11da177e4SLinus Torvalds /* 21da177e4SLinus Torvalds * JFFS2 -- Journalling Flash File System, Version 2. 31da177e4SLinus Torvalds * 4c00c310eSDavid Woodhouse * Copyright © 2001-2007 Red Hat, Inc. 56088c058SDavid Woodhouse * Copyright © 2004-2010 David Woodhouse <dwmw2@infradead.org> 61da177e4SLinus Torvalds * 71da177e4SLinus Torvalds * Created by David Woodhouse <dwmw2@infradead.org> 81da177e4SLinus Torvalds * 91da177e4SLinus Torvalds * For licensing information, see the file 'LICENCE' in this directory. 101da177e4SLinus Torvalds * 111da177e4SLinus Torvalds */ 121da177e4SLinus Torvalds 135a528957SJoe Perches #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 145a528957SJoe Perches 151da177e4SLinus Torvalds #include <linux/kernel.h> 161da177e4SLinus Torvalds #include <linux/slab.h> 171da177e4SLinus Torvalds #include <linux/mtd/mtd.h> 181da177e4SLinus Torvalds #include <linux/compiler.h> 191da177e4SLinus Torvalds #include <linux/crc32.h> 201da177e4SLinus Torvalds #include <linux/sched.h> 211da177e4SLinus Torvalds #include <linux/pagemap.h> 221da177e4SLinus Torvalds #include "nodelist.h" 231da177e4SLinus Torvalds 241da177e4SLinus Torvalds static void jffs2_erase_failed(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t bad_offset); 251da177e4SLinus Torvalds static void jffs2_erase_succeeded(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb); 261da177e4SLinus Torvalds static void jffs2_mark_erased_block(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb); 271da177e4SLinus Torvalds 281da177e4SLinus Torvalds static void jffs2_erase_block(struct jffs2_sb_info *c, 291da177e4SLinus Torvalds struct jffs2_eraseblock *jeb) 301da177e4SLinus Torvalds { 311da177e4SLinus Torvalds int ret; 321da177e4SLinus Torvalds uint32_t bad_offset; 331da177e4SLinus Torvalds #ifdef __ECOS 341da177e4SLinus Torvalds ret = jffs2_flash_erase(c, jeb); 351da177e4SLinus Torvalds if (!ret) { 361da177e4SLinus Torvalds jffs2_erase_succeeded(c, jeb); 371da177e4SLinus Torvalds return; 381da177e4SLinus Torvalds } 391da177e4SLinus Torvalds bad_offset = jeb->offset; 401da177e4SLinus Torvalds #else /* Linux */ 411da177e4SLinus Torvalds struct erase_info *instr; 421da177e4SLinus Torvalds 439c261b33SJoe Perches jffs2_dbg(1, "%s(): erase block %#08x (range %#08x-%#08x)\n", 449c261b33SJoe Perches __func__, 459c261b33SJoe Perches jeb->offset, jeb->offset, jeb->offset + c->sector_size); 46884cfd90SBoris Brezillon instr = kmalloc(sizeof(struct erase_info), GFP_KERNEL); 471da177e4SLinus Torvalds if (!instr) { 48da320f05SJoe Perches pr_warn("kmalloc for struct erase_info in jffs2_erase_block failed. Refiling block for later\n"); 49ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 501da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 51f116629dSAkinobu Mita list_move(&jeb->list, &c->erase_pending_list); 521da177e4SLinus Torvalds c->erasing_size -= c->sector_size; 531da177e4SLinus Torvalds c->dirty_size += c->sector_size; 541da177e4SLinus Torvalds jeb->dirty_size = c->sector_size; 551da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 56ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 571da177e4SLinus Torvalds return; 581da177e4SLinus Torvalds } 591da177e4SLinus Torvalds 