xen-blkfront: Handle NULL gendisk
[platform/kernel/linux-rpi.git] / drivers / block / floppy.c
1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3  *  linux/drivers/block/floppy.c
4  *
5  *  Copyright (C) 1991, 1992  Linus Torvalds
6  *  Copyright (C) 1993, 1994  Alain Knaff
7  *  Copyright (C) 1998 Alan Cox
8  */
9
10 /*
11  * 02.12.91 - Changed to static variables to indicate need for reset
12  * and recalibrate. This makes some things easier (output_byte reset
13  * checking etc), and means less interrupt jumping in case of errors,
14  * so the code is hopefully easier to understand.
15  */
16
17 /*
18  * This file is certainly a mess. I've tried my best to get it working,
19  * but I don't like programming floppies, and I have only one anyway.
20  * Urgel. I should check for more errors, and do more graceful error
21  * recovery. Seems there are problems with several drives. I've tried to
22  * correct them. No promises.
23  */
24
25 /*
26  * As with hd.c, all routines within this file can (and will) be called
27  * by interrupts, so extreme caution is needed. A hardware interrupt
28  * handler may not sleep, or a kernel panic will happen. Thus I cannot
29  * call "floppy-on" directly, but have to set a special timer interrupt
30  * etc.
31  */
32
33 /*
34  * 28.02.92 - made track-buffering routines, based on the routines written
35  * by entropy@wintermute.wpi.edu (Lawrence Foard). Linus.
36  */
37
38 /*
39  * Automatic floppy-detection and formatting written by Werner Almesberger
40  * (almesber@nessie.cs.id.ethz.ch), who also corrected some problems with
41  * the floppy-change signal detection.
42  */
43
44 /*
45  * 1992/7/22 -- Hennus Bergman: Added better error reporting, fixed
46  * FDC data overrun bug, added some preliminary stuff for vertical
47  * recording support.
48  *
49  * 1992/9/17: Added DMA allocation & DMA functions. -- hhb.
50  *
51  * TODO: Errors are still not counted properly.
52  */
53
54 /* 1992/9/20
55  * Modifications for ``Sector Shifting'' by Rob Hooft (hooft@chem.ruu.nl)
56  * modeled after the freeware MS-DOS program fdformat/88 V1.8 by
57  * Christoph H. Hochst\"atter.
58  * I have fixed the shift values to the ones I always use. Maybe a new
59  * ioctl() should be created to be able to modify them.
60  * There is a bug in the driver that makes it impossible to format a
61  * floppy as the first thing after bootup.
62  */
63
64 /*
65  * 1993/4/29 -- Linus -- cleaned up the timer handling in the kernel, and
66  * this helped the floppy driver as well. Much cleaner, and still seems to
67  * work.
68  */
69
70 /* 1994/6/24 --bbroad-- added the floppy table entries and made
71  * minor modifications to allow 2.88 floppies to be run.
72  */
73
74 /* 1994/7/13 -- Paul Vojta -- modified the probing code to allow three or more
75  * disk types.
76  */
77
78 /*
79  * 1994/8/8 -- Alain Knaff -- Switched to fdpatch driver: Support for bigger
80  * format bug fixes, but unfortunately some new bugs too...
81  */
82
83 /* 1994/9/17 -- Koen Holtman -- added logging of physical floppy write
84  * errors to allow safe writing by specialized programs.
85  */
86
87 /* 1995/4/24 -- Dan Fandrich -- added support for Commodore 1581 3.5" disks
88  * by defining bit 1 of the "stretch" parameter to mean put sectors on the
89  * opposite side of the disk, leaving the sector IDs alone (i.e. Commodore's
90  * drives are "upside-down").
91  */
92
93 /*
94  * 1995/8/26 -- Andreas Busse -- added Mips support.
95  */
96
97 /*
98  * 1995/10/18 -- Ralf Baechle -- Portability cleanup; move machine dependent
99  * features to asm/floppy.h.
100  */
101
102 /*
103  * 1998/1/21 -- Richard Gooch <rgooch@atnf.csiro.au> -- devfs support
104  */
105
106 /*
107  * 1998/05/07 -- Russell King -- More portability cleanups; moved definition of
108  * interrupt and dma channel to asm/floppy.h. Cleaned up some formatting &
109  * use of '0' for NULL.
110  */
111
112 /*
113  * 1998/06/07 -- Alan Cox -- Merged the 2.0.34 fixes for resource allocation
114  * failures.
115  */
116
117 /*
118  * 1998/09/20 -- David Weinehall -- Added slow-down code for buggy PS/2-drives.
119  */
120
121 /*
122  * 1999/08/13 -- Paul Slootman -- floppy stopped working on Alpha after 24
123  * days, 6 hours, 32 minutes and 32 seconds (i.e. MAXINT jiffies; ints were
124  * being used to store jiffies, which are unsigned longs).
125  */
126
127 /*
128  * 2000/08/28 -- Arnaldo Carvalho de Melo <acme@conectiva.com.br>
129  * - get rid of check_region
130  * - s/suser/capable/
131  */
132
133 /*
134  * 2001/08/26 -- Paul Gortmaker - fix insmod oops on machines with no
135  * floppy controller (lingering task on list after module is gone... boom.)
136  */
137
138 /*
139  * 2002/02/07 -- Anton Altaparmakov - Fix io ports reservation to correct range
140  * (0x3f2-0x3f5, 0x3f7). This fix is a bit of a hack but the proper fix
141  * requires many non-obvious changes in arch dependent code.
142  */
143
144 /* 2003/07/28 -- Daniele Bellucci <bellucda@tiscali.it>.
145  * Better audit of register_blkdev.
146  */
147
148 #define REALLY_SLOW_IO
149
150 #define DEBUGT 2
151
152 #define DPRINT(format, args...) \
153         pr_info("floppy%d: " format, current_drive, ##args)
154
155 #define DCL_DEBUG               /* debug disk change line */
156 #ifdef DCL_DEBUG
157 #define debug_dcl(test, fmt, args...) \
158         do { if ((test) & FD_DEBUG) DPRINT(fmt, ##args); } while (0)
159 #else
160 #define debug_dcl(test, fmt, args...) \
161         do { if (0) DPRINT(fmt, ##args); } while (0)
162 #endif
163
164 /* do print messages for unexpected interrupts */
165 static int print_unex = 1;
166 #include <linux/module.h>
167 #include <linux/sched.h>
168 #include <linux/fs.h>
169 #include <linux/kernel.h>
170 #include <linux/timer.h>
171 #include <linux/workqueue.h>
172 #include <linux/fdreg.h>
173 #include <linux/fd.h>
174 #include <linux/hdreg.h>
175 #include <linux/errno.h>
176 #include <linux/slab.h>
177 #include <linux/mm.h>
178 #include <linux/bio.h>
179 #include <linux/string.h>
180 #include <linux/jiffies.h>
181 #include <linux/fcntl.h>
182 #include <linux/delay.h>
183 #include <linux/mc146818rtc.h>  /* CMOS defines */
184 #include <linux/ioport.h>
185 #include <linux/interrupt.h>
186 #include <linux/init.h>
187 #include <linux/major.h>
188 #include <linux/platform_device.h>
189 #include <linux/mod_devicetable.h>
190 #include <linux/mutex.h>
191 #include <linux/io.h>
192 #include <linux/uaccess.h>
193 #include <linux/async.h>
194 #include <linux/compat.h>
195
196 /*
197  * PS/2 floppies have much slower step rates than regular floppies.
198  * It's been recommended that take about 1/4 of the default speed
199  * in some more extreme cases.
200  */
201 static DEFINE_MUTEX(floppy_mutex);
202 static int slow_floppy;
203
204 #include <asm/dma.h>
205 #include <asm/irq.h>
206
207 static int FLOPPY_IRQ = 6;
208 static int FLOPPY_DMA = 2;
209 static int can_use_virtual_dma = 2;
210 /* =======
211  * can use virtual DMA:
212  * 0 = use of virtual DMA disallowed by config
213  * 1 = use of virtual DMA prescribed by config
214  * 2 = no virtual DMA preference configured.  By default try hard DMA,
215  * but fall back on virtual DMA when not enough memory available
216  */
217
218 static int use_virtual_dma;
219 /* =======
220  * use virtual DMA
221  * 0 using hard DMA
222  * 1 using virtual DMA
223  * This variable is set to virtual when a DMA mem problem arises, and
224  * reset back in floppy_grab_irq_and_dma.
225  * It is not safe to reset it in other circumstances, because the floppy
226  * driver may have several buffers in use at once, and we do currently not
227  * record each buffers capabilities
228  */
229
230 static DEFINE_SPINLOCK(floppy_lock);
231
232 static unsigned short virtual_dma_port = 0x3f0;
233 irqreturn_t floppy_interrupt(int irq, void *dev_id);
234 static int set_dor(int fdc, char mask, char data);
235
236 #define K_64    0x10000         /* 64KB */
237
238 /* the following is the mask of allowed drives. By default units 2 and
239  * 3 of both floppy controllers are disabled, because switching on the
240  * motor of these drives causes system hangs on some PCI computers. drive
241  * 0 is the low bit (0x1), and drive 7 is the high bit (0x80). Bits are on if
242  * a drive is allowed.
243  *
244  * NOTE: This must come before we include the arch floppy header because
245  *       some ports reference this variable from there. -DaveM
246  */
247
248 static int allowed_drive_mask = 0x33;
249
250 #include <asm/floppy.h>
251
252 static int irqdma_allocated;
253
254 #include <linux/blk-mq.h>
255 #include <linux/blkpg.h>
256 #include <linux/cdrom.h>        /* for the compatibility eject ioctl */
257 #include <linux/completion.h>
258
259 static LIST_HEAD(floppy_reqs);
260 static struct request *current_req;
261 static int set_next_request(void);
262
263 #ifndef fd_get_dma_residue
264 #define fd_get_dma_residue() get_dma_residue(FLOPPY_DMA)
265 #endif
266
267 /* Dma Memory related stuff */
268
269 #ifndef fd_dma_mem_free
270 #define fd_dma_mem_free(addr, size) free_pages(addr, get_order(size))
271 #endif
272
273 #ifndef fd_dma_mem_alloc
274 #define fd_dma_mem_alloc(size) __get_dma_pages(GFP_KERNEL, get_order(size))
275 #endif
276
277 #ifndef fd_cacheflush
278 #define fd_cacheflush(addr, size) /* nothing... */
279 #endif
280
281 static inline void fallback_on_nodma_alloc(char **addr, size_t l)
282 {
283 #ifdef FLOPPY_CAN_FALLBACK_ON_NODMA
284         if (*addr)
285                 return;         /* we have the memory */
286         if (can_use_virtual_dma != 2)
287                 return;         /* no fallback allowed */
288         pr_info("DMA memory shortage. Temporarily falling back on virtual DMA\n");
289         *addr = (char *)nodma_mem_alloc(l);
290 #else
291         return;
292 #endif
293 }
294
295 /* End dma memory related stuff */
296
297 static unsigned long fake_change;
298 static bool initialized;
299
300 #define ITYPE(x)        (((x) >> 2) & 0x1f)
301 #define TOMINOR(x)      ((x & 3) | ((x & 4) << 5))
302 #define UNIT(x)         ((x) & 0x03)            /* drive on fdc */
303 #define FDC(x)          (((x) & 0x04) >> 2)     /* fdc of drive */
304         /* reverse mapping from unit and fdc to drive */
305 #define REVDRIVE(fdc, unit) ((unit) + ((fdc) << 2))
306
307 #define PH_HEAD(floppy, head) (((((floppy)->stretch & 2) >> 1) ^ head) << 2)
308 #define STRETCH(floppy) ((floppy)->stretch & FD_STRETCH)
309
310 /* read/write commands */
311 #define COMMAND                 0
312 #define DR_SELECT               1
313 #define TRACK                   2
314 #define HEAD                    3
315 #define SECTOR                  4
316 #define SIZECODE                5
317 #define SECT_PER_TRACK          6
318 #define GAP                     7
319 #define SIZECODE2               8
320 #define NR_RW 9
321
322 /* format commands */
323 #define F_SIZECODE              2
324 #define F_SECT_PER_TRACK        3
325 #define F_GAP                   4
326 #define F_FILL                  5
327 #define NR_F 6
328
329 /*
330  * Maximum disk size (in kilobytes).
331  * This default is used whenever the current disk size is unknown.
332  * [Now it is rather a minimum]
333  */
334 #define MAX_DISK_SIZE 4         /* 3984 */
335
336 /*
337  * globals used by 'result()'
338  */
339 static unsigned char reply_buffer[FD_RAW_REPLY_SIZE];
340 static int inr;         /* size of reply buffer, when called from interrupt */
341 #define ST0             0
342 #define ST1             1
343 #define ST2             2
344 #define ST3             0       /* result of GETSTATUS */
345 #define R_TRACK         3
346 #define R_HEAD          4
347 #define R_SECTOR        5
348 #define R_SIZECODE      6
349
350 #define SEL_DLY         (2 * HZ / 100)
351
352 /*
353  * this struct defines the different floppy drive types.
354  */
355 static struct {
356         struct floppy_drive_params params;
357         const char *name;       /* name printed while booting */
358 } default_drive_params[] = {
359 /* NOTE: the time values in jiffies should be in msec!
360  CMOS drive type
361   |     Maximum data rate supported by drive type
362   |     |   Head load time, msec
363   |     |   |   Head unload time, msec (not used)
364   |     |   |   |     Step rate interval, usec
365   |     |   |   |     |       Time needed for spinup time (jiffies)
366   |     |   |   |     |       |      Timeout for spinning down (jiffies)
367   |     |   |   |     |       |      |   Spindown offset (where disk stops)
368   |     |   |   |     |       |      |   |     Select delay
369   |     |   |   |     |       |      |   |     |     RPS
370   |     |   |   |     |       |      |   |     |     |    Max number of tracks
371   |     |   |   |     |       |      |   |     |     |    |     Interrupt timeout
372   |     |   |   |     |       |      |   |     |     |    |     |   Max nonintlv. sectors
373   |     |   |   |     |       |      |   |     |     |    |     |   | -Max Errors- flags */
374 {{0,  500, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  80, 3*HZ, 20, {3,1,2,0,2}, 0,
375       0, { 7, 4, 8, 2, 1, 5, 3,10}, 3*HZ/2, 0 }, "unknown" },
376
377 {{1,  300, 16, 16, 8000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  40, 3*HZ, 17, {3,1,2,0,2}, 0,
378       0, { 1, 0, 0, 0, 0, 0, 0, 0}, 3*HZ/2, 1 }, "360K PC" }, /*5 1/4 360 KB PC*/
379
380 {{2,  500, 16, 16, 6000, 4*HZ/10, 3*HZ, 14, SEL_DLY, 6,  83, 3*HZ, 17, {3,1,2,0,2}, 0,
381       0, { 2, 5, 6,23,10,20,12, 0}, 3*HZ/2, 2 }, "1.2M" }, /*5 1/4 HD AT*/
382
383 {{3,  250, 16, 16, 3000,    1*HZ, 3*HZ,  0, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
384       0, { 4,22,21,30, 3, 0, 0, 0}, 3*HZ/2, 4 }, "720k" }, /*3 1/2 DD*/
385
386 {{4,  500, 16, 16, 4000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 20, {3,1,2,0,2}, 0,
387       0, { 7, 4,25,22,31,21,29,11}, 3*HZ/2, 7 }, "1.44M" }, /*3 1/2 HD*/
388
389 {{5, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
390       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M AMI BIOS" }, /*3 1/2 ED*/
391
392 {{6, 1000, 15,  8, 3000, 4*HZ/10, 3*HZ, 10, SEL_DLY, 5,  83, 3*HZ, 40, {3,1,2,0,2}, 0,
393       0, { 7, 8, 4,25,28,22,31,21}, 3*HZ/2, 8 }, "2.88M" } /*3 1/2 ED*/
394 /*    |  --autodetected formats---    |      |      |
395  *    read_track                      |      |    Name printed when booting
396  *                                    |     Native format
397  *                  Frequency of disk change checks */
398 };
399
400 static struct floppy_drive_params drive_params[N_DRIVE];
401 static struct floppy_drive_struct drive_state[N_DRIVE];
402 static struct floppy_write_errors write_errors[N_DRIVE];
403 static struct timer_list motor_off_timer[N_DRIVE];
404 static struct blk_mq_tag_set tag_sets[N_DRIVE];
405 static struct block_device *opened_bdev[N_DRIVE];
406 static DEFINE_MUTEX(open_lock);
407 static struct floppy_raw_cmd *raw_cmd, default_raw_cmd;
408
409 /*
410  * This struct defines the different floppy types.
411  *
412  * Bit 0 of 'stretch' tells if the tracks need to be doubled for some
413  * types (e.g. 360kB diskette in 1.2MB drive, etc.).  Bit 1 of 'stretch'
414  * tells if the disk is in Commodore 1581 format, which means side 0 sectors
415  * are located on side 1 of the disk but with a side 0 ID, and vice-versa.
416  * This is the same as the Sharp MZ-80 5.25" CP/M disk format, except that the
417  * 1581's logical side 0 is on physical side 1, whereas the Sharp's logical
418  * side 0 is on physical side 0 (but with the misnamed sector IDs).
419  * 'stretch' should probably be renamed to something more general, like
420  * 'options'.
421  *
422  * Bits 2 through 9 of 'stretch' tell the number of the first sector.
423  * The LSB (bit 2) is flipped. For most disks, the first sector
424  * is 1 (represented by 0x00<<2).  For some CP/M and music sampler
425  * disks (such as Ensoniq EPS 16plus) it is 0 (represented as 0x01<<2).
426  * For Amstrad CPC disks it is 0xC1 (represented as 0xC0<<2).
427  *
428  * Other parameters should be self-explanatory (see also setfdprm(8)).
429  */
430 /*
431             Size
432              |  Sectors per track
433              |  | Head
434              |  | |  Tracks
435              |  | |  | Stretch
436              |  | |  | |  Gap 1 size
437              |  | |  | |    |  Data rate, | 0x40 for perp
438              |  | |  | |    |    |  Spec1 (stepping rate, head unload
439              |  | |  | |    |    |    |    /fmt gap (gap2) */
440 static struct floppy_struct floppy_type[32] = {
441         {    0, 0,0, 0,0,0x00,0x00,0x00,0x00,NULL    }, /*  0 no testing    */
442         {  720, 9,2,40,0,0x2A,0x02,0xDF,0x50,"d360"  }, /*  1 360KB PC      */
443         { 2400,15,2,80,0,0x1B,0x00,0xDF,0x54,"h1200" }, /*  2 1.2MB AT      */
444         {  720, 9,1,80,0,0x2A,0x02,0xDF,0x50,"D360"  }, /*  3 360KB SS 3.5" */
445         { 1440, 9,2,80,0,0x2A,0x02,0xDF,0x50,"D720"  }, /*  4 720KB 3.5"    */
446         {  720, 9,2,40,1,0x23,0x01,0xDF,0x50,"h360"  }, /*  5 360KB AT      */
447         { 1440, 9,2,80,0,0x23,0x01,0xDF,0x50,"h720"  }, /*  6 720KB AT      */
448         { 2880,18,2,80,0,0x1B,0x00,0xCF,0x6C,"H1440" }, /*  7 1.44MB 3.5"   */
449         { 5760,36,2,80,0,0x1B,0x43,0xAF,0x54,"E2880" }, /*  8 2.88MB 3.5"   */
450         { 6240,39,2,80,0,0x1B,0x43,0xAF,0x28,"E3120" }, /*  9 3.12MB 3.5"   */
451
452         { 2880,18,2,80,0,0x25,0x00,0xDF,0x02,"h1440" }, /* 10 1.44MB 5.25"  */
453         { 3360,21,2,80,0,0x1C,0x00,0xCF,0x0C,"H1680" }, /* 11 1.68MB 3.5"   */
454         {  820,10,2,41,1,0x25,0x01,0xDF,0x2E,"h410"  }, /* 12 410KB 5.25"   */
455         { 1640,10,2,82,0,0x25,0x02,0xDF,0x2E,"H820"  }, /* 13 820KB 3.5"    */
456         { 2952,18,2,82,0,0x25,0x00,0xDF,0x02,"h1476" }, /* 14 1.48MB 5.25"  */
457         { 3444,21,2,82,0,0x25,0x00,0xDF,0x0C,"H1722" }, /* 15 1.72MB 3.5"   */
458         {  840,10,2,42,1,0x25,0x01,0xDF,0x2E,"h420"  }, /* 16 420KB 5.25"   */
459         { 1660,10,2,83,0,0x25,0x02,0xDF,0x2E,"H830"  }, /* 17 830KB 3.5"    */
460         { 2988,18,2,83,0,0x25,0x00,0xDF,0x02,"h1494" }, /* 18 1.49MB 5.25"  */
461         { 3486,21,2,83,0,0x25,0x00,0xDF,0x0C,"H1743" }, /* 19 1.74 MB 3.5"  */
462
463         { 1760,11,2,80,0,0x1C,0x09,0xCF,0x00,"h880"  }, /* 20 880KB 5.25"   */
464         { 2080,13,2,80,0,0x1C,0x01,0xCF,0x00,"D1040" }, /* 21 1.04MB 3.5"   */
465         { 2240,14,2,80,0,0x1C,0x19,0xCF,0x00,"D1120" }, /* 22 1.12MB 3.5"   */
466         { 3200,20,2,80,0,0x1C,0x20,0xCF,0x2C,"h1600" }, /* 23 1.6MB 5.25"   */
467         { 3520,22,2,80,0,0x1C,0x08,0xCF,0x2e,"H1760" }, /* 24 1.76MB 3.5"   */
468         { 3840,24,2,80,0,0x1C,0x20,0xCF,0x00,"H1920" }, /* 25 1.92MB 3.5"   */
469         { 6400,40,2,80,0,0x25,0x5B,0xCF,0x00,"E3200" }, /* 26 3.20MB 3.5"   */
470         { 7040,44,2,80,0,0x25,0x5B,0xCF,0x00,"E3520" }, /* 27 3.52MB 3.5"   */
471         { 7680,48,2,80,0,0x25,0x63,0xCF,0x00,"E3840" }, /* 28 3.84MB 3.5"   */
472         { 3680,23,2,80,0,0x1C,0x10,0xCF,0x00,"H1840" }, /* 29 1.84MB 3.5"   */
473
474         { 1600,10,2,80,0,0x25,0x02,0xDF,0x2E,"D800"  }, /* 30 800KB 3.5"    */
475         { 3200,20,2,80,0,0x1C,0x00,0xCF,0x2C,"H1600" }, /* 31 1.6MB 3.5"    */
476 };
477
478 static struct gendisk *disks[N_DRIVE][ARRAY_SIZE(floppy_type)];
479
480 #define SECTSIZE (_FD_SECTSIZE(*floppy))
481
482 /* Auto-detection: Disk type used until the next media change occurs. */
483 static struct floppy_struct *current_type[N_DRIVE];
484
485 /*
486  * User-provided type information. current_type points to
487  * the respective entry of this array.
488  */
489 static struct floppy_struct user_params[N_DRIVE];
490
491 static sector_t floppy_sizes[256];
492
493 static char floppy_device_name[] = "floppy";
494
495 /*
496  * The driver is trying to determine the correct media format
497  * while probing is set. rw_interrupt() clears it after a
498  * successful access.
499  */
500 static int probing;
501
502 /* Synchronization of FDC access. */
503 #define FD_COMMAND_NONE         -1
504 #define FD_COMMAND_ERROR        2
505 #define FD_COMMAND_OKAY         3
506
507 static volatile int command_status = FD_COMMAND_NONE;
508 static unsigned long fdc_busy;
509 static DECLARE_WAIT_QUEUE_HEAD(fdc_wait);
510 static DECLARE_WAIT_QUEUE_HEAD(command_done);
511
512 /* errors encountered on the current (or last) request */
513 static int floppy_errors;
514
515 /* Format request descriptor. */
516 static struct format_descr format_req;
517
518 /*
519  * Rate is 0 for 500kb/s, 1 for 300kbps, 2 for 250kbps
520  * Spec1 is 0xSH, where S is stepping rate (F=1ms, E=2ms, D=3ms etc),
521  * H is head unload time (1=16ms, 2=32ms, etc)
522  */
523
524 /*
525  * Track buffer
526  * Because these are written to by the DMA controller, they must
527  * not contain a 64k byte boundary crossing, or data will be
528  * corrupted/lost.
