2 * Block driver for media (i.e., flash cards)
4 * Copyright 2002 Hewlett-Packard Company
5 * Copyright 2005-2008 Pierre Ossman
7 * Use consistent with the GNU GPL is permitted,
8 * provided that this copyright notice is
9 * preserved in its entirety in all copies and derived works.
11 * HEWLETT-PACKARD COMPANY MAKES NO WARRANTIES, EXPRESSED OR IMPLIED,
12 * AS TO THE USEFULNESS OR CORRECTNESS OF THIS CODE OR ITS
13 * FITNESS FOR ANY PARTICULAR PURPOSE.
15 * Many thanks to Alessandro Rubini and Jonathan Corbet!
17 * Author: Andrew Christian
20 #include <linux/moduleparam.h>
21 #include <linux/module.h>
22 #include <linux/init.h>
24 #include <linux/kernel.h>
26 #include <linux/slab.h>
27 #include <linux/errno.h>
28 #include <linux/hdreg.h>
29 #include <linux/kdev_t.h>
30 #include <linux/blkdev.h>
31 #include <linux/mutex.h>
32 #include <linux/scatterlist.h>
33 #include <linux/string_helpers.h>
34 #include <linux/delay.h>
35 #include <linux/capability.h>
36 #include <linux/compat.h>
38 #include <linux/mmc/ioctl.h>
39 #include <linux/mmc/card.h>
40 #include <linux/mmc/host.h>
41 #include <linux/mmc/mmc.h>
42 #include <linux/mmc/sd.h>
44 #include <asm/system.h>
45 #include <asm/uaccess.h>
49 MODULE_ALIAS("mmc:block");
50 #ifdef MODULE_PARAM_PREFIX
51 #undef MODULE_PARAM_PREFIX
53 #define MODULE_PARAM_PREFIX "mmcblk."
55 #define INAND_CMD38_ARG_EXT_CSD 113
56 #define INAND_CMD38_ARG_ERASE 0x00
57 #define INAND_CMD38_ARG_TRIM 0x01
58 #define INAND_CMD38_ARG_SECERASE 0x80
59 #define INAND_CMD38_ARG_SECTRIM1 0x81
60 #define INAND_CMD38_ARG_SECTRIM2 0x88
62 static DEFINE_MUTEX(block_mutex);
65 * The defaults come from config options but can be overriden by module
68 static int perdev_minors = CONFIG_MMC_BLOCK_MINORS;
71 * We've only got one major, so number of mmcblk devices is
72 * limited to 256 / number of minors per device.
74 static int max_devices;
76 /* 256 minors, so at most 256 separate devices */
77 static DECLARE_BITMAP(dev_use, 256);
78 static DECLARE_BITMAP(name_use, 256);
81 * There is one mmc_blk_data per slot.
86 struct mmc_queue queue;
87 struct list_head part;
90 #define MMC_BLK_CMD23 (1 << 0) /* Can do SET_BLOCK_COUNT for multiblock */
91 #define MMC_BLK_REL_WR (1 << 1) /* MMC Reliable write support */
94 unsigned int read_only;
95 unsigned int part_type;
96 unsigned int name_idx;
97 unsigned int reset_done;
98 #define MMC_BLK_READ BIT(0)
99 #define MMC_BLK_WRITE BIT(1)
100 #define MMC_BLK_DISCARD BIT(2)
101 #define MMC_BLK_SECDISCARD BIT(3)
104 * Only set in main mmc_blk_data associated
105 * with mmc_card with mmc_set_drvdata, and keeps
106 * track of the current selected device partition.
108 unsigned int part_curr;
109 struct device_attribute force_ro;
112 static DEFINE_MUTEX(open_lock);
114 enum mmc_blk_status {
124 module_param(perdev_minors, int, 0444);
125 MODULE_PARM_DESC(perdev_minors, "Minors numbers to allocate per device");
127 static struct mmc_blk_data *mmc_blk_get(struct gendisk *disk)
129 struct mmc_blk_data *md;
131 mutex_lock(&open_lock);
132 md = disk->private_data;
133 if (md && md->usage == 0)
137 mutex_unlock(&open_lock);
142 static inline int mmc_get_devidx(struct gendisk *disk)
144 int devmaj = MAJOR(disk_devt(disk));
145 int devidx = MINOR(disk_devt(disk)) / perdev_minors;
148 devidx = disk->first_minor / perdev_minors;
152 static void mmc_blk_put(struct mmc_blk_data *md)
154 mutex_lock(&open_lock);
156 if (md->usage == 0) {
157 int devidx = mmc_get_devidx(md->disk);
158 blk_cleanup_queue(md->queue.queue);
160 __clear_bit(devidx, dev_use);
165 mutex_unlock(&open_lock);
168 static ssize_t force_ro_show(struct device *dev, struct device_attribute *attr,
172 struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
174 ret = snprintf(buf, PAGE_SIZE, "%d",
175 get_disk_ro(dev_to_disk(dev)) ^
181 static ssize_t force_ro_store(struct device *dev, struct device_attribute *attr,
182 const char *buf, size_t count)
186 struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
187 unsigned long set = simple_strtoul(buf, &end, 0);
193 set_disk_ro(dev_to_disk(dev), set || md->read_only);
200 static int mmc_blk_open(struct block_device *bdev, fmode_t mode)
202 struct mmc_blk_data *md = mmc_blk_get(bdev->bd_disk);
205 mutex_lock(&block_mutex);
208 check_disk_change(bdev);
211 if ((mode & FMODE_WRITE) && md->read_only) {
216 mutex_unlock(&block_mutex);
221 static int mmc_blk_release(struct gendisk *disk, fmode_t mode)
223 struct mmc_blk_data *md = disk->private_data;
225 mutex_lock(&block_mutex);
227 mutex_unlock(&block_mutex);
232 mmc_blk_getgeo(struct block_device *bdev, struct hd_geometry *geo)
234 geo->cylinders = get_capacity(bdev->bd_disk) / (4 * 16);
240 struct mmc_blk_ioc_data {
241 struct mmc_ioc_cmd ic;
246 static struct mmc_blk_ioc_data *mmc_blk_ioctl_copy_from_user(
247 struct mmc_ioc_cmd __user *user)
249 struct mmc_blk_ioc_data *idata;
252 idata = kzalloc(sizeof(*idata), GFP_KERNEL);
258 if (copy_from_user(&idata->ic, user, sizeof(idata->ic))) {
263 idata->buf_bytes = (u64) idata->ic.blksz * idata->ic.blocks;
264 if (idata->buf_bytes > MMC_IOC_MAX_BYTES) {
269 idata->buf = kzalloc(idata->buf_bytes, GFP_KERNEL);
275 if (copy_from_user(idata->buf, (void __user *)(unsigned long)
276 idata->ic.data_ptr, idata->buf_bytes)) {
291 static int mmc_blk_ioctl_cmd(struct block_device *bdev,
292 struct mmc_ioc_cmd __user *ic_ptr)
294 struct mmc_blk_ioc_data *idata;
295 struct mmc_blk_data *md;
296 struct mmc_card *card;
297 struct mmc_command cmd = {0};
298 struct mmc_data data = {0};
299 struct mmc_request mrq = {NULL};
300 struct scatterlist sg;
304 * The caller must have CAP_SYS_RAWIO, and must be calling this on the
305 * whole block device, not on a partition. This prevents overspray
306 * between sibling partitions.
