projects / linux-2.6-block.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
block: Fix secure erase
[linux-2.6-block.git] / drivers / mmc / card / block.c
CommitLineData
1da177e4
LT		 1/*
2 * Block driver for media (i.e., flash cards)
3 *
4 * Copyright 2002 Hewlett-Packard Company
979ce720 5 * Copyright 2005-2008 Pierre Ossman
1da177e4
LT		 6 *
7 * Use consistent with the GNU GPL is permitted,
8 * provided that this copyright notice is
9 * preserved in its entirety in all copies and derived works.
10 *
11 * HEWLETT-PACKARD COMPANY MAKES NO WARRANTIES, EXPRESSED OR IMPLIED,
12 * AS TO THE USEFULNESS OR CORRECTNESS OF THIS CODE OR ITS
13 * FITNESS FOR ANY PARTICULAR PURPOSE.
14 *
15 * Many thanks to Alessandro Rubini and Jonathan Corbet!
16 *
17 * Author: Andrew Christian
18 * 28 May 2002
19 */
20#include <linux/moduleparam.h>
21#include <linux/module.h>
22#include <linux/init.h>
23
1da177e4
LT		 24#include <linux/kernel.h>
25#include <linux/fs.h>
5a0e3ad6 26#include <linux/slab.h>
1da177e4
LT		 27#include <linux/errno.h>
28#include <linux/hdreg.h>
29#include <linux/kdev_t.h>
30#include <linux/blkdev.h>
a621aaed 31#include <linux/mutex.h>
ec5a19dd 32#include <linux/scatterlist.h>
a7bbb573 33#include <linux/string_helpers.h>
cb87ea28
JC		 34#include <linux/delay.h>
35#include <linux/capability.h>
36#include <linux/compat.h>
e94cfef6 37#include <linux/pm_runtime.h>
b10fa99e 38#include <linux/idr.h>
1da177e4 39
cb87ea28 40#include <linux/mmc/ioctl.h>
1da177e4 41#include <linux/mmc/card.h>
385e3227 42#include <linux/mmc/host.h>
da7fbe58
PO		 43#include <linux/mmc/mmc.h>
44#include <linux/mmc/sd.h>
1da177e4 45
1da177e4
LT		 46#include <asm/uaccess.h>
47
98ac2162 48#include "queue.h"
1da177e4 49
6b0b6285 50MODULE_ALIAS("mmc:block");
5e71b7a6
OJ		 51#ifdef MODULE_PARAM_PREFIX
52#undef MODULE_PARAM_PREFIX
53#endif
54#define MODULE_PARAM_PREFIX "mmcblk."
55
6a7a6b45
AW		 56#define INAND_CMD38_ARG_EXT_CSD 113
57#define INAND_CMD38_ARG_ERASE 0x00
58#define INAND_CMD38_ARG_TRIM 0x01
59#define INAND_CMD38_ARG_SECERASE 0x80
60#define INAND_CMD38_ARG_SECTRIM1 0x81
61#define INAND_CMD38_ARG_SECTRIM2 0x88
8fee476b 62#define MMC_BLK_TIMEOUT_MS (10 * 60 * 1000) /* 10 minute timeout */
775a9362
ME		 63#define MMC_SANITIZE_REQ_TIMEOUT 240000
64#define MMC_EXTRACT_INDEX_FROM_ARG(x) ((x & 0x00FF0000) >> 16)
6a7a6b45 65
d3df0465 66#define mmc_req_rel_wr(req) ((req->cmd_flags & REQ_FUA) && \
ce39f9d1
SJ		 67 (rq_data_dir(req) == WRITE))
68#define PACKED_CMD_VER 0x01
69#define PACKED_CMD_WR 0x02
70
5e71b7a6 71static DEFINE_MUTEX(block_mutex);
6b0b6285 72
1da177e4 73/*
5e71b7a6
OJ		 74 * The defaults come from config options but can be overriden by module
75 * or bootarg options.
1da177e4 76 */
5e71b7a6 77static int perdev_minors = CONFIG_MMC_BLOCK_MINORS;
1dff3144 78
5e71b7a6
OJ		 79/*
80 * We've only got one major, so number of mmcblk devices is
a26eba61 81 * limited to (1 << 20) / number of minors per device. It is also
b10fa99e 82 * limited by the MAX_DEVICES below.
5e71b7a6
OJ		 83 */
84static int max_devices;
85
a26eba61
BH		 86#define MAX_DEVICES 256
87
b10fa99e
UH		 88static DEFINE_IDA(mmc_blk_ida);
89static DEFINE_SPINLOCK(mmc_blk_lock);
1da177e4 90
1da177e4
LT		 91/*
92 * There is one mmc_blk_data per slot.
93 */
94struct mmc_blk_data {
95 spinlock_t lock;
307d8e6f 96 struct device *parent;
1da177e4
LT		 97 struct gendisk *disk;
98 struct mmc_queue queue;
371a689f 99 struct list_head part;
1da177e4 100
d0c97cfb
AW		 101 unsigned int flags;
102#define MMC_BLK_CMD23 (1 << 0) /* Can do SET_BLOCK_COUNT for multiblock */
103#define MMC_BLK_REL_WR (1 << 1) /* MMC Reliable write support */
ce39f9d1 104#define MMC_BLK_PACKED_CMD (1 << 2) /* MMC packed command support */
d0c97cfb 105
1da177e4 106 unsigned int usage;
a6f6c96b 107 unsigned int read_only;
371a689f 108 unsigned int part_type;
67716327
AH		 109 unsigned int reset_done;
110#define MMC_BLK_READ BIT(0)
111#define MMC_BLK_WRITE BIT(1)
112#define MMC_BLK_DISCARD BIT(2)
113#define MMC_BLK_SECDISCARD BIT(3)
371a689f
AW		 114
115 /*
116 * Only set in main mmc_blk_data associated
fc95e30b 117 * with mmc_card with dev_set_drvdata, and keeps
371a689f
AW		 118 * track of the current selected device partition.
119 */
120 unsigned int part_curr;
121 struct device_attribute force_ro;
add710ea
JR		 122 struct device_attribute power_ro_lock;
123 int area_type;
1da177e4
LT		 124};
125
a621aaed 126static DEFINE_MUTEX(open_lock);
1da177e4 127
ce39f9d1
SJ		 128enum {
129 MMC_PACKED_NR_IDX = -1,
130 MMC_PACKED_NR_ZERO,
131 MMC_PACKED_NR_SINGLE,
132};
133
5e71b7a6
OJ		 134module_param(perdev_minors, int, 0444);
135MODULE_PARM_DESC(perdev_minors, "Minors numbers to allocate per device");
136
8d1e977d
LP		 137static inline int mmc_blk_part_switch(struct mmc_card *card,
138 struct mmc_blk_data *md);
139static int get_card_status(struct mmc_card *card, u32 *status, int retries);
140
ce39f9d1
SJ		 141static inline void mmc_blk_clear_packed(struct mmc_queue_req *mqrq)
142{
143 struct mmc_packed *packed = mqrq->packed;
144
145 BUG_ON(!packed);
146
147 mqrq->cmd_type = MMC_PACKED_NONE;
148 packed->nr_entries = MMC_PACKED_NR_ZERO;
149 packed->idx_failure = MMC_PACKED_NR_IDX;
150 packed->retries = 0;
151 packed->blocks = 0;
152}
153
1da177e4
LT		 154static struct mmc_blk_data *mmc_blk_get(struct gendisk *disk)
155{
156 struct mmc_blk_data *md;
157
a621aaed 158 mutex_lock(&open_lock);
1da177e4
LT		 159 md = disk->private_data;
160 if (md && md->usage == 0)
161 md = NULL;
162 if (md)
163 md->usage++;
a621aaed 164 mutex_unlock(&open_lock);
1da177e4
LT		 165
166 return md;
167}
168
371a689f
AW		 169static inline int mmc_get_devidx(struct gendisk *disk)
170{
382c55f8 171 int devidx = disk->first_minor / perdev_minors;
371a689f
AW		 172 return devidx;
173}
174
1da177e4
LT		 175static void mmc_blk_put(struct mmc_blk_data *md)
176{
a621aaed 177 mutex_lock(&open_lock);
1da177e4
LT		 178 md->usage--;
179 if (md->usage == 0) {
371a689f 180 int devidx = mmc_get_devidx(md->disk);
5fa83ce2
AH		 181 blk_cleanup_queue(md->queue.queue);
182
b10fa99e
UH		 183 spin_lock(&mmc_blk_lock);
184 ida_remove(&mmc_blk_ida, devidx);
185 spin_unlock(&mmc_blk_lock);
1dff3144 186
1da177e4 187 put_disk(md->disk);
1da177e4
LT		 188 kfree(md);
189 }
a621aaed 190 mutex_unlock(&open_lock);
1da177e4
LT		 191}
192
add710ea
JR		 193static ssize_t power_ro_lock_show(struct device *dev,
194 struct device_attribute *attr, char *buf)
195{
196 int ret;
197 struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
198 struct mmc_card *card = md->queue.card;
199 int locked = 0;
200
201 if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PERM_WP_EN)
202 locked = 2;
203 else if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PWR_WP_EN)
204 locked = 1;
205
206 ret = snprintf(buf, PAGE_SIZE, "%d\n", locked);
207
9098f84c
TW		 208 mmc_blk_put(md);
209
add710ea
JR		 210 return ret;
211}
212
213static ssize_t power_ro_lock_store(struct device *dev,
214 struct device_attribute *attr, const char *buf, size_t count)
215{
216 int ret;
217 struct mmc_blk_data *md, *part_md;
218 struct mmc_card *card;
219 unsigned long set;
220
221 if (kstrtoul(buf, 0, &set))
222 return -EINVAL;
223
224 if (set != 1)
225 return count;
226
227 md = mmc_blk_get(dev_to_disk(dev));
228 card = md->queue.card;
229
e94cfef6 230 mmc_get_card(card);
add710ea
JR		 231
232 ret = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL, EXT_CSD_BOOT_WP,
233 card->ext_csd.boot_ro_lock |
234 EXT_CSD_BOOT_WP_B_PWR_WP_EN,
235 card->ext_csd.part_time);
236 if (ret)
237 pr_err("%s: Locking boot partition ro until next power on failed: %d\n", md->disk->disk_name, ret);
238 else
239 card->ext_csd.boot_ro_lock |= EXT_CSD_BOOT_WP_B_PWR_WP_EN;
240
e94cfef6 241 mmc_put_card(card);
add710ea
JR		 242
243 if (!ret) {
244 pr_info("%s: Locking boot partition ro until next power on\n",
245 md->disk->disk_name);
246 set_disk_ro(md->disk, 1);
247
248 list_for_each_entry(part_md, &md->part, part)
249 if (part_md->area_type == MMC_BLK_DATA_AREA_BOOT) {
250 pr_info("%s: Locking boot partition ro until next power on\n", part_md->disk->disk_name);
251 set_disk_ro(part_md->disk, 1);
252 }
253 }
254
255 mmc_blk_put(md);
256 return count;
257}
258
371a689f
AW		 259static ssize_t force_ro_show(struct device *dev, struct device_attribute *attr,
260 char *buf)
261{
262 int ret;
263 struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
264
0031a98a 265 ret = snprintf(buf, PAGE_SIZE, "%d\n",
371a689f
AW		 266 get_disk_ro(dev_to_disk(dev)) ^
267 md->read_only);
268 mmc_blk_put(md);
269 return ret;
270}
271
272static ssize_t force_ro_store(struct device *dev, struct device_attribute *attr,
273 const char *buf, size_t count)
274{
275 int ret;
276 char *end;
277 struct mmc_blk_data *md = mmc_blk_get(dev_to_disk(dev));
278 unsigned long set = simple_strtoul(buf, &end, 0);
279 if (end == buf) {
280 ret = -EINVAL;
281 goto out;
282 }
283
284 set_disk_ro(dev_to_disk(dev), set || md->read_only);
285 ret = count;
286out:
287 mmc_blk_put(md);
288 return ret;
289}
290
a5a1561f 291static int mmc_blk_open(struct block_device *bdev, fmode_t mode)
1da177e4 292{
a5a1561f 293 struct mmc_blk_data *md = mmc_blk_get(bdev->bd_disk);
1da177e4
LT		 294 int ret = -ENXIO;
295
2a48fc0a 296 mutex_lock(&block_mutex);
1da177e4
LT		 297 if (md) {
298 if (md->usage == 2)
a5a1561f 299 check_disk_change(bdev);
1da177e4 300 ret = 0;
a00fc090 301
a5a1561f 302 if ((mode & FMODE_WRITE) && md->read_only) {
70bb0896 303 mmc_blk_put(md);
a00fc090 304 ret = -EROFS;
70bb0896 305 }
1da177e4 306 }
2a48fc0a 307 mutex_unlock(&block_mutex);
1da177e4
LT		 308
309 return ret;
310}
311
db2a144b 312static void mmc_blk_release(struct gendisk *disk, fmode_t mode)
1da177e4 313{
a5a1561f 314 struct mmc_blk_data *md = disk->private_data;
1da177e4 315
2a48fc0a 316 mutex_lock(&block_mutex);
1da177e4 317 mmc_blk_put(md);
2a48fc0a 318 mutex_unlock(&block_mutex);
1da177e4
LT		 319}
320
321static int
a885c8c4 322mmc_blk_getgeo(struct block_device *bdev, struct hd_geometry *geo)
1da177e4 323{
a885c8c4
CH		 324 geo->cylinders = get_capacity(bdev->bd_disk) / (4 * 16);
325 geo->heads = 4;
326 geo->sectors = 16;
327 return 0;
1da177e4
LT		 328}
329
cb87ea28
JC		 330struct mmc_blk_ioc_data {
331 struct mmc_ioc_cmd ic;
332 unsigned char *buf;
333 u64 buf_bytes;
334};
335
336static struct mmc_blk_ioc_data *mmc_blk_ioctl_copy_from_user(
337 struct mmc_ioc_cmd __user *user)
338{
339 struct mmc_blk_ioc_data *idata;
340 int err;
341
1ff8950c 342 idata = kmalloc(sizeof(*idata), GFP_KERNEL);
cb87ea28
JC		 343 if (!idata) {
344 err = -ENOMEM;
aea253ec 345 goto out;
cb87ea28
JC		 346 }
347
348 if (copy_from_user(&idata->ic, user, sizeof(idata->ic))) {
349 err = -EFAULT;
aea253ec 350 goto idata_err;
cb87ea28
JC		 351 }
352
353 idata->buf_bytes = (u64) idata->ic.blksz * idata->ic.blocks;
354 if (idata->buf_bytes > MMC_IOC_MAX_BYTES) {
355 err = -EOVERFLOW;
aea253ec 356 goto idata_err;
cb87ea28
JC		 357 }
358
bfe5b1b1
VV		 359 if (!idata->buf_bytes) {
360 idata->buf = NULL;
4d6144de 361 return idata;
bfe5b1b1 362 }
4d6144de 363
1ff8950c 364 idata->buf = kmalloc(idata->buf_bytes, GFP_KERNEL);
cb87ea28
JC		 365 if (!idata->buf) {
366 err = -ENOMEM;
aea253ec 367 goto idata_err;
cb87ea28
JC		 368 }
369
370 if (copy_from_user(idata->buf, (void __user *)(unsigned long)
371 idata->ic.data_ptr, idata->buf_bytes)) {
372 err = -EFAULT;
373 goto copy_err;
374 }
375
376 return idata;
377
378copy_err:
379 kfree(idata->buf);
aea253ec 380idata_err:
cb87ea28 381 kfree(idata);
aea253ec 382out:
cb87ea28 383 return ERR_PTR(err);
cb87ea28
JC		 384}
385
a5f5774c
JH		 386static int mmc_blk_ioctl_copy_to_user(struct mmc_ioc_cmd __user *ic_ptr,
387 struct mmc_blk_ioc_data *idata)
388{
389 struct mmc_ioc_cmd *ic = &idata->ic;
390
391 if (copy_to_user(&(ic_ptr->response), ic->response,
392 sizeof(ic->response)))
393 return -EFAULT;
394
395 if (!idata->ic.write_flag) {
396 if (copy_to_user((void __user *)(unsigned long)ic->data_ptr,
397 idata->buf, idata->buf_bytes))
398 return -EFAULT;
399 }
400
401 return 0;
402}
403
8d1e977d
LP		 404static int ioctl_rpmb_card_status_poll(struct mmc_card *card, u32 *status,
405 u32 retries_max)
406{
407 int err;
408 u32 retry_count = 0;
409
410 if (!status || !retries_max)
411 return -EINVAL;
412
413 do {
414 err = get_card_status(card, status, 5);
415 if (err)
416 break;
417
418 if (!R1_STATUS(*status) &&
419 (R1_CURRENT_STATE(*status) != R1_STATE_PRG))
420 break; /* RPMB programming operation complete */
421
422 /*
423 * Rechedule to give the MMC device a chance to continue
424 * processing the previous command without being polled too
425 * frequently.