529  */
530 static char *floppy_track_buffer;
531 static int max_buffer_sectors;
532
533 typedef void (*done_f)(int);
534 static const struct cont_t {
535         void (*interrupt)(void);
536                                 /* this is called after the interrupt of the
537                                  * main command */
538         void (*redo)(void);     /* this is called to retry the operation */
539         void (*error)(void);    /* this is called to tally an error */
540         done_f done;            /* this is called to say if the operation has
541                                  * succeeded/failed */
542 } *cont;
543
544 static void floppy_ready(void);
545 static void floppy_start(void);
546 static void process_fd_request(void);
547 static void recalibrate_floppy(void);
548 static void floppy_shutdown(struct work_struct *);
549
550 static int floppy_request_regions(int);
551 static void floppy_release_regions(int);
552 static int floppy_grab_irq_and_dma(void);
553 static void floppy_release_irq_and_dma(void);
554
555 /*
556  * The "reset" variable should be tested whenever an interrupt is scheduled,
557  * after the commands have been sent. This is to ensure that the driver doesn't
558  * get wedged when the interrupt doesn't come because of a failed command.
559  * reset doesn't need to be tested before sending commands, because
560  * output_byte is automatically disabled when reset is set.
561  */
562 static void reset_fdc(void);
563 static int floppy_revalidate(struct gendisk *disk);
564
565 /*
566  * These are global variables, as that's the easiest way to give
567  * information to interrupts. They are the data used for the current
568  * request.
569  */
570 #define NO_TRACK        -1
571 #define NEED_1_RECAL    -2
572 #define NEED_2_RECAL    -3
573
574 static atomic_t usage_count = ATOMIC_INIT(0);
575
576 /* buffer related variables */
577 static int buffer_track = -1;
578 static int buffer_drive = -1;
579 static int buffer_min = -1;
580 static int buffer_max = -1;
581
582 /* fdc related variables, should end up in a struct */
583 static struct floppy_fdc_state fdc_state[N_FDC];
584 static int current_fdc;                 /* current fdc */
585
586 static struct workqueue_struct *floppy_wq;
587
588 static struct floppy_struct *_floppy = floppy_type;
589 static unsigned char current_drive;
590 static long current_count_sectors;
591 static unsigned char fsector_t; /* sector in track */
592 static unsigned char in_sector_offset;  /* offset within physical sector,
593                                          * expressed in units of 512 bytes */
594
595 static inline unsigned char fdc_inb(int fdc, int reg)
596 {
597         return fd_inb(fdc_state[fdc].address, reg);
598 }
599
600 static inline void fdc_outb(unsigned char value, int fdc, int reg)
601 {
602         fd_outb(value, fdc_state[fdc].address, reg);
603 }
604
605 static inline bool drive_no_geom(int drive)
606 {
607         return !current_type[drive] && !ITYPE(drive_state[drive].fd_device);
608 }
609
610 #ifndef fd_eject
611 static inline int fd_eject(int drive)
612 {
613         return -EINVAL;
614 }
615 #endif
616
617 /*
618  * Debugging
619  * =========
620  */
621 #ifdef DEBUGT
622 static long unsigned debugtimer;
623
624 static inline void set_debugt(void)
625 {
626         debugtimer = jiffies;
627 }
628
629 static inline void debugt(const char *func, const char *msg)
630 {
631         if (drive_params[current_drive].flags & DEBUGT)
632                 pr_info("%s:%s dtime=%lu\n", func, msg, jiffies - debugtimer);
633 }
634 #else
635 static inline void set_debugt(void) { }
636 static inline void debugt(const char *func, const char *msg) { }
637 #endif /* DEBUGT */
638
639
640 static DECLARE_DELAYED_WORK(fd_timeout, floppy_shutdown);
641 static const char *timeout_message;
642
643 static void is_alive(const char *func, const char *message)
644 {
645         /* this routine checks whether the floppy driver is "alive" */
646         if (test_bit(0, &fdc_busy) && command_status < 2 &&
647             !delayed_work_pending(&fd_timeout)) {
648                 DPRINT("%s: timeout handler died.  %s\n", func, message);
649         }
650 }
651
652 static void (*do_floppy)(void) = NULL;
653
654 #define OLOGSIZE 20
655
656 static void (*lasthandler)(void);
657 static unsigned long interruptjiffies;
658 static unsigned long resultjiffies;
659 static int resultsize;
660 static unsigned long lastredo;
661
662 static struct output_log {
663         unsigned char data;
664         unsigned char status;
665         unsigned long jiffies;
666 } output_log[OLOGSIZE];
667
668 static int output_log_pos;
669
670 #define MAXTIMEOUT -2
671
672 static void __reschedule_timeout(int drive, const char *message)
673 {
674         unsigned long delay;
675
676         if (drive < 0 || drive >= N_DRIVE) {
677                 delay = 20UL * HZ;
678                 drive = 0;
679         } else
680                 delay = drive_params[drive].timeout;
681
682         mod_delayed_work(floppy_wq, &fd_timeout, delay);
683         if (drive_params[drive].flags & FD_DEBUG)
684                 DPRINT("reschedule timeout %s\n", message);
685         timeout_message = message;
686 }
687
688 static void reschedule_timeout(int drive, const char *message)
689 {
690         unsigned long flags;
691
692         spin_lock_irqsave(&floppy_lock, flags);
693         __reschedule_timeout(drive, message);
694         spin_unlock_irqrestore(&floppy_lock, flags);
695 }
696
697 #define INFBOUND(a, b) (a) = max_t(int, a, b)
698 #define SUPBOUND(a, b) (a) = min_t(int, a, b)
699
700 /*
701  * Bottom half floppy driver.
702  * ==========================
703  *
704  * This part of the file contains the code talking directly to the hardware,
705  * and also the main service loop (seek-configure-spinup-command)
706  */
707
708 /*
709  * disk change.
710  * This routine is responsible for maintaining the FD_DISK_CHANGE flag,
711  * and the last_checked date.
712  *
713  * last_checked is the date of the last check which showed 'no disk change'
714  * FD_DISK_CHANGE is set under two conditions:
715  * 1. The floppy has been changed after some i/o to that floppy already
716  *    took place.
717  * 2. No floppy disk is in the drive. This is done in order to ensure that
718  *    requests are quickly flushed in case there is no disk in the drive. It
719  *    follows that FD_DISK_CHANGE can only be cleared if there is a disk in
720  *    the drive.
721  *
722  * For 1., maxblock is observed. Maxblock is 0 if no i/o has taken place yet.
723  * For 2., FD_DISK_NEWCHANGE is watched. FD_DISK_NEWCHANGE is cleared on
724  *  each seek. If a disk is present, the disk change line should also be
725  *  cleared on each seek. Thus, if FD_DISK_NEWCHANGE is clear, but the disk
726  *  change line is set, this means either that no disk is in the drive, or
727  *  that it has been removed since the last seek.
728  *
729  * This means that we really have a third possibility too:
730  *  The floppy has been changed after the last seek.
731  */
732
733 static int disk_change(int drive)
734 {
735         int fdc = FDC(drive);
736
737         if (time_before(jiffies, drive_state[drive].select_date + drive_params[drive].select_delay))
738                 DPRINT("WARNING disk change called early\n");
739         if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))) ||
740             (fdc_state[fdc].dor & 3) != UNIT(drive) || fdc != FDC(drive)) {
741                 DPRINT("probing disk change on unselected drive\n");
742                 DPRINT("drive=%d fdc=%d dor=%x\n", drive, FDC(drive),
743                        (unsigned int)fdc_state[fdc].dor);
744         }
745
746         debug_dcl(drive_params[drive].flags,
747                   "checking disk change line for drive %d\n", drive);
748         debug_dcl(drive_params[drive].flags, "jiffies=%lu\n", jiffies);
749         debug_dcl(drive_params[drive].flags, "disk change line=%x\n",
750                   fdc_inb(fdc, FD_DIR) & 0x80);
751         debug_dcl(drive_params[drive].flags, "flags=%lx\n",
752                   drive_state[drive].flags);
753
754         if (drive_params[drive].flags & FD_BROKEN_DCL)
755                 return test_bit(FD_DISK_CHANGED_BIT,
756                                 &drive_state[drive].flags);
757         if ((fdc_inb(fdc, FD_DIR) ^ drive_params[drive].flags) & 0x80) {
758                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
759                                         /* verify write protection */
760
761                 if (drive_state[drive].maxblock)        /* mark it changed */
762                         set_bit(FD_DISK_CHANGED_BIT,
763                                 &drive_state[drive].flags);
764
765                 /* invalidate its geometry */
766                 if (drive_state[drive].keep_data >= 0) {
767                         if ((drive_params[drive].flags & FTD_MSG) &&
768                             current_type[drive] != NULL)
769                                 DPRINT("Disk type is undefined after disk change\n");
770                         current_type[drive] = NULL;
771                         floppy_sizes[TOMINOR(drive)] = MAX_DISK_SIZE << 1;
772                 }
773
774                 return 1;
775         } else {
776                 drive_state[drive].last_checked = jiffies;
777                 clear_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
778         }
779         return 0;
780 }
781
782 static inline int is_selected(int dor, int unit)
783 {
784         return ((dor & (0x10 << unit)) && (dor & 3) == unit);
785 }
786
787 static bool is_ready_state(int status)
788 {
789         int state = status & (STATUS_READY | STATUS_DIR | STATUS_DMA);
790         return state == STATUS_READY;
791 }
792
793 static int set_dor(int fdc, char mask, char data)
794 {
795         unsigned char unit;
796         unsigned char drive;
797         unsigned char newdor;
798         unsigned char olddor;
799
800         if (fdc_state[fdc].address == -1)
801                 return -1;
802
803         olddor = fdc_state[fdc].dor;
804         newdor = (olddor & mask) | data;
805         if (newdor != olddor) {
806                 unit = olddor & 0x3;
807                 if (is_selected(olddor, unit) && !is_selected(newdor, unit)) {
808                         drive = REVDRIVE(fdc, unit);
809                         debug_dcl(drive_params[drive].flags,
810                                   "calling disk change from set_dor\n");
811                         disk_change(drive);
812                 }
813                 fdc_state[fdc].dor = newdor;
814                 fdc_outb(newdor, fdc, FD_DOR);
815
816                 unit = newdor & 0x3;
817                 if (!is_selected(olddor, unit) && is_selected(newdor, unit)) {
818                         drive = REVDRIVE(fdc, unit);
819                         drive_state[drive].select_date = jiffies;
820                 }
821         }
822         return olddor;
823 }
824
825 static void twaddle(int fdc, int drive)
826 {
827         if (drive_params[drive].select_delay)
828                 return;
829         fdc_outb(fdc_state[fdc].dor & ~(0x10 << UNIT(drive)),
830                  fdc, FD_DOR);
831         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
832         drive_state[drive].select_date = jiffies;
833 }
834
835 /*
836  * Reset all driver information about the specified fdc.
837  * This is needed after a reset, and after a raw command.
838  */
839 static void reset_fdc_info(int fdc, int mode)
840 {
841         int drive;
842
843         fdc_state[fdc].spec1 = fdc_state[fdc].spec2 = -1;
844         fdc_state[fdc].need_configure = 1;
845         fdc_state[fdc].perp_mode = 1;
846         fdc_state[fdc].rawcmd = 0;
847         for (drive = 0; drive < N_DRIVE; drive++)
848                 if (FDC(drive) == fdc &&
849                     (mode || drive_state[drive].track != NEED_1_RECAL))
850                         drive_state[drive].track = NEED_2_RECAL;
851 }
852
853 /*
854  * selects the fdc and drive, and enables the fdc's input/dma.
855  * Both current_drive and current_fdc are changed to match the new drive.
856  */
857 static void set_fdc(int drive)
858 {
859         unsigned int fdc;
860
861         if (drive < 0 || drive >= N_DRIVE) {
862                 pr_info("bad drive value %d\n", drive);
863                 return;
864         }
865
866         fdc = FDC(drive);
867         if (fdc >= N_FDC) {
868                 pr_info("bad fdc value\n");
869                 return;
870         }
871
872         set_dor(fdc, ~0, 8);
873 #if N_FDC > 1
874         set_dor(1 - fdc, ~8, 0);
875 #endif
876         if (fdc_state[fdc].rawcmd == 2)
877                 reset_fdc_info(fdc, 1);
878         if (fdc_inb(fdc, FD_STATUS) != STATUS_READY)
879                 fdc_state[fdc].reset = 1;
880
881         current_drive = drive;
882         current_fdc = fdc;
883 }
884
885 /*
886  * locks the driver.
887  * Both current_drive and current_fdc are changed to match the new drive.
888  */
889 static int lock_fdc(int drive)
890 {
891         if (WARN(atomic_read(&usage_count) == 0,
892                  "Trying to lock fdc while usage count=0\n"))
893                 return -1;
894
895         if (wait_event_interruptible(fdc_wait, !test_and_set_bit(0, &fdc_busy)))
896                 return -EINTR;
897
898         command_status = FD_COMMAND_NONE;
899
900         reschedule_timeout(drive, "lock fdc");
901         set_fdc(drive);
902         return 0;
903 }
904
905 /* unlocks the driver */
906 static void unlock_fdc(void)
907 {
908         if (!test_bit(0, &fdc_busy))
909                 DPRINT("FDC access conflict!\n");
910
911         raw_cmd = NULL;
912         command_status = FD_COMMAND_NONE;
913         cancel_delayed_work(&fd_timeout);
914         do_floppy = NULL;
915         cont = NULL;
916         clear_bit(0, &fdc_busy);
917         wake_up(&fdc_wait);
918 }
919
920 /* switches the motor off after a given timeout */
921 static void motor_off_callback(struct timer_list *t)
922 {
923         unsigned long nr = t - motor_off_timer;
924         unsigned char mask = ~(0x10 << UNIT(nr));
925
926         if (WARN_ON_ONCE(nr >= N_DRIVE))
927                 return;
928
929         set_dor(FDC(nr), mask, 0);
930 }
931
932 /* schedules motor off */
933 static void floppy_off(unsigned int drive)
934 {
935         unsigned long volatile delta;
936         int fdc = FDC(drive);
937
938         if (!(fdc_state[fdc].dor & (0x10 << UNIT(drive))))
939                 return;
940
941         del_timer(motor_off_timer + drive);
942
943         /* make spindle stop in a position which minimizes spinup time
944          * next time */
945         if (drive_params[drive].rps) {
946                 delta = jiffies - drive_state[drive].first_read_date + HZ -
947                     drive_params[drive].spindown_offset;
948                 delta = ((delta * drive_params[drive].rps) % HZ) / drive_params[drive].rps;
949                 motor_off_timer[drive].expires =
950                     jiffies + drive_params[drive].spindown - delta;
951         }
952         add_timer(motor_off_timer + drive);
953 }
954
955 /*
956  * cycle through all N_DRIVE floppy drives, for disk change testing.
957  * stopping at current drive. This is done before any long operation, to
958  * be sure to have up to date disk change information.
959  */
960 static void scandrives(void)
961 {
962         int i;
963         int drive;
964         int saved_drive;
965
966         if (drive_params[current_drive].select_delay)
967                 return;
968
969         saved_drive = current_drive;
970         for (i = 0; i < N_DRIVE; i++) {
971                 drive = (saved_drive + i + 1) % N_DRIVE;
972                 if (drive_state[drive].fd_ref == 0 || drive_params[drive].select_delay != 0)
973                         continue;       /* skip closed drives */
974                 set_fdc(drive);
975                 if (!(set_dor(current_fdc, ~3, UNIT(drive) | (0x10 << UNIT(drive))) &
976                       (0x10 << UNIT(drive))))
977                         /* switch the motor off again, if it was off to
978                          * begin with */
979                         set_dor(current_fdc, ~(0x10 << UNIT(drive)), 0);
980         }
981         set_fdc(saved_drive);
982 }
983
984 static void empty(void)
985 {
986 }
987
988 static void (*floppy_work_fn)(void);
989
990 static void floppy_work_workfn(struct work_struct *work)
991 {
992         floppy_work_fn();
993 }
994
995 static DECLARE_WORK(floppy_work, floppy_work_workfn);
996
997 static void schedule_bh(void (*handler)(void))
998 {
999         WARN_ON(work_pending(&floppy_work));
1000
1001         floppy_work_fn = handler;
1002         queue_work(floppy_wq, &floppy_work);
1003 }
1004
1005 static void (*fd_timer_fn)(void) = NULL;
1006
1007 static void fd_timer_workfn(struct work_struct *work)
1008 {
1009         fd_timer_fn();
1010 }
1011
1012 static DECLARE_DELAYED_WORK(fd_timer, fd_timer_workfn);
1013
1014 static void cancel_activity(void)
1015 {
1016         do_floppy = NULL;
1017         cancel_delayed_work(&fd_timer);
1018         cancel_work_sync(&floppy_work);
1019 }
1020
1021 /* this function makes sure that the disk stays in the drive during the
1022  * transfer */
1023 static void fd_watchdog(void)
1024 {
1025         debug_dcl(drive_params[current_drive].flags,
1026                   "calling disk change from watchdog\n");
1027
1028         if (disk_change(current_drive)) {
1029                 DPRINT("disk removed during i/o\n");
1030                 cancel_activity();
1031                 cont->done(0);
1032                 reset_fdc();
1033         } else {
1034                 cancel_delayed_work(&fd_timer);
1035                 fd_timer_fn = fd_watchdog;
1036                 queue_delayed_work(floppy_wq, &fd_timer, HZ / 10);
1037         }
1038 }
1039
1040 static void main_command_interrupt(void)
1041 {
1042         cancel_delayed_work(&fd_timer);
1043         cont->interrupt();
1044 }
1045
1046 /* waits for a delay (spinup or select) to pass */
1047 static int fd_wait_for_completion(unsigned long expires,
1048                                   void (*function)(void))
1049 {
1050         if (fdc_state[current_fdc].reset) {
1051                 reset_fdc();    /* do the reset during sleep to win time
1052                                  * if we don't need to sleep, it's a good
1053                                  * occasion anyways */
1054                 return 1;
1055         }
1056
1057         if (time_before(jiffies, expires)) {
1058                 cancel_delayed_work(&fd_timer);
1059                 fd_timer_fn = function;
1060                 queue_delayed_work(floppy_wq, &fd_timer, expires - jiffies);
1061                 return 1;
1062         }
1063         return 0;
1064 }
1065
1066 static void setup_DMA(void)
1067 {
1068         unsigned long f;
1069
1070         if (raw_cmd->length == 0) {
1071                 print_hex_dump(KERN_INFO, "zero dma transfer size: ",
1072                                DUMP_PREFIX_NONE, 16, 1,
1073                                raw_cmd->fullcmd, raw_cmd->cmd_count, false);
1074                 cont->done(0);
1075                 fdc_state[current_fdc].reset = 1;
1076                 return;
1077         }
1078         if (((unsigned long)raw_cmd->kernel_data) % 512) {
1079                 pr_info("non aligned address: %p\n", raw_cmd->kernel_data);
1080                 cont->done(0);
1081                 fdc_state[current_fdc].reset = 1;
1082                 return;
1083         }
1084         f = claim_dma_lock();
1085         fd_disable_dma();
1086 #ifdef fd_dma_setup
1087         if (fd_dma_setup(raw_cmd->kernel_data, raw_cmd->length,
1088                          (raw_cmd->flags & FD_RAW_READ) ?
1089                          DMA_MODE_READ : DMA_MODE_WRITE,
1090                          fdc_state[current_fdc].address) < 0) {
1091                 release_dma_lock(f);
1092                 cont->done(0);
1093                 fdc_state[current_fdc].reset = 1;
1094                 return;
1095         }
1096         release_dma_lock(f);
1097 #else
1098         fd_clear_dma_ff();
1099         fd_cacheflush(raw_cmd->kernel_data, raw_cmd->length);
1100         fd_set_dma_mode((raw_cmd->flags & FD_RAW_READ) ?
1101                         DMA_MODE_READ : DMA_MODE_WRITE);
1102         fd_set_dma_addr(raw_cmd->kernel_data);
1103         fd_set_dma_count(raw_cmd->length);
1104         virtual_dma_port = fdc_state[current_fdc].address;
1105         fd_enable_dma();
1106         release_dma_lock(f);
1107 #endif
1108 }
1109
1110 static void show_floppy(int fdc);
1111
1112 /* waits until the fdc becomes ready */
1113 static int wait_til_ready(int fdc)
1114 {
1115         int status;
1116         int counter;
1117
1118         if (fdc_state[fdc].reset)
1119                 return -1;
1120         for (counter = 0; counter < 10000; counter++) {
1121                 status = fdc_inb(fdc, FD_STATUS);
1122                 if (status & STATUS_READY)
1123                         return status;
1124         }
1125         if (initialized) {
1126                 DPRINT("Getstatus times out (%x) on fdc %d\n", status, fdc);
1127                 show_floppy(fdc);
1128         }
1129         fdc_state[fdc].reset = 1;
1130         return -1;
1131 }
1132
1133 /* sends a command byte to the fdc */
1134 static int output_byte(int fdc, char byte)
1135 {
1136         int status = wait_til_ready(fdc);
1137
1138         if (status < 0)
1139                 return -1;
1140
1141         if (is_ready_state(status)) {
1142                 fdc_outb(byte, fdc, FD_DATA);
1143                 output_log[output_log_pos].data = byte;
1144                 output_log[output_log_pos].status = status;
1145                 output_log[output_log_pos].jiffies = jiffies;
1146                 output_log_pos = (output_log_pos + 1) % OLOGSIZE;
1147                 return 0;
1148         }
1149         fdc_state[fdc].reset = 1;
1150         if (initialized) {
1151                 DPRINT("Unable to send byte %x to FDC. Fdc=%x Status=%x\n",
1152                        byte, fdc, status);
1153                 show_floppy(fdc);
1154         }
1155         return -1;
1156 }
1157
1158 /* gets the response from the fdc */
1159 static int result(int fdc)
1160 {
1161         int i;
1162         int status = 0;
1163
1164         for (i = 0; i < FD_RAW_REPLY_SIZE; i++) {
1165                 status = wait_til_ready(fdc);
1166                 if (status < 0)
1167                         break;
1168                 status &= STATUS_DIR | STATUS_READY | STATUS_BUSY | STATUS_DMA;
1169                 if ((status & ~STATUS_BUSY) == STATUS_READY) {
1170                         resultjiffies = jiffies;
1171                         resultsize = i;
1172                         return i;
1173                 }
1174                 if (status == (STATUS_DIR | STATUS_READY | STATUS_BUSY))
1175                         reply_buffer[i] = fdc_inb(fdc, FD_DATA);
1176                 else
1177                         break;
1178         }
1179         if (initialized) {
1180                 DPRINT("get result error. Fdc=%d Last status=%x Read bytes=%d\n",
1181                        fdc, status, i);
1182                 show_floppy(fdc);
1183         }
1184         fdc_state[fdc].reset = 1;
1185         return -1;
1186 }
1187
1188 #define MORE_OUTPUT -2
1189 /* does the fdc need more output? */
1190 static int need_more_output(int fdc)
1191 {
1192         int status = wait_til_ready(fdc);
1193
1194         if (status < 0)
1195                 return -1;
1196
1197         if (is_ready_state(status))
1198                 return MORE_OUTPUT;
1199
1200         return result(fdc);
1201 }
1202
1203 /* Set perpendicular mode as required, based on data rate, if supported.
1204  * 82077 Now tested. 1Mbps data rate only possible with 82077-1.
1205  */
1206 static void perpendicular_mode(int fdc)
1207 {
1208         unsigned char perp_mode;
1209
1210         if (raw_cmd->rate & 0x40) {
1211                 switch (raw_cmd->rate & 3) {
1212                 case 0:
1213                         perp_mode = 2;
1214                         break;
1215                 case 3:
1216                         perp_mode = 3;
1217                         break;
1218                 default:
1219                         DPRINT("Invalid data rate for perpendicular mode!\n");
1220                         cont->done(0);
1221                         fdc_state[fdc].reset = 1;
1222                                         /*
1223                                          * convenient way to return to
1224                                          * redo without too much hassle
1225                                          * (deep stack et al.)
