sector_t floppy_sizes[256];
492 
493 static char floppy_device_name[] = "floppy";
494 
495 /*
496  * The driver is trying to determine the correct media format
497  * while probing is set. rw_interrupt() clears it after a
498  * successful access.
499  */
500 static int probing;
501 
502 /* Synchronization of FDC access. */
503 #define FD_COMMAND_NONE		-1
504 #define FD_COMMAND_ERROR	2
505 #define FD_COMMAND_OKAY		3
506 
507 static volatile int command_status = FD_COMMAND_NONE;
508 static unsigned long fdc_busy;
509 static DECLARE_WAIT_QUEUE_HEAD(fdc_wait);
510 static DECLARE_WAIT_QUEUE_HEAD(command_done);
511 
512 /* Errors during formatting are counted here. */
513 static int format_errors;
514 
515 /* Format request descriptor. */
516 static struct format_descr format_req;
517 
518 /*
519  * Rate is 0 for 500kb/s, 1 for 300kbps, 2 for 250kbps
520  * Spec1 is 0xSH, where S is stepping rate (F=1ms, E=2ms, D=3ms etc),
521  * H is head unload time (1=16ms, 2=32ms, etc)
522  */
523 
524 /*
525  * Track buffer
526  * Because these are written to by the DMA controller, they must
527  * not contain a 64k byte boundary crossing, or data will be
528  * corrupted/lost.
529  */
530 static char *floppy_track_buffer;
531 static int max_buffer_sectors;
532 
533 static int *errors;
534 typedef void (*done_f)(int);
535 static const struct cont_t {
536 	void (*interrupt)(void);
537 				/* this is called after the interrupt of the
538 				 * main command */
539 	void (*redo)(void);	/* this is called to retry the operation */
540 	void (*error)(void);	/* this is called to tally an error */
541 	done_f done;		/* this is called to say if the operation has
542 				 * succeeded/failed */
543 } *cont;
544 
545 static void floppy_ready(void);
546 static void floppy_start(void);
547 static void process_fd_request(void);
548 static void recalibrate_floppy(void);
549 static void floppy_shutdown(struct work_struct *);
550 
551 static int floppy_request_regions(int);
552 static void floppy_release_regions(int);
553 static int floppy_grab_irq_and_dma(void);
554 static void floppy_release_irq_and_dma(void);
555 
556 /*
557  * The "reset" variable should be tested whenever an interrupt is scheduled,
558  * after the commands have been sent. This is to ensure that the driver doesn't
559  * get wedged when the interrupt doesn't come because of a failed command.
560  * reset doesn't need to be tested before sending commands, because
561  * output_byte is automatically disabled when reset is set.
562  */
563 static void reset_fdc(void);
564 static int floppy_revalidate(struct gendisk *disk);
565 
566 /*
567  * These are global variables, as that's the easiest way to give
568  * information to interrupts. They are the data used for the current
569  * request.
570  */
571 #define NO_TRACK	-1
572 #define NEED_1_RECAL	-2
573 #define NEED_2_RECAL	-3
574 
575 static atomic_t usage_count = ATOMIC_INIT(0);
576 
577 /* buffer related variables */
578 static int buffer_track = -1;
579 static int buffer_drive = -1;
580 static int buffer_min = -1;
581 static int buffer_max = -1;
582 
583 /* fdc related variables, should end up in a struct */
584 static struct floppy_fdc_state fdc_state[N_FDC];
585 static int current_fdc;			/* current fdc */
586 
587 static struct workqueue_struct *floppy_wq;
588 
589 static struct floppy_struct *_floppy = floppy_type;
590 static unsigned char current_drive;
591 static long current_count_sectors;
592 static unsigned char fsector_t;	/* sector in track */
593 static unsigned char in_sector_offset;	/* offset within physical sector,
594 					 * expressed in units of 512 bytes */
595 
fdc_inb(int fdc,int reg)596 static inline unsigned char fdc_inb(int fdc, int reg)
597 {
598 	return fd_inb(fdc_state[fdc].address, reg);
599 }
600 
fdc_outb(unsigned char value,int fdc,int reg)601 static inline void fdc_outb(unsigned char value, int fdc, int reg)
602 {
603 	fd_outb(value, fdc_state[fdc].address, reg);
604 }
605 
drive_no_geom(int drive)606 static inline bool drive_no_geom(int drive)
607 {
608 	return !current_type[drive] && !ITYPE(drive_state[drive].fd_device);
609 }
610 
611 #ifndef fd_eject
fd_eject(int drive)612 static inline int fd_eject(int drive)
613 {
614 	return -EINVAL;
615 }
616 #endif
617 
618 /*
619  * Debugging
620  * =========
621  */
622 #ifdef DEBUGT
623 static long unsigned debugtimer;
624 
set_debugt(void)625 static inline void set_debugt(void)
626 {
627 	debugtimer = jiffies;
628 }
629 
debugt(const char * func,const char * msg)630 static inline void debugt(const char *func, const char *msg)
631 {
632 	if (drive_params[current_drive].flags & DEBUGT)
633 		pr_info("%s:%s dtime=%lu\n", func, msg, jiffies - debugtimer);
634 }
635 #else
set_debugt(void)636 static inline void set_debugt(void) { }
debugt(const char * func,const char * msg)637 static inline void debugt(const char *func, const char *msg) { }
638 #endif /* DEBUGT */
639 
640 
641 static DECLARE_DELAYED_WORK(fd_timeout, floppy_shutdown);
642 static const char *timeout_message;
643 
is_alive(const char * func,const char * message)644 static void is_alive(const char *func, const char *message)
645 {
646 	/* this routine checks whether the floppy driver is "alive" */
647 	if (test_bit(0, &fdc_busy) && command_status < 2 &&
648 	    !delayed_work_pending(&fd_timeout)) {
649 		DPRINT("%s: timeout handler died.  %s\n", func, message);
650 	}
651 }
652 
653 static void (*do_floppy)(void) = NULL;
654 
655 #define OLOGSIZE 20
656 
657 static void (*lasthandler)(void);
658 static unsigned long interruptjiffies;
659 static unsigned long resultjiffies;
660 static int resultsize;
661 static unsigned long lastredo;
662 
663 static struct output_log {
664 	unsigned char data;
665 	unsigned char status;
666 	unsigned long jiffies;
667 } output_log[OLOGSIZE];
668 
669 static int output_log_pos;
670 
671 #define MAXTIMEOUT -2
672 
__reschedule_timeout(int drive,const char * message)673 static void __reschedule_timeout(int drive, const char *message)
674 {
675 	unsigned long delay;
676 
677 	if (drive < 0 || drive >= N_DRIVE) {
678 		delay = 20UL * HZ;
679 		drive = 0;
680 	} else
681 		delay = drive_params[drive].timeout;
682 
683 	mod_delayed_work(floppy_wq, &fd_timeout, delay);
684 	if (drive_params[drive].flags & FD_DEBUG)
685 		DPRINT("reschedule timeout %s\n", message);
686 	timeout_message = message;
687 }
688 
reschedule_timeout(int drive,const char * message)689 static void reschedule_timeout(int drive, const char *message)
690 {
691 	unsigned long flags;
692 
693 	spin_lock_irqsave(&floppy_lock, flags);
694 	__reschedule_timeout(drive, message);
695 	spin_unlock_irqrestore(&floppy_lock, flags);
696 }
697 
698 #define INFBOUND(a, b) (a) = max_t(int, a, b)
699 #define SUPBOUND(a, b) (a) = min_t(int, a, b)
700 
701 /*
702  * Bottom half floppy driver.
703  * ==========================
704  *
705  * This part of the file contains the code talking directly to the hardware,
706  * and also the main service loop (seek-configure-spinup-command)
707  */
708 
709 /*
710  * disk change.
711  * This routine is responsible for maintaining the FD_DISK_CHANGE flag,
712  * and the last_checked date.
713  *
714  * last_checked is the date of the last check which showed 'no disk change'
715  * FD_DISK_CHANGE is set under two conditions:
716  * 1. The floppy has been changed after some i/o to that floppy already
717  *    took place.
718  * 2. No floppy disk is in the drive. This is done in order to ensure that
719  *    requests are quickly flushed in case there is no disk in the drive. It
720  *    follows that FD_DISK_CHANGE can only be cleared if there is a disk in
721  *    the drive.
722  *
723  * For 1., maxblock is observed. Maxblock is 0 if no i/o has taken place yet.
724  * For 2., FD_DISK_NEWCHANGE is watched. FD_DISK_NEWCHANGE is cleared on
725  *  each seek. If a disk is present, the disk change line should also be
726  *  cleared on each seek. Thus, if FD_DISK_NEWCHANGE is clear, but the disk
727  *  change line is set, this means either that no disk is in the drive, or
728  *  that it has been removed since the last seek.
729  *
730  * This means that we really have a third possibility too:
731  *  The floppy has been changed after the last seek.
732  */
733 
disk_change(int drive)734 static int disk_change(int drive)
735 {
736 	int fdc = FDC(drive);
737 
738 	if (time_before(jiffies, drive_state[drive].select_date + drive_params[drive].select_delay))
739 		DPRINT("WARNING disk change called early\n");
740 	if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))) ||
741 	    (fdc_state[fdc].dor & 3) != UNIT(drive) || fdc != FDC(drive)) {
742 		DPRINT("probing disk change on unselected drive\n");
743 		DPRINT("drive=%d fdc=%d dor=%x\n", drive, FDC(drive),
744 		       (unsigned int)fdc_state[fdc].dor);
745 	}
746 
747 	debug_dcl(drive_params[drive].flags,
748 		  "checking disk change line for drive %d\n", drive);
749 	debug_dcl(drive_params[drive].flags, "jiffies=%lu\n", jiffies);
750 	debug_dcl(drive_params[drive].flags, "disk change line=%x\n",
751 		  fdc_inb(fdc, FD_DIR) & 0x80);
752 	debug_dcl(drive_params[drive].flags, "flags=%lx\n",
753 		  drive_state[drive].flags);
754 
755 	if (drive_params[drive].flags & FD_BROKEN_DCL)
756 		return test_bit(FD_DISK_CHANGED_BIT,
757 				&drive_state[drive].flags);
758 	if ((fdc_inb(fdc, FD_DIR) ^ drive_params[drive].flags) & 0x80) {
759 		set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
760 					/* verify write protection */
761 
762 		if (drive_state[drive].maxblock)	/* mark it changed */
763 			set_bit(FD_DISK_CHANGED_BIT,
764 				&drive_state[drive].flags);
765 
766 		/* invalidate its geometry */
767 		if (drive_state[drive].keep_data >= 0) {
768 			if ((drive_params[drive].flags & FTD_MSG) &&
769 			    current_type[drive] != NULL)
770 				DPRINT("Disk type is undefined after disk change\n");
771 			current_type[drive] = NULL;
772 			floppy_sizes[TOMINOR(drive)] = MAX_DISK_SIZE << 1;
773 		}
774 
775 		return 1;
776 	} else {
777 		drive_state[drive].last_checked = jiffies;
778 		clear_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
779 	}
780 	return 0;
781 }
782 
is_selected(int dor,int unit)783 static inline int is_selected(int dor, int unit)
784 {
785 	return ((dor & (0x10 << unit)) && (dor & 3) == unit);
786 }
787 
is_ready_state(int status)788 static bool is_ready_state(int status)
789 {
790 	int state = status & (STATUS_READY | STATUS_DIR | STATUS_DMA);
791 	return state == STATUS_READY;
792 }
793 
set_dor(int fdc,char mask,char data)794 static int set_dor(int fdc, char mask, char data)
795 {
796 	unsigned char unit;
797 	unsigned char drive;
798 	unsigned char newdor;
799 	unsigned char olddor;
800 
801 	if (fdc_state[fdc].address == -1)
802 		return -1;
803 
804 	olddor = fdc_state[fdc].dor;
805 	newdor = (olddor & mask) | data;
806 	if (newdor != olddor) {
807 		unit = olddor & 0x3;
808 		if (is_selected(olddor, unit) && !is_selected(newdor, unit)) {
809 			drive = REVDRIVE(fdc, unit);
810 			debug_dcl(drive_params[drive].flags,
811 				  "calling disk change from set_dor\n");
812 			disk_change(drive);
813 		}
814 		fdc_state[fdc].dor = newdor;
815 		fdc_outb(newdor, fdc, FD_DOR);
816 
817 		unit = newdor & 0x3;
818 		if (!is_selected(olddor, unit) && is_selected(newdor, unit)) {
819 			drive = REVDRIVE(fdc, unit);
820 			drive_state[drive].select_date = jiffies;
821 		}
822 	}
823 	return olddor;
824 }
825 
twaddle(int fdc,int drive)826 static void twaddle(int fdc, int drive)
827 {
828 	if (drive_params[drive].select_delay)
829 		return;
830 	fdc_outb(fdc_state[fdc].dor & ~(0x10 << UNIT(drive)),
831 		 fdc, FD_DOR);
832 	fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
833 	drive_state[drive].select_date = jiffies;
834 }
835 
836 /*
837  * Reset all driver information about the specified fdc.
838  * This is needed after a reset, and after a raw command.
839  */
reset_fdc_info(int fdc,int mode)840 static void reset_fdc_info(int fdc, int mode)
841 {
842 	int drive;
843 
844 	fdc_state[fdc].spec1 = fdc_state[fdc].spec2 = -1;
845 	fdc_state[fdc].need_configure = 1;
846 	fdc_state[fdc].perp_mode = 1;
847 	fdc_state[fdc].rawcmd = 0;
848 	for (drive = 0; drive < N_DRIVE; drive++)
849 		if (FDC(drive) == fdc &&
850 		    (mode || drive_state[drive].track != NEED_1_RECAL))
851 			drive_state[drive].track = NEED_2_RECAL;
852 }
853 
854 /*
855  * selects the fdc and drive, and enables the fdc's input/dma.
856  * Both current_drive and current_fdc are changed to match the new drive.
857  */
set_fdc(int drive)858 static void set_fdc(int drive)
859 {
860 	unsigned int fdc;
861 
862 	if (drive < 0 || drive >= N_DRIVE) {
863 		pr_info("bad drive value %d\n", drive);
864 		return;
865 	}
866 
867 	fdc = FDC(drive);
868 	if (fdc >= N_FDC) {
869 		pr_info("bad fdc value\n");
870 		return;
871 	}
872 
873 	set_dor(fdc, ~0, 8);
874 #if N_FDC > 1
875 	set_dor(1 - fdc, ~8, 0);
876 #endif
877 	if (fdc_state[fdc].rawcmd == 2)
878 		reset_fdc_info(fdc, 1);
879 	if (fdc_inb(fdc, FD_STATUS) != STATUS_READY)
880 		fdc_state[fdc].reset = 1;
881 
882 	current_drive = drive;
883 	current_fdc = fdc;
884 }
885 
886 /*
887  * locks the driver.
888  * Both current_drive and current_fdc are changed to match the new drive.
889  */
lock_fdc(int drive)890 static int lock_fdc(int drive)
891 {
892 	if (WARN(atomic_read(&usage_count) == 0,
893 		 "Trying to lock fdc while usage count=0\n"))
894 		return -1;
895 
896 	if (wait_event_interruptible(fdc_wait, !test_and_set_bit(0, &fdc_busy)))
897 		return -EINTR;
898 
899 	command_status = FD_COMMAND_NONE;
900 
901 	reschedule_timeout(drive, "lock fdc");
902 	set_fdc(drive);
903 	return 0;
904 }
905 
906 /* unlocks the driver */
unlock_fdc(void)907 static void unlock_fdc(void)
908 {
909 	if (!test_bit(0, &fdc_busy))
910 		DPRINT("FDC access conflict!\n");
911 
912 	raw_cmd = NULL;
913 	command_status = FD_COMMAND_NONE;
914 	cancel_delayed_work(&fd_timeout);
915 	do_floppy = NULL;
916 	cont = NULL;
917 	clear_bit(0, &fdc_busy);
918 	wake_up(&fdc_wait);
919 }
920 
921 /* switches the motor off after a given timeout */
motor_off_callback(struct timer_list * t)922 static void motor_off_callback(struct timer_list *t)
923 {
924 	unsigned long nr = t - motor_off_timer;
925 	unsigned char mask = ~(0x10 << UNIT(nr));
926 
927 	if (WARN_ON_ONCE(nr >= N_DRIVE))
928 		return;
929 
930 	set_dor(FDC(nr), mask, 0);
931 }
932 
933 /* schedules motor off */
floppy_off(unsigned int drive)934 static void floppy_off(unsigned int drive)
935 {
936 	unsigned long volatile delta;
937 	int fdc = FDC(drive);
938 
939 	if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))))
940 		return;
941 
942 	del_timer(motor_off_timer + drive);
943 
944 	/* make spindle stop in a position which minimizes spinup time
945 	 * next time */
946 	if (drive_params[drive].rps) {
947 		delta = jiffies - drive_state[drive].first_read_date + HZ -
948 		    drive_params[drive].spindown_offset;
949 		delta = ((delta * drive_params[drive].rps) % HZ) / drive_params[drive].rps;
950 		motor_off_timer[drive].expires =
951 		    jiffies + drive_params[drive].spindown - delta;
952 	}
953 	add_timer(motor_off_timer + drive);
954 }
955 
956 /*
957  * cycle through all N_DRIVE floppy drives, for disk change testing.
958  * stopping at current drive. This is done before any long operation, to
959  * be sure to have up to date disk change information.
960  */
scandrives(void)961 static void scandrives(void)
962 {
963 	int i;
964 	int drive;
965 	int saved_drive;
966 
967 	if (drive_params[current_drive].select_delay)
968 		return;
969 
970 	saved_drive = current_drive;
971 	for (i = 0; i < N_DRIVE; i++) {
972 		drive = (saved_drive + i + 1) % N_DRIVE;
973 		if (drive_state[drive].fd_ref == 0 || drive_params[drive].select_delay != 0)
974 			continue;	/* skip closed drives */
975 		set_fdc(drive);
976 		if (!(set_dor(current_fdc, ~3, UNIT(drive) | (0x10 << UNIT(drive))) &
977 		      (0x10 << UNIT(drive))))
978 			/* switch the motor off again, if it was off to
979 			 * begin with */
980 			set_dor(current_fdc, ~(0x10 << UNIT(drive)), 0);
981 	}
982 	set_fdc(saved_drive);
983 }
984 
empty(void)985 static void empty(void)
986 {
987 }
988 
989 static void (*floppy_work_fn)(void);
990 
floppy_work_workfn(struct work_struct * work)991 static void floppy_work_workfn(struct work_struct *work)
992 {
993 	floppy_work_fn();
994 }
995 
996 static DECLARE_WORK(floppy_work, floppy_work_workfn);
997 
schedule_bh(void (* handler)(void))998 static void schedule_bh(void (*handler)(void))
999 {
1000 	WARN_ON(work_pending(&floppy_work));
1001 
1002 	floppy_work_fn = handler;
1003 	queue_work(floppy_wq, &floppy_work);
1004 }
1005 
1006 static void (*fd_timer_fn)(void) = NULL;
1007 
fd_timer_workfn(struct work_struct * work)1008 static void fd_timer_workfn(struct work_struct *work)
1009 {
1010 	fd_timer_fn();
1011 }
1012 
1013 static DECLARE_DELAYED_WORK(fd_timer, fd_timer_workfn);
1014 
cancel_activity(void)1015 static void cancel_activity(void)
1016 {
1017 	do_floppy = NULL;
1018 	cancel_delayed_work(&fd_timer);
1019 	cancel_work_sync(&floppy_work);
1020 }
1021 
1022 /* this function makes sure that the disk stays in the drive during the
1023  * transfer */
fd_watchdog(void)1024 static void fd_watchdog(void)
1025 {
1026 	debug_dcl(drive_params[current_drive].flags,
1027 		  "calling disk change from watchdog\n");
1028 
1029 	if (disk_change(current_drive)) {
1030 		DPRINT("disk removed during i/o\n");
1031 		cancel_activity();
1032 		cont->done(0);
1033 		reset_fdc();
1034 	} else {
1035 		cancel_delayed_work(&fd_timer);
1036 		fd_timer_fn = fd_watchdog;
1037 		queue_delayed_work(floppy_wq, &fd_timer, HZ / 10);
1038 	}
1039 }
1040 
main_command_interrupt(void)1041 static void main_command_interrupt(void)
1042 {
1043 	cancel_delayed_work(&fd_timer);
1044 	cont->interrupt();
1045 }
1046 
1047 /* waits for a delay (spinup or select) to pass */
fd_wait_for_completion(unsigned long expires,void (* function)(void))1048 static int fd_wait_for_completion(unsigned long expires,
1049 				  void (*function)(void))
1050 {
1051 	if (fdc_state[current_fdc].reset) {
1052 		reset_fdc();	/* do the reset during sleep to win time
1053 				 * if we don't need to sleep, it's a good
1054 				 * occasion anyways */
1055 		return 1;
1056 	}
1057 
1058 	if (time_before(jiffies, expires)) {
1059 		cancel_delayed_work(&fd_timer);
1060 		fd_timer_fn = function;
1061 		queue_delayed_work(floppy_wq, &fd_timer, expires - jiffies);
1062 		return 1;
1063 	}
1064 	return 0;
1065 }
1066 
setup_DMA(void)1067 static void setup_DMA(void)
1068 {
1069 	unsigned long f;
1070 
1071 	if (raw_cmd->length == 0) {
1072 		print_hex_dump(KERN_INFO, "zero dma transfer size: ",
1073 			       DUMP_PREFIX_NONE, 16, 1,
1074 			       raw_cmd->fullcmd, raw_cmd->cmd_count, false);
1075 		cont->done(0);
1076 		fdc_state[current_fdc].reset = 1;
1077 		return;
1078 	}
1079 	if (((unsigned long)raw_cmd->kernel_data) % 512) {
1080 		pr_info("non aligned address: %p\n", raw_cmd->kernel_data);
1081 		cont->done(0);
1082 		fdc_state[current_fdc].reset = 1;
1083 		return;
1084 	}
1085 	f = claim_dma_lock();
1086 	fd_disable_dma();
1087 #ifdef fd_dma_setup
1088 	if (fd_dma_setup(raw_cmd->kernel_data, raw_cmd->length,
1089 			 (raw_cmd->flags & FD_RAW_READ) ?
1090 			 DMA_MODE_READ : DMA_MODE_WRITE,
1091 			 fdc_state[current_fdc].address) < 0) {
1092 		release_dma_lock(f);
1093 		cont->done(0);
1094 		fdc_state[current_fdc].reset = 1;
1095 		return;
1096 	}
1097 	release_dma_lock(f);
1098 #else
1099 	fd_clear_dma_ff();
1100 	fd_cacheflush(raw_cmd->kernel_data, raw_cmd->length);
1101 	fd_set_dma_mode((raw_cmd->flags & FD_RAW_READ) ?
