lkdtm: Add Control Flow Integrity test
[linux/fpc-iii.git] / drivers / scsi / imm.c
blob2519fb7aee51299fbea2a15086e20e74c878be25
1 // SPDX-License-Identifier: GPL-2.0-only
2 /* imm.c -- low level driver for the IOMEGA MatchMaker
3 * parallel port SCSI host adapter.
4 *
5 * (The IMM is the embedded controller in the ZIP Plus drive.)
6 *
7 * My unofficial company acronym list is 21 pages long:
8 * FLA: Four letter acronym with built in facility for
9 * future expansion to five letters.
12 #include <linux/init.h>
13 #include <linux/kernel.h>
14 #include <linux/module.h>
15 #include <linux/blkdev.h>
16 #include <linux/parport.h>
17 #include <linux/workqueue.h>
18 #include <linux/delay.h>
19 #include <linux/slab.h>
20 #include <asm/io.h>
22 #include <scsi/scsi.h>
23 #include <scsi/scsi_cmnd.h>
24 #include <scsi/scsi_device.h>
25 #include <scsi/scsi_host.h>
27 /* The following #define is to avoid a clash with hosts.c */
28 #define IMM_PROBE_SPP 0x0001
29 #define IMM_PROBE_PS2 0x0002
30 #define IMM_PROBE_ECR 0x0010
31 #define IMM_PROBE_EPP17 0x0100
32 #define IMM_PROBE_EPP19 0x0200
35 typedef struct {
36 struct pardevice *dev; /* Parport device entry */
37 int base; /* Actual port address */
38 int base_hi; /* Hi Base address for ECP-ISA chipset */
39 int mode; /* Transfer mode */
40 struct scsi_cmnd *cur_cmd; /* Current queued command */
41 struct delayed_work imm_tq; /* Polling interrupt stuff */
42 unsigned long jstart; /* Jiffies at start */
43 unsigned failed:1; /* Failure flag */
44 unsigned dp:1; /* Data phase present */
45 unsigned rd:1; /* Read data in data phase */
46 unsigned wanted:1; /* Parport sharing busy flag */
47 unsigned int dev_no; /* Device number */
48 wait_queue_head_t *waiting;
49 struct Scsi_Host *host;
50 struct list_head list;
51 } imm_struct;
53 static void imm_reset_pulse(unsigned int base);
54 static int device_check(imm_struct *dev);
56 #include "imm.h"
58 static inline imm_struct *imm_dev(struct Scsi_Host *host)
60 return *(imm_struct **)&host->hostdata;
63 static DEFINE_SPINLOCK(arbitration_lock);
65 static void got_it(imm_struct *dev)
67 dev->base = dev->dev->port->base;
68 if (dev->cur_cmd)
69 dev->cur_cmd->SCp.phase = 1;
70 else
71 wake_up(dev->waiting);
74 static void imm_wakeup(void *ref)
76 imm_struct *dev = (imm_struct *) ref;
77 unsigned long flags;
79 spin_lock_irqsave(&arbitration_lock, flags);
80 if (dev->wanted) {
81 if (parport_claim(dev->dev) == 0) {
82 got_it(dev);
83 dev->wanted = 0;
86 spin_unlock_irqrestore(&arbitration_lock, flags);
89 static int imm_pb_claim(imm_struct *dev)
91 unsigned long flags;
92 int res = 1;
93 spin_lock_irqsave(&arbitration_lock, flags);
94 if (parport_claim(dev->dev) == 0) {
95 got_it(dev);
96 res = 0;
98 dev->wanted = res;
99 spin_unlock_irqrestore(&arbitration_lock, flags);
100 return res;
103 static void imm_pb_dismiss(imm_struct *dev)
105 unsigned long flags;
106 int wanted;
107 spin_lock_irqsave(&arbitration_lock, flags);
108 wanted = dev->wanted;
109 dev->wanted = 0;
110 spin_unlock_irqrestore(&arbitration_lock, flags);
111 if (!wanted)
112 parport_release(dev->dev);
115 static inline void imm_pb_release(imm_struct *dev)
117 parport_release(dev->dev);
120 /* This is to give the imm driver a way to modify the timings (and other
121 * parameters) by writing to the /proc/scsi/imm/0 file.
122 * Very simple method really... (Too simple, no error checking :( )
123 * Reason: Kernel hackers HATE having to unload and reload modules for
124 * testing...
125 * Also gives a method to use a script to obtain optimum timings (TODO)
127 static int imm_write_info(struct Scsi_Host *host, char *buffer, int length)
129 imm_struct *dev = imm_dev(host);
131 if ((length > 5) && (strncmp(buffer, "mode=", 5) == 0)) {
132 dev->mode = simple_strtoul(buffer + 5, NULL, 0);
133 return length;
135 printk("imm /proc: invalid variable\n");
136 return -EINVAL;
139 static int imm_show_info(struct seq_file *m, struct Scsi_Host *host)
141 imm_struct *dev = imm_dev(host);
143 seq_printf(m, "Version : %s\n", IMM_VERSION);
144 seq_printf(m, "Parport : %s\n", dev->dev->port->name);
145 seq_printf(m, "Mode : %s\n", IMM_MODE_STRING[dev->mode]);
146 return 0;
149 #if IMM_DEBUG > 0
150 #define imm_fail(x,y) printk("imm: imm_fail(%i) from %s at line %d\n",\
151 y, __func__, __LINE__); imm_fail_func(x,y);
152 static inline void
153 imm_fail_func(imm_struct *dev, int error_code)
154 #else
155 static inline void
156 imm_fail(imm_struct *dev, int error_code)
157 #endif
159 /* If we fail a device then we trash status / message bytes */
160 if (dev->cur_cmd) {
161 dev->cur_cmd->result = error_code << 16;
162 dev->failed = 1;
167 * Wait for the high bit to be set.
