xref: /openbmc/linux/fs/jffs2/erase.c (revision 22abf318)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  * JFFS2 -- Journalling Flash File System, Version 2.
31da177e4SLinus Torvalds  *
4c00c310eSDavid Woodhouse  * Copyright © 2001-2007 Red Hat, Inc.
56088c058SDavid Woodhouse  * Copyright © 2004-2010 David Woodhouse <dwmw2@infradead.org>
61da177e4SLinus Torvalds  *
71da177e4SLinus Torvalds  * Created by David Woodhouse <dwmw2@infradead.org>
81da177e4SLinus Torvalds  *
91da177e4SLinus Torvalds  * For licensing information, see the file 'LICENCE' in this directory.
101da177e4SLinus Torvalds  *
111da177e4SLinus Torvalds  */
121da177e4SLinus Torvalds 
135a528957SJoe Perches #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
145a528957SJoe Perches 
151da177e4SLinus Torvalds #include <linux/kernel.h>
161da177e4SLinus Torvalds #include <linux/slab.h>
171da177e4SLinus Torvalds #include <linux/mtd/mtd.h>
181da177e4SLinus Torvalds #include <linux/compiler.h>
191da177e4SLinus Torvalds #include <linux/crc32.h>
201da177e4SLinus Torvalds #include <linux/sched.h>
211da177e4SLinus Torvalds #include <linux/pagemap.h>
221da177e4SLinus Torvalds #include "nodelist.h"
231da177e4SLinus Torvalds 
241da177e4SLinus Torvalds static void jffs2_erase_failed(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t bad_offset);
251da177e4SLinus Torvalds static void jffs2_erase_succeeded(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb);
261da177e4SLinus Torvalds static void jffs2_mark_erased_block(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb);
271da177e4SLinus Torvalds 
jffs2_erase_block(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb)281da177e4SLinus Torvalds static void jffs2_erase_block(struct jffs2_sb_info *c,
291da177e4SLinus Torvalds 			      struct jffs2_eraseblock *jeb)
301da177e4SLinus Torvalds {
311da177e4SLinus Torvalds 	int ret;
321da177e4SLinus Torvalds 	uint32_t bad_offset;
331da177e4SLinus Torvalds #ifdef __ECOS
341da177e4SLinus Torvalds        ret = jffs2_flash_erase(c, jeb);
351da177e4SLinus Torvalds        if (!ret) {
361da177e4SLinus Torvalds 	       jffs2_erase_succeeded(c, jeb);
371da177e4SLinus Torvalds 	       return;
381da177e4SLinus Torvalds        }
391da177e4SLinus Torvalds        bad_offset = jeb->offset;
401da177e4SLinus Torvalds #else /* Linux */
411da177e4SLinus Torvalds 	struct erase_info *instr;
421da177e4SLinus Torvalds 
439c261b33SJoe Perches 	jffs2_dbg(1, "%s(): erase block %#08x (range %#08x-%#08x)\n",
449c261b33SJoe Perches 		  __func__,
459c261b33SJoe Perches 		  jeb->offset, jeb->offset, jeb->offset + c->sector_size);
46*22abf318SHaowen Bai 	instr = kzalloc(sizeof(struct erase_info), GFP_KERNEL);
471da177e4SLinus Torvalds 	if (!instr) {
48*22abf318SHaowen Bai 		pr_warn("kzalloc for struct erase_info in jffs2_erase_block failed. Refiling block for later\n");
49ced22070SDavid Woodhouse 		mutex_lock(&c->erase_free_sem);
501da177e4SLinus Torvalds 		spin_lock(&c->erase_completion_lock);
51f116629dSAkinobu Mita 		list_move(&jeb->list, &c->erase_pending_list);
521da177e4SLinus Torvalds 		c->erasing_size -= c->sector_size;
531da177e4SLinus Torvalds 		c->dirty_size += c->sector_size;
541da177e4SLinus Torvalds 		jeb->dirty_size = c->sector_size;
551da177e4SLinus Torvalds 		spin_unlock(&c->erase_completion_lock);
56ced22070SDavid Woodhouse 		mutex_unlock(&c->erase_free_sem);
571da177e4SLinus Torvalds 		return;
581da177e4SLinus Torvalds 	}