426 */
427 usleep_range(1000, 5000);
428 } while (++retry_count < retries_max);
429
430 if (retry_count == retries_max)
431 err = -EPERM;
432
433 return err;
434}
435
775a9362
ME		 436static int ioctl_do_sanitize(struct mmc_card *card)
437{
438 int err;
439
a2d1086d 440 if (!mmc_can_sanitize(card)) {
775a9362
ME		 441 pr_warn("%s: %s - SANITIZE is not supported\n",
442 mmc_hostname(card->host), __func__);
443 err = -EOPNOTSUPP;
444 goto out;
445 }
446
447 pr_debug("%s: %s - SANITIZE IN PROGRESS...\n",
448 mmc_hostname(card->host), __func__);
449
450 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
451 EXT_CSD_SANITIZE_START, 1,
452 MMC_SANITIZE_REQ_TIMEOUT);
453
454 if (err)
455 pr_err("%s: %s - EXT_CSD_SANITIZE_START failed. err=%d\n",
456 mmc_hostname(card->host), __func__, err);
457
458 pr_debug("%s: %s - SANITIZE COMPLETED\n", mmc_hostname(card->host),
459 __func__);
460out:
461 return err;
462}
463
a5f5774c
JH		 464static int __mmc_blk_ioctl_cmd(struct mmc_card *card, struct mmc_blk_data *md,
465 struct mmc_blk_ioc_data *idata)
cb87ea28 466{
cb87ea28
JC		 467 struct mmc_command cmd = {0};
468 struct mmc_data data = {0};
ad5fd972 469 struct mmc_request mrq = {NULL};
cb87ea28
JC		 470 struct scatterlist sg;
471 int err;
8d1e977d
LP		 472 int is_rpmb = false;
473 u32 status = 0;
cb87ea28 474
a5f5774c
JH		 475 if (!card || !md || !idata)
476 return -EINVAL;
cb87ea28 477
8d1e977d
LP		 478 if (md->area_type & MMC_BLK_DATA_AREA_RPMB)
479 is_rpmb = true;
480
4d6144de
JR		 481 cmd.opcode = idata->ic.opcode;
482 cmd.arg = idata->ic.arg;
483 cmd.flags = idata->ic.flags;
484
485 if (idata->buf_bytes) {
486 data.sg = &sg;
487 data.sg_len = 1;
488 data.blksz = idata->ic.blksz;
489 data.blocks = idata->ic.blocks;
490
491 sg_init_one(data.sg, idata->buf, idata->buf_bytes);
492
493 if (idata->ic.write_flag)
494 data.flags = MMC_DATA_WRITE;
495 else
496 data.flags = MMC_DATA_READ;
497
498 /* data.flags must already be set before doing this. */
499 mmc_set_data_timeout(&data, card);
500
501 /* Allow overriding the timeout_ns for empirical tuning. */
502 if (idata->ic.data_timeout_ns)
503 data.timeout_ns = idata->ic.data_timeout_ns;
504
505 if ((cmd.flags & MMC_RSP_R1B) == MMC_RSP_R1B) {
506 /*
507 * Pretend this is a data transfer and rely on the
508 * host driver to compute timeout. When all host
509 * drivers support cmd.cmd_timeout for R1B, this
510 * can be changed to:
511 *
512 * mrq.data = NULL;
513 * cmd.cmd_timeout = idata->ic.cmd_timeout_ms;
514 */
515 data.timeout_ns = idata->ic.cmd_timeout_ms * 1000000;
516 }
517
518 mrq.data = &data;
519 }
520
521 mrq.cmd = &cmd;
522
8d1e977d
LP		 523 err = mmc_blk_part_switch(card, md);
524 if (err)
a5f5774c 525 return err;
8d1e977d 526
cb87ea28
JC		 527 if (idata->ic.is_acmd) {
528 err = mmc_app_cmd(card->host, card);
529 if (err)
a5f5774c 530 return err;
cb87ea28
JC		 531 }
532
8d1e977d
LP		 533 if (is_rpmb) {
534 err = mmc_set_blockcount(card, data.blocks,
535 idata->ic.write_flag & (1 << 31));
536 if (err)
a5f5774c 537 return err;
8d1e977d
LP		 538 }
539
a82e484e
YG		 540 if ((MMC_EXTRACT_INDEX_FROM_ARG(cmd.arg) == EXT_CSD_SANITIZE_START) &&
541 (cmd.opcode == MMC_SWITCH)) {
775a9362
ME		 542 err = ioctl_do_sanitize(card);
543
544 if (err)
545 pr_err("%s: ioctl_do_sanitize() failed. err = %d",
546 __func__, err);
547
a5f5774c 548 return err;
775a9362
ME		 549 }
550
cb87ea28
JC		 551 mmc_wait_for_req(card->host, &mrq);
552
553 if (cmd.error) {
554 dev_err(mmc_dev(card->host), "%s: cmd error %d\n",
555 __func__, cmd.error);
a5f5774c 556 return cmd.error;
cb87ea28
JC		 557 }
558 if (data.error) {
559 dev_err(mmc_dev(card->host), "%s: data error %d\n",
560 __func__, data.error);
a5f5774c 561 return data.error;
cb87ea28
JC		 562 }
563
564 /*
565 * According to the SD specs, some commands require a delay after
566 * issuing the command.
567 */
568 if (idata->ic.postsleep_min_us)
569 usleep_range(idata->ic.postsleep_min_us, idata->ic.postsleep_max_us);
570
a5f5774c 571 memcpy(&(idata->ic.response), cmd.resp, sizeof(cmd.resp));
cb87ea28 572
8d1e977d
LP		 573 if (is_rpmb) {
574 /*
575 * Ensure RPMB command has completed by polling CMD13
576 * "Send Status".
577 */
578 err = ioctl_rpmb_card_status_poll(card, &status, 5);
579 if (err)
580 dev_err(mmc_dev(card->host),
581 "%s: Card Status=0x%08X, error %d\n",
582 __func__, status, err);
583 }
584
a5f5774c
JH		 585 return err;
586}
587
588static int mmc_blk_ioctl_cmd(struct block_device *bdev,
589 struct mmc_ioc_cmd __user *ic_ptr)
590{
591 struct mmc_blk_ioc_data *idata;
592 struct mmc_blk_data *md;
593 struct mmc_card *card;
b093410c 594 int err = 0, ioc_err = 0;
a5f5774c 595
83c742c3
SL		 596 /*
597 * The caller must have CAP_SYS_RAWIO, and must be calling this on the
598 * whole block device, not on a partition. This prevents overspray
599 * between sibling partitions.
600 */
601 if ((!capable(CAP_SYS_RAWIO)) || (bdev != bdev->bd_contains))
602 return -EPERM;
603
a5f5774c
JH		 604 idata = mmc_blk_ioctl_copy_from_user(ic_ptr);
605 if (IS_ERR(idata))
606 return PTR_ERR(idata);
607
608 md = mmc_blk_get(bdev->bd_disk);
609 if (!md) {
610 err = -EINVAL;
611 goto cmd_err;
612 }
613
614 card = md->queue.card;
615 if (IS_ERR(card)) {
616 err = PTR_ERR(card);
617 goto cmd_done;
618 }
619
620 mmc_get_card(card);
621
b093410c 622 ioc_err = __mmc_blk_ioctl_cmd(card, md, idata);
a5f5774c 623
3c866568
AH		 624 /* Always switch back to main area after RPMB access */
625 if (md->area_type & MMC_BLK_DATA_AREA_RPMB)
626 mmc_blk_part_switch(card, dev_get_drvdata(&card->dev));
627
e94cfef6 628 mmc_put_card(card);
cb87ea28 629
b093410c 630 err = mmc_blk_ioctl_copy_to_user(ic_ptr, idata);
a5f5774c 631
cb87ea28
JC		 632cmd_done:
633 mmc_blk_put(md);
1c02f000 634cmd_err:
cb87ea28
JC		 635 kfree(idata->buf);
636 kfree(idata);
b093410c 637 return ioc_err ? ioc_err : err;
cb87ea28
JC		 638}
639
a5f5774c
JH		 640static int mmc_blk_ioctl_multi_cmd(struct block_device *bdev,
641 struct mmc_ioc_multi_cmd __user *user)
642{
643 struct mmc_blk_ioc_data **idata = NULL;
644 struct mmc_ioc_cmd __user *cmds = user->cmds;
645 struct mmc_card *card;
646 struct mmc_blk_data *md;
b093410c 647 int i, err = 0, ioc_err = 0;
a5f5774c
JH		 648 __u64 num_of_cmds;
649
83c742c3
SL		 650 /*
651 * The caller must have CAP_SYS_RAWIO, and must be calling this on the
652 * whole block device, not on a partition. This prevents overspray
653 * between sibling partitions.
