drivers/mmc/card/block-sprd.c

   1 /*
   2  * Block driver for media (i.e., flash cards)
   3  *
   4  * Copyright 2002 Hewlett-Packard Company
   5  * Copyright 2005-2008 Pierre Ossman
   6  *
   7  * Use consistent with the GNU GPL is permitted,
   8  * provided that this copyright notice is
   9  * preserved in its entirety in all copies and derived works.
  10  *
  11  * HEWLETT-PACKARD COMPANY MAKES NO WARRANTIES, EXPRESSED OR IMPLIED,
  12  * AS TO THE USEFULNESS OR CORRECTNESS OF THIS CODE OR ITS
  13  * FITNESS FOR ANY PARTICULAR PURPOSE.
  14  *
  15  * Many thanks to Alessandro Rubini and Jonathan Corbet!
  16  *
  17  * Author:  Andrew Christian
  18  *          28 May 2002
  19  */
  20 #include <linux/moduleparam.h>
  21 #include <linux/module.h>
  22 #include <linux/init.h>
  23
  24 #include <linux/kernel.h>
  25 #include <linux/fs.h>
  26 #include <linux/slab.h>
  27 #include <linux/errno.h>
  28 #include <linux/hdreg.h>
  29 #include <linux/kdev_t.h>
  30 #include <linux/blkdev.h>
  31 #include <linux/mutex.h>
  32 #include <linux/scatterlist.h>
  33 #include <linux/string_helpers.h>
  34 #include <linux/delay.h>
  35 #include <linux/capability.h>
  36 #include <linux/compat.h>
  37
  38 #define CREATE_TRACE_POINTS
  39 #include <trace/events/mmc.h>
  40
  41 #include <linux/mmc/ioctl.h>
  42 #include <linux/mmc/card.h>
  43 #include <linux/mmc/host.h>
  44 #include <linux/mmc/mmc.h>
  45 #include <linux/mmc/sd.h>
  46
  47 #include <asm/uaccess.h>
  48
  49 #include "queue.h"
  50
  51 MODULE_ALIAS("mmc:block");
  52 #ifdef MODULE_PARAM_PREFIX
  53 #undef MODULE_PARAM_PREFIX
  54 #endif
  55 #define MODULE_PARAM_PREFIX "mmcblk."
  56
  57 #define INAND_CMD38_ARG_EXT_CSD  113
  58 #define INAND_CMD38_ARG_ERASE    0x00
  59 #define INAND_CMD38_ARG_TRIM     0x01
  60 #define INAND_CMD38_ARG_SECERASE 0x80
  61 #define INAND_CMD38_ARG_SECTRIM1 0x81
  62 #define INAND_CMD38_ARG_SECTRIM2 0x88
  63 #define MMC_BLK_TIMEOUT_MS  (2000)   /* 2 seconds timeout */
  64
  65 #define mmc_req_rel_wr(req)     ((req->cmd_flags & REQ_FUA) && \
  66                                   (rq_data_dir(req) == WRITE))
  67 #define PACKED_CMD_VER  0x01
  68 #define PACKED_CMD_WR   0x02
  69
  70 static DEFINE_MUTEX(block_mutex);
  71
  72 /*
  73  * The defaults come from config options but can be overriden by module
  74  * or bootarg options.
  75  */
  76 static int perdev_minors = CONFIG_MMC_BLOCK_MINORS;
  77
  78 /*
  79  * We've only got one major, so number of mmcblk devices is
  80  * limited to 256 / number of minors per device.
  81  */
  82 static int max_devices;
  83
  84 /* 256 minors, so at most 256 separate devices */
  85 static DECLARE_BITMAP(dev_use, 256);
  86 static DECLARE_BITMAP(name_use, 256);
  87
  88 /*
  89  * There is one mmc_blk_data per slot.
  90  */
  91 struct mmc_blk_data {
  92         spinlock_t      lock;
  93         struct gendisk  *disk;
  94         struct mmc_queue queue;
  95         struct list_head part;
  96
  97         unsigned int    flags;
  98 #define MMC_BLK_CMD23   (1 << 0)        /* Can do SET_BLOCK_COUNT for multiblock */
  99 #define MMC_BLK_REL_WR  (1 << 1)        /* MMC Reliable write support */
 100 #define MMC_BLK_PACKED_CMD      (1 << 2)        /* MMC packed command support */
 101
 102         unsigned int    usage;
 103         unsigned int    read_only;
 104         unsigned int    part_type;
 105         unsigned int    name_idx;
 106         unsigned int    reset_done;
 107 #define MMC_BLK_READ            BIT(0)
 108 #define MMC_BLK_WRITE           BIT(1)
 109 #define MMC_BLK_DISCARD         BIT(2)
 110 #define MMC_BLK_SECDISCARD      BIT(3)
 111
 112         /*
 113          * Only set in main mmc_blk_data associated
 114          * with mmc_card with mmc_set_drvdata, and keeps
 115          * track of the current selected device partition.
 116          */
 117         unsigned int    part_curr;
 118         struct device_attribute force_ro;
 119         struct device_attribute power_ro_lock;
 120         int     area_type;
 121 };
 122
 123 static DEFINE_MUTEX(open_lock);
 124
 125 enum {
 126         MMC_PACKED_NR_IDX = -1,
 127         MMC_PACKED_NR_ZERO,
 128         MMC_PACKED_NR_SINGLE,
 129 };
 130
 131 module_param(perdev_minors, int, 0444);
 132 MODULE_PARM_DESC(perdev_minors, "Minors numbers to allocate per device");
 133
 134 static inline int mmc_blk_part_switch(struct mmc_card *card,
 135                                       struct mmc_blk_data *md);
 136 static int get_card_status(struct mmc_card *card, u32 *status, int retries);
 137
 138 extern void mmc_power_off(struct mmc_host *host);
 139 static void bad_card_and_remove(struct mmc_host *host);
 140 extern void mmc_remove_card(struct mmc_card *card);
 141 extern void mmc_detach_bus(struct mmc_host *host);
 142 static inline void mmc_blk_clear_packed(struct mmc_queue_req *mqrq)
 143 {
 144         struct mmc_packed *packed = mqrq->packed;
 145
 146         BUG_ON(!packed);
 147
 148         mqrq->cmd_type = MMC_PACKED_NONE;
 149         packed->nr_entries = MMC_PACKED_NR_ZERO;
 150         packed->idx_failure = MMC_PACKED_NR_IDX;
 151         packed->retries = 0;
 152         packed->blocks = 0;
 153 }
 154
 155 static struct mmc_blk_data *mmc_blk_get(struct gendisk *disk)
 156 {
 157         struct mmc_blk_data *md;
 158
 159         mutex_lock(&open_lock);
 160         md = disk->private_data;
 161         if (md && md->usage == 0)
 162                 md = NULL;
 163         if (md)
 164                 md->usage++;
 165         mutex_unlock(&open_lock);
 166
 167         return md;
 168 }
 169
 170 static inline int mmc_get_devidx(struct gendisk *disk)
 171 {
 172         int devidx = disk->first_minor / perdev_minors;
 173         return devidx;
 174 }
 175
 176 static void mmc_blk_put(struct mmc_blk_data *md)
 177 {
 178         mutex_lock(&open_lock);
 179         md->usage--;
 180         if (md->usage == 0) {
 181                 int devidx = mmc_get_devidx(md->disk);
 182                 blk_cleanup_queue(md->queue.queue);
 183
 184                 __clear_bit(devidx, dev_use);
 185
 186                 put_disk(md->disk);
 187                 kfree(md);
 188         }
 189         mutex_unlock(&open_lock);
 190 }
 191
 192 static ssize_t power_ro_lock_show(struct device *dev,
 193                 struct device_attribute *attr, char *buf)
 194 {
 195         int ret;
 196         struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
 197         struct mmc_card *card = md->queue.card;
 198         int locked = 0;
 199
 200         if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PERM_WP_EN)
 201                 locked = 2;
 202         else if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PWR_WP_EN)
 203                 locked = 1;
 204
 205         ret = snprintf(buf, PAGE_SIZE, "%d\n", locked);
 206
 207         return ret;
 208 }
 209
 210 static ssize_t power_ro_lock_store(struct device *dev,
 211                 struct device_attribute *attr, const char *buf, size_t count)
 212 {
 213         int ret;
 214         struct mmc_blk_data *md, *part_md;
 215         struct mmc_card *card;
 216         unsigned long set;
 217
 218         if (kstrtoul(buf, 0, &set))
 219                 return -EINVAL;
 220
 221         if (set != 1)
 222                 return count;
 223
 224         md = mmc_blk_get(dev_to_disk(dev));
 225         card = md->queue.card;
 226
 227         mmc_claim_host(card->host);
 228
 229         ret = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL, EXT_CSD_BOOT_WP,
 230                                 card->ext_csd.boot_ro_lock |
 231                                 EXT_CSD_BOOT_WP_B_PWR_WP_EN,
 232                                 card->ext_csd.part_time);
 233         if (ret)
 234                 pr_err("%s: Locking boot partition ro until next power on failed: %d\n", md->disk->disk_name, ret);
 235         else
 236                 card->ext_csd.boot_ro_lock |= EXT_CSD_BOOT_WP_B_PWR_WP_EN;
 237
 238         mmc_release_host(card->host);
 239
 240         if (!ret) {
 241                 pr_info("%s: Locking boot partition ro until next power on\n",
 242                         md->disk->disk_name);
 243                 set_disk_ro(md->disk, 1);
 244
 245                 list_for_each_entry(part_md, &md->part, part)
 246                         if (part_md->area_type == MMC_BLK_DATA_AREA_BOOT) {
 247                                 pr_info("%s: Locking boot partition ro until next power on\n", part_md->disk->disk_name);
 248                                 set_disk_ro(part_md->disk, 1);
 249                         }
 250         }
 251
 252         mmc_blk_put(md);
 253         return count;
 254 }
 255
 256 static ssize_t force_ro_show(struct device *dev, struct device_attribute *attr,
 257                              char *buf)
 258 {
 259         int ret;
 260         struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
 261
 262         ret = snprintf(buf, PAGE_SIZE, "%d\n",
 263                        get_disk_ro(dev_to_disk(dev)) ^
 264                        md->read_only);
 265         mmc_blk_put(md);
 266         return ret;
 267 }
 268
 269 static ssize_t force_ro_store(struct device *dev, struct device_attribute *attr,
 270                               const char *buf, size_t count)
 271 {
 272         int ret;
 273         char *end;
 274         struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
 275         unsigned long set = simple_strtoul(buf, &end, 0);
 276         if (end == buf) {
 277                 ret = -EINVAL;
 278                 goto out;
 279         }
 280
 281         set_disk_ro(dev_to_disk(dev), set || md->read_only);
 282         ret = count;
 283 out:
 284         mmc_blk_put(md);
 285         return ret;
 286 }
 287
 288 static int mmc_blk_open(struct block_device *bdev, fmode_t mode)
 289 {
 290         struct mmc_blk_data *md = mmc_blk_get(bdev->bd_disk);
 291         int ret = -ENXIO;
 292
 293         mutex_lock(&block_mutex);
 294         if (md) {
 295                 if (md->usage == 2)
 296                         check_disk_change(bdev);
 297                 ret = 0;
 298
 299                 if ((mode & FMODE_WRITE) && md->read_only) {
 300                         mmc_blk_put(md);
 301                         ret = -EROFS;
 302                 }
 303         }
 304         mutex_unlock(&block_mutex);
 305
 306         return ret;
 307 }
 308
 309 static void mmc_blk_release(struct gendisk *disk, fmode_t mode)
 310 {
 311         struct mmc_blk_data *md = disk->private_data;
 312
 313         mutex_lock(&block_mutex);
 314         mmc_blk_put(md);
 315         mutex_unlock(&block_mutex);
 316 }
 317
 318 static int
 319 mmc_blk_getgeo(struct block_device *bdev, struct hd_geometry *geo)
 320 {
 321         geo->cylinders = get_capacity(bdev->bd_disk) / (4 * 16);
 322         geo->heads = 4;
 323         geo->sectors = 16;
 324         return 0;
 325 }
 326
 327 struct mmc_blk_ioc_data {
 328         struct mmc_ioc_cmd ic;
 329         unsigned char *buf;
 330         u64 buf_bytes;
 331 };
 332
 333 static struct mmc_blk_ioc_data *mmc_blk_ioctl_copy_from_user(
 334         struct mmc_ioc_cmd __user *user)
 335 {
 336         struct mmc_blk_ioc_data *idata;
 337         int err;
 338
 339         idata = kzalloc(sizeof(*idata), GFP_KERNEL);
 340         if (!idata) {
 341                 err = -ENOMEM;
 342                 goto out;
 343         }
 344
 345         if (copy_from_user(&idata->ic, user, sizeof(idata->ic))) {
 346                 err = -EFAULT;
 347                 goto idata_err;
 348         }
 349
 350         idata->buf_bytes = (u64) idata->ic.blksz * idata->ic.blocks;
 351         if (idata->buf_bytes > MMC_IOC_MAX_BYTES) {
 352                 err = -EOVERFLOW;
 353                 goto idata_err;
 354         }
 355
 356         if (!idata->buf_bytes)
 357                 return idata;
 358
 359         idata->buf = kzalloc(idata->buf_bytes, GFP_KERNEL);
 360         if (!idata->buf) {
 361                 err = -ENOMEM;
 362                 goto idata_err;
 363         }
 364
 365         if (copy_from_user(idata->buf, (void __user *)(unsigned long)
 366                                         idata->ic.data_ptr, idata->buf_bytes)) {
 367                 err = -EFAULT;
 368                 goto copy_err;
 369         }
 370
 371         return idata;
 372
 373 copy_err:
 374         kfree(idata->buf);
 375 idata_err:
 376         kfree(idata);
 377 out:
 378         return ERR_PTR(err);
 379 }
 380
 381 static int ioctl_rpmb_card_status_poll(struct mmc_card *card, u32 *status,
 382                                        u32 retries_max)
 383 {
 384         int err;
 385         u32 retry_count = 0;
 386
 387         if (!status || !retries_max)
 388                 return -EINVAL;
 389
 390         do {
 391                 err = get_card_status(card, status, 5);
 392                 if (err)
 393                         break;
 394
 395                 if (!R1_STATUS(*status) &&
 396                                 (R1_CURRENT_STATE(*status) != R1_STATE_PRG))
 397                         break; /* RPMB programming operation complete */
 398
 399                 /*
 400                  * Rechedule to give the MMC device a chance to continue
 401                  * processing the previous command without being polled too
 402                  * frequently.
