1/* linux/drivers/cdrom/cdrom.c
2 Copyright (c) 1996, 1997 David A. van Leeuwen.
3 Copyright (c) 1997, 1998 Erik Andersen <andersee@debian.org>
4 Copyright (c) 1998, 1999 Jens Axboe <axboe@image.dk>
5
6 May be copied or modified under the terms of the GNU General Public
7 License. See linux/COPYING for more information.
8
9 Uniform CD-ROM driver for Linux.
10 See Documentation/cdrom/cdrom-standard.tex for usage information.
11
12 The routines in the file provide a uniform interface between the
13 software that uses CD-ROMs and the various low-level drivers that
14 actually talk to the hardware. Suggestions are welcome.
15 Patches that work are more welcome though. ;-)
16
17 To Do List:
18 ----------------------------------
19
20 -- Modify sysctl/proc interface. I plan on having one directory per
21 drive, with entries for outputing general drive information, and sysctl
22 based tunable parameters such as whether the tray should auto-close for
23 that drive. Suggestions (or patches) for this welcome!
24
25
26 Revision History
27 ----------------------------------
28 1.00 Date Unknown -- David van Leeuwen <david@tm.tno.nl>
29 -- Initial version by David A. van Leeuwen. I don't have a detailed
30 changelog for the 1.x series, David?
31
322.00 Dec 2, 1997 -- Erik Andersen <andersee@debian.org>
33 -- New maintainer! As David A. van Leeuwen has been too busy to actively
34 maintain and improve this driver, I am now carrying on the torch. If
35 you have a problem with this driver, please feel free to contact me.
36
37 -- Added (rudimentary) sysctl interface. I realize this is really weak
38 right now, and is _very_ badly implemented. It will be improved...
39
40 -- Modified CDROM_DISC_STATUS so that it is now incorporated into
41 the Uniform CD-ROM driver via the cdrom_count_tracks function.
42 The cdrom_count_tracks function helps resolve some of the false
43 assumptions of the CDROM_DISC_STATUS ioctl, and is also used to check
44 for the correct media type when mounting or playing audio from a CD.
45
46 -- Remove the calls to verify_area and only use the copy_from_user and
47 copy_to_user stuff, since these calls now provide their own memory
48 checking with the 2.1.x kernels.
49
50 -- Major update to return codes so that errors from low-level drivers
51 are passed on through (thanks to Gerd Knorr for pointing out this
52 problem).
53
54 -- Made it so if a function isn't implemented in a low-level driver,
55 ENOSYS is now returned instead of EINVAL.
56
57 -- Simplified some complex logic so that the source code is easier to read.
58
59 -- Other stuff I probably forgot to mention (lots of changes).
60
612.01 to 2.11 Dec 1997-Jan 1998
62 -- TO-DO! Write changelogs for 2.01 to 2.12.
63
642.12 Jan 24, 1998 -- Erik Andersen <andersee@debian.org>
65 -- Fixed a bug in the IOCTL_IN and IOCTL_OUT macros. It turns out that
66 copy_*_user does not return EFAULT on error, but instead returns the number
67 of bytes not copied. I was returning whatever non-zero stuff came back from
68 the copy_*_user functions directly, which would result in strange errors.
69
702.13 July 17, 1998 -- Erik Andersen <andersee@debian.org>
71 -- Fixed a bug in CDROM_SELECT_SPEED where you couldn't lower the speed
72 of the drive. Thanks to Tobias Ringstr|m <tori@prosolvia.se> for pointing
73 this out and providing a simple fix.
74 -- Fixed the procfs-unload-module bug with the fill_inode procfs callback.
75 thanks to Andrea Arcangeli
76 -- Fixed it so that the /proc entry now also shows up when cdrom is
77 compiled into the kernel. Before it only worked when loaded as a module.
78
79 2.14 August 17, 1998 -- Erik Andersen <andersee@debian.org>
80 -- Fixed a bug in cdrom_media_changed and handling of reporting that
81 the media had changed for devices that _don't_ implement media_changed.
82 Thanks to Grant R. Guenther <grant@torque.net> for spotting this bug.
83 -- Made a few things more pedanticly correct.
84
852.50 Oct 19, 1998 - Jens Axboe <axboe@image.dk>
86 -- New maintainers! Erik was too busy to continue the work on the driver,
87 so now Chris Zwilling <chris@cloudnet.com> and Jens Axboe <axboe@image.dk>
88 will do their best to follow in his footsteps
89
90 2.51 Dec 20, 1998 - Jens Axboe <axboe@image.dk>
91 -- Check if drive is capable of doing what we ask before blindly changing
92 cdi->options in various ioctl.
93 -- Added version to proc entry.
94
95 2.52 Jan 16, 1999 - Jens Axboe <axboe@image.dk>
96 -- Fixed an error in open_for_data where we would sometimes not return
97 the correct error value. Thanks Huba Gaspar <huba@softcell.hu>.
98 -- Fixed module usage count - usage was based on /proc/sys/dev
99 instead of /proc/sys/dev/cdrom. This could lead to an oops when other
100 modules had entries in dev. Feb 02 - real bug was in sysctl.c where
101 dev would be removed even though it was used. cdrom.c just illuminated
102 that bug.
103
104 2.53 Feb 22, 1999 - Jens Axboe <axboe@image.dk>
105 -- Fixup of several ioctl calls, in particular CDROM_SET_OPTIONS has
106 been "rewritten" because capabilities and options aren't in sync. They
107 should be...
108 -- Added CDROM_LOCKDOOR ioctl. Locks the door and keeps it that way.
109 -- Added CDROM_RESET ioctl.
110 -- Added CDROM_DEBUG ioctl. Enable debug messages on-the-fly.
111 -- Added CDROM_GET_CAPABILITY ioctl. This relieves userspace programs
112 from parsing /proc/sys/dev/cdrom/info.
113
114 2.54 Mar 15, 1999 - Jens Axboe <axboe@image.dk>
115 -- Check capability mask from low level driver when counting tracks as
116 per suggestion from Corey J. Scotts <cstotts@blue.weeg.uiowa.edu>.
117
118 2.55 Apr 25, 1999 - Jens Axboe <axboe@image.dk>
119 -- autoclose was mistakenly checked against CDC_OPEN_TRAY instead of
120 CDC_CLOSE_TRAY.
121 -- proc info didn't mask against capabilities mask.
122
123 3.00 Aug 5, 1999 - Jens Axboe <axboe@image.dk>
124 -- Unified audio ioctl handling across CD-ROM drivers. A lot of the
125 code was duplicated before. Drives that support the generic packet
126 interface are now being fed packets from here instead.
127 -- First attempt at adding support for MMC2 commands - for DVD and
128 CD-R(W) drives. Only the DVD parts are in now - the interface used is
129 the same as for the audio ioctls.
130 -- ioctl cleanups. if a drive couldn't play audio, it didn't get
131 a change to perform device specific ioctls as well.
132 -- Defined CDROM_CAN(CDC_XXX) for checking the capabilities.
133 -- Put in sysctl files for autoclose, autoeject, check_media, debug,
134 and lock.
135 -- /proc/sys/dev/cdrom/info has been updated to also contain info about
136 CD-Rx and DVD capabilities.
137 -- Now default to checking media type.
138 -- CDROM_SEND_PACKET ioctl added. The infrastructure was in place for
139 doing this anyway, with the generic_packet addition.
140
141 3.01 Aug 6, 1999 - Jens Axboe <axboe@image.dk>
142 -- Fix up the sysctl handling so that the option flags get set
143 correctly.
144 -- Fix up ioctl handling so the device specific ones actually get
145 called :).
146
147 3.02 Aug 8, 1999 - Jens Axboe <axboe@image.dk>
148 -- Fixed volume control on SCSI drives (or others with longer audio
149 page).
150 -- Fixed a couple of DVD minors. Thanks to Andrew T. Veliath
151 <andrewtv@usa.net> for telling me and for having defined the various
152 DVD structures and ioctls in the first place! He designed the original
153 DVD patches for ide-cd and while I rearranged and unified them, the
154 interface is still the same.
155
156 3.03 Sep 1, 1999 - Jens Axboe <axboe@image.dk>
157 -- Moved the rest of the audio ioctls from the CD-ROM drivers here. Only
158 CDROMREADTOCENTRY and CDROMREADTOCHDR are left.
159 -- Moved the CDROMREADxxx ioctls in here.
160 -- Defined the cdrom_get_last_written and cdrom_get_next_block as ioctls
161 and exported functions.
162 -- Erik Andersen <andersen@xmission.com> modified all SCMD_ commands
163 to now read GPCMD_ for the new generic packet interface. All low level
164 drivers are updated as well.
165 -- Various other cleanups.
166
167 3.04 Sep 12, 1999 - Jens Axboe <axboe@image.dk>
168 -- Fixed a couple of possible memory leaks (if an operation failed and
169 we didn't free the buffer before returning the error).
170 -- Integrated Uniform CD Changer handling from Richard Sharman
171 <rsharman@pobox.com>.
172 -- Defined CD_DVD and CD_CHANGER log levels.
173 -- Fixed the CDROMREADxxx ioctls.
174 -- CDROMPLAYTRKIND uses the GPCMD_PLAY_AUDIO_MSF command - too few
175 drives supported it. We lose the index part, however.
176 -- Small modifications to accommodate opens of /dev/hdc1, required
177 for ide-cd to handle multisession discs.
178 -- Export cdrom_mode_sense and cdrom_mode_select.
179 -- init_cdrom_command() for setting up a cgc command.
180
181 3.05 Oct 24, 1999 - Jens Axboe <axboe@image.dk>
182 -- Changed the interface for CDROM_SEND_PACKET. Before it was virtually
183 impossible to send the drive data in a sensible way.
184 -- Lowered stack usage in mmc_ioctl(), dvd_read_disckey(), and
185 dvd_read_manufact.
186 -- Added setup of write mode for packet writing.
187 -- Fixed CDDA ripping with cdda2wav - accept much larger requests of
188 number of frames and split the reads in blocks of 8.
189
190 3.06 Dec 13, 1999 - Jens Axboe <axboe@image.dk>
191 -- Added support for changing the region of DVD drives.
192 -- Added sense data to generic command.
193
194 3.07 Feb 2, 2000 - Jens Axboe <axboe@suse.de>
195 -- Do same "read header length" trick in cdrom_get_disc_info() as
196 we do in cdrom_get_track_info() -- some drive don't obey specs and
197 fail if they can't supply the full Mt Fuji size table.
198 -- Deleted stuff related to setting up write modes. It has a different
199 home now.
200 -- Clear header length in mode_select unconditionally.
201 -- Removed the register_disk() that was added, not needed here.
202
203 3.08 May 1, 2000 - Jens Axboe <axboe@suse.de>
204 -- Fix direction flag in setup_send_key and setup_report_key. This
205 gave some SCSI adapters problems.
206 -- Always return -EROFS for write opens
207 -- Convert to module_init/module_exit style init and remove some
208 of the #ifdef MODULE stuff
209 -- Fix several dvd errors - DVD_LU_SEND_ASF should pass agid,
210 DVD_HOST_SEND_RPC_STATE did not set buffer size in cdb, and
211 dvd_do_auth passed uninitialized data to drive because init_cdrom_command
212 did not clear a 0 sized buffer.
213
214 3.09 May 12, 2000 - Jens Axboe <axboe@suse.de>
215 -- Fix Video-CD on SCSI drives that don't support READ_CD command. In
216 that case switch block size and issue plain READ_10 again, then switch
217 back.
218
219 3.10 Jun 10, 2000 - Jens Axboe <axboe@suse.de>
220 -- Fix volume control on CD's - old SCSI-II drives now use their own
221 code, as doing MODE6 stuff in here is really not my intention.
222 -- Use READ_DISC_INFO for more reliable end-of-disc.
223
224 3.11 Jun 12, 2000 - Jens Axboe <axboe@suse.de>
225 -- Fix bug in getting rpc phase 2 region info.
226 -- Reinstate "correct" CDROMPLAYTRKIND
227
228 3.12 Oct 18, 2000 - Jens Axboe <axboe@suse.de>
229 -- Use quiet bit on packet commands not known to work
230
231 3.20 Dec 17, 2003 - Jens Axboe <axboe@suse.de>
232 -- Various fixes and lots of cleanups not listed :-)
233 -- Locking fixes
234 -- Mt Rainier support
235 -- DVD-RAM write open fixes
236
237 Nov 5 2001, Aug 8 2002. Modified by Andy Polyakov
238 <appro@fy.chalmers.se> to support MMC-3 compliant DVD+RW units.
239
240 Modified by Nigel Kukard <nkukard@lbsd.net> - support DVD+RW
241 2.4.x patch by Andy Polyakov <appro@fy.chalmers.se>
242
243-------------------------------------------------------------------------*/
244
245#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
246
247#define REVISION "Revision: 3.20"
248#define VERSION "Id: cdrom.c 3.20 2003/12/17"
249
250/* I use an error-log mask to give fine grain control over the type of
251 messages dumped to the system logs. The available masks include: */
252#define CD_NOTHING 0x0
253#define CD_WARNING 0x1
254#define CD_REG_UNREG 0x2
255#define CD_DO_IOCTL 0x4
256#define CD_OPEN 0x8
257#define CD_CLOSE 0x10
258#define CD_COUNT_TRACKS 0x20
259#define CD_CHANGER 0x40
260#define CD_DVD 0x80
261
262/* Define this to remove _all_ the debugging messages */
263/* #define ERRLOGMASK CD_NOTHING */
264#define ERRLOGMASK CD_WARNING
265/* #define ERRLOGMASK (CD_WARNING|CD_OPEN|CD_COUNT_TRACKS|CD_CLOSE) */
266/* #define ERRLOGMASK (CD_WARNING|CD_REG_UNREG|CD_DO_IOCTL|CD_OPEN|CD_CLOSE|CD_COUNT_TRACKS) */
267
268#include <linux/atomic.h>
269#include <linux/module.h>
270#include <linux/fs.h>
271#include <linux/major.h>
272#include <linux/types.h>
273#include <linux/errno.h>
274#include <linux/kernel.h>
275#include <linux/mm.h>
276#include <linux/slab.h>
277#include <linux/cdrom.h>
278#include <linux/sysctl.h>
279#include <linux/proc_fs.h>
280#include <linux/blkpg.h>
281#include <linux/init.h>
282#include <linux/fcntl.h>
283#include <linux/blkdev.h>
284#include <linux/times.h>
285#include <linux/uaccess.h>
286#include <scsi/scsi_common.h>
287#include <scsi/scsi_request.h>
288
289/* used to tell the module to turn on full debugging messages */
290static bool debug;
291/* default compatibility mode */
292static bool autoclose=1;
293static bool autoeject;
294static bool lockdoor = 1;
295/* will we ever get to use this... sigh. */
296static bool check_media_type;
297/* automatically restart mrw format */
298static bool mrw_format_restart = 1;
299module_param(debug, bool, 0);
300module_param(autoclose, bool, 0);
301module_param(autoeject, bool, 0);
302module_param(lockdoor, bool, 0);
303module_param(check_media_type, bool, 0);
304module_param(mrw_format_restart, bool, 0);
305
306static DEFINE_MUTEX(cdrom_mutex);
307
308static const char *mrw_format_status[] = {
309 "not mrw",
310 "bgformat inactive",
311 "bgformat active",
312 "mrw complete",
313};
314
315static const char *mrw_address_space[] = { "DMA", "GAA" };
316
317#if (ERRLOGMASK != CD_NOTHING)
318#define cd_dbg(type, fmt, ...) \
319do { \
320 if ((ERRLOGMASK & type) || debug == 1) \
321 pr_debug(fmt, ##__VA_ARGS__); \
322} while (0)
323#else
324#define cd_dbg(type, fmt, ...) \
325do { \
326 if (0 && (ERRLOGMASK & type) || debug == 1) \
327 pr_debug(fmt, ##__VA_ARGS__); \
328} while (0)
329#endif
330
331/* The (cdo->capability & ~cdi->mask & CDC_XXX) construct was used in
332 a lot of places. This macro makes the code more clear. */
333#define CDROM_CAN(type) (cdi->ops->capability & ~cdi->mask & (type))
334
335/*
336 * Another popular OS uses 7 seconds as the hard timeout for default
337 * commands, so it is a good choice for us as well.