654 */
655 if ((!capable(CAP_SYS_RAWIO)) || (bdev != bdev->bd_contains))
656 return -EPERM;
657
a5f5774c
JH		 658 if (copy_from_user(&num_of_cmds, &user->num_of_cmds,
659 sizeof(num_of_cmds)))
660 return -EFAULT;
661
662 if (num_of_cmds > MMC_IOC_MAX_CMDS)
663 return -EINVAL;
664
665 idata = kcalloc(num_of_cmds, sizeof(*idata), GFP_KERNEL);
666 if (!idata)
667 return -ENOMEM;
668
669 for (i = 0; i < num_of_cmds; i++) {
670 idata[i] = mmc_blk_ioctl_copy_from_user(&cmds[i]);
671 if (IS_ERR(idata[i])) {
672 err = PTR_ERR(idata[i]);
673 num_of_cmds = i;
674 goto cmd_err;
675 }
676 }
677
678 md = mmc_blk_get(bdev->bd_disk);
f00ab14c
OJ		 679 if (!md) {
680 err = -EINVAL;
a5f5774c 681 goto cmd_err;
f00ab14c 682 }
a5f5774c
JH		 683
684 card = md->queue.card;
685 if (IS_ERR(card)) {
686 err = PTR_ERR(card);
687 goto cmd_done;
688 }
689
690 mmc_get_card(card);
691
b093410c
GG		 692 for (i = 0; i < num_of_cmds && !ioc_err; i++)
693 ioc_err = __mmc_blk_ioctl_cmd(card, md, idata[i]);
a5f5774c 694
3c866568
AH		 695 /* Always switch back to main area after RPMB access */
696 if (md->area_type & MMC_BLK_DATA_AREA_RPMB)
697 mmc_blk_part_switch(card, dev_get_drvdata(&card->dev));
698
a5f5774c
JH		 699 mmc_put_card(card);
700
701 /* copy to user if data and response */
b093410c 702 for (i = 0; i < num_of_cmds && !err; i++)
a5f5774c 703 err = mmc_blk_ioctl_copy_to_user(&cmds[i], idata[i]);
a5f5774c
JH		 704
705cmd_done:
706 mmc_blk_put(md);
707cmd_err:
708 for (i = 0; i < num_of_cmds; i++) {
709 kfree(idata[i]->buf);
710 kfree(idata[i]);
711 }
712 kfree(idata);
b093410c 713 return ioc_err ? ioc_err : err;
a5f5774c
JH		 714}
715
cb87ea28
JC		 716static int mmc_blk_ioctl(struct block_device *bdev, fmode_t mode,
717 unsigned int cmd, unsigned long arg)
718{
a5f5774c
JH		 719 switch (cmd) {
720 case MMC_IOC_CMD:
721 return mmc_blk_ioctl_cmd(bdev,
722 (struct mmc_ioc_cmd __user *)arg);
723 case MMC_IOC_MULTI_CMD:
724 return mmc_blk_ioctl_multi_cmd(bdev,
725 (struct mmc_ioc_multi_cmd __user *)arg);
726 default:
727 return -EINVAL;
728 }
cb87ea28
JC		 729}
730
731#ifdef CONFIG_COMPAT
732static int mmc_blk_compat_ioctl(struct block_device *bdev, fmode_t mode,
733 unsigned int cmd, unsigned long arg)
734{
735 return mmc_blk_ioctl(bdev, mode, cmd, (unsigned long) compat_ptr(arg));
736}
737#endif
738
83d5cde4 739static const struct block_device_operations mmc_bdops = {
a5a1561f
AV		 740 .open = mmc_blk_open,
741 .release = mmc_blk_release,
a885c8c4 742 .getgeo = mmc_blk_getgeo,
1da177e4 743 .owner = THIS_MODULE,
cb87ea28
JC		 744 .ioctl = mmc_blk_ioctl,
745#ifdef CONFIG_COMPAT
746 .compat_ioctl = mmc_blk_compat_ioctl,
747#endif
1da177e4
LT		 748};
749
371a689f
AW		 750static inline int mmc_blk_part_switch(struct mmc_card *card,
751 struct mmc_blk_data *md)
752{
753 int ret;
fc95e30b 754 struct mmc_blk_data *main_md = dev_get_drvdata(&card->dev);
0d7d85ca 755
371a689f
AW		 756 if (main_md->part_curr == md->part_type)
757 return 0;
758
759 if (mmc_card_mmc(card)) {
0d7d85ca
AH		 760 u8 part_config = card->ext_csd.part_config;
761
57da0c04
AH		 762 if (md->part_type == EXT_CSD_PART_CONFIG_ACC_RPMB)
763 mmc_retune_pause(card->host);
764
0d7d85ca
AH		 765 part_config &= ~EXT_CSD_PART_CONFIG_ACC_MASK;
766 part_config |= md->part_type;
371a689f
AW		 767
768 ret = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
0d7d85ca 769 EXT_CSD_PART_CONFIG, part_config,
371a689f 770 card->ext_csd.part_time);
57da0c04
AH		 771 if (ret) {
772 if (md->part_type == EXT_CSD_PART_CONFIG_ACC_RPMB)
773 mmc_retune_unpause(card->host);
371a689f 774 return ret;
57da0c04 775 }
0d7d85ca
AH		 776
777 card->ext_csd.part_config = part_config;
57da0c04
AH		 778
779 if (main_md->part_curr == EXT_CSD_PART_CONFIG_ACC_RPMB)
780 mmc_retune_unpause(card->host);
67716327 781 }
371a689f
AW		 782
783 main_md->part_curr = md->part_type;
784 return 0;
785}
786
ec5a19dd
PO		 787static u32 mmc_sd_num_wr_blocks(struct mmc_card *card)
788{
789 int err;
051913da
BD		 790 u32 result;
791 __be32 *blocks;
ec5a19dd 792
ad5fd972 793 struct mmc_request mrq = {NULL};
1278dba1 794 struct mmc_command cmd = {0};
a61ad2b4 795 struct mmc_data data = {0};
ec5a19dd
PO		 796
797 struct scatterlist sg;
798
ec5a19dd
PO		 799 cmd.opcode = MMC_APP_CMD;
800 cmd.arg = card->rca << 16;
7213d175 801 cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_AC;
ec5a19dd
PO		 802
803 err = mmc_wait_for_cmd(card->host, &cmd, 0);
7213d175
DB		 804 if (err)
805 return (u32)-1;
806 if (!mmc_host_is_spi(card->host) && !(cmd.resp[0] & R1_APP_CMD))
ec5a19dd
PO		 807 return (u32)-1;
808
809 memset(&cmd, 0, sizeof(struct mmc_command));
810
811 cmd.opcode = SD_APP_SEND_NUM_WR_BLKS;
812 cmd.arg = 0;
7213d175 813 cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
ec5a19dd 814
ec5a19dd
PO		 815 data.blksz = 4;
816 data.blocks = 1;
817 data.flags = MMC_DATA_READ;
818 data.sg = &sg;
819 data.sg_len = 1;
d380443c 820 mmc_set_data_timeout(&data, card);
ec5a19dd 821
ec5a19dd
PO		 822 mrq.cmd = &cmd;
823 mrq.data = &data;
824
051913da
BD		 825 blocks = kmalloc(4, GFP_KERNEL);
826 if (!blocks)
827 return (u32)-1;
828
829 sg_init_one(&sg, blocks, 4);
ec5a19dd
PO		 830
831 mmc_wait_for_req(card->host, &mrq);
832
051913da
BD		 833 result = ntohl(*blocks);
834 kfree(blocks);
835
17b0429d 836 if (cmd.error || data.error)
051913da 837 result = (u32)-1;
ec5a19dd 838
051913da 839 return result;
ec5a19dd
PO		 840}
841
0a2d4048 842static int get_card_status(struct mmc_card *card, u32 *status, int retries)
504f191f 843{
1278dba1 844 struct mmc_command cmd = {0};
504f191f
AH		 845 int err;
846
504f191f
AH		 847 cmd.opcode = MMC_SEND_STATUS;
848 if (!mmc_host_is_spi(card->host))
849 cmd.arg = card->rca << 16;
850 cmd.flags = MMC_RSP_SPI_R2 | MMC_RSP_R1 | MMC_CMD_AC;
0a2d4048
RKAL		 851 err = mmc_wait_for_cmd(card->host, &cmd, retries);
852 if (err == 0)
853 *status = cmd.resp[0];
854 return err;
504f191f
AH		 855}
856
c49433fb 857static int card_busy_detect(struct mmc_card *card, unsigned int timeout_ms,
95a91298 858 bool hw_busy_detect, struct request *req, int *gen_err)
c49433fb
UH		 859{
860 unsigned long timeout = jiffies + msecs_to_jiffies(timeout_ms);
861 int err = 0;
862 u32 status;
863
864 do {
865 err = get_card_status(card, &status, 5);
866 if (err) {
867 pr_err("%s: error %d requesting status\n",
868 req->rq_disk->disk_name, err);
869 return err;
870 }
871
872 if (status & R1_ERROR) {
873 pr_err("%s: %s: error sending status cmd, status %#x\n",
874 req->rq_disk->disk_name, __func__, status);
875 *gen_err = 1;
876 }
877
95a91298
UH		 878 /* We may rely on the host hw to handle busy detection.*/
879 if ((card->host->caps & MMC_CAP_WAIT_WHILE_BUSY) &&
880 hw_busy_detect)
881 break;
882
c49433fb
UH		 883 /*
884 * Timeout if the device never becomes ready for data and never
885 * leaves the program state.
886 */
887 if (time_after(jiffies, timeout)) {
888 pr_err("%s: Card stuck in programming state! %s %s\n",
889 mmc_hostname(card->host),
890 req->rq_disk->disk_name, __func__);
891 return -ETIMEDOUT;
892 }
893
894 /*
895 * Some cards mishandle the status bits,
896 * so make sure to check both the busy
897 * indication and the card state.
898 */
899 } while (!(status & R1_READY_FOR_DATA) ||
900 (R1_CURRENT_STATE(status) == R1_STATE_PRG));
901
902 return err;
903}
904
bb5cba40
UH		 905static int send_stop(struct mmc_card *card, unsigned int timeout_ms,
906 struct request *req, int *gen_err, u32 *stop_status)
907{
908 struct mmc_host *host = card->host;
909 struct mmc_command cmd = {0};
910 int err;
911 bool use_r1b_resp = rq_data_dir(req) == WRITE;
912
913 /*
914 * Normally we use R1B responses for WRITE, but in cases where the host
915 * has specified a max_busy_timeout we need to validate it. A failure
916 * means we need to prevent the host from doing hw busy detection, which
917 * is done by converting to a R1 response instead.
918 */
919 if (host->max_busy_timeout && (timeout_ms > host->max_busy_timeout))
920 use_r1b_resp = false;
921
922 cmd.opcode = MMC_STOP_TRANSMISSION;
923 if (use_r1b_resp) {
924 cmd.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
925 cmd.busy_timeout = timeout_ms;
926 } else {
927 cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_AC;
928 }
929
930 err = mmc_wait_for_cmd(host, &cmd, 5);
931 if (err)
932 return err;
933
934 *stop_status = cmd.resp[0];
935
936 /* No need to check card status in case of READ. */
937 if (rq_data_dir(req) == READ)
938 return 0;
939
940 if (!mmc_host_is_spi(host) &&
941 (*stop_status & R1_ERROR)) {
942 pr_err("%s: %s: general error sending stop command, resp %#x\n",
943 req->rq_disk->disk_name, __func__, *stop_status);
944 *gen_err = 1;
945 }
946
947 return card_busy_detect(card, timeout_ms, use_r1b_resp, req, gen_err);
948}
949
a8ad82cc 950#define ERR_NOMEDIUM 3
a01f3ccf
RKAL		 951#define ERR_RETRY 2
952#define ERR_ABORT 1
953#define ERR_CONTINUE 0
954
955static int mmc_blk_cmd_error(struct request *req, const char *name, int error,
956 bool status_valid, u32 status)
957{
958 switch (error) {
959 case -EILSEQ:
960 /* response crc error, retry the r/w cmd */
961 pr_err("%s: %s sending %s command, card status %#x\n",
962 req->rq_disk->disk_name, "response CRC error",
963 name, status);
964 return ERR_RETRY;
965
966 case -ETIMEDOUT:
967 pr_err("%s: %s sending %s command, card status %#x\n",
968 req->rq_disk->disk_name, "timed out", name, status);
969
970 /* If the status cmd initially failed, retry the r/w cmd */
cc4d04be
KS		 971 if (!status_valid) {
972 pr_err("%s: status not valid, retrying timeout\n",
973 req->rq_disk->disk_name);
a01f3ccf 974 return ERR_RETRY;
cc4d04be 975 }
a01f3ccf
RKAL		 976
977 /*
978 * If it was a r/w cmd crc error, or illegal command
979 * (eg, issued in wrong state) then retry - we should
980 * have corrected the state problem above.
981 */
cc4d04be
KS		 982 if (status & (R1_COM_CRC_ERROR | R1_ILLEGAL_COMMAND)) {
983 pr_err("%s: command error, retrying timeout\n",
984 req->rq_disk->disk_name);
a01f3ccf 985 return ERR_RETRY;
cc4d04be 986 }
a01f3ccf
RKAL		 987
988 /* Otherwise abort the command */
989 return ERR_ABORT;
990
991 default:
992 /* We don't understand the error code the driver gave us */
993 pr_err("%s: unknown error %d sending read/write command, card status %#x\n",
994 req->rq_disk->disk_name, error, status);
995 return ERR_ABORT;
996 }
997}
998
999/*
1000 * Initial r/w and stop cmd error recovery.
1001 * We don't know whether the card received the r/w cmd or not, so try to
1002 * restore things back to a sane state. Essentially, we do this as follows:
1003 * - Obtain card status. If the first attempt to obtain card status fails,
1004 * the status word will reflect the failed status cmd, not the failed
1005 * r/w cmd. If we fail to obtain card status, it suggests we can no
1006 * longer communicate with the card.
1007 * - Check the card state. If the card received the cmd but there was a
1008 * transient problem with the response, it might still be in a data transfer
1009 * mode. Try to send it a stop command. If this fails, we can't recover.
1010 * - If the r/w cmd failed due to a response CRC error, it was probably
1011 * transient, so retry the cmd.
1012 * - If the r/w cmd timed out, but we didn't get the r/w cmd status, retry.
1013 * - If the r/w cmd timed out, and the r/w cmd failed due to CRC error or
1014 * illegal cmd, retry.
1015 * Otherwise we don't understand what happened, so abort.
1016 */
1017static int mmc_blk_cmd_recovery(struct mmc_card *card, struct request *req,
c8760069 1018 struct mmc_blk_request *brq, int *ecc_err, int *gen_err)
a01f3ccf
RKAL		 1019{
1020 bool prev_cmd_status_valid = true;
1021 u32 status, stop_status = 0;
1022 int err, retry;
1023
a8ad82cc
SRT		 1024 if (mmc_card_removed(card))
1025 return ERR_NOMEDIUM;
1026
a01f3ccf
RKAL		 1027 /*
1028 * Try to get card status which indicates both the card state
1029 * and why there was no response. If the first attempt fails,
1030 * we can't be sure the returned status is for the r/w command.
1031 */
1032 for (retry = 2; retry >= 0; retry--) {
1033 err = get_card_status(card, &status, 0);
1034 if (!err)
1035 break;
1036
6f398ad2
AH		 1037 /* Re-tune if needed */
1038 mmc_retune_recheck(card->host);
1039
a01f3ccf
RKAL		 1040 prev_cmd_status_valid = false;
1041 pr_err("%s: error %d sending status command, %sing\n",
1042 req->rq_disk->disk_name, err, retry ? "retry" : "abort");
1043 }
1044
1045 /* We couldn't get a response from the card. Give up. */
a8ad82cc
SRT		 1046 if (err) {
1047 /* Check if the card is removed */
1048 if (mmc_detect_card_removed(card->host))
1049 return ERR_NOMEDIUM;
a01f3ccf 1050 return ERR_ABORT;
a8ad82cc 1051 }
a01f3ccf 1052
67716327
AH		 1053 /* Flag ECC errors */
1054 if ((status & R1_CARD_ECC_FAILED) ||
1055 (brq->stop.resp[0] & R1_CARD_ECC_FAILED) ||
1056 (brq->cmd.resp[0] & R1_CARD_ECC_FAILED))
1057 *ecc_err = 1;
1058
c8760069
KY		 1059 /* Flag General errors */
1060 if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ)
1061 if ((status & R1_ERROR) ||
1062 (brq->stop.resp[0] & R1_ERROR)) {
1063 pr_err("%s: %s: general error sending stop or status command, stop cmd response %#x, card status %#x\n",
1064 req->rq_disk->disk_name, __func__,
1065 brq->stop.resp[0], status);
1066 *gen_err = 1;
1067 }
1068
a01f3ccf
RKAL		 1069 /*
1070 * Check the current card state. If it is in some data transfer
1071 * mode, tell it to stop (and hopefully transition back to TRAN.)
1072 */
1073 if (R1_CURRENT_STATE(status) == R1_STATE_DATA ||
1074 R1_CURRENT_STATE(status) == R1_STATE_RCV) {
bb5cba40
UH		 1075 err = send_stop(card,
1076 DIV_ROUND_UP(brq->data.timeout_ns, 1000000),
1077 req, gen_err, &stop_status);
1078 if (err) {
a01f3ccf
RKAL		 1079 pr_err("%s: error %d sending stop command\n",
1080 req->rq_disk->disk_name, err);
bb5cba40
UH		 1081 /*
1082 * If the stop cmd also timed out, the card is probably
1083 * not present, so abort. Other errors are bad news too.
1084 */
a01f3ccf 1085 return ERR_ABORT;
bb5cba40
UH		 1086 }
1087
67716327
AH		 1088 if (stop_status & R1_CARD_ECC_FAILED)
1089 *ecc_err = 1;
a01f3ccf
RKAL		 1090 }
1091
1092 /* Check for set block count errors */
1093 if (brq->sbc.error)
1094 return mmc_blk_cmd_error(req, "SET_BLOCK_COUNT", brq->sbc.error,
1095 prev_cmd_status_valid, status);
1096
1097 /* Check for r/w command errors */
1098 if (brq->cmd.error)
1099 return mmc_blk_cmd_error(req, "r/w cmd", brq->cmd.error,
1100 prev_cmd_status_valid, status);
1101
67716327
AH		 1102 /* Data errors */
1103 if (!brq->stop.error)
1104 return ERR_CONTINUE;
1105
a01f3ccf 1106 /* Now for stop errors. These aren't fatal to the transfer. */
5e1344eb 1107 pr_info("%s: error %d sending stop command, original cmd response %#x, card status %#x\n",
a01f3ccf
RKAL		 1108 req->rq_disk->disk_name, brq->stop.error,
1109 brq->cmd.resp[0], status);
1110
1111 /*
1112 * Subsitute in our own stop status as this will give the error
1113 * state which happened during the execution of the r/w command.