 403                  */
 404                 usleep_range(1000, 5000);
 405         } while (++retry_count < retries_max);
 406
 407         if (retry_count == retries_max)
 408                 err = -EPERM;
 409
 410         return err;
 411 }
 412
 413 static int mmc_blk_ioctl_cmd(struct block_device *bdev,
 414         struct mmc_ioc_cmd __user *ic_ptr)
 415 {
 416         struct mmc_blk_ioc_data *idata;
 417         struct mmc_blk_data *md;
 418         struct mmc_card *card;
 419         struct mmc_command cmd = {0};
 420         struct mmc_data data = {0};
 421         struct mmc_request mrq = {NULL};
 422         struct scatterlist sg;
 423         int err;
 424         int is_rpmb = false;
 425         u32 status = 0;
 426
 427         /*
 428          * The caller must have CAP_SYS_RAWIO, and must be calling this on the
 429          * whole block device, not on a partition.  This prevents overspray
 430          * between sibling partitions.
 431          */
 432         if ((!capable(CAP_SYS_RAWIO)) || (bdev != bdev->bd_contains))
 433                 return -EPERM;
 434
 435         idata = mmc_blk_ioctl_copy_from_user(ic_ptr);
 436         if (IS_ERR(idata))
 437                 return PTR_ERR(idata);
 438
 439         md = mmc_blk_get(bdev->bd_disk);
 440         if (!md) {
 441                 err = -EINVAL;
 442                 goto cmd_err;
 443         }
 444
 445         if (md->area_type & MMC_BLK_DATA_AREA_RPMB)
 446                 is_rpmb = true;
 447
 448         card = md->queue.card;
 449         if (IS_ERR(card)) {
 450                 err = PTR_ERR(card);
 451                 goto cmd_done;
 452         }
 453
 454         cmd.opcode = idata->ic.opcode;
 455         cmd.arg = idata->ic.arg;
 456         cmd.flags = idata->ic.flags;
 457
 458         if (idata->buf_bytes) {
 459                 data.sg = &sg;
 460                 data.sg_len = 1;
 461                 data.blksz = idata->ic.blksz;
 462                 data.blocks = idata->ic.blocks;
 463
 464                 sg_init_one(data.sg, idata->buf, idata->buf_bytes);
 465
 466                 if (idata->ic.write_flag)
 467                         data.flags = MMC_DATA_WRITE;
 468                 else
 469                         data.flags = MMC_DATA_READ;
 470
 471                 /* data.flags must already be set before doing this. */
 472                 mmc_set_data_timeout(&data, card);
 473
 474                 /* Allow overriding the timeout_ns for empirical tuning. */
 475                 if (idata->ic.data_timeout_ns)
 476                         data.timeout_ns = idata->ic.data_timeout_ns;
 477
 478                 if ((cmd.flags & MMC_RSP_R1B) == MMC_RSP_R1B) {
 479                         /*
 480                          * Pretend this is a data transfer and rely on the
 481                          * host driver to compute timeout.  When all host
 482                          * drivers support cmd.cmd_timeout for R1B, this
 483                          * can be changed to:
 484                          *
 485                          *     mrq.data = NULL;
 486                          *     cmd.cmd_timeout = idata->ic.cmd_timeout_ms;
 487                          */
 488                         data.timeout_ns = idata->ic.cmd_timeout_ms * 1000000;
 489                 }
 490
 491                 mrq.data = &data;
 492         }
 493
 494         mrq.cmd = &cmd;
 495
 496         mmc_claim_host(card->host);
 497
 498         err = mmc_blk_part_switch(card, md);
 499         if (err)
 500                 goto cmd_rel_host;
 501
 502         if (idata->ic.is_acmd) {
 503                 err = mmc_app_cmd(card->host, card);
 504                 if (err)
 505                         goto cmd_rel_host;
 506         }
 507
 508         if (is_rpmb) {
 509              if((idata->buf[511]==0x01)||(idata->buf[511]==0x03)){
 510                         printk(" set [31] bit \n");
 511                      err = mmc_set_blockcount(card, data.blocks,1 );
 512                 }
 513                 else{
 514                         printk(" no set [31] bit \n");
 515                     err = mmc_set_blockcount(card, data.blocks,0);
 516                 }
 517                 if (err)
 518                         goto cmd_rel_host;
 519         }
 520
 521         mmc_wait_for_req(card->host, &mrq);
 522
 523         if (cmd.error) {
 524                 dev_err(mmc_dev(card->host), "%s: cmd error %d\n",
 525                                                 __func__, cmd.error);
 526                 err = cmd.error;
 527                 goto cmd_rel_host;
 528         }
 529         if (data.error) {
 530                 dev_err(mmc_dev(card->host), "%s: data error %d\n",
 531                                                 __func__, data.error);
 532                 err = data.error;
 533                 goto cmd_rel_host;
 534         }
 535
 536         /*
 537          * According to the SD specs, some commands require a delay after
 538          * issuing the command.
 539          */
 540         if (idata->ic.postsleep_min_us)
 541                 usleep_range(idata->ic.postsleep_min_us, idata->ic.postsleep_max_us);
 542
 543         if (copy_to_user(&(ic_ptr->response), cmd.resp, sizeof(cmd.resp))) {
 544                 err = -EFAULT;
 545                 goto cmd_rel_host;
 546         }
 547
 548         if (!idata->ic.write_flag) {
 549                 if (copy_to_user((void __user *)(unsigned long) idata->ic.data_ptr,
 550                                                 idata->buf, idata->buf_bytes)) {
 551                         err = -EFAULT;
 552                         goto cmd_rel_host;
 553                 }
 554         }
 555
 556         if (is_rpmb) {
 557                 /*
 558                  * Ensure RPMB command has completed by polling CMD13
 559                  * "Send Status".
 560                  */
 561                 err = ioctl_rpmb_card_status_poll(card, &status, 5);
 562                 if (err)
 563                         dev_err(mmc_dev(card->host),
 564                                         "%s: Card Status=0x%08X, error %d\n",
 565                                         __func__, status, err);
 566         }
 567
 568 cmd_rel_host:
 569         mmc_release_host(card->host);
 570
 571 cmd_done:
 572         mmc_blk_put(md);
 573 cmd_err:
 574         kfree(idata->buf);
 575         kfree(idata);
 576         return err;
 577 }
 578
 579 static int mmc_blk_ioctl(struct block_device *bdev, fmode_t mode,
 580         unsigned int cmd, unsigned long arg)
 581 {
 582         int ret = -EINVAL;
 583         if (cmd == MMC_IOC_CMD)
 584                 ret = mmc_blk_ioctl_cmd(bdev, (struct mmc_ioc_cmd __user *)arg);
 585         return ret;
 586 }
 587
 588 #ifdef CONFIG_COMPAT
 589 static int mmc_blk_compat_ioctl(struct block_device *bdev, fmode_t mode,
 590         unsigned int cmd, unsigned long arg)
 591 {
 592         return mmc_blk_ioctl(bdev, mode, cmd, (unsigned long) compat_ptr(arg));
 593 }
 594 #endif
 595
 596 static const struct block_device_operations mmc_bdops = {
 597         .open                   = mmc_blk_open,
 598         .release                = mmc_blk_release,
 599         .getgeo                 = mmc_blk_getgeo,
 600         .owner                  = THIS_MODULE,
 601         .ioctl                  = mmc_blk_ioctl,
 602 #ifdef CONFIG_COMPAT
 603         .compat_ioctl           = mmc_blk_compat_ioctl,
 604 #endif
 605 };
 606
 607 static inline int mmc_blk_part_switch(struct mmc_card *card,
 608                                       struct mmc_blk_data *md)
 609 {
 610         int ret;
 611         struct mmc_blk_data *main_md = mmc_get_drvdata(card);
 612
 613         if (main_md->part_curr == md->part_type)
 614                 return 0;
 615
 616         if (mmc_card_mmc(card)) {
 617                 u8 part_config = card->ext_csd.part_config;
 618
 619                 part_config &= ~EXT_CSD_PART_CONFIG_ACC_MASK;
 620                 part_config |= md->part_type;
 621
 622                 ret = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
 623                                  EXT_CSD_PART_CONFIG, part_config,
 624                                  card->ext_csd.part_time);
 625                 if (ret)
 626                         return ret;
 627
 628                 card->ext_csd.part_config = part_config;
 629         }
 630
 631         main_md->part_curr = md->part_type;
 632         return 0;
 633 }
 634
 635 static u32 mmc_sd_num_wr_blocks(struct mmc_card *card)
 636 {
 637         int err;
 638         u32 result;
 639         __be32 *blocks;
 640
 641         struct mmc_request mrq = {NULL};
 642         struct mmc_command cmd = {0};
 643         struct mmc_data data = {0};
 644
 645         struct scatterlist sg;
 646
 647         cmd.opcode = MMC_APP_CMD;
 648         cmd.arg = card->rca << 16;
 649         cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_AC;
 650
 651         err = mmc_wait_for_cmd(card->host, &cmd, 0);
 652         if (err)
 653                 return (u32)-1;
 654         if (!mmc_host_is_spi(card->host) && !(cmd.resp[0] & R1_APP_CMD))
 655                 return (u32)-1;
 656
 657         memset(&cmd, 0, sizeof(struct mmc_command));
 658
 659         cmd.opcode = SD_APP_SEND_NUM_WR_BLKS;
 660         cmd.arg = 0;
 661         cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
 662
 663         data.blksz = 4;
 664         data.blocks = 1;
 665         data.flags = MMC_DATA_READ;
 666         data.sg = &sg;
 667         data.sg_len = 1;
 668         mmc_set_data_timeout(&data, card);
 669
 670         mrq.cmd = &cmd;
 671         mrq.data = &data;
 672
 673         blocks = kmalloc(4, GFP_KERNEL);
 674         if (!blocks)
 675                 return (u32)-1;
 676
 677         sg_init_one(&sg, blocks, 4);
 678
 679         mmc_wait_for_req(card->host, &mrq);
 680
 681         result = ntohl(*blocks);
 682         kfree(blocks);
 683
 684         if (cmd.error || data.error)
 685                 result = (u32)-1;
 686
 687         return result;
 688 }
 689
 690 static int send_stop(struct mmc_card *card, u32 *status)
 691 {
 692         struct mmc_command cmd = {0};
 693         int err;
 694
 695         cmd.opcode = MMC_STOP_TRANSMISSION;
 696         cmd.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
 697         err = mmc_wait_for_cmd(card->host, &cmd, 5);
 698         if (err == 0)
 699                 *status = cmd.resp[0];
 700         return err;
 701 }
 702
 703 static int get_card_status(struct mmc_card *card, u32 *status, int retries)
 704 {
 705         struct mmc_command cmd = {0};
 706         int err;
 707
 708         cmd.opcode = MMC_SEND_STATUS;
 709         if (!mmc_host_is_spi(card->host))
 710                 cmd.arg = card->rca << 16;
 711         cmd.flags = MMC_RSP_SPI_R2 | MMC_RSP_R1 | MMC_CMD_AC;
 712         err = mmc_wait_for_cmd(card->host, &cmd, retries);
 713         if (err == 0)
 714                 *status = cmd.resp[0];
 715         return err;
 716 }
 717
 718 #ifdef MMC_CARD_ERROR_LOGGING
 719 static void mmc_error_count_log(struct mmc_card *card, int index, int error, u32 status)
 720 {
 721         struct mmc_card_error_log *err_log;
 722         int i = 0;
 723         int cpu = raw_smp_processor_id();
 724
 725         err_log = card->err_log;
 726
 727         for (i = 0; i < 2; i++) {
 728                 if (err_log[index + i].err_type == error) {
 729                         index += i;
 730                         break;
 731                 }
 732         }
 733
 734         if (i >= 2)
 735                 return;
 736
 737         if (!err_log[index].status)
 738                 err_log[index].status = status;
 739         if (!err_log[index].first_issue_time)
 740                 err_log[index].first_issue_time = cpu_clock(cpu);
 741         err_log[index].last_issue_time = cpu_clock(cpu);
 742         err_log[index].count++;
 743 }
 744
 745 static void mmc_card_error_logging(struct mmc_card *card, struct mmc_blk_request *brq, u32 status)
 746 {
 747         int index = 0;
 748
 749         if (brq->sbc.error)
 750                 mmc_error_count_log(card, index, brq->sbc.error, status);
 751         if (brq->cmd.error) {
 752                 index = 2;
 753                 mmc_error_count_log(card, index, brq->cmd.error, status);
 754         }
 755         if (brq->data.error) {
 756                 index = 4;
 757                 mmc_error_count_log(card, index, brq->data.error, status);
 758         }
 759         if (brq->stop.error) {
 760                 index = 6;
 761                 mmc_error_count_log(card, index, brq->stop.error, status);
 762         }
 763
 764         return;
 765 }
 766
 767 static ssize_t error_count_show(struct device *dev,
 768                 struct device_attribute *attr, char *buf)
 769 {
 770         struct gendisk *disk;
 771         struct mmc_blk_data *md;
 772         struct mmc_card *card = NULL;
 773         struct mmc_card_error_log *err_log;
 774         int total_len = 0;
 775         int i = 0;
 776
 777         disk = dev_to_disk(dev);
 778
 779         if (disk) {
 780                 md = disk->private_data;
 781                 if (md)
 782                         card = md->queue.card;
 783         }
 784         if (!card) {
 785                 total_len = snprintf(buf, PAGE_SIZE, "It's no card error..\n");
 786                 goto out;
 787         }
 788
 789         err_log = card->err_log;
 790
 791         total_len += snprintf(buf, PAGE_SIZE,