169 * In principle, this could be tied to an interrupt, but the adapter
170 * doesn't appear to be designed to support interrupts. We spin on
171 * the 0x80 ready bit.
173 static unsigned char imm_wait(imm_struct *dev)
175 int k;
176 unsigned short ppb = dev->base;
177 unsigned char r;
179 w_ctr(ppb, 0x0c);
181 k = IMM_SPIN_TMO;
182 do {
183 r = r_str(ppb);
184 k--;
185 udelay(1);
187 while (!(r & 0x80) && (k));
190 * STR register (LPT base+1) to SCSI mapping:
192 * STR imm imm
193 * ===================================
194 * 0x80 S_REQ S_REQ
195 * 0x40 !S_BSY (????)
196 * 0x20 !S_CD !S_CD
197 * 0x10 !S_IO !S_IO
198 * 0x08 (????) !S_BSY
200 * imm imm meaning
201 * ==================================
202 * 0xf0 0xb8 Bit mask
203 * 0xc0 0x88 ZIP wants more data
204 * 0xd0 0x98 ZIP wants to send more data
205 * 0xe0 0xa8 ZIP is expecting SCSI command data
206 * 0xf0 0xb8 end of transfer, ZIP is sending status
208 w_ctr(ppb, 0x04);
209 if (k)
210 return (r & 0xb8);
212 /* Counter expired - Time out occurred */
213 imm_fail(dev, DID_TIME_OUT);
214 printk("imm timeout in imm_wait\n");
215 return 0; /* command timed out */
218 static int imm_negotiate(imm_struct * tmp)
221 * The following is supposedly the IEEE 1284-1994 negotiate
222 * sequence. I have yet to obtain a copy of the above standard
223 * so this is a bit of a guess...
225 * A fair chunk of this is based on the Linux parport implementation
226 * of IEEE 1284.
228 * Return 0 if data available
229 * 1 if no data available
232 unsigned short base = tmp->base;
233 unsigned char a, mode;
235 switch (tmp->mode) {
236 case IMM_NIBBLE:
237 mode = 0x00;
238 break;
239 case IMM_PS2:
240 mode = 0x01;
241 break;
242 default:
243 return 0;
246 w_ctr(base, 0x04);
247 udelay(5);
248 w_dtr(base, mode);
249 udelay(100);
250 w_ctr(base, 0x06);
251 udelay(5);
252 a = (r_str(base) & 0x20) ? 0 : 1;
253 udelay(5);
254 w_ctr(base, 0x07);
255 udelay(5);
256 w_ctr(base, 0x06);
258 if (a) {
259 printk
260 ("IMM: IEEE1284 negotiate indicates no data available.\n");
261 imm_fail(tmp, DID_ERROR);
263 return a;
267 * Clear EPP timeout bit.
269 static inline void epp_reset(unsigned short ppb)
271 int i;
273 i = r_str(ppb);
274 w_str(ppb, i);
275 w_str(ppb, i & 0xfe);
279 * Wait for empty ECP fifo (if we are in ECP fifo mode only)
281 static inline void ecp_sync(imm_struct *dev)
283 int i, ppb_hi = dev->base_hi;
285 if (ppb_hi == 0)
286 return;
288 if ((r_ecr(ppb_hi) & 0xe0) == 0x60) { /* mode 011 == ECP fifo mode */
289 for (i = 0; i < 100; i++) {
290 if (r_ecr(ppb_hi) & 0x01)
291 return;
292 udelay(5);
294 printk("imm: ECP sync failed as data still present in FIFO.\n");
298 static int imm_byte_out(unsigned short base, const char *buffer, int len)
300 int i;
302 w_ctr(base, 0x4); /* apparently a sane mode */
303 for (i = len >> 1; i; i--) {
304 w_dtr(base, *buffer++);
305 w_ctr(base, 0x5); /* Drop STROBE low */
306 w_dtr(base, *buffer++);
307 w_ctr(base, 0x0); /* STROBE high + INIT low */
309 w_ctr(base, 0x4); /* apparently a sane mode */
310 return 1; /* All went well - we hope! */
313 static int imm_nibble_in(unsigned short base, char *buffer, int len)
315 unsigned char l;
316 int i;
319 * The following is based on documented timing signals
321 w_ctr(base, 0x4);
322 for (i = len; i; i--) {
323 w_ctr(base, 0x6);
324 l = (r_str(base) & 0xf0) >> 4;
325 w_ctr(base, 0x5);
326 *buffer++ = (r_str(base) & 0xf0) | l;
327 w_ctr(base, 0x4);
329 return 1; /* All went well - we hope! */
332 static int imm_byte_in(unsigned short base, char *buffer, int len)
334 int i;
337 * The following is based on documented timing signals
339 w_ctr(base, 0x4);
340 for (i = len; i; i--) {
341 w_ctr(base, 0x26);
