sr_ioctl.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584
  1. // SPDX-License-Identifier: GPL-2.0
  2. #include <linux/kernel.h>
  3. #include <linux/mm.h>
  4. #include <linux/fs.h>
  5. #include <linux/errno.h>
  6. #include <linux/string.h>
  7. #include <linux/blkdev.h>
  8. #include <linux/module.h>
  9. #include <linux/blkpg.h>
  10. #include <linux/cdrom.h>
  11. #include <linux/delay.h>
  12. #include <linux/slab.h>
  13. #include <asm/io.h>
  14. #include <linux/uaccess.h>
  15. #include <scsi/scsi.h>
  16. #include <scsi/scsi_dbg.h>
  17. #include <scsi/scsi_device.h>
  18. #include <scsi/scsi_eh.h>
  19. #include <scsi/scsi_host.h>
  20. #include <scsi/scsi_ioctl.h>
  21. #include <scsi/scsi_cmnd.h>
  22. #include "sr.h"
  23. #if 0
  24. #define DEBUG
  25. #endif
  26. /* The sr_is_xa() seems to trigger firmware bugs with some drives :-(
  27. * It is off by default and can be turned on with this module parameter */
  28. static int xa_test = 0;
  29. module_param(xa_test, int, S_IRUGO | S_IWUSR);
  30. /* primitive to determine whether we need to have GFP_DMA set based on
  31. * the status of the unchecked_isa_dma flag in the host structure */
  32. #define SR_GFP_DMA(cd) (((cd)->device->host->unchecked_isa_dma) ? GFP_DMA : 0)
  33. static int sr_read_tochdr(struct cdrom_device_info *cdi,
  34. struct cdrom_tochdr *tochdr)
  35. {
  36. struct scsi_cd *cd = cdi->handle;
  37. struct packet_command cgc;
  38. int result;
  39. unsigned char *buffer;
  40. buffer = kmalloc(32, GFP_KERNEL | SR_GFP_DMA(cd));
  41. if (!buffer)
  42. return -ENOMEM;
  43. memset(&cgc, 0, sizeof(struct packet_command));
  44. cgc.timeout = IOCTL_TIMEOUT;
  45. cgc.cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
  46. cgc.cmd[8] = 12; /* LSB of length */
  47. cgc.buffer = buffer;
  48. cgc.buflen = 12;
  49. cgc.quiet = 1;
  50. cgc.data_direction = DMA_FROM_DEVICE;
  51. result = sr_do_ioctl(cd, &cgc);
  52. tochdr->cdth_trk0 = buffer[2];
  53. tochdr->cdth_trk1 = buffer[3];
  54. kfree(buffer);
  55. return result;
  56. }
  57. static int sr_read_tocentry(struct cdrom_device_info *cdi,
  58. struct cdrom_tocentry *tocentry)
  59. {
  60. struct scsi_cd *cd = cdi->handle;
  61. struct packet_command cgc;
  62. int result;
  63. unsigned char *buffer;
  64. buffer = kmalloc(32, GFP_KERNEL | SR_GFP_DMA(cd));
  65. if (!buffer)
  66. return -ENOMEM;
  67. memset(&cgc, 0, sizeof(struct packet_command));
  68. cgc.timeout = IOCTL_TIMEOUT;
  69. cgc.cmd[0] = GPCMD_READ_TOC_PMA_ATIP;
  70. cgc.cmd[1] |= (tocentry->cdte_format == CDROM_MSF) ? 0x02 : 0;
  71. cgc.cmd[6] = tocentry->cdte_track;
  72. cgc.cmd[8] = 12; /* LSB of length */
  73. cgc.buffer = buffer;
  74. cgc.buflen = 12;
  75. cgc.data_direction = DMA_FROM_DEVICE;
  76. result = sr_do_ioctl(cd, &cgc);
  77. tocentry->cdte_ctrl = buffer[5] & 0xf;
