File Index
Files and directories
Sign in
FILE

shuttle_usbat.c

File preview with syntax highlighting.

linux-6.19.14/drivers/usb/storage/shuttle_usbat.c C
   1// SPDX-License-Identifier: GPL-2.0+
   2/*
   3 * Driver for SCM Microsystems (a.k.a. Shuttle) USB-ATAPI cable
   4 *
   5 * Current development and maintenance by:
   6 *   (c) 2000, 2001 Robert Baruch (autophile@starband.net)
   7 *   (c) 2004, 2005 Daniel Drake <dsd@gentoo.org>
   8 *
   9 * Developed with the assistance of:
  10 *   (c) 2002 Alan Stern <stern@rowland.org>
  11 *
  12 * Flash support based on earlier work by:
  13 *   (c) 2002 Thomas Kreiling <usbdev@sm04.de>
  14 *
  15 * Many originally ATAPI devices were slightly modified to meet the USB
  16 * market by using some kind of translation from ATAPI to USB on the host,
  17 * and the peripheral would translate from USB back to ATAPI.
  18 *
  19 * SCM Microsystems (www.scmmicro.com) makes a device, sold to OEM's only, 
  20 * which does the USB-to-ATAPI conversion.  By obtaining the data sheet on
  21 * their device under nondisclosure agreement, I have been able to write
  22 * this driver for Linux.
  23 *
  24 * The chip used in the device can also be used for EPP and ISA translation
  25 * as well. This driver is only guaranteed to work with the ATAPI
  26 * translation.
  27 *
  28 * See the Kconfig help text for a list of devices known to be supported by
  29 * this driver.
  30 */
  31
  32#include <linux/errno.h>
  33#include <linux/module.h>
  34#include <linux/slab.h>
  35#include <linux/string_choices.h>
  36#include <linux/cdrom.h>
  37
  38#include <scsi/scsi.h>
  39#include <scsi/scsi_cmnd.h>
  40
  41#include "usb.h"
  42#include "transport.h"
  43#include "protocol.h"
  44#include "debug.h"
  45#include "scsiglue.h"
  46
  47#define DRV_NAME "ums-usbat"
  48
  49MODULE_DESCRIPTION("Driver for SCM Microsystems (a.k.a. Shuttle) USB-ATAPI cable");
  50MODULE_AUTHOR("Daniel Drake <dsd@gentoo.org>, Robert Baruch <autophile@starband.net>");
  51MODULE_LICENSE("GPL");
  52MODULE_IMPORT_NS("USB_STORAGE");
  53
  54/* Supported device types */
  55#define USBAT_DEV_HP8200	0x01
  56#define USBAT_DEV_FLASH		0x02
  57
  58#define USBAT_EPP_PORT		0x10
  59#define USBAT_EPP_REGISTER	0x30
  60#define USBAT_ATA		0x40
  61#define USBAT_ISA		0x50
  62
  63/* Commands (need to be logically OR'd with an access type */
  64#define USBAT_CMD_READ_REG		0x00
  65#define USBAT_CMD_WRITE_REG		0x01
  66#define USBAT_CMD_READ_BLOCK	0x02
  67#define USBAT_CMD_WRITE_BLOCK	0x03
  68#define USBAT_CMD_COND_READ_BLOCK	0x04
  69#define USBAT_CMD_COND_WRITE_BLOCK	0x05
  70#define USBAT_CMD_WRITE_REGS	0x07
  71
  72/* Commands (these don't need an access type) */
  73#define USBAT_CMD_EXEC_CMD	0x80
  74#define USBAT_CMD_SET_FEAT	0x81
  75#define USBAT_CMD_UIO		0x82
  76
  77/* Methods of accessing UIO register */
  78#define USBAT_UIO_READ	1
  79#define USBAT_UIO_WRITE	0
  80
  81/* Qualifier bits */
  82#define USBAT_QUAL_FCQ	0x20	/* full compare */
  83#define USBAT_QUAL_ALQ	0x10	/* auto load subcount */
  84
  85/* USBAT Flash Media status types */
  86#define USBAT_FLASH_MEDIA_NONE	0
  87#define USBAT_FLASH_MEDIA_CF	1
  88
  89/* USBAT Flash Media change types */
  90#define USBAT_FLASH_MEDIA_SAME	0
  91#define USBAT_FLASH_MEDIA_CHANGED	1
  92
  93/* USBAT ATA registers */
  94#define USBAT_ATA_DATA      0x10  /* read/write data (R/W) */
  95#define USBAT_ATA_FEATURES  0x11  /* set features (W) */
  96#define USBAT_ATA_ERROR     0x11  /* error (R) */
  97#define USBAT_ATA_SECCNT    0x12  /* sector count (R/W) */
  98#define USBAT_ATA_SECNUM    0x13  /* sector number (R/W) */
  99#define USBAT_ATA_LBA_ME    0x14  /* cylinder low (R/W) */
 100#define USBAT_ATA_LBA_HI    0x15  /* cylinder high (R/W) */
 101#define USBAT_ATA_DEVICE    0x16  /* head/device selection (R/W) */
 102#define USBAT_ATA_STATUS    0x17  /* device status (R) */
 103#define USBAT_ATA_CMD       0x17  /* device command (W) */
 104#define USBAT_ATA_ALTSTATUS 0x0E  /* status (no clear IRQ) (R) */
 105
 106/* USBAT User I/O Data registers */
 107#define USBAT_UIO_EPAD		0x80 /* Enable Peripheral Control Signals */
 108#define USBAT_UIO_CDT		0x40 /* Card Detect (Read Only) */
 109				     /* CDT = ACKD & !UI1 & !UI0 */
 110#define USBAT_UIO_1		0x20 /* I/O 1 */
 111#define USBAT_UIO_0		0x10 /* I/O 0 */
 112#define USBAT_UIO_EPP_ATA	0x08 /* 1=EPP mode, 0=ATA mode */
 113#define USBAT_UIO_UI1		0x04 /* Input 1 */
 114#define USBAT_UIO_UI0		0x02 /* Input 0 */
 115#define USBAT_UIO_INTR_ACK	0x01 /* Interrupt (ATA/ISA)/Acknowledge (EPP) */
 116
 117/* USBAT User I/O Enable registers */
 118#define USBAT_UIO_DRVRST	0x80 /* Reset Peripheral */
 119#define USBAT_UIO_ACKD		0x40 /* Enable Card Detect */
 120#define USBAT_UIO_OE1		0x20 /* I/O 1 set=output/clr=input */
 121				     /* If ACKD=1, set OE1 to 1 also. */
 122#define USBAT_UIO_OE0		0x10 /* I/O 0 set=output/clr=input */
 123#define USBAT_UIO_ADPRST	0x01 /* Reset SCM chip */
 124
 125/* USBAT Features */
 126#define USBAT_FEAT_ETEN	0x80	/* External trigger enable */
 127#define USBAT_FEAT_U1	0x08
 128#define USBAT_FEAT_U0	0x04
 129#define USBAT_FEAT_ET1	0x02
 130#define USBAT_FEAT_ET2	0x01
 131
 132struct usbat_info {
 133	int devicetype;
 134
 135	/* Used for Flash readers only */
 136	unsigned long sectors;     /* total sector count */
 137	unsigned long ssize;       /* sector size in bytes */
 138
 139	unsigned char sense_key;
 140	unsigned long sense_asc;   /* additional sense code */
 141	unsigned long sense_ascq;  /* additional sense code qualifier */
 142};
 143
 144#define short_pack(LSB,MSB) ( ((u16)(LSB)) | ( ((u16)(MSB))<<8 ) )
 145#define LSB_of(s) ((s)&0xFF)
 146#define MSB_of(s) ((s)>>8)
 147
 148static int transferred = 0;
 149
 150static int usbat_flash_transport(struct scsi_cmnd * srb, struct us_data *us);
 151static int usbat_hp8200e_transport(struct scsi_cmnd *srb, struct us_data *us);
 152
 153static int init_usbat_cd(struct us_data *us);
 154static int init_usbat_flash(struct us_data *us);
 155
 156
 157/*
 158 * The table of devices
 159 */
 160#define UNUSUAL_DEV(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax, \
 161		    vendorName, productName, useProtocol, useTransport, \
 162		    initFunction, flags) \
 163{ USB_DEVICE_VER(id_vendor, id_product, bcdDeviceMin, bcdDeviceMax), \
 164  .driver_info = (flags) }
 165
 166static const struct usb_device_id usbat_usb_ids[] = {
 167#	include "unusual_usbat.h"
 168	{ }		/* Terminating entry */
 169};
 170MODULE_DEVICE_TABLE(usb, usbat_usb_ids);
 171
 172#undef UNUSUAL_DEV
 173
 174/*
 175 * The flags table
 176 */
 177#define UNUSUAL_DEV(idVendor, idProduct, bcdDeviceMin, bcdDeviceMax, \
 178		    vendor_name, product_name, use_protocol, use_transport, \
 179		    init_function, Flags) \
 180{ \
 181	.vendorName = vendor_name,	\
 182	.productName = product_name,	\
 183	.useProtocol = use_protocol,	\
 184	.useTransport = use_transport,	\
 185	.initFunction = init_function,	\
 186}
 187
 188static const struct us_unusual_dev usbat_unusual_dev_list[] = {
 189#	include "unusual_usbat.h"
 190	{ }		/* Terminating entry */
 191};
 192
 193#undef UNUSUAL_DEV
 194
 195/*
 196 * Convenience function to produce an ATA read/write sectors command
 197 * Use cmd=0x20 for read, cmd=0x30 for write
 198 */
 199static void usbat_pack_ata_sector_cmd(unsigned char *buf,
 200					unsigned char thistime,
 201					u32 sector, unsigned char cmd)
 202{
 203	buf[0] = 0;
