Commit | Line | Data |
---|---|---|
1a59d1b8 | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
97894cda | 2 | /* |
1da177e4 LT |
3 | * NFTL mount code with extensive checks |
4 | * | |
97894cda | 5 | * Author: Fabrice Bellard (fabrice.bellard@netgem.com) |
a1452a37 DW |
6 | * Copyright © 2000 Netgem S.A. |
7 | * Copyright © 1999-2010 David Woodhouse <dwmw2@infradead.org> | |
1da177e4 LT |
8 | */ |
9 | ||
10 | #include <linux/kernel.h> | |
11 | #include <asm/errno.h> | |
12 | #include <linux/delay.h> | |
13 | #include <linux/slab.h> | |
14 | #include <linux/mtd/mtd.h> | |
d4092d76 | 15 | #include <linux/mtd/rawnand.h> |
1da177e4 LT |
16 | #include <linux/mtd/nftl.h> |
17 | ||
18 | #define SECTORSIZE 512 | |
19 | ||
1da177e4 LT |
20 | /* find_boot_record: Find the NFTL Media Header and its Spare copy which contains the |
21 | * various device information of the NFTL partition and Bad Unit Table. Update | |
92394b5c | 22 | * the ReplUnitTable[] table according to the Bad Unit Table. ReplUnitTable[] |
1da177e4 LT |
23 | * is used for management of Erase Unit in other routines in nftl.c and nftlmount.c |
24 | */ | |
25 | static int find_boot_record(struct NFTLrecord *nftl) | |
26 | { | |
27 | struct nftl_uci1 h1; | |
28 | unsigned int block, boot_record_count = 0; | |
29 | size_t retlen; | |
30 | u8 buf[SECTORSIZE]; | |
31 | struct NFTLMediaHeader *mh = &nftl->MediaHdr; | |
f4a43cfc | 32 | struct mtd_info *mtd = nftl->mbd.mtd; |
1da177e4 LT |
33 | unsigned int i; |
34 | ||
97894cda | 35 | /* Assume logical EraseSize == physical erasesize for starting the scan. |
1da177e4 LT |
36 | We'll sort it out later if we find a MediaHeader which says otherwise */ |
37 | /* Actually, we won't. The new DiskOnChip driver has already scanned | |
38 | the MediaHeader and adjusted the virtual erasesize it presents in | |
39 | the mtd device accordingly. We could even get rid of | |
40 | nftl->EraseSize if there were any point in doing so. */ | |
41 | nftl->EraseSize = nftl->mbd.mtd->erasesize; | |
69423d99 | 42 | nftl->nb_blocks = (u32)nftl->mbd.mtd->size / nftl->EraseSize; |
1da177e4 LT |
43 | |
44 | nftl->MediaUnit = BLOCK_NIL; | |
45 | nftl->SpareMediaUnit = BLOCK_NIL; | |
46 | ||
47 | /* search for a valid boot record */ | |
48 | for (block = 0; block < nftl->nb_blocks; block++) { | |
49 | int ret; | |
50 | ||
51 | /* Check for ANAND header first. Then can whinge if it's found but later | |
52 | checks fail */ | |
329ad399 AB |
53 | ret = mtd_read(mtd, block * nftl->EraseSize, SECTORSIZE, |
54 | &retlen, buf); | |
1da177e4 LT |
55 | /* We ignore ret in case the ECC of the MediaHeader is invalid |
56 | (which is apparently acceptable) */ | |
57 | if (retlen != SECTORSIZE) { | |
58 | static int warncount = 5; | |
59 | ||
60 | if (warncount) { | |
61 | printk(KERN_WARNING "Block read at 0x%x of mtd%d failed: %d\n", | |
62 | block * nftl->EraseSize, nftl->mbd.mtd->index, ret); | |
63 | if (!--warncount) | |
64 | printk(KERN_WARNING "Further failures for this block will not be printed\n"); | |
65 | } | |
66 | continue; | |
67 | } | |
68 | ||
69 | if (retlen < 6 || memcmp(buf, "ANAND", 6)) { | |
70 | /* ANAND\0 not found. Continue */ | |
71 | #if 0 | |
97894cda | 72 | printk(KERN_DEBUG "ANAND header not found at 0x%x in mtd%d\n", |
1da177e4 | 73 | block * nftl->EraseSize, nftl->mbd.mtd->index); |
97894cda | 74 | #endif |
1da177e4 LT |
75 | continue; |
76 | } | |
77 | ||
78 | /* To be safer with BIOS, also use erase mark as discriminant */ | |
768c57c8 | 79 | ret = nftl_read_oob(mtd, block * nftl->EraseSize + |
f4a43cfc | 80 | SECTORSIZE + 8, 8, &retlen, |
768c57c8 AS |
81 | (char *)&h1); |
82 | if (ret < 0) { | |
1da177e4 LT |
83 | printk(KERN_WARNING "ANAND header found at 0x%x in mtd%d, but OOB data read failed (err %d)\n", |
84 | block * nftl->EraseSize, nftl->mbd.mtd->index, ret); | |
85 | continue; | |
86 | } | |
87 | ||
88 | #if 0 /* Some people seem to have devices without ECC or erase marks | |
89 | on the Media Header blocks. There are enough other sanity | |
90 | checks in here that we can probably do without it. | |
