blob: 87739649eac21a6c3688c5c60956280746babd70 [file] [log] [blame]
Uwe Zeisbergerf30c2262006-10-03 23:01:26 +02001/* linux/drivers/cdrom/cdrom.c
Linus Torvalds1da177e2005-04-16 15:20:36 -07002 Copyright (c) 1996, 1997 David A. van Leeuwen.
3 Copyright (c) 1997, 1998 Erik Andersen <andersee@debian.org>
4 Copyright (c) 1998, 1999 Jens Axboe <axboe@image.dk>
5
6 May be copied or modified under the terms of the GNU General Public
7 License. See linux/COPYING for more information.
8
9 Uniform CD-ROM driver for Linux.
10 See Documentation/cdrom/cdrom-standard.tex for usage information.
11
12 The routines in the file provide a uniform interface between the
13 software that uses CD-ROMs and the various low-level drivers that
14 actually talk to the hardware. Suggestions are welcome.
15 Patches that work are more welcome though. ;-)
16
17 To Do List:
18 ----------------------------------
19
20 -- Modify sysctl/proc interface. I plan on having one directory per
21 drive, with entries for outputing general drive information, and sysctl
22 based tunable parameters such as whether the tray should auto-close for
23 that drive. Suggestions (or patches) for this welcome!
24
25
26 Revision History
27 ----------------------------------
28 1.00 Date Unknown -- David van Leeuwen <david@tm.tno.nl>
29 -- Initial version by David A. van Leeuwen. I don't have a detailed
30 changelog for the 1.x series, David?
31
322.00 Dec 2, 1997 -- Erik Andersen <andersee@debian.org>
Lucas De Marchi25985ed2011-03-30 22:57:33 -030033 -- New maintainer! As David A. van Leeuwen has been too busy to actively
Linus Torvalds1da177e2005-04-16 15:20:36 -070034 maintain and improve this driver, I am now carrying on the torch. If
35 you have a problem with this driver, please feel free to contact me.
36
37 -- Added (rudimentary) sysctl interface. I realize this is really weak
38 right now, and is _very_ badly implemented. It will be improved...
39
40 -- Modified CDROM_DISC_STATUS so that it is now incorporated into
41 the Uniform CD-ROM driver via the cdrom_count_tracks function.
42 The cdrom_count_tracks function helps resolve some of the false
43 assumptions of the CDROM_DISC_STATUS ioctl, and is also used to check
44 for the correct media type when mounting or playing audio from a CD.
45
46 -- Remove the calls to verify_area and only use the copy_from_user and
47 copy_to_user stuff, since these calls now provide their own memory
48 checking with the 2.1.x kernels.
49
50 -- Major update to return codes so that errors from low-level drivers
51 are passed on through (thanks to Gerd Knorr for pointing out this
52 problem).
53
54 -- Made it so if a function isn't implemented in a low-level driver,
55 ENOSYS is now returned instead of EINVAL.
56
57 -- Simplified some complex logic so that the source code is easier to read.
58
59 -- Other stuff I probably forgot to mention (lots of changes).
60
612.01 to 2.11 Dec 1997-Jan 1998
62 -- TO-DO! Write changelogs for 2.01 to 2.12.
63
642.12 Jan 24, 1998 -- Erik Andersen <andersee@debian.org>
65 -- Fixed a bug in the IOCTL_IN and IOCTL_OUT macros. It turns out that
66 copy_*_user does not return EFAULT on error, but instead returns the number
67 of bytes not copied. I was returning whatever non-zero stuff came back from
68 the copy_*_user functions directly, which would result in strange errors.
69
702.13 July 17, 1998 -- Erik Andersen <andersee@debian.org>
71 -- Fixed a bug in CDROM_SELECT_SPEED where you couldn't lower the speed
72 of the drive. Thanks to Tobias Ringstr|m <tori@prosolvia.se> for pointing
73 this out and providing a simple fix.
74 -- Fixed the procfs-unload-module bug with the fill_inode procfs callback.
75 thanks to Andrea Arcangeli
76 -- Fixed it so that the /proc entry now also shows up when cdrom is
77 compiled into the kernel. Before it only worked when loaded as a module.
78
79 2.14 August 17, 1998 -- Erik Andersen <andersee@debian.org>
80 -- Fixed a bug in cdrom_media_changed and handling of reporting that
81 the media had changed for devices that _don't_ implement media_changed.
82 Thanks to Grant R. Guenther <grant@torque.net> for spotting this bug.
83 -- Made a few things more pedanticly correct.
84
852.50 Oct 19, 1998 - Jens Axboe <axboe@image.dk>
86 -- New maintainers! Erik was too busy to continue the work on the driver,
87 so now Chris Zwilling <chris@cloudnet.com> and Jens Axboe <axboe@image.dk>
88 will do their best to follow in his footsteps
89
90 2.51 Dec 20, 1998 - Jens Axboe <axboe@image.dk>
91 -- Check if drive is capable of doing what we ask before blindly changing
92 cdi->options in various ioctl.
93 -- Added version to proc entry.
94
95 2.52 Jan 16, 1999 - Jens Axboe <axboe@image.dk>
96 -- Fixed an error in open_for_data where we would sometimes not return
97 the correct error value. Thanks Huba Gaspar <huba@softcell.hu>.
98 -- Fixed module usage count - usage was based on /proc/sys/dev
99 instead of /proc/sys/dev/cdrom. This could lead to an oops when other
100 modules had entries in dev. Feb 02 - real bug was in sysctl.c where
101 dev would be removed even though it was used. cdrom.c just illuminated
102 that bug.
103
104 2.53 Feb 22, 1999 - Jens Axboe <axboe@image.dk>
105 -- Fixup of several ioctl calls, in particular CDROM_SET_OPTIONS has
106 been "rewritten" because capabilities and options aren't in sync. They
107 should be...