  78. tocentry->cdte_adr = buffer[5] >> 4;
  79. tocentry->cdte_datamode = (tocentry->cdte_ctrl & 0x04) ? 1 : 0;
  80. if (tocentry->cdte_format == CDROM_MSF) {
  81. tocentry->cdte_addr.msf.minute = buffer[9];
  82. tocentry->cdte_addr.msf.second = buffer[10];
  83. tocentry->cdte_addr.msf.frame = buffer[11];
  84. } else
  85. tocentry->cdte_addr.lba = (((((buffer[8] << 8) + buffer[9]) << 8)
  86. + buffer[10]) << 8) + buffer[11];
  87. kfree(buffer);
  88. return result;
  89. }
  90. #define IOCTL_RETRIES 3
  91. /* ATAPI drives don't have a SCMD_PLAYAUDIO_TI command. When these drives
  92. are emulating a SCSI device via the idescsi module, they need to have
  93. CDROMPLAYTRKIND commands translated into CDROMPLAYMSF commands for them */
  94. static int sr_fake_playtrkind(struct cdrom_device_info *cdi, struct cdrom_ti *ti)
  95. {
  96. struct cdrom_tocentry trk0_te, trk1_te;
  97. struct cdrom_tochdr tochdr;
  98. struct packet_command cgc;
  99. int ntracks, ret;
  100. ret = sr_read_tochdr(cdi, &tochdr);
  101. if (ret)
  102. return ret;
  103. ntracks = tochdr.cdth_trk1 - tochdr.cdth_trk0 + 1;
  104. if (ti->cdti_trk1 == ntracks)
  105. ti->cdti_trk1 = CDROM_LEADOUT;
  106. else if (ti->cdti_trk1 != CDROM_LEADOUT)
  107. ti->cdti_trk1 ++;
  108. trk0_te.cdte_track = ti->cdti_trk0;
  109. trk0_te.cdte_format = CDROM_MSF;
  110. trk1_te.cdte_track = ti->cdti_trk1;
  111. trk1_te.cdte_format = CDROM_MSF;
  112. ret = sr_read_tocentry(cdi, &trk0_te);
  113. if (ret)
  114. return ret;
  115. ret = sr_read_tocentry(cdi, &trk1_te);
  116. if (ret)
  117. return ret;
  118. memset(&cgc, 0, sizeof(struct packet_command));
  119. cgc.cmd[0] = GPCMD_PLAY_AUDIO_MSF;
  120. cgc.cmd[3] = trk0_te.cdte_addr.msf.minute;
  121. cgc.cmd[4] = trk0_te.cdte_addr.msf.second;
  122. cgc.cmd[5] = trk0_te.cdte_addr.msf.frame;
  123. cgc.cmd[6] = trk1_te.cdte_addr.msf.minute;
  124. cgc.cmd[7] = trk1_te.cdte_addr.msf.second;
  125. cgc.cmd[8] = trk1_te.cdte_addr.msf.frame;
  126. cgc.data_direction = DMA_NONE;
  127. cgc.timeout = IOCTL_TIMEOUT;
  128. return sr_do_ioctl(cdi->handle, &cgc);
  129. }
  130. static int sr_play_trkind(struct cdrom_device_info *cdi,
  131. struct cdrom_ti *ti)
  132. {
  133. struct scsi_cd *cd = cdi->handle;
  134. struct packet_command cgc;
  135. int result;
  136. memset(&cgc, 0, sizeof(struct packet_command));
  137. cgc.timeout = IOCTL_TIMEOUT;
  138. cgc.cmd[0] = GPCMD_PLAYAUDIO_TI;
  139. cgc.cmd[4] = ti->cdti_trk0;
  140. cgc.cmd[5] = ti->cdti_ind0;
  141. cgc.cmd[7] = ti->cdti_trk1;
  142. cgc.cmd[8] = ti->cdti_ind1;
  143. cgc.data_direction = DMA_NONE;
  144. result = sr_do_ioctl(cd, &cgc);
  145. if (result == -EDRIVE_CANT_DO_THIS)
  146. result = sr_fake_playtrkind(cdi, ti);
  147. return result;
  148. }
  149. /* We do our own retries because we want to know what the specific
