xref: /openbmc/linux/drivers/scsi/imm.c (revision 643d1f7f)
1 /* imm.c   --  low level driver for the IOMEGA MatchMaker
2  * parallel port SCSI host adapter.
3  *
4  * (The IMM is the embedded controller in the ZIP Plus drive.)
5  *
6  * My unoffical company acronym list is 21 pages long:
7  *      FLA:    Four letter acronym with built in facility for
8  *              future expansion to five letters.
9  */
10 
11 #include <linux/init.h>
12 #include <linux/kernel.h>
13 #include <linux/module.h>
14 #include <linux/blkdev.h>
15 #include <linux/parport.h>
16 #include <linux/workqueue.h>
17 #include <linux/delay.h>
18 #include <asm/io.h>
19 
20 #include <scsi/scsi.h>
21 #include <scsi/scsi_cmnd.h>
22 #include <scsi/scsi_device.h>
23 #include <scsi/scsi_host.h>
24 
25 /* The following #define is to avoid a clash with hosts.c */
26 #define IMM_PROBE_SPP   0x0001
27 #define IMM_PROBE_PS2   0x0002
28 #define IMM_PROBE_ECR   0x0010
29 #define IMM_PROBE_EPP17 0x0100
30 #define IMM_PROBE_EPP19 0x0200
31 
32 
33 typedef struct {
34 	struct pardevice *dev;	/* Parport device entry         */
35 	int base;		/* Actual port address          */
36 	int base_hi;		/* Hi Base address for ECP-ISA chipset */
37 	int mode;		/* Transfer mode                */
38 	struct scsi_cmnd *cur_cmd;	/* Current queued command       */
39 	struct delayed_work imm_tq;	/* Polling interrupt stuff       */
40 	unsigned long jstart;	/* Jiffies at start             */
41 	unsigned failed:1;	/* Failure flag                 */
42 	unsigned dp:1;		/* Data phase present           */
43 	unsigned rd:1;		/* Read data in data phase      */
44 	unsigned wanted:1;	/* Parport sharing busy flag    */
45 	wait_queue_head_t *waiting;
46 	struct Scsi_Host *host;
47 	struct list_head list;
48 } imm_struct;
49 
50 static void imm_reset_pulse(unsigned int base);
51 static int device_check(imm_struct *dev);
52 
53 #include "imm.h"
54 
55 static inline imm_struct *imm_dev(struct Scsi_Host *host)
56 {
57 	return *(imm_struct **)&host->hostdata;
58 }
59 
60 static DEFINE_SPINLOCK(arbitration_lock);
61 
62 static void got_it(imm_struct *dev)
63 {
64 	dev->base = dev->dev->port->base;
65 	if (dev->cur_cmd)
66 		dev->cur_cmd->SCp.phase = 1;
67 	else
68 		wake_up(dev->waiting);
69 }
70 
71 static void imm_wakeup(void *ref)
72 {
73 	imm_struct *dev = (imm_struct *) ref;
74 	unsigned long flags;
75 
76 	spin_lock_irqsave(&arbitration_lock, flags);
77 	if (dev->wanted) {
78 		parport_claim(dev->dev);
79 		got_it(dev);
80 		dev->wanted = 0;
81 	}
82 	spin_unlock_irqrestore(&arbitration_lock, flags);
83 }
84 
85 static int imm_pb_claim(imm_struct *dev)
86 {
87 	unsigned long flags;
88 	int res = 1;
89 	spin_lock_irqsave(&arbitration_lock, flags);
90 	if (parport_claim(dev->dev) == 0) {
91 		got_it(dev);
92 		res = 0;
93 	}
94 	dev->wanted = res;
95 	spin_unlock_irqrestore(&arbitration_lock, flags);
96 	return res;
97 }
98 
99 static void imm_pb_dismiss(imm_struct *dev)
100 {
101 	unsigned long flags;
102 	int wanted;
103 	spin_lock_irqsave(&arbitration_lock, flags);
104 	wanted = dev->wanted;
105 	dev->wanted = 0;
106 	spin_unlock_irqrestore(&arbitration_lock, flags);
107 	if (!wanted)
108 		parport_release(dev->dev);
109 }
110 
111 static inline void imm_pb_release(imm_struct *dev)
112 {
113 	parport_release(dev->dev);
114 }
115 
116 /* This is to give the imm driver a way to modify the timings (and other
117  * parameters) by writing to the /proc/scsi/imm/0 file.
118  * Very simple method really... (Too simple, no error checking :( )
119  * Reason: Kernel hackers HATE having to unload and reload modules for
120  * testing...
121  * Also gives a method to use a script to obtain optimum timings (TODO)
122  */
123 static inline int imm_proc_write(imm_struct *dev, char *buffer, int length)
124 {
125 	unsigned long x;
126 
127 	if ((length > 5) && (strncmp(buffer, "mode=", 5) == 0)) {
128 		x = simple_strtoul(buffer + 5, NULL, 0);
129 		dev->mode = x;
130 		return length;
131 	}
132 	printk("imm /proc: invalid variable\n");
133 	return (-EINVAL);
134 }
135 
136 static int imm_proc_info(struct Scsi_Host *host, char *buffer, char **start,
137 			off_t offset, int length, int inout)
138 {
139 	imm_struct *dev = imm_dev(host);
140 	int len = 0;
141 
142 	if (inout)
143 		return imm_proc_write(dev, buffer, length);
144 
145 	len += sprintf(buffer + len, "Version : %s\n", IMM_VERSION);
146 	len +=
147 	    sprintf(buffer + len, "Parport : %s\n",
148 		    dev->dev->port->name);
149 	len +=
150 	    sprintf(buffer + len, "Mode    : %s\n",
151 		    IMM_MODE_STRING[dev->mode]);
152 
153 	/* Request for beyond end of buffer */
154 	if (offset > len)
155 		return 0;
156 
157 	*start = buffer + offset;
158 	len -= offset;
159 	if (len > length)
160 		len = length;
161 	return len;
162 }
163 
164 #if IMM_DEBUG > 0
165 #define imm_fail(x,y) printk("imm: imm_fail(%i) from %s at line %d\n",\
166 	   y, __FUNCTION__, __LINE__); imm_fail_func(x,y);
167 static inline void
168 imm_fail_func(imm_struct *dev, int error_code)
169 #else
170 static inline void
171 imm_fail(imm_struct *dev, int error_code)
172 #endif
173 {
174 	/* If we fail a device then we trash status / message bytes */
175 	if (dev->cur_cmd) {
176 		dev->cur_cmd->result = error_code << 16;
177 		dev->failed = 1;
178 	}
179 }
180 
181 /*
182  * Wait for the high bit to be set.
