Merge branch 'stable/bug-fixes-rc2' of git://git.kernel.org/pub/scm/linux/kernel...
[pandora-kernel.git] / drivers / ide / ide-taskfile.c
1 /*
2  *  Copyright (C) 2000-2002        Michael Cornwell <cornwell@acm.org>
3  *  Copyright (C) 2000-2002        Andre Hedrick <andre@linux-ide.org>
4  *  Copyright (C) 2001-2002        Klaus Smolin
5  *                                      IBM Storage Technology Division
6  *  Copyright (C) 2003-2004, 2007  Bartlomiej Zolnierkiewicz
7  *
8  *  The big the bad and the ugly.
9  */
10
11 #include <linux/types.h>
12 #include <linux/string.h>
13 #include <linux/kernel.h>
14 #include <linux/sched.h>
15 #include <linux/interrupt.h>
16 #include <linux/errno.h>
17 #include <linux/slab.h>
18 #include <linux/delay.h>
19 #include <linux/hdreg.h>
20 #include <linux/ide.h>
21 #include <linux/scatterlist.h>
22 #include <linux/uaccess.h>
23
24 #include <asm/io.h>
25
26 void ide_tf_readback(ide_drive_t *drive, struct ide_cmd *cmd)
27 {
28         ide_hwif_t *hwif = drive->hwif;
29         const struct ide_tp_ops *tp_ops = hwif->tp_ops;
30
31         /* Be sure we're looking at the low order bytes */
32         tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS);
33
34         tp_ops->tf_read(drive, &cmd->tf, cmd->valid.in.tf);
35
36         if (cmd->tf_flags & IDE_TFLAG_LBA48) {
37                 tp_ops->write_devctl(hwif, ATA_HOB | ATA_DEVCTL_OBS);
38
39                 tp_ops->tf_read(drive, &cmd->hob, cmd->valid.in.hob);
40         }
41 }
42
43 void ide_tf_dump(const char *s, struct ide_cmd *cmd)
44 {
45 #ifdef DEBUG
46         printk("%s: tf: feat 0x%02x nsect 0x%02x lbal 0x%02x "
47                 "lbam 0x%02x lbah 0x%02x dev 0x%02x cmd 0x%02x\n",
48                s, cmd->tf.feature, cmd->tf.nsect,
49                cmd->tf.lbal, cmd->tf.lbam, cmd->tf.lbah,
50                cmd->tf.device, cmd->tf.command);
51         printk("%s: hob: nsect 0x%02x lbal 0x%02x lbam 0x%02x lbah 0x%02x\n",
52                s, cmd->hob.nsect, cmd->hob.lbal, cmd->hob.lbam, cmd->hob.lbah);
53 #endif
54 }
55
56 int taskfile_lib_get_identify(ide_drive_t *drive, u8 *buf)
57 {
58         struct ide_cmd cmd;
59
60         memset(&cmd, 0, sizeof(cmd));
61         cmd.tf.nsect = 0x01;
62         if (drive->media == ide_disk)
63                 cmd.tf.command = ATA_CMD_ID_ATA;
64         else
65                 cmd.tf.command = ATA_CMD_ID_ATAPI;
66         cmd.valid.out.tf = IDE_VALID_OUT_TF | IDE_VALID_DEVICE;
67         cmd.valid.in.tf  = IDE_VALID_IN_TF  | IDE_VALID_DEVICE;
68         cmd.protocol = ATA_PROT_PIO;
69
70         return ide_raw_taskfile(drive, &cmd, buf, 1);
71 }
72
73 static ide_startstop_t task_no_data_intr(ide_drive_t *);
74 static ide_startstop_t pre_task_out_intr(ide_drive_t *, struct ide_cmd *);
75 static ide_startstop_t task_pio_intr(ide_drive_t *);
76
77 ide_startstop_t do_rw_taskfile(ide_drive_t *drive, struct ide_cmd *orig_cmd)
78 {
79         ide_hwif_t *hwif = drive->hwif;
80         struct ide_cmd *cmd = &hwif->cmd;
81         struct ide_taskfile *tf = &cmd->tf;
82         ide_handler_t *handler = NULL;
83         const struct ide_tp_ops *tp_ops = hwif->tp_ops;
84         const struct ide_dma_ops *dma_ops = hwif->dma_ops;
85
86         if (orig_cmd->protocol == ATA_PROT_PIO &&
87             (orig_cmd->tf_flags & IDE_TFLAG_MULTI_PIO) &&
88             drive->mult_count == 0) {
89                 pr_err("%s: multimode not set!\n", drive->name);
90                 return ide_stopped;
91         }
92
93         if (orig_cmd->ftf_flags & IDE_FTFLAG_FLAGGED)
94                 orig_cmd->ftf_flags |= IDE_FTFLAG_SET_IN_FLAGS;
95
96         memcpy(cmd, orig_cmd, sizeof(*cmd));
97
