ide,ata: Rename ATA_IDX to ATA_SENSE
[deliverable/linux.git] / drivers / ata / libata-scsi.c
CommitLineData
1da177e4 1/*
af36d7f0
JG
2 * libata-scsi.c - helper library for ATA
3 *
8c3d3d4b 4 * Maintained by: Tejun Heo <tj@kernel.org>
af36d7f0
JG
5 * Please ALWAYS copy linux-ide@vger.kernel.org
6 * on emails.
7 *
8 * Copyright 2003-2004 Red Hat, Inc. All rights reserved.
9 * Copyright 2003-2004 Jeff Garzik
10 *
11 *
12 * This program is free software; you can redistribute it and/or modify
13 * it under the terms of the GNU General Public License as published by
14 * the Free Software Foundation; either version 2, or (at your option)
15 * any later version.
16 *
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU General Public License for more details.
21 *
22 * You should have received a copy of the GNU General Public License
23 * along with this program; see the file COPYING. If not, write to
24 * the Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA.
25 *
26 *
27 * libata documentation is available via 'make {ps|pdf}docs',
28 * as Documentation/DocBook/libata.*
29 *
30 * Hardware documentation available from
31 * - http://www.t10.org/
32 * - http://www.t13.org/
33 *
1da177e4
LT
34 */
35
5a0e3ad6 36#include <linux/slab.h>
1da177e4
LT
37#include <linux/kernel.h>
38#include <linux/blkdev.h>
39#include <linux/spinlock.h>
38789fda 40#include <linux/export.h>
1da177e4 41#include <scsi/scsi.h>
1da177e4 42#include <scsi/scsi_host.h>
beb40487 43#include <scsi/scsi_cmnd.h>
85837ebd 44#include <scsi/scsi_eh.h>
005a5a06 45#include <scsi/scsi_device.h>
a6e6ce8e 46#include <scsi/scsi_tcq.h>
30afc84c 47#include <scsi/scsi_transport.h>
1da177e4 48#include <linux/libata.h>
b095518e 49#include <linux/hdreg.h>
2dcb407e 50#include <linux/uaccess.h>
2a6e58d2 51#include <linux/suspend.h>
18f0f978 52#include <asm/unaligned.h>
1da177e4
LT
53
54#include "libata.h"
d9027470 55#include "libata-transport.h"
1da177e4 56
87340e98
TH
57#define ATA_SCSI_RBUF_SIZE 4096
58
59static DEFINE_SPINLOCK(ata_scsi_rbuf_lock);
60static u8 ata_scsi_rbuf[ATA_SCSI_RBUF_SIZE];
b095518e 61
ad706991 62typedef unsigned int (*ata_xlat_func_t)(struct ata_queued_cmd *qc);
ab5b3a5b 63
2dcb407e 64static struct ata_device *__ata_scsi_find_dev(struct ata_port *ap,
ab5b3a5b 65 const struct scsi_device *scsidev);
2dcb407e 66static struct ata_device *ata_scsi_find_dev(struct ata_port *ap,
ab5b3a5b 67 const struct scsi_device *scsidev);
1da177e4 68
00ac37f5
DG
69#define RW_RECOVERY_MPAGE 0x1
70#define RW_RECOVERY_MPAGE_LEN 12
71#define CACHE_MPAGE 0x8
72#define CACHE_MPAGE_LEN 20
73#define CONTROL_MPAGE 0xa
74#define CONTROL_MPAGE_LEN 12
75#define ALL_MPAGES 0x3f
76#define ALL_SUB_MPAGES 0xff
77
78
24f75686 79static const u8 def_rw_recovery_mpage[RW_RECOVERY_MPAGE_LEN] = {
00ac37f5
DG
80 RW_RECOVERY_MPAGE,
81 RW_RECOVERY_MPAGE_LEN - 2,
24f75686 82 (1 << 7), /* AWRE */
00ac37f5
DG
83 0, /* read retry count */
84 0, 0, 0, 0,
85 0, /* write retry count */
86 0, 0, 0
87};
88
89static const u8 def_cache_mpage[CACHE_MPAGE_LEN] = {
90 CACHE_MPAGE,
91 CACHE_MPAGE_LEN - 2,
92 0, /* contains WCE, needs to be 0 for logic */
93 0, 0, 0, 0, 0, 0, 0, 0, 0,
94 0, /* contains DRA, needs to be 0 for logic */
95 0, 0, 0, 0, 0, 0, 0
96};
97
98static const u8 def_control_mpage[CONTROL_MPAGE_LEN] = {
99 CONTROL_MPAGE,
100 CONTROL_MPAGE_LEN - 2,
101 2, /* DSENSE=0, GLTSD=1 */
102 0, /* [QAM+QERR may be 1, see 05-359r1] */
103 0, 0, 0, 0, 0xff, 0xff,
104 0, 30 /* extended self test time, see 05-359r1 */
105};
106
c93b263e
TH
107static const char *ata_lpm_policy_names[] = {
108 [ATA_LPM_UNKNOWN] = "max_performance",
109 [ATA_LPM_MAX_POWER] = "max_performance",
110 [ATA_LPM_MED_POWER] = "medium_power",
111 [ATA_LPM_MIN_POWER] = "min_power",
ca77329f
KCA
112};
113
ecd75ad5 114static ssize_t ata_scsi_lpm_store(struct device *device,
c93b263e
TH
115 struct device_attribute *attr,
116 const char *buf, size_t count)
ca77329f 117{
ecd75ad5 118 struct Scsi_Host *shost = class_to_shost(device);
ca77329f 119 struct ata_port *ap = ata_shost_to_port(shost);
ecd75ad5
TH
120 struct ata_link *link;
121 struct ata_device *dev;
c93b263e 122 enum ata_lpm_policy policy;
6b7ae954 123 unsigned long flags;
c93b263e
TH
124
125 /* UNKNOWN is internal state, iterate from MAX_POWER */
126 for (policy = ATA_LPM_MAX_POWER;
127 policy < ARRAY_SIZE(ata_lpm_policy_names); policy++) {
128 const char *name = ata_lpm_policy_names[policy];
129
130 if (strncmp(name, buf, strlen(name)) == 0)
ca77329f 131 break;
ca77329f 132 }
c93b263e 133 if (policy == ARRAY_SIZE(ata_lpm_policy_names))
ca77329f
KCA
134 return -EINVAL;
135
6b7ae954 136 spin_lock_irqsave(ap->lock, flags);
ecd75ad5
TH
137
138 ata_for_each_link(link, ap, EDGE) {
139 ata_for_each_dev(dev, &ap->link, ENABLED) {
140 if (dev->horkage & ATA_HORKAGE_NOLPM) {
141 count = -EOPNOTSUPP;
142 goto out_unlock;
143 }
144 }
145 }
146
6b7ae954
TH
147 ap->target_lpm_policy = policy;
148 ata_port_schedule_eh(ap);
ecd75ad5 149out_unlock:
6b7ae954 150 spin_unlock_irqrestore(ap->lock, flags);
ca77329f
KCA
151 return count;
152}
153
c93b263e
TH
154static ssize_t ata_scsi_lpm_show(struct device *dev,
155 struct device_attribute *attr, char *buf)
ca77329f 156{
ee959b00 157 struct Scsi_Host *shost = class_to_shost(dev);
ca77329f 158 struct ata_port *ap = ata_shost_to_port(shost);
ca77329f 159
6b7ae954 160 if (ap->target_lpm_policy >= ARRAY_SIZE(ata_lpm_policy_names))
ca77329f
KCA
161 return -EINVAL;
162
c93b263e 163 return snprintf(buf, PAGE_SIZE, "%s\n",
6b7ae954 164 ata_lpm_policy_names[ap->target_lpm_policy]);
ca77329f 165}
ee959b00 166DEVICE_ATTR(link_power_management_policy, S_IRUGO | S_IWUSR,
c93b263e 167 ata_scsi_lpm_show, ata_scsi_lpm_store);
ee959b00 168EXPORT_SYMBOL_GPL(dev_attr_link_power_management_policy);
ca77329f 169
45fabbb7
EO
170static ssize_t ata_scsi_park_show(struct device *device,
171 struct device_attribute *attr, char *buf)
172{
173 struct scsi_device *sdev = to_scsi_device(device);
174 struct ata_port *ap;
175 struct ata_link *link;
176 struct ata_device *dev;
a464189d 177 unsigned long flags, now;
45fabbb7
EO
178 unsigned int uninitialized_var(msecs);
179 int rc = 0;
180
181 ap = ata_shost_to_port(sdev->host);
182
183 spin_lock_irqsave(ap->lock, flags);
184 dev = ata_scsi_find_dev(ap, sdev);
185 if (!dev) {
186 rc = -ENODEV;
187 goto unlock;
188 }
189 if (dev->flags & ATA_DFLAG_NO_UNLOAD) {
190 rc = -EOPNOTSUPP;
191 goto unlock;
192 }
193
194 link = dev->link;
a464189d 195 now = jiffies;
45fabbb7
EO
196 if (ap->pflags & ATA_PFLAG_EH_IN_PROGRESS &&
197 link->eh_context.unloaded_mask & (1 << dev->devno) &&
a464189d
EO
198 time_after(dev->unpark_deadline, now))
199 msecs = jiffies_to_msecs(dev->unpark_deadline - now);
45fabbb7
EO
200 else
201 msecs = 0;
202
203unlock:
204 spin_unlock_irq(ap->lock);
205
206 return rc ? rc : snprintf(buf, 20, "%u\n", msecs);
207}
208
209static ssize_t ata_scsi_park_store(struct device *device,
210 struct device_attribute *attr,
211 const char *buf, size_t len)
212{
213 struct scsi_device *sdev = to_scsi_device(device);
214 struct ata_port *ap;
215 struct ata_device *dev;
216 long int input;
217 unsigned long flags;
218 int rc;
219
42b9ab7a
JH
220 rc = kstrtol(buf, 10, &input);
221 if (rc)
222 return rc;
223 if (input < -2)
45fabbb7
EO
224 return -EINVAL;
225 if (input > ATA_TMOUT_MAX_PARK) {
226 rc = -EOVERFLOW;
227 input = ATA_TMOUT_MAX_PARK;
228 }
229
230 ap = ata_shost_to_port(sdev->host);
231
232 spin_lock_irqsave(ap->lock, flags);
233 dev = ata_scsi_find_dev(ap, sdev);
234 if (unlikely(!dev)) {
235 rc = -ENODEV;
236 goto unlock;
237 }
9162c657
HR
238 if (dev->class != ATA_DEV_ATA &&
239 dev->class != ATA_DEV_ZAC) {
45fabbb7
EO
240 rc = -EOPNOTSUPP;
241 goto unlock;
242 }
243
244 if (input >= 0) {
245 if (dev->flags & ATA_DFLAG_NO_UNLOAD) {
246 rc = -EOPNOTSUPP;
247 goto unlock;
248 }
249
250 dev->unpark_deadline = ata_deadline(jiffies, input);
251 dev->link->eh_info.dev_action[dev->devno] |= ATA_EH_PARK;
252 ata_port_schedule_eh(ap);
253 complete(&ap->park_req_pending);
254 } else {
255 switch (input) {
256 case -1:
257 dev->flags &= ~ATA_DFLAG_NO_UNLOAD;
258 break;
259 case -2:
260 dev->flags |= ATA_DFLAG_NO_UNLOAD;
261 break;
262 }
263 }
264unlock:
265 spin_unlock_irqrestore(ap->lock, flags);
266
267 return rc ? rc : len;
268}
269DEVICE_ATTR(unload_heads, S_IRUGO | S_IWUSR,
270 ata_scsi_park_show, ata_scsi_park_store);
271EXPORT_SYMBOL_GPL(dev_attr_unload_heads);
272
f0761be3
TH
273static void ata_scsi_set_sense(struct scsi_cmnd *cmd, u8 sk, u8 asc, u8 ascq)
274{
275 cmd->result = (DRIVER_SENSE << 24) | SAM_STAT_CHECK_CONDITION;
276
277 scsi_build_sense_buffer(0, cmd->sense_buffer, sk, asc, ascq);
278}
279
18f7ba4c
KCA
280static ssize_t
281ata_scsi_em_message_store(struct device *dev, struct device_attribute *attr,
282 const char *buf, size_t count)
283{
284 struct Scsi_Host *shost = class_to_shost(dev);
285 struct ata_port *ap = ata_shost_to_port(shost);
286 if (ap->ops->em_store && (ap->flags & ATA_FLAG_EM))
287 return ap->ops->em_store(ap, buf, count);
288 return -EINVAL;
289}
290
291static ssize_t
292ata_scsi_em_message_show(struct device *dev, struct device_attribute *attr,
293 char *buf)
294{
295 struct Scsi_Host *shost = class_to_shost(dev);
296 struct ata_port *ap = ata_shost_to_port(shost);
297
298 if (ap->ops->em_show && (ap->flags & ATA_FLAG_EM))
299 return ap->ops->em_show(ap, buf);
300 return -EINVAL;
301}
ea7a5ed5 302DEVICE_ATTR(em_message, S_IRUGO | S_IWUSR,
18f7ba4c
KCA
303 ata_scsi_em_message_show, ata_scsi_em_message_store);
304EXPORT_SYMBOL_GPL(dev_attr_em_message);
305
306static ssize_t
307ata_scsi_em_message_type_show(struct device *dev, struct device_attribute *attr,
308 char *buf)
309{
310 struct Scsi_Host *shost = class_to_shost(dev);
311 struct ata_port *ap = ata_shost_to_port(shost);
312
313 return snprintf(buf, 23, "%d\n", ap->em_message_type);
314}
315DEVICE_ATTR(em_message_type, S_IRUGO,
316 ata_scsi_em_message_type_show, NULL);
317EXPORT_SYMBOL_GPL(dev_attr_em_message_type);
318
319static ssize_t
320ata_scsi_activity_show(struct device *dev, struct device_attribute *attr,
321 char *buf)
322{
323 struct scsi_device *sdev = to_scsi_device(dev);
324 struct ata_port *ap = ata_shost_to_port(sdev->host);
325 struct ata_device *atadev = ata_scsi_find_dev(ap, sdev);
326
26cd4d65
XF
327 if (atadev && ap->ops->sw_activity_show &&
328 (ap->flags & ATA_FLAG_SW_ACTIVITY))
18f7ba4c
KCA
329 return ap->ops->sw_activity_show(atadev, buf);
330 return -EINVAL;
331}
332
333static ssize_t
334ata_scsi_activity_store(struct device *dev, struct device_attribute *attr,
335 const char *buf, size_t count)
336{
337 struct scsi_device *sdev = to_scsi_device(dev);
338 struct ata_port *ap = ata_shost_to_port(sdev->host);
339 struct ata_device *atadev = ata_scsi_find_dev(ap, sdev);
340 enum sw_activity val;
341 int rc;
342
26cd4d65
XF
343 if (atadev && ap->ops->sw_activity_store &&
344 (ap->flags & ATA_FLAG_SW_ACTIVITY)) {
18f7ba4c
KCA
345 val = simple_strtoul(buf, NULL, 0);
346 switch (val) {
347 case OFF: case BLINK_ON: case BLINK_OFF:
348 rc = ap->ops->sw_activity_store(atadev, val);
349 if (!rc)
350 return count;
351 else
352 return rc;
353 }
354 }
355 return -EINVAL;
356}
ea7a5ed5 357DEVICE_ATTR(sw_activity, S_IWUSR | S_IRUGO, ata_scsi_activity_show,
18f7ba4c
KCA
358 ata_scsi_activity_store);
359EXPORT_SYMBOL_GPL(dev_attr_sw_activity);
360
45fabbb7
EO
361struct device_attribute *ata_common_sdev_attrs[] = {
362 &dev_attr_unload_heads,
363 NULL
364};
365EXPORT_SYMBOL_GPL(ata_common_sdev_attrs);
366
b27dcfb0 367static void ata_scsi_invalid_field(struct scsi_cmnd *cmd)
ae006510
DG
368{
369 ata_scsi_set_sense(cmd, ILLEGAL_REQUEST, 0x24, 0x0);
370 /* "Invalid field in cbd" */
b27dcfb0 371 cmd->scsi_done(cmd);
ae006510
DG
372}
373
1da177e4
LT
374/**
375 * ata_std_bios_param - generic bios head/sector/cylinder calculator used by sd.
376 * @sdev: SCSI device for which BIOS geometry is to be determined
377 * @bdev: block device associated with @sdev
378 * @capacity: capacity of SCSI device
379 * @geom: location to which geometry will be output
380 *
381 * Generic bios head/sector/cylinder calculator
382 * used by sd. Most BIOSes nowadays expect a XXX/255/16 (CHS)
383 * mapping. Some situations may arise where the disk is not
384 * bootable if this is not used.
385 *
386 * LOCKING:
387 * Defined by the SCSI layer. We don't really care.
388 *
389 * RETURNS:
390 * Zero.
391 */
392int ata_std_bios_param(struct scsi_device *sdev, struct block_device *bdev,
393 sector_t capacity, int geom[])
394{
395 geom[0] = 255;
396 geom[1] = 63;
397 sector_div(capacity, 255*63);
398 geom[2] = capacity;
399
400 return 0;
401}
402
d8d9129e
TH
403/**
404 * ata_scsi_unlock_native_capacity - unlock native capacity
405 * @sdev: SCSI device to adjust device capacity for
406 *
407 * This function is called if a partition on @sdev extends beyond
408 * the end of the device. It requests EH to unlock HPA.
409 *
410 * LOCKING:
411 * Defined by the SCSI layer. Might sleep.
412 */
413void ata_scsi_unlock_native_capacity(struct scsi_device *sdev)
414{
415 struct ata_port *ap = ata_shost_to_port(sdev->host);
416 struct ata_device *dev;
417 unsigned long flags;
418
419 spin_lock_irqsave(ap->lock, flags);
420
421 dev = ata_scsi_find_dev(ap, sdev);
422 if (dev && dev->n_sectors < dev->n_native_sectors) {
423 dev->flags |= ATA_DFLAG_UNLOCK_HPA;
424 dev->link->eh_info.action |= ATA_EH_RESET;
425 ata_port_schedule_eh(ap);
426 }
427
428 spin_unlock_irqrestore(ap->lock, flags);
429 ata_port_wait_eh(ap);
430}
431
5924b74c
TH
432/**
433 * ata_get_identity - Handler for HDIO_GET_IDENTITY ioctl
5eb66fe0 434 * @ap: target port
5924b74c
TH
435 * @sdev: SCSI device to get identify data for
436 * @arg: User buffer area for identify data
437 *
438 * LOCKING:
439 * Defined by the SCSI layer. We don't really care.
440 *
441 * RETURNS:
442 * Zero on success, negative errno on error.
443 */
94be9a58
JG
444static int ata_get_identity(struct ata_port *ap, struct scsi_device *sdev,
445 void __user *arg)
5924b74c 446{
5924b74c
TH
447 struct ata_device *dev = ata_scsi_find_dev(ap, sdev);
448 u16 __user *dst = arg;
449 char buf[40];
450
451 if (!dev)
452 return -ENOMSG;
453
454 if (copy_to_user(dst, dev->id, ATA_ID_WORDS * sizeof(u16)))
455 return -EFAULT;
456
457 ata_id_string(dev->id, buf, ATA_ID_PROD, ATA_ID_PROD_LEN);
458 if (copy_to_user(dst + ATA_ID_PROD, buf, ATA_ID_PROD_LEN))
459 return -EFAULT;
460
461 ata_id_string(dev->id, buf, ATA_ID_FW_REV, ATA_ID_FW_REV_LEN);
462 if (copy_to_user(dst + ATA_ID_FW_REV, buf, ATA_ID_FW_REV_LEN))
463 return -EFAULT;
464
465 ata_id_string(dev->id, buf, ATA_ID_SERNO, ATA_ID_SERNO_LEN);
466 if (copy_to_user(dst + ATA_ID_SERNO, buf, ATA_ID_SERNO_LEN))
467 return -EFAULT;
468
469 return 0;
470}
471
b095518e
JG
472/**
473 * ata_cmd_ioctl - Handler for HDIO_DRIVE_CMD ioctl
8e8b77dd 474 * @scsidev: Device to which we are issuing command
b095518e
JG
475 * @arg: User provided data for issuing command
476 *
477 * LOCKING:
478 * Defined by the SCSI layer. We don't really care.
479 *
480 * RETURNS:
481 * Zero on success, negative errno on error.
482 */
b095518e
JG
483int ata_cmd_ioctl(struct scsi_device *scsidev, void __user *arg)
484{
485 int rc = 0;
486 u8 scsi_cmd[MAX_COMMAND_SIZE];
bbe1fe7e 487 u8 args[4], *argbuf = NULL, *sensebuf = NULL;
b095518e 488 int argsize = 0;
85837ebd 489 enum dma_data_direction data_dir;
bbe1fe7e 490 int cmd_result;
b095518e 491
c893a3ae 492 if (arg == NULL)
b095518e
JG
493 return -EINVAL;
494
495 if (copy_from_user(args, arg, sizeof(args)))
496 return -EFAULT;
497
bbe1fe7e
ET
498 sensebuf = kzalloc(SCSI_SENSE_BUFFERSIZE, GFP_NOIO);
499 if (!sensebuf)
500 return -ENOMEM;
501
b095518e
JG
502 memset(scsi_cmd, 0, sizeof(scsi_cmd));
503
504 if (args[3]) {
295124dc 505 argsize = ATA_SECT_SIZE * args[3];
b095518e 506 argbuf = kmalloc(argsize, GFP_KERNEL);
54dac83c
JR
507 if (argbuf == NULL) {
508 rc = -ENOMEM;
509 goto error;
510 }
b095518e
JG
511
512 scsi_cmd[1] = (4 << 1); /* PIO Data-in */
513 scsi_cmd[2] = 0x0e; /* no off.line or cc, read from dev,
2dcb407e 514 block count in sector count field */
85837ebd 515 data_dir = DMA_FROM_DEVICE;
b095518e
JG
516 } else {
517 scsi_cmd[1] = (3 << 1); /* Non-data */
bbe1fe7e 518 scsi_cmd[2] = 0x20; /* cc but no off.line or data xfer */
85837ebd 519 data_dir = DMA_NONE;
b095518e
JG
520 }
521
522 scsi_cmd[0] = ATA_16;
523
524 scsi_cmd[4] = args[2];
a4f19040 525 if (args[0] == ATA_CMD_SMART) { /* hack -- ide driver does this too */
b095518e
JG
526 scsi_cmd[6] = args[3];
527 scsi_cmd[8] = args[1];
528 scsi_cmd[10] = 0x4f;
529 scsi_cmd[12] = 0xc2;
530 } else {
531 scsi_cmd[6] = args[1];
532 }
533 scsi_cmd[14] = args[0];
534
535 /* Good values for timeout and retries? Values below
536 from scsi_ioctl_send_command() for default case... */
bbe1fe7e 537 cmd_result = scsi_execute(scsidev, scsi_cmd, data_dir, argbuf, argsize,
f4f4e47e 538 sensebuf, (10*HZ), 5, 0, NULL);
bbe1fe7e
ET
539
540 if (driver_byte(cmd_result) == DRIVER_SENSE) {/* sense data available */
541 u8 *desc = sensebuf + 8;
542 cmd_result &= ~(0xFF<<24); /* DRIVER_SENSE is not an error */
543
544 /* If we set cc then ATA pass-through will cause a
545 * check condition even if no error. Filter that. */
546 if (cmd_result & SAM_STAT_CHECK_CONDITION) {
547 struct scsi_sense_hdr sshdr;
548 scsi_normalize_sense(sensebuf, SCSI_SENSE_BUFFERSIZE,
2dcb407e 549 &sshdr);
6d3bfc7b
KM
550 if (sshdr.sense_key == RECOVERED_ERROR &&
551 sshdr.asc == 0 && sshdr.ascq == 0x1d)
bbe1fe7e
ET
552 cmd_result &= ~SAM_STAT_CHECK_CONDITION;
553 }
554
555 /* Send userspace a few ATA registers (same as drivers/ide) */
2dcb407e
JG
556 if (sensebuf[0] == 0x72 && /* format is "descriptor" */
557 desc[0] == 0x09) { /* code is "ATA Descriptor" */
558 args[0] = desc[13]; /* status */
559 args[1] = desc[3]; /* error */
560 args[2] = desc[5]; /* sector count (0:7) */
bbe1fe7e
ET
561 if (copy_to_user(arg, args, sizeof(args)))
562 rc = -EFAULT;
563 }
564 }
565
566
567 if (cmd_result) {
b095518e
JG
568 rc = -EIO;
569 goto error;
570 }
571
b095518e 572 if ((argbuf)
c893a3ae 573 && copy_to_user(arg + sizeof(args), argbuf, argsize))
b095518e
JG
574 rc = -EFAULT;
575error:
bbe1fe7e 576 kfree(sensebuf);
8f760780 577 kfree(argbuf);
b095518e
JG
578 return rc;
579}
580
581/**
582 * ata_task_ioctl - Handler for HDIO_DRIVE_TASK ioctl
8e8b77dd 583 * @scsidev: Device to which we are issuing command
b095518e
JG
584 * @arg: User provided data for issuing command
585 *
586 * LOCKING:
587 * Defined by the SCSI layer. We don't really care.
