drivers/usb/storage/sddr55.c

   1 /* Driver for SanDisk SDDR-55 SmartMedia reader
   2  *
   3  * $Id:$
   4  *
   5  * SDDR55 driver v0.1:
   6  *
   7  * First release
   8  *
   9  * Current development and maintenance by:
  10  *   (c) 2002 Simon Munton
  11  *
  12  * This program is free software; you can redistribute it and/or modify it
  13  * under the terms of the GNU General Public License as published by the
  14  * Free Software Foundation; either version 2, or (at your option) any
  15  * later version.
  16  *
  17  * This program is distributed in the hope that it will be useful, but
  18  * WITHOUT ANY WARRANTY; without even the implied warranty of
  19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  20  * General Public License for more details.
  21  *
  22  * You should have received a copy of the GNU General Public License along
  23  * with this program; if not, write to the Free Software Foundation, Inc.,
  24  * 675 Mass Ave, Cambridge, MA 02139, USA.
  25  */
  26
  27 #include <linux/jiffies.h>
  28 #include <linux/errno.h>
  29 #include <linux/slab.h>
  30
  31 #include <scsi/scsi.h>
  32 #include <scsi/scsi_cmnd.h>
  33
  34 #include "usb.h"
  35 #include "transport.h"
  36 #include "protocol.h"
  37 #include "debug.h"
  38 #include "sddr55.h"
  39
  40
  41 #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) )
  42 #define LSB_of(s) ((s)&0xFF)
  43 #define MSB_of(s) ((s)>>8)
  44 #define PAGESIZE  512
  45
  46 #define set_sense_info(sk, asc, ascq)   \
  47     do {                                \
  48         info->sense_data[2] = sk;       \
  49         info->sense_data[12] = asc;     \
  50         info->sense_data[13] = ascq;    \
  51         } while (0)
  52
  53
  54 struct sddr55_card_info {
  55         unsigned long   capacity;       /* Size of card in bytes */
  56         int             max_log_blks;   /* maximum number of logical blocks */
  57         int             pageshift;      /* log2 of pagesize */
  58         int             smallpageshift; /* 1 if pagesize == 256 */
  59         int             blocksize;      /* Size of block in pages */
  60         int             blockshift;     /* log2 of blocksize */
  61         int             blockmask;      /* 2^blockshift - 1 */
  62         int             read_only;      /* non zero if card is write protected */
  63         int             force_read_only;        /* non zero if we find a map error*/
  64         int             *lba_to_pba;    /* logical to physical map */
  65         int             *pba_to_lba;    /* physical to logical map */
  66         int             fatal_error;    /* set if we detect something nasty */
  67         unsigned long   last_access;    /* number of jiffies since we last talked to device */
  68         unsigned char   sense_data[18];
  69 };
  70
  71
  72 #define NOT_ALLOCATED           0xffffffff
  73 #define BAD_BLOCK               0xffff
  74 #define CIS_BLOCK               0x400
  75 #define UNUSED_BLOCK            0x3ff
  76
  77 static int
  78 sddr55_bulk_transport(struct us_data *us, int direction,
  79                       unsigned char *data, unsigned int len) {
  80         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
  81         unsigned int pipe = (direction == DMA_FROM_DEVICE) ?
