Loading...
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Driver for SanDisk SDDR-09 SmartMedia reader
4 *
5 * (c) 2000, 2001 Robert Baruch (autophile@starband.net)
6 * (c) 2002 Andries Brouwer (aeb@cwi.nl)
7 * Developed with the assistance of:
8 * (c) 2002 Alan Stern <stern@rowland.org>
9 *
10 * The SanDisk SDDR-09 SmartMedia reader uses the Shuttle EUSB-01 chip.
11 * This chip is a programmable USB controller. In the SDDR-09, it has
12 * been programmed to obey a certain limited set of SCSI commands.
13 * This driver translates the "real" SCSI commands to the SDDR-09 SCSI
14 * commands.
15 */
16
17/*
18 * Known vendor commands: 12 bytes, first byte is opcode
19 *
20 * E7: read scatter gather
21 * E8: read
22 * E9: write
23 * EA: erase
24 * EB: reset
25 * EC: read status
26 * ED: read ID
27 * EE: write CIS (?)
28 * EF: compute checksum (?)
29 */
30
31#include <linux/errno.h>
32#include <linux/module.h>
33#include <linux/slab.h>
34
35#include <scsi/scsi.h>
36#include <scsi/scsi_cmnd.h>
37#include <scsi/scsi_device.h>
38
39#include "usb.h"
40#include "transport.h"
41#include "protocol.h"
42#include "debug.h"
43#include "scsiglue.h"
44
45#define DRV_NAME "ums-sddr09"
46
47MODULE_DESCRIPTION("Driver for SanDisk SDDR-09 SmartMedia reader");
48MODULE_AUTHOR("Andries Brouwer <aeb@cwi.nl>, Robert Baruch <autophile@starband.net>");
49MODULE_LICENSE("GPL");
50MODULE_IMPORT_NS("USB_STORAGE");
51
52static int usb_stor_sddr09_dpcm_init(struct us_data *us);
53static int sddr09_transport(struct scsi_cmnd *srb, struct us_data *us);
54static int usb_stor_sddr09_init(struct us_data *us);
55
56
57/*
58 * The table of devices
59 */
60#define UNUSUAL_DEV(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax, \
61 vendorName, productName, useProtocol, useTransport, \
62 initFunction, flags) \
63{ USB_DEVICE_VER(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax), \
64 .driver_info = (flags) }
65
66static const struct usb_device_id sddr09_usb_ids[] = {
67# include "unusual_sddr09.h"
68 { } /* Terminating entry */
69};
70MODULE_DEVICE_TABLE(usb, sddr09_usb_ids);
71
72#undef UNUSUAL_DEV
73
74/*
75 * The flags table
76 */
77#define UNUSUAL_DEV(idVendor, idProduct, bcdDeviceMin, bcdDeviceMax, \
78 vendor_name, product_name, use_protocol, use_transport, \
79 init_function, Flags) \
80{ \
81 .vendorName = vendor_name, \
82 .productName = product_name, \
83 .useProtocol = use_protocol, \
84 .useTransport = use_transport, \
85 .initFunction = init_function, \
86}
87
88static const struct us_unusual_dev sddr09_unusual_dev_list[] = {
89# include "unusual_sddr09.h"
90 { } /* Terminating entry */
91};
92
93#undef UNUSUAL_DEV
94
95
96#define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) )
97#define LSB_of(s) ((s)&0xFF)
98#define MSB_of(s) ((s)>>8)
99
100/*
101 * First some stuff that does not belong here:
102 * data on SmartMedia and other cards, completely
103 * unrelated to this driver.
104 * Similar stuff occurs in <linux/mtd/nand_ids.h>.
105 */
106
107struct nand_flash_dev {
108 int model_id;
109 int chipshift; /* 1<<cs bytes total capacity */
110 char pageshift; /* 1<<ps bytes in a page */
111 char blockshift; /* 1<<bs pages in an erase block */
112 char zoneshift; /* 1<<zs blocks in a zone */
113 /* # of logical blocks is 125/128 of this */
114 char pageadrlen; /* length of an address in bytes - 1 */
115};
116
117/*
118 * NAND Flash Manufacturer ID Codes
119 */
120#define NAND_MFR_AMD 0x01
121#define NAND_MFR_NATSEMI 0x8f
122#define NAND_MFR_TOSHIBA 0x98
123#define NAND_MFR_SAMSUNG 0xec
124
125static inline char *nand_flash_manufacturer(int manuf_id) {
126 switch(manuf_id) {
127 case NAND_MFR_AMD:
128 return "AMD";
129 case NAND_MFR_NATSEMI:
130 return "NATSEMI";
131 case NAND_MFR_TOSHIBA:
132 return "Toshiba";
133 case NAND_MFR_SAMSUNG:
134 return "Samsung";
135 default:
136 return "unknown";
137 }
138}
139
140/*
141 * It looks like it is unnecessary to attach manufacturer to the
142 * remaining data: SSFDC prescribes manufacturer-independent id codes.
143 *
144 * 256 MB NAND flash has a 5-byte ID with 2nd byte 0xaa, 0xba, 0xca or 0xda.
145 */
146
147static struct nand_flash_dev nand_flash_ids[] = {
148 /* NAND flash */
149 { 0x6e, 20, 8, 4, 8, 2}, /* 1 MB */
150 { 0xe8, 20, 8, 4, 8, 2}, /* 1 MB */
151 { 0xec, 20, 8, 4, 8, 2}, /* 1 MB */
152 { 0x64, 21, 8, 4, 9, 2}, /* 2 MB */
153 { 0xea, 21, 8, 4, 9, 2}, /* 2 MB */
154 { 0x6b, 22, 9, 4, 9, 2}, /* 4 MB */
155 { 0xe3, 22, 9, 4, 9, 2}, /* 4 MB */
156 { 0xe5, 22, 9, 4, 9, 2}, /* 4 MB */
157 { 0xe6, 23, 9, 4, 10, 2}, /* 8 MB */
158 { 0x73, 24, 9, 5, 10, 2}, /* 16 MB */
159 { 0x75, 25, 9, 5, 10, 2}, /* 32 MB */
160 { 0x76, 26, 9, 5, 10, 3}, /* 64 MB */
161 { 0x79, 27, 9, 5, 10, 3}, /* 128 MB */
162
163 /* MASK ROM */
164 { 0x5d, 21, 9, 4, 8, 2}, /* 2 MB */
165 { 0xd5, 22, 9, 4, 9, 2}, /* 4 MB */
166 { 0xd6, 23, 9, 4, 10, 2}, /* 8 MB */
167 { 0x57, 24, 9, 4, 11, 2}, /* 16 MB */
168 { 0x58, 25, 9, 4, 12, 2}, /* 32 MB */
169 { 0,}
170};
171
172static struct nand_flash_dev *
173nand_find_id(unsigned char id) {
174 int i;
175
176 for (i = 0; i < ARRAY_SIZE(nand_flash_ids); i++)
177 if (nand_flash_ids[i].model_id == id)
178 return &(nand_flash_ids[i]);
179 return NULL;
180}
181
182/*
183 * ECC computation.
184 */
185static unsigned char parity[256];
186static unsigned char ecc2[256];
187
188static void nand_init_ecc(void) {
189 int i, j, a;
190
191 parity[0] = 0;
192 for (i = 1; i < 256; i++)
193 parity[i] = (parity[i&(i-1)] ^ 1);
194
195 for (i = 0; i < 256; i++) {
196 a = 0;
197 for (j = 0; j < 8; j++) {
198 if (i & (1<<j)) {
199 if ((j & 1) == 0)
200 a ^= 0x04;
201 if ((j & 2) == 0)
202 a ^= 0x10;
203 if ((j & 4) == 0)
204 a ^= 0x40;
205 }
206 }
207 ecc2[i] = ~(a ^ (a<<1) ^ (parity[i] ? 0xa8 : 0));
208 }
209}
210
211/* compute 3-byte ecc on 256 bytes */
212static void nand_compute_ecc(unsigned char *data, unsigned char *ecc) {
213 int i, j, a;
214 unsigned char par = 0, bit, bits[8] = {0};
215
216 /* collect 16 checksum bits */
217 for (i = 0; i < 256; i++) {
218 par ^= data[i];
219 bit = parity[data[i]];
220 for (j = 0; j < 8; j++)
221 if ((i & (1<<j)) == 0)
222 bits[j] ^= bit;
223 }
224
225 /* put 4+4+4 = 12 bits in the ecc */
226 a = (bits[3] << 6) + (bits[2] << 4) + (bits[1] << 2) + bits[0];
227 ecc[0] = ~(a ^ (a<<1) ^ (parity[par] ? 0xaa : 0));
228
229 a = (bits[7] << 6) + (bits[6] << 4) + (bits[5] << 2) + bits[4];
230 ecc[1] = ~(a ^ (a<<1) ^ (parity[par] ? 0xaa : 0));
231
232 ecc[2] = ecc2[par];
233}
234
235static int nand_compare_ecc(unsigned char *data, unsigned char *ecc) {
236 return (data[0] == ecc[0] && data[1] == ecc[1] && data[2] == ecc[2]);
237}
238
239static void nand_store_ecc(unsigned char *data, unsigned char *ecc) {
240 memcpy(data, ecc, 3);
241}
242
243/*
244 * The actual driver starts here.
245 */
246
247struct sddr09_card_info {
248 unsigned long capacity; /* Size of card in bytes */
249 int pagesize; /* Size of page in bytes */
250 int pageshift; /* log2 of pagesize */
251 int blocksize; /* Size of block in pages */
252 int blockshift; /* log2 of blocksize */
253 int blockmask; /* 2^blockshift - 1 */
254 int *lba_to_pba; /* logical to physical map */
255 int *pba_to_lba; /* physical to logical map */
256 int lbact; /* number of available pages */
257 int flags;
258#define SDDR09_WP 1 /* write protected */
259};
260
261/*
262 * On my 16MB card, control blocks have size 64 (16 real control bytes,
263 * and 48 junk bytes). In reality of course the card uses 16 control bytes,
264 * so the reader makes up the remaining 48. Don't know whether these numbers
265 * depend on the card. For now a constant.
266 */
267#define CONTROL_SHIFT 6
268
269/*
270 * On my Combo CF/SM reader, the SM reader has LUN 1.
271 * (and things fail with LUN 0).
272 * It seems LUN is irrelevant for others.
273 */
274#define LUN 1
275#define LUNBITS (LUN << 5)
276
277/*
278 * LBA and PBA are unsigned ints. Special values.
279 */
280#define UNDEF 0xffffffff
281#define SPARE 0xfffffffe
282#define UNUSABLE 0xfffffffd
283
284static const int erase_bad_lba_entries = 0;
285
286/* send vendor interface command (0x41) */
287/* called for requests 0, 1, 8 */
288static int
289sddr09_send_command(struct us_data *us,
290 unsigned char request,
291 unsigned char direction,
292 unsigned char *xfer_data,
293 unsigned int xfer_len) {
294 unsigned int pipe;
295 unsigned char requesttype = (0x41 | direction);
296 int rc;
297
298 // Get the receive or send control pipe number
299
300 if (direction == USB_DIR_IN)
301 pipe = us->recv_ctrl_pipe;
302 else
303 pipe = us->send_ctrl_pipe;
304
305 rc = usb_stor_ctrl_transfer(us, pipe, request, requesttype,
306 0, 0, xfer_data, xfer_len);
307 switch (rc) {
308 case USB_STOR_XFER_GOOD: return 0;
309 case USB_STOR_XFER_STALLED: return -EPIPE;
310 default: return -EIO;
311 }
312}
313
314static int
315sddr09_send_scsi_command(struct us_data *us,
316 unsigned char *command,
317 unsigned int command_len) {
318 return sddr09_send_command(us, 0, USB_DIR_OUT, command, command_len);
319}
320
321#if 0
322/*
323 * Test Unit Ready Command: 12 bytes.
324 * byte 0: opcode: 00
325 */
326static int
327sddr09_test_unit_ready(struct us_data *us) {
328 unsigned char *command = us->iobuf;
329 int result;
330
331 memset(command, 0, 6);
332 command[1] = LUNBITS;
333
334 result = sddr09_send_scsi_command(us, command, 6);
335
336 usb_stor_dbg(us, "sddr09_test_unit_ready returns %d\n", result);
337
338 return result;
339}
340#endif
341
342/*
343 * Request Sense Command: 12 bytes.
344 * byte 0: opcode: 03
345 * byte 4: data length
346 */
347static int
348sddr09_request_sense(struct us_data *us, unsigned char *sensebuf, int buflen) {
349 unsigned char *command = us->iobuf;
350 int result;
351
352 memset(command, 0, 12);
353 command[0] = 0x03;
354 command[1] = LUNBITS;
355 command[4] = buflen;
356
357 result = sddr09_send_scsi_command(us, command, 12);
358 if (result)
359 return result;
360
361 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
362 sensebuf, buflen, NULL);
363 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
364}
365
366/*
367 * Read Command: 12 bytes.
368 * byte 0: opcode: E8
369 * byte 1: last two bits: 00: read data, 01: read blockwise control,
370 * 10: read both, 11: read pagewise control.
371 * It turns out we need values 20, 21, 22, 23 here (LUN 1).
372 * bytes 2-5: address (interpretation depends on byte 1, see below)
373 * bytes 10-11: count (idem)
374 *
375 * A page has 512 data bytes and 64 control bytes (16 control and 48 junk).
376 * A read data command gets data in 512-byte pages.
377 * A read control command gets control in 64-byte chunks.
378 * A read both command gets data+control in 576-byte chunks.
379 *
380 * Blocks are groups of 32 pages, and read blockwise control jumps to the
381 * next block, while read pagewise control jumps to the next page after
382 * reading a group of 64 control bytes.
383 * [Here 512 = 1<<pageshift, 32 = 1<<blockshift, 64 is constant?]
384 *
385 * (1 MB and 2 MB cards are a bit different, but I have only a 16 MB card.)
386 */
387
388static int
389sddr09_readX(struct us_data *us, int x, unsigned long fromaddress,
390 int nr_of_pages, int bulklen, unsigned char *buf,
391 int use_sg) {
392
393 unsigned char *command = us->iobuf;
394 int result;
395
396 command[0] = 0xE8;
397 command[1] = LUNBITS | x;
398 command[2] = MSB_of(fromaddress>>16);
399 command[3] = LSB_of(fromaddress>>16);
400 command[4] = MSB_of(fromaddress & 0xFFFF);
401 command[5] = LSB_of(fromaddress & 0xFFFF);
402 command[6] = 0;
403 command[7] = 0;
404 command[8] = 0;
405 command[9] = 0;
406 command[10] = MSB_of(nr_of_pages);
407 command[11] = LSB_of(nr_of_pages);
408
409 result = sddr09_send_scsi_command(us, command, 12);
410
411 if (result) {
412 usb_stor_dbg(us, "Result for send_control in sddr09_read2%d %d\n",
413 x, result);
414 return result;
415 }
416
417 result = usb_stor_bulk_transfer_sg(us, us->recv_bulk_pipe,
418 buf, bulklen, use_sg, NULL);
419
420 if (result != USB_STOR_XFER_GOOD) {
421 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_read2%d %d\n",
422 x, result);
423 return -EIO;
424 }
425 return 0;
426}
427
428/*
429 * Read Data
430 *
431 * fromaddress counts data shorts:
432 * increasing it by 256 shifts the bytestream by 512 bytes;
433 * the last 8 bits are ignored.
434 *
435 * nr_of_pages counts pages of size (1 << pageshift).