308 if ((!capable(CAP_SYS_RAWIO)) || (bdev != bdev->bd_contains))
311 idata = mmc_blk_ioctl_copy_from_user(ic_ptr);
313 return PTR_ERR(idata);
315 cmd.opcode = idata->ic.opcode;
316 cmd.arg = idata->ic.arg;
317 cmd.flags = idata->ic.flags;
321 data.blksz = idata->ic.blksz;
322 data.blocks = idata->ic.blocks;
324 sg_init_one(data.sg, idata->buf, idata->buf_bytes);
326 if (idata->ic.write_flag)
327 data.flags = MMC_DATA_WRITE;
329 data.flags = MMC_DATA_READ;
334 md = mmc_blk_get(bdev->bd_disk);
340 card = md->queue.card;
346 mmc_claim_host(card->host);
348 if (idata->ic.is_acmd) {
349 err = mmc_app_cmd(card->host, card);
354 /* data.flags must already be set before doing this. */
355 mmc_set_data_timeout(&data, card);
356 /* Allow overriding the timeout_ns for empirical tuning. */
357 if (idata->ic.data_timeout_ns)
358 data.timeout_ns = idata->ic.data_timeout_ns;
360 if ((cmd.flags & MMC_RSP_R1B) == MMC_RSP_R1B) {
362 * Pretend this is a data transfer and rely on the host driver
363 * to compute timeout. When all host drivers support
364 * cmd.cmd_timeout for R1B, this can be changed to:
367 * cmd.cmd_timeout = idata->ic.cmd_timeout_ms;
369 data.timeout_ns = idata->ic.cmd_timeout_ms * 1000000;
372 mmc_wait_for_req(card->host, &mrq);
375 dev_err(mmc_dev(card->host), "%s: cmd error %d\n",
376 __func__, cmd.error);
381 dev_err(mmc_dev(card->host), "%s: data error %d\n",
382 __func__, data.error);
388 * According to the SD specs, some commands require a delay after
389 * issuing the command.
391 if (idata->ic.postsleep_min_us)
392 usleep_range(idata->ic.postsleep_min_us, idata->ic.postsleep_max_us);
394 if (copy_to_user(&(ic_ptr->response), cmd.resp, sizeof(cmd.resp))) {
399 if (!idata->ic.write_flag) {
400 if (copy_to_user((void __user *)(unsigned long) idata->ic.data_ptr,
401 idata->buf, idata->buf_bytes)) {
408 mmc_release_host(card->host);
417 static int mmc_blk_ioctl(struct block_device *bdev, fmode_t mode,
418 unsigned int cmd, unsigned long arg)
421 if (cmd == MMC_IOC_CMD)
422 ret = mmc_blk_ioctl_cmd(bdev, (struct mmc_ioc_cmd __user *)arg);
427 static int mmc_blk_compat_ioctl(struct block_device *bdev, fmode_t mode,
428 unsigned int cmd, unsigned long arg)
430 return mmc_blk_ioctl(bdev, mode, cmd, (unsigned long) compat_ptr(arg));
434 static const struct block_device_operations mmc_bdops = {
435 .open = mmc_blk_open,
436 .release = mmc_blk_release,
437 .getgeo = mmc_blk_getgeo,
438 .owner = THIS_MODULE,
439 .ioctl = mmc_blk_ioctl,
441 .compat_ioctl = mmc_blk_compat_ioctl,
445 static inline int mmc_blk_part_switch(struct mmc_card *card,
446 struct mmc_blk_data *md)
449 struct mmc_blk_data *main_md = mmc_get_drvdata(card);
450 if (main_md->part_curr == md->part_type)
453 if (mmc_card_mmc(card)) {
454 card->ext_csd.part_config &= ~EXT_CSD_PART_CONFIG_ACC_MASK;
455 card->ext_csd.part_config |= md->part_type;
457 ret = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
458 EXT_CSD_PART_CONFIG, card->ext_csd.part_config,
459 card->ext_csd.part_time);
464 main_md->part_curr = md->part_type;
468 static u32 mmc_sd_num_wr_blocks(struct mmc_card *card)
474 struct mmc_request mrq = {NULL};
475 struct mmc_command cmd = {0};
476 struct mmc_data data = {0};
477 unsigned int timeout_us;
479 struct scatterlist sg;
481 cmd.opcode = MMC_APP_CMD;
482 cmd.arg = card->rca << 16;
483 cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_AC;
485 err = mmc_wait_for_cmd(card->host, &cmd, 0);
488 if (!mmc_host_is_spi(card->host) && !(cmd.resp[0] & R1_APP_CMD))
491 memset(&cmd, 0, sizeof(struct mmc_command));
493 cmd.opcode = SD_APP_SEND_NUM_WR_BLKS;
495 cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
497 data.timeout_ns = card->csd.tacc_ns * 100;
498 data.timeout_clks = card->csd.tacc_clks * 100;
500 timeout_us = data.timeout_ns / 1000;
501 timeout_us += data.timeout_clks * 1000 /
502 (card->host->ios.clock / 1000);
504 if (timeout_us > 100000) {
505 data.timeout_ns = 100000000;
506 data.timeout_clks = 0;
511 data.flags = MMC_DATA_READ;
518 blocks = kmalloc(4, GFP_KERNEL);
522 sg_init_one(&sg, blocks, 4);
524 mmc_wait_for_req(card->host, &mrq);
526 result = ntohl(*blocks);
529 if (cmd.error || data.error)
535 static int send_stop(struct mmc_card *card, u32 *status)
537 struct mmc_command cmd = {0};
540 cmd.opcode = MMC_STOP_TRANSMISSION;
541 cmd.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
542 err = mmc_wait_for_cmd(card->host, &cmd, 5);