1102 			DMA_MODE_READ : DMA_MODE_WRITE);
1103 	fd_set_dma_addr(raw_cmd->kernel_data);
1104 	fd_set_dma_count(raw_cmd->length);
1105 	virtual_dma_port = fdc_state[current_fdc].address;
1106 	fd_enable_dma();
1107 	release_dma_lock(f);
1108 #endif
1109 }
1110 
1111 static void show_floppy(int fdc);
1112 
1113 /* waits until the fdc becomes ready */
wait_til_ready(int fdc)1114 static int wait_til_ready(int fdc)
1115 {
1116 	int status;
1117 	int counter;
1118 
1119 	if (fdc_state[fdc].reset)
1120 		return -1;
1121 	for (counter = 0; counter < 10000; counter++) {
1122 		status = fdc_inb(fdc, FD_STATUS);
1123 		if (status & STATUS_READY)
1124 			return status;
1125 	}
1126 	if (initialized) {
1127 		DPRINT("Getstatus times out (%x) on fdc %d\n", status, fdc);
1128 		show_floppy(fdc);
1129 	}
1130 	fdc_state[fdc].reset = 1;
1131 	return -1;
1132 }
1133 
1134 /* sends a command byte to the fdc */
output_byte(int fdc,char byte)1135 static int output_byte(int fdc, char byte)
1136 {
1137 	int status = wait_til_ready(fdc);
1138 
1139 	if (status < 0)
1140 		return -1;
1141 
1142 	if (is_ready_state(status)) {
1143 		fdc_outb(byte, fdc, FD_DATA);
1144 		output_log[output_log_pos].data = byte;
1145 		output_log[output_log_pos].status = status;
1146 		output_log[output_log_pos].jiffies = jiffies;
1147 		output_log_pos = (output_log_pos + 1) % OLOGSIZE;
1148 		return 0;
1149 	}
1150 	fdc_state[fdc].reset = 1;
1151 	if (initialized) {
1152 		DPRINT("Unable to send byte %x to FDC. Fdc=%x Status=%x\n",
1153 		       byte, fdc, status);
1154 		show_floppy(fdc);
1155 	}
1156 	return -1;
1157 }
1158 
1159 /* gets the response from the fdc */
result(int fdc)1160 static int result(int fdc)
1161 {
1162 	int i;
1163 	int status = 0;
1164 
1165 	for (i = 0; i < FD_RAW_REPLY_SIZE; i++) {
1166 		status = wait_til_ready(fdc);
1167 		if (status < 0)
1168 			break;
1169 		status &= STATUS_DIR | STATUS_READY | STATUS_BUSY | STATUS_DMA;
1170 		if ((status & ~STATUS_BUSY) == STATUS_READY) {
1171 			resultjiffies = jiffies;
1172 			resultsize = i;
1173 			return i;
1174 		}
1175 		if (status == (STATUS_DIR | STATUS_READY | STATUS_BUSY))
1176 			reply_buffer[i] = fdc_inb(fdc, FD_DATA);
1177 		else
1178 			break;
1179 	}
1180 	if (initialized) {
1181 		DPRINT("get result error. Fdc=%d Last status=%x Read bytes=%d\n",
1182 		       fdc, status, i);
1183 		show_floppy(fdc);
1184 	}
1185 	fdc_state[fdc].reset = 1;
1186 	return -1;
1187 }
1188 
1189 #define MORE_OUTPUT -2
1190 /* does the fdc need more output? */
need_more_output(int fdc)1191 static int need_more_output(int fdc)
1192 {
1193 	int status = wait_til_ready(fdc);
1194 
1195 	if (status < 0)
1196 		return -1;
1197 
1198 	if (is_ready_state(status))
1199 		return MORE_OUTPUT;
1200 
1201 	return result(fdc);
1202 }
1203 
1204 /* Set perpendicular mode as required, based on data rate, if supported.
1205  * 82077 Now tested. 1Mbps data rate only possible with 82077-1.
1206  */
perpendicular_mode(int fdc)1207 static void perpendicular_mode(int fdc)
1208 {
1209 	unsigned char perp_mode;
1210 
1211 	if (raw_cmd->rate & 0x40) {
1212 		switch (raw_cmd->rate & 3) {
1213 		case 0:
1214 			perp_mode = 2;
1215 			break;
1216 		case 3:
1217 			perp_mode = 3;
1218 			break;
1219 		default:
1220 			DPRINT("Invalid data rate for perpendicular mode!\n");
1221 			cont->done(0);
1222 			fdc_state[fdc].reset = 1;
1223 					/*
1224 					 * convenient way to return to
1225 					 * redo without too much hassle
1226 					 * (deep stack et al.)
1227 					 */
1228 			return;
1229 		}
1230 	} else
1231 		perp_mode = 0;
1232 
1233 	if (fdc_state[fdc].perp_mode == perp_mode)
1234 		return;
1235 	if (fdc_state[fdc].version >= FDC_82077_ORIG) {
1236 		output_byte(fdc, FD_PERPENDICULAR);
1237 		output_byte(fdc, perp_mode);
1238 		fdc_state[fdc].perp_mode = perp_mode;
1239 	} else if (perp_mode) {
1240 		DPRINT("perpendicular mode not supported by this FDC.\n");
1241 	}
1242 }				/* perpendicular_mode */
1243 
1244 static int fifo_depth = 0xa;
1245 static int no_fifo;
1246 
fdc_configure(int fdc)1247 static int fdc_configure(int fdc)
1248 {
1249 	/* Turn on FIFO */
1250 	output_byte(fdc, FD_CONFIGURE);
1251 	if (need_more_output(fdc) != MORE_OUTPUT)
1252 		return 0;
1253 	output_byte(fdc, 0);
1254 	output_byte(fdc, 0x10 | (no_fifo & 0x20) | (fifo_depth & 0xf));
1255 	output_byte(fdc, 0);    /* pre-compensation from track 0 upwards */
1256 	return 1;
1257 }
1258 
1259 #define NOMINAL_DTR 500
1260 
1261 /* Issue a "SPECIFY" command to set the step rate time, head unload time,
1262  * head load time, and DMA disable flag to values needed by floppy.
1263  *
1264  * The value "dtr" is the data transfer rate in Kbps.  It is needed
1265  * to account for the data rate-based scaling done by the 82072 and 82077
1266  * FDC types.  This parameter is ignored for other types of FDCs (i.e.
1267  * 8272a).
1268  *
1269  * Note that changing the data transfer rate has a (probably deleterious)
1270  * effect on the parameters subject to scaling for 82072/82077 FDCs, so
1271  * fdc_specify is called again after each data transfer rate
1272  * change.
1273  *
1274  * srt: 1000 to 16000 in microseconds
1275  * hut: 16 to 240 milliseconds
1276  * hlt: 2 to 254 milliseconds
1277  *
1278  * These values are rounded up to the next highest available delay time.
1279  */
fdc_specify(int fdc,int drive)1280 static void fdc_specify(int fdc, int drive)
1281 {
1282 	unsigned char spec1;
1283 	unsigned char spec2;
1284 	unsigned long srt;
1285 	unsigned long hlt;
1286 	unsigned long hut;
1287 	unsigned long dtr = NOMINAL_DTR;
1288 	unsigned long scale_dtr = NOMINAL_DTR;
1289 	int hlt_max_code = 0x7f;
1290 	int hut_max_code = 0xf;
1291 
1292 	if (fdc_state[fdc].need_configure &&
1293 	    fdc_state[fdc].version >= FDC_82072A) {
1294 		fdc_configure(fdc);
1295 		fdc_state[fdc].need_configure = 0;
1296 	}
1297 
1298 	switch (raw_cmd->rate & 0x03) {
1299 	case 3:
1300 		dtr = 1000;
1301 		break;
1302 	case 1:
1303 		dtr = 300;
1304 		if (fdc_state[fdc].version >= FDC_82078) {
1305 			/* chose the default rate table, not the one
1306 			 * where 1 = 2 Mbps */
1307 			output_byte(fdc, FD_DRIVESPEC);
1308 			if (need_more_output(fdc) == MORE_OUTPUT) {
1309 				output_byte(fdc, UNIT(drive));
1310 				output_byte(fdc, 0xc0);
1311 			}
1312 		}
1313 		break;
1314 	case 2:
1315 		dtr = 250;
1316 		break;
1317 	}
1318 
1319 	if (fdc_state[fdc].version >= FDC_82072) {
1320 		scale_dtr = dtr;
1321 		hlt_max_code = 0x00;	/* 0==256msec*dtr0/dtr (not linear!) */
1322 		hut_max_code = 0x0;	/* 0==256msec*dtr0/dtr (not linear!) */
1323 	}
1324 
1325 	/* Convert step rate from microseconds to milliseconds and 4 bits */
1326 	srt = 16 - DIV_ROUND_UP(drive_params[drive].srt * scale_dtr / 1000,
1327 				NOMINAL_DTR);
1328 	if (slow_floppy)
1329 		srt = srt / 4;
1330 
1331 	SUPBOUND(srt, 0xf);
1332 	INFBOUND(srt, 0);
1333 
1334 	hlt = DIV_ROUND_UP(drive_params[drive].hlt * scale_dtr / 2,
1335 			   NOMINAL_DTR);
1336 	if (hlt < 0x01)
1337 		hlt = 0x01;
1338 	else if (hlt > 0x7f)
1339 		hlt = hlt_max_code;
1340 
1341 	hut = DIV_ROUND_UP(drive_params[drive].hut * scale_dtr / 16,
1342 			   NOMINAL_DTR);
1343 	if (hut < 0x1)
1344 		hut = 0x1;
1345 	else if (hut > 0xf)
1346 		hut = hut_max_code;
1347 
1348 	spec1 = (srt << 4) | hut;
1349 	spec2 = (hlt << 1) | (use_virtual_dma & 1);
1350 
1351 	/* If these parameters did not change, just return with success */
1352 	if (fdc_state[fdc].spec1 != spec1 ||
1353 	    fdc_state[fdc].spec2 != spec2) {
1354 		/* Go ahead and set spec1 and spec2 */
1355 		output_byte(fdc, FD_SPECIFY);
1356 		output_byte(fdc, fdc_state[fdc].spec1 = spec1);
1357 		output_byte(fdc, fdc_state[fdc].spec2 = spec2);
1358 	}
1359 }				/* fdc_specify */
1360 
1361 /* Set the FDC's data transfer rate on behalf of the specified drive.
1362  * NOTE: with 82072/82077 FDCs, changing the data rate requires a reissue
1363  * of the specify command (i.e. using the fdc_specify function).
1364  */
fdc_dtr(void)1365 static int fdc_dtr(void)
1366 {
1367 	/* If data rate not already set to desired value, set it. */
1368 	if ((raw_cmd->rate & 3) == fdc_state[current_fdc].dtr)
1369 		return 0;
1370 
1371 	/* Set dtr */
1372 	fdc_outb(raw_cmd->rate & 3, current_fdc, FD_DCR);
1373 
1374 	/* TODO: some FDC/drive combinations (C&T 82C711 with TEAC 1.2MB)
1375 	 * need a stabilization period of several milliseconds to be
1376 	 * enforced after data rate changes before R/W operations.
1377 	 * Pause 5 msec to avoid trouble. (Needs to be 2 jiffies)
1378 	 */
1379 	fdc_state[current_fdc].dtr = raw_cmd->rate & 3;
1380 	return fd_wait_for_completion(jiffies + 2UL * HZ / 100, floppy_ready);
1381 }				/* fdc_dtr */
1382 
tell_sector(void)1383 static void tell_sector(void)
1384 {
1385 	pr_cont(": track %d, head %d, sector %d, size %d",
1386 		reply_buffer[R_TRACK], reply_buffer[R_HEAD],
1387 		reply_buffer[R_SECTOR],
1388 		reply_buffer[R_SIZECODE]);
1389 }				/* tell_sector */
1390 
print_errors(void)1391 static void print_errors(void)
1392 {
1393 	DPRINT("");
1394 	if (reply_buffer[ST0] & ST0_ECE) {
1395 		pr_cont("Recalibrate failed!");
1396 	} else if (reply_buffer[ST2] & ST2_CRC) {
1397 		pr_cont("data CRC error");
1398 		tell_sector();
1399 	} else if (reply_buffer[ST1] & ST1_CRC) {
1400 		pr_cont("CRC error");
1401 		tell_sector();
1402 	} else if ((reply_buffer[ST1] & (ST1_MAM | ST1_ND)) ||
1403 		   (reply_buffer[ST2] & ST2_MAM)) {
1404 		if (!probing) {
1405 			pr_cont("sector not found");
1406 			tell_sector();
1407 		} else
1408 			pr_cont("probe failed...");
1409 	} else if (reply_buffer[ST2] & ST2_WC) {	/* seek error */
1410 		pr_cont("wrong cylinder");
1411 	} else if (reply_buffer[ST2] & ST2_BC) {	/* cylinder marked as bad */
1412 		pr_cont("bad cylinder");
1413 	} else {
1414 		pr_cont("unknown error. ST[0..2] are: 0x%x 0x%x 0x%x",
1415 			reply_buffer[ST0], reply_buffer[ST1],
1416 			reply_buffer[ST2]);
1417 		tell_sector();
1418 	}
1419 	pr_cont("\n");
1420 }
1421 
1422 /*
1423  * OK, this error interpreting routine is called after a
1424  * DMA read/write has succeeded
1425  * or failed, so we check the results, and copy any buffers.
1426  * hhb: Added better error reporting.
1427  * ak: Made this into a separate routine.
1428  */
interpret_errors(void)1429 static int interpret_errors(void)
1430 {
1431 	char bad;
1432 
1433 	if (inr != 7) {
1434 		DPRINT("-- FDC reply error\n");
1435 		fdc_state[current_fdc].reset = 1;
1436 		return 1;
1437 	}
1438 
1439 	/* check IC to find cause of interrupt */
1440 	switch (reply_buffer[ST0] & ST0_INTR) {
1441 	case 0x40:		/* error occurred during command execution */
1442 		if (reply_buffer[ST1] & ST1_EOC)
1443 			return 0;	/* occurs with pseudo-DMA */
1444 		bad = 1;
1445 		if (reply_buffer[ST1] & ST1_WP) {
1446 			DPRINT("Drive is write protected\n");
1447 			clear_bit(FD_DISK_WRITABLE_BIT,
1448 				  &drive_state[current_drive].flags);
1449 			cont->done(0);
1450 			bad = 2;
1451 		} else if (reply_buffer[ST1] & ST1_ND) {
1452 			set_bit(FD_NEED_TWADDLE_BIT,
1453 				&drive_state[current_drive].flags);
1454 		} else if (reply_buffer[ST1] & ST1_OR) {
1455 			if (drive_params[current_drive].flags & FTD_MSG)
1456 				DPRINT("Over/Underrun - retrying\n");
1457 			bad = 0;
1458 		} else if (*errors >= drive_params[current_drive].max_errors.reporting) {
1459 			print_errors();
1460 		}
1461 		if (reply_buffer[ST2] & ST2_WC || reply_buffer[ST2] & ST2_BC)
1462 			/* wrong cylinder => recal */
1463 			drive_state[current_drive].track = NEED_2_RECAL;
1464 		return bad;
1465 	case 0x80:		/* invalid command given */
1466 		DPRINT("Invalid FDC command given!\n");
1467 		cont->done(0);
1468 		return 2;
1469 	case 0xc0:
1470 		DPRINT("Abnormal termination caused by polling\n");
1471 		cont->error();
1472 		return 2;
1473 	default:		/* (0) Normal command termination */
1474 		return 0;
1475 	}
1476 }
1477 
1478 /*
1479  * This routine is called when everything should be correctly set up
1480  * for the transfer (i.e. floppy motor is on, the correct floppy is
1481  * selected, and the head is sitting on the right track).
1482  */
setup_rw_floppy(void)1483 static void setup_rw_floppy(void)
1484 {
1485 	int i;
1486 	int r;
1487 	int flags;
1488 	unsigned long ready_date;
1489 	void (*function)(void);
1490 
1491 	flags = raw_cmd->flags;
1492 	if (flags & (FD_RAW_READ | FD_RAW_WRITE))
1493 		flags |= FD_RAW_INTR;
1494 
1495 	if ((flags & FD_RAW_SPIN) && !(flags & FD_RAW_NO_MOTOR)) {
1496 		ready_date = drive_state[current_drive].spinup_date + drive_params[current_drive].spinup;
1497 		/* If spinup will take a long time, rerun scandrives
1498 		 * again just before spinup completion. Beware that
1499 		 * after scandrives, we must again wait for selection.
1500 		 */
1501 		if (time_after(ready_date, jiffies + drive_params[current_drive].select_delay)) {
1502 			ready_date -= drive_params[current_drive].select_delay;
1503 			function = floppy_start;
1504 		} else
1505 			function = setup_rw_floppy;
1506 
1507 		/* wait until the floppy is spinning fast enough */
1508 		if (fd_wait_for_completion(ready_date, function))
1509 			return;
1510 	}
1511 	if ((flags & FD_RAW_READ) || (flags & FD_RAW_WRITE))
1512 		setup_DMA();
1513 
1514 	if (flags & FD_RAW_INTR)
1515 		do_floppy = main_command_interrupt;
1516 
1517 	r = 0;
1518 	for (i = 0; i < raw_cmd->cmd_count; i++)
1519 		r |= output_byte(current_fdc, raw_cmd->fullcmd[i]);
1520 
1521 	debugt(__func__, "rw_command");
1522 
1523 	if (r) {
1524 		cont->error();
1525 		reset_fdc();
1526 		return;
1527 	}
1528 
1529 	if (!(flags & FD_RAW_INTR)) {
1530 		inr = result(current_fdc);
1531 		cont->interrupt();
1532 	} else if (flags & FD_RAW_NEED_DISK)
1533 		fd_watchdog();
1534 }
1535 
1536 static int blind_seek;
1537 
1538 /*
1539  * This is the routine called after every seek (or recalibrate) interrupt
1540  * from the floppy controller.
1541  */
seek_interrupt(void)1542 static void seek_interrupt(void)
1543 {
1544 	debugt(__func__, "");
1545 	if (inr != 2 || (reply_buffer[ST0] & 0xF8) != 0x20) {
1546 		DPRINT("seek failed\n");
1547 		drive_state[current_drive].track = NEED_2_RECAL;
1548 		cont->error();
1549 		cont->redo();
1550 		return;
1551 	}
1552 	if (drive_state[current_drive].track >= 0 &&
1553 	    drive_state[current_drive].track != reply_buffer[ST1] &&
1554 	    !blind_seek) {
1555 		debug_dcl(drive_params[current_drive].flags,
1556 			  "clearing NEWCHANGE flag because of effective seek\n");
1557 		debug_dcl(drive_params[current_drive].flags, "jiffies=%lu\n",
1558 			  jiffies);
1559 		clear_bit(FD_DISK_NEWCHANGE_BIT,
1560 			  &drive_state[current_drive].flags);
1561 					/* effective seek */
1562 		drive_state[current_drive].select_date = jiffies;
1563 	}
1564 	drive_state[current_drive].track = reply_buffer[ST1];
1565 	floppy_ready();
1566 }
1567 
check_wp(int fdc,int drive)1568 static void check_wp(int fdc, int drive)
1569 {
1570 	if (test_bit(FD_VERIFY_BIT, &drive_state[drive].flags)) {
1571 					/* check write protection */
1572 		output_byte(fdc, FD_GETSTATUS);
1573 		output_byte(fdc, UNIT(drive));
1574 		if (result(fdc) != 1) {
1575 			fdc_state[fdc].reset = 1;
1576 			return;
1577 		}
1578 		clear_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
1579 		clear_bit(FD_NEED_TWADDLE_BIT,
1580 			  &drive_state[drive].flags);
1581 		debug_dcl(drive_params[drive].flags,
1582 			  "checking whether disk is write protected\n");
1583 		debug_dcl(drive_params[drive].flags, "wp=%x\n",
1584 			  reply_buffer[ST3] & 0x40);
1585 		if (!(reply_buffer[ST3] & 0x40))
1586 			set_bit(FD_DISK_WRITABLE_BIT,
1587 				&drive_state[drive].flags);
1588 		else
1589 			clear_bit(FD_DISK_WRITABLE_BIT,
1590 				  &drive_state[drive].flags);
1591 	}
1592 }
1593 
seek_floppy(void)1594 static void seek_floppy(void)
1595 {
1596 	int track;
1597 
1598 	blind_seek = 0;
1599 
1600 	debug_dcl(drive_params[current_drive].flags,
1601 		  "calling disk change from %s\n", __func__);
1602 
1603 	if (!test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1604 	    disk_change(current_drive) && (raw_cmd->flags & FD_RAW_NEED_DISK)) {
1605 		/* the media changed flag should be cleared after the seek.
1606 		 * If it isn't, this means that there is really no disk in
1607 		 * the drive.
1608 		 */
1609 		set_bit(FD_DISK_CHANGED_BIT,
1610 			&drive_state[current_drive].flags);
1611 		cont->done(0);
1612 		cont->redo();
1613 		return;
1614 	}
1615 	if (drive_state[current_drive].track <= NEED_1_RECAL) {
1616 		recalibrate_floppy();
1617 		return;
1618 	} else if (test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1619 		   (raw_cmd->flags & FD_RAW_NEED_DISK) &&
1620 		   (drive_state[current_drive].track <= NO_TRACK || drive_state[current_drive].track == raw_cmd->track)) {
1621 		/* we seek to clear the media-changed condition. Does anybody
1622 		 * know a more elegant way, which works on all drives? */
1623 		if (raw_cmd->track)
1624 			track = raw_cmd->track - 1;
1625 		else {
1626 			if (drive_params[current_drive].flags & FD_SILENT_DCL_CLEAR) {
1627 				set_dor(current_fdc, ~(0x10 << UNIT(current_drive)), 0);
1628 				blind_seek = 1;
1629 				raw_cmd->flags |= FD_RAW_NEED_SEEK;
1630 			}
1631 			track = 1;
1632 		}
1633 	} else {
1634 		check_wp(current_fdc, current_drive);
1635 		if (raw_cmd->track != drive_state[current_drive].track &&
1636 		    (raw_cmd->flags & FD_RAW_NEED_SEEK))
1637 			track = raw_cmd->track;
1638 		else {
1639 			setup_rw_floppy();
1640 			return;
1641 		}
1642 	}
1643 
1644 	do_floppy = seek_interrupt;
1645 	output_byte(current_fdc, FD_SEEK);
1646 	output_byte(current_fdc, UNIT(current_drive));
1647 	if (output_byte(current_fdc, track) < 0) {
1648 		reset_fdc();
1649 		return;
1650 	}
1651 	debugt(__func__, "");
1652 }
1653 
recal_interrupt(void)1654 static void recal_interrupt(void)
1655 {
1656 	debugt(__func__, "");
1657 	if (inr != 2)
1658 		fdc_state[current_fdc].reset = 1;
1659 	else if (reply_buffer[ST0] & ST0_ECE) {
1660 		switch (drive_state[current_drive].track) {
1661 		case NEED_1_RECAL:
1662 			debugt(__func__, "need 1 recal");
1663 			/* after a second recalibrate, we still haven't
1664 			 * reached track 0. Probably no drive. Raise an
1665 			 * error, as failing immediately might upset
1666 			 * computers possessed by the Devil :-) */
1667 			cont->error();
1668 			cont->redo();
1669 			return;
1670 		case NEED_2_RECAL:
1671 			debugt(__func__, "need 2 recal");
1672 			/* If we already did a recalibrate,
1673 			 * and we are not at track 0, this
1674 			 * means we have moved. (The only way
1675 			 * not to move at recalibration is to
1676 			 * be already at track 0.) Clear the
1677 			 * new change flag */
1678 			debug_dcl(drive_params[current_drive].flags,
1679 				  "clearing NEWCHANGE flag because of second recalibrate\n");
1680 
1681 			clear_bit(FD_DISK_NEWCHANGE_BIT,
1682 				  &drive_state[current_drive].flags);
1683 			drive_state[current_drive].select_date = jiffies;
1684 			fallthrough;
1685 		default:
1686 			debugt(__func__, "default");
1687 			/* Recalibrate moves the head by at
1688 			 * most 80 steps. If after one
1689 			 * recalibrate we don't have reached
1690 			 * track 0, this might mean that we
1691 			 * started beyond track 80.  Try
1692 			 * again.  */
1693 			drive_state[current_drive].track = NEED_1_RECAL;
1694 			break;
1695 		}
1696 	} else
1697 		drive_state[current_drive].track = reply_buffer[ST1];
1698 	floppy_ready();
1699 }
1700 
print_result(char * message,int inr)1701 static void print_result(char *message, int inr)
1702 {
1703 	int i;
1704 
1705 	DPRINT("%s ", message);
1706 	if (inr >= 0)
1707 		for (i = 0; i < inr; i++)
1708 			pr_cont("repl[%d]=%x ", i, reply_buffer[i]);
1709 	pr_cont("\n");
1710 }
1711 
1712 /* interrupt handler. Note that this can be called externally on the Sparc */
floppy_interrupt(int irq,void * dev_id)1713 irqreturn_t floppy_interrupt(int irq, void *dev_id)
1714 {
1715 	int do_print;
1716 	unsigned long f;
1717 	void (*handler)(void) = do_floppy;
1718 
1719 	lasthandler = handler;
1720 	interruptjiffies = jiffies;
1721 
1722 	f = claim_dma_lock();
1723 	fd_disable_dma();
1724 	release_dma_lock(f);
1725 
1726 	do_floppy = NULL;
1727 	if (current_fdc >= N_FDC || fdc_state[current_fdc].address == -1) {
1728 		/* we don't even know which FDC is the culprit */
1729 		pr_info("DOR0=%x\n", fdc_state[0].dor);
1730 		pr_info("floppy interrupt on bizarre fdc %d\n", current_fdc);
1731 		pr_info("handler=%ps\n", handler);
1732 		is_alive(__func__, "bizarre fdc");
1733 		return IRQ_NONE;
1734 	}
1735 
1736 	fdc_state[current_fdc].reset = 0;
1737 	/* We have to clear the reset flag here, because apparently on boxes
1738 	 * with level triggered interrupts (PS/2, Sparc, ...), it is needed to
1739 	 * emit SENSEI's to clear the interrupt line. And fdc_state[fdc].reset
1740 	 * blocks the emission of the SENSEI's.