91 | */ | |
92 | if (le16_to_cpu(h1.EraseMark | h1.EraseMark1) != ERASE_MARK) { | |
93 | printk(KERN_NOTICE "ANAND header found at 0x%x in mtd%d, but erase mark not present (0x%04x,0x%04x instead)\n", | |
97894cda | 94 | block * nftl->EraseSize, nftl->mbd.mtd->index, |
1da177e4 LT |
95 | le16_to_cpu(h1.EraseMark), le16_to_cpu(h1.EraseMark1)); |
96 | continue; | |
97 | } | |
98 | ||
99 | /* Finally reread to check ECC */ | |
768c57c8 AS |
100 | ret = mtd->read(mtd, block * nftl->EraseSize, SECTORSIZE, |
101 | &retlen, buf); | |
102 | if (ret < 0) { | |
1da177e4 LT |
103 | printk(KERN_NOTICE "ANAND header found at 0x%x in mtd%d, but ECC read failed (err %d)\n", |
104 | block * nftl->EraseSize, nftl->mbd.mtd->index, ret); | |
105 | continue; | |
106 | } | |
107 | ||
108 | /* Paranoia. Check the ANAND header is still there after the ECC read */ | |
109 | if (memcmp(buf, "ANAND", 6)) { | |
110 | printk(KERN_NOTICE "ANAND header found at 0x%x in mtd%d, but went away on reread!\n", | |
111 | block * nftl->EraseSize, nftl->mbd.mtd->index); | |
ac9cd36c | 112 | printk(KERN_NOTICE "New data are: %6ph\n", buf); |
1da177e4 LT |
113 | continue; |
114 | } | |
115 | #endif | |
116 | /* OK, we like it. */ | |
117 | ||
118 | if (boot_record_count) { | |
119 | /* We've already processed one. So we just check if | |
120 | this one is the same as the first one we found */ | |
121 | if (memcmp(mh, buf, sizeof(struct NFTLMediaHeader))) { | |
122 | printk(KERN_NOTICE "NFTL Media Headers at 0x%x and 0x%x disagree.\n", | |
123 | nftl->MediaUnit * nftl->EraseSize, block * nftl->EraseSize); | |
124 | /* if (debug) Print both side by side */ | |
125 | if (boot_record_count < 2) { | |
126 | /* We haven't yet seen two real ones */ | |
127 | return -1; | |
128 | } | |
129 | continue; | |
130 | } | |
131 | if (boot_record_count == 1) | |
132 | nftl->SpareMediaUnit = block; | |
133 | ||
134 | /* Mark this boot record (NFTL MediaHeader) block as reserved */ | |
135 | nftl->ReplUnitTable[block] = BLOCK_RESERVED; | |
136 | ||
137 | ||
138 | boot_record_count++; | |
139 | continue; | |
140 | } | |
141 | ||
142 | /* This is the first we've seen. Copy the media header structure into place */ | |
143 | memcpy(mh, buf, sizeof(struct NFTLMediaHeader)); | |
144 | ||
145 | /* Do some sanity checks on it */ | |
146 | #if 0 | |
147 | The new DiskOnChip driver scans the MediaHeader itself, and presents a virtual | |
148 | erasesize based on UnitSizeFactor. So the erasesize we read from the mtd | |
149 | device is already correct. | |
150 | if (mh->UnitSizeFactor == 0) { | |
151 | printk(KERN_NOTICE "NFTL: UnitSizeFactor 0x00 detected. This violates the spec but we think we know what it means...\n"); | |
152 | } else if (mh->UnitSizeFactor < 0xfc) { | |
153 | printk(KERN_NOTICE "Sorry, we don't support UnitSizeFactor 0x%02x\n", | |
154 | mh->UnitSizeFactor); | |
155 | return -1; | |
156 | } else if (mh->UnitSizeFactor != 0xff) { | |
157 | printk(KERN_NOTICE "WARNING: Support for NFTL with UnitSizeFactor 0x%02x is experimental\n", | |
158 | mh->UnitSizeFactor); | |
159 | nftl->EraseSize = nftl->mbd.mtd->erasesize << (0xff - mh->UnitSizeFactor); | |
69423d99 | 160 | nftl->nb_blocks = (u32)nftl->mbd.mtd->size / nftl->EraseSize; |
1da177e4 LT |
161 | } |
162 | #endif | |
163 | nftl->nb_boot_blocks = le16_to_cpu(mh->FirstPhysicalEUN); | |
164 | if ((nftl->nb_boot_blocks + 2) >= nftl->nb_blocks) { | |
165 | printk(KERN_NOTICE "NFTL Media Header sanity check failed:\n"); | |
97894cda | 166 | printk(KERN_NOTICE "nb_boot_blocks (%d) + 2 > nb_blocks (%d)\n", |
1da177e4 LT |
167 | nftl->nb_boot_blocks, nftl->nb_blocks); |
168 | return -1; | |
169 | } | |
170 | ||
171 | nftl->numvunits = le32_to_cpu(mh->FormattedSize) / nftl->EraseSize; | |
172 | if (nftl->numvunits > (nftl->nb_blocks - nftl->nb_boot_blocks - 2)) { | |
173 | printk(KERN_NOTICE "NFTL Media Header sanity check failed:\n"); | |
174 | printk(KERN_NOTICE "numvunits (%d) > nb_blocks (%d) - nb_boot_blocks(%d) - 2\n", | |
175 | nftl->numvunits, nftl->nb_blocks, nftl->nb_boot_blocks); | |
176 | return -1; | |
177 | } | |