338 */
339#define CDROM_DEF_TIMEOUT (7 * HZ)
340
341/* Not-exported routines. */
342
343static void cdrom_sysctl_register(void);
344
345static LIST_HEAD(cdrom_list);
346
347int cdrom_dummy_generic_packet(struct cdrom_device_info *cdi,
348 struct packet_command *cgc)
349{
350 if (cgc->sshdr) {
351 cgc->sshdr->sense_key = 0x05;
352 cgc->sshdr->asc = 0x20;
353 cgc->sshdr->ascq = 0x00;
354 }
355
356 cgc->stat = -EIO;
357 return -EIO;
358}
359EXPORT_SYMBOL(cdrom_dummy_generic_packet);
360
361static int cdrom_flush_cache(struct cdrom_device_info *cdi)
362{
363 struct packet_command cgc;
364
365 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
366 cgc.cmd[0] = GPCMD_FLUSH_CACHE;
367
368 cgc.timeout = 5 * 60 * HZ;
369
370 return cdi->ops->generic_packet(cdi, &cgc);
371}
372
373/* requires CD R/RW */
374static int cdrom_get_disc_info(struct cdrom_device_info *cdi,
375 disc_information *di)
376{
377 const struct cdrom_device_ops *cdo = cdi->ops;
378 struct packet_command cgc;
379 int ret, buflen;
380
381 /* set up command and get the disc info */
382 init_cdrom_command(&cgc, di, sizeof(*di), CGC_DATA_READ);
383 cgc.cmd[0] = GPCMD_READ_DISC_INFO;
384 cgc.cmd[8] = cgc.buflen = 2;
385 cgc.quiet = 1;
386
387 ret = cdo->generic_packet(cdi, &cgc);
388 if (ret)
389 return ret;
390
391 /* not all drives have the same disc_info length, so requeue
392 * packet with the length the drive tells us it can supply
393 */
394 buflen = be16_to_cpu(di->disc_information_length) +
395 sizeof(di->disc_information_length);
396
397 if (buflen > sizeof(disc_information))
398 buflen = sizeof(disc_information);
399
400 cgc.cmd[8] = cgc.buflen = buflen;
401 ret = cdo->generic_packet(cdi, &cgc);
402 if (ret)
403 return ret;
404
405 /* return actual fill size */
406 return buflen;
407}
408
409/* This macro makes sure we don't have to check on cdrom_device_ops
410 * existence in the run-time routines below. Change_capability is a
411 * hack to have the capability flags defined const, while we can still
412 * change it here without gcc complaining at every line.
413 */
414#define ENSURE(cdo, call, bits) \
415do { \
416 if (cdo->call == NULL) \
417 WARN_ON_ONCE((cdo)->capability & (bits)); \
418} while (0)
419
420/*
421 * the first prototypes used 0x2c as the page code for the mrw mode page,
422 * subsequently this was changed to 0x03. probe the one used by this drive
423 */
424static int cdrom_mrw_probe_pc(struct cdrom_device_info *cdi)
425{
426 struct packet_command cgc;
427 char buffer[16];
428
429 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
430
431 cgc.timeout = HZ;
432 cgc.quiet = 1;
433
434 if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC, 0)) {
435 cdi->mrw_mode_page = MRW_MODE_PC;
436 return 0;
437 } else if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC_PRE1, 0)) {
438 cdi->mrw_mode_page = MRW_MODE_PC_PRE1;
439 return 0;
440 }
441
442 return 1;
443}
444
445static int cdrom_is_mrw(struct cdrom_device_info *cdi, int *write)
446{
447 struct packet_command cgc;
448 struct mrw_feature_desc *mfd;
449 unsigned char buffer[16];
450 int ret;
451
452 *write = 0;
453
454 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
455
456 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
457 cgc.cmd[3] = CDF_MRW;
458 cgc.cmd[8] = sizeof(buffer);
459 cgc.quiet = 1;
460
461 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
462 return ret;
463
464 mfd = (struct mrw_feature_desc *)&buffer[sizeof(struct feature_header)];
465 if (be16_to_cpu(mfd->feature_code) != CDF_MRW)
466 return 1;
467 *write = mfd->write;
468
469 if ((ret = cdrom_mrw_probe_pc(cdi))) {
470 *write = 0;
471 return ret;
472 }
473
474 return 0;
475}
476
477static int cdrom_mrw_bgformat(struct cdrom_device_info *cdi, int cont)
478{
479 struct packet_command cgc;
480 unsigned char buffer[12];
481 int ret;
482
483 pr_info("%sstarting format\n", cont ? "Re" : "");
484
485 /*
486 * FmtData bit set (bit 4), format type is 1
487 */
488 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_WRITE);
489 cgc.cmd[0] = GPCMD_FORMAT_UNIT;
490 cgc.cmd[1] = (1 << 4) | 1;
491
492 cgc.timeout = 5 * 60 * HZ;
493
494 /*
495 * 4 byte format list header, 8 byte format list descriptor
496 */
497 buffer[1] = 1 << 1;
498 buffer[3] = 8;
499
500 /*
501 * nr_blocks field
502 */
503 buffer[4] = 0xff;
504 buffer[5] = 0xff;
505 buffer[6] = 0xff;
506 buffer[7] = 0xff;
507
508 buffer[8] = 0x24 << 2;
509 buffer[11] = cont;
510
511 ret = cdi->ops->generic_packet(cdi, &cgc);
512 if (ret)
513 pr_info("bgformat failed\n");
514
515 return ret;
516}
517
518static int cdrom_mrw_bgformat_susp(struct cdrom_device_info *cdi, int immed)
519{
520 struct packet_command cgc;
521
522 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
523 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
524
525 /*
526 * Session = 1, Track = 0
527 */
528 cgc.cmd[1] = !!immed;
529 cgc.cmd[2] = 1 << 1;
530
531 cgc.timeout = 5 * 60 * HZ;
532
533 return cdi->ops->generic_packet(cdi, &cgc);
534}
535
536static int cdrom_mrw_exit(struct cdrom_device_info *cdi)
537{
538 disc_information di;
539 int ret;
540
541 ret = cdrom_get_disc_info(cdi, &di);
542 if (ret < 0 || ret < (int)offsetof(typeof(di),disc_type))
543 return 1;
544
545 ret = 0;
546 if (di.mrw_status == CDM_MRW_BGFORMAT_ACTIVE) {
547 pr_info("issuing MRW background format suspend\n");
548 ret = cdrom_mrw_bgformat_susp(cdi, 0);
549 }
550
551 if (!ret && cdi->media_written)
552 ret = cdrom_flush_cache(cdi);
553
554 return ret;
555}
556
557static int cdrom_mrw_set_lba_space(struct cdrom_device_info *cdi, int space)
558{
559 struct packet_command cgc;
560 struct mode_page_header *mph;
561 char buffer[16];
562 int ret, offset, size;
563
564 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
565
566 cgc.buffer = buffer;
567 cgc.buflen = sizeof(buffer);
568
569 ret = cdrom_mode_sense(cdi, &cgc, cdi->mrw_mode_page, 0);
570 if (ret)
571 return ret;
572
573 mph = (struct mode_page_header *)buffer;
574 offset = be16_to_cpu(mph->desc_length);
575 size = be16_to_cpu(mph->mode_data_length) + 2;
576
577 buffer[offset + 3] = space;
578 cgc.buflen = size;
579
580 ret = cdrom_mode_select(cdi, &cgc);
581 if (ret)
582 return ret;
583
584 pr_info("%s: mrw address space %s selected\n",
585 cdi->name, mrw_address_space[space]);
586 return 0;
587}
588
589int register_cdrom(struct cdrom_device_info *cdi)
590{
591 static char banner_printed;
592 const struct cdrom_device_ops *cdo = cdi->ops;
593
594 cd_dbg(CD_OPEN, "entering register_cdrom\n");
595
596 if (cdo->open == NULL || cdo->release == NULL)
597 return -EINVAL;
598 if (!banner_printed) {
599 pr_info("Uniform CD-ROM driver " REVISION "\n");
600 banner_printed = 1;
601 cdrom_sysctl_register();
602 }
603
604 ENSURE(cdo, drive_status, CDC_DRIVE_STATUS);
605 if (cdo->check_events == NULL && cdo->media_changed == NULL)
606 WARN_ON_ONCE(cdo->capability & (CDC_MEDIA_CHANGED | CDC_SELECT_DISC));
607 ENSURE(cdo, tray_move, CDC_CLOSE_TRAY | CDC_OPEN_TRAY);
608 ENSURE(cdo, lock_door, CDC_LOCK);
609 ENSURE(cdo, select_speed, CDC_SELECT_SPEED);
610 ENSURE(cdo, get_last_session, CDC_MULTI_SESSION);
611 ENSURE(cdo, get_mcn, CDC_MCN);
612 ENSURE(cdo, reset, CDC_RESET);
613 ENSURE(cdo, generic_packet, CDC_GENERIC_PACKET);
614 cdi->mc_flags = 0;
615 cdi->options = CDO_USE_FFLAGS;
616
617 if (autoclose == 1 && CDROM_CAN(CDC_CLOSE_TRAY))
618 cdi->options |= (int) CDO_AUTO_CLOSE;
619 if (autoeject == 1 && CDROM_CAN(CDC_OPEN_TRAY))
620 cdi->options |= (int) CDO_AUTO_EJECT;
621 if (lockdoor == 1)
622 cdi->options |= (int) CDO_LOCK;
623 if (check_media_type == 1)
624 cdi->options |= (int) CDO_CHECK_TYPE;
625
626 if (CDROM_CAN(CDC_MRW_W))
627 cdi->exit = cdrom_mrw_exit;
628
629 if (cdi->disk)
630 cdi->cdda_method = CDDA_BPC_FULL;
631 else
632 cdi->cdda_method = CDDA_OLD;
633
634 WARN_ON(!cdo->generic_packet);
635
636 cd_dbg(CD_REG_UNREG, "drive \"/dev/%s\" registered\n", cdi->name);
637 mutex_lock(&cdrom_mutex);
638 list_add(&cdi->list, &cdrom_list);
639 mutex_unlock(&cdrom_mutex);
640 return 0;
641}
642#undef ENSURE
643
644void unregister_cdrom(struct cdrom_device_info *cdi)
645{
646 cd_dbg(CD_OPEN, "entering unregister_cdrom\n");
647
648 mutex_lock(&cdrom_mutex);
649 list_del(&cdi->list);
650 mutex_unlock(&cdrom_mutex);
651
652 if (cdi->exit)
653 cdi->exit(cdi);
654
655 cd_dbg(CD_REG_UNREG, "drive \"/dev/%s\" unregistered\n", cdi->name);
656}
657
658int cdrom_get_media_event(struct cdrom_device_info *cdi,
659 struct media_event_desc *med)
660{
661 struct packet_command cgc;
662 unsigned char buffer[8];
663 struct event_header *eh = (struct event_header *)buffer;
664
665 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
666 cgc.cmd[0] = GPCMD_GET_EVENT_STATUS_NOTIFICATION;
667 cgc.cmd[1] = 1; /* IMMED */
668 cgc.cmd[4] = 1 << 4; /* media event */
669 cgc.cmd[8] = sizeof(buffer);
670 cgc.quiet = 1;
671
672 if (cdi->ops->generic_packet(cdi, &cgc))
673 return 1;
674
675 if (be16_to_cpu(eh->data_len) < sizeof(*med))
676 return 1;
677
678 if (eh->nea || eh->notification_class != 0x4)
679 return 1;
680
681 memcpy(med, &buffer[sizeof(*eh)], sizeof(*med));
682 return 0;
683}
684
685static int cdrom_get_random_writable(struct cdrom_device_info *cdi,
686 struct rwrt_feature_desc *rfd)
687{
688 struct packet_command cgc;
689 char buffer[24];
690 int ret;
691
692 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
693
694 cgc.cmd[0] = GPCMD_GET_CONFIGURATION; /* often 0x46 */
695 cgc.cmd[3] = CDF_RWRT; /* often 0x0020 */
696 cgc.cmd[8] = sizeof(buffer); /* often 0x18 */
697 cgc.quiet = 1;
698
699 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
700 return ret;
701
702 memcpy(rfd, &buffer[sizeof(struct feature_header)], sizeof (*rfd));
703 return 0;
704}
705
706static int cdrom_has_defect_mgt(struct cdrom_device_info *cdi)
707{
708 struct packet_command cgc;
709 char buffer[16];
710 __be16 *feature_code;
711 int ret;
712
713 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
714
715 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
716 cgc.cmd[3] = CDF_HWDM;
717 cgc.cmd[8] = sizeof(buffer);
718 cgc.quiet = 1;
719
720 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
721 return ret;
722
723 feature_code = (__be16 *) &buffer[sizeof(struct feature_header)];
724 if (be16_to_cpu(*feature_code) == CDF_HWDM)
725 return 0;
726
727 return 1;
728}
729
730
731static int cdrom_is_random_writable(struct cdrom_device_info *cdi, int *write)
732{
733 struct rwrt_feature_desc rfd;
734 int ret;
735
736 *write = 0;
737
738 if ((ret = cdrom_get_random_writable(cdi, &rfd)))
739 return ret;
740
741 if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
742 *write = 1;
743
744 return 0;
745}
746
747static int cdrom_media_erasable(struct cdrom_device_info *cdi)
748{
749 disc_information di;
750 int ret;
751
752 ret = cdrom_get_disc_info(cdi, &di);
753 if (ret < 0 || ret < offsetof(typeof(di), n_first_track))
754 return -1;
755
756 return di.erasable;
757}
758
759/*
760 * FIXME: check RO bit
761 */
762static int cdrom_dvdram_open_write(struct cdrom_device_info *cdi)
763{
764 int ret = cdrom_media_erasable(cdi);
765
766 /*
767 * allow writable open if media info read worked and media is
768 * erasable, _or_ if it fails since not all drives support it
769 */
770 if (!ret)
771 return 1;
772
773 return 0;
774}
775
776static int cdrom_mrw_open_write(struct cdrom_device_info *cdi)
777{
778 disc_information di;
779 int ret;
780
781 /*
782 * always reset to DMA lba space on open
783 */
784 if (cdrom_mrw_set_lba_space(cdi, MRW_LBA_DMA)) {
785 pr_err("failed setting lba address space\n");
786 return 1;
787 }
788
789 ret = cdrom_get_disc_info(cdi, &di);
790 if (ret < 0 || ret < offsetof(typeof(di),disc_type))
791 return 1;
792
793 if (!di.erasable)
794 return 1;
795
796 /*
797 * mrw_status
798 * 0 - not MRW formatted