1226                                          */
1227                         return;
1228                 }
1229         } else
1230                 perp_mode = 0;
1231
1232         if (fdc_state[fdc].perp_mode == perp_mode)
1233                 return;
1234         if (fdc_state[fdc].version >= FDC_82077_ORIG) {
1235                 output_byte(fdc, FD_PERPENDICULAR);
1236                 output_byte(fdc, perp_mode);
1237                 fdc_state[fdc].perp_mode = perp_mode;
1238         } else if (perp_mode) {
1239                 DPRINT("perpendicular mode not supported by this FDC.\n");
1240         }
1241 }                               /* perpendicular_mode */
1242
1243 static int fifo_depth = 0xa;
1244 static int no_fifo;
1245
1246 static int fdc_configure(int fdc)
1247 {
1248         /* Turn on FIFO */
1249         output_byte(fdc, FD_CONFIGURE);
1250         if (need_more_output(fdc) != MORE_OUTPUT)
1251                 return 0;
1252         output_byte(fdc, 0);
1253         output_byte(fdc, 0x10 | (no_fifo & 0x20) | (fifo_depth & 0xf));
1254         output_byte(fdc, 0);    /* pre-compensation from track 0 upwards */
1255         return 1;
1256 }
1257
1258 #define NOMINAL_DTR 500
1259
1260 /* Issue a "SPECIFY" command to set the step rate time, head unload time,
1261  * head load time, and DMA disable flag to values needed by floppy.
1262  *
1263  * The value "dtr" is the data transfer rate in Kbps.  It is needed
1264  * to account for the data rate-based scaling done by the 82072 and 82077
1265  * FDC types.  This parameter is ignored for other types of FDCs (i.e.
1266  * 8272a).
1267  *
1268  * Note that changing the data transfer rate has a (probably deleterious)
1269  * effect on the parameters subject to scaling for 82072/82077 FDCs, so
1270  * fdc_specify is called again after each data transfer rate
1271  * change.
1272  *
1273  * srt: 1000 to 16000 in microseconds
1274  * hut: 16 to 240 milliseconds
1275  * hlt: 2 to 254 milliseconds
1276  *
1277  * These values are rounded up to the next highest available delay time.
1278  */
1279 static void fdc_specify(int fdc, int drive)
1280 {
1281         unsigned char spec1;
1282         unsigned char spec2;
1283         unsigned long srt;
1284         unsigned long hlt;
1285         unsigned long hut;
1286         unsigned long dtr = NOMINAL_DTR;
1287         unsigned long scale_dtr = NOMINAL_DTR;
1288         int hlt_max_code = 0x7f;
1289         int hut_max_code = 0xf;
1290
1291         if (fdc_state[fdc].need_configure &&
1292             fdc_state[fdc].version >= FDC_82072A) {
1293                 fdc_configure(fdc);
1294                 fdc_state[fdc].need_configure = 0;
1295         }
1296
1297         switch (raw_cmd->rate & 0x03) {
1298         case 3:
1299                 dtr = 1000;
1300                 break;
1301         case 1:
1302                 dtr = 300;
1303                 if (fdc_state[fdc].version >= FDC_82078) {
1304                         /* chose the default rate table, not the one
1305                          * where 1 = 2 Mbps */
1306                         output_byte(fdc, FD_DRIVESPEC);
1307                         if (need_more_output(fdc) == MORE_OUTPUT) {
1308                                 output_byte(fdc, UNIT(drive));
1309                                 output_byte(fdc, 0xc0);
1310                         }
1311                 }
1312                 break;
1313         case 2:
1314                 dtr = 250;
1315                 break;
1316         }
1317
1318         if (fdc_state[fdc].version >= FDC_82072) {
1319                 scale_dtr = dtr;
1320                 hlt_max_code = 0x00;    /* 0==256msec*dtr0/dtr (not linear!) */
1321                 hut_max_code = 0x0;     /* 0==256msec*dtr0/dtr (not linear!) */
1322         }
1323
1324         /* Convert step rate from microseconds to milliseconds and 4 bits */
1325         srt = 16 - DIV_ROUND_UP(drive_params[drive].srt * scale_dtr / 1000,
1326                                 NOMINAL_DTR);
1327         if (slow_floppy)
1328                 srt = srt / 4;
1329
1330         SUPBOUND(srt, 0xf);
1331         INFBOUND(srt, 0);
1332
1333         hlt = DIV_ROUND_UP(drive_params[drive].hlt * scale_dtr / 2,
1334                            NOMINAL_DTR);
1335         if (hlt < 0x01)
1336                 hlt = 0x01;
1337         else if (hlt > 0x7f)
1338                 hlt = hlt_max_code;
1339
1340         hut = DIV_ROUND_UP(drive_params[drive].hut * scale_dtr / 16,
1341                            NOMINAL_DTR);
1342         if (hut < 0x1)
1343                 hut = 0x1;
1344         else if (hut > 0xf)
1345                 hut = hut_max_code;
1346
1347         spec1 = (srt << 4) | hut;
1348         spec2 = (hlt << 1) | (use_virtual_dma & 1);
1349
1350         /* If these parameters did not change, just return with success */
1351         if (fdc_state[fdc].spec1 != spec1 ||
1352             fdc_state[fdc].spec2 != spec2) {
1353                 /* Go ahead and set spec1 and spec2 */
1354                 output_byte(fdc, FD_SPECIFY);
1355                 output_byte(fdc, fdc_state[fdc].spec1 = spec1);
1356                 output_byte(fdc, fdc_state[fdc].spec2 = spec2);
1357         }
1358 }                               /* fdc_specify */
1359
1360 /* Set the FDC's data transfer rate on behalf of the specified drive.
1361  * NOTE: with 82072/82077 FDCs, changing the data rate requires a reissue
1362  * of the specify command (i.e. using the fdc_specify function).
1363  */
1364 static int fdc_dtr(void)
1365 {
1366         /* If data rate not already set to desired value, set it. */
1367         if ((raw_cmd->rate & 3) == fdc_state[current_fdc].dtr)
1368                 return 0;
1369
1370         /* Set dtr */
1371         fdc_outb(raw_cmd->rate & 3, current_fdc, FD_DCR);
1372
1373         /* TODO: some FDC/drive combinations (C&T 82C711 with TEAC 1.2MB)
1374          * need a stabilization period of several milliseconds to be
1375          * enforced after data rate changes before R/W operations.
1376          * Pause 5 msec to avoid trouble. (Needs to be 2 jiffies)
1377          */
1378         fdc_state[current_fdc].dtr = raw_cmd->rate & 3;
1379         return fd_wait_for_completion(jiffies + 2UL * HZ / 100, floppy_ready);
1380 }                               /* fdc_dtr */
1381
1382 static void tell_sector(void)
1383 {
1384         pr_cont(": track %d, head %d, sector %d, size %d",
1385                 reply_buffer[R_TRACK], reply_buffer[R_HEAD],
1386                 reply_buffer[R_SECTOR],
1387                 reply_buffer[R_SIZECODE]);
1388 }                               /* tell_sector */
1389
1390 static void print_errors(void)
1391 {
1392         DPRINT("");
1393         if (reply_buffer[ST0] & ST0_ECE) {
1394                 pr_cont("Recalibrate failed!");
1395         } else if (reply_buffer[ST2] & ST2_CRC) {
1396                 pr_cont("data CRC error");
1397                 tell_sector();
1398         } else if (reply_buffer[ST1] & ST1_CRC) {
1399                 pr_cont("CRC error");
1400                 tell_sector();
1401         } else if ((reply_buffer[ST1] & (ST1_MAM | ST1_ND)) ||
1402                    (reply_buffer[ST2] & ST2_MAM)) {
1403                 if (!probing) {
1404                         pr_cont("sector not found");
1405                         tell_sector();
1406                 } else
1407                         pr_cont("probe failed...");
1408         } else if (reply_buffer[ST2] & ST2_WC) {        /* seek error */
1409                 pr_cont("wrong cylinder");
1410         } else if (reply_buffer[ST2] & ST2_BC) {        /* cylinder marked as bad */
1411                 pr_cont("bad cylinder");
1412         } else {
1413                 pr_cont("unknown error. ST[0..2] are: 0x%x 0x%x 0x%x",
1414                         reply_buffer[ST0], reply_buffer[ST1],
1415                         reply_buffer[ST2]);
1416                 tell_sector();
1417         }
1418         pr_cont("\n");
1419 }
1420
1421 /*
1422  * OK, this error interpreting routine is called after a
1423  * DMA read/write has succeeded
1424  * or failed, so we check the results, and copy any buffers.
1425  * hhb: Added better error reporting.
1426  * ak: Made this into a separate routine.
1427  */
1428 static int interpret_errors(void)
1429 {
1430         char bad;
1431
1432         if (inr != 7) {
1433                 DPRINT("-- FDC reply error\n");
1434                 fdc_state[current_fdc].reset = 1;
1435                 return 1;
1436         }
1437
1438         /* check IC to find cause of interrupt */
1439         switch (reply_buffer[ST0] & ST0_INTR) {
1440         case 0x40:              /* error occurred during command execution */
1441                 if (reply_buffer[ST1] & ST1_EOC)
1442                         return 0;       /* occurs with pseudo-DMA */
1443                 bad = 1;
1444                 if (reply_buffer[ST1] & ST1_WP) {
1445                         DPRINT("Drive is write protected\n");
1446                         clear_bit(FD_DISK_WRITABLE_BIT,
1447                                   &drive_state[current_drive].flags);
1448                         cont->done(0);
1449                         bad = 2;
1450                 } else if (reply_buffer[ST1] & ST1_ND) {
1451                         set_bit(FD_NEED_TWADDLE_BIT,
1452                                 &drive_state[current_drive].flags);
1453                 } else if (reply_buffer[ST1] & ST1_OR) {
1454                         if (drive_params[current_drive].flags & FTD_MSG)
1455                                 DPRINT("Over/Underrun - retrying\n");
1456                         bad = 0;
1457                 } else if (floppy_errors >= drive_params[current_drive].max_errors.reporting) {
1458                         print_errors();
1459                 }
1460                 if (reply_buffer[ST2] & ST2_WC || reply_buffer[ST2] & ST2_BC)
1461                         /* wrong cylinder => recal */
1462                         drive_state[current_drive].track = NEED_2_RECAL;
1463                 return bad;
1464         case 0x80:              /* invalid command given */
1465                 DPRINT("Invalid FDC command given!\n");
1466                 cont->done(0);
1467                 return 2;
1468         case 0xc0:
1469                 DPRINT("Abnormal termination caused by polling\n");
1470                 cont->error();
1471                 return 2;
1472         default:                /* (0) Normal command termination */
1473                 return 0;
1474         }
1475 }
1476
1477 /*
1478  * This routine is called when everything should be correctly set up
1479  * for the transfer (i.e. floppy motor is on, the correct floppy is
1480  * selected, and the head is sitting on the right track).
1481  */
1482 static void setup_rw_floppy(void)
1483 {
1484         int i;
1485         int r;
1486         int flags;
1487         unsigned long ready_date;
1488         void (*function)(void);
1489
1490         flags = raw_cmd->flags;
1491         if (flags & (FD_RAW_READ | FD_RAW_WRITE))
1492                 flags |= FD_RAW_INTR;
1493
1494         if ((flags & FD_RAW_SPIN) && !(flags & FD_RAW_NO_MOTOR)) {
1495                 ready_date = drive_state[current_drive].spinup_date + drive_params[current_drive].spinup;
1496                 /* If spinup will take a long time, rerun scandrives
1497                  * again just before spinup completion. Beware that
1498                  * after scandrives, we must again wait for selection.
1499                  */
1500                 if (time_after(ready_date, jiffies + drive_params[current_drive].select_delay)) {
1501                         ready_date -= drive_params[current_drive].select_delay;
1502                         function = floppy_start;
1503                 } else
1504                         function = setup_rw_floppy;
1505
1506                 /* wait until the floppy is spinning fast enough */
1507                 if (fd_wait_for_completion(ready_date, function))
1508                         return;
1509         }
1510         if ((flags & FD_RAW_READ) || (flags & FD_RAW_WRITE))
1511                 setup_DMA();
1512
1513         if (flags & FD_RAW_INTR)
1514                 do_floppy = main_command_interrupt;
1515
1516         r = 0;
1517         for (i = 0; i < raw_cmd->cmd_count; i++)
1518                 r |= output_byte(current_fdc, raw_cmd->fullcmd[i]);
1519
1520         debugt(__func__, "rw_command");
1521
1522         if (r) {
1523                 cont->error();
1524                 reset_fdc();
1525                 return;
1526         }
1527
1528         if (!(flags & FD_RAW_INTR)) {
1529                 inr = result(current_fdc);
1530                 cont->interrupt();
1531         } else if (flags & FD_RAW_NEED_DISK)
1532                 fd_watchdog();
1533 }
1534
1535 static int blind_seek;
1536
1537 /*
1538  * This is the routine called after every seek (or recalibrate) interrupt
1539  * from the floppy controller.
1540  */
1541 static void seek_interrupt(void)
1542 {
1543         debugt(__func__, "");
1544         if (inr != 2 || (reply_buffer[ST0] & 0xF8) != 0x20) {
1545                 DPRINT("seek failed\n");
1546                 drive_state[current_drive].track = NEED_2_RECAL;
1547                 cont->error();
1548                 cont->redo();
1549                 return;
1550         }
1551         if (drive_state[current_drive].track >= 0 &&
1552             drive_state[current_drive].track != reply_buffer[ST1] &&
1553             !blind_seek) {
1554                 debug_dcl(drive_params[current_drive].flags,
1555                           "clearing NEWCHANGE flag because of effective seek\n");
1556                 debug_dcl(drive_params[current_drive].flags, "jiffies=%lu\n",
1557                           jiffies);
1558                 clear_bit(FD_DISK_NEWCHANGE_BIT,
1559                           &drive_state[current_drive].flags);
1560                                         /* effective seek */
1561                 drive_state[current_drive].select_date = jiffies;
1562         }
1563         drive_state[current_drive].track = reply_buffer[ST1];
1564         floppy_ready();
1565 }
1566
1567 static void check_wp(int fdc, int drive)
1568 {
1569         if (test_bit(FD_VERIFY_BIT, &drive_state[drive].flags)) {
1570                                         /* check write protection */
1571                 output_byte(fdc, FD_GETSTATUS);
1572                 output_byte(fdc, UNIT(drive));
1573                 if (result(fdc) != 1) {
1574                         fdc_state[fdc].reset = 1;
1575                         return;
1576                 }
1577                 clear_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
1578                 clear_bit(FD_NEED_TWADDLE_BIT,
1579                           &drive_state[drive].flags);
1580                 debug_dcl(drive_params[drive].flags,
1581                           "checking whether disk is write protected\n");
1582                 debug_dcl(drive_params[drive].flags, "wp=%x\n",
1583                           reply_buffer[ST3] & 0x40);
1584                 if (!(reply_buffer[ST3] & 0x40))
1585                         set_bit(FD_DISK_WRITABLE_BIT,
1586                                 &drive_state[drive].flags);
1587                 else
1588                         clear_bit(FD_DISK_WRITABLE_BIT,
1589                                   &drive_state[drive].flags);
1590         }
1591 }
1592
1593 static void seek_floppy(void)
1594 {
1595         int track;
1596
1597         blind_seek = 0;
1598
1599         debug_dcl(drive_params[current_drive].flags,
1600                   "calling disk change from %s\n", __func__);
1601
1602         if (!test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1603             disk_change(current_drive) && (raw_cmd->flags & FD_RAW_NEED_DISK)) {
1604                 /* the media changed flag should be cleared after the seek.
1605                  * If it isn't, this means that there is really no disk in
1606                  * the drive.
1607                  */
1608                 set_bit(FD_DISK_CHANGED_BIT,
1609                         &drive_state[current_drive].flags);
1610                 cont->done(0);
1611                 cont->redo();
1612                 return;
1613         }
1614         if (drive_state[current_drive].track <= NEED_1_RECAL) {
1615                 recalibrate_floppy();
1616                 return;
1617         } else if (test_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags) &&
1618                    (raw_cmd->flags & FD_RAW_NEED_DISK) &&
1619                    (drive_state[current_drive].track <= NO_TRACK || drive_state[current_drive].track == raw_cmd->track)) {
1620                 /* we seek to clear the media-changed condition. Does anybody
1621                  * know a more elegant way, which works on all drives? */
1622                 if (raw_cmd->track)
1623                         track = raw_cmd->track - 1;
1624                 else {
1625                         if (drive_params[current_drive].flags & FD_SILENT_DCL_CLEAR) {
1626                                 set_dor(current_fdc, ~(0x10 << UNIT(current_drive)), 0);
1627                                 blind_seek = 1;
1628                                 raw_cmd->flags |= FD_RAW_NEED_SEEK;
1629                         }
1630                         track = 1;
1631                 }
1632         } else {
1633                 check_wp(current_fdc, current_drive);
1634                 if (raw_cmd->track != drive_state[current_drive].track &&
1635                     (raw_cmd->flags & FD_RAW_NEED_SEEK))
1636                         track = raw_cmd->track;
1637                 else {
1638                         setup_rw_floppy();
1639                         return;
1640                 }
1641         }
1642
1643         do_floppy = seek_interrupt;
1644         output_byte(current_fdc, FD_SEEK);
1645         output_byte(current_fdc, UNIT(current_drive));
1646         if (output_byte(current_fdc, track) < 0) {
1647                 reset_fdc();
1648                 return;
1649         }
1650         debugt(__func__, "");
1651 }
1652
1653 static void recal_interrupt(void)
1654 {
1655         debugt(__func__, "");
1656         if (inr != 2)
1657                 fdc_state[current_fdc].reset = 1;
1658         else if (reply_buffer[ST0] & ST0_ECE) {
1659                 switch (drive_state[current_drive].track) {
1660                 case NEED_1_RECAL:
1661                         debugt(__func__, "need 1 recal");
1662                         /* after a second recalibrate, we still haven't
1663                          * reached track 0. Probably no drive. Raise an
1664                          * error, as failing immediately might upset
1665                          * computers possessed by the Devil :-) */
1666                         cont->error();
1667                         cont->redo();
1668                         return;
1669                 case NEED_2_RECAL:
1670                         debugt(__func__, "need 2 recal");
1671                         /* If we already did a recalibrate,
1672                          * and we are not at track 0, this
1673                          * means we have moved. (The only way
1674                          * not to move at recalibration is to
1675                          * be already at track 0.) Clear the
1676                          * new change flag */
1677                         debug_dcl(drive_params[current_drive].flags,
1678                                   "clearing NEWCHANGE flag because of second recalibrate\n");
1679
1680                         clear_bit(FD_DISK_NEWCHANGE_BIT,
1681                                   &drive_state[current_drive].flags);
1682                         drive_state[current_drive].select_date = jiffies;
1683                         fallthrough;
1684                 default:
1685                         debugt(__func__, "default");
1686                         /* Recalibrate moves the head by at
1687                          * most 80 steps. If after one
1688                          * recalibrate we don't have reached
1689                          * track 0, this might mean that we
1690                          * started beyond track 80.  Try
1691                          * again.  */
1692                         drive_state[current_drive].track = NEED_1_RECAL;
1693                         break;
1694                 }
1695         } else
1696                 drive_state[current_drive].track = reply_buffer[ST1];
1697         floppy_ready();
1698 }
1699
1700 static void print_result(char *message, int inr)
1701 {
1702         int i;
1703
1704         DPRINT("%s ", message);
1705         if (inr >= 0)
1706                 for (i = 0; i < inr; i++)
1707                         pr_cont("repl[%d]=%x ", i, reply_buffer[i]);
1708         pr_cont("\n");
1709 }
1710
1711 /* interrupt handler. Note that this can be called externally on the Sparc */
1712 irqreturn_t floppy_interrupt(int irq, void *dev_id)
1713 {
1714         int do_print;
1715         unsigned long f;
1716         void (*handler)(void) = do_floppy;
1717
1718         lasthandler = handler;
1719         interruptjiffies = jiffies;
1720
1721         f = claim_dma_lock();
1722         fd_disable_dma();
1723         release_dma_lock(f);
1724
1725         do_floppy = NULL;
1726         if (current_fdc >= N_FDC || fdc_state[current_fdc].address == -1) {
1727                 /* we don't even know which FDC is the culprit */
1728                 pr_info("DOR0=%x\n", fdc_state[0].dor);
1729                 pr_info("floppy interrupt on bizarre fdc %d\n", current_fdc);
1730                 pr_info("handler=%ps\n", handler);
1731                 is_alive(__func__, "bizarre fdc");
1732                 return IRQ_NONE;
1733         }
1734
1735         fdc_state[current_fdc].reset = 0;
1736         /* We have to clear the reset flag here, because apparently on boxes
1737          * with level triggered interrupts (PS/2, Sparc, ...), it is needed to
1738          * emit SENSEI's to clear the interrupt line. And fdc_state[fdc].reset
1739          * blocks the emission of the SENSEI's.
1740          * It is OK to emit floppy commands because we are in an interrupt
1741          * handler here, and thus we have to fear no interference of other
1742          * activity.
1743          */
1744
1745         do_print = !handler && print_unex && initialized;
1746
1747         inr = result(current_fdc);
1748         if (do_print)
1749                 print_result("unexpected interrupt", inr);
1750         if (inr == 0) {
1751                 int max_sensei = 4;
1752                 do {
1753                         output_byte(current_fdc, FD_SENSEI);
1754                         inr = result(current_fdc);
1755                         if (do_print)
1756                                 print_result("sensei", inr);
1757                         max_sensei--;
1758                 } while ((reply_buffer[ST0] & 0x83) != UNIT(current_drive) &&
1759                          inr == 2 && max_sensei);
1760         }
1761         if (!handler) {
1762                 fdc_state[current_fdc].reset = 1;
1763                 return IRQ_NONE;
1764         }
1765         schedule_bh(handler);
1766         is_alive(__func__, "normal interrupt end");
1767
1768         /* FIXME! Was it really for us? */
1769         return IRQ_HANDLED;
1770 }
1771
1772 static void recalibrate_floppy(void)
1773 {
1774         debugt(__func__, "");
1775         do_floppy = recal_interrupt;
1776         output_byte(current_fdc, FD_RECALIBRATE);
1777         if (output_byte(current_fdc, UNIT(current_drive)) < 0)
1778                 reset_fdc();
1779 }
1780
1781 /*
1782  * Must do 4 FD_SENSEIs after reset because of ``drive polling''.
1783  */
1784 static void reset_interrupt(void)
1785 {
1786         debugt(__func__, "");
1787         result(current_fdc);            /* get the status ready for set_fdc */
1788         if (fdc_state[current_fdc].reset) {
1789                 pr_info("reset set in interrupt, calling %ps\n", cont->error);
1790                 cont->error();  /* a reset just after a reset. BAD! */
1791         }
1792         cont->redo();
1793 }
1794
1795 /*
1796  * reset is done by pulling bit 2 of DOR low for a while (old FDCs),
1797  * or by setting the self clearing bit 7 of STATUS (newer FDCs).
1798  * This WILL trigger an interrupt, causing the handlers in the current
1799  * cont's ->redo() to be called via reset_interrupt().