588 *
589 * RETURNS:
590 * Zero on success, negative errno on error.
591 */
592int ata_task_ioctl(struct scsi_device *scsidev, void __user *arg)
593{
594 int rc = 0;
595 u8 scsi_cmd[MAX_COMMAND_SIZE];
af068bd1
DM
596 u8 args[7], *sensebuf = NULL;
597 int cmd_result;
b095518e 598
c893a3ae 599 if (arg == NULL)
b095518e
JG
600 return -EINVAL;
601
602 if (copy_from_user(args, arg, sizeof(args)))
603 return -EFAULT;
604
af068bd1
DM
605 sensebuf = kzalloc(SCSI_SENSE_BUFFERSIZE, GFP_NOIO);
606 if (!sensebuf)
607 return -ENOMEM;
608
b095518e
JG
609 memset(scsi_cmd, 0, sizeof(scsi_cmd));
610 scsi_cmd[0] = ATA_16;
611 scsi_cmd[1] = (3 << 1); /* Non-data */
af068bd1 612 scsi_cmd[2] = 0x20; /* cc but no off.line or data xfer */
b095518e
JG
613 scsi_cmd[4] = args[1];
614 scsi_cmd[6] = args[2];
615 scsi_cmd[8] = args[3];
616 scsi_cmd[10] = args[4];
617 scsi_cmd[12] = args[5];
277239f2 618 scsi_cmd[13] = args[6] & 0x4f;
b095518e
JG
619 scsi_cmd[14] = args[0];
620
b095518e 621 /* Good values for timeout and retries? Values below
2e9edbf8 622 from scsi_ioctl_send_command() for default case... */
af068bd1 623 cmd_result = scsi_execute(scsidev, scsi_cmd, DMA_NONE, NULL, 0,
f4f4e47e 624 sensebuf, (10*HZ), 5, 0, NULL);
af068bd1
DM
625
626 if (driver_byte(cmd_result) == DRIVER_SENSE) {/* sense data available */
627 u8 *desc = sensebuf + 8;
628 cmd_result &= ~(0xFF<<24); /* DRIVER_SENSE is not an error */
629
630 /* If we set cc then ATA pass-through will cause a
631 * check condition even if no error. Filter that. */
632 if (cmd_result & SAM_STAT_CHECK_CONDITION) {
633 struct scsi_sense_hdr sshdr;
634 scsi_normalize_sense(sensebuf, SCSI_SENSE_BUFFERSIZE,
635 &sshdr);
6d3bfc7b
KM
636 if (sshdr.sense_key == RECOVERED_ERROR &&
637 sshdr.asc == 0 && sshdr.ascq == 0x1d)
af068bd1
DM
638 cmd_result &= ~SAM_STAT_CHECK_CONDITION;
639 }
640
641 /* Send userspace ATA registers */
642 if (sensebuf[0] == 0x72 && /* format is "descriptor" */
643 desc[0] == 0x09) {/* code is "ATA Descriptor" */
644 args[0] = desc[13]; /* status */
645 args[1] = desc[3]; /* error */
646 args[2] = desc[5]; /* sector count (0:7) */
647 args[3] = desc[7]; /* lbal */
648 args[4] = desc[9]; /* lbam */
649 args[5] = desc[11]; /* lbah */
650 args[6] = desc[12]; /* select */
651 if (copy_to_user(arg, args, sizeof(args)))
652 rc = -EFAULT;
653 }
654 }
655
656 if (cmd_result) {
b095518e 657 rc = -EIO;
af068bd1
DM
658 goto error;
659 }
b095518e 660
af068bd1
DM
661 error:
662 kfree(sensebuf);
b095518e
JG
663 return rc;
664}
665
e3cf95dd
AC
666static int ata_ioc32(struct ata_port *ap)
667{
668 if (ap->flags & ATA_FLAG_PIO_DMA)
669 return 1;
670 if (ap->pflags & ATA_PFLAG_PIO32)
671 return 1;
672 return 0;
673}
674
94be9a58
JG
675int ata_sas_scsi_ioctl(struct ata_port *ap, struct scsi_device *scsidev,
676 int cmd, void __user *arg)
1da177e4 677{
1da177e4 678 int val = -EINVAL, rc = -EINVAL;
e3cf95dd 679 unsigned long flags;
1da177e4 680
1da177e4
LT
681 switch (cmd) {
682 case ATA_IOC_GET_IO32:
e3cf95dd
AC
683 spin_lock_irqsave(ap->lock, flags);
684 val = ata_ioc32(ap);
685 spin_unlock_irqrestore(ap->lock, flags);
1da177e4
LT
686 if (copy_to_user(arg, &val, 1))
687 return -EFAULT;
688 return 0;
689
690 case ATA_IOC_SET_IO32:
691 val = (unsigned long) arg;
e3cf95dd
AC
692 rc = 0;
693 spin_lock_irqsave(ap->lock, flags);
694 if (ap->pflags & ATA_PFLAG_PIO32CHANGE) {
695 if (val)
696 ap->pflags |= ATA_PFLAG_PIO32;
697 else
698 ap->pflags &= ~ATA_PFLAG_PIO32;
699 } else {
700 if (val != ata_ioc32(ap))
701 rc = -EINVAL;
702 }
703 spin_unlock_irqrestore(ap->lock, flags);
704 return rc;
1da177e4 705
5924b74c 706 case HDIO_GET_IDENTITY:
94be9a58 707 return ata_get_identity(ap, scsidev, arg);
5924b74c 708
b095518e
JG
709 case HDIO_DRIVE_CMD:
710 if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
711 return -EACCES;
712 return ata_cmd_ioctl(scsidev, arg);
713
714 case HDIO_DRIVE_TASK:
715 if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
716 return -EACCES;
717 return ata_task_ioctl(scsidev, arg);
718
1da177e4
LT
719 default:
720 rc = -ENOTTY;
721 break;
722 }
723
1da177e4
LT
724 return rc;
725}
94be9a58
JG
726EXPORT_SYMBOL_GPL(ata_sas_scsi_ioctl);
727
728int ata_scsi_ioctl(struct scsi_device *scsidev, int cmd, void __user *arg)
729{
730 return ata_sas_scsi_ioctl(ata_shost_to_port(scsidev->host),
731 scsidev, cmd, arg);
732}
733EXPORT_SYMBOL_GPL(ata_scsi_ioctl);
1da177e4
LT
734
735/**
736 * ata_scsi_qc_new - acquire new ata_queued_cmd reference
1da177e4
LT
737 * @dev: ATA device to which the new command is attached
738 * @cmd: SCSI command that originated this ATA command
1da177e4
LT
739 *
740 * Obtain a reference to an unused ata_queued_cmd structure,
741 * which is the basic libata structure representing a single
742 * ATA command sent to the hardware.
743 *
744 * If a command was available, fill in the SCSI-specific
745 * portions of the structure with information on the
746 * current command.
747 *
748 * LOCKING:
cca3974e 749 * spin_lock_irqsave(host lock)
1da177e4
LT
750 *
751 * RETURNS:
752 * Command allocated, or %NULL if none available.
753 */
7102d230 754static struct ata_queued_cmd *ata_scsi_qc_new(struct ata_device *dev,
b27dcfb0 755 struct scsi_cmnd *cmd)
1da177e4
LT
756{
757 struct ata_queued_cmd *qc;
758
12cb5ce1 759 qc = ata_qc_new_init(dev, cmd->request->tag);
1da177e4
LT
760 if (qc) {
761 qc->scsicmd = cmd;
b27dcfb0 762 qc->scsidone = cmd->scsi_done;
1da177e4 763
ff2aeb1e 764 qc->sg = scsi_sglist(cmd);
7120165c 765 qc->n_elem = scsi_sg_count(cmd);
1da177e4
LT
766 } else {
767 cmd->result = (DID_OK << 16) | (QUEUE_FULL << 1);
b27dcfb0 768 cmd->scsi_done(cmd);
1da177e4
LT
769 }
770
771 return qc;
772}
773
aacda375
TH
774static void ata_qc_set_pc_nbytes(struct ata_queued_cmd *qc)
775{
776 struct scsi_cmnd *scmd = qc->scsicmd;
777
778 qc->extrabytes = scmd->request->extra_len;
779 qc->nbytes = scsi_bufflen(scmd) + qc->extrabytes;
780}
781
b095518e
JG
782/**
783 * ata_dump_status - user friendly display of error info
784 * @id: id of the port in question
785 * @tf: ptr to filled out taskfile
786 *
787 * Decode and dump the ATA error/status registers for the user so
788 * that they have some idea what really happened at the non
789 * make-believe layer.
790 *
791 * LOCKING:
792 * inherited from caller
793 */
7102d230 794static void ata_dump_status(unsigned id, struct ata_taskfile *tf)
b095518e
JG
795{
796 u8 stat = tf->command, err = tf->feature;
797
798 printk(KERN_WARNING "ata%u: status=0x%02x { ", id, stat);
799 if (stat & ATA_BUSY) {
800 printk("Busy }\n"); /* Data is not valid in this case */
801 } else {
802 if (stat & 0x40) printk("DriveReady ");
803 if (stat & 0x20) printk("DeviceFault ");
804 if (stat & 0x10) printk("SeekComplete ");
805 if (stat & 0x08) printk("DataRequest ");
806 if (stat & 0x04) printk("CorrectedError ");
27f00e53 807 if (stat & 0x02) printk("Sense ");
b095518e
JG
808 if (stat & 0x01) printk("Error ");
809 printk("}\n");
810
811 if (err) {
812 printk(KERN_WARNING "ata%u: error=0x%02x { ", id, err);
813 if (err & 0x04) printk("DriveStatusError ");
814 if (err & 0x80) {
815 if (err & 0x04) printk("BadCRC ");
816 else printk("Sector ");
817 }
818 if (err & 0x40) printk("UncorrectableError ");
819 if (err & 0x10) printk("SectorIdNotFound ");
820 if (err & 0x02) printk("TrackZeroNotFound ");
821 if (err & 0x01) printk("AddrMarkNotFound ");
822 printk("}\n");
823 }
824 }
825}
826
1da177e4
LT
827/**
828 * ata_to_sense_error - convert ATA error to SCSI error
8e8b77dd 829 * @id: ATA device number
1da177e4 830 * @drv_stat: value contained in ATA status register
b095518e
JG
831 * @drv_err: value contained in ATA error register
832 * @sk: the sense key we'll fill out
833 * @asc: the additional sense code we'll fill out
834 * @ascq: the additional sense code qualifier we'll fill out
246619da 835 * @verbose: be verbose
1da177e4 836 *
b095518e
JG
837 * Converts an ATA error into a SCSI error. Fill out pointers to
838 * SK, ASC, and ASCQ bytes for later use in fixed or descriptor
839 * format sense blocks.
1da177e4
LT
840 *
841 * LOCKING:
cca3974e 842 * spin_lock_irqsave(host lock)
1da177e4 843 */
7102d230
AB
844static void ata_to_sense_error(unsigned id, u8 drv_stat, u8 drv_err, u8 *sk,
845 u8 *asc, u8 *ascq, int verbose)
1da177e4 846{
b095518e 847 int i;
ffe75ef6 848
1da177e4 849 /* Based on the 3ware driver translation table */
98ac62de 850 static const unsigned char sense_table[][4] = {
1da177e4 851 /* BBD|ECC|ID|MAR */
8ae72044
HR
852 {0xd1, ABORTED_COMMAND, 0x00, 0x00},
853 // Device busy Aborted command
1da177e4 854 /* BBD|ECC|ID */
8ae72044
HR
855 {0xd0, ABORTED_COMMAND, 0x00, 0x00},
856 // Device busy Aborted command
1da177e4 857 /* ECC|MC|MARK */
8ae72044
HR
858 {0x61, HARDWARE_ERROR, 0x00, 0x00},
859 // Device fault Hardware error
1da177e4 860 /* ICRC|ABRT */ /* NB: ICRC & !ABRT is BBD */
8ae72044
HR
861 {0x84, ABORTED_COMMAND, 0x47, 0x00},
862 // Data CRC error SCSI parity error
1da177e4 863 /* MC|ID|ABRT|TRK0|MARK */
8ae72044
HR
864 {0x37, NOT_READY, 0x04, 0x00},
865 // Unit offline Not ready
1da177e4 866 /* MCR|MARK */
8ae72044
HR
867 {0x09, NOT_READY, 0x04, 0x00},
868 // Unrecovered disk error Not ready
1da177e4 869 /* Bad address mark */
8ae72044
HR
870 {0x01, MEDIUM_ERROR, 0x13, 0x00},
871 // Address mark not found for data field
872 /* TRK0 - Track 0 not found */
873 {0x02, HARDWARE_ERROR, 0x00, 0x00},
874 // Hardware error
78062c50 875 /* Abort: 0x04 is not translated here, see below */
1da177e4 876 /* Media change request */
8ae72044
HR
877 {0x08, NOT_READY, 0x04, 0x00},
878 // FIXME: faking offline
879 /* SRV/IDNF - ID not found */
880 {0x10, ILLEGAL_REQUEST, 0x21, 0x00},
881 // Logical address out of range
882 /* MC - Media Changed */
883 {0x20, UNIT_ATTENTION, 0x28, 0x00},
884 // Not ready to ready change, medium may have changed
885 /* ECC - Uncorrectable ECC error */
886 {0x40, MEDIUM_ERROR, 0x11, 0x04},
887 // Unrecovered read error
1da177e4 888 /* BBD - block marked bad */
8ae72044
HR
889 {0x80, MEDIUM_ERROR, 0x11, 0x04},
890 // Block marked bad Medium error, unrecovered read error
1da177e4
LT
891 {0xFF, 0xFF, 0xFF, 0xFF}, // END mark
892 };
98ac62de 893 static const unsigned char stat_table[][4] = {
1da177e4 894 /* Must be first because BUSY means no other bits valid */
8ae72044
HR
895 {0x80, ABORTED_COMMAND, 0x47, 0x00},
896 // Busy, fake parity for now
897 {0x40, ILLEGAL_REQUEST, 0x21, 0x04},
898 // Device ready, unaligned write command
899 {0x20, HARDWARE_ERROR, 0x44, 0x00},
900 // Device fault, internal target failure
901 {0x08, ABORTED_COMMAND, 0x47, 0x00},
902 // Timed out in xfer, fake parity for now
903 {0x04, RECOVERED_ERROR, 0x11, 0x00},
904 // Recovered ECC error Medium error, recovered
1da177e4
LT
905 {0xFF, 0xFF, 0xFF, 0xFF}, // END mark
906 };
1da177e4 907
1da177e4
LT
908 /*
909 * Is this an error we can process/parse
910 */
b095518e
JG
911 if (drv_stat & ATA_BUSY) {
912 drv_err = 0; /* Ignore the err bits, they're invalid */
1da177e4 913 }
b095518e
JG
914
915 if (drv_err) {
916 /* Look for drv_err */
917 for (i = 0; sense_table[i][0] != 0xFF; i++) {
918 /* Look for best matches first */
2e9edbf8 919 if ((sense_table[i][0] & drv_err) ==
b095518e
JG
920 sense_table[i][0]) {
921 *sk = sense_table[i][1];
922 *asc = sense_table[i][2];
923 *ascq = sense_table[i][3];
924 goto translate_done;
925 }
926 }
1da177e4 927 }
b095518e 928
78062c50
GG
929 /*
930 * Fall back to interpreting status bits. Note that if the drv_err
931 * has only the ABRT bit set, we decode drv_stat. ABRT by itself
932 * is not descriptive enough.
933 */
b095518e
JG
934 for (i = 0; stat_table[i][0] != 0xFF; i++) {
935 if (stat_table[i][0] & drv_stat) {
936 *sk = stat_table[i][1];
937 *asc = stat_table[i][2];
938 *ascq = stat_table[i][3];
939 goto translate_done;
1da177e4 940 }
b095518e 941 }
b095518e 942
78062c50
GG
943 /*
944 * We need a sensible error return here, which is tricky, and one
945 * that won't cause people to do things like return a disk wrongly.
946 */
2d202024
AC
947 *sk = ABORTED_COMMAND;
948 *asc = 0x00;
949 *ascq = 0x00;
b095518e
JG
950
951 translate_done:
246619da
TH
952 if (verbose)
953 printk(KERN_ERR "ata%u: translated ATA stat/err 0x%02x/%02x "
954 "to SCSI SK/ASC/ASCQ 0x%x/%02x/%02x\n",
955 id, drv_stat, drv_err, *sk, *asc, *ascq);
b095518e
JG
956 return;
957}
958
959/*
750426aa 960 * ata_gen_passthru_sense - Generate check condition sense block.
b095518e
JG
961 * @qc: Command that completed.
962 *
963 * This function is specific to the ATA descriptor format sense
964 * block specified for the ATA pass through commands. Regardless
965 * of whether the command errored or not, return a sense
966 * block. Copy all controller registers into the sense
84a9a8cd
GG
967 * block. If there was no error, we get the request from an ATA
968 * passthrough command, so we use the following sense data:
969 * sk = RECOVERED ERROR
970 * asc,ascq = ATA PASS-THROUGH INFORMATION AVAILABLE
971 *
b095518e
JG
972 *
973 * LOCKING:
750426aa 974 * None.
b095518e 975 */
750426aa 976static void ata_gen_passthru_sense(struct ata_queued_cmd *qc)
b095518e
JG
977{
978 struct scsi_cmnd *cmd = qc->scsicmd;
e61e0672 979 struct ata_taskfile *tf = &qc->result_tf;
b095518e
JG
980 unsigned char *sb = cmd->sense_buffer;
981 unsigned char *desc = sb + 8;
246619da 982 int verbose = qc->ap->ops->error_handler == NULL;
b095518e
JG
983
984 memset(sb, 0, SCSI_SENSE_BUFFERSIZE);
985
0e5dec47 986 cmd->result = (DRIVER_SENSE << 24) | SAM_STAT_CHECK_CONDITION;
b095518e 987
b095518e
JG
988 /*
989 * Use ata_to_sense_error() to map status register bits
990 * onto sense key, asc & ascq.
991 */
058e55e1
TH
992 if (qc->err_mask ||
993 tf->command & (ATA_BUSY | ATA_DF | ATA_ERR | ATA_DRQ)) {
44877b4e 994 ata_to_sense_error(qc->ap->print_id, tf->command, tf->feature,
246619da 995 &sb[1], &sb[2], &sb[3], verbose);
b095518e 996 sb[1] &= 0x0f;
84a9a8cd
GG
997 } else {
998 sb[1] = RECOVERED_ERROR;
999 sb[2] = 0;
1000 sb[3] = 0x1D;
1da177e4
LT
1001 }
1002
b095518e
JG
1003 /*
1004 * Sense data is current and format is descriptor.
1005 */
1006 sb[0] = 0x72;
1da177e4 1007
b095518e
JG
1008 desc[0] = 0x09;
1009
f38621b3
TH
1010 /* set length of additional sense data */
1011 sb[7] = 14;
1012 desc[1] = 12;
b095518e
JG
1013
1014 /*
1015 * Copy registers into sense buffer.
1016 */
1017 desc[2] = 0x00;
1018 desc[3] = tf->feature; /* == error reg */
1019 desc[5] = tf->nsect;
1020 desc[7] = tf->lbal;
1021 desc[9] = tf->lbam;
1022 desc[11] = tf->lbah;
1023 desc[12] = tf->device;
1024 desc[13] = tf->command; /* == status reg */
1025
1026 /*
1027 * Fill in Extend bit, and the high order bytes
1028 * if applicable.
1029 */
1030 if (tf->flags & ATA_TFLAG_LBA48) {
1031 desc[2] |= 0x01;
1032 desc[4] = tf->hob_nsect;
1033 desc[6] = tf->hob_lbal;
1034 desc[8] = tf->hob_lbam;
1035 desc[10] = tf->hob_lbah;
1da177e4 1036 }
b095518e 1037}
1da177e4 1038
b095518e 1039/**
750426aa 1040 * ata_gen_ata_sense - generate a SCSI fixed sense block
b095518e
JG
1041 * @qc: Command that we are erroring out
1042 *
d25614ba 1043 * Generate sense block for a failed ATA command @qc. Descriptor
25985edc 1044 * format is used to accommodate LBA48 block address.
b095518e
JG
1045 *
1046 * LOCKING:
750426aa 1047 * None.
b095518e 1048 */
750426aa 1049static void ata_gen_ata_sense(struct ata_queued_cmd *qc)
b095518e 1050{
d25614ba 1051 struct ata_device *dev = qc->dev;
b095518e 1052 struct scsi_cmnd *cmd = qc->scsicmd;
e61e0672 1053 struct ata_taskfile *tf = &qc->result_tf;
b095518e 1054 unsigned char *sb = cmd->sense_buffer;
d25614ba 1055 unsigned char *desc = sb + 8;
246619da 1056 int verbose = qc->ap->ops->error_handler == NULL;
d25614ba 1057 u64 block;
b095518e
JG
1058
1059 memset(sb, 0, SCSI_SENSE_BUFFERSIZE);
1060
0e5dec47 1061 cmd->result = (DRIVER_SENSE << 24) | SAM_STAT_CHECK_CONDITION;
b095518e 1062
d25614ba
TH
1063 /* sense data is current and format is descriptor */
1064 sb[0] = 0x72;
1065
1066 /* Use ata_to_sense_error() to map status register bits
b095518e
JG
1067 * onto sense key, asc & ascq.