183  *
184  * In principle, this could be tied to an interrupt, but the adapter
185  * doesn't appear to be designed to support interrupts.  We spin on
186  * the 0x80 ready bit.
187  */
188 static unsigned char imm_wait(imm_struct *dev)
189 {
190 	int k;
191 	unsigned short ppb = dev->base;
192 	unsigned char r;
193 
194 	w_ctr(ppb, 0x0c);
195 
196 	k = IMM_SPIN_TMO;
197 	do {
198 		r = r_str(ppb);
199 		k--;
200 		udelay(1);
201 	}
202 	while (!(r & 0x80) && (k));
203 
204 	/*
205 	 * STR register (LPT base+1) to SCSI mapping:
206 	 *
207 	 * STR      imm     imm
208 	 * ===================================
209 	 * 0x80     S_REQ   S_REQ
210 	 * 0x40     !S_BSY  (????)
211 	 * 0x20     !S_CD   !S_CD
212 	 * 0x10     !S_IO   !S_IO
213 	 * 0x08     (????)  !S_BSY
214 	 *
215 	 * imm      imm     meaning
216 	 * ==================================
217 	 * 0xf0     0xb8    Bit mask
218 	 * 0xc0     0x88    ZIP wants more data
219 	 * 0xd0     0x98    ZIP wants to send more data
220 	 * 0xe0     0xa8    ZIP is expecting SCSI command data
221 	 * 0xf0     0xb8    end of transfer, ZIP is sending status
222 	 */
223 	w_ctr(ppb, 0x04);
224 	if (k)
225 		return (r & 0xb8);
226 
227 	/* Counter expired - Time out occurred */
228 	imm_fail(dev, DID_TIME_OUT);
229 	printk("imm timeout in imm_wait\n");
230 	return 0;		/* command timed out */
231 }
232 
233 static int imm_negotiate(imm_struct * tmp)
234 {
235 	/*
236 	 * The following is supposedly the IEEE 1284-1994 negotiate
237 	 * sequence. I have yet to obtain a copy of the above standard
238 	 * so this is a bit of a guess...
239 	 *
240 	 * A fair chunk of this is based on the Linux parport implementation
241 	 * of IEEE 1284.
242 	 *
243 	 * Return 0 if data available
244 	 *        1 if no data available
245 	 */
246 
247 	unsigned short base = tmp->base;
248 	unsigned char a, mode;
249 
250 	switch (tmp->mode) {
251 	case IMM_NIBBLE:
252 		mode = 0x00;
253 		break;
254 	case IMM_PS2:
255 		mode = 0x01;
256 		break;
257 	default:
258 		return 0;
259 	}
260 
261 	w_ctr(base, 0x04);
262 	udelay(5);
263 	w_dtr(base, mode);
264 	udelay(100);
265 	w_ctr(base, 0x06);
266 	udelay(5);
267 	a = (r_str(base) & 0x20) ? 0 : 1;
268 	udelay(5);
269 	w_ctr(base, 0x07);
270 	udelay(5);
271 	w_ctr(base, 0x06);
272 
273 	if (a) {
274 		printk
275 		    ("IMM: IEEE1284 negotiate indicates no data available.\n");
276 		imm_fail(tmp, DID_ERROR);
277 	}
278 	return a;
279 }
280 
281 /*
282  * Clear EPP timeout bit.
283  */
284 static inline void epp_reset(unsigned short ppb)
285 {
286 	int i;
287 
288 	i = r_str(ppb);
289 	w_str(ppb, i);
290 	w_str(ppb, i & 0xfe);
291 }
292 
293 /*
294  * Wait for empty ECP fifo (if we are in ECP fifo mode only)
295  */
296 static inline void ecp_sync(imm_struct *dev)
297 {
298 	int i, ppb_hi = dev->base_hi;
299 
300 	if (ppb_hi == 0)
301 		return;
302 
303 	if ((r_ecr(ppb_hi) & 0xe0) == 0x60) {	/* mode 011 == ECP fifo mode */
304 		for (i = 0; i < 100; i++) {
305 			if (r_ecr(ppb_hi) & 0x01)
306 				return;
307 			udelay(5);
308 		}
309 		printk("imm: ECP sync failed as data still present in FIFO.\n");
310 	}
311 }
312 
313 static int imm_byte_out(unsigned short base, const char *buffer, int len)
314 {
315 	int i;
316 
317 	w_ctr(base, 0x4);	/* apparently a sane mode */
318 	for (i = len >> 1; i; i--) {
319 		w_dtr(base, *buffer++);
320 		w_ctr(base, 0x5);	/* Drop STROBE low */
321 		w_dtr(base, *buffer++);
322 		w_ctr(base, 0x0);	/* STROBE high + INIT low */
323 	}
324 	w_ctr(base, 0x4);	/* apparently a sane mode */
325 	return 1;		/* All went well - we hope! */
326 }
327 
328 static int imm_nibble_in(unsigned short base, char *buffer, int len)
329 {
330 	unsigned char l;
331 	int i;
332 
333 	/*
334 	 * The following is based on documented timing signals
335 	 */
336 	w_ctr(base, 0x4);
337 	for (i = len; i; i--) {
338 		w_ctr(base, 0x6);
339 		l = (r_str(base) & 0xf0) >> 4;
340 		w_ctr(base, 0x5);
341 		*buffer++ = (r_str(base) & 0xf0) | l;
342 		w_ctr(base, 0x4);
343 	}
344 	return 1;		/* All went well - we hope! */
345 }
346 
347 static int imm_byte_in(unsigned short base, char *buffer, int len)
348 {
349 	int i;
350 
351 	/*
352 	 * The following is based on documented timing signals
