1 /* Driver for SanDisk SDDR-55 SmartMedia reader 2 * 3 * $Id:$ 4 * 5 * SDDR55 driver v0.1: 6 * 7 * First release 8 * 9 * Current development and maintenance by: 10 * (c) 2002 Simon Munton 11 * 12 * This program is free software; you can redistribute it and/or modify it 13 * under the terms of the GNU General Public License as published by the 14 * Free Software Foundation; either version 2, or (at your option) any 15 * later version. 16 * 17 * This program is distributed in the hope that it will be useful, but 18 * WITHOUT ANY WARRANTY; without even the implied warranty of 19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU 20 * General Public License for more details. 21 * 22 * You should have received a copy of the GNU General Public License along 23 * with this program; if not, write to the Free Software Foundation, Inc., 24 * 675 Mass Ave, Cambridge, MA 02139, USA. 25 */ 26 27 #include <linux/jiffies.h> 28 #include <linux/errno.h> 29 #include <linux/slab.h> 30 31 #include <scsi/scsi.h> 32 #include <scsi/scsi_cmnd.h> 33 34 #include "usb.h" 35 #include "transport.h" 36 #include "protocol.h" 37 #include "debug.h" 38 #include "sddr55.h" 39 40 41 #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) ) 42 #define LSB_of(s) ((s)&0xFF) 43 #define MSB_of(s) ((s)>>8) 44 #define PAGESIZE 512 45 46 #define set_sense_info(sk, asc, ascq) \ 47 do { \ 48 info->sense_data[2] = sk; \ 49 info->sense_data[12] = asc; \ 50 info->sense_data[13] = ascq; \ 51 } while (0) 52 53 54 struct sddr55_card_info { 55 unsigned long capacity; /* Size of card in bytes */ 56 int max_log_blks; /* maximum number of logical blocks */ 57 int pageshift; /* log2 of pagesize */ 58 int smallpageshift; /* 1 if pagesize == 256 */ 59 int blocksize; /* Size of block in pages */ 60 int blockshift; /* log2 of blocksize */ 61 int blockmask; /* 2^blockshift - 1 */ 62 int read_only; /* non zero if card is write protected */ 63 int force_read_only; /* non zero if we find a map error*/ 64 int *lba_to_pba; /* logical to physical map */ 65 int *pba_to_lba; /* physical to logical map */ 66 int fatal_error; /* set if we detect something nasty */ 67 unsigned long last_access; /* number of jiffies since we last talked to device */ 68 unsigned char sense_data[18]; 69 }; 70 71 72 #define NOT_ALLOCATED 0xffffffff 73 #define BAD_BLOCK 0xffff 74 #define CIS_BLOCK 0x400 75 #define UNUSED_BLOCK 0x3ff 76 77 static int 78 sddr55_bulk_transport(struct us_data *us, int direction, 79 unsigned char *data, unsigned int len) { 80 struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra; 81 unsigned int pipe = (direction == DMA_FROM_DEVICE) ? 82 us->recv_bulk_pipe : us->send_bulk_pipe; 83 84 if (!len) 85 return USB_STOR_XFER_GOOD; 86 info->last_access = jiffies; 87 return usb_stor_bulk_transfer_buf(us, pipe, data, len, NULL); 88 } 89 90 /* check if card inserted, if there is, update read_only status 91 * return non zero if no card 92 */ 93 94 static int sddr55_status(struct us_data *us) 95 { 96 int result; 97 unsigned char *command = us->iobuf; 98 unsigned char *status = us->iobuf; 99 struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra; 100 101 /* send command */ 102 memset(command, 0, 8); 