1800  */
1801 static void reset_fdc(void)
1802 {
1803         unsigned long flags;
1804
1805         do_floppy = reset_interrupt;
1806         fdc_state[current_fdc].reset = 0;
1807         reset_fdc_info(current_fdc, 0);
1808
1809         /* Pseudo-DMA may intercept 'reset finished' interrupt.  */
1810         /* Irrelevant for systems with true DMA (i386).          */
1811
1812         flags = claim_dma_lock();
1813         fd_disable_dma();
1814         release_dma_lock(flags);
1815
1816         if (fdc_state[current_fdc].version >= FDC_82072A)
1817                 fdc_outb(0x80 | (fdc_state[current_fdc].dtr & 3),
1818                          current_fdc, FD_STATUS);
1819         else {
1820                 fdc_outb(fdc_state[current_fdc].dor & ~0x04, current_fdc, FD_DOR);
1821                 udelay(FD_RESET_DELAY);
1822                 fdc_outb(fdc_state[current_fdc].dor, current_fdc, FD_DOR);
1823         }
1824 }
1825
1826 static void show_floppy(int fdc)
1827 {
1828         int i;
1829
1830         pr_info("\n");
1831         pr_info("floppy driver state\n");
1832         pr_info("-------------------\n");
1833         pr_info("now=%lu last interrupt=%lu diff=%lu last called handler=%ps\n",
1834                 jiffies, interruptjiffies, jiffies - interruptjiffies,
1835                 lasthandler);
1836
1837         pr_info("timeout_message=%s\n", timeout_message);
1838         pr_info("last output bytes:\n");
1839         for (i = 0; i < OLOGSIZE; i++)
1840                 pr_info("%2x %2x %lu\n",
1841                         output_log[(i + output_log_pos) % OLOGSIZE].data,
1842                         output_log[(i + output_log_pos) % OLOGSIZE].status,
1843                         output_log[(i + output_log_pos) % OLOGSIZE].jiffies);
1844         pr_info("last result at %lu\n", resultjiffies);
1845         pr_info("last redo_fd_request at %lu\n", lastredo);
1846         print_hex_dump(KERN_INFO, "", DUMP_PREFIX_NONE, 16, 1,
1847                        reply_buffer, resultsize, true);
1848
1849         pr_info("status=%x\n", fdc_inb(fdc, FD_STATUS));
1850         pr_info("fdc_busy=%lu\n", fdc_busy);
1851         if (do_floppy)
1852                 pr_info("do_floppy=%ps\n", do_floppy);
1853         if (work_pending(&floppy_work))
1854                 pr_info("floppy_work.func=%ps\n", floppy_work.func);
1855         if (delayed_work_pending(&fd_timer))
1856                 pr_info("delayed work.function=%p expires=%ld\n",
1857                        fd_timer.work.func,
1858                        fd_timer.timer.expires - jiffies);
1859         if (delayed_work_pending(&fd_timeout))
1860                 pr_info("timer_function=%p expires=%ld\n",
1861                        fd_timeout.work.func,
1862                        fd_timeout.timer.expires - jiffies);
1863
1864         pr_info("cont=%p\n", cont);
1865         pr_info("current_req=%p\n", current_req);
1866         pr_info("command_status=%d\n", command_status);
1867         pr_info("\n");
1868 }
1869
1870 static void floppy_shutdown(struct work_struct *arg)
1871 {
1872         unsigned long flags;
1873
1874         if (initialized)
1875                 show_floppy(current_fdc);
1876         cancel_activity();
1877
1878         flags = claim_dma_lock();
1879         fd_disable_dma();
1880         release_dma_lock(flags);
1881
1882         /* avoid dma going to a random drive after shutdown */
1883
1884         if (initialized)
1885                 DPRINT("floppy timeout called\n");
1886         fdc_state[current_fdc].reset = 1;
1887         if (cont) {
1888                 cont->done(0);
1889                 cont->redo();   /* this will recall reset when needed */
1890         } else {
1891                 pr_info("no cont in shutdown!\n");
1892                 process_fd_request();
1893         }
1894         is_alive(__func__, "");
1895 }
1896
1897 /* start motor, check media-changed condition and write protection */
1898 static int start_motor(void (*function)(void))
1899 {
1900         int mask;
1901         int data;
1902
1903         mask = 0xfc;
1904         data = UNIT(current_drive);
1905         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR)) {
1906                 if (!(fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))) {
1907                         set_debugt();
1908                         /* no read since this drive is running */
1909                         drive_state[current_drive].first_read_date = 0;
1910                         /* note motor start time if motor is not yet running */
1911                         drive_state[current_drive].spinup_date = jiffies;
1912                         data |= (0x10 << UNIT(current_drive));
1913                 }
1914         } else if (fdc_state[current_fdc].dor & (0x10 << UNIT(current_drive)))
1915                 mask &= ~(0x10 << UNIT(current_drive));
1916
1917         /* starts motor and selects floppy */
1918         del_timer(motor_off_timer + current_drive);
1919         set_dor(current_fdc, mask, data);
1920
1921         /* wait_for_completion also schedules reset if needed. */
1922         return fd_wait_for_completion(drive_state[current_drive].select_date + drive_params[current_drive].select_delay,
1923                                       function);
1924 }
1925
1926 static void floppy_ready(void)
1927 {
1928         if (fdc_state[current_fdc].reset) {
1929                 reset_fdc();
1930                 return;
1931         }
1932         if (start_motor(floppy_ready))
1933                 return;
1934         if (fdc_dtr())
1935                 return;
1936
1937         debug_dcl(drive_params[current_drive].flags,
1938                   "calling disk change from floppy_ready\n");
1939         if (!(raw_cmd->flags & FD_RAW_NO_MOTOR) &&
1940             disk_change(current_drive) && !drive_params[current_drive].select_delay)
1941                 twaddle(current_fdc, current_drive);    /* this clears the dcl on certain
1942                                  * drive/controller combinations */
1943
1944 #ifdef fd_chose_dma_mode
1945         if ((raw_cmd->flags & FD_RAW_READ) || (raw_cmd->flags & FD_RAW_WRITE)) {
1946                 unsigned long flags = claim_dma_lock();
1947                 fd_chose_dma_mode(raw_cmd->kernel_data, raw_cmd->length);
1948                 release_dma_lock(flags);
1949         }
1950 #endif
1951
1952         if (raw_cmd->flags & (FD_RAW_NEED_SEEK | FD_RAW_NEED_DISK)) {
1953                 perpendicular_mode(current_fdc);
1954                 fdc_specify(current_fdc, current_drive); /* must be done here because of hut, hlt ... */
1955                 seek_floppy();
1956         } else {
1957                 if ((raw_cmd->flags & FD_RAW_READ) ||
1958                     (raw_cmd->flags & FD_RAW_WRITE))
1959                         fdc_specify(current_fdc, current_drive);
1960                 setup_rw_floppy();
1961         }
1962 }
1963
1964 static void floppy_start(void)
1965 {
1966         reschedule_timeout(current_drive, "floppy start");
1967
1968         scandrives();
1969         debug_dcl(drive_params[current_drive].flags,
1970                   "setting NEWCHANGE in floppy_start\n");
1971         set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
1972         floppy_ready();
1973 }
1974
1975 /*
1976  * ========================================================================
1977  * here ends the bottom half. Exported routines are:
1978  * floppy_start, floppy_off, floppy_ready, lock_fdc, unlock_fdc, set_fdc,
1979  * start_motor, reset_fdc, reset_fdc_info, interpret_errors.
1980  * Initialization also uses output_byte, result, set_dor, floppy_interrupt
1981  * and set_dor.
1982  * ========================================================================
1983  */
1984 /*
1985  * General purpose continuations.
1986  * ==============================
1987  */
1988
1989 static void do_wakeup(void)
1990 {
1991         reschedule_timeout(MAXTIMEOUT, "do wakeup");
1992         cont = NULL;
1993         command_status += 2;
1994         wake_up(&command_done);
1995 }
1996
1997 static const struct cont_t wakeup_cont = {
1998         .interrupt      = empty,
1999         .redo           = do_wakeup,
2000         .error          = empty,
2001         .done           = (done_f)empty
2002 };
2003
2004 static const struct cont_t intr_cont = {
2005         .interrupt      = empty,
2006         .redo           = process_fd_request,
2007         .error          = empty,
2008         .done           = (done_f)empty
2009 };
2010
2011 /* schedules handler, waiting for completion. May be interrupted, will then
2012  * return -EINTR, in which case the driver will automatically be unlocked.
2013  */
2014 static int wait_til_done(void (*handler)(void), bool interruptible)
2015 {
2016         int ret;
2017
2018         schedule_bh(handler);
2019
2020         if (interruptible)
2021                 wait_event_interruptible(command_done, command_status >= 2);
2022         else
2023                 wait_event(command_done, command_status >= 2);
2024
2025         if (command_status < 2) {
2026                 cancel_activity();
2027                 cont = &intr_cont;
2028                 reset_fdc();
2029                 return -EINTR;
2030         }
2031
2032         if (fdc_state[current_fdc].reset)
2033                 command_status = FD_COMMAND_ERROR;
2034         if (command_status == FD_COMMAND_OKAY)
2035                 ret = 0;
2036         else
2037                 ret = -EIO;
2038         command_status = FD_COMMAND_NONE;
2039         return ret;
2040 }
2041
2042 static void generic_done(int result)
2043 {
2044         command_status = result;
2045         cont = &wakeup_cont;
2046 }
2047
2048 static void generic_success(void)
2049 {
2050         cont->done(1);
2051 }
2052
2053 static void generic_failure(void)
2054 {
2055         cont->done(0);
2056 }
2057
2058 static void success_and_wakeup(void)
2059 {
2060         generic_success();
2061         cont->redo();
2062 }
2063
2064 /*
2065  * formatting and rw support.
2066  * ==========================
2067  */
2068
2069 static int next_valid_format(int drive)
2070 {
2071         int probed_format;
2072
2073         probed_format = drive_state[drive].probed_format;
2074         while (1) {
2075                 if (probed_format >= FD_AUTODETECT_SIZE ||
2076                     !drive_params[drive].autodetect[probed_format]) {
2077                         drive_state[drive].probed_format = 0;
2078                         return 1;
2079                 }
2080                 if (floppy_type[drive_params[drive].autodetect[probed_format]].sect) {
2081                         drive_state[drive].probed_format = probed_format;
2082                         return 0;
2083                 }
2084                 probed_format++;
2085         }
2086 }
2087
2088 static void bad_flp_intr(void)
2089 {
2090         int err_count;
2091
2092         if (probing) {
2093                 drive_state[current_drive].probed_format++;
2094                 if (!next_valid_format(current_drive))
2095                         return;
2096         }
2097         err_count = ++floppy_errors;
2098         INFBOUND(write_errors[current_drive].badness, err_count);
2099         if (err_count > drive_params[current_drive].max_errors.abort)
2100                 cont->done(0);
2101         if (err_count > drive_params[current_drive].max_errors.reset)
2102                 fdc_state[current_fdc].reset = 1;
2103         else if (err_count > drive_params[current_drive].max_errors.recal)
2104                 drive_state[current_drive].track = NEED_2_RECAL;
2105 }
2106
2107 static void set_floppy(int drive)
2108 {
2109         int type = ITYPE(drive_state[drive].fd_device);
2110
2111         if (type)
2112                 _floppy = floppy_type + type;
2113         else
2114                 _floppy = current_type[drive];
2115 }
2116
2117 /*
2118  * formatting support.
2119  * ===================
2120  */
2121 static void format_interrupt(void)
2122 {
2123         switch (interpret_errors()) {
2124         case 1:
2125                 cont->error();
2126                 break;
2127         case 2:
2128                 break;
2129         case 0:
2130                 cont->done(1);
2131         }
2132         cont->redo();
2133 }
2134
2135 #define FM_MODE(x, y) ((y) & ~(((x)->rate & 0x80) >> 1))
2136 #define CT(x) ((x) | 0xc0)
2137
2138 static void setup_format_params(int track)
2139 {
2140         int n;
2141         int il;
2142         int count;
2143         int head_shift;
2144         int track_shift;
2145         struct fparm {
2146                 unsigned char track, head, sect, size;
2147         } *here = (struct fparm *)floppy_track_buffer;
2148
2149         raw_cmd = &default_raw_cmd;
2150         raw_cmd->track = track;
2151
2152         raw_cmd->flags = (FD_RAW_WRITE | FD_RAW_INTR | FD_RAW_SPIN |
2153                           FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK);
2154         raw_cmd->rate = _floppy->rate & 0x43;
2155         raw_cmd->cmd_count = NR_F;
2156         raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_FORMAT);
2157         raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, format_req.head);
2158         raw_cmd->cmd[F_SIZECODE] = FD_SIZECODE(_floppy);
2159         raw_cmd->cmd[F_SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[F_SIZECODE];
2160         raw_cmd->cmd[F_GAP] = _floppy->fmt_gap;
2161         raw_cmd->cmd[F_FILL] = FD_FILL_BYTE;
2162
2163         raw_cmd->kernel_data = floppy_track_buffer;
2164         raw_cmd->length = 4 * raw_cmd->cmd[F_SECT_PER_TRACK];
2165
2166         if (!raw_cmd->cmd[F_SECT_PER_TRACK])
2167                 return;
2168
2169         /* allow for about 30ms for data transport per track */
2170         head_shift = (raw_cmd->cmd[F_SECT_PER_TRACK] + 5) / 6;
2171
2172         /* a ``cylinder'' is two tracks plus a little stepping time */
2173         track_shift = 2 * head_shift + 3;
2174
2175         /* position of logical sector 1 on this track */
2176         n = (track_shift * format_req.track + head_shift * format_req.head)
2177             % raw_cmd->cmd[F_SECT_PER_TRACK];
2178
2179         /* determine interleave */
2180         il = 1;
2181         if (_floppy->fmt_gap < 0x22)
2182                 il++;
2183
2184         /* initialize field */
2185         for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2186                 here[count].track = format_req.track;
2187                 here[count].head = format_req.head;
2188                 here[count].sect = 0;
2189                 here[count].size = raw_cmd->cmd[F_SIZECODE];
2190         }
2191         /* place logical sectors */
2192         for (count = 1; count <= raw_cmd->cmd[F_SECT_PER_TRACK]; ++count) {
2193                 here[n].sect = count;
2194                 n = (n + il) % raw_cmd->cmd[F_SECT_PER_TRACK];
2195                 if (here[n].sect) {     /* sector busy, find next free sector */
2196                         ++n;
2197                         if (n >= raw_cmd->cmd[F_SECT_PER_TRACK]) {
2198                                 n -= raw_cmd->cmd[F_SECT_PER_TRACK];
2199                                 while (here[n].sect)
2200                                         ++n;
2201                         }
2202                 }
2203         }
2204         if (_floppy->stretch & FD_SECTBASEMASK) {
2205                 for (count = 0; count < raw_cmd->cmd[F_SECT_PER_TRACK]; count++)
2206                         here[count].sect += FD_SECTBASE(_floppy) - 1;
2207         }
2208 }
2209
2210 static void redo_format(void)
2211 {
2212         buffer_track = -1;
2213         setup_format_params(format_req.track << STRETCH(_floppy));
2214         floppy_start();
2215         debugt(__func__, "queue format request");
2216 }
2217
2218 static const struct cont_t format_cont = {
2219         .interrupt      = format_interrupt,
2220         .redo           = redo_format,
2221         .error          = bad_flp_intr,
2222         .done           = generic_done
2223 };
2224
2225 static int do_format(int drive, struct format_descr *tmp_format_req)
2226 {
2227         int ret;
2228
2229         if (lock_fdc(drive))
2230                 return -EINTR;
2231
2232         set_floppy(drive);
2233         if (!_floppy ||
2234             _floppy->track > drive_params[current_drive].tracks ||
2235             tmp_format_req->track >= _floppy->track ||
2236             tmp_format_req->head >= _floppy->head ||
2237             (_floppy->sect << 2) % (1 << FD_SIZECODE(_floppy)) ||
2238             !_floppy->fmt_gap) {
2239                 process_fd_request();
2240                 return -EINVAL;
2241         }
2242         format_req = *tmp_format_req;
2243         cont = &format_cont;
2244         floppy_errors = 0;
2245         ret = wait_til_done(redo_format, true);
2246         if (ret == -EINTR)
2247                 return -EINTR;
2248         process_fd_request();
2249         return ret;
2250 }
2251
2252 /*
2253  * Buffer read/write and support
2254  * =============================
2255  */
2256
2257 static void floppy_end_request(struct request *req, blk_status_t error)
2258 {
2259         unsigned int nr_sectors = current_count_sectors;
2260         unsigned int drive = (unsigned long)req->rq_disk->private_data;
2261
2262         /* current_count_sectors can be zero if transfer failed */
2263         if (error)
2264                 nr_sectors = blk_rq_cur_sectors(req);
2265         if (blk_update_request(req, error, nr_sectors << 9))
2266                 return;
2267         __blk_mq_end_request(req, error);
2268
2269         /* We're done with the request */
2270         floppy_off(drive);
2271         current_req = NULL;
2272 }
2273
2274 /* new request_done. Can handle physical sectors which are smaller than a
2275  * logical buffer */
2276 static void request_done(int uptodate)
2277 {
2278         struct request *req = current_req;
2279         int block;
2280         char msg[sizeof("request done ") + sizeof(int) * 3];
2281
2282         probing = 0;
2283         snprintf(msg, sizeof(msg), "request done %d", uptodate);
2284         reschedule_timeout(MAXTIMEOUT, msg);
2285
2286         if (!req) {
2287                 pr_info("floppy.c: no request in request_done\n");
2288                 return;
2289         }
2290
2291         if (uptodate) {
2292                 /* maintain values for invalidation on geometry
2293                  * change */
2294                 block = current_count_sectors + blk_rq_pos(req);
2295                 INFBOUND(drive_state[current_drive].maxblock, block);
2296                 if (block > _floppy->sect)
2297                         drive_state[current_drive].maxtrack = 1;
2298
2299                 floppy_end_request(req, 0);
2300         } else {
2301                 if (rq_data_dir(req) == WRITE) {
2302                         /* record write error information */
2303                         write_errors[current_drive].write_errors++;
2304                         if (write_errors[current_drive].write_errors == 1) {
2305                                 write_errors[current_drive].first_error_sector = blk_rq_pos(req);
2306                                 write_errors[current_drive].first_error_generation = drive_state[current_drive].generation;
2307                         }
2308                         write_errors[current_drive].last_error_sector = blk_rq_pos(req);
2309                         write_errors[current_drive].last_error_generation = drive_state[current_drive].generation;
2310                 }
2311                 floppy_end_request(req, BLK_STS_IOERR);
2312         }
2313 }
2314
2315 /* Interrupt handler evaluating the result of the r/w operation */
2316 static void rw_interrupt(void)
2317 {
2318         int eoc;
2319         int ssize;
2320         int heads;
2321         int nr_sectors;
2322
2323         if (reply_buffer[R_HEAD] >= 2) {
2324                 /* some Toshiba floppy controllers occasionnally seem to
2325                  * return bogus interrupts after read/write operations, which
2326                  * can be recognized by a bad head number (>= 2) */
2327                 return;
2328         }
2329
2330         if (!drive_state[current_drive].first_read_date)
2331                 drive_state[current_drive].first_read_date = jiffies;
2332
2333         ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2334
2335         if (reply_buffer[ST1] & ST1_EOC)
2336                 eoc = 1;
2337         else
2338                 eoc = 0;
2339
2340         if (raw_cmd->cmd[COMMAND] & 0x80)
2341                 heads = 2;
2342         else
2343                 heads = 1;
2344
2345         nr_sectors = (((reply_buffer[R_TRACK] - raw_cmd->cmd[TRACK]) * heads +
2346                        reply_buffer[R_HEAD] - raw_cmd->cmd[HEAD]) * raw_cmd->cmd[SECT_PER_TRACK] +
2347                       reply_buffer[R_SECTOR] - raw_cmd->cmd[SECTOR] + eoc) << raw_cmd->cmd[SIZECODE] >> 2;
2348
2349         if (nr_sectors / ssize >
2350             DIV_ROUND_UP(in_sector_offset + current_count_sectors, ssize)) {
2351                 DPRINT("long rw: %x instead of %lx\n",
2352                        nr_sectors, current_count_sectors);
2353                 pr_info("rs=%d s=%d\n", reply_buffer[R_SECTOR],
2354                         raw_cmd->cmd[SECTOR]);
2355                 pr_info("rh=%d h=%d\n", reply_buffer[R_HEAD],
2356                         raw_cmd->cmd[HEAD]);
2357                 pr_info("rt=%d t=%d\n", reply_buffer[R_TRACK],
2358                         raw_cmd->cmd[TRACK]);
2359                 pr_info("heads=%d eoc=%d\n", heads, eoc);
2360                 pr_info("spt=%d st=%d ss=%d\n",
2361                         raw_cmd->cmd[SECT_PER_TRACK], fsector_t, ssize);
2362                 pr_info("in_sector_offset=%d\n", in_sector_offset);
2363         }
2364
2365         nr_sectors -= in_sector_offset;
2366         INFBOUND(nr_sectors, 0);
2367         SUPBOUND(current_count_sectors, nr_sectors);
2368
2369         switch (interpret_errors()) {
2370         case 2:
2371                 cont->redo();
2372                 return;
2373         case 1:
2374                 if (!current_count_sectors) {
2375                         cont->error();
2376                         cont->redo();
2377                         return;
2378                 }
2379                 break;
2380         case 0:
2381                 if (!current_count_sectors) {
2382                         cont->redo();
2383                         return;
2384                 }
2385                 current_type[current_drive] = _floppy;
2386                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2387                 break;
2388         }
2389
2390         if (probing) {
2391                 if (drive_params[current_drive].flags & FTD_MSG)
2392                         DPRINT("Auto-detected floppy type %s in fd%d\n",
2393                                _floppy->name, current_drive);
2394                 current_type[current_drive] = _floppy;
2395                 floppy_sizes[TOMINOR(current_drive)] = _floppy->size;
2396                 probing = 0;
2397         }
2398
2399         if (CT(raw_cmd->cmd[COMMAND]) != FD_READ) {
2400                 /* transfer directly from buffer */
2401                 cont->done(1);
2402         } else {
2403                 buffer_track = raw_cmd->track;
2404                 buffer_drive = current_drive;
2405                 INFBOUND(buffer_max, nr_sectors + fsector_t);
2406         }
2407         cont->redo();
2408 }
2409
2410 /* Compute the maximal transfer size */
2411 static int transfer_size(int ssize, int max_sector, int max_size)
2412 {
2413         SUPBOUND(max_sector, fsector_t + max_size);
2414
2415         /* alignment */
2416         max_sector -= (max_sector % _floppy->sect) % ssize;
2417
2418         /* transfer size, beginning not aligned */
2419         current_count_sectors = max_sector - fsector_t;
2420
2421         return max_sector;
2422 }
2423
2424 /*
2425  * Move data from/to the track buffer to/from the buffer cache.
2426  */
2427 static void copy_buffer(int ssize, int max_sector, int max_sector_2)
2428 {
2429         int remaining;          /* number of transferred 512-byte sectors */
2430         struct bio_vec bv;
2431         char *dma_buffer;
2432         int size;
2433         struct req_iterator iter;
2434
2435         max_sector = transfer_size(ssize,
2436                                    min(max_sector, max_sector_2),
2437                                    blk_rq_sectors(current_req));
2438
2439         if (current_count_sectors <= 0 && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2440             buffer_max > fsector_t + blk_rq_sectors(current_req))
2441                 current_count_sectors = min_t(int, buffer_max - fsector_t,
2442                                               blk_rq_sectors(current_req));
2443
2444         remaining = current_count_sectors << 9;
2445         if (remaining > blk_rq_bytes(current_req) && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2446                 DPRINT("in copy buffer\n");
2447                 pr_info("current_count_sectors=%ld\n", current_count_sectors);
2448                 pr_info("remaining=%d\n", remaining >> 9);
2449                 pr_info("current_req->nr_sectors=%u\n",
2450                         blk_rq_sectors(current_req));
2451                 pr_info("current_req->current_nr_sectors=%u\n",
2452                         blk_rq_cur_sectors(current_req));
2453                 pr_info("max_sector=%d\n", max_sector);
2454                 pr_info("ssize=%d\n", ssize);
2455         }
2456
2457         buffer_max = max(max_sector, buffer_max);
2458
2459         dma_buffer = floppy_track_buffer + ((fsector_t - buffer_min) << 9);
2460
2461         size = blk_rq_cur_bytes(current_req);
2462
2463         rq_for_each_segment(bv, current_req, iter) {
2464                 if (!remaining)
2465                         break;
2466
2467                 size = bv.bv_len;
2468                 SUPBOUND(size, remaining);
2469                 if (dma_buffer + size >
2470                     floppy_track_buffer + (max_buffer_sectors << 10) ||
2471                     dma_buffer < floppy_track_buffer) {
2472                         DPRINT("buffer overrun in copy buffer %d\n",
2473                                (int)((floppy_track_buffer - dma_buffer) >> 9));
2474                         pr_info("fsector_t=%d buffer_min=%d\n",
2475                                 fsector_t, buffer_min);
2476                         pr_info("current_count_sectors=%ld\n",
2477                                 current_count_sectors);
2478                         if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2479                                 pr_info("read\n");
2480                         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2481                                 pr_info("write\n");
2482                         break;
2483                 }
2484
2485                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2486                         memcpy_to_page(bv.bv_page, bv.bv_offset, dma_buffer,
2487                                        size);
2488                 else
2489                         memcpy_from_page(dma_buffer, bv.bv_page, bv.bv_offset,
2490                                          size);
2491
2492                 remaining -= size;
2493                 dma_buffer += size;
2494         }
2495         if (remaining) {
2496                 if (remaining > 0)
2497                         max_sector -= remaining >> 9;
2498                 DPRINT("weirdness: remaining %d\n", remaining >> 9);
2499         }
2500 }
2501
2502 /* work around a bug in pseudo DMA
2503  * (on some FDCs) pseudo DMA does not stop when the CPU stops
2504  * sending data.  Hence we need a different way to signal the
2505  * transfer length:  We use raw_cmd->cmd[SECT_PER_TRACK].  Unfortunately, this
2506  * does not work with MT, hence we can only transfer one head at
2507  * a time
2508  */
2509 static void virtualdmabug_workaround(void)
2510 {
2511         int hard_sectors;
2512         int end_sector;
2513
2514         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2515                 raw_cmd->cmd[COMMAND] &= ~0x80; /* switch off multiple track mode */
2516
2517                 hard_sectors = raw_cmd->length >> (7 + raw_cmd->cmd[SIZECODE]);
2518                 end_sector = raw_cmd->cmd[SECTOR] + hard_sectors - 1;
2519                 if (end_sector > raw_cmd->cmd[SECT_PER_TRACK]) {
2520                         pr_info("too many sectors %d > %d\n",
2521                                 end_sector, raw_cmd->cmd[SECT_PER_TRACK]);
2522                         return;
2523                 }
2524                 raw_cmd->cmd[SECT_PER_TRACK] = end_sector;
2525                                         /* make sure raw_cmd->cmd[SECT_PER_TRACK]
2526                                          * points to end of transfer */
2527         }
2528 }
2529
2530 /*
2531  * Formulate a read/write request.