1741 	 * It is OK to emit floppy commands because we are in an interrupt
1742 	 * handler here, and thus we have to fear no interference of other
1743 	 * activity.
1744 	 */
1745 
1746 	do_print = !handler && print_unex && initialized;
1747 
1748 	inr = result(current_fdc);
1749 	if (do_print)
1750 		print_result("unexpected interrupt", inr);
1751 	if (inr == 0) {
1752 		int max_sensei = 4;
1753 		do {
1754 			output_byte(current_fdc, FD_SENSEI);
1755 			inr = result(current_fdc);
1756 			if (do_print)
1757 				print_result("sensei", inr);
1758 			max_sensei--;
1759 		} while ((reply_buffer[ST0] & 0x83) != UNIT(current_drive) &&
1760 			 inr == 2 && max_sensei);
1761 	}
1762 	if (!handler) {
1763 		fdc_state[current_fdc].reset = 1;
1764 		return IRQ_NONE;
1765 	}
1766 	schedule_bh(handler);
1767 	is_alive(__func__, "normal interrupt end");
1768 
1769 	/* FIXME! Was it really for us? */
1770 	return IRQ_HANDLED;
1771 }
1772 
recalibrate_floppy(void)1773 static void recalibrate_floppy(void)
1774 {
1775 	debugt(__func__, "");
1776 	do_floppy = recal_interrupt;
1777 	output_byte(current_fdc, FD_RECALIBRATE);
1778 	if (output_byte(current_fdc, UNIT(current_drive)) < 0)
1779 		reset_fdc();
1780 }
1781 
1782 /*
1783  * Must do 4 FD_SENSEIs after reset because of ``drive polling''.
1784  */
reset_interrupt(void)1785 static void reset_interrupt(void)
1786 {
1787 	debugt(__func__, "");
1788 	result(current_fdc);		/* get the status ready for set_fdc */
1789 	if (fdc_state[current_fdc].reset) {
1790 		pr_info("reset set in interrupt, calling %ps\n", cont->error);
1791 		cont->error();	/* a reset just after a reset. BAD! */
1792 	}
1793 	cont->redo();
1794 }
1795 
1796 /*
1797  * reset is done by pulling bit 2 of DOR low for a while (old FDCs),
1798  * or by setting the self clearing bit 7 of STATUS (newer FDCs).
1799  * This WILL trigger an interrupt, causing the handlers in the current
1800  * cont's ->redo() to be called via reset_interrupt().
1801  */
reset_fdc(void)1802 static void reset_fdc(void)
1803 {
1804 	unsigned long flags;
1805 
1806 	do_floppy = reset_interrupt;
1807 	fdc_state[current_fdc].reset = 0;
1808 	reset_fdc_info(current_fdc, 0);
1809 
1810 	/* Pseudo-DMA may intercept 'reset finished' interrupt.  */
1811 	/* Irrelevant for systems with true DMA (i386).          */
1812 
1813 	flags = claim_dma_lock();
1814 	fd_disable_dma();
1815 	release_dma_lock(flags);
1816 
1817 	if (fdc_state[current_fdc].version >= FDC_82072A)
1818 		fdc_outb(0x80 | (fdc_state[current_fdc].dtr & 3),
1819 			 current_fdc, FD_STATUS);
1820 	else {
1821 		fdc_outb(fdc_state[current_fdc].dor & ~0x04, current_fdc, FD_DOR);
1822 		udelay(FD_RESET_DELAY);
1823 		fdc_outb(fdc_state[current_fdc].dor, current_fdc, FD_DOR);
1824 	}
1825 }
1826 
show_floppy(int fdc)1827 static void show_floppy(int fdc)
1828 {
1829 	int i;
1830 
1831 	pr_info("\n");
1832 	pr_info("floppy driver state\n");
1833 	pr_info("-------------------\n");
1834 	pr_info("now=%lu last interrupt=%lu diff=%lu last called handler=%ps\n",
1835 		jiffies, interruptjiffies, jiffies - interruptjiffies,
1836 		lasthandler);
1837 
1838 	pr_info("timeout_message=%s\n", timeout_message);
1839 	pr_info("last output bytes:\n");
1840 	for (i = 0; i < OLOGSIZE; i++)
1841 		pr_info("%2x %2x %lu\n",
1842 			output_log[(i + output_log_pos) % OLOGSIZE].data,
1843 			output_log[(i + output_log_pos) % OLOGSIZE].status,
1844 			output_log[(i + output_log_pos) % OLOGSIZE].jiffies);
1845 	pr_info("last result at %lu\n", resultjiffies);
1846 	pr_info("last redo_fd_request at %lu\n", lastredo);
1847 	print_hex_dump(KERN_INFO, "", DUMP_PREFIX_NONE, 16, 1,
1848 		       reply_buffer, resultsize, true);
1849 
1850 	pr_info("status=%x\n", fdc_inb(fdc, FD_STATUS));
1851 	pr_info("fdc_busy=%lu\n", fdc_busy);
1852 	if (do_floppy)
1853 		pr_info("do_floppy=%ps\n", do_floppy);
1854 	if (work_pending(&floppy_work))
1855 		pr_info("floppy_work.func=%ps\n", floppy_work.func);
1856 	if (delayed_work_pending(&fd_timer))
1857 		pr_info("delayed work.function=%p expires=%ld\n",
1858 		       fd_timer.work.func,
1859 		       fd_timer.timer.expires - jiffies);
1860 	if (delayed_work_pending(&fd_timeout))
1861 		pr_info("timer_function=%p expires=%ld\n",
1862 		       fd_timeout.work.func,
1863 		       fd_timeout.timer.expires - jiffies);
1864 
1865 	pr_info("cont=%p\n", cont);
1866 	pr_info("current_req=%p\n", current_req);
1867 	pr_info("command_status=%d\n", command_status);
1868 	pr_info("\n");
1869 }
1870 
floppy_shutdown(struct work_struct * arg)1871 static void floppy_shutdown(struct work_struct *arg)
1872 {
1873 	unsigned long flags;
1874 
1875 	if (initialized)
1876 		show_floppy(current_fdc);
1877 	cancel_activity();
1878 
1879 	flags = claim_dma_lock();
1880 	fd_disable_dma();
1881 	release_dma_lock(flags);
1882 
1883 	/* avoid dma going to a random drive after shutdown */
1884 
1885 	if (initialized)
1886 		DPRINT("floppy timeout called\n");
1887 	fdc_state[current_fdc].reset = 1;
1888 	if (cont) {
1889 		cont->done(0);
1890 		cont->redo();	/* this will recall reset when needed */
1891 	} else {
1892 		pr_info("no cont in shutdown!\n");
1893 		process_fd_request();
1894 	}
1895 	is_alive(__func__, "");
1896 }
1897 
1898 /* start motor, check media-changed condition and write protection */
start_motor(void (* function)(void))1899 static int start_motor(void (*function)(void))
1900 {
1901 	int mask;
1902 	int data;
1903 
1904 	mask = 0xfc;
1905 	data = UNIT(current_drive);
1906 	if (!(raw_cmd->flags & FD_RAW_NO_MOTOR)) {
1907 		if (!(fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))) {
1908 			set_debugt();
1909 			/* no read since this drive is running */
1910 			drive_state[current_drive].first_read_date = 0;
1911 			/* note motor start time if motor is not yet running */
1912 			drive_state[current_drive].spinup_date = jiffies;
1913 			data |= (0x10 << UNIT(current_drive));
1914 		}
1915 	} else if (fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))
1916 		mask &= ~(0x10 << UNIT(current_drive));
1917 
1918 	/* starts motor and selects floppy */
1919 	del_timer(motor_off_timer + current_drive);
1920 	set_dor(current_fdc, mask, data);
1921 
1922 	/* wait_for_completion also schedules reset if needed. */
1923 	return fd_wait_for_completion(drive_state[current_drive].select_date + drive_params[current_drive].select_delay,
1924 				      function);
1925 }
1926 
floppy_ready(void)1927 static void floppy_ready(void)
1928 {
1929 	if (fdc_state[current_fdc].reset) {
1930 		reset_fdc();
1931 		return;
1932 	}
1933 	if (start_motor(floppy_ready))
1934 		return;
1935 	if (fdc_dtr())
1936 		return;
1937 
1938 	debug_dcl(drive_params[current_drive].flags,
1939 		  "calling disk change from floppy_ready\n");
1940 	if (!(raw_cmd->flags & FD_RAW_NO_MOTOR) &&
1941 	    disk_change(current_drive) && !drive_params[current_drive].select_delay)
1942 		twaddle(current_fdc, current_drive);	/* this clears the dcl on certain
1943 				 * drive/controller combinations */
1944 
1945 #ifdef fd_chose_dma_mode
1946 	if ((raw_cmd->flags & FD_RAW_READ) || (raw_cmd->flags & FD_RAW_WRITE)) {
1947 		unsigned long flags = claim_dma_lock();
1948 		fd_chose_dma_mode(raw_cmd->kernel_data, raw_cmd->length);
1949 		release_dma_lock(flags);
1950 	}
1951 #endif
1952 
1953 	if (raw_cmd->flags & (FD_RAW_NEED_SEEK | FD_RAW_NEED_DISK)) {
1954 		perpendicular_mode(current_fdc);
1955 		fdc_specify(current_fdc, current_drive); /* must be done here because of hut, hlt ... */
1956 		seek_floppy();
1957 	} else {
1958 		if ((raw_cmd->flags & FD_RAW_READ) ||
1959 		    (raw_cmd->flags & FD_RAW_WRITE))
1960 			fdc_specify(current_fdc, current_drive);
1961 		setup_rw_floppy();
1962 	}
1963 }
1964 
floppy_start(void)1965 static void floppy_start(void)
1966 {
1967 	reschedule_timeout(current_drive, "floppy start");
1968 
1969 	scandrives();
1970 	debug_dcl(drive_params[current_drive].flags,
1971 		  "setting NEWCHANGE in floppy_start\n");
1972 	set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
1973 	floppy_ready();
1974 }
1975 
1976 /*
1977  * ========================================================================
1978  * here ends the bottom half. Exported routines are:
1979  * floppy_start, floppy_off, floppy_ready, lock_fdc, unlock_fdc, set_fdc,
1980  * start_motor, reset_fdc, reset_fdc_info, interpret_errors.
1981  * Initialization also uses output_byte, result, set_dor, floppy_interrupt
1982  * and set_dor.
1983  * ========================================================================
1984  */
1985 /*
1986  * General purpose continuations.
1987  * ==============================
1988  */
1989 
do_wakeup(void)1990 static void do_wakeup(void)
1991 {
1992 	reschedule_timeout(MAXTIMEOUT, "do wakeup");
1993 	cont = NULL;
1994 	command_status += 2;
1995 	wake_up(&command_done);
1996 }
1997 
1998 static const struct cont_t wakeup_cont = {
1999 	.interrupt	= empty,
2000 	.redo		= do_wakeup,
2001 	.error		= empty,
2002 	.done		= (done_f)empty
2003 };
2004 
2005 static const struct cont_t intr_cont = {
2006 	.interrupt	= empty,
2007 	.redo		= process_fd_request,
2008 	.error		= empty,
2009 	.done		= (done_f)empty
2010 };
2011 
2012 /* schedules handler, waiting for completion. May be interrupted, will then
2013  * return -EINTR, in which case the driver will automatically be unlocked.
2014  */
wait_til_done(void (* handler)(void),bool interruptible)2015 static int wait_til_done(void (*handler)(void), bool interruptible)
2016 {
2017 	int ret;
2018 
2019 	schedule_bh(handler);
2020 
2021 	if (interruptible)
2022 		wait_event_interruptible(command_done, command_status >= 2);
2023 	else
2024 		wait_event(command_done, command_status >= 2);
2025 
2026 	if (command_status < 2) {
2027 		cancel_activity();
2028 		cont = &intr_cont;
2029 		reset_fdc();
2030 		return -EINTR;
2031 	}
2032 
2033 	if (fdc_state[current_fdc].reset)
2034 		command_status = FD_COMMAND_ERROR;
2035 	if (command_status == FD_COMMAND_OKAY)
2036 		ret = 0;
2037 	else
2038 		ret = -EIO;
2039 	command_status = FD_COMMAND_NONE;
2040 	return ret;
2041 }
2042 
generic_done(int result)2043 static void generic_done(int result)
2044 {
2045 	command_status = result;
2046 	cont = &wakeup_cont;
2047 }
2048 
generic_success(void)2049 static void generic_success(void)
2050 {
2051 	cont->done(1);
2052 }
2053 
generic_failure(void)2054 static void generic_failure(void)
2055 {
2056 	cont->done(0);
2057 }
2058 
success_and_wakeup(void)2059 static void success_and_wakeup(void)
2060 {
2061 	generic_success();
2062 	cont->redo();
2063 }
2064 
2065 /*
2066  * formatting and rw support.
2067  * ==========================
2068  */
2069 
next_valid_format(int drive)2070 static int next_valid_format(int drive)
2071 {
2072 	int probed_format;
2073 
2074 	probed_format = drive_state[drive].probed_format;
2075 	while (1) {
2076 		if (probed_format >= FD_AUTODETECT_SIZE ||
2077 		    !drive_params[drive].autodetect[probed_format]) {
2078 			drive_state[drive].probed_format = 0;
2079 			return 1;
2080 		}
2081 		if (floppy_type[drive_params[drive].autodetect[probed_format]].sect) {
2082 			drive_state[drive].probed_format = probed_format;
2083 			return 0;
2084 		}
2085 		probed_format++;
2086 	}
2087 }
2088 
bad_flp_intr(void)2089 static void bad_flp_intr(void)
2090 {
2091 	int err_count;
2092 
2093 	if (probing) {
2094 		drive_state[current_drive].probed_format++;
2095 		if (!next_valid_format(current_drive))
2096 			return;
2097 	}
2098 	err_count = ++(*errors);
2099 	INFBOUND(write_errors[current_drive].badness, err_count);
2100 	if (err_count > drive_params[current_drive].max_errors.abort)
2101 		cont->done(0);
2102 	if (err_count > drive_params[current_drive].max_errors.reset)
2103 		fdc_state[current_fdc].reset = 1;
2104 	else if (err_count > drive_params[current_drive].max_errors.recal)
2105 		drive_state[current_drive].track = NEED_2_RECAL;
2106 }
2107 
set_floppy(int drive)2108 static void set_floppy(int drive)
2109 {
2110 	int type = ITYPE(drive_state[drive].fd_device);
2111 
2112 	if (type)
2113 		_floppy = floppy_type + type;
2114 	else
2115 		_floppy = current_type[drive];
2116 }
2117 
2118 /*
2119  * formatting support.