591da177e4SLinus Torvalds 
601da177e4SLinus Torvalds 	instr->addr = jeb->offset;
611da177e4SLinus Torvalds 	instr->len = c->sector_size;
621da177e4SLinus Torvalds 
637e1f0dc0SArtem Bityutskiy 	ret = mtd_erase(c->mtd, instr);
64884cfd90SBoris Brezillon 	if (!ret) {
65884cfd90SBoris Brezillon 		jffs2_erase_succeeded(c, jeb);
66884cfd90SBoris Brezillon 		kfree(instr);
671da177e4SLinus Torvalds 		return;
68884cfd90SBoris Brezillon 	}
691da177e4SLinus Torvalds 
701da177e4SLinus Torvalds 	bad_offset = instr->fail_addr;
711da177e4SLinus Torvalds 	kfree(instr);
721da177e4SLinus Torvalds #endif /* __ECOS */
731da177e4SLinus Torvalds 
741da177e4SLinus Torvalds 	if (ret == -ENOMEM || ret == -EAGAIN) {
751da177e4SLinus Torvalds 		/* Erase failed immediately. Refile it on the list */
769c261b33SJoe Perches 		jffs2_dbg(1, "Erase at 0x%08x failed: %d. Refiling on erase_pending_list\n",
779c261b33SJoe Perches 			  jeb->offset, ret);
78ced22070SDavid Woodhouse 		mutex_lock(&c->erase_free_sem);
791da177e4SLinus Torvalds 		spin_lock(&c->erase_completion_lock);
80f116629dSAkinobu Mita 		list_move(&jeb->list, &c->erase_pending_list);
811da177e4SLinus Torvalds 		c->erasing_size -= c->sector_size;
821da177e4SLinus Torvalds 		c->dirty_size += c->sector_size;
831da177e4SLinus Torvalds 		jeb->dirty_size = c->sector_size;
841da177e4SLinus Torvalds 		spin_unlock(&c->erase_completion_lock);
85ced22070SDavid Woodhouse 		mutex_unlock(&c->erase_free_sem);
861da177e4SLinus Torvalds 		return;
871da177e4SLinus Torvalds 	}
881da177e4SLinus Torvalds 
891da177e4SLinus Torvalds 	if (ret == -EROFS)
90da320f05SJoe Perches 		pr_warn("Erase at 0x%08x failed immediately: -EROFS. Is the sector locked?\n",
91da320f05SJoe Perches 			jeb->offset);
921da177e4SLinus Torvalds 	else
93da320f05SJoe Perches 		pr_warn("Erase at 0x%08x failed immediately: errno %d\n",
94da320f05SJoe Perches 			jeb->offset, ret);
951da177e4SLinus Torvalds 
961da177e4SLinus Torvalds 	jffs2_erase_failed(c, jeb, bad_offset);
971da177e4SLinus Torvalds }
981da177e4SLinus Torvalds 
jffs2_erase_pending_blocks(struct jffs2_sb_info * c,int count)999957abeaSJoakim Tjernlund int jffs2_erase_pending_blocks(struct jffs2_sb_info *c, int count)
1001da177e4SLinus Torvalds {
1011da177e4SLinus Torvalds 	struct jffs2_eraseblock *jeb;
1029957abeaSJoakim Tjernlund 	int work_done = 0;
1031da177e4SLinus Torvalds 
104ced22070SDavid Woodhouse 	mutex_lock(&c->erase_free_sem);
1051da177e4SLinus Torvalds 
1061da177e4SLinus Torvalds 	spin_lock(&c->erase_completion_lock);
1071da177e4SLinus Torvalds 
1081da177e4SLinus Torvalds 	while (!list_empty(&c->erase_complete_list) ||
1091da177e4SLinus Torvalds 	       !list_empty(&c->erase_pending_list)) {
1101da177e4SLinus Torvalds 
1111da177e4SLinus Torvalds 		if (!list_empty(&c->erase_complete_list)) {
1121da177e4SLinus Torvalds 			jeb = list_entry(c->erase_complete_list.next, struct jffs2_eraseblock, list);
113e2bc322bSDavid Woodhouse 			list_move(&jeb->list, &c->erase_checking_list);
1141da177e4SLinus Torvalds 			spin_unlock(&c->erase_completion_lock);
115ced22070SDavid Woodhouse 			mutex_unlock(&c->erase_free_sem);
1161da177e4SLinus Torvalds 			jffs2_mark_erased_block(c, jeb);
1171da177e4SLinus Torvalds 
1189957abeaSJoakim Tjernlund 			work_done++;
1191da177e4SLinus Torvalds 			if (!--count) {
1209c261b33SJoe Perches 				jffs2_dbg(1, "Count reached. jffs2_erase_pending_blocks leaving\n");
1211da177e4SLinus Torvalds 				goto done;