 204	buf[1] = thistime;
 205	buf[2] = sector & 0xFF;
 206	buf[3] = (sector >>  8) & 0xFF;
 207	buf[4] = (sector >> 16) & 0xFF;
 208	buf[5] = 0xE0 | ((sector >> 24) & 0x0F);
 209	buf[6] = cmd;
 210}
 211
 212/*
 213 * Convenience function to get the device type (flash or hp8200)
 214 */
 215static int usbat_get_device_type(struct us_data *us)
 216{
 217	return ((struct usbat_info*)us->extra)->devicetype;
 218}
 219
 220/*
 221 * Read a register from the device
 222 */
 223static int usbat_read(struct us_data *us,
 224		      unsigned char access,
 225		      unsigned char reg,
 226		      unsigned char *content)
 227{
 228	return usb_stor_ctrl_transfer(us,
 229		us->recv_ctrl_pipe,
 230		access | USBAT_CMD_READ_REG,
 231		0xC0,
 232		(u16)reg,
 233		0,
 234		content,
 235		1);
 236}
 237
 238/*
 239 * Write to a register on the device
 240 */
 241static int usbat_write(struct us_data *us,
 242		       unsigned char access,
 243		       unsigned char reg,
 244		       unsigned char content)
 245{
 246	return usb_stor_ctrl_transfer(us,
 247		us->send_ctrl_pipe,
 248		access | USBAT_CMD_WRITE_REG,
 249		0x40,
 250		short_pack(reg, content),
 251		0,
 252		NULL,
 253		0);
 254}
 255
 256/*
 257 * Convenience function to perform a bulk read
 258 */
 259static int usbat_bulk_read(struct us_data *us,
 260			   void* buf,
 261			   unsigned int len,
 262			   int use_sg)
 263{
 264	if (len == 0)
 265		return USB_STOR_XFER_GOOD;
 266
 267	usb_stor_dbg(us, "len = %d\n", len);
 268	return usb_stor_bulk_transfer_sg(us, us->recv_bulk_pipe, buf, len, use_sg, NULL);
 269}
 270
 271/*
 272 * Convenience function to perform a bulk write
 273 */
 274static int usbat_bulk_write(struct us_data *us,
 275			    void* buf,
 276			    unsigned int len,
 277			    int use_sg)
 278{
 279	if (len == 0)
 280		return USB_STOR_XFER_GOOD;
 281
 282	usb_stor_dbg(us, "len = %d\n", len);
 283	return usb_stor_bulk_transfer_sg(us, us->send_bulk_pipe, buf, len, use_sg, NULL);
 284}
 285
 286/*
 287 * Some USBAT-specific commands can only be executed over a command transport
 288 * This transport allows one (len=8) or two (len=16) vendor-specific commands
 289 * to be executed.
 290 */
 291static int usbat_execute_command(struct us_data *us,
 292								 unsigned char *commands,
 293								 unsigned int len)
 294{
 295	return usb_stor_ctrl_transfer(us, us->send_ctrl_pipe,
 296								  USBAT_CMD_EXEC_CMD, 0x40, 0, 0,
 297								  commands, len);
 298}
 299
 300/*
 301 * Read the status register
 302 */
 303static int usbat_get_status(struct us_data *us, unsigned char *status)
 304{
 305	int rc;
 306	rc = usbat_read(us, USBAT_ATA, USBAT_ATA_STATUS, status);
 307
 308	usb_stor_dbg(us, "0x%02X\n", *status);
 309	return rc;
 310}
 311
 312/*
 313 * Check the device status
 314 */
 315static int usbat_check_status(struct us_data *us)
 316{
 317	unsigned char *reply = us->iobuf;
 318	int rc;
 319
 320	rc = usbat_get_status(us, reply);
 321	if (rc != USB_STOR_XFER_GOOD)
 322		return USB_STOR_TRANSPORT_FAILED;
 323
 324	/* error/check condition (0x51 is ok) */
 325	if (*reply & 0x01 && *reply != 0x51)
 326		return USB_STOR_TRANSPORT_FAILED;
 327
 328	/* device fault */
 329	if (*reply & 0x20)
 330		return USB_STOR_TRANSPORT_FAILED;
 331
 332	return USB_STOR_TRANSPORT_GOOD;
 333}
 334
 335/*
 336 * Stores critical information in internal registers in preparation for the execution
 337 * of a conditional usbat_read_blocks or usbat_write_blocks call.
 338 */
 339static int usbat_set_shuttle_features(struct us_data *us,
 340				      unsigned char external_trigger,
 341				      unsigned char epp_control,
 342				      unsigned char mask_byte,
 343				      unsigned char test_pattern,
 344				      unsigned char subcountH,
 345				      unsigned char subcountL)
 346{
 347	unsigned char *command = us->iobuf;
 348
 349	command[0] = 0x40;
 350	command[1] = USBAT_CMD_SET_FEAT;
 351
 352	/*
 353	 * The only bit relevant to ATA access is bit 6
 354	 * which defines 8 bit data access (set) or 16 bit (unset)
 355	 */
 356	command[2] = epp_control;
 357
 358	/*
 359	 * If FCQ is set in the qualifier (defined in R/W cmd), then bits U0, U1,
 360	 * ET1 and ET2 define an external event to be checked for on event of a
 361	 * _read_blocks or _write_blocks operation. The read/write will not take
 362	 * place unless the defined trigger signal is active.
 363	 */
 364	command[3] = external_trigger;
 365
 366	/*
 367	 * The resultant byte of the mask operation (see mask_byte) is compared for
 368	 * equivalence with this test pattern. If equal, the read/write will take
 369	 * place.
 370	 */
 371	command[4] = test_pattern;
 372
 373	/*
 374	 * This value is logically ANDed with the status register field specified
 375	 * in the read/write command.
 376	 */
 377	command[5] = mask_byte;
 378
 379	/*
 380	 * If ALQ is set in the qualifier, this field contains the address of the
 381	 * registers where the byte count should be read for transferring the data.
 382	 * If ALQ is not set, then this field contains the number of bytes to be
 383	 * transferred.
 384	 */
 385	command[6] = subcountL;
 386	command[7] = subcountH;
 387
 388	return usbat_execute_command(us, command, 8);
 389}
 390
 391/*
 392 * Block, waiting for an ATA device to become not busy or to report
 393 * an error condition.
 394 */
 395static int usbat_wait_not_busy(struct us_data *us, int minutes)
 396{
 397	int i;
 398	int result;
 399	unsigned char *status = us->iobuf;
 400
 401	/*
 402	 * Synchronizing cache on a CDR could take a heck of a long time,
 403	 * but probably not more than 10 minutes or so. On the other hand,
 404	 * doing a full blank on a CDRW at speed 1 will take about 75
 405	 * minutes!
 406	 */
 407
 408	for (i=0; i<1200+minutes*60; i++) {
 409
 410 		result = usbat_get_status(us, status);
 411
 412		if (result!=USB_STOR_XFER_GOOD)
 413			return USB_STOR_TRANSPORT_ERROR;
 414		if (*status & 0x01) { /* check condition */
 415			result = usbat_read(us, USBAT_ATA, 0x10, status);
 416			return USB_STOR_TRANSPORT_FAILED;
 417		}
 418		if (*status & 0x20) /* device fault */
 419			return USB_STOR_TRANSPORT_FAILED;
 420
 421		if ((*status & 0x80)==0x00) { /* not busy */
 422			usb_stor_dbg(us, "Waited not busy for %d steps\n", i);
 423			return USB_STOR_TRANSPORT_GOOD;
 424		}
 425
 426		if (i<500)
 427			msleep(10); /* 5 seconds */
 428		else if (i<700)
 429			msleep(50); /* 10 seconds */
 430		else if (i<1200)
 431			msleep(100); /* 50 seconds */
 432		else
 433			msleep(1000); /* X minutes */
 434	}
 435
 436	usb_stor_dbg(us, "Waited not busy for %d minutes, timing out\n",
 437		     minutes);
 438	return USB_STOR_TRANSPORT_FAILED;
 439}
 440
 441/*
 442 * Read block data from the data register
 443 */
 444static int usbat_read_block(struct us_data *us,
 445			    void* buf,
 446			    unsigned short len,
 447			    int use_sg)
 448{
 449	int result;
 450	unsigned char *command = us->iobuf;
 451
 452	if (!len)
 453		return USB_STOR_TRANSPORT_GOOD;
 454
 455	command[0] = 0xC0;
 456	command[1] = USBAT_ATA | USBAT_CMD_READ_BLOCK;
 457	command[2] = USBAT_ATA_DATA;
 458	command[3] = 0;
 459	command[4] = 0;
 460	command[5] = 0;
 461	command[6] = LSB_of(len);
 462	command[7] = MSB_of(len);
 463
 464	result = usbat_execute_command(us, command, 8);
 465	if (result != USB_STOR_XFER_GOOD)
 466		return USB_STOR_TRANSPORT_ERROR;
 467
 468	result = usbat_bulk_read(us, buf, len, use_sg);
 469	return (result == USB_STOR_XFER_GOOD ?