98         if ((cmd->tf_flags & IDE_TFLAG_DMA_PIO_FALLBACK) == 0) {
99                 ide_tf_dump(drive->name, cmd);
100                 tp_ops->write_devctl(hwif, ATA_DEVCTL_OBS);
101
102                 if (cmd->ftf_flags & IDE_FTFLAG_OUT_DATA) {
103                         u8 data[2] = { cmd->tf.data, cmd->hob.data };
104
105                         tp_ops->output_data(drive, cmd, data, 2);
106                 }
107
108                 if (cmd->valid.out.tf & IDE_VALID_DEVICE) {
109                         u8 HIHI = (cmd->tf_flags & IDE_TFLAG_LBA48) ?
110                                   0xE0 : 0xEF;
111
112                         if (!(cmd->ftf_flags & IDE_FTFLAG_FLAGGED))
113                                 cmd->tf.device &= HIHI;
114                         cmd->tf.device |= drive->select;
115                 }
116
117                 tp_ops->tf_load(drive, &cmd->hob, cmd->valid.out.hob);
118                 tp_ops->tf_load(drive, &cmd->tf,  cmd->valid.out.tf);
119         }
120
121         switch (cmd->protocol) {
122         case ATA_PROT_PIO:
123                 if (cmd->tf_flags & IDE_TFLAG_WRITE) {
124                         tp_ops->exec_command(hwif, tf->command);
125                         ndelay(400);    /* FIXME */
126                         return pre_task_out_intr(drive, cmd);
127                 }
128                 handler = task_pio_intr;
129                 /* fall-through */
130         case ATA_PROT_NODATA:
131                 if (handler == NULL)
132                         handler = task_no_data_intr;
133                 ide_execute_command(drive, cmd, handler, WAIT_WORSTCASE);
134                 return ide_started;
135         case ATA_PROT_DMA:
136                 if (ide_dma_prepare(drive, cmd))
137                         return ide_stopped;
138                 hwif->expiry = dma_ops->dma_timer_expiry;
139                 ide_execute_command(drive, cmd, ide_dma_intr, 2 * WAIT_CMD);
140                 dma_ops->dma_start(drive);
141         default:
142                 return ide_started;
143         }
144 }
145 EXPORT_SYMBOL_GPL(do_rw_taskfile);
146
147 static ide_startstop_t task_no_data_intr(ide_drive_t *drive)
148 {
149         ide_hwif_t *hwif = drive->hwif;
150         struct ide_cmd *cmd = &hwif->cmd;
151         struct ide_taskfile *tf = &cmd->tf;
152         int custom = (cmd->tf_flags & IDE_TFLAG_CUSTOM_HANDLER) ? 1 : 0;
153         int retries = (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) ? 5 : 1;
154         u8 stat;
155
156         local_irq_enable_in_hardirq();
157
158         while (1) {
159                 stat = hwif->tp_ops->read_status(hwif);
160                 if ((stat & ATA_BUSY) == 0 || retries-- == 0)
161                         break;
162                 udelay(10);
163         };
164
165         if (!OK_STAT(stat, ATA_DRDY, BAD_STAT)) {
166                 if (custom && tf->command == ATA_CMD_SET_MULTI) {
167                         drive->mult_req = drive->mult_count = 0;
168                         drive->special_flags |= IDE_SFLAG_RECALIBRATE;
169                         (void)ide_dump_status(drive, __func__, stat);
170                         return ide_stopped;
171                 } else if (custom && tf->command == ATA_CMD_INIT_DEV_PARAMS) {
172                         if ((stat & (ATA_ERR | ATA_DRQ)) == 0) {
173                                 ide_set_handler(drive, &task_no_data_intr,
174                                                 WAIT_WORSTCASE);
175                                 return ide_started;
176                         }
177                 }
178                 return ide_error(drive, "task_no_data_intr", stat);