353 	 */
354 	w_ctr(base, 0x4);
355 	for (i = len; i; i--) {
356 		w_ctr(base, 0x26);
357 		*buffer++ = r_dtr(base);
358 		w_ctr(base, 0x25);
359 	}
360 	return 1;		/* All went well - we hope! */
361 }
362 
363 static int imm_out(imm_struct *dev, char *buffer, int len)
364 {
365 	unsigned short ppb = dev->base;
366 	int r = imm_wait(dev);
367 
368 	/*
369 	 * Make sure that:
370 	 * a) the SCSI bus is BUSY (device still listening)
371 	 * b) the device is listening
372 	 */
373 	if ((r & 0x18) != 0x08) {
374 		imm_fail(dev, DID_ERROR);
375 		printk("IMM: returned SCSI status %2x\n", r);
376 		return 0;
377 	}
378 	switch (dev->mode) {
379 	case IMM_EPP_32:
380 	case IMM_EPP_16:
381 	case IMM_EPP_8:
382 		epp_reset(ppb);
383 		w_ctr(ppb, 0x4);
384 #ifdef CONFIG_SCSI_IZIP_EPP16
385 		if (!(((long) buffer | len) & 0x01))
386 			outsw(ppb + 4, buffer, len >> 1);
387 #else
388 		if (!(((long) buffer | len) & 0x03))
389 			outsl(ppb + 4, buffer, len >> 2);
390 #endif
391 		else
392 			outsb(ppb + 4, buffer, len);
393 		w_ctr(ppb, 0xc);
394 		r = !(r_str(ppb) & 0x01);
395 		w_ctr(ppb, 0xc);
396 		ecp_sync(dev);
397 		break;
398 
399 	case IMM_NIBBLE:
400 	case IMM_PS2:
401 		/* 8 bit output, with a loop */
402 		r = imm_byte_out(ppb, buffer, len);
403 		break;
404 
405 	default:
406 		printk("IMM: bug in imm_out()\n");
407 		r = 0;
408 	}
409 	return r;
410 }
411 
412 static int imm_in(imm_struct *dev, char *buffer, int len)
413 {
414 	unsigned short ppb = dev->base;
415 	int r = imm_wait(dev);
416 
417 	/*
418 	 * Make sure that:
419 	 * a) the SCSI bus is BUSY (device still listening)
420 	 * b) the device is sending data
421 	 */
422 	if ((r & 0x18) != 0x18) {
423 		imm_fail(dev, DID_ERROR);
424 		return 0;
425 	}
426 	switch (dev->mode) {
427 	case IMM_NIBBLE:
428 		/* 4 bit input, with a loop */
429 		r = imm_nibble_in(ppb, buffer, len);
430 		w_ctr(ppb, 0xc);
431 		break;
432 
433 	case IMM_PS2:
434 		/* 8 bit input, with a loop */
435 		r = imm_byte_in(ppb, buffer, len);
436 		w_ctr(ppb, 0xc);
437 		break;
438 
439 	case IMM_EPP_32:
440 	case IMM_EPP_16:
441 	case IMM_EPP_8:
442 		epp_reset(ppb);
443 		w_ctr(ppb, 0x24);
444 #ifdef CONFIG_SCSI_IZIP_EPP16
445 		if (!(((long) buffer | len) & 0x01))
446 			insw(ppb + 4, buffer, len >> 1);
447 #else
448 		if (!(((long) buffer | len) & 0x03))
449 			insl(ppb + 4, buffer, len >> 2);
450 #endif
451 		else
452 			insb(ppb + 4, buffer, len);
453 		w_ctr(ppb, 0x2c);
454 		r = !(r_str(ppb) & 0x01);
455 		w_ctr(ppb, 0x2c);
456 		ecp_sync(dev);
457 		break;
458 
459 	default:
460 		printk("IMM: bug in imm_ins()\n");
461 		r = 0;
462 		break;
463 	}
464 	return r;
465 }
466 
467 static int imm_cpp(unsigned short ppb, unsigned char b)
468 {
469 	/*
470 	 * Comments on udelay values refer to the
471 	 * Command Packet Protocol (CPP) timing diagram.
472 	 */
473 
474 	unsigned char s1, s2, s3;
475 	w_ctr(ppb, 0x0c);
476 	udelay(2);		/* 1 usec - infinite */
477 	w_dtr(ppb, 0xaa);
478 	udelay(10);		/* 7 usec - infinite */
479 	w_dtr(ppb, 0x55);
480 	udelay(10);		/* 7 usec - infinite */
481 	w_dtr(ppb, 0x00);
482 	udelay(10);		/* 7 usec - infinite */
483 	w_dtr(ppb, 0xff);
484 	udelay(10);		/* 7 usec - infinite */
485 	s1 = r_str(ppb) & 0xb8;
486 	w_dtr(ppb, 0x87);
487 	udelay(10);		/* 7 usec - infinite */
488 	s2 = r_str(ppb) & 0xb8;
489 	w_dtr(ppb, 0x78);
490 	udelay(10);		/* 7 usec - infinite */
491 	s3 = r_str(ppb) & 0x38;
492 	/*
493 	 * Values for b are:
494 	 * 0000 00aa    Assign address aa to current device
495 	 * 0010 00aa    Select device aa in EPP Winbond mode
496 	 * 0010 10aa    Select device aa in EPP mode
497 	 * 0011 xxxx    Deselect all devices
498 	 * 0110 00aa    Test device aa
499 	 * 1101 00aa    Select device aa in ECP mode
500 	 * 1110 00aa    Select device aa in Compatible mode
501 	 */
502 	w_dtr(ppb, b);
503 	udelay(2);		/* 1 usec - infinite */
504 	w_ctr(ppb, 0x0c);
505 	udelay(10);		/* 7 usec - infinite */
506 	w_ctr(ppb, 0x0d);
507 	udelay(2);		/* 1 usec - infinite */
508 	w_ctr(ppb, 0x0c);
509 	udelay(10);		/* 7 usec - infinite */
510 	w_dtr(ppb, 0xff);
511 	udelay(10);		/* 7 usec - infinite */
512 
513 	/*
514 	 * The following table is electrical pin values.