103 command[5] = 0xB0; 104 command[7] = 0x80; 105 result = sddr55_bulk_transport(us, 106 DMA_TO_DEVICE, command, 8); 107 108 US_DEBUGP("Result for send_command in status %d\n", 109 result); 110 111 if (result != USB_STOR_XFER_GOOD) { 112 set_sense_info (4, 0, 0); /* hardware error */ 113 return USB_STOR_TRANSPORT_ERROR; 114 } 115 116 result = sddr55_bulk_transport(us, 117 DMA_FROM_DEVICE, status, 4); 118 119 /* expect to get short transfer if no card fitted */ 120 if (result == USB_STOR_XFER_SHORT || result == USB_STOR_XFER_STALLED) { 121 /* had a short transfer, no card inserted, free map memory */ 122 if (info->lba_to_pba) 123 kfree(info->lba_to_pba); 124 if (info->pba_to_lba) 125 kfree(info->pba_to_lba); 126 info->lba_to_pba = NULL; 127 info->pba_to_lba = NULL; 128 129 info->fatal_error = 0; 130 info->force_read_only = 0; 131 132 set_sense_info (2, 0x3a, 0); /* not ready, medium not present */ 133 return USB_STOR_TRANSPORT_FAILED; 134 } 135 136 if (result != USB_STOR_XFER_GOOD) { 137 set_sense_info (4, 0, 0); /* hardware error */ 138 return USB_STOR_TRANSPORT_FAILED; 139 } 140 141 /* check write protect status */ 142 info->read_only = (status[0] & 0x20); 143 144 /* now read status */ 145 result = sddr55_bulk_transport(us, 146 DMA_FROM_DEVICE, status, 2); 147 148 if (result != USB_STOR_XFER_GOOD) { 149 set_sense_info (4, 0, 0); /* hardware error */ 150 } 151 152 return (result == USB_STOR_XFER_GOOD ? 153 USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_FAILED); 154 } 155 156 157 static int sddr55_read_data(struct us_data *us, 158 unsigned int lba, 159 unsigned int page, 160 unsigned short sectors) { 161 162 int result = USB_STOR_TRANSPORT_GOOD; 163 unsigned char *command = us->iobuf; 164 unsigned char *status = us->iobuf; 165 struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra; 166 unsigned char *buffer; 167 168 unsigned int pba; 169 unsigned long address; 170 171 unsigned short pages; 172 unsigned int len, index, offset; 173 174 // Since we only read in one block at a time, we have to create 175 // a bounce buffer and move the data a piece at a time between the 176 // bounce buffer and the actual transfer buffer. 177 178 len = min((unsigned int) sectors, (unsigned int) info->blocksize >> 179 info->smallpageshift) * PAGESIZE; 180 buffer = kmalloc(len, GFP_NOIO); 181 if (buffer == NULL) 182 return USB_STOR_TRANSPORT_ERROR; /* out of memory */ 183 index = offset = 0; 184 185 while (sectors>0) { 186 187 /* have we got to end? */ 188 if (lba >= info->max_log_blks) 189 break; 190 191 pba = info->lba_to_pba[lba]; 192 193 // Read as many sectors as possible in this block 194 195 pages = min((unsigned int) sectors << info->smallpageshift, 196 info->blocksize - page); 197 len = pages << info->pageshift; 198 199 US_DEBUGP("Read %02X pages, from PBA %04X" 200 " (LBA %04X) page %02X\n", 201 pages, pba, lba, page); 202 203 if (pba == NOT_ALLOCATED) { 204 /* no pba for this lba, fill with zeroes */ 205 memset (buffer, 0, len); 206 } else { 207 208 address = (pba << info->blockshift) + page; 209 210 command[0] = 0; 211 command[1] = LSB_of(address>>16); 212 command[2] = LSB_of(address>>8); 213 command[3] = LSB_of(address); 214 215 