179         }
180
181         if (custom && tf->command == ATA_CMD_SET_MULTI)
182                 drive->mult_count = drive->mult_req;
183
184         if (custom == 0 || tf->command == ATA_CMD_IDLEIMMEDIATE ||
185             tf->command == ATA_CMD_CHK_POWER) {
186                 struct request *rq = hwif->rq;
187
188                 if (blk_pm_request(rq))
189                         ide_complete_pm_rq(drive, rq);
190                 else
191                         ide_finish_cmd(drive, cmd, stat);
192         }
193
194         return ide_stopped;
195 }
196
197 static u8 wait_drive_not_busy(ide_drive_t *drive)
198 {
199         ide_hwif_t *hwif = drive->hwif;
200         int retries;
201         u8 stat;
202
203         /*
204          * Last sector was transferred, wait until device is ready.  This can
205          * take up to 6 ms on some ATAPI devices, so we will wait max 10 ms.
206          */
207         for (retries = 0; retries < 1000; retries++) {
208                 stat = hwif->tp_ops->read_status(hwif);
209
210                 if (stat & ATA_BUSY)
211                         udelay(10);
212                 else
213                         break;
214         }
215
216         if (stat & ATA_BUSY)
217                 pr_err("%s: drive still BUSY!\n", drive->name);
218
219         return stat;
220 }
221
222 void ide_pio_bytes(ide_drive_t *drive, struct ide_cmd *cmd,
223                    unsigned int write, unsigned int len)
224 {
225         ide_hwif_t *hwif = drive->hwif;
226         struct scatterlist *sg = hwif->sg_table;
227         struct scatterlist *cursg = cmd->cursg;
228         unsigned long uninitialized_var(flags);
229         struct page *page;
230         unsigned int offset;
231         u8 *buf;
232
233         cursg = cmd->cursg;
234         if (cursg == NULL)
235                 cursg = cmd->cursg = sg;
236
237         while (len) {
238                 unsigned nr_bytes = min(len, cursg->length - cmd->cursg_ofs);
239                 int page_is_high;
240
241                 if (nr_bytes > PAGE_SIZE)
242                         nr_bytes = PAGE_SIZE;
243
244                 page = sg_page(cursg);
245                 offset = cursg->offset + cmd->cursg_ofs;
246
247                 /* get the current page and offset */
248                 page = nth_page(page, (offset >> PAGE_SHIFT));
249                 offset %= PAGE_SIZE;
250
251                 page_is_high = PageHighMem(page);
252                 if (page_is_high)
253                         local_irq_save(flags);
254
255                 buf = kmap_atomic(page, KM_BIO_SRC_IRQ) + offset;
256
257                 cmd->nleft -= nr_bytes;
258                 cmd->cursg_ofs += nr_bytes;
259
260                 if (cmd->cursg_ofs == cursg->length) {
261                         cursg = cmd->cursg = sg_next(cmd->cursg);
262                         cmd->cursg_ofs = 0;
263                 }
264
265                 /* do the actual data transfer */
266                 if (write)
267                         hwif->tp_ops->output_data(drive, cmd, buf, nr_bytes);
268                 else
269                         hwif->tp_ops->input_data(drive, cmd, buf, nr_bytes);
270
271                 kunmap_atomic(buf, KM_BIO_SRC_IRQ);
272
273                 if (page_is_high)
274                         local_irq_restore(flags);
275
276                 len -= nr_bytes;
277         }
278 }
279 EXPORT_SYMBOL_GPL(ide_pio_bytes);
280
281 static void ide_pio_datablock(ide_drive_t *drive, struct ide_cmd *cmd,
282                               unsigned int write)
283 {
284         unsigned int nr_bytes;
285
286         u8 saved_io_32bit = drive->io_32bit;
287