108 -- Added CDROM_LOCKDOOR ioctl. Locks the door and keeps it that way.
109 -- Added CDROM_RESET ioctl.
110 -- Added CDROM_DEBUG ioctl. Enable debug messages on-the-fly.
111 -- Added CDROM_GET_CAPABILITY ioctl. This relieves userspace programs
112 from parsing /proc/sys/dev/cdrom/info.
113
114 2.54 Mar 15, 1999 - Jens Axboe <axboe@image.dk>
115 -- Check capability mask from low level driver when counting tracks as
116 per suggestion from Corey J. Scotts <cstotts@blue.weeg.uiowa.edu>.
117
118 2.55 Apr 25, 1999 - Jens Axboe <axboe@image.dk>
119 -- autoclose was mistakenly checked against CDC_OPEN_TRAY instead of
120 CDC_CLOSE_TRAY.
121 -- proc info didn't mask against capabilities mask.
122
123 3.00 Aug 5, 1999 - Jens Axboe <axboe@image.dk>
124 -- Unified audio ioctl handling across CD-ROM drivers. A lot of the
125 code was duplicated before. Drives that support the generic packet
126 interface are now being fed packets from here instead.
127 -- First attempt at adding support for MMC2 commands - for DVD and
128 CD-R(W) drives. Only the DVD parts are in now - the interface used is
129 the same as for the audio ioctls.
130 -- ioctl cleanups. if a drive couldn't play audio, it didn't get
131 a change to perform device specific ioctls as well.
132 -- Defined CDROM_CAN(CDC_XXX) for checking the capabilities.
133 -- Put in sysctl files for autoclose, autoeject, check_media, debug,
134 and lock.
135 -- /proc/sys/dev/cdrom/info has been updated to also contain info about
136 CD-Rx and DVD capabilities.
137 -- Now default to checking media type.
138 -- CDROM_SEND_PACKET ioctl added. The infrastructure was in place for
139 doing this anyway, with the generic_packet addition.
140
141 3.01 Aug 6, 1999 - Jens Axboe <axboe@image.dk>
142 -- Fix up the sysctl handling so that the option flags get set
143 correctly.
144 -- Fix up ioctl handling so the device specific ones actually get
145 called :).
146
147 3.02 Aug 8, 1999 - Jens Axboe <axboe@image.dk>
148 -- Fixed volume control on SCSI drives (or others with longer audio
149 page).
150 -- Fixed a couple of DVD minors. Thanks to Andrew T. Veliath
151 <andrewtv@usa.net> for telling me and for having defined the various
152 DVD structures and ioctls in the first place! He designed the original
153 DVD patches for ide-cd and while I rearranged and unified them, the
154 interface is still the same.
155
156 3.03 Sep 1, 1999 - Jens Axboe <axboe@image.dk>
157 -- Moved the rest of the audio ioctls from the CD-ROM drivers here. Only
158 CDROMREADTOCENTRY and CDROMREADTOCHDR are left.
159 -- Moved the CDROMREADxxx ioctls in here.
160 -- Defined the cdrom_get_last_written and cdrom_get_next_block as ioctls
161 and exported functions.
162 -- Erik Andersen <andersen@xmission.com> modified all SCMD_ commands
163 to now read GPCMD_ for the new generic packet interface. All low level
164 drivers are updated as well.
165 -- Various other cleanups.
166
167 3.04 Sep 12, 1999 - Jens Axboe <axboe@image.dk>
168 -- Fixed a couple of possible memory leaks (if an operation failed and
169 we didn't free the buffer before returning the error).
170 -- Integrated Uniform CD Changer handling from Richard Sharman
171 <rsharman@pobox.com>.
172 -- Defined CD_DVD and CD_CHANGER log levels.
173 -- Fixed the CDROMREADxxx ioctls.
174 -- CDROMPLAYTRKIND uses the GPCMD_PLAY_AUDIO_MSF command - too few
175 drives supported it. We lose the index part, however.
176 -- Small modifications to accommodate opens of /dev/hdc1, required
177 for ide-cd to handle multisession discs.
178 -- Export cdrom_mode_sense and cdrom_mode_select.
179 -- init_cdrom_command() for setting up a cgc command.
180
181 3.05 Oct 24, 1999 - Jens Axboe <axboe@image.dk>
182 -- Changed the interface for CDROM_SEND_PACKET. Before it was virtually
183 impossible to send the drive data in a sensible way.
184 -- Lowered stack usage in mmc_ioctl(), dvd_read_disckey(), and
185 dvd_read_manufact.
186 -- Added setup of write mode for packet writing.
187 -- Fixed CDDA ripping with cdda2wav - accept much larger requests of
188 number of frames and split the reads in blocks of 8.
189
190 3.06 Dec 13, 1999 - Jens Axboe <axboe@image.dk>
191 -- Added support for changing the region of DVD drives.
192 -- Added sense data to generic command.
193
194 3.07 Feb 2, 2000 - Jens Axboe <axboe@suse.de>
195 -- Do same "read header length" trick in cdrom_get_disc_info() as
196 we do in cdrom_get_track_info() -- some drive don't obey specs and
197 fail if they can't supply the full Mt Fuji size table.
198 -- Deleted stuff related to setting up write modes. It has a different
199 home now.
200 -- Clear header length in mode_select unconditionally.
201 -- Removed the register_disk() that was added, not needed here.
202
203 3.08 May 1, 2000 - Jens Axboe <axboe@suse.de>
204 -- Fix direction flag in setup_send_key and setup_report_key. This
205 gave some SCSI adapters problems.