601da177e4SLinus Torvalds memset(instr, 0, sizeof(*instr)); 611da177e4SLinus Torvalds 621da177e4SLinus Torvalds instr->addr = jeb->offset; 631da177e4SLinus Torvalds instr->len = c->sector_size; 641da177e4SLinus Torvalds 657e1f0dc0SArtem Bityutskiy ret = mtd_erase(c->mtd, instr); 66884cfd90SBoris Brezillon if (!ret) { 67884cfd90SBoris Brezillon jffs2_erase_succeeded(c, jeb); 68884cfd90SBoris Brezillon kfree(instr); 691da177e4SLinus Torvalds return; 70884cfd90SBoris Brezillon } 711da177e4SLinus Torvalds 721da177e4SLinus Torvalds bad_offset = instr->fail_addr; 731da177e4SLinus Torvalds kfree(instr); 741da177e4SLinus Torvalds #endif /* __ECOS */ 751da177e4SLinus Torvalds 761da177e4SLinus Torvalds if (ret == -ENOMEM || ret == -EAGAIN) { 771da177e4SLinus Torvalds /* Erase failed immediately. Refile it on the list */ 789c261b33SJoe Perches jffs2_dbg(1, "Erase at 0x%08x failed: %d. Refiling on erase_pending_list\n", 799c261b33SJoe Perches jeb->offset, ret); 80ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 811da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 82f116629dSAkinobu Mita list_move(&jeb->list, &c->erase_pending_list); 831da177e4SLinus Torvalds c->erasing_size -= c->sector_size; 841da177e4SLinus Torvalds c->dirty_size += c->sector_size; 851da177e4SLinus Torvalds jeb->dirty_size = c->sector_size; 861da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 87ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 881da177e4SLinus Torvalds return; 891da177e4SLinus Torvalds } 901da177e4SLinus Torvalds 911da177e4SLinus Torvalds if (ret == -EROFS) 92da320f05SJoe Perches pr_warn("Erase at 0x%08x failed immediately: -EROFS. Is the sector locked?\n", 93da320f05SJoe Perches jeb->offset); 941da177e4SLinus Torvalds else 95da320f05SJoe Perches pr_warn("Erase at 0x%08x failed immediately: errno %d\n", 96da320f05SJoe Perches jeb->offset, ret); 971da177e4SLinus Torvalds 981da177e4SLinus Torvalds jffs2_erase_failed(c, jeb, bad_offset); 991da177e4SLinus Torvalds } 1001da177e4SLinus Torvalds 1019957abeaSJoakim Tjernlund int jffs2_erase_pending_blocks(struct jffs2_sb_info *c, int count) 1021da177e4SLinus Torvalds { 1031da177e4SLinus Torvalds struct jffs2_eraseblock *jeb; 1049957abeaSJoakim Tjernlund int work_done = 0; 1051da177e4SLinus Torvalds 106ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 1071da177e4SLinus Torvalds 1081da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 1091da177e4SLinus Torvalds 1101da177e4SLinus Torvalds while (!list_empty(&c->erase_complete_list) || 1111da177e4SLinus Torvalds !list_empty(&c->erase_pending_list)) { 1121da177e4SLinus Torvalds 1131da177e4SLinus Torvalds if (!list_empty(&c->erase_complete_list)) { 1141da177e4SLinus Torvalds jeb = list_entry(c->erase_complete_list.next, struct jffs2_eraseblock, list); 115e2bc322bSDavid Woodhouse list_move(&jeb->list, &c->erase_checking_list); 1161da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 117ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 1181da177e4SLinus Torvalds jffs2_mark_erased_block(c, jeb); 1191da177e4SLinus Torvalds 1209957abeaSJoakim Tjernlund work_done++; 1211da177e4SLinus Torvalds if (!