97894cda | 178 | |
1da177e4 LT |
179 | nftl->mbd.size = nftl->numvunits * (nftl->EraseSize / SECTORSIZE); |
180 | ||
181 | /* If we're not using the last sectors in the device for some reason, | |
182 | reduce nb_blocks accordingly so we forget they're there */ | |
183 | nftl->nb_blocks = le16_to_cpu(mh->NumEraseUnits) + le16_to_cpu(mh->FirstPhysicalEUN); | |
184 | ||
185 | /* XXX: will be suppressed */ | |
186 | nftl->lastEUN = nftl->nb_blocks - 1; | |
187 | ||
188 | /* memory alloc */ | |
6da2ec56 KC |
189 | nftl->EUNtable = kmalloc_array(nftl->nb_blocks, sizeof(u16), |
190 | GFP_KERNEL); | |
8ef02913 | 191 | if (!nftl->EUNtable) |
1da177e4 | 192 | return -ENOMEM; |
1da177e4 | 193 | |
6da2ec56 KC |
194 | nftl->ReplUnitTable = kmalloc_array(nftl->nb_blocks, |
195 | sizeof(u16), | |
196 | GFP_KERNEL); | |
1da177e4 LT |
197 | if (!nftl->ReplUnitTable) { |
198 | kfree(nftl->EUNtable); | |
1da177e4 LT |
199 | return -ENOMEM; |
200 | } | |
97894cda | 201 | |
1da177e4 LT |
202 | /* mark the bios blocks (blocks before NFTL MediaHeader) as reserved */ |
203 | for (i = 0; i < nftl->nb_boot_blocks; i++) | |
204 | nftl->ReplUnitTable[i] = BLOCK_RESERVED; | |
205 | /* mark all remaining blocks as potentially containing data */ | |
97894cda | 206 | for (; i < nftl->nb_blocks; i++) { |
1da177e4 LT |
207 | nftl->ReplUnitTable[i] = BLOCK_NOTEXPLORED; |
208 | } | |
209 | ||
210 | /* Mark this boot record (NFTL MediaHeader) block as reserved */ | |
211 | nftl->ReplUnitTable[block] = BLOCK_RESERVED; | |
212 | ||
213 | /* read the Bad Erase Unit Table and modify ReplUnitTable[] accordingly */ | |
214 | for (i = 0; i < nftl->nb_blocks; i++) { | |
215 | #if 0 | |
216 | The new DiskOnChip driver already scanned the bad block table. Just query it. | |
217 | if ((i & (SECTORSIZE - 1)) == 0) { | |
218 | /* read one sector for every SECTORSIZE of blocks */ | |
768c57c8 AS |
219 | ret = mtd->read(nftl->mbd.mtd, |
220 | block * nftl->EraseSize + i + | |
221 | SECTORSIZE, SECTORSIZE, | |
222 | &retlen, buf); | |
223 | if (ret < 0) { | |
1da177e4 LT |
224 | printk(KERN_NOTICE "Read of bad sector table failed (err %d)\n", |
225 | ret); | |
226 | kfree(nftl->ReplUnitTable); | |
227 | kfree(nftl->EUNtable); | |
228 | return -1; | |
229 | } | |
230 | } | |
231 | /* mark the Bad Erase Unit as RESERVED in ReplUnitTable */ | |
232 | if (buf[i & (SECTORSIZE - 1)] != 0xff) | |
233 | nftl->ReplUnitTable[i] = BLOCK_RESERVED; | |
234 | #endif | |
7086c19d AB |
235 | if (mtd_block_isbad(nftl->mbd.mtd, |
236 | i * nftl->EraseSize)) | |
1da177e4 LT |
237 | nftl->ReplUnitTable[i] = BLOCK_RESERVED; |
238 | } | |
97894cda | 239 | |
1da177e4 LT |
240 | nftl->MediaUnit = block; |
241 | boot_record_count++; | |
97894cda | 242 | |
1da177e4 | 243 | } /* foreach (block) */ |
97894cda | 244 | |
1da177e4 LT |
245 | return boot_record_count?0:-1; |
246 | } | |
247 | ||
248 | static int memcmpb(void *a, int c, int n) | |
249 | { | |
250 | int i; | |
251 | for (i = 0; i < n; i++) { | |
252 | if (c != ((unsigned char *)a)[i]) | |
253 | return 1; | |
254 | } | |
255 | return 0; | |
256 | } | |
257 | ||
258 | /* check_free_sector: check if a free sector is actually FREE, i.e. All 0xff in data and oob area */ | |
97894cda | 259 | static int check_free_sectors(struct NFTLrecord *nftl, unsigned int address, int len, |
1da177e4 LT |
260 | int check_oob) |
261 | { | |
9223a456 TG |
262 | struct mtd_info *mtd = nftl->mbd.mtd; |
263 | size_t retlen; | |
27ab41e2 KC |
264 | int i, ret; |
265 | u8 *buf; | |
266 | ||
267 | buf = kmalloc(SECTORSIZE + mtd->oobsize, GFP_KERNEL); | |
268 | if (!buf) | |
9c5b19c2 | 269 | return -ENOMEM; |
1da177e4 | 270 | |
27ab41e2 | 271 | ret = -1; |
1da177e4 | 272 | for (i = 0; i < len; i += SECTORSIZE) { |
329ad399 | 273 | if (mtd_read(mtd, address, SECTORSIZE, &retlen, buf)) |
27ab41e2 | 274 | goto out; |
1da177e4 | 275 | if (memcmpb(buf, 0xff, SECTORSIZE) != 0) |
27ab41e2 | 276 | goto out; |
1da177e4 LT |
277 | |
278 | if (check_oob) { | |
8593fbc6 | 279 | if(nftl_read_oob(mtd, address, mtd->oobsize, |
9223a456 | 280 | &retlen, &buf[SECTORSIZE]) < 0) |