288         if (cmd->tf_flags & IDE_TFLAG_FS)
289                 cmd->rq->errors = 0;
290
291         if (cmd->tf_flags & IDE_TFLAG_IO_16BIT)
292                 drive->io_32bit = 0;
293
294         touch_softlockup_watchdog();
295
296         if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
297                 nr_bytes = min_t(unsigned, cmd->nleft, drive->mult_count << 9);
298         else
299                 nr_bytes = SECTOR_SIZE;
300
301         ide_pio_bytes(drive, cmd, write, nr_bytes);
302
303         drive->io_32bit = saved_io_32bit;
304 }
305
306 static void ide_error_cmd(ide_drive_t *drive, struct ide_cmd *cmd)
307 {
308         if (cmd->tf_flags & IDE_TFLAG_FS) {
309                 int nr_bytes = cmd->nbytes - cmd->nleft;
310
311                 if (cmd->protocol == ATA_PROT_PIO &&
312                     ((cmd->tf_flags & IDE_TFLAG_WRITE) || cmd->nleft == 0)) {
313                         if (cmd->tf_flags & IDE_TFLAG_MULTI_PIO)
314                                 nr_bytes -= drive->mult_count << 9;
315                         else
316                                 nr_bytes -= SECTOR_SIZE;
317                 }
318
319                 if (nr_bytes > 0)
320                         ide_complete_rq(drive, 0, nr_bytes);
321         }
322 }
323
324 void ide_finish_cmd(ide_drive_t *drive, struct ide_cmd *cmd, u8 stat)
325 {
326         struct request *rq = drive->hwif->rq;
327         u8 err = ide_read_error(drive), nsect = cmd->tf.nsect;
328         u8 set_xfer = !!(cmd->tf_flags & IDE_TFLAG_SET_XFER);
329
330         ide_complete_cmd(drive, cmd, stat, err);
331         rq->errors = err;
332
333         if (err == 0 && set_xfer) {
334                 ide_set_xfer_rate(drive, nsect);
335                 ide_driveid_update(drive);
336         }
337
338         ide_complete_rq(drive, err ? -EIO : 0, blk_rq_bytes(rq));
339 }
340
341 /*
342  * Handler for command with PIO data phase.
343  */
344 static ide_startstop_t task_pio_intr(ide_drive_t *drive)
345 {
346         ide_hwif_t *hwif = drive->hwif;
347         struct ide_cmd *cmd = &drive->hwif->cmd;
348         u8 stat = hwif->tp_ops->read_status(hwif);
349         u8 write = !!(cmd->tf_flags & IDE_TFLAG_WRITE);
350
351         if (write == 0) {
352                 /* Error? */
353                 if (stat & ATA_ERR)
354                         goto out_err;
355
356                 /* Didn't want any data? Odd. */
357                 if ((stat & ATA_DRQ) == 0) {
358                         /* Command all done? */
359                         if (OK_STAT(stat, ATA_DRDY, ATA_BUSY))
360                                 goto out_end;
361
362                         /* Assume it was a spurious irq */
363                         goto out_wait;
364                 }
365         } else {
366                 if (!OK_STAT(stat, DRIVE_READY, drive->bad_wstat))
367                         goto out_err;
368
369                 /* Deal with unexpected ATA data phase. */
370                 if (((stat & ATA_DRQ) == 0) ^ (cmd->nleft == 0))
371                         goto out_err;
372         }
373
374         if (write && cmd->nleft == 0)
375                 goto out_end;
376
377         /* Still data left to transfer. */
378         ide_pio_datablock(drive, cmd, write);
379
380         /* Are we done? Check status and finish transfer. */
381         if (write == 0 && cmd->nleft == 0) {
382                 stat = wait_drive_not_busy(drive);
383                 if (!OK_STAT(stat, 0, BAD_STAT))
384                         goto out_err;
385
386                 goto out_end;
387         }
388 out_wait:
389         /* Still data left to transfer. */