436 */
437static int
438sddr09_read20(struct us_data *us, unsigned long fromaddress,
439 int nr_of_pages, int pageshift, unsigned char *buf, int use_sg) {
440 int bulklen = nr_of_pages << pageshift;
441
442 /* The last 8 bits of fromaddress are ignored. */
443 return sddr09_readX(us, 0, fromaddress, nr_of_pages, bulklen,
444 buf, use_sg);
445}
446
447/*
448 * Read Blockwise Control
449 *
450 * fromaddress gives the starting position (as in read data;
451 * the last 8 bits are ignored); increasing it by 32*256 shifts
452 * the output stream by 64 bytes.
453 *
454 * count counts control groups of size (1 << controlshift).
455 * For me, controlshift = 6. Is this constant?
456 *
457 * After getting one control group, jump to the next block
458 * (fromaddress += 8192).
459 */
460static int
461sddr09_read21(struct us_data *us, unsigned long fromaddress,
462 int count, int controlshift, unsigned char *buf, int use_sg) {
463
464 int bulklen = (count << controlshift);
465 return sddr09_readX(us, 1, fromaddress, count, bulklen,
466 buf, use_sg);
467}
468
469/*
470 * Read both Data and Control
471 *
472 * fromaddress counts data shorts, ignoring control:
473 * increasing it by 256 shifts the bytestream by 576 = 512+64 bytes;
474 * the last 8 bits are ignored.
475 *
476 * nr_of_pages counts pages of size (1 << pageshift) + (1 << controlshift).
477 */
478static int
479sddr09_read22(struct us_data *us, unsigned long fromaddress,
480 int nr_of_pages, int pageshift, unsigned char *buf, int use_sg) {
481
482 int bulklen = (nr_of_pages << pageshift) + (nr_of_pages << CONTROL_SHIFT);
483 usb_stor_dbg(us, "reading %d pages, %d bytes\n", nr_of_pages, bulklen);
484 return sddr09_readX(us, 2, fromaddress, nr_of_pages, bulklen,
485 buf, use_sg);
486}
487
488#if 0
489/*
490 * Read Pagewise Control
491 *
492 * fromaddress gives the starting position (as in read data;
493 * the last 8 bits are ignored); increasing it by 256 shifts
494 * the output stream by 64 bytes.
495 *
496 * count counts control groups of size (1 << controlshift).
497 * For me, controlshift = 6. Is this constant?
498 *
499 * After getting one control group, jump to the next page
500 * (fromaddress += 256).
501 */
502static int
503sddr09_read23(struct us_data *us, unsigned long fromaddress,
504 int count, int controlshift, unsigned char *buf, int use_sg) {
505
506 int bulklen = (count << controlshift);
507 return sddr09_readX(us, 3, fromaddress, count, bulklen,
508 buf, use_sg);
509}
510#endif
511
512/*
513 * Erase Command: 12 bytes.
514 * byte 0: opcode: EA
515 * bytes 6-9: erase address (big-endian, counting shorts, sector aligned).
516 *
517 * Always precisely one block is erased; bytes 2-5 and 10-11 are ignored.
518 * The byte address being erased is 2*Eaddress.
519 * The CIS cannot be erased.
520 */
521static int
522sddr09_erase(struct us_data *us, unsigned long Eaddress) {
523 unsigned char *command = us->iobuf;
524 int result;
525
526 usb_stor_dbg(us, "erase address %lu\n", Eaddress);
527
528 memset(command, 0, 12);
529 command[0] = 0xEA;
530 command[1] = LUNBITS;
531 command[6] = MSB_of(Eaddress>>16);
532 command[7] = LSB_of(Eaddress>>16);
533 command[8] = MSB_of(Eaddress & 0xFFFF);
534 command[9] = LSB_of(Eaddress & 0xFFFF);
535
536 result = sddr09_send_scsi_command(us, command, 12);
537
538 if (result)
539 usb_stor_dbg(us, "Result for send_control in sddr09_erase %d\n",
540 result);
541
542 return result;
543}
544
545/*
546 * Write CIS Command: 12 bytes.
547 * byte 0: opcode: EE
548 * bytes 2-5: write address in shorts
549 * bytes 10-11: sector count
550 *
551 * This writes at the indicated address. Don't know how it differs
552 * from E9. Maybe it does not erase? However, it will also write to
553 * the CIS.
554 *
555 * When two such commands on the same page follow each other directly,
556 * the second one is not done.
557 */
558
559/*
560 * Write Command: 12 bytes.
561 * byte 0: opcode: E9
562 * bytes 2-5: write address (big-endian, counting shorts, sector aligned).
563 * bytes 6-9: erase address (big-endian, counting shorts, sector aligned).
564 * bytes 10-11: sector count (big-endian, in 512-byte sectors).
565 *
566 * If write address equals erase address, the erase is done first,
567 * otherwise the write is done first. When erase address equals zero
568 * no erase is done?
569 */
570static int
571sddr09_writeX(struct us_data *us,
572 unsigned long Waddress, unsigned long Eaddress,
573 int nr_of_pages, int bulklen, unsigned char *buf, int use_sg) {
574
575 unsigned char *command = us->iobuf;
576 int result;
577
578 command[0] = 0xE9;
579 command[1] = LUNBITS;
580
581 command[2] = MSB_of(Waddress>>16);
582 command[3] = LSB_of(Waddress>>16);
583 command[4] = MSB_of(Waddress & 0xFFFF);
584 command[5] = LSB_of(Waddress & 0xFFFF);
585
586 command[6] = MSB_of(Eaddress>>16);
587 command[7] = LSB_of(Eaddress>>16);
588 command[8] = MSB_of(Eaddress & 0xFFFF);
589 command[9] = LSB_of(Eaddress & 0xFFFF);
590
591 command[10] = MSB_of(nr_of_pages);
592 command[11] = LSB_of(nr_of_pages);
593
594 result = sddr09_send_scsi_command(us, command, 12);
595
596 if (result) {
597 usb_stor_dbg(us, "Result for send_control in sddr09_writeX %d\n",
598 result);
599 return result;
600 }
601
602 result = usb_stor_bulk_transfer_sg(us, us->send_bulk_pipe,
603 buf, bulklen, use_sg, NULL);
604
605 if (result != USB_STOR_XFER_GOOD) {
606 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_writeX %d\n",
607 result);
608 return -EIO;
609 }
610 return 0;
611}
612
613/* erase address, write same address */
614static int
615sddr09_write_inplace(struct us_data *us, unsigned long address,
616 int nr_of_pages, int pageshift, unsigned char *buf,
617 int use_sg) {
618 int bulklen = (nr_of_pages << pageshift) + (nr_of_pages << CONTROL_SHIFT);
619 return sddr09_writeX(us, address, address, nr_of_pages, bulklen,
620 buf, use_sg);
621}
622
623#if 0
624/*
625 * Read Scatter Gather Command: 3+4n bytes.
626 * byte 0: opcode E7
627 * byte 2: n
628 * bytes 4i-1,4i,4i+1: page address
629 * byte 4i+2: page count
630 * (i=1..n)
631 *
632 * This reads several pages from the card to a single memory buffer.
633 * The last two bits of byte 1 have the same meaning as for E8.
634 */
635static int
636sddr09_read_sg_test_only(struct us_data *us) {
637 unsigned char *command = us->iobuf;
638 int result, bulklen, nsg, ct;
639 unsigned char *buf;
640 unsigned long address;
641
642 nsg = bulklen = 0;
643 command[0] = 0xE7;
644 command[1] = LUNBITS;
645 command[2] = 0;
646 address = 040000; ct = 1;
647 nsg++;
648 bulklen += (ct << 9);
649 command[4*nsg+2] = ct;
650 command[4*nsg+1] = ((address >> 9) & 0xFF);
651 command[4*nsg+0] = ((address >> 17) & 0xFF);
652 command[4*nsg-1] = ((address >> 25) & 0xFF);
653
654 address = 0340000; ct = 1;
655 nsg++;
656 bulklen += (ct << 9);
657 command[4*nsg+2] = ct;
658 command[4*nsg+1] = ((address >> 9) & 0xFF);
659 command[4*nsg+0] = ((address >> 17) & 0xFF);
660 command[4*nsg-1] = ((address >> 25) & 0xFF);
661
662 address = 01000000; ct = 2;
663 nsg++;
664 bulklen += (ct << 9);
665 command[4*nsg+2] = ct;
666 command[4*nsg+1] = ((address >> 9) & 0xFF);
667 command[4*nsg+0] = ((address >> 17) & 0xFF);
668 command[4*nsg-1] = ((address >> 25) & 0xFF);
669
670 command[2] = nsg;
671
672 result = sddr09_send_scsi_command(us, command, 4*nsg+3);
673
674 if (result) {
675 usb_stor_dbg(us, "Result for send_control in sddr09_read_sg %d\n",
676 result);
677 return result;
678 }
679
680 buf = kmalloc(bulklen, GFP_NOIO);
681 if (!buf)
682 return -ENOMEM;
683
684 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
685 buf, bulklen, NULL);
686 kfree(buf);
687 if (result != USB_STOR_XFER_GOOD) {
688 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_read_sg %d\n",
689 result);
690 return -EIO;
691 }
692
693 return 0;
694}
695#endif
696
697/*
698 * Read Status Command: 12 bytes.
699 * byte 0: opcode: EC
700 *
701 * Returns 64 bytes, all zero except for the first.
702 * bit 0: 1: Error
703 * bit 5: 1: Suspended
704 * bit 6: 1: Ready
705 * bit 7: 1: Not write-protected
706 */
707
708static int
709sddr09_read_status(struct us_data *us, unsigned char *status) {
710
711 unsigned char *command = us->iobuf;
712 unsigned char *data = us->iobuf;
713 int result;
714
715 usb_stor_dbg(us, "Reading status...\n");
716
717 memset(command, 0, 12);
718 command[0] = 0xEC;
719 command[1] = LUNBITS;
720
721 result = sddr09_send_scsi_command(us, command, 12);
722 if (result)
723 return result;
724
725 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
726 data, 64, NULL);
727 *status = data[0];
728 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
729}
730
731static int
732sddr09_read_data(struct us_data *us,
733 unsigned long address,
734 unsigned int sectors) {
735
736 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
737 unsigned char *buffer;
738 unsigned int lba, maxlba, pba;
739 unsigned int page, pages;
740 unsigned int len, offset;
741 struct scatterlist *sg;
742 int result;
743
744 // Figure out the initial LBA and page
745 lba = address >> info->blockshift;
746 page = (address & info->blockmask);
747 maxlba = info->capacity >> (info->pageshift + info->blockshift);
748 if (lba >= maxlba)
749 return -EIO;
750
751 // Since we only read in one block at a time, we have to create
752 // a bounce buffer and move the data a piece at a time between the
753 // bounce buffer and the actual transfer buffer.
754
755 len = min_t(unsigned int, sectors, info->blocksize) * info->pagesize;
756 buffer = kmalloc(len, GFP_NOIO);
757 if (!buffer)
758 return -ENOMEM;
759
760 // This could be made much more efficient by checking for
761 // contiguous LBA's. Another exercise left to the student.
762
763 result = 0;
764 offset = 0;
765 sg = NULL;
766
767 while (sectors > 0) {
768
769 /* Find number of pages we can read in this block */
770 pages = min(sectors, info->blocksize - page);
771 len = pages << info->pageshift;
772
773 /* Not overflowing capacity? */
774 if (lba >= maxlba) {
775 usb_stor_dbg(us, "Error: Requested lba %u exceeds maximum %u\n",
776 lba, maxlba);
777 result = -EIO;
778 break;
779 }
780
781 /* Find where this lba lives on disk */
782 pba = info->lba_to_pba[lba];
783
784 if (pba == UNDEF) { /* this lba was never written */
785
786 usb_stor_dbg(us, "Read %d zero pages (LBA %d) page %d\n",
787 pages, lba, page);
788
789 /*
790 * This is not really an error. It just means
791 * that the block has never been written.
792 * Instead of returning an error
793 * it is better to return all zero data.
794 */
795
796 memset(buffer, 0, len);
797
798 } else {
799 usb_stor_dbg(us, "Read %d pages, from PBA %d (LBA %d) page %d\n",
800 pages, pba, lba, page);
801
802 address = ((pba << info->blockshift) + page) <<
803 info->pageshift;
804
805 result = sddr09_read20(us, address>>1,
806 pages, info->pageshift, buffer, 0);
807 if (result)
808 break;
809 }
810
811 // Store the data in the transfer buffer
812 usb_stor_access_xfer_buf(buffer, len, us->srb,
813 &sg, &offset, TO_XFER_BUF);
814
815 page = 0;
816 lba++;
817 sectors -= pages;
818 }
819
820 kfree(buffer);
821 return result;
822}
823
824static unsigned int
825sddr09_find_unused_pba(struct sddr09_card_info *info, unsigned int lba) {
826 static unsigned int lastpba = 1;
827 int zonestart, end, i;
828
829 zonestart = (lba/1000) << 10;
830 end = info->capacity >> (info->blockshift + info->pageshift);
831 end -= zonestart;
832 if (end > 1024)
833 end = 1024;
834
835 for (i = lastpba+1; i < end; i++) {
836 if (info->pba_to_lba[zonestart+i] == UNDEF) {
837 lastpba = i;
838 return zonestart+i;
839 }
840 }
841 for (i = 0; i <= lastpba; i++) {
842 if (info->pba_to_lba[zonestart+i] == UNDEF) {
843 lastpba = i;
844 return zonestart+i;
845 }
846 }
847 return 0;
848}
849
850static int
851sddr09_write_lba(struct us_data *us, unsigned int lba,
852 unsigned int page, unsigned int pages,
853 unsigned char *ptr, unsigned char *blockbuffer) {
854
855 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
856 unsigned long address;
857 unsigned int pba, lbap;
858 unsigned int pagelen;
859 unsigned char *bptr, *cptr, *xptr;
860 unsigned char ecc[3];
861 int i, result;
862
863 lbap = ((lba % 1000) << 1) | 0x1000;
864 if (parity[MSB_of(lbap) ^ LSB_of(lbap)])
865 lbap ^= 1;
866 pba = info->lba_to_pba[lba];
867
868 if (pba == UNDEF) {
869 pba = sddr09_find_unused_pba(info, lba);
870 if (!pba) {
871 printk(KERN_WARNING
872 "sddr09_write_lba: Out of unused blocks\n");
873 return -ENOSPC;
874 }
875 info->pba_to_lba[pba] = lba;
876 info->lba_to_pba[lba] = pba;
877 }
878
879 if (pba == 1) {
880 /*
881 * Maybe it is impossible to write to PBA 1.
882 * Fake success, but don't do anything.