544 *status = cmd.resp[0];
548 static int get_card_status(struct mmc_card *card, u32 *status, int retries)
550 struct mmc_command cmd = {0};
553 cmd.opcode = MMC_SEND_STATUS;
554 if (!mmc_host_is_spi(card->host))
555 cmd.arg = card->rca << 16;
556 cmd.flags = MMC_RSP_SPI_R2 | MMC_RSP_R1 | MMC_CMD_AC;
557 err = mmc_wait_for_cmd(card->host, &cmd, retries);
559 *status = cmd.resp[0];
565 #define ERR_CONTINUE 0
567 static int mmc_blk_cmd_error(struct request *req, const char *name, int error,
568 bool status_valid, u32 status)
572 /* response crc error, retry the r/w cmd */
573 pr_err("%s: %s sending %s command, card status %#x\n",
574 req->rq_disk->disk_name, "response CRC error",
579 pr_err("%s: %s sending %s command, card status %#x\n",
580 req->rq_disk->disk_name, "timed out", name, status);
582 /* If the status cmd initially failed, retry the r/w cmd */
587 * If it was a r/w cmd crc error, or illegal command
588 * (eg, issued in wrong state) then retry - we should
589 * have corrected the state problem above.
591 if (status & (R1_COM_CRC_ERROR | R1_ILLEGAL_COMMAND))
594 /* Otherwise abort the command */
598 /* We don't understand the error code the driver gave us */
599 pr_err("%s: unknown error %d sending read/write command, card status %#x\n",
600 req->rq_disk->disk_name, error, status);
606 * Initial r/w and stop cmd error recovery.
607 * We don't know whether the card received the r/w cmd or not, so try to
608 * restore things back to a sane state. Essentially, we do this as follows:
609 * - Obtain card status. If the first attempt to obtain card status fails,
610 * the status word will reflect the failed status cmd, not the failed
611 * r/w cmd. If we fail to obtain card status, it suggests we can no
612 * longer communicate with the card.
613 * - Check the card state. If the card received the cmd but there was a
614 * transient problem with the response, it might still be in a data transfer
615 * mode. Try to send it a stop command. If this fails, we can't recover.
616 * - If the r/w cmd failed due to a response CRC error, it was probably
617 * transient, so retry the cmd.
618 * - If the r/w cmd timed out, but we didn't get the r/w cmd status, retry.
619 * - If the r/w cmd timed out, and the r/w cmd failed due to CRC error or
620 * illegal cmd, retry.
621 * Otherwise we don't understand what happened, so abort.
623 static int mmc_blk_cmd_recovery(struct mmc_card *card, struct request *req,
624 struct mmc_blk_request *brq, int *ecc_err)
626 bool prev_cmd_status_valid = true;
627 u32 status, stop_status = 0;
631 * Try to get card status which indicates both the card state
632 * and why there was no response. If the first attempt fails,
633 * we can't be sure the returned status is for the r/w command.
635 for (retry = 2; retry >= 0; retry--) {
636 err = get_card_status(card, &status, 0);
640 prev_cmd_status_valid = false;
641 pr_err("%s: error %d sending status command, %sing\n",
642 req->rq_disk->disk_name, err, retry ? "retry" : "abort");
645 /* We couldn't get a response from the card. Give up. */
649 /* Flag ECC errors */
650 if ((status & R1_CARD_ECC_FAILED) ||
651 (brq->stop.resp[0] & R1_CARD_ECC_FAILED) ||
652 (brq->cmd.resp[0] & R1_CARD_ECC_FAILED))
656 * Check the current card state. If it is in some data transfer
657 * mode, tell it to stop (and hopefully transition back to TRAN.)
659 if (R1_CURRENT_STATE(status) == R1_STATE_DATA ||
660 R1_CURRENT_STATE(status) == R1_STATE_RCV) {
661 err = send_stop(card, &stop_status);
663 pr_err("%s: error %d sending stop command\n",
664 req->rq_disk->disk_name, err);
667 * If the stop cmd also timed out, the card is probably
668 * not present, so abort. Other errors are bad news too.
672 if (stop_status & R1_CARD_ECC_FAILED)
676 /* Check for set block count errors */
678 return mmc_blk_cmd_error(req, "SET_BLOCK_COUNT", brq->sbc.error,
679 prev_cmd_status_valid, status);
681 /* Check for r/w command errors */
683 return mmc_blk_cmd_error(req, "r/w cmd", brq->cmd.error,
684 prev_cmd_status_valid, status);
687 if (!brq->stop.error)
690 /* Now for stop errors. These aren't fatal to the transfer. */
691 pr_err("%s: error %d sending stop command, original cmd response %#x, card status %#x\n",
692 req->rq_disk->disk_name, brq->stop.error,
693 brq->cmd.resp[0], status);
696 * Subsitute in our own stop status as this will give the error
697 * state which happened during the execution of the r/w command.