799 * 1 - MRW bgformat started, but not running or complete
800 * 2 - MRW bgformat in progress
801 * 3 - MRW formatting complete
802 */
803 ret = 0;
804 pr_info("open: mrw_status '%s'\n", mrw_format_status[di.mrw_status]);
805 if (!di.mrw_status)
806 ret = 1;
807 else if (di.mrw_status == CDM_MRW_BGFORMAT_INACTIVE &&
808 mrw_format_restart)
809 ret = cdrom_mrw_bgformat(cdi, 1);
810
811 return ret;
812}
813
814static int mo_open_write(struct cdrom_device_info *cdi)
815{
816 struct packet_command cgc;
817 char buffer[255];
818 int ret;
819
820 init_cdrom_command(&cgc, &buffer, 4, CGC_DATA_READ);
821 cgc.quiet = 1;
822
823 /*
824 * obtain write protect information as per
825 * drivers/scsi/sd.c:sd_read_write_protect_flag
826 */
827
828 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
829 if (ret)
830 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_VENDOR_PAGE, 0);
831 if (ret) {
832 cgc.buflen = 255;
833 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
834 }
835
836 /* drive gave us no info, let the user go ahead */
837 if (ret)
838 return 0;
839
840 return buffer[3] & 0x80;
841}
842
843static int cdrom_ram_open_write(struct cdrom_device_info *cdi)
844{
845 struct rwrt_feature_desc rfd;
846 int ret;
847
848 if ((ret = cdrom_has_defect_mgt(cdi)))
849 return ret;
850
851 if ((ret = cdrom_get_random_writable(cdi, &rfd)))
852 return ret;
853 else if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
854 ret = !rfd.curr;
855
856 cd_dbg(CD_OPEN, "can open for random write\n");
857 return ret;
858}
859
860static void cdrom_mmc3_profile(struct cdrom_device_info *cdi)
861{
862 struct packet_command cgc;
863 char buffer[32];
864 int ret, mmc3_profile;
865
866 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
867
868 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
869 cgc.cmd[1] = 0;
870 cgc.cmd[2] = cgc.cmd[3] = 0; /* Starting Feature Number */
871 cgc.cmd[8] = sizeof(buffer); /* Allocation Length */
872 cgc.quiet = 1;
873
874 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
875 mmc3_profile = 0xffff;
876 else
877 mmc3_profile = (buffer[6] << 8) | buffer[7];
878
879 cdi->mmc3_profile = mmc3_profile;
880}
881
882static int cdrom_is_dvd_rw(struct cdrom_device_info *cdi)
883{
884 switch (cdi->mmc3_profile) {
885 case 0x12: /* DVD-RAM */
886 case 0x1A: /* DVD+RW */
887 case 0x43: /* BD-RE */
888 return 0;
889 default:
890 return 1;
891 }
892}
893
894/*
895 * returns 0 for ok to open write, non-0 to disallow
896 */
897static int cdrom_open_write(struct cdrom_device_info *cdi)
898{
899 int mrw, mrw_write, ram_write;
900 int ret = 1;
901
902 mrw = 0;
903 if (!cdrom_is_mrw(cdi, &mrw_write))
904 mrw = 1;
905
906 if (CDROM_CAN(CDC_MO_DRIVE))
907 ram_write = 1;
908 else
909 (void) cdrom_is_random_writable(cdi, &ram_write);
910
911 if (mrw)
912 cdi->mask &= ~CDC_MRW;
913 else
914 cdi->mask |= CDC_MRW;
915
916 if (mrw_write)
917 cdi->mask &= ~CDC_MRW_W;
918 else
919 cdi->mask |= CDC_MRW_W;
920
921 if (ram_write)
922 cdi->mask &= ~CDC_RAM;
923 else
924 cdi->mask |= CDC_RAM;
925
926 if (CDROM_CAN(CDC_MRW_W))
927 ret = cdrom_mrw_open_write(cdi);
928 else if (CDROM_CAN(CDC_DVD_RAM))
929 ret = cdrom_dvdram_open_write(cdi);
930 else if (CDROM_CAN(CDC_RAM) &&
931 !CDROM_CAN(CDC_CD_R|CDC_CD_RW|CDC_DVD|CDC_DVD_R|CDC_MRW|CDC_MO_DRIVE))
932 ret = cdrom_ram_open_write(cdi);
933 else if (CDROM_CAN(CDC_MO_DRIVE))
934 ret = mo_open_write(cdi);
935 else if (!cdrom_is_dvd_rw(cdi))
936 ret = 0;
937
938 return ret;
939}
940
941static void cdrom_dvd_rw_close_write(struct cdrom_device_info *cdi)
942{
943 struct packet_command cgc;
944
945 if (cdi->mmc3_profile != 0x1a) {
946 cd_dbg(CD_CLOSE, "%s: No DVD+RW\n", cdi->name);
947 return;
948 }
949
950 if (!cdi->media_written) {
951 cd_dbg(CD_CLOSE, "%s: DVD+RW media clean\n", cdi->name);
952 return;
953 }
954
955 pr_info("%s: dirty DVD+RW media, \"finalizing\"\n", cdi->name);
956
957 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
958 cgc.cmd[0] = GPCMD_FLUSH_CACHE;
959 cgc.timeout = 30*HZ;
960 cdi->ops->generic_packet(cdi, &cgc);
961
962 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
963 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
964 cgc.timeout = 3000*HZ;
965 cgc.quiet = 1;
966 cdi->ops->generic_packet(cdi, &cgc);
967
968 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
969 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
970 cgc.cmd[2] = 2; /* Close session */
971 cgc.quiet = 1;
972 cgc.timeout = 3000*HZ;
973 cdi->ops->generic_packet(cdi, &cgc);
974
975 cdi->media_written = 0;
976}
977
978static int cdrom_close_write(struct cdrom_device_info *cdi)
979{
980#if 0
981 return cdrom_flush_cache(cdi);
982#else
983 return 0;
984#endif
985}
986
987/* badly broken, I know. Is due for a fixup anytime. */
988static void cdrom_count_tracks(struct cdrom_device_info *cdi, tracktype *tracks)
989{
990 struct cdrom_tochdr header;
991 struct cdrom_tocentry entry;
992 int ret, i;
993 tracks->data = 0;
994 tracks->audio = 0;
995 tracks->cdi = 0;
996 tracks->xa = 0;
997 tracks->error = 0;
998 cd_dbg(CD_COUNT_TRACKS, "entering cdrom_count_tracks\n");
999 /* Grab the TOC header so we can see how many tracks there are */
1000 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header);
1001 if (ret) {
1002 if (ret == -ENOMEDIUM)
1003 tracks->error = CDS_NO_DISC;
1004 else
1005 tracks->error = CDS_NO_INFO;
1006 return;
1007 }
1008 /* check what type of tracks are on this disc */
1009 entry.cdte_format = CDROM_MSF;
1010 for (i = header.cdth_trk0; i <= header.cdth_trk1; i++) {
1011 entry.cdte_track = i;
1012 if (cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry)) {
1013 tracks->error = CDS_NO_INFO;
1014 return;
1015 }
1016 if (entry.cdte_ctrl & CDROM_DATA_TRACK) {
1017 if (entry.cdte_format == 0x10)
1018 tracks->cdi++;
1019 else if (entry.cdte_format == 0x20)
1020 tracks->xa++;
1021 else
1022 tracks->data++;
1023 } else {
1024 tracks->audio++;
1025 }
1026 cd_dbg(CD_COUNT_TRACKS, "track %d: format=%d, ctrl=%d\n",
1027 i, entry.cdte_format, entry.cdte_ctrl);
1028 }
1029 cd_dbg(CD_COUNT_TRACKS, "disc has %d tracks: %d=audio %d=data %d=Cd-I %d=XA\n",
1030 header.cdth_trk1, tracks->audio, tracks->data,
1031 tracks->cdi, tracks->xa);
1032}
1033
1034static
1035int open_for_data(struct cdrom_device_info *cdi)
1036{
1037 int ret;
1038 const struct cdrom_device_ops *cdo = cdi->ops;
1039 tracktype tracks;
1040 cd_dbg(CD_OPEN, "entering open_for_data\n");
1041 /* Check if the driver can report drive status. If it can, we
1042 can do clever things. If it can't, well, we at least tried! */
1043 if (cdo->drive_status != NULL) {
1044 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1045 cd_dbg(CD_OPEN, "drive_status=%d\n", ret);
1046 if (ret == CDS_TRAY_OPEN) {
1047 cd_dbg(CD_OPEN, "the tray is open...\n");
1048 /* can/may i close it? */
1049 if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1050 cdi->options & CDO_AUTO_CLOSE) {
1051 cd_dbg(CD_OPEN, "trying to close the tray\n");
1052 ret=cdo->tray_move(cdi,0);
1053 if (ret) {
1054 cd_dbg(CD_OPEN, "bummer. tried to close the tray but failed.\n");
1055 /* Ignore the error from the low
1056 level driver. We don't care why it
1057 couldn't close the tray. We only care
1058 that there is no disc in the drive,
1059 since that is the _REAL_ problem here.*/
1060 ret=-ENOMEDIUM;
1061 goto clean_up_and_return;
1062 }
1063 } else {
1064 cd_dbg(CD_OPEN, "bummer. this drive can't close the tray.\n");
1065 ret=-ENOMEDIUM;
1066 goto clean_up_and_return;
1067 }
1068 /* Ok, the door should be closed now.. Check again */
1069 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1070 if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
1071 cd_dbg(CD_OPEN, "bummer. the tray is still not closed.\n");
1072 cd_dbg(CD_OPEN, "tray might not contain a medium\n");
1073 ret=-ENOMEDIUM;
1074 goto clean_up_and_return;
1075 }
1076 cd_dbg(CD_OPEN, "the tray is now closed\n");
1077 }
1078 /* the door should be closed now, check for the disc */
1079 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1080 if (ret!=CDS_DISC_OK) {
1081 ret = -ENOMEDIUM;
1082 goto clean_up_and_return;
1083 }
1084 }
1085 cdrom_count_tracks(cdi, &tracks);
1086 if (tracks.error == CDS_NO_DISC) {
1087 cd_dbg(CD_OPEN, "bummer. no disc.\n");
1088 ret=-ENOMEDIUM;
1089 goto clean_up_and_return;
1090 }
1091 /* CD-Players which don't use O_NONBLOCK, workman
1092 * for example, need bit CDO_CHECK_TYPE cleared! */
1093 if (tracks.data==0) {
1094 if (cdi->options & CDO_CHECK_TYPE) {
1095 /* give people a warning shot, now that CDO_CHECK_TYPE
1096 is the default case! */
1097 cd_dbg(CD_OPEN, "bummer. wrong media type.\n");
1098 cd_dbg(CD_WARNING, "pid %d must open device O_NONBLOCK!\n",
1099 (unsigned int)task_pid_nr(current));
1100 ret=-EMEDIUMTYPE;
1101 goto clean_up_and_return;
1102 }
1103 else {
1104 cd_dbg(CD_OPEN, "wrong media type, but CDO_CHECK_TYPE not set\n");
1105 }
1106 }
1107
1108 cd_dbg(CD_OPEN, "all seems well, opening the devicen");
1109
1110 /* all seems well, we can open the device */
1111 ret = cdo->open(cdi, 0); /* open for data */
1112 cd_dbg(CD_OPEN, "opening the device gave me %d\n", ret);
1113 /* After all this careful checking, we shouldn't have problems
1114 opening the device, but we don't want the device locked if
1115 this somehow fails... */
1116 if (ret) {
1117 cd_dbg(CD_OPEN, "open device failed\n");
1118 goto clean_up_and_return;
1119 }
1120 if (CDROM_CAN(CDC_LOCK) && (cdi->options & CDO_LOCK)) {
1121 cdo->lock_door(cdi, 1);
1122 cd_dbg(CD_OPEN, "door locked\n");
1123 }
1124 cd_dbg(CD_OPEN, "device opened successfully\n");
1125 return ret;
1126
1127 /* Something failed. Try to unlock the drive, because some drivers
1128 (notably ide-cd) lock the drive after every command. This produced
1129 a nasty bug where after mount failed, the drive would remain locked!
1130 This ensures that the drive gets unlocked after a mount fails. This
1131 is a goto to avoid bloating the driver with redundant code. */
1132clean_up_and_return:
1133 cd_dbg(CD_OPEN, "open failed\n");
1134 if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1135 cdo->lock_door(cdi, 0);
1136 cd_dbg(CD_OPEN, "door unlocked\n");
1137 }
1138 return ret;
1139}
1140
1141/* We use the open-option O_NONBLOCK to indicate that the
1142 * purpose of opening is only for subsequent ioctl() calls; no device
1143 * integrity checks are performed.
1144 *
1145 * We hope that all cd-player programs will adopt this convention. It
1146 * is in their own interest: device control becomes a lot easier
1147 * this way.
1148 */
1149int cdrom_open(struct cdrom_device_info *cdi, struct block_device *bdev,
1150 fmode_t mode)
1151{
1152 int ret;
1153
1154 cd_dbg(CD_OPEN, "entering cdrom_open\n");
1155
1156 /* if this was a O_NONBLOCK open and we should honor the flags,
1157 * do a quick open without drive/disc integrity checks. */
1158 cdi->use_count++;
1159 if ((mode & FMODE_NDELAY) && (cdi->options & CDO_USE_FFLAGS)) {
1160 ret = cdi->ops->open(cdi, 1);
1161 } else {
1162 ret = open_for_data(cdi);
1163 if (ret)
1164 goto err;
1165 cdrom_mmc3_profile(cdi);
1166 if (mode & FMODE_WRITE) {
1167 ret = -EROFS;
1168 if (cdrom_open_write(cdi))
1169 goto err_release;
1170 if (!CDROM_CAN(CDC_RAM))
1171 goto err_release;
1172 ret = 0;
1173 cdi->media_written = 0;
1174 }
1175 }
1176
1177 if (ret)
1178 goto err;
1179
1180 cd_dbg(CD_OPEN, "Use count for \"/dev/%s\" now %d\n",
1181 cdi->name, cdi->use_count);
1182 return 0;
1183err_release:
1184 if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1185 cdi->ops->lock_door(cdi, 0);
1186 cd_dbg(CD_OPEN, "door unlocked\n");
1187 }
1188 cdi->ops->release(cdi);
1189err:
1190 cdi->use_count--;
1191 return ret;
1192}
1193
1194/* This code is similar to that in open_for_data. The routine is called
1195 whenever an audio play operation is requested.