command[4] = 0; 216 command[5] = 0xB0; 217 command[6] = LSB_of(pages << (1 - info->smallpageshift)); 218 command[7] = 0x85; 219 220 /* send command */ 221 result = sddr55_bulk_transport(us, 222 DMA_TO_DEVICE, command, 8); 223 224 US_DEBUGP("Result for send_command in read_data %d\n", 225 result); 226 227 if (result != USB_STOR_XFER_GOOD) { 228 result = USB_STOR_TRANSPORT_ERROR; 229 goto leave; 230 } 231 232 /* read data */ 233 result = sddr55_bulk_transport(us, 234 DMA_FROM_DEVICE, buffer, len); 235 236 if (result != USB_STOR_XFER_GOOD) { 237 result = USB_STOR_TRANSPORT_ERROR; 238 goto leave; 239 } 240 241 /* now read status */ 242 result = sddr55_bulk_transport(us, 243 DMA_FROM_DEVICE, status, 2); 244 245 if (result != USB_STOR_XFER_GOOD) { 246 result = USB_STOR_TRANSPORT_ERROR; 247 goto leave; 248 } 249 250 /* check status for error */ 251 if (status[0] == 0xff && status[1] == 0x4) { 252 set_sense_info (3, 0x11, 0); 253 result = USB_STOR_TRANSPORT_FAILED; 254 goto leave; 255 } 256 } 257 258 // Store the data in the transfer buffer 259 usb_stor_access_xfer_buf(buffer, len, us->srb, 260 &index, &offset, TO_XFER_BUF); 261 262 page = 0; 263 lba++; 264 sectors -= pages >> info->smallpageshift; 265 } 266 267 result = USB_STOR_TRANSPORT_GOOD; 268 269 leave: 270 kfree(buffer); 271 272 return result; 273 } 274 275 static int sddr55_write_data(struct us_data *us, 276 unsigned int lba, 277 unsigned int page, 278 unsigned short sectors) { 279 280 int result = USB_STOR_TRANSPORT_GOOD; 281 unsigned char *command = us->iobuf; 282 unsigned char *status = us->iobuf; 283 struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra; 284 unsigned char *buffer; 285 286 unsigned int pba; 287 unsigned int new_pba; 288 unsigned long address; 289 290 unsigned short pages; 291 int i; 292 unsigned int len, index, offset; 293 294 /* check if we are allowed to write */ 295 if (info->read_only || info->force_read_only) { 296 set_sense_info (7, 0x27, 0); /* read only */ 297 return USB_STOR_TRANSPORT_FAILED; 298 } 299 300 // Since we only write one block at a time, we have to create 301 // a bounce buffer and move the data a piece at a time between the 302 // bounce buffer and the actual transfer buffer. 303 304 len = min((unsigned int) sectors, (unsigned int) info->blocksize >> 305 info->smallpageshift) * PAGESIZE; 306 buffer = kmalloc(len, GFP_NOIO); 307 if (buffer == NULL) 308 return USB_STOR_TRANSPORT_ERROR; 309 index = offset = 0; 310 311 while (sectors > 0) { 312 313 /* have we got to end? */ 314 if (lba >= info->max_log_blks) 315 break; 316 317 pba = info->lba_to_pba[lba]; 318 319 // Write as many sectors as possible in this block 320 321 pages = min((unsigned int) sectors << info->smallpageshift, 322 info->blocksize - page); 323 len = pages << info->pageshift; 324 325 // Get the data from the transfer buffer 326 usb_stor_access_xfer_buf(buffer, len, us->srb, 327 &index, &offset, FROM_XFER_BUF); 328 329 US_DEBUGP("Write %02X pages, to PBA %04X" 330 " (LBA %04X) page %02X\n", 331 pages, pba, lba, page); 332 333 command[4] = 0; 334 335 if (pba == NOT_ALLOCATED) { 336 /* no pba allocated for this lba, find a free pba to use */ 337 338 int max_pba = (info->max_log_blks / 250 ) * 256; 339 int found_count = 0; 340 int found_pba = -1; 341 342 /* set pba to first block in zone lba is in */ 343 pba = (lba / 1000) * 1024; 344 345 US_DEBUGP("No PBA for LBA %04X\n",lba); 346 347 if (max_pba > 1024) 348 max_pba = 1024; 349 350 /* 351 * Scan through the map looking for an unused block 352 * leave 16 unused blocks at start (or as many as 353 * possible) since the sddr55 seems to reuse a used 354 * block when it shouldn't if we don't leave space. 