  82                         us->recv_bulk_pipe : us->send_bulk_pipe;
  83
  84         if (!len)
  85                 return USB_STOR_XFER_GOOD;
  86         info->last_access = jiffies;
  87         return usb_stor_bulk_transfer_buf(us, pipe, data, len, NULL);
  88 }
  89
  90 /* check if card inserted, if there is, update read_only status
  91  * return non zero if no card
  92  */
  93
  94 static int sddr55_status(struct us_data *us)
  95 {
  96         int result;
  97         unsigned char *command = us->iobuf;
  98         unsigned char *status = us->iobuf;
  99         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
 100
 101         /* send command */
 102         memset(command, 0, 8);
 103         command[5] = 0xB0;
 104         command[7] = 0x80;
 105         result = sddr55_bulk_transport(us,
 106                 DMA_TO_DEVICE, command, 8);
 107
 108         US_DEBUGP("Result for send_command in status %d\n",
 109                 result);
 110
 111         if (result != USB_STOR_XFER_GOOD) {
 112                 set_sense_info (4, 0, 0);       /* hardware error */
 113                 return USB_STOR_TRANSPORT_ERROR;
 114         }
 115
 116         result = sddr55_bulk_transport(us,
 117                 DMA_FROM_DEVICE, status,        4);
 118
 119         /* expect to get short transfer if no card fitted */
 120         if (result == USB_STOR_XFER_SHORT || result == USB_STOR_XFER_STALLED) {
 121                 /* had a short transfer, no card inserted, free map memory */
 122                 kfree(info->lba_to_pba);
 123                 kfree(info->pba_to_lba);
 124                 info->lba_to_pba = NULL;
 125                 info->pba_to_lba = NULL;
 126
 127                 info->fatal_error = 0;
 128                 info->force_read_only = 0;
 129
 130                 set_sense_info (2, 0x3a, 0);    /* not ready, medium not present */
 131                 return USB_STOR_TRANSPORT_FAILED;
 132         }
 133
 134         if (result != USB_STOR_XFER_GOOD) {
 135                 set_sense_info (4, 0, 0);       /* hardware error */
 136                 return USB_STOR_TRANSPORT_FAILED;
 137         }
 138
 139         /* check write protect status */
 140         info->read_only = (status[0] & 0x20);
 141
 142         /* now read status */
 143         result = sddr55_bulk_transport(us,
 144                 DMA_FROM_DEVICE, status,        2);
 145
 146         if (result != USB_STOR_XFER_GOOD) {
 147                 set_sense_info (4, 0, 0);       /* hardware error */
 148         }
 149
 150         return (result == USB_STOR_XFER_GOOD ?
 151                         USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_FAILED);
 152 }
 153
 154
 155 static int sddr55_read_data(struct us_data *us,
 156                 unsigned int lba,
 157                 unsigned int page,
 158                 unsigned short sectors) {
 159
 160         int result = USB_STOR_TRANSPORT_GOOD;
 161         unsigned char *command = us->iobuf;
 162         unsigned char *status = us->iobuf;
 163         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
 164         unsigned char *buffer;
 165
 166         unsigned int pba;
 167         unsigned long address;
 168
 169         unsigned short pages;
 170         unsigned int len, offset;
 171         struct scatterlist *sg;
 172
 173         // Since we only read in one block at a time, we have to create
 174         // a bounce buffer and move the data a piece at a time between the
 175         // bounce buffer and the actual transfer buffer.
 176
 177         len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
 178                         info->smallpageshift) * PAGESIZE;
 179         buffer = kmalloc(len, GFP_NOIO);
 180         if (buffer == NULL)
 181                 return USB_STOR_TRANSPORT_ERROR; /* out of memory */
 182         offset = 0;
 183         sg = NULL;
 184
 185         while (sectors>0) {
 186
 187                 /* have we got to end? */
 188                 if (lba >= info->max_log_blks)
 189                         break;
 190
 191                 pba = info->lba_to_pba[lba];
 192
 193                 // Read as many sectors as possible in this block
 194
 195                 pages = min((unsigned int) sectors << info->smallpageshift,
 196                                 info->blocksize - page);
 197                 len = pages << info->pageshift;
 198
 199                 US_DEBUGP("Read %02X pages, from PBA %04X"
 200                         " (LBA %04X) page %02X\n",
 201                         pages, pba, lba, page);
 202
 203                 if (pba == NOT_ALLOCATED) {
 204                         /* no pba for this lba, fill with zeroes */
 205                         memset (buffer, 0, len);
 206                 } else {
 207
 208                         address = (pba << info->blockshift) + page;
 209
 210                         command[0] = 0;
 211                         command[1] = LSB_of(address>>16);
 212                         command[2] = LSB_of(address>>8);
 213                         command[3] = LSB_of(address);
 214
 215                         command[4] = 0;
 216                         command[5] = 0xB0;
 217                         command[6] = LSB_of(pages << (1 - info->smallpageshift));
 218                         command[7] = 0x85;
 219
 220                         /* send command */
 221                         result = sddr55_bulk_transport(us,