1196*/
1197static int check_for_audio_disc(struct cdrom_device_info *cdi,
1198 const struct cdrom_device_ops *cdo)
1199{
1200 int ret;
1201 tracktype tracks;
1202 cd_dbg(CD_OPEN, "entering check_for_audio_disc\n");
1203 if (!(cdi->options & CDO_CHECK_TYPE))
1204 return 0;
1205 if (cdo->drive_status != NULL) {
1206 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1207 cd_dbg(CD_OPEN, "drive_status=%d\n", ret);
1208 if (ret == CDS_TRAY_OPEN) {
1209 cd_dbg(CD_OPEN, "the tray is open...\n");
1210 /* can/may i close it? */
1211 if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1212 cdi->options & CDO_AUTO_CLOSE) {
1213 cd_dbg(CD_OPEN, "trying to close the tray\n");
1214 ret=cdo->tray_move(cdi,0);
1215 if (ret) {
1216 cd_dbg(CD_OPEN, "bummer. tried to close tray but failed.\n");
1217 /* Ignore the error from the low
1218 level driver. We don't care why it
1219 couldn't close the tray. We only care
1220 that there is no disc in the drive,
1221 since that is the _REAL_ problem here.*/
1222 return -ENOMEDIUM;
1223 }
1224 } else {
1225 cd_dbg(CD_OPEN, "bummer. this driver can't close the tray.\n");
1226 return -ENOMEDIUM;
1227 }
1228 /* Ok, the door should be closed now.. Check again */
1229 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1230 if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
1231 cd_dbg(CD_OPEN, "bummer. the tray is still not closed.\n");
1232 return -ENOMEDIUM;
1233 }
1234 if (ret!=CDS_DISC_OK) {
1235 cd_dbg(CD_OPEN, "bummer. disc isn't ready.\n");
1236 return -EIO;
1237 }
1238 cd_dbg(CD_OPEN, "the tray is now closed\n");
1239 }
1240 }
1241 cdrom_count_tracks(cdi, &tracks);
1242 if (tracks.error)
1243 return(tracks.error);
1244
1245 if (tracks.audio==0)
1246 return -EMEDIUMTYPE;
1247
1248 return 0;
1249}
1250
1251void cdrom_release(struct cdrom_device_info *cdi, fmode_t mode)
1252{
1253 const struct cdrom_device_ops *cdo = cdi->ops;
1254 int opened_for_data;
1255
1256 cd_dbg(CD_CLOSE, "entering cdrom_release\n");
1257
1258 if (cdi->use_count > 0)
1259 cdi->use_count--;
1260
1261 if (cdi->use_count == 0) {
1262 cd_dbg(CD_CLOSE, "Use count for \"/dev/%s\" now zero\n",
1263 cdi->name);
1264 cdrom_dvd_rw_close_write(cdi);
1265
1266 if ((cdo->capability & CDC_LOCK) && !cdi->keeplocked) {
1267 cd_dbg(CD_CLOSE, "Unlocking door!\n");
1268 cdo->lock_door(cdi, 0);
1269 }
1270 }
1271
1272 opened_for_data = !(cdi->options & CDO_USE_FFLAGS) ||
1273 !(mode & FMODE_NDELAY);
1274
1275 /*
1276 * flush cache on last write release
1277 */
1278 if (CDROM_CAN(CDC_RAM) && !cdi->use_count && cdi->for_data)
1279 cdrom_close_write(cdi);
1280
1281 cdo->release(cdi);
1282 if (cdi->use_count == 0) { /* last process that closes dev*/
1283 if (opened_for_data &&
1284 cdi->options & CDO_AUTO_EJECT && CDROM_CAN(CDC_OPEN_TRAY))
1285 cdo->tray_move(cdi, 1);
1286 }
1287}
1288
1289static int cdrom_read_mech_status(struct cdrom_device_info *cdi,
1290 struct cdrom_changer_info *buf)
1291{
1292 struct packet_command cgc;
1293 const struct cdrom_device_ops *cdo = cdi->ops;
1294 int length;
1295
1296 /*
1297 * Sanyo changer isn't spec compliant (doesn't use regular change
1298 * LOAD_UNLOAD command, and it doesn't implement the mech status
1299 * command below
1300 */
1301 if (cdi->sanyo_slot) {
1302 buf->hdr.nslots = 3;
1303 buf->hdr.curslot = cdi->sanyo_slot == 3 ? 0 : cdi->sanyo_slot;
1304 for (length = 0; length < 3; length++) {
1305 buf->slots[length].disc_present = 1;
1306 buf->slots[length].change = 0;
1307 }
1308 return 0;
1309 }
1310
1311 length = sizeof(struct cdrom_mechstat_header) +
1312 cdi->capacity * sizeof(struct cdrom_slot);
1313
1314 init_cdrom_command(&cgc, buf, length, CGC_DATA_READ);
1315 cgc.cmd[0] = GPCMD_MECHANISM_STATUS;
1316 cgc.cmd[8] = (length >> 8) & 0xff;
1317 cgc.cmd[9] = length & 0xff;
1318 return cdo->generic_packet(cdi, &cgc);
1319}
1320
1321static int cdrom_slot_status(struct cdrom_device_info *cdi, int slot)
1322{
1323 struct cdrom_changer_info *info;
1324 int ret;
1325
1326 cd_dbg(CD_CHANGER, "entering cdrom_slot_status()\n");
1327 if (cdi->sanyo_slot)
1328 return CDS_NO_INFO;
1329
1330 info = kmalloc(sizeof(*info), GFP_KERNEL);
1331 if (!info)
1332 return -ENOMEM;
1333
1334 if ((ret = cdrom_read_mech_status(cdi, info)))
1335 goto out_free;
1336
1337 if (info->slots[slot].disc_present)
1338 ret = CDS_DISC_OK;
1339 else
1340 ret = CDS_NO_DISC;
1341
1342out_free:
1343 kfree(info);
1344 return ret;
1345}
1346
1347/* Return the number of slots for an ATAPI/SCSI cdrom,
1348 * return 1 if not a changer.
1349 */
1350int cdrom_number_of_slots(struct cdrom_device_info *cdi)
1351{
1352 int status;
1353 int nslots = 1;
1354 struct cdrom_changer_info *info;
1355
1356 cd_dbg(CD_CHANGER, "entering cdrom_number_of_slots()\n");
1357 /* cdrom_read_mech_status requires a valid value for capacity: */
1358 cdi->capacity = 0;
1359
1360 info = kmalloc(sizeof(*info), GFP_KERNEL);
1361 if (!info)
1362 return -ENOMEM;
1363
1364 if ((status = cdrom_read_mech_status(cdi, info)) == 0)
1365 nslots = info->hdr.nslots;
1366
1367 kfree(info);
1368 return nslots;
1369}
1370
1371
1372/* If SLOT < 0, unload the current slot. Otherwise, try to load SLOT. */
1373static int cdrom_load_unload(struct cdrom_device_info *cdi, int slot)
1374{
1375 struct packet_command cgc;
1376
1377 cd_dbg(CD_CHANGER, "entering cdrom_load_unload()\n");
1378 if (cdi->sanyo_slot && slot < 0)
1379 return 0;
1380
1381 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
1382 cgc.cmd[0] = GPCMD_LOAD_UNLOAD;
1383 cgc.cmd[4] = 2 + (slot >= 0);
1384 cgc.cmd[8] = slot;
1385 cgc.timeout = 60 * HZ;
1386
1387 /* The Sanyo 3 CD changer uses byte 7 of the
1388 GPCMD_TEST_UNIT_READY to command to switch CDs instead of
1389 using the GPCMD_LOAD_UNLOAD opcode. */
1390 if (cdi->sanyo_slot && -1 < slot) {
1391 cgc.cmd[0] = GPCMD_TEST_UNIT_READY;
1392 cgc.cmd[7] = slot;
1393 cgc.cmd[4] = cgc.cmd[8] = 0;
1394 cdi->sanyo_slot = slot ? slot : 3;
1395 }
1396
1397 return cdi->ops->generic_packet(cdi, &cgc);
1398}
1399
1400static int cdrom_select_disc(struct cdrom_device_info *cdi, int slot)
1401{
1402 struct cdrom_changer_info *info;
1403 int curslot;
1404 int ret;
1405
1406 cd_dbg(CD_CHANGER, "entering cdrom_select_disc()\n");
1407 if (!CDROM_CAN(CDC_SELECT_DISC))
1408 return -EDRIVE_CANT_DO_THIS;
1409
1410 if (cdi->ops->check_events)
1411 cdi->ops->check_events(cdi, 0, slot);
1412 else
1413 cdi->ops->media_changed(cdi, slot);
1414
1415 if (slot == CDSL_NONE) {
1416 /* set media changed bits, on both queues */
1417 cdi->mc_flags = 0x3;
1418 return cdrom_load_unload(cdi, -1);
1419 }
1420
1421 info = kmalloc(sizeof(*info), GFP_KERNEL);
1422 if (!info)
1423 return -ENOMEM;
1424
1425 if ((ret = cdrom_read_mech_status(cdi, info))) {
1426 kfree(info);
1427 return ret;
1428 }
1429
1430 curslot = info->hdr.curslot;
1431 kfree(info);
1432
1433 if (cdi->use_count > 1 || cdi->keeplocked) {
1434 if (slot == CDSL_CURRENT) {
1435 return curslot;
1436 } else {
1437 return -EBUSY;
1438 }
1439 }
1440
1441 /* Specifying CDSL_CURRENT will attempt to load the currnet slot,
1442 which is useful if it had been previously unloaded.
1443 Whether it can or not, it returns the current slot.
1444 Similarly, if slot happens to be the current one, we still
1445 try and load it. */
1446 if (slot == CDSL_CURRENT)
1447 slot = curslot;
1448
1449 /* set media changed bits on both queues */
1450 cdi->mc_flags = 0x3;
1451 if ((ret = cdrom_load_unload(cdi, slot)))
1452 return ret;
1453
1454 return slot;
1455}
1456
1457/*
1458 * As cdrom implements an extra ioctl consumer for media changed
1459 * event, it needs to buffer ->check_events() output, such that event
1460 * is not lost for both the usual VFS and ioctl paths.
1461 * cdi->{vfs|ioctl}_events are used to buffer pending events for each
1462 * path.
1463 *
1464 * XXX: Locking is non-existent. cdi->ops->check_events() can be
1465 * called in parallel and buffering fields are accessed without any
1466 * exclusion. The original media_changed code had the same problem.
1467 * It might be better to simply deprecate CDROM_MEDIA_CHANGED ioctl
1468 * and remove this cruft altogether. It doesn't have much usefulness
1469 * at this point.
1470 */
1471static void cdrom_update_events(struct cdrom_device_info *cdi,
1472 unsigned int clearing)
1473{
1474 unsigned int events;
1475
1476 events = cdi->ops->check_events(cdi, clearing, CDSL_CURRENT);
1477 cdi->vfs_events |= events;
1478 cdi->ioctl_events |= events;
1479}
1480
1481unsigned int cdrom_check_events(struct cdrom_device_info *cdi,
1482 unsigned int clearing)
1483{
1484 unsigned int events;
1485
1486 cdrom_update_events(cdi, clearing);
1487 events = cdi->vfs_events;
1488 cdi->vfs_events = 0;
1489 return events;
1490}
1491EXPORT_SYMBOL(cdrom_check_events);
1492
1493/* We want to make media_changed accessible to the user through an
1494 * ioctl. The main problem now is that we must double-buffer the
1495 * low-level implementation, to assure that the VFS and the user both
1496 * see a medium change once.
1497 */
1498
1499static
1500int media_changed(struct cdrom_device_info *cdi, int queue)
1501{
1502 unsigned int mask = (1 << (queue & 1));
1503 int ret = !!(cdi->mc_flags & mask);
1504 bool changed;
1505
1506 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
1507 return ret;
1508
1509 /* changed since last call? */
1510 if (cdi->ops->check_events) {
1511 BUG_ON(!queue); /* shouldn't be called from VFS path */
1512 cdrom_update_events(cdi, DISK_EVENT_MEDIA_CHANGE);
1513 changed = cdi->ioctl_events & DISK_EVENT_MEDIA_CHANGE;
1514 cdi->ioctl_events = 0;
1515 } else
1516 changed = cdi->ops->media_changed(cdi, CDSL_CURRENT);
1517
1518 if (changed) {
1519 cdi->mc_flags = 0x3; /* set bit on both queues */
1520 ret |= 1;
1521 cdi->media_written = 0;
1522 }
1523
1524 cdi->mc_flags &= ~mask; /* clear bit */
1525 return ret;
1526}
1527
1528int cdrom_media_changed(struct cdrom_device_info *cdi)
1529{
1530 /* This talks to the VFS, which doesn't like errors - just 1 or 0.
1531 * Returning "0" is always safe (media hasn't been changed). Do that
1532 * if the low-level cdrom driver dosn't support media changed. */
1533 if (cdi == NULL || cdi->ops->media_changed == NULL)
1534 return 0;
1535 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
1536 return 0;
1537 return media_changed(cdi, 0);
1538}
1539
1540/* Requests to the low-level drivers will /always/ be done in the
1541 following format convention:
1542
1543 CDROM_LBA: all data-related requests.
1544 CDROM_MSF: all audio-related requests.
1545
1546 However, a low-level implementation is allowed to refuse this
1547 request, and return information in its own favorite format.
1548
1549 It doesn't make sense /at all/ to ask for a play_audio in LBA
1550 format, or ask for multi-session info in MSF format. However, for
1551 backward compatibility these format requests will be satisfied, but
1552 the requests to the low-level drivers will be sanitized in the more
1553 meaningful format indicated above.