1221da177e4SLinus Torvalds 			}
1231da177e4SLinus Torvalds 
1241da177e4SLinus Torvalds 		} else if (!list_empty(&c->erase_pending_list)) {
1251da177e4SLinus Torvalds 			jeb = list_entry(c->erase_pending_list.next, struct jffs2_eraseblock, list);
1269c261b33SJoe Perches 			jffs2_dbg(1, "Starting erase of pending block 0x%08x\n",
1279c261b33SJoe Perches 				  jeb->offset);
1281da177e4SLinus Torvalds 			list_del(&jeb->list);
1291da177e4SLinus Torvalds 			c->erasing_size += c->sector_size;
1301da177e4SLinus Torvalds 			c->wasted_size -= jeb->wasted_size;
1311da177e4SLinus Torvalds 			c->free_size -= jeb->free_size;
1321da177e4SLinus Torvalds 			c->used_size -= jeb->used_size;
1331da177e4SLinus Torvalds 			c->dirty_size -= jeb->dirty_size;
1341da177e4SLinus Torvalds 			jeb->wasted_size = jeb->used_size = jeb->dirty_size = jeb->free_size = 0;
135c38c1b61SDavid Woodhouse 			jffs2_free_jeb_node_refs(c, jeb);
1361da177e4SLinus Torvalds 			list_add(&jeb->list, &c->erasing_list);
1371da177e4SLinus Torvalds 			spin_unlock(&c->erase_completion_lock);
138ced22070SDavid Woodhouse 			mutex_unlock(&c->erase_free_sem);
1391da177e4SLinus Torvalds 
1401da177e4SLinus Torvalds 			jffs2_erase_block(c, jeb);
1411da177e4SLinus Torvalds 
1421da177e4SLinus Torvalds 		} else {
1431da177e4SLinus Torvalds 			BUG();
1441da177e4SLinus Torvalds 		}
1451da177e4SLinus Torvalds 
1461da177e4SLinus Torvalds 		/* Be nice */
1473866f673SWolfram Sang 		cond_resched();
148ced22070SDavid Woodhouse 		mutex_lock(&c->erase_free_sem);
1491da177e4SLinus Torvalds 		spin_lock(&c->erase_completion_lock);
1501da177e4SLinus Torvalds 	}
1511da177e4SLinus Torvalds 
1521da177e4SLinus Torvalds 	spin_unlock(&c->erase_completion_lock);
153ced22070SDavid Woodhouse 	mutex_unlock(&c->erase_free_sem);
1541da177e4SLinus Torvalds  done:
1559c261b33SJoe Perches 	jffs2_dbg(1, "jffs2_erase_pending_blocks completed\n");
1569957abeaSJoakim Tjernlund 	return work_done;
1571da177e4SLinus Torvalds }
1581da177e4SLinus Torvalds 
jffs2_erase_succeeded(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb)1591da177e4SLinus Torvalds static void jffs2_erase_succeeded(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb)
1601da177e4SLinus Torvalds {
1619c261b33SJoe Perches 	jffs2_dbg(1, "Erase completed successfully at 0x%08x\n", jeb->offset);
162ced22070SDavid Woodhouse 	mutex_lock(&c->erase_free_sem);
1631da177e4SLinus Torvalds 	spin_lock(&c->erase_completion_lock);
164f116629dSAkinobu Mita 	list_move_tail(&jeb->list, &c->erase_complete_list);
165ae3b6ba0SDavid Woodhouse 	/* Wake the GC thread to mark them clean */
166ae3b6ba0SDavid Woodhouse 	jffs2_garbage_collect_trigger(c);
1671da177e4SLinus Torvalds 	spin_unlock(&c->erase_completion_lock);
168ced22070SDavid Woodhouse 	mutex_unlock(&c->erase_free_sem);
1690717bf84SDavid Woodhouse 	wake_up(&c->erase_wait);
1701da177e4SLinus Torvalds }
1711da177e4SLinus Torvalds 
jffs2_erase_failed(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb,uint32_t bad_offset)1721da177e4SLinus Torvalds static void jffs2_erase_failed(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t bad_offset)
1731da177e4SLinus Torvalds {
1741da177e4SLinus Torvalds 	/* For NAND, if the failure did not occur at the device level for a
1751da177e4SLinus Torvalds 	   specific physical page, don't bother updating the bad block table. */
17669423d99SAdrian Hunter 	if (jffs2_cleanmarker_oob(c) && (bad_offset != (uint32_t)MTD_FAIL_ADDR_UNKNOWN)) {