206 -- Always return -EROFS for write opens
207 -- Convert to module_init/module_exit style init and remove some
208 of the #ifdef MODULE stuff
209 -- Fix several dvd errors - DVD_LU_SEND_ASF should pass agid,
210 DVD_HOST_SEND_RPC_STATE did not set buffer size in cdb, and
211 dvd_do_auth passed uninitialized data to drive because init_cdrom_command
212 did not clear a 0 sized buffer.
213
214 3.09 May 12, 2000 - Jens Axboe <axboe@suse.de>
215 -- Fix Video-CD on SCSI drives that don't support READ_CD command. In
216 that case switch block size and issue plain READ_10 again, then switch
217 back.
218
219 3.10 Jun 10, 2000 - Jens Axboe <axboe@suse.de>
220 -- Fix volume control on CD's - old SCSI-II drives now use their own
221 code, as doing MODE6 stuff in here is really not my intention.
222 -- Use READ_DISC_INFO for more reliable end-of-disc.
223
224 3.11 Jun 12, 2000 - Jens Axboe <axboe@suse.de>
225 -- Fix bug in getting rpc phase 2 region info.
226 -- Reinstate "correct" CDROMPLAYTRKIND
227
228 3.12 Oct 18, 2000 - Jens Axboe <axboe@suse.de>
229 -- Use quiet bit on packet commands not known to work
230
231 3.20 Dec 17, 2003 - Jens Axboe <axboe@suse.de>
232 -- Various fixes and lots of cleanups not listed :-)
233 -- Locking fixes
234 -- Mt Rainier support
235 -- DVD-RAM write open fixes
236
237 Nov 5 2001, Aug 8 2002. Modified by Andy Polyakov
238 <appro@fy.chalmers.se> to support MMC-3 compliant DVD+RW units.
239
240 Modified by Nigel Kukard <nkukard@lbsd.net> - support DVD+RW
241 2.4.x patch by Andy Polyakov <appro@fy.chalmers.se>
242
243-------------------------------------------------------------------------*/
244
Joe Perchese597cd02010-07-01 08:24:32 +0200245#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
246
Linus Torvalds1da177e2005-04-16 15:20:36 -0700247#define REVISION "Revision: 3.20"
248#define VERSION "Id: cdrom.c 3.20 2003/12/17"
249
250/* I use an error-log mask to give fine grain control over the type of
251 messages dumped to the system logs. The available masks include: */
252#define CD_NOTHING 0x0
253#define CD_WARNING 0x1
254#define CD_REG_UNREG 0x2
255#define CD_DO_IOCTL 0x4
256#define CD_OPEN 0x8
257#define CD_CLOSE 0x10
258#define CD_COUNT_TRACKS 0x20
259#define CD_CHANGER 0x40
260#define CD_DVD 0x80
261
262/* Define this to remove _all_ the debugging messages */
263/* #define ERRLOGMASK CD_NOTHING */
264#define ERRLOGMASK CD_WARNING
265/* #define ERRLOGMASK (CD_WARNING|CD_OPEN|CD_COUNT_TRACKS|CD_CLOSE) */
266/* #define ERRLOGMASK (CD_WARNING|CD_REG_UNREG|CD_DO_IOCTL|CD_OPEN|CD_CLOSE|CD_COUNT_TRACKS) */
267
Linus Torvalds1da177e2005-04-16 15:20:36 -0700268#include <linux/module.h>
269#include <linux/fs.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700270#include <linux/major.h>
271#include <linux/types.h>
272#include <linux/errno.h>
273#include <linux/kernel.h>
274#include <linux/mm.h>
275#include <linux/slab.h>
276#include <linux/cdrom.h>
277#include <linux/sysctl.h>
278#include <linux/proc_fs.h>
279#include <linux/blkpg.h>
280#include <linux/init.h>
281#include <linux/fcntl.h>
282#include <linux/blkdev.h>
283#include <linux/times.h>
Linus Torvalds7c0f6ba2016-12-24 11:46:01 -0800284#include <linux/uaccess.h>
Christoph Hellwig82ed4db2017-01-27 09:46:29 +0100285#include <scsi/scsi_request.h>
Linus Torvalds1da177e2005-04-16 15:20:36 -0700286
287/* used to tell the module to turn on full debugging messages */
Rusty Russell90ab5ee2012-01-13 09:32:20 +1030288static bool debug;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700289/* default compatibility mode */
Rusty Russell90ab5ee2012-01-13 09:32:20 +1030290static bool autoclose=1;
291static bool autoeject;
292static bool lockdoor = 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700293/* will we ever get to use this... sigh. */
Rusty Russell90ab5ee2012-01-13 09:32:20 +1030294static bool check_media_type;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700295/* automatically restart mrw format */
Rusty Russell90ab5ee2012-01-13 09:32:20 +1030296static bool mrw_format_restart = 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700297module_param(debug, bool, 0);
298module_param(autoclose, bool, 0);
299module_param(autoeject, bool, 0);
300module_param(lockdoor, bool, 0);
301module_param(check_media_type, bool, 0);
302module_param(mrw_format_restart, bool, 0);
303
Dave Young554988d2007-06-19 09:14:26 +0200304static DEFINE_MUTEX(cdrom_mutex);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700305
306static const char *mrw_format_status[] = {
307 "not mrw",
308 "bgformat inactive",
309 "bgformat active",
310 "mrw complete",
311};
312
313static const char *mrw_address_space[] = { "DMA", "GAA" };
314
Joe Perches5944b2c2014-05-04 17:05:02 -0700315#if (ERRLOGMASK != CD_NOTHING)
316#define cd_dbg(type, fmt, ...) \
Joe Perchese597cd02010-07-01 08:24:32 +0200317do { \
318 if ((ERRLOGMASK & type) || debug == 1) \
Joe Perches5944b2c2014-05-04 17:05:02 -0700319 pr_debug(fmt, ##__VA_ARGS__); \
Joe Perchese597cd02010-07-01 08:24:32 +0200320} while (0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700321#else
Joe Perches5944b2c2014-05-04 17:05:02 -0700322#define cd_dbg(type, fmt, ...) \
Joe Perchese597cd02010-07-01 08:24:32 +0200323do { \
324 if (0 && (ERRLOGMASK & type) || debug == 1) \
Joe Perches5944b2c2014-05-04 17:05:02 -0700325 pr_debug(fmt, ##__VA_ARGS__); \
Joe Perchese597cd02010-07-01 08:24:32 +0200326} while (0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700327#endif
328
Linus Torvalds1da177e2005-04-16 15:20:36 -0700329/* The (cdo->capability & ~cdi->mask & CDC_XXX) construct was used in
330 a lot of places. This macro makes the code more clear. */
331#define CDROM_CAN(type) (cdi->ops->capability & ~cdi->mask & (type))
332
Jens Axboe2e11c202007-01-03 08:10:35 +0100333/*
334 * Another popular OS uses 7 seconds as the hard timeout for default
335 * commands, so it is a good choice for us as well.