390         ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
391         return ide_started;
392 out_end:
393         if ((cmd->tf_flags & IDE_TFLAG_FS) == 0)
394                 ide_finish_cmd(drive, cmd, stat);
395         else
396                 ide_complete_rq(drive, 0, blk_rq_sectors(cmd->rq) << 9);
397         return ide_stopped;
398 out_err:
399         ide_error_cmd(drive, cmd);
400         return ide_error(drive, __func__, stat);
401 }
402
403 static ide_startstop_t pre_task_out_intr(ide_drive_t *drive,
404                                          struct ide_cmd *cmd)
405 {
406         ide_startstop_t startstop;
407
408         if (ide_wait_stat(&startstop, drive, ATA_DRQ,
409                           drive->bad_wstat, WAIT_DRQ)) {
410                 pr_err("%s: no DRQ after issuing %sWRITE%s\n", drive->name,
411                         (cmd->tf_flags & IDE_TFLAG_MULTI_PIO) ? "MULT" : "",
412                         (drive->dev_flags & IDE_DFLAG_LBA48) ? "_EXT" : "");
413                 return startstop;
414         }
415
416         if ((drive->dev_flags & IDE_DFLAG_UNMASK) == 0)
417                 local_irq_disable();
418
419         ide_set_handler(drive, &task_pio_intr, WAIT_WORSTCASE);
420
421         ide_pio_datablock(drive, cmd, 1);
422
423         return ide_started;
424 }
425
426 int ide_raw_taskfile(ide_drive_t *drive, struct ide_cmd *cmd, u8 *buf,
427                      u16 nsect)
428 {
429         struct request *rq;
430         int error;
431         int rw = !(cmd->tf_flags & IDE_TFLAG_WRITE) ? READ : WRITE;
432
433         rq = blk_get_request(drive->queue, rw, __GFP_WAIT);
434         rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
435
436         /*
437          * (ks) We transfer currently only whole sectors.
438          * This is suffient for now.  But, it would be great,
439          * if we would find a solution to transfer any size.
440          * To support special commands like READ LONG.
441          */
442         if (nsect) {
443                 error = blk_rq_map_kern(drive->queue, rq, buf,
444                                         nsect * SECTOR_SIZE, __GFP_WAIT);
445                 if (error)
446                         goto put_req;
447         }
448
449         rq->special = cmd;
450         cmd->rq = rq;
451
452         error = blk_execute_rq(drive->queue, NULL, rq, 0);
453
454 put_req:
455         blk_put_request(rq);
456         return error;
457 }
458 EXPORT_SYMBOL(ide_raw_taskfile);
459
460 int ide_no_data_taskfile(ide_drive_t *drive, struct ide_cmd *cmd)
461 {
462         cmd->protocol = ATA_PROT_NODATA;
463
464         return ide_raw_taskfile(drive, cmd, NULL, 0);
465 }
466 EXPORT_SYMBOL_GPL(ide_no_data_taskfile);
467
468 #ifdef CONFIG_IDE_TASK_IOCTL
469 int ide_taskfile_ioctl(ide_drive_t *drive, unsigned long arg)
470 {
471         ide_task_request_t      *req_task;
472         struct ide_cmd          cmd;
473         u8 *outbuf              = NULL;
474         u8 *inbuf               = NULL;
475         u8 *data_buf            = NULL;
476         int err                 = 0;
477         int tasksize            = sizeof(struct ide_task_request_s);
478         unsigned int taskin     = 0;
479         unsigned int taskout    = 0;
480         u16 nsect               = 0;
481         char __user *buf = (char __user *)arg;
482
483         req_task = memdup_user(buf, tasksize);
484         if (IS_ERR(req_task))
485                 return PTR_ERR(req_task);
486
487         taskout = req_task->out_size;
488         taskin  = req_task->in_size;
489
490         if (taskin > 65536 || taskout > 65536) {
491                 err = -EINVAL;
492                 goto abort;