883 */
884 printk(KERN_WARNING "sddr09: avoid writing to pba 1\n");
885 return 0;
886 }
887
888 pagelen = (1 << info->pageshift) + (1 << CONTROL_SHIFT);
889
890 /* read old contents */
891 address = (pba << (info->pageshift + info->blockshift));
892 result = sddr09_read22(us, address>>1, info->blocksize,
893 info->pageshift, blockbuffer, 0);
894 if (result)
895 return result;
896
897 /* check old contents and fill lba */
898 for (i = 0; i < info->blocksize; i++) {
899 bptr = blockbuffer + i*pagelen;
900 cptr = bptr + info->pagesize;
901 nand_compute_ecc(bptr, ecc);
902 if (!nand_compare_ecc(cptr+13, ecc)) {
903 usb_stor_dbg(us, "Warning: bad ecc in page %d- of pba %d\n",
904 i, pba);
905 nand_store_ecc(cptr+13, ecc);
906 }
907 nand_compute_ecc(bptr+(info->pagesize / 2), ecc);
908 if (!nand_compare_ecc(cptr+8, ecc)) {
909 usb_stor_dbg(us, "Warning: bad ecc in page %d+ of pba %d\n",
910 i, pba);
911 nand_store_ecc(cptr+8, ecc);
912 }
913 cptr[6] = cptr[11] = MSB_of(lbap);
914 cptr[7] = cptr[12] = LSB_of(lbap);
915 }
916
917 /* copy in new stuff and compute ECC */
918 xptr = ptr;
919 for (i = page; i < page+pages; i++) {
920 bptr = blockbuffer + i*pagelen;
921 cptr = bptr + info->pagesize;
922 memcpy(bptr, xptr, info->pagesize);
923 xptr += info->pagesize;
924 nand_compute_ecc(bptr, ecc);
925 nand_store_ecc(cptr+13, ecc);
926 nand_compute_ecc(bptr+(info->pagesize / 2), ecc);
927 nand_store_ecc(cptr+8, ecc);
928 }
929
930 usb_stor_dbg(us, "Rewrite PBA %d (LBA %d)\n", pba, lba);
931
932 result = sddr09_write_inplace(us, address>>1, info->blocksize,
933 info->pageshift, blockbuffer, 0);
934
935 usb_stor_dbg(us, "sddr09_write_inplace returns %d\n", result);
936
937#if 0
938 {
939 unsigned char status = 0;
940 int result2 = sddr09_read_status(us, &status);
941 if (result2)
942 usb_stor_dbg(us, "cannot read status\n");
943 else if (status != 0xc0)
944 usb_stor_dbg(us, "status after write: 0x%x\n", status);
945 }
946#endif
947
948#if 0
949 {
950 int result2 = sddr09_test_unit_ready(us);
951 }
952#endif
953
954 return result;
955}
956
957static int
958sddr09_write_data(struct us_data *us,
959 unsigned long address,
960 unsigned int sectors) {
961
962 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
963 unsigned int lba, maxlba, page, pages;
964 unsigned int pagelen, blocklen;
965 unsigned char *blockbuffer;
966 unsigned char *buffer;
967 unsigned int len, offset;
968 struct scatterlist *sg;
969 int result;
970
971 /* Figure out the initial LBA and page */
972 lba = address >> info->blockshift;
973 page = (address & info->blockmask);
974 maxlba = info->capacity >> (info->pageshift + info->blockshift);
975 if (lba >= maxlba)
976 return -EIO;
977
978 /*
979 * blockbuffer is used for reading in the old data, overwriting
980 * with the new data, and performing ECC calculations
981 */
982
983 /*
984 * TODO: instead of doing kmalloc/kfree for each write,
985 * add a bufferpointer to the info structure
986 */
987
988 pagelen = (1 << info->pageshift) + (1 << CONTROL_SHIFT);
989 blocklen = (pagelen << info->blockshift);
990 blockbuffer = kmalloc(blocklen, GFP_NOIO);
991 if (!blockbuffer)
992 return -ENOMEM;
993
994 /*
995 * Since we don't write the user data directly to the device,
996 * we have to create a bounce buffer and move the data a piece
997 * at a time between the bounce buffer and the actual transfer buffer.
998 */
999
1000 len = min_t(unsigned int, sectors, info->blocksize) * info->pagesize;
1001 buffer = kmalloc(len, GFP_NOIO);
1002 if (!buffer) {
1003 kfree(blockbuffer);
1004 return -ENOMEM;
1005 }
1006
1007 result = 0;
1008 offset = 0;
1009 sg = NULL;
1010
1011 while (sectors > 0) {
1012
1013 /* Write as many sectors as possible in this block */
1014
1015 pages = min(sectors, info->blocksize - page);
1016 len = (pages << info->pageshift);
1017
1018 /* Not overflowing capacity? */
1019 if (lba >= maxlba) {
1020 usb_stor_dbg(us, "Error: Requested lba %u exceeds maximum %u\n",
1021 lba, maxlba);
1022 result = -EIO;
1023 break;
1024 }
1025
1026 /* Get the data from the transfer buffer */
1027 usb_stor_access_xfer_buf(buffer, len, us->srb,
1028 &sg, &offset, FROM_XFER_BUF);
1029
1030 result = sddr09_write_lba(us, lba, page, pages,
1031 buffer, blockbuffer);
1032 if (result)
1033 break;
1034
1035 page = 0;
1036 lba++;
1037 sectors -= pages;
1038 }
1039
1040 kfree(buffer);
1041 kfree(blockbuffer);
1042
1043 return result;
1044}
1045
1046static int
1047sddr09_read_control(struct us_data *us,
1048 unsigned long address,
1049 unsigned int blocks,
1050 unsigned char *content,
1051 int use_sg) {
1052
1053 usb_stor_dbg(us, "Read control address %lu, blocks %d\n",
1054 address, blocks);
1055
1056 return sddr09_read21(us, address, blocks,
1057 CONTROL_SHIFT, content, use_sg);
1058}
1059
1060/*
1061 * Read Device ID Command: 12 bytes.
1062 * byte 0: opcode: ED
1063 *
1064 * Returns 2 bytes: Manufacturer ID and Device ID.
1065 * On more recent cards 3 bytes: the third byte is an option code A5
1066 * signifying that the secret command to read an 128-bit ID is available.
1067 * On still more recent cards 4 bytes: the fourth byte C0 means that
1068 * a second read ID cmd is available.
1069 */
1070static int
1071sddr09_read_deviceID(struct us_data *us, unsigned char *deviceID) {
1072 unsigned char *command = us->iobuf;
1073 unsigned char *content = us->iobuf;
1074 int result, i;
1075
1076 memset(command, 0, 12);
1077 command[0] = 0xED;
1078 command[1] = LUNBITS;
1079
1080 result = sddr09_send_scsi_command(us, command, 12);
1081 if (result)
1082 return result;
1083
1084 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
1085 content, 64, NULL);
1086
1087 for (i = 0; i < 4; i++)
1088 deviceID[i] = content[i];
1089
1090 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
1091}
1092
1093static int
1094sddr09_get_wp(struct us_data *us, struct sddr09_card_info *info) {
1095 int result;
1096 unsigned char status;
1097 const char *wp_fmt;
1098
1099 result = sddr09_read_status(us, &status);
1100 if (result) {
1101 usb_stor_dbg(us, "read_status fails\n");
1102 return result;
1103 }
1104 if ((status & 0x80) == 0) {
1105 info->flags |= SDDR09_WP; /* write protected */
1106 wp_fmt = " WP";
1107 } else {
1108 wp_fmt = "";
1109 }
1110 usb_stor_dbg(us, "status 0x%02X%s%s%s%s\n", status, wp_fmt,
1111 status & 0x40 ? " Ready" : "",
1112 status & LUNBITS ? " Suspended" : "",
1113 status & 0x01 ? " Error" : "");
1114
1115 return 0;
1116}
1117
1118#if 0
1119/*
1120 * Reset Command: 12 bytes.
1121 * byte 0: opcode: EB
1122 */
1123static int
1124sddr09_reset(struct us_data *us) {
1125
1126 unsigned char *command = us->iobuf;
1127
1128 memset(command, 0, 12);
1129 command[0] = 0xEB;
1130 command[1] = LUNBITS;
1131
1132 return sddr09_send_scsi_command(us, command, 12);
1133}
1134#endif
1135
1136static struct nand_flash_dev *
1137sddr09_get_cardinfo(struct us_data *us, unsigned char flags) {
1138 struct nand_flash_dev *cardinfo;
1139 unsigned char deviceID[4];
1140 char blurbtxt[256];
1141 int result;
1142
1143 usb_stor_dbg(us, "Reading capacity...\n");
1144
1145 result = sddr09_read_deviceID(us, deviceID);
1146
1147 if (result) {
1148 usb_stor_dbg(us, "Result of read_deviceID is %d\n", result);
1149 printk(KERN_WARNING "sddr09: could not read card info\n");
1150 return NULL;
1151 }
1152
1153 sprintf(blurbtxt, "sddr09: Found Flash card, ID = %4ph", deviceID);
1154
1155 /* Byte 0 is the manufacturer */
1156 sprintf(blurbtxt + strlen(blurbtxt),
1157 ": Manuf. %s",
1158 nand_flash_manufacturer(deviceID[0]));
1159
1160 /* Byte 1 is the device type */
1161 cardinfo = nand_find_id(deviceID[1]);
1162 if (cardinfo) {
1163 /*
1164 * MB or MiB? It is neither. A 16 MB card has
1165 * 17301504 raw bytes, of which 16384000 are
1166 * usable for user data.
1167 */
1168 sprintf(blurbtxt + strlen(blurbtxt),
1169 ", %d MB", 1<<(cardinfo->chipshift - 20));
1170 } else {
1171 sprintf(blurbtxt + strlen(blurbtxt),
1172 ", type unrecognized");
1173 }
1174
1175 /* Byte 2 is code to signal availability of 128-bit ID */
1176 if (deviceID[2] == 0xa5) {
1177 sprintf(blurbtxt + strlen(blurbtxt),
1178 ", 128-bit ID");
1179 }
1180
1181 /* Byte 3 announces the availability of another read ID command */
1182 if (deviceID[3] == 0xc0) {
1183 sprintf(blurbtxt + strlen(blurbtxt),
1184 ", extra cmd");
1185 }
1186
1187 if (flags & SDDR09_WP)
1188 sprintf(blurbtxt + strlen(blurbtxt),
1189 ", WP");
1190
1191 printk(KERN_WARNING "%s\n", blurbtxt);
1192
1193 return cardinfo;
1194}
1195
1196static int
1197sddr09_read_map(struct us_data *us) {
1198
1199 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
1200 int numblocks, alloc_len, alloc_blocks;
1201 int i, j, result;
1202 unsigned char *buffer, *buffer_end, *ptr;
1203 unsigned int lba, lbact;
1204
1205 if (!info->capacity)
1206 return -1;
1207
1208 /*
1209 * size of a block is 1 << (blockshift + pageshift) bytes
1210 * divide into the total capacity to get the number of blocks
1211 */
1212
1213 numblocks = info->capacity >> (info->blockshift + info->pageshift);
1214
1215 /*
1216 * read 64 bytes for every block (actually 1 << CONTROL_SHIFT)
1217 * but only use a 64 KB buffer
1218 * buffer size used must be a multiple of (1 << CONTROL_SHIFT)
1219 */
1220#define SDDR09_READ_MAP_BUFSZ 65536
1221
1222 alloc_blocks = min(numblocks, SDDR09_READ_MAP_BUFSZ >> CONTROL_SHIFT);
1223 alloc_len = (alloc_blocks << CONTROL_SHIFT);
1224 buffer = kmalloc(alloc_len, GFP_NOIO);
1225 if (!buffer) {
1226 result = -1;
1227 goto done;
1228 }
1229 buffer_end = buffer + alloc_len;
1230
1231#undef SDDR09_READ_MAP_BUFSZ
1232
1233 kfree(info->lba_to_pba);
1234 kfree(info->pba_to_lba);
1235 info->lba_to_pba = kmalloc_array(numblocks, sizeof(int), GFP_NOIO);
1236 info->pba_to_lba = kmalloc_array(numblocks, sizeof(int), GFP_NOIO);
1237
1238 if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) {
1239 printk(KERN_WARNING "sddr09_read_map: out of memory\n");
1240 result = -1;
1241 goto done;
1242 }
1243
1244 for (i = 0; i < numblocks; i++)
1245 info->lba_to_pba[i] = info->pba_to_lba[i] = UNDEF;
1246
1247 /*
1248 * Define lba-pba translation table
1249 */
1250
1251 ptr = buffer_end;
1252 for (i = 0; i < numblocks; i++) {
1253 ptr += (1 << CONTROL_SHIFT);
1254 if (ptr >= buffer_end) {
1255 unsigned long address;
1256
1257 address = i << (info->pageshift + info->blockshift);
1258 result = sddr09_read_control(
1259 us, address>>1,
1260 min(alloc_blocks, numblocks - i),
1261 buffer, 0);
1262 if (result) {
1263 result = -1;
1264 goto done;
1265 }
1266 ptr = buffer;
1267 }
1268
1269 if (i == 0 || i == 1) {
1270 info->pba_to_lba[i] = UNUSABLE;
1271 continue;
1272 }
1273
1274 /* special PBAs have control field 0^16 */
1275 for (j = 0; j < 16; j++)
1276 if (ptr[j] != 0)
1277 goto nonz;
1278 info->pba_to_lba[i] = UNUSABLE;
1279 printk(KERN_WARNING "sddr09: PBA %d has no logical mapping\n",
1280 i);
1281 continue;
1282
1283 nonz:
1284 /* unwritten PBAs have control field FF^16 */
1285 for (j = 0; j < 16; j++)
1286 if (ptr[j] != 0xff)
1287 goto nonff;
1288 continue;
1289
1290 nonff:
1291 /* normal PBAs start with six FFs */
1292 if (j < 6) {
1293 printk(KERN_WARNING
1294 "sddr09: PBA %d has no logical mapping: "
1295 "reserved area = %02X%02X%02X%02X "
1296 "data status %02X block status %02X\n",
1297 i, ptr[0], ptr[1], ptr[2], ptr[3],
1298 ptr[4], ptr[5]);
1299 info->pba_to_lba[i] = UNUSABLE;
1300 continue;
1301 }
1302
1303 if ((ptr[6] >> 4) != 0x01) {
1304 printk(KERN_WARNING
1305 "sddr09: PBA %d has invalid address field "
1306 "%02X%02X/%02X%02X\n",
1307 i, ptr[6], ptr[7], ptr[11], ptr[12]);
1308 info->pba_to_lba[i] = UNUSABLE;
1309 continue;
1310 }
1311
1312 /* check even parity */
1313 if (parity[ptr[6] ^ ptr[7]]) {
1314 printk(KERN_WARNING
1315 "sddr09: Bad parity in LBA for block %d"
1316 " (%02X %02X)\n", i, ptr[6], ptr[7]);
1317 info->pba_to_lba[i] = UNUSABLE;
1318 continue;
1319 }
1320
1321 lba = short_pack(ptr[7], ptr[6]);
1322 lba = (lba & 0x07FF) >> 1;
1323
1324 /*
1325 * Every 1024 physical blocks ("zone"), the LBA numbers
1326 * go back to zero, but are within a higher block of LBA's.
1327 * Also, there is a maximum of 1000 LBA's per zone.
1328 * In other words, in PBA 1024-2047 you will find LBA 0-999
1329 * which are really LBA 1000-1999. This allows for 24 bad
1330 * or special physical blocks per zone.
1331 */
1332
1333 if (lba >= 1000) {
1334 printk(KERN_WARNING
1335 "sddr09: Bad low LBA %d for block %d\n",
1336 lba, i);
1337 goto possibly_erase;
1338 }
1339
1340 lba += 1000*(i/0x400);
1341
1342 if (info->lba_to_pba[lba] != UNDEF) {
1343 printk(KERN_WARNING
1344 "sddr09: LBA %d seen for PBA %d and %d\n",
1345 lba, info->lba_to_pba[lba], i);
1346 goto possibly_erase;
1347 }
1348
1349 info->pba_to_lba[i] = lba;
1350 info->lba_to_pba[lba] = i;
1351 continue;
1352
1353 possibly_erase:
1354 if (erase_bad_lba_entries) {
1355 unsigned long address;
1356
1357 address = (i << (info->pageshift + info->blockshift));
1358 sddr09_erase(us, address>>1);
1359 info->pba_to_lba[i] = UNDEF;
1360 } else
1361 info->pba_to_lba[i] = UNUSABLE;
1362 }
1363
1364 /*
1365 * Approximate capacity. This is not entirely correct yet,
1366 * since a zone with less than 1000 usable pages leads to
1367 * missing LBAs. Especially if it is the last zone, some
1368 * LBAs can be past capacity.