 792                         "type: err statuks: first_issue_time: last_issue_time: count\n");
 793
 794         for (i = 0; i < 8; i++) {
 795                 total_len += snprintf(buf + (sizeof(char)*68*(i+1)), PAGE_SIZE,
 796                                 "%4s:%4d 0x%08x %16llu, %16llu, %10d\n",
 797                                 err_log[i].type, err_log[i].err_type,
 798                                 err_log[i].status,
 799                                 err_log[i].first_issue_time,
 800                                 err_log[i].last_issue_time,
 801                                 err_log[i].count);
 802         }
 803
 804 out:
 805         return total_len;
 806 }
 807
 808 static ssize_t error_count_store(struct device *dev,
 809                 struct device_attribute *attr, const char *buf, size_t len)
 810 {
 811         struct gendisk *disk;
 812         struct mmc_blk_data *md;
 813         struct mmc_card *card = NULL;
 814         int value;
 815
 816         disk = dev_to_disk(dev);
 817
 818         if (disk) {
 819                 md = disk->private_data;
 820                 if (md)
 821                         card = md->queue.card;
 822         }
 823         if (!card)
 824                 goto out;
 825
 826         if (kstrtoint(buf, 0, &value))
 827                 goto out;
 828
 829 out:
 830         return len;
 831 }
 832
 833 static void mmc_card_debug_log_sysfs_init(struct mmc_card *card)
 834 {
 835         struct mmc_blk_data *md = mmc_get_drvdata(card);
 836
 837         card->error_count.show = error_count_show;
 838         card->error_count.store = error_count_store;
 839         sysfs_attr_init(&card->error_count.attr);
 840         card->error_count.attr.name = "err_count";
 841
 842         card->error_count.attr.mode = S_IRUGO | S_IWUSR;
 843
 844         if (device_create_file((disk_to_dev(md->disk)), &card->error_count)) {
 845                 pr_err("%s: Failed to create err_count sysfs entry\n",
 846                                 mmc_hostname(card->host));
 847                 return;
 848         }
 849         /* init. card->err_log */
 850         snprintf(card->err_log[0].type, sizeof(char)*4, "sbc ");
 851         snprintf(card->err_log[1].type, sizeof(char)*4, "sbc ");
 852         card->err_log[0].err_type = -EILSEQ;
 853         card->err_log[1].err_type = -ETIMEDOUT;
 854
 855         snprintf(card->err_log[2].type, sizeof(char)*4, "I/O ");
 856         snprintf(card->err_log[3].type, sizeof(char)*4, "I/O ");
 857         card->err_log[2].err_type = -EILSEQ;
 858         card->err_log[3].err_type = -ETIMEDOUT;
 859
 860         snprintf(card->err_log[4].type, sizeof(char)*4, "data");
 861         snprintf(card->err_log[5].type, sizeof(char)*4, "data");
 862         card->err_log[4].err_type = -EILSEQ;
 863         card->err_log[5].err_type = -ETIMEDOUT;
 864
 865         snprintf(card->err_log[6].type, sizeof(char)*4, "stop");
 866         snprintf(card->err_log[7].type, sizeof(char)*4, "stop");
 867         card->err_log[6].err_type = -EILSEQ;
 868         card->err_log[7].err_type = -ETIMEDOUT;
 869 }
 870 #endif
 871
 872 #define ERR_NOMEDIUM    3
 873 #define ERR_RETRY       2
 874 #define ERR_ABORT       1
 875 #define ERR_CONTINUE    0
 876
 877 static int mmc_blk_cmd_error(struct request *req, const char *name, int error,
 878         bool status_valid, u32 status)
 879 {
 880         switch (error) {
 881         case -EILSEQ:
 882                 /* response crc error, retry the r/w cmd */
 883                 pr_err("%s: %s sending %s command, card status %#x\n",
 884                         req->rq_disk->disk_name, "response CRC error",
 885                         name, status);
 886                 return ERR_RETRY;
 887
 888         case -ETIMEDOUT:
 889                 pr_err("%s: %s sending %s command, card status %#x\n",
 890                         req->rq_disk->disk_name, "timed out", name, status);
 891
 892                 /* If the status cmd initially failed, retry the r/w cmd */
 893                 if (!status_valid) {
 894                         pr_err("%s: status not valid, retrying timeout\n", req->rq_disk->disk_name);
 895                         return ERR_RETRY;
 896                 }
 897                 /*
 898                  * If it was a r/w cmd crc error, or illegal command
 899                  * (eg, issued in wrong state) then retry - we should
 900                  * have corrected the state problem above.
 901                  */
 902                 if (status & (R1_COM_CRC_ERROR | R1_ILLEGAL_COMMAND)) {
 903                         pr_err("%s: command error, retrying timeout\n", req->rq_disk->disk_name);
 904                         return ERR_RETRY;
 905                 }
 906
 907                 /* Otherwise abort the command */
 908                 pr_err("%s: not retrying timeout\n", req->rq_disk->disk_name);
 909                 return ERR_ABORT;
 910
 911         default:
 912                 /* We don't understand the error code the driver gave us */
 913                 pr_err("%s: unknown error %d sending read/write command, card status %#x\n",
 914                        req->rq_disk->disk_name, error, status);
 915                 return ERR_ABORT;
 916         }
 917 }
 918
 919 /*
 920  * Initial r/w and stop cmd error recovery.
 921  * We don't know whether the card received the r/w cmd or not, so try to
 922  * restore things back to a sane state.  Essentially, we do this as follows:
 923  * - Obtain card status.  If the first attempt to obtain card status fails,
 924  *   the status word will reflect the failed status cmd, not the failed
 925  *   r/w cmd.  If we fail to obtain card status, it suggests we can no
 926  *   longer communicate with the card.
 927  * - Check the card state.  If the card received the cmd but there was a
 928  *   transient problem with the response, it might still be in a data transfer
 929  *   mode.  Try to send it a stop command.  If this fails, we can't recover.
 930  * - If the r/w cmd failed due to a response CRC error, it was probably
 931  *   transient, so retry the cmd.
 932  * - If the r/w cmd timed out, but we didn't get the r/w cmd status, retry.
 933  * - If the r/w cmd timed out, and the r/w cmd failed due to CRC error or
 934  *   illegal cmd, retry.
 935  * Otherwise we don't understand what happened, so abort.
 936  */
 937 static int mmc_blk_cmd_recovery(struct mmc_card *card, struct request *req,
 938         struct mmc_blk_request *brq, int *ecc_err, int *gen_err)
 939 {
 940         bool prev_cmd_status_valid = true;
 941         u32 status, stop_status = 0;
 942         int err, retry;
 943
 944         if (mmc_card_removed(card))
 945                 return ERR_NOMEDIUM;
 946
 947         /*
 948          * Try to get card status which indicates both the card state
 949          * and why there was no response.  If the first attempt fails,
 950          * we can't be sure the returned status is for the r/w command.
 951          */
 952         for (retry = 2; retry >= 0; retry--) {
 953                 err = get_card_status(card, &status, 0);
 954                 if (!err)
 955                         break;
 956
 957                 prev_cmd_status_valid = false;
 958                 pr_err("%s: error %d sending status command, %sing\n",
 959                        req->rq_disk->disk_name, err, retry ? "retry" : "abort");
 960         }
 961
 962         /* We couldn't get a response from the card.  Give up. */
 963         if (err) {
 964                 /* Check if the card is removed */
 965                 if (mmc_detect_card_removed(card->host))
 966                         return ERR_NOMEDIUM;
 967                 return ERR_ABORT;
 968         }
 969
 970         /* Flag ECC errors */
 971         if ((status & R1_CARD_ECC_FAILED) ||
 972             (brq->stop.resp[0] & R1_CARD_ECC_FAILED) ||
 973             (brq->cmd.resp[0] & R1_CARD_ECC_FAILED))
 974                 *ecc_err = 1;
 975
 976 #ifdef MMC_CARD_ERROR_LOGGING
 977         mmc_card_error_logging(card, brq, status);
 978 #endif
 979
 980         /* Flag General errors */
 981         if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ)
 982                 if ((status & R1_ERROR) ||
 983                         (brq->stop.resp[0] & R1_ERROR)) {
 984                         pr_err("%s: %s: general error sending stop or status command, stop cmd response %#x, card status %#x\n",
 985                                req->rq_disk->disk_name, __func__,
 986                                brq->stop.resp[0], status);
 987                         *gen_err = 1;
 988                 }
 989
 990         /*
 991          * Check the current card state.  If it is in some data transfer
 992          * mode, tell it to stop (and hopefully transition back to TRAN.)
 993          */
 994         if (R1_CURRENT_STATE(status) == R1_STATE_DATA ||
 995             R1_CURRENT_STATE(status) == R1_STATE_RCV) {
 996                 err = send_stop(card, &stop_status);
 997                 if (err)
 998                         pr_err("%s: error %d sending stop command\n",
 999                                req->rq_disk->disk_name, err);
1000
1001                 /*
1002                  * If the stop cmd also timed out, the card is probably
1003                  * not present, so abort.  Other errors are bad news too.
1004                  */
1005                 if (err)
1006                         return ERR_ABORT;
1007                 if (stop_status & R1_CARD_ECC_FAILED)
1008                         *ecc_err = 1;
1009                 if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ)
1010                         if (stop_status & R1_ERROR) {
1011                                 pr_err("%s: %s: general error sending stop command, stop cmd response %#x\n",
1012                                        req->rq_disk->disk_name, __func__,
1013                                        stop_status);
1014                                 *gen_err = 1;
1015                         }
1016         }
1017
1018         /* Check for set block count errors */
1019         if (brq->sbc.error)
1020                 return mmc_blk_cmd_error(req, "SET_BLOCK_COUNT", brq->sbc.error,
1021                                 prev_cmd_status_valid, status);
1022
1023         /* Check for r/w command errors */
1024         if (brq->cmd.error)
1025                 return mmc_blk_cmd_error(req, "r/w cmd", brq->cmd.error,
1026                                 prev_cmd_status_valid, status);
1027
1028         /* Data errors */
1029         if (!brq->stop.error)
1030                 return ERR_CONTINUE;
1031
1032         /* Now for stop errors.  These aren't fatal to the transfer. */
1033         pr_err("%s: error %d sending stop command, original cmd response %#x, card status %#x\n",
1034                req->rq_disk->disk_name, brq->stop.error,
1035                brq->cmd.resp[0], status);
1036
1037         /*
1038          * Subsitute in our own stop status as this will give the error
1039          * state which happened during the execution of the r/w command.
1040          */
1041         if (stop_status) {
1042                 brq->stop.resp[0] = stop_status;
1043                 brq->stop.error = 0;
1044         }
1045         return ERR_CONTINUE;
1046 }
1047
1048 static int mmc_blk_reset(struct mmc_blk_data *md, struct mmc_host *host,
1049                          int type)
1050 {
1051         int err;
1052
1053         if (md->reset_done & type) {
1054                 printk("%s: mmc_blk_reset return EEXIST\n", mmc_hostname(host));
1055                 return -EEXIST;
1056         }
1057         md->reset_done |= type;
1058         err = mmc_hw_reset(host);
1059         /* Ensure we switch back to the correct partition */
1060         if (err != -EOPNOTSUPP) {
1061                 struct mmc_blk_data *main_md = mmc_get_drvdata(host->card);
1062                 int part_err;
1063
1064                 main_md->part_curr = main_md->part_type;
1065                 part_err = mmc_blk_part_switch(host->card, md);
1066                 if (part_err) {
1067                         /*
1068                          * We have failed to get back into the correct
1069                          * partition, so we need to abort the whole request.
1070                          */
1071                         return -ENODEV;
1072                 }
1073         }
1074         return err;
1075 }
1076
1077 static inline void mmc_blk_reset_success(struct mmc_blk_data *md, int type)
1078 {
1079         md->reset_done &= ~type;
1080 }
1081
1082 static int mmc_blk_issue_discard_rq(struct mmc_queue *mq, struct request *req)
1083 {
1084         struct mmc_blk_data *md = mq->data;
1085         struct mmc_card *card = md->queue.card;
1086         unsigned int from, nr, arg;
1087         int err = 0, type = MMC_BLK_DISCARD;
1088
1089         if (!mmc_can_erase(card)) {
1090                 err = -EOPNOTSUPP;
1091                 goto out;
1092         }
1093
1094         from = blk_rq_pos(req);
1095         nr = blk_rq_sectors(req);
1096
1097         if (mmc_can_discard(card))
1098                 arg = MMC_DISCARD_ARG;
1099         else if (mmc_can_trim(card))
1100                 arg = MMC_TRIM_ARG;
1101         else
1102                 arg = MMC_ERASE_ARG;
1103 retry:
1104         if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1105                 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1106                                  INAND_CMD38_ARG_EXT_CSD,
1107                                  arg == MMC_TRIM_ARG ?