1554 */
1555
1556static
1557void sanitize_format(union cdrom_addr *addr,
1558 u_char * curr, u_char requested)
1559{
1560 if (*curr == requested)
1561 return; /* nothing to be done! */
1562 if (requested == CDROM_LBA) {
1563 addr->lba = (int) addr->msf.frame +
1564 75 * (addr->msf.second - 2 + 60 * addr->msf.minute);
1565 } else { /* CDROM_MSF */
1566 int lba = addr->lba;
1567 addr->msf.frame = lba % 75;
1568 lba /= 75;
1569 lba += 2;
1570 addr->msf.second = lba % 60;
1571 addr->msf.minute = lba / 60;
1572 }
1573 *curr = requested;
1574}
1575
1576void init_cdrom_command(struct packet_command *cgc, void *buf, int len,
1577 int type)
1578{
1579 memset(cgc, 0, sizeof(struct packet_command));
1580 if (buf)
1581 memset(buf, 0, len);
1582 cgc->buffer = (char *) buf;
1583 cgc->buflen = len;
1584 cgc->data_direction = type;
1585 cgc->timeout = CDROM_DEF_TIMEOUT;
1586}
1587
1588/* DVD handling */
1589
1590#define copy_key(dest,src) memcpy((dest), (src), sizeof(dvd_key))
1591#define copy_chal(dest,src) memcpy((dest), (src), sizeof(dvd_challenge))
1592
1593static void setup_report_key(struct packet_command *cgc, unsigned agid, unsigned type)
1594{
1595 cgc->cmd[0] = GPCMD_REPORT_KEY;
1596 cgc->cmd[10] = type | (agid << 6);
1597 switch (type) {
1598 case 0: case 8: case 5: {
1599 cgc->buflen = 8;
1600 break;
1601 }
1602 case 1: {
1603 cgc->buflen = 16;
1604 break;
1605 }
1606 case 2: case 4: {
1607 cgc->buflen = 12;
1608 break;
1609 }
1610 }
1611 cgc->cmd[9] = cgc->buflen;
1612 cgc->data_direction = CGC_DATA_READ;
1613}
1614
1615static void setup_send_key(struct packet_command *cgc, unsigned agid, unsigned type)
1616{
1617 cgc->cmd[0] = GPCMD_SEND_KEY;
1618 cgc->cmd[10] = type | (agid << 6);
1619 switch (type) {
1620 case 1: {
1621 cgc->buflen = 16;
1622 break;
1623 }
1624 case 3: {
1625 cgc->buflen = 12;
1626 break;
1627 }
1628 case 6: {
1629 cgc->buflen = 8;
1630 break;
1631 }
1632 }
1633 cgc->cmd[9] = cgc->buflen;
1634 cgc->data_direction = CGC_DATA_WRITE;
1635}
1636
1637static int dvd_do_auth(struct cdrom_device_info *cdi, dvd_authinfo *ai)
1638{
1639 int ret;
1640 u_char buf[20];
1641 struct packet_command cgc;
1642 const struct cdrom_device_ops *cdo = cdi->ops;
1643 rpc_state_t rpc_state;
1644
1645 memset(buf, 0, sizeof(buf));
1646 init_cdrom_command(&cgc, buf, 0, CGC_DATA_READ);
1647
1648 switch (ai->type) {
1649 /* LU data send */
1650 case DVD_LU_SEND_AGID:
1651 cd_dbg(CD_DVD, "entering DVD_LU_SEND_AGID\n");
1652 cgc.quiet = 1;
1653 setup_report_key(&cgc, ai->lsa.agid, 0);
1654
1655 if ((ret = cdo->generic_packet(cdi, &cgc)))
1656 return ret;
1657
1658 ai->lsa.agid = buf[7] >> 6;
1659 /* Returning data, let host change state */
1660 break;
1661
1662 case DVD_LU_SEND_KEY1:
1663 cd_dbg(CD_DVD, "entering DVD_LU_SEND_KEY1\n");
1664 setup_report_key(&cgc, ai->lsk.agid, 2);
1665
1666 if ((ret = cdo->generic_packet(cdi, &cgc)))
1667 return ret;
1668
1669 copy_key(ai->lsk.key, &buf[4]);
1670 /* Returning data, let host change state */
1671 break;
1672
1673 case DVD_LU_SEND_CHALLENGE:
1674 cd_dbg(CD_DVD, "entering DVD_LU_SEND_CHALLENGE\n");
1675 setup_report_key(&cgc, ai->lsc.agid, 1);
1676
1677 if ((ret = cdo->generic_packet(cdi, &cgc)))
1678 return ret;
1679
1680 copy_chal(ai->lsc.chal, &buf[4]);
1681 /* Returning data, let host change state */
1682 break;
1683
1684 /* Post-auth key */
1685 case DVD_LU_SEND_TITLE_KEY:
1686 cd_dbg(CD_DVD, "entering DVD_LU_SEND_TITLE_KEY\n");
1687 cgc.quiet = 1;
1688 setup_report_key(&cgc, ai->lstk.agid, 4);
1689 cgc.cmd[5] = ai->lstk.lba;
1690 cgc.cmd[4] = ai->lstk.lba >> 8;
1691 cgc.cmd[3] = ai->lstk.lba >> 16;
1692 cgc.cmd[2] = ai->lstk.lba >> 24;
1693
1694 if ((ret = cdo->generic_packet(cdi, &cgc)))
1695 return ret;
1696
1697 ai->lstk.cpm = (buf[4] >> 7) & 1;
1698 ai->lstk.cp_sec = (buf[4] >> 6) & 1;
1699 ai->lstk.cgms = (buf[4] >> 4) & 3;
1700 copy_key(ai->lstk.title_key, &buf[5]);
1701 /* Returning data, let host change state */
1702 break;
1703
1704 case DVD_LU_SEND_ASF:
1705 cd_dbg(CD_DVD, "entering DVD_LU_SEND_ASF\n");
1706 setup_report_key(&cgc, ai->lsasf.agid, 5);
1707
1708 if ((ret = cdo->generic_packet(cdi, &cgc)))
1709 return ret;
1710
1711 ai->lsasf.asf = buf[7] & 1;
1712 break;
1713
1714 /* LU data receive (LU changes state) */
1715 case DVD_HOST_SEND_CHALLENGE:
1716 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_CHALLENGE\n");
1717 setup_send_key(&cgc, ai->hsc.agid, 1);
1718 buf[1] = 0xe;
1719 copy_chal(&buf[4], ai->hsc.chal);
1720
1721 if ((ret = cdo->generic_packet(cdi, &cgc)))
1722 return ret;
1723
1724 ai->type = DVD_LU_SEND_KEY1;
1725 break;
1726
1727 case DVD_HOST_SEND_KEY2:
1728 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_KEY2\n");
1729 setup_send_key(&cgc, ai->hsk.agid, 3);
1730 buf[1] = 0xa;
1731 copy_key(&buf[4], ai->hsk.key);
1732
1733 if ((ret = cdo->generic_packet(cdi, &cgc))) {
1734 ai->type = DVD_AUTH_FAILURE;
1735 return ret;
1736 }
1737 ai->type = DVD_AUTH_ESTABLISHED;
1738 break;
1739
1740 /* Misc */
1741 case DVD_INVALIDATE_AGID:
1742 cgc.quiet = 1;
1743 cd_dbg(CD_DVD, "entering DVD_INVALIDATE_AGID\n");
1744 setup_report_key(&cgc, ai->lsa.agid, 0x3f);
1745 if ((ret = cdo->generic_packet(cdi, &cgc)))
1746 return ret;
1747 break;
1748
1749 /* Get region settings */
1750 case DVD_LU_SEND_RPC_STATE:
1751 cd_dbg(CD_DVD, "entering DVD_LU_SEND_RPC_STATE\n");
1752 setup_report_key(&cgc, 0, 8);
1753 memset(&rpc_state, 0, sizeof(rpc_state_t));
1754 cgc.buffer = (char *) &rpc_state;
1755
1756 if ((ret = cdo->generic_packet(cdi, &cgc)))
1757 return ret;
1758
1759 ai->lrpcs.type = rpc_state.type_code;
1760 ai->lrpcs.vra = rpc_state.vra;
1761 ai->lrpcs.ucca = rpc_state.ucca;
1762 ai->lrpcs.region_mask = rpc_state.region_mask;
1763 ai->lrpcs.rpc_scheme = rpc_state.rpc_scheme;
1764 break;
1765
1766 /* Set region settings */
1767 case DVD_HOST_SEND_RPC_STATE:
1768 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_RPC_STATE\n");
1769 setup_send_key(&cgc, 0, 6);
1770 buf[1] = 6;
1771 buf[4] = ai->hrpcs.pdrc;
1772
1773 if ((ret = cdo->generic_packet(cdi, &cgc)))
1774 return ret;
1775 break;
1776
1777 default:
1778 cd_dbg(CD_WARNING, "Invalid DVD key ioctl (%d)\n", ai->type);
1779 return -ENOTTY;
1780 }
1781
1782 return 0;
1783}
1784
1785static int dvd_read_physical(struct cdrom_device_info *cdi, dvd_struct *s,
1786 struct packet_command *cgc)
1787{
1788 unsigned char buf[21], *base;
1789 struct dvd_layer *layer;
1790 const struct cdrom_device_ops *cdo = cdi->ops;
1791 int ret, layer_num = s->physical.layer_num;
1792
1793 if (layer_num >= DVD_LAYERS)
1794 return -EINVAL;
1795
1796 init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1797 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1798 cgc->cmd[6] = layer_num;
1799 cgc->cmd[7] = s->type;
1800 cgc->cmd[9] = cgc->buflen & 0xff;
1801
1802 /*
1803 * refrain from reporting errors on non-existing layers (mainly)
1804 */
1805 cgc->quiet = 1;
1806
1807 ret = cdo->generic_packet(cdi, cgc);
1808 if (ret)
1809 return ret;
1810
1811 base = &buf[4];
1812 layer = &s->physical.layer[layer_num];
1813
1814 /*
1815 * place the data... really ugly, but at least we won't have to
1816 * worry about endianess in userspace.
1817 */
1818 memset(layer, 0, sizeof(*layer));
1819 layer->book_version = base[0] & 0xf;
1820 layer->book_type = base[0] >> 4;
1821 layer->min_rate = base[1] & 0xf;
1822 layer->disc_size = base[1] >> 4;
1823 layer->layer_type = base[2] & 0xf;
1824 layer->track_path = (base[2] >> 4) & 1;
1825 layer->nlayers = (base[2] >> 5) & 3;
1826 layer->track_density = base[3] & 0xf;
1827 layer->linear_density = base[3] >> 4;
1828 layer->start_sector = base[5] << 16 | base[6] << 8 | base[7];
1829 layer->end_sector = base[9] << 16 | base[10] << 8 | base[11];
1830 layer->end_sector_l0 = base[13] << 16 | base[14] << 8 | base[15];
1831 layer->bca = base[16] >> 7;
1832
1833 return 0;
1834}
1835
1836static int dvd_read_copyright(struct cdrom_device_info *cdi, dvd_struct *s,
1837 struct packet_command *cgc)
1838{
1839 int ret;
1840 u_char buf[8];
1841 const struct cdrom_device_ops *cdo = cdi->ops;
1842
1843 init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1844 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1845 cgc->cmd[6] = s->copyright.layer_num;
1846 cgc->cmd[7] = s->type;
1847 cgc->cmd[8] = cgc->buflen >> 8;
1848 cgc->cmd[9] = cgc->buflen & 0xff;
1849
1850 ret = cdo->generic_packet(cdi, cgc);
1851 if (ret)
1852 return ret;
1853
1854 s->copyright.cpst = buf[4];
1855 s->copyright.rmi = buf[5];
1856
1857 return 0;
1858}
1859
1860static int dvd_read_disckey(struct cdrom_device_info *cdi, dvd_struct *s,
1861 struct packet_command *cgc)
1862{
1863 int ret, size;
1864 u_char *buf;
1865 const struct cdrom_device_ops *cdo = cdi->ops;
1866
1867 size = sizeof(s->disckey.value) + 4;
1868
1869 buf = kmalloc(size, GFP_KERNEL);
1870 if (!buf)
1871 return -ENOMEM;
1872
1873 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1874 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1875 cgc->cmd[7] = s->type;
1876 cgc->cmd[8] = size >> 8;
1877 cgc->cmd[9] = size & 0xff;
1878 cgc->cmd[10] = s->disckey.agid << 6;
1879
1880 ret = cdo->generic_packet(cdi, cgc);
1881 if (!ret)
1882 memcpy(s->disckey.value, &buf[4], sizeof(s->disckey.value));
1883
1884 kfree(buf);
1885 return ret;
1886}
1887
1888static int dvd_read_bca(struct cdrom_device_info *cdi, dvd_struct *s,
1889 struct packet_command *cgc)
1890{
1891 int ret, size = 4 + 188;
1892 u_char *buf;
1893 const struct cdrom_device_ops *cdo = cdi->ops;
1894
1895 buf = kmalloc(size, GFP_KERNEL);
1896 if (!buf)
1897 return -ENOMEM;
1898
1899 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1900 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1901 cgc->cmd[7] = s->type;
1902 cgc->cmd[9] = cgc->buflen & 0xff;
1903
1904 ret = cdo->generic_packet(cdi, cgc);
1905 if (ret)
1906 goto out;
1907
1908 s->bca.len = buf[0] << 8 | buf[1];
1909 if (s->bca.len < 12 || s->bca.len > 188) {
1910 cd_dbg(CD_WARNING, "Received invalid BCA length (%d)\n",
1911 s->bca.len);
1912 ret = -EIO;
1913 goto out;
1914 }
1915 memcpy(s->bca.value, &buf[4], s->bca.len);
1916 ret = 0;
1917out:
1918 kfree(buf);
1919 return ret;
1920}
1921
1922static int dvd_read_manufact(struct cdrom_device_info *cdi, dvd_struct *s,
1923 struct packet_command *cgc)
1924{
1925 int ret = 0, size;
1926 u_char *buf;
1927 const struct cdrom_device_ops *cdo = cdi->ops;
1928
1929 size = sizeof(s->manufact.value) + 4;
1930
1931 buf = kmalloc(size, GFP_KERNEL);
1932 if (!buf)
1933 return -ENOMEM;
1934
1935 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1936 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1937 cgc->cmd[7] = s->type;
1938 cgc->cmd[8] = size >> 8;
1939 cgc->cmd[9] = size & 0xff;
1940
1941 ret = cdo->generic_packet(cdi, cgc);
1942 if (ret)
1943 goto out;
1944
1945 s->manufact.len = buf[0] << 8 | buf[1];
1946 if (s->manufact.len < 0) {
1947 cd_dbg(CD_WARNING, "Received invalid manufacture info length (%d)\n",
1948 s->manufact.len);
1949 ret = -EIO;
1950 } else {
1951 if (s->manufact.len > 2048) {
1952 cd_dbg(CD_WARNING, "Received invalid manufacture info length (%d): truncating to 2048\n",
1953 s->manufact.len);
1954 s->manufact.len = 2048;
1955 }
1956 memcpy(s->manufact.value, &buf[4], s->manufact.len);
1957 }
1958
1959out:
1960 kfree(buf);
1961 return ret;
1962}
1963
1964static int dvd_read_struct(struct cdrom_device_info *cdi, dvd_struct *s,
1965 struct packet_command *cgc)
1966{
1967 switch (s->type) {
1968 case DVD_STRUCT_PHYSICAL:
1969 return dvd_read_physical(cdi, s, cgc);
1970
1971 case DVD_STRUCT_COPYRIGHT:
1972 return dvd_read_copyright(cdi, s, cgc);
1973
1974 case DVD_STRUCT_DISCKEY:
1975 return dvd_read_disckey(cdi, s, cgc);
1976
1977 case DVD_STRUCT_BCA:
1978 return dvd_read_bca(cdi, s, cgc);
1979
1980 case DVD_STRUCT_MANUFACT:
1981 return dvd_read_manufact(cdi, s, cgc);
1982
1983 default:
1984 cd_dbg(CD_WARNING, ": Invalid DVD structure read requested (%d)\n",
1985 s->type);
1986 return -EINVAL;
1987 }
1988}
1989
1990int cdrom_mode_sense(struct cdrom_device_info *cdi,
1991 struct packet_command *cgc,
1992 int page_code, int page_control)
1993{
1994 const struct cdrom_device_ops *cdo = cdi->ops;
1995
1996 memset(cgc->cmd, 0, sizeof(cgc->cmd));
1997
1998 cgc->cmd[0] = GPCMD_MODE_SENSE_10;
1999 cgc->cmd[2] = page_code | (page_control << 6);
2000 cgc->cmd[7] = cgc->buflen >> 8;
2001 cgc->cmd[8] = cgc->buflen & 0xff;
2002 cgc->data_direction = CGC_DATA_READ;
2003 return cdo->generic_packet(cdi, cgc);
2004}
2005
2006int cdrom_mode_select(struct cdrom_device_info *cdi,
2007 struct packet_command *cgc)
2008{
2009 const struct cdrom_device_ops *cdo = cdi->ops;
2010
2011 memset(cgc->cmd, 0, sizeof(cgc->cmd));
2012 memset(cgc->buffer, 0, 2);
2013 cgc->cmd[0] = GPCMD_MODE_SELECT_10;
2014 cgc->cmd[1] = 0x10; /* PF */
2015 cgc->cmd[7] = cgc->buflen >> 8;
2016 cgc->cmd[8] = cgc->buflen & 0xff;
2017 cgc->data_direction = CGC_DATA_WRITE;
2018 return cdo->generic_packet(cdi, cgc);
2019}