336 */
337#define CDROM_DEF_TIMEOUT (7 * HZ)
338
Linus Torvalds1da177e2005-04-16 15:20:36 -0700339/* Not-exported routines. */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700340
Linus Torvalds1da177e2005-04-16 15:20:36 -0700341static void cdrom_sysctl_register(void);
Akinobu Mita17672cf2008-03-26 12:08:59 +0100342
Akinobu Mita7fd097d2008-03-26 12:09:02 +0100343static LIST_HEAD(cdrom_list);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700344
Kees Cook853fe1b2017-02-13 16:25:26 -0800345int cdrom_dummy_generic_packet(struct cdrom_device_info *cdi,
346 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700347{
348 if (cgc->sense) {
349 cgc->sense->sense_key = 0x05;
350 cgc->sense->asc = 0x20;
351 cgc->sense->ascq = 0x00;
352 }
353
354 cgc->stat = -EIO;
355 return -EIO;
356}
Kees Cook853fe1b2017-02-13 16:25:26 -0800357EXPORT_SYMBOL(cdrom_dummy_generic_packet);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700358
Joe Perches40569c62014-05-04 17:05:12 -0700359static int cdrom_flush_cache(struct cdrom_device_info *cdi)
360{
361 struct packet_command cgc;
362
363 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
364 cgc.cmd[0] = GPCMD_FLUSH_CACHE;
365
366 cgc.timeout = 5 * 60 * HZ;
367
368 return cdi->ops->generic_packet(cdi, &cgc);
369}
370
Joe Perchesbd6f0bb2014-05-04 17:05:13 -0700371/* requires CD R/RW */
372static int cdrom_get_disc_info(struct cdrom_device_info *cdi,
373 disc_information *di)
374{
Kees Cook853fe1b2017-02-13 16:25:26 -0800375 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perchesbd6f0bb2014-05-04 17:05:13 -0700376 struct packet_command cgc;
377 int ret, buflen;
378
379 /* set up command and get the disc info */
380 init_cdrom_command(&cgc, di, sizeof(*di), CGC_DATA_READ);
381 cgc.cmd[0] = GPCMD_READ_DISC_INFO;
382 cgc.cmd[8] = cgc.buflen = 2;
383 cgc.quiet = 1;
384
385 ret = cdo->generic_packet(cdi, &cgc);
386 if (ret)
387 return ret;
388
389 /* not all drives have the same disc_info length, so requeue
390 * packet with the length the drive tells us it can supply
391 */
392 buflen = be16_to_cpu(di->disc_information_length) +
393 sizeof(di->disc_information_length);
394
395 if (buflen > sizeof(disc_information))
396 buflen = sizeof(disc_information);
397
398 cgc.cmd[8] = cgc.buflen = buflen;
399 ret = cdo->generic_packet(cdi, &cgc);
400 if (ret)
401 return ret;
402
403 /* return actual fill size */
404 return buflen;
405}
406
Linus Torvalds1da177e2005-04-16 15:20:36 -0700407/* This macro makes sure we don't have to check on cdrom_device_ops
408 * existence in the run-time routines below. Change_capability is a
409 * hack to have the capability flags defined const, while we can still
410 * change it here without gcc complaining at every line.