342 *buffer++ = r_dtr(base);
343 w_ctr(base, 0x25);
345 return 1; /* All went well - we hope! */
348 static int imm_out(imm_struct *dev, char *buffer, int len)
350 unsigned short ppb = dev->base;
351 int r = imm_wait(dev);
354 * Make sure that:
355 * a) the SCSI bus is BUSY (device still listening)
356 * b) the device is listening
358 if ((r & 0x18) != 0x08) {
359 imm_fail(dev, DID_ERROR);
360 printk("IMM: returned SCSI status %2x\n", r);
361 return 0;
363 switch (dev->mode) {
364 case IMM_EPP_32:
365 case IMM_EPP_16:
366 case IMM_EPP_8:
367 epp_reset(ppb);
368 w_ctr(ppb, 0x4);
369 #ifdef CONFIG_SCSI_IZIP_EPP16
370 if (!(((long) buffer | len) & 0x01))
371 outsw(ppb + 4, buffer, len >> 1);
372 #else
373 if (!(((long) buffer | len) & 0x03))
374 outsl(ppb + 4, buffer, len >> 2);
375 #endif
376 else
377 outsb(ppb + 4, buffer, len);
378 w_ctr(ppb, 0xc);
379 r = !(r_str(ppb) & 0x01);
380 w_ctr(ppb, 0xc);
381 ecp_sync(dev);
382 break;
384 case IMM_NIBBLE:
385 case IMM_PS2:
386 /* 8 bit output, with a loop */
387 r = imm_byte_out(ppb, buffer, len);
388 break;
390 default:
391 printk("IMM: bug in imm_out()\n");
392 r = 0;
394 return r;
397 static int imm_in(imm_struct *dev, char *buffer, int len)
399 unsigned short ppb = dev->base;
400 int r = imm_wait(dev);
403 * Make sure that:
404 * a) the SCSI bus is BUSY (device still listening)
405 * b) the device is sending data
407 if ((r & 0x18) != 0x18) {
408 imm_fail(dev, DID_ERROR);
409 return 0;
411 switch (dev->mode) {
412 case IMM_NIBBLE:
413 /* 4 bit input, with a loop */
414 r = imm_nibble_in(ppb, buffer, len);
415 w_ctr(ppb, 0xc);
416 break;
418 case IMM_PS2:
419 /* 8 bit input, with a loop */
420 r = imm_byte_in(ppb, buffer, len);
421 w_ctr(ppb, 0xc);
422 break;
424 case IMM_EPP_32:
425 case IMM_EPP_16:
426 case IMM_EPP_8:
427 epp_reset(ppb);
428 w_ctr(ppb, 0x24);
429 #ifdef CONFIG_SCSI_IZIP_EPP16
430 if (!(((long) buffer | len) & 0x01))
431 insw(ppb + 4, buffer, len >> 1);
432 #else
433 if (!(((long) buffer | len) & 0x03))
434 insl(ppb + 4, buffer, len >> 2);
435 #endif
436 else
437 insb(ppb + 4, buffer, len);
438 w_ctr(ppb, 0x2c);
439 r = !(r_str(ppb) & 0x01);
440 w_ctr(ppb, 0x2c);
441 ecp_sync(dev);
442 break;
444 default:
445 printk("IMM: bug in imm_ins()\n");
446 r = 0;
447 break;
449 return r;
452 static int imm_cpp(unsigned short ppb, unsigned char b)
455 * Comments on udelay values refer to the
456 * Command Packet Protocol (CPP) timing diagram.
459 unsigned char s1, s2, s3;
460 w_ctr(ppb, 0x0c);
461 udelay(2); /* 1 usec - infinite */
462 w_dtr(ppb, 0xaa);
463 udelay(10); /* 7 usec - infinite */
464 w_dtr(ppb, 0x55);
465 udelay(10); /* 7 usec - infinite */
466 w_dtr(ppb, 0x00);
467 udelay(10); /* 7 usec - infinite */
468 w_dtr(ppb, 0xff);
469 udelay(10); /* 7 usec - infinite */
470 s1 = r_str(ppb) & 0xb8;
471 w_dtr(ppb, 0x87);
472 udelay(10); /* 7 usec - infinite */
473 s2 = r_str(ppb) & 0xb8;
474 w_dtr(ppb, 0x78);
475 udelay(10); /* 7 usec - infinite */
476 s3 = r_str(ppb) & 0x38;
478 * Values for b are:
479 * 0000 00aa Assign address aa to current device
480 * 0010 00aa Select device aa in EPP Winbond mode
481 * 0010 10aa Select device aa in EPP mode
482 * 0011 xxxx Deselect all devices
483 * 0110 00aa Test device aa
484 * 1101 00aa Select device aa in ECP mode
485 * 1110 00aa Select device aa in Compatible mode
487 w_dtr(ppb, b);
488 udelay(2); /* 1 usec - infinite */
489 w_ctr(ppb, 0x0c);
490 udelay(10); /* 7 usec - infinite */
491 w_ctr(ppb, 0x0d);
492 udelay(2); /* 1 usec - infinite */
493 w_ctr(ppb, 0x0c);
494 udelay(10); /* 7 usec - infinite */
495 w_dtr(ppb, 0xff);
496 udelay(10); /* 7 usec - infinite */
499 * The following table is electrical pin values.