--count) { 1229c261b33SJoe Perches jffs2_dbg(1, "Count reached. jffs2_erase_pending_blocks leaving\n"); 1231da177e4SLinus Torvalds goto done; 1241da177e4SLinus Torvalds } 1251da177e4SLinus Torvalds 1261da177e4SLinus Torvalds } else if (!list_empty(&c->erase_pending_list)) { 1271da177e4SLinus Torvalds jeb = list_entry(c->erase_pending_list.next, struct jffs2_eraseblock, list); 1289c261b33SJoe Perches jffs2_dbg(1, "Starting erase of pending block 0x%08x\n", 1299c261b33SJoe Perches jeb->offset); 1301da177e4SLinus Torvalds list_del(&jeb->list); 1311da177e4SLinus Torvalds c->erasing_size += c->sector_size; 1321da177e4SLinus Torvalds c->wasted_size -= jeb->wasted_size; 1331da177e4SLinus Torvalds c->free_size -= jeb->free_size; 1341da177e4SLinus Torvalds c->used_size -= jeb->used_size; 1351da177e4SLinus Torvalds c->dirty_size -= jeb->dirty_size; 1361da177e4SLinus Torvalds jeb->wasted_size = jeb->used_size = jeb->dirty_size = jeb->free_size = 0; 137c38c1b61SDavid Woodhouse jffs2_free_jeb_node_refs(c, jeb); 1381da177e4SLinus Torvalds list_add(&jeb->list, &c->erasing_list); 1391da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 140ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 1411da177e4SLinus Torvalds 1421da177e4SLinus Torvalds jffs2_erase_block(c, jeb); 1431da177e4SLinus Torvalds 1441da177e4SLinus Torvalds } else { 1451da177e4SLinus Torvalds BUG(); 1461da177e4SLinus Torvalds } 1471da177e4SLinus Torvalds 1481da177e4SLinus Torvalds /* Be nice */ 1493866f673SWolfram Sang cond_resched(); 150ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 1511da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 1521da177e4SLinus Torvalds } 1531da177e4SLinus Torvalds 1541da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 155ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 1561da177e4SLinus Torvalds done: 1579c261b33SJoe Perches jffs2_dbg(1, "jffs2_erase_pending_blocks completed\n"); 1589957abeaSJoakim Tjernlund return work_done; 1591da177e4SLinus Torvalds } 1601da177e4SLinus Torvalds 1611da177e4SLinus Torvalds static void jffs2_erase_succeeded(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb) 1621da177e4SLinus Torvalds { 1639c261b33SJoe Perches jffs2_dbg(1, "Erase completed successfully at 0x%08x\n", jeb->offset); 164ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 1651da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 166f116629dSAkinobu Mita list_move_tail(&jeb->list, &c->erase_complete_list); 167ae3b6ba0SDavid Woodhouse /* Wake the GC thread to mark them clean */ 168ae3b6ba0SDavid Woodhouse jffs2_garbage_collect_trigger(c); 1691da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 170ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 1710717bf84SDavid Woodhouse wake_up(&c->erase_wait); 1721da177e4SLinus Torvalds } 1731da177e4SLinus Torvalds 1741da177e4SLinus Torvalds static void jffs2_erase_failed(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t bad_offset) 1751da177e4SLinus Torvalds { 1761da177e4SLinus Torvalds /* For NAND, if the failure did not occur at the device level for a 1771da177e4SLinus Torvalds specific physical page, don't bother updating the bad block table. */ 17869423d99SAdrian Hunter if (jffs2_cleanmarker_oob(c) && (bad_offset != (uint32_t)MTD_FAIL_ADDR_UNKNOWN)) { 1791da177e4SLinus