411 */
Joe Perches40569c62014-05-04 17:05:12 -0700412#define ENSURE(call, bits) \
413do { \
414 if (cdo->call == NULL) \
415 *change_capability &= ~(bits); \
416} while (0)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700417
418/*
419 * the first prototypes used 0x2c as the page code for the mrw mode page,
420 * subsequently this was changed to 0x03. probe the one used by this drive
421 */
422static int cdrom_mrw_probe_pc(struct cdrom_device_info *cdi)
423{
424 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200425 char buffer[16];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700426
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200427 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700428
429 cgc.timeout = HZ;
430 cgc.quiet = 1;
431
432 if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC, 0)) {
433 cdi->mrw_mode_page = MRW_MODE_PC;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200434 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700435 } else if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC_PRE1, 0)) {
436 cdi->mrw_mode_page = MRW_MODE_PC_PRE1;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200437 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700438 }
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200439
440 return 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700441}
442
443static int cdrom_is_mrw(struct cdrom_device_info *cdi, int *write)
444{
445 struct packet_command cgc;
446 struct mrw_feature_desc *mfd;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200447 unsigned char buffer[16];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700448 int ret;
449
450 *write = 0;
451
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200452 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700453
454 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
455 cgc.cmd[3] = CDF_MRW;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200456 cgc.cmd[8] = sizeof(buffer);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700457 cgc.quiet = 1;
458
459 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200460 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700461
462 mfd = (struct mrw_feature_desc *)&buffer[sizeof(struct feature_header)];
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200463 if (be16_to_cpu(mfd->feature_code) != CDF_MRW)
464 return 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700465 *write = mfd->write;
466
467 if ((ret = cdrom_mrw_probe_pc(cdi))) {
468 *write = 0;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200469 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700470 }
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200471
472 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700473}
474
475static int cdrom_mrw_bgformat(struct cdrom_device_info *cdi, int cont)
476{
477 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200478 unsigned char buffer[12];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700479 int ret;
480
Joe Perchese597cd02010-07-01 08:24:32 +0200481 pr_info("%sstarting format\n", cont ? "Re" : "");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700482
483 /*
484 * FmtData bit set (bit 4), format type is 1
485 */
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200486 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_WRITE);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700487 cgc.cmd[0] = GPCMD_FORMAT_UNIT;
488 cgc.cmd[1] = (1 << 4) | 1;
489
490 cgc.timeout = 5 * 60 * HZ;
491
492 /*
493 * 4 byte format list header, 8 byte format list descriptor
494 */
495 buffer[1] = 1 << 1;
496 buffer[3] = 8;
497
498 /*
499 * nr_blocks field
500 */
501 buffer[4] = 0xff;
502 buffer[5] = 0xff;
503 buffer[6] = 0xff;
504 buffer[7] = 0xff;
505
506 buffer[8] = 0x24 << 2;
507 buffer[11] = cont;
508
509 ret = cdi->ops->generic_packet(cdi, &cgc);
510 if (ret)
Joe Perchese597cd02010-07-01 08:24:32 +0200511 pr_info("bgformat failed\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700512
513 return ret;
514}
515
516static int cdrom_mrw_bgformat_susp(struct cdrom_device_info *cdi, int immed)
517{
518 struct packet_command cgc;
519
520 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
521 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
522
523 /*
524 * Session = 1, Track = 0
525 */
526 cgc.cmd[1] = !!immed;
527 cgc.cmd[2] = 1 << 1;
528
529 cgc.timeout = 5 * 60 * HZ;
530
531 return cdi->ops->generic_packet(cdi, &cgc);
532}
533
Linus Torvalds1da177e2005-04-16 15:20:36 -0700534static int cdrom_mrw_exit(struct cdrom_device_info *cdi)
535{
536 disc_information di;
537 int ret;
538
539 ret = cdrom_get_disc_info(cdi, &di);
540 if (ret < 0 || ret < (int)offsetof(typeof(di),disc_type))
541 return 1;
542
543 ret = 0;
544 if (di.mrw_status == CDM_MRW_BGFORMAT_ACTIVE) {
Joe Perchese597cd02010-07-01 08:24:32 +0200545 pr_info("issuing MRW background format suspend\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700546 ret = cdrom_mrw_bgformat_susp(cdi, 0);
547 }
548
Jens Axboe7da21a02005-05-01 12:12:52 -0700549 if (!ret && cdi->media_written)
Linus Torvalds1da177e2005-04-16 15:20:36 -0700550 ret = cdrom_flush_cache(cdi);
551
552 return ret;
553}
554
555static int cdrom_mrw_set_lba_space(struct cdrom_device_info *cdi, int space)
556{
557 struct packet_command cgc;
558 struct mode_page_header *mph;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200559 char buffer[16];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700560 int ret, offset, size;
561
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200562 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700563
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200564 cgc.buffer = buffer;
565 cgc.buflen = sizeof(buffer);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700566
Joe Perches40569c62014-05-04 17:05:12 -0700567 ret = cdrom_mode_sense(cdi, &cgc, cdi->mrw_mode_page, 0);