 470			USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_ERROR);
 471}
 472
 473/*
 474 * Write block data via the data register
 475 */
 476static int usbat_write_block(struct us_data *us,
 477			     unsigned char access,
 478			     void* buf,
 479			     unsigned short len,
 480			     int minutes,
 481			     int use_sg)
 482{
 483	int result;
 484	unsigned char *command = us->iobuf;
 485
 486	if (!len)
 487		return USB_STOR_TRANSPORT_GOOD;
 488
 489	command[0] = 0x40;
 490	command[1] = access | USBAT_CMD_WRITE_BLOCK;
 491	command[2] = USBAT_ATA_DATA;
 492	command[3] = 0;
 493	command[4] = 0;
 494	command[5] = 0;
 495	command[6] = LSB_of(len);
 496	command[7] = MSB_of(len);
 497
 498	result = usbat_execute_command(us, command, 8);
 499
 500	if (result != USB_STOR_XFER_GOOD)
 501		return USB_STOR_TRANSPORT_ERROR;
 502
 503	result = usbat_bulk_write(us, buf, len, use_sg);
 504	if (result != USB_STOR_XFER_GOOD)
 505		return USB_STOR_TRANSPORT_ERROR;
 506
 507	return usbat_wait_not_busy(us, minutes);
 508}
 509
 510/*
 511 * Process read and write requests
 512 */
 513static int usbat_hp8200e_rw_block_test(struct us_data *us,
 514				       unsigned char access,
 515				       unsigned char *registers,
 516				       unsigned char *data_out,
 517				       unsigned short num_registers,
 518				       unsigned char data_reg,
 519				       unsigned char status_reg,
 520				       unsigned char timeout,
 521				       unsigned char qualifier,
 522				       int direction,
 523				       void *buf,
 524				       unsigned short len,
 525				       int use_sg,
 526				       int minutes)
 527{
 528	int result;
 529	unsigned int pipe = (direction == DMA_FROM_DEVICE) ?
 530			us->recv_bulk_pipe : us->send_bulk_pipe;
 531
 532	unsigned char *command = us->iobuf;
 533	int i, j;
 534	int cmdlen;
 535	unsigned char *data = us->iobuf;
 536	unsigned char *status = us->iobuf;
 537
 538	BUG_ON(num_registers > US_IOBUF_SIZE/2);
 539
 540	for (i=0; i<20; i++) {
 541
 542		/*
 543		 * The first time we send the full command, which consists
 544		 * of downloading the SCSI command followed by downloading
 545		 * the data via a write-and-test.  Any other time we only
 546		 * send the command to download the data -- the SCSI command
 547		 * is still 'active' in some sense in the device.
 548		 * 
 549		 * We're only going to try sending the data 10 times. After
 550		 * that, we just return a failure.
 551		 */
 552
 553		if (i==0) {
 554			cmdlen = 16;
 555			/*
 556			 * Write to multiple registers
 557			 * Not really sure the 0x07, 0x17, 0xfc, 0xe7 is
 558			 * necessary here, but that's what came out of the
 559			 * trace every single time.
 560			 */
 561			command[0] = 0x40;
 562			command[1] = access | USBAT_CMD_WRITE_REGS;
 563			command[2] = 0x07;
 564			command[3] = 0x17;
 565			command[4] = 0xFC;
 566			command[5] = 0xE7;
 567			command[6] = LSB_of(num_registers*2);
 568			command[7] = MSB_of(num_registers*2);
 569		} else
 570			cmdlen = 8;
 571
 572		/* Conditionally read or write blocks */
 573		command[cmdlen-8] = (direction==DMA_TO_DEVICE ? 0x40 : 0xC0);
 574		command[cmdlen-7] = access |
 575				(direction==DMA_TO_DEVICE ?
 576				 USBAT_CMD_COND_WRITE_BLOCK : USBAT_CMD_COND_READ_BLOCK);
 577		command[cmdlen-6] = data_reg;
 578		command[cmdlen-5] = status_reg;
 579		command[cmdlen-4] = timeout;
 580		command[cmdlen-3] = qualifier;
 581		command[cmdlen-2] = LSB_of(len);
 582		command[cmdlen-1] = MSB_of(len);
 583
 584		result = usbat_execute_command(us, command, cmdlen);
 585
 586		if (result != USB_STOR_XFER_GOOD)
 587			return USB_STOR_TRANSPORT_ERROR;
 588
 589		if (i==0) {
 590
 591			for (j=0; j<num_registers; j++) {
 592				data[j<<1] = registers[j];
 593				data[1+(j<<1)] = data_out[j];
 594			}
 595
 596			result = usbat_bulk_write(us, data, num_registers*2, 0);
 597			if (result != USB_STOR_XFER_GOOD)
 598				return USB_STOR_TRANSPORT_ERROR;
 599
 600		}
 601
 602		result = usb_stor_bulk_transfer_sg(us,
 603			pipe, buf, len, use_sg, NULL);
 604
 605		/*
 606		 * If we get a stall on the bulk download, we'll retry
 607		 * the bulk download -- but not the SCSI command because
 608		 * in some sense the SCSI command is still 'active' and
 609		 * waiting for the data. Don't ask me why this should be;
 610		 * I'm only following what the Windoze driver did.
 611		 *
 612		 * Note that a stall for the test-and-read/write command means
 613		 * that the test failed. In this case we're testing to make
 614		 * sure that the device is error-free
 615		 * (i.e. bit 0 -- CHK -- of status is 0). The most likely
 616		 * hypothesis is that the USBAT chip somehow knows what
 617		 * the device will accept, but doesn't give the device any
 618		 * data until all data is received. Thus, the device would
 619		 * still be waiting for the first byte of data if a stall
 620		 * occurs, even if the stall implies that some data was
 621		 * transferred.
 622		 */
 623
 624		if (result == USB_STOR_XFER_SHORT ||
 625				result == USB_STOR_XFER_STALLED) {
 626
 627			/*
 628			 * If we're reading and we stalled, then clear
 629			 * the bulk output pipe only the first time.
 630			 */
 631
 632			if (direction==DMA_FROM_DEVICE && i==0) {
 633				if (usb_stor_clear_halt(us,
 634						us->send_bulk_pipe) < 0)
 635					return USB_STOR_TRANSPORT_ERROR;
 636			}
 637
 638			/*
 639			 * Read status: is the device angry, or just busy?
 640			 */
 641
 642 			result = usbat_read(us, USBAT_ATA, 
 643				direction==DMA_TO_DEVICE ?
 644					USBAT_ATA_STATUS : USBAT_ATA_ALTSTATUS,
 645				status);
 646
 647			if (result!=USB_STOR_XFER_GOOD)
 648				return USB_STOR_TRANSPORT_ERROR;
 649			if (*status & 0x01) /* check condition */
 650				return USB_STOR_TRANSPORT_FAILED;
 651			if (*status & 0x20) /* device fault */
 652				return USB_STOR_TRANSPORT_FAILED;
 653
 654			usb_stor_dbg(us, "Redoing %s\n",
 655				     str_write_read(direction == DMA_TO_DEVICE));
 656
 657		} else if (result != USB_STOR_XFER_GOOD)
 658			return USB_STOR_TRANSPORT_ERROR;
 659		else
 660			return usbat_wait_not_busy(us, minutes);
 661
 662	}
 663
 664	usb_stor_dbg(us, "Bummer! %s bulk data 20 times failed\n",
 665		     direction == DMA_TO_DEVICE ? "Writing" : "Reading");
 666
 667	return USB_STOR_TRANSPORT_FAILED;
 668}
 669
 670/*
 671 * Write to multiple registers:
 672 * Allows us to write specific data to any registers. The data to be written
 673 * gets packed in this sequence: reg0, data0, reg1, data1, ..., regN, dataN
 674 * which gets sent through bulk out.
 675 * Not designed for large transfers of data!