515 	 * (BSY is inverted at the CTR register)
516 	 *
517 	 *       BSY  ACK  POut SEL  Fault
518 	 * S1    0    X    1    1    1
519 	 * S2    1    X    0    1    1
520 	 * S3    L    X    1    1    S
521 	 *
522 	 * L => Last device in chain
523 	 * S => Selected
524 	 *
525 	 * Observered values for S1,S2,S3 are:
526 	 * Disconnect => f8/58/78
527 	 * Connect    => f8/58/70
528 	 */
529 	if ((s1 == 0xb8) && (s2 == 0x18) && (s3 == 0x30))
530 		return 1;	/* Connected */
531 	if ((s1 == 0xb8) && (s2 == 0x18) && (s3 == 0x38))
532 		return 0;	/* Disconnected */
533 
534 	return -1;		/* No device present */
535 }
536 
537 static inline int imm_connect(imm_struct *dev, int flag)
538 {
539 	unsigned short ppb = dev->base;
540 
541 	imm_cpp(ppb, 0xe0);	/* Select device 0 in compatible mode */
542 	imm_cpp(ppb, 0x30);	/* Disconnect all devices */
543 
544 	if ((dev->mode == IMM_EPP_8) ||
545 	    (dev->mode == IMM_EPP_16) ||
546 	    (dev->mode == IMM_EPP_32))
547 		return imm_cpp(ppb, 0x28);	/* Select device 0 in EPP mode */
548 	return imm_cpp(ppb, 0xe0);	/* Select device 0 in compatible mode */
549 }
550 
551 static void imm_disconnect(imm_struct *dev)
552 {
553 	imm_cpp(dev->base, 0x30);	/* Disconnect all devices */
554 }
555 
556 static int imm_select(imm_struct *dev, int target)
557 {
558 	int k;
559 	unsigned short ppb = dev->base;
560 
561 	/*
562 	 * Firstly we want to make sure there is nothing
563 	 * holding onto the SCSI bus.
564 	 */
565 	w_ctr(ppb, 0xc);
566 
567 	k = IMM_SELECT_TMO;
568 	do {
569 		k--;
570 	} while ((r_str(ppb) & 0x08) && (k));
571 
572 	if (!k)
573 		return 0;
574 
575 	/*
576 	 * Now assert the SCSI ID (HOST and TARGET) on the data bus
577 	 */
578 	w_ctr(ppb, 0x4);
579 	w_dtr(ppb, 0x80 | (1 << target));
580 	udelay(1);
581 
582 	/*
583 	 * Deassert SELIN first followed by STROBE
584 	 */
585 	w_ctr(ppb, 0xc);
586 	w_ctr(ppb, 0xd);
587 
588 	/*
589 	 * ACK should drop low while SELIN is deasserted.
590 	 * FAULT should drop low when the SCSI device latches the bus.
591 	 */
592 	k = IMM_SELECT_TMO;
593 	do {
594 		k--;
595 	}
596 	while (!(r_str(ppb) & 0x08) && (k));
597 
598 	/*
599 	 * Place the interface back into a sane state (status mode)
600 	 */
601 	w_ctr(ppb, 0xc);
602 	return (k) ? 1 : 0;
603 }
604 
605 static int imm_init(imm_struct *dev)
606 {
607 	if (imm_connect(dev, 0) != 1)
608 		return -EIO;
609 	imm_reset_pulse(dev->base);
610 	mdelay(1);	/* Delay to allow devices to settle */
611 	imm_disconnect(dev);
612 	mdelay(1);	/* Another delay to allow devices to settle */
613 	return device_check(dev);
614 }
615 
616 static inline int imm_send_command(struct scsi_cmnd *cmd)
617 {
618 	imm_struct *dev = imm_dev(cmd->device->host);
619 	int k;
620 
621 	/* NOTE: IMM uses byte pairs */
622 	for (k = 0; k < cmd->cmd_len; k += 2)
623 		if (!imm_out(dev, &cmd->cmnd[k], 2))
624 			return 0;
625 	return 1;
626 }
627 
628 /*
629  * The bulk flag enables some optimisations in the data transfer loops,
630  * it should be true for any command that transfers data in integral
631  * numbers of sectors.
632  *
633  * The driver appears to remain stable if we speed up the parallel port
634  * i/o in this function, but not elsewhere.
635  */
636 static int imm_completion(struct scsi_cmnd *cmd)
637 {
638 	/* Return codes:
639 	 * -1     Error
640 	 *  0     Told to schedule
641 	 *  1     Finished data transfer
642 	 */
643 	imm_struct *dev = imm_dev(cmd->device->host);
644 	unsigned short ppb = dev->base;
645 	unsigned long start_jiffies = jiffies;
646 
647 	unsigned char r, v;
648 	int fast, bulk, status;
649 
650 	v = cmd->cmnd[0];
651 	bulk = ((v == READ_6) ||
652 		(v == READ_10) || (v == WRITE_6) || (v == WRITE_10));
653 
654 	/*
655 	 * We only get here if the drive is ready to comunicate,
656 	 * hence no need for a full imm_wait.