568 if (ret)
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200569 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700570
Joe Perches40569c62014-05-04 17:05:12 -0700571 mph = (struct mode_page_header *)buffer;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700572 offset = be16_to_cpu(mph->desc_length);
573 size = be16_to_cpu(mph->mode_data_length) + 2;
574
575 buffer[offset + 3] = space;
576 cgc.buflen = size;
577
Joe Perches40569c62014-05-04 17:05:12 -0700578 ret = cdrom_mode_select(cdi, &cgc);
579 if (ret)
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200580 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700581
Joe Perchese597cd02010-07-01 08:24:32 +0200582 pr_info("%s: mrw address space %s selected\n",
583 cdi->name, mrw_address_space[space]);
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200584 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700585}
586
Joe Perches40569c62014-05-04 17:05:12 -0700587int register_cdrom(struct cdrom_device_info *cdi)
588{
589 static char banner_printed;
Kees Cook853fe1b2017-02-13 16:25:26 -0800590 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches40569c62014-05-04 17:05:12 -0700591 int *change_capability = (int *)&cdo->capability; /* hack */
592
593 cd_dbg(CD_OPEN, "entering register_cdrom\n");
594
595 if (cdo->open == NULL || cdo->release == NULL)
596 return -EINVAL;
597 if (!banner_printed) {
598 pr_info("Uniform CD-ROM driver " REVISION "\n");
599 banner_printed = 1;
600 cdrom_sysctl_register();
601 }
602
603 ENSURE(drive_status, CDC_DRIVE_STATUS);
604 if (cdo->check_events == NULL && cdo->media_changed == NULL)
605 *change_capability = ~(CDC_MEDIA_CHANGED | CDC_SELECT_DISC);
606 ENSURE(tray_move, CDC_CLOSE_TRAY | CDC_OPEN_TRAY);
607 ENSURE(lock_door, CDC_LOCK);
608 ENSURE(select_speed, CDC_SELECT_SPEED);
609 ENSURE(get_last_session, CDC_MULTI_SESSION);
610 ENSURE(get_mcn, CDC_MCN);
611 ENSURE(reset, CDC_RESET);
612 ENSURE(generic_packet, CDC_GENERIC_PACKET);
613 cdi->mc_flags = 0;
Joe Perches40569c62014-05-04 17:05:12 -0700614 cdi->options = CDO_USE_FFLAGS;
615
616 if (autoclose == 1 && CDROM_CAN(CDC_CLOSE_TRAY))
617 cdi->options |= (int) CDO_AUTO_CLOSE;
618 if (autoeject == 1 && CDROM_CAN(CDC_OPEN_TRAY))
619 cdi->options |= (int) CDO_AUTO_EJECT;
620 if (lockdoor == 1)
621 cdi->options |= (int) CDO_LOCK;
622 if (check_media_type == 1)
623 cdi->options |= (int) CDO_CHECK_TYPE;
624
625 if (CDROM_CAN(CDC_MRW_W))
626 cdi->exit = cdrom_mrw_exit;
627
628 if (cdi->disk)
629 cdi->cdda_method = CDDA_BPC_FULL;
630 else
631 cdi->cdda_method = CDDA_OLD;
632
Kees Cook853fe1b2017-02-13 16:25:26 -0800633 WARN_ON(!cdo->generic_packet);
Joe Perches40569c62014-05-04 17:05:12 -0700634
635 cd_dbg(CD_REG_UNREG, "drive \"/dev/%s\" registered\n", cdi->name);
636 mutex_lock(&cdrom_mutex);
637 list_add(&cdi->list, &cdrom_list);
638 mutex_unlock(&cdrom_mutex);
639 return 0;
640}
641#undef ENSURE
642
643void unregister_cdrom(struct cdrom_device_info *cdi)
644{
645 cd_dbg(CD_OPEN, "entering unregister_cdrom\n");
646
647 mutex_lock(&cdrom_mutex);
648 list_del(&cdi->list);
649 mutex_unlock(&cdrom_mutex);
650
651 if (cdi->exit)
652 cdi->exit(cdi);
653
Joe Perches40569c62014-05-04 17:05:12 -0700654 cd_dbg(CD_REG_UNREG, "drive \"/dev/%s\" unregistered\n", cdi->name);
655}
656
657int cdrom_get_media_event(struct cdrom_device_info *cdi,
658 struct media_event_desc *med)
659{
660 struct packet_command cgc;
661 unsigned char buffer[8];
662 struct event_header *eh = (struct event_header *)buffer;
663
664 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
665 cgc.cmd[0] = GPCMD_GET_EVENT_STATUS_NOTIFICATION;
666 cgc.cmd[1] = 1; /* IMMED */
667 cgc.cmd[4] = 1 << 4; /* media event */
668 cgc.cmd[8] = sizeof(buffer);
669 cgc.quiet = 1;
670
671 if (cdi->ops->generic_packet(cdi, &cgc))
672 return 1;
673
674 if (be16_to_cpu(eh->data_len) < sizeof(*med))
675 return 1;
676
677 if (eh->nea || eh->notification_class != 0x4)
678 return 1;
679
680 memcpy(med, &buffer[sizeof(*eh)], sizeof(*med));
681 return 0;
682}
683
Linus Torvalds1da177e2005-04-16 15:20:36 -0700684static int cdrom_get_random_writable(struct cdrom_device_info *cdi,
685 struct rwrt_feature_desc *rfd)
686{
687 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200688 char buffer[24];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700689 int ret;
690
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200691 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700692
693 cgc.cmd[0] = GPCMD_GET_CONFIGURATION; /* often 0x46 */
694 cgc.cmd[3] = CDF_RWRT; /* often 0x0020 */
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200695 cgc.cmd[8] = sizeof(buffer); /* often 0x18 */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700696 cgc.quiet = 1;
697
698 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200699 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700700
701 memcpy(rfd, &buffer[sizeof(struct feature_header)], sizeof (*rfd));
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200702 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700703}
704
705static int cdrom_has_defect_mgt(struct cdrom_device_info *cdi)
706{
707 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200708 char buffer[16];
Alexey Dobriyan56052d52005-12-01 17:10:40 -0500709 __be16 *feature_code;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700710 int ret;
711
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200712 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700713
714 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
715 cgc.cmd[3] = CDF_HWDM;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200716 cgc.cmd[8] = sizeof(buffer);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700717 cgc.quiet = 1;
718
719 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200720 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700721