 222                                 DMA_TO_DEVICE, command, 8);
 223
 224                         US_DEBUGP("Result for send_command in read_data %d\n",
 225                                 result);
 226
 227                         if (result != USB_STOR_XFER_GOOD) {
 228                                 result = USB_STOR_TRANSPORT_ERROR;
 229                                 goto leave;
 230                         }
 231
 232                         /* read data */
 233                         result = sddr55_bulk_transport(us,
 234                                 DMA_FROM_DEVICE, buffer, len);
 235
 236                         if (result != USB_STOR_XFER_GOOD) {
 237                                 result = USB_STOR_TRANSPORT_ERROR;
 238                                 goto leave;
 239                         }
 240
 241                         /* now read status */
 242                         result = sddr55_bulk_transport(us,
 243                                 DMA_FROM_DEVICE, status, 2);
 244
 245                         if (result != USB_STOR_XFER_GOOD) {
 246                                 result = USB_STOR_TRANSPORT_ERROR;
 247                                 goto leave;
 248                         }
 249
 250                         /* check status for error */
 251                         if (status[0] == 0xff && status[1] == 0x4) {
 252                                 set_sense_info (3, 0x11, 0);
 253                                 result = USB_STOR_TRANSPORT_FAILED;
 254                                 goto leave;
 255                         }
 256                 }
 257
 258                 // Store the data in the transfer buffer
 259                 usb_stor_access_xfer_buf(buffer, len, us->srb,
 260                                 &sg, &offset, TO_XFER_BUF);
 261
 262                 page = 0;
 263                 lba++;
 264                 sectors -= pages >> info->smallpageshift;
 265         }
 266
 267         result = USB_STOR_TRANSPORT_GOOD;
 268
 269 leave:
 270         kfree(buffer);
 271
 272         return result;
 273 }
 274
 275 static int sddr55_write_data(struct us_data *us,
 276                 unsigned int lba,
 277                 unsigned int page,
 278                 unsigned short sectors) {
 279
 280         int result = USB_STOR_TRANSPORT_GOOD;
 281         unsigned char *command = us->iobuf;
 282         unsigned char *status = us->iobuf;
 283         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
 284         unsigned char *buffer;
 285
 286         unsigned int pba;
 287         unsigned int new_pba;
 288         unsigned long address;
 289
 290         unsigned short pages;
 291         int i;
 292         unsigned int len, offset;
 293         struct scatterlist *sg;
 294
 295         /* check if we are allowed to write */
 296         if (info->read_only || info->force_read_only) {
 297                 set_sense_info (7, 0x27, 0);    /* read only */
 298                 return USB_STOR_TRANSPORT_FAILED;
 299         }
 300
 301         // Since we only write one block at a time, we have to create
 302         // a bounce buffer and move the data a piece at a time between the
 303         // bounce buffer and the actual transfer buffer.
 304
 305         len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
 306                         info->smallpageshift) * PAGESIZE;
 307         buffer = kmalloc(len, GFP_NOIO);
 308         if (buffer == NULL)
 309                 return USB_STOR_TRANSPORT_ERROR;
 310         offset = 0;
 311         sg = NULL;
 312
 313         while (sectors > 0) {
 314
 315                 /* have we got to end? */
 316                 if (lba >= info->max_log_blks)
 317                         break;
 318
 319                 pba = info->lba_to_pba[lba];
 320
 321                 // Write as many sectors as possible in this block
 322
 323                 pages = min((unsigned int) sectors << info->smallpageshift,
 324                                 info->blocksize - page);
 325                 len = pages << info->pageshift;
 326
 327                 // Get the data from the transfer buffer
 328                 usb_stor_access_xfer_buf(buffer, len, us->srb,
 329                                 &sg, &offset, FROM_XFER_BUF);
 330
 331                 US_DEBUGP("Write %02X pages, to PBA %04X"
 332                         " (LBA %04X) page %02X\n",
 333                         pages, pba, lba, page);
 334
 335                 command[4] = 0;
 336
 337                 if (pba == NOT_ALLOCATED) {
 338                         /* no pba allocated for this lba, find a free pba to use */
 339
 340                         int max_pba = (info->max_log_blks / 250 ) * 256;
 341                         int found_count = 0;
 342                         int found_pba = -1;
 343
 344                         /* set pba to first block in zone lba is in */
 345                         pba = (lba / 1000) * 1024;
 346
 347                         US_DEBUGP("No PBA for LBA %04X\n",lba);
 348
 349                         if (max_pba > 1024)
 350                                 max_pba = 1024;
 351
 352                         /*
 353                          * Scan through the map looking for an unused block
 354                          * leave 16 unused blocks at start (or as many as
 355                          * possible) since the sddr55 seems to reuse a used
 356                          * block when it shouldn't if we don't leave space.