  150. error code is. Normally the UNIT_ATTENTION code will automatically
  151. clear after one error */
  152. int sr_do_ioctl(Scsi_CD *cd, struct packet_command *cgc)
  153. {
  154. struct scsi_device *SDev;
  155. struct scsi_sense_hdr local_sshdr, *sshdr = &local_sshdr;
  156. int result, err = 0, retries = 0;
  157. SDev = cd->device;
  158. if (cgc->sshdr)
  159. sshdr = cgc->sshdr;
  160. retry:
  161. if (!scsi_block_when_processing_errors(SDev)) {
  162. err = -ENODEV;
  163. goto out;
  164. }
  165. result = scsi_execute(SDev, cgc->cmd, cgc->data_direction,
  166. cgc->buffer, cgc->buflen, NULL, sshdr,
  167. cgc->timeout, IOCTL_RETRIES, 0, 0, NULL);
  168. /* Minimal error checking. Ignore cases we know about, and report the rest. */
  169. if (driver_byte(result) != 0) {
  170. switch (sshdr->sense_key) {
  171. case UNIT_ATTENTION:
  172. SDev->changed = 1;
  173. if (!cgc->quiet)
  174. sr_printk(KERN_INFO, cd,
  175. "disc change detected.\n");
  176. if (retries++ < 10)
  177. goto retry;
  178. err = -ENOMEDIUM;
  179. break;
  180. case NOT_READY: /* This happens if there is no disc in drive */
  181. if (sshdr->asc == 0x04 &&
  182. sshdr->ascq == 0x01) {
  183. /* sense: Logical unit is in process of becoming ready */
  184. if (!cgc->quiet)
  185. sr_printk(KERN_INFO, cd,
  186. "CDROM not ready yet.\n");
  187. if (retries++ < 10) {
  188. /* sleep 2 sec and try again */
  189. ssleep(2);
  190. goto retry;
  191. } else {
  192. /* 20 secs are enough? */
  193. err = -ENOMEDIUM;
  194. break;
  195. }
  196. }
  197. if (!cgc->quiet)
  198. sr_printk(KERN_INFO, cd,
  199. "CDROM not ready. Make sure there "
  200. "is a disc in the drive.\n");
  201. err = -ENOMEDIUM;
  202. break;
  203. case ILLEGAL_REQUEST:
  204. err = -EIO;
  205. if (sshdr->asc == 0x20 &&
  206. sshdr->ascq == 0x00)
  207. /* sense: Invalid command operation code */
  208. err = -EDRIVE_CANT_DO_THIS;
  209. break;
  210. default:
  211. err = -EIO;
  212. }
  213. }
  214. /* Wake up a process waiting for device */
  215. out:
  216. cgc->stat = err;
  217. return err;
  218. }
  219. /* ---------------------------------------------------------------------- */
  220. /* interface to cdrom.c */
  221. int sr_tray_move(struct cdrom_device_info *cdi, int pos)
  222. {
  223. Scsi_CD *cd = cdi->handle;
  224. struct packet_command cgc;
  225. memset(&cgc, 0, sizeof(struct packet_command));
  226. cgc.cmd[0] = GPCMD_START_STOP_UNIT;
  227. cgc.cmd[4] = (pos == 0) ? 0x03 /* close */ : 0x02 /* eject */ ;
  228. cgc.data_direction = DMA_NONE;
  229. cgc.timeout = IOCTL_TIMEOUT;
  230. return sr_do_ioctl(cd, &cgc);
  231. }
  232. int sr_lock_door(struct cdrom_device_info *cdi, int lock)
  233. {
  234. Scsi_CD *cd = cdi->handle;
  235. return scsi_set_medium_removal(cd->device, lock ?