1108                                  INAND_CMD38_ARG_TRIM :
1109                                  INAND_CMD38_ARG_ERASE,
1110                                  0);
1111                 if (err)
1112                         goto out;
1113         }
1114         err = mmc_erase(card, from, nr, arg);
1115 out:
1116         if (err == -EIO && !mmc_blk_reset(md, card->host, type))
1117                 goto retry;
1118         if (!err)
1119                 mmc_blk_reset_success(md, type);
1120         blk_end_request(req, err, blk_rq_bytes(req));
1121
1122         return err ? 0 : 1;
1123 }
1124
1125 static int mmc_blk_issue_secdiscard_rq(struct mmc_queue *mq,
1126                                        struct request *req)
1127 {
1128         struct mmc_blk_data *md = mq->data;
1129         struct mmc_card *card = md->queue.card;
1130         unsigned int from, nr, arg, trim_arg, erase_arg;
1131         int err = 0, type = MMC_BLK_SECDISCARD;
1132
1133         if (!(mmc_can_secure_erase_trim(card) || mmc_can_sanitize(card))) {
1134                 err = -EOPNOTSUPP;
1135                 goto out;
1136         }
1137
1138         from = blk_rq_pos(req);
1139         nr = blk_rq_sectors(req);
1140
1141         /* The sanitize operation is supported at v4.5 only */
1142         if (mmc_can_sanitize(card)) {
1143                 erase_arg = MMC_ERASE_ARG;
1144                 trim_arg = MMC_TRIM_ARG;
1145         } else {
1146                 erase_arg = MMC_SECURE_ERASE_ARG;
1147                 trim_arg = MMC_SECURE_TRIM1_ARG;
1148         }
1149
1150         if (mmc_erase_group_aligned(card, from, nr))
1151                 arg = erase_arg;
1152         else if (mmc_can_trim(card))
1153                 arg = trim_arg;
1154         else {
1155                 err = -EINVAL;
1156                 goto out;
1157         }
1158 retry:
1159         if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1160                 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1161                                  INAND_CMD38_ARG_EXT_CSD,
1162                                  arg == MMC_SECURE_TRIM1_ARG ?
1163                                  INAND_CMD38_ARG_SECTRIM1 :
1164                                  INAND_CMD38_ARG_SECERASE,
1165                                  0);
1166                 if (err)
1167                         goto out_retry;
1168         }
1169
1170         err = mmc_erase(card, from, nr, arg);
1171         if (err == -EIO)
1172                 goto out_retry;
1173         if (err)
1174                 goto out;
1175
1176         if (arg == MMC_SECURE_TRIM1_ARG) {
1177                 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1178                         err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1179                                          INAND_CMD38_ARG_EXT_CSD,
1180                                          INAND_CMD38_ARG_SECTRIM2,
1181                                          0);
1182                         if (err)
1183                                 goto out_retry;
1184                 }
1185
1186                 err = mmc_erase(card, from, nr, MMC_SECURE_TRIM2_ARG);
1187                 if (err == -EIO)
1188                         goto out_retry;
1189                 if (err)
1190                         goto out;
1191         }
1192
1193         if (mmc_can_sanitize(card)) {
1194                 trace_mmc_blk_erase_start(EXT_CSD_SANITIZE_START, 0, 0);
1195                 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1196                                  EXT_CSD_SANITIZE_START, 1, 0);
1197                 trace_mmc_blk_erase_end(EXT_CSD_SANITIZE_START, 0, 0);
1198         }
1199 out_retry:
1200         if (err && !mmc_blk_reset(md, card->host, type))
1201                 goto retry;
1202         if (!err)
1203                 mmc_blk_reset_success(md, type);
1204 out:
1205         blk_end_request(req, err, blk_rq_bytes(req));
1206
1207         return err ? 0 : 1;
1208 }
1209
1210 static int mmc_blk_issue_flush(struct mmc_queue *mq, struct request *req)
1211 {
1212         struct mmc_blk_data *md = mq->data;
1213         struct mmc_card *card = md->queue.card;
1214         int ret = 0;
1215
1216         ret = mmc_flush_cache(card);
1217         if (ret)
1218                 ret = -EIO;
1219
1220         blk_end_request_all(req, ret);
1221
1222         return ret ? 0 : 1;
1223 }
1224
1225 /*
1226  * Reformat current write as a reliable write, supporting
1227  * both legacy and the enhanced reliable write MMC cards.
1228  * In each transfer we'll handle only as much as a single
1229  * reliable write can handle, thus finish the request in
1230  * partial completions.
1231  */
1232 static inline void mmc_apply_rel_rw(struct mmc_blk_request *brq,
1233                                     struct mmc_card *card,
1234                                     struct request *req)
1235 {
1236         if (!(card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN)) {
1237                 /* Legacy mode imposes restrictions on transfers. */
1238                 if (!IS_ALIGNED(brq->cmd.arg, card->ext_csd.rel_sectors))
1239                         brq->data.blocks = 1;
1240
1241                 if (brq->data.blocks > card->ext_csd.rel_sectors)
1242                         brq->data.blocks = card->ext_csd.rel_sectors;
1243                 else if (brq->data.blocks < card->ext_csd.rel_sectors)
1244                         brq->data.blocks = 1;
1245         }
1246 }
1247
1248 #define CMD_ERRORS                                                      \
1249         (R1_OUT_OF_RANGE |      /* Command argument out of range */     \
1250          R1_ADDRESS_ERROR |     /* Misaligned address */                \
1251          R1_BLOCK_LEN_ERROR |   /* Transferred block length incorrect */\
1252          R1_WP_VIOLATION |      /* Tried to write to protected block */ \
1253          R1_CC_ERROR |          /* Card controller error */             \
1254          R1_ERROR)              /* General/unknown error */
1255
1256 static int mmc_blk_err_check(struct mmc_card *card,
1257                              struct mmc_async_req *areq)
1258 {
1259         struct mmc_queue_req *mq_mrq = container_of(areq, struct mmc_queue_req,
1260                                                     mmc_active);
1261         struct mmc_blk_request *brq = &mq_mrq->brq;
1262         struct request *req = mq_mrq->req;
1263         int ecc_err = 0, gen_err = 0;
1264
1265         /*
1266          * sbc.error indicates a problem with the set block count
1267          * command.  No data will have been transferred.
1268          *
1269          * cmd.error indicates a problem with the r/w command.  No
1270          * data will have been transferred.
1271          *
1272          * stop.error indicates a problem with the stop command.  Data
1273          * may have been transferred, or may still be transferring.
1274          */
1275         if (brq->sbc.error || brq->cmd.error || brq->stop.error ||
1276             brq->data.error) {
1277                 switch (mmc_blk_cmd_recovery(card, req, brq, &ecc_err, &gen_err)) {
1278                 case ERR_RETRY:
1279                         return MMC_BLK_RETRY;
1280                 case ERR_ABORT:
1281                         return MMC_BLK_ABORT;
1282                 case ERR_NOMEDIUM:
1283                         return MMC_BLK_NOMEDIUM;
1284                 case ERR_CONTINUE:
1285                         break;
1286                 }
1287         }
1288
1289         /*
1290          * Check for errors relating to the execution of the
1291          * initial command - such as address errors.  No data
1292          * has been transferred.
1293          */
1294         if (brq->cmd.resp[0] & CMD_ERRORS) {
1295                 pr_err("%s: r/w command failed, status = %#x\n",
1296                        req->rq_disk->disk_name, brq->cmd.resp[0]);
1297                 return MMC_BLK_ABORT;
1298         }
1299
1300         /*
1301          * Everything else is either success, or a data error of some
1302          * kind.  If it was a write, we may have transitioned to
1303          * program mode, which we have to wait for it to complete.
1304          */
1305         if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ) {
1306                 u32 status;
1307                 unsigned long timeout;
1308
1309                 /* Check stop command response */
1310                 if (brq->stop.resp[0] & R1_ERROR) {
1311                         pr_err("%s: %s: general error sending stop command, stop cmd response %#x\n",
1312                                req->rq_disk->disk_name, __func__,
1313                                brq->stop.resp[0]);
1314                         gen_err = 1;
1315                 }
1316
1317                 timeout = jiffies + msecs_to_jiffies(MMC_BLK_TIMEOUT_MS);
1318                 do {
1319                         int err = get_card_status(card, &status, 5);
1320                         if (err) {
1321                                 pr_err("%s: error %d requesting status\n",
1322                                        req->rq_disk->disk_name, err);
1323                                 return MMC_BLK_CMD_ERR;
1324                         }
1325                         if (status & R1_ERROR) {
1326                                 pr_err("%s: %s: general error sending status command, card status %#x\n",
1327                                        req->rq_disk->disk_name, __func__,
1328                                        status);
1329                                 gen_err = 1;
1330                         }
1331
1332                         /*
1333                          * CMD25 -> CMD13 (WP violation) -> next CMD (illegal CMD)
1334                          * need to change card status (rcv->tran)
1335                          */
1336                         if ((status & R1_WP_VIOLATION) &&
1337                                         (R1_CURRENT_STATE(status) == R1_STATE_RCV)) {
1338                                 err = send_stop(card, &status);
1339
1340                                 pr_err("%s: WP violation. send CMD12 to "
1341                                                 "change card status (rcv->tran)\n",
1342                                                 req->rq_disk->disk_name);
1343
1344                                 /*
1345                                  * If the stop cmd also timed out, the card is probably
1346                                  * not present, so abort.  Other errors are bad news too.
1347                                  */
1348                                 if (err) {
1349                                         pr_err("%s: error %d sending stop command\n",
1350                                                req->rq_disk->disk_name, err);
1351                                         return MMC_BLK_ABORT;
1352                                 }
1353                         }
1354
1355                         /* Timeout if the device never becomes ready for data
1356                          * and never leaves the program state.
1357                          */
1358                         if (time_after(jiffies, timeout)) {
1359                                 pr_err("%s: Card stuck in programming state!"\
1360                                         " %s %s\n", mmc_hostname(card->host),
1361                                         req->rq_disk->disk_name, __func__);
1362
1363                                 return MMC_BLK_CMD_ERR;
1364                         }
1365                         /*
1366                          * Some cards mishandle the status bits,
1367                          * so make sure to check both the busy
1368                          * indication and the card state.
1369                          */
1370                 } while (!(status & R1_READY_FOR_DATA) ||
1371                          (R1_CURRENT_STATE(status) == R1_STATE_PRG));
1372         }
1373
1374         /* if general error occurs, retry the write operation. */
1375         if (gen_err) {
1376                 pr_warn("%s: retrying write for general error\n",
1377                                 req->rq_disk->disk_name);
1378                 return MMC_BLK_RETRY;
1379         }
1380
1381         if (brq->data.error) {
1382                 pr_err("%s: error %d transferring data, sector %u, nr %u, cmd response %#x, card status %#x\n",
1383                        req->rq_disk->disk_name, brq->data.error,
1384                        (unsigned)blk_rq_pos(req),
1385                        (unsigned)blk_rq_sectors(req),
1386                        brq->cmd.resp[0], brq->stop.resp[0]);
1387
1388                 if (rq_data_dir(req) == READ) {
1389                         if (ecc_err)
1390                                 return MMC_BLK_ECC_ERR;
1391                         return MMC_BLK_DATA_ERR;
1392                 } else {
1393                         return MMC_BLK_CMD_ERR;
1394                 }
1395         }
1396
1397         if (!brq->data.bytes_xfered)
1398                 return MMC_BLK_RETRY;
1399
1400         if (mmc_packed_cmd(mq_mrq->cmd_type)) {
1401                 if (unlikely(brq->data.blocks << 9 != brq->data.bytes_xfered))
1402                         return MMC_BLK_PARTIAL;
1403                 else
1404                         return MMC_BLK_SUCCESS;
1405         }
1406
1407         if (blk_rq_bytes(req) != brq->data.bytes_xfered)
1408                 return MMC_BLK_PARTIAL;
1409
1410         return MMC_BLK_SUCCESS;
1411 }
1412
1413 static int mmc_blk_packed_err_check(struct mmc_card *card,
1414                                     struct mmc_async_req *areq)
1415 {
1416         struct mmc_queue_req *mq_rq = container_of(areq, struct mmc_queue_req,
1417                         mmc_active);
1418         struct request *req = mq_rq->req;
1419         struct mmc_packed *packed = mq_rq->packed;
1420         int err, check, status;
1421         u8 *ext_csd;
1422
1423         BUG_ON(!packed);
1424
1425         packed->retries--;
1426         check = mmc_blk_err_check(card, areq);
1427         err = get_card_status(card, &status, 0);
1428         if (err) {
1429                 pr_err("%s: error %d sending status command\n",
1430                        req->rq_disk->disk_name, err);
1431                 return MMC_BLK_ABORT;
1432         }
1433
1434         if (status & R1_EXCEPTION_EVENT) {
1435                 ext_csd = kzalloc(512, GFP_KERNEL);
1436                 if (!ext_csd) {
1437                         pr_err("%s: unable to allocate buffer for ext_csd\n",
1438                                req->rq_disk->disk_name);
1439                         return -ENOMEM;
1440                 }
1441
1442                 err = mmc_send_ext_csd(card, ext_csd);
1443                 if (err) {
1444                         pr_err("%s: error %d sending ext_csd\n",
1445                                req->rq_disk->disk_name, err);
1446                         check = MMC_BLK_ABORT;
1447                         goto free;
1448                 }
1449
1450                 if ((ext_csd[EXT_CSD_EXP_EVENTS_STATUS] &
1451                      EXT_CSD_PACKED_FAILURE) &&
1452                     (ext_csd[EXT_CSD_PACKED_CMD_STATUS] &
1453                      EXT_CSD_PACKED_GENERIC_ERROR)) {
1454                         if (ext_csd[EXT_CSD_PACKED_CMD_STATUS] &
1455                             EXT_CSD_PACKED_INDEXED_ERROR) {
1456                                 packed->idx_failure =
1457                                   ext_csd[EXT_CSD_PACKED_FAILURE_INDEX] - 1;
1458                                 check = MMC_BLK_PARTIAL;
1459                         }
1460                         pr_err("%s: packed cmd failed, nr %u, sectors %u, "
1461                                "failure index: %d\n",
1462                                req->rq_disk->disk_name, packed->nr_entries,
1463                                packed->blocks, packed->idx_failure);
1464                 }
1465 free:
1466                 kfree(ext_csd);
1467         }
1468
1469         return check;
1470 }
1471
1472 static void mmc_blk_rw_rq_prep(struct mmc_queue_req *mqrq,
1473                                struct mmc_card *card,
1474                                int disable_multi,
1475                                struct mmc_queue *mq)
1476 {
1477         u32 readcmd, writecmd;
1478         struct mmc_blk_request *brq = &mqrq->brq;
1479         struct request *req = mqrq->req;
1480         struct mmc_blk_data *md = mq->data;
1481         bool do_data_tag;
1482
1483         /*
1484          * Reliable writes are used to implement Forced Unit Access and
1485          * REQ_META accesses, and are supported only on MMCs.