1068 */
058e55e1
TH
1069 if (qc->err_mask ||
1070 tf->command & (ATA_BUSY | ATA_DF | ATA_ERR | ATA_DRQ)) {
44877b4e 1071 ata_to_sense_error(qc->ap->print_id, tf->command, tf->feature,
d25614ba
TH
1072 &sb[1], &sb[2], &sb[3], verbose);
1073 sb[1] &= 0x0f;
1da177e4 1074 }
1da177e4 1075
d25614ba 1076 block = ata_tf_read_block(&qc->result_tf, dev);
a7dac447 1077
d25614ba
TH
1078 /* information sense data descriptor */
1079 sb[7] = 12;
1080 desc[0] = 0x00;
1081 desc[1] = 10;
a7dac447 1082
d25614ba
TH
1083 desc[2] |= 0x80; /* valid */
1084 desc[6] = block >> 40;
1085 desc[7] = block >> 32;
1086 desc[8] = block >> 24;
1087 desc[9] = block >> 16;
1088 desc[10] = block >> 8;
1089 desc[11] = block;
1da177e4
LT
1090}
1091
a6cce2a7
BK
1092static void ata_scsi_sdev_config(struct scsi_device *sdev)
1093{
1094 sdev->use_10_for_rw = 1;
1095 sdev->use_10_for_ms = 1;
3c6bdaea 1096 sdev->no_report_opcodes = 1;
5db44863 1097 sdev->no_write_same = 1;
31cc23b3
TH
1098
1099 /* Schedule policy is determined by ->qc_defer() callback and
1100 * it needs to see every deferred qc. Set dev_blocked to 1 to
1101 * prevent SCSI midlayer from automatically deferring
1102 * requests.
1103 */
1104 sdev->max_device_blocked = 1;
a6cce2a7
BK
1105}
1106
fa2fc7f4
JB
1107/**
1108 * atapi_drain_needed - Check whether data transfer may overflow
73fd8b6d 1109 * @rq: request to be checked
fa2fc7f4
JB
1110 *
1111 * ATAPI commands which transfer variable length data to host
1112 * might overflow due to application error or hardare bug. This
1113 * function checks whether overflow should be drained and ignored
1114 * for @request.
1115 *
1116 * LOCKING:
1117 * None.
1118 *
1119 * RETURNS:
1120 * 1 if ; otherwise, 0.
1121 */
1122static int atapi_drain_needed(struct request *rq)
1123{
33659ebb 1124 if (likely(rq->cmd_type != REQ_TYPE_BLOCK_PC))
fa2fc7f4
JB
1125 return 0;
1126
7b6d91da 1127 if (!blk_rq_bytes(rq) || (rq->cmd_flags & REQ_WRITE))
fa2fc7f4
JB
1128 return 0;
1129
1130 return atapi_cmd_type(rq->cmd[0]) == ATAPI_MISC;
1131}
1132
1133static int ata_scsi_dev_config(struct scsi_device *sdev,
1134 struct ata_device *dev)
a6cce2a7 1135{
900e599e 1136 struct request_queue *q = sdev->request_queue;
1137
45fabbb7
EO
1138 if (!ata_id_has_unload(dev->id))
1139 dev->flags |= ATA_DFLAG_NO_UNLOAD;
1140
914ed354 1141 /* configure max sectors */
900e599e 1142 blk_queue_max_hw_sectors(q, dev->max_sectors);
a6cce2a7 1143
fa2fc7f4 1144 if (dev->class == ATA_DEV_ATAPI) {
fa2fc7f4
JB
1145 void *buf;
1146
729a6a30
TH
1147 sdev->sector_size = ATA_SECT_SIZE;
1148
1149 /* set DMA padding */
900e599e 1150 blk_queue_update_dma_pad(q, ATA_DMA_PAD_SZ - 1);
fa2fc7f4
JB
1151
1152 /* configure draining */
1153 buf = kmalloc(ATAPI_MAX_DRAIN, q->bounce_gfp | GFP_KERNEL);
1154 if (!buf) {
a9a79dfe 1155 ata_dev_err(dev, "drain buffer allocation failed\n");
fa2fc7f4
JB
1156 return -ENOMEM;
1157 }
1158
1159 blk_queue_dma_drain(q, atapi_drain_needed, buf, ATAPI_MAX_DRAIN);
1160 } else {
295124dc 1161 sdev->sector_size = ata_id_logical_sector_size(dev->id);
d8cf5389 1162 sdev->manage_start_stop = 1;
dde20207 1163 }
d8cf5389 1164
729a6a30
TH
1165 /*
1166 * ata_pio_sectors() expects buffer for each sector to not cross
1167 * page boundary. Enforce it by requiring buffers to be sector
1168 * aligned, which works iff sector_size is not larger than
1169 * PAGE_SIZE. ATAPI devices also need the alignment as
1170 * IDENTIFY_PACKET is executed as ATA_PROT_PIO.
1171 */
1172 if (sdev->sector_size > PAGE_SIZE)
a9a79dfe 1173 ata_dev_warn(dev,
729a6a30
TH
1174 "sector_size=%u > PAGE_SIZE, PIO may malfunction\n",
1175 sdev->sector_size);
1176
900e599e 1177 blk_queue_update_dma_alignment(q, sdev->sector_size - 1);
729a6a30 1178
f26792d5
JG
1179 if (dev->flags & ATA_DFLAG_AN)
1180 set_bit(SDEV_EVT_MEDIA_CHANGE, sdev->supported_events);
1181
a6e6ce8e
TH
1182 if (dev->flags & ATA_DFLAG_NCQ) {
1183 int depth;
1184
1185 depth = min(sdev->host->can_queue, ata_id_queue_depth(dev->id));
1186 depth = min(ATA_MAX_QUEUE - 1, depth);
db5ed4df 1187 scsi_change_queue_depth(sdev, depth);
a6e6ce8e 1188 }
fa2fc7f4 1189
900e599e 1190 blk_queue_flush_queueable(q, false);
1191
295124dc 1192 dev->sdev = sdev;
fa2fc7f4 1193 return 0;
a6cce2a7
BK
1194}
1195
1da177e4
LT
1196/**
1197 * ata_scsi_slave_config - Set SCSI device attributes
1198 * @sdev: SCSI device to examine
1199 *
1200 * This is called before we actually start reading
1201 * and writing to the device, to configure certain
1202 * SCSI mid-layer behaviors.
1203 *
1204 * LOCKING:
1205 * Defined by SCSI layer. We don't really care.
1206 */
1207
1208int ata_scsi_slave_config(struct scsi_device *sdev)
1209{
31534363
TH
1210 struct ata_port *ap = ata_shost_to_port(sdev->host);
1211 struct ata_device *dev = __ata_scsi_find_dev(ap, sdev);
fa2fc7f4 1212 int rc = 0;
31534363 1213
a6cce2a7 1214 ata_scsi_sdev_config(sdev);
1da177e4 1215
31534363 1216 if (dev)
fa2fc7f4 1217 rc = ata_scsi_dev_config(sdev, dev);
1da177e4 1218
fa2fc7f4 1219 return rc;
1da177e4
LT
1220}
1221
83c47bcb
TH
1222/**
1223 * ata_scsi_slave_destroy - SCSI device is about to be destroyed
1224 * @sdev: SCSI device to be destroyed
1225 *
1226 * @sdev is about to be destroyed for hot/warm unplugging. If
1227 * this unplugging was initiated by libata as indicated by NULL
1228 * dev->sdev, this function doesn't have to do anything.
1229 * Otherwise, SCSI layer initiated warm-unplug is in progress.
1230 * Clear dev->sdev, schedule the device for ATA detach and invoke
1231 * EH.
1232 *
1233 * LOCKING:
1234 * Defined by SCSI layer. We don't really care.
1235 */
1236void ata_scsi_slave_destroy(struct scsi_device *sdev)
1237{
1238 struct ata_port *ap = ata_shost_to_port(sdev->host);
fa2fc7f4 1239 struct request_queue *q = sdev->request_queue;
83c47bcb
TH
1240 unsigned long flags;
1241 struct ata_device *dev;
1242
1243 if (!ap->ops->error_handler)
1244 return;
1245
ba6a1308 1246 spin_lock_irqsave(ap->lock, flags);
83c47bcb
TH
1247 dev = __ata_scsi_find_dev(ap, sdev);
1248 if (dev && dev->sdev) {
1249 /* SCSI device already in CANCEL state, no need to offline it */
1250 dev->sdev = NULL;
1251 dev->flags |= ATA_DFLAG_DETACH;
1252 ata_port_schedule_eh(ap);
1253 }
ba6a1308 1254 spin_unlock_irqrestore(ap->lock, flags);
fa2fc7f4
JB
1255
1256 kfree(q->dma_drain_buffer);
1257 q->dma_drain_buffer = NULL;
1258 q->dma_drain_size = 0;
83c47bcb
TH
1259}
1260
a6e6ce8e 1261/**
f6e67035 1262 * __ata_change_queue_depth - helper for ata_scsi_change_queue_depth
6d2dd054
MPS
1263 * @ap: ATA port to which the device change the queue depth
1264 * @sdev: SCSI device to configure queue depth for
1265 * @queue_depth: new queue depth
a6e6ce8e 1266 *
f6e67035
DW
1267 * libsas and libata have different approaches for associating a sdev to
1268 * its ata_port.
a6e6ce8e 1269 *
a6e6ce8e 1270 */
f6e67035 1271int __ata_change_queue_depth(struct ata_port *ap, struct scsi_device *sdev,
db5ed4df 1272 int queue_depth)
a6e6ce8e 1273{
a6e6ce8e 1274 struct ata_device *dev;
360f654e 1275 unsigned long flags;
a6e6ce8e 1276
c3c70c44 1277 if (queue_depth < 1 || queue_depth == sdev->queue_depth)
a6e6ce8e
TH
1278 return sdev->queue_depth;
1279
1280 dev = ata_scsi_find_dev(ap, sdev);
1281 if (!dev || !ata_dev_enabled(dev))
1282 return sdev->queue_depth;
1283
c3c70c44 1284 /* NCQ enabled? */
360f654e 1285 spin_lock_irqsave(ap->lock, flags);
c3c70c44
TH
1286 dev->flags &= ~ATA_DFLAG_NCQ_OFF;
1287 if (queue_depth == 1 || !ata_ncq_enabled(dev)) {
360f654e 1288 dev->flags |= ATA_DFLAG_NCQ_OFF;
c3c70c44
TH
1289 queue_depth = 1;
1290 }
360f654e
TH
1291 spin_unlock_irqrestore(ap->lock, flags);
1292
c3c70c44
TH
1293 /* limit and apply queue depth */
1294 queue_depth = min(queue_depth, sdev->host->can_queue);
1295 queue_depth = min(queue_depth, ata_id_queue_depth(dev->id));
1296 queue_depth = min(queue_depth, ATA_MAX_QUEUE - 1);
1297
1298 if (sdev->queue_depth == queue_depth)
1299 return -EINVAL;
1300
db5ed4df 1301 return scsi_change_queue_depth(sdev, queue_depth);
a6e6ce8e
TH
1302}
1303
f6e67035
DW
1304/**
1305 * ata_scsi_change_queue_depth - SCSI callback for queue depth config
1306 * @sdev: SCSI device to configure queue depth for
1307 * @queue_depth: new queue depth
f6e67035
DW
1308 *
1309 * This is libata standard hostt->change_queue_depth callback.
1310 * SCSI will call into this callback when user tries to set queue
1311 * depth via sysfs.
1312 *
1313 * LOCKING:
1314 * SCSI layer (we don't care)
1315 *
1316 * RETURNS:
1317 * Newly configured queue depth.
1318 */
db5ed4df 1319int ata_scsi_change_queue_depth(struct scsi_device *sdev, int queue_depth)
f6e67035
DW
1320{
1321 struct ata_port *ap = ata_shost_to_port(sdev->host);
1322
db5ed4df 1323 return __ata_change_queue_depth(ap, sdev, queue_depth);
f6e67035
DW
1324}
1325
972dcafb
DG
1326/**
1327 * ata_scsi_start_stop_xlat - Translate SCSI START STOP UNIT command
1328 * @qc: Storage for translated ATA taskfile
972dcafb
DG
1329 *
1330 * Sets up an ATA taskfile to issue STANDBY (to stop) or READ VERIFY
1331 * (to start). Perhaps these commands should be preceded by
1332 * CHECK POWER MODE to see what power mode the device is already in.
1333 * [See SAT revision 5 at www.t10.org]
1334 *
1335 * LOCKING:
cca3974e 1336 * spin_lock_irqsave(host lock)
972dcafb
DG
1337 *
1338 * RETURNS:
1339 * Zero on success, non-zero on error.
1340 */
ad706991 1341static unsigned int ata_scsi_start_stop_xlat(struct ata_queued_cmd *qc)
972dcafb 1342{
542b1444 1343 struct scsi_cmnd *scmd = qc->scsicmd;
972dcafb 1344 struct ata_taskfile *tf = &qc->tf;
ad706991 1345 const u8 *cdb = scmd->cmnd;
972dcafb 1346
2e5704f6
TH
1347 if (scmd->cmd_len < 5)
1348 goto invalid_fld;
1349
972dcafb
DG
1350 tf->flags |= ATA_TFLAG_DEVICE | ATA_TFLAG_ISADDR;
1351 tf->protocol = ATA_PROT_NODATA;
542b1444 1352 if (cdb[1] & 0x1) {
972dcafb
DG
1353 ; /* ignore IMMED bit, violates sat-r05 */
1354 }
542b1444 1355 if (cdb[4] & 0x2)
ae006510 1356 goto invalid_fld; /* LOEJ bit set not supported */
542b1444 1357 if (((cdb[4] >> 4) & 0xf) != 0)
ae006510 1358 goto invalid_fld; /* power conditions not supported */
e31e8531 1359
542b1444 1360 if (cdb[4] & 0x1) {
972dcafb 1361 tf->nsect = 1; /* 1 sector, lba=0 */
9d5b1302
AL
1362
1363 if (qc->dev->flags & ATA_DFLAG_LBA) {
c44078c0 1364 tf->flags |= ATA_TFLAG_LBA;
9d5b1302
AL
1365
1366 tf->lbah = 0x0;
1367 tf->lbam = 0x0;
1368 tf->lbal = 0x0;
1369 tf->device |= ATA_LBA;
1370 } else {
1371 /* CHS */
1372 tf->lbal = 0x1; /* sect */
1373 tf->lbam = 0x0; /* cyl low */
1374 tf->lbah = 0x0; /* cyl high */
1375 }
1376
972dcafb 1377 tf->command = ATA_CMD_VERIFY; /* READ VERIFY */
920a4b10 1378 } else {
2a6e58d2
RW
1379 /* Some odd clown BIOSen issue spindown on power off (ACPI S4
1380 * or S5) causing some drives to spin up and down again.
1381 */
1382 if ((qc->ap->flags & ATA_FLAG_NO_POWEROFF_SPINDOWN) &&
1383 system_state == SYSTEM_POWER_OFF)
1384 goto skip;
1385
1386 if ((qc->ap->flags & ATA_FLAG_NO_HIBERNATE_SPINDOWN) &&
1387 system_entering_hibernation())
1388 goto skip;
1389
78981a7c
RH
1390 /* Issue ATA STANDBY IMMEDIATE command */
1391 tf->command = ATA_CMD_STANDBYNOW1;
920a4b10 1392 }
78981a7c 1393
972dcafb
DG
1394 /*
1395 * Standby and Idle condition timers could be implemented but that
1396 * would require libata to implement the Power condition mode page
1397 * and allow the user to change it. Changing mode pages requires
1398 * MODE SELECT to be implemented.
1399 */
1400
1401 return 0;
ae006510 1402
2a6e58d2 1403 invalid_fld:
542b1444 1404 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x0);
ae006510
DG
1405 /* "Invalid field in cbd" */
1406 return 1;
2a6e58d2
RW
1407 skip:
1408 scmd->result = SAM_STAT_GOOD;
1409 return 1;
972dcafb
DG
1410}
1411
1412
1da177e4
LT
1413/**
1414 * ata_scsi_flush_xlat - Translate SCSI SYNCHRONIZE CACHE command
1415 * @qc: Storage for translated ATA taskfile
1da177e4
LT
1416 *
1417 * Sets up an ATA taskfile to issue FLUSH CACHE or
1418 * FLUSH CACHE EXT.
1419 *
1420 * LOCKING:
cca3974e 1421 * spin_lock_irqsave(host lock)
1da177e4
LT
1422 *
1423 * RETURNS:
1424 * Zero on success, non-zero on error.
1425 */
ad706991 1426static unsigned int ata_scsi_flush_xlat(struct ata_queued_cmd *qc)
1da177e4
LT
1427{
1428 struct ata_taskfile *tf = &qc->tf;
1429
1430 tf->flags |= ATA_TFLAG_DEVICE;
1431 tf->protocol = ATA_PROT_NODATA;
1432
6fc49adb 1433 if (qc->dev->flags & ATA_DFLAG_FLUSH_EXT)
1da177e4
LT
1434 tf->command = ATA_CMD_FLUSH_EXT;
1435 else
1436 tf->command = ATA_CMD_FLUSH;
1437
b666da35
TH
1438 /* flush is critical for IO integrity, consider it an IO command */
1439 qc->flags |= ATA_QCFLAG_IO;
1440
1da177e4
LT
1441 return 0;
1442}
1443
3aef5231
AL
1444/**
1445 * scsi_6_lba_len - Get LBA and transfer length
542b1444 1446 * @cdb: SCSI command to translate
3aef5231
AL
1447 *
1448 * Calculate LBA and transfer length for 6-byte commands.
1449 *
1450 * RETURNS:
1451 * @plba: the LBA
1452 * @plen: the transfer length
1453 */
542b1444 1454static void scsi_6_lba_len(const u8 *cdb, u64 *plba, u32 *plen)
3aef5231
AL
1455{
1456 u64 lba = 0;
6c7b7d2b 1457 u32 len;
3aef5231
AL
1458
1459 VPRINTK("six-byte command\n");
1460
6c7b7d2b 1461 lba |= ((u64)(cdb[1] & 0x1f)) << 16;
542b1444
TH
1462 lba |= ((u64)cdb[2]) << 8;
1463 lba |= ((u64)cdb[3]);
3aef5231 1464
6c7b7d2b 1465 len = cdb[4];
3aef5231
AL
1466
1467 *plba = lba;
1468 *plen = len;
1469}
1470
1471/**
1472 * scsi_10_lba_len - Get LBA and transfer length
542b1444 1473 * @cdb: SCSI command to translate
3aef5231
AL
1474 *
1475 * Calculate LBA and transfer length for 10-byte commands.
1476 *
1477 * RETURNS:
1478 * @plba: the LBA
1479 * @plen: the transfer length
1480 */
542b1444 1481static void scsi_10_lba_len(const u8 *cdb, u64 *plba, u32 *plen)
3aef5231
AL
1482{
1483 u64 lba = 0;
1484 u32 len = 0;
1485
1486 VPRINTK("ten-byte command\n");
1487
542b1444
TH
1488 lba |= ((u64)cdb[2]) << 24;
1489 lba |= ((u64)cdb[3]) << 16;
1490 lba |= ((u64)cdb[4]) << 8;
1491 lba |= ((u64)cdb[5]);
3aef5231 1492
542b1444
TH
1493 len |= ((u32)cdb[7]) << 8;
1494 len |= ((u32)cdb[8]);
3aef5231
AL
1495
1496 *plba = lba;
1497 *plen = len;
1498}
1499
1500/**
1501 * scsi_16_lba_len - Get LBA and transfer length
542b1444 1502 * @cdb: SCSI command to translate
3aef5231
AL
1503 *
1504 * Calculate LBA and transfer length for 16-byte commands.
1505 *
1506 * RETURNS:
1507 * @plba: the LBA
1508 * @plen: the transfer length
1509 */
542b1444 1510static void scsi_16_lba_len(const u8 *cdb, u64 *plba, u32 *plen)
3aef5231
AL
1511{
1512 u64 lba = 0;
1513 u32 len = 0;
1514
1515 VPRINTK("sixteen-byte command\n");
1516
542b1444
TH
1517 lba |= ((u64)cdb[2]) << 56;
1518 lba |= ((u64)cdb[3]) << 48;
1519 lba |= ((u64)cdb[4]) << 40;
1520 lba |= ((u64)cdb[5]) << 32;
1521 lba |= ((u64)cdb[6]) << 24;
1522 lba |= ((u64)cdb[7]) << 16;
1523 lba |= ((u64)cdb[8]) << 8;
1524 lba |= ((u64)cdb[9]);
3aef5231 1525
542b1444
TH
1526 len |= ((u32)cdb[10]) << 24;
1527 len |= ((u32)cdb[11]) << 16;
1528 len |= ((u32)cdb[12]) << 8;
1529 len |= ((u32)cdb[13]);
3aef5231
AL
1530
1531 *plba = lba;
1532 *plen = len;
1533}
1534
1da177e4
LT
1535/**
1536 * ata_scsi_verify_xlat - Translate SCSI VERIFY command into an ATA one
1537 * @qc: Storage for translated ATA taskfile
1da177e4
LT
1538 *
1539 * Converts SCSI VERIFY command to an ATA READ VERIFY command.
1540 *
1541 * LOCKING:
cca3974e 1542 * spin_lock_irqsave(host lock)
1da177e4
LT
1543 *
1544 * RETURNS:
1545 * Zero on success, non-zero on error.
1546 */
ad706991 1547static unsigned int ata_scsi_verify_xlat(struct ata_queued_cmd *qc)
1da177e4 1548{
542b1444 1549 struct scsi_cmnd *scmd = qc->scsicmd;
1da177e4 1550 struct ata_taskfile *tf = &qc->tf;
8bf62ece 1551 struct ata_device *dev = qc->dev;
1da177e4 1552 u64 dev_sectors = qc->dev->n_sectors;
ad706991 1553 const u8 *cdb = scmd->cmnd;
3aef5231
AL
1554 u64 block;
1555 u32 n_block;
1da177e4
LT
1556
1557 tf->flags |= ATA_TFLAG_ISADDR | ATA_TFLAG_DEVICE;
1558 tf->protocol = ATA_PROT_NODATA;
1da177e4 1559
2e5704f6
TH
1560 if (cdb[0] == VERIFY) {
1561 if (scmd->cmd_len < 10)
1562 goto invalid_fld;
542b1444 1563 scsi_10_lba_len(cdb, &block, &n_block);
2e5704f6
TH
1564 } else if (cdb[0] == VERIFY_16) {
1565 if (scmd->cmd_len < 16)
1566 goto invalid_fld;
542b1444 1567 scsi_16_lba_len(cdb, &block, &n_block);
2e5704f6 1568 } else
ae006510 1569 goto invalid_fld;
1da177e4 1570
8bf62ece 1571 if (!n_block)
ae006510 1572 goto nothing_to_do;
8bf62ece 1573 if (block >= dev_sectors)
ae006510 1574 goto out_of_range;
8bf62ece 1575 if ((block + n_block) > dev_sectors)
ae006510 1576 goto out_of_range;
1da177e4 1577
07506697
AL
1578 if (dev->flags & ATA_DFLAG_LBA) {
1579 tf->flags |= ATA_TFLAG_LBA;
1580
c6a33e24
AL
1581 if (lba_28_ok(block, n_block)) {
1582 /* use LBA28 */
1583 tf->command = ATA_CMD_VERIFY;
1584 tf->device |= (block >> 24) & 0xf;
1585 } else if (lba_48_ok(block, n_block)) {
1586 if (!(dev->flags & ATA_DFLAG_LBA48))
1587 goto out_of_range;
07506697
AL
1588
1589 /* use LBA48 */
1590 tf->flags |= ATA_TFLAG_LBA48;
8bf62ece 1591 tf->command = ATA_CMD_VERIFY_EXT;
1da177e4 1592
8bf62ece 1593 tf->hob_nsect = (n_block >> 8) & 0xff;
1da177e4 1594
8bf62ece
AL
1595 tf->hob_lbah = (block >> 40) & 0xff;
1596 tf->hob_lbam = (block >> 32) & 0xff;
1597 tf->hob_lbal = (block >> 24) & 0xff;
c6a33e24
AL
1598 } else
1599 /* request too large even for LBA48 */
1600 goto out_of_range;
8bf62ece
AL
1601
1602 tf->nsect = n_block & 0xff;
1da177e4 1603
8bf62ece
AL
1604 tf->lbah = (block >> 16) & 0xff;
1605 tf->lbam = (block >> 8) & 0xff;
1606 tf->lbal = block & 0xff;
1da177e4 1607
8bf62ece
AL
1608 tf->device |= ATA_LBA;
1609 } else {
1610 /* CHS */
1611 u32 sect, head, cyl, track;
1612
c6a33e24
AL
1613 if (!lba_28_ok(block, n_block))
1614 goto out_of_range;
07506697 1615
8bf62ece
AL
1616 /* Convert LBA to CHS */
1617 track = (u32)block / dev->sectors;
1618 cyl = track / dev->heads;
1619 head = track % dev->heads;
1620 sect = (u32)block % dev->sectors + 1;
1621
c187c4b5
AL
1622 DPRINTK("block %u track %u cyl %u head %u sect %u\n",
1623 (u32)block, track, cyl, head, sect);
2e9edbf8
JG
1624
1625 /* Check whether the converted CHS can fit.