27ab41e2 | 281 | goto out; |
9223a456 | 282 | if (memcmpb(buf + SECTORSIZE, 0xff, mtd->oobsize) != 0) |
27ab41e2 | 283 | goto out; |
1da177e4 LT |
284 | } |
285 | address += SECTORSIZE; | |
286 | } | |
287 | ||
27ab41e2 KC |
288 | ret = 0; |
289 | ||
290 | out: | |
291 | kfree(buf); | |
292 | return ret; | |
1da177e4 LT |
293 | } |
294 | ||
295 | /* NFTL_format: format a Erase Unit by erasing ALL Erase Zones in the Erase Unit and | |
296 | * Update NFTL metadata. Each erase operation is checked with check_free_sectors | |
297 | * | |
298 | * Return: 0 when succeed, -1 on error. | |
299 | * | |
92394b5c | 300 | * ToDo: 1. Is it necessary to check_free_sector after erasing ?? |
1da177e4 LT |
301 | */ |
302 | int NFTL_formatblock(struct NFTLrecord *nftl, int block) | |
303 | { | |
304 | size_t retlen; | |
305 | unsigned int nb_erases, erase_mark; | |
306 | struct nftl_uci1 uci; | |
307 | struct erase_info *instr = &nftl->instr; | |
f4a43cfc | 308 | struct mtd_info *mtd = nftl->mbd.mtd; |
1da177e4 LT |
309 | |
310 | /* Read the Unit Control Information #1 for Wear-Leveling */ | |
8593fbc6 | 311 | if (nftl_read_oob(mtd, block * nftl->EraseSize + SECTORSIZE + 8, |
f4a43cfc | 312 | 8, &retlen, (char *)&uci) < 0) |
1da177e4 LT |
313 | goto default_uci1; |
314 | ||
315 | erase_mark = le16_to_cpu ((uci.EraseMark | uci.EraseMark1)); | |
316 | if (erase_mark != ERASE_MARK) { | |
317 | default_uci1: | |
318 | uci.EraseMark = cpu_to_le16(ERASE_MARK); | |
319 | uci.EraseMark1 = cpu_to_le16(ERASE_MARK); | |
320 | uci.WearInfo = cpu_to_le32(0); | |
321 | } | |
322 | ||
323 | memset(instr, 0, sizeof(struct erase_info)); | |
324 | ||
325 | /* XXX: use async erase interface, XXX: test return code */ | |
1da177e4 LT |
326 | instr->addr = block * nftl->EraseSize; |
327 | instr->len = nftl->EraseSize; | |
884cfd90 | 328 | if (mtd_erase(mtd, instr)) { |
1da177e4 LT |
329 | printk("Error while formatting block %d\n", block); |
330 | goto fail; | |
331 | } | |
332 | ||
4845a077 CIK |
333 | /* increase and write Wear-Leveling info */ |
334 | nb_erases = le32_to_cpu(uci.WearInfo); | |
335 | nb_erases++; | |
336 | ||
337 | /* wrap (almost impossible with current flash) or free block */ | |
338 | if (nb_erases == 0) | |
339 | nb_erases = 1; | |
340 | ||
341 | /* check the "freeness" of Erase Unit before updating metadata | |
342 | * FixMe: is this check really necessary ? since we have check the | |
343 | * return code after the erase operation. | |
344 | */ | |
345 | if (check_free_sectors(nftl, instr->addr, nftl->EraseSize, 1) != 0) | |
346 | goto fail; | |
347 | ||
348 | uci.WearInfo = le32_to_cpu(nb_erases); | |
349 | if (nftl_write_oob(mtd, block * nftl->EraseSize + SECTORSIZE + | |
350 | 8, 8, &retlen, (char *)&uci) < 0) | |
351 | goto fail; | |
352 | return 0; | |
1da177e4 LT |
353 | fail: |
354 | /* could not format, update the bad block table (caller is responsible | |
355 | for setting the ReplUnitTable to BLOCK_RESERVED on failure) */ | |
5942ddbc | 356 | mtd_block_markbad(nftl->mbd.mtd, instr->addr); |
1da177e4 LT |
357 | return -1; |
358 | } | |
359 | ||
360 | /* check_sectors_in_chain: Check that each sector of a Virtual Unit Chain is correct. | |
361 | * Mark as 'IGNORE' each incorrect sector. This check is only done if the chain | |
362 | * was being folded when NFTL was interrupted. | |
363 | * | |
92394b5c | 364 | * The check_free_sectors in this function is necessary. There is a possible |
1da177e4 LT |
365 | * situation that after writing the Data area, the Block Control Information is |
366 | * not updated according (due to power failure or something) which leaves the block | |
92394b5c | 367 | * in an inconsistent state. So we have to check if a block is really FREE in this |
1da177e4 LT |
368 | * case. */ |
369 | static void check_sectors_in_chain(struct NFTLrecord *nftl, unsigned int first_block) | |
370 | { | |
f4a43cfc | 371 | struct mtd_info *mtd = nftl->mbd.mtd; |
1da177e4 LT |
372 | unsigned int block, i, status; |
373 | struct nftl_bci bci; | |
374 | int sectors_per_block; | |
375 | size_t retlen; | |
376 | ||