493         }
494
495         if (taskout) {
496                 int outtotal = tasksize;
497                 outbuf = kzalloc(taskout, GFP_KERNEL);
498                 if (outbuf == NULL) {
499                         err = -ENOMEM;
500                         goto abort;
501                 }
502                 if (copy_from_user(outbuf, buf + outtotal, taskout)) {
503                         err = -EFAULT;
504                         goto abort;
505                 }
506         }
507
508         if (taskin) {
509                 int intotal = tasksize + taskout;
510                 inbuf = kzalloc(taskin, GFP_KERNEL);
511                 if (inbuf == NULL) {
512                         err = -ENOMEM;
513                         goto abort;
514                 }
515                 if (copy_from_user(inbuf, buf + intotal, taskin)) {
516                         err = -EFAULT;
517                         goto abort;
518                 }
519         }
520
521         memset(&cmd, 0, sizeof(cmd));
522
523         memcpy(&cmd.hob, req_task->hob_ports, HDIO_DRIVE_HOB_HDR_SIZE - 2);
524         memcpy(&cmd.tf,  req_task->io_ports,  HDIO_DRIVE_TASK_HDR_SIZE);
525
526         cmd.valid.out.tf = IDE_VALID_DEVICE;
527         cmd.valid.in.tf  = IDE_VALID_DEVICE | IDE_VALID_IN_TF;
528         cmd.tf_flags = IDE_TFLAG_IO_16BIT;
529
530         if (drive->dev_flags & IDE_DFLAG_LBA48) {
531                 cmd.tf_flags |= IDE_TFLAG_LBA48;
532                 cmd.valid.in.hob = IDE_VALID_IN_HOB;
533         }
534
535         if (req_task->out_flags.all) {
536                 cmd.ftf_flags |= IDE_FTFLAG_FLAGGED;
537
538                 if (req_task->out_flags.b.data)
539                         cmd.ftf_flags |= IDE_FTFLAG_OUT_DATA;
540
541                 if (req_task->out_flags.b.nsector_hob)
542                         cmd.valid.out.hob |= IDE_VALID_NSECT;
543                 if (req_task->out_flags.b.sector_hob)
544                         cmd.valid.out.hob |= IDE_VALID_LBAL;
545                 if (req_task->out_flags.b.lcyl_hob)
546                         cmd.valid.out.hob |= IDE_VALID_LBAM;
547                 if (req_task->out_flags.b.hcyl_hob)
548                         cmd.valid.out.hob |= IDE_VALID_LBAH;
549
550                 if (req_task->out_flags.b.error_feature)
551                         cmd.valid.out.tf  |= IDE_VALID_FEATURE;
552                 if (req_task->out_flags.b.nsector)
553                         cmd.valid.out.tf  |= IDE_VALID_NSECT;
554                 if (req_task->out_flags.b.sector)
555                         cmd.valid.out.tf  |= IDE_VALID_LBAL;
556                 if (req_task->out_flags.b.lcyl)
557                         cmd.valid.out.tf  |= IDE_VALID_LBAM;
558                 if (req_task->out_flags.b.hcyl)
559                         cmd.valid.out.tf  |= IDE_VALID_LBAH;
560         } else {
561                 cmd.valid.out.tf |= IDE_VALID_OUT_TF;
562                 if (cmd.tf_flags & IDE_TFLAG_LBA48)
563                         cmd.valid.out.hob |= IDE_VALID_OUT_HOB;
564         }
565
566         if (req_task->in_flags.b.data)
567                 cmd.ftf_flags |= IDE_FTFLAG_IN_DATA;
568
569         if (req_task->req_cmd == IDE_DRIVE_TASK_RAW_WRITE) {
570                 /* fixup data phase if needed */
571                 if (req_task->data_phase == TASKFILE_IN_DMAQ ||
572                     req_task->data_phase == TASKFILE_IN_DMA)
573                         cmd.tf_flags |= IDE_TFLAG_WRITE;
574         }
575
576         cmd.protocol = ATA_PROT_DMA;
577
578         switch (req_task->data_phase) {
579         case TASKFILE_MULTI_OUT:
580                 if (!drive->mult_count) {