2120  * ===================
2121  */
format_interrupt(void)2122 static void format_interrupt(void)
2123 {
2124 	switch (interpret_errors()) {
2125 	case 1:
2126 		cont->error();
2127 	case 2:
2128 		break;
2129 	case 0:
2130 		cont->done(1);
2131 	}
2132 	cont->redo();
2133 }
2134 
2135 #define FM_MODE(x, y) ((y) & ~(((x)->rate & 0x80) >> 1))
2136 #define CT(x) ((x) | 0xc0)
2137 
setup_format_params(int track)2138 static void setup_format_params(int track)
2139 {
2140 	int n;
2141 	int il;
2142 	int count;
2143 	int head_shift;
2144 	int track_shift;
2145 	struct fparm {
2146 		unsigned char track, head, sect, size;
2147 	} *here = (struct fparm *)floppy_track_buffer;
2148 
2149 	raw_cmd = &default_raw_cmd;
2150 	raw_cmd->track = track;
2151 
2152 	raw_cmd->flags = (FD_RAW_WRITE | FD_RAW_INTR | FD_RAW_SPIN |
2153 			  FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK);
2154 	raw_cmd->rate = _floppy->rate & 0x43;
2155 	raw_cmd->cmd_count = NR_F;
2156 	raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_FORMAT);
2157 	raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, format_req.head);
2158 	raw_cmd->cmd[F_SIZECODE] = FD_SIZECODE(_floppy);
2159 	raw_cmd->cmd[F_SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[F_SIZECODE];
2160 	raw_cmd->cmd[F_GAP] = _floppy->fmt_gap;
2161 	raw_cmd->cmd[F_FILL] = FD_FILL_BYTE;
2162 
2163 	raw_cmd->kernel_data = floppy_track_buffer;
2164 	raw_cmd->length = 4 * raw_cmd->cmd[F_SECT_PER_TRACK];
2165 
2166 	if (!raw_cmd->cmd[F_SECT_PER_TRACK])
2167 		return;
2168 
2169 	/* allow for about 30ms for data transport per track */
2170 	head_shift = (raw_cmd->cmd[F_SECT_PER_TRACK] + 5) / 6;
2171 
2172 	/* a ``cylinder'' is two tracks plus a little stepping time */
2173 	track_shift = 2 * head_shift + 3;
2174 
2175 	/* position of logical sector 1 on this track */
2176 	n = (track_shift * format_req.track + head_shift * format_req.head)
2177 	    % raw_cmd->cmd[F_SECT_PER_TRACK];
2178 
2179 	/* determine interleave */
2180 	il = 1;
2181 	if (_floppy->fmt_gap < 0x22)
2182 		il++;
2183 
2184 	/* initialize field */
2185 	for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2186 		here[count].track = format_req.track;
2187 		here[count].head = format_req.head;
2188 		here[count].sect = 0;
2189 		here[count].size = raw_cmd->cmd[F_SIZECODE];
2190 	}
2191 	/* place logical sectors */
2192 	for (count = 1; count <= raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2193 		here[n].sect = count;
2194 		n = (n + il) % raw_cmd->cmd[F_SECT_PER_TRACK];
2195 		if (here[n].sect) {	/* sector busy, find next free sector */
2196 			++n;
2197 			if (n >= raw_cmd->cmd[F_SECT_PER_TRACK]) {
2198 				n -= raw_cmd->cmd[F_SECT_PER_TRACK];
2199 				while (here[n].sect)
2200 					++n;
2201 			}
2202 		}
2203 	}
2204 	if (_floppy->stretch & FD_SECTBASEMASK) {
2205 		for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; count++)
2206 			here[count].sect += FD_SECTBASE(_floppy) - 1;
2207 	}
2208 }
2209 
redo_format(void)2210 static void redo_format(void)
2211 {
2212 	buffer_track = -1;
2213 	setup_format_params(format_req.track << STRETCH(_floppy));
2214 	floppy_start();
2215 	debugt(__func__, "queue format request");
2216 }
2217 
2218 static const struct cont_t format_cont = {
2219 	.interrupt	= format_interrupt,
2220 	.redo		= redo_format,
2221 	.error		= bad_flp_intr,
2222 	.done		= generic_done
2223 };
2224 
do_format(int drive,struct format_descr * tmp_format_req)2225 static int do_format(int drive, struct format_descr *tmp_format_req)
2226 {
2227 	int ret;
2228 
2229 	if (lock_fdc(drive))
2230 		return -EINTR;
2231 
2232 	set_floppy(drive);
2233 	if (!_floppy ||
2234 	    _floppy->track > drive_params[current_drive].tracks ||
2235 	    tmp_format_req->track >= _floppy->track ||
2236 	    tmp_format_req->head >= _floppy->head ||
2237 	    (_floppy->sect << 2) % (1 << FD_SIZECODE(_floppy)) ||
2238 	    !_floppy->fmt_gap) {
2239 		process_fd_request();
2240 		return -EINVAL;
2241 	}
2242 	format_req = *tmp_format_req;
2243 	format_errors = 0;
2244 	cont = &format_cont;
2245 	errors = &format_errors;
2246 	ret = wait_til_done(redo_format, true);
2247 	if (ret == -EINTR)
2248 		return -EINTR;
2249 	process_fd_request();
2250 	return ret;
2251 }
2252 
2253 /*
2254  * Buffer read/write and support
2255  * =============================
2256  */
2257 
floppy_end_request(struct request * req,blk_status_t error)2258 static void floppy_end_request(struct request *req, blk_status_t error)
2259 {
2260 	unsigned int nr_sectors = current_count_sectors;
2261 	unsigned int drive = (unsigned long)req->rq_disk->private_data;
2262 
2263 	/* current_count_sectors can be zero if transfer failed */
2264 	if (error)
2265 		nr_sectors = blk_rq_cur_sectors(req);
2266 	if (blk_update_request(req, error, nr_sectors << 9))
2267 		return;
2268 	__blk_mq_end_request(req, error);
2269 
2270 	/* We're done with the request */
2271 	floppy_off(drive);
2272 	current_req = NULL;
2273 }
2274 
2275 /* new request_done. Can handle physical sectors which are smaller than a
2276  * logical buffer */
request_done(int uptodate)2277 static void request_done(int uptodate)
2278 {
2279 	struct request *req = current_req;
2280 	int block;
2281 	char msg[sizeof("request done ") + sizeof(int) * 3];
2282 
2283 	probing = 0;
2284 	snprintf(msg, sizeof(msg), "request done %d", uptodate);
2285 	reschedule_timeout(MAXTIMEOUT, msg);
2286 
2287 	if (!req) {
2288 		pr_info("floppy.c: no request in request_done\n");
2289 		return;
2290 	}
2291 
2292 	if (uptodate) {
2293 		/* maintain values for invalidation on geometry
2294 		 * change */
2295 		block = current_count_sectors + blk_rq_pos(req);
2296 		INFBOUND(drive_state[current_drive].maxblock, block);
2297 		if (block > _floppy->sect)
2298 			drive_state[current_drive].maxtrack = 1;
2299 
2300 		floppy_end_request(req, 0);
2301 	} else {
2302 		if (rq_data_dir(req) == WRITE) {
2303 			/* record write error information */
2304 			write_errors[current_drive].write_errors++;
2305 			if (write_errors[current_drive].write_errors == 1) {
2306 				write_errors[current_drive].first_error_sector = blk_rq_pos(req);
2307 				write_errors[current_drive].first_error_generation = drive_state[current_drive].generation;
2308 			}
2309 			write_errors[current_drive].last_error_sector = blk_rq_pos(req);
2310 			write_errors[current_drive].last_error_generation = drive_state[current_drive].generation;
2311 		}
2312 		floppy_end_request(req, BLK_STS_IOERR);
2313 	}
2314 }
2315 
2316 /* Interrupt handler evaluating the result of the r/w operation */
rw_interrupt(void)2317 static void rw_interrupt(void)
2318 {
2319 	int eoc;
2320 	int ssize;
2321 	int heads;
2322 	int nr_sectors;
2323 
2324 	if (reply_buffer[R_HEAD] >= 2) {
2325 		/* some Toshiba floppy controllers occasionnally seem to
2326 		 * return bogus interrupts after read/write operations, which
2327 		 * can be recognized by a bad head number (>= 2) */
2328 		return;
2329 	}
2330 
2331 	if (!drive_state[current_drive].first_read_date)
2332 		drive_state[current_drive].first_read_date = jiffies;
2333 
2334 	nr_sectors = 0;
2335 	ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2336 
2337 	if (reply_buffer[ST1] & ST1_EOC)
2338 		eoc = 1;
2339 	else
2340 		eoc = 0;
2341 
2342 	if (raw_cmd->cmd[COMMAND] & 0x80)
2343 		heads = 2;
2344 	else
2345 		heads = 1;
2346 
2347 	nr_sectors = (((reply_buffer[R_TRACK] - raw_cmd->cmd[TRACK]) * heads +
2348 		       reply_buffer[R_HEAD] - raw_cmd->cmd[HEAD]) * raw_cmd->cmd[SECT_PER_TRACK] +
2349 		      reply_buffer[R_SECTOR] - raw_cmd->cmd[SECTOR] + eoc) << raw_cmd->cmd[SIZECODE] >> 2;
2350 
2351 	if (nr_sectors / ssize >
2352 	    DIV_ROUND_UP(in_sector_offset + current_count_sectors, ssize)) {
2353 		DPRINT("long rw: %x instead of %lx\n",
2354 		       nr_sectors, current_count_sectors);
2355 		pr_info("rs=%d s=%d\n", reply_buffer[R_SECTOR],
2356 			raw_cmd->cmd[SECTOR]);
2357 		pr_info("rh=%d h=%d\n", reply_buffer[R_HEAD],
2358 			raw_cmd->cmd[HEAD]);
2359 		pr_info("rt=%d t=%d\n", reply_buffer[R_TRACK],
2360 			raw_cmd->cmd[TRACK]);
2361 		pr_info("heads=%d eoc=%d\n", heads, eoc);
2362 		pr_info("spt=%d st=%d ss=%d\n",
2363 			raw_cmd->cmd[SECT_PER_TRACK], fsector_t, ssize);
2364 		pr_info("in_sector_offset=%d\n", in_sector_offset);
2365 	}
2366 
2367 	nr_sectors -= in_sector_offset;
2368 	INFBOUND(nr_sectors, 0);
2369 	SUPBOUND(current_count_sectors, nr_sectors);
2370 
2371 	switch (interpret_errors()) {
2372 	case 2:
2373 		cont->redo();
2374 		return;
2375 	case 1:
2376 		if (!current_count_sectors) {
2377 			cont->error();
2378 			cont->redo();
2379 			return;
2380 		}
2381 		break;
2382 	case 0:
2383 		if (!current_count_sectors) {
2384 			cont->redo();
2385 			return;
2386 		}
2387 		current_type[current_drive] = _floppy;
2388 		floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2389 		break;
2390 	}
2391 
2392 	if (probing) {
2393 		if (drive_params[current_drive].flags & FTD_MSG)
2394 			DPRINT("Auto-detected floppy type %s in fd%d\n",
2395 			       _floppy->name, current_drive);
2396 		current_type[current_drive] = _floppy;
2397 		floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2398 		probing = 0;
2399 	}
2400 
2401 	if (CT(raw_cmd->cmd[COMMAND]) != FD_READ ||
2402 	    raw_cmd->kernel_data == bio_data(current_req->bio)) {
2403 		/* transfer directly from buffer */
2404 		cont->done(1);
2405 	} else if (CT(raw_cmd->cmd[COMMAND]) == FD_READ) {
2406 		buffer_track = raw_cmd->track;
2407 		buffer_drive = current_drive;
2408 		INFBOUND(buffer_max, nr_sectors + fsector_t);
2409 	}
2410 	cont->redo();
2411 }
2412 
2413 /* Compute maximal contiguous buffer size. */
buffer_chain_size(void)2414 static int buffer_chain_size(void)
2415 {
2416 	struct bio_vec bv;
2417 	int size;
2418 	struct req_iterator iter;
2419 	char *base;
2420 
2421 	base = bio_data(current_req->bio);
2422 	size = 0;
2423 
2424 	rq_for_each_segment(bv, current_req, iter) {
2425 		if (page_address(bv.bv_page) + bv.bv_offset != base + size)
2426 			break;
2427 
2428 		size += bv.bv_len;
2429 	}
2430 
2431 	return size >> 9;
2432 }
2433 
2434 /* Compute the maximal transfer size */
transfer_size(int ssize,int max_sector,int max_size)2435 static int transfer_size(int ssize, int max_sector, int max_size)
2436 {
2437 	SUPBOUND(max_sector, fsector_t + max_size);
2438 
2439 	/* alignment */
2440 	max_sector -= (max_sector % _floppy->sect) % ssize;
2441 
2442 	/* transfer size, beginning not aligned */
2443 	current_count_sectors = max_sector - fsector_t;
2444 
2445 	return max_sector;
2446 }
2447 
2448 /*
2449  * Move data from/to the track buffer to/from the buffer cache.
2450  */
copy_buffer(int ssize,int max_sector,int max_sector_2)2451 static void copy_buffer(int ssize, int max_sector, int max_sector_2)
2452 {
2453 	int remaining;		/* number of transferred 512-byte sectors */
2454 	struct bio_vec bv;
2455 	char *buffer;
2456 	char *dma_buffer;
2457 	int size;
2458 	struct req_iterator iter;
2459 
2460 	max_sector = transfer_size(ssize,
2461 				   min(max_sector, max_sector_2),
2462 				   blk_rq_sectors(current_req));
2463 
2464 	if (current_count_sectors <= 0 && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2465 	    buffer_max > fsector_t + blk_rq_sectors(current_req))
2466 		current_count_sectors = min_t(int, buffer_max - fsector_t,
2467 					      blk_rq_sectors(current_req));
2468 
2469 	remaining = current_count_sectors << 9;
2470 	if (remaining > blk_rq_bytes(current_req) && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2471 		DPRINT("in copy buffer\n");
2472 		pr_info("current_count_sectors=%ld\n", current_count_sectors);
2473 		pr_info("remaining=%d\n", remaining >> 9);
2474 		pr_info("current_req->nr_sectors=%u\n",
2475 			blk_rq_sectors(current_req));
2476 		pr_info("current_req->current_nr_sectors=%u\n",
2477 			blk_rq_cur_sectors(current_req));
2478 		pr_info("max_sector=%d\n", max_sector);
2479 		pr_info("ssize=%d\n", ssize);
2480 	}
2481 
2482 	buffer_max = max(max_sector, buffer_max);
2483 
2484 	dma_buffer = floppy_track_buffer + ((fsector_t - buffer_min) << 9);
2485 
2486 	size = blk_rq_cur_bytes(current_req);
2487 
2488 	rq_for_each_segment(bv, current_req, iter) {
2489 		if (!remaining)
2490 			break;
2491 
2492 		size = bv.bv_len;
2493 		SUPBOUND(size, remaining);
2494 
2495 		buffer = page_address(bv.bv_page) + bv.bv_offset;
2496 		if (dma_buffer + size >
2497 		    floppy_track_buffer + (max_buffer_sectors << 10) ||
2498 		    dma_buffer < floppy_track_buffer) {
2499 			DPRINT("buffer overrun in copy buffer %d\n",
2500 			       (int)((floppy_track_buffer - dma_buffer) >> 9));
2501 			pr_info("fsector_t=%d buffer_min=%d\n",
2502 				fsector_t, buffer_min);
2503 			pr_info("current_count_sectors=%ld\n",
2504 				current_count_sectors);
2505 			if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2506 				pr_info("read\n");
2507 			if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2508 				pr_info("write\n");
2509 			break;
2510 		}
2511 		if (((unsigned long)buffer) % 512)
2512 			DPRINT("%p buffer not aligned\n", buffer);
2513 
2514 		if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2515 			memcpy(buffer, dma_buffer, size);
2516 		else
2517 			memcpy(dma_buffer, buffer, size);
2518 
2519 		remaining -= size;
2520 		dma_buffer += size;
2521 	}
2522 	if (remaining) {
2523 		if (remaining > 0)
2524 			max_sector -= remaining >> 9;
2525 		DPRINT("weirdness: remaining %d\n", remaining >> 9);
2526 	}
2527 }
2528 
2529 /* work around a bug in pseudo DMA
2530  * (on some FDCs) pseudo DMA does not stop when the CPU stops
2531  * sending data.  Hence we need a different way to signal the
2532  * transfer length:  We use raw_cmd->cmd[SECT_PER_TRACK].  Unfortunately, this
2533  * does not work with MT, hence we can only transfer one head at
2534  * a time
2535  */
virtualdmabug_workaround(void)2536 static void virtualdmabug_workaround(void)
2537 {
2538 	int hard_sectors;
2539 	int end_sector;
2540 
2541 	if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2542 		raw_cmd->cmd[COMMAND] &= ~0x80;	/* switch off multiple track mode */
2543 
2544 		hard_sectors = raw_cmd->length >> (7 + raw_cmd->cmd[SIZECODE]);
2545 		end_sector = raw_cmd->cmd[SECTOR] + hard_sectors - 1;
2546 		if (end_sector > raw_cmd->cmd[SECT_PER_TRACK]) {
2547 			pr_info("too many sectors %d > %d\n",
2548 				end_sector, raw_cmd->cmd[SECT_PER_TRACK]);
2549 			return;
2550 		}
2551 		raw_cmd->cmd[SECT_PER_TRACK] = end_sector;
2552 					/* make sure raw_cmd->cmd[SECT_PER_TRACK]
2553 					 * points to end of transfer */
2554 	}
2555 }
2556 
2557 /*
2558  * Formulate a read/write request.
2559  * this routine decides where to load the data (directly to buffer, or to
2560  * tmp floppy area), how much data to load (the size of the buffer, the whole
2561  * track, or a single sector)
2562  * All floppy_track_buffer handling goes in here. If we ever add track buffer
2563  * allocation on the fly, it should be done here. No other part should need
2564  * modification.
2565  */
2566 
make_raw_rw_request(void)2567 static int make_raw_rw_request(void)
2568 {
2569 	int aligned_sector_t;
2570 	int max_sector;
2571 	int max_size;
2572 	int tracksize;
2573 	int ssize;
2574 
2575 	if (WARN(max_buffer_sectors == 0, "VFS: Block I/O scheduled on unopened device\n"))
2576 		return 0;
2577 
2578 	set_fdc((long)current_req->rq_disk->private_data);
2579 
2580 	raw_cmd = &default_raw_cmd;
2581 	raw_cmd->flags = FD_RAW_SPIN | FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK;
2582 	raw_cmd->cmd_count = NR_RW;
2583 	if (rq_data_dir(current_req) == READ) {
2584 		raw_cmd->flags |= FD_RAW_READ;
2585 		raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2586 	} else if (rq_data_dir(current_req) == WRITE) {
2587 		raw_cmd->flags |= FD_RAW_WRITE;
2588 		raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_WRITE);
2589 	} else {
2590 		DPRINT("%s: unknown command\n", __func__);
2591 		return 0;
2592 	}
2593 
2594 	max_sector = _floppy->sect * _floppy->head;
2595 
2596 	raw_cmd->cmd[TRACK] = (int)blk_rq_pos(current_req) / max_sector;
2597 	fsector_t = (int)blk_rq_pos(current_req) % max_sector;
2598 	if (_floppy->track && raw_cmd->cmd[TRACK] >= _floppy->track) {
2599 		if (blk_rq_cur_sectors(current_req) & 1) {
2600 			current_count_sectors = 1;
2601 			return 1;
2602 		} else
2603 			return 0;
2604 	}
2605 	raw_cmd->cmd[HEAD] = fsector_t / _floppy->sect;
2606 
2607 	if (((_floppy->stretch & (FD_SWAPSIDES | FD_SECTBASEMASK)) ||
2608 	     test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags)) &&
2609 	    fsector_t < _floppy->sect)
2610 		max_sector = _floppy->sect;
2611 
2612 	/* 2M disks have phantom sectors on the first track */
2613 	if ((_floppy->rate & FD_2M) && (!raw_cmd->cmd[TRACK]) && (!raw_cmd->cmd[HEAD])) {
2614 		max_sector = 2 * _floppy->sect / 3;
2615 		if (fsector_t >= max_sector) {
2616 			current_count_sectors =
2617 			    min_t(int, _floppy->sect - fsector_t,
2618 				  blk_rq_sectors(current_req));
2619 			return 1;
2620 		}
2621 		raw_cmd->cmd[SIZECODE] = 2;
2622 	} else
2623 		raw_cmd->cmd[SIZECODE] = FD_SIZECODE(_floppy);
2624 	raw_cmd->rate = _floppy->rate & 0x43;
2625 	if ((_floppy->rate & FD_2M) &&
2626 	    (raw_cmd->cmd[TRACK] || raw_cmd->cmd[HEAD]) && raw_cmd->rate == 2)
2627 		raw_cmd->rate = 1;
2628 
2629 	if (raw_cmd->cmd[SIZECODE])
2630 		raw_cmd->cmd[SIZECODE2] = 0xff;
2631 	else
2632 		raw_cmd->cmd[SIZECODE2] = 0x80;
2633 	raw_cmd->track = raw_cmd->cmd[TRACK] << STRETCH(_floppy);
2634 	raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, raw_cmd->cmd[HEAD]);
2635 	raw_cmd->cmd[GAP] = _floppy->gap;
2636 	ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2637 	raw_cmd->cmd[SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[SIZECODE];
2638 	raw_cmd->cmd[SECTOR] = ((fsector_t % _floppy->sect) << 2 >> raw_cmd->cmd[SIZECODE]) +
2639 	    FD_SECTBASE(_floppy);
2640 
2641 	/* tracksize describes the size which can be filled up with sectors
2642 	 * of size ssize.
2643 	 */
2644 	tracksize = _floppy->sect - _floppy->sect % ssize;
2645 	if (tracksize < _floppy->sect) {
2646 		raw_cmd->cmd[SECT_PER_TRACK]++;
2647 		if (tracksize <= fsector_t % _floppy->sect)
2648 			raw_cmd->cmd[SECTOR]--;
2649 
2650 		/* if we are beyond tracksize, fill up using smaller sectors */
2651 		while (tracksize <= fsector_t % _floppy->sect) {
2652 			while (tracksize + ssize > _floppy->sect) {
2653 				raw_cmd->cmd[SIZECODE]--;
2654 				ssize >>= 1;
2655 			}
2656 			raw_cmd->cmd[SECTOR]++;
2657 			raw_cmd->cmd[SECT_PER_TRACK]++;
2658 			tracksize += ssize;
2659 		}
2660 		max_sector = raw_cmd->cmd[HEAD] * _floppy->sect + tracksize;
2661 	} else if (!raw_cmd->cmd[TRACK] && !raw_cmd->cmd[HEAD] && !(_floppy->rate & FD_2M) && probing) {
2662 		max_sector = _floppy->sect;
2663 	} else if (!raw_cmd->cmd[HEAD] && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2664 		/* for virtual DMA bug workaround */
2665 		max_sector = _floppy->sect;
2666 	}
2667 
2668 	in_sector_offset = (fsector_t % _floppy->sect) % ssize;
2669 	aligned_sector_t = fsector_t - in_sector_offset;
2670 	max_size = blk_rq_sectors(current_req);
2671 	if ((raw_cmd->track == buffer_track) &&
2672 	    (current_drive == buffer_drive) &&
2673 	    (fsector_t >= buffer_min) && (fsector_t < buffer_max)) {
2674 		/* data already in track buffer */
2675 		if (CT(raw_cmd->cmd[COMMAND]) == FD_READ) {
2676 			copy_buffer(1, max_sector, buffer_max);
2677 			return 1;
2678 		}
2679 	} else if (in_sector_offset || blk_rq_sectors(current_req) < ssize) {
2680 		if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2681 			unsigned int sectors;
2682 
2683 			sectors = fsector_t + blk_rq_sectors(current_req);
2684 			if (sectors > ssize && sectors < ssize + ssize)
2685 				max_size = ssize + ssize;
2686 			else
2687 				max_size = ssize;
2688 		}
2689 		raw_cmd->flags &= ~FD_RAW_WRITE;
2690 		raw_cmd->flags |= FD_RAW_READ;
2691 		raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2692 	} else if ((unsigned long)bio_data(current_req->bio) < MAX_DMA_ADDRESS) {
2693 		unsigned long dma_limit;
2694 		int direct, indirect;
2695 
2696 		indirect =
2697 		    transfer_size(ssize, max_sector,
2698 				  max_buffer_sectors * 2) - fsector_t;
2699 
2700 		/*
2701 		 * Do NOT use minimum() here---MAX_DMA_ADDRESS is 64 bits wide
2702 		 * on a 64 bit machine!
2703 		 */
2704 		max_size = buffer_chain_size();
2705 		dma_limit = (MAX_DMA_ADDRESS -
2706 			     ((unsigned long)bio_data(current_req->bio))) >> 9;
2707 		if ((unsigned long)max_size > dma_limit)
2708 			max_size = dma_limit;
2709 		/* 64 kb boundaries */
2710 		if (CROSS_64KB(bio_data(current_req->bio), max_size << 9))
2711 			max_size = (K_64 -
2712 				    ((unsigned long)bio_data(current_req->bio)) %
2713 				    K_64) >> 9;
2714 		direct = transfer_size(ssize, max_sector, max_size) - fsector_t;
2715 		/*
2716 		 * We try to read tracks, but if we get too many errors, we
2717 		 * go back to reading just one sector at a time.
2718 		 *
2719 		 * This means we should be able to read a sector even if there
2720 		 * are other bad sectors on this track.
2721 		 */
2722 		if (!direct ||
2723 		    (indirect * 2 > direct * 3 &&
2724 		     *errors < drive_params[current_drive].max_errors.read_track &&
2725 		     ((!probing ||
2726 		       (drive_params[current_drive].read_track & (1 << drive_state[current_drive].probed_format)))))) {
2727 			max_size = blk_rq_sectors(current_req);
2728 		} else {
2729 			raw_cmd->kernel_data = bio_data(current_req->bio);
2730 			raw_cmd->length = current_count_sectors << 9;
2731 			if (raw_cmd->length == 0) {
2732 				DPRINT("%s: zero dma transfer attempted\n", __func__);
2733 				DPRINT("indirect=%d direct=%d fsector_t=%d\n",
2734 				       indirect, direct, fsector_t);
2735 				return 0;
2736 			}
2737 			virtualdmabug_workaround();
2738 			return 2;
2739 		}
2740 	}
2741 
2742 	if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2743 		max_size = max_sector;	/* unbounded */
2744 
2745 	/* claim buffer track if needed */
2746 	if (buffer_track != raw_cmd->track ||	/* bad track */
2747 	    buffer_drive != current_drive ||	/* bad drive */
2748 	    fsector_t > buffer_max ||
2749 	    fsector_t < buffer_min ||
2750 	    ((CT(raw_cmd->cmd[COMMAND]) == FD_READ ||
2751 	      (!in_sector_offset && blk_rq_sectors(current_req) >= ssize)) &&
2752 	     max_sector > 2 * max_buffer_sectors + buffer_min &&
2753 	     max_size + fsector_t > 2 * max_buffer_sectors + buffer_min)) {
2754 		/* not enough space */
2755 		buffer_track = -1;
2756 		buffer_drive = current_drive;
2757 		buffer_max = buffer_min = aligned_sector_t;
2758 	}
2759 	raw_cmd->kernel_data = floppy_track_buffer +
2760 		((aligned_sector_t - buffer_min) << 9);
2761 
2762 	if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2763 		/* copy write buffer to track buffer.