377 | sectors_per_block = nftl->EraseSize / SECTORSIZE; | |
378 | block = first_block; | |
379 | for (;;) { | |
380 | for (i = 0; i < sectors_per_block; i++) { | |
8593fbc6 | 381 | if (nftl_read_oob(mtd, |
f4a43cfc TG |
382 | block * nftl->EraseSize + i * SECTORSIZE, |
383 | 8, &retlen, (char *)&bci) < 0) | |
1da177e4 LT |
384 | status = SECTOR_IGNORE; |
385 | else | |
386 | status = bci.Status | bci.Status1; | |
387 | ||
388 | switch(status) { | |
389 | case SECTOR_FREE: | |
390 | /* verify that the sector is really free. If not, mark | |
391 | as ignore */ | |
392 | if (memcmpb(&bci, 0xff, 8) != 0 || | |
97894cda | 393 | check_free_sectors(nftl, block * nftl->EraseSize + i * SECTORSIZE, |
1da177e4 LT |
394 | SECTORSIZE, 0) != 0) { |
395 | printk("Incorrect free sector %d in block %d: " | |
396 | "marking it as ignored\n", | |
397 | i, block); | |
398 | ||
399 | /* sector not free actually : mark it as SECTOR_IGNORE */ | |
400 | bci.Status = SECTOR_IGNORE; | |
401 | bci.Status1 = SECTOR_IGNORE; | |
8593fbc6 | 402 | nftl_write_oob(mtd, block * |
f4a43cfc TG |
403 | nftl->EraseSize + |
404 | i * SECTORSIZE, 8, | |
405 | &retlen, (char *)&bci); | |
1da177e4 LT |
406 | } |
407 | break; | |
408 | default: | |
409 | break; | |
410 | } | |
411 | } | |
412 | ||
413 | /* proceed to next Erase Unit on the chain */ | |
414 | block = nftl->ReplUnitTable[block]; | |
415 | if (!(block == BLOCK_NIL || block < nftl->nb_blocks)) | |
416 | printk("incorrect ReplUnitTable[] : %d\n", block); | |
417 | if (block == BLOCK_NIL || block >= nftl->nb_blocks) | |
418 | break; | |
419 | } | |
420 | } | |
421 | ||
efad798b | 422 | /* calc_chain_length: Walk through a Virtual Unit Chain and estimate chain length */ |
1da177e4 LT |
423 | static int calc_chain_length(struct NFTLrecord *nftl, unsigned int first_block) |
424 | { | |
425 | unsigned int length = 0, block = first_block; | |
426 | ||
427 | for (;;) { | |
428 | length++; | |
92394b5c | 429 | /* avoid infinite loops, although this is guaranteed not to |
1da177e4 LT |
430 | happen because of the previous checks */ |
431 | if (length >= nftl->nb_blocks) { | |
432 | printk("nftl: length too long %d !\n", length); | |
433 | break; | |
434 | } | |
435 | ||
436 | block = nftl->ReplUnitTable[block]; | |
437 | if (!(block == BLOCK_NIL || block < nftl->nb_blocks)) | |
438 | printk("incorrect ReplUnitTable[] : %d\n", block); | |
439 | if (block == BLOCK_NIL || block >= nftl->nb_blocks) | |
440 | break; | |
441 | } | |
442 | return length; | |
443 | } | |
444 | ||
445 | /* format_chain: Format an invalid Virtual Unit chain. It frees all the Erase Units in a | |
446 | * Virtual Unit Chain, i.e. all the units are disconnected. | |
447 | * | |
92394b5c | 448 | * It is not strictly correct to begin from the first block of the chain because |
1da177e4 LT |
449 | * if we stop the code, we may see again a valid chain if there was a first_block |
450 | * flag in a block inside it. But is it really a problem ? | |
451 | * | |
92394b5c | 452 | * FixMe: Figure out what the last statement means. What if power failure when we are |
1da177e4 LT |
453 | * in the for (;;) loop formatting blocks ?? |
454 | */ | |
455 | static void format_chain(struct NFTLrecord *nftl, unsigned int first_block) | |
456 | { | |
457 | unsigned int block = first_block, block1; | |
458 | ||
459 | printk("Formatting chain at block %d\n", first_block); | |
460 | ||
461 | for (;;) { | |
462 | block1 = nftl->ReplUnitTable[block]; | |
463 | ||
464 | printk("Formatting block %d\n", block); | |
465 | if (NFTL_formatblock(nftl, block) < 0) { | |
466 | /* cannot format !!!! Mark it as Bad Unit */ | |
467 | nftl->ReplUnitTable[block] = BLOCK_RESERVED; | |
468 | } else { | |
469 | nftl->ReplUnitTable[block] = BLOCK_FREE; | |
470 | } | |
471 | ||
472 | /* goto next block on the chain */ | |
473 | block = block1; | |
474 | ||
475 | if (!(block == BLOCK_NIL || block < nftl->nb_blocks)) | |
476 | printk("incorrect ReplUnitTable[] : %d\n", block); | |
477 | if (block == BLOCK_NIL || block >= nftl->nb_blocks) | |
478 | break; | |
479 | } | |
480 | } | |