1771da177e4SLinus Torvalds 		/* We had a device-level failure to erase.  Let's see if we've
1781da177e4SLinus Torvalds 		   failed too many times. */
1791da177e4SLinus Torvalds 		if (!jffs2_write_nand_badblock(c, jeb, bad_offset)) {
1801da177e4SLinus Torvalds 			/* We'd like to give this block another try. */
181ced22070SDavid Woodhouse 			mutex_lock(&c->erase_free_sem);
1821da177e4SLinus Torvalds 			spin_lock(&c->erase_completion_lock);
183f116629dSAkinobu Mita 			list_move(&jeb->list, &c->erase_pending_list);
1841da177e4SLinus Torvalds 			c->erasing_size -= c->sector_size;
1851da177e4SLinus Torvalds 			c->dirty_size += c->sector_size;
1861da177e4SLinus Torvalds 			jeb->dirty_size = c->sector_size;
1871da177e4SLinus Torvalds 			spin_unlock(&c->erase_completion_lock);
188ced22070SDavid Woodhouse 			mutex_unlock(&c->erase_free_sem);
1891da177e4SLinus Torvalds 			return;
1901da177e4SLinus Torvalds 		}
1911da177e4SLinus Torvalds 	}
1921da177e4SLinus Torvalds 
193ced22070SDavid Woodhouse 	mutex_lock(&c->erase_free_sem);
1941da177e4SLinus Torvalds 	spin_lock(&c->erase_completion_lock);
1951da177e4SLinus Torvalds 	c->erasing_size -= c->sector_size;
1961da177e4SLinus Torvalds 	c->bad_size += c->sector_size;
197f116629dSAkinobu Mita 	list_move(&jeb->list, &c->bad_list);
1981da177e4SLinus Torvalds 	c->nr_erasing_blocks--;
1991da177e4SLinus Torvalds 	spin_unlock(&c->erase_completion_lock);
200ced22070SDavid Woodhouse 	mutex_unlock(&c->erase_free_sem);
2011da177e4SLinus Torvalds 	wake_up(&c->erase_wait);
2021da177e4SLinus Torvalds }
2031da177e4SLinus Torvalds 
2041da177e4SLinus Torvalds /* Hmmm. Maybe we should accept the extra space it takes and make
2051da177e4SLinus Torvalds    this a standard doubly-linked list? */
jffs2_remove_node_refs_from_ino_list(struct jffs2_sb_info * c,struct jffs2_raw_node_ref * ref,struct jffs2_eraseblock * jeb)2061da177e4SLinus Torvalds static inline void jffs2_remove_node_refs_from_ino_list(struct jffs2_sb_info *c,
2071da177e4SLinus Torvalds 			struct jffs2_raw_node_ref *ref, struct jffs2_eraseblock *jeb)
2081da177e4SLinus Torvalds {
2091da177e4SLinus Torvalds 	struct jffs2_inode_cache *ic = NULL;
2101da177e4SLinus Torvalds 	struct jffs2_raw_node_ref **prev;
2111da177e4SLinus Torvalds 
2121da177e4SLinus Torvalds 	prev = &ref->next_in_ino;
2131da177e4SLinus Torvalds 
2141da177e4SLinus Torvalds 	/* Walk the inode's list once, removing any nodes from this eraseblock */
2151da177e4SLinus Torvalds 	while (1) {
2161da177e4SLinus Torvalds 		if (!(*prev)->next_in_ino) {
2171da177e4SLinus Torvalds 			/* We're looking at the jffs2_inode_cache, which is
2181da177e4SLinus Torvalds 			   at the end of the linked list. Stash it and continue
2191da177e4SLinus Torvalds 			   from the beginning of the list */
2201da177e4SLinus Torvalds 			ic = (struct jffs2_inode_cache *)(*prev);
2211da177e4SLinus Torvalds 			prev = &ic->nodes;
2221da177e4SLinus Torvalds 			continue;
2231da177e4SLinus Torvalds 		}
2241da177e4SLinus Torvalds 
2253be36675SAndrew Victor 		if (SECTOR_ADDR((*prev)->flash_offset) == jeb->offset) {
2261da177e4SLinus Torvalds 			/* It's in the block we're erasing */
2271da177e4SLinus Torvalds 			struct jffs2_raw_node_ref *this;
2281da177e4SLinus Torvalds 
2291da177e4SLinus Torvalds 			this = *prev;
2301da177e4SLinus Torvalds 			*prev = this->next_in_ino;
2311da177e4SLinus Torvalds 			this->next_in_ino = NULL;
2321da177e4SLinus Torvalds 