500 * (BSY is inverted at the CTR register)
502 * BSY ACK POut SEL Fault
503 * S1 0 X 1 1 1
504 * S2 1 X 0 1 1
505 * S3 L X 1 1 S
507 * L => Last device in chain
508 * S => Selected
510 * Observered values for S1,S2,S3 are:
511 * Disconnect => f8/58/78
512 * Connect => f8/58/70
514 if ((s1 == 0xb8) && (s2 == 0x18) && (s3 == 0x30))
515 return 1; /* Connected */
516 if ((s1 == 0xb8) && (s2 == 0x18) && (s3 == 0x38))
517 return 0; /* Disconnected */
519 return -1; /* No device present */
522 static inline int imm_connect(imm_struct *dev, int flag)
524 unsigned short ppb = dev->base;
526 imm_cpp(ppb, 0xe0); /* Select device 0 in compatible mode */
527 imm_cpp(ppb, 0x30); /* Disconnect all devices */
529 if ((dev->mode == IMM_EPP_8) ||
530 (dev->mode == IMM_EPP_16) ||
531 (dev->mode == IMM_EPP_32))
532 return imm_cpp(ppb, 0x28); /* Select device 0 in EPP mode */
533 return imm_cpp(ppb, 0xe0); /* Select device 0 in compatible mode */
536 static void imm_disconnect(imm_struct *dev)
538 imm_cpp(dev->base, 0x30); /* Disconnect all devices */
541 static int imm_select(imm_struct *dev, int target)
543 int k;
544 unsigned short ppb = dev->base;
547 * Firstly we want to make sure there is nothing
548 * holding onto the SCSI bus.
550 w_ctr(ppb, 0xc);
552 k = IMM_SELECT_TMO;
553 do {
554 k--;
555 } while ((r_str(ppb) & 0x08) && (k));
557 if (!k)
558 return 0;
561 * Now assert the SCSI ID (HOST and TARGET) on the data bus
563 w_ctr(ppb, 0x4);
564 w_dtr(ppb, 0x80 | (1 << target));
565 udelay(1);
568 * Deassert SELIN first followed by STROBE
570 w_ctr(ppb, 0xc);
571 w_ctr(ppb, 0xd);
574 * ACK should drop low while SELIN is deasserted.
575 * FAULT should drop low when the SCSI device latches the bus.
577 k = IMM_SELECT_TMO;
578 do {
579 k--;
581 while (!(r_str(ppb) & 0x08) && (k));
584 * Place the interface back into a sane state (status mode)
586 w_ctr(ppb, 0xc);
587 return (k) ? 1 : 0;
590 static int imm_init(imm_struct *dev)
592 if (imm_connect(dev, 0) != 1)
593 return -EIO;
594 imm_reset_pulse(dev->base);
595 mdelay(1); /* Delay to allow devices to settle */
596 imm_disconnect(dev);
597 mdelay(1); /* Another delay to allow devices to settle */
598 return device_check(dev);
601 static inline int imm_send_command(struct scsi_cmnd *cmd)
603 imm_struct *dev = imm_dev(cmd->device->host);
604 int k;
606 /* NOTE: IMM uses byte pairs */
607 for (k = 0; k < cmd->cmd_len; k += 2)
608 if (!imm_out(dev, &cmd->cmnd[k], 2))
609 return 0;
610 return 1;
614 * The bulk flag enables some optimisations in the data transfer loops,
615 * it should be true for any command that transfers data in integral
616 * numbers of sectors.
618 * The driver appears to remain stable if we speed up the parallel port
619 * i/o in this function, but not elsewhere.
621 static int imm_completion(struct scsi_cmnd *cmd)
623 /* Return codes:
624 * -1 Error
625 * 0 Told to schedule
626 * 1 Finished data transfer
628 imm_struct *dev = imm_dev(cmd->device->host);
629 unsigned short ppb = dev->base;
630 unsigned long start_jiffies = jiffies;
632 unsigned char r, v;
633 int fast, bulk, status;
635 v = cmd->cmnd[0];
636 bulk = ((v == READ_6) ||
637 (v == READ_10) || (v == WRITE_6) || (v == WRITE_10));
640 * We only get here if the drive is ready to comunicate,
641 * hence no need for a full imm_wait.
643 w_ctr(ppb, 0x0c);
644 r = (r_str(ppb) & 0xb8);
647 * while (device is not ready to send status byte)
648 * loop;
650 while (r != (unsigned char) 0xb8) {
652 * If we have been running for more than a full timer tick
653 * then take a rest.