Alexey Dobriyan56052d52005-12-01 17:10:40 -0500722 feature_code = (__be16 *) &buffer[sizeof(struct feature_header)];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700723 if (be16_to_cpu(*feature_code) == CDF_HWDM)
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200724 return 0;
725
726 return 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700727}
728
729
730static int cdrom_is_random_writable(struct cdrom_device_info *cdi, int *write)
731{
732 struct rwrt_feature_desc rfd;
733 int ret;
734
735 *write = 0;
736
737 if ((ret = cdrom_get_random_writable(cdi, &rfd)))
738 return ret;
739
740 if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
741 *write = 1;
742
743 return 0;
744}
745
746static int cdrom_media_erasable(struct cdrom_device_info *cdi)
747{
748 disc_information di;
749 int ret;
750
751 ret = cdrom_get_disc_info(cdi, &di);
752 if (ret < 0 || ret < offsetof(typeof(di), n_first_track))
753 return -1;
754
755 return di.erasable;
756}
757
758/*
759 * FIXME: check RO bit
760 */
761static int cdrom_dvdram_open_write(struct cdrom_device_info *cdi)
762{
763 int ret = cdrom_media_erasable(cdi);
764
765 /*
766 * allow writable open if media info read worked and media is
767 * erasable, _or_ if it fails since not all drives support it
768 */
769 if (!ret)
770 return 1;
771
772 return 0;
773}
774
775static int cdrom_mrw_open_write(struct cdrom_device_info *cdi)
776{
777 disc_information di;
778 int ret;
779
780 /*
781 * always reset to DMA lba space on open
782 */
783 if (cdrom_mrw_set_lba_space(cdi, MRW_LBA_DMA)) {
Joe Perchese597cd02010-07-01 08:24:32 +0200784 pr_err("failed setting lba address space\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700785 return 1;
786 }
787
788 ret = cdrom_get_disc_info(cdi, &di);
789 if (ret < 0 || ret < offsetof(typeof(di),disc_type))
790 return 1;
791
792 if (!di.erasable)
793 return 1;
794
795 /*
796 * mrw_status
797 * 0 - not MRW formatted
798 * 1 - MRW bgformat started, but not running or complete
799 * 2 - MRW bgformat in progress
800 * 3 - MRW formatting complete
801 */
802 ret = 0;
Joe Perchese597cd02010-07-01 08:24:32 +0200803 pr_info("open: mrw_status '%s'\n", mrw_format_status[di.mrw_status]);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700804 if (!di.mrw_status)
805 ret = 1;
806 else if (di.mrw_status == CDM_MRW_BGFORMAT_INACTIVE &&
807 mrw_format_restart)
808 ret = cdrom_mrw_bgformat(cdi, 1);
809
810 return ret;
811}
812
813static int mo_open_write(struct cdrom_device_info *cdi)
814{
815 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200816 char buffer[255];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700817 int ret;
818
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200819 init_cdrom_command(&cgc, &buffer, 4, CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700820 cgc.quiet = 1;
821
822 /*
823 * obtain write protect information as per
824 * drivers/scsi/sd.c:sd_read_write_protect_flag
825 */
826
827 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
828 if (ret)
829 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_VENDOR_PAGE, 0);
830 if (ret) {
831 cgc.buflen = 255;
832 ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
833 }
834
835 /* drive gave us no info, let the user go ahead */
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200836 if (ret)
837 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700838
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200839 return buffer[3] & 0x80;
Linus Torvalds1da177e2005-04-16 15:20:36 -0700840}
841
842static int cdrom_ram_open_write(struct cdrom_device_info *cdi)
843{
844 struct rwrt_feature_desc rfd;
845 int ret;
846
847 if ((ret = cdrom_has_defect_mgt(cdi)))
848 return ret;
849
850 if ((ret = cdrom_get_random_writable(cdi, &rfd)))
851 return ret;
852 else if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
853 ret = !rfd.curr;
854
Joe Perches5944b2c2014-05-04 17:05:02 -0700855 cd_dbg(CD_OPEN, "can open for random write\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -0700856 return ret;
857}
858
859static void cdrom_mmc3_profile(struct cdrom_device_info *cdi)
860{
861 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200862 char buffer[32];
Linus Torvalds1da177e2005-04-16 15:20:36 -0700863 int ret, mmc3_profile;
864
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200865 init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700866
867 cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
868 cgc.cmd[1] = 0;
869 cgc.cmd[2] = cgc.cmd[3] = 0; /* Starting Feature Number */
FUJITA Tomonorifce53842008-07-04 09:33:01 +0200870 cgc.cmd[8] = sizeof(buffer); /* Allocation Length */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700871 cgc.quiet = 1;
872
873 if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
874 mmc3_profile = 0xffff;
875 else
876 mmc3_profile = (buffer[6] << 8) | buffer[7];
877
878 cdi->mmc3_profile = mmc3_profile;
879}
880
881static int cdrom_is_dvd_rw(struct cdrom_device_info *cdi)
882{
883 switch (cdi->mmc3_profile) {
884 case 0x12: /* DVD-RAM */
885 case 0x1A: /* DVD+RW */
Georgios Toptsidisf7e78682015-09-25 10:50:08 +0300886 case 0x43: /* BD-RE */
Linus Torvalds1da177e2005-04-16 15:20:36 -0700887 return 0;
888 default:
889 return 1;
890 }
891}
892
893/*
894 * returns 0 for ok to open write, non-0 to disallow
895 */
896static int cdrom_open_write(struct cdrom_device_info *cdi)
897{
898 int mrw, mrw_write, ram_write;
899 int ret = 1;
900
901 mrw = 0;
902 if (!cdrom_is_mrw(cdi, &mrw_write))
903 mrw = 1;
904
905 if (CDROM_CAN(CDC_MO_DRIVE))
906 ram_write = 1;
907 else
908 (void) cdrom_is_random_writable(cdi, &ram_write);
909
910 if (mrw)
911 cdi->mask &= ~CDC_MRW;
912 else
913 cdi->mask |= CDC_MRW;
914
915 if (mrw_write)
916 cdi->mask &= ~CDC_MRW_W;
917 else
918 cdi->mask |= CDC_MRW_W;
919
920 if (ram_write)
921 cdi->mask &= ~CDC_RAM;
922 else
923 cdi->mask |= CDC_RAM;
924
925 if (CDROM_CAN(CDC_MRW_W))
926 ret = cdrom_mrw_open_write(cdi);