1486          *
1487          * XXX: this really needs a good explanation of why REQ_META
1488          * is treated special.
1489          */
1490         bool do_rel_wr = (req->cmd_flags & REQ_FUA) &&
1491                 (rq_data_dir(req) == WRITE) &&
1492                 (md->flags & MMC_BLK_REL_WR);
1493
1494         memset(brq, 0, sizeof(struct mmc_blk_request));
1495         brq->mrq.cmd = &brq->cmd;
1496         brq->mrq.data = &brq->data;
1497
1498         brq->cmd.arg = blk_rq_pos(req);
1499         if (!mmc_card_blockaddr(card))
1500                 brq->cmd.arg <<= 9;
1501         brq->cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
1502         brq->data.blksz = 512;
1503         brq->stop.opcode = MMC_STOP_TRANSMISSION;
1504         brq->stop.arg = 0;
1505         brq->stop.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
1506         brq->data.blocks = blk_rq_sectors(req);
1507
1508         /*
1509          * The block layer doesn't support all sector count
1510          * restrictions, so we need to be prepared for too big
1511          * requests.
1512          */
1513         if (brq->data.blocks > card->host->max_blk_count)
1514                 brq->data.blocks = card->host->max_blk_count;
1515
1516         if (brq->data.blocks > 1) {
1517                 /*
1518                  * After a read error, we redo the request one sector
1519                  * at a time in order to accurately determine which
1520                  * sectors can be read successfully.
1521                  */
1522                 if (disable_multi)
1523                         brq->data.blocks = 1;
1524
1525                 /* Some controllers can't do multiblock reads due to hw bugs */
1526                 if (card->host->caps2 & MMC_CAP2_NO_MULTI_READ &&
1527                     rq_data_dir(req) == READ)
1528                         brq->data.blocks = 1;
1529         }
1530
1531         if (brq->data.blocks > 1 || do_rel_wr) {
1532                 /* SPI multiblock writes terminate using a special
1533                  * token, not a STOP_TRANSMISSION request.
1534                  */
1535                 if (!mmc_host_is_spi(card->host) ||
1536                     rq_data_dir(req) == READ)
1537                         brq->mrq.stop = &brq->stop;
1538                 readcmd = MMC_READ_MULTIPLE_BLOCK;
1539                 writecmd = MMC_WRITE_MULTIPLE_BLOCK;
1540         } else {
1541                 brq->mrq.stop = NULL;
1542                 readcmd = MMC_READ_SINGLE_BLOCK;
1543                 writecmd = MMC_WRITE_BLOCK;
1544         }
1545         if (rq_data_dir(req) == READ) {
1546                 brq->cmd.opcode = readcmd;
1547                 brq->data.flags |= MMC_DATA_READ;
1548         } else {
1549                 brq->cmd.opcode = writecmd;
1550                 brq->data.flags |= MMC_DATA_WRITE;
1551         }
1552
1553         if (do_rel_wr)
1554                 mmc_apply_rel_rw(brq, card, req);
1555
1556         /*
1557          * Data tag is used only during writing meta data to speed
1558          * up write and any subsequent read of this meta data
1559          */
1560         do_data_tag = (card->ext_csd.data_tag_unit_size) &&
1561                 (req->cmd_flags & REQ_META) &&
1562                 (rq_data_dir(req) == WRITE) &&
1563                 ((brq->data.blocks * brq->data.blksz) >=
1564                  card->ext_csd.data_tag_unit_size);
1565
1566         /*
1567          * Pre-defined multi-block transfers are preferable to
1568          * open ended-ones (and necessary for reliable writes).
1569          * However, it is not sufficient to just send CMD23,
1570          * and avoid the final CMD12, as on an error condition
1571          * CMD12 (stop) needs to be sent anyway. This, coupled
1572          * with Auto-CMD23 enhancements provided by some
1573          * hosts, means that the complexity of dealing
1574          * with this is best left to the host. If CMD23 is
1575          * supported by card and host, we'll fill sbc in and let
1576          * the host deal with handling it correctly. This means
1577          * that for hosts that don't expose MMC_CAP_CMD23, no
1578          * change of behavior will be observed.
1579          *
1580          * N.B: Some MMC cards experience perf degradation.
1581          * We'll avoid using CMD23-bounded multiblock writes for
1582          * these, while retaining features like reliable writes.
1583          */
1584         if ((md->flags & MMC_BLK_CMD23) && mmc_op_multi(brq->cmd.opcode) &&
1585             (do_rel_wr || !(card->quirks & MMC_QUIRK_BLK_NO_CMD23) ||
1586              do_data_tag)) {
1587                 brq->sbc.opcode = MMC_SET_BLOCK_COUNT;
1588                 brq->sbc.arg = brq->data.blocks |
1589                         (do_rel_wr ? (1 << 31) : 0) |
1590                         (do_data_tag ? (1 << 29) : 0);
1591                 brq->sbc.flags = MMC_RSP_R1 | MMC_CMD_AC;
1592                 brq->mrq.sbc = &brq->sbc;
1593         }
1594
1595         mmc_set_data_timeout(&brq->data, card);
1596
1597         brq->data.sg = mqrq->sg;
1598         brq->data.sg_len = mmc_queue_map_sg(mq, mqrq);
1599
1600         /*
1601          * Adjust the sg list so it is the same size as the
1602          * request.
1603          */
1604         if (brq->data.blocks != blk_rq_sectors(req)) {
1605                 int i, data_size = brq->data.blocks << 9;
1606                 struct scatterlist *sg;
1607
1608                 for_each_sg(brq->data.sg, sg, brq->data.sg_len, i) {
1609                         data_size -= sg->length;
1610                         if (data_size <= 0) {
1611                                 sg->length += data_size;
1612                                 i++;
1613                                 break;
1614                         }
1615                 }
1616                 brq->data.sg_len = i;
1617         }
1618
1619         mqrq->mmc_active.mrq = &brq->mrq;
1620         mqrq->mmc_active.err_check = mmc_blk_err_check;
1621
1622         mmc_queue_bounce_pre(mqrq);
1623 }
1624
1625 static inline u8 mmc_calc_packed_hdr_segs(struct request_queue *q,
1626                                           struct mmc_card *card)
1627 {
1628         unsigned int hdr_sz = mmc_large_sector(card) ? 4096 : 512;
1629         unsigned int max_seg_sz = queue_max_segment_size(q);
1630         unsigned int len, nr_segs = 0;
1631
1632         do {
1633                 len = min(hdr_sz, max_seg_sz);
1634                 hdr_sz -= len;
1635                 nr_segs++;
1636         } while (hdr_sz);
1637
1638         return nr_segs;
1639 }
1640
1641 static u8 mmc_blk_prep_packed_list(struct mmc_queue *mq, struct request *req)
1642 {
1643         struct request_queue *q = mq->queue;
1644         struct mmc_card *card = mq->card;
1645         struct request *cur = req, *next = NULL;
1646         struct mmc_blk_data *md = mq->data;
1647         struct mmc_queue_req *mqrq = mq->mqrq_cur;
1648         bool en_rel_wr = card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN;
1649         unsigned int req_sectors = 0, phys_segments = 0;
1650         unsigned int max_blk_count, max_phys_segs;
1651         bool put_back = true;
1652         u8 max_packed_rw = 0;
1653         u8 reqs = 0;
1654
1655         if (!(md->flags & MMC_BLK_PACKED_CMD))
1656                 goto no_packed;
1657
1658         if ((rq_data_dir(cur) == WRITE) &&
1659             mmc_host_packed_wr(card->host))
1660                 max_packed_rw = card->ext_csd.max_packed_writes;
1661
1662         if (max_packed_rw == 0)
1663                 goto no_packed;
1664
1665         if (mmc_req_rel_wr(cur) &&
1666             (md->flags & MMC_BLK_REL_WR) && !en_rel_wr)
1667                 goto no_packed;
1668
1669         if (mmc_large_sector(card) &&
1670             !IS_ALIGNED(blk_rq_sectors(cur), 8))
1671                 goto no_packed;
1672
1673         mmc_blk_clear_packed(mqrq);
1674
1675         max_blk_count = min(card->host->max_blk_count,
1676                             card->host->max_req_size >> 9);
1677         if (unlikely(max_blk_count > 0xffff))
1678                 max_blk_count = 0xffff;
1679
1680         max_phys_segs = queue_max_segments(q);
1681         req_sectors += blk_rq_sectors(cur);
1682         phys_segments += cur->nr_phys_segments;
1683
1684         if (rq_data_dir(cur) == WRITE) {
1685                 req_sectors += mmc_large_sector(card) ? 8 : 1;
1686                 phys_segments += mmc_calc_packed_hdr_segs(q, card);
1687         }
1688
1689         do {
1690                 if (reqs >= max_packed_rw - 1) {
1691                         put_back = false;
1692                         break;
1693                 }
1694
1695                 spin_lock_irq(q->queue_lock);
1696                 next = blk_fetch_request(q);
1697                 spin_unlock_irq(q->queue_lock);
1698                 if (!next) {
1699                         put_back = false;
1700                         break;
1701                 }
1702
1703                 if (mmc_large_sector(card) &&
1704                     !IS_ALIGNED(blk_rq_sectors(next), 8))
1705                         break;
1706
1707                 if (next->cmd_flags & REQ_DISCARD ||
1708                     next->cmd_flags & REQ_FLUSH)
1709                         break;
1710
1711                 if (rq_data_dir(cur) != rq_data_dir(next))
1712                         break;
1713
1714                 if (mmc_req_rel_wr(next) &&
1715                     (md->flags & MMC_BLK_REL_WR) && !en_rel_wr)
1716                         break;
1717
1718                 req_sectors += blk_rq_sectors(next);
1719                 if (req_sectors > max_blk_count)
1720                         break;
1721
1722                 phys_segments +=  next->nr_phys_segments;
1723                 if (phys_segments > max_phys_segs)
1724                         break;
1725
1726                 list_add_tail(&next->queuelist, &mqrq->packed->list);
1727                 cur = next;
1728                 reqs++;
1729         } while (1);
1730
1731         if (put_back) {
1732                 spin_lock_irq(q->queue_lock);
1733                 blk_requeue_request(q, next);
1734                 spin_unlock_irq(q->queue_lock);
1735         }
1736
1737         if (reqs > 0) {
1738                 list_add(&req->queuelist, &mqrq->packed->list);
1739                 mqrq->packed->nr_entries = ++reqs;
1740                 mqrq->packed->retries = reqs;
1741                 return reqs;
1742         }
1743
1744 no_packed:
1745         mqrq->cmd_type = MMC_PACKED_NONE;
1746         return 0;
1747 }
1748
1749 static void mmc_blk_packed_hdr_wrq_prep(struct mmc_queue_req *mqrq,
1750                                         struct mmc_card *card,
1751                                         struct mmc_queue *mq)
1752 {
1753         struct mmc_blk_request *brq = &mqrq->brq;
1754         struct request *req = mqrq->req;
1755         struct request *prq;
1756         struct mmc_blk_data *md = mq->data;
1757         struct mmc_packed *packed = mqrq->packed;
1758         bool do_rel_wr, do_data_tag;
1759         u32 *packed_cmd_hdr;
1760         u8 hdr_blocks;
1761         u8 i = 1;
1762
1763         BUG_ON(!packed);
1764
1765         mqrq->cmd_type = MMC_PACKED_WRITE;
1766         packed->blocks = 0;
1767         packed->idx_failure = MMC_PACKED_NR_IDX;
1768
1769         packed_cmd_hdr = packed->cmd_hdr;
1770         memset(packed_cmd_hdr, 0, sizeof(packed->cmd_hdr));
1771         packed_cmd_hdr[0] = (packed->nr_entries << 16) |
1772                 (PACKED_CMD_WR << 8) | PACKED_CMD_VER;
1773         hdr_blocks = mmc_large_sector(card) ? 8 : 1;
1774
1775         /*
1776          * Argument for each entry of packed group
1777          */
1778         list_for_each_entry(prq, &packed->list, queuelist) {
1779                 do_rel_wr = mmc_req_rel_wr(prq) && (md->flags & MMC_BLK_REL_WR);
1780                 do_data_tag = (card->ext_csd.data_tag_unit_size) &&
1781                         (prq->cmd_flags & REQ_META) &&
1782                         (rq_data_dir(prq) == WRITE) &&
1783                         ((brq->data.blocks * brq->data.blksz) >=
1784                          card->ext_csd.data_tag_unit_size);
1785                 /* Argument of CMD23 */
1786                 packed_cmd_hdr[(i * 2)] =
1787                         (do_rel_wr ? MMC_CMD23_ARG_REL_WR : 0) |
1788                         (do_data_tag ? MMC_CMD23_ARG_TAG_REQ : 0) |
1789                         blk_rq_sectors(prq);
1790                 /* Argument of CMD18 or CMD25 */
1791                 packed_cmd_hdr[((i * 2)) + 1] =
1792                         mmc_card_blockaddr(card) ?