355 */ 356 for (i = 0; i < max_pba; i++, pba++) { 357 if (info->pba_to_lba[pba] == UNUSED_BLOCK) { 358 found_pba = pba; 359 if (found_count++ > 16) 360 break; 361 } 362 } 363 364 pba = found_pba; 365 366 if (pba == -1) { 367 /* oh dear */ 368 US_DEBUGP("Couldn't find unallocated block\n"); 369 370 set_sense_info (3, 0x31, 0); /* medium error */ 371 result = USB_STOR_TRANSPORT_FAILED; 372 goto leave; 373 } 374 375 US_DEBUGP("Allocating PBA %04X for LBA %04X\n", pba, lba); 376 377 /* set writing to unallocated block flag */ 378 command[4] = 0x40; 379 } 380 381 address = (pba << info->blockshift) + page; 382 383 command[1] = LSB_of(address>>16); 384 command[2] = LSB_of(address>>8); 385 command[3] = LSB_of(address); 386 387 /* set the lba into the command, modulo 1000 */ 388 command[0] = LSB_of(lba % 1000); 389 command[6] = MSB_of(lba % 1000); 390 391 command[4] |= LSB_of(pages >> info->smallpageshift); 392 command[5] = 0xB0; 393 command[7] = 0x86; 394 395 /* send command */ 396 result = sddr55_bulk_transport(us, 397 DMA_TO_DEVICE, command, 8); 398 399 if (result != USB_STOR_XFER_GOOD) { 400 US_DEBUGP("Result for send_command in write_data %d\n", 401 result); 402 403 /* set_sense_info is superfluous here? */ 404 set_sense_info (3, 0x3, 0);/* peripheral write error */ 405 result = USB_STOR_TRANSPORT_FAILED; 406 goto leave; 407 } 408 409 /* send the data */ 410 result = sddr55_bulk_transport(us, 411 DMA_TO_DEVICE, buffer, len); 412 413 if (result != USB_STOR_XFER_GOOD) { 414 US_DEBUGP("Result for send_data in write_data %d\n", 415 result); 416 417 /* set_sense_info is superfluous here? */ 418 set_sense_info (3, 0x3, 0);/* peripheral write error */ 419 result = USB_STOR_TRANSPORT_FAILED; 420 goto leave; 421 } 422 423 /* now read status */ 424 result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, status, 6); 425 426 if (result != USB_STOR_XFER_GOOD) { 427 US_DEBUGP("Result for get_status in write_data %d\n", 428 result); 429 430 /* set_sense_info is superfluous here? */ 431 set_sense_info (3, 0x3, 0);/* peripheral write error */ 432 result = USB_STOR_TRANSPORT_FAILED; 433 goto leave; 434 } 435 436 new_pba = (status[3] + (status[4] << 8) + (status[5] << 16)) 437 >> info->blockshift; 438 439 /* check status for error */ 440 if (status[0] == 0xff && status[1] == 0x4) { 441 info->pba_to_lba[new_pba] = BAD_BLOCK; 442 443 set_sense_info (3, 0x0c, 0); 444 result = USB_STOR_TRANSPORT_FAILED; 445 goto leave; 446 } 447 448 US_DEBUGP("Updating maps for LBA %04X: old PBA %04X, new PBA %04X\n", 449 lba, pba, new_pba); 450 451 /* update the lba<->pba maps, note new_pba might be the same as pba */ 452 info->lba_to_pba[lba] = new_pba; 453 info->pba_to_lba[pba] = UNUSED_BLOCK; 454 455 /* check that new_pba wasn't already being used */ 456 if (info->pba_to_lba[new_pba] != UNUSED_BLOCK) { 457 printk(KERN_ERR "sddr55 error: new PBA %04X already in use for LBA %04X\n", 458 new_pba, info->pba_to_lba[new_pba]); 459 info->fatal_error = 1; 460 set_sense_info (3, 0x31, 0); 461 result = USB_STOR_TRANSPORT_FAILED; 462 goto leave; 463 } 464 465 /* update the pba<->lba maps for new_pba */ 466 info->pba_to_lba[new_pba] = lba % 1000; 467 468 page = 0; 469 lba++; 470 sectors -= pages >> info->smallpageshift; 471 } 472 result = USB_STOR_TRANSPORT_GOOD; 473 474 leave: 475 kfree(buffer); 476 return result; 477 } 478 479 static int sddr55_read_deviceID(struct us_data *us, 480 unsigned char *manufacturerID, 481 unsigned char *deviceID) { 482 483 int result; 484 unsigned char *command = us->iobuf; 485 unsigned char *content = us->iobuf; 486 487 memset(command, 0, 8); 488 command[5] = 0xB0; 489 command[7] = 0x84; 490 result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8); 491 492 US_DEBUGP("Result of send_control for device ID is %d\n", 493 result); 494 495 if (result != USB_STOR_XFER_GOOD) 496 return USB_STOR_TRANSPORT_ERROR; 497 498 result = sddr55_bulk_transport(us, 499 DMA_FROM_DEVICE, content, 4); 500 501 if (result != USB_STOR_XFER_GOOD) 502 return USB_STOR_TRANSPORT_ERROR; 503 504 *manufacturerID = content[0]; 505 *deviceID = content[1]; 506 507 if (content[0] != 0xff) { 508 result = sddr55_bulk_transport(us, 509 DMA_FROM_DEVICE, content, 2); 510 } 511 512 return USB_STOR_TRANSPORT_GOOD; 513 } 514 515 516 int sddr55_reset(struct us_data *us) { 517 return 0; 518 } 519 520 521 static unsigned long sddr55_get_capacity(struct us_data *us) { 522 523 unsigned char manufacturerID; 524 unsigned char deviceID; 525 int result; 526 struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra; 527 528 US_DEBUGP("Reading capacity...\n"); 529 530 result = sddr55_read_deviceID(us, 531 &manufacturerID, 532 &deviceID); 533 534 US_DEBUGP("Result of read_deviceID is %d\n", 535 result); 536 537 if (result != USB_STOR_XFER_GOOD) 538 return 0; 539 540 US_DEBUGP("Device ID = %02X\n", deviceID); 541 US_DEBUGP("Manuf ID = %02X\n", manufacturerID); 542 543 info->pageshift = 9; 544 info->smallpageshift = 0; 545 info->blocksize = 16; 546 info->blockshift = 4; 547 info->blockmask = 15; 548 549 switch (deviceID) { 550 551 case 0x6e: // 1MB 552 case 0xe8: 553 case 0xec: 554 info->pageshift = 8; 555 info->smallpageshift = 1; 556 return 0x00100000; 557 558 case 0xea: // 2MB 559 case 0x64: 560 info->pageshift = 8; 561 info->smallpageshift = 1; 562 case 0x5d: // 5d is a ROM card with pagesize 512. 563 return 0x00200000; 564 565 case 0xe3: // 4MB 566 case 0xe5: 567 case 0x6b: 568 case 0xd5: 569 return 0x00400000; 570 571 case 0xe6: // 8MB 572 case 0xd6: 573 return 0x00800000; 574 575 case 0x73: // 16MB 576 info->blocksize = 32; 577 info->blockshift = 5; 578 info->blockmask = 31; 579 return 0x01000000; 580 581 case 0x75: // 32MB 582 info->blocksize = 32; 583 info->blockshift = 5; 584 info->blockmask = 31; 585 return 0x02000000; 586 587 case 0x76: // 64MB 588 info->blocksize = 32; 589 info->blockshift = 5; 590 info->blockmask = 31; 591 return 0x04000000; 592 593 