657 	 */
658 	w_ctr(ppb, 0x0c);
659 	r = (r_str(ppb) & 0xb8);
660 
661 	/*
662 	 * while (device is not ready to send status byte)
663 	 *     loop;
664 	 */
665 	while (r != (unsigned char) 0xb8) {
666 		/*
667 		 * If we have been running for more than a full timer tick
668 		 * then take a rest.
669 		 */
670 		if (time_after(jiffies, start_jiffies + 1))
671 			return 0;
672 
673 		/*
674 		 * FAIL if:
675 		 * a) Drive status is screwy (!ready && !present)
676 		 * b) Drive is requesting/sending more data than expected
677 		 */
678 		if (((r & 0x88) != 0x88) || (cmd->SCp.this_residual <= 0)) {
679 			imm_fail(dev, DID_ERROR);
680 			return -1;	/* ERROR_RETURN */
681 		}
682 		/* determine if we should use burst I/O */
683 		if (dev->rd == 0) {
684 			fast = (bulk
685 				&& (cmd->SCp.this_residual >=
686 				    IMM_BURST_SIZE)) ? IMM_BURST_SIZE : 2;
687 			status = imm_out(dev, cmd->SCp.ptr, fast);
688 		} else {
689 			fast = (bulk
690 				&& (cmd->SCp.this_residual >=
691 				    IMM_BURST_SIZE)) ? IMM_BURST_SIZE : 1;
692 			status = imm_in(dev, cmd->SCp.ptr, fast);
693 		}
694 
695 		cmd->SCp.ptr += fast;
696 		cmd->SCp.this_residual -= fast;
697 
698 		if (!status) {
699 			imm_fail(dev, DID_BUS_BUSY);
700 			return -1;	/* ERROR_RETURN */
701 		}
702 		if (cmd->SCp.buffer && !cmd->SCp.this_residual) {
703 			/* if scatter/gather, advance to the next segment */
704 			if (cmd->SCp.buffers_residual--) {
705 				cmd->SCp.buffer++;
706 				cmd->SCp.this_residual =
707 				    cmd->SCp.buffer->length;
708 				cmd->SCp.ptr = sg_virt(cmd->SCp.buffer);
709 
710 				/*
711 				 * Make sure that we transfer even number of bytes
712 				 * otherwise it makes imm_byte_out() messy.
713 				 */
714 				if (cmd->SCp.this_residual & 0x01)
715 					cmd->SCp.this_residual++;
716 			}
717 		}
718 		/* Now check to see if the drive is ready to comunicate */
719 		w_ctr(ppb, 0x0c);
720 		r = (r_str(ppb) & 0xb8);
721 
722 		/* If not, drop back down to the scheduler and wait a timer tick */
723 		if (!(r & 0x80))
724 			return 0;
725 	}
726 	return 1;		/* FINISH_RETURN */
727 }
728 
729 /*
730  * Since the IMM itself doesn't generate interrupts, we use
731  * the scheduler's task queue to generate a stream of call-backs and
732  * complete the request when the drive is ready.
733  */
734 static void imm_interrupt(struct work_struct *work)
735 {
736 	imm_struct *dev = container_of(work, imm_struct, imm_tq.work);
737 	struct scsi_cmnd *cmd = dev->cur_cmd;
738 	struct Scsi_Host *host = cmd->device->host;
739 	unsigned long flags;
740 
741 	if (imm_engine(dev, cmd)) {
742 		schedule_delayed_work(&dev->imm_tq, 1);
743 		return;
744 	}
745 	/* Command must of completed hence it is safe to let go... */
746 #if IMM_DEBUG > 0
747 	switch ((cmd->result >> 16) & 0xff) {
748 	case DID_OK:
749 		break;
750 	case DID_NO_CONNECT:
751 		printk("imm: no device at SCSI ID %i\n", cmd->device->id);
752 		break;
753 	case DID_BUS_BUSY:
754 		printk("imm: BUS BUSY - EPP timeout detected\n");
755 		break;
756 	case DID_TIME_OUT:
757 		printk("imm: unknown timeout\n");
758 		break;
759 	case DID_ABORT:
760 		printk("imm: told to abort\n");
761 		break;
762 	case DID_PARITY:
763 		printk("imm: parity error (???)\n");
764 		break;
765 	case DID_ERROR:
766 		printk("imm: internal driver error\n");
767 		break;
768 	case DID_RESET:
769 		printk("imm: told to reset device\n");
770 		break;
771 	case DID_BAD_INTR:
772 		printk("imm: bad interrupt (???)\n");
773 		break;
774 	default:
775 		printk("imm: bad return code (%02x)\n",
776 		       (cmd->result >> 16) & 0xff);
777 	}
778 #endif
779 
780 	if (cmd->SCp.phase > 1)
781 		imm_disconnect(dev);
782 
783 	imm_pb_dismiss(dev);
784 
785 	spin_lock_irqsave(host->host_lock, flags);
786 	dev->cur_cmd = NULL;
787 	cmd->scsi_done(cmd);
788 	spin_unlock_irqrestore(host->host_lock, flags);
789 	return;
790 }
791 
792 static int imm_engine(imm_struct *dev, struct scsi_cmnd *cmd)
793 {
794 	unsigned short ppb = dev->base;
795 	unsigned char l = 0, h = 0;
796 	int retv, x;
797 
798 	/* First check for any errors that may have occurred
799 	 * Here we check for internal errors