1114 */
1115 if (stop_status) {
1116 brq->stop.resp[0] = stop_status;
1117 brq->stop.error = 0;
1118 }
1119 return ERR_CONTINUE;
1120}
1121
67716327
AH		 1122static int mmc_blk_reset(struct mmc_blk_data *md, struct mmc_host *host,
1123 int type)
1124{
1125 int err;
1126
1127 if (md->reset_done & type)
1128 return -EEXIST;
1129
1130 md->reset_done |= type;
1131 err = mmc_hw_reset(host);
1132 /* Ensure we switch back to the correct partition */
1133 if (err != -EOPNOTSUPP) {
fc95e30b
UH		 1134 struct mmc_blk_data *main_md =
1135 dev_get_drvdata(&host->card->dev);
67716327
AH		 1136 int part_err;
1137
1138 main_md->part_curr = main_md->part_type;
1139 part_err = mmc_blk_part_switch(host->card, md);
1140 if (part_err) {
1141 /*
1142 * We have failed to get back into the correct
1143 * partition, so we need to abort the whole request.
1144 */
1145 return -ENODEV;
1146 }
1147 }
1148 return err;
1149}
1150
1151static inline void mmc_blk_reset_success(struct mmc_blk_data *md, int type)
1152{
1153 md->reset_done &= ~type;
1154}
1155
4e93b9a6
CD		 1156int mmc_access_rpmb(struct mmc_queue *mq)
1157{
1158 struct mmc_blk_data *md = mq->data;
1159 /*
1160 * If this is a RPMB partition access, return ture
1161 */
1162 if (md && md->part_type == EXT_CSD_PART_CONFIG_ACC_RPMB)
1163 return true;
1164
1165 return false;
1166}
1167
bd788c96
AH		 1168static int mmc_blk_issue_discard_rq(struct mmc_queue *mq, struct request *req)
1169{
1170 struct mmc_blk_data *md = mq->data;
1171 struct mmc_card *card = md->queue.card;
1172 unsigned int from, nr, arg;
67716327 1173 int err = 0, type = MMC_BLK_DISCARD;
bd788c96 1174
bd788c96
AH		 1175 if (!mmc_can_erase(card)) {
1176 err = -EOPNOTSUPP;
1177 goto out;
1178 }
1179
1180 from = blk_rq_pos(req);
1181 nr = blk_rq_sectors(req);
1182
b3bf9153
KP		 1183 if (mmc_can_discard(card))
1184 arg = MMC_DISCARD_ARG;
1185 else if (mmc_can_trim(card))
bd788c96
AH		 1186 arg = MMC_TRIM_ARG;
1187 else
1188 arg = MMC_ERASE_ARG;
67716327 1189retry:
6a7a6b45
AW		 1190 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1191 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1192 INAND_CMD38_ARG_EXT_CSD,
1193 arg == MMC_TRIM_ARG ?
1194 INAND_CMD38_ARG_TRIM :
1195 INAND_CMD38_ARG_ERASE,
1196 0);
1197 if (err)
1198 goto out;
1199 }
bd788c96
AH		 1200 err = mmc_erase(card, from, nr, arg);
1201out:
67716327
AH		 1202 if (err == -EIO && !mmc_blk_reset(md, card->host, type))
1203 goto retry;
1204 if (!err)
1205 mmc_blk_reset_success(md, type);
ecf8b5d0 1206 blk_end_request(req, err, blk_rq_bytes(req));
bd788c96 1207
bd788c96
AH		 1208 return err ? 0 : 1;
1209}
1210
49804548
AH		 1211static int mmc_blk_issue_secdiscard_rq(struct mmc_queue *mq,
1212 struct request *req)
1213{
1214 struct mmc_blk_data *md = mq->data;
1215 struct mmc_card *card = md->queue.card;
775a9362 1216 unsigned int from, nr, arg;
67716327 1217 int err = 0, type = MMC_BLK_SECDISCARD;
49804548 1218
775a9362 1219 if (!(mmc_can_secure_erase_trim(card))) {
49804548
AH		 1220 err = -EOPNOTSUPP;
1221 goto out;
1222 }
1223
28302812
AH		 1224 from = blk_rq_pos(req);
1225 nr = blk_rq_sectors(req);
1226
775a9362
ME		 1227 if (mmc_can_trim(card) && !mmc_erase_group_aligned(card, from, nr))
1228 arg = MMC_SECURE_TRIM1_ARG;
1229 else
1230 arg = MMC_SECURE_ERASE_ARG;
d9ddd629 1231
67716327 1232retry:
6a7a6b45
AW		 1233 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1234 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1235 INAND_CMD38_ARG_EXT_CSD,
1236 arg == MMC_SECURE_TRIM1_ARG ?
1237 INAND_CMD38_ARG_SECTRIM1 :
1238 INAND_CMD38_ARG_SECERASE,
1239 0);
1240 if (err)
28302812 1241 goto out_retry;
6a7a6b45 1242 }
28302812 1243
49804548 1244 err = mmc_erase(card, from, nr, arg);
28302812
AH		 1245 if (err == -EIO)
1246 goto out_retry;
1247 if (err)
1248 goto out;
1249
1250 if (arg == MMC_SECURE_TRIM1_ARG) {
6a7a6b45
AW		 1251 if (card->quirks & MMC_QUIRK_INAND_CMD38) {
1252 err = mmc_switch(card, EXT_CSD_CMD_SET_NORMAL,
1253 INAND_CMD38_ARG_EXT_CSD,
1254 INAND_CMD38_ARG_SECTRIM2,
1255 0);
1256 if (err)
28302812 1257 goto out_retry;
6a7a6b45 1258 }
28302812 1259
49804548 1260 err = mmc_erase(card, from, nr, MMC_SECURE_TRIM2_ARG);
28302812
AH		 1261 if (err == -EIO)
1262 goto out_retry;
1263 if (err)
1264 goto out;
6a7a6b45 1265 }
28302812 1266
28302812
AH		 1267out_retry:
1268 if (err && !mmc_blk_reset(md, card->host, type))
67716327
AH		 1269 goto retry;
1270 if (!err)
1271 mmc_blk_reset_success(md, type);
28302812 1272out:
ecf8b5d0 1273 blk_end_request(req, err, blk_rq_bytes(req));
49804548 1274
49804548
AH		 1275 return err ? 0 : 1;
1276}
1277
f4c5522b
AW		 1278static int mmc_blk_issue_flush(struct mmc_queue *mq, struct request *req)
1279{
1280 struct mmc_blk_data *md = mq->data;
881d1c25
SJ		 1281 struct mmc_card *card = md->queue.card;
1282 int ret = 0;
1283
1284 ret = mmc_flush_cache(card);
1285 if (ret)
1286 ret = -EIO;
f4c5522b 1287
ecf8b5d0 1288 blk_end_request_all(req, ret);
f4c5522b 1289
881d1c25 1290 return ret ? 0 : 1;
f4c5522b
AW		 1291}
1292
1293/*
1294 * Reformat current write as a reliable write, supporting
1295 * both legacy and the enhanced reliable write MMC cards.
1296 * In each transfer we'll handle only as much as a single
1297 * reliable write can handle, thus finish the request in
1298 * partial completions.
1299 */
d0c97cfb
AW		 1300static inline void mmc_apply_rel_rw(struct mmc_blk_request *brq,
1301 struct mmc_card *card,
1302 struct request *req)
f4c5522b 1303{
f4c5522b
AW		 1304 if (!(card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN)) {
1305 /* Legacy mode imposes restrictions on transfers. */
1306 if (!IS_ALIGNED(brq->cmd.arg, card->ext_csd.rel_sectors))
1307 brq->data.blocks = 1;
1308
1309 if (brq->data.blocks > card->ext_csd.rel_sectors)
1310 brq->data.blocks = card->ext_csd.rel_sectors;
1311 else if (brq->data.blocks < card->ext_csd.rel_sectors)
1312 brq->data.blocks = 1;
1313 }
f4c5522b
AW		 1314}
1315
4c2b8f26
RKAL		 1316#define CMD_ERRORS \
1317 (R1_OUT_OF_RANGE | /* Command argument out of range */ \
1318 R1_ADDRESS_ERROR | /* Misaligned address */ \
1319 R1_BLOCK_LEN_ERROR | /* Transferred block length incorrect */\
1320 R1_WP_VIOLATION | /* Tried to write to protected block */ \
1321 R1_CC_ERROR | /* Card controller error */ \
1322 R1_ERROR) /* General/unknown error */
1323
ee8a43a5
PF		 1324static int mmc_blk_err_check(struct mmc_card *card,
1325 struct mmc_async_req *areq)
d78d4a8a 1326{
ee8a43a5
PF		 1327 struct mmc_queue_req *mq_mrq = container_of(areq, struct mmc_queue_req,
1328 mmc_active);
1329 struct mmc_blk_request *brq = &mq_mrq->brq;
1330 struct request *req = mq_mrq->req;
b8360a49 1331 int need_retune = card->host->need_retune;
c8760069 1332 int ecc_err = 0, gen_err = 0;
d78d4a8a
PF		 1333
1334 /*
1335 * sbc.error indicates a problem with the set block count
1336 * command. No data will have been transferred.
1337 *
1338 * cmd.error indicates a problem with the r/w command. No
1339 * data will have been transferred.
1340 *
1341 * stop.error indicates a problem with the stop command. Data
1342 * may have been transferred, or may still be transferring.
1343 */
67716327
AH		 1344 if (brq->sbc.error || brq->cmd.error || brq->stop.error ||
1345 brq->data.error) {
c8760069 1346 switch (mmc_blk_cmd_recovery(card, req, brq, &ecc_err, &gen_err)) {
d78d4a8a
PF		 1347 case ERR_RETRY:
1348 return MMC_BLK_RETRY;
1349 case ERR_ABORT:
1350 return MMC_BLK_ABORT;
a8ad82cc
SRT		 1351 case ERR_NOMEDIUM:
1352 return MMC_BLK_NOMEDIUM;
d78d4a8a
PF		 1353 case ERR_CONTINUE:
1354 break;
1355 }
1356 }
1357
1358 /*
1359 * Check for errors relating to the execution of the
1360 * initial command - such as address errors. No data
1361 * has been transferred.
1362 */
1363 if (brq->cmd.resp[0] & CMD_ERRORS) {
1364 pr_err("%s: r/w command failed, status = %#x\n",
1365 req->rq_disk->disk_name, brq->cmd.resp[0]);
1366 return MMC_BLK_ABORT;
1367 }
1368
1369 /*
1370 * Everything else is either success, or a data error of some
1371 * kind. If it was a write, we may have transitioned to
1372 * program mode, which we have to wait for it to complete.
1373 */
1374 if (!mmc_host_is_spi(card->host) && rq_data_dir(req) != READ) {
c49433fb 1375 int err;
8fee476b 1376
c8760069
KY		 1377 /* Check stop command response */
1378 if (brq->stop.resp[0] & R1_ERROR) {
1379 pr_err("%s: %s: general error sending stop command, stop cmd response %#x\n",
1380 req->rq_disk->disk_name, __func__,
1381 brq->stop.resp[0]);
1382 gen_err = 1;
1383 }
1384
95a91298
UH		 1385 err = card_busy_detect(card, MMC_BLK_TIMEOUT_MS, false, req,
1386 &gen_err);
c49433fb
UH		 1387 if (err)
1388 return MMC_BLK_CMD_ERR;
d78d4a8a
PF		 1389 }
1390
c8760069
KY		 1391 /* if general error occurs, retry the write operation. */
1392 if (gen_err) {
1393 pr_warn("%s: retrying write for general error\n",
1394 req->rq_disk->disk_name);
1395 return MMC_BLK_RETRY;
1396 }
1397
d78d4a8a 1398 if (brq->data.error) {
b8360a49 1399 if (need_retune && !brq->retune_retry_done) {
09faf61d
RK		 1400 pr_debug("%s: retrying because a re-tune was needed\n",
1401 req->rq_disk->disk_name);
b8360a49
AH		 1402 brq->retune_retry_done = 1;
1403 return MMC_BLK_RETRY;
1404 }
d78d4a8a
PF		 1405 pr_err("%s: error %d transferring data, sector %u, nr %u, cmd response %#x, card status %#x\n",
1406 req->rq_disk->disk_name, brq->data.error,
1407 (unsigned)blk_rq_pos(req),
1408 (unsigned)blk_rq_sectors(req),
1409 brq->cmd.resp[0], brq->stop.resp[0]);
1410
1411 if (rq_data_dir(req) == READ) {
67716327
AH		 1412 if (ecc_err)
1413 return MMC_BLK_ECC_ERR;
d78d4a8a
PF		 1414 return MMC_BLK_DATA_ERR;
1415 } else {
1416 return MMC_BLK_CMD_ERR;
1417 }
1418 }
1419
67716327
AH		 1420 if (!brq->data.bytes_xfered)
1421 return MMC_BLK_RETRY;
d78d4a8a 1422
ce39f9d1
SJ		 1423 if (mmc_packed_cmd(mq_mrq->cmd_type)) {
1424 if (unlikely(brq->data.blocks << 9 != brq->data.bytes_xfered))
1425 return MMC_BLK_PARTIAL;
1426 else
1427 return MMC_BLK_SUCCESS;
1428 }
1429
67716327
AH		 1430 if (blk_rq_bytes(req) != brq->data.bytes_xfered)
1431 return MMC_BLK_PARTIAL;
1432
1433 return MMC_BLK_SUCCESS;
d78d4a8a
PF		 1434}
1435
ce39f9d1
SJ		 1436static int mmc_blk_packed_err_check(struct mmc_card *card,
1437 struct mmc_async_req *areq)
1438{
1439 struct mmc_queue_req *mq_rq = container_of(areq, struct mmc_queue_req,
1440 mmc_active);
1441 struct request *req = mq_rq->req;
1442 struct mmc_packed *packed = mq_rq->packed;
1443 int err, check, status;
1444 u8 *ext_csd;
1445
1446 BUG_ON(!packed);
1447
1448 packed->retries--;
1449 check = mmc_blk_err_check(card, areq);
1450 err = get_card_status(card, &status, 0);
1451 if (err) {
1452 pr_err("%s: error %d sending status command\n",
1453 req->rq_disk->disk_name, err);
1454 return MMC_BLK_ABORT;
1455 }
1456
1457 if (status & R1_EXCEPTION_EVENT) {
86817ffb 1458 err = mmc_get_ext_csd(card, &ext_csd);
ce39f9d1
SJ		 1459 if (err) {
1460 pr_err("%s: error %d sending ext_csd\n",
1461 req->rq_disk->disk_name, err);
86817ffb 1462 return MMC_BLK_ABORT;
ce39f9d1
SJ		 1463 }
1464
1465 if ((ext_csd[EXT_CSD_EXP_EVENTS_STATUS] &
1466 EXT_CSD_PACKED_FAILURE) &&
1467 (ext_csd[EXT_CSD_PACKED_CMD_STATUS] &
1468 EXT_CSD_PACKED_GENERIC_ERROR)) {
1469 if (ext_csd[EXT_CSD_PACKED_CMD_STATUS] &
1470 EXT_CSD_PACKED_INDEXED_ERROR) {
1471 packed->idx_failure =
1472 ext_csd[EXT_CSD_PACKED_FAILURE_INDEX] - 1;
1473 check = MMC_BLK_PARTIAL;
1474 }
1475 pr_err("%s: packed cmd failed, nr %u, sectors %u, "
1476 "failure index: %d\n",
1477 req->rq_disk->disk_name, packed->nr_entries,
1478 packed->blocks, packed->idx_failure);
1479 }
ce39f9d1
SJ		 1480 kfree(ext_csd);
1481 }
1482
1483 return check;
1484}
1485
54d49d77
PF		 1486static void mmc_blk_rw_rq_prep(struct mmc_queue_req *mqrq,
1487 struct mmc_card *card,
1488 int disable_multi,
1489 struct mmc_queue *mq)
1da177e4 1490{
54d49d77
PF		 1491 u32 readcmd, writecmd;
1492 struct mmc_blk_request *brq = &mqrq->brq;
1493 struct request *req = mqrq->req;
1da177e4 1494 struct mmc_blk_data *md = mq->data;
4265900e 1495 bool do_data_tag;
1da177e4 1496
f4c5522b
AW		 1497 /*
1498 * Reliable writes are used to implement Forced Unit Access and
d3df0465 1499 * are supported only on MMCs.