  236. SCSI_REMOVAL_PREVENT : SCSI_REMOVAL_ALLOW);
  237. }
  238. int sr_drive_status(struct cdrom_device_info *cdi, int slot)
  239. {
  240. struct scsi_cd *cd = cdi->handle;
  241. struct scsi_sense_hdr sshdr;
  242. struct media_event_desc med;
  243. if (CDSL_CURRENT != slot) {
  244. /* we have no changer support */
  245. return -EINVAL;
  246. }
  247. if (!scsi_test_unit_ready(cd->device, SR_TIMEOUT, MAX_RETRIES, &sshdr))
  248. return CDS_DISC_OK;
  249. /* SK/ASC/ASCQ of 2/4/1 means "unit is becoming ready" */
  250. if (scsi_sense_valid(&sshdr) && sshdr.sense_key == NOT_READY
  251. && sshdr.asc == 0x04 && sshdr.ascq == 0x01)
  252. return CDS_DRIVE_NOT_READY;
  253. if (!cdrom_get_media_event(cdi, &med)) {
  254. if (med.media_present)
  255. return CDS_DISC_OK;
  256. else if (med.door_open)
  257. return CDS_TRAY_OPEN;
  258. else
  259. return CDS_NO_DISC;
  260. }
  261. /*
  262. * SK/ASC/ASCQ of 2/4/2 means "initialization required"
  263. * Using CD_TRAY_OPEN results in an START_STOP_UNIT to close
  264. * the tray, which resolves the initialization requirement.
  265. */
  266. if (scsi_sense_valid(&sshdr) && sshdr.sense_key == NOT_READY
  267. && sshdr.asc == 0x04 && sshdr.ascq == 0x02)
  268. return CDS_TRAY_OPEN;
  269. /*
  270. * 0x04 is format in progress .. but there must be a disc present!
  271. */
  272. if (sshdr.sense_key == NOT_READY && sshdr.asc == 0x04)
  273. return CDS_DISC_OK;
  274. /*
  275. * If not using Mt Fuji extended media tray reports,
  276. * just return TRAY_OPEN since ATAPI doesn't provide
  277. * any other way to detect this...
  278. */
  279. if (scsi_sense_valid(&sshdr) &&
  280. /* 0x3a is medium not present */
  281. sshdr.asc == 0x3a)
  282. return CDS_NO_DISC;
  283. else
  284. return CDS_TRAY_OPEN;
  285. return CDS_DRIVE_NOT_READY;
  286. }
  287. int sr_disk_status(struct cdrom_device_info *cdi)
  288. {
  289. Scsi_CD *cd = cdi->handle;
  290. struct cdrom_tochdr toc_h;
  291. struct cdrom_tocentry toc_e;
  292. int i, rc, have_datatracks = 0;
  293. /* look for data tracks */
  294. rc = sr_read_tochdr(cdi, &toc_h);
  295. if (rc)
  296. return (rc == -ENOMEDIUM) ? CDS_NO_DISC : CDS_NO_INFO;
  297. for (i = toc_h.cdth_trk0; i <= toc_h.cdth_trk1; i++) {
  298. toc_e.cdte_track = i;
  299. toc_e.cdte_format = CDROM_LBA;
  300. if (sr_read_tocentry(cdi, &toc_e))
  301. return CDS_NO_INFO;
  302. if (toc_e.cdte_ctrl & CDROM_DATA_TRACK) {
  303. have_datatracks = 1;
  304. break;
  305. }
  306. }
  307. if (!have_datatracks)
  308. return CDS_AUDIO;
  309. if (cd->xa_flag)
  310. return CDS_XA_2_1;
  311. else
  312. return CDS_DATA_1;
  313. }
  314. int sr_get_last_session(struct cdrom_device_info *cdi,
  315. struct cdrom_multisession *ms_info)
  316. {
  317. Scsi_CD *cd = cdi->handle;
  318. ms_info->addr.lba = cd->ms_offset;
  319. ms_info->xa_flag = cd->xa_flag || cd->ms_offset > 0;
  320. return 0;
  321. }
  322. int sr_get_mcn(struct cdrom_device_info *cdi, struct cdrom_mcn *mcn)
  323. {