481 | ||
482 | /* check_and_mark_free_block: Verify that a block is free in the NFTL sense (valid erase mark) or | |
483 | * totally free (only 0xff). | |
484 | * | |
485 | * Definition: Free Erase Unit -- A properly erased/formatted Free Erase Unit should have meet the | |
92394b5c | 486 | * following criteria: |
1da177e4 LT |
487 | * 1. */ |
488 | static int check_and_mark_free_block(struct NFTLrecord *nftl, int block) | |
489 | { | |
f4a43cfc | 490 | struct mtd_info *mtd = nftl->mbd.mtd; |
1da177e4 LT |
491 | struct nftl_uci1 h1; |
492 | unsigned int erase_mark; | |
493 | size_t retlen; | |
494 | ||
495 | /* check erase mark. */ | |
8593fbc6 | 496 | if (nftl_read_oob(mtd, block * nftl->EraseSize + SECTORSIZE + 8, 8, |
f4a43cfc | 497 | &retlen, (char *)&h1) < 0) |
1da177e4 LT |
498 | return -1; |
499 | ||
500 | erase_mark = le16_to_cpu ((h1.EraseMark | h1.EraseMark1)); | |
501 | if (erase_mark != ERASE_MARK) { | |
502 | /* if no erase mark, the block must be totally free. This is | |
92394b5c | 503 | possible in two cases : empty filesystem or interrupted erase (very unlikely) */ |
1da177e4 LT |
504 | if (check_free_sectors (nftl, block * nftl->EraseSize, nftl->EraseSize, 1) != 0) |
505 | return -1; | |
506 | ||
507 | /* free block : write erase mark */ | |
508 | h1.EraseMark = cpu_to_le16(ERASE_MARK); | |
509 | h1.EraseMark1 = cpu_to_le16(ERASE_MARK); | |
510 | h1.WearInfo = cpu_to_le32(0); | |
8593fbc6 | 511 | if (nftl_write_oob(mtd, |
f4a43cfc TG |
512 | block * nftl->EraseSize + SECTORSIZE + 8, 8, |
513 | &retlen, (char *)&h1) < 0) | |
1da177e4 LT |
514 | return -1; |
515 | } else { | |
516 | #if 0 | |
517 | /* if erase mark present, need to skip it when doing check */ | |
518 | for (i = 0; i < nftl->EraseSize; i += SECTORSIZE) { | |
519 | /* check free sector */ | |
520 | if (check_free_sectors (nftl, block * nftl->EraseSize + i, | |
521 | SECTORSIZE, 0) != 0) | |
522 | return -1; | |
523 | ||
8593fbc6 | 524 | if (nftl_read_oob(mtd, block * nftl->EraseSize + i, |
f4a43cfc | 525 | 16, &retlen, buf) < 0) |
1da177e4 LT |
526 | return -1; |
527 | if (i == SECTORSIZE) { | |
528 | /* skip erase mark */ | |
529 | if (memcmpb(buf, 0xff, 8)) | |
530 | return -1; | |
531 | } else { | |
532 | if (memcmpb(buf, 0xff, 16)) | |
533 | return -1; | |
534 | } | |
535 | } | |
536 | #endif | |
537 | } | |
538 | ||
539 | return 0; | |
540 | } | |
541 | ||
542 | /* get_fold_mark: Read fold mark from Unit Control Information #2, we use FOLD_MARK_IN_PROGRESS | |
543 | * to indicate that we are in the progression of a Virtual Unit Chain folding. If the UCI #2 | |
544 | * is FOLD_MARK_IN_PROGRESS when mounting the NFTL, the (previous) folding process is interrupted | |
92394b5c | 545 | * for some reason. A clean up/check of the VUC is necessary in this case. |
1da177e4 LT |
546 | * |
547 | * WARNING: return 0 if read error | |
548 | */ | |
549 | static int get_fold_mark(struct NFTLrecord *nftl, unsigned int block) | |
550 | { | |
f4a43cfc | 551 | struct mtd_info *mtd = nftl->mbd.mtd; |
1da177e4 LT |
552 | struct nftl_uci2 uci; |
553 | size_t retlen; | |
554 | ||
8593fbc6 | 555 | if (nftl_read_oob(mtd, block * nftl->EraseSize + 2 * SECTORSIZE + 8, |
f4a43cfc | 556 | 8, &retlen, (char *)&uci) < 0) |
1da177e4 LT |
557 | return 0; |
558 | ||
559 | return le16_to_cpu((uci.FoldMark | uci.FoldMark1)); | |
560 | } | |
561 | ||
562 | int NFTL_mount(struct NFTLrecord *s) | |
563 | { | |
564 | int i; | |
fb60e87d | 565 | unsigned int first_logical_block, logical_block, rep_block, erase_mark; |
1da177e4 LT |
566 | unsigned int block, first_block, is_first_block; |
567 | int chain_length, do_format_chain; | |
568 | struct nftl_uci0 h0; | |
569 | struct nftl_uci1 h1; | |
f4a43cfc | 570 | struct mtd_info *mtd = s->mbd.mtd; |
1da177e4 LT |
571 | size_t retlen; |
572 | ||
573 | /* search for NFTL MediaHeader and Spare NFTL Media Header */ | |
574 | if (find_boot_record(s) < 0) { | |
575 | printk("Could not find valid boot record\n"); | |
576 | return -1; | |
577 | } | |
578 | ||
579 | /* init the logical to physical table */ | |