2020
2021static int cdrom_read_subchannel(struct cdrom_device_info *cdi,
2022 struct cdrom_subchnl *subchnl, int mcn)
2023{
2024 const struct cdrom_device_ops *cdo = cdi->ops;
2025 struct packet_command cgc;
2026 char buffer[32];
2027 int ret;
2028
2029 init_cdrom_command(&cgc, buffer, 16, CGC_DATA_READ);
2030 cgc.cmd[0] = GPCMD_READ_SUBCHANNEL;
2031 cgc.cmd[1] = subchnl->cdsc_format;/* MSF or LBA addressing */
2032 cgc.cmd[2] = 0x40; /* request subQ data */
2033 cgc.cmd[3] = mcn ? 2 : 1;
2034 cgc.cmd[8] = 16;
2035
2036 if ((ret = cdo->generic_packet(cdi, &cgc)))
2037 return ret;
2038
2039 subchnl->cdsc_audiostatus = cgc.buffer[1];
2040 subchnl->cdsc_ctrl = cgc.buffer[5] & 0xf;
2041 subchnl->cdsc_trk = cgc.buffer[6];
2042 subchnl->cdsc_ind = cgc.buffer[7];
2043
2044 if (subchnl->cdsc_format == CDROM_LBA) {
2045 subchnl->cdsc_absaddr.lba = ((cgc.buffer[8] << 24) |
2046 (cgc.buffer[9] << 16) |
2047 (cgc.buffer[10] << 8) |
2048 (cgc.buffer[11]));
2049 subchnl->cdsc_reladdr.lba = ((cgc.buffer[12] << 24) |
2050 (cgc.buffer[13] << 16) |
2051 (cgc.buffer[14] << 8) |
2052 (cgc.buffer[15]));
2053 } else {
2054 subchnl->cdsc_reladdr.msf.minute = cgc.buffer[13];
2055 subchnl->cdsc_reladdr.msf.second = cgc.buffer[14];
2056 subchnl->cdsc_reladdr.msf.frame = cgc.buffer[15];
2057 subchnl->cdsc_absaddr.msf.minute = cgc.buffer[9];
2058 subchnl->cdsc_absaddr.msf.second = cgc.buffer[10];
2059 subchnl->cdsc_absaddr.msf.frame = cgc.buffer[11];
2060 }
2061
2062 return 0;
2063}
2064
2065/*
2066 * Specific READ_10 interface
2067 */
2068static int cdrom_read_cd(struct cdrom_device_info *cdi,
2069 struct packet_command *cgc, int lba,
2070 int blocksize, int nblocks)
2071{
2072 const struct cdrom_device_ops *cdo = cdi->ops;
2073
2074 memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2075 cgc->cmd[0] = GPCMD_READ_10;
2076 cgc->cmd[2] = (lba >> 24) & 0xff;
2077 cgc->cmd[3] = (lba >> 16) & 0xff;
2078 cgc->cmd[4] = (lba >> 8) & 0xff;
2079 cgc->cmd[5] = lba & 0xff;
2080 cgc->cmd[6] = (nblocks >> 16) & 0xff;
2081 cgc->cmd[7] = (nblocks >> 8) & 0xff;
2082 cgc->cmd[8] = nblocks & 0xff;
2083 cgc->buflen = blocksize * nblocks;
2084 return cdo->generic_packet(cdi, cgc);
2085}
2086
2087/* very generic interface for reading the various types of blocks */
2088static int cdrom_read_block(struct cdrom_device_info *cdi,
2089 struct packet_command *cgc,
2090 int lba, int nblocks, int format, int blksize)
2091{
2092 const struct cdrom_device_ops *cdo = cdi->ops;
2093
2094 memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2095 cgc->cmd[0] = GPCMD_READ_CD;
2096 /* expected sector size - cdda,mode1,etc. */
2097 cgc->cmd[1] = format << 2;
2098 /* starting address */
2099 cgc->cmd[2] = (lba >> 24) & 0xff;
2100 cgc->cmd[3] = (lba >> 16) & 0xff;
2101 cgc->cmd[4] = (lba >> 8) & 0xff;
2102 cgc->cmd[5] = lba & 0xff;
2103 /* number of blocks */
2104 cgc->cmd[6] = (nblocks >> 16) & 0xff;
2105 cgc->cmd[7] = (nblocks >> 8) & 0xff;
2106 cgc->cmd[8] = nblocks & 0xff;
2107 cgc->buflen = blksize * nblocks;
2108
2109 /* set the header info returned */
2110 switch (blksize) {
2111 case CD_FRAMESIZE_RAW0 : cgc->cmd[9] = 0x58; break;
2112 case CD_FRAMESIZE_RAW1 : cgc->cmd[9] = 0x78; break;
2113 case CD_FRAMESIZE_RAW : cgc->cmd[9] = 0xf8; break;
2114 default : cgc->cmd[9] = 0x10;
2115 }
2116
2117 return cdo->generic_packet(cdi, cgc);
2118}
2119
2120static int cdrom_read_cdda_old(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2121 int lba, int nframes)
2122{
2123 struct packet_command cgc;
2124 int ret = 0;
2125 int nr;
2126
2127 cdi->last_sense = 0;
2128
2129 memset(&cgc, 0, sizeof(cgc));
2130
2131 /*
2132 * start with will ra.nframes size, back down if alloc fails
2133 */
2134 nr = nframes;
2135 do {
2136 cgc.buffer = kmalloc_array(nr, CD_FRAMESIZE_RAW, GFP_KERNEL);
2137 if (cgc.buffer)
2138 break;
2139
2140 nr >>= 1;
2141 } while (nr);
2142
2143 if (!nr)
2144 return -ENOMEM;
2145
2146 cgc.data_direction = CGC_DATA_READ;
2147 while (nframes > 0) {
2148 if (nr > nframes)
2149 nr = nframes;
2150
2151 ret = cdrom_read_block(cdi, &cgc, lba, nr, 1, CD_FRAMESIZE_RAW);
2152 if (ret)
2153 break;
2154 if (copy_to_user(ubuf, cgc.buffer, CD_FRAMESIZE_RAW * nr)) {
2155 ret = -EFAULT;
2156 break;
2157 }
2158 ubuf += CD_FRAMESIZE_RAW * nr;
2159 nframes -= nr;
2160 lba += nr;
2161 }
2162 kfree(cgc.buffer);
2163 return ret;
2164}
2165
2166static int cdrom_read_cdda_bpc(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2167 int lba, int nframes)
2168{
2169 struct request_queue *q = cdi->disk->queue;
2170 struct request *rq;
2171 struct scsi_request *req;
2172 struct bio *bio;
2173 unsigned int len;
2174 int nr, ret = 0;
2175
2176 if (!q)
2177 return -ENXIO;
2178
2179 if (!blk_queue_scsi_passthrough(q)) {
2180 WARN_ONCE(true,
2181 "Attempt read CDDA info through a non-SCSI queue\n");
2182 return -EINVAL;
2183 }
2184
2185 cdi->last_sense = 0;
2186
2187 while (nframes) {
2188 nr = nframes;
2189 if (cdi->cdda_method == CDDA_BPC_SINGLE)
2190 nr = 1;
2191 if (nr * CD_FRAMESIZE_RAW > (queue_max_sectors(q) << 9))
2192 nr = (queue_max_sectors(q) << 9) / CD_FRAMESIZE_RAW;
2193
2194 len = nr * CD_FRAMESIZE_RAW;
2195
2196 rq = blk_get_request(q, REQ_OP_SCSI_IN, 0);
2197 if (IS_ERR(rq)) {
2198 ret = PTR_ERR(rq);
2199 break;
2200 }
2201 req = scsi_req(rq);
2202
2203 ret = blk_rq_map_user(q, rq, NULL, ubuf, len, GFP_KERNEL);
2204 if (ret) {
2205 blk_put_request(rq);
2206 break;
2207 }
2208
2209 req->cmd[0] = GPCMD_READ_CD;
2210 req->cmd[1] = 1 << 2;
2211 req->cmd[2] = (lba >> 24) & 0xff;
2212 req->cmd[3] = (lba >> 16) & 0xff;
2213 req->cmd[4] = (lba >> 8) & 0xff;
2214 req->cmd[5] = lba & 0xff;
2215 req->cmd[6] = (nr >> 16) & 0xff;
2216 req->cmd[7] = (nr >> 8) & 0xff;
2217 req->cmd[8] = nr & 0xff;
2218 req->cmd[9] = 0xf8;
2219
2220 req->cmd_len = 12;
2221 rq->timeout = 60 * HZ;
2222 bio = rq->bio;
2223
2224 blk_execute_rq(q, cdi->disk, rq, 0);
2225 if (scsi_req(rq)->result) {
2226 struct scsi_sense_hdr sshdr;
2227
2228 ret = -EIO;
2229 scsi_normalize_sense(req->sense, req->sense_len,
2230 &sshdr);
2231 cdi->last_sense = sshdr.sense_key;
2232 }
2233
2234 if (blk_rq_unmap_user(bio))
2235 ret = -EFAULT;
2236 blk_put_request(rq);
2237
2238 if (ret)
2239 break;
2240
2241 nframes -= nr;
2242 lba += nr;
2243 ubuf += len;
2244 }
2245
2246 return ret;
2247}
2248
2249static int cdrom_read_cdda(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2250 int lba, int nframes)
2251{
2252 int ret;
2253
2254 if (cdi->cdda_method == CDDA_OLD)
2255 return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2256
2257retry:
2258 /*
2259 * for anything else than success and io error, we need to retry
2260 */
2261 ret = cdrom_read_cdda_bpc(cdi, ubuf, lba, nframes);
2262 if (!ret || ret != -EIO)
2263 return ret;
2264
2265 /*
2266 * I've seen drives get sense 4/8/3 udma crc errors on multi
2267 * frame dma, so drop to single frame dma if we need to
2268 */
2269 if (cdi->cdda_method == CDDA_BPC_FULL && nframes > 1) {
2270 pr_info("dropping to single frame dma\n");
2271 cdi->cdda_method = CDDA_BPC_SINGLE;
2272 goto retry;
2273 }
2274
2275 /*
2276 * so we have an io error of some sort with multi frame dma. if the
2277 * condition wasn't a hardware error
2278 * problems, not for any error
2279 */
2280 if (cdi->last_sense != 0x04 && cdi->last_sense != 0x0b)
2281 return ret;
2282
2283 pr_info("dropping to old style cdda (sense=%x)\n", cdi->last_sense);
2284 cdi->cdda_method = CDDA_OLD;
2285 return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2286}
2287
2288static int cdrom_ioctl_multisession(struct cdrom_device_info *cdi,
2289 void __user *argp)
2290{
2291 struct cdrom_multisession ms_info;
2292 u8 requested_format;
2293 int ret;
2294
2295 cd_dbg(CD_DO_IOCTL, "entering CDROMMULTISESSION\n");
2296
2297 if (!(cdi->ops->capability & CDC_MULTI_SESSION))
2298 return -ENOSYS;
2299
2300 if (copy_from_user(&ms_info, argp, sizeof(ms_info)))
2301 return -EFAULT;
2302
2303 requested_format = ms_info.addr_format;
2304 if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2305 return -EINVAL;
2306 ms_info.addr_format = CDROM_LBA;
2307
2308 ret = cdi->ops->get_last_session(cdi, &ms_info);
2309 if (ret)
2310 return ret;
2311
2312 sanitize_format(&ms_info.addr, &ms_info.addr_format, requested_format);
2313
2314 if (copy_to_user(argp, &ms_info, sizeof(ms_info)))
2315 return -EFAULT;
2316
2317 cd_dbg(CD_DO_IOCTL, "CDROMMULTISESSION successful\n");
2318 return 0;
2319}
2320
2321static int cdrom_ioctl_eject(struct cdrom_device_info *cdi)
2322{
2323 cd_dbg(CD_DO_IOCTL, "entering CDROMEJECT\n");
2324
2325 if (!CDROM_CAN(CDC_OPEN_TRAY))
2326 return -ENOSYS;
2327 if (cdi->use_count != 1 || cdi->keeplocked)
2328 return -EBUSY;
2329 if (CDROM_CAN(CDC_LOCK)) {
2330 int ret = cdi->ops->lock_door(cdi, 0);
2331 if (ret)
2332 return ret;
2333 }
2334
2335 return cdi->ops->tray_move(cdi, 1);
2336}
2337
2338static int cdrom_ioctl_closetray(struct cdrom_device_info *cdi)
2339{
2340 cd_dbg(CD_DO_IOCTL, "entering CDROMCLOSETRAY\n");
2341
2342 if (!CDROM_CAN(CDC_CLOSE_TRAY))
2343 return -ENOSYS;
2344 return cdi->ops->tray_move(cdi, 0);
2345}
2346
2347static int cdrom_ioctl_eject_sw(struct cdrom_device_info *cdi,
2348 unsigned long arg)
2349{
2350 cd_dbg(CD_DO_IOCTL, "entering CDROMEJECT_SW\n");
2351
2352 if (!CDROM_CAN(CDC_OPEN_TRAY))
2353 return -ENOSYS;
2354 if (cdi->keeplocked)
2355 return -EBUSY;
2356
2357 cdi->options &= ~(CDO_AUTO_CLOSE | CDO_AUTO_EJECT);
2358 if (arg)
2359 cdi->options |= CDO_AUTO_CLOSE | CDO_AUTO_EJECT;
2360 return 0;
2361}
2362
2363static int cdrom_ioctl_media_changed(struct cdrom_device_info *cdi,
2364 unsigned long arg)
2365{
2366 struct cdrom_changer_info *info;
2367 int ret;
2368
2369 cd_dbg(CD_DO_IOCTL, "entering CDROM_MEDIA_CHANGED\n");
2370
2371 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
2372 return -ENOSYS;
2373
2374 /* cannot select disc or select current disc */
2375 if (!CDROM_CAN(CDC_SELECT_DISC) || arg == CDSL_CURRENT)
2376 return media_changed(cdi, 1);
2377
2378 if (arg >= cdi->capacity)
2379 return -EINVAL;
2380
2381 info = kmalloc(sizeof(*info), GFP_KERNEL);
2382 if (!info)
2383 return -ENOMEM;
2384
2385 ret = cdrom_read_mech_status(cdi, info);
2386 if (!ret)
2387 ret = info->slots[arg].change;
2388 kfree(info);
2389 return ret;
2390}
2391
2392static int cdrom_ioctl_set_options(struct cdrom_device_info *cdi,
2393 unsigned long arg)
2394{
2395 cd_dbg(CD_DO_IOCTL, "entering CDROM_SET_OPTIONS\n");
2396
2397 /*
2398 * Options need to be in sync with capability.
2399 * Too late for that, so we have to check each one separately.
2400 */
2401 switch (arg) {
2402 case CDO_USE_FFLAGS:
2403 case CDO_CHECK_TYPE:
2404 break;
2405 case CDO_LOCK:
2406 if (!CDROM_CAN(CDC_LOCK))
2407 return -ENOSYS;
2408 break;
2409 case 0:
2410 return cdi->options;
2411 /* default is basically CDO_[AUTO_CLOSE|AUTO_EJECT] */
2412 default:
2413 if (!CDROM_CAN(arg))
2414 return -ENOSYS;
2415 }
2416 cdi->options |= (int) arg;
2417 return cdi->options;
2418}
2419
2420static int cdrom_ioctl_clear_options(struct cdrom_device_info *cdi,
2421 unsigned long arg)
2422{
2423 cd_dbg(CD_DO_IOCTL, "entering CDROM_CLEAR_OPTIONS\n");
2424
2425 cdi->options &= ~(int) arg;
2426 return cdi->options;
2427}
2428
2429static int cdrom_ioctl_select_speed(struct cdrom_device_info *cdi,
2430 unsigned long arg)
2431{
2432 cd_dbg(CD_DO_IOCTL, "entering CDROM_SELECT_SPEED\n");
2433
2434 if (!CDROM_CAN(CDC_SELECT_SPEED))
2435 return -ENOSYS;
2436 return cdi->ops->select_speed(cdi, arg);
2437}
2438
2439static int cdrom_ioctl_select_disc(struct cdrom_device_info *cdi,
2440 unsigned long arg)
2441{
2442 cd_dbg(CD_DO_IOCTL, "entering CDROM_SELECT_DISC\n");
2443
2444 if (!CDROM_CAN(CDC_SELECT_DISC))
2445 return -ENOSYS;
2446
2447 if (arg != CDSL_CURRENT && arg != CDSL_NONE) {
2448 if (arg >= cdi->capacity)
2449 return -EINVAL;
2450 }
2451
2452 /*
2453 * ->select_disc is a hook to allow a driver-specific way of
2454 * seleting disc. However, since there is no equivalent hook for
2455 * cdrom_slot_status this may not actually be useful...
2456 */
2457 if (cdi->ops->select_disc)
2458 return cdi->ops->select_disc(cdi, arg);
2459
2460 cd_dbg(CD_CHANGER, "Using generic cdrom_select_disc()\n");
2461 return cdrom_select_disc(cdi, arg);
2462}
2463
2464static int cdrom_ioctl_reset(struct cdrom_device_info *cdi,
2465 struct block_device *bdev)
2466{
2467 cd_dbg(CD_DO_IOCTL, "entering CDROM_RESET\n");
2468
2469 if (!capable(CAP_SYS_ADMIN))
2470 return -EACCES;
2471 if (!CDROM_CAN(CDC_RESET))
2472 return -ENOSYS;
2473 invalidate_bdev(bdev);
2474 return cdi->ops->reset(cdi);
2475}
2476
2477static int cdrom_ioctl_lock_door(struct cdrom_device_info *cdi,
2478 unsigned long arg)
2479{
2480 cd_dbg(CD_DO_IOCTL, "%socking door\n", arg ? "L" : "Unl");
2481
2482 if (!CDROM_CAN(CDC_LOCK))
2483 return -EDRIVE_CANT_DO_THIS;
2484
2485 cdi->keeplocked = arg ? 1 : 0;
2486
2487 /*
2488 * Don't unlock the door on multiple opens by default, but allow
2489 * root to do so.