 676 */
 677static int usbat_multiple_write(struct us_data *us,
 678				unsigned char *registers,
 679				unsigned char *data_out,
 680				unsigned short num_registers)
 681{
 682	int i, result;
 683	unsigned char *data = us->iobuf;
 684	unsigned char *command = us->iobuf;
 685
 686	BUG_ON(num_registers > US_IOBUF_SIZE/2);
 687
 688	/* Write to multiple registers, ATA access */
 689	command[0] = 0x40;
 690	command[1] = USBAT_ATA | USBAT_CMD_WRITE_REGS;
 691
 692	/* No relevance */
 693	command[2] = 0;
 694	command[3] = 0;
 695	command[4] = 0;
 696	command[5] = 0;
 697
 698	/* Number of bytes to be transferred (incl. addresses and data) */
 699	command[6] = LSB_of(num_registers*2);
 700	command[7] = MSB_of(num_registers*2);
 701
 702	/* The setup command */
 703	result = usbat_execute_command(us, command, 8);
 704	if (result != USB_STOR_XFER_GOOD)
 705		return USB_STOR_TRANSPORT_ERROR;
 706
 707	/* Create the reg/data, reg/data sequence */
 708	for (i=0; i<num_registers; i++) {
 709		data[i<<1] = registers[i];
 710		data[1+(i<<1)] = data_out[i];
 711	}
 712
 713	/* Send the data */
 714	result = usbat_bulk_write(us, data, num_registers*2, 0);
 715	if (result != USB_STOR_XFER_GOOD)
 716		return USB_STOR_TRANSPORT_ERROR;
 717
 718	if (usbat_get_device_type(us) == USBAT_DEV_HP8200)
 719		return usbat_wait_not_busy(us, 0);
 720	else
 721		return USB_STOR_TRANSPORT_GOOD;
 722}
 723
 724/*
 725 * Conditionally read blocks from device:
 726 * Allows us to read blocks from a specific data register, based upon the
 727 * condition that a status register can be successfully masked with a status
 728 * qualifier. If this condition is not initially met, the read will wait
 729 * up until a maximum amount of time has elapsed, as specified by timeout.
 730 * The read will start when the condition is met, otherwise the command aborts.
 731 *
 732 * The qualifier defined here is not the value that is masked, it defines
 733 * conditions for the write to take place. The actual masked qualifier (and
 734 * other related details) are defined beforehand with _set_shuttle_features().
 735 */
 736static int usbat_read_blocks(struct us_data *us,
 737			     void* buffer,
 738			     int len,
 739			     int use_sg)
 740{
 741	int result;
 742	unsigned char *command = us->iobuf;
 743
 744	command[0] = 0xC0;
 745	command[1] = USBAT_ATA | USBAT_CMD_COND_READ_BLOCK;
 746	command[2] = USBAT_ATA_DATA;
 747	command[3] = USBAT_ATA_STATUS;
 748	command[4] = 0xFD; /* Timeout (ms); */
 749	command[5] = USBAT_QUAL_FCQ;
 750	command[6] = LSB_of(len);
 751	command[7] = MSB_of(len);
 752
 753	/* Multiple block read setup command */
 754	result = usbat_execute_command(us, command, 8);
 755	if (result != USB_STOR_XFER_GOOD)
 756		return USB_STOR_TRANSPORT_FAILED;
 757	
 758	/* Read the blocks we just asked for */
 759	result = usbat_bulk_read(us, buffer, len, use_sg);
 760	if (result != USB_STOR_XFER_GOOD)
 761		return USB_STOR_TRANSPORT_FAILED;
 762
 763	return USB_STOR_TRANSPORT_GOOD;
 764}
 765
 766/*
 767 * Conditionally write blocks to device:
 768 * Allows us to write blocks to a specific data register, based upon the
 769 * condition that a status register can be successfully masked with a status
 770 * qualifier. If this condition is not initially met, the write will wait
 771 * up until a maximum amount of time has elapsed, as specified by timeout.
 772 * The read will start when the condition is met, otherwise the command aborts.
 773 *
 774 * The qualifier defined here is not the value that is masked, it defines
 775 * conditions for the write to take place. The actual masked qualifier (and
 776 * other related details) are defined beforehand with _set_shuttle_features().
 777 */
 778static int usbat_write_blocks(struct us_data *us,
 779			      void* buffer,
 780			      int len,
 781			      int use_sg)
 782{
 783	int result;
 784	unsigned char *command = us->iobuf;
 785
 786	command[0] = 0x40;
 787	command[1] = USBAT_ATA | USBAT_CMD_COND_WRITE_BLOCK;
 788	command[2] = USBAT_ATA_DATA;
 789	command[3] = USBAT_ATA_STATUS;
 790	command[4] = 0xFD; /* Timeout (ms) */
 791	command[5] = USBAT_QUAL_FCQ;
 792	command[6] = LSB_of(len);
 793	command[7] = MSB_of(len);
 794
 795	/* Multiple block write setup command */
 796	result = usbat_execute_command(us, command, 8);
 797	if (result != USB_STOR_XFER_GOOD)
 798		return USB_STOR_TRANSPORT_FAILED;
 799	
 800	/* Write the data */
 801	result = usbat_bulk_write(us, buffer, len, use_sg);
 802	if (result != USB_STOR_XFER_GOOD)
 803		return USB_STOR_TRANSPORT_FAILED;
 804
 805	return USB_STOR_TRANSPORT_GOOD;
 806}
 807
 808/*
 809 * Read the User IO register
 810 */
 811static int usbat_read_user_io(struct us_data *us, unsigned char *data_flags)
 812{
 813	int result;
 814
 815	result = usb_stor_ctrl_transfer(us,
 816		us->recv_ctrl_pipe,
 817		USBAT_CMD_UIO,
 818		0xC0,
 819		0,
 820		0,
 821		data_flags,
 822		USBAT_UIO_READ);
 823
 824	usb_stor_dbg(us, "UIO register reads %02X\n", *data_flags);
 825
 826	return result;
 827}
 828
 829/*
 830 * Write to the User IO register
 831 */
 832static int usbat_write_user_io(struct us_data *us,
 833			       unsigned char enable_flags,
 834			       unsigned char data_flags)
 835{
 836	return usb_stor_ctrl_transfer(us,
 837		us->send_ctrl_pipe,
 838		USBAT_CMD_UIO,
 839		0x40,
 840		short_pack(enable_flags, data_flags),
 841		0,
 842		NULL,
 843		USBAT_UIO_WRITE);
 844}
 845
 846/*
 847 * Reset the device
 848 * Often needed on media change.
 849 */
 850static int usbat_device_reset(struct us_data *us)
 851{
 852	int rc;
 853
 854	/*
 855	 * Reset peripheral, enable peripheral control signals
 856	 * (bring reset signal up)
 857	 */
 858	rc = usbat_write_user_io(us,
 859							 USBAT_UIO_DRVRST | USBAT_UIO_OE1 | USBAT_UIO_OE0,
 860							 USBAT_UIO_EPAD | USBAT_UIO_1);
 861	if (rc != USB_STOR_XFER_GOOD)
 862		return USB_STOR_TRANSPORT_ERROR;
 863			
 864	/*
 865	 * Enable peripheral control signals
 866	 * (bring reset signal down)
 867	 */
 868	rc = usbat_write_user_io(us,
 869							 USBAT_UIO_OE1  | USBAT_UIO_OE0,
 870							 USBAT_UIO_EPAD | USBAT_UIO_1);
 871	if (rc != USB_STOR_XFER_GOOD)
 872		return USB_STOR_TRANSPORT_ERROR;
 873
 874	return USB_STOR_TRANSPORT_GOOD;
 875}
 876
 877/*
 878 * Enable card detect
 879 */
 880static int usbat_device_enable_cdt(struct us_data *us)
 881{
 882	int rc;
 883
 884	/* Enable peripheral control signals and card detect */
 885	rc = usbat_write_user_io(us,
 886							 USBAT_UIO_ACKD | USBAT_UIO_OE1  | USBAT_UIO_OE0,
 887							 USBAT_UIO_EPAD | USBAT_UIO_1);
 888	if (rc != USB_STOR_XFER_GOOD)
 889		return USB_STOR_TRANSPORT_ERROR;
 890
 891	return USB_STOR_TRANSPORT_GOOD;
 892}
 893
 894/*
 895 * Determine if media is present.
 896 */
 897static int usbat_flash_check_media_present(struct us_data *us,
 898					   unsigned char *uio)
 899{
 900	if (*uio & USBAT_UIO_UI0) {
 901		usb_stor_dbg(us, "no media detected\n");
 902		return USBAT_FLASH_MEDIA_NONE;
 903	}
 904
 905	return USBAT_FLASH_MEDIA_CF;
 906}
 907
 908/*
 909 * Determine if media has changed since last operation
 910 */
 911static int usbat_flash_check_media_changed(struct us_data *us,
 912					   unsigned char *uio)
 913{
 914	if (*uio & USBAT_UIO_0) {
 915		usb_stor_dbg(us, "media change detected\n");
 916		return USBAT_FLASH_MEDIA_CHANGED;
 917	}
 918
 919	return USBAT_FLASH_MEDIA_SAME;
 920}
 921
 922/*
 923 * Check for media change / no media and handle the situation appropriately
 924 */
 925static int usbat_flash_check_media(struct us_data *us,
 926				   struct usbat_info *info)
 927{
 928	int rc;
 929	unsigned char *uio = us->iobuf;
 930
 931	rc = usbat_read_user_io(us, uio);
 932	if (rc != USB_STOR_XFER_GOOD)
 933		return USB_STOR_TRANSPORT_ERROR;
 934
 935	/* Check for media existence */
 936	rc = usbat_flash_check_media_present(us, uio);
 937	if (rc == USBAT_FLASH_MEDIA_NONE) {
 938		info->sense_key = 0x02;
 939		info->sense_asc = 0x3A;
 940		info->sense_ascq = 0x00;
 941		return USB_STOR_TRANSPORT_FAILED;
 942	}
 943
 944	/* Check for media change */
 945	rc = usbat_flash_check_media_changed(us, uio);
 946	if (rc == USBAT_FLASH_MEDIA_CHANGED) {
 947
 948		/* Reset and re-enable card detect */
 949		rc = usbat_device_reset(us);
 950		if (rc != USB_STOR_TRANSPORT_GOOD)
 951			return rc;
 952		rc = usbat_device_enable_cdt(us);
 953		if (rc != USB_STOR_TRANSPORT_GOOD)
 954			return rc;
 955
 956		msleep(50);
 957
 958		rc = usbat_read_user_io(us, uio);
 959		if (rc != USB_STOR_XFER_GOOD)
 960			return USB_STOR_TRANSPORT_ERROR;
 961		
 962		info->sense_key = UNIT_ATTENTION;
 963		info->sense_asc = 0x28;
 964		info->sense_ascq = 0x00;
 965		return USB_STOR_TRANSPORT_FAILED;
 966	}
 967
 968	return USB_STOR_TRANSPORT_GOOD;
 969}
 970
 971/*
 972 * Determine whether we are controlling a flash-based reader/writer,
 973 * or a HP8200-based CD drive.