1626 Cylinder: 0-65535
8bf62ece
AL
1627 Head: 0-15
1628 Sector: 1-255*/
2e9edbf8 1629 if ((cyl >> 16) || (head >> 4) || (sect >> 8) || (!sect))
ae006510 1630 goto out_of_range;
2e9edbf8 1631
8bf62ece
AL
1632 tf->command = ATA_CMD_VERIFY;
1633 tf->nsect = n_block & 0xff; /* Sector count 0 means 256 sectors */
1634 tf->lbal = sect;
1635 tf->lbam = cyl;
1636 tf->lbah = cyl >> 8;
1637 tf->device |= head;
1638 }
1da177e4
LT
1639
1640 return 0;
ae006510
DG
1641
1642invalid_fld:
542b1444 1643 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x0);
ae006510
DG
1644 /* "Invalid field in cbd" */
1645 return 1;
1646
1647out_of_range:
542b1444 1648 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x21, 0x0);
ae006510
DG
1649 /* "Logical Block Address out of range" */
1650 return 1;
1651
1652nothing_to_do:
542b1444 1653 scmd->result = SAM_STAT_GOOD;
ae006510 1654 return 1;
1da177e4
LT
1655}
1656
1657/**
1658 * ata_scsi_rw_xlat - Translate SCSI r/w command into an ATA one
1659 * @qc: Storage for translated ATA taskfile
1da177e4
LT
1660 *
1661 * Converts any of six SCSI read/write commands into the
1662 * ATA counterpart, including starting sector (LBA),
1663 * sector count, and taking into account the device's LBA48
1664 * support.
1665 *
1666 * Commands %READ_6, %READ_10, %READ_16, %WRITE_6, %WRITE_10, and
1667 * %WRITE_16 are currently supported.
1668 *
1669 * LOCKING:
cca3974e 1670 * spin_lock_irqsave(host lock)
1da177e4
LT
1671 *
1672 * RETURNS:
1673 * Zero on success, non-zero on error.
1674 */
ad706991 1675static unsigned int ata_scsi_rw_xlat(struct ata_queued_cmd *qc)
1da177e4 1676{
542b1444 1677 struct scsi_cmnd *scmd = qc->scsicmd;
ad706991 1678 const u8 *cdb = scmd->cmnd;
bd056d7e 1679 unsigned int tf_flags = 0;
3aef5231
AL
1680 u64 block;
1681 u32 n_block;
bd056d7e 1682 int rc;
1da177e4 1683
542b1444 1684 if (cdb[0] == WRITE_10 || cdb[0] == WRITE_6 || cdb[0] == WRITE_16)
bd056d7e 1685 tf_flags |= ATA_TFLAG_WRITE;
1da177e4 1686
9a3dccc4 1687 /* Calculate the SCSI LBA, transfer length and FUA. */
542b1444 1688 switch (cdb[0]) {
3aef5231
AL
1689 case READ_10:
1690 case WRITE_10:
2e5704f6
TH
1691 if (unlikely(scmd->cmd_len < 10))
1692 goto invalid_fld;
542b1444 1693 scsi_10_lba_len(cdb, &block, &n_block);
3e451a49 1694 if (cdb[1] & (1 << 3))
bd056d7e 1695 tf_flags |= ATA_TFLAG_FUA;
3aef5231
AL
1696 break;
1697 case READ_6:
1698 case WRITE_6:
2e5704f6
TH
1699 if (unlikely(scmd->cmd_len < 6))
1700 goto invalid_fld;
542b1444 1701 scsi_6_lba_len(cdb, &block, &n_block);
c187c4b5
AL
1702
1703 /* for 6-byte r/w commands, transfer length 0
1704 * means 256 blocks of data, not 0 block.
1705 */
76b2bf9b
JG
1706 if (!n_block)
1707 n_block = 256;
3aef5231
AL
1708 break;
1709 case READ_16:
1710 case WRITE_16:
2e5704f6
TH
1711 if (unlikely(scmd->cmd_len < 16))
1712 goto invalid_fld;
542b1444 1713 scsi_16_lba_len(cdb, &block, &n_block);
3e451a49 1714 if (cdb[1] & (1 << 3))
bd056d7e 1715 tf_flags |= ATA_TFLAG_FUA;
3aef5231
AL
1716 break;
1717 default:
8bf62ece 1718 DPRINTK("no-byte command\n");
ae006510 1719 goto invalid_fld;
1da177e4
LT
1720 }
1721
8bf62ece
AL
1722 /* Check and compose ATA command */
1723 if (!n_block)
c187c4b5
AL
1724 /* For 10-byte and 16-byte SCSI R/W commands, transfer
1725 * length 0 means transfer 0 block of data.
1726 * However, for ATA R/W commands, sector count 0 means
1727 * 256 or 65536 sectors, not 0 sectors as in SCSI.
f51750d5
AC
1728 *
1729 * WARNING: one or two older ATA drives treat 0 as 0...
c187c4b5 1730 */
ae006510 1731 goto nothing_to_do;
1da177e4 1732
bd056d7e 1733 qc->flags |= ATA_QCFLAG_IO;
295124dc 1734 qc->nbytes = n_block * scmd->device->sector_size;
1da177e4 1735
bd056d7e
TH
1736 rc = ata_build_rw_tf(&qc->tf, qc->dev, block, n_block, tf_flags,
1737 qc->tag);
1738 if (likely(rc == 0))
1739 return 0;
ae006510 1740
bd056d7e
TH
1741 if (rc == -ERANGE)
1742 goto out_of_range;
1743 /* treat all other errors as -EINVAL, fall through */
ae006510 1744invalid_fld:
542b1444 1745 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x0);
ae006510
DG
1746 /* "Invalid field in cbd" */
1747 return 1;
1748
1749out_of_range:
542b1444 1750 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x21, 0x0);
ae006510
DG
1751 /* "Logical Block Address out of range" */
1752 return 1;
1753
1754nothing_to_do:
542b1444 1755 scmd->result = SAM_STAT_GOOD;
ae006510 1756 return 1;
1da177e4
LT
1757}
1758
77853bf2 1759static void ata_scsi_qc_complete(struct ata_queued_cmd *qc)
1da177e4 1760{
c31f571d 1761 struct ata_port *ap = qc->ap;
1da177e4 1762 struct scsi_cmnd *cmd = qc->scsicmd;
a7dac447 1763 u8 *cdb = cmd->cmnd;
2dcb407e 1764 int need_sense = (qc->err_mask != 0);
b095518e
JG
1765
1766 /* For ATA pass thru (SAT) commands, generate a sense block if
1767 * user mandated it or if there's an error. Note that if we
84a9a8cd
GG
1768 * generate because the user forced us to [CK_COND =1], a check
1769 * condition is generated and the ATA register values are returned
b095518e 1770 * whether the command completed successfully or not. If there
84a9a8cd
GG
1771 * was no error, we use the following sense data:
1772 * sk = RECOVERED ERROR
1773 * asc,ascq = ATA PASS-THROUGH INFORMATION AVAILABLE
b095518e 1774 */
a7dac447 1775 if (((cdb[0] == ATA_16) || (cdb[0] == ATA_12)) &&
2dcb407e 1776 ((cdb[2] & 0x20) || need_sense)) {
750426aa 1777 ata_gen_passthru_sense(qc);
b095518e
JG
1778 } else {
1779 if (!need_sense) {
1780 cmd->result = SAM_STAT_GOOD;
1781 } else {
1782 /* TODO: decide which descriptor format to use
1783 * for 48b LBA devices and call that here
1784 * instead of the fixed desc, which is only
1785 * good for smaller LBA (and maybe CHS?)
1786 * devices.
1787 */
750426aa 1788 ata_gen_ata_sense(qc);
b095518e
JG
1789 }
1790 }
1da177e4 1791
c31f571d 1792 if (need_sense && !ap->ops->error_handler)
44877b4e 1793 ata_dump_status(ap->print_id, &qc->result_tf);
1da177e4
LT
1794
1795 qc->scsidone(cmd);
1796
77853bf2 1797 ata_qc_free(qc);
1da177e4
LT
1798}
1799
1800/**
1801 * ata_scsi_translate - Translate then issue SCSI command to ATA device
1da177e4
LT
1802 * @dev: ATA device to which the command is addressed
1803 * @cmd: SCSI command to execute
1da177e4
LT
1804 * @xlat_func: Actor which translates @cmd to an ATA taskfile
1805 *
1806 * Our ->queuecommand() function has decided that the SCSI
1807 * command issued can be directly translated into an ATA
1808 * command, rather than handled internally.
1809 *
1810 * This function sets up an ata_queued_cmd structure for the
1811 * SCSI command, and sends that ata_queued_cmd to the hardware.
1812 *
ae006510
DG
1813 * The xlat_func argument (actor) returns 0 if ready to execute
1814 * ATA command, else 1 to finish translation. If 1 is returned
1815 * then cmd->result (and possibly cmd->sense_buffer) are assumed
1816 * to be set reflecting an error condition or clean (early)
1817 * termination.
1818 *
1da177e4 1819 * LOCKING:
cca3974e 1820 * spin_lock_irqsave(host lock)
2115ea94
TH
1821 *
1822 * RETURNS:
1823 * 0 on success, SCSI_ML_QUEUE_DEVICE_BUSY if the command
1824 * needs to be deferred.
1da177e4 1825 */
2115ea94 1826static int ata_scsi_translate(struct ata_device *dev, struct scsi_cmnd *cmd,
2115ea94 1827 ata_xlat_func_t xlat_func)
1da177e4 1828{
31cc23b3 1829 struct ata_port *ap = dev->link->ap;
1da177e4 1830 struct ata_queued_cmd *qc;
31cc23b3 1831 int rc;
1da177e4
LT
1832
1833 VPRINTK("ENTER\n");
1834
b27dcfb0 1835 qc = ata_scsi_qc_new(dev, cmd);
1da177e4 1836 if (!qc)
ae006510 1837 goto err_mem;
1da177e4
LT
1838
1839 /* data is present; dma-map it */
be7db055 1840 if (cmd->sc_data_direction == DMA_FROM_DEVICE ||
1841 cmd->sc_data_direction == DMA_TO_DEVICE) {
7120165c 1842 if (unlikely(scsi_bufflen(cmd) < 1)) {
a9a79dfe 1843 ata_dev_warn(dev, "WARNING: zero len r/w req\n");
ae006510 1844 goto err_did;
1da177e4
LT
1845 }
1846
7120165c 1847 ata_sg_init(qc, scsi_sglist(cmd), scsi_sg_count(cmd));
1da177e4
LT
1848
1849 qc->dma_dir = cmd->sc_data_direction;
1850 }
1851
1852 qc->complete_fn = ata_scsi_qc_complete;
1853
ad706991 1854 if (xlat_func(qc))
ae006510 1855 goto early_finish;
1da177e4 1856
31cc23b3
TH
1857 if (ap->ops->qc_defer) {
1858 if ((rc = ap->ops->qc_defer(qc)))
1859 goto defer;
1860 }
1861
1da177e4 1862 /* select device, send command to hardware */
8e0e694a 1863 ata_qc_issue(qc);
1da177e4
LT
1864
1865 VPRINTK("EXIT\n");
2115ea94 1866 return 0;
1da177e4 1867
ae006510 1868early_finish:
2dcb407e 1869 ata_qc_free(qc);
b27dcfb0 1870 cmd->scsi_done(cmd);
ae006510 1871 DPRINTK("EXIT - early finish (good or error)\n");
2115ea94 1872 return 0;
ae006510
DG
1873
1874err_did:
1da177e4 1875 ata_qc_free(qc);
ae006510 1876 cmd->result = (DID_ERROR << 16);
b27dcfb0 1877 cmd->scsi_done(cmd);
253b92ec 1878err_mem:
ae006510 1879 DPRINTK("EXIT - internal\n");
2115ea94 1880 return 0;
3dc1d881
TH
1881
1882defer:
31cc23b3 1883 ata_qc_free(qc);
3dc1d881 1884 DPRINTK("EXIT - defer\n");
31cc23b3
TH
1885 if (rc == ATA_DEFER_LINK)
1886 return SCSI_MLQUEUE_DEVICE_BUSY;
1887 else
1888 return SCSI_MLQUEUE_HOST_BUSY;
1da177e4
LT
1889}
1890
1891/**
1892 * ata_scsi_rbuf_get - Map response buffer.
ec2a20e6 1893 * @cmd: SCSI command containing buffer to be mapped.
87340e98
TH
1894 * @flags: unsigned long variable to store irq enable status
1895 * @copy_in: copy in from user buffer
1da177e4 1896 *
87340e98 1897 * Prepare buffer for simulated SCSI commands.
1da177e4
LT
1898 *
1899 * LOCKING:
87340e98 1900 * spin_lock_irqsave(ata_scsi_rbuf_lock) on success
1da177e4
LT
1901 *
1902 * RETURNS:
87340e98 1903 * Pointer to response buffer.
1da177e4 1904 */
87340e98
TH
1905static void *ata_scsi_rbuf_get(struct scsi_cmnd *cmd, bool copy_in,
1906 unsigned long *flags)
1da177e4 1907{
87340e98 1908 spin_lock_irqsave(&ata_scsi_rbuf_lock, *flags);
1da177e4 1909
87340e98
TH
1910 memset(ata_scsi_rbuf, 0, ATA_SCSI_RBUF_SIZE);
1911 if (copy_in)
1912 sg_copy_to_buffer(scsi_sglist(cmd), scsi_sg_count(cmd),
1913 ata_scsi_rbuf, ATA_SCSI_RBUF_SIZE);
1914 return ata_scsi_rbuf;
1da177e4
LT
1915}
1916
1917/**
1918 * ata_scsi_rbuf_put - Unmap response buffer.
1919 * @cmd: SCSI command containing buffer to be unmapped.
87340e98
TH
1920 * @copy_out: copy out result
1921 * @flags: @flags passed to ata_scsi_rbuf_get()
1da177e4 1922 *
87340e98
TH
1923 * Returns rbuf buffer. The result is copied to @cmd's buffer if
1924 * @copy_back is true.
1da177e4
LT
1925 *
1926 * LOCKING:
87340e98 1927 * Unlocks ata_scsi_rbuf_lock.
1da177e4 1928 */
87340e98
TH
1929static inline void ata_scsi_rbuf_put(struct scsi_cmnd *cmd, bool copy_out,
1930 unsigned long *flags)
1da177e4 1931{
87340e98
TH
1932 if (copy_out)
1933 sg_copy_from_buffer(scsi_sglist(cmd), scsi_sg_count(cmd),
1934 ata_scsi_rbuf, ATA_SCSI_RBUF_SIZE);
1935 spin_unlock_irqrestore(&ata_scsi_rbuf_lock, *flags);
1da177e4
LT
1936}
1937
1938/**
1939 * ata_scsi_rbuf_fill - wrapper for SCSI command simulators
1940 * @args: device IDENTIFY data / SCSI command of interest.
1941 * @actor: Callback hook for desired SCSI command simulator
1942 *
1943 * Takes care of the hard work of simulating a SCSI command...
1944 * Mapping the response buffer, calling the command's handler,
1945 * and handling the handler's return value. This return value
1946 * indicates whether the handler wishes the SCSI command to be
ae006510
DG
1947 * completed successfully (0), or not (in which case cmd->result
1948 * and sense buffer are assumed to be set).
1da177e4
LT
1949 *
1950 * LOCKING:
cca3974e 1951 * spin_lock_irqsave(host lock)
1da177e4 1952 */
f0761be3 1953static void ata_scsi_rbuf_fill(struct ata_scsi_args *args,
87340e98 1954 unsigned int (*actor)(struct ata_scsi_args *args, u8 *rbuf))
1da177e4
LT
1955{
1956 u8 *rbuf;
87340e98 1957 unsigned int rc;
1da177e4 1958 struct scsi_cmnd *cmd = args->cmd;
b445c568
JG
1959 unsigned long flags;
1960
87340e98
TH
1961 rbuf = ata_scsi_rbuf_get(cmd, false, &flags);
1962 rc = actor(args, rbuf);
1963 ata_scsi_rbuf_put(cmd, rc == 0, &flags);
b445c568 1964
ae006510 1965 if (rc == 0)
1da177e4 1966 cmd->result = SAM_STAT_GOOD;
ae006510 1967 args->done(cmd);
1da177e4
LT
1968}
1969
1970/**
1971 * ata_scsiop_inq_std - Simulate INQUIRY command
1972 * @args: device IDENTIFY data / SCSI command of interest.
1973 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4
LT
1974 *
1975 * Returns standard device identification data associated
b142eb65 1976 * with non-VPD INQUIRY command output.
1da177e4
LT
1977 *
1978 * LOCKING:
cca3974e 1979 * spin_lock_irqsave(host lock)
1da177e4 1980 */
87340e98 1981static unsigned int ata_scsiop_inq_std(struct ata_scsi_args *args, u8 *rbuf)
1da177e4 1982{
87340e98 1983 const u8 versions[] = {
f9ca5ab8 1984 0x00,
87340e98
TH
1985 0x60, /* SAM-3 (no version claimed) */
1986
1987 0x03,
1988 0x20, /* SBC-2 (no version claimed) */
1989
1990 0x02,
1991 0x60 /* SPC-3 (no version claimed) */
1992 };
f9ca5ab8
HR
1993 const u8 versions_zbc[] = {
1994 0x00,
1995 0xA0, /* SAM-5 (no version claimed) */
1996
1997 0x04,
1998 0xC0, /* SBC-3 (no version claimed) */
1999
2000 0x04,
2001 0x60, /* SPC-4 (no version claimed) */
2002
2003 0x60,
2004 0x20, /* ZBC (no version claimed) */
2005 };
2006
1da177e4
LT
2007 u8 hdr[] = {
2008 TYPE_DISK,
2009 0,
2010 0x5, /* claim SPC-3 version compatibility */
2011 2,
2012 95 - 4
2013 };
2014
87340e98
TH
2015 VPRINTK("ENTER\n");
2016
0628ee7c
NK
2017 /* set scsi removable (RMB) bit per ata bit */
2018 if (ata_id_removable(args->id))
1da177e4
LT
2019 hdr[1] |= (1 << 7);
2020
f9ca5ab8
HR
2021 if (args->dev->class == ATA_DEV_ZAC) {
2022 hdr[0] = TYPE_ZBC;
2023 hdr[2] = 0x6; /* ZBC is defined in SPC-4 */
2024 }
2025
1da177e4 2026 memcpy(rbuf, hdr, sizeof(hdr));
87340e98
TH
2027 memcpy(&rbuf[8], "ATA ", 8);
2028 ata_id_string(args->id, &rbuf[16], ATA_ID_PROD, 16);
c49a6bf5
KB
2029
2030 /* From SAT, use last 2 words from fw rev unless they are spaces */
2031 ata_id_string(args->id, &rbuf[32], ATA_ID_FW_REV + 2, 4);
2032 if (strncmp(&rbuf[32], " ", 4) == 0)
2033 ata_id_string(args->id, &rbuf[32], ATA_ID_FW_REV, 4);
1da177e4 2034
87340e98
TH
2035 if (rbuf[32] == 0 || rbuf[32] == ' ')
2036 memcpy(&rbuf[32], "n/a ", 4);
1da177e4 2037
f9ca5ab8
HR
2038 if (args->dev->class == ATA_DEV_ZAC)
2039 memcpy(rbuf + 58, versions_zbc, sizeof(versions_zbc));
2040 else
2041 memcpy(rbuf + 58, versions, sizeof(versions));
1da177e4
LT
2042
2043 return 0;
2044}
2045
2046/**
b142eb65 2047 * ata_scsiop_inq_00 - Simulate INQUIRY VPD page 0, list of pages
1da177e4
LT
2048 * @args: device IDENTIFY data / SCSI command of interest.
2049 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4 2050 *
b142eb65 2051 * Returns list of inquiry VPD pages available.
1da177e4
LT
2052 *
2053 * LOCKING:
cca3974e 2054 * spin_lock_irqsave(host lock)
1da177e4 2055 */
87340e98 2056static unsigned int ata_scsiop_inq_00(struct ata_scsi_args *args, u8 *rbuf)
1da177e4
LT
2057{
2058 const u8 pages[] = {
2059 0x00, /* page 0x00, this page */
2060 0x80, /* page 0x80, unit serial no page */
1e9dbc92
MW
2061 0x83, /* page 0x83, device ident page */
2062 0x89, /* page 0x89, ata info page */
18f0f978 2063 0xb0, /* page 0xb0, block limits page */
1e9dbc92 2064 0xb1, /* page 0xb1, block device characteristics page */
02e0a604 2065 0xb2, /* page 0xb2, thin provisioning page */
1da177e4 2066 };
1da177e4 2067
87340e98
TH
2068 rbuf[3] = sizeof(pages); /* number of supported VPD pages */
2069 memcpy(rbuf + 4, pages, sizeof(pages));
1da177e4
LT
2070 return 0;
2071}
2072
2073/**
b142eb65 2074 * ata_scsiop_inq_80 - Simulate INQUIRY VPD page 80, device serial number
1da177e4
LT
2075 * @args: device IDENTIFY data / SCSI command of interest.
2076 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4
LT
2077 *
2078 * Returns ATA device serial number.
2079 *
2080 * LOCKING:
cca3974e 2081 * spin_lock_irqsave(host lock)
1da177e4 2082 */
87340e98 2083static unsigned int ata_scsiop_inq_80(struct ata_scsi_args *args, u8 *rbuf)
1da177e4
LT
2084{
2085 const u8 hdr[] = {
2086 0,
2087 0x80, /* this page code */
2088 0,
a0cf733b 2089 ATA_ID_SERNO_LEN, /* page len */
1da177e4 2090 };
1da177e4 2091
87340e98
TH
2092 memcpy(rbuf, hdr, sizeof(hdr));
2093 ata_id_string(args->id, (unsigned char *) &rbuf[4],
2094 ATA_ID_SERNO, ATA_ID_SERNO_LEN);
1da177e4
LT
2095 return 0;
2096}
2097
1da177e4 2098/**
b142eb65 2099 * ata_scsiop_inq_83 - Simulate INQUIRY VPD page 83, device identity
1da177e4
LT
2100 * @args: device IDENTIFY data / SCSI command of interest.