1369 */
1370 lbact = 0;
1371 for (i = 0; i < numblocks; i += 1024) {
1372 int ct = 0;
1373
1374 for (j = 0; j < 1024 && i+j < numblocks; j++) {
1375 if (info->pba_to_lba[i+j] != UNUSABLE) {
1376 if (ct >= 1000)
1377 info->pba_to_lba[i+j] = SPARE;
1378 else
1379 ct++;
1380 }
1381 }
1382 lbact += ct;
1383 }
1384 info->lbact = lbact;
1385 usb_stor_dbg(us, "Found %d LBA's\n", lbact);
1386 result = 0;
1387
1388 done:
1389 if (result != 0) {
1390 kfree(info->lba_to_pba);
1391 kfree(info->pba_to_lba);
1392 info->lba_to_pba = NULL;
1393 info->pba_to_lba = NULL;
1394 }
1395 kfree(buffer);
1396 return result;
1397}
1398
1399static void
1400sddr09_card_info_destructor(void *extra) {
1401 struct sddr09_card_info *info = (struct sddr09_card_info *)extra;
1402
1403 if (!info)
1404 return;
1405
1406 kfree(info->lba_to_pba);
1407 kfree(info->pba_to_lba);
1408}
1409
1410static int
1411sddr09_common_init(struct us_data *us) {
1412 int result;
1413
1414 /* set the configuration -- STALL is an acceptable response here */
1415 if (us->pusb_dev->actconfig->desc.bConfigurationValue != 1) {
1416 usb_stor_dbg(us, "active config #%d != 1 ??\n",
1417 us->pusb_dev->actconfig->desc.bConfigurationValue);
1418 return -EINVAL;
1419 }
1420
1421 result = usb_reset_configuration(us->pusb_dev);
1422 usb_stor_dbg(us, "Result of usb_reset_configuration is %d\n", result);
1423 if (result == -EPIPE) {
1424 usb_stor_dbg(us, "-- stall on control interface\n");
1425 } else if (result != 0) {
1426 /* it's not a stall, but another error -- time to bail */
1427 usb_stor_dbg(us, "-- Unknown error. Rejecting device\n");
1428 return -EINVAL;
1429 }
1430
1431 us->extra = kzalloc(sizeof(struct sddr09_card_info), GFP_NOIO);
1432 if (!us->extra)
1433 return -ENOMEM;
1434 us->extra_destructor = sddr09_card_info_destructor;
1435
1436 nand_init_ecc();
1437 return 0;
1438}
1439
1440
1441/*
1442 * This is needed at a very early stage. If this is not listed in the
1443 * unusual devices list but called from here then LUN 0 of the combo reader
1444 * is not recognized. But I do not know what precisely these calls do.
1445 */
1446static int
1447usb_stor_sddr09_dpcm_init(struct us_data *us) {
1448 int result;
1449 unsigned char *data = us->iobuf;
1450
1451 result = sddr09_common_init(us);
1452 if (result)
1453 return result;
1454
1455 result = sddr09_send_command(us, 0x01, USB_DIR_IN, data, 2);
1456 if (result) {
1457 usb_stor_dbg(us, "send_command fails\n");
1458 return result;
1459 }
1460
1461 usb_stor_dbg(us, "%02X %02X\n", data[0], data[1]);
1462 // get 07 02
1463
1464 result = sddr09_send_command(us, 0x08, USB_DIR_IN, data, 2);
1465 if (result) {
1466 usb_stor_dbg(us, "2nd send_command fails\n");
1467 return result;
1468 }
1469
1470 usb_stor_dbg(us, "%02X %02X\n", data[0], data[1]);
1471 // get 07 00
1472
1473 result = sddr09_request_sense(us, data, 18);
1474 if (result == 0 && data[2] != 0) {
1475 int j;
1476 for (j=0; j<18; j++)
1477 printk(" %02X", data[j]);
1478 printk("\n");
1479 // get 70 00 00 00 00 00 00 * 00 00 00 00 00 00
1480 // 70: current command
1481 // sense key 0, sense code 0, extd sense code 0
1482 // additional transfer length * = sizeof(data) - 7
1483 // Or: 70 00 06 00 00 00 00 0b 00 00 00 00 28 00 00 00 00 00
1484 // sense key 06, sense code 28: unit attention,
1485 // not ready to ready transition
1486 }
1487
1488 // test unit ready
1489
1490 return 0; /* not result */
1491}
1492
1493/*
1494 * Transport for the Microtech DPCM-USB
1495 */
1496static int dpcm_transport(struct scsi_cmnd *srb, struct us_data *us)
1497{
1498 int ret;
1499
1500 usb_stor_dbg(us, "LUN=%d\n", (u8)srb->device->lun);
1501
1502 switch (srb->device->lun) {
1503 case 0:
1504
1505 /*
1506 * LUN 0 corresponds to the CompactFlash card reader.
1507 */
1508 ret = usb_stor_CB_transport(srb, us);
1509 break;
1510
1511 case 1:
1512
1513 /*
1514 * LUN 1 corresponds to the SmartMedia card reader.
1515 */
1516
1517 /*
1518 * Set the LUN to 0 (just in case).
1519 */
1520 srb->device->lun = 0;
1521 ret = sddr09_transport(srb, us);
1522 srb->device->lun = 1;
1523 break;
1524
1525 default:
1526 usb_stor_dbg(us, "Invalid LUN %d\n", (u8)srb->device->lun);
1527 ret = USB_STOR_TRANSPORT_ERROR;
1528 break;
1529 }
1530 return ret;
1531}
1532
1533
1534/*
1535 * Transport for the Sandisk SDDR-09
1536 */
1537static int sddr09_transport(struct scsi_cmnd *srb, struct us_data *us)
1538{
1539 static unsigned char sensekey = 0, sensecode = 0;
1540 static unsigned char havefakesense = 0;
1541 int result, i;
1542 unsigned char *ptr = us->iobuf;
1543 unsigned long capacity;
1544 unsigned int page, pages;
1545
1546 struct sddr09_card_info *info;
1547
1548 static unsigned char inquiry_response[8] = {
1549 0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00
1550 };
1551
1552 /* note: no block descriptor support */
1553 static unsigned char mode_page_01[19] = {
1554 0x00, 0x0F, 0x00, 0x0, 0x0, 0x0, 0x00,
1555 0x01, 0x0A,
1556 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
1557 };
1558
1559 info = (struct sddr09_card_info *)us->extra;
1560
1561 if (srb->cmnd[0] == REQUEST_SENSE && havefakesense) {
1562 /* for a faked command, we have to follow with a faked sense */
1563 memset(ptr, 0, 18);
1564 ptr[0] = 0x70;
1565 ptr[2] = sensekey;
1566 ptr[7] = 11;
1567 ptr[12] = sensecode;
1568 usb_stor_set_xfer_buf(ptr, 18, srb);
1569 sensekey = sensecode = havefakesense = 0;
1570 return USB_STOR_TRANSPORT_GOOD;
1571 }
1572
1573 havefakesense = 1;
1574
1575 /*
1576 * Dummy up a response for INQUIRY since SDDR09 doesn't
1577 * respond to INQUIRY commands
1578 */
1579
1580 if (srb->cmnd[0] == INQUIRY) {
1581 memcpy(ptr, inquiry_response, 8);
1582 fill_inquiry_response(us, ptr, 36);
1583 return USB_STOR_TRANSPORT_GOOD;
1584 }
1585
1586 if (srb->cmnd[0] == READ_CAPACITY) {
1587 struct nand_flash_dev *cardinfo;
1588
1589 sddr09_get_wp(us, info); /* read WP bit */
1590
1591 cardinfo = sddr09_get_cardinfo(us, info->flags);
1592 if (!cardinfo) {
1593 /* probably no media */
1594 init_error:
1595 sensekey = 0x02; /* not ready */
1596 sensecode = 0x3a; /* medium not present */
1597 return USB_STOR_TRANSPORT_FAILED;
1598 }
1599
1600 info->capacity = (1 << cardinfo->chipshift);
1601 info->pageshift = cardinfo->pageshift;
1602 info->pagesize = (1 << info->pageshift);
1603 info->blockshift = cardinfo->blockshift;
1604 info->blocksize = (1 << info->blockshift);
1605 info->blockmask = info->blocksize - 1;
1606
1607 // map initialization, must follow get_cardinfo()
1608 if (sddr09_read_map(us)) {
1609 /* probably out of memory */
1610 goto init_error;
1611 }
1612
1613 // Report capacity
1614
1615 capacity = (info->lbact << info->blockshift) - 1;
1616
1617 ((__be32 *) ptr)[0] = cpu_to_be32(capacity);
1618
1619 // Report page size
1620
1621 ((__be32 *) ptr)[1] = cpu_to_be32(info->pagesize);
1622 usb_stor_set_xfer_buf(ptr, 8, srb);
1623
1624 return USB_STOR_TRANSPORT_GOOD;
1625 }
1626
1627 if (srb->cmnd[0] == MODE_SENSE_10) {
1628 int modepage = (srb->cmnd[2] & 0x3F);
1629
1630 /*
1631 * They ask for the Read/Write error recovery page,
1632 * or for all pages.
1633 */
1634 /* %% We should check DBD %% */
1635 if (modepage == 0x01 || modepage == 0x3F) {
1636 usb_stor_dbg(us, "Dummy up request for mode page 0x%x\n",
1637 modepage);
1638
1639 memcpy(ptr, mode_page_01, sizeof(mode_page_01));
1640 ((__be16*)ptr)[0] = cpu_to_be16(sizeof(mode_page_01) - 2);
1641 ptr[3] = (info->flags & SDDR09_WP) ? 0x80 : 0;
1642 usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb);
1643 return USB_STOR_TRANSPORT_GOOD;
1644 }
1645
1646 sensekey = 0x05; /* illegal request */
1647 sensecode = 0x24; /* invalid field in CDB */
1648 return USB_STOR_TRANSPORT_FAILED;
1649 }
1650
1651 if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL)
1652 return USB_STOR_TRANSPORT_GOOD;
1653
1654 havefakesense = 0;
1655
1656 if (srb->cmnd[0] == READ_10) {
1657
1658 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
1659 page <<= 16;
1660 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
1661 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
1662
1663 usb_stor_dbg(us, "READ_10: read page %d pagect %d\n",
1664 page, pages);
1665
1666 result = sddr09_read_data(us, page, pages);
1667 return (result == 0 ? USB_STOR_TRANSPORT_GOOD :
1668 USB_STOR_TRANSPORT_ERROR);
1669 }
1670
1671 if (srb->cmnd[0] == WRITE_10) {
1672
1673 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
1674 page <<= 16;
1675 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
1676 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
1677
1678 usb_stor_dbg(us, "WRITE_10: write page %d pagect %d\n",
1679 page, pages);
1680
1681 result = sddr09_write_data(us, page, pages);
1682 return (result == 0 ? USB_STOR_TRANSPORT_GOOD :
1683 USB_STOR_TRANSPORT_ERROR);
1684 }
1685
1686 /*
1687 * catch-all for all other commands, except
1688 * pass TEST_UNIT_READY and REQUEST_SENSE through
1689 */
1690 if (srb->cmnd[0] != TEST_UNIT_READY &&
1691 srb->cmnd[0] != REQUEST_SENSE) {
1692 sensekey = 0x05; /* illegal request */
1693 sensecode = 0x20; /* invalid command */
1694 havefakesense = 1;
1695 return USB_STOR_TRANSPORT_FAILED;
1696 }
1697
1698 for (; srb->cmd_len<12; srb->cmd_len++)
1699 srb->cmnd[srb->cmd_len] = 0;
1700
1701 srb->cmnd[1] = LUNBITS;
1702
1703 ptr[0] = 0;
1704 for (i=0; i<12; i++)
1705 sprintf(ptr+strlen(ptr), "%02X ", srb->cmnd[i]);
1706
1707 usb_stor_dbg(us, "Send control for command %s\n", ptr);
1708
1709 result = sddr09_send_scsi_command(us, srb->cmnd, 12);
1710 if (result) {
1711 usb_stor_dbg(us, "sddr09_send_scsi_command returns %d\n",
1712 result);
1713 return USB_STOR_TRANSPORT_ERROR;
1714 }
1715
1716 if (scsi_bufflen(srb) == 0)
1717 return USB_STOR_TRANSPORT_GOOD;
1718
1719 if (srb->sc_data_direction == DMA_TO_DEVICE ||
1720 srb->sc_data_direction == DMA_FROM_DEVICE) {
1721 unsigned int pipe = (srb->sc_data_direction == DMA_TO_DEVICE)
1722 ? us->send_bulk_pipe : us->recv_bulk_pipe;
1723
1724 usb_stor_dbg(us, "%s %d bytes\n",
1725 (srb->sc_data_direction == DMA_TO_DEVICE) ?
1726 "sending" : "receiving",
1727 scsi_bufflen(srb));
1728
1729 result = usb_stor_bulk_srb(us, pipe, srb);
1730
1731 return (result == USB_STOR_XFER_GOOD ?
1732 USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_ERROR);
1733 }
1734
1735 return USB_STOR_TRANSPORT_GOOD;
1736}
1737
1738/*
1739 * Initialization routine for the sddr09 subdriver
1740 */
1741static int
1742usb_stor_sddr09_init(struct us_data *us) {
1743 return sddr09_common_init(us);
1744}
1745
1746static struct scsi_host_template sddr09_host_template;
1747
1748static int sddr09_probe(struct usb_interface *intf,
1749 const struct usb_device_id *id)
1750{
1751 struct us_data *us;
1752 int result;
1753
1754 result = usb_stor_probe1(&us, intf, id,
1755 (id - sddr09_usb_ids) + sddr09_unusual_dev_list,
1756 &sddr09_host_template);
1757 if (result)
1758 return result;
1759
1760 if (us->protocol == USB_PR_DPCM_USB) {
1761 us->transport_name = "Control/Bulk-EUSB/SDDR09";
1762 us->transport = dpcm_transport;
1763 us->transport_reset = usb_stor_CB_reset;
1764 us->max_lun = 1;
1765 } else {
1766 us->transport_name = "EUSB/SDDR09";
1767 us->transport = sddr09_transport;
1768 us->transport_reset = usb_stor_CB_reset;
1769 us->max_lun = 0;
1770 }
1771
1772 result = usb_stor_probe2(us);
1773 return result;
1774}
1775
1776static struct usb_driver sddr09_driver = {
1777 .name = DRV_NAME,
1778 .probe = sddr09_probe,
1779 .disconnect = usb_stor_disconnect,
1780 .suspend = usb_stor_suspend,
1781 .resume = usb_stor_resume,
1782 .reset_resume = usb_stor_reset_resume,
1783 .pre_reset = usb_stor_pre_reset,
1784 .post_reset = usb_stor_post_reset,
1785 .id_table = sddr09_usb_ids,
1786 .soft_unbind = 1,
1787 .no_dynamic_id = 1,
1788};
1789
1790module_usb_stor_driver(sddr09_driver, sddr09_host_template, DRV_NAME);
1// SPDX-License-Identifier: GPL-2.0+
2/*
3 * Driver for SanDisk SDDR-09 SmartMedia reader
4 *
5 * (c) 2000, 2001 Robert Baruch (autophile@starband.net)
6 * (c) 2002 Andries Brouwer (aeb@cwi.nl)
7 * Developed with the assistance of:
8 * (c) 2002 Alan Stern <stern@rowland.org>
9 *
10 * The SanDisk SDDR-09 SmartMedia reader uses the Shuttle EUSB-01 chip.