  324. Scsi_CD *cd = cdi->handle;
  325. struct packet_command cgc;
  326. char *buffer = kmalloc(32, GFP_KERNEL | SR_GFP_DMA(cd));
  327. int result;
  328. if (!buffer)
  329. return -ENOMEM;
  330. memset(&cgc, 0, sizeof(struct packet_command));
  331. cgc.cmd[0] = GPCMD_READ_SUBCHANNEL;
  332. cgc.cmd[2] = 0x40; /* I do want the subchannel info */
  333. cgc.cmd[3] = 0x02; /* Give me medium catalog number info */
  334. cgc.cmd[8] = 24;
  335. cgc.buffer = buffer;
  336. cgc.buflen = 24;
  337. cgc.data_direction = DMA_FROM_DEVICE;
  338. cgc.timeout = IOCTL_TIMEOUT;
  339. result = sr_do_ioctl(cd, &cgc);
  340. memcpy(mcn->medium_catalog_number, buffer + 9, 13);
  341. mcn->medium_catalog_number[13] = 0;
  342. kfree(buffer);
  343. return result;
  344. }
  345. int sr_reset(struct cdrom_device_info *cdi)
  346. {
  347. return 0;
  348. }
  349. int sr_select_speed(struct cdrom_device_info *cdi, int speed)
  350. {
  351. Scsi_CD *cd = cdi->handle;
  352. struct packet_command cgc;
  353. if (speed == 0)
  354. speed = 0xffff; /* set to max */
  355. else
  356. speed *= 177; /* Nx to kbyte/s */
  357. memset(&cgc, 0, sizeof(struct packet_command));
  358. cgc.cmd[0] = GPCMD_SET_SPEED; /* SET CD SPEED */
  359. cgc.cmd[2] = (speed >> 8) & 0xff; /* MSB for speed (in kbytes/sec) */
  360. cgc.cmd[3] = speed & 0xff; /* LSB */
  361. cgc.data_direction = DMA_NONE;
  362. cgc.timeout = IOCTL_TIMEOUT;
  363. if (sr_do_ioctl(cd, &cgc))
  364. return -EIO;
  365. return 0;
  366. }
  367. /* ----------------------------------------------------------------------- */
  368. /* this is called by the generic cdrom driver. arg is a _kernel_ pointer, */
  369. /* because the generic cdrom driver does the user access stuff for us. */
  370. /* only cdromreadtochdr and cdromreadtocentry are left - for use with the */
  371. /* sr_disk_status interface for the generic cdrom driver. */
  372. int sr_audio_ioctl(struct cdrom_device_info *cdi, unsigned int cmd, void *arg)
  373. {
  374. switch (cmd) {
  375. case CDROMREADTOCHDR:
  376. return sr_read_tochdr(cdi, arg);
  377. case CDROMREADTOCENTRY:
  378. return sr_read_tocentry(cdi, arg);
  379. case CDROMPLAYTRKIND:
  380. return sr_play_trkind(cdi, arg);
  381. default:
  382. return -EINVAL;
  383. }
  384. }
  385. /* -----------------------------------------------------------------------
  386. * a function to read all sorts of funny cdrom sectors using the READ_CD
  387. * scsi-3 mmc command
  388. *
  389. * lba: linear block address
  390. * format: 0 = data (anything)
  391. * 1 = audio
  392. * 2 = data (mode 1)
  393. * 3 = data (mode 2)
  394. * 4 = data (mode 2 form1)
  395. * 5 = data (mode 2 form2)
  396. * blksize: 2048 | 2336 | 2340 | 2352
  397. */
  398. static int sr_read_cd(Scsi_CD *cd, unsigned char *dest, int lba, int format, int blksize)
  399. {
  400. struct packet_command cgc;
  401. #ifdef DEBUG
  402. sr_printk(KERN_INFO, cd, "sr_read_cd lba=%d format=%d blksize=%d\n",
  403. lba, format, blksize);
  404. #endif