f4c5522b 1500 */
d3df0465 1501 bool do_rel_wr = (req->cmd_flags & REQ_FUA) &&
f4c5522b 1502 (rq_data_dir(req) == WRITE) &&
d0c97cfb 1503 (md->flags & MMC_BLK_REL_WR);
f4c5522b 1504
54d49d77
PF		 1505 memset(brq, 0, sizeof(struct mmc_blk_request));
1506 brq->mrq.cmd = &brq->cmd;
1507 brq->mrq.data = &brq->data;
1da177e4 1508
54d49d77
PF		 1509 brq->cmd.arg = blk_rq_pos(req);
1510 if (!mmc_card_blockaddr(card))
1511 brq->cmd.arg <<= 9;
1512 brq->cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
1513 brq->data.blksz = 512;
1514 brq->stop.opcode = MMC_STOP_TRANSMISSION;
1515 brq->stop.arg = 0;
54d49d77 1516 brq->data.blocks = blk_rq_sectors(req);
6a79e391 1517
54d49d77
PF		 1518 /*
1519 * The block layer doesn't support all sector count
1520 * restrictions, so we need to be prepared for too big
1521 * requests.
1522 */
1523 if (brq->data.blocks > card->host->max_blk_count)
1524 brq->data.blocks = card->host->max_blk_count;
1da177e4 1525
2bf22b39
PW		 1526 if (brq->data.blocks > 1) {
1527 /*
1528 * After a read error, we redo the request one sector
1529 * at a time in order to accurately determine which
1530 * sectors can be read successfully.
1531 */
1532 if (disable_multi)
1533 brq->data.blocks = 1;
1534
2e47e842
KM		 1535 /*
1536 * Some controllers have HW issues while operating
1537 * in multiple I/O mode
1538 */
1539 if (card->host->ops->multi_io_quirk)
1540 brq->data.blocks = card->host->ops->multi_io_quirk(card,
1541 (rq_data_dir(req) == READ) ?
1542 MMC_DATA_READ : MMC_DATA_WRITE,
1543 brq->data.blocks);
2bf22b39 1544 }
d0c97cfb 1545
54d49d77
PF		 1546 if (brq->data.blocks > 1 || do_rel_wr) {
1547 /* SPI multiblock writes terminate using a special
1548 * token, not a STOP_TRANSMISSION request.
d0c97cfb 1549 */
54d49d77
PF		 1550 if (!mmc_host_is_spi(card->host) ||
1551 rq_data_dir(req) == READ)
1552 brq->mrq.stop = &brq->stop;
1553 readcmd = MMC_READ_MULTIPLE_BLOCK;
1554 writecmd = MMC_WRITE_MULTIPLE_BLOCK;
1555 } else {
1556 brq->mrq.stop = NULL;
1557 readcmd = MMC_READ_SINGLE_BLOCK;
1558 writecmd = MMC_WRITE_BLOCK;
1559 }
1560 if (rq_data_dir(req) == READ) {
1561 brq->cmd.opcode = readcmd;
f53f1102 1562 brq->data.flags = MMC_DATA_READ;
bcc3e172
UH		 1563 if (brq->mrq.stop)
1564 brq->stop.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 |
1565 MMC_CMD_AC;
54d49d77
PF		 1566 } else {
1567 brq->cmd.opcode = writecmd;
f53f1102 1568 brq->data.flags = MMC_DATA_WRITE;
bcc3e172
UH		 1569 if (brq->mrq.stop)
1570 brq->stop.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B |
1571 MMC_CMD_AC;
54d49d77 1572 }
d0c97cfb 1573
54d49d77
PF		 1574 if (do_rel_wr)
1575 mmc_apply_rel_rw(brq, card, req);
f4c5522b 1576
4265900e
SD		 1577 /*
1578 * Data tag is used only during writing meta data to speed
1579 * up write and any subsequent read of this meta data
1580 */
1581 do_data_tag = (card->ext_csd.data_tag_unit_size) &&
1582 (req->cmd_flags & REQ_META) &&
1583 (rq_data_dir(req) == WRITE) &&
1584 ((brq->data.blocks * brq->data.blksz) >=
1585 card->ext_csd.data_tag_unit_size);
1586
54d49d77
PF		 1587 /*
1588 * Pre-defined multi-block transfers are preferable to
1589 * open ended-ones (and necessary for reliable writes).
1590 * However, it is not sufficient to just send CMD23,
1591 * and avoid the final CMD12, as on an error condition
1592 * CMD12 (stop) needs to be sent anyway. This, coupled
1593 * with Auto-CMD23 enhancements provided by some
1594 * hosts, means that the complexity of dealing
1595 * with this is best left to the host. If CMD23 is
1596 * supported by card and host, we'll fill sbc in and let
1597 * the host deal with handling it correctly. This means
1598 * that for hosts that don't expose MMC_CAP_CMD23, no
1599 * change of behavior will be observed.
1600 *
1601 * N.B: Some MMC cards experience perf degradation.
1602 * We'll avoid using CMD23-bounded multiblock writes for
1603 * these, while retaining features like reliable writes.
1604 */
4265900e
SD		 1605 if ((md->flags & MMC_BLK_CMD23) && mmc_op_multi(brq->cmd.opcode) &&
1606 (do_rel_wr || !(card->quirks & MMC_QUIRK_BLK_NO_CMD23) ||
1607 do_data_tag)) {
54d49d77
PF		 1608 brq->sbc.opcode = MMC_SET_BLOCK_COUNT;
1609 brq->sbc.arg = brq->data.blocks |
4265900e
SD		 1610 (do_rel_wr ? (1 << 31) : 0) |
1611 (do_data_tag ? (1 << 29) : 0);
54d49d77
PF		 1612 brq->sbc.flags = MMC_RSP_R1 | MMC_CMD_AC;
1613 brq->mrq.sbc = &brq->sbc;
1614 }
98ccf149 1615
54d49d77
PF		 1616 mmc_set_data_timeout(&brq->data, card);
1617
1618 brq->data.sg = mqrq->sg;
1619 brq->data.sg_len = mmc_queue_map_sg(mq, mqrq);
1620
1621 /*
1622 * Adjust the sg list so it is the same size as the
1623 * request.
1624 */
1625 if (brq->data.blocks != blk_rq_sectors(req)) {
1626 int i, data_size = brq->data.blocks << 9;
1627 struct scatterlist *sg;
1628
1629 for_each_sg(brq->data.sg, sg, brq->data.sg_len, i) {
1630 data_size -= sg->length;
1631 if (data_size <= 0) {
1632 sg->length += data_size;
1633 i++;
1634 break;
6a79e391 1635 }
6a79e391 1636 }
54d49d77
PF		 1637 brq->data.sg_len = i;
1638 }
1639
ee8a43a5
PF		 1640 mqrq->mmc_active.mrq = &brq->mrq;
1641 mqrq->mmc_active.err_check = mmc_blk_err_check;
1642
54d49d77
PF		 1643 mmc_queue_bounce_pre(mqrq);
1644}
6a79e391 1645
ce39f9d1
SJ		 1646static inline u8 mmc_calc_packed_hdr_segs(struct request_queue *q,
1647 struct mmc_card *card)
1648{
1649 unsigned int hdr_sz = mmc_large_sector(card) ? 4096 : 512;
1650 unsigned int max_seg_sz = queue_max_segment_size(q);
1651 unsigned int len, nr_segs = 0;
1652
1653 do {
1654 len = min(hdr_sz, max_seg_sz);
1655 hdr_sz -= len;
1656 nr_segs++;
1657 } while (hdr_sz);
1658
1659 return nr_segs;
1660}
1661
1662static u8 mmc_blk_prep_packed_list(struct mmc_queue *mq, struct request *req)
1663{
1664 struct request_queue *q = mq->queue;
1665 struct mmc_card *card = mq->card;
1666 struct request *cur = req, *next = NULL;
1667 struct mmc_blk_data *md = mq->data;
1668 struct mmc_queue_req *mqrq = mq->mqrq_cur;
1669 bool en_rel_wr = card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN;
1670 unsigned int req_sectors = 0, phys_segments = 0;
1671 unsigned int max_blk_count, max_phys_segs;
1672 bool put_back = true;
1673 u8 max_packed_rw = 0;
1674 u8 reqs = 0;
1675
1676 if (!(md->flags & MMC_BLK_PACKED_CMD))
1677 goto no_packed;
1678
1679 if ((rq_data_dir(cur) == WRITE) &&
1680 mmc_host_packed_wr(card->host))
1681 max_packed_rw = card->ext_csd.max_packed_writes;
1682
1683 if (max_packed_rw == 0)
1684 goto no_packed;
1685
1686 if (mmc_req_rel_wr(cur) &&
1687 (md->flags & MMC_BLK_REL_WR) && !en_rel_wr)
1688 goto no_packed;
1689
1690 if (mmc_large_sector(card) &&
1691 !IS_ALIGNED(blk_rq_sectors(cur), 8))
1692 goto no_packed;
1693
1694 mmc_blk_clear_packed(mqrq);
1695
1696 max_blk_count = min(card->host->max_blk_count,
1697 card->host->max_req_size >> 9);
1698 if (unlikely(max_blk_count > 0xffff))
1699 max_blk_count = 0xffff;
1700
1701 max_phys_segs = queue_max_segments(q);
1702 req_sectors += blk_rq_sectors(cur);
1703 phys_segments += cur->nr_phys_segments;
1704
1705 if (rq_data_dir(cur) == WRITE) {
1706 req_sectors += mmc_large_sector(card) ? 8 : 1;
1707 phys_segments += mmc_calc_packed_hdr_segs(q, card);
1708 }
1709
1710 do {
1711 if (reqs >= max_packed_rw - 1) {
1712 put_back = false;
1713 break;
1714 }
1715
1716 spin_lock_irq(q->queue_lock);
1717 next = blk_fetch_request(q);
1718 spin_unlock_irq(q->queue_lock);
1719 if (!next) {
1720 put_back = false;
1721 break;
1722 }
1723
1724 if (mmc_large_sector(card) &&
1725 !IS_ALIGNED(blk_rq_sectors(next), 8))
1726 break;
1727
3a5e02ce 1728 if (req_op(next) == REQ_OP_DISCARD ||
7afafc8a 1729 req_op(next) == REQ_OP_SECURE_ERASE ||
3a5e02ce 1730 req_op(next) == REQ_OP_FLUSH)
ce39f9d1
SJ		 1731 break;
1732
1733 if (rq_data_dir(cur) != rq_data_dir(next))
1734 break;
1735
1736 if (mmc_req_rel_wr(next) &&
1737 (md->flags & MMC_BLK_REL_WR) && !en_rel_wr)
1738 break;
1739
1740 req_sectors += blk_rq_sectors(next);
1741 if (req_sectors > max_blk_count)
1742 break;
1743
1744 phys_segments += next->nr_phys_segments;
1745 if (phys_segments > max_phys_segs)
1746 break;
1747
1748 list_add_tail(&next->queuelist, &mqrq->packed->list);
1749 cur = next;
1750 reqs++;
1751 } while (1);
1752
1753 if (put_back) {
1754 spin_lock_irq(q->queue_lock);
1755 blk_requeue_request(q, next);
1756 spin_unlock_irq(q->queue_lock);
1757 }
1758
1759 if (reqs > 0) {
1760 list_add(&req->queuelist, &mqrq->packed->list);
1761 mqrq->packed->nr_entries = ++reqs;
1762 mqrq->packed->retries = reqs;
1763 return reqs;
1764 }
1765
1766no_packed:
1767 mqrq->cmd_type = MMC_PACKED_NONE;
1768 return 0;
1769}
1770
1771static void mmc_blk_packed_hdr_wrq_prep(struct mmc_queue_req *mqrq,
1772 struct mmc_card *card,
1773 struct mmc_queue *mq)
1774{
1775 struct mmc_blk_request *brq = &mqrq->brq;
1776 struct request *req = mqrq->req;
1777 struct request *prq;
1778 struct mmc_blk_data *md = mq->data;
1779 struct mmc_packed *packed = mqrq->packed;
1780 bool do_rel_wr, do_data_tag;
1781 u32 *packed_cmd_hdr;
1782 u8 hdr_blocks;
1783 u8 i = 1;
1784
1785 BUG_ON(!packed);
1786
1787 mqrq->cmd_type = MMC_PACKED_WRITE;
1788 packed->blocks = 0;
1789 packed->idx_failure = MMC_PACKED_NR_IDX;
1790
1791 packed_cmd_hdr = packed->cmd_hdr;
1792 memset(packed_cmd_hdr, 0, sizeof(packed->cmd_hdr));
f68381a7
TK		 1793 packed_cmd_hdr[0] = cpu_to_le32((packed->nr_entries << 16) |
1794 (PACKED_CMD_WR << 8) | PACKED_CMD_VER);
ce39f9d1
SJ		 1795 hdr_blocks = mmc_large_sector(card) ? 8 : 1;
1796
1797 /*
1798 * Argument for each entry of packed group
1799 */
1800 list_for_each_entry(prq, &packed->list, queuelist) {
1801 do_rel_wr = mmc_req_rel_wr(prq) && (md->flags & MMC_BLK_REL_WR);
1802 do_data_tag = (card->ext_csd.data_tag_unit_size) &&
1803 (prq->cmd_flags & REQ_META) &&
1804 (rq_data_dir(prq) == WRITE) &&
d806b46e 1805 blk_rq_bytes(prq) >= card->ext_csd.data_tag_unit_size;
ce39f9d1 1806 /* Argument of CMD23 */
f68381a7 1807 packed_cmd_hdr[(i * 2)] = cpu_to_le32(
ce39f9d1
SJ		 1808 (do_rel_wr ? MMC_CMD23_ARG_REL_WR : 0) |
1809 (do_data_tag ? MMC_CMD23_ARG_TAG_REQ : 0) |
f68381a7 1810 blk_rq_sectors(prq));
ce39f9d1 1811 /* Argument of CMD18 or CMD25 */
f68381a7 1812 packed_cmd_hdr[((i * 2)) + 1] = cpu_to_le32(
ce39f9d1 1813 mmc_card_blockaddr(card) ?