2101 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4 2102 *
b142eb65
JG
2103 * Yields two logical unit device identification designators:
2104 * - vendor specific ASCII containing the ATA serial number
2105 * - SAT defined "t10 vendor id based" containing ASCII vendor
2106 * name ("ATA "), model and serial numbers.
1da177e4
LT
2107 *
2108 * LOCKING:
cca3974e 2109 * spin_lock_irqsave(host lock)
1da177e4 2110 */
87340e98 2111static unsigned int ata_scsiop_inq_83(struct ata_scsi_args *args, u8 *rbuf)
1da177e4 2112{
b142eb65 2113 const int sat_model_serial_desc_len = 68;
87340e98 2114 int num;
1da177e4 2115
b142eb65
JG
2116 rbuf[1] = 0x83; /* this page code */
2117 num = 4;
2118
87340e98
TH
2119 /* piv=0, assoc=lu, code_set=ACSII, designator=vendor */
2120 rbuf[num + 0] = 2;
2121 rbuf[num + 3] = ATA_ID_SERNO_LEN;
2122 num += 4;
2123 ata_id_string(args->id, (unsigned char *) rbuf + num,
2124 ATA_ID_SERNO, ATA_ID_SERNO_LEN);
2125 num += ATA_ID_SERNO_LEN;
2126
2127 /* SAT defined lu model and serial numbers descriptor */
2128 /* piv=0, assoc=lu, code_set=ACSII, designator=t10 vendor id */
2129 rbuf[num + 0] = 2;
2130 rbuf[num + 1] = 1;
2131 rbuf[num + 3] = sat_model_serial_desc_len;
2132 num += 4;
2133 memcpy(rbuf + num, "ATA ", 8);
2134 num += 8;
2135 ata_id_string(args->id, (unsigned char *) rbuf + num, ATA_ID_PROD,
2136 ATA_ID_PROD_LEN);
2137 num += ATA_ID_PROD_LEN;
2138 ata_id_string(args->id, (unsigned char *) rbuf + num, ATA_ID_SERNO,
2139 ATA_ID_SERNO_LEN);
2140 num += ATA_ID_SERNO_LEN;
2141
6b3b9d73
HR
2142 if (ata_id_has_wwn(args->id)) {
2143 /* SAT defined lu world wide name */
2144 /* piv=0, assoc=lu, code_set=binary, designator=NAA */
2145 rbuf[num + 0] = 1;
2146 rbuf[num + 1] = 3;
2147 rbuf[num + 3] = ATA_ID_WWN_LEN;
2148 num += 4;
2149 ata_id_string(args->id, (unsigned char *) rbuf + num,
2150 ATA_ID_WWN, ATA_ID_WWN_LEN);
2151 num += ATA_ID_WWN_LEN;
2152 }
b142eb65 2153 rbuf[3] = num - 4; /* page len (assume less than 256 bytes) */
1da177e4
LT
2154 return 0;
2155}
2156
ad355b46
JG
2157/**
2158 * ata_scsiop_inq_89 - Simulate INQUIRY VPD page 89, ATA info
2159 * @args: device IDENTIFY data / SCSI command of interest.
2160 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
ad355b46
JG
2161 *
2162 * Yields SAT-specified ATA VPD page.
2163 *
2164 * LOCKING:
2165 * spin_lock_irqsave(host lock)
2166 */
87340e98 2167static unsigned int ata_scsiop_inq_89(struct ata_scsi_args *args, u8 *rbuf)
ad355b46 2168{
ad355b46 2169 struct ata_taskfile tf;
ad355b46 2170
ad355b46
JG
2171 memset(&tf, 0, sizeof(tf));
2172
87340e98
TH
2173 rbuf[1] = 0x89; /* our page code */
2174 rbuf[2] = (0x238 >> 8); /* page size fixed at 238h */
2175 rbuf[3] = (0x238 & 0xff);
ad355b46 2176
87340e98
TH
2177 memcpy(&rbuf[8], "linux ", 8);
2178 memcpy(&rbuf[16], "libata ", 16);
2179 memcpy(&rbuf[32], DRV_VERSION, 4);
ad355b46
JG
2180
2181 /* we don't store the ATA device signature, so we fake it */
2182
2183 tf.command = ATA_DRDY; /* really, this is Status reg */
2184 tf.lbal = 0x1;
2185 tf.nsect = 0x1;
2186
87340e98
TH
2187 ata_tf_to_fis(&tf, 0, 1, &rbuf[36]); /* TODO: PMP? */
2188 rbuf[36] = 0x34; /* force D2H Reg FIS (34h) */
ad355b46 2189
87340e98 2190 rbuf[56] = ATA_CMD_ID_ATA;
ad355b46 2191
87340e98 2192 memcpy(&rbuf[60], &args->id[0], 512);
ad355b46
JG
2193 return 0;
2194}
2195
18f0f978
CH
2196static unsigned int ata_scsiop_inq_b0(struct ata_scsi_args *args, u8 *rbuf)
2197{
295124dc 2198 u16 min_io_sectors;
18f0f978
CH
2199
2200 rbuf[1] = 0xb0;
2201 rbuf[3] = 0x3c; /* required VPD size with unmap support */
2202
2203 /*
2204 * Optimal transfer length granularity.
2205 *
2206 * This is always one physical block, but for disks with a smaller
2207 * logical than physical sector size we need to figure out what the
2208 * latter is.
2209 */
295124dc 2210 min_io_sectors = 1 << ata_id_log2_per_physical_sector(args->id);
18f0f978
CH
2211 put_unaligned_be16(min_io_sectors, &rbuf[6]);
2212
2213 /*
2214 * Optimal unmap granularity.
2215 *
2216 * The ATA spec doesn't even know about a granularity or alignment
2217 * for the TRIM command. We can leave away most of the unmap related
2218 * VPD page entries, but we have specifify a granularity to signal
2219 * that we support some form of unmap - in thise case via WRITE SAME
2220 * with the unmap bit set.
2221 */
e78db4df 2222 if (ata_id_has_trim(args->id)) {
5f4e2066 2223 put_unaligned_be64(65535 * 512 / 8, &rbuf[36]);
18f0f978 2224 put_unaligned_be32(1, &rbuf[28]);
e78db4df 2225 }
18f0f978
CH
2226
2227 return 0;
2228}
2229
1e9dbc92
MW
2230static unsigned int ata_scsiop_inq_b1(struct ata_scsi_args *args, u8 *rbuf)
2231{
4bca3286
MP
2232 int form_factor = ata_id_form_factor(args->id);
2233 int media_rotation_rate = ata_id_rotation_rate(args->id);
2234
1e9dbc92
MW
2235 rbuf[1] = 0xb1;
2236 rbuf[3] = 0x3c;
4bca3286
MP
2237 rbuf[4] = media_rotation_rate >> 8;
2238 rbuf[5] = media_rotation_rate;
2239 rbuf[7] = form_factor;
1e9dbc92
MW
2240
2241 return 0;
2242}
2243
02e0a604
MP
2244static unsigned int ata_scsiop_inq_b2(struct ata_scsi_args *args, u8 *rbuf)
2245{
2246 /* SCSI Thin Provisioning VPD page: SBC-3 rev 22 or later */
2247 rbuf[1] = 0xb2;
2248 rbuf[3] = 0x4;
2249 rbuf[5] = 1 << 6; /* TPWS */
2250
2251 return 0;
2252}
2253
1da177e4 2254/**
0cba632b 2255 * ata_scsiop_noop - Command handler that simply returns success.
1da177e4
LT
2256 * @args: device IDENTIFY data / SCSI command of interest.
2257 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4
LT
2258 *
2259 * No operation. Simply returns success to caller, to indicate
2260 * that the caller should successfully complete this SCSI command.
2261 *
2262 * LOCKING:
cca3974e 2263 * spin_lock_irqsave(host lock)
1da177e4 2264 */
87340e98 2265static unsigned int ata_scsiop_noop(struct ata_scsi_args *args, u8 *rbuf)
1da177e4
LT
2266{
2267 VPRINTK("ENTER\n");
2268 return 0;
2269}
2270
6ca8e794
PB
2271/**
2272 * modecpy - Prepare response for MODE SENSE
2273 * @dest: output buffer
2274 * @src: data being copied
2275 * @n: length of mode page
2276 * @changeable: whether changeable parameters are requested
2277 *
2278 * Generate a generic MODE SENSE page for either current or changeable
2279 * parameters.
2280 *
2281 * LOCKING:
2282 * None.
2283 */
2284static void modecpy(u8 *dest, const u8 *src, int n, bool changeable)
2285{
2286 if (changeable) {
2287 memcpy(dest, src, 2);
2288 memset(dest + 2, 0, n - 2);
2289 } else {
2290 memcpy(dest, src, n);
2291 }
2292}
2293
1da177e4
LT
2294/**
2295 * ata_msense_caching - Simulate MODE SENSE caching info page
2296 * @id: device IDENTIFY data
87340e98 2297 * @buf: output buffer
6ca8e794 2298 * @changeable: whether changeable parameters are requested
1da177e4
LT
2299 *
2300 * Generate a caching info page, which conditionally indicates
2301 * write caching to the SCSI layer, depending on device
2302 * capabilities.
2303 *
2304 * LOCKING:
2305 * None.
2306 */
6ca8e794 2307static unsigned int ata_msense_caching(u16 *id, u8 *buf, bool changeable)
1da177e4 2308{
6ca8e794 2309 modecpy(buf, def_cache_mpage, sizeof(def_cache_mpage), changeable);
1b26d29c 2310 if (changeable || ata_id_wcache_enabled(id))
87340e98 2311 buf[2] |= (1 << 2); /* write cache enable */
6ca8e794 2312 if (!changeable && !ata_id_rahead_enabled(id))
87340e98
TH
2313 buf[12] |= (1 << 5); /* disable read ahead */
2314 return sizeof(def_cache_mpage);
1da177e4
LT
2315}
2316
2317/**
2318 * ata_msense_ctl_mode - Simulate MODE SENSE control mode page
87340e98 2319 * @buf: output buffer
6ca8e794 2320 * @changeable: whether changeable parameters are requested
1da177e4
LT
2321 *
2322 * Generate a generic MODE SENSE control mode page.
2323 *
2324 * LOCKING:
2325 * None.
2326 */
6ca8e794 2327static unsigned int ata_msense_ctl_mode(u8 *buf, bool changeable)
1da177e4 2328{
6ca8e794 2329 modecpy(buf, def_control_mpage, sizeof(def_control_mpage), changeable);
00ac37f5 2330 return sizeof(def_control_mpage);
1da177e4
LT
2331}
2332
2333/**
2334 * ata_msense_rw_recovery - Simulate MODE SENSE r/w error recovery page
ec2a20e6 2335 * @buf: output buffer
6ca8e794 2336 * @changeable: whether changeable parameters are requested
1da177e4
LT
2337 *
2338 * Generate a generic MODE SENSE r/w error recovery page.
2339 *
2340 * LOCKING:
2341 * None.
2342 */
6ca8e794 2343static unsigned int ata_msense_rw_recovery(u8 *buf, bool changeable)
1da177e4 2344{
6ca8e794
PB
2345 modecpy(buf, def_rw_recovery_mpage, sizeof(def_rw_recovery_mpage),
2346 changeable);
00ac37f5 2347 return sizeof(def_rw_recovery_mpage);
1da177e4
LT
2348}
2349
48bdc8ec
JA
2350/*
2351 * We can turn this into a real blacklist if it's needed, for now just
2352 * blacklist any Maxtor BANC1G10 revision firmware
2353 */
2354static int ata_dev_supports_fua(u16 *id)
2355{
a0cf733b 2356 unsigned char model[ATA_ID_PROD_LEN + 1], fw[ATA_ID_FW_REV_LEN + 1];
48bdc8ec 2357
c3c013a2
JG
2358 if (!libata_fua)
2359 return 0;
48bdc8ec
JA
2360 if (!ata_id_has_fua(id))
2361 return 0;
2362
a0cf733b
TH
2363 ata_id_c_string(id, model, ATA_ID_PROD, sizeof(model));
2364 ata_id_c_string(id, fw, ATA_ID_FW_REV, sizeof(fw));
48bdc8ec 2365
2e02671d 2366 if (strcmp(model, "Maxtor"))
48bdc8ec 2367 return 1;
2e02671d 2368 if (strcmp(fw, "BANC1G10"))
48bdc8ec
JA
2369 return 1;
2370
2371 return 0; /* blacklisted */
2372}
2373
1da177e4
LT
2374/**
2375 * ata_scsiop_mode_sense - Simulate MODE SENSE 6, 10 commands
2376 * @args: device IDENTIFY data / SCSI command of interest.
2377 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4 2378 *
00ac37f5
DG
2379 * Simulate MODE SENSE commands. Assume this is invoked for direct
2380 * access devices (e.g. disks) only. There should be no block
2381 * descriptor for other device types.
1da177e4
LT
2382 *
2383 * LOCKING:
cca3974e 2384 * spin_lock_irqsave(host lock)
1da177e4 2385 */
87340e98 2386static unsigned int ata_scsiop_mode_sense(struct ata_scsi_args *args, u8 *rbuf)
1da177e4 2387{
9a3dccc4 2388 struct ata_device *dev = args->dev;
87340e98 2389 u8 *scsicmd = args->cmd->cmnd, *p = rbuf;
00ac37f5
DG
2390 const u8 sat_blk_desc[] = {
2391 0, 0, 0, 0, /* number of blocks: sat unspecified */
2392 0,
2393 0, 0x2, 0x0 /* block length: 512 bytes */
2394 };
2395 u8 pg, spg;
87340e98 2396 unsigned int ebd, page_control, six_byte;
9a3dccc4 2397 u8 dpofua;
1da177e4
LT
2398
2399 VPRINTK("ENTER\n");
2400
2401 six_byte = (scsicmd[0] == MODE_SENSE);
00ac37f5
DG
2402 ebd = !(scsicmd[1] & 0x8); /* dbd bit inverted == edb */
2403 /*
2404 * LLBA bit in msense(10) ignored (compliant)
1da177e4 2405 */
00ac37f5 2406
1da177e4 2407 page_control = scsicmd[2] >> 6;
ae006510
DG
2408 switch (page_control) {
2409 case 0: /* current */
6ca8e794
PB
2410 case 1: /* changeable */
2411 case 2: /* defaults */
ae006510
DG
2412 break; /* supported */
2413 case 3: /* saved */
2414 goto saving_not_supp;
ae006510
DG
2415 default:
2416 goto invalid_fld;
2417 }
1da177e4 2418
87340e98
TH
2419 if (six_byte)
2420 p += 4 + (ebd ? 8 : 0);
2421 else
2422 p += 8 + (ebd ? 8 : 0);
1da177e4 2423
00ac37f5
DG
2424 pg = scsicmd[2] & 0x3f;
2425 spg = scsicmd[3];
2426 /*
2427 * No mode subpages supported (yet) but asking for _all_
2428 * subpages may be valid
2429 */
2430 if (spg && (spg != ALL_SUB_MPAGES))
2431 goto invalid_fld;
2432
2433 switch(pg) {
2434 case RW_RECOVERY_MPAGE:
6ca8e794 2435 p += ata_msense_rw_recovery(p, page_control == 1);
1da177e4
LT
2436 break;
2437
00ac37f5 2438 case CACHE_MPAGE:
6ca8e794 2439 p += ata_msense_caching(args->id, p, page_control == 1);
1da177e4
LT
2440 break;
2441
87340e98 2442 case CONTROL_MPAGE:
6ca8e794 2443 p += ata_msense_ctl_mode(p, page_control == 1);
1da177e4 2444 break;
1da177e4 2445
00ac37f5 2446 case ALL_MPAGES:
6ca8e794
PB
2447 p += ata_msense_rw_recovery(p, page_control == 1);
2448 p += ata_msense_caching(args->id, p, page_control == 1);
2449 p += ata_msense_ctl_mode(p, page_control == 1);
1da177e4
LT
2450 break;
2451
2452 default: /* invalid page code */
ae006510 2453 goto invalid_fld;
1da177e4
LT
2454 }
2455
9a3dccc4 2456 dpofua = 0;
f79d409f 2457 if (ata_dev_supports_fua(args->id) && (dev->flags & ATA_DFLAG_LBA48) &&
9a3dccc4
TH
2458 (!(dev->flags & ATA_DFLAG_PIO) || dev->multi_count))
2459 dpofua = 1 << 4;
2460
1da177e4 2461 if (six_byte) {
87340e98
TH
2462 rbuf[0] = p - rbuf - 1;
2463 rbuf[2] |= dpofua;
00ac37f5 2464 if (ebd) {
87340e98
TH
2465 rbuf[3] = sizeof(sat_blk_desc);
2466 memcpy(rbuf + 4, sat_blk_desc, sizeof(sat_blk_desc));
00ac37f5 2467 }
1da177e4 2468 } else {
87340e98
TH
2469 unsigned int output_len = p - rbuf - 2;
2470
1da177e4 2471 rbuf[0] = output_len >> 8;
87340e98
TH
2472 rbuf[1] = output_len;
2473 rbuf[3] |= dpofua;
00ac37f5 2474 if (ebd) {
87340e98
TH
2475 rbuf[7] = sizeof(sat_blk_desc);
2476 memcpy(rbuf + 8, sat_blk_desc, sizeof(sat_blk_desc));
00ac37f5 2477 }
1da177e4 2478 }
1da177e4 2479 return 0;
ae006510
DG
2480
2481invalid_fld:
2482 ata_scsi_set_sense(args->cmd, ILLEGAL_REQUEST, 0x24, 0x0);
2483 /* "Invalid field in cbd" */
2484 return 1;
2485
2486saving_not_supp:
2487 ata_scsi_set_sense(args->cmd, ILLEGAL_REQUEST, 0x39, 0x0);
2488 /* "Saving parameters not supported" */
2489 return 1;
1da177e4
LT
2490}
2491
2492/**
2493 * ata_scsiop_read_cap - Simulate READ CAPACITY[ 16] commands
2494 * @args: device IDENTIFY data / SCSI command of interest.
2495 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4
LT
2496 *
2497 * Simulate READ CAPACITY commands.
2498 *
2499 * LOCKING:
6a36261e 2500 * None.
1da177e4 2501 */
87340e98 2502static unsigned int ata_scsiop_read_cap(struct ata_scsi_args *args, u8 *rbuf)
1da177e4 2503{
61d79a8e
MP
2504 struct ata_device *dev = args->dev;
2505 u64 last_lba = dev->n_sectors - 1; /* LBA of the last block */
295124dc
GG
2506 u32 sector_size; /* physical sector size in bytes */
2507 u8 log2_per_phys;
2508 u16 lowest_aligned;
2509
2510 sector_size = ata_id_logical_sector_size(dev->id);
2511 log2_per_phys = ata_id_log2_per_physical_sector(dev->id);
2512 lowest_aligned = ata_id_logical_sector_offset(dev->id, log2_per_phys);
1da177e4
LT
2513
2514 VPRINTK("ENTER\n");
2515
1da177e4 2516 if (args->cmd->cmnd[0] == READ_CAPACITY) {
6a36261e
TH
2517 if (last_lba >= 0xffffffffULL)
2518 last_lba = 0xffffffff;
0c144d0d 2519
1da177e4 2520 /* sector count, 32-bit */
87340e98
TH
2521 rbuf[0] = last_lba >> (8 * 3);
2522 rbuf[1] = last_lba >> (8 * 2);
2523 rbuf[2] = last_lba >> (8 * 1);
2524 rbuf[3] = last_lba;
1da177e4
LT
2525
2526 /* sector size */
295124dc
GG
2527 rbuf[4] = sector_size >> (8 * 3);
2528 rbuf[5] = sector_size >> (8 * 2);
2529 rbuf[6] = sector_size >> (8 * 1);
2530 rbuf[7] = sector_size;
1da177e4
LT
2531 } else {
2532 /* sector count, 64-bit */
87340e98
TH
2533 rbuf[0] = last_lba >> (8 * 7);
2534 rbuf[1] = last_lba >> (8 * 6);
2535 rbuf[2] = last_lba >> (8 * 5);
2536 rbuf[3] = last_lba >> (8 * 4);
2537 rbuf[4] = last_lba >> (8 * 3);
2538 rbuf[5] = last_lba >> (8 * 2);
2539 rbuf[6] = last_lba >> (8 * 1);
2540 rbuf[7] = last_lba;
1da177e4
LT
2541
2542 /* sector size */
295124dc
GG
2543 rbuf[ 8] = sector_size >> (8 * 3);
2544 rbuf[ 9] = sector_size >> (8 * 2);
2545 rbuf[10] = sector_size >> (8 * 1);
2546 rbuf[11] = sector_size;
61d79a8e
MP
2547
2548 rbuf[12] = 0;
295124dc 2549 rbuf[13] = log2_per_phys;
61d79a8e
MP
2550 rbuf[14] = (lowest_aligned >> 8) & 0x3f;
2551 rbuf[15] = lowest_aligned;
18f0f978 2552
e78db4df 2553 if (ata_id_has_trim(args->id)) {
e61f7d1c 2554 rbuf[14] |= 0x80; /* LBPME */
e78db4df 2555
e61f7d1c
MP
2556 if (ata_id_has_zero_after_trim(args->id) &&
2557 dev->horkage & ATA_HORKAGE_ZERO_AFTER_TRIM) {
2558 ata_dev_info(dev, "Enabling discard_zeroes_data\n");
2559 rbuf[14] |= 0x40; /* LBPRZ */
2560 }
e78db4df 2561 }
1da177e4 2562 }
1da177e4
LT
2563 return 0;
2564}
2565
2566/**
2567 * ata_scsiop_report_luns - Simulate REPORT LUNS command
2568 * @args: device IDENTIFY data / SCSI command of interest.
2569 * @rbuf: Response buffer, to which simulated SCSI cmd output is sent.
1da177e4
LT
2570 *
2571 * Simulate REPORT LUNS command.