2764 		 * if we get here, we know that the write
2765 		 * is either aligned or the data already in the buffer
2766 		 * (buffer will be overwritten) */
2767 		if (in_sector_offset && buffer_track == -1)
2768 			DPRINT("internal error offset !=0 on write\n");
2769 		buffer_track = raw_cmd->track;
2770 		buffer_drive = current_drive;
2771 		copy_buffer(ssize, max_sector,
2772 			    2 * max_buffer_sectors + buffer_min);
2773 	} else
2774 		transfer_size(ssize, max_sector,
2775 			      2 * max_buffer_sectors + buffer_min -
2776 			      aligned_sector_t);
2777 
2778 	/* round up current_count_sectors to get dma xfer size */
2779 	raw_cmd->length = in_sector_offset + current_count_sectors;
2780 	raw_cmd->length = ((raw_cmd->length - 1) | (ssize - 1)) + 1;
2781 	raw_cmd->length <<= 9;
2782 	if ((raw_cmd->length < current_count_sectors << 9) ||
2783 	    (raw_cmd->kernel_data != bio_data(current_req->bio) &&
2784 	     CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2785 	     (aligned_sector_t + (raw_cmd->length >> 9) > buffer_max ||
2786 	      aligned_sector_t < buffer_min)) ||
2787 	    raw_cmd->length % (128 << raw_cmd->cmd[SIZECODE]) ||
2788 	    raw_cmd->length <= 0 || current_count_sectors <= 0) {
2789 		DPRINT("fractionary current count b=%lx s=%lx\n",
2790 		       raw_cmd->length, current_count_sectors);
2791 		if (raw_cmd->kernel_data != bio_data(current_req->bio))
2792 			pr_info("addr=%d, length=%ld\n",
2793 				(int)((raw_cmd->kernel_data -
2794 				       floppy_track_buffer) >> 9),
2795 				current_count_sectors);
2796 		pr_info("st=%d ast=%d mse=%d msi=%d\n",
2797 			fsector_t, aligned_sector_t, max_sector, max_size);
2798 		pr_info("ssize=%x SIZECODE=%d\n", ssize, raw_cmd->cmd[SIZECODE]);
2799 		pr_info("command=%x SECTOR=%d HEAD=%d, TRACK=%d\n",
2800 			raw_cmd->cmd[COMMAND], raw_cmd->cmd[SECTOR],
2801 			raw_cmd->cmd[HEAD], raw_cmd->cmd[TRACK]);
2802 		pr_info("buffer drive=%d\n", buffer_drive);
2803 		pr_info("buffer track=%d\n", buffer_track);
2804 		pr_info("buffer_min=%d\n", buffer_min);
2805 		pr_info("buffer_max=%d\n", buffer_max);
2806 		return 0;
2807 	}
2808 
2809 	if (raw_cmd->kernel_data != bio_data(current_req->bio)) {
2810 		if (raw_cmd->kernel_data < floppy_track_buffer ||
2811 		    current_count_sectors < 0 ||
2812 		    raw_cmd->length < 0 ||
2813 		    raw_cmd->kernel_data + raw_cmd->length >
2814 		    floppy_track_buffer + (max_buffer_sectors << 10)) {
2815 			DPRINT("buffer overrun in schedule dma\n");
2816 			pr_info("fsector_t=%d buffer_min=%d current_count=%ld\n",
2817 				fsector_t, buffer_min, raw_cmd->length >> 9);
2818 			pr_info("current_count_sectors=%ld\n",
2819 				current_count_sectors);
2820 			if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2821 				pr_info("read\n");
2822 			if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2823 				pr_info("write\n");
2824 			return 0;
2825 		}
2826 	} else if (raw_cmd->length > blk_rq_bytes(current_req) ||
2827 		   current_count_sectors > blk_rq_sectors(current_req)) {
2828 		DPRINT("buffer overrun in direct transfer\n");
2829 		return 0;
2830 	} else if (raw_cmd->length < current_count_sectors << 9) {
2831 		DPRINT("more sectors than bytes\n");
2832 		pr_info("bytes=%ld\n", raw_cmd->length >> 9);
2833 		pr_info("sectors=%ld\n", current_count_sectors);
2834 	}
2835 	if (raw_cmd->length == 0) {
2836 		DPRINT("zero dma transfer attempted from make_raw_request\n");
2837 		return 0;
2838 	}
2839 
2840 	virtualdmabug_workaround();
2841 	return 2;
2842 }
2843 
set_next_request(void)2844 static int set_next_request(void)
2845 {
2846 	current_req = list_first_entry_or_null(&floppy_reqs, struct request,
2847 					       queuelist);
2848 	if (current_req) {
2849 		current_req->error_count = 0;
2850 		list_del_init(&current_req->queuelist);
2851 	}
2852 	return current_req != NULL;
2853 }
2854 
2855 /* Starts or continues processing request. Will automatically unlock the
2856  * driver at end of request.
2857  */
redo_fd_request(void)2858 static void redo_fd_request(void)
2859 {
2860 	int drive;
2861 	int tmp;
2862 
2863 	lastredo = jiffies;
2864 	if (current_drive < N_DRIVE)
2865 		floppy_off(current_drive);
2866 
2867 do_request:
2868 	if (!current_req) {
2869 		int pending;
2870 
2871 		spin_lock_irq(&floppy_lock);
2872 		pending = set_next_request();
2873 		spin_unlock_irq(&floppy_lock);
2874 		if (!pending) {
2875 			do_floppy = NULL;
2876 			unlock_fdc();
2877 			return;
2878 		}
2879 	}
2880 	drive = (long)current_req->rq_disk->private_data;
2881 	set_fdc(drive);
2882 	reschedule_timeout(current_drive, "redo fd request");
2883 
2884 	set_floppy(drive);
2885 	raw_cmd = &default_raw_cmd;
2886 	raw_cmd->flags = 0;
2887 	if (start_motor(redo_fd_request))
2888 		return;
2889 
2890 	disk_change(current_drive);
2891 	if (test_bit(current_drive, &fake_change) ||
2892 	    test_bit(FD_DISK_CHANGED_BIT, &drive_state[current_drive].flags)) {
2893 		DPRINT("disk absent or changed during operation\n");
2894 		request_done(0);
2895 		goto do_request;
2896 	}
2897 	if (!_floppy) {	/* Autodetection */
2898 		if (!probing) {
2899 			drive_state[current_drive].probed_format = 0;
2900 			if (next_valid_format(current_drive)) {
2901 				DPRINT("no autodetectable formats\n");
2902 				_floppy = NULL;
2903 				request_done(0);
2904 				goto do_request;
2905 			}
2906 		}
2907 		probing = 1;
2908 		_floppy = floppy_type + drive_params[current_drive].autodetect[drive_state[current_drive].probed_format];
2909 	} else
2910 		probing = 0;
2911 	errors = &(current_req->error_count);
2912 	tmp = make_raw_rw_request();
2913 	if (tmp < 2) {
2914 		request_done(tmp);
2915 		goto do_request;
2916 	}
2917 
2918 	if (test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags))
2919 		twaddle(current_fdc, current_drive);
2920 	schedule_bh(floppy_start);
2921 	debugt(__func__, "queue fd request");
2922 	return;
2923 }
2924 
2925 static const struct cont_t rw_cont = {
2926 	.interrupt	= rw_interrupt,
2927 	.redo		= redo_fd_request,
2928 	.error		= bad_flp_intr,
2929 	.done		= request_done
2930 };
2931 
2932 /* schedule the request and automatically unlock the driver on completion */
process_fd_request(void)2933 static void process_fd_request(void)
2934 {
2935 	cont = &rw_cont;
2936 	schedule_bh(redo_fd_request);
2937 }
2938 
floppy_queue_rq(struct blk_mq_hw_ctx * hctx,const struct blk_mq_queue_data * bd)2939 static blk_status_t floppy_queue_rq(struct blk_mq_hw_ctx *hctx,
2940 				    const struct blk_mq_queue_data *bd)
2941 {
2942 	blk_mq_start_request(bd->rq);
2943 
2944 	if (WARN(max_buffer_sectors == 0,
2945 		 "VFS: %s called on non-open device\n", __func__))
2946 		return BLK_STS_IOERR;
2947 
2948 	if (WARN(atomic_read(&usage_count) == 0,
2949 		 "warning: usage count=0, current_req=%p sect=%ld flags=%llx\n",
2950 		 current_req, (long)blk_rq_pos(current_req),
2951 		 (unsigned long long) current_req->cmd_flags))
2952 		return BLK_STS_IOERR;
2953 
2954 	if (test_and_set_bit(0, &fdc_busy)) {
2955 		/* fdc busy, this new request will be treated when the
2956 		   current one is done */
2957 		is_alive(__func__, "old request running");
2958 		return BLK_STS_RESOURCE;
2959 	}
2960 
2961 	spin_lock_irq(&floppy_lock);
2962 	list_add_tail(&bd->rq->queuelist, &floppy_reqs);
2963 	spin_unlock_irq(&floppy_lock);
2964 
2965 	command_status = FD_COMMAND_NONE;
2966 	__reschedule_timeout(MAXTIMEOUT, "fd_request");
2967 	set_fdc(0);
2968 	process_fd_request();
2969 	is_alive(__func__, "");
2970 	return BLK_STS_OK;
2971 }
2972 
2973 static const struct cont_t poll_cont = {
2974 	.interrupt	= success_and_wakeup,
2975 	.redo		= floppy_ready,
2976 	.error		= generic_failure,
2977 	.done		= generic_done
2978 };
2979 
poll_drive(bool interruptible,int flag)2980 static int poll_drive(bool interruptible, int flag)
2981 {
2982 	/* no auto-sense, just clear dcl */
2983 	raw_cmd = &default_raw_cmd;
2984 	raw_cmd->flags = flag;
2985 	raw_cmd->track = 0;
2986 	raw_cmd->cmd_count = 0;
2987 	cont = &poll_cont;
2988 	debug_dcl(drive_params[current_drive].flags,
2989 		  "setting NEWCHANGE in poll_drive\n");
2990 	set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
2991 
2992 	return wait_til_done(floppy_ready, interruptible);
2993 }
2994 
2995 /*
2996  * User triggered reset
2997  * ====================
2998  */
2999 
reset_intr(void)3000 static void reset_intr(void)
3001 {
3002 	pr_info("weird, reset interrupt called\n");
3003 }
3004 
3005 static const struct cont_t reset_cont = {
3006 	.interrupt	= reset_intr,
3007 	.redo		= success_and_wakeup,
3008 	.error		= generic_failure,
3009 	.done		= generic_done
3010 };
3011 
3012 /*
3013  * Resets the FDC connected to drive <drive>.
3014  * Both current_drive and current_fdc are changed to match the new drive.
3015  */
user_reset_fdc(int drive,int arg,bool interruptible)3016 static int user_reset_fdc(int drive, int arg, bool interruptible)
3017 {
3018 	int ret;
3019 
3020 	if (lock_fdc(drive))
3021 		return -EINTR;
3022 
3023 	if (arg == FD_RESET_ALWAYS)
3024 		fdc_state[current_fdc].reset = 1;
3025 	if (fdc_state[current_fdc].reset) {
3026 		/* note: reset_fdc will take care of unlocking the driver
3027 		 * on completion.
3028 		 */
3029 		cont = &reset_cont;
3030 		ret = wait_til_done(reset_fdc, interruptible);
3031 		if (ret == -EINTR)
3032 			return -EINTR;
3033 	}
3034 	process_fd_request();
3035 	return 0;
3036 }
3037 
3038 /*
3039  * Misc Ioctl's and support
3040  * ========================
3041  */
fd_copyout(void __user * param,const void * address,unsigned long size)3042 static inline int fd_copyout(void __user *param, const void *address,
3043 			     unsigned long size)
3044 {
3045 	return copy_to_user(param, address, size) ? -EFAULT : 0;
3046 }
3047 
fd_copyin(void __user * param,void * address,unsigned long size)3048 static inline int fd_copyin(void __user *param, void *address,
3049 			    unsigned long size)
3050 {
3051 	return copy_from_user(address, param, size) ? -EFAULT : 0;
3052 }
3053 
drive_name(int type,int drive)3054 static const char *drive_name(int type, int drive)
3055 {
3056 	struct floppy_struct *floppy;
3057 
3058 	if (type)
3059 		floppy = floppy_type + type;
3060 	else {
3061 		if (drive_params[drive].native_format)
3062 			floppy = floppy_type + drive_params[drive].native_format;
3063 		else
3064 			return "(null)";
3065 	}
3066 	if (floppy->name)
3067 		return floppy->name;
3068 	else
3069 		return "(null)";
3070 }
3071 
3072 #ifdef CONFIG_BLK_DEV_FD_RAWCMD
3073 
3074 /* raw commands */
raw_cmd_done(int flag)3075 static void raw_cmd_done(int flag)
3076 {
3077 	int i;
3078 
3079 	if (!flag) {
3080 		raw_cmd->flags |= FD_RAW_FAILURE;
3081 		raw_cmd->flags |= FD_RAW_HARDFAILURE;
3082 	} else {
3083 		raw_cmd->reply_count = inr;
3084 		if (raw_cmd->reply_count > FD_RAW_REPLY_SIZE)
3085 			raw_cmd->reply_count = 0;
3086 		for (i = 0; i < raw_cmd->reply_count; i++)
3087 			raw_cmd->reply[i] = reply_buffer[i];
3088 
3089 		if (raw_cmd->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3090 			unsigned long flags;
3091 			flags = claim_dma_lock();
3092 			raw_cmd->length = fd_get_dma_residue();
3093 			release_dma_lock(flags);
3094 		}
3095 
3096 		if ((raw_cmd->flags & FD_RAW_SOFTFAILURE) &&
3097 		    (!raw_cmd->reply_count || (raw_cmd->reply[0] & 0xc0)))
3098 			raw_cmd->flags |= FD_RAW_FAILURE;
3099 
3100 		if (disk_change(current_drive))
3101 			raw_cmd->flags |= FD_RAW_DISK_CHANGE;
3102 		else
3103 			raw_cmd->flags &= ~FD_RAW_DISK_CHANGE;
3104 		if (raw_cmd->flags & FD_RAW_NO_MOTOR_AFTER)
3105 			motor_off_callback(&motor_off_timer[current_drive]);
3106 
3107 		if (raw_cmd->next &&
3108 		    (!(raw_cmd->flags & FD_RAW_FAILURE) ||
3109 		     !(raw_cmd->flags & FD_RAW_STOP_IF_FAILURE)) &&
3110 		    ((raw_cmd->flags & FD_RAW_FAILURE) ||
3111 		     !(raw_cmd->flags & FD_RAW_STOP_IF_SUCCESS))) {
3112 			raw_cmd = raw_cmd->next;
3113 			return;
3114 		}
3115 	}
3116 	generic_done(flag);
3117 }
3118 
3119 static const struct cont_t raw_cmd_cont = {
3120 	.interrupt	= success_and_wakeup,
3121 	.redo		= floppy_start,
3122 	.error		= generic_failure,
3123 	.done		= raw_cmd_done
3124 };
3125 
raw_cmd_copyout(int cmd,void __user * param,struct floppy_raw_cmd * ptr)3126 static int raw_cmd_copyout(int cmd, void __user *param,
3127 				  struct floppy_raw_cmd *ptr)
3128 {
3129 	int ret;
3130 
3131 	while (ptr) {
3132 		struct floppy_raw_cmd cmd = *ptr;
3133 		cmd.next = NULL;
3134 		cmd.kernel_data = NULL;
3135 		ret = copy_to_user(param, &cmd, sizeof(cmd));
3136 		if (ret)
3137 			return -EFAULT;
3138 		param += sizeof(struct floppy_raw_cmd);
3139 		if ((ptr->flags & FD_RAW_READ) && ptr->buffer_length) {
3140 			if (ptr->length >= 0 &&
3141 			    ptr->length <= ptr->buffer_length) {
3142 				long length = ptr->buffer_length - ptr->length;
3143 				ret = fd_copyout(ptr->data, ptr->kernel_data,
3144 						 length);
3145 				if (ret)
3146 					return ret;
3147 			}
3148 		}
3149 		ptr = ptr->next;
3150 	}
3151 
3152 	return 0;
3153 }
3154 
raw_cmd_free(struct floppy_raw_cmd ** ptr)3155 static void raw_cmd_free(struct floppy_raw_cmd **ptr)
3156 {
3157 	struct floppy_raw_cmd *next;
3158 	struct floppy_raw_cmd *this;
3159 
3160 	this = *ptr;
3161 	*ptr = NULL;
3162 	while (this) {
3163 		if (this->buffer_length) {
3164 			fd_dma_mem_free((unsigned long)this->kernel_data,
3165 					this->buffer_length);
3166 			this->buffer_length = 0;
3167 		}
3168 		next = this->next;
3169 		kfree(this);
3170 		this = next;
3171 	}
3172 }
3173 
3174 #define MAX_LEN (1UL << MAX_ORDER << PAGE_SHIFT)
3175 
raw_cmd_copyin(int cmd,void __user * param,struct floppy_raw_cmd ** rcmd)3176 static int raw_cmd_copyin(int cmd, void __user *param,
3177 				 struct floppy_raw_cmd **rcmd)
3178 {
3179 	struct floppy_raw_cmd *ptr;
3180 	int ret;
3181 	int i;
3182 
3183 	*rcmd = NULL;
3184 
3185 loop:
3186 	ptr = kmalloc(sizeof(struct floppy_raw_cmd), GFP_KERNEL);
3187 	if (!ptr)
3188 		return -ENOMEM;
3189 	*rcmd = ptr;
3190 	ret = copy_from_user(ptr, param, sizeof(*ptr));
3191 	ptr->next = NULL;
3192 	ptr->buffer_length = 0;
3193 	ptr->kernel_data = NULL;
3194 	if (ret)
3195 		return -EFAULT;
3196 	param += sizeof(struct floppy_raw_cmd);
3197 	if (ptr->cmd_count > FD_RAW_CMD_FULLSIZE)
3198 		return -EINVAL;
3199 
3200 	for (i = 0; i < FD_RAW_REPLY_SIZE; i++)
3201 		ptr->reply[i] = 0;
3202 	ptr->resultcode = 0;
3203 
3204 	if (ptr->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3205 		if (ptr->length <= 0 || ptr->length >= MAX_LEN)
3206 			return -EINVAL;
3207 		ptr->kernel_data = (char *)fd_dma_mem_alloc(ptr->length);
3208 		fallback_on_nodma_alloc(&ptr->kernel_data, ptr->length);
3209 		if (!ptr->kernel_data)
3210 			return -ENOMEM;
3211 		ptr->buffer_length = ptr->length;
3212 	}
3213 	if (ptr->flags & FD_RAW_WRITE) {
3214 		ret = fd_copyin(ptr->data, ptr->kernel_data, ptr->length);
3215 		if (ret)
3216 			return ret;
3217 	}
3218 
3219 	if (ptr->flags & FD_RAW_MORE) {
3220 		rcmd = &(ptr->next);
3221 		ptr->rate &= 0x43;
3222 		goto loop;
3223 	}
3224 
3225 	return 0;
3226 }
3227 
raw_cmd_ioctl(int cmd,void __user * param)3228 static int raw_cmd_ioctl(int cmd, void __user *param)
3229 {
3230 	struct floppy_raw_cmd *my_raw_cmd;
3231 	int drive;
3232 	int ret2;
3233 	int ret;
3234 
3235 	if (fdc_state[current_fdc].rawcmd <= 1)
3236 		fdc_state[current_fdc].rawcmd = 1;
3237 	for (drive = 0; drive < N_DRIVE; drive++) {
3238 		if (FDC(drive) != current_fdc)
3239 			continue;
3240 		if (drive == current_drive) {
3241 			if (drive_state[drive].fd_ref > 1) {
3242 				fdc_state[current_fdc].rawcmd = 2;
3243 				break;
3244 			}
3245 		} else if (drive_state[drive].fd_ref) {
3246 			fdc_state[current_fdc].rawcmd = 2;
3247 			break;
3248 		}
3249 	}
3250 
3251 	if (fdc_state[current_fdc].reset)
3252 		return -EIO;
3253 
3254 	ret = raw_cmd_copyin(cmd, param, &my_raw_cmd);
3255 	if (ret) {
3256 		raw_cmd_free(&my_raw_cmd);
3257 		return ret;
3258 	}
3259 
3260 	raw_cmd = my_raw_cmd;
3261 	cont = &raw_cmd_cont;
3262 	ret = wait_til_done(floppy_start, true);
3263 	debug_dcl(drive_params[current_drive].flags,
3264 		  "calling disk change from raw_cmd ioctl\n");
3265 
3266 	if (ret != -EINTR && fdc_state[current_fdc].reset)
3267 		ret = -EIO;
3268 
3269 	drive_state[current_drive].track = NO_TRACK;
3270 
3271 	ret2 = raw_cmd_copyout(cmd, param, my_raw_cmd);
3272 	if (!ret)
3273 		ret = ret2;
3274 	raw_cmd_free(&my_raw_cmd);
3275 	return ret;
3276 }
3277 
floppy_raw_cmd_ioctl(int type,int drive,int cmd,void __user * param)3278 static int floppy_raw_cmd_ioctl(int type, int drive, int cmd,
3279 				void __user *param)
3280 {
3281 	int ret;
3282 
3283 	pr_warn_once("Note: FDRAWCMD is deprecated and will be removed from the kernel in the near future.\n");
3284 
3285 	if (type)
3286 		return -EINVAL;
3287 	if (lock_fdc(drive))
3288 		return -EINTR;
3289 	set_floppy(drive);
3290 	ret = raw_cmd_ioctl(cmd, param);
3291 	if (ret == -EINTR)
3292 		return -EINTR;
3293 	process_fd_request();
3294 	return ret;
3295 }
3296 
3297 #else /* CONFIG_BLK_DEV_FD_RAWCMD */
3298 
floppy_raw_cmd_ioctl(int type,int drive,int cmd,void __user * param)3299 static int floppy_raw_cmd_ioctl(int type, int drive, int cmd,
3300 				void __user *param)
3301 {
3302 	return -EOPNOTSUPP;
3303 }
3304 
3305 #endif
3306 
invalidate_drive(struct block_device * bdev)3307 static int invalidate_drive(struct block_device *bdev)
3308 {
3309 	/* invalidate the buffer track to force a reread */
3310 	set_bit((long)bdev->bd_disk->private_data, &fake_change);
3311 	process_fd_request();
3312 	if (bdev_check_media_change(bdev))
3313 		floppy_revalidate(bdev->bd_disk);
3314 	return 0;
3315 }
3316 
set_geometry(unsigned int cmd,struct floppy_struct * g,int drive,int type,struct block_device * bdev)3317 static int set_geometry(unsigned int cmd, struct floppy_struct *g,
3318 			       int drive, int type, struct block_device *bdev)
3319 {
3320 	int cnt;
3321 
3322 	/* sanity checking for parameters. */
3323 	if ((int)g->sect <= 0 ||
3324 	    (int)g->head <= 0 ||
3325 	    /* check for overflow in max_sector */
3326 	    (int)(g->sect * g->head) <= 0 ||
3327 	    /* check for zero in raw_cmd->cmd[F_SECT_PER_TRACK] */
3328 	    (unsigned char)((g->sect << 2) >> FD_SIZECODE(g)) == 0 ||
3329 	    g->track <= 0 || g->track > drive_params[drive].tracks >> STRETCH(g) ||
3330 	    /* check if reserved bits are set */
3331 	    (g->stretch & ~(FD_STRETCH | FD_SWAPSIDES | FD_SECTBASEMASK)) != 0)
3332 		return -EINVAL;
3333 	if (type) {
3334 		if (!capable(CAP_SYS_ADMIN))
3335 			return -EPERM;
3336 		mutex_lock(&open_lock);
3337 		if (lock_fdc(drive)) {
3338 			mutex_unlock(&open_lock);
3339 			return -EINTR;
3340 		}
3341 		floppy_type[type] = *g;
3342 		floppy_type[type].name = "user format";
3343 		for (cnt = type << 2; cnt < (type << 2) + 4; cnt++)
3344 			floppy_sizes[cnt] = floppy_sizes[cnt + 0x80] =
3345 			    floppy_type[type].size + 1;
3346 		process_fd_request();
3347 		for (cnt = 0; cnt < N_DRIVE; cnt++) {
3348 			struct block_device *bdev = opened_bdev[cnt];
3349 			if (!bdev || ITYPE(drive_state[cnt].fd_device) != type)
3350 				continue;
3351 			__invalidate_device(bdev, true);
3352 		}
3353 		mutex_unlock(&open_lock);
3354 	} else {
3355 		int oldStretch;
3356 
3357 		if (lock_fdc(drive))
3358 			return -EINTR;
3359 		if (cmd != FDDEFPRM) {
3360 			/* notice a disk change immediately, else
3361 			 * we lose our settings immediately*/
3362 			if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3363 				return -EINTR;
3364 		}
3365 		oldStretch = g->stretch;
3366 		user_params[drive] = *g;
3367 		if (buffer_drive == drive)
3368 			SUPBOUND(buffer_max, user_params[drive].sect);
3369 		current_type[drive] = &user_params[drive];
3370 		floppy_sizes[drive] = user_params[drive].size;
3371 		if (cmd == FDDEFPRM)
3372 			drive_state[current_drive].keep_data = -1;
3373 		else
3374 			drive_state[current_drive].keep_data = 1;
3375 		/* invalidation. Invalidate only when needed, i.e.