 974 * Sets transport functions as appropriate.
 975 */
 976static int usbat_identify_device(struct us_data *us,
 977				 struct usbat_info *info)
 978{
 979	int rc;
 980	unsigned char status;
 981
 982	if (!us || !info)
 983		return USB_STOR_TRANSPORT_ERROR;
 984
 985	rc = usbat_device_reset(us);
 986	if (rc != USB_STOR_TRANSPORT_GOOD)
 987		return rc;
 988	msleep(500);
 989
 990	/*
 991	 * In attempt to distinguish between HP CDRW's and Flash readers, we now
 992	 * execute the IDENTIFY PACKET DEVICE command. On ATA devices (i.e. flash
 993	 * readers), this command should fail with error. On ATAPI devices (i.e.
 994	 * CDROM drives), it should succeed.
 995	 */
 996	rc = usbat_write(us, USBAT_ATA, USBAT_ATA_CMD, 0xA1);
 997 	if (rc != USB_STOR_XFER_GOOD)
 998 		return USB_STOR_TRANSPORT_ERROR;
 999
1000	rc = usbat_get_status(us, &status);
1001 	if (rc != USB_STOR_XFER_GOOD)
1002 		return USB_STOR_TRANSPORT_ERROR;
1003
1004	/* Check for error bit, or if the command 'fell through' */
1005	if (status == 0xA1 || !(status & 0x01)) {
1006		/* Device is HP 8200 */
1007		usb_stor_dbg(us, "Detected HP8200 CDRW\n");
1008		info->devicetype = USBAT_DEV_HP8200;
1009	} else {
1010		/* Device is a CompactFlash reader/writer */
1011		usb_stor_dbg(us, "Detected Flash reader/writer\n");
1012		info->devicetype = USBAT_DEV_FLASH;
1013	}
1014
1015	return USB_STOR_TRANSPORT_GOOD;
1016}
1017
1018/*
1019 * Set the transport function based on the device type
1020 */
1021static int usbat_set_transport(struct us_data *us,
1022			       struct usbat_info *info,
1023			       int devicetype)
1024{
1025
1026	if (!info->devicetype)
1027		info->devicetype = devicetype;
1028
1029	if (!info->devicetype)
1030		usbat_identify_device(us, info);
1031
1032	switch (info->devicetype) {
1033	default:
1034		return USB_STOR_TRANSPORT_ERROR;
1035
1036	case  USBAT_DEV_HP8200:
1037		us->transport = usbat_hp8200e_transport;
1038		break;
1039
1040	case USBAT_DEV_FLASH:
1041		us->transport = usbat_flash_transport;
1042		break;
1043	}
1044
1045	return 0;
1046}
1047
1048/*
1049 * Read the media capacity
1050 */
1051static int usbat_flash_get_sector_count(struct us_data *us,
1052					struct usbat_info *info)
1053{
1054	unsigned char registers[3] = {
1055		USBAT_ATA_SECCNT,
1056		USBAT_ATA_DEVICE,
1057		USBAT_ATA_CMD,
1058	};
1059	unsigned char  command[3] = { 0x01, 0xA0, 0xEC };
1060	unsigned char *reply;
1061	unsigned char status;
1062	int rc;
1063
1064	if (!us || !info)
1065		return USB_STOR_TRANSPORT_ERROR;
1066
1067	reply = kmalloc(512, GFP_NOIO);
1068	if (!reply)
1069		return USB_STOR_TRANSPORT_ERROR;
1070
1071	/* ATA command : IDENTIFY DEVICE */
1072	rc = usbat_multiple_write(us, registers, command, 3);
1073	if (rc != USB_STOR_XFER_GOOD) {
1074		usb_stor_dbg(us, "Gah! identify_device failed\n");
1075		rc = USB_STOR_TRANSPORT_ERROR;
1076		goto leave;
1077	}
1078
1079	/* Read device status */
1080	if (usbat_get_status(us, &status) != USB_STOR_XFER_GOOD) {
1081		rc = USB_STOR_TRANSPORT_ERROR;
1082		goto leave;
1083	}
1084
1085	msleep(100);
1086
1087	/* Read the device identification data */
1088	rc = usbat_read_block(us, reply, 512, 0);
1089	if (rc != USB_STOR_TRANSPORT_GOOD)
1090		goto leave;
1091
1092	info->sectors = ((u32)(reply[117]) << 24) |
1093		((u32)(reply[116]) << 16) |
1094		((u32)(reply[115]) <<  8) |
1095		((u32)(reply[114])      );
1096
1097	rc = USB_STOR_TRANSPORT_GOOD;
1098
1099 leave:
1100	kfree(reply);
1101	return rc;
1102}
1103
1104/*
1105 * Read data from device
1106 */
1107static int usbat_flash_read_data(struct us_data *us,
1108								 struct usbat_info *info,
1109								 u32 sector,
1110								 u32 sectors)
1111{
1112	unsigned char registers[7] = {
1113		USBAT_ATA_FEATURES,
1114		USBAT_ATA_SECCNT,
1115		USBAT_ATA_SECNUM,
1116		USBAT_ATA_LBA_ME,
1117		USBAT_ATA_LBA_HI,
1118		USBAT_ATA_DEVICE,
1119		USBAT_ATA_STATUS,
1120	};
1121	unsigned char command[7];
1122	unsigned char *buffer;
1123	unsigned char  thistime;
1124	unsigned int totallen, alloclen;
1125	int len, result;
1126	unsigned int sg_offset = 0;
1127	struct scatterlist *sg = NULL;
1128
1129	result = usbat_flash_check_media(us, info);
1130	if (result != USB_STOR_TRANSPORT_GOOD)
1131		return result;
1132
1133	/*
1134	 * we're working in LBA mode.  according to the ATA spec,
1135	 * we can support up to 28-bit addressing.  I don't know if Jumpshot
1136	 * supports beyond 24-bit addressing.  It's kind of hard to test
1137	 * since it requires > 8GB CF card.
1138	 */
1139
1140	if (sector > 0x0FFFFFFF)
1141		return USB_STOR_TRANSPORT_ERROR;
1142
1143	totallen = sectors * info->ssize;
1144
1145	/*
1146	 * Since we don't read more than 64 KB at a time, we have to create
1147	 * a bounce buffer and move the data a piece at a time between the
1148	 * bounce buffer and the actual transfer buffer.
1149	 */
1150
1151	alloclen = min(totallen, 65536u);
1152	buffer = kmalloc(alloclen, GFP_NOIO);
1153	if (buffer == NULL)
1154		return USB_STOR_TRANSPORT_ERROR;
1155
1156	do {
1157		/*
1158		 * loop, never allocate or transfer more than 64k at once
1159		 * (min(128k, 255*info->ssize) is the real limit)
1160		 */
1161		len = min(totallen, alloclen);
1162		thistime = (len / info->ssize) & 0xff;
1163 
1164		/* ATA command 0x20 (READ SECTORS) */
1165		usbat_pack_ata_sector_cmd(command, thistime, sector, 0x20);
1166
1167		/* Write/execute ATA read command */
1168		result = usbat_multiple_write(us, registers, command, 7);
1169		if (result != USB_STOR_TRANSPORT_GOOD)
1170			goto leave;
1171
1172		/* Read the data we just requested */
1173		result = usbat_read_blocks(us, buffer, len, 0);
1174		if (result != USB_STOR_TRANSPORT_GOOD)
1175			goto leave;
1176  	 
1177		usb_stor_dbg(us, "%d bytes\n", len);
1178	
1179		/* Store the data in the transfer buffer */
1180		usb_stor_access_xfer_buf(buffer, len, us->srb,
1181					 &sg, &sg_offset, TO_XFER_BUF);
1182
1183		sector += thistime;
1184		totallen -= len;
1185	} while (totallen > 0);
1186
1187	kfree(buffer);
1188	return USB_STOR_TRANSPORT_GOOD;
1189
1190leave:
1191	kfree(buffer);
1192	return USB_STOR_TRANSPORT_ERROR;
1193}
1194
1195/*
1196 * Write data to device
1197 */
1198static int usbat_flash_write_data(struct us_data *us,
1199								  struct usbat_info *info,
1200								  u32 sector,
1201								  u32 sectors)
1202{
1203	unsigned char registers[7] = {
1204		USBAT_ATA_FEATURES,
1205		USBAT_ATA_SECCNT,
1206		USBAT_ATA_SECNUM,
1207		USBAT_ATA_LBA_ME,
1208		USBAT_ATA_LBA_HI,
1209		USBAT_ATA_DEVICE,
1210		USBAT_ATA_STATUS,
1211	};
1212	unsigned char command[7];
1213	unsigned char *buffer;
1214	unsigned char  thistime;
1215	unsigned int totallen, alloclen;
1216	int len, result;
1217	unsigned int sg_offset = 0;
1218	struct scatterlist *sg = NULL;
1219
1220	result = usbat_flash_check_media(us, info);
1221	if (result != USB_STOR_TRANSPORT_GOOD)
1222		return result;
1223
1224	/*
1225	 * we're working in LBA mode.  according to the ATA spec,
1226	 * we can support up to 28-bit addressing.  I don't know if the device
1227	 * supports beyond 24-bit addressing.  It's kind of hard to test
1228	 * since it requires > 8GB media.