2331da177e4SLinus Torvalds 			if (this == ref)
2341da177e4SLinus Torvalds 				break;
2351da177e4SLinus Torvalds 
2361da177e4SLinus Torvalds 			continue;
2371da177e4SLinus Torvalds 		}
2381da177e4SLinus Torvalds 		/* Not to be deleted. Skip */
2391da177e4SLinus Torvalds 		prev = &((*prev)->next_in_ino);
2401da177e4SLinus Torvalds 	}
2411da177e4SLinus Torvalds 
2421da177e4SLinus Torvalds 	/* PARANOIA */
2431da177e4SLinus Torvalds 	if (!ic) {
244c9f700f8SKaiGai Kohei 		JFFS2_WARNING("inode_cache/xattr_datum/xattr_ref"
245c9f700f8SKaiGai Kohei 			      " not found in remove_node_refs()!!\n");
2461da177e4SLinus Torvalds 		return;
2471da177e4SLinus Torvalds 	}
2481da177e4SLinus Torvalds 
2499c261b33SJoe Perches 	jffs2_dbg(1, "Removed nodes in range 0x%08x-0x%08x from ino #%u\n",
2509c261b33SJoe Perches 		  jeb->offset, jeb->offset + c->sector_size, ic->ino);
2511da177e4SLinus Torvalds 
2521da177e4SLinus Torvalds 	D2({
2531da177e4SLinus Torvalds 		int i=0;
2541da177e4SLinus Torvalds 		struct jffs2_raw_node_ref *this;
255ad361c98SJoe Perches 		printk(KERN_DEBUG "After remove_node_refs_from_ino_list: \n");
2561da177e4SLinus Torvalds 
2571da177e4SLinus Torvalds 		this = ic->nodes;
2581da177e4SLinus Torvalds 
259ad361c98SJoe Perches 		printk(KERN_DEBUG);
2601da177e4SLinus Torvalds 		while(this) {
261da320f05SJoe Perches 			pr_cont("0x%08x(%d)->",
262ad361c98SJoe Perches 			       ref_offset(this), ref_flags(this));
2631da177e4SLinus Torvalds 			if (++i == 5) {
264ad361c98SJoe Perches 				printk(KERN_DEBUG);
2651da177e4SLinus Torvalds 				i=0;
2661da177e4SLinus Torvalds 			}
2671da177e4SLinus Torvalds 			this = this->next_in_ino;
2681da177e4SLinus Torvalds 		}
269da320f05SJoe Perches 		pr_cont("\n");
2701da177e4SLinus Torvalds 	});
2711da177e4SLinus Torvalds 
272c9f700f8SKaiGai Kohei 	switch (ic->class) {
273c9f700f8SKaiGai Kohei #ifdef CONFIG_JFFS2_FS_XATTR
274c9f700f8SKaiGai Kohei 		case RAWNODE_CLASS_XATTR_DATUM:
275c9f700f8SKaiGai Kohei 			jffs2_release_xattr_datum(c, (struct jffs2_xattr_datum *)ic);
276c9f700f8SKaiGai Kohei 			break;
277c9f700f8SKaiGai Kohei 		case RAWNODE_CLASS_XATTR_REF:
278c9f700f8SKaiGai Kohei 			jffs2_release_xattr_ref(c, (struct jffs2_xattr_ref *)ic);
279c9f700f8SKaiGai Kohei 			break;
280c9f700f8SKaiGai Kohei #endif
281c9f700f8SKaiGai Kohei 		default:
28227c72b04SDavid Woodhouse 			if (ic->nodes == (void *)ic && ic->pino_nlink == 0)
2831da177e4SLinus Torvalds 				jffs2_del_ino_cache(c, ic);
2841da177e4SLinus Torvalds 	}
285c9f700f8SKaiGai Kohei }
2861da177e4SLinus Torvalds 
jffs2_free_jeb_node_refs(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb)287c38c1b61SDavid Woodhouse void jffs2_free_jeb_node_refs(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb)
2881da177e4SLinus Torvalds {
2899bfeb691SDavid Woodhouse 	struct jffs2_raw_node_ref *block, *ref;
2909c261b33SJoe Perches 	jffs2_dbg(1, "Freeing all node refs for eraseblock offset 0x%08x\n",
2919c261b33SJoe Perches 		  jeb->offset);
2921da177e4SLinus Torvalds 
2939bfeb691SDavid Woodhouse 	block = ref = jeb->first_node;
2949bfeb691SDavid Woodhouse 
2959bfeb691SDavid Woodhouse 	while (ref) {
2969bfeb691SDavid Woodhouse 		if (ref->flash_offset == REF_LINK_NODE) {
2979bfeb691SDavid Woodhouse 			ref = ref->next_in_ino;
2989bfeb691SDavid Woodhouse 			jffs2_free_refblock(block);
2999bfeb691SDavid Woodhouse 			block = ref;
3009bfeb691SDavid Woodhouse 			continue;
3019bfeb691SDavid Woodhouse 		}