1793                         blk_rq_pos(prq) : blk_rq_pos(prq) << 9;
1794                 packed->blocks += blk_rq_sectors(prq);
1795                 i++;
1796         }
1797
1798         memset(brq, 0, sizeof(struct mmc_blk_request));
1799         brq->mrq.cmd = &brq->cmd;
1800         brq->mrq.data = &brq->data;
1801         brq->mrq.sbc = &brq->sbc;
1802         brq->mrq.stop = &brq->stop;
1803
1804         brq->sbc.opcode = MMC_SET_BLOCK_COUNT;
1805         brq->sbc.arg = MMC_CMD23_ARG_PACKED | (packed->blocks + hdr_blocks);
1806         brq->sbc.flags = MMC_RSP_R1 | MMC_CMD_AC;
1807
1808         brq->cmd.opcode = MMC_WRITE_MULTIPLE_BLOCK;
1809         brq->cmd.arg = blk_rq_pos(req);
1810         if (!mmc_card_blockaddr(card))
1811                 brq->cmd.arg <<= 9;
1812         brq->cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
1813
1814         brq->data.blksz = 512;
1815         brq->data.blocks = packed->blocks + hdr_blocks;
1816         brq->data.flags |= MMC_DATA_WRITE;
1817
1818         brq->stop.opcode = MMC_STOP_TRANSMISSION;
1819         brq->stop.arg = 0;
1820         brq->stop.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
1821
1822         mmc_set_data_timeout(&brq->data, card);
1823
1824         brq->data.sg = mqrq->sg;
1825         brq->data.sg_len = mmc_queue_map_sg(mq, mqrq);
1826
1827         mqrq->mmc_active.mrq = &brq->mrq;
1828         mqrq->mmc_active.err_check = mmc_blk_packed_err_check;
1829
1830         mmc_queue_bounce_pre(mqrq);
1831 }
1832
1833 static int mmc_blk_cmd_err(struct mmc_blk_data *md, struct mmc_card *card,
1834                            struct mmc_blk_request *brq, struct request *req,
1835                            int ret)
1836 {
1837         struct mmc_queue_req *mq_rq;
1838         mq_rq = container_of(brq, struct mmc_queue_req, brq);
1839
1840         /*
1841          * If this is an SD card and we're writing, we can first
1842          * mark the known good sectors as ok.
1843          *
1844          * If the card is not SD, we can still ok written sectors
1845          * as reported by the controller (which might be less than
1846          * the real number of written sectors, but never more).
1847          */
1848         if (mmc_card_sd(card)) {
1849                 u32 blocks;
1850
1851                 blocks = mmc_sd_num_wr_blocks(card);
1852                 if (blocks != (u32)-1) {
1853                         ret = blk_end_request(req, 0, blocks << 9);
1854                 }
1855         } else {
1856                 if (!mmc_packed_cmd(mq_rq->cmd_type))
1857                         ret = blk_end_request(req, 0, brq->data.bytes_xfered);
1858         }
1859         return ret;
1860 }
1861
1862 static int mmc_blk_end_packed_req(struct mmc_queue_req *mq_rq)
1863 {
1864         struct request *prq;
1865         struct mmc_packed *packed = mq_rq->packed;
1866         int idx = packed->idx_failure, i = 0;
1867         int ret = 0;
1868
1869         BUG_ON(!packed);
1870
1871         while (!list_empty(&packed->list)) {
1872                 prq = list_entry_rq(packed->list.next);
1873                 if (idx == i) {
1874                         /* retry from error index */
1875                         packed->nr_entries -= idx;
1876                         mq_rq->req = prq;
1877                         ret = 1;
1878
1879                         if (packed->nr_entries == MMC_PACKED_NR_SINGLE) {
1880                                 list_del_init(&prq->queuelist);
1881                                 mmc_blk_clear_packed(mq_rq);
1882                         }
1883                         return ret;
1884                 }
1885                 list_del_init(&prq->queuelist);
1886                 blk_end_request(prq, 0, blk_rq_bytes(prq));
1887                 i++;
1888         }
1889
1890         mmc_blk_clear_packed(mq_rq);
1891         return ret;
1892 }
1893
1894 static void mmc_blk_abort_packed_req(struct mmc_queue_req *mq_rq)
1895 {
1896         struct request *prq;
1897         struct mmc_packed *packed = mq_rq->packed;
1898
1899         BUG_ON(!packed);
1900
1901         while (!list_empty(&packed->list)) {
1902                 prq = list_entry_rq(packed->list.next);
1903                 list_del_init(&prq->queuelist);
1904                 blk_end_request(prq, -EIO, blk_rq_bytes(prq));
1905         }
1906
1907         mmc_blk_clear_packed(mq_rq);
1908 }
1909
1910 static void mmc_blk_revert_packed_req(struct mmc_queue *mq,
1911                                       struct mmc_queue_req *mq_rq)
1912 {
1913         struct request *prq;
1914         struct request_queue *q = mq->queue;
1915         struct mmc_packed *packed = mq_rq->packed;
1916
1917         BUG_ON(!packed);
1918
1919         while (!list_empty(&packed->list)) {
1920                 prq = list_entry_rq(packed->list.prev);
1921                 if (prq->queuelist.prev != &packed->list) {
1922                         list_del_init(&prq->queuelist);
1923                         spin_lock_irq(q->queue_lock);
1924                         blk_requeue_request(mq->queue, prq);
1925                         spin_unlock_irq(q->queue_lock);
1926                 } else {
1927                         list_del_init(&prq->queuelist);
1928                 }
1929         }
1930
1931         mmc_blk_clear_packed(mq_rq);
1932 }
1933
1934 static int mmc_blk_issue_rw_rq(struct mmc_queue *mq, struct request *rqc)
1935 {
1936         struct mmc_blk_data *md = mq->data;
1937         struct mmc_card *card = md->queue.card;
1938         struct mmc_blk_request *brq = &mq->mqrq_cur->brq;
1939         int ret = 1, disable_multi = 0, type;
1940         enum mmc_blk_status status;
1941         struct mmc_queue_req *mq_rq;
1942         struct request *req = rqc;
1943         struct mmc_async_req *areq;
1944         const u8 packed_nr = 2;
1945         u8 reqs = 0;
1946 #if 0
1947         int retry = 0;
1948 #endif
1949
1950         if (!rqc && !mq->mqrq_prev->req)
1951                 return 0;
1952
1953         if (rqc)
1954                 reqs = mmc_blk_prep_packed_list(mq, rqc);
1955
1956         do {
1957                 if (rqc) {
1958                         /*
1959                          * When 4KB native sector is enabled, only 8 blocks
1960                          * multiple read or write is allowed
1961                          */
1962                         if ((brq->data.blocks & 0x07) &&
1963                             (card->ext_csd.data_sector_size == 4096)) {
1964                                 pr_err("%s: Transfer size is not 4KB sector size aligned\n",
1965                                         req->rq_disk->disk_name);
1966                                 mq_rq = mq->mqrq_cur;
1967                                 goto cmd_abort;
1968                         }
1969
1970                         if (reqs >= packed_nr)
1971                                 mmc_blk_packed_hdr_wrq_prep(mq->mqrq_cur,
1972                                                             card, mq);
1973                         else
1974                                 mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
1975                         areq = &mq->mqrq_cur->mmc_active;
1976                 } else
1977                         areq = NULL;
1978                 areq = mmc_start_req(card->host, areq, (int *) &status);
1979                 if (!areq) {
1980                         if (status == MMC_BLK_NEW_REQUEST)
1981                                 mq->flags |= MMC_QUEUE_NEW_REQUEST;
1982                         return 0;
1983                 }
1984
1985                 mq_rq = container_of(areq, struct mmc_queue_req, mmc_active);
1986                 brq = &mq_rq->brq;
1987                 req = mq_rq->req;
1988                 type = rq_data_dir(req) == READ ? MMC_BLK_READ : MMC_BLK_WRITE;
1989                 mmc_queue_bounce_post(mq_rq);
1990
1991                 switch (status) {
1992                 case MMC_BLK_SUCCESS:
1993                 case MMC_BLK_PARTIAL:
1994                         /*
1995                          * A block was successfully transferred.
1996                          */
1997                         mmc_blk_reset_success(md, type);
1998
1999                         if (mmc_packed_cmd(mq_rq->cmd_type)) {
2000                                 ret = mmc_blk_end_packed_req(mq_rq);
2001                                 break;
2002                         } else {
2003                                 ret = blk_end_request(req, 0,
2004                                                 brq->data.bytes_xfered);
2005                         }
2006
2007                         /*
2008                          * If the blk_end_request function returns non-zero even
2009                          * though all data has been transferred and no errors
2010                          * were returned by the host controller, it's a bug.
2011                          */
2012                         if (status == MMC_BLK_SUCCESS && ret) {
2013                                 pr_err("%s BUG rq_tot %d d_xfer %d\n",
2014                                        __func__, blk_rq_bytes(req),
2015                                        brq->data.bytes_xfered);
2016                                 rqc = NULL;
2017                                 goto cmd_abort;
2018                         }
2019                         break;
2020                 case MMC_BLK_CMD_ERR:
2021                         printk("%s MMC_BLK_CMD_ERR\n",__func__);
2022                         ret = mmc_blk_cmd_err(md, card, brq, req, ret);
2023                         if (!mmc_blk_reset(md, card->host, type))
2024                                 break;
2025                         goto cmd_abort;
2026                 case MMC_BLK_ECC_ERR:
2027                         printk("%s MMC_BLK_ECC_ERR\n",__func__);
2028                         /* treat ECC as normal err,for decrease reset time.
2029                         <disable_multi = 1> will cause reset time increase*/
2030                         #if 0
2031                         (brq->data.blocks > 1) {
2032                                 /* Redo read one sector at a time */
2033                                 pr_warning("%s: retrying using single block read\n",
2034                                            req->rq_disk->disk_name);
2035                                 disable_multi = 1;
2036                                 break;
2037                         }
2038                         /*
2039                          * After an error, we redo I/O one sector at a
2040                          * time, so we only reach here after trying to
2041                          * read a single sector.
2042                          */
2043                         ret = blk_end_request(req, -EIO,
2044                                                 brq->data.blksz);
2045                         if (!ret)
2046                                 goto start_new_req;
2047                         break;
2048                         #endif
2049                 case MMC_BLK_RETRY:
2050                         printk("%s MMC_BLK_RETRY\n",__func__);
2051                         /* remove retry,for decrease reset time.
2052                         if (retry++ < 5)
2053                                 break;*/
2054                         /* Fall through */
2055                 case MMC_BLK_ABORT:
2056                         printk("%s MMC_BLK_ABORT\n",__func__);
2057                         if (!mmc_blk_reset(md, card->host, type))
2058                                 break;
2059                         goto cmd_abort;
2060                 case MMC_BLK_DATA_ERR: {
2061                         int err;
2062                         printk("%s MMC_BLK_DATA_ERR\n",__func__);
2063                         err = mmc_blk_reset(md, card->host, type);
2064                         if (!err)
2065                                 break;
2066                         if (err == -ENODEV ||
2067                                 mmc_packed_cmd(mq_rq->cmd_type))
2068                                 goto cmd_abort;
2069                         bad_card_and_remove(card->host);
2070                         break;
2071                         /* Fall through */
2072                 }
2073                 case MMC_BLK_NOMEDIUM:
2074                         printk("%s MMC_BLK_NOMEDIUM\n",__func__);
2075                         goto cmd_abort;
2076                 default:
2077                         pr_err("%s: Unhandled return value (%d)",
2078                                         req->rq_disk->disk_name, status);
2079                         goto cmd_abort;
2080                 }
2081
2082                 if (ret) {
2083                         if (mmc_packed_cmd(mq_rq->cmd_type)) {
2084                                 if (!mq_rq->packed->retries)
2085                                         goto cmd_abort;
2086                                 mmc_blk_packed_hdr_wrq_prep(mq_rq, card, mq);
2087                                 mmc_start_req(card->host,
2088                                               &mq_rq->mmc_active, NULL);
2089                         } else {
2090
2091                                 /*
2092                                  * In case of a incomplete request
2093                                  * prepare it again and resend.