580 | for (i = 0; i < s->nb_blocks; i++) { | |
581 | s->EUNtable[i] = BLOCK_NIL; | |
582 | } | |
583 | ||
584 | /* first pass : explore each block chain */ | |
585 | first_logical_block = 0; | |
586 | for (first_block = 0; first_block < s->nb_blocks; first_block++) { | |
587 | /* if the block was not already explored, we can look at it */ | |
588 | if (s->ReplUnitTable[first_block] == BLOCK_NOTEXPLORED) { | |
589 | block = first_block; | |
590 | chain_length = 0; | |
591 | do_format_chain = 0; | |
592 | ||
593 | for (;;) { | |
594 | /* read the block header. If error, we format the chain */ | |
8593fbc6 | 595 | if (nftl_read_oob(mtd, |
f4a43cfc TG |
596 | block * s->EraseSize + 8, 8, |
597 | &retlen, (char *)&h0) < 0 || | |
8593fbc6 | 598 | nftl_read_oob(mtd, |
f4a43cfc TG |
599 | block * s->EraseSize + |
600 | SECTORSIZE + 8, 8, | |
601 | &retlen, (char *)&h1) < 0) { | |
1da177e4 LT |
602 | s->ReplUnitTable[block] = BLOCK_NIL; |
603 | do_format_chain = 1; | |
604 | break; | |
605 | } | |
606 | ||
607 | logical_block = le16_to_cpu ((h0.VirtUnitNum | h0.SpareVirtUnitNum)); | |
608 | rep_block = le16_to_cpu ((h0.ReplUnitNum | h0.SpareReplUnitNum)); | |
1da177e4 LT |
609 | erase_mark = le16_to_cpu ((h1.EraseMark | h1.EraseMark1)); |
610 | ||
611 | is_first_block = !(logical_block >> 15); | |
612 | logical_block = logical_block & 0x7fff; | |
613 | ||
614 | /* invalid/free block test */ | |
615 | if (erase_mark != ERASE_MARK || logical_block >= s->nb_blocks) { | |
616 | if (chain_length == 0) { | |
617 | /* if not currently in a chain, we can handle it safely */ | |
618 | if (check_and_mark_free_block(s, block) < 0) { | |
619 | /* not really free: format it */ | |
620 | printk("Formatting block %d\n", block); | |
621 | if (NFTL_formatblock(s, block) < 0) { | |
622 | /* could not format: reserve the block */ | |
623 | s->ReplUnitTable[block] = BLOCK_RESERVED; | |
624 | } else { | |
625 | s->ReplUnitTable[block] = BLOCK_FREE; | |
626 | } | |
627 | } else { | |
628 | /* free block: mark it */ | |
629 | s->ReplUnitTable[block] = BLOCK_FREE; | |
630 | } | |
631 | /* directly examine the next block. */ | |
632 | goto examine_ReplUnitTable; | |
633 | } else { | |
634 | /* the block was in a chain : this is bad. We | |
635 | must format all the chain */ | |
636 | printk("Block %d: free but referenced in chain %d\n", | |
637 | block, first_block); | |
638 | s->ReplUnitTable[block] = BLOCK_NIL; | |
639 | do_format_chain = 1; | |
640 | break; | |
641 | } | |
642 | } | |
643 | ||
644 | /* we accept only first blocks here */ | |
645 | if (chain_length == 0) { | |
646 | /* this block is not the first block in chain : | |
647 | ignore it, it will be included in a chain | |
648 | later, or marked as not explored */ | |
649 | if (!is_first_block) | |
650 | goto examine_ReplUnitTable; | |
651 | first_logical_block = logical_block; | |
652 | } else { | |
653 | if (logical_block != first_logical_block) { | |
97894cda | 654 | printk("Block %d: incorrect logical block: %d expected: %d\n", |
1da177e4 LT |
655 | block, logical_block, first_logical_block); |
656 | /* the chain is incorrect : we must format it, | |
92394b5c | 657 | but we need to read it completely */ |
1da177e4 LT |
658 | do_format_chain = 1; |
659 | } | |
660 | if (is_first_block) { | |
661 | /* we accept that a block is marked as first | |
662 | block while being last block in a chain | |
663 | only if the chain is being folded */ | |
664 | if (get_fold_mark(s, block) != FOLD_MARK_IN_PROGRESS || | |
665 | rep_block != 0xffff) { | |
666 | printk("Block %d: incorrectly marked as first block in chain\n", | |
667 | block); | |
668 | /* the chain is incorrect : we must format it, | |
92394b5c | 669 | but we need to read it completely */ |
1da177e4 LT |
670 | do_format_chain = 1; |
671 | } else { | |
672 | printk("Block %d: folding in progress - ignoring first block flag\n", | |
673 | block); | |
674 | } | |
675 | } | |
676 | } | |
677 | chain_length++; | |
678 | if (rep_block == 0xffff) { | |
679 | /* no more blocks after */ | |
680 | s->ReplUnitTable[block] = BLOCK_NIL; | |
681 | break; | |