Torvalds /* We had a device-level failure to erase. Let's see if we've 1801da177e4SLinus Torvalds failed too many times. */ 1811da177e4SLinus Torvalds if (!jffs2_write_nand_badblock(c, jeb, bad_offset)) { 1821da177e4SLinus Torvalds /* We'd like to give this block another try. */ 183ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 1841da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 185f116629dSAkinobu Mita list_move(&jeb->list, &c->erase_pending_list); 1861da177e4SLinus Torvalds c->erasing_size -= c->sector_size; 1871da177e4SLinus Torvalds c->dirty_size += c->sector_size; 1881da177e4SLinus Torvalds jeb->dirty_size = c->sector_size; 1891da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 190ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 1911da177e4SLinus Torvalds return; 1921da177e4SLinus Torvalds } 1931da177e4SLinus Torvalds } 1941da177e4SLinus Torvalds 195ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 1961da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 1971da177e4SLinus Torvalds c->erasing_size -= c->sector_size; 1981da177e4SLinus Torvalds c->bad_size += c->sector_size; 199f116629dSAkinobu Mita list_move(&jeb->list, &c->bad_list); 2001da177e4SLinus Torvalds c->nr_erasing_blocks--; 2011da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 202ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 2031da177e4SLinus Torvalds wake_up(&c->erase_wait); 2041da177e4SLinus Torvalds } 2051da177e4SLinus Torvalds 2061da177e4SLinus Torvalds /* Hmmm. Maybe we should accept the extra space it takes and make 2071da177e4SLinus Torvalds this a standard doubly-linked list? */ 2081da177e4SLinus Torvalds static inline void jffs2_remove_node_refs_from_ino_list(struct jffs2_sb_info *c, 2091da177e4SLinus Torvalds struct jffs2_raw_node_ref *ref, struct jffs2_eraseblock *jeb) 2101da177e4SLinus Torvalds { 2111da177e4SLinus Torvalds struct jffs2_inode_cache *ic = NULL; 2121da177e4SLinus Torvalds struct jffs2_raw_node_ref **prev; 2131da177e4SLinus Torvalds 2141da177e4SLinus Torvalds prev = &ref->next_in_ino; 2151da177e4SLinus Torvalds 2161da177e4SLinus Torvalds /* Walk the inode's list once, removing any nodes from this eraseblock */ 2171da177e4SLinus Torvalds while (1) { 2181da177e4SLinus Torvalds if (!(*prev)->next_in_ino) { 2191da177e4SLinus Torvalds /* We're looking at the jffs2_inode_cache, which is 2201da177e4SLinus Torvalds at the end of the linked list. Stash it and continue 2211da177e4SLinus Torvalds from the beginning of the list */ 2221da177e4SLinus Torvalds ic = (struct jffs2_inode_cache *)(*prev); 2231da177e4SLinus Torvalds prev = &ic->nodes; 2241da177e4SLinus Torvalds continue; 2251da177e4SLinus Torvalds } 2261da177e4SLinus Torvalds 2273be36675SAndrew Victor if (SECTOR_ADDR((*prev)->flash_offset) == jeb->offset) { 2281da177e4SLinus Torvalds /* It's in the block we're erasing */ 2291da177e4SLinus Torvalds struct jffs2_raw_node_ref *this; 2301da177e4SLinus Torvalds 2311da177e4SLinus Torvalds this = *prev; 2321da177e4SLinus Torvalds *prev = this->next_in_ino; 2331da177e4SLinus Torvalds this->next_in_ino = NULL; 2341da177e4SLinus Torvalds 2351da177e4SLinus Torvalds if (this == ref) 2361da177e4SLinus Torvalds break; 2371da177e4SLinus Torvalds 2381da177e4SLinus Torvalds continue; 2391da177e4SLinus Torvalds } 2401da177e4SLinus Torvalds /* Not to be deleted. Skip */ 2411da177e4SLinus Torvalds prev = &((*prev)->next_in_ino); 2421da177e4SLinus Torvalds } 2431da177e4SLinus Torvalds 2441da177e4SLinus Torvalds /* PARANOIA */ 2451da177e4SLinus Torvalds if (!ic) { 246c9f700f8SKaiGai Kohei JFFS2_WARNING("inode_cache/xattr_datum/xattr_ref" 247c9f700f8SKaiGai Kohei " not found in remove_node_refs()!!