 357                          */
 358                         for (i = 0; i < max_pba; i++, pba++) {
 359                                 if (info->pba_to_lba[pba] == UNUSED_BLOCK) {
 360                                         found_pba = pba;
 361                                         if (found_count++ > 16)
 362                                                 break;
 363                                 }
 364                         }
 365
 366                         pba = found_pba;
 367
 368                         if (pba == -1) {
 369                                 /* oh dear */
 370                                 US_DEBUGP("Couldn't find unallocated block\n");
 371
 372                                 set_sense_info (3, 0x31, 0);    /* medium error */
 373                                 result = USB_STOR_TRANSPORT_FAILED;
 374                                 goto leave;
 375                         }
 376
 377                         US_DEBUGP("Allocating PBA %04X for LBA %04X\n", pba, lba);
 378
 379                         /* set writing to unallocated block flag */
 380                         command[4] = 0x40;
 381                 }
 382
 383                 address = (pba << info->blockshift) + page;
 384
 385                 command[1] = LSB_of(address>>16);
 386                 command[2] = LSB_of(address>>8);
 387                 command[3] = LSB_of(address);
 388
 389                 /* set the lba into the command, modulo 1000 */
 390                 command[0] = LSB_of(lba % 1000);
 391                 command[6] = MSB_of(lba % 1000);
 392
 393                 command[4] |= LSB_of(pages >> info->smallpageshift);
 394                 command[5] = 0xB0;
 395                 command[7] = 0x86;
 396
 397                 /* send command */
 398                 result = sddr55_bulk_transport(us,
 399                         DMA_TO_DEVICE, command, 8);
 400
 401                 if (result != USB_STOR_XFER_GOOD) {
 402                         US_DEBUGP("Result for send_command in write_data %d\n",
 403                         result);
 404
 405                         /* set_sense_info is superfluous here? */
 406                         set_sense_info (3, 0x3, 0);/* peripheral write error */
 407                         result = USB_STOR_TRANSPORT_FAILED;
 408                         goto leave;
 409                 }
 410
 411                 /* send the data */
 412                 result = sddr55_bulk_transport(us,
 413                         DMA_TO_DEVICE, buffer, len);
 414
 415                 if (result != USB_STOR_XFER_GOOD) {
 416                         US_DEBUGP("Result for send_data in write_data %d\n",
 417                                   result);
 418
 419                         /* set_sense_info is superfluous here? */
 420                         set_sense_info (3, 0x3, 0);/* peripheral write error */
 421                         result = USB_STOR_TRANSPORT_FAILED;
 422                         goto leave;
 423                 }
 424
 425                 /* now read status */
 426                 result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, status, 6);
 427
 428                 if (result != USB_STOR_XFER_GOOD) {
 429                         US_DEBUGP("Result for get_status in write_data %d\n",
 430                                   result);
 431
 432                         /* set_sense_info is superfluous here? */
 433                         set_sense_info (3, 0x3, 0);/* peripheral write error */
 434                         result = USB_STOR_TRANSPORT_FAILED;
 435                         goto leave;
 436                 }
 437
 438                 new_pba = (status[3] + (status[4] << 8) + (status[5] << 16))
 439                                                   >> info->blockshift;
 440
 441                 /* check status for error */
 442                 if (status[0] == 0xff && status[1] == 0x4) {
 443                         info->pba_to_lba[new_pba] = BAD_BLOCK;
 444
 445                         set_sense_info (3, 0x0c, 0);