700 brq->stop.resp[0] = stop_status;
706 static int mmc_blk_reset(struct mmc_blk_data *md, struct mmc_host *host,
711 if (md->reset_done & type)
714 md->reset_done |= type;
715 err = mmc_hw_reset(host);
716 /* Ensure we switch back to the correct partition */
717 if (err != -EOPNOTSUPP) {
718 struct mmc_blk_data *main_md = mmc_get_drvdata(host->card);
721 main_md->part_curr = main_md->part_type;
722 part_err = mmc_blk_part_switch(host->card, md);
725 * We have failed to get back into the correct
726 * partition, so we need to abort the whole request.
734 static inline void mmc_blk_reset_success(struct mmc_blk_data *md, int type)
736 md->reset_done &= ~type;
739 static int mmc_blk_issue_discard_rq(struct mmc_queue *mq, struct request *req)
741 struct mmc_blk_data *md = mq->data;
742 struct mmc_card *card = md->queue.card;
743 unsigned int from, nr, arg;
744 int err = 0, type = MMC_BLK_DISCARD;
746 if (!mmc_can_erase(card)) {
751 from = blk_rq_pos(req);
752 nr = blk_rq_sectors(req);
754 if (mmc_can_trim(card))
759 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
760 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
761 INAND_CMD38_ARG_EXT_CSD,
762 arg == MMC_TRIM_ARG ?
763 INAND_CMD38_ARG_TRIM :
764 INAND_CMD38_ARG_ERASE,
769 err = mmc_erase(card, from, nr, arg);
771 if (err == -EIO && !mmc_blk_reset(md, card->host, type))
774 mmc_blk_reset_success(md, type);
775 spin_lock_irq(&md->lock);
776 __blk_end_request(req, err, blk_rq_bytes(req));
777 spin_unlock_irq(&md->lock);
782 static int mmc_blk_issue_secdiscard_rq(struct mmc_queue *mq,
785 struct mmc_blk_data *md = mq->data;
786 struct mmc_card *card = md->queue.card;
787 unsigned int from, nr, arg;
788 int err = 0, type = MMC_BLK_SECDISCARD;
790 if (!mmc_can_secure_erase_trim(card)) {
795 from = blk_rq_pos(req);
796 nr = blk_rq_sectors(req);
798 if (mmc_can_trim(card) && !mmc_erase_group_aligned(card, from, nr))
799 arg = MMC_SECURE_TRIM1_ARG;
801 arg = MMC_SECURE_ERASE_ARG;
803 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
804 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
805 INAND_CMD38_ARG_EXT_CSD,
806 arg == MMC_SECURE_TRIM1_ARG ?
807 INAND_CMD38_ARG_SECTRIM1 :
808 INAND_CMD38_ARG_SECERASE,
813 err = mmc_erase(card, from, nr, arg);
814 if (!err && arg == MMC_SECURE_TRIM1_ARG) {
815 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
816 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
817 INAND_CMD38_ARG_EXT_CSD,
818 INAND_CMD38_ARG_SECTRIM2,
823 err = mmc_erase(card, from, nr, MMC_SECURE_TRIM2_ARG);
826 if (err == -EIO && !mmc_blk_reset(md, card->host, type))
829 mmc_blk_reset_success(md, type);
830 spin_lock_irq(&md->lock);
831 __blk_end_request(req, err, blk_rq_bytes(req));
832 spin_unlock_irq(&md->lock);
837 static int mmc_blk_issue_flush(struct mmc_queue *mq, struct request *req)
839 struct mmc_blk_data *md = mq->data;
842 * No-op, only service this because we need REQ_FUA for reliable
845 spin_lock_irq(&md->lock);
846 __blk_end_request_all(req, 0);
847 spin_unlock_irq(&md->lock);
853 * Reformat current write as a reliable write, supporting
854 * both legacy and the enhanced reliable write MMC cards.
855 * In each transfer we'll handle only as much as a single
856 * reliable write can handle, thus finish the request in
857 * partial completions.
859 static inline void mmc_apply_rel_rw(struct mmc_blk_request *brq,
860 struct mmc_card *card,
863 if (!(card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN)) {
864 /* Legacy mode imposes restrictions on transfers. */
865 if (!IS_ALIGNED(brq->cmd.arg, card->ext_csd.rel_sectors))
866 brq->data.blocks = 1;
868 if (brq->data.blocks > card->ext_csd.rel_sectors)
869 brq->data.blocks = card->ext_csd.rel_sectors;
870 else if (brq->data.blocks < card->ext_csd.rel_sectors)
871 brq->data.blocks = 1;
876 (R1_OUT_OF_RANGE | /* Command argument out of range */ \
877 R1_ADDRESS_ERROR | /* Misaligned address */ \
878 R1_BLOCK_LEN_ERROR | /* Transferred block length incorrect */\
879 R1_WP_VIOLATION | /* Tried to write to protected block */ \
880 R1_CC_ERROR | /* Card controller error */ \
881 R1_ERROR) /* General/unknown error */
883 static int mmc_blk_err_check(struct mmc_card *card,
884 struct mmc_async_req *areq)
886 struct mmc_queue_req *mq_mrq = container_of(areq, struct mmc_queue_req,
888 struct mmc_blk_request *brq = &mq_mrq->brq;
889 struct request *req = mq_mrq->req;
893 * sbc.error indicates a problem with the set block count
894 * command. No data will have been transferred.
896 * cmd.error indicates a problem with the r/w command. No
897 * data will have been transferred.
899 * stop.error indicates a problem with the stop command. Data
900 * may have been transferred, or may still be transferring.
902 if (brq->sbc.error || brq->cmd.error || brq->stop.error ||
904 switch (mmc_blk_cmd_recovery(card, req, brq, &ecc_err)) {
906 return MMC_BLK_RETRY;
908 return MMC_BLK_ABORT;
915 * Check for errors relating to the execution of the
916 * initial command - such as address errors. No data
917 * has been transferred.
919 if (brq->cmd.resp[0] & CMD_ERRORS) {
920 pr_err("%s: r/w command failed, status = %#x\n",
921 req->rq_disk->disk_name, brq->cmd.resp[0]);
922 return MMC_BLK_ABORT;
926 * Everything else is either success, or a data error of some
927 * kind. If it was a write, we may have transitioned to
928 * program mode, which we have to wait for it to complete.