2490 */
2491 if (cdi->use_count != 1 && !arg && !capable(CAP_SYS_ADMIN))
2492 return -EBUSY;
2493 return cdi->ops->lock_door(cdi, arg);
2494}
2495
2496static int cdrom_ioctl_debug(struct cdrom_device_info *cdi,
2497 unsigned long arg)
2498{
2499 cd_dbg(CD_DO_IOCTL, "%sabling debug\n", arg ? "En" : "Dis");
2500
2501 if (!capable(CAP_SYS_ADMIN))
2502 return -EACCES;
2503 debug = arg ? 1 : 0;
2504 return debug;
2505}
2506
2507static int cdrom_ioctl_get_capability(struct cdrom_device_info *cdi)
2508{
2509 cd_dbg(CD_DO_IOCTL, "entering CDROM_GET_CAPABILITY\n");
2510 return (cdi->ops->capability & ~cdi->mask);
2511}
2512
2513/*
2514 * The following function is implemented, although very few audio
2515 * discs give Universal Product Code information, which should just be
2516 * the Medium Catalog Number on the box. Note, that the way the code
2517 * is written on the CD is /not/ uniform across all discs!
2518 */
2519static int cdrom_ioctl_get_mcn(struct cdrom_device_info *cdi,
2520 void __user *argp)
2521{
2522 struct cdrom_mcn mcn;
2523 int ret;
2524
2525 cd_dbg(CD_DO_IOCTL, "entering CDROM_GET_MCN\n");
2526
2527 if (!(cdi->ops->capability & CDC_MCN))
2528 return -ENOSYS;
2529 ret = cdi->ops->get_mcn(cdi, &mcn);
2530 if (ret)
2531 return ret;
2532
2533 if (copy_to_user(argp, &mcn, sizeof(mcn)))
2534 return -EFAULT;
2535 cd_dbg(CD_DO_IOCTL, "CDROM_GET_MCN successful\n");
2536 return 0;
2537}
2538
2539static int cdrom_ioctl_drive_status(struct cdrom_device_info *cdi,
2540 unsigned long arg)
2541{
2542 cd_dbg(CD_DO_IOCTL, "entering CDROM_DRIVE_STATUS\n");
2543
2544 if (!(cdi->ops->capability & CDC_DRIVE_STATUS))
2545 return -ENOSYS;
2546 if (!CDROM_CAN(CDC_SELECT_DISC) ||
2547 (arg == CDSL_CURRENT || arg == CDSL_NONE))
2548 return cdi->ops->drive_status(cdi, CDSL_CURRENT);
2549 if (arg >= cdi->capacity)
2550 return -EINVAL;
2551 return cdrom_slot_status(cdi, arg);
2552}
2553
2554/*
2555 * Ok, this is where problems start. The current interface for the
2556 * CDROM_DISC_STATUS ioctl is flawed. It makes the false assumption that
2557 * CDs are all CDS_DATA_1 or all CDS_AUDIO, etc. Unfortunately, while this
2558 * is often the case, it is also very common for CDs to have some tracks
2559 * with data, and some tracks with audio. Just because I feel like it,
2560 * I declare the following to be the best way to cope. If the CD has ANY
2561 * data tracks on it, it will be returned as a data CD. If it has any XA
2562 * tracks, I will return it as that. Now I could simplify this interface
2563 * by combining these returns with the above, but this more clearly
2564 * demonstrates the problem with the current interface. Too bad this
2565 * wasn't designed to use bitmasks... -Erik
2566 *
2567 * Well, now we have the option CDS_MIXED: a mixed-type CD.
2568 * User level programmers might feel the ioctl is not very useful.
2569 * ---david
2570 */
2571static int cdrom_ioctl_disc_status(struct cdrom_device_info *cdi)
2572{
2573 tracktype tracks;
2574
2575 cd_dbg(CD_DO_IOCTL, "entering CDROM_DISC_STATUS\n");
2576
2577 cdrom_count_tracks(cdi, &tracks);
2578 if (tracks.error)
2579 return tracks.error;
2580
2581 /* Policy mode on */
2582 if (tracks.audio > 0) {
2583 if (!tracks.data && !tracks.cdi && !tracks.xa)
2584 return CDS_AUDIO;
2585 else
2586 return CDS_MIXED;
2587 }
2588
2589 if (tracks.cdi > 0)
2590 return CDS_XA_2_2;
2591 if (tracks.xa > 0)
2592 return CDS_XA_2_1;
2593 if (tracks.data > 0)
2594 return CDS_DATA_1;
2595 /* Policy mode off */
2596
2597 cd_dbg(CD_WARNING, "This disc doesn't have any tracks I recognize!\n");
2598 return CDS_NO_INFO;
2599}
2600
2601static int cdrom_ioctl_changer_nslots(struct cdrom_device_info *cdi)
2602{
2603 cd_dbg(CD_DO_IOCTL, "entering CDROM_CHANGER_NSLOTS\n");
2604 return cdi->capacity;
2605}
2606
2607static int cdrom_ioctl_get_subchnl(struct cdrom_device_info *cdi,
2608 void __user *argp)
2609{
2610 struct cdrom_subchnl q;
2611 u8 requested, back;
2612 int ret;
2613
2614 /* cd_dbg(CD_DO_IOCTL,"entering CDROMSUBCHNL\n");*/
2615
2616 if (copy_from_user(&q, argp, sizeof(q)))
2617 return -EFAULT;
2618
2619 requested = q.cdsc_format;
2620 if (requested != CDROM_MSF && requested != CDROM_LBA)
2621 return -EINVAL;
2622 q.cdsc_format = CDROM_MSF;
2623
2624 ret = cdi->ops->audio_ioctl(cdi, CDROMSUBCHNL, &q);
2625 if (ret)
2626 return ret;
2627
2628 back = q.cdsc_format; /* local copy */
2629 sanitize_format(&q.cdsc_absaddr, &back, requested);
2630 sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
2631
2632 if (copy_to_user(argp, &q, sizeof(q)))
2633 return -EFAULT;
2634 /* cd_dbg(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
2635 return 0;
2636}
2637
2638static int cdrom_ioctl_read_tochdr(struct cdrom_device_info *cdi,
2639 void __user *argp)
2640{
2641 struct cdrom_tochdr header;
2642 int ret;
2643
2644 /* cd_dbg(CD_DO_IOCTL, "entering CDROMREADTOCHDR\n"); */
2645
2646 if (copy_from_user(&header, argp, sizeof(header)))
2647 return -EFAULT;
2648
2649 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header);
2650 if (ret)
2651 return ret;
2652
2653 if (copy_to_user(argp, &header, sizeof(header)))
2654 return -EFAULT;
2655 /* cd_dbg(CD_DO_IOCTL, "CDROMREADTOCHDR successful\n"); */
2656 return 0;
2657}
2658
2659static int cdrom_ioctl_read_tocentry(struct cdrom_device_info *cdi,
2660 void __user *argp)
2661{
2662 struct cdrom_tocentry entry;
2663 u8 requested_format;
2664 int ret;
2665
2666 /* cd_dbg(CD_DO_IOCTL, "entering CDROMREADTOCENTRY\n"); */
2667
2668 if (copy_from_user(&entry, argp, sizeof(entry)))
2669 return -EFAULT;
2670
2671 requested_format = entry.cdte_format;
2672 if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2673 return -EINVAL;
2674 /* make interface to low-level uniform */
2675 entry.cdte_format = CDROM_MSF;
2676 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry);
2677 if (ret)
2678 return ret;
2679 sanitize_format(&entry.cdte_addr, &entry.cdte_format, requested_format);
2680
2681 if (copy_to_user(argp, &entry, sizeof(entry)))
2682 return -EFAULT;
2683 /* cd_dbg(CD_DO_IOCTL, "CDROMREADTOCENTRY successful\n"); */
2684 return 0;
2685}
2686
2687static int cdrom_ioctl_play_msf(struct cdrom_device_info *cdi,
2688 void __user *argp)
2689{
2690 struct cdrom_msf msf;
2691
2692 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
2693
2694 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2695 return -ENOSYS;
2696 if (copy_from_user(&msf, argp, sizeof(msf)))
2697 return -EFAULT;
2698 return cdi->ops->audio_ioctl(cdi, CDROMPLAYMSF, &msf);
2699}
2700
2701static int cdrom_ioctl_play_trkind(struct cdrom_device_info *cdi,
2702 void __user *argp)
2703{
2704 struct cdrom_ti ti;
2705 int ret;
2706
2707 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYTRKIND\n");
2708
2709 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2710 return -ENOSYS;
2711 if (copy_from_user(&ti, argp, sizeof(ti)))
2712 return -EFAULT;
2713
2714 ret = check_for_audio_disc(cdi, cdi->ops);
2715 if (ret)
2716 return ret;
2717 return cdi->ops->audio_ioctl(cdi, CDROMPLAYTRKIND, &ti);
2718}
2719static int cdrom_ioctl_volctrl(struct cdrom_device_info *cdi,
2720 void __user *argp)
2721{
2722 struct cdrom_volctrl volume;
2723
2724 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLCTRL\n");
2725
2726 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2727 return -ENOSYS;
2728 if (copy_from_user(&volume, argp, sizeof(volume)))
2729 return -EFAULT;
2730 return cdi->ops->audio_ioctl(cdi, CDROMVOLCTRL, &volume);
2731}
2732
2733static int cdrom_ioctl_volread(struct cdrom_device_info *cdi,
2734 void __user *argp)
2735{
2736 struct cdrom_volctrl volume;
2737 int ret;
2738
2739 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLREAD\n");
2740
2741 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2742 return -ENOSYS;
2743
2744 ret = cdi->ops->audio_ioctl(cdi, CDROMVOLREAD, &volume);
2745 if (ret)
2746 return ret;
2747
2748 if (copy_to_user(argp, &volume, sizeof(volume)))
2749 return -EFAULT;
2750 return 0;
2751}
2752
2753static int cdrom_ioctl_audioctl(struct cdrom_device_info *cdi,
2754 unsigned int cmd)
2755{
2756 int ret;
2757
2758 cd_dbg(CD_DO_IOCTL, "doing audio ioctl (start/stop/pause/resume)\n");
2759
2760 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2761 return -ENOSYS;
2762 ret = check_for_audio_disc(cdi, cdi->ops);
2763 if (ret)
2764 return ret;
2765 return cdi->ops->audio_ioctl(cdi, cmd, NULL);
2766}
2767
2768/*
2769 * Required when we need to use READ_10 to issue other than 2048 block
2770 * reads
2771 */
2772static int cdrom_switch_blocksize(struct cdrom_device_info *cdi, int size)
2773{
2774 const struct cdrom_device_ops *cdo = cdi->ops;
2775 struct packet_command cgc;
2776 struct modesel_head mh;
2777
2778 memset(&mh, 0, sizeof(mh));
2779 mh.block_desc_length = 0x08;
2780 mh.block_length_med = (size >> 8) & 0xff;
2781 mh.block_length_lo = size & 0xff;
2782
2783 memset(&cgc, 0, sizeof(cgc));
2784 cgc.cmd[0] = 0x15;
2785 cgc.cmd[1] = 1 << 4;
2786 cgc.cmd[4] = 12;
2787 cgc.buflen = sizeof(mh);
2788 cgc.buffer = (char *) &mh;
2789 cgc.data_direction = CGC_DATA_WRITE;
2790 mh.block_desc_length = 0x08;
2791 mh.block_length_med = (size >> 8) & 0xff;
2792 mh.block_length_lo = size & 0xff;
2793
2794 return cdo->generic_packet(cdi, &cgc);
2795}
2796
2797static int cdrom_get_track_info(struct cdrom_device_info *cdi,
2798 __u16 track, __u8 type, track_information *ti)
2799{
2800 const struct cdrom_device_ops *cdo = cdi->ops;
2801 struct packet_command cgc;
2802 int ret, buflen;
2803
2804 init_cdrom_command(&cgc, ti, 8, CGC_DATA_READ);
2805 cgc.cmd[0] = GPCMD_READ_TRACK_RZONE_INFO;
2806 cgc.cmd[1] = type & 3;
2807 cgc.cmd[4] = (track & 0xff00) >> 8;
2808 cgc.cmd[5] = track & 0xff;
2809 cgc.cmd[8] = 8;
2810 cgc.quiet = 1;
2811
2812 ret = cdo->generic_packet(cdi, &cgc);
2813 if (ret)
2814 return ret;
2815
2816 buflen = be16_to_cpu(ti->track_information_length) +
2817 sizeof(ti->track_information_length);
2818
2819 if (buflen > sizeof(track_information))
2820 buflen = sizeof(track_information);
2821
2822 cgc.cmd[8] = cgc.buflen = buflen;
2823 ret = cdo->generic_packet(cdi, &cgc);
2824 if (ret)
2825 return ret;
2826
2827 /* return actual fill size */
2828 return buflen;
2829}
2830
2831/* return the last written block on the CD-R media. this is for the udf
2832 file system. */
2833int cdrom_get_last_written(struct cdrom_device_info *cdi, long *last_written)
2834{
2835 struct cdrom_tocentry toc;
2836 disc_information di;
2837 track_information ti;
2838 __u32 last_track;
2839 int ret = -1, ti_size;
2840
2841 if (!CDROM_CAN(CDC_GENERIC_PACKET))
2842 goto use_toc;
2843
2844 ret = cdrom_get_disc_info(cdi, &di);
2845 if (ret < (int)(offsetof(typeof(di), last_track_lsb)
2846 + sizeof(di.last_track_lsb)))
2847 goto use_toc;
2848
2849 /* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
2850 last_track = (di.last_track_msb << 8) | di.last_track_lsb;
2851 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2852 if (ti_size < (int)offsetof(typeof(ti), track_start))
2853 goto use_toc;
2854
2855 /* if this track is blank, try the previous. */
2856 if (ti.blank) {
2857 if (last_track == 1)
2858 goto use_toc;
2859 last_track--;
2860 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2861 }
2862
2863 if (ti_size < (int)(offsetof(typeof(ti), track_size)
2864 + sizeof(ti.track_size)))
2865 goto use_toc;
2866
2867 /* if last recorded field is valid, return it. */
2868 if (ti.lra_v && ti_size >= (int)(offsetof(typeof(ti), last_rec_address)
2869 + sizeof(ti.last_rec_address))) {
2870 *last_written = be32_to_cpu(ti.last_rec_address);
2871 } else {
2872 /* make it up instead */
2873 *last_written = be32_to_cpu(ti.track_start) +
2874 be32_to_cpu(ti.track_size);
2875 if (ti.free_blocks)
2876 *last_written -= (be32_to_cpu(ti.free_blocks) + 7);
2877 }
2878 return 0;
2879
2880 /* this is where we end up if the drive either can't do a
2881 GPCMD_READ_DISC_INFO or GPCMD_READ_TRACK_RZONE_INFO or if
2882 it doesn't give enough information or fails. then we return
2883 the toc contents. */
2884use_toc:
2885 toc.cdte_format = CDROM_MSF;
2886 toc.cdte_track = CDROM_LEADOUT;
2887 if ((ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &toc)))
2888 return ret;
2889 sanitize_format(&toc.cdte_addr, &toc.cdte_format, CDROM_LBA);
2890 *last_written = toc.cdte_addr.lba;
2891 return 0;