800 	 */
801 	if (dev->failed)
802 		return 0;
803 
804 	switch (cmd->SCp.phase) {
805 	case 0:		/* Phase 0 - Waiting for parport */
806 		if (time_after(jiffies, dev->jstart + HZ)) {
807 			/*
808 			 * We waited more than a second
809 			 * for parport to call us
810 			 */
811 			imm_fail(dev, DID_BUS_BUSY);
812 			return 0;
813 		}
814 		return 1;	/* wait until imm_wakeup claims parport */
815 		/* Phase 1 - Connected */
816 	case 1:
817 		imm_connect(dev, CONNECT_EPP_MAYBE);
818 		cmd->SCp.phase++;
819 
820 		/* Phase 2 - We are now talking to the scsi bus */
821 	case 2:
822 		if (!imm_select(dev, scmd_id(cmd))) {
823 			imm_fail(dev, DID_NO_CONNECT);
824 			return 0;
825 		}
826 		cmd->SCp.phase++;
827 
828 		/* Phase 3 - Ready to accept a command */
829 	case 3:
830 		w_ctr(ppb, 0x0c);
831 		if (!(r_str(ppb) & 0x80))
832 			return 1;
833 
834 		if (!imm_send_command(cmd))
835 			return 0;
836 		cmd->SCp.phase++;
837 
838 		/* Phase 4 - Setup scatter/gather buffers */
839 	case 4:
840 		if (scsi_bufflen(cmd)) {
841 			cmd->SCp.buffer = scsi_sglist(cmd);
842 			cmd->SCp.this_residual = cmd->SCp.buffer->length;
843 			cmd->SCp.ptr = sg_virt(cmd->SCp.buffer);
844 		} else {
845 			cmd->SCp.buffer = NULL;
846 			cmd->SCp.this_residual = 0;
847 			cmd->SCp.ptr = NULL;
848 		}
849 		cmd->SCp.buffers_residual = scsi_sg_count(cmd) - 1;
850 		cmd->SCp.phase++;
851 		if (cmd->SCp.this_residual & 0x01)
852 			cmd->SCp.this_residual++;
853 		/* Phase 5 - Pre-Data transfer stage */
854 	case 5:
855 		/* Spin lock for BUSY */
856 		w_ctr(ppb, 0x0c);
857 		if (!(r_str(ppb) & 0x80))
858 			return 1;
859 
860 		/* Require negotiation for read requests */
861 		x = (r_str(ppb) & 0xb8);
862 		dev->rd = (x & 0x10) ? 1 : 0;
863 		dev->dp = (x & 0x20) ? 0 : 1;
864 
865 		if ((dev->dp) && (dev->rd))
866 			if (imm_negotiate(dev))
867 				return 0;
868 		cmd->SCp.phase++;
869 
870 		/* Phase 6 - Data transfer stage */
871 	case 6:
872 		/* Spin lock for BUSY */
873 		w_ctr(ppb, 0x0c);
874 		if (!(r_str(ppb) & 0x80))
875 			return 1;
876 
877 		if (dev->dp) {
878 			retv = imm_completion(cmd);
879 			if (retv == -1)
880 				return 0;
881 			if (retv == 0)
882 				return 1;
883 		}
884 		cmd->SCp.phase++;
885 
886 		/* Phase 7 - Post data transfer stage */
887 	case 7:
888 		if ((dev->dp) && (dev->rd)) {
889 			if ((dev->mode == IMM_NIBBLE) || (dev->mode == IMM_PS2)) {
890 				w_ctr(ppb, 0x4);
891 				w_ctr(ppb, 0xc);
892 				w_ctr(ppb, 0xe);
893 				w_ctr(ppb, 0x4);
894 			}
895 		}
896 		cmd->SCp.phase++;
897 
898 		/* Phase 8 - Read status/message */
899 	case 8:
900 		/* Check for data overrun */
901 		if (imm_wait(dev) != (unsigned char) 0xb8) {
902 			imm_fail(dev, DID_ERROR);
903 			return 0;
904 		}
905 		if (imm_negotiate(dev))
906 			return 0;
907 		if (imm_in(dev, &l, 1)) {	/* read status byte */
908 			/* Check for optional message byte */
909 			if (imm_wait(dev) == (unsigned char) 0xb8)
910 				imm_in(dev, &h, 1);
911 			cmd->result = (DID_OK << 16) + (l & STATUS_MASK);
912 		}
913 		if ((dev->mode == IMM_NIBBLE) || (dev->mode == IMM_PS2)) {
914 			w_ctr(ppb, 0x4);
915 			w_ctr(ppb, 0xc);
916 			w_ctr(ppb, 0xe);
917 			w_ctr(ppb, 0x4);
918 		}
919 		return 0;	/* Finished */
920 		break;
921 
922 	default:
923 		printk("imm: Invalid scsi phase\n");
924 	}
925 	return 0;
926 }
927 
928 static int imm_queuecommand(struct scsi_cmnd *cmd,
929 		void (*done)(struct scsi_cmnd *))
930 {
931 	imm_struct *dev = imm_dev(cmd->device->host);
932 
933 	if (dev->cur_cmd) {
934 		printk("IMM: bug in imm_queuecommand\n");
935 		return 0;
936 	}
937 	dev->failed = 0;
938 	dev->jstart = jiffies;
939 	dev->cur_cmd = cmd;
940 	cmd->scsi_done = done;
941 	cmd->result = DID_ERROR << 16;	/* default return code */
942 	cmd->SCp.phase = 0;	/* bus free */
943 
944 	schedule_delayed_work(&dev->imm_tq, 0);
945 
946 	imm_pb_claim(dev);
947 
948 	return 0;
949 }
950 
951 /*
952  * Apparently the disk->capacity attribute is off by 1 sector
953  * for all disk drives.  We add the one here, but it should really
954  * be done in sd.c.  Even if it gets fixed there, this will still
955  * work.