3029bfeb691SDavid Woodhouse 		if (ref->flash_offset != REF_EMPTY_NODE && ref->next_in_ino)
3031da177e4SLinus Torvalds 			jffs2_remove_node_refs_from_ino_list(c, ref, jeb);
3041da177e4SLinus Torvalds 		/* else it was a non-inode node or already removed, so don't bother */
3051da177e4SLinus Torvalds 
3069bfeb691SDavid Woodhouse 		ref++;
3071da177e4SLinus Torvalds 	}
3089bfeb691SDavid Woodhouse 	jeb->first_node = jeb->last_node = NULL;
3091da177e4SLinus Torvalds }
3101da177e4SLinus Torvalds 
jffs2_block_check_erase(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb,uint32_t * bad_offset)3115d157885SThomas Gleixner static int jffs2_block_check_erase(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t *bad_offset)
3121da177e4SLinus Torvalds {
3135d157885SThomas Gleixner 	void *ebuf;
3145d157885SThomas Gleixner 	uint32_t ofs;
3151da177e4SLinus Torvalds 	size_t retlen;
316bce41d60SArtem Bityutskiy 	int ret;
317fab2c399SJoakim Tjernlund 	unsigned long *wordebuf;
318fab2c399SJoakim Tjernlund 
319d35ea200SArtem Bityutskiy 	ret = mtd_point(c->mtd, jeb->offset, c->sector_size, &retlen,
320d35ea200SArtem Bityutskiy 			&ebuf, NULL);
32110934478SArtem Bityutskiy 	if (ret != -EOPNOTSUPP) {
322fab2c399SJoakim Tjernlund 		if (ret) {
3239c261b33SJoe Perches 			jffs2_dbg(1, "MTD point failed %d\n", ret);
324fab2c399SJoakim Tjernlund 			goto do_flash_read;
325fab2c399SJoakim Tjernlund 		}
326fab2c399SJoakim Tjernlund 		if (retlen < c->sector_size) {
327fab2c399SJoakim Tjernlund 			/* Don't muck about if it won't let us point to the whole erase sector */
3289c261b33SJoe Perches 			jffs2_dbg(1, "MTD point returned len too short: 0x%zx\n",
3299c261b33SJoe Perches 				  retlen);
3307219778aSArtem Bityutskiy 			mtd_unpoint(c->mtd, jeb->offset, retlen);
331fab2c399SJoakim Tjernlund 			goto do_flash_read;
332fab2c399SJoakim Tjernlund 		}
333fab2c399SJoakim Tjernlund 		wordebuf = ebuf-sizeof(*wordebuf);
334fab2c399SJoakim Tjernlund 		retlen /= sizeof(*wordebuf);
335fab2c399SJoakim Tjernlund 		do {
336fab2c399SJoakim Tjernlund 		   if (*++wordebuf != ~0)
337fab2c399SJoakim Tjernlund 			   break;
338fab2c399SJoakim Tjernlund 		} while(--retlen);
3397219778aSArtem Bityutskiy 		mtd_unpoint(c->mtd, jeb->offset, c->sector_size);
3408a0f5723SAnders Grafström 		if (retlen) {
341da320f05SJoe Perches 			pr_warn("Newly-erased block contained word 0x%lx at offset 0x%08tx\n",
342da320f05SJoe Perches 				*wordebuf,
343da320f05SJoe Perches 				jeb->offset +
344da320f05SJoe Perches 				c->sector_size-retlen * sizeof(*wordebuf));
3458a0f5723SAnders Grafström 			return -EIO;
3468a0f5723SAnders Grafström 		}
347fab2c399SJoakim Tjernlund 		return 0;
348fab2c399SJoakim Tjernlund 	}
349fab2c399SJoakim Tjernlund  do_flash_read:
3501da177e4SLinus Torvalds 	ebuf = kmalloc(PAGE_SIZE, GFP_KERNEL);
3511da177e4SLinus Torvalds 	if (!ebuf) {
352da320f05SJoe Perches 		pr_warn("Failed to allocate page buffer for verifying erase at 0x%08x. Refiling\n",
353da320f05SJoe Perches 			jeb->offset);
3545d157885SThomas Gleixner 		return -EAGAIN;
3555d157885SThomas Gleixner 	}
3561da177e4SLinus Torvalds 
3579c261b33SJoe Perches 	jffs2_dbg(1, "Verifying erase at 0x%08x\n", jeb->offset);
3585d157885SThomas Gleixner 
3595d157885SThomas Gleixner 	for (ofs = jeb->offset; ofs < jeb->offset + c->sector_size; ) {
3601da177e4SLinus Torvalds 		uint32_t readlen = min((uint32_t)PAGE_SIZE, jeb->offset + c->sector_size - ofs);
3611da177e4SLinus Torvalds 		int i;