655 if (time_after(jiffies, start_jiffies + 1))
656 return 0;
659 * FAIL if:
660 * a) Drive status is screwy (!ready && !present)
661 * b) Drive is requesting/sending more data than expected
663 if (((r & 0x88) != 0x88) || (cmd->SCp.this_residual <= 0)) {
664 imm_fail(dev, DID_ERROR);
665 return -1; /* ERROR_RETURN */
667 /* determine if we should use burst I/O */
668 if (dev->rd == 0) {
669 fast = (bulk
670 && (cmd->SCp.this_residual >=
671 IMM_BURST_SIZE)) ? IMM_BURST_SIZE : 2;
672 status = imm_out(dev, cmd->SCp.ptr, fast);
673 } else {
674 fast = (bulk
675 && (cmd->SCp.this_residual >=
676 IMM_BURST_SIZE)) ? IMM_BURST_SIZE : 1;
677 status = imm_in(dev, cmd->SCp.ptr, fast);
680 cmd->SCp.ptr += fast;
681 cmd->SCp.this_residual -= fast;
683 if (!status) {
684 imm_fail(dev, DID_BUS_BUSY);
685 return -1; /* ERROR_RETURN */
687 if (cmd->SCp.buffer && !cmd->SCp.this_residual) {
688 /* if scatter/gather, advance to the next segment */
689 if (cmd->SCp.buffers_residual--) {
690 cmd->SCp.buffer = sg_next(cmd->SCp.buffer);
691 cmd->SCp.this_residual =
692 cmd->SCp.buffer->length;
693 cmd->SCp.ptr = sg_virt(cmd->SCp.buffer);
696 * Make sure that we transfer even number of bytes
697 * otherwise it makes imm_byte_out() messy.
699 if (cmd->SCp.this_residual & 0x01)
700 cmd->SCp.this_residual++;
703 /* Now check to see if the drive is ready to comunicate */
704 w_ctr(ppb, 0x0c);
705 r = (r_str(ppb) & 0xb8);
707 /* If not, drop back down to the scheduler and wait a timer tick */
708 if (!(r & 0x80))
709 return 0;
711 return 1; /* FINISH_RETURN */
715 * Since the IMM itself doesn't generate interrupts, we use
716 * the scheduler's task queue to generate a stream of call-backs and
717 * complete the request when the drive is ready.
719 static void imm_interrupt(struct work_struct *work)
721 imm_struct *dev = container_of(work, imm_struct, imm_tq.work);
722 struct scsi_cmnd *cmd = dev->cur_cmd;
723 struct Scsi_Host *host = cmd->device->host;
724 unsigned long flags;
726 if (imm_engine(dev, cmd)) {
727 schedule_delayed_work(&dev->imm_tq, 1);
728 return;
730 /* Command must of completed hence it is safe to let go... */
731 #if IMM_DEBUG > 0
732 switch ((cmd->result >> 16) & 0xff) {
733 case DID_OK:
734 break;
735 case DID_NO_CONNECT:
736 printk("imm: no device at SCSI ID %i\n", cmd->device->id);
737 break;
738 case DID_BUS_BUSY:
739 printk("imm: BUS BUSY - EPP timeout detected\n");
740 break;
741 case DID_TIME_OUT:
742 printk("imm: unknown timeout\n");
743 break;
744 case DID_ABORT:
745 printk("imm: told to abort\n");
746 break;
747 case DID_PARITY:
748 printk("imm: parity error (???)\n");
749 break;
750 case DID_ERROR:
751 printk("imm: internal driver error\n");
752 break;
753 case DID_RESET:
754 printk("imm: told to reset device\n");
755 break;
756 case DID_BAD_INTR:
757 printk("imm: bad interrupt (???)\n");
758 break;
759 default:
760 printk("imm: bad return code (%02x)\n",
761 (cmd->result >> 16) & 0xff);
763 #endif
765 if (cmd->SCp.phase > 1)
766 imm_disconnect(dev);
768 imm_pb_dismiss(dev);
770 spin_lock_irqsave(host->host_lock, flags);
771 dev->cur_cmd = NULL;
772 cmd->scsi_done(cmd);
773 spin_unlock_irqrestore(host->host_lock, flags);
774 return;
777 static int imm_engine(imm_struct *dev, struct scsi_cmnd *cmd)
779 unsigned short ppb = dev->base;
780 unsigned char l = 0, h = 0;
781 int retv, x;
783 /* First check for any errors that may have occurred
784 * Here we check for internal errors
786 if (dev->failed)
787 return 0;
789 switch (cmd->SCp.phase) {
790 case 0: /* Phase 0 - Waiting for parport */
791 if (time_after(jiffies, dev->jstart + HZ)) {
793 * We waited more than a second