956  */
957 static int imm_biosparam(struct scsi_device *sdev, struct block_device *dev,
958 			 sector_t capacity, int ip[])
959 {
960 	ip[0] = 0x40;
961 	ip[1] = 0x20;
962 	ip[2] = ((unsigned long) capacity + 1) / (ip[0] * ip[1]);
963 	if (ip[2] > 1024) {
964 		ip[0] = 0xff;
965 		ip[1] = 0x3f;
966 		ip[2] = ((unsigned long) capacity + 1) / (ip[0] * ip[1]);
967 	}
968 	return 0;
969 }
970 
971 static int imm_abort(struct scsi_cmnd *cmd)
972 {
973 	imm_struct *dev = imm_dev(cmd->device->host);
974 	/*
975 	 * There is no method for aborting commands since Iomega
976 	 * have tied the SCSI_MESSAGE line high in the interface
977 	 */
978 
979 	switch (cmd->SCp.phase) {
980 	case 0:		/* Do not have access to parport */
981 	case 1:		/* Have not connected to interface */
982 		dev->cur_cmd = NULL;	/* Forget the problem */
983 		return SUCCESS;
984 		break;
985 	default:		/* SCSI command sent, can not abort */
986 		return FAILED;
987 		break;
988 	}
989 }
990 
991 static void imm_reset_pulse(unsigned int base)
992 {
993 	w_ctr(base, 0x04);
994 	w_dtr(base, 0x40);
995 	udelay(1);
996 	w_ctr(base, 0x0c);
997 	w_ctr(base, 0x0d);
998 	udelay(50);
999 	w_ctr(base, 0x0c);
1000 	w_ctr(base, 0x04);
1001 }
1002 
1003 static int imm_reset(struct scsi_cmnd *cmd)
1004 {
1005 	imm_struct *dev = imm_dev(cmd->device->host);
1006 
1007 	if (cmd->SCp.phase)
1008 		imm_disconnect(dev);
1009 	dev->cur_cmd = NULL;	/* Forget the problem */
1010 
1011 	imm_connect(dev, CONNECT_NORMAL);
1012 	imm_reset_pulse(dev->base);
1013 	mdelay(1);		/* device settle delay */
1014 	imm_disconnect(dev);
1015 	mdelay(1);		/* device settle delay */
1016 	return SUCCESS;
1017 }
1018 
1019 static int device_check(imm_struct *dev)
1020 {
1021 	/* This routine looks for a device and then attempts to use EPP
1022 	   to send a command. If all goes as planned then EPP is available. */
1023 
1024 	static char cmd[6] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
1025 	int loop, old_mode, status, k, ppb = dev->base;
1026 	unsigned char l;
1027 
1028 	old_mode = dev->mode;
1029 	for (loop = 0; loop < 8; loop++) {
1030 		/* Attempt to use EPP for Test Unit Ready */
1031 		if ((ppb & 0x0007) == 0x0000)
1032 			dev->mode = IMM_EPP_32;
1033 
1034 	      second_pass:
1035 		imm_connect(dev, CONNECT_EPP_MAYBE);
1036 		/* Select SCSI device */
1037 		if (!imm_select(dev, loop)) {
1038 			imm_disconnect(dev);
1039 			continue;
1040 		}
1041 		printk("imm: Found device at ID %i, Attempting to use %s\n",
1042 		       loop, IMM_MODE_STRING[dev->mode]);
1043 
1044 		/* Send SCSI command */
1045 		status = 1;
1046 		w_ctr(ppb, 0x0c);
1047 		for (l = 0; (l < 3) && (status); l++)
1048 			status = imm_out(dev, &cmd[l << 1], 2);
1049 
1050 		if (!status) {
1051 			imm_disconnect(dev);
1052 			imm_connect(dev, CONNECT_EPP_MAYBE);
1053 			imm_reset_pulse(dev->base);
1054 			udelay(1000);
1055 			imm_disconnect(dev);
1056 			udelay(1000);
1057 			if (dev->mode == IMM_EPP_32) {
1058 				dev->mode = old_mode;
1059 				goto second_pass;
1060 			}
1061 			printk("imm: Unable to establish communication\n");
1062 			return -EIO;
1063 		}
1064 		w_ctr(ppb, 0x0c);
1065 
1066 		k = 1000000;	/* 1 Second */
1067 		do {
1068 			l = r_str(ppb);
1069 			k--;
1070 			udelay(1);
1071 		} while (!(l & 0x80) && (k));
1072 
1073 		l &= 0xb8;
1074 
1075 		if (l != 0xb8) {
1076 			imm_disconnect(dev);
1077 			imm_connect(dev, CONNECT_EPP_MAYBE);
1078 			imm_reset_pulse(dev->base);
1079 			udelay(1000);
1080 			imm_disconnect(dev);
1081 			udelay(1000);
1082 			if (dev->mode == IMM_EPP_32) {
1083 				dev->mode = old_mode;
1084 				goto second_pass;
1085 			}
1086 			printk
1087 			    ("imm: Unable to establish communication\n");
1088 			return -EIO;
1089 		}
1090 		imm_disconnect(dev);
1091 		printk
1092 		    ("imm: Communication established at 0x%x with ID %i using %s\n",
1093 		     ppb, loop, IMM_MODE_STRING[dev->mode]);
1094 		imm_connect(dev, CONNECT_EPP_MAYBE);
1095 		imm_reset_pulse(dev->base);
1096 		udelay(1000);
1097 		imm_disconnect(dev);
1098 		udelay(1000);
1099 		return 0;
1100 	}
1101 	printk("imm: No devices found\n");
1102 	return -ENODEV;
1103 }
1104 
1105 /*
1106  * imm cannot deal with highmem, so this causes all IO pages for this host
1107  * to reside in low memory (hence mapped)
1108  */
1109 static int imm_adjust_queue(struct scsi_device *device)
1110 {
1111 	blk_queue_bounce_limit(device->request_queue, BLK_BOUNCE_HIGH);
1112 	return 0;
1113 }
1114 
1115 static struct scsi_host_template imm_template = {