  405. memset(&cgc, 0, sizeof(struct packet_command));
  406. cgc.cmd[0] = GPCMD_READ_CD; /* READ_CD */
  407. cgc.cmd[1] = ((format & 7) << 2);
  408. cgc.cmd[2] = (unsigned char) (lba >> 24) & 0xff;
  409. cgc.cmd[3] = (unsigned char) (lba >> 16) & 0xff;
  410. cgc.cmd[4] = (unsigned char) (lba >> 8) & 0xff;
  411. cgc.cmd[5] = (unsigned char) lba & 0xff;
  412. cgc.cmd[8] = 1;
  413. switch (blksize) {
  414. case 2336:
  415. cgc.cmd[9] = 0x58;
  416. break;
  417. case 2340:
  418. cgc.cmd[9] = 0x78;
  419. break;
  420. case 2352:
  421. cgc.cmd[9] = 0xf8;
  422. break;
  423. default:
  424. cgc.cmd[9] = 0x10;
  425. break;
  426. }
  427. cgc.buffer = dest;
  428. cgc.buflen = blksize;
  429. cgc.data_direction = DMA_FROM_DEVICE;
  430. cgc.timeout = IOCTL_TIMEOUT;
  431. return sr_do_ioctl(cd, &cgc);
  432. }
  433. /*
  434. * read sectors with blocksizes other than 2048
  435. */
  436. static int sr_read_sector(Scsi_CD *cd, int lba, int blksize, unsigned char *dest)
  437. {
  438. struct packet_command cgc;
  439. int rc;
  440. /* we try the READ CD command first... */
  441. if (cd->readcd_known) {
  442. rc = sr_read_cd(cd, dest, lba, 0, blksize);
  443. if (-EDRIVE_CANT_DO_THIS != rc)
  444. return rc;
  445. cd->readcd_known = 0;
  446. sr_printk(KERN_INFO, cd,
  447. "CDROM does'nt support READ CD (0xbe) command\n");
  448. /* fall & retry the other way */
  449. }
  450. /* ... if this fails, we switch the blocksize using MODE SELECT */
  451. if (blksize != cd->device->sector_size) {
  452. if (0 != (rc = sr_set_blocklength(cd, blksize)))
  453. return rc;
  454. }
  455. #ifdef DEBUG
  456. sr_printk(KERN_INFO, cd, "sr_read_sector lba=%d blksize=%d\n",
  457. lba, blksize);
  458. #endif
  459. memset(&cgc, 0, sizeof(struct packet_command));
  460. cgc.cmd[0] = GPCMD_READ_10;
  461. cgc.cmd[2] = (unsigned char) (lba >> 24) & 0xff;
  462. cgc.cmd[3] = (unsigned char) (lba >> 16) & 0xff;
  463. cgc.cmd[4] = (unsigned char) (lba >> 8) & 0xff;
  464. cgc.cmd[5] = (unsigned char) lba & 0xff;
  465. cgc.cmd[8] = 1;
  466. cgc.buffer = dest;
  467. cgc.buflen = blksize;
  468. cgc.data_direction = DMA_FROM_DEVICE;
  469. cgc.timeout = IOCTL_TIMEOUT;
  470. rc = sr_do_ioctl(cd, &cgc);
  471. return rc;
  472. }
  473. /*
  474. * read a sector in raw mode to check the sector format
  475. * ret: 1 == mode2 (XA), 0 == mode1, <0 == error
  476. */
  477. int sr_is_xa(Scsi_CD *cd)
  478. {
  479. unsigned char *raw_sector;
  480. int is_xa;
  481. if (!xa_test)
  482. return 0;
  483. raw_sector = kmalloc(2048, GFP_KERNEL | SR_GFP_DMA(cd));
  484. if (!raw_sector)
  485. return -ENOMEM;
  486. if (0 == sr_read_sector(cd, cd->ms_offset + 16,
  487. CD_FRAMESIZE_RAW1, raw_sector)) {
  488. is_xa = (raw_sector[3] == 0x02) ? 1 : 0;
  489. } else {
  490. /* read a raw sector failed for some reason. */
  491. is_xa = -1;
  492. }
  493. kfree(raw_sector);
  494. #ifdef DEBUG
  495. sr_printk(KERN_INFO, cd, "sr_is_xa: %d\n", is_xa);
  496. #endif
  497. return is_xa;
  498. }