case 0x79: // 128MB 594 info->blocksize = 32; 595 info->blockshift = 5; 596 info->blockmask = 31; 597 return 0x08000000; 598 599 default: // unknown 600 return 0; 601 602 } 603 } 604 605 static int sddr55_read_map(struct us_data *us) { 606 607 struct sddr55_card_info *info = (struct sddr55_card_info *)(us->extra); 608 int numblocks; 609 unsigned char *buffer; 610 unsigned char *command = us->iobuf; 611 int i; 612 unsigned short lba; 613 unsigned short max_lba; 614 int result; 615 616 if (!info->capacity) 617 return -1; 618 619 numblocks = info->capacity >> (info->blockshift + info->pageshift); 620 621 buffer = kmalloc( numblocks * 2, GFP_NOIO ); 622 623 if (!buffer) 624 return -1; 625 626 memset(command, 0, 8); 627 command[5] = 0xB0; 628 command[6] = numblocks * 2 / 256; 629 command[7] = 0x8A; 630 631 result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8); 632 633 if ( result != USB_STOR_XFER_GOOD) { 634 kfree (buffer); 635 return -1; 636 } 637 638 result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, buffer, numblocks * 2); 639 640 if ( result != USB_STOR_XFER_GOOD) { 641 kfree (buffer); 642 return -1; 643 } 644 645 result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, command, 2); 646 647 if ( result != USB_STOR_XFER_GOOD) { 648 kfree (buffer); 649 return -1; 650 } 651 652 if (info->lba_to_pba) 653 kfree(info->lba_to_pba); 654 if (info->pba_to_lba) 655 kfree(info->pba_to_lba); 656 info->lba_to_pba = kmalloc(numblocks*sizeof(int), GFP_NOIO); 657 info->pba_to_lba = kmalloc(numblocks*sizeof(int), GFP_NOIO); 658 659 if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) { 660 if (info->lba_to_pba != NULL) 661 kfree(info->lba_to_pba); 662 if (info->pba_to_lba != NULL) 663 kfree(info->pba_to_lba); 664 info->lba_to_pba = NULL; 665 info->pba_to_lba = NULL; 666 kfree(buffer); 667 return -1; 668 } 669 670 memset(info->lba_to_pba, 0xff, numblocks*sizeof(int)); 671 memset(info->pba_to_lba, 0xff, numblocks*sizeof(int)); 672 673 /* set maximum lba */ 674 max_lba = info->max_log_blks; 675 if (max_lba > 1000) 676 max_lba = 1000; 677 678 // Each block is 64 bytes of control data, so block i is located in 679 // scatterlist block i*64/128k = i*(2^6)*(2^-17) = i*(2^-11) 680 681 for (i=0; i<numblocks; i++) { 682 int zone = i / 1024; 683 684 lba = short_pack(buffer[i * 2], buffer[i * 2 + 1]); 685 686 /* Every 1024 physical blocks ("zone"), the LBA numbers 687 * go back to zero, but are within a higher 688 * block of LBA's. Also, there is a maximum of 689 * 1000 LBA's per zone. In other words, in PBA 690 * 1024-2047 you will find LBA 0-999 which are 691 * really LBA 1000-1999. Yes, this wastes 24 692 * physical blocks per zone. Go figure. 693 * These devices can have blocks go bad, so there 694 * are 24 spare blocks to use when blocks do go bad. 695 */ 696 697 /* SDDR55 returns 0xffff for a bad block, and 0x400 for the 698 * CIS block. (Is this true for cards 8MB or less??) 699 * Record these in the physical to logical map 700 */ 701 702 info->pba_to_lba[i] = lba; 703 704 if (lba >= max_lba) { 705 continue; 706 } 707 708 if (info->lba_to_pba[lba + zone * 1000] != NOT_ALLOCATED && 709 !info->force_read_only) { 710 printk("sddr55: map