3621da177e4SLinus Torvalds 
3635d157885SThomas Gleixner 		*bad_offset = ofs;
3641da177e4SLinus Torvalds 
365329ad399SArtem Bityutskiy 		ret = mtd_read(c->mtd, ofs, readlen, &retlen, ebuf);
3661da177e4SLinus Torvalds 		if (ret) {
367da320f05SJoe Perches 			pr_warn("Read of newly-erased block at 0x%08x failed: %d. Putting on bad_list\n",
368da320f05SJoe Perches 				ofs, ret);
3698a0f5723SAnders Grafström 			ret = -EIO;
3705d157885SThomas Gleixner 			goto fail;
3711da177e4SLinus Torvalds 		}
3721da177e4SLinus Torvalds 		if (retlen != readlen) {
373da320f05SJoe Perches 			pr_warn("Short read from newly-erased block at 0x%08x. Wanted %d, got %zd\n",
374da320f05SJoe Perches 				ofs, readlen, retlen);
3758a0f5723SAnders Grafström 			ret = -EIO;
3765d157885SThomas Gleixner 			goto fail;
3771da177e4SLinus Torvalds 		}
3781da177e4SLinus Torvalds 		for (i=0; i<readlen; i += sizeof(unsigned long)) {
3791da177e4SLinus Torvalds 			/* It's OK. We know it's properly aligned */
3805d157885SThomas Gleixner 			unsigned long *datum = ebuf + i;
3815d157885SThomas Gleixner 			if (*datum + 1) {
3825d157885SThomas Gleixner 				*bad_offset += i;
383da320f05SJoe Perches 				pr_warn("Newly-erased block contained word 0x%lx at offset 0x%08x\n",
384da320f05SJoe Perches 					*datum, *bad_offset);
3858a0f5723SAnders Grafström 				ret = -EIO;
3865d157885SThomas Gleixner 				goto fail;
3871da177e4SLinus Torvalds 			}
3881da177e4SLinus Torvalds 		}
3891da177e4SLinus Torvalds 		ofs += readlen;
3901da177e4SLinus Torvalds 		cond_resched();
3911da177e4SLinus Torvalds 	}
3925d157885SThomas Gleixner 	ret = 0;
3935d157885SThomas Gleixner fail:
3941da177e4SLinus Torvalds 	kfree(ebuf);
3955d157885SThomas Gleixner 	return ret;
3961da177e4SLinus Torvalds }
3971da177e4SLinus Torvalds 
jffs2_mark_erased_block(struct jffs2_sb_info * c,struct jffs2_eraseblock * jeb)3985d157885SThomas Gleixner static void jffs2_mark_erased_block(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb)
3995d157885SThomas Gleixner {
4005d157885SThomas Gleixner 	size_t retlen;
4015d157885SThomas Gleixner 	int ret;
4023f649ab7SKees Cook 	uint32_t bad_offset;
4035d157885SThomas Gleixner 
4045d157885SThomas Gleixner 	switch (jffs2_block_check_erase(c, jeb, &bad_offset)) {
4055d157885SThomas Gleixner 	case -EAGAIN:	goto refile;
4065d157885SThomas Gleixner 	case -EIO:	goto filebad;
4075d157885SThomas Gleixner 	}
4081da177e4SLinus Torvalds 
4091da177e4SLinus Torvalds 	/* Write the erase complete marker */
4109c261b33SJoe Perches 	jffs2_dbg(1, "Writing erased marker to block at 0x%08x\n", jeb->offset);
4115d157885SThomas Gleixner 	bad_offset = jeb->offset;
4125d157885SThomas Gleixner 
4135d157885SThomas Gleixner 	/* Cleanmarker in oob area or no cleanmarker at all ? */
4145d157885SThomas Gleixner 	if (jffs2_cleanmarker_oob(c) || c->cleanmarker_size == 0) {
4155d157885SThomas Gleixner 
4161da177e4SLinus Torvalds 		if (jffs2_cleanmarker_oob(c)) {
4171da177e4SLinus Torvalds 			if (jffs2_write_nand_cleanmarker(c, jeb))
4185d157885SThomas Gleixner 				goto filebad;
4195d157885SThomas Gleixner 		}
4201da177e4SLinus Torvalds 	} else {
4215d157885SThomas Gleixner 
4221da177e4SLinus Torvalds 		struct kvec vecs[1];
4231da177e4SLinus Torvalds 		struct jffs2_unknown_node marker = {
4241da177e4SLinus Torvalds 			.magic =	cpu_to_je16(JFFS2_MAGIC_BITMASK),
4251da177e4SLinus Torvalds 			.nodetype =	cpu_to_je16(JFFS2_NODETYPE_CLEANMARKER),