2572 *
2573 * LOCKING:
cca3974e 2574 * spin_lock_irqsave(host lock)
1da177e4 2575 */
87340e98 2576static unsigned int ata_scsiop_report_luns(struct ata_scsi_args *args, u8 *rbuf)
1da177e4
LT
2577{
2578 VPRINTK("ENTER\n");
2579 rbuf[3] = 8; /* just one lun, LUN 0, size 8 bytes */
2580
2581 return 0;
2582}
2583
77853bf2 2584static void atapi_sense_complete(struct ata_queued_cmd *qc)
a939c963 2585{
74e6c8c3 2586 if (qc->err_mask && ((qc->err_mask & AC_ERR_DEV) == 0)) {
c6e6e666
JG
2587 /* FIXME: not quite right; we don't want the
2588 * translation of taskfile registers into
2589 * a sense descriptors, since that's only
2590 * correct for ATA, not ATAPI
2591 */
750426aa 2592 ata_gen_passthru_sense(qc);
74e6c8c3 2593 }
a939c963 2594
c6e6e666 2595 qc->scsidone(qc->scsicmd);
77853bf2 2596 ata_qc_free(qc);
c6e6e666 2597}
a939c963 2598
c6e6e666
JG
2599/* is it pointless to prefer PIO for "safety reasons"? */
2600static inline int ata_pio_use_silly(struct ata_port *ap)
2601{
2602 return (ap->flags & ATA_FLAG_PIO_DMA);
2603}
2604
2605static void atapi_request_sense(struct ata_queued_cmd *qc)
2606{
2607 struct ata_port *ap = qc->ap;
2608 struct scsi_cmnd *cmd = qc->scsicmd;
2609
2610 DPRINTK("ATAPI request sense\n");
a939c963 2611
7ccd720d 2612 memset(cmd->sense_buffer, 0, SCSI_SENSE_BUFFERSIZE);
a939c963 2613
127102ae 2614#ifdef CONFIG_ATA_SFF
855d854a
JB
2615 if (ap->ops->sff_tf_read)
2616 ap->ops->sff_tf_read(ap, &qc->tf);
127102ae 2617#endif
c6e6e666
JG
2618
2619 /* fill these in, for the case where they are -not- overwritten */
2620 cmd->sense_buffer[0] = 0x70;
2621 cmd->sense_buffer[2] = qc->tf.feature >> 4;
2622
2623 ata_qc_reinit(qc);
2624
93f8fecb 2625 /* setup sg table and init transfer direction */
cadb7345 2626 sg_init_one(&qc->sgent, cmd->sense_buffer, SCSI_SENSE_BUFFERSIZE);
93f8fecb 2627 ata_sg_init(qc, &qc->sgent, 1);
a939c963
JG
2628 qc->dma_dir = DMA_FROM_DEVICE;
2629
6e7846e9 2630 memset(&qc->cdb, 0, qc->dev->cdb_len);
a939c963
JG
2631 qc->cdb[0] = REQUEST_SENSE;
2632 qc->cdb[4] = SCSI_SENSE_BUFFERSIZE;
2633
2634 qc->tf.flags |= ATA_TFLAG_ISADDR | ATA_TFLAG_DEVICE;
2635 qc->tf.command = ATA_CMD_PACKET;
2636
c6e6e666 2637 if (ata_pio_use_silly(ap)) {
0dc36888 2638 qc->tf.protocol = ATAPI_PROT_DMA;
c6e6e666
JG
2639 qc->tf.feature |= ATAPI_PKT_DMA;
2640 } else {
0dc36888 2641 qc->tf.protocol = ATAPI_PROT_PIO;
2db78dd3
AC
2642 qc->tf.lbam = SCSI_SENSE_BUFFERSIZE;
2643 qc->tf.lbah = 0;
c6e6e666 2644 }
a939c963
JG
2645 qc->nbytes = SCSI_SENSE_BUFFERSIZE;
2646
c6e6e666 2647 qc->complete_fn = atapi_sense_complete;
a939c963 2648
8e0e694a 2649 ata_qc_issue(qc);
a939c963
JG
2650
2651 DPRINTK("EXIT\n");
2652}
2653
77853bf2 2654static void atapi_qc_complete(struct ata_queued_cmd *qc)
1da177e4
LT
2655{
2656 struct scsi_cmnd *cmd = qc->scsicmd;
a22e2eb0 2657 unsigned int err_mask = qc->err_mask;
1da177e4 2658
a7dac447 2659 VPRINTK("ENTER, err_mask 0x%X\n", err_mask);
e12669e7 2660
246619da
TH
2661 /* handle completion from new EH */
2662 if (unlikely(qc->ap->ops->error_handler &&
2663 (err_mask || qc->flags & ATA_QCFLAG_SENSE_VALID))) {
2664
2665 if (!(qc->flags & ATA_QCFLAG_SENSE_VALID)) {
2666 /* FIXME: not quite right; we don't want the
2667 * translation of taskfile registers into a
2668 * sense descriptors, since that's only
2669 * correct for ATA, not ATAPI
2670 */
750426aa 2671 ata_gen_passthru_sense(qc);
246619da
TH
2672 }
2673
22aac089
TH
2674 /* SCSI EH automatically locks door if sdev->locked is
2675 * set. Sometimes door lock request continues to
2676 * fail, for example, when no media is present. This
2677 * creates a loop - SCSI EH issues door lock which
2678 * fails and gets invoked again to acquire sense data
2679 * for the failed command.
2680 *
2681 * If door lock fails, always clear sdev->locked to
2682 * avoid this infinite loop.
2a5f07b5
TH
2683 *
2684 * This may happen before SCSI scan is complete. Make
2685 * sure qc->dev->sdev isn't NULL before dereferencing.
22aac089 2686 */
2a5f07b5 2687 if (qc->cdb[0] == ALLOW_MEDIUM_REMOVAL && qc->dev->sdev)
22aac089
TH
2688 qc->dev->sdev->locked = 0;
2689
246619da
TH
2690 qc->scsicmd->result = SAM_STAT_CHECK_CONDITION;
2691 qc->scsidone(cmd);
2692 ata_qc_free(qc);
2693 return;
2694 }
2695
2696 /* successful completion or old EH failure path */
a7dac447 2697 if (unlikely(err_mask & AC_ERR_DEV)) {
1da177e4 2698 cmd->result = SAM_STAT_CHECK_CONDITION;
c6e6e666 2699 atapi_request_sense(qc);
77853bf2 2700 return;
74e6c8c3 2701 } else if (unlikely(err_mask)) {
a7dac447
JG
2702 /* FIXME: not quite right; we don't want the
2703 * translation of taskfile registers into
2704 * a sense descriptors, since that's only
2705 * correct for ATA, not ATAPI
2706 */
750426aa 2707 ata_gen_passthru_sense(qc);
74e6c8c3 2708 } else {
1da177e4
LT
2709 u8 *scsicmd = cmd->cmnd;
2710
fd71da46 2711 if ((scsicmd[0] == INQUIRY) && ((scsicmd[1] & 0x03) == 0)) {
b445c568 2712 unsigned long flags;
87340e98 2713 u8 *buf;
b445c568 2714
87340e98 2715 buf = ata_scsi_rbuf_get(cmd, true, &flags);
a15dbeb4
JG
2716
2717 /* ATAPI devices typically report zero for their SCSI version,
2718 * and sometimes deviate from the spec WRT response data
2719 * format. If SCSI version is reported as zero like normal,
2720 * then we make the following fixups: 1) Fake MMC-5 version,
2721 * to indicate to the Linux scsi midlayer this is a modern
2722 * device. 2) Ensure response data format / ATAPI information
2723 * are always correct.
a15dbeb4
JG
2724 */
2725 if (buf[2] == 0) {
2726 buf[2] = 0x5;
2727 buf[3] = 0x32;
2728 }
2729
87340e98 2730 ata_scsi_rbuf_put(cmd, true, &flags);
1da177e4 2731 }
a15dbeb4 2732
1da177e4
LT
2733 cmd->result = SAM_STAT_GOOD;
2734 }
2735
2736 qc->scsidone(cmd);
77853bf2 2737 ata_qc_free(qc);
1da177e4
LT
2738}
2739/**
2740 * atapi_xlat - Initialize PACKET taskfile
2741 * @qc: command structure to be initialized
1da177e4
LT
2742 *
2743 * LOCKING:
cca3974e 2744 * spin_lock_irqsave(host lock)
1da177e4
LT
2745 *
2746 * RETURNS:
2747 * Zero on success, non-zero on failure.
2748 */
ad706991 2749static unsigned int atapi_xlat(struct ata_queued_cmd *qc)
1da177e4 2750{
542b1444 2751 struct scsi_cmnd *scmd = qc->scsicmd;
1da177e4 2752 struct ata_device *dev = qc->dev;
542b1444 2753 int nodata = (scmd->sc_data_direction == DMA_NONE);
5895ef9a 2754 int using_pio = !nodata && (dev->flags & ATA_DFLAG_PIO);
2db78dd3 2755 unsigned int nbytes;
1da177e4 2756
2e5704f6
TH
2757 memset(qc->cdb, 0, dev->cdb_len);
2758 memcpy(qc->cdb, scmd->cmnd, scmd->cmd_len);
1da177e4
LT
2759
2760 qc->complete_fn = atapi_qc_complete;
2761
2762 qc->tf.flags |= ATA_TFLAG_ISADDR | ATA_TFLAG_DEVICE;
542b1444 2763 if (scmd->sc_data_direction == DMA_TO_DEVICE) {
1da177e4
LT
2764 qc->tf.flags |= ATA_TFLAG_WRITE;
2765 DPRINTK("direction: write\n");
2766 }
2767
2768 qc->tf.command = ATA_CMD_PACKET;
aacda375 2769 ata_qc_set_pc_nbytes(qc);
e00f1ff3
TH
2770
2771 /* check whether ATAPI DMA is safe */
5895ef9a 2772 if (!nodata && !using_pio && atapi_check_dma(qc))
e00f1ff3 2773 using_pio = 1;
1da177e4 2774
e190222d
TH
2775 /* Some controller variants snoop this value for Packet
2776 * transfers to do state machine and FIFO management. Thus we
2777 * want to set it properly, and for DMA where it is
2778 * effectively meaningless.
2779 */
aacda375 2780 nbytes = min(ata_qc_raw_nbytes(qc), (unsigned int)63 * 1024);
2db78dd3 2781
e190222d
TH
2782 /* Most ATAPI devices which honor transfer chunk size don't
2783 * behave according to the spec when odd chunk size which
2784 * matches the transfer length is specified. If the number of
2785 * bytes to transfer is 2n+1. According to the spec, what
2786 * should happen is to indicate that 2n+1 is going to be
2787 * transferred and transfer 2n+2 bytes where the last byte is
2788 * padding.
2789 *
2790 * In practice, this doesn't happen. ATAPI devices first
2791 * indicate and transfer 2n bytes and then indicate and
2792 * transfer 2 bytes where the last byte is padding.
2793 *
2794 * This inconsistency confuses several controllers which
2795 * perform PIO using DMA such as Intel AHCIs and sil3124/32.
2796 * These controllers use actual number of transferred bytes to
2797 * update DMA poitner and transfer of 4n+2 bytes make those
2798 * controller push DMA pointer by 4n+4 bytes because SATA data
2799 * FISes are aligned to 4 bytes. This causes data corruption
2800 * and buffer overrun.
2801 *
2802 * Always setting nbytes to even number solves this problem
2803 * because then ATAPI devices don't have to split data at 2n
2804 * boundaries.
2805 */
2806 if (nbytes & 0x1)
2807 nbytes++;
2808
2db78dd3
AC
2809 qc->tf.lbam = (nbytes & 0xFF);
2810 qc->tf.lbah = (nbytes >> 8);
2811
5895ef9a
TH
2812 if (nodata)
2813 qc->tf.protocol = ATAPI_PROT_NODATA;
2814 else if (using_pio)
2815 qc->tf.protocol = ATAPI_PROT_PIO;
2816 else {
e00f1ff3 2817 /* DMA data xfer */
0dc36888 2818 qc->tf.protocol = ATAPI_PROT_DMA;
1da177e4
LT
2819 qc->tf.feature |= ATAPI_PKT_DMA;
2820
91163006
TH
2821 if ((dev->flags & ATA_DFLAG_DMADIR) &&
2822 (scmd->sc_data_direction != DMA_TO_DEVICE))
95de719a 2823 /* some SATA bridges need us to indicate data xfer direction */
1da177e4 2824 qc->tf.feature |= ATAPI_DMADIR;
1da177e4
LT
2825 }
2826
2db78dd3
AC
2827
2828 /* FIXME: We need to translate 0x05 READ_BLOCK_LIMITS to a MODE_SENSE
2829 as ATAPI tape drives don't get this right otherwise */
1da177e4
LT
2830 return 0;
2831}
2832
2dcb407e 2833static struct ata_device *ata_find_dev(struct ata_port *ap, int devno)
ab5b3a5b 2834{
071f44b1 2835 if (!sata_pmp_attached(ap)) {
41bda9c9
TH
2836 if (likely(devno < ata_link_max_devices(&ap->link)))
2837 return &ap->link.device[devno];
2838 } else {
2839 if (likely(devno < ap->nr_pmp_links))
2840 return &ap->pmp_link[devno].device[0];
2841 }
2842
ab5b3a5b
TH
2843 return NULL;
2844}
2845
2dcb407e
JG
2846static struct ata_device *__ata_scsi_find_dev(struct ata_port *ap,
2847 const struct scsi_device *scsidev)
ab5b3a5b 2848{
41bda9c9
TH
2849 int devno;
2850
ab5b3a5b 2851 /* skip commands not addressed to targets we simulate */
071f44b1 2852 if (!sata_pmp_attached(ap)) {
41bda9c9
TH
2853 if (unlikely(scsidev->channel || scsidev->lun))
2854 return NULL;
2855 devno = scsidev->id;
2856 } else {
2857 if (unlikely(scsidev->id || scsidev->lun))
2858 return NULL;
2859 devno = scsidev->channel;
2860 }
ab5b3a5b 2861
41bda9c9 2862 return ata_find_dev(ap, devno);
ab5b3a5b
TH
2863}
2864
1da177e4
LT
2865/**
2866 * ata_scsi_find_dev - lookup ata_device from scsi_cmnd
2867 * @ap: ATA port to which the device is attached
2868 * @scsidev: SCSI device from which we derive the ATA device
2869 *
2870 * Given various information provided in struct scsi_cmnd,
2871 * map that onto an ATA bus, and using that mapping
2872 * determine which ata_device is associated with the
2873 * SCSI command to be sent.
2874 *
2875 * LOCKING:
cca3974e 2876 * spin_lock_irqsave(host lock)
1da177e4
LT
2877 *
2878 * RETURNS:
2879 * Associated ATA device, or %NULL if not found.
2880 */
1da177e4 2881static struct ata_device *
057ace5e 2882ata_scsi_find_dev(struct ata_port *ap, const struct scsi_device *scsidev)
1da177e4 2883{
ab5b3a5b 2884 struct ata_device *dev = __ata_scsi_find_dev(ap, scsidev);
1da177e4 2885
2486fa56 2886 if (unlikely(!dev || !ata_dev_enabled(dev)))
1da177e4
LT
2887 return NULL;
2888
1da177e4
LT
2889 return dev;
2890}
2891
b095518e
JG
2892/*
2893 * ata_scsi_map_proto - Map pass-thru protocol value to taskfile value.
2894 * @byte1: Byte 1 from pass-thru CDB.
2895 *
2896 * RETURNS:
2897 * ATA_PROT_UNKNOWN if mapping failed/unimplemented, protocol otherwise.
2898 */
2899static u8
2900ata_scsi_map_proto(u8 byte1)
2901{
2902 switch((byte1 & 0x1e) >> 1) {
2dcb407e
JG
2903 case 3: /* Non-data */
2904 return ATA_PROT_NODATA;
2905
2906 case 6: /* DMA */
2907 case 10: /* UDMA Data-in */
2908 case 11: /* UDMA Data-Out */
2909 return ATA_PROT_DMA;
2910
2911 case 4: /* PIO Data-in */
2912 case 5: /* PIO Data-out */
2913 return ATA_PROT_PIO;
2914
2915 case 0: /* Hard Reset */
2916 case 1: /* SRST */
2917 case 8: /* Device Diagnostic */
2918 case 9: /* Device Reset */
2919 case 7: /* DMA Queued */
2920 case 12: /* FPDMA */
2921 case 15: /* Return Response Info */
2922 default: /* Reserved */
2923 break;
b095518e
JG
2924 }
2925
2926 return ATA_PROT_UNKNOWN;
2927}
2928
2929/**
2930 * ata_scsi_pass_thru - convert ATA pass-thru CDB to taskfile
2931 * @qc: command structure to be initialized
b095518e
JG
2932 *
2933 * Handles either 12 or 16-byte versions of the CDB.
2934 *
2935 * RETURNS:
2936 * Zero on success, non-zero on failure.
2937 */
ad706991 2938static unsigned int ata_scsi_pass_thru(struct ata_queued_cmd *qc)
b095518e
JG
2939{
2940 struct ata_taskfile *tf = &(qc->tf);
542b1444 2941 struct scsi_cmnd *scmd = qc->scsicmd;
f79d409f 2942 struct ata_device *dev = qc->dev;
ad706991 2943 const u8 *cdb = scmd->cmnd;
b095518e 2944
542b1444 2945 if ((tf->protocol = ata_scsi_map_proto(cdb[1])) == ATA_PROT_UNKNOWN)
9a405257 2946 goto invalid_fld;
8190bdb9 2947
b095518e
JG
2948 /*
2949 * 12 and 16 byte CDBs use different offsets to
2950 * provide the various register values.
2951 */
542b1444 2952 if (cdb[0] == ATA_16) {
b095518e
JG
2953 /*
2954 * 16-byte CDB - may contain extended commands.
2955 *
2956 * If that is the case, copy the upper byte register values.
2957 */
542b1444
TH
2958 if (cdb[1] & 0x01) {
2959 tf->hob_feature = cdb[3];
2960 tf->hob_nsect = cdb[5];
2961 tf->hob_lbal = cdb[7];
2962 tf->hob_lbam = cdb[9];
2963 tf->hob_lbah = cdb[11];
b095518e
JG
2964 tf->flags |= ATA_TFLAG_LBA48;
2965 } else
2966 tf->flags &= ~ATA_TFLAG_LBA48;
2967
2968 /*
2969 * Always copy low byte, device and command registers.
2970 */
542b1444
TH
2971 tf->feature = cdb[4];
2972 tf->nsect = cdb[6];
2973 tf->lbal = cdb[8];
2974 tf->lbam = cdb[10];
2975 tf->lbah = cdb[12];
2976 tf->device = cdb[13];
2977 tf->command = cdb[14];
b095518e
JG
2978 } else {
2979 /*
2980 * 12-byte CDB - incapable of extended commands.
2981 */
2982 tf->flags &= ~ATA_TFLAG_LBA48;
2983
542b1444
TH
2984 tf->feature = cdb[3];
2985 tf->nsect = cdb[4];
2986 tf->lbal = cdb[5];
2987 tf->lbam = cdb[6];
2988 tf->lbah = cdb[7];
2989 tf->device = cdb[8];
2990 tf->command = cdb[9];
b095518e 2991 }
fa4453c4
AL
2992
2993 /* enforce correct master/slave bit */
2994 tf->device = dev->devno ?
2995 tf->device | ATA_DEV1 : tf->device & ~ATA_DEV1;
b095518e 2996
bd30add8 2997 switch (tf->command) {
295124dc 2998 /* READ/WRITE LONG use a non-standard sect_size */
bd30add8
TH
2999 case ATA_CMD_READ_LONG:
3000 case ATA_CMD_READ_LONG_ONCE:
3001 case ATA_CMD_WRITE_LONG:
3002 case ATA_CMD_WRITE_LONG_ONCE:
3003 if (tf->protocol != ATA_PROT_PIO || tf->nsect != 1)
3004 goto invalid_fld;
3005 qc->sect_size = scsi_bufflen(scmd);
295124dc
GG
3006 break;
3007
3008 /* commands using reported Logical Block size (e.g. 512 or 4K) */
3009 case ATA_CMD_CFA_WRITE_NE:
3010 case ATA_CMD_CFA_TRANS_SECT:
3011 case ATA_CMD_CFA_WRITE_MULT_NE:
3012 /* XXX: case ATA_CMD_CFA_WRITE_SECTORS_WITHOUT_ERASE: */
3013 case ATA_CMD_READ:
3014 case ATA_CMD_READ_EXT:
3015 case ATA_CMD_READ_QUEUED:
3016 /* XXX: case ATA_CMD_READ_QUEUED_EXT: */
3017 case ATA_CMD_FPDMA_READ:
3018 case ATA_CMD_READ_MULTI:
3019 case ATA_CMD_READ_MULTI_EXT:
3020 case ATA_CMD_PIO_READ:
3021 case ATA_CMD_PIO_READ_EXT:
3022 case ATA_CMD_READ_STREAM_DMA_EXT:
3023 case ATA_CMD_READ_STREAM_EXT:
3024 case ATA_CMD_VERIFY:
3025 case ATA_CMD_VERIFY_EXT:
3026 case ATA_CMD_WRITE:
3027 case ATA_CMD_WRITE_EXT:
3028 case ATA_CMD_WRITE_FUA_EXT:
3029 case ATA_CMD_WRITE_QUEUED:
3030 case ATA_CMD_WRITE_QUEUED_FUA_EXT:
3031 case ATA_CMD_FPDMA_WRITE:
3032 case ATA_CMD_WRITE_MULTI:
3033 case ATA_CMD_WRITE_MULTI_EXT:
3034 case ATA_CMD_WRITE_MULTI_FUA_EXT:
3035 case ATA_CMD_PIO_WRITE:
3036 case ATA_CMD_PIO_WRITE_EXT:
3037 case ATA_CMD_WRITE_STREAM_DMA_EXT:
3038 case ATA_CMD_WRITE_STREAM_EXT:
3039 qc->sect_size = scmd->device->sector_size;
3040 break;
3041
3042 /* Everything else uses 512 byte "sectors" */
3043 default:
3044 qc->sect_size = ATA_SECT_SIZE;
bd30add8
TH
3045 }
3046
3047 /*
3048 * Set flags so that all registers will be written, pass on
3049 * write indication (used for PIO/DMA setup), result TF is
3050 * copied back and we don't whine too much about its failure.
3051 */
bc496ed0 3052 tf->flags |= ATA_TFLAG_ISADDR | ATA_TFLAG_DEVICE;
bd30add8
TH
3053 if (scmd->sc_data_direction == DMA_TO_DEVICE)
3054 tf->flags |= ATA_TFLAG_WRITE;
3055
3056 qc->flags |= ATA_QCFLAG_RESULT_TF | ATA_QCFLAG_QUIET;
3057
3058 /*
3059 * Set transfer length.
3060 *
3061 * TODO: find out if we need to do more here to
3062 * cover scatter/gather case.
3063 */
3064 ata_qc_set_pc_nbytes(qc);
3065
3066 /* We may not issue DMA commands if no DMA mode is set */
3067 if (tf->protocol == ATA_PROT_DMA && dev->dma_mode == 0)
3068 goto invalid_fld;
3069
1dce589c
AL
3070 /* sanity check for pio multi commands */
3071 if ((cdb[1] & 0xe0) && !is_multi_taskfile(tf))
3072 goto invalid_fld;
3073
3074 if (is_multi_taskfile(tf)) {
3075 unsigned int multi_count = 1 << (cdb[1] >> 5);
3076
3077 /* compare the passed through multi_count
3078 * with the cached multi_count of libata
3079 */
3080 if (multi_count != dev->multi_count)
a9a79dfe
JP
3081 ata_dev_warn(dev, "invalid multi_count %u ignored\n",
3082 multi_count);
d26fc955 3083 }
1dce589c 3084
b095518e
JG
3085 /*
3086 * Filter SET_FEATURES - XFER MODE command -- otherwise,
3087 * SET_FEATURES - XFER MODE must be preceded/succeeded
3088 * by an update to hardware-specific registers for each
3089 * controller (i.e. the reason for ->set_piomode(),
3090 * ->set_dmamode(), and ->post_set_mode() hooks).