3376 		 * when there are already sectors in the buffer cache
3377 		 * whose number will change. This is useful, because
3378 		 * mtools often changes the geometry of the disk after
3379 		 * looking at the boot block */
3380 		if (drive_state[current_drive].maxblock > user_params[drive].sect ||
3381 		    drive_state[current_drive].maxtrack ||
3382 		    ((user_params[drive].sect ^ oldStretch) &
3383 		     (FD_SWAPSIDES | FD_SECTBASEMASK)))
3384 			invalidate_drive(bdev);
3385 		else
3386 			process_fd_request();
3387 	}
3388 	return 0;
3389 }
3390 
3391 /* handle obsolete ioctl's */
3392 static unsigned int ioctl_table[] = {
3393 	FDCLRPRM,
3394 	FDSETPRM,
3395 	FDDEFPRM,
3396 	FDGETPRM,
3397 	FDMSGON,
3398 	FDMSGOFF,
3399 	FDFMTBEG,
3400 	FDFMTTRK,
3401 	FDFMTEND,
3402 	FDSETEMSGTRESH,
3403 	FDFLUSH,
3404 	FDSETMAXERRS,
3405 	FDGETMAXERRS,
3406 	FDGETDRVTYP,
3407 	FDSETDRVPRM,
3408 	FDGETDRVPRM,
3409 	FDGETDRVSTAT,
3410 	FDPOLLDRVSTAT,
3411 	FDRESET,
3412 	FDGETFDCSTAT,
3413 	FDWERRORCLR,
3414 	FDWERRORGET,
3415 	FDRAWCMD,
3416 	FDEJECT,
3417 	FDTWADDLE
3418 };
3419 
normalize_ioctl(unsigned int * cmd,int * size)3420 static int normalize_ioctl(unsigned int *cmd, int *size)
3421 {
3422 	int i;
3423 
3424 	for (i = 0; i < ARRAY_SIZE(ioctl_table); i++) {
3425 		if ((*cmd & 0xffff) == (ioctl_table[i] & 0xffff)) {
3426 			*size = _IOC_SIZE(*cmd);
3427 			*cmd = ioctl_table[i];
3428 			if (*size > _IOC_SIZE(*cmd)) {
3429 				pr_info("ioctl not yet supported\n");
3430 				return -EFAULT;
3431 			}
3432 			return 0;
3433 		}
3434 	}
3435 	return -EINVAL;
3436 }
3437 
get_floppy_geometry(int drive,int type,struct floppy_struct ** g)3438 static int get_floppy_geometry(int drive, int type, struct floppy_struct **g)
3439 {
3440 	if (type)
3441 		*g = &floppy_type[type];
3442 	else {
3443 		if (lock_fdc(drive))
3444 			return -EINTR;
3445 		if (poll_drive(false, 0) == -EINTR)
3446 			return -EINTR;
3447 		process_fd_request();
3448 		*g = current_type[drive];
3449 	}
3450 	if (!*g)
3451 		return -ENODEV;
3452 	return 0;
3453 }
3454 
fd_getgeo(struct block_device * bdev,struct hd_geometry * geo)3455 static int fd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
3456 {
3457 	int drive = (long)bdev->bd_disk->private_data;
3458 	int type = ITYPE(drive_state[drive].fd_device);
3459 	struct floppy_struct *g;
3460 	int ret;
3461 
3462 	ret = get_floppy_geometry(drive, type, &g);
3463 	if (ret)
3464 		return ret;
3465 
3466 	geo->heads = g->head;
3467 	geo->sectors = g->sect;
3468 	geo->cylinders = g->track;
3469 	return 0;
3470 }
3471 
valid_floppy_drive_params(const short autodetect[FD_AUTODETECT_SIZE],int native_format)3472 static bool valid_floppy_drive_params(const short autodetect[FD_AUTODETECT_SIZE],
3473 		int native_format)
3474 {
3475 	size_t floppy_type_size = ARRAY_SIZE(floppy_type);
3476 	size_t i = 0;
3477 
3478 	for (i = 0; i < FD_AUTODETECT_SIZE; ++i) {
3479 		if (autodetect[i] < 0 ||
3480 		    autodetect[i] >= floppy_type_size)
3481 			return false;
3482 	}
3483 
3484 	if (native_format < 0 || native_format >= floppy_type_size)
3485 		return false;
3486 
3487 	return true;
3488 }
3489 
fd_locked_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3490 static int fd_locked_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3491 		    unsigned long param)
3492 {
3493 	int drive = (long)bdev->bd_disk->private_data;
3494 	int type = ITYPE(drive_state[drive].fd_device);
3495 	int ret;
3496 	int size;
3497 	union inparam {
3498 		struct floppy_struct g;	/* geometry */
3499 		struct format_descr f;
3500 		struct floppy_max_errors max_errors;
3501 		struct floppy_drive_params dp;
3502 	} inparam;		/* parameters coming from user space */
3503 	const void *outparam;	/* parameters passed back to user space */
3504 
3505 	/* convert compatibility eject ioctls into floppy eject ioctl.
3506 	 * We do this in order to provide a means to eject floppy disks before
3507 	 * installing the new fdutils package */
3508 	if (cmd == CDROMEJECT ||	/* CD-ROM eject */
3509 	    cmd == 0x6470) {		/* SunOS floppy eject */
3510 		DPRINT("obsolete eject ioctl\n");
3511 		DPRINT("please use floppycontrol --eject\n");
3512 		cmd = FDEJECT;
3513 	}
3514 
3515 	if (!((cmd & 0xff00) == 0x0200))
3516 		return -EINVAL;
3517 
3518 	/* convert the old style command into a new style command */
3519 	ret = normalize_ioctl(&cmd, &size);
3520 	if (ret)
3521 		return ret;
3522 
3523 	/* permission checks */
3524 	if (((cmd & 0x40) && !(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL))) ||
3525 	    ((cmd & 0x80) && !capable(CAP_SYS_ADMIN)))
3526 		return -EPERM;
3527 
3528 	if (WARN_ON(size < 0 || size > sizeof(inparam)))
3529 		return -EINVAL;
3530 
3531 	/* copyin */
3532 	memset(&inparam, 0, sizeof(inparam));
3533 	if (_IOC_DIR(cmd) & _IOC_WRITE) {
3534 		ret = fd_copyin((void __user *)param, &inparam, size);
3535 		if (ret)
3536 			return ret;
3537 	}
3538 
3539 	switch (cmd) {
3540 	case FDEJECT:
3541 		if (drive_state[drive].fd_ref != 1)
3542 			/* somebody else has this drive open */
3543 			return -EBUSY;
3544 		if (lock_fdc(drive))
3545 			return -EINTR;
3546 
3547 		/* do the actual eject. Fails on
3548 		 * non-Sparc architectures */
3549 		ret = fd_eject(UNIT(drive));
3550 
3551 		set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
3552 		set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
3553 		process_fd_request();
3554 		return ret;
3555 	case FDCLRPRM:
3556 		if (lock_fdc(drive))
3557 			return -EINTR;
3558 		current_type[drive] = NULL;
3559 		floppy_sizes[drive] = MAX_DISK_SIZE << 1;
3560 		drive_state[drive].keep_data = 0;
3561 		return invalidate_drive(bdev);
3562 	case FDSETPRM:
3563 	case FDDEFPRM:
3564 		return set_geometry(cmd, &inparam.g, drive, type, bdev);
3565 	case FDGETPRM:
3566 		ret = get_floppy_geometry(drive, type,
3567 					  (struct floppy_struct **)&outparam);
3568 		if (ret)
3569 			return ret;
3570 		memcpy(&inparam.g, outparam,
3571 				offsetof(struct floppy_struct, name));
3572 		outparam = &inparam.g;
3573 		break;
3574 	case FDMSGON:
3575 		drive_params[drive].flags |= FTD_MSG;
3576 		return 0;
3577 	case FDMSGOFF:
3578 		drive_params[drive].flags &= ~FTD_MSG;
3579 		return 0;
3580 	case FDFMTBEG:
3581 		if (lock_fdc(drive))
3582 			return -EINTR;
3583 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3584 			return -EINTR;
3585 		ret = drive_state[drive].flags;
3586 		process_fd_request();
3587 		if (ret & FD_VERIFY)
3588 			return -ENODEV;
3589 		if (!(ret & FD_DISK_WRITABLE))
3590 			return -EROFS;
3591 		return 0;
3592 	case FDFMTTRK:
3593 		if (drive_state[drive].fd_ref != 1)
3594 			return -EBUSY;
3595 		return do_format(drive, &inparam.f);
3596 	case FDFMTEND:
3597 	case FDFLUSH:
3598 		if (lock_fdc(drive))
3599 			return -EINTR;
3600 		return invalidate_drive(bdev);
3601 	case FDSETEMSGTRESH:
3602 		drive_params[drive].max_errors.reporting = (unsigned short)(param & 0x0f);
3603 		return 0;
3604 	case FDGETMAXERRS:
3605 		outparam = &drive_params[drive].max_errors;
3606 		break;
3607 	case FDSETMAXERRS:
3608 		drive_params[drive].max_errors = inparam.max_errors;
3609 		break;
3610 	case FDGETDRVTYP:
3611 		outparam = drive_name(type, drive);
3612 		SUPBOUND(size, strlen((const char *)outparam) + 1);
3613 		break;
3614 	case FDSETDRVPRM:
3615 		if (!valid_floppy_drive_params(inparam.dp.autodetect,
3616 				inparam.dp.native_format))
3617 			return -EINVAL;
3618 		drive_params[drive] = inparam.dp;
3619 		break;
3620 	case FDGETDRVPRM:
3621 		outparam = &drive_params[drive];
3622 		break;
3623 	case FDPOLLDRVSTAT:
3624 		if (lock_fdc(drive))
3625 			return -EINTR;
3626 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3627 			return -EINTR;
3628 		process_fd_request();
3629 		fallthrough;
3630 	case FDGETDRVSTAT:
3631 		outparam = &drive_state[drive];
3632 		break;
3633 	case FDRESET:
3634 		return user_reset_fdc(drive, (int)param, true);
3635 	case FDGETFDCSTAT:
3636 		outparam = &fdc_state[FDC(drive)];
3637 		break;
3638 	case FDWERRORCLR:
3639 		memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
3640 		return 0;
3641 	case FDWERRORGET:
3642 		outparam = &write_errors[drive];
3643 		break;
3644 	case FDRAWCMD:
3645 		return floppy_raw_cmd_ioctl(type, drive, cmd, (void __user *)param);
3646 	case FDTWADDLE:
3647 		if (lock_fdc(drive))
3648 			return -EINTR;
3649 		twaddle(current_fdc, current_drive);
3650 		process_fd_request();
3651 		return 0;
3652 	default:
3653 		return -EINVAL;
3654 	}
3655 
3656 	if (_IOC_DIR(cmd) & _IOC_READ)
3657 		return fd_copyout((void __user *)param, outparam, size);
3658 
3659 	return 0;
3660 }
3661 
fd_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3662 static int fd_ioctl(struct block_device *bdev, fmode_t mode,
3663 			     unsigned int cmd, unsigned long param)
3664 {
3665 	int ret;
3666 
3667 	mutex_lock(&floppy_mutex);
3668 	ret = fd_locked_ioctl(bdev, mode, cmd, param);
3669 	mutex_unlock(&floppy_mutex);
3670 
3671 	return ret;
3672 }
3673 
3674 #ifdef CONFIG_COMPAT
3675 
3676 struct compat_floppy_drive_params {
3677 	char		cmos;
3678 	compat_ulong_t	max_dtr;
3679 	compat_ulong_t	hlt;
3680 	compat_ulong_t	hut;
3681 	compat_ulong_t	srt;
3682 	compat_ulong_t	spinup;
3683 	compat_ulong_t	spindown;
3684 	unsigned char	spindown_offset;
3685 	unsigned char	select_delay;
3686 	unsigned char	rps;
3687 	unsigned char	tracks;
3688 	compat_ulong_t	timeout;
3689 	unsigned char	interleave_sect;
3690 	struct floppy_max_errors max_errors;
3691 	char		flags;
3692 	char		read_track;
3693 	short		autodetect[FD_AUTODETECT_SIZE];
3694 	compat_int_t	checkfreq;
3695 	compat_int_t	native_format;
3696 };
3697 
3698 struct compat_floppy_drive_struct {
3699 	signed char	flags;
3700 	compat_ulong_t	spinup_date;
3701 	compat_ulong_t	select_date;
3702 	compat_ulong_t	first_read_date;
3703 	short		probed_format;
3704 	short		track;
3705 	short		maxblock;
3706 	short		maxtrack;
3707 	compat_int_t	generation;
3708 	compat_int_t	keep_data;
3709 	compat_int_t	fd_ref;
3710 	compat_int_t	fd_device;
3711 	compat_int_t	last_checked;
3712 	compat_caddr_t dmabuf;
3713 	compat_int_t	bufblocks;
3714 };
3715 
3716 struct compat_floppy_fdc_state {
3717 	compat_int_t	spec1;
3718 	compat_int_t	spec2;
3719 	compat_int_t	dtr;
3720 	unsigned char	version;
3721 	unsigned char	dor;
3722 	compat_ulong_t	address;
3723 	unsigned int	rawcmd:2;
3724 	unsigned int	reset:1;
3725 	unsigned int	need_configure:1;
3726 	unsigned int	perp_mode:2;
3727 	unsigned int	has_fifo:1;
3728 	unsigned int	driver_version;
3729 	unsigned char	track[4];
3730 };
3731 
3732 struct compat_floppy_write_errors {
3733 	unsigned int	write_errors;
3734 	compat_ulong_t	first_error_sector;
3735 	compat_int_t	first_error_generation;
3736 	compat_ulong_t	last_error_sector;
3737 	compat_int_t	last_error_generation;
3738 	compat_uint_t	badness;
3739 };
3740 
3741 #define FDSETPRM32 _IOW(2, 0x42, struct compat_floppy_struct)
3742 #define FDDEFPRM32 _IOW(2, 0x43, struct compat_floppy_struct)
3743 #define FDSETDRVPRM32 _IOW(2, 0x90, struct compat_floppy_drive_params)
3744 #define FDGETDRVPRM32 _IOR(2, 0x11, struct compat_floppy_drive_params)
3745 #define FDGETDRVSTAT32 _IOR(2, 0x12, struct compat_floppy_drive_struct)
3746 #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct compat_floppy_drive_struct)
3747 #define FDGETFDCSTAT32 _IOR(2, 0x15, struct compat_floppy_fdc_state)
3748 #define FDWERRORGET32  _IOR(2, 0x17, struct compat_floppy_write_errors)
3749 
compat_set_geometry(struct block_device * bdev,fmode_t mode,unsigned int cmd,struct compat_floppy_struct __user * arg)3750 static int compat_set_geometry(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3751 		    struct compat_floppy_struct __user *arg)
3752 {
3753 	struct floppy_struct v;
3754 	int drive, type;
3755 	int err;
3756 
3757 	BUILD_BUG_ON(offsetof(struct floppy_struct, name) !=
3758 		     offsetof(struct compat_floppy_struct, name));
3759 
3760 	if (!(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL)))
3761 		return -EPERM;
3762 
3763 	memset(&v, 0, sizeof(struct floppy_struct));
3764 	if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))
3765 		return -EFAULT;
3766 
3767 	mutex_lock(&floppy_mutex);
3768 	drive = (long)bdev->bd_disk->private_data;
3769 	type = ITYPE(drive_state[drive].fd_device);
3770 	err = set_geometry(cmd == FDSETPRM32 ? FDSETPRM : FDDEFPRM,
3771 			&v, drive, type, bdev);
3772 	mutex_unlock(&floppy_mutex);
3773 	return err;
3774 }
3775 
compat_get_prm(int drive,struct compat_floppy_struct __user * arg)3776 static int compat_get_prm(int drive,
3777 			  struct compat_floppy_struct __user *arg)
3778 {
3779 	struct compat_floppy_struct v;
3780 	struct floppy_struct *p;
3781 	int err;
3782 
3783 	memset(&v, 0, sizeof(v));
3784 	mutex_lock(&floppy_mutex);
3785 	err = get_floppy_geometry(drive, ITYPE(drive_state[drive].fd_device),
3786 				  &p);
3787 	if (err) {
3788 		mutex_unlock(&floppy_mutex);
3789 		return err;
3790 	}
3791 	memcpy(&v, p, offsetof(struct floppy_struct, name));
3792 	mutex_unlock(&floppy_mutex);
3793 	if (copy_to_user(arg, &v, sizeof(struct compat_floppy_struct)))
3794 		return -EFAULT;
3795 	return 0;
3796 }
3797 
compat_setdrvprm(int drive,struct compat_floppy_drive_params __user * arg)3798 static int compat_setdrvprm(int drive,
3799 			    struct compat_floppy_drive_params __user *arg)
3800 {
3801 	struct compat_floppy_drive_params v;
3802 
3803 	if (!capable(CAP_SYS_ADMIN))
3804 		return -EPERM;
3805 	if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))
3806 		return -EFAULT;
3807 	if (!valid_floppy_drive_params(v.autodetect, v.native_format))
3808 		return -EINVAL;
3809 	mutex_lock(&floppy_mutex);
3810 	drive_params[drive].cmos = v.cmos;
3811 	drive_params[drive].max_dtr = v.max_dtr;
3812 	drive_params[drive].hlt = v.hlt;
3813 	drive_params[drive].hut = v.hut;
3814 	drive_params[drive].srt = v.srt;
3815 	drive_params[drive].spinup = v.spinup;
3816 	drive_params[drive].spindown = v.spindown;
3817 	drive_params[drive].spindown_offset = v.spindown_offset;
3818 	drive_params[drive].select_delay = v.select_delay;
3819 	drive_params[drive].rps = v.rps;
3820 	drive_params[drive].tracks = v.tracks;
3821 	drive_params[drive].timeout = v.timeout;
3822 	drive_params[drive].interleave_sect = v.interleave_sect;
3823 	drive_params[drive].max_errors = v.max_errors;
3824 	drive_params[drive].flags = v.flags;
3825 	drive_params[drive].read_track = v.read_track;
3826 	memcpy(drive_params[drive].autodetect, v.autodetect,
3827 	       sizeof(v.autodetect));
3828 	drive_params[drive].checkfreq = v.checkfreq;
3829 	drive_params[drive].native_format = v.native_format;
3830 	mutex_unlock(&floppy_mutex);
3831 	return 0;
3832 }
3833 
compat_getdrvprm(int drive,struct compat_floppy_drive_params __user * arg)3834 static int compat_getdrvprm(int drive,
3835 			    struct compat_floppy_drive_params __user *arg)
3836 {
3837 	struct compat_floppy_drive_params v;
3838 
3839 	memset(&v, 0, sizeof(struct compat_floppy_drive_params));
3840 	mutex_lock(&floppy_mutex);
3841 	v.cmos = drive_params[drive].cmos;
3842 	v.max_dtr = drive_params[drive].max_dtr;
3843 	v.hlt = drive_params[drive].hlt;
3844 	v.hut = drive_params[drive].hut;
3845 	v.srt = drive_params[drive].srt;
3846 	v.spinup = drive_params[drive].spinup;
3847 	v.spindown = drive_params[drive].spindown;
3848 	v.spindown_offset = drive_params[drive].spindown_offset;
3849 	v.select_delay = drive_params[drive].select_delay;
3850 	v.rps = drive_params[drive].rps;
3851 	v.tracks = drive_params[drive].tracks;
3852 	v.timeout = drive_params[drive].timeout;
3853 	v.interleave_sect = drive_params[drive].interleave_sect;
3854 	v.max_errors = drive_params[drive].max_errors;
3855 	v.flags = drive_params[drive].flags;
3856 	v.read_track = drive_params[drive].read_track;
3857 	memcpy(v.autodetect, drive_params[drive].autodetect,
3858 	       sizeof(v.autodetect));
3859 	v.checkfreq = drive_params[drive].checkfreq;
3860 	v.native_format = drive_params[drive].native_format;
3861 	mutex_unlock(&floppy_mutex);
3862 
3863 	if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_params)))
3864 		return -EFAULT;
3865 	return 0;
3866 }
3867 
compat_getdrvstat(int drive,bool poll,struct compat_floppy_drive_struct __user * arg)3868 static int compat_getdrvstat(int drive, bool poll,
3869 			    struct compat_floppy_drive_struct __user *arg)
3870 {
3871 	struct compat_floppy_drive_struct v;
3872 
3873 	memset(&v, 0, sizeof(struct compat_floppy_drive_struct));
3874 	mutex_lock(&floppy_mutex);
3875 
3876 	if (poll) {
3877 		if (lock_fdc(drive))
3878 			goto Eintr;
3879 		if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3880 			goto Eintr;
3881 		process_fd_request();
3882 	}
3883 	v.spinup_date = drive_state[drive].spinup_date;
3884 	v.select_date = drive_state[drive].select_date;
3885 	v.first_read_date = drive_state[drive].first_read_date;
3886 	v.probed_format = drive_state[drive].probed_format;
3887 	v.track = drive_state[drive].track;
3888 	v.maxblock = drive_state[drive].maxblock;
3889 	v.maxtrack = drive_state[drive].maxtrack;
3890 	v.generation = drive_state[drive].generation;
3891 	v.keep_data = drive_state[drive].keep_data;
3892 	v.fd_ref = drive_state[drive].fd_ref;
3893 	v.fd_device = drive_state[drive].fd_device;
3894 	v.last_checked = drive_state[drive].last_checked;
3895 	v.dmabuf = (uintptr_t) drive_state[drive].dmabuf;
3896 	v.bufblocks = drive_state[drive].bufblocks;
3897 	mutex_unlock(&floppy_mutex);
3898 
3899 	if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_struct)))
3900 		return -EFAULT;
3901 	return 0;
3902 Eintr:
3903 	mutex_unlock(&floppy_mutex);
3904 	return -EINTR;
3905 }
3906 
compat_getfdcstat(int drive,struct compat_floppy_fdc_state __user * arg)3907 static int compat_getfdcstat(int drive,
3908 			    struct compat_floppy_fdc_state __user *arg)
3909 {
3910 	struct compat_floppy_fdc_state v32;
3911 	struct floppy_fdc_state v;
3912 
3913 	mutex_lock(&floppy_mutex);
3914 	v = fdc_state[FDC(drive)];
3915 	mutex_unlock(&floppy_mutex);
3916 
3917 	memset(&v32, 0, sizeof(struct compat_floppy_fdc_state));
3918 	v32.spec1 = v.spec1;
3919 	v32.spec2 = v.spec2;
3920 	v32.dtr = v.dtr;
3921 	v32.version = v.version;
3922 	v32.dor = v.dor;
3923 	v32.address = v.address;
3924 	v32.rawcmd = v.rawcmd;
3925 	v32.reset = v.reset;
3926 	v32.need_configure = v.need_configure;
3927 	v32.perp_mode = v.perp_mode;
3928 	v32.has_fifo = v.has_fifo;
3929 	v32.driver_version = v.driver_version;
3930 	memcpy(v32.track, v.track, 4);
3931 	if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_fdc_state)))
3932 		return -EFAULT;
3933 	return 0;
3934 }
3935 
compat_werrorget(int drive,struct compat_floppy_write_errors __user * arg)3936 static int compat_werrorget(int drive,
3937 			    struct compat_floppy_write_errors __user *arg)
3938 {
3939 	struct compat_floppy_write_errors v32;
3940 	struct floppy_write_errors v;
3941 
3942 	memset(&v32, 0, sizeof(struct compat_floppy_write_errors));
3943 	mutex_lock(&floppy_mutex);
3944 	v = write_errors[drive];
3945 	mutex_unlock(&floppy_mutex);
3946 	v32.write_errors = v.write_errors;
3947 	v32.first_error_sector = v.first_error_sector;
3948 	v32.first_error_generation = v.first_error_generation;
3949 	v32.last_error_sector = v.last_error_sector;
3950 	v32.last_error_generation = v.last_error_generation;
3951 	v32.badness = v.badness;
3952 	if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_write_errors)))
3953 		return -EFAULT;
3954 	return 0;
3955 }
3956 
fd_compat_ioctl(struct block_device * bdev,fmode_t mode,unsigned int cmd,unsigned long param)3957 static int fd_compat_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3958 		    unsigned long param)
3959 {
3960 	int drive = (long)bdev->bd_disk->private_data;
3961 	switch (cmd) {
3962 	case CDROMEJECT: /* CD-ROM eject */
3963 	case 0x6470:	 /* SunOS floppy eject */
3964 
3965 	case FDMSGON:
3966 	case FDMSGOFF:
3967 	case FDSETEMSGTRESH:
3968 	case FDFLUSH:
3969 	case FDWERRORCLR:
3970 	case FDEJECT:
3971 	case FDCLRPRM:
3972 	case FDFMTBEG:
3973 	case FDRESET:
3974 	case FDTWADDLE:
3975 		return fd_ioctl(bdev, mode, cmd, param);
3976 	case FDSETMAXERRS:
3977 	case FDGETMAXERRS:
3978 	case FDGETDRVTYP:
3979 	case FDFMTEND:
3980 	case FDFMTTRK:
3981 	case FDRAWCMD:
3982 		return fd_ioctl(bdev, mode, cmd,
3983 				(unsigned long)compat_ptr(param));
3984 	case FDSETPRM32:
3985 	case FDDEFPRM32:
3986 		return compat_set_geometry(bdev, mode, cmd, compat_ptr(param));
3987 	case FDGETPRM32:
3988 		return compat_get_prm(drive, compat_ptr(param));
3989 	case FDSETDRVPRM32:
3990 		return compat_setdrvprm(drive, compat_ptr(param));
3991 	case FDGETDRVPRM32:
3992 		return compat_getdrvprm(drive, compat_ptr(param));
3993 	case FDPOLLDRVSTAT32:
3994 		return compat_getdrvstat(drive, true, compat_ptr(param));
3995 	case FDGETDRVSTAT32:
3996 		return compat_getdrvstat(drive, false, compat_ptr(param));
3997 	case FDGETFDCSTAT32:
3998 		return compat_getfdcstat(drive, compat_ptr(param));
3999 	case FDWERRORGET32:
4000 		return compat_werrorget(drive, compat_ptr(param));
4001 	}
4002 	return -EINVAL;
4003 }
4004 #endif
4005 
config_types(void)4006 static void __init config_types(void)
4007 {
4008 	bool has_drive = false;
4009 	int drive;
4010 
4011 	/* read drive info out of physical CMOS */
4012 	drive = 0;
4013 	if (!drive_params[drive].cmos)
4014 		drive_params[drive].cmos = FLOPPY0_TYPE;
4015 	drive = 1;
4016 	if (!drive_params[drive].cmos)
4017 		drive_params[drive].cmos = FLOPPY1_TYPE;
4018 
4019 	/* FIXME: additional physical CMOS drive detection should go here */
4020 
4021 	for (drive = 0; drive < N_DRIVE; drive++) {
4022 		unsigned int type = drive_params[drive].cmos;
4023 		struct floppy_drive_params *params;
4024 		const char *name = NULL;
4025 		char temparea[32];
4026 
4027 		if (type < ARRAY_SIZE(default_drive_params)) {
4028 			params = &default_drive_params[type].params;
4029 			if (type) {
4030 				name = default_drive_params[type].name;
4031 				allowed_drive_mask |= 1 << drive;
4032 			} else
4033 				allowed_drive_mask &= ~(1 << drive);
4034 		} else {
4035 			params = &default_drive_params[0].params;
4036 			snprintf(temparea, sizeof(temparea),
4037 				 "unknown type %d (usb?)", type);
4038 			name = temparea;
4039 		}
4040 		if (name) {
4041 			const char *prepend;
4042 			if (!has_drive) {
4043 				prepend = "";
4044 				has_drive = true;
4045 				pr_info("Floppy drive(s):");
4046 			} else {
4047 				prepend = ",";
4048 			}
4049 
4050 			pr_cont("%s fd%d is %s", prepend, drive, name);
4051 		}
4052 		drive_params[drive] = *params;
4053 	}
4054 
4055 	if (has_drive)
4056 		pr_cont("\n");
4057 }
4058 
floppy_release(struct gendisk * disk,fmode_t mode)4059 static void floppy_release(struct gendisk *disk, fmode_t mode)
4060 {
4061 	int drive = (long)disk->private_data;
4062 
4063 	mutex_lock(&floppy_mutex);
4064 	mutex_lock(&open_lock);
4065 	if (!drive_state[drive].fd_ref--) {
4066 		DPRINT("floppy_release with fd_ref == 0");
4067 		drive_state[drive].fd_ref = 0;
4068 	}
4069 	if (!drive_state[drive].fd_ref)
4070 		opened_bdev[drive] = NULL;
4071 	mutex_unlock(&open_lock);
4072 	mutex_unlock(&floppy_mutex);
4073 }
4074 
4075 /*
4076  * floppy_open check for aliasing (/dev/fd0 can be the same as
4077  * /dev/PS0 etc), and disallows simultaneous access to the same
4078  * drive with different device numbers.