\n"); 2481da177e4SLinus Torvalds return; 2491da177e4SLinus Torvalds } 2501da177e4SLinus Torvalds 2519c261b33SJoe Perches jffs2_dbg(1, "Removed nodes in range 0x%08x-0x%08x from ino #%u\n", 2529c261b33SJoe Perches jeb->offset, jeb->offset + c->sector_size, ic->ino); 2531da177e4SLinus Torvalds 2541da177e4SLinus Torvalds D2({ 2551da177e4SLinus Torvalds int i=0; 2561da177e4SLinus Torvalds struct jffs2_raw_node_ref *this; 257ad361c98SJoe Perches printk(KERN_DEBUG "After remove_node_refs_from_ino_list: \n"); 2581da177e4SLinus Torvalds 2591da177e4SLinus Torvalds this = ic->nodes; 2601da177e4SLinus Torvalds 261ad361c98SJoe Perches printk(KERN_DEBUG); 2621da177e4SLinus Torvalds while(this) { 263da320f05SJoe Perches pr_cont("0x%08x(%d)->", 264ad361c98SJoe Perches ref_offset(this), ref_flags(this)); 2651da177e4SLinus Torvalds if (++i == 5) { 266ad361c98SJoe Perches printk(KERN_DEBUG); 2671da177e4SLinus Torvalds i=0; 2681da177e4SLinus Torvalds } 2691da177e4SLinus Torvalds this = this->next_in_ino; 2701da177e4SLinus Torvalds } 271da320f05SJoe Perches pr_cont("\n"); 2721da177e4SLinus Torvalds }); 2731da177e4SLinus Torvalds 274c9f700f8SKaiGai Kohei switch (ic->class) { 275c9f700f8SKaiGai Kohei #ifdef CONFIG_JFFS2_FS_XATTR 276c9f700f8SKaiGai Kohei case RAWNODE_CLASS_XATTR_DATUM: 277c9f700f8SKaiGai Kohei jffs2_release_xattr_datum(c, (struct jffs2_xattr_datum *)ic); 278c9f700f8SKaiGai Kohei break; 279c9f700f8SKaiGai Kohei case RAWNODE_CLASS_XATTR_REF: 280c9f700f8SKaiGai Kohei jffs2_release_xattr_ref(c, (struct jffs2_xattr_ref *)ic); 281c9f700f8SKaiGai Kohei break; 282c9f700f8SKaiGai Kohei #endif 283c9f700f8SKaiGai Kohei default: 28427c72b04SDavid Woodhouse if (ic->nodes == (void *)ic && ic->pino_nlink == 0) 2851da177e4SLinus Torvalds jffs2_del_ino_cache(c, ic); 2861da177e4SLinus Torvalds } 287c9f700f8SKaiGai Kohei } 2881da177e4SLinus Torvalds 289c38c1b61SDavid Woodhouse void jffs2_free_jeb_node_refs(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb) 2901da177e4SLinus Torvalds { 2919bfeb691SDavid Woodhouse struct jffs2_raw_node_ref *block, *ref; 2929c261b33SJoe Perches jffs2_dbg(1, "Freeing all node refs for eraseblock offset 0x%08x\n", 2939c261b33SJoe Perches jeb->offset); 2941da177e4SLinus Torvalds 2959bfeb691SDavid Woodhouse block = ref = jeb->first_node; 2969bfeb691SDavid Woodhouse 2979bfeb691SDavid Woodhouse while (ref) { 2989bfeb691SDavid Woodhouse if (ref->flash_offset == REF_LINK_NODE) { 2999bfeb691SDavid Woodhouse ref = ref->next_in_ino; 3009bfeb691SDavid Woodhouse jffs2_free_refblock(block); 3019bfeb691SDavid Woodhouse block = ref; 3029bfeb691SDavid Woodhouse continue; 3039bfeb691SDavid Woodhouse } 3049bfeb691SDavid Woodhouse if (ref->flash_offset != REF_EMPTY_NODE && ref->next_in_ino) 3051da177e4SLinus Torvalds