930 if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ) {
933 int err = get_card_status(card, &status, 5);
935 printk(KERN_ERR "%s: error %d requesting status\n",
936 req->rq_disk->disk_name, err);
937 return MMC_BLK_CMD_ERR;
940 * Some cards mishandle the status bits,
941 * so make sure to check both the busy
942 * indication and the card state.
944 } while (!(status & R1_READY_FOR_DATA) ||
945 (R1_CURRENT_STATE(status) == R1_STATE_PRG));
948 if (brq->data.error) {
949 pr_err("%s: error %d transferring data, sector %u, nr %u, cmd response %#x, card status %#x\n",
950 req->rq_disk->disk_name, brq->data.error,
951 (unsigned)blk_rq_pos(req),
952 (unsigned)blk_rq_sectors(req),
953 brq->cmd.resp[0], brq->stop.resp[0]);
955 if (rq_data_dir(req) == READ) {
957 return MMC_BLK_ECC_ERR;
958 return MMC_BLK_DATA_ERR;
960 return MMC_BLK_CMD_ERR;
964 if (!brq->data.bytes_xfered)
965 return MMC_BLK_RETRY;
967 if (blk_rq_bytes(req) != brq->data.bytes_xfered)
968 return MMC_BLK_PARTIAL;
970 return MMC_BLK_SUCCESS;
973 static void mmc_blk_rw_rq_prep(struct mmc_queue_req *mqrq,
974 struct mmc_card *card,
976 struct mmc_queue *mq)
978 u32 readcmd, writecmd;
979 struct mmc_blk_request *brq = &mqrq->brq;
980 struct request *req = mqrq->req;
981 struct mmc_blk_data *md = mq->data;
984 * Reliable writes are used to implement Forced Unit Access and
985 * REQ_META accesses, and are supported only on MMCs.
987 * XXX: this really needs a good explanation of why REQ_META
988 * is treated special.
990 bool do_rel_wr = ((req->cmd_flags & REQ_FUA) ||
991 (req->cmd_flags & REQ_META)) &&
992 (rq_data_dir(req) == WRITE) &&
993 (md->flags & MMC_BLK_REL_WR);
995 memset(brq, 0, sizeof(struct mmc_blk_request));
996 brq->mrq.cmd = &brq->cmd;
997 brq->mrq.data = &brq->data;
999 brq->cmd.arg = blk_rq_pos(req);
1000 if (!mmc_card_blockaddr(card))
1002 brq->cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
1003 brq->data.blksz = 512;
1004 brq->stop.opcode = MMC_STOP_TRANSMISSION;
1006 brq->stop.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
1007 brq->data.blocks = blk_rq_sectors(req);
1010 * The block layer doesn't support all sector count
1011 * restrictions, so we need to be prepared for too big
1014 if (brq->data.blocks > card->host->max_blk_count)
1015 brq->data.blocks = card->host->max_blk_count;
1018 * After a read error, we redo the request one sector at a time
1019 * in order to accurately determine which sectors can be read
1022 if (disable_multi && brq->data.blocks > 1)
1023 brq->data.blocks = 1;
1025 if (brq->data.blocks > 1 || do_rel_wr) {
1026 /* SPI multiblock writes terminate using a special
1027 * token, not a STOP_TRANSMISSION request.
1029 if (!mmc_host_is_spi(card->host) ||
1030 rq_data_dir(req) == READ)
1031 brq->mrq.stop = &brq->stop;
1032 readcmd = MMC_READ_MULTIPLE_BLOCK;
1033 writecmd = MMC_WRITE_MULTIPLE_BLOCK;
1035 brq->mrq.stop = NULL;
1036 readcmd = MMC_READ_SINGLE_BLOCK;
1037 writecmd = MMC_WRITE_BLOCK;
1039 if (rq_data_dir(req) == READ) {
1040 brq->cmd.opcode = readcmd;
1041 brq->data.flags |= MMC_DATA_READ;
1043 brq->cmd.opcode = writecmd;
1044 brq->data.flags |= MMC_DATA_WRITE;
1048 mmc_apply_rel_rw(brq, card, req);
1051 * Pre-defined multi-block transfers are preferable to
1052 * open ended-ones (and necessary for reliable writes).
1053 * However, it is not sufficient to just send CMD23,
1054 * and avoid the final CMD12, as on an error condition
1055 * CMD12 (stop) needs to be sent anyway. This, coupled
1056 * with Auto-CMD23 enhancements provided by some
1057 * hosts, means that the complexity of dealing
1058 * with this is best left to the host. If CMD23 is
1059 * supported by card and host, we'll fill sbc in and let
1060 * the host deal with handling it correctly. This means
1061 * that for hosts that don't expose MMC_CAP_CMD23, no
1062 * change of behavior will be observed.
1064 * N.B: Some MMC cards experience perf degradation.
1065 * We'll avoid using CMD23-bounded multiblock writes for
1066 * these, while retaining features like reliable writes.
1069 if ((md->flags & MMC_BLK_CMD23) &&
1070 mmc_op_multi(brq->cmd.opcode) &&
1071 (do_rel_wr || !(card->quirks & MMC_QUIRK_BLK_NO_CMD23))) {
1072 brq->sbc.opcode = MMC_SET_BLOCK_COUNT;
1073 brq->sbc.arg = brq->data.blocks |
1074 (do_rel_wr ? (1 << 31) : 0);
1075 brq->sbc.flags = MMC_RSP_R1 | MMC_CMD_AC;
1076 brq->mrq.sbc = &brq->sbc;
1079 mmc_set_data_timeout(&brq->data, card);
1081 brq->data.sg = mqrq->sg;
1082 brq->data.sg_len = mmc_queue_map_sg(mq, mqrq);
1085 * Adjust the sg list so it is the same size as the
1088 if (brq->data.blocks != blk_rq_sectors(req)) {
1089 int i, data_size = brq->data.blocks << 9;
1090 struct scatterlist *sg;
1092 for_each_sg(brq->data.sg, sg, brq->data.sg_len, i) {
1093 data_size -= sg->length;
1094 if (data_size <= 0) {
1095 sg->length += data_size;
1100 brq->data.sg_len = i;
1103 mqrq->mmc_active.mrq = &brq->mrq;
1104 mqrq->mmc_active.err_check = mmc_blk_err_check;
1106 mmc_queue_bounce_pre(mqrq);
1109 static int mmc_blk_cmd_err(struct mmc_blk_data *md, struct mmc_card *card,
1110 struct mmc_blk_request *brq, struct request *req,
1114 * If this is an SD card and we're writing, we can first
1115 * mark the known good sectors as ok.