2094                                  */
2095                                 mmc_blk_rw_rq_prep(mq_rq, card,
2096                                                 disable_multi, mq);
2097                                 mmc_start_req(card->host,
2098                                                 &mq_rq->mmc_active, NULL);
2099                         }
2100                 }
2101         } while (ret);
2102
2103         return 1;
2104
2105  cmd_abort:
2106         if (mmc_packed_cmd(mq_rq->cmd_type)) {
2107                 mmc_blk_abort_packed_req(mq_rq);
2108         } else {
2109                 if (mmc_card_removed(card))
2110                         req->cmd_flags |= REQ_QUIET;
2111                 while (ret)
2112                         ret = blk_end_request(req, -EIO,
2113                                         blk_rq_cur_bytes(req));
2114         }
2115 #if 0
2116  start_new_req:
2117 #endif
2118         if (rqc) {
2119                 if (mmc_card_removed(card)) {
2120                         rqc->cmd_flags |= REQ_QUIET;
2121                         blk_end_request_all(rqc, -EIO);
2122                 } else {
2123                         /*
2124                          * If current request is packed, it needs to put back.
2125                          */
2126                         if (mmc_packed_cmd(mq->mqrq_cur->cmd_type))
2127                                 mmc_blk_revert_packed_req(mq, mq->mqrq_cur);
2128
2129                         mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
2130                         mmc_start_req(card->host,
2131                                       &mq->mqrq_cur->mmc_active, NULL);
2132                 }
2133         }
2134
2135         return 0;
2136 }
2137
2138 static int mmc_blk_issue_rq(struct mmc_queue *mq, struct request *req)
2139 {
2140         int ret;
2141         struct mmc_blk_data *md = mq->data;
2142         struct mmc_card *card = md->queue.card;
2143         struct mmc_host *host = card->host;
2144         unsigned long flags;
2145         unsigned int cmd_flags = req ? req->cmd_flags : 0;
2146
2147 #ifdef CONFIG_MMC_BLOCK_DEFERRED_RESUME
2148         if (mmc_bus_needs_resume(card->host))
2149                 mmc_resume_bus(card->host);
2150 #endif
2151
2152         if (req && !mq->mqrq_prev->req)
2153                 /* claim host only for the first request */
2154                 mmc_claim_host(card->host);
2155
2156         ret = mmc_blk_part_switch(card, md);
2157         if (ret) {
2158                 if (req) {
2159                         blk_end_request_all(req, -EIO);
2160                 }
2161                 ret = 0;
2162                 goto out;
2163         }
2164
2165         mq->flags &= ~MMC_QUEUE_NEW_REQUEST;
2166         if (cmd_flags & REQ_DISCARD) {
2167                 /* complete ongoing async transfer before issuing discard */
2168                 if (card->host->areq)
2169                         mmc_blk_issue_rw_rq(mq, NULL);
2170                 if (req->cmd_flags & REQ_SECURE &&
2171                         !(card->quirks & MMC_QUIRK_SEC_ERASE_TRIM_BROKEN))
2172                         ret = mmc_blk_issue_secdiscard_rq(mq, req);
2173                 else
2174                         ret = mmc_blk_issue_discard_rq(mq, req);
2175         } else if (cmd_flags & REQ_FLUSH) {
2176                 /* complete ongoing async transfer before issuing flush */
2177                 if (card->host->areq)
2178                         mmc_blk_issue_rw_rq(mq, NULL);
2179                 ret = mmc_blk_issue_flush(mq, req);
2180         } else {
2181                 if (!req && host->areq) {
2182                         spin_lock_irqsave(&host->context_info.lock, flags);
2183                         host->context_info.is_waiting_last_req = true;
2184                         spin_unlock_irqrestore(&host->context_info.lock, flags);
2185                 }
2186                 ret = mmc_blk_issue_rw_rq(mq, req);
2187         }
2188
2189 out:
2190         if ((!req && !(mq->flags & MMC_QUEUE_NEW_REQUEST)) ||
2191              (cmd_flags & MMC_REQ_SPECIAL_MASK))
2192                 /*
2193                  * Release host when there are no more requests
2194                  * and after special request(discard, flush) is done.
2195                  * In case sepecial request, there is no reentry to
2196                  * the 'mmc_blk_issue_rq' with 'mqrq_prev->req'.
2197                  */
2198                 mmc_release_host(card->host);
2199         return ret;
2200 }
2201
2202 static inline int mmc_blk_readonly(struct mmc_card *card)
2203 {
2204         return mmc_card_readonly(card) ||
2205                !(card->csd.cmdclass & CCC_BLOCK_WRITE);
2206 }
2207
2208 static struct mmc_blk_data *mmc_blk_alloc_req(struct mmc_card *card,
2209                                               struct device *parent,
2210                                               sector_t size,
2211                                               bool default_ro,
2212                                               const char *subname,
2213                                               int area_type)
2214 {
2215         struct mmc_blk_data *md;
2216         int devidx, ret;
2217
2218         devidx = find_first_zero_bit(dev_use, max_devices);
2219         if (devidx >= max_devices)
2220                 return ERR_PTR(-ENOSPC);
2221         __set_bit(devidx, dev_use);
2222
2223         md = kzalloc(sizeof(struct mmc_blk_data), GFP_KERNEL);
2224         if (!md) {
2225                 ret = -ENOMEM;
2226                 goto out;
2227         }
2228
2229         /*
2230          * !subname implies we are creating main mmc_blk_data that will be
2231          * associated with mmc_card with mmc_set_drvdata. Due to device
2232          * partitions, devidx will not coincide with a per-physical card
2233          * index anymore so we keep track of a name index.
2234          */
2235         if (!subname) {
2236                 md->name_idx = find_first_zero_bit(name_use, max_devices);
2237                 __set_bit(md->name_idx, name_use);
2238         } else
2239                 md->name_idx = ((struct mmc_blk_data *)
2240                                 dev_to_disk(parent)->private_data)->name_idx;
2241
2242         md->area_type = area_type;
2243
2244         /*
2245          * Set the read-only status based on the supported commands
2246          * and the write protect switch.
2247          */
2248         md->read_only = mmc_blk_readonly(card);
2249
2250         md->disk = alloc_disk(perdev_minors);
2251         if (md->disk == NULL) {
2252                 ret = -ENOMEM;
2253                 goto err_kfree;
2254         }
2255
2256         spin_lock_init(&md->lock);
2257         INIT_LIST_HEAD(&md->part);
2258         md->usage = 1;
2259
2260         ret = mmc_init_queue(&md->queue, card, &md->lock, subname);
2261         if (ret)
2262                 goto err_putdisk;
2263
2264         md->queue.issue_fn = mmc_blk_issue_rq;
2265         md->queue.data = md;
2266
2267         md->disk->major = MMC_BLOCK_MAJOR;
2268         md->disk->first_minor = devidx * perdev_minors;
2269         md->disk->fops = &mmc_bdops;
2270         md->disk->private_data = md;
2271         md->disk->queue = md->queue.queue;
2272         md->disk->driverfs_dev = parent;
2273         set_disk_ro(md->disk, md->read_only || default_ro);
2274         md->disk->flags = GENHD_FL_EXT_DEVT;
2275         if (area_type & MMC_BLK_DATA_AREA_RPMB)
2276                 md->disk->flags |= GENHD_FL_NO_PART_SCAN;
2277
2278         /*
2279          * As discussed on lkml, GENHD_FL_REMOVABLE should:
2280          *
2281          * - be set for removable media with permanent block devices
2282          * - be unset for removable block devices with permanent media
2283          *
2284          * Since MMC block devices clearly fall under the second
2285          * case, we do not set GENHD_FL_REMOVABLE.  Userspace
2286          * should use the block device creation/destruction hotplug
2287          * messages to tell when the card is present.
2288          */
2289
2290         snprintf(md->disk->disk_name, sizeof(md->disk->disk_name),
2291                  "mmcblk%d%s", md->name_idx, subname ? subname : "");
2292
2293         if (mmc_card_mmc(card))
2294                 blk_queue_logical_block_size(md->queue.queue,
2295                                              card->ext_csd.data_sector_size);
2296         else
2297                 blk_queue_logical_block_size(md->queue.queue, 512);
2298
2299         set_capacity(md->disk, size);
2300
2301         if (mmc_host_cmd23(card->host)) {
2302                 if (mmc_card_mmc(card) ||
2303                     (mmc_card_sd(card) &&
2304                      card->scr.cmds & SD_SCR_CMD23_SUPPORT &&
2305                      mmc_sd_card_uhs(card)))
2306                         md->flags |= MMC_BLK_CMD23;
2307         }
2308
2309         if (mmc_card_mmc(card) &&
2310             md->flags & MMC_BLK_CMD23 &&
2311             ((card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN) ||
2312              card->ext_csd.rel_sectors)) {
2313                 md->flags |= MMC_BLK_REL_WR;
2314                 blk_queue_flush(md->queue.queue, REQ_FLUSH | REQ_FUA);
2315         }
2316
2317         if (mmc_card_mmc(card) &&
2318             (area_type == MMC_BLK_DATA_AREA_MAIN) &&
2319             (md->flags & MMC_BLK_CMD23) &&
2320             card->ext_csd.packed_event_en) {
2321                 if (!mmc_packed_init(&md->queue, card))
2322                         md->flags |= MMC_BLK_PACKED_CMD;
2323         }
2324
2325         return md;
2326
2327  err_putdisk:
2328         put_disk(md->disk);
2329  err_kfree:
2330         kfree(md);
2331  out:
2332         return ERR_PTR(ret);
2333 }
2334
2335 static struct mmc_blk_data *mmc_blk_alloc(struct mmc_card *card)
2336 {
2337         sector_t size;
2338         struct mmc_blk_data *md;
2339
2340         if (!mmc_card_sd(card) && mmc_card_blockaddr(card)) {
2341                 /*
2342                  * The EXT_CSD sector count is in number or 512 byte
2343                  * sectors.
2344                  */
2345                 size = card->ext_csd.sectors;
2346         } else {
2347                 /*
2348                  * The CSD capacity field is in units of read_blkbits.
2349                  * set_capacity takes units of 512 bytes.
2350                  */
2351                 size = card->csd.capacity << (card->csd.read_blkbits - 9);
2352         }
2353
2354         md = mmc_blk_alloc_req(card, &card->dev, size, false, NULL,
2355                                         MMC_BLK_DATA_AREA_MAIN);
2356         return md;
2357 }
2358
2359 static int mmc_blk_alloc_part(struct mmc_card *card,
2360                               struct mmc_blk_data *md,
2361                               unsigned int part_type,
2362                               sector_t size,
2363                               bool default_ro,
2364                               const char *subname,
2365                               int area_type)
2366 {
2367         char cap_str[10];
2368         struct mmc_blk_data *part_md;
2369
2370         part_md = mmc_blk_alloc_req(card, disk_to_dev(md->disk), size, default_ro,
2371                                     subname, area_type);
2372         if (IS_ERR(part_md))
2373                 return PTR_ERR(part_md);
2374         part_md->part_type = part_type;
2375         list_add(&part_md->part, &md->part);
2376
2377         string_get_size((u64)get_capacity(part_md->disk) << 9, STRING_UNITS_2,
2378                         cap_str, sizeof(cap_str));
2379         pr_info("%s: %s %s partition %u %s\n",
2380                part_md->disk->disk_name, mmc_card_id(card),
2381                mmc_card_name(card), part_md->part_type, cap_str);
2382         return 0;
2383 }
2384
2385 /* MMC Physical partitions consist of two boot partitions and
2386  * up to four general purpose partitions.
2387  * For each partition enabled in EXT_CSD a block device will be allocatedi
2388  * to provide access to the partition.