inconsistency at LBA %04X\n", lba + zone * 1000); 711 info->force_read_only = 1; 712 } 713 714 if (lba<0x10 || (lba>=0x3E0 && lba<0x3EF)) 715 US_DEBUGP("LBA %04X <-> PBA %04X\n", lba, i); 716 717 info->lba_to_pba[lba + zone * 1000] = i; 718 } 719 720 kfree(buffer); 721 return 0; 722 } 723 724 725 static void sddr55_card_info_destructor(void *extra) { 726 struct sddr55_card_info *info = (struct sddr55_card_info *)extra; 727 728 if (!extra) 729 return; 730 731 if (info->lba_to_pba) 732 kfree(info->lba_to_pba); 733 if (info->pba_to_lba) 734 kfree(info->pba_to_lba); 735 } 736 737 738 /* 739 * Transport for the Sandisk SDDR-55 740 */ 741 int sddr55_transport(struct scsi_cmnd *srb, struct us_data *us) 742 { 743 int result; 744 static unsigned char inquiry_response[8] = { 745 0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00 746 }; 747 // write-protected for now, no block descriptor support 748 static unsigned char mode_page_01[20] = { 749 0x0, 0x12, 0x00, 0x80, 0x0, 0x0, 0x0, 0x0, 750 0x01, 0x0A, 751 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 752 }; 753 unsigned char *ptr = us->iobuf; 754 unsigned long capacity; 755 unsigned int lba; 756 unsigned int pba; 757 unsigned int page; 758 unsigned short pages; 759 struct sddr55_card_info *info; 760 761 if (!us->extra) { 762 us->extra = kmalloc( 763 sizeof(struct sddr55_card_info), GFP_NOIO); 764 if (!us->extra) 765 return USB_STOR_TRANSPORT_ERROR; 766 memset(us->extra, 0, sizeof(struct sddr55_card_info)); 767 us->extra_destructor = sddr55_card_info_destructor; 768 } 769 770 info = (struct sddr55_card_info *)(us->extra); 771 772 if (srb->cmnd[0] == REQUEST_SENSE) { 773 US_DEBUGP("SDDR55: request sense %02x/%02x/%02x\n", info->sense_data[2], info->sense_data[12], info->sense_data[13]); 774 775 memcpy (ptr, info->sense_data, sizeof info->sense_data); 776 ptr[0] = 0x70; 777 ptr[7] = 11; 778 usb_stor_set_xfer_buf (ptr, sizeof info->sense_data, srb); 779 memset (info->sense_data, 0, sizeof info->sense_data); 780 781 return USB_STOR_TRANSPORT_GOOD; 782 } 783 784 memset (info->sense_data, 0, sizeof info->sense_data); 785 786 /* Dummy up a response for INQUIRY since SDDR55 doesn't 787 respond to INQUIRY commands */ 788 789 if (srb->cmnd[0] == INQUIRY) { 790 memcpy(ptr, inquiry_response, 8); 791 fill_inquiry_response(us, ptr, 36); 792 return USB_STOR_TRANSPORT_GOOD; 793 } 794 795 /* only check card status if the map isn't allocated, ie no card seen yet 796 * or if it's been over half a second since we last accessed it 797 */ 798 if (info->lba_to_pba == NULL || time_after(jiffies, info->last_access + HZ/2)) { 799 800 /* check to see if a card is fitted */ 801 result = sddr55_status (us); 802 if (result) { 803 result = sddr55_status (us); 804 if (!result) { 805 set_sense_info (6, 0x28, 0); /* new media, set unit attention, not ready to ready */ 806 } 807 return USB_STOR_TRANSPORT_FAILED; 808 } 809 } 810 811 /* if we detected a problem with the map when writing, 812 don't allow any more access */ 813 if (info->fatal_error) { 814 815 set_sense_info (3, 0x31, 0); 816 return USB_STOR_TRANSPORT_FAILED; 817 } 818 819 if (srb->cmnd[0] == READ_CAPACITY) { 820 821 capacity = sddr55_get_capacity(us); 822 