1117 * If the card is not SD, we can still ok written sectors
1118 * as reported by the controller (which might be less than
1119 * the real number of written sectors, but never more).
1121 if (mmc_card_sd(card)) {
1124 blocks = mmc_sd_num_wr_blocks(card);
1125 if (blocks != (u32)-1) {
1126 spin_lock_irq(&md->lock);
1127 ret = __blk_end_request(req, 0, blocks << 9);
1128 spin_unlock_irq(&md->lock);
1131 spin_lock_irq(&md->lock);
1132 ret = __blk_end_request(req, 0, brq->data.bytes_xfered);
1133 spin_unlock_irq(&md->lock);
1138 static int mmc_blk_issue_rw_rq(struct mmc_queue *mq, struct request *rqc)
1140 struct mmc_blk_data *md = mq->data;
1141 struct mmc_card *card = md->queue.card;
1142 struct mmc_blk_request *brq = &mq->mqrq_cur->brq;
1143 int ret = 1, disable_multi = 0, retry = 0, type;
1144 enum mmc_blk_status status;
1145 struct mmc_queue_req *mq_rq;
1146 struct request *req;
1147 struct mmc_async_req *areq;
1149 if (!rqc && !mq->mqrq_prev->req)
1154 mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
1155 areq = &mq->mqrq_cur->mmc_active;
1158 areq = mmc_start_req(card->host, areq, (int *) &status);
1162 mq_rq = container_of(areq, struct mmc_queue_req, mmc_active);
1165 type = rq_data_dir(req) == READ ? MMC_BLK_READ : MMC_BLK_WRITE;
1166 mmc_queue_bounce_post(mq_rq);
1169 case MMC_BLK_SUCCESS:
1170 case MMC_BLK_PARTIAL:
1172 * A block was successfully transferred.
1174 mmc_blk_reset_success(md, type);
1175 spin_lock_irq(&md->lock);
1176 ret = __blk_end_request(req, 0,
1177 brq->data.bytes_xfered);
1178 spin_unlock_irq(&md->lock);
1180 * If the blk_end_request function returns non-zero even
1181 * though all data has been transferred and no errors
1182 * were returned by the host controller, it's a bug.
1184 if (status == MMC_BLK_SUCCESS && ret) {
1185 printk(KERN_ERR "%s BUG rq_tot %d d_xfer %d\n",
1186 __func__, blk_rq_bytes(req),
1187 brq->data.bytes_xfered);
1192 case MMC_BLK_CMD_ERR:
1193 ret = mmc_blk_cmd_err(md, card, brq, req, ret);
1194 if (!mmc_blk_reset(md, card->host, type))
1202 if (!mmc_blk_reset(md, card->host, type))
1205 case MMC_BLK_DATA_ERR: {
1208 err = mmc_blk_reset(md, card->host, type);
1215 case MMC_BLK_ECC_ERR:
1216 if (brq->data.blocks > 1) {
1217 /* Redo read one sector at a time */
1218 pr_warning("%s: retrying using single block read\n",
1219 req->rq_disk->disk_name);
1224 * After an error, we redo I/O one sector at a
1225 * time, so we only reach here after trying to
1226 * read a single sector.
1228 spin_lock_irq(&md->lock);
1229 ret = __blk_end_request(req, -EIO,
1231 spin_unlock_irq(&md->lock);
1239 * In case of a incomplete request
1240 * prepare it again and resend.
1242 mmc_blk_rw_rq_prep(mq_rq, card, disable_multi, mq);
1243 mmc_start_req(card->host, &mq_rq->mmc_active, NULL);
1250 spin_lock_irq(&md->lock);
1252 ret = __blk_end_request(req, -EIO, blk_rq_cur_bytes(req));
1253 spin_unlock_irq(&md->lock);
1257 mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
1258 mmc_start_req(card->host, &mq->mqrq_cur->mmc_active, NULL);
1264 static int mmc_blk_issue_rq(struct mmc_queue *mq, struct request *req)
1267 struct mmc_blk_data *md = mq->data;
1268 struct mmc_card *card = md->queue.card;
1270 if (req && !mq->mqrq_prev->req)
1271 /* claim host only for the first request */
1272 mmc_claim_host(card->host);
1274 ret = mmc_blk_part_switch(card, md);
1280 if (req && req->cmd_flags & REQ_DISCARD) {
1281 /* complete ongoing async transfer before issuing discard */
1282 if (card->host->areq)
1283 mmc_blk_issue_rw_rq(mq, NULL);
1284 if (req->cmd_flags & REQ_SECURE)
1285 ret = mmc_blk_issue_secdiscard_rq(mq, req);
1287 ret = mmc_blk_issue_discard_rq(mq, req);
1288 } else if (req && req->cmd_flags & REQ_FLUSH) {
1289 /* complete ongoing async transfer before issuing flush */
1290 if (card->host->areq)
1291 mmc_blk_issue_rw_rq(mq, NULL);
1292 ret = mmc_blk_issue_flush(mq, req);
1294 ret = mmc_blk_issue_rw_rq(mq, req);
1299 /* release host only when there are no more requests */
1300 mmc_release_host(card->host);
1304 static inline int mmc_blk_readonly(struct mmc_card *card)
1306 return mmc_card_readonly(card) ||
1307 !(card->csd.cmdclass & CCC_BLOCK_WRITE);
1310 static struct mmc_blk_data *mmc_blk_alloc_req(struct mmc_card *card,
1311 struct device *parent,
1314 const char *subname)
1316 struct mmc_blk_data *md;
1319 devidx = find_first_zero_bit(dev_use, max_devices);
1320 if (devidx >= max_devices)
1321 return ERR_PTR(-ENOSPC);
1322 __set_bit(devidx, dev_use);
1324 md = kzalloc(sizeof(struct mmc_blk_data), GFP_KERNEL);
1331 * !subname implies we are creating main mmc_blk_data that will be
1332 * associated with mmc_card with mmc_set_drvdata. Due to device
1333 * partitions, devidx will not coincide with a per-physical card
1334 * index anymore so we keep track of a name index.