11 * This chip is a programmable USB controller. In the SDDR-09, it has
12 * been programmed to obey a certain limited set of SCSI commands.
13 * This driver translates the "real" SCSI commands to the SDDR-09 SCSI
14 * commands.
15 */
16
17/*
18 * Known vendor commands: 12 bytes, first byte is opcode
19 *
20 * E7: read scatter gather
21 * E8: read
22 * E9: write
23 * EA: erase
24 * EB: reset
25 * EC: read status
26 * ED: read ID
27 * EE: write CIS (?)
28 * EF: compute checksum (?)
29 */
30
31#include <linux/errno.h>
32#include <linux/module.h>
33#include <linux/slab.h>
34
35#include <scsi/scsi.h>
36#include <scsi/scsi_cmnd.h>
37#include <scsi/scsi_device.h>
38
39#include "usb.h"
40#include "transport.h"
41#include "protocol.h"
42#include "debug.h"
43#include "scsiglue.h"
44
45#define DRV_NAME "ums-sddr09"
46
47MODULE_DESCRIPTION("Driver for SanDisk SDDR-09 SmartMedia reader");
48MODULE_AUTHOR("Andries Brouwer <aeb@cwi.nl>, Robert Baruch <autophile@starband.net>");
49MODULE_LICENSE("GPL");
50
51static int usb_stor_sddr09_dpcm_init(struct us_data *us);
52static int sddr09_transport(struct scsi_cmnd *srb, struct us_data *us);
53static int usb_stor_sddr09_init(struct us_data *us);
54
55
56/*
57 * The table of devices
58 */
59#define UNUSUAL_DEV(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax, \
60 vendorName, productName, useProtocol, useTransport, \
61 initFunction, flags) \
62{ USB_DEVICE_VER(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax), \
63 .driver_info = (flags) }
64
65static struct usb_device_id sddr09_usb_ids[] = {
66# include "unusual_sddr09.h"
67 { } /* Terminating entry */
68};
69MODULE_DEVICE_TABLE(usb, sddr09_usb_ids);
70
71#undef UNUSUAL_DEV
72
73/*
74 * The flags table
75 */
76#define UNUSUAL_DEV(idVendor, idProduct, bcdDeviceMin, bcdDeviceMax, \
77 vendor_name, product_name, use_protocol, use_transport, \
78 init_function, Flags) \
79{ \
80 .vendorName = vendor_name, \
81 .productName = product_name, \
82 .useProtocol = use_protocol, \
83 .useTransport = use_transport, \
84 .initFunction = init_function, \
85}
86
87static struct us_unusual_dev sddr09_unusual_dev_list[] = {
88# include "unusual_sddr09.h"
89 { } /* Terminating entry */
90};
91
92#undef UNUSUAL_DEV
93
94
95#define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) )
96#define LSB_of(s) ((s)&0xFF)
97#define MSB_of(s) ((s)>>8)
98
99/*
100 * First some stuff that does not belong here:
101 * data on SmartMedia and other cards, completely
102 * unrelated to this driver.
103 * Similar stuff occurs in <linux/mtd/nand_ids.h>.
104 */
105
106struct nand_flash_dev {
107 int model_id;
108 int chipshift; /* 1<<cs bytes total capacity */
109 char pageshift; /* 1<<ps bytes in a page */
110 char blockshift; /* 1<<bs pages in an erase block */
111 char zoneshift; /* 1<<zs blocks in a zone */
112 /* # of logical blocks is 125/128 of this */
113 char pageadrlen; /* length of an address in bytes - 1 */
114};
115
116/*
117 * NAND Flash Manufacturer ID Codes
118 */
119#define NAND_MFR_AMD 0x01
120#define NAND_MFR_NATSEMI 0x8f
121#define NAND_MFR_TOSHIBA 0x98
122#define NAND_MFR_SAMSUNG 0xec
123
124static inline char *nand_flash_manufacturer(int manuf_id) {
125 switch(manuf_id) {
126 case NAND_MFR_AMD:
127 return "AMD";
128 case NAND_MFR_NATSEMI:
129 return "NATSEMI";
130 case NAND_MFR_TOSHIBA:
131 return "Toshiba";
132 case NAND_MFR_SAMSUNG:
133 return "Samsung";
134 default:
135 return "unknown";
136 }
137}
138
139/*
140 * It looks like it is unnecessary to attach manufacturer to the
141 * remaining data: SSFDC prescribes manufacturer-independent id codes.
142 *
143 * 256 MB NAND flash has a 5-byte ID with 2nd byte 0xaa, 0xba, 0xca or 0xda.
144 */
145
146static struct nand_flash_dev nand_flash_ids[] = {
147 /* NAND flash */
148 { 0x6e, 20, 8, 4, 8, 2}, /* 1 MB */
149 { 0xe8, 20, 8, 4, 8, 2}, /* 1 MB */
150 { 0xec, 20, 8, 4, 8, 2}, /* 1 MB */
151 { 0x64, 21, 8, 4, 9, 2}, /* 2 MB */
152 { 0xea, 21, 8, 4, 9, 2}, /* 2 MB */
153 { 0x6b, 22, 9, 4, 9, 2}, /* 4 MB */
154 { 0xe3, 22, 9, 4, 9, 2}, /* 4 MB */
155 { 0xe5, 22, 9, 4, 9, 2}, /* 4 MB */
156 { 0xe6, 23, 9, 4, 10, 2}, /* 8 MB */
157 { 0x73, 24, 9, 5, 10, 2}, /* 16 MB */
158 { 0x75, 25, 9, 5, 10, 2}, /* 32 MB */
159 { 0x76, 26, 9, 5, 10, 3}, /* 64 MB */
160 { 0x79, 27, 9, 5, 10, 3}, /* 128 MB */
161
162 /* MASK ROM */
163 { 0x5d, 21, 9, 4, 8, 2}, /* 2 MB */
164 { 0xd5, 22, 9, 4, 9, 2}, /* 4 MB */
165 { 0xd6, 23, 9, 4, 10, 2}, /* 8 MB */
166 { 0x57, 24, 9, 4, 11, 2}, /* 16 MB */
167 { 0x58, 25, 9, 4, 12, 2}, /* 32 MB */
168 { 0,}
169};
170
171static struct nand_flash_dev *
172nand_find_id(unsigned char id) {
173 int i;
174
175 for (i = 0; i < ARRAY_SIZE(nand_flash_ids); i++)
176 if (nand_flash_ids[i].model_id == id)
177 return &(nand_flash_ids[i]);
178 return NULL;
179}
180
181/*
182 * ECC computation.
183 */
184static unsigned char parity[256];
185static unsigned char ecc2[256];
186
187static void nand_init_ecc(void) {
188 int i, j, a;
189
190 parity[0] = 0;
191 for (i = 1; i < 256; i++)
192 parity[i] = (parity[i&(i-1)] ^ 1);
193
194 for (i = 0; i < 256; i++) {
195 a = 0;
196 for (j = 0; j < 8; j++) {
197 if (i & (1<<j)) {
198 if ((j & 1) == 0)
199 a ^= 0x04;
200 if ((j & 2) == 0)
201 a ^= 0x10;
202 if ((j & 4) == 0)
203 a ^= 0x40;
204 }
205 }
206 ecc2[i] = ~(a ^ (a<<1) ^ (parity[i] ? 0xa8 : 0));
207 }
208}
209
210/* compute 3-byte ecc on 256 bytes */
211static void nand_compute_ecc(unsigned char *data, unsigned char *ecc) {
212 int i, j, a;
213 unsigned char par = 0, bit, bits[8] = {0};
214
215 /* collect 16 checksum bits */
216 for (i = 0; i < 256; i++) {
217 par ^= data[i];
218 bit = parity[data[i]];
219 for (j = 0; j < 8; j++)
220 if ((i & (1<<j)) == 0)
221 bits[j] ^= bit;
222 }
223
224 /* put 4+4+4 = 12 bits in the ecc */
225 a = (bits[3] << 6) + (bits[2] << 4) + (bits[1] << 2) + bits[0];
226 ecc[0] = ~(a ^ (a<<1) ^ (parity[par] ? 0xaa : 0));
227
228 a = (bits[7] << 6) + (bits[6] << 4) + (bits[5] << 2) + bits[4];
229 ecc[1] = ~(a ^ (a<<1) ^ (parity[par] ? 0xaa : 0));
230
231 ecc[2] = ecc2[par];
232}
233
234static int nand_compare_ecc(unsigned char *data, unsigned char *ecc) {
235 return (data[0] == ecc[0] && data[1] == ecc[1] && data[2] == ecc[2]);
236}
237
238static void nand_store_ecc(unsigned char *data, unsigned char *ecc) {
239 memcpy(data, ecc, 3);
240}
241
242/*
243 * The actual driver starts here.
244 */
245
246struct sddr09_card_info {
247 unsigned long capacity; /* Size of card in bytes */
248 int pagesize; /* Size of page in bytes */
249 int pageshift; /* log2 of pagesize */
250 int blocksize; /* Size of block in pages */
251 int blockshift; /* log2 of blocksize */
252 int blockmask; /* 2^blockshift - 1 */
253 int *lba_to_pba; /* logical to physical map */
254 int *pba_to_lba; /* physical to logical map */
255 int lbact; /* number of available pages */
256 int flags;
257#define SDDR09_WP 1 /* write protected */
258};
259
260/*
261 * On my 16MB card, control blocks have size 64 (16 real control bytes,
262 * and 48 junk bytes). In reality of course the card uses 16 control bytes,
263 * so the reader makes up the remaining 48. Don't know whether these numbers
264 * depend on the card. For now a constant.
265 */
266#define CONTROL_SHIFT 6
267
268/*
269 * On my Combo CF/SM reader, the SM reader has LUN 1.
270 * (and things fail with LUN 0).
271 * It seems LUN is irrelevant for others.
272 */
273#define LUN 1
274#define LUNBITS (LUN << 5)
275
276/*
277 * LBA and PBA are unsigned ints. Special values.
278 */
279#define UNDEF 0xffffffff
280#define SPARE 0xfffffffe
281#define UNUSABLE 0xfffffffd
282
283static const int erase_bad_lba_entries = 0;
284
285/* send vendor interface command (0x41) */
286/* called for requests 0, 1, 8 */
287static int
288sddr09_send_command(struct us_data *us,
289 unsigned char request,
290 unsigned char direction,
291 unsigned char *xfer_data,
292 unsigned int xfer_len) {
293 unsigned int pipe;
294 unsigned char requesttype = (0x41 | direction);
295 int rc;
296
297 // Get the receive or send control pipe number
298
299 if (direction == USB_DIR_IN)
300 pipe = us->recv_ctrl_pipe;
301 else
302 pipe = us->send_ctrl_pipe;
303
304 rc = usb_stor_ctrl_transfer(us, pipe, request, requesttype,
305 0, 0, xfer_data, xfer_len);
306 switch (rc) {
307 case USB_STOR_XFER_GOOD: return 0;
308 case USB_STOR_XFER_STALLED: return -EPIPE;
309 default: return -EIO;
310 }
311}
312
313static int
314sddr09_send_scsi_command(struct us_data *us,
315 unsigned char *command,
316 unsigned int command_len) {
317 return sddr09_send_command(us, 0, USB_DIR_OUT, command, command_len);
318}
319
320#if 0
321/*
322 * Test Unit Ready Command: 12 bytes.
323 * byte 0: opcode: 00
324 */
325static int
326sddr09_test_unit_ready(struct us_data *us) {
327 unsigned char *command = us->iobuf;
328 int result;
329
330 memset(command, 0, 6);
331 command[1] = LUNBITS;
332
333 result = sddr09_send_scsi_command(us, command, 6);
334
335 usb_stor_dbg(us, "sddr09_test_unit_ready returns %d\n", result);
336
337 return result;
338}
339#endif
340
341/*
342 * Request Sense Command: 12 bytes.
343 * byte 0: opcode: 03
344 * byte 4: data length
345 */
346static int
347sddr09_request_sense(struct us_data *us, unsigned char *sensebuf, int buflen) {
348 unsigned char *command = us->iobuf;
349 int result;
350
351 memset(command, 0, 12);
352 command[0] = 0x03;
353 command[1] = LUNBITS;
354 command[4] = buflen;
355
356 result = sddr09_send_scsi_command(us, command, 12);
357 if (result)
358 return result;
359
360 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
361 sensebuf, buflen, NULL);
362 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
363}
364
365/*
366 * Read Command: 12 bytes.
367 * byte 0: opcode: E8
368 * byte 1: last two bits: 00: read data, 01: read blockwise control,
369 * 10: read both, 11: read pagewise control.
370 * It turns out we need values 20, 21, 22, 23 here (LUN 1).
371 * bytes 2-5: address (interpretation depends on byte 1, see below)
372 * bytes 10-11: count (idem)
373 *
374 * A page has 512 data bytes and 64 control bytes (16 control and 48 junk).
375 * A read data command gets data in 512-byte pages.
376 * A read control command gets control in 64-byte chunks.
377 * A read both command gets data+control in 576-byte chunks.
378 *
379 * Blocks are groups of 32 pages, and read blockwise control jumps to the
380 * next block, while read pagewise control jumps to the next page after
381 * reading a group of 64 control bytes.
382 * [Here 512 = 1<<pageshift, 32 = 1<<blockshift, 64 is constant?]
383 *
384 * (1 MB and 2 MB cards are a bit different, but I have only a 16 MB card.)
385 */
386
387static int
388sddr09_readX(struct us_data *us, int x, unsigned long fromaddress,
389 int nr_of_pages, int bulklen, unsigned char *buf,
390 int use_sg) {
391
392 unsigned char *command = us->iobuf;
393 int result;
394
395 command[0] = 0xE8;
396 command[1] = LUNBITS | x;
397 command[2] = MSB_of(fromaddress>>16);
398 command[3] = LSB_of(fromaddress>>16);
399 command[4] = MSB_of(fromaddress & 0xFFFF);
400 command[5] = LSB_of(fromaddress & 0xFFFF);
401 command[6] = 0;
402 command[7] = 0;
403 command[8] = 0;
404 command[9] = 0;
405 command[10] = MSB_of(nr_of_pages);
406 command[11] = LSB_of(nr_of_pages);
407
408 result = sddr09_send_scsi_command(us, command, 12);
409
410 if (result) {
411 usb_stor_dbg(us, "Result for send_control in sddr09_read2%d %d\n",
412 x, result);
413 return result;
414 }
415
416 result = usb_stor_bulk_transfer_sg(us, us->recv_bulk_pipe,
417 buf, bulklen, use_sg, NULL);
418
419 if (result != USB_STOR_XFER_GOOD) {
420 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_read2%d %d\n",
421 x, result);
422 return -EIO;
423 }
424 return 0;
425}
426
427/*
428 * Read Data
429 *
430 * fromaddress counts data shorts:
431 * increasing it by 256 shifts the bytestream by 512 bytes;
432 * the last 8 bits are ignored.
433 *
434 * nr_of_pages counts pages of size (1 << pageshift).