2532  * this routine decides where to load the data (directly to buffer, or to
2533  * tmp floppy area), how much data to load (the size of the buffer, the whole
2534  * track, or a single sector)
2535  * All floppy_track_buffer handling goes in here. If we ever add track buffer
2536  * allocation on the fly, it should be done here. No other part should need
2537  * modification.
2538  */
2539
2540 static int make_raw_rw_request(void)
2541 {
2542         int aligned_sector_t;
2543         int max_sector;
2544         int max_size;
2545         int tracksize;
2546         int ssize;
2547
2548         if (WARN(max_buffer_sectors == 0, "VFS: Block I/O scheduled on unopened device\n"))
2549                 return 0;
2550
2551         set_fdc((long)current_req->rq_disk->private_data);
2552
2553         raw_cmd = &default_raw_cmd;
2554         raw_cmd->flags = FD_RAW_SPIN | FD_RAW_NEED_DISK | FD_RAW_NEED_SEEK;
2555         raw_cmd->cmd_count = NR_RW;
2556         if (rq_data_dir(current_req) == READ) {
2557                 raw_cmd->flags |= FD_RAW_READ;
2558                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2559         } else if (rq_data_dir(current_req) == WRITE) {
2560                 raw_cmd->flags |= FD_RAW_WRITE;
2561                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_WRITE);
2562         } else {
2563                 DPRINT("%s: unknown command\n", __func__);
2564                 return 0;
2565         }
2566
2567         max_sector = _floppy->sect * _floppy->head;
2568
2569         raw_cmd->cmd[TRACK] = (int)blk_rq_pos(current_req) / max_sector;
2570         fsector_t = (int)blk_rq_pos(current_req) % max_sector;
2571         if (_floppy->track && raw_cmd->cmd[TRACK] >= _floppy->track) {
2572                 if (blk_rq_cur_sectors(current_req) & 1) {
2573                         current_count_sectors = 1;
2574                         return 1;
2575                 } else
2576                         return 0;
2577         }
2578         raw_cmd->cmd[HEAD] = fsector_t / _floppy->sect;
2579
2580         if (((_floppy->stretch & (FD_SWAPSIDES | FD_SECTBASEMASK)) ||
2581              test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags)) &&
2582             fsector_t < _floppy->sect)
2583                 max_sector = _floppy->sect;
2584
2585         /* 2M disks have phantom sectors on the first track */
2586         if ((_floppy->rate & FD_2M) && (!raw_cmd->cmd[TRACK]) && (!raw_cmd->cmd[HEAD])) {
2587                 max_sector = 2 * _floppy->sect / 3;
2588                 if (fsector_t >= max_sector) {
2589                         current_count_sectors =
2590                             min_t(int, _floppy->sect - fsector_t,
2591                                   blk_rq_sectors(current_req));
2592                         return 1;
2593                 }
2594                 raw_cmd->cmd[SIZECODE] = 2;
2595         } else
2596                 raw_cmd->cmd[SIZECODE] = FD_SIZECODE(_floppy);
2597         raw_cmd->rate = _floppy->rate & 0x43;
2598         if ((_floppy->rate & FD_2M) &&
2599             (raw_cmd->cmd[TRACK] || raw_cmd->cmd[HEAD]) && raw_cmd->rate == 2)
2600                 raw_cmd->rate = 1;
2601
2602         if (raw_cmd->cmd[SIZECODE])
2603                 raw_cmd->cmd[SIZECODE2] = 0xff;
2604         else
2605                 raw_cmd->cmd[SIZECODE2] = 0x80;
2606         raw_cmd->track = raw_cmd->cmd[TRACK] << STRETCH(_floppy);
2607         raw_cmd->cmd[DR_SELECT] = UNIT(current_drive) + PH_HEAD(_floppy, raw_cmd->cmd[HEAD]);
2608         raw_cmd->cmd[GAP] = _floppy->gap;
2609         ssize = DIV_ROUND_UP(1 << raw_cmd->cmd[SIZECODE], 4);
2610         raw_cmd->cmd[SECT_PER_TRACK] = _floppy->sect << 2 >> raw_cmd->cmd[SIZECODE];
2611         raw_cmd->cmd[SECTOR] = ((fsector_t % _floppy->sect) << 2 >> raw_cmd->cmd[SIZECODE]) +
2612             FD_SECTBASE(_floppy);
2613
2614         /* tracksize describes the size which can be filled up with sectors
2615          * of size ssize.
2616          */
2617         tracksize = _floppy->sect - _floppy->sect % ssize;
2618         if (tracksize < _floppy->sect) {
2619                 raw_cmd->cmd[SECT_PER_TRACK]++;
2620                 if (tracksize <= fsector_t % _floppy->sect)
2621                         raw_cmd->cmd[SECTOR]--;
2622
2623                 /* if we are beyond tracksize, fill up using smaller sectors */
2624                 while (tracksize <= fsector_t % _floppy->sect) {
2625                         while (tracksize + ssize > _floppy->sect) {
2626                                 raw_cmd->cmd[SIZECODE]--;
2627                                 ssize >>= 1;
2628                         }
2629                         raw_cmd->cmd[SECTOR]++;
2630                         raw_cmd->cmd[SECT_PER_TRACK]++;
2631                         tracksize += ssize;
2632                 }
2633                 max_sector = raw_cmd->cmd[HEAD] * _floppy->sect + tracksize;
2634         } else if (!raw_cmd->cmd[TRACK] && !raw_cmd->cmd[HEAD] && !(_floppy->rate & FD_2M) && probing) {
2635                 max_sector = _floppy->sect;
2636         } else if (!raw_cmd->cmd[HEAD] && CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2637                 /* for virtual DMA bug workaround */
2638                 max_sector = _floppy->sect;
2639         }
2640
2641         in_sector_offset = (fsector_t % _floppy->sect) % ssize;
2642         aligned_sector_t = fsector_t - in_sector_offset;
2643         max_size = blk_rq_sectors(current_req);
2644         if ((raw_cmd->track == buffer_track) &&
2645             (current_drive == buffer_drive) &&
2646             (fsector_t >= buffer_min) && (fsector_t < buffer_max)) {
2647                 /* data already in track buffer */
2648                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ) {
2649                         copy_buffer(1, max_sector, buffer_max);
2650                         return 1;
2651                 }
2652         } else if (in_sector_offset || blk_rq_sectors(current_req) < ssize) {
2653                 if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2654                         unsigned int sectors;
2655
2656                         sectors = fsector_t + blk_rq_sectors(current_req);
2657                         if (sectors > ssize && sectors < ssize + ssize)
2658                                 max_size = ssize + ssize;
2659                         else
2660                                 max_size = ssize;
2661                 }
2662                 raw_cmd->flags &= ~FD_RAW_WRITE;
2663                 raw_cmd->flags |= FD_RAW_READ;
2664                 raw_cmd->cmd[COMMAND] = FM_MODE(_floppy, FD_READ);
2665         }
2666
2667         if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2668                 max_size = max_sector;  /* unbounded */
2669
2670         /* claim buffer track if needed */
2671         if (buffer_track != raw_cmd->track ||   /* bad track */
2672             buffer_drive != current_drive ||    /* bad drive */
2673             fsector_t > buffer_max ||
2674             fsector_t < buffer_min ||
2675             ((CT(raw_cmd->cmd[COMMAND]) == FD_READ ||
2676               (!in_sector_offset && blk_rq_sectors(current_req) >= ssize)) &&
2677              max_sector > 2 * max_buffer_sectors + buffer_min &&
2678              max_size + fsector_t > 2 * max_buffer_sectors + buffer_min)) {
2679                 /* not enough space */
2680                 buffer_track = -1;
2681                 buffer_drive = current_drive;
2682                 buffer_max = buffer_min = aligned_sector_t;
2683         }
2684         raw_cmd->kernel_data = floppy_track_buffer +
2685                 ((aligned_sector_t - buffer_min) << 9);
2686
2687         if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE) {
2688                 /* copy write buffer to track buffer.
2689                  * if we get here, we know that the write
2690                  * is either aligned or the data already in the buffer
2691                  * (buffer will be overwritten) */
2692                 if (in_sector_offset && buffer_track == -1)
2693                         DPRINT("internal error offset !=0 on write\n");
2694                 buffer_track = raw_cmd->track;
2695                 buffer_drive = current_drive;
2696                 copy_buffer(ssize, max_sector,
2697                             2 * max_buffer_sectors + buffer_min);
2698         } else
2699                 transfer_size(ssize, max_sector,
2700                               2 * max_buffer_sectors + buffer_min -
2701                               aligned_sector_t);
2702
2703         /* round up current_count_sectors to get dma xfer size */
2704         raw_cmd->length = in_sector_offset + current_count_sectors;
2705         raw_cmd->length = ((raw_cmd->length - 1) | (ssize - 1)) + 1;
2706         raw_cmd->length <<= 9;
2707         if ((raw_cmd->length < current_count_sectors << 9) ||
2708             (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE &&
2709              (aligned_sector_t + (raw_cmd->length >> 9) > buffer_max ||
2710               aligned_sector_t < buffer_min)) ||
2711             raw_cmd->length % (128 << raw_cmd->cmd[SIZECODE]) ||
2712             raw_cmd->length <= 0 || current_count_sectors <= 0) {
2713                 DPRINT("fractionary current count b=%lx s=%lx\n",
2714                        raw_cmd->length, current_count_sectors);
2715                 pr_info("addr=%d, length=%ld\n",
2716                         (int)((raw_cmd->kernel_data -
2717                                floppy_track_buffer) >> 9),
2718                         current_count_sectors);
2719                 pr_info("st=%d ast=%d mse=%d msi=%d\n",
2720                         fsector_t, aligned_sector_t, max_sector, max_size);
2721                 pr_info("ssize=%x SIZECODE=%d\n", ssize, raw_cmd->cmd[SIZECODE]);
2722                 pr_info("command=%x SECTOR=%d HEAD=%d, TRACK=%d\n",
2723                         raw_cmd->cmd[COMMAND], raw_cmd->cmd[SECTOR],
2724                         raw_cmd->cmd[HEAD], raw_cmd->cmd[TRACK]);
2725                 pr_info("buffer drive=%d\n", buffer_drive);
2726                 pr_info("buffer track=%d\n", buffer_track);
2727                 pr_info("buffer_min=%d\n", buffer_min);
2728                 pr_info("buffer_max=%d\n", buffer_max);
2729                 return 0;
2730         }
2731
2732         if (raw_cmd->kernel_data < floppy_track_buffer ||
2733             current_count_sectors < 0 ||
2734             raw_cmd->length < 0 ||
2735             raw_cmd->kernel_data + raw_cmd->length >
2736             floppy_track_buffer + (max_buffer_sectors << 10)) {
2737                 DPRINT("buffer overrun in schedule dma\n");
2738                 pr_info("fsector_t=%d buffer_min=%d current_count=%ld\n",
2739                         fsector_t, buffer_min, raw_cmd->length >> 9);
2740                 pr_info("current_count_sectors=%ld\n",
2741                         current_count_sectors);
2742                 if (CT(raw_cmd->cmd[COMMAND]) == FD_READ)
2743                         pr_info("read\n");
2744                 if (CT(raw_cmd->cmd[COMMAND]) == FD_WRITE)
2745                         pr_info("write\n");
2746                 return 0;
2747         }
2748         if (raw_cmd->length == 0) {
2749                 DPRINT("zero dma transfer attempted from make_raw_request\n");
2750                 return 0;
2751         }
2752
2753         virtualdmabug_workaround();
2754         return 2;
2755 }
2756
2757 static int set_next_request(void)
2758 {
2759         current_req = list_first_entry_or_null(&floppy_reqs, struct request,
2760                                                queuelist);
2761         if (current_req) {
2762                 floppy_errors = 0;
2763                 list_del_init(&current_req->queuelist);
2764                 return 1;
2765         }
2766         return 0;
2767 }
2768
2769 /* Starts or continues processing request. Will automatically unlock the
2770  * driver at end of request.
2771  */
2772 static void redo_fd_request(void)
2773 {
2774         int drive;
2775         int tmp;
2776
2777         lastredo = jiffies;
2778         if (current_drive < N_DRIVE)
2779                 floppy_off(current_drive);
2780
2781 do_request:
2782         if (!current_req) {
2783                 int pending;
2784
2785                 spin_lock_irq(&floppy_lock);
2786                 pending = set_next_request();
2787                 spin_unlock_irq(&floppy_lock);
2788                 if (!pending) {
2789                         do_floppy = NULL;
2790                         unlock_fdc();
2791                         return;
2792                 }
2793         }
2794         drive = (long)current_req->rq_disk->private_data;
2795         set_fdc(drive);
2796         reschedule_timeout(current_drive, "redo fd request");
2797
2798         set_floppy(drive);
2799         raw_cmd = &default_raw_cmd;
2800         raw_cmd->flags = 0;
2801         if (start_motor(redo_fd_request))
2802                 return;
2803
2804         disk_change(current_drive);
2805         if (test_bit(current_drive, &fake_change) ||
2806             test_bit(FD_DISK_CHANGED_BIT, &drive_state[current_drive].flags)) {
2807                 DPRINT("disk absent or changed during operation\n");
2808                 request_done(0);
2809                 goto do_request;
2810         }
2811         if (!_floppy) { /* Autodetection */
2812                 if (!probing) {
2813                         drive_state[current_drive].probed_format = 0;
2814                         if (next_valid_format(current_drive)) {
2815                                 DPRINT("no autodetectable formats\n");
2816                                 _floppy = NULL;
2817                                 request_done(0);
2818                                 goto do_request;
2819                         }
2820                 }
2821                 probing = 1;
2822                 _floppy = floppy_type + drive_params[current_drive].autodetect[drive_state[current_drive].probed_format];
2823         } else
2824                 probing = 0;
2825         tmp = make_raw_rw_request();
2826         if (tmp < 2) {
2827                 request_done(tmp);
2828                 goto do_request;
2829         }
2830
2831         if (test_bit(FD_NEED_TWADDLE_BIT, &drive_state[current_drive].flags))
2832                 twaddle(current_fdc, current_drive);
2833         schedule_bh(floppy_start);
2834         debugt(__func__, "queue fd request");
2835         return;
2836 }
2837
2838 static const struct cont_t rw_cont = {
2839         .interrupt      = rw_interrupt,
2840         .redo           = redo_fd_request,
2841         .error          = bad_flp_intr,
2842         .done           = request_done
2843 };
2844
2845 /* schedule the request and automatically unlock the driver on completion */
2846 static void process_fd_request(void)
2847 {
2848         cont = &rw_cont;
2849         schedule_bh(redo_fd_request);
2850 }
2851
2852 static blk_status_t floppy_queue_rq(struct blk_mq_hw_ctx *hctx,
2853                                     const struct blk_mq_queue_data *bd)
2854 {
2855         blk_mq_start_request(bd->rq);
2856
2857         if (WARN(max_buffer_sectors == 0,
2858                  "VFS: %s called on non-open device\n", __func__))
2859                 return BLK_STS_IOERR;
2860
2861         if (WARN(atomic_read(&usage_count) == 0,
2862                  "warning: usage count=0, current_req=%p sect=%ld flags=%llx\n",
2863                  current_req, (long)blk_rq_pos(current_req),
2864                  (unsigned long long) current_req->cmd_flags))
2865                 return BLK_STS_IOERR;
2866
2867         if (test_and_set_bit(0, &fdc_busy)) {
2868                 /* fdc busy, this new request will be treated when the
2869                    current one is done */
2870                 is_alive(__func__, "old request running");
2871                 return BLK_STS_RESOURCE;
2872         }
2873
2874         spin_lock_irq(&floppy_lock);
2875         list_add_tail(&bd->rq->queuelist, &floppy_reqs);
2876         spin_unlock_irq(&floppy_lock);
2877
2878         command_status = FD_COMMAND_NONE;
2879         __reschedule_timeout(MAXTIMEOUT, "fd_request");
2880         set_fdc(0);
2881         process_fd_request();
2882         is_alive(__func__, "");
2883         return BLK_STS_OK;
2884 }
2885
2886 static const struct cont_t poll_cont = {
2887         .interrupt      = success_and_wakeup,
2888         .redo           = floppy_ready,
2889         .error          = generic_failure,
2890         .done           = generic_done
2891 };
2892
2893 static int poll_drive(bool interruptible, int flag)
2894 {
2895         /* no auto-sense, just clear dcl */
2896         raw_cmd = &default_raw_cmd;
2897         raw_cmd->flags = flag;
2898         raw_cmd->track = 0;
2899         raw_cmd->cmd_count = 0;
2900         cont = &poll_cont;
2901         debug_dcl(drive_params[current_drive].flags,
2902                   "setting NEWCHANGE in poll_drive\n");
2903         set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[current_drive].flags);
2904
2905         return wait_til_done(floppy_ready, interruptible);
2906 }
2907
2908 /*
2909  * User triggered reset
2910  * ====================
2911  */
2912
2913 static void reset_intr(void)
2914 {
2915         pr_info("weird, reset interrupt called\n");
2916 }
2917
2918 static const struct cont_t reset_cont = {
2919         .interrupt      = reset_intr,
2920         .redo           = success_and_wakeup,
2921         .error          = generic_failure,
2922         .done           = generic_done
2923 };
2924
2925 /*
2926  * Resets the FDC connected to drive <drive>.
2927  * Both current_drive and current_fdc are changed to match the new drive.
2928  */
2929 static int user_reset_fdc(int drive, int arg, bool interruptible)
2930 {
2931         int ret;
2932
2933         if (lock_fdc(drive))
2934                 return -EINTR;
2935
2936         if (arg == FD_RESET_ALWAYS)
2937                 fdc_state[current_fdc].reset = 1;
2938         if (fdc_state[current_fdc].reset) {
2939                 /* note: reset_fdc will take care of unlocking the driver
2940                  * on completion.