f68381a7 1814 blk_rq_pos(prq) : blk_rq_pos(prq) << 9);
ce39f9d1
SJ		 1815 packed->blocks += blk_rq_sectors(prq);
1816 i++;
1817 }
1818
1819 memset(brq, 0, sizeof(struct mmc_blk_request));
1820 brq->mrq.cmd = &brq->cmd;
1821 brq->mrq.data = &brq->data;
1822 brq->mrq.sbc = &brq->sbc;
1823 brq->mrq.stop = &brq->stop;
1824
1825 brq->sbc.opcode = MMC_SET_BLOCK_COUNT;
1826 brq->sbc.arg = MMC_CMD23_ARG_PACKED | (packed->blocks + hdr_blocks);
1827 brq->sbc.flags = MMC_RSP_R1 | MMC_CMD_AC;
1828
1829 brq->cmd.opcode = MMC_WRITE_MULTIPLE_BLOCK;
1830 brq->cmd.arg = blk_rq_pos(req);
1831 if (!mmc_card_blockaddr(card))
1832 brq->cmd.arg <<= 9;
1833 brq->cmd.flags = MMC_RSP_SPI_R1 | MMC_RSP_R1 | MMC_CMD_ADTC;
1834
1835 brq->data.blksz = 512;
1836 brq->data.blocks = packed->blocks + hdr_blocks;
f53f1102 1837 brq->data.flags = MMC_DATA_WRITE;
ce39f9d1
SJ		 1838
1839 brq->stop.opcode = MMC_STOP_TRANSMISSION;
1840 brq->stop.arg = 0;
1841 brq->stop.flags = MMC_RSP_SPI_R1B | MMC_RSP_R1B | MMC_CMD_AC;
1842
1843 mmc_set_data_timeout(&brq->data, card);
1844
1845 brq->data.sg = mqrq->sg;
1846 brq->data.sg_len = mmc_queue_map_sg(mq, mqrq);
1847
1848 mqrq->mmc_active.mrq = &brq->mrq;
1849 mqrq->mmc_active.err_check = mmc_blk_packed_err_check;
1850
1851 mmc_queue_bounce_pre(mqrq);
1852}
1853
67716327
AH		 1854static int mmc_blk_cmd_err(struct mmc_blk_data *md, struct mmc_card *card,
1855 struct mmc_blk_request *brq, struct request *req,
1856 int ret)
1857{
ce39f9d1
SJ		 1858 struct mmc_queue_req *mq_rq;
1859 mq_rq = container_of(brq, struct mmc_queue_req, brq);
1860
67716327
AH		 1861 /*
1862 * If this is an SD card and we're writing, we can first
1863 * mark the known good sectors as ok.
1864 *
1865 * If the card is not SD, we can still ok written sectors
1866 * as reported by the controller (which might be less than
1867 * the real number of written sectors, but never more).
1868 */
1869 if (mmc_card_sd(card)) {
1870 u32 blocks;
1871
1872 blocks = mmc_sd_num_wr_blocks(card);
1873 if (blocks != (u32)-1) {
ecf8b5d0 1874 ret = blk_end_request(req, 0, blocks << 9);
67716327
AH		 1875 }
1876 } else {
ce39f9d1
SJ		 1877 if (!mmc_packed_cmd(mq_rq->cmd_type))
1878 ret = blk_end_request(req, 0, brq->data.bytes_xfered);
67716327
AH		 1879 }
1880 return ret;
1881}
1882
ce39f9d1
SJ		 1883static int mmc_blk_end_packed_req(struct mmc_queue_req *mq_rq)
1884{
1885 struct request *prq;
1886 struct mmc_packed *packed = mq_rq->packed;
1887 int idx = packed->idx_failure, i = 0;
1888 int ret = 0;
1889
1890 BUG_ON(!packed);
1891
1892 while (!list_empty(&packed->list)) {
1893 prq = list_entry_rq(packed->list.next);
1894 if (idx == i) {
1895 /* retry from error index */
1896 packed->nr_entries -= idx;
1897 mq_rq->req = prq;
1898 ret = 1;
1899
1900 if (packed->nr_entries == MMC_PACKED_NR_SINGLE) {
1901 list_del_init(&prq->queuelist);
1902 mmc_blk_clear_packed(mq_rq);
1903 }
1904 return ret;
1905 }
1906 list_del_init(&prq->queuelist);
1907 blk_end_request(prq, 0, blk_rq_bytes(prq));
1908 i++;
1909 }
1910
1911 mmc_blk_clear_packed(mq_rq);
1912 return ret;
1913}
1914
1915static void mmc_blk_abort_packed_req(struct mmc_queue_req *mq_rq)
1916{
1917 struct request *prq;
1918 struct mmc_packed *packed = mq_rq->packed;
1919
1920 BUG_ON(!packed);
1921
1922 while (!list_empty(&packed->list)) {
1923 prq = list_entry_rq(packed->list.next);
1924 list_del_init(&prq->queuelist);
1925 blk_end_request(prq, -EIO, blk_rq_bytes(prq));
1926 }
1927
1928 mmc_blk_clear_packed(mq_rq);
1929}
1930
1931static void mmc_blk_revert_packed_req(struct mmc_queue *mq,
1932 struct mmc_queue_req *mq_rq)
1933{
1934 struct request *prq;
1935 struct request_queue *q = mq->queue;
1936 struct mmc_packed *packed = mq_rq->packed;
1937
1938 BUG_ON(!packed);
1939
1940 while (!list_empty(&packed->list)) {
1941 prq = list_entry_rq(packed->list.prev);
1942 if (prq->queuelist.prev != &packed->list) {
1943 list_del_init(&prq->queuelist);
1944 spin_lock_irq(q->queue_lock);
1945 blk_requeue_request(mq->queue, prq);
1946 spin_unlock_irq(q->queue_lock);
1947 } else {
1948 list_del_init(&prq->queuelist);
1949 }
1950 }
1951
1952 mmc_blk_clear_packed(mq_rq);
1953}
1954
ee8a43a5 1955static int mmc_blk_issue_rw_rq(struct mmc_queue *mq, struct request *rqc)
54d49d77
PF		 1956{
1957 struct mmc_blk_data *md = mq->data;
1958 struct mmc_card *card = md->queue.card;
1959 struct mmc_blk_request *brq = &mq->mqrq_cur->brq;
b8360a49 1960 int ret = 1, disable_multi = 0, retry = 0, type, retune_retry_done = 0;
d78d4a8a 1961 enum mmc_blk_status status;
ee8a43a5 1962 struct mmc_queue_req *mq_rq;
a5075eb9 1963 struct request *req = rqc;
ee8a43a5 1964 struct mmc_async_req *areq;
ce39f9d1
SJ		 1965 const u8 packed_nr = 2;
1966 u8 reqs = 0;
1da177e4 1967
ee8a43a5
PF		 1968 if (!rqc && !mq->mqrq_prev->req)
1969 return 0;
98ccf149 1970
ce39f9d1
SJ		 1971 if (rqc)
1972 reqs = mmc_blk_prep_packed_list(mq, rqc);
1973
ee8a43a5
PF		 1974 do {
1975 if (rqc) {
a5075eb9
SD		 1976 /*
1977 * When 4KB native sector is enabled, only 8 blocks
1978 * multiple read or write is allowed
1979 */
e87c8561
YJ		 1980 if (mmc_large_sector(card) &&
1981 !IS_ALIGNED(blk_rq_sectors(rqc), 8)) {
a5075eb9
SD		 1982 pr_err("%s: Transfer size is not 4KB sector size aligned\n",
1983 req->rq_disk->disk_name);
ce39f9d1 1984 mq_rq = mq->mqrq_cur;
a5075eb9
SD		 1985 goto cmd_abort;
1986 }
ce39f9d1
SJ		 1987
1988 if (reqs >= packed_nr)
1989 mmc_blk_packed_hdr_wrq_prep(mq->mqrq_cur,
1990 card, mq);
1991 else
1992 mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
ee8a43a5
PF		 1993 areq = &mq->mqrq_cur->mmc_active;
1994 } else
1995 areq = NULL;
1996 areq = mmc_start_req(card->host, areq, (int *) &status);
2220eedf
KD		 1997 if (!areq) {
1998 if (status == MMC_BLK_NEW_REQUEST)
1999 mq->flags |= MMC_QUEUE_NEW_REQUEST;
ee8a43a5 2000 return 0;
2220eedf 2001 }
ee8a43a5
PF		 2002
2003 mq_rq = container_of(areq, struct mmc_queue_req, mmc_active);
2004 brq = &mq_rq->brq;
2005 req = mq_rq->req;
67716327 2006 type = rq_data_dir(req) == READ ? MMC_BLK_READ : MMC_BLK_WRITE;
ee8a43a5 2007 mmc_queue_bounce_post(mq_rq);
98ccf149 2008
d78d4a8a
PF		 2009 switch (status) {
2010 case MMC_BLK_SUCCESS:
2011 case MMC_BLK_PARTIAL:
2012 /*
2013 * A block was successfully transferred.
2014 */
67716327 2015 mmc_blk_reset_success(md, type);
ce39f9d1
SJ		 2016
2017 if (mmc_packed_cmd(mq_rq->cmd_type)) {
2018 ret = mmc_blk_end_packed_req(mq_rq);
2019 break;
2020 } else {
2021 ret = blk_end_request(req, 0,
d78d4a8a 2022 brq->data.bytes_xfered);
ce39f9d1
SJ		 2023 }
2024
67716327
AH		 2025 /*
2026 * If the blk_end_request function returns non-zero even
2027 * though all data has been transferred and no errors
2028 * were returned by the host controller, it's a bug.
2029 */
ee8a43a5 2030 if (status == MMC_BLK_SUCCESS && ret) {
a3c76eb9 2031 pr_err("%s BUG rq_tot %d d_xfer %d\n",
ee8a43a5
PF		 2032 __func__, blk_rq_bytes(req),
2033 brq->data.bytes_xfered);
2034 rqc = NULL;
2035 goto cmd_abort;
2036 }
d78d4a8a
PF		 2037 break;
2038 case MMC_BLK_CMD_ERR:
67716327 2039 ret = mmc_blk_cmd_err(md, card, brq, req, ret);
29535f7b
DW		 2040 if (mmc_blk_reset(md, card->host, type))
2041 goto cmd_abort;
2042 if (!ret)
2043 goto start_new_req;
2044 break;
d78d4a8a 2045 case MMC_BLK_RETRY:
b8360a49 2046 retune_retry_done = brq->retune_retry_done;
d78d4a8a 2047 if (retry++ < 5)
a01f3ccf 2048 break;
67716327 2049 /* Fall through */
d78d4a8a 2050 case MMC_BLK_ABORT:
67716327
AH		 2051 if (!mmc_blk_reset(md, card->host, type))
2052 break;
4c2b8f26 2053 goto cmd_abort;
67716327
AH		 2054 case MMC_BLK_DATA_ERR: {
2055 int err;
2056
2057 err = mmc_blk_reset(md, card->host, type);
2058 if (!err)
2059 break;
ce39f9d1
SJ		 2060 if (err == -ENODEV ||
2061 mmc_packed_cmd(mq_rq->cmd_type))
67716327
AH		 2062 goto cmd_abort;
2063 /* Fall through */
2064 }
2065 case MMC_BLK_ECC_ERR:
2066 if (brq->data.blocks > 1) {
2067 /* Redo read one sector at a time */
6606110d
JP		 2068 pr_warn("%s: retrying using single block read\n",
2069 req->rq_disk->disk_name);
67716327
AH		 2070 disable_multi = 1;
2071 break;
2072 }
d78d4a8a
PF		 2073 /*
2074 * After an error, we redo I/O one sector at a
2075 * time, so we only reach here after trying to
2076 * read a single sector.
2077 */
ecf8b5d0 2078 ret = blk_end_request(req, -EIO,
d78d4a8a 2079 brq->data.blksz);
ee8a43a5
PF		 2080 if (!ret)
2081 goto start_new_req;
d78d4a8a 2082 break;
a8ad82cc
SRT		 2083 case MMC_BLK_NOMEDIUM:
2084 goto cmd_abort;
2220eedf
KD		 2085 default:
2086 pr_err("%s: Unhandled return value (%d)",
2087 req->rq_disk->disk_name, status);
2088 goto cmd_abort;
4c2b8f26
RKAL		 2089 }
2090
ee8a43a5 2091 if (ret) {
ce39f9d1
SJ		 2092 if (mmc_packed_cmd(mq_rq->cmd_type)) {
2093 if (!mq_rq->packed->retries)
2094 goto cmd_abort;
2095 mmc_blk_packed_hdr_wrq_prep(mq_rq, card, mq);
2096 mmc_start_req(card->host,
2097 &mq_rq->mmc_active, NULL);
2098 } else {
2099
2100 /*
2101 * In case of a incomplete request
2102 * prepare it again and resend.