3091 */
bd30add8
TH
3092 if (tf->command == ATA_CMD_SET_FEATURES &&
3093 tf->feature == SETFEATURES_XFER)
9a405257 3094 goto invalid_fld;
b095518e
JG
3095
3096 /*
bd30add8
TH
3097 * Filter TPM commands by default. These provide an
3098 * essentially uncontrolled encrypted "back door" between
3099 * applications and the disk. Set libata.allow_tpm=1 if you
3100 * have a real reason for wanting to use them. This ensures
3101 * that installed software cannot easily mess stuff up without
3102 * user intent. DVR type users will probably ship with this enabled
3103 * for movie content management.
b095518e 3104 *
bd30add8
TH
3105 * Note that for ATA8 we can issue a DCS change and DCS freeze lock
3106 * for this and should do in future but that it is not sufficient as
3107 * DCS is an optional feature set. Thus we also do the software filter
3108 * so that we comply with the TC consortium stated goal that the user
3109 * can turn off TC features of their system.
b095518e 3110 */
bd30add8
TH
3111 if (tf->command >= 0x5C && tf->command <= 0x5F && !libata_allow_tpm)
3112 goto invalid_fld;
e61e0672 3113
b095518e 3114 return 0;
9a405257
TH
3115
3116 invalid_fld:
542b1444 3117 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x00);
9a405257
TH
3118 /* "Invalid field in cdb" */
3119 return 1;
b095518e
JG
3120}
3121
18f0f978
CH
3122static unsigned int ata_scsi_write_same_xlat(struct ata_queued_cmd *qc)
3123{
3124 struct ata_taskfile *tf = &qc->tf;
3125 struct scsi_cmnd *scmd = qc->scsicmd;
3126 struct ata_device *dev = qc->dev;
3127 const u8 *cdb = scmd->cmnd;
3128 u64 block;
3129 u32 n_block;
3130 u32 size;
3131 void *buf;
3132
3133 /* we may not issue DMA commands if no DMA mode is set */
3134 if (unlikely(!dev->dma_mode))
3135 goto invalid_fld;
3136
3137 if (unlikely(scmd->cmd_len < 16))
3138 goto invalid_fld;
3139 scsi_16_lba_len(cdb, &block, &n_block);
3140
3141 /* for now we only support WRITE SAME with the unmap bit set */
3142 if (unlikely(!(cdb[1] & 0x8)))
3143 goto invalid_fld;
3144
3145 /*
3146 * WRITE SAME always has a sector sized buffer as payload, this
3147 * should never be a multiple entry S/G list.
3148 */
3149 if (!scsi_sg_count(scmd))
3150 goto invalid_fld;
3151
3152 buf = page_address(sg_page(scsi_sglist(scmd)));
d0634c4a 3153 size = ata_set_lba_range_entries(buf, 512, block, n_block);
18f0f978 3154
87fb6c31
MC
3155 if (ata_ncq_enabled(dev) && ata_fpdma_dsm_supported(dev)) {
3156 /* Newer devices support queued TRIM commands */
3157 tf->protocol = ATA_PROT_NCQ;
3158 tf->command = ATA_CMD_FPDMA_SEND;
3159 tf->hob_nsect = ATA_SUBCMD_FPDMA_SEND_DSM & 0x1f;
3160 tf->nsect = qc->tag << 3;
3161 tf->hob_feature = (size / 512) >> 8;
3162 tf->feature = size / 512;
3163
3164 tf->auxiliary = 1;
3165 } else {
3166 tf->protocol = ATA_PROT_DMA;
3167 tf->hob_feature = 0;
3168 tf->feature = ATA_DSM_TRIM;
3169 tf->hob_nsect = (size / 512) >> 8;
3170 tf->nsect = size / 512;
3171 tf->command = ATA_CMD_DSM;
3172 }
3173
18f0f978
CH
3174 tf->flags |= ATA_TFLAG_ISADDR | ATA_TFLAG_DEVICE | ATA_TFLAG_LBA48 |
3175 ATA_TFLAG_WRITE;
3176
3177 ata_qc_set_pc_nbytes(qc);
3178
3179 return 0;
3180
3181 invalid_fld:
3182 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x00);
3183 /* "Invalid field in cdb" */
3184 return 1;
3185}
3186
1b26d29c
PB
3187/**
3188 * ata_mselect_caching - Simulate MODE SELECT for caching info page
3189 * @qc: Storage for translated ATA taskfile
3190 * @buf: input buffer
3191 * @len: number of valid bytes in the input buffer
3192 *
3193 * Prepare a taskfile to modify caching information for the device.
3194 *
3195 * LOCKING:
3196 * None.
3197 */
3198static int ata_mselect_caching(struct ata_queued_cmd *qc,
3199 const u8 *buf, int len)
3200{
3201 struct ata_taskfile *tf = &qc->tf;
3202 struct ata_device *dev = qc->dev;
3203 char mpage[CACHE_MPAGE_LEN];
3204 u8 wce;
3205
3206 /*
3207 * The first two bytes of def_cache_mpage are a header, so offsets
3208 * in mpage are off by 2 compared to buf. Same for len.
3209 */
3210
3211 if (len != CACHE_MPAGE_LEN - 2)
3212 return -EINVAL;
3213
3214 wce = buf[0] & (1 << 2);
3215
3216 /*
3217 * Check that read-only bits are not modified.
3218 */
3219 ata_msense_caching(dev->id, mpage, false);
3220 mpage[2] &= ~(1 << 2);
3221 mpage[2] |= wce;
3222 if (memcmp(mpage + 2, buf, CACHE_MPAGE_LEN - 2) != 0)
3223 return -EINVAL;
3224
3225 tf->flags |= ATA_TFLAG_DEVICE | ATA_TFLAG_ISADDR;
3226 tf->protocol = ATA_PROT_NODATA;
3227 tf->nsect = 0;
3228 tf->command = ATA_CMD_SET_FEATURES;
3229 tf->feature = wce ? SETFEATURES_WC_ON : SETFEATURES_WC_OFF;
3230 return 0;
3231}
3232
3233/**
3234 * ata_scsiop_mode_select - Simulate MODE SELECT 6, 10 commands
3235 * @qc: Storage for translated ATA taskfile
3236 *
3237 * Converts a MODE SELECT command to an ATA SET FEATURES taskfile.
3238 * Assume this is invoked for direct access devices (e.g. disks) only.
3239 * There should be no block descriptor for other device types.
3240 *
3241 * LOCKING:
3242 * spin_lock_irqsave(host lock)
3243 */
3244static unsigned int ata_scsi_mode_select_xlat(struct ata_queued_cmd *qc)
3245{
3246 struct scsi_cmnd *scmd = qc->scsicmd;
3247 const u8 *cdb = scmd->cmnd;
3248 const u8 *p;
3249 u8 pg, spg;
3250 unsigned six_byte, pg_len, hdr_len, bd_len;
3251 int len;
3252
3253 VPRINTK("ENTER\n");
3254
3255 six_byte = (cdb[0] == MODE_SELECT);
3256 if (six_byte) {
3257 if (scmd->cmd_len < 5)
3258 goto invalid_fld;
3259
3260 len = cdb[4];
3261 hdr_len = 4;
3262 } else {
3263 if (scmd->cmd_len < 9)
3264 goto invalid_fld;
3265
3266 len = (cdb[7] << 8) + cdb[8];
3267 hdr_len = 8;
3268 }
3269
3270 /* We only support PF=1, SP=0. */
3271 if ((cdb[1] & 0x11) != 0x10)
3272 goto invalid_fld;
3273
3274 /* Test early for possible overrun. */
3275 if (!scsi_sg_count(scmd) || scsi_sglist(scmd)->length < len)
3276 goto invalid_param_len;
3277
3278 p = page_address(sg_page(scsi_sglist(scmd)));
3279
3280 /* Move past header and block descriptors. */
3281 if (len < hdr_len)
3282 goto invalid_param_len;
3283
3284 if (six_byte)
3285 bd_len = p[3];
3286 else
3287 bd_len = (p[6] << 8) + p[7];
3288
3289 len -= hdr_len;
3290 p += hdr_len;
3291 if (len < bd_len)
3292 goto invalid_param_len;
3293 if (bd_len != 0 && bd_len != 8)
3294 goto invalid_param;
3295
3296 len -= bd_len;
3297 p += bd_len;
3298 if (len == 0)
3299 goto skip;
3300
3301 /* Parse both possible formats for the mode page headers. */
3302 pg = p[0] & 0x3f;
3303 if (p[0] & 0x40) {
3304 if (len < 4)
3305 goto invalid_param_len;
3306
3307 spg = p[1];
3308 pg_len = (p[2] << 8) | p[3];
3309 p += 4;
3310 len -= 4;
3311 } else {
3312 if (len < 2)
3313 goto invalid_param_len;
3314
3315 spg = 0;
3316 pg_len = p[1];
3317 p += 2;
3318 len -= 2;
3319 }
3320
3321 /*
3322 * No mode subpages supported (yet) but asking for _all_
3323 * subpages may be valid
3324 */
3325 if (spg && (spg != ALL_SUB_MPAGES))
3326 goto invalid_param;
3327 if (pg_len > len)
3328 goto invalid_param_len;
3329
3330 switch (pg) {
3331 case CACHE_MPAGE:
3332 if (ata_mselect_caching(qc, p, pg_len) < 0)
3333 goto invalid_param;
3334 break;
3335
3336 default: /* invalid page code */
3337 goto invalid_param;
3338 }
3339
3340 /*
3341 * Only one page has changeable data, so we only support setting one
3342 * page at a time.
3343 */
3344 if (len > pg_len)
3345 goto invalid_param;
3346
3347 return 0;
3348
3349 invalid_fld:
3350 /* "Invalid field in CDB" */
3351 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x24, 0x0);
3352 return 1;
3353
3354 invalid_param:
3355 /* "Invalid field in parameter list" */
3356 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x26, 0x0);
3357 return 1;
3358
3359 invalid_param_len:
3360 /* "Parameter list length error" */
3361 ata_scsi_set_sense(scmd, ILLEGAL_REQUEST, 0x1a, 0x0);
3362 return 1;
3363
3364 skip:
3365 scmd->result = SAM_STAT_GOOD;
3366 return 1;
3367}
3368
1da177e4
LT
3369/**
3370 * ata_get_xlat_func - check if SCSI to ATA translation is possible
3371 * @dev: ATA device
3372 * @cmd: SCSI command opcode to consider
3373 *
3374 * Look up the SCSI command given, and determine whether the
3375 * SCSI command is to be translated or simulated.
3376 *
3377 * RETURNS:
3378 * Pointer to translation function if possible, %NULL if not.
3379 */
3380
3381static inline ata_xlat_func_t ata_get_xlat_func(struct ata_device *dev, u8 cmd)
3382{
3383 switch (cmd) {
3384 case READ_6:
3385 case READ_10:
3386 case READ_16:
3387
3388 case WRITE_6:
3389 case WRITE_10:
3390 case WRITE_16:
3391 return ata_scsi_rw_xlat;
3392
0cdd6eb7 3393 case WRITE_SAME_16:
18f0f978
CH
3394 return ata_scsi_write_same_xlat;
3395
1da177e4
LT
3396 case SYNCHRONIZE_CACHE:
3397 if (ata_try_flush_cache(dev))
3398 return ata_scsi_flush_xlat;
3399 break;
3400
3401 case VERIFY:
3402 case VERIFY_16:
3403 return ata_scsi_verify_xlat;
b095518e
JG
3404
3405 case ATA_12:
3406 case ATA_16:
3407 return ata_scsi_pass_thru;
da61396d 3408
1b26d29c
PB
3409 case MODE_SELECT:
3410 case MODE_SELECT_10:
3411 return ata_scsi_mode_select_xlat;
3412 break;
3413
972dcafb
DG
3414 case START_STOP:
3415 return ata_scsi_start_stop_xlat;
1da177e4
LT
3416 }
3417
3418 return NULL;
3419}
3420
3421/**
3422 * ata_scsi_dump_cdb - dump SCSI command contents to dmesg
3423 * @ap: ATA port to which the command was being sent
3424 * @cmd: SCSI command to dump
3425 *
3426 * Prints the contents of a SCSI command via printk().
3427 */
3428
3429static inline void ata_scsi_dump_cdb(struct ata_port *ap,
3430 struct scsi_cmnd *cmd)
3431{
3432#ifdef ATA_DEBUG
3433 struct scsi_device *scsidev = cmd->device;
3434 u8 *scsicmd = cmd->cmnd;
3435
3436 DPRINTK("CDB (%u:%d,%d,%d) %02x %02x %02x %02x %02x %02x %02x %02x %02x\n",
44877b4e 3437 ap->print_id,
1da177e4
LT
3438 scsidev->channel, scsidev->id, scsidev->lun,
3439 scsicmd[0], scsicmd[1], scsicmd[2], scsicmd[3],
3440 scsicmd[4], scsicmd[5], scsicmd[6], scsicmd[7],
3441 scsicmd[8]);
3442#endif
3443}
3444
542b1444 3445static inline int __ata_scsi_queuecmd(struct scsi_cmnd *scmd,
2115ea94 3446 struct ata_device *dev)
eb3f0f9c 3447{
baf4fdfa
ML
3448 u8 scsi_op = scmd->cmnd[0];
3449 ata_xlat_func_t xlat_func;
2115ea94
TH
3450 int rc = 0;
3451
9162c657 3452 if (dev->class == ATA_DEV_ATA || dev->class == ATA_DEV_ZAC) {
baf4fdfa
ML
3453 if (unlikely(!scmd->cmd_len || scmd->cmd_len > dev->cdb_len))
3454 goto bad_cdb_len;
eb3f0f9c 3455
baf4fdfa
ML
3456 xlat_func = ata_get_xlat_func(dev, scsi_op);
3457 } else {
3458 if (unlikely(!scmd->cmd_len))
3459 goto bad_cdb_len;
3460
3461 xlat_func = NULL;
3462 if (likely((scsi_op != ATA_16) || !atapi_passthru16)) {
3463 /* relay SCSI command to ATAPI device */
607126c2
ML
3464 int len = COMMAND_SIZE(scsi_op);
3465 if (unlikely(len > scmd->cmd_len || len > dev->cdb_len))
baf4fdfa
ML
3466 goto bad_cdb_len;
3467
3468 xlat_func = atapi_xlat;
3469 } else {
3470 /* ATA_16 passthru, treat as an ATA command */
3471 if (unlikely(scmd->cmd_len > 16))
3472 goto bad_cdb_len;
3473
3474 xlat_func = ata_get_xlat_func(dev, scsi_op);
3475 }
3476 }
3477
3478 if (xlat_func)
b27dcfb0 3479 rc = ata_scsi_translate(dev, scmd, xlat_func);
baf4fdfa 3480 else
b27dcfb0 3481 ata_scsi_simulate(dev, scmd);
2115ea94
TH
3482
3483 return rc;
baf4fdfa
ML
3484
3485 bad_cdb_len:
3486 DPRINTK("bad CDB len=%u, scsi_op=0x%02x, max=%u\n",
3487 scmd->cmd_len, scsi_op, dev->cdb_len);
3488 scmd->result = DID_ERROR << 16;
b27dcfb0 3489 scmd->scsi_done(scmd);
baf4fdfa 3490 return 0;
eb3f0f9c
BK
3491}
3492
1da177e4
LT
3493/**
3494 * ata_scsi_queuecmd - Issue SCSI cdb to libata-managed device
23e701e6 3495 * @shost: SCSI host of command to be sent
1da177e4 3496 * @cmd: SCSI command to be sent
1da177e4
LT
3497 *
3498 * In some cases, this function translates SCSI commands into
3499 * ATA taskfiles, and queues the taskfiles to be sent to
3500 * hardware. In other cases, this function simulates a
3501 * SCSI device by evaluating and responding to certain
3502 * SCSI commands. This creates the overall effect of
3503 * ATA and ATAPI devices appearing as SCSI devices.
3504 *
3505 * LOCKING:
23e701e6 3506 * ATA host lock
1da177e4
LT
3507 *
3508 * RETURNS:
2115ea94
TH
3509 * Return value from __ata_scsi_queuecmd() if @cmd can be queued,
3510 * 0 otherwise.
1da177e4 3511 */
23e701e6 3512int ata_scsi_queuecmd(struct Scsi_Host *shost, struct scsi_cmnd *cmd)
1da177e4
LT
3513{
3514 struct ata_port *ap;
3515 struct ata_device *dev;
3516 struct scsi_device *scsidev = cmd->device;
2115ea94 3517 int rc = 0;
23e701e6 3518 unsigned long irq_flags;
1da177e4 3519
35bb94b1 3520 ap = ata_shost_to_port(shost);
005a5a06 3521
23e701e6 3522 spin_lock_irqsave(ap->lock, irq_flags);
1da177e4
LT
3523
3524 ata_scsi_dump_cdb(ap, cmd);
3525
3526 dev = ata_scsi_find_dev(ap, scsidev);
eb3f0f9c 3527 if (likely(dev))
b27dcfb0 3528 rc = __ata_scsi_queuecmd(cmd, dev);
eb3f0f9c 3529 else {
1da177e4 3530 cmd->result = (DID_BAD_TARGET << 16);
23e701e6 3531 cmd->scsi_done(cmd);
1da177e4
LT
3532 }
3533
23e701e6
JG
3534 spin_unlock_irqrestore(ap->lock, irq_flags);
3535
2115ea94 3536 return rc;
1da177e4
LT
3537}
3538
3539/**
3540 * ata_scsi_simulate - simulate SCSI command on ATA device
c893a3ae 3541 * @dev: the target device
1da177e4 3542 * @cmd: SCSI command being sent to device.
1da177e4
LT
3543 *
3544 * Interprets and directly executes a select list of SCSI commands
3545 * that can be handled internally.
3546 *
3547 * LOCKING:
cca3974e 3548 * spin_lock_irqsave(host lock)
1da177e4
LT
3549 */
3550
b27dcfb0 3551void ata_scsi_simulate(struct ata_device *dev, struct scsi_cmnd *cmd)
1da177e4
LT
3552{
3553 struct ata_scsi_args args;
057ace5e 3554 const u8 *scsicmd = cmd->cmnd;
45394145 3555 u8 tmp8;
1da177e4 3556
9a3dccc4
TH
3557 args.dev = dev;
3558 args.id = dev->id;
1da177e4 3559 args.cmd = cmd;
b27dcfb0 3560 args.done = cmd->scsi_done;
1da177e4
LT
3561
3562 switch(scsicmd[0]) {
2dcb407e
JG
3563 /* TODO: worth improving? */
3564 case FORMAT_UNIT:
b27dcfb0 3565 ata_scsi_invalid_field(cmd);
2dcb407e
JG
3566 break;
3567
3568 case INQUIRY:
3569 if (scsicmd[1] & 2) /* is CmdDt set? */
b27dcfb0 3570 ata_scsi_invalid_field(cmd);
2dcb407e
JG
3571 else if ((scsicmd[1] & 1) == 0) /* is EVPD clear? */
3572 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_std);
3573 else switch (scsicmd[2]) {
3574 case 0x00:
3575 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_00);
1da177e4 3576 break;
2dcb407e
JG
3577 case 0x80:
3578 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_80);
1da177e4 3579 break;
2dcb407e
JG
3580 case 0x83:
3581 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_83);
1da177e4 3582 break;
2dcb407e
JG
3583 case 0x89:
3584 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_89);
3585 break;
18f0f978
CH
3586 case 0xb0:
3587 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_b0);
3588 break;
1e9dbc92
MW
3589 case 0xb1:
3590 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_b1);
3591 break;
02e0a604
MP
3592 case 0xb2:
3593 ata_scsi_rbuf_fill(&args, ata_scsiop_inq_b2);
3594 break;
2dcb407e 3595 default:
b27dcfb0 3596 ata_scsi_invalid_field(cmd);
1da177e4 3597 break;
2dcb407e
JG
3598 }
3599 break;
3600
3601 case MODE_SENSE:
3602 case MODE_SENSE_10:
3603 ata_scsi_rbuf_fill(&args, ata_scsiop_mode_sense);
3604 break;
3605
2dcb407e
JG
3606 case READ_CAPACITY:
3607 ata_scsi_rbuf_fill(&args, ata_scsiop_read_cap);
3608 break;
3609
eb846d9f 3610 case SERVICE_ACTION_IN_16:
2dcb407e 3611 if ((scsicmd[1] & 0x1f) == SAI_READ_CAPACITY_16)
1da177e4 3612 ata_scsi_rbuf_fill(&args, ata_scsiop_read_cap);
2dcb407e 3613 else
b27dcfb0 3614 ata_scsi_invalid_field(cmd);
2dcb407e 3615 break;
1da177e4 3616
2dcb407e
JG
3617 case REPORT_LUNS:
3618 ata_scsi_rbuf_fill(&args, ata_scsiop_report_luns);
3619 break;
1da177e4 3620
2dcb407e
JG
3621 case REQUEST_SENSE:
3622 ata_scsi_set_sense(cmd, 0, 0, 0);
3623 cmd->result = (DRIVER_SENSE << 24);
b27dcfb0 3624 cmd->scsi_done(cmd);
2dcb407e 3625 break;
1da177e4 3626
2dcb407e
JG
3627 /* if we reach this, then writeback caching is disabled,
3628 * turning this into a no-op.
3629 */
3630 case SYNCHRONIZE_CACHE:
3631 /* fall through */
3632
3633 /* no-op's, complete with success */
3634 case REZERO_UNIT:
3635 case SEEK_6:
3636 case SEEK_10:
3637 case TEST_UNIT_READY:
3638 ata_scsi_rbuf_fill(&args, ata_scsiop_noop);
3639 break;
45394145 3640
2dcb407e
JG
3641 case SEND_DIAGNOSTIC:
3642 tmp8 = scsicmd[1] & ~(1 << 3);
3643 if ((tmp8 == 0x4) && (!scsicmd[3]) && (!scsicmd[4]))
00bd0202 3644 ata_scsi_rbuf_fill(&args, ata_scsiop_noop);
2dcb407e 3645 else
b27dcfb0 3646 ata_scsi_invalid_field(cmd);
2dcb407e 3647 break;
1da177e4 3648
2dcb407e
JG
3649 /* all other commands */
3650 default:
3651 ata_scsi_set_sense(cmd, ILLEGAL_REQUEST, 0x20, 0x0);
3652 /* "Invalid command operation code" */
b27dcfb0 3653 cmd->scsi_done(cmd);
2dcb407e 3654 break;
1da177e4
LT
3655 }
3656}
3657
f3187195
TH
3658int ata_scsi_add_hosts(struct ata_host *host, struct scsi_host_template *sht)
3659{
3660 int i, rc;
3661
3662 for (i = 0; i < host->n_ports; i++) {
3663 struct ata_port *ap = host->ports[i];
3664 struct Scsi_Host *shost;
3665
3666 rc = -ENOMEM;
3667 shost = scsi_host_alloc(sht, sizeof(struct ata_port *));
3668 if (!shost)
3669 goto err_alloc;
3670
9ee4f393 3671 shost->eh_noresume = 1;
f3187195
TH
3672 *(struct ata_port **)&shost->hostdata[0] = ap;
3673 ap->scsi_host = shost;
3674
d9027470 3675 shost->transportt = ata_scsi_transport_template;
f3187195
TH
3676 shost->unique_id = ap->print_id;
3677 shost->max_id = 16;
3678 shost->max_lun = 1;
3679 shost->max_channel = 1;
3680 shost->max_cmd_len = 16;
54b2b50c 3681 shost->no_write_same = 1;
f3187195 3682
31cc23b3
TH
3683 /* Schedule policy is determined by ->qc_defer()
3684 * callback and it needs to see every deferred qc.
3685 * Set host_blocked to 1 to prevent SCSI midlayer from
3686 * automatically deferring requests.