4079  */
floppy_open(struct block_device * bdev,fmode_t mode)4080 static int floppy_open(struct block_device *bdev, fmode_t mode)
4081 {
4082 	int drive = (long)bdev->bd_disk->private_data;
4083 	int old_dev, new_dev;
4084 	int try;
4085 	int res = -EBUSY;
4086 	char *tmp;
4087 
4088 	mutex_lock(&floppy_mutex);
4089 	mutex_lock(&open_lock);
4090 	old_dev = drive_state[drive].fd_device;
4091 	if (opened_bdev[drive] && opened_bdev[drive] != bdev)
4092 		goto out2;
4093 
4094 	if (!drive_state[drive].fd_ref && (drive_params[drive].flags & FD_BROKEN_DCL)) {
4095 		set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4096 		set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
4097 	}
4098 
4099 	drive_state[drive].fd_ref++;
4100 
4101 	opened_bdev[drive] = bdev;
4102 
4103 	res = -ENXIO;
4104 
4105 	if (!floppy_track_buffer) {
4106 		/* if opening an ED drive, reserve a big buffer,
4107 		 * else reserve a small one */
4108 		if ((drive_params[drive].cmos == 6) || (drive_params[drive].cmos == 5))
4109 			try = 64;	/* Only 48 actually useful */
4110 		else
4111 			try = 32;	/* Only 24 actually useful */
4112 
4113 		tmp = (char *)fd_dma_mem_alloc(1024 * try);
4114 		if (!tmp && !floppy_track_buffer) {
4115 			try >>= 1;	/* buffer only one side */
4116 			INFBOUND(try, 16);
4117 			tmp = (char *)fd_dma_mem_alloc(1024 * try);
4118 		}
4119 		if (!tmp && !floppy_track_buffer)
4120 			fallback_on_nodma_alloc(&tmp, 2048 * try);
4121 		if (!tmp && !floppy_track_buffer) {
4122 			DPRINT("Unable to allocate DMA memory\n");
4123 			goto out;
4124 		}
4125 		if (floppy_track_buffer) {
4126 			if (tmp)
4127 				fd_dma_mem_free((unsigned long)tmp, try * 1024);
4128 		} else {
4129 			buffer_min = buffer_max = -1;
4130 			floppy_track_buffer = tmp;
4131 			max_buffer_sectors = try;
4132 		}
4133 	}
4134 
4135 	new_dev = MINOR(bdev->bd_dev);
4136 	drive_state[drive].fd_device = new_dev;
4137 	set_capacity(disks[drive], floppy_sizes[new_dev]);
4138 	if (old_dev != -1 && old_dev != new_dev) {
4139 		if (buffer_drive == drive)
4140 			buffer_track = -1;
4141 	}
4142 
4143 	if (fdc_state[FDC(drive)].rawcmd == 1)
4144 		fdc_state[FDC(drive)].rawcmd = 2;
4145 
4146 	if (!(mode & FMODE_NDELAY)) {
4147 		if (mode & (FMODE_READ|FMODE_WRITE)) {
4148 			drive_state[drive].last_checked = 0;
4149 			clear_bit(FD_OPEN_SHOULD_FAIL_BIT,
4150 				  &drive_state[drive].flags);
4151 			if (bdev_check_media_change(bdev))
4152 				floppy_revalidate(bdev->bd_disk);
4153 			if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags))
4154 				goto out;
4155 			if (test_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags))
4156 				goto out;
4157 		}
4158 		res = -EROFS;
4159 		if ((mode & FMODE_WRITE) &&
4160 		    !test_bit(FD_DISK_WRITABLE_BIT, &drive_state[drive].flags))
4161 			goto out;
4162 	}
4163 	mutex_unlock(&open_lock);
4164 	mutex_unlock(&floppy_mutex);
4165 	return 0;
4166 out:
4167 	drive_state[drive].fd_ref--;
4168 
4169 	if (!drive_state[drive].fd_ref)
4170 		opened_bdev[drive] = NULL;
4171 out2:
4172 	mutex_unlock(&open_lock);
4173 	mutex_unlock(&floppy_mutex);
4174 	return res;
4175 }
4176 
4177 /*
4178  * Check if the disk has been changed or if a change has been faked.
4179  */
floppy_check_events(struct gendisk * disk,unsigned int clearing)4180 static unsigned int floppy_check_events(struct gendisk *disk,
4181 					unsigned int clearing)
4182 {
4183 	int drive = (long)disk->private_data;
4184 
4185 	if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4186 	    test_bit(FD_VERIFY_BIT, &drive_state[drive].flags))
4187 		return DISK_EVENT_MEDIA_CHANGE;
4188 
4189 	if (time_after(jiffies, drive_state[drive].last_checked + drive_params[drive].checkfreq)) {
4190 		if (lock_fdc(drive))
4191 			return 0;
4192 		poll_drive(false, 0);
4193 		process_fd_request();
4194 	}
4195 
4196 	if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4197 	    test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4198 	    test_bit(drive, &fake_change) ||
4199 	    drive_no_geom(drive))
4200 		return DISK_EVENT_MEDIA_CHANGE;
4201 	return 0;
4202 }
4203 
4204 /*
4205  * This implements "read block 0" for floppy_revalidate().
4206  * Needed for format autodetection, checking whether there is
4207  * a disk in the drive, and whether that disk is writable.
4208  */
4209 
4210 struct rb0_cbdata {
4211 	int drive;
4212 	struct completion complete;
4213 };
4214 
floppy_rb0_cb(struct bio * bio)4215 static void floppy_rb0_cb(struct bio *bio)
4216 {
4217 	struct rb0_cbdata *cbdata = (struct rb0_cbdata *)bio->bi_private;
4218 	int drive = cbdata->drive;
4219 
4220 	if (bio->bi_status) {
4221 		pr_info("floppy: error %d while reading block 0\n",
4222 			bio->bi_status);
4223 		set_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags);
4224 	}
4225 	complete(&cbdata->complete);
4226 }
4227 
__floppy_read_block_0(struct block_device * bdev,int drive)4228 static int __floppy_read_block_0(struct block_device *bdev, int drive)
4229 {
4230 	struct bio bio;
4231 	struct bio_vec bio_vec;
4232 	struct page *page;
4233 	struct rb0_cbdata cbdata;
4234 
4235 	page = alloc_page(GFP_NOIO);
4236 	if (!page) {
4237 		process_fd_request();
4238 		return -ENOMEM;
4239 	}
4240 
4241 	cbdata.drive = drive;
4242 
4243 	bio_init(&bio, &bio_vec, 1);
4244 	bio_set_dev(&bio, bdev);
4245 	bio_add_page(&bio, page, block_size(bdev), 0);
4246 
4247 	bio.bi_iter.bi_sector = 0;
4248 	bio.bi_flags |= (1 << BIO_QUIET);
4249 	bio.bi_private = &cbdata;
4250 	bio.bi_end_io = floppy_rb0_cb;
4251 	bio_set_op_attrs(&bio, REQ_OP_READ, 0);
4252 
4253 	init_completion(&cbdata.complete);
4254 
4255 	submit_bio(&bio);
4256 	process_fd_request();
4257 
4258 	wait_for_completion(&cbdata.complete);
4259 
4260 	__free_page(page);
4261 
4262 	return 0;
4263 }
4264 
4265 /* revalidate the floppy disk, i.e. trigger format autodetection by reading
4266  * the bootblock (block 0). "Autodetection" is also needed to check whether
4267  * there is a disk in the drive at all... Thus we also do it for fixed
4268  * geometry formats */
floppy_revalidate(struct gendisk * disk)4269 static int floppy_revalidate(struct gendisk *disk)
4270 {
4271 	int drive = (long)disk->private_data;
4272 	int cf;
4273 	int res = 0;
4274 
4275 	if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4276 	    test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4277 	    test_bit(drive, &fake_change) ||
4278 	    drive_no_geom(drive)) {
4279 		if (WARN(atomic_read(&usage_count) == 0,
4280 			 "VFS: revalidate called on non-open device.\n"))
4281 			return -EFAULT;
4282 
4283 		res = lock_fdc(drive);
4284 		if (res)
4285 			return res;
4286 		cf = (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4287 		      test_bit(FD_VERIFY_BIT, &drive_state[drive].flags));
4288 		if (!(cf || test_bit(drive, &fake_change) || drive_no_geom(drive))) {
4289 			process_fd_request();	/*already done by another thread */
4290 			return 0;
4291 		}
4292 		drive_state[drive].maxblock = 0;
4293 		drive_state[drive].maxtrack = 0;
4294 		if (buffer_drive == drive)
4295 			buffer_track = -1;
4296 		clear_bit(drive, &fake_change);
4297 		clear_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4298 		if (cf)
4299 			drive_state[drive].generation++;
4300 		if (drive_no_geom(drive)) {
4301 			/* auto-sensing */
4302 			res = __floppy_read_block_0(opened_bdev[drive], drive);
4303 		} else {
4304 			if (cf)
4305 				poll_drive(false, FD_RAW_NEED_DISK);
4306 			process_fd_request();
4307 		}
4308 	}
4309 	set_capacity(disk, floppy_sizes[drive_state[drive].fd_device]);
4310 	return res;
4311 }
4312 
4313 static const struct block_device_operations floppy_fops = {
4314 	.owner			= THIS_MODULE,
4315 	.open			= floppy_open,
4316 	.release		= floppy_release,
4317 	.ioctl			= fd_ioctl,
4318 	.getgeo			= fd_getgeo,
4319 	.check_events		= floppy_check_events,
4320 #ifdef CONFIG_COMPAT
4321 	.compat_ioctl		= fd_compat_ioctl,
4322 #endif
4323 };
4324 
4325 /*
4326  * Floppy Driver initialization
4327  * =============================
4328  */
4329 
4330 /* Determine the floppy disk controller type */
4331 /* This routine was written by David C. Niemi */
get_fdc_version(int fdc)4332 static char __init get_fdc_version(int fdc)
4333 {
4334 	int r;
4335 
4336 	output_byte(fdc, FD_DUMPREGS);	/* 82072 and better know DUMPREGS */
4337 	if (fdc_state[fdc].reset)
4338 		return FDC_NONE;
4339 	r = result(fdc);
4340 	if (r <= 0x00)
4341 		return FDC_NONE;	/* No FDC present ??? */
4342 	if ((r == 1) && (reply_buffer[0] == 0x80)) {
4343 		pr_info("FDC %d is an 8272A\n", fdc);
4344 		return FDC_8272A;	/* 8272a/765 don't know DUMPREGS */
4345 	}
4346 	if (r != 10) {
4347 		pr_info("FDC %d init: DUMPREGS: unexpected return of %d bytes.\n",
4348 			fdc, r);
4349 		return FDC_UNKNOWN;
4350 	}
4351 
4352 	if (!fdc_configure(fdc)) {
4353 		pr_info("FDC %d is an 82072\n", fdc);
4354 		return FDC_82072;	/* 82072 doesn't know CONFIGURE */
4355 	}
4356 
4357 	output_byte(fdc, FD_PERPENDICULAR);
4358 	if (need_more_output(fdc) == MORE_OUTPUT) {
4359 		output_byte(fdc, 0);
4360 	} else {
4361 		pr_info("FDC %d is an 82072A\n", fdc);
4362 		return FDC_82072A;	/* 82072A as found on Sparcs. */
4363 	}
4364 
4365 	output_byte(fdc, FD_UNLOCK);
4366 	r = result(fdc);
4367 	if ((r == 1) && (reply_buffer[0] == 0x80)) {
4368 		pr_info("FDC %d is a pre-1991 82077\n", fdc);
4369 		return FDC_82077_ORIG;	/* Pre-1991 82077, doesn't know
4370 					 * LOCK/UNLOCK */
4371 	}
4372 	if ((r != 1) || (reply_buffer[0] != 0x00)) {
4373 		pr_info("FDC %d init: UNLOCK: unexpected return of %d bytes.\n",
4374 			fdc, r);
4375 		return FDC_UNKNOWN;
4376 	}
4377 	output_byte(fdc, FD_PARTID);
4378 	r = result(fdc);
4379 	if (r != 1) {
4380 		pr_info("FDC %d init: PARTID: unexpected return of %d bytes.\n",
4381 			fdc, r);
4382 		return FDC_UNKNOWN;
4383 	}
4384 	if (reply_buffer[0] == 0x80) {
4385 		pr_info("FDC %d is a post-1991 82077\n", fdc);
4386 		return FDC_82077;	/* Revised 82077AA passes all the tests */
4387 	}
4388 	switch (reply_buffer[0] >> 5) {
4389 	case 0x0:
4390 		/* Either a 82078-1 or a 82078SL running at 5Volt */
4391 		pr_info("FDC %d is an 82078.\n", fdc);
4392 		return FDC_82078;
4393 	case 0x1:
4394 		pr_info("FDC %d is a 44pin 82078\n", fdc);
4395 		return FDC_82078;
4396 	case 0x2:
4397 		pr_info("FDC %d is a S82078B\n", fdc);
4398 		return FDC_S82078B;
4399 	case 0x3:
4400 		pr_info("FDC %d is a National Semiconductor PC87306\n", fdc);
4401 		return FDC_87306;
4402 	default:
4403 		pr_info("FDC %d init: 82078 variant with unknown PARTID=%d.\n",
4404 			fdc, reply_buffer[0] >> 5);
4405 		return FDC_82078_UNKN;
4406 	}
4407 }				/* get_fdc_version */
4408 
4409 /* lilo configuration */
4410 
floppy_set_flags(int * ints,int param,int param2)4411 static void __init floppy_set_flags(int *ints, int param, int param2)
4412 {
4413 	int i;
4414 
4415 	for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4416 		if (param)
4417 			default_drive_params[i].params.flags |= param2;
4418 		else
4419 			default_drive_params[i].params.flags &= ~param2;
4420 	}
4421 	DPRINT("%s flag 0x%x\n", param2 ? "Setting" : "Clearing", param);
4422 }
4423 
daring(int * ints,int param,int param2)4424 static void __init daring(int *ints, int param, int param2)
4425 {
4426 	int i;
4427 
4428 	for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4429 		if (param) {
4430 			default_drive_params[i].params.select_delay = 0;
4431 			default_drive_params[i].params.flags |=
4432 			    FD_SILENT_DCL_CLEAR;
4433 		} else {
4434 			default_drive_params[i].params.select_delay =
4435 			    2 * HZ / 100;
4436 			default_drive_params[i].params.flags &=
4437 			    ~FD_SILENT_DCL_CLEAR;
4438 		}
4439 	}
4440 	DPRINT("Assuming %s floppy hardware\n", param ? "standard" : "broken");
4441 }
4442 
set_cmos(int * ints,int dummy,int dummy2)4443 static void __init set_cmos(int *ints, int dummy, int dummy2)
4444 {
4445 	int current_drive = 0;
4446 
4447 	if (ints[0] != 2) {
4448 		DPRINT("wrong number of parameters for CMOS\n");
4449 		return;
4450 	}
4451 	current_drive = ints[1];
4452 	if (current_drive < 0 || current_drive >= 8) {
4453 		DPRINT("bad drive for set_cmos\n");
4454 		return;
4455 	}
4456 #if N_FDC > 1
4457 	if (current_drive >= 4 && !FDC2)
4458 		FDC2 = 0x370;
4459 #endif
4460 	drive_params[current_drive].cmos = ints[2];
4461 	DPRINT("setting CMOS code to %d\n", ints[2]);
4462 }
4463 
4464 static struct param_table {
4465 	const char *name;
4466 	void (*fn) (int *ints, int param, int param2);
4467 	int *var;
4468 	int def_param;
4469 	int param2;
4470 } config_params[] __initdata = {
4471 	{"allowed_drive_mask", NULL, &allowed_drive_mask, 0xff, 0}, /* obsolete */
4472 	{"all_drives", NULL, &allowed_drive_mask, 0xff, 0},	/* obsolete */
4473 	{"asus_pci", NULL, &allowed_drive_mask, 0x33, 0},
4474 	{"irq", NULL, &FLOPPY_IRQ, 6, 0},
4475 	{"dma", NULL, &FLOPPY_DMA, 2, 0},
4476 	{"daring", daring, NULL, 1, 0},
4477 #if N_FDC > 1
4478 	{"two_fdc", NULL, &FDC2, 0x370, 0},
4479 	{"one_fdc", NULL, &FDC2, 0, 0},
4480 #endif
4481 	{"thinkpad", floppy_set_flags, NULL, 1, FD_INVERTED_DCL},
4482 	{"broken_dcl", floppy_set_flags, NULL, 1, FD_BROKEN_DCL},
4483 	{"messages", floppy_set_flags, NULL, 1, FTD_MSG},
4484 	{"silent_dcl_clear", floppy_set_flags, NULL, 1, FD_SILENT_DCL_CLEAR},
4485 	{"debug", floppy_set_flags, NULL, 1, FD_DEBUG},
4486 	{"nodma", NULL, &can_use_virtual_dma, 1, 0},
4487 	{"omnibook", NULL, &can_use_virtual_dma, 1, 0},
4488 	{"yesdma", NULL, &can_use_virtual_dma, 0, 0},
4489 	{"fifo_depth", NULL, &fifo_depth, 0xa, 0},
4490 	{"nofifo", NULL, &no_fifo, 0x20, 0},
4491 	{"usefifo", NULL, &no_fifo, 0, 0},
4492 	{"cmos", set_cmos, NULL, 0, 0},
4493 	{"slow", NULL, &slow_floppy, 1, 0},
4494 	{"unexpected_interrupts", NULL, &print_unex, 1, 0},
4495 	{"no_unexpected_interrupts", NULL, &print_unex, 0, 0},
4496 	{"L40SX", NULL, &print_unex, 0, 0}
4497 
4498 	EXTRA_FLOPPY_PARAMS
4499 };
4500 
floppy_setup(char * str)4501 static int __init floppy_setup(char *str)
4502 {
4503 	int i;
4504 	int param;
4505 	int ints[11];
4506 
4507 	str = get_options(str, ARRAY_SIZE(ints), ints);
4508 	if (str) {
4509 		for (i = 0; i < ARRAY_SIZE(config_params); i++) {
4510 			if (strcmp(str, config_params[i].name) == 0) {
4511 				if (ints[0])
4512 					param = ints[1];
4513 				else
4514 					param = config_params[i].def_param;
4515 				if (config_params[i].fn)
4516 					config_params[i].fn(ints, param,
4517 							    config_params[i].