794 * for parport to call us
796 imm_fail(dev, DID_BUS_BUSY);
797 return 0;
799 return 1; /* wait until imm_wakeup claims parport */
801 case 1: /* Phase 1 - Connected */
802 imm_connect(dev, CONNECT_EPP_MAYBE);
803 cmd->SCp.phase++;
804 /* fall through */
806 case 2: /* Phase 2 - We are now talking to the scsi bus */
807 if (!imm_select(dev, scmd_id(cmd))) {
808 imm_fail(dev, DID_NO_CONNECT);
809 return 0;
811 cmd->SCp.phase++;
812 /* fall through */
814 case 3: /* Phase 3 - Ready to accept a command */
815 w_ctr(ppb, 0x0c);
816 if (!(r_str(ppb) & 0x80))
817 return 1;
819 if (!imm_send_command(cmd))
820 return 0;
821 cmd->SCp.phase++;
822 /* fall through */
824 case 4: /* Phase 4 - Setup scatter/gather buffers */
825 if (scsi_bufflen(cmd)) {
826 cmd->SCp.buffer = scsi_sglist(cmd);
827 cmd->SCp.this_residual = cmd->SCp.buffer->length;
828 cmd->SCp.ptr = sg_virt(cmd->SCp.buffer);
829 } else {
830 cmd->SCp.buffer = NULL;
831 cmd->SCp.this_residual = 0;
832 cmd->SCp.ptr = NULL;
834 cmd->SCp.buffers_residual = scsi_sg_count(cmd) - 1;
835 cmd->SCp.phase++;
836 if (cmd->SCp.this_residual & 0x01)
837 cmd->SCp.this_residual++;
838 /* fall through */
840 case 5: /* Phase 5 - Pre-Data transfer stage */
841 /* Spin lock for BUSY */
842 w_ctr(ppb, 0x0c);
843 if (!(r_str(ppb) & 0x80))
844 return 1;
846 /* Require negotiation for read requests */
847 x = (r_str(ppb) & 0xb8);
848 dev->rd = (x & 0x10) ? 1 : 0;
849 dev->dp = (x & 0x20) ? 0 : 1;
851 if ((dev->dp) && (dev->rd))
852 if (imm_negotiate(dev))
853 return 0;
854 cmd->SCp.phase++;
855 /* fall through */
857 case 6: /* Phase 6 - Data transfer stage */
858 /* Spin lock for BUSY */
859 w_ctr(ppb, 0x0c);
860 if (!(r_str(ppb) & 0x80))
861 return 1;
863 if (dev->dp) {
864 retv = imm_completion(cmd);
865 if (retv == -1)
866 return 0;
867 if (retv == 0)
868 return 1;
870 cmd->SCp.phase++;
871 /* fall through */
873 case 7: /* Phase 7 - Post data transfer stage */
874 if ((dev->dp) && (dev->rd)) {
875 if ((dev->mode == IMM_NIBBLE) || (dev->mode == IMM_PS2)) {
876 w_ctr(ppb, 0x4);
877 w_ctr(ppb, 0xc);
878 w_ctr(ppb, 0xe);
879 w_ctr(ppb, 0x4);
882 cmd->SCp.phase++;
883 /* fall through */
885 case 8: /* Phase 8 - Read status/message */
886 /* Check for data overrun */
887 if (imm_wait(dev) != (unsigned char) 0xb8) {
888 imm_fail(dev, DID_ERROR);
889 return 0;
891 if (imm_negotiate(dev))
892 return 0;
893 if (imm_in(dev, &l, 1)) { /* read status byte */
894 /* Check for optional message byte */
895 if (imm_wait(dev) == (unsigned char) 0xb8)
896 imm_in(dev, &h, 1);
897 cmd->result = (DID_OK << 16) | (l & STATUS_MASK);
899 if ((dev->mode == IMM_NIBBLE) || (dev->mode == IMM_PS2)) {
900 w_ctr(ppb, 0x4);
901 w_ctr(ppb, 0xc);
902 w_ctr(ppb, 0xe);
903 w_ctr(ppb, 0x4);
905 return 0; /* Finished */
906 break;
908 default:
909 printk("imm: Invalid scsi phase\n");
911 return 0;
914 static int imm_queuecommand_lck(struct scsi_cmnd *cmd,
915 void (*done)(struct scsi_cmnd *))
917 imm_struct *dev = imm_dev(cmd->device->host);
919 if (dev->cur_cmd) {
920 printk("IMM: bug in imm_queuecommand\n");
921 return 0;
923 dev->failed = 0;
924 dev->jstart = jiffies;
925 dev->cur_cmd = cmd;
926 cmd->scsi_done = done;
927 cmd->result = DID_ERROR << 16; /* default return code */
928 cmd->SCp.phase = 0; /* bus free */
930 schedule_delayed_work(&dev->imm_tq, 0);
932 imm_pb_claim(dev);
934 return 0;
937 static DEF_SCSI_QCMD(imm_queuecommand)
940 * Apparently the disk->capacity attribute is off by 1 sector
941 * for all disk drives. We add the one here, but it should really
942 * be done in sd.c. Even if it gets fixed there, this will still
943 * work.