2941                  */
2942                 cont = &reset_cont;
2943                 ret = wait_til_done(reset_fdc, interruptible);
2944                 if (ret == -EINTR)
2945                         return -EINTR;
2946         }
2947         process_fd_request();
2948         return 0;
2949 }
2950
2951 /*
2952  * Misc Ioctl's and support
2953  * ========================
2954  */
2955 static inline int fd_copyout(void __user *param, const void *address,
2956                              unsigned long size)
2957 {
2958         return copy_to_user(param, address, size) ? -EFAULT : 0;
2959 }
2960
2961 static inline int fd_copyin(void __user *param, void *address,
2962                             unsigned long size)
2963 {
2964         return copy_from_user(address, param, size) ? -EFAULT : 0;
2965 }
2966
2967 static const char *drive_name(int type, int drive)
2968 {
2969         struct floppy_struct *floppy;
2970
2971         if (type)
2972                 floppy = floppy_type + type;
2973         else {
2974                 if (drive_params[drive].native_format)
2975                         floppy = floppy_type + drive_params[drive].native_format;
2976                 else
2977                         return "(null)";
2978         }
2979         if (floppy->name)
2980                 return floppy->name;
2981         else
2982                 return "(null)";
2983 }
2984
2985 #ifdef CONFIG_BLK_DEV_FD_RAWCMD
2986
2987 /* raw commands */
2988 static void raw_cmd_done(int flag)
2989 {
2990         if (!flag) {
2991                 raw_cmd->flags |= FD_RAW_FAILURE;
2992                 raw_cmd->flags |= FD_RAW_HARDFAILURE;
2993         } else {
2994                 raw_cmd->reply_count = inr;
2995                 if (raw_cmd->reply_count > FD_RAW_REPLY_SIZE)
2996                         raw_cmd->reply_count = 0;
2997                 memcpy(raw_cmd->reply, reply_buffer, raw_cmd->reply_count);
2998
2999                 if (raw_cmd->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3000                         unsigned long flags;
3001                         flags = claim_dma_lock();
3002                         raw_cmd->length = fd_get_dma_residue();
3003                         release_dma_lock(flags);
3004                 }
3005
3006                 if ((raw_cmd->flags & FD_RAW_SOFTFAILURE) &&
3007                     (!raw_cmd->reply_count || (raw_cmd->reply[0] & 0xc0)))
3008                         raw_cmd->flags |= FD_RAW_FAILURE;
3009
3010                 if (disk_change(current_drive))
3011                         raw_cmd->flags |= FD_RAW_DISK_CHANGE;
3012                 else
3013                         raw_cmd->flags &= ~FD_RAW_DISK_CHANGE;
3014                 if (raw_cmd->flags & FD_RAW_NO_MOTOR_AFTER)
3015                         motor_off_callback(&motor_off_timer[current_drive]);
3016
3017                 if (raw_cmd->next &&
3018                     (!(raw_cmd->flags & FD_RAW_FAILURE) ||
3019                      !(raw_cmd->flags & FD_RAW_STOP_IF_FAILURE)) &&
3020                     ((raw_cmd->flags & FD_RAW_FAILURE) ||
3021                      !(raw_cmd->flags & FD_RAW_STOP_IF_SUCCESS))) {
3022                         raw_cmd = raw_cmd->next;
3023                         return;
3024                 }
3025         }
3026         generic_done(flag);
3027 }
3028
3029 static const struct cont_t raw_cmd_cont = {
3030         .interrupt      = success_and_wakeup,
3031         .redo           = floppy_start,
3032         .error          = generic_failure,
3033         .done           = raw_cmd_done
3034 };
3035
3036 static int raw_cmd_copyout(int cmd, void __user *param,
3037                                   struct floppy_raw_cmd *ptr)
3038 {
3039         int ret;
3040
3041         while (ptr) {
3042                 struct floppy_raw_cmd cmd = *ptr;
3043                 cmd.next = NULL;
3044                 cmd.kernel_data = NULL;
3045                 ret = copy_to_user(param, &cmd, sizeof(cmd));
3046                 if (ret)
3047                         return -EFAULT;
3048                 param += sizeof(struct floppy_raw_cmd);
3049                 if ((ptr->flags & FD_RAW_READ) && ptr->buffer_length) {
3050                         if (ptr->length >= 0 &&
3051                             ptr->length <= ptr->buffer_length) {
3052                                 long length = ptr->buffer_length - ptr->length;
3053                                 ret = fd_copyout(ptr->data, ptr->kernel_data,
3054                                                  length);
3055                                 if (ret)
3056                                         return ret;
3057                         }
3058                 }
3059                 ptr = ptr->next;
3060         }
3061
3062         return 0;
3063 }
3064
3065 static void raw_cmd_free(struct floppy_raw_cmd **ptr)
3066 {
3067         struct floppy_raw_cmd *next;
3068         struct floppy_raw_cmd *this;
3069
3070         this = *ptr;
3071         *ptr = NULL;
3072         while (this) {
3073                 if (this->buffer_length) {
3074                         fd_dma_mem_free((unsigned long)this->kernel_data,
3075                                         this->buffer_length);
3076                         this->buffer_length = 0;
3077                 }
3078                 next = this->next;
3079                 kfree(this);
3080                 this = next;
3081         }
3082 }
3083
3084 #define MAX_LEN (1UL << MAX_ORDER << PAGE_SHIFT)
3085
3086 static int raw_cmd_copyin(int cmd, void __user *param,
3087                                  struct floppy_raw_cmd **rcmd)
3088 {
3089         struct floppy_raw_cmd *ptr;
3090         int ret;
3091
3092         *rcmd = NULL;
3093
3094 loop:
3095         ptr = kmalloc(sizeof(struct floppy_raw_cmd), GFP_KERNEL);
3096         if (!ptr)
3097                 return -ENOMEM;
3098         *rcmd = ptr;
3099         ret = copy_from_user(ptr, param, sizeof(*ptr));
3100         ptr->next = NULL;
3101         ptr->buffer_length = 0;
3102         ptr->kernel_data = NULL;
3103         if (ret)
3104                 return -EFAULT;
3105         param += sizeof(struct floppy_raw_cmd);
3106         if (ptr->cmd_count > FD_RAW_CMD_FULLSIZE)
3107                 return -EINVAL;
3108
3109         memset(ptr->reply, 0, FD_RAW_REPLY_SIZE);
3110         ptr->resultcode = 0;
3111
3112         if (ptr->flags & (FD_RAW_READ | FD_RAW_WRITE)) {
3113                 if (ptr->length <= 0 || ptr->length >= MAX_LEN)
3114                         return -EINVAL;
3115                 ptr->kernel_data = (char *)fd_dma_mem_alloc(ptr->length);
3116                 fallback_on_nodma_alloc(&ptr->kernel_data, ptr->length);
3117                 if (!ptr->kernel_data)
3118                         return -ENOMEM;
3119                 ptr->buffer_length = ptr->length;
3120         }
3121         if (ptr->flags & FD_RAW_WRITE) {
3122                 ret = fd_copyin(ptr->data, ptr->kernel_data, ptr->length);
3123                 if (ret)
3124                         return ret;
3125         }
3126
3127         if (ptr->flags & FD_RAW_MORE) {
3128                 rcmd = &(ptr->next);
3129                 ptr->rate &= 0x43;
3130                 goto loop;
3131         }
3132
3133         return 0;
3134 }
3135
3136 static int raw_cmd_ioctl(int cmd, void __user *param)
3137 {
3138         struct floppy_raw_cmd *my_raw_cmd;
3139         int drive;
3140         int ret2;
3141         int ret;
3142
3143         if (fdc_state[current_fdc].rawcmd <= 1)
3144                 fdc_state[current_fdc].rawcmd = 1;
3145         for (drive = 0; drive < N_DRIVE; drive++) {
3146                 if (FDC(drive) != current_fdc)
3147                         continue;
3148                 if (drive == current_drive) {
3149                         if (drive_state[drive].fd_ref > 1) {
3150                                 fdc_state[current_fdc].rawcmd = 2;
3151                                 break;
3152                         }
3153                 } else if (drive_state[drive].fd_ref) {
3154                         fdc_state[current_fdc].rawcmd = 2;
3155                         break;
3156                 }
3157         }
3158
3159         if (fdc_state[current_fdc].reset)
3160                 return -EIO;
3161
3162         ret = raw_cmd_copyin(cmd, param, &my_raw_cmd);
3163         if (ret) {
3164                 raw_cmd_free(&my_raw_cmd);
3165                 return ret;
3166         }
3167
3168         raw_cmd = my_raw_cmd;
3169         cont = &raw_cmd_cont;
3170         ret = wait_til_done(floppy_start, true);
3171         debug_dcl(drive_params[current_drive].flags,
3172                   "calling disk change from raw_cmd ioctl\n");
3173
3174         if (ret != -EINTR && fdc_state[current_fdc].reset)
3175                 ret = -EIO;
3176
3177         drive_state[current_drive].track = NO_TRACK;
3178
3179         ret2 = raw_cmd_copyout(cmd, param, my_raw_cmd);
3180         if (!ret)
3181                 ret = ret2;
3182         raw_cmd_free(&my_raw_cmd);
3183         return ret;
3184 }
3185
3186 static int floppy_raw_cmd_ioctl(int type, int drive, int cmd,
3187                                 void __user *param)
3188 {
3189         int ret;
3190
3191         pr_warn_once("Note: FDRAWCMD is deprecated and will be removed from the kernel in the near future.\n");
3192
3193         if (type)
3194                 return -EINVAL;
3195         if (lock_fdc(drive))
3196                 return -EINTR;
3197         set_floppy(drive);
3198         ret = raw_cmd_ioctl(cmd, param);
3199         if (ret == -EINTR)
3200                 return -EINTR;
3201         process_fd_request();
3202         return ret;
3203 }
3204
3205 #else /* CONFIG_BLK_DEV_FD_RAWCMD */
3206
3207 static int floppy_raw_cmd_ioctl(int type, int drive, int cmd,
3208                                 void __user *param)
3209 {
3210         return -EOPNOTSUPP;
3211 }
3212
3213 #endif
3214
3215 static int invalidate_drive(struct block_device *bdev)
3216 {
3217         /* invalidate the buffer track to force a reread */
3218         set_bit((long)bdev->bd_disk->private_data, &fake_change);
3219         process_fd_request();
3220         if (bdev_check_media_change(bdev))
3221                 floppy_revalidate(bdev->bd_disk);
3222         return 0;
3223 }
3224
3225 static int set_geometry(unsigned int cmd, struct floppy_struct *g,
3226                                int drive, int type, struct block_device *bdev)
3227 {
3228         int cnt;
3229
3230         /* sanity checking for parameters. */
3231         if ((int)g->sect <= 0 ||
3232             (int)g->head <= 0 ||
3233             /* check for overflow in max_sector */
3234             (int)(g->sect * g->head) <= 0 ||
3235             /* check for zero in raw_cmd->cmd[F_SECT_PER_TRACK] */
3236             (unsigned char)((g->sect << 2) >> FD_SIZECODE(g)) == 0 ||
3237             g->track <= 0 || g->track > drive_params[drive].tracks >> STRETCH(g) ||
3238             /* check if reserved bits are set */
3239             (g->stretch & ~(FD_STRETCH | FD_SWAPSIDES | FD_SECTBASEMASK)) != 0)
3240                 return -EINVAL;
3241         if (type) {
3242                 if (!capable(CAP_SYS_ADMIN))
3243                         return -EPERM;
3244                 mutex_lock(&open_lock);
3245                 if (lock_fdc(drive)) {
3246                         mutex_unlock(&open_lock);
3247                         return -EINTR;
3248                 }
3249                 floppy_type[type] = *g;
3250                 floppy_type[type].name = "user format";
3251                 for (cnt = type << 2; cnt < (type << 2) + 4; cnt++)
3252                         floppy_sizes[cnt] = floppy_sizes[cnt + 0x80] =
3253                             floppy_type[type].size + 1;
3254                 process_fd_request();
3255                 for (cnt = 0; cnt < N_DRIVE; cnt++) {
3256                         struct block_device *bdev = opened_bdev[cnt];
3257                         if (!bdev || ITYPE(drive_state[cnt].fd_device) != type)
3258                                 continue;
3259                         __invalidate_device(bdev, true);
3260                 }
3261                 mutex_unlock(&open_lock);
3262         } else {
3263                 int oldStretch;
3264
3265                 if (lock_fdc(drive))
3266                         return -EINTR;
3267                 if (cmd != FDDEFPRM) {
3268                         /* notice a disk change immediately, else
3269                          * we lose our settings immediately*/
3270                         if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3271                                 return -EINTR;
3272                 }
3273                 oldStretch = g->stretch;
3274                 user_params[drive] = *g;
3275                 if (buffer_drive == drive)
3276                         SUPBOUND(buffer_max, user_params[drive].sect);
3277                 current_type[drive] = &user_params[drive];
3278                 floppy_sizes[drive] = user_params[drive].size;
3279                 if (cmd == FDDEFPRM)
3280                         drive_state[current_drive].keep_data = -1;
3281                 else
3282                         drive_state[current_drive].keep_data = 1;
3283                 /* invalidation. Invalidate only when needed, i.e.
3284                  * when there are already sectors in the buffer cache
3285                  * whose number will change. This is useful, because
3286                  * mtools often changes the geometry of the disk after
3287                  * looking at the boot block */
3288                 if (drive_state[current_drive].maxblock > user_params[drive].sect ||
3289                     drive_state[current_drive].maxtrack ||
3290                     ((user_params[drive].sect ^ oldStretch) &
3291                      (FD_SWAPSIDES | FD_SECTBASEMASK)))
3292                         invalidate_drive(bdev);
3293                 else
3294                         process_fd_request();
3295         }
3296         return 0;
3297 }
3298
3299 /* handle obsolete ioctl's */
3300 static unsigned int ioctl_table[] = {
3301         FDCLRPRM,
3302         FDSETPRM,
3303         FDDEFPRM,
3304         FDGETPRM,
3305         FDMSGON,
3306         FDMSGOFF,
3307         FDFMTBEG,
3308         FDFMTTRK,
3309         FDFMTEND,
3310         FDSETEMSGTRESH,
3311         FDFLUSH,
3312         FDSETMAXERRS,
3313         FDGETMAXERRS,
3314         FDGETDRVTYP,
3315         FDSETDRVPRM,
3316         FDGETDRVPRM,
3317         FDGETDRVSTAT,
3318         FDPOLLDRVSTAT,
3319         FDRESET,
3320         FDGETFDCSTAT,
3321         FDWERRORCLR,
3322         FDWERRORGET,
3323         FDRAWCMD,
3324         FDEJECT,
3325         FDTWADDLE
3326 };
3327
3328 static int normalize_ioctl(unsigned int *cmd, int *size)
3329 {
3330         int i;
3331
3332         for (i = 0; i < ARRAY_SIZE(ioctl_table); i++) {
3333                 if ((*cmd & 0xffff) == (ioctl_table[i] & 0xffff)) {
3334                         *size = _IOC_SIZE(*cmd);
3335                         *cmd = ioctl_table[i];
3336                         if (*size > _IOC_SIZE(*cmd)) {
3337                                 pr_info("ioctl not yet supported\n");
3338                                 return -EFAULT;
3339                         }
3340                         return 0;
3341                 }
3342         }
3343         return -EINVAL;
3344 }
3345
3346 static int get_floppy_geometry(int drive, int type, struct floppy_struct **g)
3347 {
3348         if (type)
3349                 *g = &floppy_type[type];
3350         else {
3351                 if (lock_fdc(drive))
3352                         return -EINTR;
3353                 if (poll_drive(false, 0) == -EINTR)
3354                         return -EINTR;
3355                 process_fd_request();
3356                 *g = current_type[drive];
3357         }
3358         if (!*g)
3359                 return -ENODEV;
3360         return 0;
3361 }
3362
3363 static int fd_getgeo(struct block_device *bdev, struct hd_geometry *geo)
3364 {
3365         int drive = (long)bdev->bd_disk->private_data;
3366         int type = ITYPE(drive_state[drive].fd_device);
3367         struct floppy_struct *g;
3368         int ret;
3369
3370         ret = get_floppy_geometry(drive, type, &g);
3371         if (ret)
3372                 return ret;
3373
3374         geo->heads = g->head;
3375         geo->sectors = g->sect;
3376         geo->cylinders = g->track;
3377         return 0;
3378 }
3379
3380 static bool valid_floppy_drive_params(const short autodetect[FD_AUTODETECT_SIZE],
3381                 int native_format)
3382 {
3383         size_t floppy_type_size = ARRAY_SIZE(floppy_type);
3384         size_t i = 0;
3385
3386         for (i = 0; i < FD_AUTODETECT_SIZE; ++i) {
3387                 if (autodetect[i] < 0 ||
3388                     autodetect[i] >= floppy_type_size)
3389                         return false;
3390         }
3391
3392         if (native_format < 0 || native_format >= floppy_type_size)
3393                 return false;
3394
3395         return true;
3396 }
3397
3398 static int fd_locked_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3399                     unsigned long param)
3400 {
3401         int drive = (long)bdev->bd_disk->private_data;
3402         int type = ITYPE(drive_state[drive].fd_device);
3403         int ret;
3404         int size;
3405         union inparam {
3406                 struct floppy_struct g; /* geometry */
3407                 struct format_descr f;
3408                 struct floppy_max_errors max_errors;
3409                 struct floppy_drive_params dp;
3410         } inparam;              /* parameters coming from user space */
3411         const void *outparam;   /* parameters passed back to user space */
3412
3413         /* convert compatibility eject ioctls into floppy eject ioctl.
3414          * We do this in order to provide a means to eject floppy disks before
3415          * installing the new fdutils package */
3416         if (cmd == CDROMEJECT ||        /* CD-ROM eject */
3417             cmd == 0x6470) {            /* SunOS floppy eject */
3418                 DPRINT("obsolete eject ioctl\n");
3419                 DPRINT("please use floppycontrol --eject\n");
3420                 cmd = FDEJECT;
3421         }
3422
3423         if (!((cmd & 0xff00) == 0x0200))
3424                 return -EINVAL;
3425
3426         /* convert the old style command into a new style command */
3427         ret = normalize_ioctl(&cmd, &size);
3428         if (ret)
3429                 return ret;
3430
3431         /* permission checks */
3432         if (((cmd & 0x40) && !(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL))) ||
3433             ((cmd & 0x80) && !capable(CAP_SYS_ADMIN)))
3434                 return -EPERM;
3435
3436         if (WARN_ON(size < 0 || size > sizeof(inparam)))
3437                 return -EINVAL;
3438
3439         /* copyin */
3440         memset(&inparam, 0, sizeof(inparam));
3441         if (_IOC_DIR(cmd) & _IOC_WRITE) {
3442                 ret = fd_copyin((void __user *)param, &inparam, size);
3443                 if (ret)
3444                         return ret;
3445         }
3446
3447         switch (cmd) {
3448         case FDEJECT:
3449                 if (drive_state[drive].fd_ref != 1)
3450                         /* somebody else has this drive open */
3451                         return -EBUSY;
3452                 if (lock_fdc(drive))
3453                         return -EINTR;
3454
3455                 /* do the actual eject. Fails on
3456                  * non-Sparc architectures */
3457                 ret = fd_eject(UNIT(drive));
3458
3459                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
3460                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
3461                 process_fd_request();
3462                 return ret;
3463         case FDCLRPRM:
3464                 if (lock_fdc(drive))
3465                         return -EINTR;
3466                 current_type[drive] = NULL;
3467                 floppy_sizes[drive] = MAX_DISK_SIZE << 1;
3468                 drive_state[drive].keep_data = 0;
3469                 return invalidate_drive(bdev);
3470         case FDSETPRM:
3471         case FDDEFPRM:
3472                 return set_geometry(cmd, &inparam.g, drive, type, bdev);
3473         case FDGETPRM:
3474                 ret = get_floppy_geometry(drive, type,
3475                                           (struct floppy_struct **)&outparam);
3476                 if (ret)
3477                         return ret;
3478                 memcpy(&inparam.g, outparam,
3479                                 offsetof(struct floppy_struct, name));
3480                 outparam = &inparam.g;
3481                 break;
3482         case FDMSGON:
3483                 drive_params[drive].flags |= FTD_MSG;
3484                 return 0;
3485         case FDMSGOFF:
3486                 drive_params[drive].flags &= ~FTD_MSG;
3487                 return 0;
3488         case FDFMTBEG:
3489                 if (lock_fdc(drive))
3490                         return -EINTR;
3491                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3492                         return -EINTR;
3493                 ret = drive_state[drive].flags;
3494                 process_fd_request();
3495                 if (ret & FD_VERIFY)
3496                         return -ENODEV;
3497                 if (!(ret & FD_DISK_WRITABLE))
3498                         return -EROFS;
3499                 return 0;
3500         case FDFMTTRK:
3501                 if (drive_state[drive].fd_ref != 1)
3502                         return -EBUSY;
3503                 return do_format(drive, &inparam.f);
3504         case FDFMTEND:
3505         case FDFLUSH:
3506                 if (lock_fdc(drive))
3507                         return -EINTR;
3508                 return invalidate_drive(bdev);
3509         case FDSETEMSGTRESH:
3510                 drive_params[drive].max_errors.reporting = (unsigned short)(param & 0x0f);
3511                 return 0;
3512         case FDGETMAXERRS:
3513                 outparam = &drive_params[drive].max_errors;
3514                 break;
3515         case FDSETMAXERRS:
3516                 drive_params[drive].max_errors = inparam.max_errors;
3517                 break;
3518         case FDGETDRVTYP:
3519                 outparam = drive_name(type, drive);
3520                 SUPBOUND(size, strlen((const char *)outparam) + 1);
3521                 break;
3522         case FDSETDRVPRM:
3523                 if (!valid_floppy_drive_params(inparam.dp.autodetect,
3524                                 inparam.dp.native_format))
3525                         return -EINVAL;
3526                 drive_params[drive] = inparam.dp;
3527                 break;
3528         case FDGETDRVPRM:
3529                 outparam = &drive_params[drive];
3530                 break;
3531         case FDPOLLDRVSTAT:
3532                 if (lock_fdc(drive))
3533                         return -EINTR;
3534                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3535                         return -EINTR;
3536                 process_fd_request();
3537                 fallthrough;
3538         case FDGETDRVSTAT:
3539                 outparam = &drive_state[drive];
3540                 break;
3541         case FDRESET:
3542                 return user_reset_fdc(drive, (int)param, true);
3543         case FDGETFDCSTAT:
3544                 outparam = &fdc_state[FDC(drive)];
3545                 break;
3546         case FDWERRORCLR:
3547                 memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
3548                 return 0;
3549         case FDWERRORGET:
3550                 outparam = &write_errors[drive];
3551                 break;
3552         case FDRAWCMD:
3553                 return floppy_raw_cmd_ioctl(type, drive, cmd, (void __user *)param);
3554         case FDTWADDLE:
3555                 if (lock_fdc(drive))
3556                         return -EINTR;
3557                 twaddle(current_fdc, current_drive);
3558                 process_fd_request();
3559                 return 0;
3560         default:
3561                 return -EINVAL;
3562         }
3563
3564         if (_IOC_DIR(cmd) & _IOC_READ)
3565                 return fd_copyout((void __user *)param, outparam, size);
3566
3567         return 0;
3568 }
3569
3570 static int fd_ioctl(struct block_device *bdev, fmode_t mode,
3571                              unsigned int cmd, unsigned long param)
3572 {
3573         int ret;
3574
3575         mutex_lock(&floppy_mutex);
3576         ret = fd_locked_ioctl(bdev, mode, cmd, param);
3577         mutex_unlock(&floppy_mutex);
3578
3579         return ret;
3580 }
3581
3582 #ifdef CONFIG_COMPAT
3583
3584 struct compat_floppy_drive_params {
3585         char            cmos;
3586         compat_ulong_t  max_dtr;
3587         compat_ulong_t  hlt;
3588         compat_ulong_t  hut;
3589         compat_ulong_t  srt;
3590         compat_ulong_t  spinup;
3591         compat_ulong_t  spindown;
3592         unsigned char   spindown_offset;
3593         unsigned char   select_delay;
3594         unsigned char   rps;
3595         unsigned char   tracks;
3596         compat_ulong_t  timeout;
3597         unsigned char   interleave_sect;
3598         struct floppy_max_errors max_errors;
3599         char            flags;
3600         char            read_track;
3601         short           autodetect[FD_AUTODETECT_SIZE];
3602         compat_int_t    checkfreq;
3603         compat_int_t    native_format;
3604 };
3605
3606 struct compat_floppy_drive_struct {
3607         signed char     flags;
3608         compat_ulong_t  spinup_date;
3609         compat_ulong_t  select_date;
3610         compat_ulong_t  first_read_date;
3611         short           probed_format;
3612         short           track;
3613         short           maxblock;
3614         short           maxtrack;
3615         compat_int_t    generation;
3616         compat_int_t    keep_data;
3617         compat_int_t    fd_ref;
3618         compat_int_t    fd_device;
3619         compat_int_t    last_checked;
3620         compat_caddr_t dmabuf;
3621         compat_int_t    bufblocks;
3622 };
3623
3624 struct compat_floppy_fdc_state {
3625         compat_int_t    spec1;
3626         compat_int_t    spec2;
3627         compat_int_t    dtr;
3628         unsigned char   version;
3629         unsigned char   dor;
3630         compat_ulong_t  address;
3631         unsigned int    rawcmd:2;
3632         unsigned int    reset:1;
3633         unsigned int    need_configure:1;
3634         unsigned int    perp_mode:2;
3635         unsigned int    has_fifo:1;
3636         unsigned int    driver_version;
3637         unsigned char   track[4];
3638 };
3639
3640 struct compat_floppy_write_errors {
3641         unsigned int    write_errors;
3642         compat_ulong_t  first_error_sector;
3643         compat_int_t    first_error_generation;
3644         compat_ulong_t  last_error_sector;
3645         compat_int_t    last_error_generation;
3646         compat_uint_t   badness;
3647 };
3648
3649 #define FDSETPRM32 _IOW(2, 0x42, struct compat_floppy_struct)
3650 #define FDDEFPRM32 _IOW(2, 0x43, struct compat_floppy_struct)
3651 #define FDSETDRVPRM32 _IOW(2, 0x90, struct compat_floppy_drive_params)
3652 #define FDGETDRVPRM32 _IOR(2, 0x11, struct compat_floppy_drive_params)
3653 #define FDGETDRVSTAT32 _IOR(2, 0x12, struct compat_floppy_drive_struct)
3654 #define FDPOLLDRVSTAT32 _IOR(2, 0x13, struct compat_floppy_drive_struct)
3655 #define FDGETFDCSTAT32 _IOR(2, 0x15, struct compat_floppy_fdc_state)
3656 #define FDWERRORGET32  _IOR(2, 0x17, struct compat_floppy_write_errors)
3657
3658 static int compat_set_geometry(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3659                     struct compat_floppy_struct __user *arg)
3660 {
3661         struct floppy_struct v;
3662         int drive, type;
3663         int err;
3664
3665         BUILD_BUG_ON(offsetof(struct floppy_struct, name) !=
3666                      offsetof(struct compat_floppy_struct, name));
3667
3668         if (!(mode & (FMODE_WRITE | FMODE_WRITE_IOCTL)))
3669                 return -EPERM;
3670
3671         memset(&v, 0, sizeof(struct floppy_struct));
3672         if (copy_from_user(&v, arg, offsetof(struct floppy_struct, name)))
3673                 return -EFAULT;
3674
3675         mutex_lock(&floppy_mutex);
3676         drive = (long)bdev->bd_disk->private_data;
3677         type = ITYPE(drive_state[drive].fd_device);
3678         err = set_geometry(cmd == FDSETPRM32 ? FDSETPRM : FDDEFPRM,
3679                         &v, drive, type, bdev);
3680         mutex_unlock(&floppy_mutex);
3681         return err;
3682 }
3683
3684 static int compat_get_prm(int drive,
3685                           struct compat_floppy_struct __user *arg)
3686 {
3687         struct compat_floppy_struct v;
3688         struct floppy_struct *p;
3689         int err;
3690
3691         memset(&v, 0, sizeof(v));
3692         mutex_lock(&floppy_mutex);
3693         err = get_floppy_geometry(drive, ITYPE(drive_state[drive].fd_device),
3694                                   &p);
3695         if (err) {
3696                 mutex_unlock(&floppy_mutex);
3697                 return err;
3698         }
3699         memcpy(&v, p, offsetof(struct floppy_struct, name));
3700         mutex_unlock(&floppy_mutex);
3701         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_struct)))
3702                 return -EFAULT;
3703         return 0;
3704 }
3705
3706 static int compat_setdrvprm(int drive,
3707                             struct compat_floppy_drive_params __user *arg)
3708 {