jffs2_remove_node_refs_from_ino_list(c, ref, jeb); 3061da177e4SLinus Torvalds /* else it was a non-inode node or already removed, so don't bother */ 3071da177e4SLinus Torvalds 3089bfeb691SDavid Woodhouse ref++; 3091da177e4SLinus Torvalds } 3109bfeb691SDavid Woodhouse jeb->first_node = jeb->last_node = NULL; 3111da177e4SLinus Torvalds } 3121da177e4SLinus Torvalds 3135d157885SThomas Gleixner static int jffs2_block_check_erase(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb, uint32_t *bad_offset) 3141da177e4SLinus Torvalds { 3155d157885SThomas Gleixner void *ebuf; 3165d157885SThomas Gleixner uint32_t ofs; 3171da177e4SLinus Torvalds size_t retlen; 318bce41d60SArtem Bityutskiy int ret; 319fab2c399SJoakim Tjernlund unsigned long *wordebuf; 320fab2c399SJoakim Tjernlund 321d35ea200SArtem Bityutskiy ret = mtd_point(c->mtd, jeb->offset, c->sector_size, &retlen, 322d35ea200SArtem Bityutskiy &ebuf, NULL); 32310934478SArtem Bityutskiy if (ret != -EOPNOTSUPP) { 324fab2c399SJoakim Tjernlund if (ret) { 3259c261b33SJoe Perches jffs2_dbg(1, "MTD point failed %d\n", ret); 326fab2c399SJoakim Tjernlund goto do_flash_read; 327fab2c399SJoakim Tjernlund } 328fab2c399SJoakim Tjernlund if (retlen < c->sector_size) { 329fab2c399SJoakim Tjernlund /* Don't muck about if it won't let us point to the whole erase sector */ 3309c261b33SJoe Perches jffs2_dbg(1, "MTD point returned len too short: 0x%zx\n", 3319c261b33SJoe Perches retlen); 3327219778aSArtem Bityutskiy mtd_unpoint(c->mtd, jeb->offset, retlen); 333fab2c399SJoakim Tjernlund goto do_flash_read; 334fab2c399SJoakim Tjernlund } 335fab2c399SJoakim Tjernlund wordebuf = ebuf-sizeof(*wordebuf); 336fab2c399SJoakim Tjernlund retlen /= sizeof(*wordebuf); 337fab2c399SJoakim Tjernlund do { 338fab2c399SJoakim Tjernlund if (*++wordebuf != ~0) 339fab2c399SJoakim Tjernlund break; 340fab2c399SJoakim Tjernlund } while(--retlen); 3417219778aSArtem Bityutskiy mtd_unpoint(c->mtd, jeb->offset, c->sector_size); 3428a0f5723SAnders Grafström if (retlen) { 343da320f05SJoe Perches pr_warn("Newly-erased block contained word 0x%lx at offset 0x%08tx\n", 344da320f05SJoe Perches *wordebuf, 345da320f05SJoe Perches jeb->offset + 346da320f05SJoe Perches c->sector_size-retlen * sizeof(*wordebuf)); 3478a0f5723SAnders Grafström return -EIO; 3488a0f5723SAnders Grafström } 349fab2c399SJoakim Tjernlund return 0; 350fab2c399SJoakim Tjernlund } 351fab2c399SJoakim Tjernlund do_flash_read: 3521da177e4SLinus Torvalds ebuf = kmalloc(PAGE_SIZE, GFP_KERNEL); 3531da177e4SLinus Torvalds if (!ebuf) { 354da320f05SJoe Perches pr_warn("Failed to allocate page buffer for verifying erase at 0x%08x. Refiling\n", 355da320f05SJoe Perches jeb->offset); 3565d157885SThomas Gleixner return -EAGAIN; 3575d157885SThomas Gleixner } 3581da177e4SLinus Torvalds 3599c261b33SJoe Perches jffs2_dbg(1, "Verifying erase at 0x%08x\n", jeb->offset); 3605d157885SThomas Gleixner 3615d157885SThomas Gleixner for (ofs = jeb->offset; ofs < jeb->offset + c->sector_size; ) { 3621da177e4SLinus Torvalds uint32_t readlen = min((uint32_t)PAGE_SIZE, jeb->offset + c->sector_size - ofs); 3631da177e4SLinus Torvalds int i; 3641da177e4SLinus Torvalds 3655d157885SThomas Gleixner *bad_offset = ofs; 3661da177e4SLinus