 446                         result = USB_STOR_TRANSPORT_FAILED;
 447                         goto leave;
 448                 }
 449
 450                 US_DEBUGP("Updating maps for LBA %04X: old PBA %04X, new PBA %04X\n",
 451                         lba, pba, new_pba);
 452
 453                 /* update the lba<->pba maps, note new_pba might be the same as pba */
 454                 info->lba_to_pba[lba] = new_pba;
 455                 info->pba_to_lba[pba] = UNUSED_BLOCK;
 456
 457                 /* check that new_pba wasn't already being used */
 458                 if (info->pba_to_lba[new_pba] != UNUSED_BLOCK) {
 459                         printk(KERN_ERR "sddr55 error: new PBA %04X already in use for LBA %04X\n",
 460                                 new_pba, info->pba_to_lba[new_pba]);
 461                         info->fatal_error = 1;
 462                         set_sense_info (3, 0x31, 0);
 463                         result = USB_STOR_TRANSPORT_FAILED;
 464                         goto leave;
 465                 }
 466
 467                 /* update the pba<->lba maps for new_pba */
 468                 info->pba_to_lba[new_pba] = lba % 1000;
 469
 470                 page = 0;
 471                 lba++;
 472                 sectors -= pages >> info->smallpageshift;
 473         }
 474         result = USB_STOR_TRANSPORT_GOOD;
 475
 476  leave:
 477         kfree(buffer);
 478         return result;
 479 }
 480
 481 static int sddr55_read_deviceID(struct us_data *us,
 482                 unsigned char *manufacturerID,
 483                 unsigned char *deviceID) {
 484
 485         int result;
 486         unsigned char *command = us->iobuf;
 487         unsigned char *content = us->iobuf;
 488
 489         memset(command, 0, 8);
 490         command[5] = 0xB0;
 491         command[7] = 0x84;
 492         result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
 493
 494         US_DEBUGP("Result of send_control for device ID is %d\n",
 495                 result);
 496
 497         if (result != USB_STOR_XFER_GOOD)
 498                 return USB_STOR_TRANSPORT_ERROR;
 499
 500         result = sddr55_bulk_transport(us,
 501                 DMA_FROM_DEVICE, content, 4);
 502
 503         if (result != USB_STOR_XFER_GOOD)
 504                 return USB_STOR_TRANSPORT_ERROR;
 505
 506         *manufacturerID = content[0];
 507         *deviceID = content[1];
 508
 509         if (content[0] != 0xff) {
 510                 result = sddr55_bulk_transport(us,
 511                         DMA_FROM_DEVICE, content, 2);
 512         }
 513
 514         return USB_STOR_TRANSPORT_GOOD;
 515 }
 516
 517
 518 int sddr55_reset(struct us_data *us) {
 519         return 0;
 520 }
 521
 522
 523 static unsigned long sddr55_get_capacity(struct us_data *us) {
 524
 525         unsigned char manufacturerID;
 526         unsigned char deviceID;
 527         int result;
 528         struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
 529
 530         US_DEBUGP("Reading capacity...\n");
 531
 532         result = sddr55_read_deviceID(us,
 533                 &manufacturerID,
 534                 &deviceID);
 535
 536         US_DEBUGP("Result of read_deviceID is %d\n",
 537                 result);
 538
 539         if (result != USB_STOR_XFER_GOOD)
 540                 return 0;
 541
 542         US_DEBUGP("Device ID = %02X\n", deviceID);
 543         US_DEBUGP("Manuf  ID = %02X\n", manufacturerID);
 544
 545         info->pageshift = 9;
 546         info->smallpageshift = 0;
 547         info->blocksize = 16;
 548         info->blockshift = 4;
 549         info->blockmask = 15;
 550
 551         switch (deviceID) {
 552
 553         case 0x6e: // 1MB
 554         case 0xe8:
 555         case 0xec:
 556                 info->pageshift = 8;
 557                 info->smallpageshift = 1;
 558                 return 0x00100000;
 559
 560         case 0xea: // 2MB
 561         case 0x64:
 562                 info->pageshift = 8;
 563                 info->smallpageshift = 1;
 564         case 0x5d: // 5d is a ROM card with pagesize 512.