3687 */
3688 shost->max_host_blocked = 1;
3689
98bd4be1
SL
3690 if (scsi_init_shared_tag_map(shost, host->n_tags))
3691 goto err_add;
12cb5ce1 3692
f8fc75dc
LM
3693 rc = scsi_add_host_with_dma(ap->scsi_host,
3694 &ap->tdev, ap->host->dev);
f3187195
TH
3695 if (rc)
3696 goto err_add;
3697 }
3698
3699 return 0;
3700
3701 err_add:
3702 scsi_host_put(host->ports[i]->scsi_host);
3703 err_alloc:
3704 while (--i >= 0) {
3705 struct Scsi_Host *shost = host->ports[i]->scsi_host;
3706
3707 scsi_remove_host(shost);
3708 scsi_host_put(shost);
3709 }
3710 return rc;
3711}
3712
1ae46317 3713void ata_scsi_scan_host(struct ata_port *ap, int sync)
644dd0cc 3714{
1ae46317
TH
3715 int tries = 5;
3716 struct ata_device *last_failed_dev = NULL;
41bda9c9 3717 struct ata_link *link;
1ae46317 3718 struct ata_device *dev;
644dd0cc 3719
1ae46317 3720 repeat:
1eca4365
TH
3721 ata_for_each_link(link, ap, EDGE) {
3722 ata_for_each_dev(dev, link, ENABLED) {
41bda9c9
TH
3723 struct scsi_device *sdev;
3724 int channel = 0, id = 0;
3edebac4 3725
1eca4365 3726 if (dev->sdev)
41bda9c9 3727 continue;
3f19ee8c 3728
41bda9c9
TH
3729 if (ata_is_host_link(link))
3730 id = dev->devno;
3731 else
3732 channel = link->pmp;
3733
3734 sdev = __scsi_add_device(ap->scsi_host, channel, id, 0,
3735 NULL);
3736 if (!IS_ERR(sdev)) {
3737 dev->sdev = sdev;
3738 scsi_device_put(sdev);
295124dc
GG
3739 } else {
3740 dev->sdev = NULL;
41bda9c9 3741 }
3edebac4 3742 }
3f19ee8c 3743 }
1ae46317
TH
3744
3745 /* If we scanned while EH was in progress or allocation
3746 * failure occurred, scan would have failed silently. Check
3747 * whether all devices are attached.
3748 */
1eca4365
TH
3749 ata_for_each_link(link, ap, EDGE) {
3750 ata_for_each_dev(dev, link, ENABLED) {
3751 if (!dev->sdev)
41bda9c9
TH
3752 goto exit_loop;
3753 }
1ae46317 3754 }
41bda9c9
TH
3755 exit_loop:
3756 if (!link)
1ae46317
TH
3757 return;
3758
3759 /* we're missing some SCSI devices */
3760 if (sync) {
3761 /* If caller requested synchrnous scan && we've made
3762 * any progress, sleep briefly and repeat.
3763 */
3764 if (dev != last_failed_dev) {
3765 msleep(100);
3766 last_failed_dev = dev;
3767 goto repeat;
3768 }
3769
3770 /* We might be failing to detect boot device, give it
3771 * a few more chances.
3772 */
3773 if (--tries) {
3774 msleep(100);
3775 goto repeat;
3776 }
3777
a9a79dfe
JP
3778 ata_port_err(ap,
3779 "WARNING: synchronous SCSI scan failed without making any progress, switching to async\n");
1ae46317
TH
3780 }
3781
ad72cf98 3782 queue_delayed_work(system_long_wq, &ap->hotplug_task,
1ae46317 3783 round_jiffies_relative(HZ));
644dd0cc 3784}
0ea035a3
TH
3785
3786/**
3787 * ata_scsi_offline_dev - offline attached SCSI device
3788 * @dev: ATA device to offline attached SCSI device for
3789 *
3790 * This function is called from ata_eh_hotplug() and responsible
3791 * for taking the SCSI device attached to @dev offline. This
cca3974e 3792 * function is called with host lock which protects dev->sdev
0ea035a3
TH
3793 * against clearing.
3794 *
3795 * LOCKING:
cca3974e 3796 * spin_lock_irqsave(host lock)
0ea035a3
TH
3797 *
3798 * RETURNS:
3799 * 1 if attached SCSI device exists, 0 otherwise.
3800 */
3801int ata_scsi_offline_dev(struct ata_device *dev)
3802{
3803 if (dev->sdev) {
3804 scsi_device_set_state(dev->sdev, SDEV_OFFLINE);
3805 return 1;
3806 }
3807 return 0;
3808}
580b2102
TH
3809
3810/**
3811 * ata_scsi_remove_dev - remove attached SCSI device
3812 * @dev: ATA device to remove attached SCSI device for
3813 *
3814 * This function is called from ata_eh_scsi_hotplug() and
3815 * responsible for removing the SCSI device attached to @dev.
3816 *
3817 * LOCKING:
3818 * Kernel thread context (may sleep).
3819 */
3820static void ata_scsi_remove_dev(struct ata_device *dev)
3821{
9af5c9c9 3822 struct ata_port *ap = dev->link->ap;
580b2102
TH
3823 struct scsi_device *sdev;
3824 unsigned long flags;
3825
3826 /* Alas, we need to grab scan_mutex to ensure SCSI device
3827 * state doesn't change underneath us and thus
3828 * scsi_device_get() always succeeds. The mutex locking can
3829 * be removed if there is __scsi_device_get() interface which
3830 * increments reference counts regardless of device state.
3831 */
cca3974e 3832 mutex_lock(&ap->scsi_host->scan_mutex);
ba6a1308 3833 spin_lock_irqsave(ap->lock, flags);
580b2102 3834
cca3974e 3835 /* clearing dev->sdev is protected by host lock */
580b2102
TH
3836 sdev = dev->sdev;
3837 dev->sdev = NULL;
3838
3839 if (sdev) {
3840 /* If user initiated unplug races with us, sdev can go
cca3974e 3841 * away underneath us after the host lock and
580b2102
TH
3842 * scan_mutex are released. Hold onto it.
3843 */
3844 if (scsi_device_get(sdev) == 0) {
3845 /* The following ensures the attached sdev is
3846 * offline on return from ata_scsi_offline_dev()
3847 * regardless it wins or loses the race
3848 * against this function.
3849 */
3850 scsi_device_set_state(sdev, SDEV_OFFLINE);
3851 } else {
3852 WARN_ON(1);
3853 sdev = NULL;
3854 }
3855 }
3856
ba6a1308 3857 spin_unlock_irqrestore(ap->lock, flags);
cca3974e 3858 mutex_unlock(&ap->scsi_host->scan_mutex);
580b2102
TH
3859
3860 if (sdev) {
a9a79dfe
JP
3861 ata_dev_info(dev, "detaching (SCSI %s)\n",
3862 dev_name(&sdev->sdev_gendev));
580b2102
TH
3863
3864 scsi_remove_device(sdev);
3865 scsi_device_put(sdev);
3866 }
3867}
3868
41bda9c9
TH
3869static void ata_scsi_handle_link_detach(struct ata_link *link)
3870{
3871 struct ata_port *ap = link->ap;
3872 struct ata_device *dev;
3873
1eca4365 3874 ata_for_each_dev(dev, link, ALL) {
41bda9c9
TH
3875 unsigned long flags;
3876
3877 if (!(dev->flags & ATA_DFLAG_DETACHED))
3878 continue;
3879
3880 spin_lock_irqsave(ap->lock, flags);
3881 dev->flags &= ~ATA_DFLAG_DETACHED;
3882 spin_unlock_irqrestore(ap->lock, flags);
3883
f1bc1e4c
AL
3884 if (zpodd_dev_enabled(dev))
3885 zpodd_exit(dev);
3886
41bda9c9
TH
3887 ata_scsi_remove_dev(dev);
3888 }
3889}
3890
2f294968
KCA
3891/**
3892 * ata_scsi_media_change_notify - send media change event
c5d0e6a0 3893 * @dev: Pointer to the disk device with media change event
2f294968
KCA
3894 *
3895 * Tell the block layer to send a media change notification
3896 * event.
3897 *
3898 * LOCKING:
854c73a2 3899 * spin_lock_irqsave(host lock)
2f294968 3900 */
854c73a2 3901void ata_scsi_media_change_notify(struct ata_device *dev)
2f294968 3902{
854c73a2 3903 if (dev->sdev)
f26792d5
JG
3904 sdev_evt_send_simple(dev->sdev, SDEV_EVT_MEDIA_CHANGE,
3905 GFP_ATOMIC);
2f294968 3906}
2f294968 3907
580b2102
TH
3908/**
3909 * ata_scsi_hotplug - SCSI part of hotplug
65f27f38 3910 * @work: Pointer to ATA port to perform SCSI hotplug on
580b2102
TH
3911 *
3912 * Perform SCSI part of hotplug. It's executed from a separate
3913 * workqueue after EH completes. This is necessary because SCSI
3914 * hot plugging requires working EH and hot unplugging is
3915 * synchronized with hot plugging with a mutex.
3916 *
3917 * LOCKING:
3918 * Kernel thread context (may sleep).
3919 */
65f27f38 3920void ata_scsi_hotplug(struct work_struct *work)
580b2102 3921{
65f27f38
DH
3922 struct ata_port *ap =
3923 container_of(work, struct ata_port, hotplug_task.work);
41bda9c9 3924 int i;
580b2102 3925
b51e9e5d 3926 if (ap->pflags & ATA_PFLAG_UNLOADING) {
580b2102
TH
3927 DPRINTK("ENTER/EXIT - unloading\n");
3928 return;
3929 }
3930
85fbd722
TH
3931 /*
3932 * XXX - UGLY HACK
3933 *
3934 * The block layer suspend/resume path is fundamentally broken due
3935 * to freezable kthreads and workqueue and may deadlock if a block
3936 * device gets removed while resume is in progress. I don't know
3937 * what the solution is short of removing freezable kthreads and
3938 * workqueues altogether.
3939 *
3940 * The following is an ugly hack to avoid kicking off device
3941 * removal while freezer is active. This is a joke but does avoid
3942 * this particular deadlock scenario.
3943 *
3944 * https://bugzilla.kernel.org/show_bug.cgi?id=62801
3945 * http://marc.info/?l=linux-kernel&m=138695698516487
3946 */
3947#ifdef CONFIG_FREEZER
3948 while (pm_freezing)
3949 msleep(10);
3950#endif
3951
580b2102 3952 DPRINTK("ENTER\n");
ad72cf98 3953 mutex_lock(&ap->scsi_scan_mutex);
580b2102 3954
41bda9c9
TH
3955 /* Unplug detached devices. We cannot use link iterator here
3956 * because PMP links have to be scanned even if PMP is
3957 * currently not attached. Iterate manually.
3958 */
3959 ata_scsi_handle_link_detach(&ap->link);
3960 if (ap->pmp_link)
3961 for (i = 0; i < SATA_PMP_MAX_PORTS; i++)
3962 ata_scsi_handle_link_detach(&ap->pmp_link[i]);
580b2102
TH
3963
3964 /* scan for new ones */
1ae46317 3965 ata_scsi_scan_host(ap, 0);
580b2102 3966
ad72cf98 3967 mutex_unlock(&ap->scsi_scan_mutex);
580b2102
TH
3968 DPRINTK("EXIT\n");
3969}
83c47bcb
TH
3970
3971/**
3972 * ata_scsi_user_scan - indication for user-initiated bus scan
3973 * @shost: SCSI host to scan
3974 * @channel: Channel to scan
3975 * @id: ID to scan
3976 * @lun: LUN to scan
3977 *
3978 * This function is called when user explicitly requests bus
3979 * scan. Set probe pending flag and invoke EH.
3980 *
3981 * LOCKING:
3982 * SCSI layer (we don't care)
3983 *
3984 * RETURNS:
3985 * Zero.
3986 */
d9027470 3987int ata_scsi_user_scan(struct Scsi_Host *shost, unsigned int channel,
9cb78c16 3988 unsigned int id, u64 lun)
83c47bcb
TH
3989{
3990 struct ata_port *ap = ata_shost_to_port(shost);
3991 unsigned long flags;
41bda9c9 3992 int devno, rc = 0;
83c47bcb
TH
3993
3994 if (!ap->ops->error_handler)
3995 return -EOPNOTSUPP;
3996
41bda9c9 3997 if (lun != SCAN_WILD_CARD && lun)
83c47bcb
TH
3998 return -EINVAL;
3999
071f44b1 4000 if (!sata_pmp_attached(ap)) {
41bda9c9
TH
4001 if (channel != SCAN_WILD_CARD && channel)
4002 return -EINVAL;
4003 devno = id;
4004 } else {
4005 if (id != SCAN_WILD_CARD && id)
4006 return -EINVAL;
4007 devno = channel;
4008 }
4009
ba6a1308 4010 spin_lock_irqsave(ap->lock, flags);
83c47bcb 4011
41bda9c9
TH
4012 if (devno == SCAN_WILD_CARD) {
4013 struct ata_link *link;
4014
1eca4365 4015 ata_for_each_link(link, ap, EDGE) {
41bda9c9 4016 struct ata_eh_info *ehi = &link->eh_info;
b558eddd 4017 ehi->probe_mask |= ATA_ALL_DEVICES;
cf480626 4018 ehi->action |= ATA_EH_RESET;
41bda9c9 4019 }
83c47bcb 4020 } else {
41bda9c9 4021 struct ata_device *dev = ata_find_dev(ap, devno);
83c47bcb
TH
4022
4023 if (dev) {
41bda9c9 4024 struct ata_eh_info *ehi = &dev->link->eh_info;
9af5c9c9 4025 ehi->probe_mask |= 1 << dev->devno;
cf480626 4026 ehi->action |= ATA_EH_RESET;
83c47bcb
TH
4027 } else
4028 rc = -EINVAL;
4029 }
4030
309afcb5 4031 if (rc == 0) {
83c47bcb 4032 ata_port_schedule_eh(ap);
309afcb5
TH
4033 spin_unlock_irqrestore(ap->lock, flags);
4034 ata_port_wait_eh(ap);
4035 } else
4036 spin_unlock_irqrestore(ap->lock, flags);
83c47bcb
TH
4037
4038 return rc;
4039}
3057ac3c 4040
4041/**
d0171269 4042 * ata_scsi_dev_rescan - initiate scsi_rescan_device()
65f27f38 4043 * @work: Pointer to ATA port to perform scsi_rescan_device()
3057ac3c 4044 *
d0171269 4045 * After ATA pass thru (SAT) commands are executed successfully,
ad72cf98 4046 * libata need to propagate the changes to SCSI layer.
3057ac3c 4047 *
d0171269
TH
4048 * LOCKING:
4049 * Kernel thread context (may sleep).
3057ac3c 4050 */
65f27f38 4051void ata_scsi_dev_rescan(struct work_struct *work)
3057ac3c 4052{
65f27f38
DH
4053 struct ata_port *ap =
4054 container_of(work, struct ata_port, scsi_rescan_task);
41bda9c9 4055 struct ata_link *link;
f58229f8 4056 struct ata_device *dev;
f84e7e41 4057 unsigned long flags;
3057ac3c 4058
ad72cf98 4059 mutex_lock(&ap->scsi_scan_mutex);
f84e7e41
TH
4060 spin_lock_irqsave(ap->lock, flags);
4061
1eca4365
TH
4062 ata_for_each_link(link, ap, EDGE) {
4063 ata_for_each_dev(dev, link, ENABLED) {
41bda9c9 4064 struct scsi_device *sdev = dev->sdev;
3057ac3c 4065
1eca4365 4066 if (!sdev)
41bda9c9
TH
4067 continue;
4068 if (scsi_device_get(sdev))
4069 continue;
f84e7e41 4070
41bda9c9
TH
4071 spin_unlock_irqrestore(ap->lock, flags);
4072 scsi_rescan_device(&(sdev->sdev_gendev));
4073 scsi_device_put(sdev);
4074 spin_lock_irqsave(ap->lock, flags);
4075 }
3057ac3c 4076 }
f84e7e41
TH
4077
4078 spin_unlock_irqrestore(ap->lock, flags);
ad72cf98 4079 mutex_unlock(&ap->scsi_scan_mutex);
3057ac3c 4080}
80289167
BK
4081
4082/**
4083 * ata_sas_port_alloc - Allocate port for a SAS attached SATA device
4f931374 4084 * @host: ATA host container for all SAS ports
80289167 4085 * @port_info: Information from low-level host driver
cca3974e 4086 * @shost: SCSI host that the scsi device is attached to
80289167
BK
4087 *
4088 * LOCKING:
4089 * PCI/etc. bus probe sem.
4090 *
4091 * RETURNS:
4092 * ata_port pointer on success / NULL on failure.
4093 */
4094
cca3974e 4095struct ata_port *ata_sas_port_alloc(struct ata_host *host,
80289167 4096 struct ata_port_info *port_info,
cca3974e 4097 struct Scsi_Host *shost)
80289167 4098{
f3187195 4099 struct ata_port *ap;
80289167 4100
f3187195 4101 ap = ata_port_alloc(host);
80289167
BK
4102 if (!ap)
4103 return NULL;
4104
f3187195 4105 ap->port_no = 0;
a29b5dad 4106 ap->lock = &host->lock;
f3187195
TH
4107 ap->pio_mask = port_info->pio_mask;
4108 ap->mwdma_mask = port_info->mwdma_mask;
4109 ap->udma_mask = port_info->udma_mask;
4110 ap->flags |= port_info->flags;
4111 ap->ops = port_info->port_ops;
4112 ap->cbl = ATA_CBL_SATA;
4113
80289167
BK
4114 return ap;
4115}
4116EXPORT_SYMBOL_GPL(ata_sas_port_alloc);
4117
4118/**
4119 * ata_sas_port_start - Set port up for dma.
4120 * @ap: Port to initialize
4121 *
4122 * Called just after data structures for each port are
dde20207 4123 * initialized.
80289167
BK
4124 *
4125 * May be used as the port_start() entry in ata_port_operations.
4126 *
4127 * LOCKING:
4128 * Inherited from caller.
4129 */
4130int ata_sas_port_start(struct ata_port *ap)
4131{
3f1e046a
NA
4132 /*
4133 * the port is marked as frozen at allocation time, but if we don't
4134 * have new eh, we won't thaw it
4135 */
4136 if (!ap->ops->error_handler)
4137 ap->pflags &= ~ATA_PFLAG_FROZEN;
dde20207 4138 return 0;
80289167
BK
4139}
4140EXPORT_SYMBOL_GPL(ata_sas_port_start);
4141
4142/**
4143 * ata_port_stop - Undo ata_sas_port_start()
4144 * @ap: Port to shut down
4145 *
80289167
BK
4146 * May be used as the port_stop() entry in ata_port_operations.
4147 *
4148 * LOCKING:
4149 * Inherited from caller.
4150 */
4151
4152void ata_sas_port_stop(struct ata_port *ap)
4153{
80289167
BK
4154}
4155EXPORT_SYMBOL_GPL(ata_sas_port_stop);
4156
b2024459
DW
4157/**
4158 * ata_sas_async_probe - simply schedule probing and return
4159 * @ap: Port to probe
4160 *
4161 * For batch scheduling of probe for sas attached ata devices, assumes
4162 * the port has already been through ata_sas_port_init()
4163 */
4164void ata_sas_async_probe(struct ata_port *ap)
9508a66f 4165{
b2024459
DW
4166 __ata_port_probe(ap);
4167}
4168EXPORT_SYMBOL_GPL(ata_sas_async_probe);
9508a66f 4169
b2024459
DW
4170int ata_sas_sync_probe(struct ata_port *ap)
4171{
4172 return ata_port_probe(ap);
9508a66f 4173}
b2024459
DW
4174EXPORT_SYMBOL_GPL(ata_sas_sync_probe);
4175
9508a66f 4176
80289167
BK
4177/**
4178 * ata_sas_port_init - Initialize a SATA device
4179 * @ap: SATA port to initialize
4180 *
4181 * LOCKING:
4182 * PCI/etc. bus probe sem.
4183 *
4184 * RETURNS:
4185 * Zero on success, non-zero on error.
4186 */
4187
4188int ata_sas_port_init(struct ata_port *ap)
4189{
4190 int rc = ap->ops->port_start(ap);
4191
b2024459
DW
4192 if (rc)
4193 return rc;
4194 ap->print_id = atomic_inc_return(&ata_print_id);
4195 return 0;
80289167
BK
4196}
4197EXPORT_SYMBOL_GPL(ata_sas_port_init);
4198
4199/**
4200 * ata_sas_port_destroy - Destroy a SATA port allocated by ata_sas_port_alloc
4201 * @ap: SATA port to destroy
4202 *
4203 */
4204
4205void ata_sas_port_destroy(struct ata_port *ap)
4206{
f0d36efd
TH
4207 if (ap->ops->port_stop)
4208 ap->ops->port_stop(ap);
80289167
BK
4209 kfree(ap);
4210}
4211EXPORT_SYMBOL_GPL(ata_sas_port_destroy);
4212
4213/**
4214 * ata_sas_slave_configure - Default slave_config routine for libata devices
4215 * @sdev: SCSI device to configure
4216 * @ap: ATA port to which SCSI device is attached
4217 *
4218 * RETURNS:
4219 * Zero.
4220 */
4221
4222int ata_sas_slave_configure(struct scsi_device *sdev, struct ata_port *ap)
4223{
4224 ata_scsi_sdev_config(sdev);
9af5c9c9 4225 ata_scsi_dev_config(sdev, ap->link.device);
80289167
BK
4226 return 0;
4227}
4228EXPORT_SYMBOL_GPL(ata_sas_slave_configure);
4229
4230/**
4231 * ata_sas_queuecmd - Issue SCSI cdb to libata-managed device
4232 * @cmd: SCSI command to be sent
80289167
BK
4233 * @ap: ATA port to which the command is being sent
4234 *
4235 * RETURNS:
08475a19
BK
4236 * Return value from __ata_scsi_queuecmd() if @cmd can be queued,
4237 * 0 otherwise.
80289167
BK
4238 */
4239
b27dcfb0 4240int ata_sas_queuecmd(struct scsi_cmnd *cmd, struct ata_port *ap)
80289167 4241{
08475a19
BK
4242 int rc = 0;
4243
80289167
BK
4244 ata_scsi_dump_cdb(ap, cmd);
4245
2486fa56 4246 if (likely(ata_dev_enabled(ap->link.device)))
b27dcfb0 4247 rc = __ata_scsi_queuecmd(cmd, ap->link.device);
80289167
BK
4248 else {
4249 cmd->result = (DID_BAD_TARGET << 16);
b27dcfb0 4250 cmd->scsi_done(cmd);
80289167 4251 }
08475a19 4252 return rc;
80289167
BK
4253}
4254EXPORT_SYMBOL_GPL(ata_sas_queuecmd);
98bd4be1
SL
4255
4256int ata_sas_allocate_tag(struct ata_port *ap)
4257{
4258 unsigned int max_queue = ap->host->n_tags;
4259 unsigned int i, tag;
4260
4261 for (i = 0, tag = ap->sas_last_tag + 1; i < max_queue; i++, tag++) {
3a028243 4262 tag = tag < max_queue ? tag : 0;
98bd4be1
SL
4263
4264 /* the last tag is reserved for internal command. */
4265 if (tag == ATA_TAG_INTERNAL)
4266 continue;
4267
4268 if (!test_and_set_bit(tag, &ap->sas_tag_allocated)) {
4269 ap->sas_last_tag = tag;
4270 return tag;
4271 }
4272 }
4273 return -1;
4274}
4275
4276void ata_sas_free_tag(unsigned int tag, struct ata_port *ap)
4277{
4278 clear_bit(tag, &ap->sas_tag_allocated);
4279}
This page took 1.640774 seconds and 5 git commands to generate.