3709         struct compat_floppy_drive_params v;
3710
3711         if (!capable(CAP_SYS_ADMIN))
3712                 return -EPERM;
3713         if (copy_from_user(&v, arg, sizeof(struct compat_floppy_drive_params)))
3714                 return -EFAULT;
3715         if (!valid_floppy_drive_params(v.autodetect, v.native_format))
3716                 return -EINVAL;
3717         mutex_lock(&floppy_mutex);
3718         drive_params[drive].cmos = v.cmos;
3719         drive_params[drive].max_dtr = v.max_dtr;
3720         drive_params[drive].hlt = v.hlt;
3721         drive_params[drive].hut = v.hut;
3722         drive_params[drive].srt = v.srt;
3723         drive_params[drive].spinup = v.spinup;
3724         drive_params[drive].spindown = v.spindown;
3725         drive_params[drive].spindown_offset = v.spindown_offset;
3726         drive_params[drive].select_delay = v.select_delay;
3727         drive_params[drive].rps = v.rps;
3728         drive_params[drive].tracks = v.tracks;
3729         drive_params[drive].timeout = v.timeout;
3730         drive_params[drive].interleave_sect = v.interleave_sect;
3731         drive_params[drive].max_errors = v.max_errors;
3732         drive_params[drive].flags = v.flags;
3733         drive_params[drive].read_track = v.read_track;
3734         memcpy(drive_params[drive].autodetect, v.autodetect,
3735                sizeof(v.autodetect));
3736         drive_params[drive].checkfreq = v.checkfreq;
3737         drive_params[drive].native_format = v.native_format;
3738         mutex_unlock(&floppy_mutex);
3739         return 0;
3740 }
3741
3742 static int compat_getdrvprm(int drive,
3743                             struct compat_floppy_drive_params __user *arg)
3744 {
3745         struct compat_floppy_drive_params v;
3746
3747         memset(&v, 0, sizeof(struct compat_floppy_drive_params));
3748         mutex_lock(&floppy_mutex);
3749         v.cmos = drive_params[drive].cmos;
3750         v.max_dtr = drive_params[drive].max_dtr;
3751         v.hlt = drive_params[drive].hlt;
3752         v.hut = drive_params[drive].hut;
3753         v.srt = drive_params[drive].srt;
3754         v.spinup = drive_params[drive].spinup;
3755         v.spindown = drive_params[drive].spindown;
3756         v.spindown_offset = drive_params[drive].spindown_offset;
3757         v.select_delay = drive_params[drive].select_delay;
3758         v.rps = drive_params[drive].rps;
3759         v.tracks = drive_params[drive].tracks;
3760         v.timeout = drive_params[drive].timeout;
3761         v.interleave_sect = drive_params[drive].interleave_sect;
3762         v.max_errors = drive_params[drive].max_errors;
3763         v.flags = drive_params[drive].flags;
3764         v.read_track = drive_params[drive].read_track;
3765         memcpy(v.autodetect, drive_params[drive].autodetect,
3766                sizeof(v.autodetect));
3767         v.checkfreq = drive_params[drive].checkfreq;
3768         v.native_format = drive_params[drive].native_format;
3769         mutex_unlock(&floppy_mutex);
3770
3771         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_params)))
3772                 return -EFAULT;
3773         return 0;
3774 }
3775
3776 static int compat_getdrvstat(int drive, bool poll,
3777                             struct compat_floppy_drive_struct __user *arg)
3778 {
3779         struct compat_floppy_drive_struct v;
3780
3781         memset(&v, 0, sizeof(struct compat_floppy_drive_struct));
3782         mutex_lock(&floppy_mutex);
3783
3784         if (poll) {
3785                 if (lock_fdc(drive))
3786                         goto Eintr;
3787                 if (poll_drive(true, FD_RAW_NEED_DISK) == -EINTR)
3788                         goto Eintr;
3789                 process_fd_request();
3790         }
3791         v.spinup_date = drive_state[drive].spinup_date;
3792         v.select_date = drive_state[drive].select_date;
3793         v.first_read_date = drive_state[drive].first_read_date;
3794         v.probed_format = drive_state[drive].probed_format;
3795         v.track = drive_state[drive].track;
3796         v.maxblock = drive_state[drive].maxblock;
3797         v.maxtrack = drive_state[drive].maxtrack;
3798         v.generation = drive_state[drive].generation;
3799         v.keep_data = drive_state[drive].keep_data;
3800         v.fd_ref = drive_state[drive].fd_ref;
3801         v.fd_device = drive_state[drive].fd_device;
3802         v.last_checked = drive_state[drive].last_checked;
3803         v.dmabuf = (uintptr_t) drive_state[drive].dmabuf;
3804         v.bufblocks = drive_state[drive].bufblocks;
3805         mutex_unlock(&floppy_mutex);
3806
3807         if (copy_to_user(arg, &v, sizeof(struct compat_floppy_drive_struct)))
3808                 return -EFAULT;
3809         return 0;
3810 Eintr:
3811         mutex_unlock(&floppy_mutex);
3812         return -EINTR;
3813 }
3814
3815 static int compat_getfdcstat(int drive,
3816                             struct compat_floppy_fdc_state __user *arg)
3817 {
3818         struct compat_floppy_fdc_state v32;
3819         struct floppy_fdc_state v;
3820
3821         mutex_lock(&floppy_mutex);
3822         v = fdc_state[FDC(drive)];
3823         mutex_unlock(&floppy_mutex);
3824
3825         memset(&v32, 0, sizeof(struct compat_floppy_fdc_state));
3826         v32.spec1 = v.spec1;
3827         v32.spec2 = v.spec2;
3828         v32.dtr = v.dtr;
3829         v32.version = v.version;
3830         v32.dor = v.dor;
3831         v32.address = v.address;
3832         v32.rawcmd = v.rawcmd;
3833         v32.reset = v.reset;
3834         v32.need_configure = v.need_configure;
3835         v32.perp_mode = v.perp_mode;
3836         v32.has_fifo = v.has_fifo;
3837         v32.driver_version = v.driver_version;
3838         memcpy(v32.track, v.track, 4);
3839         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_fdc_state)))
3840                 return -EFAULT;
3841         return 0;
3842 }
3843
3844 static int compat_werrorget(int drive,
3845                             struct compat_floppy_write_errors __user *arg)
3846 {
3847         struct compat_floppy_write_errors v32;
3848         struct floppy_write_errors v;
3849
3850         memset(&v32, 0, sizeof(struct compat_floppy_write_errors));
3851         mutex_lock(&floppy_mutex);
3852         v = write_errors[drive];
3853         mutex_unlock(&floppy_mutex);
3854         v32.write_errors = v.write_errors;
3855         v32.first_error_sector = v.first_error_sector;
3856         v32.first_error_generation = v.first_error_generation;
3857         v32.last_error_sector = v.last_error_sector;
3858         v32.last_error_generation = v.last_error_generation;
3859         v32.badness = v.badness;
3860         if (copy_to_user(arg, &v32, sizeof(struct compat_floppy_write_errors)))
3861                 return -EFAULT;
3862         return 0;
3863 }
3864
3865 static int fd_compat_ioctl(struct block_device *bdev, fmode_t mode, unsigned int cmd,
3866                     unsigned long param)
3867 {
3868         int drive = (long)bdev->bd_disk->private_data;
3869         switch (cmd) {
3870         case CDROMEJECT: /* CD-ROM eject */
3871         case 0x6470:     /* SunOS floppy eject */
3872
3873         case FDMSGON:
3874         case FDMSGOFF:
3875         case FDSETEMSGTRESH:
3876         case FDFLUSH:
3877         case FDWERRORCLR:
3878         case FDEJECT:
3879         case FDCLRPRM:
3880         case FDFMTBEG:
3881         case FDRESET:
3882         case FDTWADDLE:
3883                 return fd_ioctl(bdev, mode, cmd, param);
3884         case FDSETMAXERRS:
3885         case FDGETMAXERRS:
3886         case FDGETDRVTYP:
3887         case FDFMTEND:
3888         case FDFMTTRK:
3889         case FDRAWCMD:
3890                 return fd_ioctl(bdev, mode, cmd,
3891                                 (unsigned long)compat_ptr(param));
3892         case FDSETPRM32:
3893         case FDDEFPRM32:
3894                 return compat_set_geometry(bdev, mode, cmd, compat_ptr(param));
3895         case FDGETPRM32:
3896                 return compat_get_prm(drive, compat_ptr(param));
3897         case FDSETDRVPRM32:
3898                 return compat_setdrvprm(drive, compat_ptr(param));
3899         case FDGETDRVPRM32:
3900                 return compat_getdrvprm(drive, compat_ptr(param));
3901         case FDPOLLDRVSTAT32:
3902                 return compat_getdrvstat(drive, true, compat_ptr(param));
3903         case FDGETDRVSTAT32:
3904                 return compat_getdrvstat(drive, false, compat_ptr(param));
3905         case FDGETFDCSTAT32:
3906                 return compat_getfdcstat(drive, compat_ptr(param));
3907         case FDWERRORGET32:
3908                 return compat_werrorget(drive, compat_ptr(param));
3909         }
3910         return -EINVAL;
3911 }
3912 #endif
3913
3914 static void __init config_types(void)
3915 {
3916         bool has_drive = false;
3917         int drive;
3918
3919         /* read drive info out of physical CMOS */
3920         drive = 0;
3921         if (!drive_params[drive].cmos)
3922                 drive_params[drive].cmos = FLOPPY0_TYPE;
3923         drive = 1;
3924         if (!drive_params[drive].cmos)
3925                 drive_params[drive].cmos = FLOPPY1_TYPE;
3926
3927         /* FIXME: additional physical CMOS drive detection should go here */
3928
3929         for (drive = 0; drive < N_DRIVE; drive++) {
3930                 unsigned int type = drive_params[drive].cmos;
3931                 struct floppy_drive_params *params;
3932                 const char *name = NULL;
3933                 char temparea[32];
3934
3935                 if (type < ARRAY_SIZE(default_drive_params)) {
3936                         params = &default_drive_params[type].params;
3937                         if (type) {
3938                                 name = default_drive_params[type].name;
3939                                 allowed_drive_mask |= 1 << drive;
3940                         } else
3941                                 allowed_drive_mask &= ~(1 << drive);
3942                 } else {
3943                         params = &default_drive_params[0].params;
3944                         snprintf(temparea, sizeof(temparea),
3945                                  "unknown type %d (usb?)", type);
3946                         name = temparea;
3947                 }
3948                 if (name) {
3949                         const char *prepend;
3950                         if (!has_drive) {
3951                                 prepend = "";
3952                                 has_drive = true;
3953                                 pr_info("Floppy drive(s):");
3954                         } else {
3955                                 prepend = ",";
3956                         }
3957
3958                         pr_cont("%s fd%d is %s", prepend, drive, name);
3959                 }
3960                 drive_params[drive] = *params;
3961         }
3962
3963         if (has_drive)
3964                 pr_cont("\n");
3965 }
3966
3967 static void floppy_release(struct gendisk *disk, fmode_t mode)
3968 {
3969         int drive = (long)disk->private_data;
3970
3971         mutex_lock(&floppy_mutex);
3972         mutex_lock(&open_lock);
3973         if (!drive_state[drive].fd_ref--) {
3974                 DPRINT("floppy_release with fd_ref == 0");
3975                 drive_state[drive].fd_ref = 0;
3976         }
3977         if (!drive_state[drive].fd_ref)
3978                 opened_bdev[drive] = NULL;
3979         mutex_unlock(&open_lock);
3980         mutex_unlock(&floppy_mutex);
3981 }
3982
3983 /*
3984  * floppy_open check for aliasing (/dev/fd0 can be the same as
3985  * /dev/PS0 etc), and disallows simultaneous access to the same
3986  * drive with different device numbers.
3987  */
3988 static int floppy_open(struct block_device *bdev, fmode_t mode)
3989 {
3990         int drive = (long)bdev->bd_disk->private_data;
3991         int old_dev, new_dev;
3992         int try;
3993         int res = -EBUSY;
3994         char *tmp;
3995
3996         mutex_lock(&floppy_mutex);
3997         mutex_lock(&open_lock);
3998         old_dev = drive_state[drive].fd_device;
3999         if (opened_bdev[drive] && opened_bdev[drive] != bdev)
4000                 goto out2;
4001
4002         if (!drive_state[drive].fd_ref && (drive_params[drive].flags & FD_BROKEN_DCL)) {
4003                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4004                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
4005         }
4006
4007         drive_state[drive].fd_ref++;
4008
4009         opened_bdev[drive] = bdev;
4010
4011         res = -ENXIO;
4012
4013         if (!floppy_track_buffer) {
4014                 /* if opening an ED drive, reserve a big buffer,
4015                  * else reserve a small one */
4016                 if ((drive_params[drive].cmos == 6) || (drive_params[drive].cmos == 5))
4017                         try = 64;       /* Only 48 actually useful */
4018                 else
4019                         try = 32;       /* Only 24 actually useful */
4020
4021                 tmp = (char *)fd_dma_mem_alloc(1024 * try);
4022                 if (!tmp && !floppy_track_buffer) {
4023                         try >>= 1;      /* buffer only one side */
4024                         INFBOUND(try, 16);
4025                         tmp = (char *)fd_dma_mem_alloc(1024 * try);
4026                 }
4027                 if (!tmp && !floppy_track_buffer)
4028                         fallback_on_nodma_alloc(&tmp, 2048 * try);
4029                 if (!tmp && !floppy_track_buffer) {
4030                         DPRINT("Unable to allocate DMA memory\n");
4031                         goto out;
4032                 }
4033                 if (floppy_track_buffer) {
4034                         if (tmp)
4035                                 fd_dma_mem_free((unsigned long)tmp, try * 1024);
4036                 } else {
4037                         buffer_min = buffer_max = -1;
4038                         floppy_track_buffer = tmp;
4039                         max_buffer_sectors = try;
4040                 }
4041         }
4042
4043         new_dev = MINOR(bdev->bd_dev);
4044         drive_state[drive].fd_device = new_dev;
4045         set_capacity(disks[drive][ITYPE(new_dev)], floppy_sizes[new_dev]);
4046         if (old_dev != -1 && old_dev != new_dev) {
4047                 if (buffer_drive == drive)
4048                         buffer_track = -1;
4049         }
4050
4051         if (fdc_state[FDC(drive)].rawcmd == 1)
4052                 fdc_state[FDC(drive)].rawcmd = 2;
4053
4054         if (!(mode & FMODE_NDELAY)) {
4055                 if (mode & (FMODE_READ|FMODE_WRITE)) {
4056                         drive_state[drive].last_checked = 0;
4057                         clear_bit(FD_OPEN_SHOULD_FAIL_BIT,
4058                                   &drive_state[drive].flags);
4059                         if (bdev_check_media_change(bdev))
4060                                 floppy_revalidate(bdev->bd_disk);
4061                         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags))
4062                                 goto out;
4063                         if (test_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags))
4064                                 goto out;
4065                 }
4066                 res = -EROFS;
4067                 if ((mode & FMODE_WRITE) &&
4068                     !test_bit(FD_DISK_WRITABLE_BIT, &drive_state[drive].flags))
4069                         goto out;
4070         }
4071         mutex_unlock(&open_lock);
4072         mutex_unlock(&floppy_mutex);
4073         return 0;
4074 out:
4075         drive_state[drive].fd_ref--;
4076
4077         if (!drive_state[drive].fd_ref)
4078                 opened_bdev[drive] = NULL;
4079 out2:
4080         mutex_unlock(&open_lock);
4081         mutex_unlock(&floppy_mutex);
4082         return res;
4083 }
4084
4085 /*
4086  * Check if the disk has been changed or if a change has been faked.
4087  */
4088 static unsigned int floppy_check_events(struct gendisk *disk,
4089                                         unsigned int clearing)
4090 {
4091         int drive = (long)disk->private_data;
4092
4093         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4094             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags))
4095                 return DISK_EVENT_MEDIA_CHANGE;
4096
4097         if (time_after(jiffies, drive_state[drive].last_checked + drive_params[drive].checkfreq)) {
4098                 if (lock_fdc(drive))
4099                         return 0;
4100                 poll_drive(false, 0);
4101                 process_fd_request();
4102         }
4103
4104         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4105             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4106             test_bit(drive, &fake_change) ||
4107             drive_no_geom(drive))
4108                 return DISK_EVENT_MEDIA_CHANGE;
4109         return 0;
4110 }
4111
4112 /*
4113  * This implements "read block 0" for floppy_revalidate().
4114  * Needed for format autodetection, checking whether there is
4115  * a disk in the drive, and whether that disk is writable.
4116  */
4117
4118 struct rb0_cbdata {
4119         int drive;
4120         struct completion complete;
4121 };
4122
4123 static void floppy_rb0_cb(struct bio *bio)
4124 {
4125         struct rb0_cbdata *cbdata = (struct rb0_cbdata *)bio->bi_private;
4126         int drive = cbdata->drive;
4127
4128         if (bio->bi_status) {
4129                 pr_info("floppy: error %d while reading block 0\n",
4130                         bio->bi_status);
4131                 set_bit(FD_OPEN_SHOULD_FAIL_BIT, &drive_state[drive].flags);
4132         }
4133         complete(&cbdata->complete);
4134 }
4135
4136 static int __floppy_read_block_0(struct block_device *bdev, int drive)
4137 {
4138         struct bio bio;
4139         struct bio_vec bio_vec;
4140         struct page *page;
4141         struct rb0_cbdata cbdata;
4142
4143         page = alloc_page(GFP_NOIO);
4144         if (!page) {
4145                 process_fd_request();
4146                 return -ENOMEM;
4147         }
4148
4149         cbdata.drive = drive;
4150
4151         bio_init(&bio, &bio_vec, 1);
4152         bio_set_dev(&bio, bdev);
4153         bio_add_page(&bio, page, block_size(bdev), 0);
4154
4155         bio.bi_iter.bi_sector = 0;
4156         bio.bi_flags |= (1 << BIO_QUIET);
4157         bio.bi_private = &cbdata;
4158         bio.bi_end_io = floppy_rb0_cb;
4159         bio_set_op_attrs(&bio, REQ_OP_READ, 0);
4160
4161         init_completion(&cbdata.complete);
4162
4163         submit_bio(&bio);
4164         process_fd_request();
4165
4166         wait_for_completion(&cbdata.complete);
4167
4168         __free_page(page);
4169
4170         return 0;
4171 }
4172
4173 /* revalidate the floppy disk, i.e. trigger format autodetection by reading
4174  * the bootblock (block 0). "Autodetection" is also needed to check whether
4175  * there is a disk in the drive at all... Thus we also do it for fixed
4176  * geometry formats */
4177 static int floppy_revalidate(struct gendisk *disk)
4178 {
4179         int drive = (long)disk->private_data;
4180         int cf;
4181         int res = 0;
4182
4183         if (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4184             test_bit(FD_VERIFY_BIT, &drive_state[drive].flags) ||
4185             test_bit(drive, &fake_change) ||
4186             drive_no_geom(drive)) {
4187                 if (WARN(atomic_read(&usage_count) == 0,
4188                          "VFS: revalidate called on non-open device.\n"))
4189                         return -EFAULT;
4190
4191                 res = lock_fdc(drive);
4192                 if (res)
4193                         return res;
4194                 cf = (test_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags) ||
4195                       test_bit(FD_VERIFY_BIT, &drive_state[drive].flags));
4196                 if (!(cf || test_bit(drive, &fake_change) || drive_no_geom(drive))) {
4197                         process_fd_request();   /*already done by another thread */
4198                         return 0;
4199                 }
4200                 drive_state[drive].maxblock = 0;
4201                 drive_state[drive].maxtrack = 0;
4202                 if (buffer_drive == drive)
4203                         buffer_track = -1;
4204                 clear_bit(drive, &fake_change);
4205                 clear_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4206                 if (cf)
4207                         drive_state[drive].generation++;
4208                 if (drive_no_geom(drive)) {
4209                         /* auto-sensing */
4210                         res = __floppy_read_block_0(opened_bdev[drive], drive);
4211                 } else {
4212                         if (cf)
4213                                 poll_drive(false, FD_RAW_NEED_DISK);
4214                         process_fd_request();
4215                 }
4216         }
4217         set_capacity(disk, floppy_sizes[drive_state[drive].fd_device]);
4218         return res;
4219 }
4220
4221 static const struct block_device_operations floppy_fops = {
4222         .owner                  = THIS_MODULE,
4223         .open                   = floppy_open,
4224         .release                = floppy_release,
4225         .ioctl                  = fd_ioctl,
4226         .getgeo                 = fd_getgeo,
4227         .check_events           = floppy_check_events,
4228 #ifdef CONFIG_COMPAT
4229         .compat_ioctl           = fd_compat_ioctl,
4230 #endif
4231 };
4232
4233 /*
4234  * Floppy Driver initialization
4235  * =============================
4236  */
4237
4238 /* Determine the floppy disk controller type */
4239 /* This routine was written by David C. Niemi */
4240 static char __init get_fdc_version(int fdc)
4241 {
4242         int r;
4243
4244         output_byte(fdc, FD_DUMPREGS);  /* 82072 and better know DUMPREGS */
4245         if (fdc_state[fdc].reset)
4246                 return FDC_NONE;
4247         r = result(fdc);
4248         if (r <= 0x00)
4249                 return FDC_NONE;        /* No FDC present ??? */
4250         if ((r == 1) && (reply_buffer[ST0] == 0x80)) {
4251                 pr_info("FDC %d is an 8272A\n", fdc);
4252                 return FDC_8272A;       /* 8272a/765 don't know DUMPREGS */
4253         }
4254         if (r != 10) {
4255                 pr_info("FDC %d init: DUMPREGS: unexpected return of %d bytes.\n",
4256                         fdc, r);
4257                 return FDC_UNKNOWN;
4258         }
4259
4260         if (!fdc_configure(fdc)) {
4261                 pr_info("FDC %d is an 82072\n", fdc);
4262                 return FDC_82072;       /* 82072 doesn't know CONFIGURE */
4263         }
4264
4265         output_byte(fdc, FD_PERPENDICULAR);
4266         if (need_more_output(fdc) == MORE_OUTPUT) {
4267                 output_byte(fdc, 0);
4268         } else {
4269                 pr_info("FDC %d is an 82072A\n", fdc);
4270                 return FDC_82072A;      /* 82072A as found on Sparcs. */
4271         }
4272
4273         output_byte(fdc, FD_UNLOCK);
4274         r = result(fdc);
4275         if ((r == 1) && (reply_buffer[ST0] == 0x80)) {
4276                 pr_info("FDC %d is a pre-1991 82077\n", fdc);
4277                 return FDC_82077_ORIG;  /* Pre-1991 82077, doesn't know
4278                                          * LOCK/UNLOCK */
4279         }
4280         if ((r != 1) || (reply_buffer[ST0] != 0x00)) {
4281                 pr_info("FDC %d init: UNLOCK: unexpected return of %d bytes.\n",
4282                         fdc, r);
4283                 return FDC_UNKNOWN;
4284         }
4285         output_byte(fdc, FD_PARTID);
4286         r = result(fdc);
4287         if (r != 1) {
4288                 pr_info("FDC %d init: PARTID: unexpected return of %d bytes.\n",
4289                         fdc, r);
4290                 return FDC_UNKNOWN;
4291         }
4292         if (reply_buffer[ST0] == 0x80) {
4293                 pr_info("FDC %d is a post-1991 82077\n", fdc);
4294                 return FDC_82077;       /* Revised 82077AA passes all the tests */
4295         }
4296         switch (reply_buffer[ST0] >> 5) {
4297         case 0x0:
4298                 /* Either a 82078-1 or a 82078SL running at 5Volt */
4299                 pr_info("FDC %d is an 82078.\n", fdc);
4300                 return FDC_82078;
4301         case 0x1:
4302                 pr_info("FDC %d is a 44pin 82078\n", fdc);
4303                 return FDC_82078;
4304         case 0x2:
4305                 pr_info("FDC %d is a S82078B\n", fdc);
4306                 return FDC_S82078B;
4307         case 0x3:
4308                 pr_info("FDC %d is a National Semiconductor PC87306\n", fdc);
4309                 return FDC_87306;
4310         default:
4311                 pr_info("FDC %d init: 82078 variant with unknown PARTID=%d.\n",
4312                         fdc, reply_buffer[ST0] >> 5);
4313                 return FDC_82078_UNKN;
4314         }
4315 }                               /* get_fdc_version */
4316
4317 /* lilo configuration */
4318
4319 static void __init floppy_set_flags(int *ints, int param, int param2)
4320 {
4321         int i;
4322
4323         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4324                 if (param)
4325                         default_drive_params[i].params.flags |= param2;
4326                 else
4327                         default_drive_params[i].params.flags &= ~param2;
4328         }
4329         DPRINT("%s flag 0x%x\n", param2 ? "Setting" : "Clearing", param);
4330 }
4331
4332 static void __init daring(int *ints, int param, int param2)
4333 {
4334         int i;
4335
4336         for (i = 0; i < ARRAY_SIZE(default_drive_params); i++) {
4337                 if (param) {
4338                         default_drive_params[i].params.select_delay = 0;
4339                         default_drive_params[i].params.flags |=
4340                             FD_SILENT_DCL_CLEAR;
4341                 } else {
4342                         default_drive_params[i].params.select_delay =
4343                             2 * HZ / 100;
4344                         default_drive_params[i].params.flags &=
4345                             ~FD_SILENT_DCL_CLEAR;
4346                 }
4347         }
4348         DPRINT("Assuming %s floppy hardware\n", param ? "standard" : "broken");
4349 }
4350
4351 static void __init set_cmos(int *ints, int dummy, int dummy2)
4352 {
4353         int current_drive = 0;
4354
4355         if (ints[0] != 2) {
4356                 DPRINT("wrong number of parameters for CMOS\n");
4357                 return;
4358         }
4359         current_drive = ints[1];
4360         if (current_drive < 0 || current_drive >= 8) {
4361                 DPRINT("bad drive for set_cmos\n");
4362                 return;
4363         }
4364 #if N_FDC > 1
4365         if (current_drive >= 4 && !FDC2)
4366                 FDC2 = 0x370;
4367 #endif
4368         drive_params[current_drive].cmos = ints[2];
4369         DPRINT("setting CMOS code to %d\n", ints[2]);
4370 }
4371
4372 static struct param_table {
4373         const char *name;
4374         void (*fn) (int *ints, int param, int param2);
4375         int *var;
4376         int def_param;
4377         int param2;
4378 } config_params[] __initdata = {
4379         {"allowed_drive_mask", NULL, &allowed_drive_mask, 0xff, 0}, /* obsolete */
4380         {"all_drives", NULL, &allowed_drive_mask, 0xff, 0},     /* obsolete */
4381         {"asus_pci", NULL, &allowed_drive_mask, 0x33, 0},
4382         {"irq", NULL, &FLOPPY_IRQ, 6, 0},
4383         {"dma", NULL, &FLOPPY_DMA, 2, 0},
4384         {"daring", daring, NULL, 1, 0},
4385 #if N_FDC > 1
4386         {"two_fdc", NULL, &FDC2, 0x370, 0},
4387         {"one_fdc", NULL, &FDC2, 0, 0},
4388 #endif
4389         {"thinkpad", floppy_set_flags, NULL, 1, FD_INVERTED_DCL},
4390         {"broken_dcl", floppy_set_flags, NULL, 1, FD_BROKEN_DCL},
4391         {"messages", floppy_set_flags, NULL, 1, FTD_MSG},
4392         {"silent_dcl_clear", floppy_set_flags, NULL, 1, FD_SILENT_DCL_CLEAR},
4393         {"debug", floppy_set_flags, NULL, 1, FD_DEBUG},
4394         {"nodma", NULL, &can_use_virtual_dma, 1, 0},
4395         {"omnibook", NULL, &can_use_virtual_dma, 1, 0},
4396         {"yesdma", NULL, &can_use_virtual_dma, 0, 0},
4397         {"fifo_depth", NULL, &fifo_depth, 0xa, 0},
4398         {"nofifo", NULL, &no_fifo, 0x20, 0},
4399         {"usefifo", NULL, &no_fifo, 0, 0},
4400         {"cmos", set_cmos, NULL, 0, 0},
4401         {"slow", NULL, &slow_floppy, 1, 0},
4402         {"unexpected_interrupts", NULL, &print_unex, 1, 0},
4403         {"no_unexpected_interrupts", NULL, &print_unex, 0, 0},
4404         {"L40SX", NULL, &print_unex, 0, 0}
4405
4406         EXTRA_FLOPPY_PARAMS
4407 };
4408
4409 static int __init floppy_setup(char *str)
4410 {
4411         int i;
4412         int param;
4413         int ints[11];
4414
4415         str = get_options(str, ARRAY_SIZE(ints), ints);
4416         if (str) {
4417                 for (i = 0; i < ARRAY_SIZE(config_params); i++) {
4418                         if (strcmp(str, config_params[i].name) == 0) {
4419                                 if (ints[0])
4420                                         param = ints[1];
4421                                 else
4422                                         param = config_params[i].def_param;
4423                                 if (config_params[i].fn)
4424                                         config_params[i].fn(ints, param,
4425                                                             config_params[i].