 565                 return 0x00200000;
 566
 567         case 0xe3: // 4MB
 568         case 0xe5:
 569         case 0x6b:
 570         case 0xd5:
 571                 return 0x00400000;
 572
 573         case 0xe6: // 8MB
 574         case 0xd6:
 575                 return 0x00800000;
 576
 577         case 0x73: // 16MB
 578                 info->blocksize = 32;
 579                 info->blockshift = 5;
 580                 info->blockmask = 31;
 581                 return 0x01000000;
 582
 583         case 0x75: // 32MB
 584                 info->blocksize = 32;
 585                 info->blockshift = 5;
 586                 info->blockmask = 31;
 587                 return 0x02000000;
 588
 589         case 0x76: // 64MB
 590                 info->blocksize = 32;
 591                 info->blockshift = 5;
 592                 info->blockmask = 31;
 593                 return 0x04000000;
 594
 595         case 0x79: // 128MB
 596                 info->blocksize = 32;
 597                 info->blockshift = 5;
 598                 info->blockmask = 31;
 599                 return 0x08000000;
 600
 601         default: // unknown
 602                 return 0;
 603
 604         }
 605 }
 606
 607 static int sddr55_read_map(struct us_data *us) {
 608
 609         struct sddr55_card_info *info = (struct sddr55_card_info *)(us->extra);
 610         int numblocks;
 611         unsigned char *buffer;
 612         unsigned char *command = us->iobuf;
 613         int i;
 614         unsigned short lba;
 615         unsigned short max_lba;
 616         int result;
 617
 618         if (!info->capacity)
 619                 return -1;
 620
 621         numblocks = info->capacity >> (info->blockshift + info->pageshift);
 622
 623         buffer = kmalloc( numblocks * 2, GFP_NOIO );
 624
 625         if (!buffer)
 626                 return -1;
 627
 628         memset(command, 0, 8);
 629         command[5] = 0xB0;
 630         command[6] = numblocks * 2 / 256;
 631         command[7] = 0x8A;
 632
 633         result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
 634
 635         if ( result != USB_STOR_XFER_GOOD) {
 636                 kfree (buffer);
 637                 return -1;
 638         }
 639
 640         result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, buffer, numblocks * 2);
 641
 642         if ( result != USB_STOR_XFER_GOOD) {
 643                 kfree (buffer);
 644                 return -1;
 645         }
 646
 647         result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, command, 2);
 648
 649         if ( result != USB_STOR_XFER_GOOD) {
 650                 kfree (buffer);
 651                 return -1;
 652         }
 653
 654         kfree(info->lba_to_pba);
 655         kfree(info->pba_to_lba);
 656         info->lba_to_pba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
 657         info->pba_to_lba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
 658
 659         if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) {
 660                 kfree(info->lba_to_pba);
 661                 kfree(info->pba_to_lba);
 662                 info->lba_to_pba = NULL;
 663                 info->pba_to_lba = NULL;
 664                 kfree(buffer);
 665                 return -1;
 666         }
 667
 668         memset(info->lba_to_pba, 0xff, numblocks*sizeof(int));
 669         memset(info->pba_to_lba, 0xff, numblocks*sizeof(int));
 670
 671         /* set maximum lba */
 672         max_lba = info->max_log_blks;
 673         if (max_lba > 1000)
 674                 max_lba = 1000;
 675
 676         // Each block is 64 bytes of control data, so block i is located in
 677         // scatterlist block i*64/128k = i*(2^6)*(2^-17) = i*(2^-11)
 678
 679         for (i=0; i<numblocks; i++) {
 680                 int zone = i / 1024;
 681
 682                 lba = short_pack(buffer[i * 2], buffer[i * 2 + 1]);
 683
 684                         /* Every 1024 physical blocks ("zone"), the LBA numbers
 685                          * go back to zero, but are within a higher
 686                          * block of LBA's. Also, there is a maximum of
 687                          * 1000 LBA's per zone. In other words, in PBA
 688                          * 1024-2047 you will find LBA 0-999 which are
 689                          * really LBA 1000-1999. Yes, this wastes 24
 690                          * physical blocks per zone. Go figure.
 691                          * These devices can have blocks go bad, so there
 692                          * are 24 spare blocks to use when blocks do go bad.
 693                          */
 694
 695                         /* SDDR55 returns 0xffff for a bad block, and 0x400 for the
 696                          * CIS block. (Is this true for cards 8MB or less??)