Torvalds 367329ad399SArtem Bityutskiy ret = mtd_read(c->mtd, ofs, readlen, &retlen, ebuf); 3681da177e4SLinus Torvalds if (ret) { 369da320f05SJoe Perches pr_warn("Read of newly-erased block at 0x%08x failed: %d. Putting on bad_list\n", 370da320f05SJoe Perches ofs, ret); 3718a0f5723SAnders Grafström ret = -EIO; 3725d157885SThomas Gleixner goto fail; 3731da177e4SLinus Torvalds } 3741da177e4SLinus Torvalds if (retlen != readlen) { 375da320f05SJoe Perches pr_warn("Short read from newly-erased block at 0x%08x. Wanted %d, got %zd\n", 376da320f05SJoe Perches ofs, readlen, retlen); 3778a0f5723SAnders Grafström ret = -EIO; 3785d157885SThomas Gleixner goto fail; 3791da177e4SLinus Torvalds } 3801da177e4SLinus Torvalds for (i=0; i<readlen; i += sizeof(unsigned long)) { 3811da177e4SLinus Torvalds /* It's OK. We know it's properly aligned */ 3825d157885SThomas Gleixner unsigned long *datum = ebuf + i; 3835d157885SThomas Gleixner if (*datum + 1) { 3845d157885SThomas Gleixner *bad_offset += i; 385da320f05SJoe Perches pr_warn("Newly-erased block contained word 0x%lx at offset 0x%08x\n", 386da320f05SJoe Perches *datum, *bad_offset); 3878a0f5723SAnders Grafström ret = -EIO; 3885d157885SThomas Gleixner goto fail; 3891da177e4SLinus Torvalds } 3901da177e4SLinus Torvalds } 3911da177e4SLinus Torvalds ofs += readlen; 3921da177e4SLinus Torvalds cond_resched(); 3931da177e4SLinus Torvalds } 3945d157885SThomas Gleixner ret = 0; 3955d157885SThomas Gleixner fail: 3961da177e4SLinus Torvalds kfree(ebuf); 3975d157885SThomas Gleixner return ret; 3981da177e4SLinus Torvalds } 3991da177e4SLinus Torvalds 4005d157885SThomas Gleixner static void jffs2_mark_erased_block(struct jffs2_sb_info *c, struct jffs2_eraseblock *jeb) 4015d157885SThomas Gleixner { 4025d157885SThomas Gleixner size_t retlen; 4035d157885SThomas Gleixner int ret; 4043f649ab7SKees Cook uint32_t bad_offset; 4055d157885SThomas Gleixner 4065d157885SThomas Gleixner switch (jffs2_block_check_erase(c, jeb, &bad_offset)) { 4075d157885SThomas Gleixner case -EAGAIN: goto refile; 4085d157885SThomas Gleixner case -EIO: goto filebad; 4095d157885SThomas Gleixner } 4101da177e4SLinus Torvalds 4111da177e4SLinus Torvalds /* Write the erase complete marker */ 4129c261b33SJoe Perches jffs2_dbg(1, "Writing erased marker to block at 0x%08x\n", jeb->offset); 4135d157885SThomas Gleixner bad_offset = jeb->offset; 4145d157885SThomas Gleixner 4155d157885SThomas Gleixner /* Cleanmarker in oob area or no cleanmarker at all ? */ 4165d157885SThomas Gleixner if (jffs2_cleanmarker_oob(c) || c->cleanmarker_size == 0) { 4175d157885SThomas Gleixner 4181da177e4SLinus Torvalds if (jffs2_cleanmarker_oob(c)) { 4191da177e4SLinus Torvalds if (jffs2_write_nand_cleanmarker(c, jeb)) 4205d157885SThomas Gleixner goto filebad; 4215d157885SThomas Gleixner } 4221da177e4SLinus Torvalds } else { 4235d157885SThomas Gleixner 4241da177e4SLinus Torvalds struct kvec vecs[1]; 4251da177e4SLinus Torvalds struct jffs2_unknown_node marker = { 4261da177e4SLinus Torvalds .magic = cpu_to_je16(JFFS2_MAGIC_BITMASK), 4271da177e4SLinus Torvalds .nodetype = cpu_to_je16(JFFS2_NODETYPE_CLEANMARKER), 4281da177e4SLinus Torvalds .totlen = cpu_to_je32(c->cleanmarker_size) 4291da177e4SLinus Torvalds }; 