1229	 */
1230
1231	if (sector > 0x0FFFFFFF)
1232		return USB_STOR_TRANSPORT_ERROR;
1233
1234	totallen = sectors * info->ssize;
1235
1236	/*
1237	 * Since we don't write more than 64 KB at a time, we have to create
1238	 * a bounce buffer and move the data a piece at a time between the
1239	 * bounce buffer and the actual transfer buffer.
1240	 */
1241
1242	alloclen = min(totallen, 65536u);
1243	buffer = kmalloc(alloclen, GFP_NOIO);
1244	if (buffer == NULL)
1245		return USB_STOR_TRANSPORT_ERROR;
1246
1247	do {
1248		/*
1249		 * loop, never allocate or transfer more than 64k at once
1250		 * (min(128k, 255*info->ssize) is the real limit)
1251		 */
1252		len = min(totallen, alloclen);
1253		thistime = (len / info->ssize) & 0xff;
1254
1255		/* Get the data from the transfer buffer */
1256		usb_stor_access_xfer_buf(buffer, len, us->srb,
1257					 &sg, &sg_offset, FROM_XFER_BUF);
1258
1259		/* ATA command 0x30 (WRITE SECTORS) */
1260		usbat_pack_ata_sector_cmd(command, thistime, sector, 0x30);
1261
1262		/* Write/execute ATA write command */
1263		result = usbat_multiple_write(us, registers, command, 7);
1264		if (result != USB_STOR_TRANSPORT_GOOD)
1265			goto leave;
1266
1267		/* Write the data */
1268		result = usbat_write_blocks(us, buffer, len, 0);
1269		if (result != USB_STOR_TRANSPORT_GOOD)
1270			goto leave;
1271
1272		sector += thistime;
1273		totallen -= len;
1274	} while (totallen > 0);
1275
1276	kfree(buffer);
1277	return result;
1278
1279leave:
1280	kfree(buffer);
1281	return USB_STOR_TRANSPORT_ERROR;
1282}
1283
1284/*
1285 * Squeeze a potentially huge (> 65535 byte) read10 command into
1286 * a little ( <= 65535 byte) ATAPI pipe
1287 */
1288static int usbat_hp8200e_handle_read10(struct us_data *us,
1289				       unsigned char *registers,
1290				       unsigned char *data,
1291				       struct scsi_cmnd *srb)
1292{
1293	int result = USB_STOR_TRANSPORT_GOOD;
1294	unsigned char *buffer;
1295	unsigned int len;
1296	unsigned int sector;
1297	unsigned int sg_offset = 0;
1298	struct scatterlist *sg = NULL;
1299
1300	usb_stor_dbg(us, "transfersize %d\n", srb->transfersize);
1301
1302	if (scsi_bufflen(srb) < 0x10000) {
1303
1304		result = usbat_hp8200e_rw_block_test(us, USBAT_ATA, 
1305			registers, data, 19,
1306			USBAT_ATA_DATA, USBAT_ATA_STATUS, 0xFD,
1307			(USBAT_QUAL_FCQ | USBAT_QUAL_ALQ),
1308			DMA_FROM_DEVICE,
1309			scsi_sglist(srb),
1310			scsi_bufflen(srb), scsi_sg_count(srb), 1);
1311
1312		return result;
1313	}
1314
1315	/*
1316	 * Since we're requesting more data than we can handle in
1317	 * a single read command (max is 64k-1), we will perform
1318	 * multiple reads, but each read must be in multiples of
1319	 * a sector.  Luckily the sector size is in srb->transfersize
1320	 * (see linux/drivers/scsi/sr.c).
1321	 */
1322
1323	if (data[7+0] == GPCMD_READ_CD) {
1324		len = short_pack(data[7+9], data[7+8]);
1325		len <<= 16;
1326		len |= data[7+7];
1327		usb_stor_dbg(us, "GPCMD_READ_CD: len %d\n", len);
1328		srb->transfersize = scsi_bufflen(srb)/len;
1329	}
1330
1331	if (!srb->transfersize)  {
1332		srb->transfersize = 2048; /* A guess */
1333		usb_stor_dbg(us, "transfersize 0, forcing %d\n",
1334			     srb->transfersize);
1335	}
1336
1337	/*
1338	 * Since we only read in one block at a time, we have to create
1339	 * a bounce buffer and move the data a piece at a time between the
1340	 * bounce buffer and the actual transfer buffer.
1341	 */
1342
1343	len = (65535/srb->transfersize) * srb->transfersize;
1344	usb_stor_dbg(us, "Max read is %d bytes\n", len);
1345	len = min(len, scsi_bufflen(srb));
1346	buffer = kmalloc(len, GFP_NOIO);
1347	if (buffer == NULL) /* bloody hell! */
1348		return USB_STOR_TRANSPORT_FAILED;
1349	sector = short_pack(data[7+3], data[7+2]);
1350	sector <<= 16;
1351	sector |= short_pack(data[7+5], data[7+4]);
1352	transferred = 0;
1353
1354	while (transferred != scsi_bufflen(srb)) {
1355
1356		if (len > scsi_bufflen(srb) - transferred)
1357			len = scsi_bufflen(srb) - transferred;
1358
1359		data[3] = len&0xFF; 	  /* (cylL) = expected length (L) */
1360		data[4] = (len>>8)&0xFF;  /* (cylH) = expected length (H) */
1361
1362		/* Fix up the SCSI command sector and num sectors */
1363
1364		data[7+2] = MSB_of(sector>>16); /* SCSI command sector */
1365		data[7+3] = LSB_of(sector>>16);
1366		data[7+4] = MSB_of(sector&0xFFFF);
1367		data[7+5] = LSB_of(sector&0xFFFF);
1368		if (data[7+0] == GPCMD_READ_CD)
1369			data[7+6] = 0;
1370		data[7+7] = MSB_of(len / srb->transfersize); /* SCSI command */
1371		data[7+8] = LSB_of(len / srb->transfersize); /* num sectors */
1372
1373		result = usbat_hp8200e_rw_block_test(us, USBAT_ATA, 
1374			registers, data, 19,
1375			USBAT_ATA_DATA, USBAT_ATA_STATUS, 0xFD, 
1376			(USBAT_QUAL_FCQ | USBAT_QUAL_ALQ),
1377			DMA_FROM_DEVICE,
1378			buffer,
1379			len, 0, 1);
1380
1381		if (result != USB_STOR_TRANSPORT_GOOD)
1382			break;
1383
1384		/* Store the data in the transfer buffer */
1385		usb_stor_access_xfer_buf(buffer, len, srb,
1386				 &sg, &sg_offset, TO_XFER_BUF);
1387
1388		/* Update the amount transferred and the sector number */
1389
1390		transferred += len;
1391		sector += len / srb->transfersize;
1392
1393	} /* while transferred != scsi_bufflen(srb) */
1394
1395	kfree(buffer);
1396	return result;
1397}
1398
1399static int usbat_select_and_test_registers(struct us_data *us)
1400{
1401	int selector;
1402	unsigned char *status = us->iobuf;
1403
1404	/* try device = master, then device = slave. */
1405	for (selector = 0xA0; selector <= 0xB0; selector += 0x10) {
1406		if (usbat_write(us, USBAT_ATA, USBAT_ATA_DEVICE, selector) !=
1407				USB_STOR_XFER_GOOD)
1408			return USB_STOR_TRANSPORT_ERROR;
1409
1410		if (usbat_read(us, USBAT_ATA, USBAT_ATA_STATUS, status) != 
1411				USB_STOR_XFER_GOOD)
1412			return USB_STOR_TRANSPORT_ERROR;
1413
1414		if (usbat_read(us, USBAT_ATA, USBAT_ATA_DEVICE, status) != 
1415				USB_STOR_XFER_GOOD)
1416			return USB_STOR_TRANSPORT_ERROR;
1417
1418		if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_ME, status) != 
1419				USB_STOR_XFER_GOOD)
1420			return USB_STOR_TRANSPORT_ERROR;
1421