 697                          * Record these in the physical to logical map
 698                          */
 699
 700                 info->pba_to_lba[i] = lba;
 701
 702                 if (lba >= max_lba) {
 703                         continue;
 704                 }
 705
 706                 if (info->lba_to_pba[lba + zone * 1000] != NOT_ALLOCATED &&
 707                     !info->force_read_only) {
 708                         printk("sddr55: map inconsistency at LBA %04X\n", lba + zone * 1000);
 709                         info->force_read_only = 1;
 710                 }
 711
 712                 if (lba<0x10 || (lba>=0x3E0 && lba<0x3EF))
 713                         US_DEBUGP("LBA %04X <-> PBA %04X\n", lba, i);
 714
 715                 info->lba_to_pba[lba + zone * 1000] = i;
 716         }
 717
 718         kfree(buffer);
 719         return 0;
 720 }
 721
 722
 723 static void sddr55_card_info_destructor(void *extra) {
 724         struct sddr55_card_info *info = (struct sddr55_card_info *)extra;
 725
 726         if (!extra)
 727                 return;
 728
 729         kfree(info->lba_to_pba);
 730         kfree(info->pba_to_lba);
 731 }
 732
 733
 734 /*
 735  * Transport for the Sandisk SDDR-55
 736  */
 737 int sddr55_transport(struct scsi_cmnd *srb, struct us_data *us)
 738 {
 739         int result;
 740         static unsigned char inquiry_response[8] = {
 741                 0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00
 742         };
 743         // write-protected for now, no block descriptor support
 744         static unsigned char mode_page_01[20] = {
 745                 0x0, 0x12, 0x00, 0x80, 0x0, 0x0, 0x0, 0x0,
 746                 0x01, 0x0A,
 747                 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
 748         };
 749         unsigned char *ptr = us->iobuf;
 750         unsigned long capacity;
 751         unsigned int lba;
 752         unsigned int pba;
 753         unsigned int page;
 754         unsigned short pages;
 755         struct sddr55_card_info *info;
 756
 757         if (!us->extra) {
 758                 us->extra = kzalloc(
 759                         sizeof(struct sddr55_card_info), GFP_NOIO);
 760                 if (!us->extra)
 761                         return USB_STOR_TRANSPORT_ERROR;
 762                 us->extra_destructor = sddr55_card_info_destructor;
 763         }
 764
 765         info = (struct sddr55_card_info *)(us->extra);
 766
 767         if (srb->cmnd[0] == REQUEST_SENSE) {
 768                 US_DEBUGP("SDDR55: request sense %02x/%02x/%02x\n", info->sense_data[2], info->sense_data[12], info->sense_data[13]);
 769
 770                 memcpy (ptr, info->sense_data, sizeof info->sense_data);
 771                 ptr[0] = 0x70;
 772                 ptr[7] = 11;
 773                 usb_stor_set_xfer_buf (ptr, sizeof info->sense_data, srb);
 774                 memset (info->sense_data, 0, sizeof info->sense_data);
 775
 776                 return USB_STOR_TRANSPORT_GOOD;
 777         }
 778
 779         memset (info->sense_data, 0, sizeof info->sense_data);
 780
 781         /* Dummy up a response for INQUIRY since SDDR55 doesn't
 782            respond to INQUIRY commands */
 783
 784         if (srb->cmnd[0] == INQUIRY) {
 785                 memcpy(ptr, inquiry_response, 8);
 786                 fill_inquiry_response(us, ptr, 36);
 787                 return USB_STOR_TRANSPORT_GOOD;
 788         }
 789
 790         /* only check card status if the map isn't allocated, ie no card seen yet
 791          * or if it's been over half a second since we last accessed it
 792          */
 793         if (info->lba_to_pba == NULL || time_after(jiffies, info->last_access + HZ/2)) {
 794
 795                 /* check to see if a card is fitted */
 796                 result = sddr55_status (us);
 797                 if (result) {
 798                         result = sddr55_status (us);
 799                         if (!result) {
 800                         set_sense_info (6, 0x28, 0);    /* new media, set unit attention, not ready to ready */
 801                         }
 802                         return USB_STOR_TRANSPORT_FAILED;
 803                 }
 804         }
 805
 806         /* if we detected a problem with the map when writing,
 807            don't allow any more access */
 808         if (info->fatal_error) {
 809
 810                 set_sense_info (3, 0x31, 0);
 811                 return USB_STOR_TRANSPORT_FAILED;
 812         }
 813
 814         if (srb->cmnd[0] == READ_CAPACITY) {
 815
 816                 capacity = sddr55_get_capacity(us);
 817
 818                 if (!capacity) {