4261da177e4SLinus Torvalds 			.totlen =	cpu_to_je32(c->cleanmarker_size)
4271da177e4SLinus Torvalds 		};
4281da177e4SLinus Torvalds 
429046b8b98SDavid Woodhouse 		jffs2_prealloc_raw_node_refs(c, jeb, 1);
4305d157885SThomas Gleixner 
4311da177e4SLinus Torvalds 		marker.hdr_crc = cpu_to_je32(crc32(0, &marker, sizeof(struct jffs2_unknown_node)-4));
4321da177e4SLinus Torvalds 
4331da177e4SLinus Torvalds 		vecs[0].iov_base = (unsigned char *) &marker;
4341da177e4SLinus Torvalds 		vecs[0].iov_len = sizeof(marker);
4351da177e4SLinus Torvalds 		ret = jffs2_flash_direct_writev(c, vecs, 1, jeb->offset, &retlen);
4361da177e4SLinus Torvalds 
4375d157885SThomas Gleixner 		if (ret || retlen != sizeof(marker)) {
4385d157885SThomas Gleixner 			if (ret)
439da320f05SJoe Perches 				pr_warn("Write clean marker to block at 0x%08x failed: %d\n",
4401da177e4SLinus Torvalds 				       jeb->offset, ret);
4415d157885SThomas Gleixner 			else
442da320f05SJoe Perches 				pr_warn("Short write to newly-erased block at 0x%08x: Wanted %zd, got %zd\n",
4431da177e4SLinus Torvalds 				       jeb->offset, sizeof(marker), retlen);
4445d157885SThomas Gleixner 
4455d157885SThomas Gleixner 			goto filebad;
4461da177e4SLinus Torvalds 		}
447014b164eSDavid Woodhouse 	}
448f1f9671bSDavid Woodhouse 	/* Everything else got zeroed before the erase */
449f1f9671bSDavid Woodhouse 	jeb->free_size = c->sector_size;
4501da177e4SLinus Torvalds 
451ced22070SDavid Woodhouse 	mutex_lock(&c->erase_free_sem);
4521da177e4SLinus Torvalds 	spin_lock(&c->erase_completion_lock);
453014b164eSDavid Woodhouse 
4541da177e4SLinus Torvalds 	c->erasing_size -= c->sector_size;
455014b164eSDavid Woodhouse 	c->free_size += c->sector_size;
456014b164eSDavid Woodhouse 
457014b164eSDavid Woodhouse 	/* Account for cleanmarker now, if it's in-band */
458014b164eSDavid Woodhouse 	if (c->cleanmarker_size && !jffs2_cleanmarker_oob(c))
459014b164eSDavid Woodhouse 		jffs2_link_node_ref(c, jeb, jeb->offset | REF_NORMAL, c->cleanmarker_size, NULL);
4601da177e4SLinus Torvalds 
461e2bc322bSDavid Woodhouse 	list_move_tail(&jeb->list, &c->free_list);
4621da177e4SLinus Torvalds 	c->nr_erasing_blocks--;
4631da177e4SLinus Torvalds 	c->nr_free_blocks++;
46485a62db6SDavid Woodhouse 
46585a62db6SDavid Woodhouse 	jffs2_dbg_acct_sanity_check_nolock(c, jeb);
46685a62db6SDavid Woodhouse 	jffs2_dbg_acct_paranoia_check_nolock(c, jeb);
46785a62db6SDavid Woodhouse 
4681da177e4SLinus Torvalds 	spin_unlock(&c->erase_completion_lock);
469ced22070SDavid Woodhouse 	mutex_unlock(&c->erase_free_sem);
4701da177e4SLinus Torvalds 	wake_up(&c->erase_wait);
4715d157885SThomas Gleixner 	return;
4721da177e4SLinus Torvalds 
4735d157885SThomas Gleixner filebad:
4745d157885SThomas Gleixner 	jffs2_erase_failed(c, jeb, bad_offset);
4755d157885SThomas Gleixner 	return;
4765d157885SThomas Gleixner 
4775d157885SThomas Gleixner refile:
4785d157885SThomas Gleixner 	/* Stick it back on the list from whence it came and come back later */
479ced22070SDavid Woodhouse 	mutex_lock(&c->erase_free_sem);
4805d157885SThomas Gleixner 	spin_lock(&c->erase_completion_lock);
481ae3b6ba0SDavid Woodhouse 	jffs2_garbage_collect_trigger(c);
482e2bc322bSDavid Woodhouse 	list_move(&jeb->list, &c->erase_complete_list);
4835d157885SThomas Gleixner 	spin_unlock(&c->erase_completion_lock);
484ced22070SDavid Woodhouse 	mutex_unlock(&c->erase_free_sem);
4855d157885SThomas Gleixner 	return;
4865d157885SThomas Gleixner }
487