945 static int imm_biosparam(struct scsi_device *sdev, struct block_device *dev,
946 sector_t capacity, int ip[])
948 ip[0] = 0x40;
949 ip[1] = 0x20;
950 ip[2] = ((unsigned long) capacity + 1) / (ip[0] * ip[1]);
951 if (ip[2] > 1024) {
952 ip[0] = 0xff;
953 ip[1] = 0x3f;
954 ip[2] = ((unsigned long) capacity + 1) / (ip[0] * ip[1]);
956 return 0;
959 static int imm_abort(struct scsi_cmnd *cmd)
961 imm_struct *dev = imm_dev(cmd->device->host);
963 * There is no method for aborting commands since Iomega
964 * have tied the SCSI_MESSAGE line high in the interface
967 switch (cmd->SCp.phase) {
968 case 0: /* Do not have access to parport */
969 case 1: /* Have not connected to interface */
970 dev->cur_cmd = NULL; /* Forget the problem */
971 return SUCCESS;
972 break;
973 default: /* SCSI command sent, can not abort */
974 return FAILED;
975 break;
979 static void imm_reset_pulse(unsigned int base)
981 w_ctr(base, 0x04);
982 w_dtr(base, 0x40);
983 udelay(1);
984 w_ctr(base, 0x0c);
985 w_ctr(base, 0x0d);
986 udelay(50);
987 w_ctr(base, 0x0c);
988 w_ctr(base, 0x04);
991 static int imm_reset(struct scsi_cmnd *cmd)
993 imm_struct *dev = imm_dev(cmd->device->host);
995 if (cmd->SCp.phase)
996 imm_disconnect(dev);
997 dev->cur_cmd = NULL; /* Forget the problem */
999 imm_connect(dev, CONNECT_NORMAL);
1000 imm_reset_pulse(dev->base);
1001 mdelay(1); /* device settle delay */
1002 imm_disconnect(dev);
1003 mdelay(1); /* device settle delay */
1004 return SUCCESS;
1007 static int device_check(imm_struct *dev)
1009 /* This routine looks for a device and then attempts to use EPP
1010 to send a command. If all goes as planned then EPP is available. */
1012 static char cmd[6] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
1013 int loop, old_mode, status, k, ppb = dev->base;
1014 unsigned char l;
1016 old_mode = dev->mode;
1017 for (loop = 0; loop < 8; loop++) {
1018 /* Attempt to use EPP for Test Unit Ready */
1019 if ((ppb & 0x0007) == 0x0000)
1020 dev->mode = IMM_EPP_32;
1022 second_pass:
1023 imm_connect(dev, CONNECT_EPP_MAYBE);
1024 /* Select SCSI device */
1025 if (!imm_select(dev, loop)) {
1026 imm_disconnect(dev);
1027 continue;
1029 printk("imm: Found device at ID %i, Attempting to use %s\n",
1030 loop, IMM_MODE_STRING[dev->mode]);
1032 /* Send SCSI command */
1033 status = 1;
1034 w_ctr(ppb, 0x0c);
1035 for (l = 0; (l < 3) && (status); l++)
1036 status = imm_out(dev, &cmd[l << 1], 2);
1038 if (!status) {
1039 imm_disconnect(dev);
1040 imm_connect(dev, CONNECT_EPP_MAYBE);
1041 imm_reset_pulse(dev->base);
1042 udelay(1000);
1043 imm_disconnect(dev);
1044 udelay(1000);
1045 if (dev->mode == IMM_EPP_32) {
1046 dev->mode = old_mode;
1047 goto second_pass;
1049 printk("imm: Unable to establish communication\n");
1050 return -EIO;
1052 w_ctr(ppb, 0x0c);
1054 k = 1000000; /* 1 Second */
1055 do {
1056 l = r_str(ppb);
1057 k--;
1058 udelay(1);
1059 } while (!(l & 0x80) && (k));
1061 l &= 0xb8;
1063 if (l != 0xb8) {
1064 imm_disconnect(dev);
1065 imm_connect(dev, CONNECT_EPP_MAYBE);
1066 imm_reset_pulse(dev->base);
1067 udelay(1000);
1068 imm_disconnect(dev);
1069 udelay(1000);
1070 if (dev->mode == IMM_EPP_32) {
1071 dev->mode = old_mode;
1072 goto second_pass;
1074 printk
1075 ("imm: Unable to establish communication\n");
1076 return -EIO;
1078 imm_disconnect(dev);
1079 printk
1080 ("imm: Communication established at 0x%x with ID %i using %s\n",
1081 ppb, loop, IMM_MODE_STRING[dev->mode]);
1082 imm_connect(dev, CONNECT_EPP_MAYBE);
1083 imm_reset_pulse(dev->base);
1084 udelay(1000);
1085 imm_disconnect(dev);
1086 udelay(1000);
1087 return 0;
1089 printk("imm: No devices found\n");
1090 return -ENODEV;
1094 * imm cannot deal with highmem, so this causes all IO pages for this host
1095 * to reside in low memory (hence mapped)
1097 static int imm_adjust_queue(struct scsi_device *device)
1099 blk_queue_bounce_limit(device->request_queue, BLK_BOUNCE_HIGH);
1100 return 0;
1103 static struct scsi_host_template imm_template = {
1104 .module = THIS_MODULE,
1105 .proc_name = "imm",
1106 .show_info = imm_show_info,
1107 .write_info = imm_write_info,
1108 .name = "Iomega VPI2 (imm) interface",
1109 .queuecommand = imm_queuecommand,
1110 .eh_abort_handler = imm_abort,
1111 .eh_host_reset_handler = imm_reset,
1112 .bios_param = imm_biosparam,
1113 .this_id = 7,
1114 .sg_tablesize = SG_ALL,
1115 .can_queue = 1,
1116 .slave_alloc = imm_adjust_queue,
1119 /***************************************************************************
1120 * Parallel port probing routines *
1121 ***************************************************************************/
1123 static LIST_HEAD(imm_hosts);
1126 * Finds the first available device number that can be alloted to the
1127 * new imm device and returns the address of the previous node so that
1128 * we can add to the tail and have a list in the ascending order.