682 | } else if (rep_block >= s->nb_blocks) { | |
97894cda | 683 | printk("Block %d: referencing invalid block %d\n", |
1da177e4 LT |
684 | block, rep_block); |
685 | do_format_chain = 1; | |
686 | s->ReplUnitTable[block] = BLOCK_NIL; | |
687 | break; | |
688 | } else if (s->ReplUnitTable[rep_block] != BLOCK_NOTEXPLORED) { | |
689 | /* same problem as previous 'is_first_block' test: | |
690 | we accept that the last block of a chain has | |
691 | the first_block flag set if folding is in | |
692 | progress. We handle here the case where the | |
693 | last block appeared first */ | |
694 | if (s->ReplUnitTable[rep_block] == BLOCK_NIL && | |
695 | s->EUNtable[first_logical_block] == rep_block && | |
696 | get_fold_mark(s, first_block) == FOLD_MARK_IN_PROGRESS) { | |
697 | /* EUNtable[] will be set after */ | |
698 | printk("Block %d: folding in progress - ignoring first block flag\n", | |
699 | rep_block); | |
700 | s->ReplUnitTable[block] = rep_block; | |
701 | s->EUNtable[first_logical_block] = BLOCK_NIL; | |
702 | } else { | |
97894cda | 703 | printk("Block %d: referencing block %d already in another chain\n", |
1da177e4 LT |
704 | block, rep_block); |
705 | /* XXX: should handle correctly fold in progress chains */ | |
706 | do_format_chain = 1; | |
707 | s->ReplUnitTable[block] = BLOCK_NIL; | |
708 | } | |
709 | break; | |
710 | } else { | |
711 | /* this is OK */ | |
712 | s->ReplUnitTable[block] = rep_block; | |
713 | block = rep_block; | |
714 | } | |
715 | } | |
716 | ||
717 | /* the chain was completely explored. Now we can decide | |
718 | what to do with it */ | |
719 | if (do_format_chain) { | |
720 | /* invalid chain : format it */ | |
721 | format_chain(s, first_block); | |
722 | } else { | |
723 | unsigned int first_block1, chain_to_format, chain_length1; | |
724 | int fold_mark; | |
97894cda | 725 | |
1da177e4 LT |
726 | /* valid chain : get foldmark */ |
727 | fold_mark = get_fold_mark(s, first_block); | |
728 | if (fold_mark == 0) { | |
729 | /* cannot get foldmark : format the chain */ | |
730 | printk("Could read foldmark at block %d\n", first_block); | |
731 | format_chain(s, first_block); | |
732 | } else { | |
733 | if (fold_mark == FOLD_MARK_IN_PROGRESS) | |
734 | check_sectors_in_chain(s, first_block); | |
735 | ||
736 | /* now handle the case where we find two chains at the | |
737 | same virtual address : we select the longer one, | |
738 | because the shorter one is the one which was being | |
739 | folded if the folding was not done in place */ | |
740 | first_block1 = s->EUNtable[first_logical_block]; | |
741 | if (first_block1 != BLOCK_NIL) { | |
742 | /* XXX: what to do if same length ? */ | |
743 | chain_length1 = calc_chain_length(s, first_block1); | |
97894cda | 744 | printk("Two chains at blocks %d (len=%d) and %d (len=%d)\n", |
1da177e4 | 745 | first_block1, chain_length1, first_block, chain_length); |
97894cda | 746 | |
1da177e4 LT |
747 | if (chain_length >= chain_length1) { |
748 | chain_to_format = first_block1; | |
749 | s->EUNtable[first_logical_block] = first_block; | |
750 | } else { | |
751 | chain_to_format = first_block; | |
752 | } | |
753 | format_chain(s, chain_to_format); | |
754 | } else { | |
755 | s->EUNtable[first_logical_block] = first_block; | |
756 | } | |
757 | } | |
758 | } | |
759 | } | |
760 | examine_ReplUnitTable:; | |
761 | } | |
762 | ||
763 | /* second pass to format unreferenced blocks and init free block count */ | |
764 | s->numfreeEUNs = 0; | |
765 | s->LastFreeEUN = le16_to_cpu(s->MediaHdr.FirstPhysicalEUN); | |
766 | ||
767 | for (block = 0; block < s->nb_blocks; block++) { | |
768 | if (s->ReplUnitTable[block] == BLOCK_NOTEXPLORED) { | |
769 | printk("Unreferenced block %d, formatting it\n", block); | |
770 | if (NFTL_formatblock(s, block) < 0) | |
771 | s->ReplUnitTable[block] = BLOCK_RESERVED; | |
772 | else | |
773 | s->ReplUnitTable[block] = BLOCK_FREE; | |
774 | } | |
775 | if (s->ReplUnitTable[block] == BLOCK_FREE) { | |
776 | s->numfreeEUNs++; | |
777 | s->LastFreeEUN = block; | |
778 | } | |
779 | } | |
780 | ||
781 | return 0; | |
782 | } |