4518 							    param2);
4519 				if (config_params[i].var) {
4520 					DPRINT("%s=%d\n", str, param);
4521 					*config_params[i].var = param;
4522 				}
4523 				return 1;
4524 			}
4525 		}
4526 	}
4527 	if (str) {
4528 		DPRINT("unknown floppy option [%s]\n", str);
4529 
4530 		DPRINT("allowed options are:");
4531 		for (i = 0; i < ARRAY_SIZE(config_params); i++)
4532 			pr_cont(" %s", config_params[i].name);
4533 		pr_cont("\n");
4534 	} else
4535 		DPRINT("botched floppy option\n");
4536 	DPRINT("Read Documentation/admin-guide/blockdev/floppy.rst\n");
4537 	return 0;
4538 }
4539 
4540 static int have_no_fdc = -ENODEV;
4541 
floppy_cmos_show(struct device * dev,struct device_attribute * attr,char * buf)4542 static ssize_t floppy_cmos_show(struct device *dev,
4543 				struct device_attribute *attr, char *buf)
4544 {
4545 	struct platform_device *p = to_platform_device(dev);
4546 	int drive;
4547 
4548 	drive = p->id;
4549 	return sprintf(buf, "%X\n", drive_params[drive].cmos);
4550 }
4551 
4552 static DEVICE_ATTR(cmos, 0444, floppy_cmos_show, NULL);
4553 
4554 static struct attribute *floppy_dev_attrs[] = {
4555 	&dev_attr_cmos.attr,
4556 	NULL
4557 };
4558 
4559 ATTRIBUTE_GROUPS(floppy_dev);
4560 
floppy_device_release(struct device * dev)4561 static void floppy_device_release(struct device *dev)
4562 {
4563 }
4564 
floppy_resume(struct device * dev)4565 static int floppy_resume(struct device *dev)
4566 {
4567 	int fdc;
4568 	int saved_drive;
4569 
4570 	saved_drive = current_drive;
4571 	for (fdc = 0; fdc < N_FDC; fdc++)
4572 		if (fdc_state[fdc].address != -1)
4573 			user_reset_fdc(REVDRIVE(fdc, 0), FD_RESET_ALWAYS, false);
4574 	set_fdc(saved_drive);
4575 	return 0;
4576 }
4577 
4578 static const struct dev_pm_ops floppy_pm_ops = {
4579 	.resume = floppy_resume,
4580 	.restore = floppy_resume,
4581 };
4582 
4583 static struct platform_driver floppy_driver = {
4584 	.driver = {
4585 		   .name = "floppy",
4586 		   .pm = &floppy_pm_ops,
4587 	},
4588 };
4589 
4590 static const struct blk_mq_ops floppy_mq_ops = {
4591 	.queue_rq = floppy_queue_rq,
4592 };
4593 
4594 static struct platform_device floppy_device[N_DRIVE];
4595 
floppy_available(int drive)4596 static bool floppy_available(int drive)
4597 {
4598 	if (!(allowed_drive_mask & (1 << drive)))
4599 		return false;
4600 	if (fdc_state[FDC(drive)].version == FDC_NONE)
4601 		return false;
4602 	return true;
4603 }
4604 
floppy_find(dev_t dev,int * part,void * data)4605 static struct kobject *floppy_find(dev_t dev, int *part, void *data)
4606 {
4607 	int drive = (*part & 3) | ((*part & 0x80) >> 5);
4608 	if (drive >= N_DRIVE || !floppy_available(drive))
4609 		return NULL;
4610 	if (((*part >> 2) & 0x1f) >= ARRAY_SIZE(floppy_type))
4611 		return NULL;
4612 	*part = 0;
4613 	return get_disk_and_module(disks[drive]);
4614 }
4615 
do_floppy_init(void)4616 static int __init do_floppy_init(void)
4617 {
4618 	int i, unit, drive, err;
4619 
4620 	set_debugt();
4621 	interruptjiffies = resultjiffies = jiffies;
4622 
4623 #if defined(CONFIG_PPC)
4624 	if (check_legacy_ioport(FDC1))
4625 		return -ENODEV;
4626 #endif
4627 
4628 	raw_cmd = NULL;
4629 
4630 	floppy_wq = alloc_ordered_workqueue("floppy", 0);
4631 	if (!floppy_wq)
4632 		return -ENOMEM;
4633 
4634 	for (drive = 0; drive < N_DRIVE; drive++) {
4635 		disks[drive] = alloc_disk(1);
4636 		if (!disks[drive]) {
4637 			err = -ENOMEM;
4638 			goto out_put_disk;
4639 		}
4640 
4641 		disks[drive]->queue = blk_mq_init_sq_queue(&tag_sets[drive],
4642 							   &floppy_mq_ops, 2,
4643 							   BLK_MQ_F_SHOULD_MERGE);
4644 		if (IS_ERR(disks[drive]->queue)) {
4645 			err = PTR_ERR(disks[drive]->queue);
4646 			disks[drive]->queue = NULL;
4647 			goto out_put_disk;
4648 		}
4649 
4650 		blk_queue_bounce_limit(disks[drive]->queue, BLK_BOUNCE_HIGH);
4651 		blk_queue_max_hw_sectors(disks[drive]->queue, 64);
4652 		disks[drive]->major = FLOPPY_MAJOR;
4653 		disks[drive]->first_minor = TOMINOR(drive);
4654 		disks[drive]->fops = &floppy_fops;
4655 		disks[drive]->events = DISK_EVENT_MEDIA_CHANGE;
4656 		sprintf(disks[drive]->disk_name, "fd%d", drive);
4657 
4658 		timer_setup(&motor_off_timer[drive], motor_off_callback, 0);
4659 	}
4660 
4661 	err = register_blkdev(FLOPPY_MAJOR, "fd");
4662 	if (err)
4663 		goto out_put_disk;
4664 
4665 	err = platform_driver_register(&floppy_driver);
4666 	if (err)
4667 		goto out_unreg_blkdev;
4668 
4669 	blk_register_region(MKDEV(FLOPPY_MAJOR, 0), 256, THIS_MODULE,
4670 			    floppy_find, NULL, NULL);
4671 
4672 	for (i = 0; i < 256; i++)
4673 		if (ITYPE(i))
4674 			floppy_sizes[i] = floppy_type[ITYPE(i)].size;
4675 		else
4676 			floppy_sizes[i] = MAX_DISK_SIZE << 1;
4677 
4678 	reschedule_timeout(MAXTIMEOUT, "floppy init");
4679 	config_types();
4680 
4681 	for (i = 0; i < N_FDC; i++) {
4682 		memset(&fdc_state[i], 0, sizeof(*fdc_state));
4683 		fdc_state[i].dtr = -1;
4684 		fdc_state[i].dor = 0x4;
4685 #if defined(__sparc__) || defined(__mc68000__)
4686 	/*sparcs/sun3x don't have a DOR reset which we can fall back on to */
4687 #ifdef __mc68000__
4688 		if (MACH_IS_SUN3X)
4689 #endif
4690 			fdc_state[i].version = FDC_82072A;
4691 #endif
4692 	}
4693 
4694 	use_virtual_dma = can_use_virtual_dma & 1;
4695 	fdc_state[0].address = FDC1;
4696 	if (fdc_state[0].address == -1) {
4697 		cancel_delayed_work(&fd_timeout);
4698 		err = -ENODEV;
4699 		goto out_unreg_region;
4700 	}
4701 #if N_FDC > 1
4702 	fdc_state[1].address = FDC2;
4703 #endif
4704 
4705 	current_fdc = 0;	/* reset fdc in case of unexpected interrupt */
4706 	err = floppy_grab_irq_and_dma();
4707 	if (err) {
4708 		cancel_delayed_work(&fd_timeout);
4709 		err = -EBUSY;
4710 		goto out_unreg_region;
4711 	}
4712 
4713 	/* initialise drive state */
4714 	for (drive = 0; drive < N_DRIVE; drive++) {
4715 		memset(&drive_state[drive], 0, sizeof(drive_state[drive]));
4716 		memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
4717 		set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
4718 		set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4719 		set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
4720 		drive_state[drive].fd_device = -1;
4721 		floppy_track_buffer = NULL;
4722 		max_buffer_sectors = 0;
4723 	}
4724 	/*
4725 	 * Small 10 msec delay to let through any interrupt that
4726 	 * initialization might have triggered, to not
4727 	 * confuse detection:
4728 	 */
4729 	msleep(10);
4730 
4731 	for (i = 0; i < N_FDC; i++) {
4732 		fdc_state[i].driver_version = FD_DRIVER_VERSION;
4733 		for (unit = 0; unit < 4; unit++)
4734 			fdc_state[i].track[unit] = 0;
4735 		if (fdc_state[i].address == -1)
4736 			continue;
4737 		fdc_state[i].rawcmd = 2;
4738 		if (user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false)) {
4739 			/* free ioports reserved by floppy_grab_irq_and_dma() */
4740 			floppy_release_regions(i);
4741 			fdc_state[i].address = -1;
4742 			fdc_state[i].version = FDC_NONE;
4743 			continue;
4744 		}
4745 		/* Try to determine the floppy controller type */
4746 		fdc_state[i].version = get_fdc_version(i);
4747 		if (fdc_state[i].version == FDC_NONE) {
4748 			/* free ioports reserved by floppy_grab_irq_and_dma() */
4749 			floppy_release_regions(i);
4750 			fdc_state[i].address = -1;
4751 			continue;
4752 		}
4753 		if (can_use_virtual_dma == 2 &&
4754 		    fdc_state[i].version < FDC_82072A)
4755 			can_use_virtual_dma = 0;
4756 
4757 		have_no_fdc = 0;
4758 		/* Not all FDCs seem to be able to handle the version command
4759 		 * properly, so force a reset for the standard FDC clones,
4760 		 * to avoid interrupt garbage.
4761 		 */
4762 		user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false);
4763 	}
4764 	current_fdc = 0;
4765 	cancel_delayed_work(&fd_timeout);
4766 	current_drive = 0;
4767 	initialized = true;
4768 	if (have_no_fdc) {
4769 		DPRINT("no floppy controllers found\n");
4770 		err = have_no_fdc;
4771 		goto out_release_dma;
4772 	}
4773 
4774 	for (drive = 0; drive < N_DRIVE; drive++) {
4775 		if (!floppy_available(drive))
4776 			continue;
4777 
4778 		floppy_device[drive].name = floppy_device_name;
4779 		floppy_device[drive].id = drive;
4780 		floppy_device[drive].dev.release = floppy_device_release;
4781 		floppy_device[drive].dev.groups = floppy_dev_groups;
4782 
4783 		err = platform_device_register(&floppy_device[drive]);
4784 		if (err)
4785 			goto out_remove_drives;
4786 
4787 		/* to be cleaned up... */
4788 		disks[drive]->private_data = (void *)(long)drive;
4789 		disks[drive]->flags |= GENHD_FL_REMOVABLE;
4790 		device_add_disk(&floppy_device[drive].dev, disks[drive], NULL);
4791 	}
4792 
4793 	return 0;
4794 
4795 out_remove_drives:
4796 	while (drive--) {
4797 		if (floppy_available(drive)) {
4798 			del_gendisk(disks[drive]);
4799 			platform_device_unregister(&floppy_device[drive]);
4800 		}
4801 	}
4802 out_release_dma:
4803 	if (atomic_read(&usage_count))
4804 		floppy_release_irq_and_dma();
4805 out_unreg_region:
4806 	blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
4807 	platform_driver_unregister(&floppy_driver);
4808 out_unreg_blkdev:
4809 	unregister_blkdev(FLOPPY_MAJOR, "fd");
4810 out_put_disk:
4811 	destroy_workqueue(floppy_wq);
4812 	for (drive = 0; drive < N_DRIVE; drive++) {
4813 		if (!disks[drive])
4814 			break;
4815 		if (disks[drive]->queue) {
4816 			del_timer_sync(&motor_off_timer[drive]);
4817 			blk_cleanup_queue(disks[drive]->queue);
4818 			disks[drive]->queue = NULL;
4819 			blk_mq_free_tag_set(&tag_sets[drive]);
4820 		}
4821 		put_disk(disks[drive]);
4822 	}
4823 	return err;
4824 }
4825 
4826 #ifndef MODULE
floppy_async_init(void * data,async_cookie_t cookie)4827 static __init void floppy_async_init(void *data, async_cookie_t cookie)
4828 {
4829 	do_floppy_init();
4830 }
4831 #endif
4832 
floppy_init(void)4833 static int __init floppy_init(void)
4834 {
4835 #ifdef MODULE
4836 	return do_floppy_init();
4837 #else
4838 	/* Don't hold up the bootup by the floppy initialization */
4839 	async_schedule(floppy_async_init, NULL);
4840 	return 0;
4841 #endif
4842 }
4843 
4844 static const struct io_region {
4845 	int offset;
4846 	int size;
4847 } io_regions[] = {
4848 	{ 2, 1 },
4849 	/* address + 3 is sometimes reserved by pnp bios for motherboard */
4850 	{ 4, 2 },
4851 	/* address + 6 is reserved, and may be taken by IDE.
4852 	 * Unfortunately, Adaptec doesn't know this :-(, */
4853 	{ 7, 1 },
4854 };
4855 
floppy_release_allocated_regions(int fdc,const struct io_region * p)4856 static void floppy_release_allocated_regions(int fdc, const struct io_region *p)
4857 {
4858 	while (p != io_regions) {
4859 		p--;
4860 		release_region(fdc_state[fdc].address + p->offset, p->size);
4861 	}
4862 }
4863 
4864 #define ARRAY_END(X) (&((X)[ARRAY_SIZE(X)]))
4865 
floppy_request_regions(int fdc)4866 static int floppy_request_regions(int fdc)
4867 {
4868 	const struct io_region *p;
4869 
4870 	for (p = io_regions; p < ARRAY_END(io_regions); p++) {
4871 		if (!request_region(fdc_state[fdc].address + p->offset,
4872 				    p->size, "floppy")) {
4873 			DPRINT("Floppy io-port 0x%04lx in use\n",
4874 			       fdc_state[fdc].address + p->offset);
4875 			floppy_release_allocated_regions(fdc, p);
4876 			return -EBUSY;
4877 		}
4878 	}
4879 	return 0;
4880 }
4881 
floppy_release_regions(int fdc)4882 static void floppy_release_regions(int fdc)
4883 {
4884 	floppy_release_allocated_regions(fdc, ARRAY_END(io_regions));
4885 }
4886 
floppy_grab_irq_and_dma(void)4887 static int floppy_grab_irq_and_dma(void)
4888 {
4889 	int fdc;
4890 
4891 	if (atomic_inc_return(&usage_count) > 1)
4892 		return 0;
4893 
4894 	/*
4895 	 * We might have scheduled a free_irq(), wait it to
4896 	 * drain first:
4897 	 */
4898 	flush_workqueue(floppy_wq);
4899 
4900 	if (fd_request_irq()) {
4901 		DPRINT("Unable to grab IRQ%d for the floppy driver\n",
4902 		       FLOPPY_IRQ);
4903 		atomic_dec(&usage_count);
4904 		return -1;
4905 	}
4906 	if (fd_request_dma()) {
4907 		DPRINT("Unable to grab DMA%d for the floppy driver\n",
4908 		       FLOPPY_DMA);
4909 		if (can_use_virtual_dma & 2)
4910 			use_virtual_dma = can_use_virtual_dma = 1;
4911 		if (!(can_use_virtual_dma & 1)) {
4912 			fd_free_irq();
4913 			atomic_dec(&usage_count);
4914 			return -1;
4915 		}
4916 	}
4917 
4918 	for (fdc = 0; fdc < N_FDC; fdc++) {
4919 		if (fdc_state[fdc].address != -1) {
4920 			if (floppy_request_regions(fdc))
4921 				goto cleanup;
4922 		}
4923 	}
4924 	for (fdc = 0; fdc < N_FDC; fdc++) {
4925 		if (fdc_state[fdc].address != -1) {
4926 			reset_fdc_info(fdc, 1);
4927 			fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4928 		}
4929 	}
4930 
4931 	set_dor(0, ~0, 8);	/* avoid immediate interrupt */
4932 
4933 	for (fdc = 0; fdc < N_FDC; fdc++)
4934 		if (fdc_state[fdc].address != -1)
4935 			fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4936 	/*
4937 	 * The driver will try and free resources and relies on us
4938 	 * to know if they were allocated or not.
4939 	 */
4940 	current_fdc = 0;
4941 	irqdma_allocated = 1;
4942 	return 0;
4943 cleanup:
4944 	fd_free_irq();
4945 	fd_free_dma();
4946 	while (--fdc >= 0)
4947 		floppy_release_regions(fdc);
4948 	current_fdc = 0;
4949 	atomic_dec(&usage_count);
4950 	return -1;
4951 }
4952 
floppy_release_irq_and_dma(void)4953 static void floppy_release_irq_and_dma(void)
4954 {
4955 	int fdc;
4956 #ifndef __sparc__
4957 	int drive;
4958 #endif
4959 	long tmpsize;
4960 	unsigned long tmpaddr;
4961 
4962 	if (!atomic_dec_and_test(&usage_count))
4963 		return;
4964 
4965 	if (irqdma_allocated) {
4966 		fd_disable_dma();
4967 		fd_free_dma();
4968 		fd_free_irq();
4969 		irqdma_allocated = 0;
4970 	}
4971 	set_dor(0, ~0, 8);
4972 #if N_FDC > 1
4973 	set_dor(1, ~8, 0);
4974 #endif
4975 
4976 	if (floppy_track_buffer && max_buffer_sectors) {
4977 		tmpsize = max_buffer_sectors * 1024;
4978 		tmpaddr = (unsigned long)floppy_track_buffer;
4979 		floppy_track_buffer = NULL;
4980 		max_buffer_sectors = 0;
4981 		buffer_min = buffer_max = -1;
4982 		fd_dma_mem_free(tmpaddr, tmpsize);
4983 	}
4984 #ifndef __sparc__
4985 	for (drive = 0; drive < N_FDC * 4; drive++)
4986 		if (timer_pending(motor_off_timer + drive))
4987 			pr_info("motor off timer %d still active\n", drive);
4988 #endif
4989 
4990 	if (delayed_work_pending(&fd_timeout))
4991 		pr_info("floppy timer still active:%s\n", timeout_message);
4992 	if (delayed_work_pending(&fd_timer))
4993 		pr_info("auxiliary floppy timer still active\n");
4994 	if (work_pending(&floppy_work))
4995 		pr_info("work still pending\n");
4996 	for (fdc = 0; fdc < N_FDC; fdc++)
4997 		if (fdc_state[fdc].address != -1)
4998 			floppy_release_regions(fdc);
4999 }
5000 
5001 #ifdef MODULE
5002 
5003 static char *floppy;
5004 
parse_floppy_cfg_string(char * cfg)5005 static void __init parse_floppy_cfg_string(char *cfg)
5006 {
5007 	char *ptr;
5008 
5009 	while (*cfg) {
5010 		ptr = cfg;
5011 		while (*cfg && *cfg != ' ' && *cfg != '\t')
5012 			cfg++;
5013 		if (*cfg) {
5014 			*cfg = '\0';
5015 			cfg++;
5016 		}
5017 		if (*ptr)
5018 			floppy_setup(ptr);
5019 	}
5020 }
5021 
floppy_module_init(void)5022 static int __init floppy_module_init(void)
5023 {
5024 	if (floppy)
5025 		parse_floppy_cfg_string(floppy);
5026 	return floppy_init();
5027 }
5028 module_init(floppy_module_init);
5029 
floppy_module_exit(void)5030 static void __exit floppy_module_exit(void)
5031 {
5032 	int drive;
5033 
5034 	blk_unregister_region(MKDEV(FLOPPY_MAJOR, 0), 256);
5035 	unregister_blkdev(FLOPPY_MAJOR, "fd");
5036 	platform_driver_unregister(&floppy_driver);
5037 
5038 	destroy_workqueue(floppy_wq);
5039 
5040 	for (drive = 0; drive < N_DRIVE; drive++) {
5041 		del_timer_sync(&motor_off_timer[drive]);
5042 
5043 		if (floppy_available(drive)) {
5044 			del_gendisk(disks[drive]);
5045 			platform_device_unregister(&floppy_device[drive]);
5046 		}
5047 		blk_cleanup_queue(disks[drive]->queue);
5048 		blk_mq_free_tag_set(&tag_sets[drive]);
5049 
5050 		/*
5051 		 * These disks have not called add_disk().  Don't put down
5052 		 * queue reference in put_disk().
5053 		 */
5054 		if (!(allowed_drive_mask & (1 << drive)) ||
5055 		    fdc_state[FDC(drive)].version == FDC_NONE)
5056 			disks[drive]->queue = NULL;
5057 
5058 		put_disk(disks[drive]);
5059 	}
5060 
5061 	cancel_delayed_work_sync(&fd_timeout);
5062 	cancel_delayed_work_sync(&fd_timer);
5063 
5064 	if (atomic_read(&usage_count))
5065 		floppy_release_irq_and_dma();
5066 
5067 	/* eject disk, if any */
5068 	fd_eject(0);
5069 }
5070 
5071 module_exit(floppy_module_exit);
5072 
5073 module_param(floppy, charp, 0);
5074 module_param(FLOPPY_IRQ, int, 0);
5075 module_param(FLOPPY_DMA, int, 0);
5076 MODULE_AUTHOR("Alain L. Knaff");
5077 MODULE_SUPPORTED_DEVICE("fd");
5078 MODULE_LICENSE("GPL");
5079 
5080 /* This doesn't actually get used other than for module information */
5081 static const struct pnp_device_id floppy_pnpids[] = {
5082 	{"PNP0700", 0},
5083 	{}
5084 };
5085 
5086 MODULE_DEVICE_TABLE(pnp, floppy_pnpids);
5087 
5088 #else
5089 
5090 __setup("floppy=", floppy_setup);
5091 module_init(floppy_init)
5092 #endif
5093 
5094 MODULE_ALIAS_BLOCKDEV_MAJOR(FLOPPY_MAJOR);
5095