581                         /* (hs): give up if multcount is not set */
582                         pr_err("%s: %s Multimode Write multcount is not set\n",
583                                 drive->name, __func__);
584                         err = -EPERM;
585                         goto abort;
586                 }
587                 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
588                 /* fall through */
589         case TASKFILE_OUT:
590                 cmd.protocol = ATA_PROT_PIO;
591                 /* fall through */
592         case TASKFILE_OUT_DMAQ:
593         case TASKFILE_OUT_DMA:
594                 cmd.tf_flags |= IDE_TFLAG_WRITE;
595                 nsect = taskout / SECTOR_SIZE;
596                 data_buf = outbuf;
597                 break;
598         case TASKFILE_MULTI_IN:
599                 if (!drive->mult_count) {
600                         /* (hs): give up if multcount is not set */
601                         pr_err("%s: %s Multimode Read multcount is not set\n",
602                                 drive->name, __func__);
603                         err = -EPERM;
604                         goto abort;
605                 }
606                 cmd.tf_flags |= IDE_TFLAG_MULTI_PIO;
607                 /* fall through */
608         case TASKFILE_IN:
609                 cmd.protocol = ATA_PROT_PIO;
610                 /* fall through */
611         case TASKFILE_IN_DMAQ:
612         case TASKFILE_IN_DMA:
613                 nsect = taskin / SECTOR_SIZE;
614                 data_buf = inbuf;
615                 break;
616         case TASKFILE_NO_DATA:
617                 cmd.protocol = ATA_PROT_NODATA;
618                 break;
619         default:
620                 err = -EFAULT;
621                 goto abort;
622         }
623
624         if (req_task->req_cmd == IDE_DRIVE_TASK_NO_DATA)
625                 nsect = 0;
626         else if (!nsect) {
627                 nsect = (cmd.hob.nsect << 8) | cmd.tf.nsect;
628
629                 if (!nsect) {
630                         pr_err("%s: in/out command without data\n",
631                                         drive->name);
632                         err = -EFAULT;
633                         goto abort;
634                 }
635         }
636
637         err = ide_raw_taskfile(drive, &cmd, data_buf, nsect);
638
639         memcpy(req_task->hob_ports, &cmd.hob, HDIO_DRIVE_HOB_HDR_SIZE - 2);
640         memcpy(req_task->io_ports,  &cmd.tf,  HDIO_DRIVE_TASK_HDR_SIZE);
641
642         if ((cmd.ftf_flags & IDE_FTFLAG_SET_IN_FLAGS) &&
643             req_task->in_flags.all == 0) {
644                 req_task->in_flags.all = IDE_TASKFILE_STD_IN_FLAGS;
645                 if (drive->dev_flags & IDE_DFLAG_LBA48)
646                         req_task->in_flags.all |= (IDE_HOB_STD_IN_FLAGS << 8);
647         }
648
649         if (copy_to_user(buf, req_task, tasksize)) {
650                 err = -EFAULT;
651                 goto abort;
652         }
653         if (taskout) {
654                 int outtotal = tasksize;
655                 if (copy_to_user(buf + outtotal, outbuf, taskout)) {
656                         err = -EFAULT;
657                         goto abort;
658                 }
659         }
660         if (taskin) {
661                 int intotal = tasksize + taskout;
662                 if (copy_to_user(buf + intotal, inbuf, taskin)) {
663                         err = -EFAULT;
664                         goto abort;
665                 }
666         }
667 abort:
668         kfree(req_task);
669         kfree(outbuf);
670         kfree(inbuf);
671
672         return err;
673 }
674 #endif