4426                                                             param2);
4427                                 if (config_params[i].var) {
4428                                         DPRINT("%s=%d\n", str, param);
4429                                         *config_params[i].var = param;
4430                                 }
4431                                 return 1;
4432                         }
4433                 }
4434         }
4435         if (str) {
4436                 DPRINT("unknown floppy option [%s]\n", str);
4437
4438                 DPRINT("allowed options are:");
4439                 for (i = 0; i < ARRAY_SIZE(config_params); i++)
4440                         pr_cont(" %s", config_params[i].name);
4441                 pr_cont("\n");
4442         } else
4443                 DPRINT("botched floppy option\n");
4444         DPRINT("Read Documentation/admin-guide/blockdev/floppy.rst\n");
4445         return 0;
4446 }
4447
4448 static int have_no_fdc = -ENODEV;
4449
4450 static ssize_t floppy_cmos_show(struct device *dev,
4451                                 struct device_attribute *attr, char *buf)
4452 {
4453         struct platform_device *p = to_platform_device(dev);
4454         int drive;
4455
4456         drive = p->id;
4457         return sprintf(buf, "%X\n", drive_params[drive].cmos);
4458 }
4459
4460 static DEVICE_ATTR(cmos, 0444, floppy_cmos_show, NULL);
4461
4462 static struct attribute *floppy_dev_attrs[] = {
4463         &dev_attr_cmos.attr,
4464         NULL
4465 };
4466
4467 ATTRIBUTE_GROUPS(floppy_dev);
4468
4469 static void floppy_device_release(struct device *dev)
4470 {
4471 }
4472
4473 static int floppy_resume(struct device *dev)
4474 {
4475         int fdc;
4476         int saved_drive;
4477
4478         saved_drive = current_drive;
4479         for (fdc = 0; fdc < N_FDC; fdc++)
4480                 if (fdc_state[fdc].address != -1)
4481                         user_reset_fdc(REVDRIVE(fdc, 0), FD_RESET_ALWAYS, false);
4482         set_fdc(saved_drive);
4483         return 0;
4484 }
4485
4486 static const struct dev_pm_ops floppy_pm_ops = {
4487         .resume = floppy_resume,
4488         .restore = floppy_resume,
4489 };
4490
4491 static struct platform_driver floppy_driver = {
4492         .driver = {
4493                    .name = "floppy",
4494                    .pm = &floppy_pm_ops,
4495         },
4496 };
4497
4498 static const struct blk_mq_ops floppy_mq_ops = {
4499         .queue_rq = floppy_queue_rq,
4500 };
4501
4502 static struct platform_device floppy_device[N_DRIVE];
4503 static bool registered[N_DRIVE];
4504
4505 static bool floppy_available(int drive)
4506 {
4507         if (!(allowed_drive_mask & (1 << drive)))
4508                 return false;
4509         if (fdc_state[FDC(drive)].version == FDC_NONE)
4510                 return false;
4511         return true;
4512 }
4513
4514 static int floppy_alloc_disk(unsigned int drive, unsigned int type)
4515 {
4516         struct gendisk *disk;
4517
4518         disk = blk_mq_alloc_disk(&tag_sets[drive], NULL);
4519         if (IS_ERR(disk))
4520                 return PTR_ERR(disk);
4521
4522         blk_queue_max_hw_sectors(disk->queue, 64);
4523         disk->major = FLOPPY_MAJOR;
4524         disk->first_minor = TOMINOR(drive) | (type << 2);
4525         disk->minors = 1;
4526         disk->fops = &floppy_fops;
4527         disk->events = DISK_EVENT_MEDIA_CHANGE;
4528         if (type)
4529                 sprintf(disk->disk_name, "fd%d_type%d", drive, type);
4530         else
4531                 sprintf(disk->disk_name, "fd%d", drive);
4532         /* to be cleaned up... */
4533         disk->private_data = (void *)(long)drive;
4534         disk->flags |= GENHD_FL_REMOVABLE;
4535
4536         disks[drive][type] = disk;
4537         return 0;
4538 }
4539
4540 static DEFINE_MUTEX(floppy_probe_lock);
4541
4542 static void floppy_probe(dev_t dev)
4543 {
4544         unsigned int drive = (MINOR(dev) & 3) | ((MINOR(dev) & 0x80) >> 5);
4545         unsigned int type = (MINOR(dev) >> 2) & 0x1f;
4546
4547         if (drive >= N_DRIVE || !floppy_available(drive) ||
4548             type >= ARRAY_SIZE(floppy_type))
4549                 return;
4550
4551         mutex_lock(&floppy_probe_lock);
4552         if (!disks[drive][type]) {
4553                 if (floppy_alloc_disk(drive, type) == 0)
4554                         add_disk(disks[drive][type]);
4555         }
4556         mutex_unlock(&floppy_probe_lock);
4557 }
4558
4559 static int __init do_floppy_init(void)
4560 {
4561         int i, unit, drive, err;
4562
4563         set_debugt();
4564         interruptjiffies = resultjiffies = jiffies;
4565
4566 #if defined(CONFIG_PPC)
4567         if (check_legacy_ioport(FDC1))
4568                 return -ENODEV;
4569 #endif
4570
4571         raw_cmd = NULL;
4572
4573         floppy_wq = alloc_ordered_workqueue("floppy", 0);
4574         if (!floppy_wq)
4575                 return -ENOMEM;
4576
4577         for (drive = 0; drive < N_DRIVE; drive++) {
4578                 memset(&tag_sets[drive], 0, sizeof(tag_sets[drive]));
4579                 tag_sets[drive].ops = &floppy_mq_ops;
4580                 tag_sets[drive].nr_hw_queues = 1;
4581                 tag_sets[drive].nr_maps = 1;
4582                 tag_sets[drive].queue_depth = 2;
4583                 tag_sets[drive].numa_node = NUMA_NO_NODE;
4584                 tag_sets[drive].flags = BLK_MQ_F_SHOULD_MERGE;
4585                 err = blk_mq_alloc_tag_set(&tag_sets[drive]);
4586                 if (err)
4587                         goto out_put_disk;
4588
4589                 err = floppy_alloc_disk(drive, 0);
4590                 if (err)
4591                         goto out_put_disk;
4592
4593                 timer_setup(&motor_off_timer[drive], motor_off_callback, 0);
4594         }
4595
4596         err = __register_blkdev(FLOPPY_MAJOR, "fd", floppy_probe);
4597         if (err)
4598                 goto out_put_disk;
4599
4600         err = platform_driver_register(&floppy_driver);
4601         if (err)
4602                 goto out_unreg_blkdev;
4603
4604         for (i = 0; i < 256; i++)
4605                 if (ITYPE(i))
4606                         floppy_sizes[i] = floppy_type[ITYPE(i)].size;
4607                 else
4608                         floppy_sizes[i] = MAX_DISK_SIZE << 1;
4609
4610         reschedule_timeout(MAXTIMEOUT, "floppy init");
4611         config_types();
4612
4613         for (i = 0; i < N_FDC; i++) {
4614                 memset(&fdc_state[i], 0, sizeof(*fdc_state));
4615                 fdc_state[i].dtr = -1;
4616                 fdc_state[i].dor = 0x4;
4617 #if defined(__sparc__) || defined(__mc68000__)
4618         /*sparcs/sun3x don't have a DOR reset which we can fall back on to */
4619 #ifdef __mc68000__
4620                 if (MACH_IS_SUN3X)
4621 #endif
4622                         fdc_state[i].version = FDC_82072A;
4623 #endif
4624         }
4625
4626         use_virtual_dma = can_use_virtual_dma & 1;
4627         fdc_state[0].address = FDC1;
4628         if (fdc_state[0].address == -1) {
4629                 cancel_delayed_work(&fd_timeout);
4630                 err = -ENODEV;
4631                 goto out_unreg_driver;
4632         }
4633 #if N_FDC > 1
4634         fdc_state[1].address = FDC2;
4635 #endif
4636
4637         current_fdc = 0;        /* reset fdc in case of unexpected interrupt */
4638         err = floppy_grab_irq_and_dma();
4639         if (err) {
4640                 cancel_delayed_work(&fd_timeout);
4641                 err = -EBUSY;
4642                 goto out_unreg_driver;
4643         }
4644
4645         /* initialise drive state */
4646         for (drive = 0; drive < N_DRIVE; drive++) {
4647                 memset(&drive_state[drive], 0, sizeof(drive_state[drive]));
4648                 memset(&write_errors[drive], 0, sizeof(write_errors[drive]));
4649                 set_bit(FD_DISK_NEWCHANGE_BIT, &drive_state[drive].flags);
4650                 set_bit(FD_DISK_CHANGED_BIT, &drive_state[drive].flags);
4651                 set_bit(FD_VERIFY_BIT, &drive_state[drive].flags);
4652                 drive_state[drive].fd_device = -1;
4653                 floppy_track_buffer = NULL;
4654                 max_buffer_sectors = 0;
4655         }
4656         /*
4657          * Small 10 msec delay to let through any interrupt that
4658          * initialization might have triggered, to not
4659          * confuse detection:
4660          */
4661         msleep(10);
4662
4663         for (i = 0; i < N_FDC; i++) {
4664                 fdc_state[i].driver_version = FD_DRIVER_VERSION;
4665                 for (unit = 0; unit < 4; unit++)
4666                         fdc_state[i].track[unit] = 0;
4667                 if (fdc_state[i].address == -1)
4668                         continue;
4669                 fdc_state[i].rawcmd = 2;
4670                 if (user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false)) {
4671                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4672                         floppy_release_regions(i);
4673                         fdc_state[i].address = -1;
4674                         fdc_state[i].version = FDC_NONE;
4675                         continue;
4676                 }
4677                 /* Try to determine the floppy controller type */
4678                 fdc_state[i].version = get_fdc_version(i);
4679                 if (fdc_state[i].version == FDC_NONE) {
4680                         /* free ioports reserved by floppy_grab_irq_and_dma() */
4681                         floppy_release_regions(i);
4682                         fdc_state[i].address = -1;
4683                         continue;
4684                 }
4685                 if (can_use_virtual_dma == 2 &&
4686                     fdc_state[i].version < FDC_82072A)
4687                         can_use_virtual_dma = 0;
4688
4689                 have_no_fdc = 0;
4690                 /* Not all FDCs seem to be able to handle the version command
4691                  * properly, so force a reset for the standard FDC clones,
4692                  * to avoid interrupt garbage.
4693                  */
4694                 user_reset_fdc(REVDRIVE(i, 0), FD_RESET_ALWAYS, false);
4695         }
4696         current_fdc = 0;
4697         cancel_delayed_work(&fd_timeout);
4698         current_drive = 0;
4699         initialized = true;
4700         if (have_no_fdc) {
4701                 DPRINT("no floppy controllers found\n");
4702                 err = have_no_fdc;
4703                 goto out_release_dma;
4704         }
4705
4706         for (drive = 0; drive < N_DRIVE; drive++) {
4707                 if (!floppy_available(drive))
4708                         continue;
4709
4710                 floppy_device[drive].name = floppy_device_name;
4711                 floppy_device[drive].id = drive;
4712                 floppy_device[drive].dev.release = floppy_device_release;
4713                 floppy_device[drive].dev.groups = floppy_dev_groups;
4714
4715                 err = platform_device_register(&floppy_device[drive]);
4716                 if (err)
4717                         goto out_remove_drives;
4718
4719                 registered[drive] = true;
4720
4721                 device_add_disk(&floppy_device[drive].dev, disks[drive][0],
4722                                 NULL);
4723         }
4724
4725         return 0;
4726
4727 out_remove_drives:
4728         while (drive--) {
4729                 if (floppy_available(drive)) {
4730                         del_gendisk(disks[drive][0]);
4731                         if (registered[drive])
4732                                 platform_device_unregister(&floppy_device[drive]);
4733                 }
4734         }
4735 out_release_dma:
4736         if (atomic_read(&usage_count))
4737                 floppy_release_irq_and_dma();
4738 out_unreg_driver:
4739         platform_driver_unregister(&floppy_driver);
4740 out_unreg_blkdev:
4741         unregister_blkdev(FLOPPY_MAJOR, "fd");
4742 out_put_disk:
4743         destroy_workqueue(floppy_wq);
4744         for (drive = 0; drive < N_DRIVE; drive++) {
4745                 if (!disks[drive][0])
4746                         break;
4747                 del_timer_sync(&motor_off_timer[drive]);
4748                 blk_cleanup_disk(disks[drive][0]);
4749                 blk_mq_free_tag_set(&tag_sets[drive]);
4750         }
4751         return err;
4752 }
4753
4754 #ifndef MODULE
4755 static __init void floppy_async_init(void *data, async_cookie_t cookie)
4756 {
4757         do_floppy_init();
4758 }
4759 #endif
4760
4761 static int __init floppy_init(void)
4762 {
4763 #ifdef MODULE
4764         return do_floppy_init();
4765 #else
4766         /* Don't hold up the bootup by the floppy initialization */
4767         async_schedule(floppy_async_init, NULL);
4768         return 0;
4769 #endif
4770 }
4771
4772 static const struct io_region {
4773         int offset;
4774         int size;
4775 } io_regions[] = {
4776         { 2, 1 },
4777         /* address + 3 is sometimes reserved by pnp bios for motherboard */
4778         { 4, 2 },
4779         /* address + 6 is reserved, and may be taken by IDE.
4780          * Unfortunately, Adaptec doesn't know this :-(, */
4781         { 7, 1 },
4782 };
4783
4784 static void floppy_release_allocated_regions(int fdc, const struct io_region *p)
4785 {
4786         while (p != io_regions) {
4787                 p--;
4788                 release_region(fdc_state[fdc].address + p->offset, p->size);
4789         }
4790 }
4791
4792 #define ARRAY_END(X) (&((X)[ARRAY_SIZE(X)]))
4793
4794 static int floppy_request_regions(int fdc)
4795 {
4796         const struct io_region *p;
4797
4798         for (p = io_regions; p < ARRAY_END(io_regions); p++) {
4799                 if (!request_region(fdc_state[fdc].address + p->offset,
4800                                     p->size, "floppy")) {
4801                         DPRINT("Floppy io-port 0x%04lx in use\n",
4802                                fdc_state[fdc].address + p->offset);
4803                         floppy_release_allocated_regions(fdc, p);
4804                         return -EBUSY;
4805                 }
4806         }
4807         return 0;
4808 }
4809
4810 static void floppy_release_regions(int fdc)
4811 {
4812         floppy_release_allocated_regions(fdc, ARRAY_END(io_regions));
4813 }
4814
4815 static int floppy_grab_irq_and_dma(void)
4816 {
4817         int fdc;
4818
4819         if (atomic_inc_return(&usage_count) > 1)
4820                 return 0;
4821
4822         /*
4823          * We might have scheduled a free_irq(), wait it to
4824          * drain first:
4825          */
4826         flush_workqueue(floppy_wq);
4827
4828         if (fd_request_irq()) {
4829                 DPRINT("Unable to grab IRQ%d for the floppy driver\n",
4830                        FLOPPY_IRQ);
4831                 atomic_dec(&usage_count);
4832                 return -1;
4833         }
4834         if (fd_request_dma()) {
4835                 DPRINT("Unable to grab DMA%d for the floppy driver\n",
4836                        FLOPPY_DMA);
4837                 if (can_use_virtual_dma & 2)
4838                         use_virtual_dma = can_use_virtual_dma = 1;
4839                 if (!(can_use_virtual_dma & 1)) {
4840                         fd_free_irq();
4841                         atomic_dec(&usage_count);
4842                         return -1;
4843                 }
4844         }
4845
4846         for (fdc = 0; fdc < N_FDC; fdc++) {
4847                 if (fdc_state[fdc].address != -1) {
4848                         if (floppy_request_regions(fdc))
4849                                 goto cleanup;
4850                 }
4851         }
4852         for (fdc = 0; fdc < N_FDC; fdc++) {
4853                 if (fdc_state[fdc].address != -1) {
4854                         reset_fdc_info(fdc, 1);
4855                         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4856                 }
4857         }
4858
4859         set_dor(0, ~0, 8);      /* avoid immediate interrupt */
4860
4861         for (fdc = 0; fdc < N_FDC; fdc++)
4862                 if (fdc_state[fdc].address != -1)
4863                         fdc_outb(fdc_state[fdc].dor, fdc, FD_DOR);
4864         /*
4865          * The driver will try and free resources and relies on us
4866          * to know if they were allocated or not.
4867          */
4868         current_fdc = 0;
4869         irqdma_allocated = 1;
4870         return 0;
4871 cleanup:
4872         fd_free_irq();
4873         fd_free_dma();
4874         while (--fdc >= 0)
4875                 floppy_release_regions(fdc);
4876         current_fdc = 0;
4877         atomic_dec(&usage_count);
4878         return -1;
4879 }
4880
4881 static void floppy_release_irq_and_dma(void)
4882 {
4883         int fdc;
4884 #ifndef __sparc__
4885         int drive;
4886 #endif
4887         long tmpsize;
4888         unsigned long tmpaddr;
4889
4890         if (!atomic_dec_and_test(&usage_count))
4891                 return;
4892
4893         if (irqdma_allocated) {
4894                 fd_disable_dma();
4895                 fd_free_dma();
4896                 fd_free_irq();
4897                 irqdma_allocated = 0;
4898         }
4899         set_dor(0, ~0, 8);
4900 #if N_FDC > 1
4901         set_dor(1, ~8, 0);
4902 #endif
4903
4904         if (floppy_track_buffer && max_buffer_sectors) {
4905                 tmpsize = max_buffer_sectors * 1024;
4906                 tmpaddr = (unsigned long)floppy_track_buffer;
4907                 floppy_track_buffer = NULL;
4908                 max_buffer_sectors = 0;
4909                 buffer_min = buffer_max = -1;
4910                 fd_dma_mem_free(tmpaddr, tmpsize);
4911         }
4912 #ifndef __sparc__
4913         for (drive = 0; drive < N_FDC * 4; drive++)
4914                 if (timer_pending(motor_off_timer + drive))
4915                         pr_info("motor off timer %d still active\n", drive);
4916 #endif
4917
4918         if (delayed_work_pending(&fd_timeout))
4919                 pr_info("floppy timer still active:%s\n", timeout_message);
4920         if (delayed_work_pending(&fd_timer))
4921                 pr_info("auxiliary floppy timer still active\n");
4922         if (work_pending(&floppy_work))
4923                 pr_info("work still pending\n");
4924         for (fdc = 0; fdc < N_FDC; fdc++)
4925                 if (fdc_state[fdc].address != -1)
4926                         floppy_release_regions(fdc);
4927 }
4928
4929 #ifdef MODULE
4930
4931 static char *floppy;
4932
4933 static void __init parse_floppy_cfg_string(char *cfg)
4934 {
4935         char *ptr;
4936
4937         while (*cfg) {
4938                 ptr = cfg;
4939                 while (*cfg && *cfg != ' ' && *cfg != '\t')
4940                         cfg++;
4941                 if (*cfg) {
4942                         *cfg = '\0';
4943                         cfg++;
4944                 }
4945                 if (*ptr)
4946                         floppy_setup(ptr);
4947         }
4948 }
4949
4950 static int __init floppy_module_init(void)
4951 {
4952         if (floppy)
4953                 parse_floppy_cfg_string(floppy);
4954         return floppy_init();
4955 }
4956 module_init(floppy_module_init);
4957
4958 static void __exit floppy_module_exit(void)
4959 {
4960         int drive, i;
4961
4962         unregister_blkdev(FLOPPY_MAJOR, "fd");
4963         platform_driver_unregister(&floppy_driver);
4964
4965         destroy_workqueue(floppy_wq);
4966
4967         for (drive = 0; drive < N_DRIVE; drive++) {
4968                 del_timer_sync(&motor_off_timer[drive]);
4969
4970                 if (floppy_available(drive)) {
4971                         for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4972                                 if (disks[drive][i])
4973                                         del_gendisk(disks[drive][i]);
4974                         }
4975                         if (registered[drive])
4976                                 platform_device_unregister(&floppy_device[drive]);
4977                 }
4978                 for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4979                         if (disks[drive][i])
4980                                 blk_cleanup_queue(disks[drive][i]->queue);
4981                 }
4982                 blk_mq_free_tag_set(&tag_sets[drive]);
4983
4984                 /*
4985                  * These disks have not called add_disk().  Don't put down
4986                  * queue reference in put_disk().
4987                  */
4988                 if (!(allowed_drive_mask & (1 << drive)) ||
4989                     fdc_state[FDC(drive)].version == FDC_NONE) {
4990                         for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4991                                 if (disks[drive][i])
4992                                         disks[drive][i]->queue = NULL;
4993                         }
4994                 }
4995
4996                 for (i = 0; i < ARRAY_SIZE(floppy_type); i++) {
4997                         if (disks[drive][i])
4998                                 put_disk(disks[drive][i]);
4999                 }
5000         }
5001
5002         cancel_delayed_work_sync(&fd_timeout);
5003         cancel_delayed_work_sync(&fd_timer);
5004
5005         if (atomic_read(&usage_count))
5006                 floppy_release_irq_and_dma();
5007
5008         /* eject disk, if any */
5009         fd_eject(0);
5010 }
5011
5012 module_exit(floppy_module_exit);
5013
5014 module_param(floppy, charp, 0);
5015 module_param(FLOPPY_IRQ, int, 0);
5016 module_param(FLOPPY_DMA, int, 0);
5017 MODULE_AUTHOR("Alain L. Knaff");
5018 MODULE_LICENSE("GPL");
5019
5020 /* This doesn't actually get used other than for module information */
5021 static const struct pnp_device_id floppy_pnpids[] = {
5022         {"PNP0700", 0},
5023         {}
5024 };
5025
5026 MODULE_DEVICE_TABLE(pnp, floppy_pnpids);
5027
5028 #else
5029
5030 __setup("floppy=", floppy_setup);
5031 module_init(floppy_init)
5032 #endif
5033
5034 MODULE_ALIAS_BLOCKDEV_MAJOR(FLOPPY_MAJOR);