2389  */
2390
2391 static int mmc_blk_alloc_parts(struct mmc_card *card, struct mmc_blk_data *md)
2392 {
2393         int idx, ret = 0;
2394
2395         if (!mmc_card_mmc(card))
2396                 return 0;
2397
2398         for (idx = 0; idx < card->nr_parts; idx++) {
2399                 if (card->part[idx].size) {
2400                         ret = mmc_blk_alloc_part(card, md,
2401                                 card->part[idx].part_cfg,
2402                                 card->part[idx].size >> 9,
2403                                 card->part[idx].force_ro,
2404                                 card->part[idx].name,
2405                                 card->part[idx].area_type);
2406                         if (ret)
2407                                 return ret;
2408                 }
2409         }
2410
2411         return ret;
2412 }
2413
2414 static void mmc_blk_remove_req(struct mmc_blk_data *md)
2415 {
2416         struct mmc_card *card;
2417
2418         if (md) {
2419                 card = md->queue.card;
2420                 if (md->disk->flags & GENHD_FL_UP) {
2421                         device_remove_file(disk_to_dev(md->disk), &md->force_ro);
2422                         if ((md->area_type & MMC_BLK_DATA_AREA_BOOT) &&
2423                                         card->ext_csd.boot_ro_lockable)
2424                                 device_remove_file(disk_to_dev(md->disk),
2425                                         &md->power_ro_lock);
2426
2427                         /* Stop new requests from getting into the queue */
2428                         del_gendisk(md->disk);
2429                 }
2430
2431                 /* Then flush out any already in there */
2432                 mmc_cleanup_queue(&md->queue);
2433                 if (md->flags & MMC_BLK_PACKED_CMD)
2434                         mmc_packed_clean(&md->queue);
2435                 mmc_blk_put(md);
2436         }
2437 }
2438
2439 static void mmc_blk_remove_parts(struct mmc_card *card,
2440                                  struct mmc_blk_data *md)
2441 {
2442         struct list_head *pos, *q;
2443         struct mmc_blk_data *part_md;
2444
2445         __clear_bit(md->name_idx, name_use);
2446         list_for_each_safe(pos, q, &md->part) {
2447                 part_md = list_entry(pos, struct mmc_blk_data, part);
2448                 list_del(pos);
2449                 mmc_blk_remove_req(part_md);
2450         }
2451 }
2452
2453 static int mmc_add_disk(struct mmc_blk_data *md)
2454 {
2455         int ret;
2456         struct mmc_card *card = md->queue.card;
2457
2458         add_disk(md->disk);
2459         md->force_ro.show = force_ro_show;
2460         md->force_ro.store = force_ro_store;
2461         sysfs_attr_init(&md->force_ro.attr);
2462         md->force_ro.attr.name = "force_ro";
2463         md->force_ro.attr.mode = S_IRUGO | S_IWUSR;
2464         ret = device_create_file(disk_to_dev(md->disk), &md->force_ro);
2465         if (ret)
2466                 goto force_ro_fail;
2467
2468         if ((md->area_type & MMC_BLK_DATA_AREA_BOOT) &&
2469              card->ext_csd.boot_ro_lockable) {
2470                 umode_t mode;
2471
2472                 if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PWR_WP_DIS)
2473                         mode = S_IRUGO;
2474                 else
2475                         mode = S_IRUGO | S_IWUSR;
2476
2477                 md->power_ro_lock.show = power_ro_lock_show;
2478                 md->power_ro_lock.store = power_ro_lock_store;
2479                 sysfs_attr_init(&md->power_ro_lock.attr);
2480                 md->power_ro_lock.attr.mode = mode;
2481                 md->power_ro_lock.attr.name =
2482                                         "ro_lock_until_next_power_on";
2483                 ret = device_create_file(disk_to_dev(md->disk),
2484                                 &md->power_ro_lock);
2485                 if (ret)
2486                         goto power_ro_lock_fail;
2487         }
2488         return ret;
2489
2490 power_ro_lock_fail:
2491         device_remove_file(disk_to_dev(md->disk), &md->force_ro);
2492 force_ro_fail:
2493         del_gendisk(md->disk);
2494
2495         return ret;
2496 }
2497
2498 #define CID_MANFID_SANDISK      0x2
2499 #define CID_MANFID_TOSHIBA      0x11
2500 #define CID_MANFID_MICRON       0x13
2501 #define CID_MANFID_SAMSUNG      0x15
2502 #define CID_MANFID_KINGSTON 0x41
2503 #define CID_MANFID_HYNIX 0x90
2504 #define CID_MANFID_MICRON_2     0xfe
2505
2506 static const struct mmc_fixup blk_fixups[] =
2507 {
2508         MMC_FIXUP("SEM02G", CID_MANFID_SANDISK, 0x100, add_quirk,
2509                   MMC_QUIRK_INAND_CMD38),
2510         MMC_FIXUP("SEM04G", CID_MANFID_SANDISK, 0x100, add_quirk,
2511                   MMC_QUIRK_INAND_CMD38),
2512         MMC_FIXUP("SEM08G", CID_MANFID_SANDISK, 0x100, add_quirk,
2513                   MMC_QUIRK_INAND_CMD38),
2514         MMC_FIXUP("SEM16G", CID_MANFID_SANDISK, 0x100, add_quirk,
2515                   MMC_QUIRK_INAND_CMD38),
2516         MMC_FIXUP("SEM32G", CID_MANFID_SANDISK, 0x100, add_quirk,
2517                   MMC_QUIRK_INAND_CMD38),
2518         MMC_FIXUP("SD8GB", CID_MANFID_KINGSTON, 0x3432, add_quirk,
2519                   MMC_QUIRK_BLK_NO_CMD23),
2520
2521         /*
2522          * Some MMC cards experience performance degradation with CMD23
2523          * instead of CMD12-bounded multiblock transfers. For now we'll
2524          * black list what's bad...
2525          * - Certain Toshiba cards.
2526          *
2527          * N.B. This doesn't affect SD cards.
2528          */
2529         MMC_FIXUP("MMC08G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
2530                   MMC_QUIRK_BLK_NO_CMD23),
2531         MMC_FIXUP("MMC16G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
2532                   MMC_QUIRK_BLK_NO_CMD23),
2533         MMC_FIXUP("MMC32G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
2534                   MMC_QUIRK_BLK_NO_CMD23),
2535
2536         /*
2537          * Some Micron MMC cards needs longer data read timeout than
2538          * indicated in CSD.
2539          */
2540         MMC_FIXUP(CID_NAME_ANY, CID_MANFID_MICRON, 0x200, add_quirk_mmc,
2541                   MMC_QUIRK_LONG_READ_TIME),
2542
2543         /*
2544          * On these Samsung MoviNAND parts, performing secure erase or
2545          * secure trim can result in unrecoverable corruption due to a
2546          * firmware bug.
2547          */
2548         MMC_FIXUP("M8G2FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2549                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2550         MMC_FIXUP("MAG4FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2551                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2552         MMC_FIXUP("MBG8FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2553                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2554         MMC_FIXUP("MCGAFA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2555                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2556         MMC_FIXUP("VAL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2557                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2558         MMC_FIXUP("VYL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2559                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2560         MMC_FIXUP("KYL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2561                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2562         MMC_FIXUP("VZL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2563                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2564         MMC_FIXUP("N5U00M", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2565                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2566         MMC_FIXUP("N5WZMB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2567                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2568         MMC_FIXUP("N5XZMB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2569                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2570         MMC_FIXUP("F5X5CB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2571                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2572         MMC_FIXUP("Q7XSAB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2573                 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2574         MMC_FIXUP("M4G1YC", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2575                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2576         MMC_FIXUP("KJS00M", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2577                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2578         MMC_FIXUP("K5XVMB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2579                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2580         MMC_FIXUP("H4G1d\ 4", CID_MANFID_HYNIX, 0x14a, add_quirk_mmc,
2581                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2582         MMC_FIXUP("H8G2d\ 4", CID_MANFID_HYNIX, 0x14a, add_quirk_mmc,
2583                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2584         MMC_FIXUP("K7XUMB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2585                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2586         MMC_FIXUP("K7XVMB", CID_MANFID_SAMSUNG, 0x100, add_quirk_mmc,
2587                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2588         MMC_FIXUP("P0XXXX", CID_MANFID_MICRON_2, 0x14e, add_quirk_mmc,
2589                   MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2590
2591         END_FIXUP
2592 };
2593
2594 static int mmc_blk_probe(struct mmc_card *card)
2595 {
2596         struct mmc_blk_data *md, *part_md;
2597         char cap_str[10];
2598
2599         /*
2600          * Check that the card supports the command class(es) we need.
2601          */
2602         if (!(card->csd.cmdclass & CCC_BLOCK_READ))
2603                 return -ENODEV;
2604
2605         md = mmc_blk_alloc(card);
2606         if (IS_ERR(md))
2607                 return PTR_ERR(md);
2608
2609         string_get_size((u64)get_capacity(md->disk) << 9, STRING_UNITS_2,
2610                         cap_str, sizeof(cap_str));
2611         pr_info("%s: %s %s %s %s\n",
2612                 md->disk->disk_name, mmc_card_id(card), mmc_card_name(card),
2613                 cap_str, md->read_only ? "(ro)" : "");
2614
2615         if (mmc_blk_alloc_parts(card, md))
2616                 goto out;
2617
2618         mmc_set_drvdata(card, md);
2619         mmc_fixup_device(card, blk_fixups);
2620
2621 #ifdef CONFIG_MMC_BLOCK_DEFERRED_RESUME
2622         mmc_set_bus_resume_policy(card->host, 1);
2623 #endif
2624         if (mmc_add_disk(md))
2625                 goto out;
2626
2627         list_for_each_entry(part_md, &md->part, part) {
2628                 if (mmc_add_disk(part_md))
2629                         goto out;
2630         }
2631
2632 #ifdef MMC_CARD_ERROR_LOGGING
2633         if (card)
2634                 mmc_card_debug_log_sysfs_init(card);
2635 #endif
2636         return 0;
2637
2638  out:
2639         mmc_blk_remove_parts(card, md);
2640         mmc_blk_remove_req(md);
2641         return 0;
2642 }
2643
2644 static void mmc_blk_remove(struct mmc_card *card)
2645 {
2646         struct mmc_blk_data *md = mmc_get_drvdata(card);
2647
2648         mmc_blk_remove_parts(card, md);
2649         mmc_claim_host(card->host);
2650         mmc_blk_part_switch(card, md);
2651         mmc_release_host(card->host);
2652         mmc_blk_remove_req(md);
2653         mmc_set_drvdata(card, NULL);
2654 #ifdef CONFIG_MMC_BLOCK_DEFERRED_RESUME
2655         mmc_set_bus_resume_policy(card->host, 0);
2656 #endif
2657 }
2658
2659 static void mmc_blk_shutdown(struct mmc_card *card)
2660 {
2661         struct mmc_blk_data *part_md;
2662         struct mmc_blk_data *md = mmc_get_drvdata(card);
2663         int rc;
2664
2665         if (md) {
2666                 rc = mmc_queue_suspend(&md->queue, 1);
2667                 if (rc)
2668                         goto suspend_error;
2669                 list_for_each_entry(part_md, &md->part, part) {
2670                         rc = mmc_queue_suspend(&part_md->queue, 1);
2671                         if (rc)
2672                                 goto suspend_error;
2673                 }
2674         }
2675         return;
2676
2677 suspend_error:
2678         pr_err("%s: mmc_queue_suspend returned error = %d\n",
2679                         mmc_hostname(card->host), rc);
2680 }
2681
2682 #ifdef CONFIG_PM
2683 static int mmc_blk_suspend(struct mmc_card *card)
2684 {
2685         struct mmc_blk_data *part_md;
2686         struct mmc_blk_data *md = mmc_get_drvdata(card);
2687         int rc = 0;
2688
2689         if (md) {
2690                 rc = mmc_queue_suspend(&md->queue, 0);
2691                 if (rc)
2692                         goto out;
2693                 list_for_each_entry(part_md, &md->part, part) {
2694                         rc = mmc_queue_suspend(&part_md->queue, 0);
2695                         if (rc)
2696                                 goto out_resume;
2697                 }
2698         }
2699         goto out;
2700
2701 out_resume:
2702         mmc_queue_resume(&md->queue);
2703         list_for_each_entry(part_md, &md->part, part) {
2704                 mmc_queue_resume(&part_md->queue);
2705         }
2706 out:
2707         return rc;
2708 }
2709
2710 static int mmc_blk_resume(struct mmc_card *card)
2711 {
2712         struct mmc_blk_data *part_md;
2713         struct mmc_blk_data *md = mmc_get_drvdata(card);
2714
2715         if (md) {
2716                 /*
2717                  * Resume involves the card going into idle state,
2718                  * so current partition is always the main one.
2719                  */
2720                 md->part_curr = md->part_type;
2721                 mmc_queue_resume(&md->queue);
2722                 list_for_each_entry(part_md, &md->part, part) {
2723                         mmc_queue_resume(&part_md->queue);
2724                 }
2725         }
2726         return 0;
2727 }
2728 #else
2729 #define mmc_blk_suspend NULL
2730 #define mmc_blk_resume  NULL
2731 #endif
2732 static void bad_card_and_remove(struct mmc_host *host)
2733 {
2734     if(host == NULL) {
2735         printk("WARN: host is NULL\n");
2736         return;
2737     }
2738     if(host->card == NULL) {
2739         printk("WARN: mmc or card is NULL\n");
2740         return;
2741     }
2742     if(mmc_card_sd(host->card)){
2743        mmc_card_set_removed(host->card);
2744         mmc_power_off(host);
2745       printk("%s defect card removed\n",__func__);
2746     }
2747 }
2748
2749 static struct mmc_driver mmc_driver = {
2750         .drv            = {
2751                 .name   = "mmcblk",
2752         },
2753         .probe          = mmc_blk_probe,
2754         .remove         = mmc_blk_remove,
2755         .suspend        = mmc_blk_suspend,
2756         .resume         = mmc_blk_resume,
2757         .shutdown       = mmc_blk_shutdown,
2758 };
2759
2760 static int __init mmc_blk_init(void)
2761 {
2762         int res;
2763
2764         if (perdev_minors != CONFIG_MMC_BLOCK_MINORS)
2765                 pr_info("mmcblk: using %d minors per device\n", perdev_minors);
2766
2767         max_devices = 256 / perdev_minors;
2768
2769         res = register_blkdev(MMC_BLOCK_MAJOR, "mmc");
2770         if (res)
2771                 goto out;
2772
2773         res = mmc_register_driver(&mmc_driver);
2774         if (res)
2775                 goto out2;
2776
2777         return 0;
2778  out2:
2779         unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
2780  out:
2781         return res;
2782 }
2783
2784 static void __exit mmc_blk_exit(void)
2785 {
2786         mmc_unregister_driver(&mmc_driver);
2787         unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
2788 }
2789
2790 module_init(mmc_blk_init);
2791 module_exit(mmc_blk_exit);
2792
2793 MODULE_LICENSE("GPL");
2794 MODULE_DESCRIPTION("Multimedia Card (MMC) block device driver");
2795