435 */
436static int
437sddr09_read20(struct us_data *us, unsigned long fromaddress,
438 int nr_of_pages, int pageshift, unsigned char *buf, int use_sg) {
439 int bulklen = nr_of_pages << pageshift;
440
441 /* The last 8 bits of fromaddress are ignored. */
442 return sddr09_readX(us, 0, fromaddress, nr_of_pages, bulklen,
443 buf, use_sg);
444}
445
446/*
447 * Read Blockwise Control
448 *
449 * fromaddress gives the starting position (as in read data;
450 * the last 8 bits are ignored); increasing it by 32*256 shifts
451 * the output stream by 64 bytes.
452 *
453 * count counts control groups of size (1 << controlshift).
454 * For me, controlshift = 6. Is this constant?
455 *
456 * After getting one control group, jump to the next block
457 * (fromaddress += 8192).
458 */
459static int
460sddr09_read21(struct us_data *us, unsigned long fromaddress,
461 int count, int controlshift, unsigned char *buf, int use_sg) {
462
463 int bulklen = (count << controlshift);
464 return sddr09_readX(us, 1, fromaddress, count, bulklen,
465 buf, use_sg);
466}
467
468/*
469 * Read both Data and Control
470 *
471 * fromaddress counts data shorts, ignoring control:
472 * increasing it by 256 shifts the bytestream by 576 = 512+64 bytes;
473 * the last 8 bits are ignored.
474 *
475 * nr_of_pages counts pages of size (1 << pageshift) + (1 << controlshift).
476 */
477static int
478sddr09_read22(struct us_data *us, unsigned long fromaddress,
479 int nr_of_pages, int pageshift, unsigned char *buf, int use_sg) {
480
481 int bulklen = (nr_of_pages << pageshift) + (nr_of_pages << CONTROL_SHIFT);
482 usb_stor_dbg(us, "reading %d pages, %d bytes\n", nr_of_pages, bulklen);
483 return sddr09_readX(us, 2, fromaddress, nr_of_pages, bulklen,
484 buf, use_sg);
485}
486
487#if 0
488/*
489 * Read Pagewise Control
490 *
491 * fromaddress gives the starting position (as in read data;
492 * the last 8 bits are ignored); increasing it by 256 shifts
493 * the output stream by 64 bytes.
494 *
495 * count counts control groups of size (1 << controlshift).
496 * For me, controlshift = 6. Is this constant?
497 *
498 * After getting one control group, jump to the next page
499 * (fromaddress += 256).
500 */
501static int
502sddr09_read23(struct us_data *us, unsigned long fromaddress,
503 int count, int controlshift, unsigned char *buf, int use_sg) {
504
505 int bulklen = (count << controlshift);
506 return sddr09_readX(us, 3, fromaddress, count, bulklen,
507 buf, use_sg);
508}
509#endif
510
511/*
512 * Erase Command: 12 bytes.
513 * byte 0: opcode: EA
514 * bytes 6-9: erase address (big-endian, counting shorts, sector aligned).
515 *
516 * Always precisely one block is erased; bytes 2-5 and 10-11 are ignored.
517 * The byte address being erased is 2*Eaddress.
518 * The CIS cannot be erased.
519 */
520static int
521sddr09_erase(struct us_data *us, unsigned long Eaddress) {
522 unsigned char *command = us->iobuf;
523 int result;
524
525 usb_stor_dbg(us, "erase address %lu\n", Eaddress);
526
527 memset(command, 0, 12);
528 command[0] = 0xEA;
529 command[1] = LUNBITS;
530 command[6] = MSB_of(Eaddress>>16);
531 command[7] = LSB_of(Eaddress>>16);
532 command[8] = MSB_of(Eaddress & 0xFFFF);
533 command[9] = LSB_of(Eaddress & 0xFFFF);
534
535 result = sddr09_send_scsi_command(us, command, 12);
536
537 if (result)
538 usb_stor_dbg(us, "Result for send_control in sddr09_erase %d\n",
539 result);
540
541 return result;
542}
543
544/*
545 * Write CIS Command: 12 bytes.
546 * byte 0: opcode: EE
547 * bytes 2-5: write address in shorts
548 * bytes 10-11: sector count
549 *
550 * This writes at the indicated address. Don't know how it differs
551 * from E9. Maybe it does not erase? However, it will also write to
552 * the CIS.
553 *
554 * When two such commands on the same page follow each other directly,
555 * the second one is not done.
556 */
557
558/*
559 * Write Command: 12 bytes.
560 * byte 0: opcode: E9
561 * bytes 2-5: write address (big-endian, counting shorts, sector aligned).
562 * bytes 6-9: erase address (big-endian, counting shorts, sector aligned).
563 * bytes 10-11: sector count (big-endian, in 512-byte sectors).
564 *
565 * If write address equals erase address, the erase is done first,
566 * otherwise the write is done first. When erase address equals zero
567 * no erase is done?
568 */
569static int
570sddr09_writeX(struct us_data *us,
571 unsigned long Waddress, unsigned long Eaddress,
572 int nr_of_pages, int bulklen, unsigned char *buf, int use_sg) {
573
574 unsigned char *command = us->iobuf;
575 int result;
576
577 command[0] = 0xE9;
578 command[1] = LUNBITS;
579
580 command[2] = MSB_of(Waddress>>16);
581 command[3] = LSB_of(Waddress>>16);
582 command[4] = MSB_of(Waddress & 0xFFFF);
583 command[5] = LSB_of(Waddress & 0xFFFF);
584
585 command[6] = MSB_of(Eaddress>>16);
586 command[7] = LSB_of(Eaddress>>16);
587 command[8] = MSB_of(Eaddress & 0xFFFF);
588 command[9] = LSB_of(Eaddress & 0xFFFF);
589
590 command[10] = MSB_of(nr_of_pages);
591 command[11] = LSB_of(nr_of_pages);
592
593 result = sddr09_send_scsi_command(us, command, 12);
594
595 if (result) {
596 usb_stor_dbg(us, "Result for send_control in sddr09_writeX %d\n",
597 result);
598 return result;
599 }
600
601 result = usb_stor_bulk_transfer_sg(us, us->send_bulk_pipe,
602 buf, bulklen, use_sg, NULL);
603
604 if (result != USB_STOR_XFER_GOOD) {
605 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_writeX %d\n",
606 result);
607 return -EIO;
608 }
609 return 0;
610}
611
612/* erase address, write same address */
613static int
614sddr09_write_inplace(struct us_data *us, unsigned long address,
615 int nr_of_pages, int pageshift, unsigned char *buf,
616 int use_sg) {
617 int bulklen = (nr_of_pages << pageshift) + (nr_of_pages << CONTROL_SHIFT);
618 return sddr09_writeX(us, address, address, nr_of_pages, bulklen,
619 buf, use_sg);
620}
621
622#if 0
623/*
624 * Read Scatter Gather Command: 3+4n bytes.
625 * byte 0: opcode E7
626 * byte 2: n
627 * bytes 4i-1,4i,4i+1: page address
628 * byte 4i+2: page count
629 * (i=1..n)
630 *
631 * This reads several pages from the card to a single memory buffer.
632 * The last two bits of byte 1 have the same meaning as for E8.
633 */
634static int
635sddr09_read_sg_test_only(struct us_data *us) {
636 unsigned char *command = us->iobuf;
637 int result, bulklen, nsg, ct;
638 unsigned char *buf;
639 unsigned long address;
640
641 nsg = bulklen = 0;
642 command[0] = 0xE7;
643 command[1] = LUNBITS;
644 command[2] = 0;
645 address = 040000; ct = 1;
646 nsg++;
647 bulklen += (ct << 9);
648 command[4*nsg+2] = ct;
649 command[4*nsg+1] = ((address >> 9) & 0xFF);
650 command[4*nsg+0] = ((address >> 17) & 0xFF);
651 command[4*nsg-1] = ((address >> 25) & 0xFF);
652
653 address = 0340000; ct = 1;
654 nsg++;
655 bulklen += (ct << 9);
656 command[4*nsg+2] = ct;
657 command[4*nsg+1] = ((address >> 9) & 0xFF);
658 command[4*nsg+0] = ((address >> 17) & 0xFF);
659 command[4*nsg-1] = ((address >> 25) & 0xFF);
660
661 address = 01000000; ct = 2;
662 nsg++;
663 bulklen += (ct << 9);
664 command[4*nsg+2] = ct;
665 command[4*nsg+1] = ((address >> 9) & 0xFF);
666 command[4*nsg+0] = ((address >> 17) & 0xFF);
667 command[4*nsg-1] = ((address >> 25) & 0xFF);
668
669 command[2] = nsg;
670
671 result = sddr09_send_scsi_command(us, command, 4*nsg+3);
672
673 if (result) {
674 usb_stor_dbg(us, "Result for send_control in sddr09_read_sg %d\n",
675 result);
676 return result;
677 }
678
679 buf = kmalloc(bulklen, GFP_NOIO);
680 if (!buf)
681 return -ENOMEM;
682
683 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
684 buf, bulklen, NULL);
685 kfree(buf);
686 if (result != USB_STOR_XFER_GOOD) {
687 usb_stor_dbg(us, "Result for bulk_transfer in sddr09_read_sg %d\n",
688 result);
689 return -EIO;
690 }
691
692 return 0;
693}
694#endif
695
696/*
697 * Read Status Command: 12 bytes.
698 * byte 0: opcode: EC
699 *
700 * Returns 64 bytes, all zero except for the first.
701 * bit 0: 1: Error
702 * bit 5: 1: Suspended
703 * bit 6: 1: Ready
704 * bit 7: 1: Not write-protected
705 */
706
707static int
708sddr09_read_status(struct us_data *us, unsigned char *status) {
709
710 unsigned char *command = us->iobuf;
711 unsigned char *data = us->iobuf;
712 int result;
713
714 usb_stor_dbg(us, "Reading status...\n");
715
716 memset(command, 0, 12);
717 command[0] = 0xEC;
718 command[1] = LUNBITS;
719
720 result = sddr09_send_scsi_command(us, command, 12);
721 if (result)
722 return result;
723
724 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
725 data, 64, NULL);
726 *status = data[0];
727 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
728}
729
730static int
731sddr09_read_data(struct us_data *us,
732 unsigned long address,
733 unsigned int sectors) {
734
735 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
736 unsigned char *buffer;
737 unsigned int lba, maxlba, pba;
738 unsigned int page, pages;
739 unsigned int len, offset;
740 struct scatterlist *sg;
741 int result;
742
743 // Figure out the initial LBA and page
744 lba = address >> info->blockshift;
745 page = (address & info->blockmask);
746 maxlba = info->capacity >> (info->pageshift + info->blockshift);
747 if (lba >= maxlba)
748 return -EIO;
749
750 // Since we only read in one block at a time, we have to create
751 // a bounce buffer and move the data a piece at a time between the
752 // bounce buffer and the actual transfer buffer.
753
754 len = min(sectors, (unsigned int) info->blocksize) * info->pagesize;
755 buffer = kmalloc(len, GFP_NOIO);
756 if (!buffer)
757 return -ENOMEM;
758
759 // This could be made much more efficient by checking for
760 // contiguous LBA's. Another exercise left to the student.
761
762 result = 0;
763 offset = 0;
764 sg = NULL;
765
766 while (sectors > 0) {
767
768 /* Find number of pages we can read in this block */
769 pages = min(sectors, info->blocksize - page);
770 len = pages << info->pageshift;
771
772 /* Not overflowing capacity? */
773 if (lba >= maxlba) {
774 usb_stor_dbg(us, "Error: Requested lba %u exceeds maximum %u\n",
775 lba, maxlba);
776 result = -EIO;
777 break;
778 }
779
780 /* Find where this lba lives on disk */
781 pba = info->lba_to_pba[lba];
782
783 if (pba == UNDEF) { /* this lba was never written */
784
785 usb_stor_dbg(us, "Read %d zero pages (LBA %d) page %d\n",
786 pages, lba, page);
787
788 /*
789 * This is not really an error. It just means
790 * that the block has never been written.
791 * Instead of returning an error
792 * it is better to return all zero data.
793 */
794
795 memset(buffer, 0, len);
796
797 } else {
798 usb_stor_dbg(us, "Read %d pages, from PBA %d (LBA %d) page %d\n",
799 pages, pba, lba, page);
800
801 address = ((pba << info->blockshift) + page) <<
802 info->pageshift;
803
804 result = sddr09_read20(us, address>>1,
805 pages, info->pageshift, buffer, 0);
806 if (result)
807 break;
808 }
809
810 // Store the data in the transfer buffer
811 usb_stor_access_xfer_buf(buffer, len, us->srb,
812 &sg, &offset, TO_XFER_BUF);
813
814 page = 0;
815 lba++;
816 sectors -= pages;
817 }
818
819 kfree(buffer);
820 return result;
821}
822
823static unsigned int
824sddr09_find_unused_pba(struct sddr09_card_info *info, unsigned int lba) {
825 static unsigned int lastpba = 1;
826 int zonestart, end, i;
827
828 zonestart = (lba/1000) << 10;
829 end = info->capacity >> (info->blockshift + info->pageshift);
830 end -= zonestart;
831 if (end > 1024)
832 end = 1024;
833
834 for (i = lastpba+1; i < end; i++) {
835 if (info->pba_to_lba[zonestart+i] == UNDEF) {
836 lastpba = i;
837 return zonestart+i;
838 }
839 }
840 for (i = 0; i <= lastpba; i++) {
841 if (info->pba_to_lba[zonestart+i] == UNDEF) {
842 lastpba = i;
843 return zonestart+i;
844 }
845 }
846 return 0;
847}
848
849static int
850sddr09_write_lba(struct us_data *us, unsigned int lba,
851 unsigned int page, unsigned int pages,
852 unsigned char *ptr, unsigned char *blockbuffer) {
853
854 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
855 unsigned long address;
856 unsigned int pba, lbap;
857 unsigned int pagelen;
858 unsigned char *bptr, *cptr, *xptr;
859 unsigned char ecc[3];
860 int i, result;
861
862 lbap = ((lba % 1000) << 1) | 0x1000;
863 if (parity[MSB_of(lbap) ^ LSB_of(lbap)])
864 lbap ^= 1;
865 pba = info->lba_to_pba[lba];
866
867 if (pba == UNDEF) {
868 pba = sddr09_find_unused_pba(info, lba);
869 if (!pba) {
870 printk(KERN_WARNING
871 "sddr09_write_lba: Out of unused blocks\n");
872 return -ENOSPC;
873 }
874 info->pba_to_lba[pba] = lba;
875 info->lba_to_pba[lba] = pba;
876 }
877
878 if (pba == 1) {
879 /*
880 * Maybe it is impossible to write to PBA 1.
881 * Fake success, but don't do anything.