2103 */
2104 mmc_blk_rw_rq_prep(mq_rq, card,
2105 disable_multi, mq);
2106 mmc_start_req(card->host,
2107 &mq_rq->mmc_active, NULL);
2108 }
b8360a49 2109 mq_rq->brq.retune_retry_done = retune_retry_done;
ee8a43a5 2110 }
1da177e4
LT		 2111 } while (ret);
2112
1da177e4
LT		 2113 return 1;
2114
a01f3ccf 2115 cmd_abort:
ce39f9d1
SJ		 2116 if (mmc_packed_cmd(mq_rq->cmd_type)) {
2117 mmc_blk_abort_packed_req(mq_rq);
2118 } else {
2119 if (mmc_card_removed(card))
2120 req->cmd_flags |= REQ_QUIET;
2121 while (ret)
2122 ret = blk_end_request(req, -EIO,
2123 blk_rq_cur_bytes(req));
2124 }
1da177e4 2125
ee8a43a5
PF		 2126 start_new_req:
2127 if (rqc) {
7a81902f
SJ		 2128 if (mmc_card_removed(card)) {
2129 rqc->cmd_flags |= REQ_QUIET;
2130 blk_end_request_all(rqc, -EIO);
2131 } else {
ce39f9d1
SJ		 2132 /*
2133 * If current request is packed, it needs to put back.
2134 */
2135 if (mmc_packed_cmd(mq->mqrq_cur->cmd_type))
2136 mmc_blk_revert_packed_req(mq, mq->mqrq_cur);
2137
7a81902f
SJ		 2138 mmc_blk_rw_rq_prep(mq->mqrq_cur, card, 0, mq);
2139 mmc_start_req(card->host,
2140 &mq->mqrq_cur->mmc_active, NULL);
2141 }
ee8a43a5
PF		 2142 }
2143
1da177e4
LT		 2144 return 0;
2145}
2146
bd788c96
AH		 2147static int mmc_blk_issue_rq(struct mmc_queue *mq, struct request *req)
2148{
1a258db6
AW		 2149 int ret;
2150 struct mmc_blk_data *md = mq->data;
2151 struct mmc_card *card = md->queue.card;
2220eedf
KD		 2152 struct mmc_host *host = card->host;
2153 unsigned long flags;
1a258db6 2154
ee8a43a5
PF		 2155 if (req && !mq->mqrq_prev->req)
2156 /* claim host only for the first request */
e94cfef6 2157 mmc_get_card(card);
ee8a43a5 2158
371a689f
AW		 2159 ret = mmc_blk_part_switch(card, md);
2160 if (ret) {
0d7d85ca 2161 if (req) {
ecf8b5d0 2162 blk_end_request_all(req, -EIO);
0d7d85ca 2163 }
371a689f
AW		 2164 ret = 0;
2165 goto out;
2166 }
1a258db6 2167
2220eedf 2168 mq->flags &= ~MMC_QUEUE_NEW_REQUEST;
c2df40df 2169 if (req && req_op(req) == REQ_OP_DISCARD) {
ee8a43a5
PF		 2170 /* complete ongoing async transfer before issuing discard */
2171 if (card->host->areq)
2172 mmc_blk_issue_rw_rq(mq, NULL);
288dab8a
CH		 2173 ret = mmc_blk_issue_discard_rq(mq, req);
2174 } else if (req && req_op(req) == REQ_OP_SECURE_ERASE) {
2175 /* complete ongoing async transfer before issuing secure erase*/
2176 if (card->host->areq)
2177 mmc_blk_issue_rw_rq(mq, NULL);
2178 ret = mmc_blk_issue_secdiscard_rq(mq, req);
3a5e02ce 2179 } else if (req && req_op(req) == REQ_OP_FLUSH) {
393f9a08
JC		 2180 /* complete ongoing async transfer before issuing flush */
2181 if (card->host->areq)
2182 mmc_blk_issue_rw_rq(mq, NULL);
1a258db6 2183 ret = mmc_blk_issue_flush(mq, req);
49804548 2184 } else {
2220eedf
KD		 2185 if (!req && host->areq) {
2186 spin_lock_irqsave(&host->context_info.lock, flags);
2187 host->context_info.is_waiting_last_req = true;
2188 spin_unlock_irqrestore(&host->context_info.lock, flags);
2189 }
1a258db6 2190 ret = mmc_blk_issue_rw_rq(mq, req);
49804548 2191 }
1a258db6 2192
371a689f 2193out:
ef3a69c7 2194 if ((!req && !(mq->flags & MMC_QUEUE_NEW_REQUEST)) ||
c2df40df 2195 mmc_req_is_special(req))
ef3a69c7
SJ		 2196 /*
2197 * Release host when there are no more requests
2198 * and after special request(discard, flush) is done.
2199 * In case sepecial request, there is no reentry to
2200 * the 'mmc_blk_issue_rq' with 'mqrq_prev->req'.
2201 */
e94cfef6 2202 mmc_put_card(card);
1a258db6 2203 return ret;
bd788c96 2204}
1da177e4 2205
a6f6c96b
RK		 2206static inline int mmc_blk_readonly(struct mmc_card *card)
2207{
2208 return mmc_card_readonly(card) ||
2209 !(card->csd.cmdclass & CCC_BLOCK_WRITE);
2210}
2211
371a689f
AW		 2212static struct mmc_blk_data *mmc_blk_alloc_req(struct mmc_card *card,
2213 struct device *parent,
2214 sector_t size,
2215 bool default_ro,
add710ea
JR		 2216 const char *subname,
2217 int area_type)
1da177e4
LT		 2218{
2219 struct mmc_blk_data *md;
2220 int devidx, ret;
2221
b10fa99e
UH		 2222again:
2223 if (!ida_pre_get(&mmc_blk_ida, GFP_KERNEL))
2224 return ERR_PTR(-ENOMEM);
2225
2226 spin_lock(&mmc_blk_lock);
2227 ret = ida_get_new(&mmc_blk_ida, &devidx);
2228 spin_unlock(&mmc_blk_lock);
2229
2230 if (ret == -EAGAIN)
2231 goto again;
2232 else if (ret)
2233 return ERR_PTR(ret);
2234
2235 if (devidx >= max_devices) {
2236 ret = -ENOSPC;
2237 goto out;
2238 }
1da177e4 2239
dd00cc48 2240 md = kzalloc(sizeof(struct mmc_blk_data), GFP_KERNEL);
a6f6c96b
RK		 2241 if (!md) {
2242 ret = -ENOMEM;
2243 goto out;
2244 }
1da177e4 2245
add710ea
JR		 2246 md->area_type = area_type;
2247
a6f6c96b
RK		 2248 /*
2249 * Set the read-only status based on the supported commands
2250 * and the write protect switch.
2251 */
2252 md->read_only = mmc_blk_readonly(card);
1da177e4 2253
5e71b7a6 2254 md->disk = alloc_disk(perdev_minors);
a6f6c96b
RK		 2255 if (md->disk == NULL) {
2256 ret = -ENOMEM;
2257 goto err_kfree;
2258 }
1da177e4 2259
a6f6c96b 2260 spin_lock_init(&md->lock);
371a689f 2261 INIT_LIST_HEAD(&md->part);
a6f6c96b 2262 md->usage = 1;
1da177e4 2263
d09408ad 2264 ret = mmc_init_queue(&md->queue, card, &md->lock, subname);
a6f6c96b
RK		 2265 if (ret)
2266 goto err_putdisk;
1da177e4 2267
a6f6c96b
RK		 2268 md->queue.issue_fn = mmc_blk_issue_rq;
2269 md->queue.data = md;
d2b18394 2270
fe6b4c88 2271 md->disk->major = MMC_BLOCK_MAJOR;
5e71b7a6 2272 md->disk->first_minor = devidx * perdev_minors;
a6f6c96b
RK		 2273 md->disk->fops = &mmc_bdops;
2274 md->disk->private_data = md;
2275 md->disk->queue = md->queue.queue;
307d8e6f 2276 md->parent = parent;
371a689f 2277 set_disk_ro(md->disk, md->read_only || default_ro);
382c55f8 2278 md->disk->flags = GENHD_FL_EXT_DEVT;
f5b4d71f 2279 if (area_type & (MMC_BLK_DATA_AREA_RPMB | MMC_BLK_DATA_AREA_BOOT))
53d8f974 2280 md->disk->flags |= GENHD_FL_NO_PART_SCAN;
a6f6c96b
RK		 2281
2282 /*
2283 * As discussed on lkml, GENHD_FL_REMOVABLE should:
2284 *
2285 * - be set for removable media with permanent block devices
2286 * - be unset for removable block devices with permanent media
2287 *
2288 * Since MMC block devices clearly fall under the second
2289 * case, we do not set GENHD_FL_REMOVABLE. Userspace
2290 * should use the block device creation/destruction hotplug
2291 * messages to tell when the card is present.
2292 */
2293
f06c9153 2294 snprintf(md->disk->disk_name, sizeof(md->disk->disk_name),
9aaf3437 2295 "mmcblk%u%s", card->host->index, subname ? subname : "");
a6f6c96b 2296
a5075eb9
SD		 2297 if (mmc_card_mmc(card))
2298 blk_queue_logical_block_size(md->queue.queue,
2299 card->ext_csd.data_sector_size);
2300 else
2301 blk_queue_logical_block_size(md->queue.queue, 512);
2302
371a689f 2303 set_capacity(md->disk, size);
d0c97cfb 2304
f0d89972
AW		 2305 if (mmc_host_cmd23(card->host)) {
2306 if (mmc_card_mmc(card) ||
2307 (mmc_card_sd(card) &&
2308 card->scr.cmds & SD_SCR_CMD23_SUPPORT))
2309 md->flags |= MMC_BLK_CMD23;
2310 }
d0c97cfb
AW		 2311
2312 if (mmc_card_mmc(card) &&
2313 md->flags & MMC_BLK_CMD23 &&
2314 ((card->ext_csd.rel_param & EXT_CSD_WR_REL_PARAM_EN) ||
2315 card->ext_csd.rel_sectors)) {
2316 md->flags |= MMC_BLK_REL_WR;
e9d5c746 2317 blk_queue_write_cache(md->queue.queue, true, true);
d0c97cfb
AW		 2318 }
2319
ce39f9d1
SJ		 2320 if (mmc_card_mmc(card) &&
2321 (area_type == MMC_BLK_DATA_AREA_MAIN) &&
2322 (md->flags & MMC_BLK_CMD23) &&
2323 card->ext_csd.packed_event_en) {
2324 if (!mmc_packed_init(&md->queue, card))
2325 md->flags |= MMC_BLK_PACKED_CMD;
2326 }
2327
371a689f
AW		 2328 return md;
2329
2330 err_putdisk:
2331 put_disk(md->disk);
2332 err_kfree:
2333 kfree(md);
2334 out:
b10fa99e
UH		 2335 spin_lock(&mmc_blk_lock);
2336 ida_remove(&mmc_blk_ida, devidx);
2337 spin_unlock(&mmc_blk_lock);
371a689f
AW		 2338 return ERR_PTR(ret);
2339}
2340
2341static struct mmc_blk_data *mmc_blk_alloc(struct mmc_card *card)
2342{
2343 sector_t size;
a6f6c96b 2344
85a18ad9
PO		 2345 if (!mmc_card_sd(card) && mmc_card_blockaddr(card)) {
2346 /*
2347 * The EXT_CSD sector count is in number or 512 byte
2348 * sectors.
2349 */
371a689f 2350 size = card->ext_csd.sectors;
85a18ad9
PO		 2351 } else {
2352 /*
2353 * The CSD capacity field is in units of read_blkbits.
2354 * set_capacity takes units of 512 bytes.
2355 */
087de9ed
KM		 2356 size = (typeof(sector_t))card->csd.capacity
2357 << (card->csd.read_blkbits - 9);
85a18ad9 2358 }
371a689f 2359
7a30f2af 2360 return mmc_blk_alloc_req(card, &card->dev, size, false, NULL,
add710ea 2361 MMC_BLK_DATA_AREA_MAIN);
371a689f 2362}
a6f6c96b 2363
371a689f
AW		 2364static int mmc_blk_alloc_part(struct mmc_card *card,
2365 struct mmc_blk_data *md,
2366 unsigned int part_type,
2367 sector_t size,
2368 bool default_ro,
add710ea
JR		 2369 const char *subname,
2370 int area_type)
371a689f
AW		 2371{
2372 char cap_str[10];
2373 struct mmc_blk_data *part_md;
2374
2375 part_md = mmc_blk_alloc_req(card, disk_to_dev(md->disk), size, default_ro,
add710ea 2376 subname, area_type);
371a689f
AW		 2377 if (IS_ERR(part_md))
2378 return PTR_ERR(part_md);
2379 part_md->part_type = part_type;
2380 list_add(&part_md->part, &md->part);
2381
b9f28d86 2382 string_get_size((u64)get_capacity(part_md->disk), 512, STRING_UNITS_2,
371a689f 2383 cap_str, sizeof(cap_str));
a3c76eb9 2384 pr_info("%s: %s %s partition %u %s\n",
371a689f
AW		 2385 part_md->disk->disk_name, mmc_card_id(card),
2386 mmc_card_name(card), part_md->part_type, cap_str);
2387 return 0;
2388}
2389
e0c368d5
NJ		 2390/* MMC Physical partitions consist of two boot partitions and
2391 * up to four general purpose partitions.
2392 * For each partition enabled in EXT_CSD a block device will be allocatedi
2393 * to provide access to the partition.
2394 */
2395
371a689f
AW		 2396static int mmc_blk_alloc_parts(struct mmc_card *card, struct mmc_blk_data *md)
2397{
e0c368d5 2398 int idx, ret = 0;
371a689f
AW		 2399
2400 if (!mmc_card_mmc(card))
2401 return 0;
2402
e0c368d5
NJ		 2403 for (idx = 0; idx < card->nr_parts; idx++) {
2404 if (card->part[idx].size) {
2405 ret = mmc_blk_alloc_part(card, md,
2406 card->part[idx].part_cfg,
2407 card->part[idx].size >> 9,
2408 card->part[idx].force_ro,
add710ea
JR		 2409 card->part[idx].name,
2410 card->part[idx].area_type);
e0c368d5
NJ		 2411 if (ret)
2412 return ret;
2413 }
371a689f
AW		 2414 }
2415
2416 return ret;
1da177e4
LT		 2417}
2418
371a689f
AW		 2419static void mmc_blk_remove_req(struct mmc_blk_data *md)
2420{
add710ea
JR		 2421 struct mmc_card *card;
2422
371a689f 2423 if (md) {
fdfa20c1
PT		 2424 /*
2425 * Flush remaining requests and free queues. It
2426 * is freeing the queue that stops new requests
2427 * from being accepted.