823 if (!capacity) { 824 set_sense_info (3, 0x30, 0); /* incompatible medium */ 825 return USB_STOR_TRANSPORT_FAILED; 826 } 827 828 info->capacity = capacity; 829 830 /* figure out the maximum logical block number, allowing for 831 * the fact that only 250 out of every 256 are used */ 832 info->max_log_blks = ((info->capacity >> (info->pageshift + info->blockshift)) / 256) * 250; 833 834 /* Last page in the card, adjust as we only use 250 out of 835 * every 256 pages */ 836 capacity = (capacity / 256) * 250; 837 838 capacity /= PAGESIZE; 839 capacity--; 840 841 ((__be32 *) ptr)[0] = cpu_to_be32(capacity); 842 ((__be32 *) ptr)[1] = cpu_to_be32(PAGESIZE); 843 usb_stor_set_xfer_buf(ptr, 8, srb); 844 845 sddr55_read_map(us); 846 847 return USB_STOR_TRANSPORT_GOOD; 848 } 849 850 if (srb->cmnd[0] == MODE_SENSE_10) { 851 852 memcpy(ptr, mode_page_01, sizeof mode_page_01); 853 ptr[3] = (info->read_only || info->force_read_only) ? 0x80 : 0; 854 usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb); 855 856 if ( (srb->cmnd[2] & 0x3F) == 0x01 ) { 857 US_DEBUGP( 858 "SDDR55: Dummy up request for mode page 1\n"); 859 return USB_STOR_TRANSPORT_GOOD; 860 861 } else if ( (srb->cmnd[2] & 0x3F) == 0x3F ) { 862 US_DEBUGP( 863 "SDDR55: Dummy up request for all mode pages\n"); 864 return USB_STOR_TRANSPORT_GOOD; 865 } 866 867 set_sense_info (5, 0x24, 0); /* invalid field in command */ 868 return USB_STOR_TRANSPORT_FAILED; 869 } 870 871 if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL) { 872 873 US_DEBUGP( 874 "SDDR55: %s medium removal. Not that I can do" 875 " anything about it...\n", 876 (srb->cmnd[4]&0x03) ? "Prevent" : "Allow"); 877 878 return USB_STOR_TRANSPORT_GOOD; 879 880 } 881 882 if (srb->cmnd[0] == READ_10 || srb->cmnd[0] == WRITE_10) { 883 884 page = short_pack(srb->cmnd[3], srb->cmnd[2]); 885 page <<= 16; 886 page |= short_pack(srb->cmnd[5], srb->cmnd[4]); 887 pages = short_pack(srb->cmnd[8], srb->cmnd[7]); 888 889 page <<= info->smallpageshift; 890 891 // convert page to block and page-within-block 892 893 lba = page >> info->blockshift; 894 page = page & info->blockmask; 895 896 // locate physical block corresponding to logical block 897 898 if (lba >= info->max_log_blks) { 899 900 US_DEBUGP("Error: Requested LBA %04X exceeds maximum " 901 "block %04X\n", lba, info->max_log_blks-1); 902 903 set_sense_info (5, 0x24, 0); /* invalid field in command */ 904 905 return USB_STOR_TRANSPORT_FAILED; 906 } 907 908 pba = info->lba_to_pba[lba]; 909 910 if (srb->cmnd[0] == WRITE_10) { 911 US_DEBUGP("WRITE_10: write block %04X (LBA %04X) page %01X" 912 " pages %d\n", 913 pba, lba, page, pages); 914 915 return sddr55_write_data(us, lba, page, pages); 916 } else { 917 US_DEBUGP("READ_10: read block %04X (LBA %04X) page %01X" 918 " pages %d\n", 919 pba, lba, page, pages); 920 921 return sddr55_read_data(us, lba, page, pages); 922 } 923 } 924 925 926 if (srb->cmnd[0] == TEST_UNIT_READY) { 927 return USB_STOR_TRANSPORT_GOOD; 928 } 929 930 if (srb->cmnd[0] == START_STOP) { 931 return USB_STOR_TRANSPORT_GOOD; 932 } 933 934 set_sense_info (5, 0x20, 0); /* illegal command */ 935 936 return USB_STOR_TRANSPORT_FAILED; // FIXME: sense buffer? 937 } 938 939