 819                         set_sense_info (3, 0x30, 0); /* incompatible medium */
 820                         return USB_STOR_TRANSPORT_FAILED;
 821                 }
 822
 823                 info->capacity = capacity;
 824
 825                 /* figure out the maximum logical block number, allowing for
 826                  * the fact that only 250 out of every 256 are used */
 827                 info->max_log_blks = ((info->capacity >> (info->pageshift + info->blockshift)) / 256) * 250;
 828
 829                 /* Last page in the card, adjust as we only use 250 out of
 830                  * every 256 pages */
 831                 capacity = (capacity / 256) * 250;
 832
 833                 capacity /= PAGESIZE;
 834                 capacity--;
 835
 836                 ((__be32 *) ptr)[0] = cpu_to_be32(capacity);
 837                 ((__be32 *) ptr)[1] = cpu_to_be32(PAGESIZE);
 838                 usb_stor_set_xfer_buf(ptr, 8, srb);
 839
 840                 sddr55_read_map(us);
 841
 842                 return USB_STOR_TRANSPORT_GOOD;
 843         }
 844
 845         if (srb->cmnd[0] == MODE_SENSE_10) {
 846
 847                 memcpy(ptr, mode_page_01, sizeof mode_page_01);
 848                 ptr[3] = (info->read_only || info->force_read_only) ? 0x80 : 0;
 849                 usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb);
 850
 851                 if ( (srb->cmnd[2] & 0x3F) == 0x01 ) {
 852                         US_DEBUGP(
 853                           "SDDR55: Dummy up request for mode page 1\n");
 854                         return USB_STOR_TRANSPORT_GOOD;
 855
 856                 } else if ( (srb->cmnd[2] & 0x3F) == 0x3F ) {
 857                         US_DEBUGP(
 858                           "SDDR55: Dummy up request for all mode pages\n");
 859                         return USB_STOR_TRANSPORT_GOOD;
 860                 }
 861
 862                 set_sense_info (5, 0x24, 0);    /* invalid field in command */
 863                 return USB_STOR_TRANSPORT_FAILED;
 864         }
 865
 866         if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL) {
 867
 868                 US_DEBUGP(
 869                   "SDDR55: %s medium removal. Not that I can do"
 870                   " anything about it...\n",
 871                   (srb->cmnd[4]&0x03) ? "Prevent" : "Allow");
 872
 873                 return USB_STOR_TRANSPORT_GOOD;
 874
 875         }
 876
 877         if (srb->cmnd[0] == READ_10 || srb->cmnd[0] == WRITE_10) {
 878
 879                 page = short_pack(srb->cmnd[3], srb->cmnd[2]);
 880                 page <<= 16;
 881                 page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
 882                 pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
 883
 884                 page <<= info->smallpageshift;
 885
 886                 // convert page to block and page-within-block
 887
 888                 lba = page >> info->blockshift;
 889                 page = page & info->blockmask;
 890
 891                 // locate physical block corresponding to logical block
 892
 893                 if (lba >= info->max_log_blks) {
 894
 895                         US_DEBUGP("Error: Requested LBA %04X exceeds maximum "
 896                           "block %04X\n", lba, info->max_log_blks-1);
 897
 898                         set_sense_info (5, 0x24, 0);    /* invalid field in command */
 899
 900                         return USB_STOR_TRANSPORT_FAILED;
 901                 }
 902
 903                 pba = info->lba_to_pba[lba];
 904
 905                 if (srb->cmnd[0] == WRITE_10) {
 906                         US_DEBUGP("WRITE_10: write block %04X (LBA %04X) page %01X"
 907                                 " pages %d\n",
 908                                 pba, lba, page, pages);
 909
 910                         return sddr55_write_data(us, lba, page, pages);
 911                 } else {
 912                         US_DEBUGP("READ_10: read block %04X (LBA %04X) page %01X"
 913                                 " pages %d\n",
 914                                 pba, lba, page, pages);
 915
 916                         return sddr55_read_data(us, lba, page, pages);
 917                 }
 918         }
 919
 920
 921         if (srb->cmnd[0] == TEST_UNIT_READY) {
 922                 return USB_STOR_TRANSPORT_GOOD;
 923         }
 924
 925         if (srb->cmnd[0] == START_STOP) {
 926                 return USB_STOR_TRANSPORT_GOOD;
 927         }
 928
 929         set_sense_info (5, 0x20, 0);    /* illegal command */
 930
 931         return USB_STOR_TRANSPORT_FAILED; // FIXME: sense buffer?
 932 }
 933