2428 */
8efb83a2 2429 card = md->queue.card;
fdfa20c1
PT		 2430 mmc_cleanup_queue(&md->queue);
2431 if (md->flags & MMC_BLK_PACKED_CMD)
2432 mmc_packed_clean(&md->queue);
371a689f
AW		 2433 if (md->disk->flags & GENHD_FL_UP) {
2434 device_remove_file(disk_to_dev(md->disk), &md->force_ro);
add710ea
JR		 2435 if ((md->area_type & MMC_BLK_DATA_AREA_BOOT) &&
2436 card->ext_csd.boot_ro_lockable)
2437 device_remove_file(disk_to_dev(md->disk),
2438 &md->power_ro_lock);
371a689f 2439
371a689f
AW		 2440 del_gendisk(md->disk);
2441 }
371a689f
AW		 2442 mmc_blk_put(md);
2443 }
2444}
2445
2446static void mmc_blk_remove_parts(struct mmc_card *card,
2447 struct mmc_blk_data *md)
2448{
2449 struct list_head *pos, *q;
2450 struct mmc_blk_data *part_md;
2451
2452 list_for_each_safe(pos, q, &md->part) {
2453 part_md = list_entry(pos, struct mmc_blk_data, part);
2454 list_del(pos);
2455 mmc_blk_remove_req(part_md);
2456 }
2457}
2458
2459static int mmc_add_disk(struct mmc_blk_data *md)
2460{
2461 int ret;
add710ea 2462 struct mmc_card *card = md->queue.card;
371a689f 2463
307d8e6f 2464 device_add_disk(md->parent, md->disk);
371a689f
AW		 2465 md->force_ro.show = force_ro_show;
2466 md->force_ro.store = force_ro_store;
641c3187 2467 sysfs_attr_init(&md->force_ro.attr);
371a689f
AW		 2468 md->force_ro.attr.name = "force_ro";
2469 md->force_ro.attr.mode = S_IRUGO | S_IWUSR;
2470 ret = device_create_file(disk_to_dev(md->disk), &md->force_ro);
2471 if (ret)
add710ea
JR		 2472 goto force_ro_fail;
2473
2474 if ((md->area_type & MMC_BLK_DATA_AREA_BOOT) &&
2475 card->ext_csd.boot_ro_lockable) {
88187398 2476 umode_t mode;
add710ea
JR		 2477
2478 if (card->ext_csd.boot_ro_lock & EXT_CSD_BOOT_WP_B_PWR_WP_DIS)
2479 mode = S_IRUGO;
2480 else
2481 mode = S_IRUGO | S_IWUSR;
2482
2483 md->power_ro_lock.show = power_ro_lock_show;
2484 md->power_ro_lock.store = power_ro_lock_store;
00d9ac08 2485 sysfs_attr_init(&md->power_ro_lock.attr);
add710ea
JR		 2486 md->power_ro_lock.attr.mode = mode;
2487 md->power_ro_lock.attr.name =
2488 "ro_lock_until_next_power_on";
2489 ret = device_create_file(disk_to_dev(md->disk),
2490 &md->power_ro_lock);
2491 if (ret)
2492 goto power_ro_lock_fail;
2493 }
2494 return ret;
2495
2496power_ro_lock_fail:
2497 device_remove_file(disk_to_dev(md->disk), &md->force_ro);
2498force_ro_fail:
2499 del_gendisk(md->disk);
371a689f
AW		 2500
2501 return ret;
2502}
2503
6f60c222
AW		 2504static const struct mmc_fixup blk_fixups[] =
2505{
c59d4473
CB		 2506 MMC_FIXUP("SEM02G", CID_MANFID_SANDISK, 0x100, add_quirk,
2507 MMC_QUIRK_INAND_CMD38),
2508 MMC_FIXUP("SEM04G", CID_MANFID_SANDISK, 0x100, add_quirk,
2509 MMC_QUIRK_INAND_CMD38),
2510 MMC_FIXUP("SEM08G", CID_MANFID_SANDISK, 0x100, add_quirk,
2511 MMC_QUIRK_INAND_CMD38),
2512 MMC_FIXUP("SEM16G", CID_MANFID_SANDISK, 0x100, add_quirk,
2513 MMC_QUIRK_INAND_CMD38),
2514 MMC_FIXUP("SEM32G", CID_MANFID_SANDISK, 0x100, add_quirk,
2515 MMC_QUIRK_INAND_CMD38),
d0c97cfb
AW		 2516
2517 /*
2518 * Some MMC cards experience performance degradation with CMD23
2519 * instead of CMD12-bounded multiblock transfers. For now we'll
2520 * black list what's bad...
2521 * - Certain Toshiba cards.
2522 *
2523 * N.B. This doesn't affect SD cards.
2524 */
7d70d476
YL		 2525 MMC_FIXUP("SDMB-32", CID_MANFID_SANDISK, CID_OEMID_ANY, add_quirk_mmc,
2526 MMC_QUIRK_BLK_NO_CMD23),
2527 MMC_FIXUP("SDM032", CID_MANFID_SANDISK, CID_OEMID_ANY, add_quirk_mmc,
2528 MMC_QUIRK_BLK_NO_CMD23),
c59d4473 2529 MMC_FIXUP("MMC08G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
d0c97cfb 2530 MMC_QUIRK_BLK_NO_CMD23),
c59d4473 2531 MMC_FIXUP("MMC16G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
d0c97cfb 2532 MMC_QUIRK_BLK_NO_CMD23),
c59d4473 2533 MMC_FIXUP("MMC32G", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
d0c97cfb 2534 MMC_QUIRK_BLK_NO_CMD23),
6de5fc9c
SNX		 2535
2536 /*
32ecd320 2537 * Some MMC cards need longer data read timeout than indicated in CSD.
6de5fc9c 2538 */
c59d4473 2539 MMC_FIXUP(CID_NAME_ANY, CID_MANFID_MICRON, 0x200, add_quirk_mmc,
6de5fc9c 2540 MMC_QUIRK_LONG_READ_TIME),
32ecd320
MG		 2541 MMC_FIXUP("008GE0", CID_MANFID_TOSHIBA, CID_OEMID_ANY, add_quirk_mmc,
2542 MMC_QUIRK_LONG_READ_TIME),
6de5fc9c 2543
3550ccdb
IC		 2544 /*
2545 * On these Samsung MoviNAND parts, performing secure erase or
2546 * secure trim can result in unrecoverable corruption due to a
2547 * firmware bug.
2548 */
2549 MMC_FIXUP("M8G2FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2550 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2551 MMC_FIXUP("MAG4FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2552 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2553 MMC_FIXUP("MBG8FA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2554 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2555 MMC_FIXUP("MCGAFA", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2556 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2557 MMC_FIXUP("VAL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2558 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2559 MMC_FIXUP("VYL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2560 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2561 MMC_FIXUP("KYL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2562 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2563 MMC_FIXUP("VZL00M", CID_MANFID_SAMSUNG, CID_OEMID_ANY, add_quirk_mmc,
2564 MMC_QUIRK_SEC_ERASE_TRIM_BROKEN),
2565
b5b4ff0a
SL		 2566 /*
2567 * On Some Kingston eMMCs, performing trim can result in
2568 * unrecoverable data conrruption occasionally due to a firmware bug.
2569 */
2570 MMC_FIXUP("V10008", CID_MANFID_KINGSTON, CID_OEMID_ANY, add_quirk_mmc,
2571 MMC_QUIRK_TRIM_BROKEN),
2572 MMC_FIXUP("V10016", CID_MANFID_KINGSTON, CID_OEMID_ANY, add_quirk_mmc,
2573 MMC_QUIRK_TRIM_BROKEN),
2574
6f60c222
AW		 2575 END_FIXUP
2576};
2577
96541bac 2578static int mmc_blk_probe(struct mmc_card *card)
1da177e4 2579{
371a689f 2580 struct mmc_blk_data *md, *part_md;
a7bbb573
PO		 2581 char cap_str[10];
2582
912490db
PO		 2583 /*
2584 * Check that the card supports the command class(es) we need.
2585 */
2586 if (!(card->csd.cmdclass & CCC_BLOCK_READ))
1da177e4
LT		 2587 return -ENODEV;
2588
5204d00f
LC		 2589 mmc_fixup_device(card, blk_fixups);
2590
1da177e4
LT		 2591 md = mmc_blk_alloc(card);
2592 if (IS_ERR(md))
2593 return PTR_ERR(md);
2594
b9f28d86 2595 string_get_size((u64)get_capacity(md->disk), 512, STRING_UNITS_2,
a7bbb573 2596 cap_str, sizeof(cap_str));
a3c76eb9 2597 pr_info("%s: %s %s %s %s\n",
1da177e4 2598 md->disk->disk_name, mmc_card_id(card), mmc_card_name(card),
a7bbb573 2599 cap_str, md->read_only ? "(ro)" : "");
1da177e4 2600
371a689f
AW		 2601 if (mmc_blk_alloc_parts(card, md))
2602 goto out;
2603
96541bac 2604 dev_set_drvdata(&card->dev, md);
6f60c222 2605
371a689f
AW		 2606 if (mmc_add_disk(md))
2607 goto out;
2608
2609 list_for_each_entry(part_md, &md->part, part) {
2610 if (mmc_add_disk(part_md))
2611 goto out;
2612 }
e94cfef6
UH		 2613
2614 pm_runtime_set_autosuspend_delay(&card->dev, 3000);
2615 pm_runtime_use_autosuspend(&card->dev);
2616
2617 /*
2618 * Don't enable runtime PM for SD-combo cards here. Leave that
2619 * decision to be taken during the SDIO init sequence instead.
2620 */
2621 if (card->type != MMC_TYPE_SD_COMBO) {
2622 pm_runtime_set_active(&card->dev);
2623 pm_runtime_enable(&card->dev);
2624 }
2625
1da177e4
LT		 2626 return 0;
2627
2628 out:
371a689f
AW		 2629 mmc_blk_remove_parts(card, md);
2630 mmc_blk_remove_req(md);
5865f287 2631 return 0;
1da177e4
LT		 2632}
2633
96541bac 2634static void mmc_blk_remove(struct mmc_card *card)
1da177e4 2635{
96541bac 2636 struct mmc_blk_data *md = dev_get_drvdata(&card->dev);
1da177e4 2637
371a689f 2638 mmc_blk_remove_parts(card, md);
e94cfef6 2639 pm_runtime_get_sync(&card->dev);
ddd6fa7e
AH		 2640 mmc_claim_host(card->host);
2641 mmc_blk_part_switch(card, md);
2642 mmc_release_host(card->host);
e94cfef6
UH		 2643 if (card->type != MMC_TYPE_SD_COMBO)
2644 pm_runtime_disable(&card->dev);
2645 pm_runtime_put_noidle(&card->dev);
371a689f 2646 mmc_blk_remove_req(md);
96541bac 2647 dev_set_drvdata(&card->dev, NULL);
1da177e4
LT		 2648}
2649
96541bac 2650static int _mmc_blk_suspend(struct mmc_card *card)
1da177e4 2651{
371a689f 2652 struct mmc_blk_data *part_md;
96541bac 2653 struct mmc_blk_data *md = dev_get_drvdata(&card->dev);
1da177e4
LT		 2654
2655 if (md) {
2656 mmc_queue_suspend(&md->queue);
371a689f
AW		 2657 list_for_each_entry(part_md, &md->part, part) {
2658 mmc_queue_suspend(&part_md->queue);
2659 }
1da177e4
LT		 2660 }
2661 return 0;
2662}
2663
96541bac 2664static void mmc_blk_shutdown(struct mmc_card *card)
76287748 2665{
96541bac 2666 _mmc_blk_suspend(card);
76287748
UH		 2667}
2668
0967edc6
UH		 2669#ifdef CONFIG_PM_SLEEP
2670static int mmc_blk_suspend(struct device *dev)
76287748 2671{
96541bac
UH		 2672 struct mmc_card *card = mmc_dev_to_card(dev);
2673
2674 return _mmc_blk_suspend(card);
76287748
UH		 2675}
2676
0967edc6 2677static int mmc_blk_resume(struct device *dev)
1da177e4 2678{
371a689f 2679 struct mmc_blk_data *part_md;
fc95e30b 2680 struct mmc_blk_data *md = dev_get_drvdata(dev);
1da177e4
LT		 2681
2682 if (md) {
371a689f
AW		 2683 /*
2684 * Resume involves the card going into idle state,
2685 * so current partition is always the main one.
2686 */
2687 md->part_curr = md->part_type;
1da177e4 2688 mmc_queue_resume(&md->queue);
371a689f
AW		 2689 list_for_each_entry(part_md, &md->part, part) {
2690 mmc_queue_resume(&part_md->queue);
2691 }
1da177e4
LT		 2692 }
2693 return 0;
2694}
1da177e4
LT		 2695#endif
2696
0967edc6
UH		 2697static SIMPLE_DEV_PM_OPS(mmc_blk_pm_ops, mmc_blk_suspend, mmc_blk_resume);
2698
96541bac
UH		 2699static struct mmc_driver mmc_driver = {
2700 .drv = {
2701 .name = "mmcblk",
2702 .pm = &mmc_blk_pm_ops,
2703 },
1da177e4
LT		 2704 .probe = mmc_blk_probe,
2705 .remove = mmc_blk_remove,
76287748 2706 .shutdown = mmc_blk_shutdown,
1da177e4
LT		 2707};
2708
2709static int __init mmc_blk_init(void)
2710{
9d4e98e9 2711 int res;
1da177e4 2712
5e71b7a6
OJ		 2713 if (perdev_minors != CONFIG_MMC_BLOCK_MINORS)
2714 pr_info("mmcblk: using %d minors per device\n", perdev_minors);
2715
a26eba61 2716 max_devices = min(MAX_DEVICES, (1 << MINORBITS) / perdev_minors);
5e71b7a6 2717
fe6b4c88
PO		 2718 res = register_blkdev(MMC_BLOCK_MAJOR, "mmc");
2719 if (res)
1da177e4 2720 goto out;
1da177e4 2721
9d4e98e9
AM		 2722 res = mmc_register_driver(&mmc_driver);
2723 if (res)
2724 goto out2;
1da177e4 2725
9d4e98e9
AM		 2726 return 0;
2727 out2:
2728 unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
1da177e4
LT		 2729 out:
2730 return res;
2731}
2732
2733static void __exit mmc_blk_exit(void)
2734{
2735 mmc_unregister_driver(&mmc_driver);
fe6b4c88 2736 unregister_blkdev(MMC_BLOCK_MAJOR, "mmc");
1da177e4
LT		 2737}
2738
2739module_init(mmc_blk_init);
2740module_exit(mmc_blk_exit);
2741
2742MODULE_LICENSE("GPL");
2743MODULE_DESCRIPTION("Multimedia Card (MMC) block device driver");
2744
Linux 6.x block layer and io_uring tree(s)