1131 static inline imm_struct *find_parent(void)
1133 imm_struct *dev, *par = NULL;
1134 unsigned int cnt = 0;
1136 if (list_empty(&imm_hosts))
1137 return NULL;
1139 list_for_each_entry(dev, &imm_hosts, list) {
1140 if (dev->dev_no != cnt)
1141 return par;
1142 cnt++;
1143 par = dev;
1146 return par;
1149 static int __imm_attach(struct parport *pb)
1151 struct Scsi_Host *host;
1152 imm_struct *dev, *temp;
1153 DECLARE_WAIT_QUEUE_HEAD_ONSTACK(waiting);
1154 DEFINE_WAIT(wait);
1155 int ports;
1156 int modes, ppb;
1157 int err = -ENOMEM;
1158 struct pardev_cb imm_cb;
1160 init_waitqueue_head(&waiting);
1162 dev = kzalloc(sizeof(imm_struct), GFP_KERNEL);
1163 if (!dev)
1164 return -ENOMEM;
1167 dev->base = -1;
1168 dev->mode = IMM_AUTODETECT;
1169 INIT_LIST_HEAD(&dev->list);
1171 temp = find_parent();
1172 if (temp)
1173 dev->dev_no = temp->dev_no + 1;
1175 memset(&imm_cb, 0, sizeof(imm_cb));
1176 imm_cb.private = dev;
1177 imm_cb.wakeup = imm_wakeup;
1179 dev->dev = parport_register_dev_model(pb, "imm", &imm_cb, dev->dev_no);
1180 if (!dev->dev)
1181 goto out;
1184 /* Claim the bus so it remembers what we do to the control
1185 * registers. [ CTR and ECP ]
1187 err = -EBUSY;
1188 dev->waiting = &waiting;
1189 prepare_to_wait(&waiting, &wait, TASK_UNINTERRUPTIBLE);
1190 if (imm_pb_claim(dev))
1191 schedule_timeout(3 * HZ);
1192 if (dev->wanted) {
1193 printk(KERN_ERR "imm%d: failed to claim parport because "
1194 "a pardevice is owning the port for too long "
1195 "time!\n", pb->number);
1196 imm_pb_dismiss(dev);
1197 dev->waiting = NULL;
1198 finish_wait(&waiting, &wait);
1199 goto out1;
1201 dev->waiting = NULL;
1202 finish_wait(&waiting, &wait);
1203 ppb = dev->base = dev->dev->port->base;
1204 dev->base_hi = dev->dev->port->base_hi;
1205 w_ctr(ppb, 0x0c);
1206 modes = dev->dev->port->modes;
1208 /* Mode detection works up the chain of speed
1209 * This avoids a nasty if-then-else-if-... tree
1211 dev->mode = IMM_NIBBLE;
1213 if (modes & PARPORT_MODE_TRISTATE)
1214 dev->mode = IMM_PS2;
1216 /* Done configuration */
1218 err = imm_init(dev);
1220 imm_pb_release(dev);
1222 if (err)
1223 goto out1;
1225 /* now the glue ... */
1226 if (dev->mode == IMM_NIBBLE || dev->mode == IMM_PS2)
1227 ports = 3;
1228 else
1229 ports = 8;
1231 INIT_DELAYED_WORK(&dev->imm_tq, imm_interrupt);
1233 err = -ENOMEM;
1234 host = scsi_host_alloc(&imm_template, sizeof(imm_struct *));
1235 if (!host)
1236 goto out1;
1237 host->io_port = pb->base;
1238 host->n_io_port = ports;
1239 host->dma_channel = -1;
1240 host->unique_id = pb->number;
1241 *(imm_struct **)&host->hostdata = dev;
1242 dev->host = host;
1243 if (!temp)
1244 list_add_tail(&dev->list, &imm_hosts);
1245 else
1246 list_add_tail(&dev->list, &temp->list);
1247 err = scsi_add_host(host, NULL);
1248 if (err)
1249 goto out2;
1250 scsi_scan_host(host);
1251 return 0;
1253 out2:
1254 list_del_init(&dev->list);
1255 scsi_host_put(host);
1256 out1:
1257 parport_unregister_device(dev->dev);
1258 out:
1259 kfree(dev);
1260 return err;
1263 static void imm_attach(struct parport *pb)
1265 __imm_attach(pb);
1268 static void imm_detach(struct parport *pb)
1270 imm_struct *dev;
1271 list_for_each_entry(dev, &imm_hosts, list) {
1272 if (dev->dev->port == pb) {
1273 list_del_init(&dev->list);
1274 scsi_remove_host(dev->host);
1275 scsi_host_put(dev->host);
1276 parport_unregister_device(dev->dev);
1277 kfree(dev);
1278 break;
1283 static struct parport_driver imm_driver = {
1284 .name = "imm",
1285 .match_port = imm_attach,
1286 .detach = imm_detach,
1287 .devmodel = true,
1290 static int __init imm_driver_init(void)
1292 printk("imm: Version %s\n", IMM_VERSION);
1293 return parport_register_driver(&imm_driver);
1296 static void __exit imm_driver_exit(void)
1298 parport_unregister_driver(&imm_driver);
1301 module_init(imm_driver_init);
1302 module_exit(imm_driver_exit);
1304 MODULE_LICENSE("GPL");