1422		if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_HI, status) != 
1423				USB_STOR_XFER_GOOD)
1424			return USB_STOR_TRANSPORT_ERROR;
1425
1426		if (usbat_write(us, USBAT_ATA, USBAT_ATA_LBA_ME, 0x55) != 
1427				USB_STOR_XFER_GOOD)
1428			return USB_STOR_TRANSPORT_ERROR;
1429
1430		if (usbat_write(us, USBAT_ATA, USBAT_ATA_LBA_HI, 0xAA) != 
1431				USB_STOR_XFER_GOOD)
1432			return USB_STOR_TRANSPORT_ERROR;
1433
1434		if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_ME, status) != 
1435				USB_STOR_XFER_GOOD)
1436			return USB_STOR_TRANSPORT_ERROR;
1437
1438		if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_ME, status) != 
1439				USB_STOR_XFER_GOOD)
1440			return USB_STOR_TRANSPORT_ERROR;
1441	}
1442
1443	return USB_STOR_TRANSPORT_GOOD;
1444}
1445
1446/*
1447 * Initialize the USBAT processor and the storage device
1448 */
1449static int init_usbat(struct us_data *us, int devicetype)
1450{
1451	int rc;
1452	struct usbat_info *info;
1453	unsigned char subcountH = USBAT_ATA_LBA_HI;
1454	unsigned char subcountL = USBAT_ATA_LBA_ME;
1455	unsigned char *status = us->iobuf;
1456
1457	us->extra = kzalloc(sizeof(struct usbat_info), GFP_NOIO);
1458	if (!us->extra)
1459		return -ENOMEM;
1460
1461	info = (struct usbat_info *) (us->extra);
1462
1463	/* Enable peripheral control signals */
1464	rc = usbat_write_user_io(us,
1465				 USBAT_UIO_OE1 | USBAT_UIO_OE0,
1466				 USBAT_UIO_EPAD | USBAT_UIO_1);
1467	if (rc != USB_STOR_XFER_GOOD)
1468		return -EIO;
1469
1470	usb_stor_dbg(us, "INIT 1\n");
1471
1472	msleep(2000);
1473
1474	rc = usbat_read_user_io(us, status);
1475	if (rc != USB_STOR_TRANSPORT_GOOD)
1476		return -EIO;
1477
1478	usb_stor_dbg(us, "INIT 2\n");
1479
1480	rc = usbat_read_user_io(us, status);
1481	if (rc != USB_STOR_XFER_GOOD)
1482		return -EIO;
1483
1484	rc = usbat_read_user_io(us, status);
1485	if (rc != USB_STOR_XFER_GOOD)
1486		return -EIO;
1487
1488	usb_stor_dbg(us, "INIT 3\n");
1489
1490	rc = usbat_select_and_test_registers(us);
1491	if (rc != USB_STOR_TRANSPORT_GOOD)
1492		return -EIO;
1493
1494	usb_stor_dbg(us, "INIT 4\n");
1495
1496	rc = usbat_read_user_io(us, status);
1497	if (rc != USB_STOR_XFER_GOOD)
1498		return -EIO;
1499
1500	usb_stor_dbg(us, "INIT 5\n");
1501
1502	/* Enable peripheral control signals and card detect */
1503	rc = usbat_device_enable_cdt(us);
1504	if (rc != USB_STOR_TRANSPORT_GOOD)
1505		return -EIO;
1506
1507	usb_stor_dbg(us, "INIT 6\n");
1508
1509	rc = usbat_read_user_io(us, status);
1510	if (rc != USB_STOR_XFER_GOOD)
1511		return -EIO;
1512
1513	usb_stor_dbg(us, "INIT 7\n");
1514
1515	msleep(1400);
1516
1517	rc = usbat_read_user_io(us, status);
1518	if (rc != USB_STOR_XFER_GOOD)
1519		return -EIO;
1520
1521	usb_stor_dbg(us, "INIT 8\n");
1522
1523	rc = usbat_select_and_test_registers(us);
1524	if (rc != USB_STOR_TRANSPORT_GOOD)
1525		return -EIO;
1526
1527	usb_stor_dbg(us, "INIT 9\n");
1528
1529	/* At this point, we need to detect which device we are using */
1530	if (usbat_set_transport(us, info, devicetype))
1531		return -EIO;
1532
1533	usb_stor_dbg(us, "INIT 10\n");
1534
1535	if (usbat_get_device_type(us) == USBAT_DEV_FLASH) { 
1536		subcountH = 0x02;
1537		subcountL = 0x00;
1538	}
1539	rc = usbat_set_shuttle_features(us, (USBAT_FEAT_ETEN | USBAT_FEAT_ET2 | USBAT_FEAT_ET1),
1540									0x00, 0x88, 0x08, subcountH, subcountL);
1541	if (rc != USB_STOR_XFER_GOOD)
1542		return -EIO;
1543
1544	usb_stor_dbg(us, "INIT 11\n");
1545
1546	return 0;
1547}
1548
1549/*
1550 * Transport for the HP 8200e
1551 */
1552static int usbat_hp8200e_transport(struct scsi_cmnd *srb, struct us_data *us)
1553{
1554	int result;
1555	unsigned char *status = us->iobuf;
1556	unsigned char registers[32];
1557	unsigned char data[32];
1558	unsigned int len;
1559	int i;
1560
1561	len = scsi_bufflen(srb);
1562
1563	/*
1564	 * Send A0 (ATA PACKET COMMAND).
1565	 * Note: I guess we're never going to get any of the ATA
1566	 * commands... just ATA Packet Commands.
1567 	 */
1568
1569	registers[0] = USBAT_ATA_FEATURES;
1570	registers[1] = USBAT_ATA_SECCNT;
1571	registers[2] = USBAT_ATA_SECNUM;
1572	registers[3] = USBAT_ATA_LBA_ME;
1573	registers[4] = USBAT_ATA_LBA_HI;
1574	registers[5] = USBAT_ATA_DEVICE;
1575	registers[6] = USBAT_ATA_CMD;
1576	data[0] = 0x00;
1577	data[1] = 0x00;
1578	data[2] = 0x00;
1579	data[3] = len&0xFF; 		/* (cylL) = expected length (L) */
1580	data[4] = (len>>8)&0xFF; 	/* (cylH) = expected length (H) */
1581	data[5] = 0xB0; 		/* (device sel) = slave */
1582	data[6] = 0xA0; 		/* (command) = ATA PACKET COMMAND */
1583
1584	for (i=7; i<19; i++) {
1585		registers[i] = 0x10;
1586		data[i] = (i-7 >= srb->cmd_len) ? 0 : srb->cmnd[i-7];
1587	}
1588
1589	result = usbat_get_status(us, status);
1590	usb_stor_dbg(us, "Status = %02X\n", *status);
1591	if (result != USB_STOR_XFER_GOOD)
1592		return USB_STOR_TRANSPORT_ERROR;
1593	if (srb->cmnd[0] == TEST_UNIT_READY)
1594		transferred = 0;
1595
1596	if (srb->sc_data_direction == DMA_TO_DEVICE) {
1597
1598		result = usbat_hp8200e_rw_block_test(us, USBAT_ATA, 
1599			registers, data, 19,
1600			USBAT_ATA_DATA, USBAT_ATA_STATUS, 0xFD,
1601			(USBAT_QUAL_FCQ | USBAT_QUAL_ALQ),
1602			DMA_TO_DEVICE,
1603			scsi_sglist(srb),
1604			len, scsi_sg_count(srb), 10);
1605
1606		if (result == USB_STOR_TRANSPORT_GOOD) {
1607			transferred += len;
1608			usb_stor_dbg(us, "Wrote %08X bytes\n", transferred);
1609		}
1610
1611		return result;
1612
1613	} else if (srb->cmnd[0] == READ_10 ||
1614		   srb->cmnd[0] == GPCMD_READ_CD) {
1615
1616		return usbat_hp8200e_handle_read10(us, registers, data, srb);
1617
1618	}
1619
1620	if (len > 0xFFFF) {
1621		usb_stor_dbg(us, "Error: len = %08X... what do I do now?\n",
1622			     len);
1623		return USB_STOR_TRANSPORT_ERROR;
1624	}
1625
1626	result = usbat_multiple_write(us, registers, data, 7);
1627
1628	if (result != USB_STOR_TRANSPORT_GOOD)
1629		return result;
1630
1631	/*
1632	 * Write the 12-byte command header.
1633	 *
1634	 * If the command is BLANK then set the timer for 75 minutes.
1635	 * Otherwise set it for 10 minutes.
1636	 *
1637	 * NOTE: THE 8200 DOCUMENTATION STATES THAT BLANKING A CDRW
1638	 * AT SPEED 4 IS UNRELIABLE!!!