1337 md->name_idx = find_first_zero_bit(name_use, max_devices);
1338 __set_bit(md->name_idx, name_use);
1341 md->name_idx = ((struct mmc_blk_data *)
1342 dev_to_disk(parent)->private_data)->name_idx;
1345 * Set the read-only status based on the supported commands
1346 * and the write protect switch.
1348 md->read_only = mmc_blk_readonly(card);
1350 md->disk = alloc_disk(perdev_minors);
1351 if (md->disk == NULL) {
1356 spin_lock_init(&md->lock);
1357 INIT_LIST_HEAD(&md->part);
1360 ret = mmc_init_queue(&md->queue, card, &md->lock, subname);
1364 md->queue.issue_fn = mmc_blk_issue_rq;
1365 md->queue.data = md;
1367 md->disk->major = MMC_BLOCK_MAJOR;
1368 md->disk->first_minor = devidx * perdev_minors;
1369 md->disk->fops = &mmc_bdops;
1370 md->disk->private_data = md;
1371 md->disk->queue = md->queue.queue;
1372 md->disk->driverfs_dev = parent;
1373 set_disk_ro(md->disk, md->read_only || default_ro);
1376 * As discussed on lkml, GENHD_FL_REMOVABLE should:
1378 * - be set for removable media with permanent block devices
1379 * - be unset for removable block devices with permanent media
1381 * Since MMC block devices clearly fall under the second
1382 * case, we do not set GENHD_FL_REMOVABLE. Userspace
1383 * should use the block device creation/destruction hotplug
1384 * messages to tell when the card is present.
1387 snprintf(md->disk->disk_name, sizeof(md->disk->disk_name),
1388 "mmcblk%d%s", md->name_idx, subname ? subname : "");
1390 blk_queue_logical_block_size(md->queue.queue, 512);
1391 set_capacity(md->disk, size);
1393 if (mmc_host_cmd23(card->host)) {
1394 if (mmc_card_mmc(card) ||
1395 (mmc_card_sd(card) &&
1396 card->scr.cmds & SD_SCR_CMD23_SUPPORT))
1397 md->flags |= MMC_BLK_CMD23;
1400 if (mmc_card_mmc(card) &&
1401 md->flags & MMC_BLK_CMD23 &&
1402 ((card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN) ||
1403 card->ext_csd.rel_sectors)) {
1404 md->flags |= MMC_BLK_REL_WR;
1405 blk_queue_flush(md->queue.queue, REQ_FLUSH | REQ_FUA);
1415 return ERR_PTR(ret);
1418 static struct mmc_blk_data *mmc_blk_alloc(struct mmc_card *card)
1421 struct mmc_blk_data *md;
1423 if (!mmc_card_sd(card) && mmc_card_blockaddr(card)) {
1425 * The EXT_CSD sector count is in number or 512 byte
1428 size = card->ext_csd.sectors;
1431 * The CSD capacity field is in units of read_blkbits.
1432 * set_capacity takes units of 512 bytes.
1434 size = card->csd.capacity << (card->csd.read_blkbits - 9);
1437 md = mmc_blk_alloc_req(card, &card->dev, size, false, NULL);
1441 static int mmc_blk_alloc_part(struct mmc_card *card,
1442 struct mmc_blk_data *md,
1443 unsigned int part_type,
1446 const char *subname)
1449 struct mmc_blk_data *part_md;
1451 part_md = mmc_blk_alloc_req(card, disk_to_dev(md->disk), size, default_ro,
1453 if (IS_ERR(part_md))
1454 return PTR_ERR(part_md);
1455 part_md->part_type = part_type;
1456 list_add(&part_md->part, &md->part);
1458 string_get_size((u64)get_capacity(part_md->disk) << 9, STRING_UNITS_2,
1459 cap_str, sizeof(cap_str));
1460 printk(KERN_INFO "%s: %s %s partition %u %s\n",
1461 part_md->disk->disk_name, mmc_card_id(card),
1462 mmc_card_name(card), part_md->part_type, cap_str);
1466 static int mmc_blk_alloc_parts(struct mmc_card *card, struct mmc_blk_data *md)
1470 if (!mmc_card_mmc(card))
1473 if (card->ext_csd.boot_size) {
1474 ret = mmc_blk_alloc_part(card, md, EXT_CSD_PART_CONFIG_ACC_BOOT0,
1475 card->ext_csd.boot_size >> 9,
1480 ret = mmc_blk_alloc_part(card, md, EXT_CSD_PART_CONFIG_ACC_BOOT1,
1481 card->ext_csd.boot_size >> 9,
1492 mmc_blk_set_blksize(struct mmc_blk_data *md, struct mmc_card *card)
1496 mmc_claim_host(card->host);
1497 err = mmc_set_blocklen(card, 512);
1498 mmc_release_host(card->host);
1501 printk(KERN_ERR "%s: unable to set block size to 512: %d\n",
1502 md->disk->disk_name, err);
1509 static void mmc_blk_remove_req(struct mmc_blk_data *md)
1512 if (md->disk->flags & GENHD_FL_UP) {
1513 device_remove_file(disk_to_dev(md->disk), &md->force_ro);
1515 /* Stop new requests from getting into the queue */
1516 del_gendisk(md->disk);
1519 /* Then flush out any already in there */
1520 mmc_cleanup_queue(&md->queue);
1525 static void mmc_blk_remove_parts(struct mmc_card *card,
1526 struct mmc_blk_data *md)
1528 struct list_head *pos, *q;
1529 struct mmc_blk_data *part_md;