1116 	.module			= THIS_MODULE,
1117 	.proc_name		= "imm",
1118 	.proc_info		= imm_proc_info,
1119 	.name			= "Iomega VPI2 (imm) interface",
1120 	.queuecommand		= imm_queuecommand,
1121 	.eh_abort_handler	= imm_abort,
1122 	.eh_bus_reset_handler	= imm_reset,
1123 	.eh_host_reset_handler	= imm_reset,
1124 	.bios_param		= imm_biosparam,
1125 	.this_id		= 7,
1126 	.sg_tablesize		= SG_ALL,
1127 	.cmd_per_lun		= 1,
1128 	.use_clustering		= ENABLE_CLUSTERING,
1129 	.can_queue		= 1,
1130 	.slave_alloc		= imm_adjust_queue,
1131 };
1132 
1133 /***************************************************************************
1134  *                   Parallel port probing routines                        *
1135  ***************************************************************************/
1136 
1137 static LIST_HEAD(imm_hosts);
1138 
1139 static int __imm_attach(struct parport *pb)
1140 {
1141 	struct Scsi_Host *host;
1142 	imm_struct *dev;
1143 	DECLARE_WAIT_QUEUE_HEAD_ONSTACK(waiting);
1144 	DEFINE_WAIT(wait);
1145 	int ports;
1146 	int modes, ppb;
1147 	int err = -ENOMEM;
1148 
1149 	init_waitqueue_head(&waiting);
1150 
1151 	dev = kzalloc(sizeof(imm_struct), GFP_KERNEL);
1152 	if (!dev)
1153 		return -ENOMEM;
1154 
1155 
1156 	dev->base = -1;
1157 	dev->mode = IMM_AUTODETECT;
1158 	INIT_LIST_HEAD(&dev->list);
1159 
1160 	dev->dev = parport_register_device(pb, "imm", NULL, imm_wakeup,
1161 						NULL, 0, dev);
1162 
1163 	if (!dev->dev)
1164 		goto out;
1165 
1166 
1167 	/* Claim the bus so it remembers what we do to the control
1168 	 * registers. [ CTR and ECP ]
1169 	 */
1170 	err = -EBUSY;
1171 	dev->waiting = &waiting;
1172 	prepare_to_wait(&waiting, &wait, TASK_UNINTERRUPTIBLE);
1173 	if (imm_pb_claim(dev))
1174 		schedule_timeout(3 * HZ);
1175 	if (dev->wanted) {
1176 		printk(KERN_ERR "imm%d: failed to claim parport because "
1177 			"a pardevice is owning the port for too long "
1178 			"time!\n", pb->number);
1179 		imm_pb_dismiss(dev);
1180 		dev->waiting = NULL;
1181 		finish_wait(&waiting, &wait);
1182 		goto out1;
1183 	}
1184 	dev->waiting = NULL;
1185 	finish_wait(&waiting, &wait);
1186 	ppb = dev->base = dev->dev->port->base;
1187 	dev->base_hi = dev->dev->port->base_hi;
1188 	w_ctr(ppb, 0x0c);
1189 	modes = dev->dev->port->modes;
1190 
1191 	/* Mode detection works up the chain of speed
1192 	 * This avoids a nasty if-then-else-if-... tree
1193 	 */
1194 	dev->mode = IMM_NIBBLE;
1195 
1196 	if (modes & PARPORT_MODE_TRISTATE)
1197 		dev->mode = IMM_PS2;
1198 
1199 	/* Done configuration */
1200 
1201 	err = imm_init(dev);
1202 
1203 	imm_pb_release(dev);
1204 
1205 	if (err)
1206 		goto out1;
1207 
1208 	/* now the glue ... */
1209 	if (dev->mode == IMM_NIBBLE || dev->mode == IMM_PS2)
1210 		ports = 3;
1211 	else
1212 		ports = 8;
1213 
1214 	INIT_DELAYED_WORK(&dev->imm_tq, imm_interrupt);
1215 
1216 	err = -ENOMEM;
1217 	host = scsi_host_alloc(&imm_template, sizeof(imm_struct *));
1218 	if (!host)
1219 		goto out1;
1220 	host->io_port = pb->base;
1221 	host->n_io_port = ports;
1222 	host->dma_channel = -1;
1223 	host->unique_id = pb->number;
1224 	*(imm_struct **)&host->hostdata = dev;
1225 	dev->host = host;
1226 	list_add_tail(&dev->list, &imm_hosts);
1227 	err = scsi_add_host(host, NULL);
1228 	if (err)
1229 		goto out2;
1230 	scsi_scan_host(host);
1231 	return 0;
1232 
1233 out2:
1234 	list_del_init(&dev->list);
1235 	scsi_host_put(host);
1236 out1:
1237 	parport_unregister_device(dev->dev);
1238 out:
1239 	kfree(dev);
1240 	return err;
1241 }
1242 
1243 static void imm_attach(struct parport *pb)
1244 {
1245 	__imm_attach(pb);
1246 }
1247 
1248 static void imm_detach(struct parport *pb)
1249 {
1250 	imm_struct *dev;
1251 	list_for_each_entry(dev, &imm_hosts, list) {
1252 		if (dev->dev->port == pb) {
1253 			list_del_init(&dev->list);
1254 			scsi_remove_host(dev->host);
1255 			scsi_host_put(dev->host);
1256 			parport_unregister_device(dev->dev);
1257 			kfree(dev);
1258 			break;
1259 		}
1260 	}
1261 }
1262 
1263 static struct parport_driver imm_driver = {
1264 	.name	= "imm",
1265 	.attach	= imm_attach,
1266 	.detach	= imm_detach,
1267 };
1268 
1269 static int __init imm_driver_init(void)
1270 {
1271 	printk("imm: Version %s\n", IMM_VERSION);
1272 	return parport_register_driver(&imm_driver);
1273 }
1274 
1275 static void __exit imm_driver_exit(void)
1276 {
1277 	parport_unregister_driver(&imm_driver);
1278 }
1279 
1280 module_init(imm_driver_init);
1281 module_exit(imm_driver_exit);
1282 
1283 MODULE_LICENSE("GPL");
1284