1639	 */
1640
1641	result = usbat_write_block(us, USBAT_ATA, srb->cmnd, 12,
1642				   srb->cmnd[0] == GPCMD_BLANK ? 75 : 10, 0);
1643
1644	if (result != USB_STOR_TRANSPORT_GOOD)
1645		return result;
1646
1647	/* If there is response data to be read in then do it here. */
1648
1649	if (len != 0 && (srb->sc_data_direction == DMA_FROM_DEVICE)) {
1650
1651		/* How many bytes to read in? Check cylL register */
1652
1653		if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_ME, status) != 
1654		    	USB_STOR_XFER_GOOD) {
1655			return USB_STOR_TRANSPORT_ERROR;
1656		}
1657
1658		if (len > 0xFF) { /* need to read cylH also */
1659			len = *status;
1660			if (usbat_read(us, USBAT_ATA, USBAT_ATA_LBA_HI, status) !=
1661				    USB_STOR_XFER_GOOD) {
1662				return USB_STOR_TRANSPORT_ERROR;
1663			}
1664			len += ((unsigned int) *status)<<8;
1665		}
1666		else
1667			len = *status;
1668
1669
1670		result = usbat_read_block(us, scsi_sglist(srb), len,
1671			                                   scsi_sg_count(srb));
1672	}
1673
1674	return result;
1675}
1676
1677/*
1678 * Transport for USBAT02-based CompactFlash and similar storage devices
1679 */
1680static int usbat_flash_transport(struct scsi_cmnd * srb, struct us_data *us)
1681{
1682	int rc;
1683	struct usbat_info *info = (struct usbat_info *) (us->extra);
1684	unsigned long block, blocks;
1685	unsigned char *ptr = us->iobuf;
1686	static const unsigned char inquiry_response[36] = {
1687		0x00, 0x80, 0x00, 0x01, 0x1F, 0x00, 0x00, 0x00
1688	};
1689
1690	if (srb->cmnd[0] == INQUIRY) {
1691		usb_stor_dbg(us, "INQUIRY - Returning bogus response\n");
1692		memcpy(ptr, inquiry_response, sizeof(inquiry_response));
1693		fill_inquiry_response(us, ptr, 36);
1694		return USB_STOR_TRANSPORT_GOOD;
1695	}
1696
1697	if (srb->cmnd[0] == READ_CAPACITY) {
1698		rc = usbat_flash_check_media(us, info);
1699		if (rc != USB_STOR_TRANSPORT_GOOD)
1700			return rc;
1701
1702		rc = usbat_flash_get_sector_count(us, info);
1703		if (rc != USB_STOR_TRANSPORT_GOOD)
1704			return rc;
1705
1706		/* hard coded 512 byte sectors as per ATA spec */
1707		info->ssize = 0x200;
1708		usb_stor_dbg(us, "READ_CAPACITY: %ld sectors, %ld bytes per sector\n",
1709			     info->sectors, info->ssize);
1710
1711		/*
1712		 * build the reply
1713		 * note: must return the sector number of the last sector,
1714		 * *not* the total number of sectors
1715		 */
1716		((__be32 *) ptr)[0] = cpu_to_be32(info->sectors - 1);
1717		((__be32 *) ptr)[1] = cpu_to_be32(info->ssize);
1718		usb_stor_set_xfer_buf(ptr, 8, srb);
1719
1720		return USB_STOR_TRANSPORT_GOOD;
1721	}
1722
1723	if (srb->cmnd[0] == MODE_SELECT_10) {
1724		usb_stor_dbg(us, "Gah! MODE_SELECT_10\n");
1725		return USB_STOR_TRANSPORT_ERROR;
1726	}
1727
1728	if (srb->cmnd[0] == READ_10) {
1729		block = ((u32)(srb->cmnd[2]) << 24) | ((u32)(srb->cmnd[3]) << 16) |
1730				((u32)(srb->cmnd[4]) <<  8) | ((u32)(srb->cmnd[5]));
1731
1732		blocks = ((u32)(srb->cmnd[7]) << 8) | ((u32)(srb->cmnd[8]));
1733
1734		usb_stor_dbg(us, "READ_10: read block 0x%04lx  count %ld\n",
1735			     block, blocks);
1736		return usbat_flash_read_data(us, info, block, blocks);
1737	}
1738
1739	if (srb->cmnd[0] == READ_12) {
1740		/*
1741		 * I don't think we'll ever see a READ_12 but support it anyway
1742		 */
1743		block = ((u32)(srb->cmnd[2]) << 24) | ((u32)(srb->cmnd[3]) << 16) |
1744		        ((u32)(srb->cmnd[4]) <<  8) | ((u32)(srb->cmnd[5]));
1745
1746		blocks = ((u32)(srb->cmnd[6]) << 24) | ((u32)(srb->cmnd[7]) << 16) |
1747		         ((u32)(srb->cmnd[8]) <<  8) | ((u32)(srb->cmnd[9]));
1748
1749		usb_stor_dbg(us, "READ_12: read block 0x%04lx  count %ld\n",
1750			     block, blocks);
1751		return usbat_flash_read_data(us, info, block, blocks);
1752	}
1753
1754	if (srb->cmnd[0] == WRITE_10) {
1755		block = ((u32)(srb->cmnd[2]) << 24) | ((u32)(srb->cmnd[3]) << 16) |
1756		        ((u32)(srb->cmnd[4]) <<  8) | ((u32)(srb->cmnd[5]));
1757
1758		blocks = ((u32)(srb->cmnd[7]) << 8) | ((u32)(srb->cmnd[8]));
1759
1760		usb_stor_dbg(us, "WRITE_10: write block 0x%04lx  count %ld\n",
1761			     block, blocks);
1762		return usbat_flash_write_data(us, info, block, blocks);
1763	}
1764
1765	if (srb->cmnd[0] == WRITE_12) {
1766		/*
1767		 * I don't think we'll ever see a WRITE_12 but support it anyway
1768		 */
1769		block = ((u32)(srb->cmnd[2]) << 24) | ((u32)(srb->cmnd[3]) << 16) |
1770		        ((u32)(srb->cmnd[4]) <<  8) | ((u32)(srb->cmnd[5]));
1771
1772		blocks = ((u32)(srb->cmnd[6]) << 24) | ((u32)(srb->cmnd[7]) << 16) |
1773		         ((u32)(srb->cmnd[8]) <<  8) | ((u32)(srb->cmnd[9]));
1774
1775		usb_stor_dbg(us, "WRITE_12: write block 0x%04lx  count %ld\n",
1776			     block, blocks);
1777		return usbat_flash_write_data(us, info, block, blocks);
1778	}
1779
1780
1781	if (srb->cmnd[0] == TEST_UNIT_READY) {
1782		usb_stor_dbg(us, "TEST_UNIT_READY\n");
1783
1784		rc = usbat_flash_check_media(us, info);
1785		if (rc != USB_STOR_TRANSPORT_GOOD)
1786			return rc;
1787
1788		return usbat_check_status(us);
1789	}
1790
1791	if (srb->cmnd[0] == REQUEST_SENSE) {
1792		usb_stor_dbg(us, "REQUEST_SENSE\n");
1793
1794		memset(ptr, 0, 18);
1795		ptr[0] = 0xF0;
1796		ptr[2] = info->sense_key;
1797		ptr[7] = 11;
1798		ptr[12] = info->sense_asc;
1799		ptr[13] = info->sense_ascq;
1800		usb_stor_set_xfer_buf(ptr, 18, srb);
1801
1802		return USB_STOR_TRANSPORT_GOOD;
1803	}
1804
1805	if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL) {
1806		/*
1807		 * sure.  whatever.  not like we can stop the user from popping
1808		 * the media out of the device (no locking doors, etc)
1809		 */
1810		return USB_STOR_TRANSPORT_GOOD;
1811	}
1812
1813	usb_stor_dbg(us, "Gah! Unknown command: %d (0x%x)\n",
1814		     srb->cmnd[0], srb->cmnd[0]);
1815	info->sense_key = 0x05;
1816	info->sense_asc = 0x20;
1817	info->sense_ascq = 0x00;
1818	return USB_STOR_TRANSPORT_FAILED;
1819}
1820
1821static int init_usbat_cd(struct us_data *us)
1822{
1823	return init_usbat(us, USBAT_DEV_HP8200);
1824}
1825
1826static int init_usbat_flash(struct us_data *us)
1827{
1828	return init_usbat(us, USBAT_DEV_FLASH);
1829}
1830
1831static struct scsi_host_template usbat_host_template;
1832
1833static int usbat_probe(struct usb_interface *intf,
1834			 const struct usb_device_id *id)
1835{
1836	struct us_data *us;
1837	int result;
1838
1839	result = usb_stor_probe1(&us, intf, id,
1840			(id - usbat_usb_ids) + usbat_unusual_dev_list,
1841			&usbat_host_template);
1842	if (result)
1843		return result;
1844
1845	/*
1846	 * The actual transport will be determined later by the
1847	 * initialization routine; this is just a placeholder.
1848	 */
1849	us->transport_name = "Shuttle USBAT";
1850	us->transport = usbat_flash_transport;
1851	us->transport_reset = usb_stor_CB_reset;
1852	us->max_lun = 0;
1853
1854	result = usb_stor_probe2(us);
1855	return result;
1856}
1857
1858static struct usb_driver usbat_driver = {
1859	.name =		DRV_NAME,
1860	.probe =	usbat_probe,
1861	.disconnect =	usb_stor_disconnect,
1862	.suspend =	usb_stor_suspend,
1863	.resume =	usb_stor_resume,
1864	.reset_resume =	usb_stor_reset_resume,
1865	.pre_reset =	usb_stor_pre_reset,
1866	.post_reset =	usb_stor_post_reset,
1867	.id_table =	usbat_usb_ids,
1868	.soft_unbind =	1,
1869	.no_dynamic_id = 1,
1870};
1871
1872module_usb_stor_driver(usbat_driver, usbat_host_template, DRV_NAME);
~/ Read-only file preview.