882 */
883 printk(KERN_WARNING "sddr09: avoid writing to pba 1\n");
884 return 0;
885 }
886
887 pagelen = (1 << info->pageshift) + (1 << CONTROL_SHIFT);
888
889 /* read old contents */
890 address = (pba << (info->pageshift + info->blockshift));
891 result = sddr09_read22(us, address>>1, info->blocksize,
892 info->pageshift, blockbuffer, 0);
893 if (result)
894 return result;
895
896 /* check old contents and fill lba */
897 for (i = 0; i < info->blocksize; i++) {
898 bptr = blockbuffer + i*pagelen;
899 cptr = bptr + info->pagesize;
900 nand_compute_ecc(bptr, ecc);
901 if (!nand_compare_ecc(cptr+13, ecc)) {
902 usb_stor_dbg(us, "Warning: bad ecc in page %d- of pba %d\n",
903 i, pba);
904 nand_store_ecc(cptr+13, ecc);
905 }
906 nand_compute_ecc(bptr+(info->pagesize / 2), ecc);
907 if (!nand_compare_ecc(cptr+8, ecc)) {
908 usb_stor_dbg(us, "Warning: bad ecc in page %d+ of pba %d\n",
909 i, pba);
910 nand_store_ecc(cptr+8, ecc);
911 }
912 cptr[6] = cptr[11] = MSB_of(lbap);
913 cptr[7] = cptr[12] = LSB_of(lbap);
914 }
915
916 /* copy in new stuff and compute ECC */
917 xptr = ptr;
918 for (i = page; i < page+pages; i++) {
919 bptr = blockbuffer + i*pagelen;
920 cptr = bptr + info->pagesize;
921 memcpy(bptr, xptr, info->pagesize);
922 xptr += info->pagesize;
923 nand_compute_ecc(bptr, ecc);
924 nand_store_ecc(cptr+13, ecc);
925 nand_compute_ecc(bptr+(info->pagesize / 2), ecc);
926 nand_store_ecc(cptr+8, ecc);
927 }
928
929 usb_stor_dbg(us, "Rewrite PBA %d (LBA %d)\n", pba, lba);
930
931 result = sddr09_write_inplace(us, address>>1, info->blocksize,
932 info->pageshift, blockbuffer, 0);
933
934 usb_stor_dbg(us, "sddr09_write_inplace returns %d\n", result);
935
936#if 0
937 {
938 unsigned char status = 0;
939 int result2 = sddr09_read_status(us, &status);
940 if (result2)
941 usb_stor_dbg(us, "cannot read status\n");
942 else if (status != 0xc0)
943 usb_stor_dbg(us, "status after write: 0x%x\n", status);
944 }
945#endif
946
947#if 0
948 {
949 int result2 = sddr09_test_unit_ready(us);
950 }
951#endif
952
953 return result;
954}
955
956static int
957sddr09_write_data(struct us_data *us,
958 unsigned long address,
959 unsigned int sectors) {
960
961 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
962 unsigned int lba, maxlba, page, pages;
963 unsigned int pagelen, blocklen;
964 unsigned char *blockbuffer;
965 unsigned char *buffer;
966 unsigned int len, offset;
967 struct scatterlist *sg;
968 int result;
969
970 /* Figure out the initial LBA and page */
971 lba = address >> info->blockshift;
972 page = (address & info->blockmask);
973 maxlba = info->capacity >> (info->pageshift + info->blockshift);
974 if (lba >= maxlba)
975 return -EIO;
976
977 /*
978 * blockbuffer is used for reading in the old data, overwriting
979 * with the new data, and performing ECC calculations
980 */
981
982 /*
983 * TODO: instead of doing kmalloc/kfree for each write,
984 * add a bufferpointer to the info structure
985 */
986
987 pagelen = (1 << info->pageshift) + (1 << CONTROL_SHIFT);
988 blocklen = (pagelen << info->blockshift);
989 blockbuffer = kmalloc(blocklen, GFP_NOIO);
990 if (!blockbuffer)
991 return -ENOMEM;
992
993 /*
994 * Since we don't write the user data directly to the device,
995 * we have to create a bounce buffer and move the data a piece
996 * at a time between the bounce buffer and the actual transfer buffer.
997 */
998
999 len = min(sectors, (unsigned int) info->blocksize) * info->pagesize;
1000 buffer = kmalloc(len, GFP_NOIO);
1001 if (!buffer) {
1002 kfree(blockbuffer);
1003 return -ENOMEM;
1004 }
1005
1006 result = 0;
1007 offset = 0;
1008 sg = NULL;
1009
1010 while (sectors > 0) {
1011
1012 /* Write as many sectors as possible in this block */
1013
1014 pages = min(sectors, info->blocksize - page);
1015 len = (pages << info->pageshift);
1016
1017 /* Not overflowing capacity? */
1018 if (lba >= maxlba) {
1019 usb_stor_dbg(us, "Error: Requested lba %u exceeds maximum %u\n",
1020 lba, maxlba);
1021 result = -EIO;
1022 break;
1023 }
1024
1025 /* Get the data from the transfer buffer */
1026 usb_stor_access_xfer_buf(buffer, len, us->srb,
1027 &sg, &offset, FROM_XFER_BUF);
1028
1029 result = sddr09_write_lba(us, lba, page, pages,
1030 buffer, blockbuffer);
1031 if (result)
1032 break;
1033
1034 page = 0;
1035 lba++;
1036 sectors -= pages;
1037 }
1038
1039 kfree(buffer);
1040 kfree(blockbuffer);
1041
1042 return result;
1043}
1044
1045static int
1046sddr09_read_control(struct us_data *us,
1047 unsigned long address,
1048 unsigned int blocks,
1049 unsigned char *content,
1050 int use_sg) {
1051
1052 usb_stor_dbg(us, "Read control address %lu, blocks %d\n",
1053 address, blocks);
1054
1055 return sddr09_read21(us, address, blocks,
1056 CONTROL_SHIFT, content, use_sg);
1057}
1058
1059/*
1060 * Read Device ID Command: 12 bytes.
1061 * byte 0: opcode: ED
1062 *
1063 * Returns 2 bytes: Manufacturer ID and Device ID.
1064 * On more recent cards 3 bytes: the third byte is an option code A5
1065 * signifying that the secret command to read an 128-bit ID is available.
1066 * On still more recent cards 4 bytes: the fourth byte C0 means that
1067 * a second read ID cmd is available.
1068 */
1069static int
1070sddr09_read_deviceID(struct us_data *us, unsigned char *deviceID) {
1071 unsigned char *command = us->iobuf;
1072 unsigned char *content = us->iobuf;
1073 int result, i;
1074
1075 memset(command, 0, 12);
1076 command[0] = 0xED;
1077 command[1] = LUNBITS;
1078
1079 result = sddr09_send_scsi_command(us, command, 12);
1080 if (result)
1081 return result;
1082
1083 result = usb_stor_bulk_transfer_buf(us, us->recv_bulk_pipe,
1084 content, 64, NULL);
1085
1086 for (i = 0; i < 4; i++)
1087 deviceID[i] = content[i];
1088
1089 return (result == USB_STOR_XFER_GOOD ? 0 : -EIO);
1090}
1091
1092static int
1093sddr09_get_wp(struct us_data *us, struct sddr09_card_info *info) {
1094 int result;
1095 unsigned char status;
1096 const char *wp_fmt;
1097
1098 result = sddr09_read_status(us, &status);
1099 if (result) {
1100 usb_stor_dbg(us, "read_status fails\n");
1101 return result;
1102 }
1103 if ((status & 0x80) == 0) {
1104 info->flags |= SDDR09_WP; /* write protected */
1105 wp_fmt = " WP";
1106 } else {
1107 wp_fmt = "";
1108 }
1109 usb_stor_dbg(us, "status 0x%02X%s%s%s%s\n", status, wp_fmt,
1110 status & 0x40 ? " Ready" : "",
1111 status & LUNBITS ? " Suspended" : "",
1112 status & 0x01 ? " Error" : "");
1113
1114 return 0;
1115}
1116
1117#if 0
1118/*
1119 * Reset Command: 12 bytes.
1120 * byte 0: opcode: EB
1121 */
1122static int
1123sddr09_reset(struct us_data *us) {
1124
1125 unsigned char *command = us->iobuf;
1126
1127 memset(command, 0, 12);
1128 command[0] = 0xEB;
1129 command[1] = LUNBITS;
1130
1131 return sddr09_send_scsi_command(us, command, 12);
1132}
1133#endif
1134
1135static struct nand_flash_dev *
1136sddr09_get_cardinfo(struct us_data *us, unsigned char flags) {
1137 struct nand_flash_dev *cardinfo;
1138 unsigned char deviceID[4];
1139 char blurbtxt[256];
1140 int result;
1141
1142 usb_stor_dbg(us, "Reading capacity...\n");
1143
1144 result = sddr09_read_deviceID(us, deviceID);
1145
1146 if (result) {
1147 usb_stor_dbg(us, "Result of read_deviceID is %d\n", result);
1148 printk(KERN_WARNING "sddr09: could not read card info\n");
1149 return NULL;
1150 }
1151
1152 sprintf(blurbtxt, "sddr09: Found Flash card, ID = %4ph", deviceID);
1153
1154 /* Byte 0 is the manufacturer */
1155 sprintf(blurbtxt + strlen(blurbtxt),
1156 ": Manuf. %s",
1157 nand_flash_manufacturer(deviceID[0]));
1158
1159 /* Byte 1 is the device type */
1160 cardinfo = nand_find_id(deviceID[1]);
1161 if (cardinfo) {
1162 /*
1163 * MB or MiB? It is neither. A 16 MB card has
1164 * 17301504 raw bytes, of which 16384000 are
1165 * usable for user data.
1166 */
1167 sprintf(blurbtxt + strlen(blurbtxt),
1168 ", %d MB", 1<<(cardinfo->chipshift - 20));
1169 } else {
1170 sprintf(blurbtxt + strlen(blurbtxt),
1171 ", type unrecognized");
1172 }
1173
1174 /* Byte 2 is code to signal availability of 128-bit ID */
1175 if (deviceID[2] == 0xa5) {
1176 sprintf(blurbtxt + strlen(blurbtxt),
1177 ", 128-bit ID");
1178 }
1179
1180 /* Byte 3 announces the availability of another read ID command */
1181 if (deviceID[3] == 0xc0) {
1182 sprintf(blurbtxt + strlen(blurbtxt),
1183 ", extra cmd");
1184 }
1185
1186 if (flags & SDDR09_WP)
1187 sprintf(blurbtxt + strlen(blurbtxt),
1188 ", WP");
1189
1190 printk(KERN_WARNING "%s\n", blurbtxt);
1191
1192 return cardinfo;
1193}
1194
1195static int
1196sddr09_read_map(struct us_data *us) {
1197
1198 struct sddr09_card_info *info = (struct sddr09_card_info *) us->extra;
1199 int numblocks, alloc_len, alloc_blocks;
1200 int i, j, result;
1201 unsigned char *buffer, *buffer_end, *ptr;
1202 unsigned int lba, lbact;
1203
1204 if (!info->capacity)
1205 return -1;
1206
1207 /*
1208 * size of a block is 1 << (blockshift + pageshift) bytes
1209 * divide into the total capacity to get the number of blocks
1210 */
1211
1212 numblocks = info->capacity >> (info->blockshift + info->pageshift);
1213
1214 /*
1215 * read 64 bytes for every block (actually 1 << CONTROL_SHIFT)
1216 * but only use a 64 KB buffer
1217 * buffer size used must be a multiple of (1 << CONTROL_SHIFT)
1218 */
1219#define SDDR09_READ_MAP_BUFSZ 65536
1220
1221 alloc_blocks = min(numblocks, SDDR09_READ_MAP_BUFSZ >> CONTROL_SHIFT);
1222 alloc_len = (alloc_blocks << CONTROL_SHIFT);
1223 buffer = kmalloc(alloc_len, GFP_NOIO);
1224 if (!buffer) {
1225 result = -1;
1226 goto done;
1227 }
1228 buffer_end = buffer + alloc_len;
1229
1230#undef SDDR09_READ_MAP_BUFSZ
1231
1232 kfree(info->lba_to_pba);
1233 kfree(info->pba_to_lba);
1234 info->lba_to_pba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
1235 info->pba_to_lba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
1236
1237 if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) {
1238 printk(KERN_WARNING "sddr09_read_map: out of memory\n");
1239 result = -1;
1240 goto done;
1241 }
1242
1243 for (i = 0; i < numblocks; i++)
1244 info->lba_to_pba[i] = info->pba_to_lba[i] = UNDEF;
1245
1246 /*
1247 * Define lba-pba translation table
1248 */
1249
1250 ptr = buffer_end;
1251 for (i = 0; i < numblocks; i++) {
1252 ptr += (1 << CONTROL_SHIFT);
1253 if (ptr >= buffer_end) {
1254 unsigned long address;
1255
1256 address = i << (info->pageshift + info->blockshift);
1257 result = sddr09_read_control(
1258 us, address>>1,
1259 min(alloc_blocks, numblocks - i),
1260 buffer, 0);
1261 if (result) {
1262 result = -1;
1263 goto done;
1264 }
1265 ptr = buffer;
1266 }
1267
1268 if (i == 0 || i == 1) {
1269 info->pba_to_lba[i] = UNUSABLE;
1270 continue;
1271 }
1272
1273 /* special PBAs have control field 0^16 */
1274 for (j = 0; j < 16; j++)
1275 if (ptr[j] != 0)
1276 goto nonz;
1277 info->pba_to_lba[i] = UNUSABLE;
1278 printk(KERN_WARNING "sddr09: PBA %d has no logical mapping\n",
1279 i);
1280 continue;
1281
1282 nonz:
1283 /* unwritten PBAs have control field FF^16 */
1284 for (j = 0; j < 16; j++)
1285 if (ptr[j] != 0xff)
1286 goto nonff;
1287 continue;
1288
1289 nonff:
1290 /* normal PBAs start with six FFs */
1291 if (j < 6) {
1292 printk(KERN_WARNING
1293 "sddr09: PBA %d has no logical mapping: "
1294 "reserved area = %02X%02X%02X%02X "
1295 "data status %02X block status %02X\n",
1296 i, ptr[0], ptr[1], ptr[2], ptr[3],
1297 ptr[4], ptr[5]);
1298 info->pba_to_lba[i] = UNUSABLE;
1299 continue;
1300 }
1301
1302 if ((ptr[6] >> 4) != 0x01) {
1303 printk(KERN_WARNING
1304 "sddr09: PBA %d has invalid address field "
1305 "%02X%02X/%02X%02X\n",
1306 i, ptr[6], ptr[7], ptr[11], ptr[12]);
1307 info->pba_to_lba[i] = UNUSABLE;
1308 continue;
1309 }
1310
1311 /* check even parity */
1312 if (parity[ptr[6] ^ ptr[7]]) {
1313 printk(KERN_WARNING
1314 "sddr09: Bad parity in LBA for block %d"
1315 " (%02X %02X)\n", i, ptr[6], ptr[7]);
1316 info->pba_to_lba[i] = UNUSABLE;
1317 continue;
1318 }
1319
1320 lba = short_pack(ptr[7], ptr[6]);
1321 lba = (lba & 0x07FF) >> 1;
1322
1323 /*
1324 * Every 1024 physical blocks ("zone"), the LBA numbers
1325 * go back to zero, but are within a higher block of LBA's.
1326 * Also, there is a maximum of 1000 LBA's per zone.
1327 * In other words, in PBA 1024-2047 you will find LBA 0-999
1328 * which are really LBA 1000-1999. This allows for 24 bad
1329 * or special physical blocks per zone.
1330 */
1331
1332 if (lba >= 1000) {
1333 printk(KERN_WARNING
1334 "sddr09: Bad low LBA %d for block %d\n",
1335 lba, i);
1336 goto possibly_erase;
1337 }
1338
1339 lba += 1000*(i/0x400);
1340
1341 if (info->lba_to_pba[lba] != UNDEF) {
1342 printk(KERN_WARNING
1343 "sddr09: LBA %d seen for PBA %d and %d\n",
1344 lba, info->lba_to_pba[lba], i);
1345 goto possibly_erase;
1346 }
1347
1348 info->pba_to_lba[i] = lba;
1349 info->lba_to_pba[lba] = i;
1350 continue;
1351
1352 possibly_erase:
1353 if (erase_bad_lba_entries) {
1354 unsigned long address;
1355
1356 address = (i << (info->pageshift + info->blockshift));
1357 sddr09_erase(us, address>>1);
1358 info->pba_to_lba[i] = UNDEF;
1359 } else
1360 info->pba_to_lba[i] = UNUSABLE;
1361 }
1362
1363 /*
1364 * Approximate capacity. This is not entirely correct yet,
1365 * since a zone with less than 1000 usable pages leads to
1366 * missing LBAs. Especially if it is the last zone, some
1367 * LBAs can be past capacity.