4301da177e4SLinus Torvalds 431046b8b98SDavid Woodhouse jffs2_prealloc_raw_node_refs(c, jeb, 1); 4325d157885SThomas Gleixner 4331da177e4SLinus Torvalds marker.hdr_crc = cpu_to_je32(crc32(0, &marker, sizeof(struct jffs2_unknown_node)-4)); 4341da177e4SLinus Torvalds 4351da177e4SLinus Torvalds vecs[0].iov_base = (unsigned char *) ▮ 4361da177e4SLinus Torvalds vecs[0].iov_len = sizeof(marker); 4371da177e4SLinus Torvalds ret = jffs2_flash_direct_writev(c, vecs, 1, jeb->offset, &retlen); 4381da177e4SLinus Torvalds 4395d157885SThomas Gleixner if (ret || retlen != sizeof(marker)) { 4405d157885SThomas Gleixner if (ret) 441da320f05SJoe Perches pr_warn("Write clean marker to block at 0x%08x failed: %d\n", 4421da177e4SLinus Torvalds jeb->offset, ret); 4435d157885SThomas Gleixner else 444da320f05SJoe Perches pr_warn("Short write to newly-erased block at 0x%08x: Wanted %zd, got %zd\n", 4451da177e4SLinus Torvalds jeb->offset, sizeof(marker), retlen); 4465d157885SThomas Gleixner 4475d157885SThomas Gleixner goto filebad; 4481da177e4SLinus Torvalds } 449014b164eSDavid Woodhouse } 450f1f9671bSDavid Woodhouse /* Everything else got zeroed before the erase */ 451f1f9671bSDavid Woodhouse jeb->free_size = c->sector_size; 4521da177e4SLinus Torvalds 453ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 4541da177e4SLinus Torvalds spin_lock(&c->erase_completion_lock); 455014b164eSDavid Woodhouse 4561da177e4SLinus Torvalds c->erasing_size -= c->sector_size; 457014b164eSDavid Woodhouse c->free_size += c->sector_size; 458014b164eSDavid Woodhouse 459014b164eSDavid Woodhouse /* Account for cleanmarker now, if it's in-band */ 460014b164eSDavid Woodhouse if (c->cleanmarker_size && !jffs2_cleanmarker_oob(c)) 461014b164eSDavid Woodhouse jffs2_link_node_ref(c, jeb, jeb->offset | REF_NORMAL, c->cleanmarker_size, NULL); 4621da177e4SLinus Torvalds 463e2bc322bSDavid Woodhouse list_move_tail(&jeb->list, &c->free_list); 4641da177e4SLinus Torvalds c->nr_erasing_blocks--; 4651da177e4SLinus Torvalds c->nr_free_blocks++; 46685a62db6SDavid Woodhouse 46785a62db6SDavid Woodhouse jffs2_dbg_acct_sanity_check_nolock(c, jeb); 46885a62db6SDavid Woodhouse jffs2_dbg_acct_paranoia_check_nolock(c, jeb); 46985a62db6SDavid Woodhouse 4701da177e4SLinus Torvalds spin_unlock(&c->erase_completion_lock); 471ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 4721da177e4SLinus Torvalds wake_up(&c->erase_wait); 4735d157885SThomas Gleixner return; 4741da177e4SLinus Torvalds 4755d157885SThomas Gleixner filebad: 4765d157885SThomas Gleixner jffs2_erase_failed(c, jeb, bad_offset); 4775d157885SThomas Gleixner return; 4785d157885SThomas Gleixner 4795d157885SThomas Gleixner refile: 4805d157885SThomas Gleixner /* Stick it back on the list from whence it came and come back later */ 481ced22070SDavid Woodhouse mutex_lock(&c->erase_free_sem); 4825d157885SThomas Gleixner spin_lock(&c->erase_completion_lock); 483ae3b6ba0SDavid Woodhouse jffs2_garbage_collect_trigger(c); 484e2bc322bSDavid Woodhouse list_move(&jeb->list, &c->erase_complete_list); 4855d157885SThomas Gleixner spin_unlock(&c->erase_completion_lock); 486ced22070SDavid Woodhouse mutex_unlock(&c->erase_free_sem); 4875d157885SThomas Gleixner return; 4885d157885SThomas Gleixner } 489