1531 __clear_bit(md->name_idx, name_use);
1532 list_for_each_safe(pos, q, &md->part) {
1533 part_md = list_entry(pos, struct mmc_blk_data, part);
1535 mmc_blk_remove_req(part_md);
1539 static int mmc_add_disk(struct mmc_blk_data *md)
1544 md->force_ro.show = force_ro_show;
1545 md->force_ro.store = force_ro_store;
1546 sysfs_attr_init(&md->force_ro.attr);
1547 md->force_ro.attr.name = "force_ro";
1548 md->force_ro.attr.mode = S_IRUGO | S_IWUSR;
1549 ret = device_create_file(disk_to_dev(md->disk), &md->force_ro);
1551 del_gendisk(md->disk);
1556 static const struct mmc_fixup blk_fixups[] =
1558 MMC_FIXUP("SEM02G", 0x2, 0x100, add_quirk, MMC_QUIRK_INAND_CMD38),
1559 MMC_FIXUP("SEM04G", 0x2, 0x100, add_quirk, MMC_QUIRK_INAND_CMD38),
1560 MMC_FIXUP("SEM08G", 0x2, 0x100, add_quirk, MMC_QUIRK_INAND_CMD38),
1561 MMC_FIXUP("SEM16G", 0x2, 0x100, add_quirk, MMC_QUIRK_INAND_CMD38),
1562 MMC_FIXUP("SEM32G", 0x2, 0x100, add_quirk, MMC_QUIRK_INAND_CMD38),
1565 * Some MMC cards experience performance degradation with CMD23
1566 * instead of CMD12-bounded multiblock transfers. For now we'll
1567 * black list what's bad...
1568 * - Certain Toshiba cards.
1570 * N.B. This doesn't affect SD cards.
1572 MMC_FIXUP("MMC08G", 0x11, CID_OEMID_ANY, add_quirk_mmc,
1573 MMC_QUIRK_BLK_NO_CMD23),
1574 MMC_FIXUP("MMC16G", 0x11, CID_OEMID_ANY, add_quirk_mmc,
1575 MMC_QUIRK_BLK_NO_CMD23),
1576 MMC_FIXUP("MMC32G", 0x11, CID_OEMID_ANY, add_quirk_mmc,
1577 MMC_QUIRK_BLK_NO_CMD23),
1581 static int mmc_blk_probe(struct mmc_card *card)
1583 struct mmc_blk_data *md, *part_md;
1588 * Check that the card supports the command class(es) we need.
1590 if (!(card->csd.cmdclass & CCC_BLOCK_READ))
1593 md = mmc_blk_alloc(card);
1597 err = mmc_blk_set_blksize(md, card);
1601 string_get_size((u64)get_capacity(md->disk) << 9, STRING_UNITS_2,
1602 cap_str, sizeof(cap_str));
1603 printk(KERN_INFO "%s: %s %s %s %s\n",
1604 md->disk->disk_name, mmc_card_id(card), mmc_card_name(card),
1605 cap_str, md->read_only ? "(ro)" : "");
1607 if (mmc_blk_alloc_parts(card, md))
1610 mmc_set_drvdata(card, md);
1611 mmc_fixup_device(card, blk_fixups);
1613 if (mmc_add_disk(md))
1616 list_for_each_entry(part_md, &md->part, part) {
1617 if (mmc_add_disk(part_md))
1623 mmc_blk_remove_parts(card, md);
1624 mmc_blk_remove_req(md);
1628 static void mmc_blk_remove(struct mmc_card *card)
1630 struct mmc_blk_data *md = mmc_get_drvdata(card);
1632 mmc_blk_remove_parts(card, md);
1633 mmc_claim_host(card->host);
1634 mmc_blk_part_switch(card, md);
1635 mmc_release_host(card->host);
1636 mmc_blk_remove_req(md);
1637 mmc_set_drvdata(card, NULL);
1641 static int mmc_blk_suspend(struct mmc_card *card, pm_message_t state)
1643 struct mmc_blk_data *part_md;
1644 struct mmc_blk_data *md = mmc_get_drvdata(card);
1647 mmc_queue_suspend(&md->queue);
1648 list_for_each_entry(part_md, &md->part, part) {
1649 mmc_queue_suspend(&part_md->queue);
1655 static int mmc_blk_resume(struct mmc_card *card)
1657 struct mmc_blk_data *part_md;
1658 struct mmc_blk_data *md = mmc_get_drvdata(card);
1661 mmc_blk_set_blksize(md, card);
1664 * Resume involves the card going into idle state,
1665 * so current partition is always the main one.
1667 md->part_curr = md->part_type;
1668 mmc_queue_resume(&md->queue);
1669 list_for_each_entry(part_md, &md->part, part) {
1670 mmc_queue_resume(&part_md->queue);
1676 #define mmc_blk_suspend NULL
1677 #define mmc_blk_resume NULL
1680 static struct mmc_driver mmc_driver = {
1684 .probe = mmc_blk_probe,
1685 .remove = mmc_blk_remove,
1686 .suspend = mmc_blk_suspend,
1687 .resume = mmc_blk_resume,
1690 static int __init mmc_blk_init(void)
1694 if (perdev_minors != CONFIG_MMC_BLOCK_MINORS)
1695 pr_info("mmcblk: using %d minors per device\n", perdev_minors);
1697 max_devices = 256 / perdev_minors;
1699 res = register_blkdev(MMC_BLOCK_MAJOR, "mmc");
1703 res = mmc_register_driver(&mmc_driver);
1709 unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
1714 static void __exit mmc_blk_exit(void)
1716 mmc_unregister_driver(&mmc_driver);
1717 unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
1720 module_init(mmc_blk_init);
1721 module_exit(mmc_blk_exit);
1723 MODULE_LICENSE("GPL");
1724 MODULE_DESCRIPTION("Multimedia Card (MMC) block device driver");