1368 */
1369 lbact = 0;
1370 for (i = 0; i < numblocks; i += 1024) {
1371 int ct = 0;
1372
1373 for (j = 0; j < 1024 && i+j < numblocks; j++) {
1374 if (info->pba_to_lba[i+j] != UNUSABLE) {
1375 if (ct >= 1000)
1376 info->pba_to_lba[i+j] = SPARE;
1377 else
1378 ct++;
1379 }
1380 }
1381 lbact += ct;
1382 }
1383 info->lbact = lbact;
1384 usb_stor_dbg(us, "Found %d LBA's\n", lbact);
1385 result = 0;
1386
1387 done:
1388 if (result != 0) {
1389 kfree(info->lba_to_pba);
1390 kfree(info->pba_to_lba);
1391 info->lba_to_pba = NULL;
1392 info->pba_to_lba = NULL;
1393 }
1394 kfree(buffer);
1395 return result;
1396}
1397
1398static void
1399sddr09_card_info_destructor(void *extra) {
1400 struct sddr09_card_info *info = (struct sddr09_card_info *)extra;
1401
1402 if (!info)
1403 return;
1404
1405 kfree(info->lba_to_pba);
1406 kfree(info->pba_to_lba);
1407}
1408
1409static int
1410sddr09_common_init(struct us_data *us) {
1411 int result;
1412
1413 /* set the configuration -- STALL is an acceptable response here */
1414 if (us->pusb_dev->actconfig->desc.bConfigurationValue != 1) {
1415 usb_stor_dbg(us, "active config #%d != 1 ??\n",
1416 us->pusb_dev->actconfig->desc.bConfigurationValue);
1417 return -EINVAL;
1418 }
1419
1420 result = usb_reset_configuration(us->pusb_dev);
1421 usb_stor_dbg(us, "Result of usb_reset_configuration is %d\n", result);
1422 if (result == -EPIPE) {
1423 usb_stor_dbg(us, "-- stall on control interface\n");
1424 } else if (result != 0) {
1425 /* it's not a stall, but another error -- time to bail */
1426 usb_stor_dbg(us, "-- Unknown error. Rejecting device\n");
1427 return -EINVAL;
1428 }
1429
1430 us->extra = kzalloc(sizeof(struct sddr09_card_info), GFP_NOIO);
1431 if (!us->extra)
1432 return -ENOMEM;
1433 us->extra_destructor = sddr09_card_info_destructor;
1434
1435 nand_init_ecc();
1436 return 0;
1437}
1438
1439
1440/*
1441 * This is needed at a very early stage. If this is not listed in the
1442 * unusual devices list but called from here then LUN 0 of the combo reader
1443 * is not recognized. But I do not know what precisely these calls do.
1444 */
1445static int
1446usb_stor_sddr09_dpcm_init(struct us_data *us) {
1447 int result;
1448 unsigned char *data = us->iobuf;
1449
1450 result = sddr09_common_init(us);
1451 if (result)
1452 return result;
1453
1454 result = sddr09_send_command(us, 0x01, USB_DIR_IN, data, 2);
1455 if (result) {
1456 usb_stor_dbg(us, "send_command fails\n");
1457 return result;
1458 }
1459
1460 usb_stor_dbg(us, "%02X %02X\n", data[0], data[1]);
1461 // get 07 02
1462
1463 result = sddr09_send_command(us, 0x08, USB_DIR_IN, data, 2);
1464 if (result) {
1465 usb_stor_dbg(us, "2nd send_command fails\n");
1466 return result;
1467 }
1468
1469 usb_stor_dbg(us, "%02X %02X\n", data[0], data[1]);
1470 // get 07 00
1471
1472 result = sddr09_request_sense(us, data, 18);
1473 if (result == 0 && data[2] != 0) {
1474 int j;
1475 for (j=0; j<18; j++)
1476 printk(" %02X", data[j]);
1477 printk("\n");
1478 // get 70 00 00 00 00 00 00 * 00 00 00 00 00 00
1479 // 70: current command
1480 // sense key 0, sense code 0, extd sense code 0
1481 // additional transfer length * = sizeof(data) - 7
1482 // Or: 70 00 06 00 00 00 00 0b 00 00 00 00 28 00 00 00 00 00
1483 // sense key 06, sense code 28: unit attention,
1484 // not ready to ready transition
1485 }
1486
1487 // test unit ready
1488
1489 return 0; /* not result */
1490}
1491
1492/*
1493 * Transport for the Microtech DPCM-USB
1494 */
1495static int dpcm_transport(struct scsi_cmnd *srb, struct us_data *us)
1496{
1497 int ret;
1498
1499 usb_stor_dbg(us, "LUN=%d\n", (u8)srb->device->lun);
1500
1501 switch (srb->device->lun) {
1502 case 0:
1503
1504 /*
1505 * LUN 0 corresponds to the CompactFlash card reader.
1506 */
1507 ret = usb_stor_CB_transport(srb, us);
1508 break;
1509
1510 case 1:
1511
1512 /*
1513 * LUN 1 corresponds to the SmartMedia card reader.
1514 */
1515
1516 /*
1517 * Set the LUN to 0 (just in case).
1518 */
1519 srb->device->lun = 0;
1520 ret = sddr09_transport(srb, us);
1521 srb->device->lun = 1;
1522 break;
1523
1524 default:
1525 usb_stor_dbg(us, "Invalid LUN %d\n", (u8)srb->device->lun);
1526 ret = USB_STOR_TRANSPORT_ERROR;
1527 break;
1528 }
1529 return ret;
1530}
1531
1532
1533/*
1534 * Transport for the Sandisk SDDR-09
1535 */
1536static int sddr09_transport(struct scsi_cmnd *srb, struct us_data *us)
1537{
1538 static unsigned char sensekey = 0, sensecode = 0;
1539 static unsigned char havefakesense = 0;
1540 int result, i;
1541 unsigned char *ptr = us->iobuf;
1542 unsigned long capacity;
1543 unsigned int page, pages;
1544
1545 struct sddr09_card_info *info;
1546
1547 static unsigned char inquiry_response[8] = {
1548 0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00
1549 };
1550
1551 /* note: no block descriptor support */
1552 static unsigned char mode_page_01[19] = {
1553 0x00, 0x0F, 0x00, 0x0, 0x0, 0x0, 0x00,
1554 0x01, 0x0A,
1555 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
1556 };
1557
1558 info = (struct sddr09_card_info *)us->extra;
1559
1560 if (srb->cmnd[0] == REQUEST_SENSE && havefakesense) {
1561 /* for a faked command, we have to follow with a faked sense */
1562 memset(ptr, 0, 18);
1563 ptr[0] = 0x70;
1564 ptr[2] = sensekey;
1565 ptr[7] = 11;
1566 ptr[12] = sensecode;
1567 usb_stor_set_xfer_buf(ptr, 18, srb);
1568 sensekey = sensecode = havefakesense = 0;
1569 return USB_STOR_TRANSPORT_GOOD;
1570 }
1571
1572 havefakesense = 1;
1573
1574 /*
1575 * Dummy up a response for INQUIRY since SDDR09 doesn't
1576 * respond to INQUIRY commands
1577 */
1578
1579 if (srb->cmnd[0] == INQUIRY) {
1580 memcpy(ptr, inquiry_response, 8);
1581 fill_inquiry_response(us, ptr, 36);
1582 return USB_STOR_TRANSPORT_GOOD;
1583 }
1584
1585 if (srb->cmnd[0] == READ_CAPACITY) {
1586 struct nand_flash_dev *cardinfo;
1587
1588 sddr09_get_wp(us, info); /* read WP bit */
1589
1590 cardinfo = sddr09_get_cardinfo(us, info->flags);
1591 if (!cardinfo) {
1592 /* probably no media */
1593 init_error:
1594 sensekey = 0x02; /* not ready */
1595 sensecode = 0x3a; /* medium not present */
1596 return USB_STOR_TRANSPORT_FAILED;
1597 }
1598
1599 info->capacity = (1 << cardinfo->chipshift);
1600 info->pageshift = cardinfo->pageshift;
1601 info->pagesize = (1 << info->pageshift);
1602 info->blockshift = cardinfo->blockshift;
1603 info->blocksize = (1 << info->blockshift);
1604 info->blockmask = info->blocksize - 1;
1605
1606 // map initialization, must follow get_cardinfo()
1607 if (sddr09_read_map(us)) {
1608 /* probably out of memory */
1609 goto init_error;
1610 }
1611
1612 // Report capacity
1613
1614 capacity = (info->lbact << info->blockshift) - 1;
1615
1616 ((__be32 *) ptr)[0] = cpu_to_be32(capacity);
1617
1618 // Report page size
1619
1620 ((__be32 *) ptr)[1] = cpu_to_be32(info->pagesize);
1621 usb_stor_set_xfer_buf(ptr, 8, srb);
1622
1623 return USB_STOR_TRANSPORT_GOOD;
1624 }
1625
1626 if (srb->cmnd[0] == MODE_SENSE_10) {
1627 int modepage = (srb->cmnd[2] & 0x3F);
1628
1629 /*
1630 * They ask for the Read/Write error recovery page,
1631 * or for all pages.
1632 */
1633 /* %% We should check DBD %% */
1634 if (modepage == 0x01 || modepage == 0x3F) {
1635 usb_stor_dbg(us, "Dummy up request for mode page 0x%x\n",
1636 modepage);
1637
1638 memcpy(ptr, mode_page_01, sizeof(mode_page_01));
1639 ((__be16*)ptr)[0] = cpu_to_be16(sizeof(mode_page_01) - 2);
1640 ptr[3] = (info->flags & SDDR09_WP) ? 0x80 : 0;
1641 usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb);
1642 return USB_STOR_TRANSPORT_GOOD;
1643 }
1644
1645 sensekey = 0x05; /* illegal request */
1646 sensecode = 0x24; /* invalid field in CDB */
1647 return USB_STOR_TRANSPORT_FAILED;
1648 }
1649
1650 if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL)
1651 return USB_STOR_TRANSPORT_GOOD;
1652
1653 havefakesense = 0;
1654
1655 if (srb->cmnd[0] == READ_10) {
1656
1657 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
1658 page <<= 16;
1659 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
1660 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
1661
1662 usb_stor_dbg(us, "READ_10: read page %d pagect %d\n",
1663 page, pages);
1664
1665 result = sddr09_read_data(us, page, pages);
1666 return (result == 0 ? USB_STOR_TRANSPORT_GOOD :
1667 USB_STOR_TRANSPORT_ERROR);
1668 }
1669
1670 if (srb->cmnd[0] == WRITE_10) {
1671
1672 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
1673 page <<= 16;
1674 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
1675 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
1676
1677 usb_stor_dbg(us, "WRITE_10: write page %d pagect %d\n",
1678 page, pages);
1679
1680 result = sddr09_write_data(us, page, pages);
1681 return (result == 0 ? USB_STOR_TRANSPORT_GOOD :
1682 USB_STOR_TRANSPORT_ERROR);
1683 }
1684
1685 /*
1686 * catch-all for all other commands, except
1687 * pass TEST_UNIT_READY and REQUEST_SENSE through
1688 */
1689 if (srb->cmnd[0] != TEST_UNIT_READY &&
1690 srb->cmnd[0] != REQUEST_SENSE) {
1691 sensekey = 0x05; /* illegal request */
1692 sensecode = 0x20; /* invalid command */
1693 havefakesense = 1;
1694 return USB_STOR_TRANSPORT_FAILED;
1695 }
1696
1697 for (; srb->cmd_len<12; srb->cmd_len++)
1698 srb->cmnd[srb->cmd_len] = 0;
1699
1700 srb->cmnd[1] = LUNBITS;
1701
1702 ptr[0] = 0;
1703 for (i=0; i<12; i++)
1704 sprintf(ptr+strlen(ptr), "%02X ", srb->cmnd[i]);
1705
1706 usb_stor_dbg(us, "Send control for command %s\n", ptr);
1707
1708 result = sddr09_send_scsi_command(us, srb->cmnd, 12);
1709 if (result) {
1710 usb_stor_dbg(us, "sddr09_send_scsi_command returns %d\n",
1711 result);
1712 return USB_STOR_TRANSPORT_ERROR;
1713 }
1714
1715 if (scsi_bufflen(srb) == 0)
1716 return USB_STOR_TRANSPORT_GOOD;
1717
1718 if (srb->sc_data_direction == DMA_TO_DEVICE ||
1719 srb->sc_data_direction == DMA_FROM_DEVICE) {
1720 unsigned int pipe = (srb->sc_data_direction == DMA_TO_DEVICE)
1721 ? us->send_bulk_pipe : us->recv_bulk_pipe;
1722
1723 usb_stor_dbg(us, "%s %d bytes\n",
1724 (srb->sc_data_direction == DMA_TO_DEVICE) ?
1725 "sending" : "receiving",
1726 scsi_bufflen(srb));
1727
1728 result = usb_stor_bulk_srb(us, pipe, srb);
1729
1730 return (result == USB_STOR_XFER_GOOD ?
1731 USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_ERROR);
1732 }
1733
1734 return USB_STOR_TRANSPORT_GOOD;
1735}
1736
1737/*
1738 * Initialization routine for the sddr09 subdriver
1739 */
1740static int
1741usb_stor_sddr09_init(struct us_data *us) {
1742 return sddr09_common_init(us);
1743}
1744
1745static struct scsi_host_template sddr09_host_template;
1746
1747static int sddr09_probe(struct usb_interface *intf,
1748 const struct usb_device_id *id)
1749{
1750 struct us_data *us;
1751 int result;
1752
1753 result = usb_stor_probe1(&us, intf, id,
1754 (id - sddr09_usb_ids) + sddr09_unusual_dev_list,
1755 &sddr09_host_template);
1756 if (result)
1757 return result;
1758
1759 if (us->protocol == USB_PR_DPCM_USB) {
1760 us->transport_name = "Control/Bulk-EUSB/SDDR09";
1761 us->transport = dpcm_transport;
1762 us->transport_reset = usb_stor_CB_reset;
1763 us->max_lun = 1;
1764 } else {
1765 us->transport_name = "EUSB/SDDR09";
1766 us->transport = sddr09_transport;
1767 us->transport_reset = usb_stor_CB_reset;
1768 us->max_lun = 0;
1769 }
1770
1771 result = usb_stor_probe2(us);
1772 return result;
1773}
1774
1775static struct usb_driver sddr09_driver = {
1776 .name = DRV_NAME,
1777 .probe = sddr09_probe,
1778 .disconnect = usb_stor_disconnect,
1779 .suspend = usb_stor_suspend,
1780 .resume = usb_stor_resume,
1781 .reset_resume = usb_stor_reset_resume,
1782 .pre_reset = usb_stor_pre_reset,
1783 .post_reset = usb_stor_post_reset,
1784 .id_table = sddr09_usb_ids,
1785 .soft_unbind = 1,
1786 .no_dynamic_id = 1,
1787};
1788
1789module_usb_stor_driver(sddr09_driver, sddr09_host_template, DRV_NAME);