2892}
2893
2894/* return the next writable block. also for udf file system. */
2895static int cdrom_get_next_writable(struct cdrom_device_info *cdi,
2896 long *next_writable)
2897{
2898 disc_information di;
2899 track_information ti;
2900 __u16 last_track;
2901 int ret, ti_size;
2902
2903 if (!CDROM_CAN(CDC_GENERIC_PACKET))
2904 goto use_last_written;
2905
2906 ret = cdrom_get_disc_info(cdi, &di);
2907 if (ret < 0 || ret < offsetof(typeof(di), last_track_lsb)
2908 + sizeof(di.last_track_lsb))
2909 goto use_last_written;
2910
2911 /* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
2912 last_track = (di.last_track_msb << 8) | di.last_track_lsb;
2913 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2914 if (ti_size < 0 || ti_size < offsetof(typeof(ti), track_start))
2915 goto use_last_written;
2916
2917 /* if this track is blank, try the previous. */
2918 if (ti.blank) {
2919 if (last_track == 1)
2920 goto use_last_written;
2921 last_track--;
2922 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2923 if (ti_size < 0)
2924 goto use_last_written;
2925 }
2926
2927 /* if next recordable address field is valid, use it. */
2928 if (ti.nwa_v && ti_size >= offsetof(typeof(ti), next_writable)
2929 + sizeof(ti.next_writable)) {
2930 *next_writable = be32_to_cpu(ti.next_writable);
2931 return 0;
2932 }
2933
2934use_last_written:
2935 ret = cdrom_get_last_written(cdi, next_writable);
2936 if (ret) {
2937 *next_writable = 0;
2938 return ret;
2939 } else {
2940 *next_writable += 7;
2941 return 0;
2942 }
2943}
2944
2945static noinline int mmc_ioctl_cdrom_read_data(struct cdrom_device_info *cdi,
2946 void __user *arg,
2947 struct packet_command *cgc,
2948 int cmd)
2949{
2950 struct scsi_sense_hdr sshdr;
2951 struct cdrom_msf msf;
2952 int blocksize = 0, format = 0, lba;
2953 int ret;
2954
2955 switch (cmd) {
2956 case CDROMREADRAW:
2957 blocksize = CD_FRAMESIZE_RAW;
2958 break;
2959 case CDROMREADMODE1:
2960 blocksize = CD_FRAMESIZE;
2961 format = 2;
2962 break;
2963 case CDROMREADMODE2:
2964 blocksize = CD_FRAMESIZE_RAW0;
2965 break;
2966 }
2967 if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))
2968 return -EFAULT;
2969 lba = msf_to_lba(msf.cdmsf_min0, msf.cdmsf_sec0, msf.cdmsf_frame0);
2970 /* FIXME: we need upper bound checking, too!! */
2971 if (lba < 0)
2972 return -EINVAL;
2973
2974 cgc->buffer = kzalloc(blocksize, GFP_KERNEL);
2975 if (cgc->buffer == NULL)
2976 return -ENOMEM;
2977
2978 memset(&sshdr, 0, sizeof(sshdr));
2979 cgc->sshdr = &sshdr;
2980 cgc->data_direction = CGC_DATA_READ;
2981 ret = cdrom_read_block(cdi, cgc, lba, 1, format, blocksize);
2982 if (ret && sshdr.sense_key == 0x05 &&
2983 sshdr.asc == 0x20 &&
2984 sshdr.ascq == 0x00) {
2985 /*
2986 * SCSI-II devices are not required to support
2987 * READ_CD, so let's try switching block size
2988 */
2989 /* FIXME: switch back again... */
2990 ret = cdrom_switch_blocksize(cdi, blocksize);
2991 if (ret)
2992 goto out;
2993 cgc->sshdr = NULL;
2994 ret = cdrom_read_cd(cdi, cgc, lba, blocksize, 1);
2995 ret |= cdrom_switch_blocksize(cdi, blocksize);
2996 }
2997 if (!ret && copy_to_user(arg, cgc->buffer, blocksize))
2998 ret = -EFAULT;
2999out:
3000 kfree(cgc->buffer);
3001 return ret;
3002}
3003
3004static noinline int mmc_ioctl_cdrom_read_audio(struct cdrom_device_info *cdi,
3005 void __user *arg)
3006{
3007 struct cdrom_read_audio ra;
3008 int lba;
3009
3010 if (copy_from_user(&ra, (struct cdrom_read_audio __user *)arg,
3011 sizeof(ra)))
3012 return -EFAULT;
3013
3014 if (ra.addr_format == CDROM_MSF)
3015 lba = msf_to_lba(ra.addr.msf.minute,
3016 ra.addr.msf.second,
3017 ra.addr.msf.frame);
3018 else if (ra.addr_format == CDROM_LBA)
3019 lba = ra.addr.lba;
3020 else
3021 return -EINVAL;
3022
3023 /* FIXME: we need upper bound checking, too!! */
3024 if (lba < 0 || ra.nframes <= 0 || ra.nframes > CD_FRAMES)
3025 return -EINVAL;
3026
3027 return cdrom_read_cdda(cdi, ra.buf, lba, ra.nframes);
3028}
3029
3030static noinline int mmc_ioctl_cdrom_subchannel(struct cdrom_device_info *cdi,
3031 void __user *arg)
3032{
3033 int ret;
3034 struct cdrom_subchnl q;
3035 u_char requested, back;
3036 if (copy_from_user(&q, (struct cdrom_subchnl __user *)arg, sizeof(q)))
3037 return -EFAULT;
3038 requested = q.cdsc_format;
3039 if (!((requested == CDROM_MSF) ||
3040 (requested == CDROM_LBA)))
3041 return -EINVAL;
3042
3043 ret = cdrom_read_subchannel(cdi, &q, 0);
3044 if (ret)
3045 return ret;
3046 back = q.cdsc_format; /* local copy */
3047 sanitize_format(&q.cdsc_absaddr, &back, requested);
3048 sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
3049 if (copy_to_user((struct cdrom_subchnl __user *)arg, &q, sizeof(q)))
3050 return -EFAULT;
3051 /* cd_dbg(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
3052 return 0;
3053}
3054
3055static noinline int mmc_ioctl_cdrom_play_msf(struct cdrom_device_info *cdi,
3056 void __user *arg,
3057 struct packet_command *cgc)
3058{
3059 const struct cdrom_device_ops *cdo = cdi->ops;
3060 struct cdrom_msf msf;
3061 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
3062 if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))
3063 return -EFAULT;
3064 cgc->cmd[0] = GPCMD_PLAY_AUDIO_MSF;
3065 cgc->cmd[3] = msf.cdmsf_min0;
3066 cgc->cmd[4] = msf.cdmsf_sec0;
3067 cgc->cmd[5] = msf.cdmsf_frame0;
3068 cgc->cmd[6] = msf.cdmsf_min1;
3069 cgc->cmd[7] = msf.cdmsf_sec1;
3070 cgc->cmd[8] = msf.cdmsf_frame1;
3071 cgc->data_direction = CGC_DATA_NONE;
3072 return cdo->generic_packet(cdi, cgc);
3073}
3074
3075static noinline int mmc_ioctl_cdrom_play_blk(struct cdrom_device_info *cdi,
3076 void __user *arg,
3077 struct packet_command *cgc)
3078{
3079 const struct cdrom_device_ops *cdo = cdi->ops;
3080 struct cdrom_blk blk;
3081 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYBLK\n");
3082 if (copy_from_user(&blk, (struct cdrom_blk __user *)arg, sizeof(blk)))
3083 return -EFAULT;
3084 cgc->cmd[0] = GPCMD_PLAY_AUDIO_10;
3085 cgc->cmd[2] = (blk.from >> 24) & 0xff;
3086 cgc->cmd[3] = (blk.from >> 16) & 0xff;
3087 cgc->cmd[4] = (blk.from >> 8) & 0xff;
3088 cgc->cmd[5] = blk.from & 0xff;
3089 cgc->cmd[7] = (blk.len >> 8) & 0xff;
3090 cgc->cmd[8] = blk.len & 0xff;
3091 cgc->data_direction = CGC_DATA_NONE;
3092 return cdo->generic_packet(cdi, cgc);
3093}
3094
3095static noinline int mmc_ioctl_cdrom_volume(struct cdrom_device_info *cdi,
3096 void __user *arg,
3097 struct packet_command *cgc,
3098 unsigned int cmd)
3099{
3100 struct cdrom_volctrl volctrl;
3101 unsigned char buffer[32];
3102 char mask[sizeof(buffer)];
3103 unsigned short offset;
3104 int ret;
3105
3106 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLUME\n");
3107
3108 if (copy_from_user(&volctrl, (struct cdrom_volctrl __user *)arg,
3109 sizeof(volctrl)))
3110 return -EFAULT;
3111
3112 cgc->buffer = buffer;
3113 cgc->buflen = 24;
3114 ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 0);
3115 if (ret)
3116 return ret;
3117
3118 /* originally the code depended on buffer[1] to determine
3119 how much data is available for transfer. buffer[1] is
3120 unfortunately ambigious and the only reliable way seem
3121 to be to simply skip over the block descriptor... */
3122 offset = 8 + be16_to_cpu(*(__be16 *)(buffer + 6));
3123
3124 if (offset + 16 > sizeof(buffer))
3125 return -E2BIG;
3126
3127 if (offset + 16 > cgc->buflen) {
3128 cgc->buflen = offset + 16;
3129 ret = cdrom_mode_sense(cdi, cgc,
3130 GPMODE_AUDIO_CTL_PAGE, 0);
3131 if (ret)
3132 return ret;
3133 }
3134
3135 /* sanity check */
3136 if ((buffer[offset] & 0x3f) != GPMODE_AUDIO_CTL_PAGE ||
3137 buffer[offset + 1] < 14)
3138 return -EINVAL;
3139
3140 /* now we have the current volume settings. if it was only
3141 a CDROMVOLREAD, return these values */
3142 if (cmd == CDROMVOLREAD) {
3143 volctrl.channel0 = buffer[offset+9];
3144 volctrl.channel1 = buffer[offset+11];
3145 volctrl.channel2 = buffer[offset+13];
3146 volctrl.channel3 = buffer[offset+15];
3147 if (copy_to_user((struct cdrom_volctrl __user *)arg, &volctrl,
3148 sizeof(volctrl)))
3149 return -EFAULT;
3150 return 0;
3151 }
3152
3153 /* get the volume mask */
3154 cgc->buffer = mask;
3155 ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 1);
3156 if (ret)
3157 return ret;
3158
3159 buffer[offset + 9] = volctrl.channel0 & mask[offset + 9];
3160 buffer[offset + 11] = volctrl.channel1 & mask[offset + 11];
3161 buffer[offset + 13] = volctrl.channel2 & mask[offset + 13];
3162 buffer[offset + 15] = volctrl.channel3 & mask[offset + 15];
3163
3164 /* set volume */
3165 cgc->buffer = buffer + offset - 8;
3166 memset(cgc->buffer, 0, 8);
3167 return cdrom_mode_select(cdi, cgc);
3168}
3169
3170static noinline int mmc_ioctl_cdrom_start_stop(struct cdrom_device_info *cdi,
3171 struct packet_command *cgc,
3172 int cmd)
3173{
3174 const struct cdrom_device_ops *cdo = cdi->ops;
3175 cd_dbg(CD_DO_IOCTL, "entering CDROMSTART/CDROMSTOP\n");
3176 cgc->cmd[0] = GPCMD_START_STOP_UNIT;
3177 cgc->cmd[1] = 1;
3178 cgc->cmd[4] = (cmd == CDROMSTART) ? 1 : 0;
3179 cgc->data_direction = CGC_DATA_NONE;
3180 return cdo->generic_packet(cdi, cgc);
3181}
3182
3183static noinline int mmc_ioctl_cdrom_pause_resume(struct cdrom_device_info *cdi,
3184 struct packet_command *cgc,
3185 int cmd)
3186{
3187 const struct cdrom_device_ops *cdo = cdi->ops;
3188 cd_dbg(CD_DO_IOCTL, "entering CDROMPAUSE/CDROMRESUME\n");
3189 cgc->cmd[0] = GPCMD_PAUSE_RESUME;
3190 cgc->cmd[8] = (cmd == CDROMRESUME) ? 1 : 0;
3191 cgc->data_direction = CGC_DATA_NONE;
3192 return cdo->generic_packet(cdi, cgc);
3193}
3194
3195static noinline int mmc_ioctl_dvd_read_struct(struct cdrom_device_info *cdi,
3196 void __user *arg,
3197 struct packet_command *cgc)
3198{
3199 int ret;
3200 dvd_struct *s;
3201 int size = sizeof(dvd_struct);
3202
3203 if (!CDROM_CAN(CDC_DVD))
3204 return -ENOSYS;
3205
3206 s = memdup_user(arg, size);
3207 if (IS_ERR(s))
3208 return PTR_ERR(s);
3209
3210 cd_dbg(CD_DO_IOCTL, "entering DVD_READ_STRUCT\n");
3211
3212 ret = dvd_read_struct(cdi, s, cgc);
3213 if (ret)
3214 goto out;
3215
3216 if (copy_to_user(arg, s, size))
3217 ret = -EFAULT;
3218out:
3219 kfree(s);
3220 return ret;
3221}
3222
3223static noinline int mmc_ioctl_dvd_auth(struct cdrom_device_info *cdi,
3224 void __user *arg)
3225{
3226 int ret;
3227 dvd_authinfo ai;
3228 if (!CDROM_CAN(CDC_DVD))
3229 return -ENOSYS;
3230 cd_dbg(CD_DO_IOCTL, "entering DVD_AUTH\n");
3231 if (copy_from_user(&ai, (dvd_authinfo __user *)arg, sizeof(ai)))
3232 return -EFAULT;
3233 ret = dvd_do_auth(cdi, &ai);
3234 if (ret)
3235 return ret;
3236 if (copy_to_user((dvd_authinfo __user *)arg, &ai, sizeof(ai)))
3237 return -EFAULT;
3238 return 0;
3239}
3240
3241static noinline int mmc_ioctl_cdrom_next_writable(struct cdrom_device_info *cdi,
3242 void __user *arg)
3243{
3244 int ret;
3245 long next = 0;
3246 cd_dbg(CD_DO_IOCTL, "entering CDROM_NEXT_WRITABLE\n");
3247 ret = cdrom_get_next_writable(cdi, &next);
3248 if (ret)
3249 return ret;
3250 if (copy_to_user((long __user *)arg, &next, sizeof(next)))
3251 return -EFAULT;
3252 return 0;
3253}
3254
3255static noinline int mmc_ioctl_cdrom_last_written(struct cdrom_device_info *cdi,
3256 void __user *arg)
3257{
3258 int ret;
3259 long last = 0;
3260 cd_dbg(CD_DO_IOCTL, "entering CDROM_LAST_WRITTEN\n");
3261 ret = cdrom_get_last_written(cdi, &last);
3262 if (ret)
3263 return ret;
3264 if (copy_to_user((long __user *)arg, &last, sizeof(last)))
3265 return -EFAULT;
3266 return 0;
3267}
3268
3269static int mmc_ioctl(struct cdrom_device_info *cdi, unsigned int cmd,
3270 unsigned long arg)
3271{
3272 struct packet_command cgc;
3273 void __user *userptr = (void __user *)arg;
3274
3275 memset(&cgc, 0, sizeof(cgc));
3276
3277 /* build a unified command and queue it through
3278 cdo->generic_packet() */
3279 switch (cmd) {
3280 case CDROMREADRAW:
3281 case CDROMREADMODE1:
3282 case CDROMREADMODE2:
3283 return mmc_ioctl_cdrom_read_data(cdi, userptr, &cgc, cmd);
3284 case CDROMREADAUDIO:
3285 return mmc_ioctl_cdrom_read_audio(cdi, userptr);
3286 case CDROMSUBCHNL:
3287 return mmc_ioctl_cdrom_subchannel(cdi, userptr);
3288 case CDROMPLAYMSF:
3289 return mmc_ioctl_cdrom_play_msf(cdi, userptr, &cgc);
3290 case CDROMPLAYBLK:
3291 return mmc_ioctl_cdrom_play_blk(cdi, userptr, &cgc);
3292 case CDROMVOLCTRL:
3293 case CDROMVOLREAD:
3294 return mmc_ioctl_cdrom_volume(cdi, userptr, &cgc, cmd);