927 else if (CDROM_CAN(CDC_DVD_RAM))
928 ret = cdrom_dvdram_open_write(cdi);
929 else if (CDROM_CAN(CDC_RAM) &&
930 !CDROM_CAN(CDC_CD_R|CDC_CD_RW|CDC_DVD|CDC_DVD_R|CDC_MRW|CDC_MO_DRIVE))
931 ret = cdrom_ram_open_write(cdi);
932 else if (CDROM_CAN(CDC_MO_DRIVE))
933 ret = mo_open_write(cdi);
934 else if (!cdrom_is_dvd_rw(cdi))
935 ret = 0;
936
937 return ret;
938}
939
940static void cdrom_dvd_rw_close_write(struct cdrom_device_info *cdi)
941{
942 struct packet_command cgc;
943
944 if (cdi->mmc3_profile != 0x1a) {
Joe Perches5944b2c2014-05-04 17:05:02 -0700945 cd_dbg(CD_CLOSE, "%s: No DVD+RW\n", cdi->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700946 return;
947 }
948
949 if (!cdi->media_written) {
Joe Perches5944b2c2014-05-04 17:05:02 -0700950 cd_dbg(CD_CLOSE, "%s: DVD+RW media clean\n", cdi->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700951 return;
952 }
953
Joe Perchese597cd02010-07-01 08:24:32 +0200954 pr_info("%s: dirty DVD+RW media, \"finalizing\"\n", cdi->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -0700955
956 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
957 cgc.cmd[0] = GPCMD_FLUSH_CACHE;
958 cgc.timeout = 30*HZ;
959 cdi->ops->generic_packet(cdi, &cgc);
960
961 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
962 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
963 cgc.timeout = 3000*HZ;
964 cgc.quiet = 1;
965 cdi->ops->generic_packet(cdi, &cgc);
966
967 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
968 cgc.cmd[0] = GPCMD_CLOSE_TRACK;
969 cgc.cmd[2] = 2; /* Close session */
970 cgc.quiet = 1;
971 cgc.timeout = 3000*HZ;
972 cdi->ops->generic_packet(cdi, &cgc);
973
974 cdi->media_written = 0;
975}
976
977static int cdrom_close_write(struct cdrom_device_info *cdi)
978{
979#if 0
980 return cdrom_flush_cache(cdi);
981#else
982 return 0;
983#endif
984}
985
Joe Perchesa8033932014-05-04 17:05:11 -0700986/* badly broken, I know. Is due for a fixup anytime. */
987static void cdrom_count_tracks(struct cdrom_device_info *cdi, tracktype *tracks)
988{
989 struct cdrom_tochdr header;
990 struct cdrom_tocentry entry;
991 int ret, i;
992 tracks->data = 0;
993 tracks->audio = 0;
994 tracks->cdi = 0;
995 tracks->xa = 0;
996 tracks->error = 0;
997 cd_dbg(CD_COUNT_TRACKS, "entering cdrom_count_tracks\n");
998 /* Grab the TOC header so we can see how many tracks there are */
999 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header);
1000 if (ret) {
1001 if (ret == -ENOMEDIUM)
1002 tracks->error = CDS_NO_DISC;
1003 else
1004 tracks->error = CDS_NO_INFO;
1005 return;
1006 }
1007 /* check what type of tracks are on this disc */
1008 entry.cdte_format = CDROM_MSF;
1009 for (i = header.cdth_trk0; i <= header.cdth_trk1; i++) {
1010 entry.cdte_track = i;
1011 if (cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry)) {
1012 tracks->error = CDS_NO_INFO;
1013 return;
1014 }
1015 if (entry.cdte_ctrl & CDROM_DATA_TRACK) {
1016 if (entry.cdte_format == 0x10)
1017 tracks->cdi++;
1018 else if (entry.cdte_format == 0x20)
1019 tracks->xa++;
1020 else
1021 tracks->data++;
1022 } else {
1023 tracks->audio++;
1024 }
1025 cd_dbg(CD_COUNT_TRACKS, "track %d: format=%d, ctrl=%d\n",
1026 i, entry.cdte_format, entry.cdte_ctrl);
1027 }
1028 cd_dbg(CD_COUNT_TRACKS, "disc has %d tracks: %d=audio %d=data %d=Cd-I %d=XA\n",
1029 header.cdth_trk1, tracks->audio, tracks->data,
1030 tracks->cdi, tracks->xa);
1031}
1032
Linus Torvalds1da177e2005-04-16 15:20:36 -07001033static
Joe Perches82b91542014-05-04 17:05:05 -07001034int open_for_data(struct cdrom_device_info *cdi)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001035{
1036 int ret;
Kees Cook853fe1b2017-02-13 16:25:26 -08001037 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001038 tracktype tracks;
Joe Perches5944b2c2014-05-04 17:05:02 -07001039 cd_dbg(CD_OPEN, "entering open_for_data\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001040 /* Check if the driver can report drive status. If it can, we
1041 can do clever things. If it can't, well, we at least tried! */
1042 if (cdo->drive_status != NULL) {
1043 ret = cdo->drive_status(cdi, CDSL_CURRENT);
Joe Perches5944b2c2014-05-04 17:05:02 -07001044 cd_dbg(CD_OPEN, "drive_status=%d\n", ret);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001045 if (ret == CDS_TRAY_OPEN) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001046 cd_dbg(CD_OPEN, "the tray is open...\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001047 /* can/may i close it? */
1048 if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1049 cdi->options & CDO_AUTO_CLOSE) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001050 cd_dbg(CD_OPEN, "trying to close the tray\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001051 ret=cdo->tray_move(cdi,0);
1052 if (ret) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001053 cd_dbg(CD_OPEN, "bummer. tried to close the tray but failed.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001054 /* Ignore the error from the low
1055 level driver. We don't care why it
1056 couldn't close the tray. We only care
1057 that there is no disc in the drive,
1058 since that is the _REAL_ problem here.*/
1059 ret=-ENOMEDIUM;
1060 goto clean_up_and_return;
1061 }
1062 } else {
Joe Perches5944b2c2014-05-04 17:05:02 -07001063 cd_dbg(CD_OPEN, "bummer. this drive can't close the tray.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001064 ret=-ENOMEDIUM;
1065 goto clean_up_and_return;
1066 }
1067 /* Ok, the door should be closed now.. Check again */
1068 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1069 if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001070 cd_dbg(CD_OPEN, "bummer. the tray is still not closed.\n");
1071 cd_dbg(CD_OPEN, "tray might not contain a medium\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001072 ret=-ENOMEDIUM;
1073 goto clean_up_and_return;
1074 }
Joe Perches5944b2c2014-05-04 17:05:02 -07001075 cd_dbg(CD_OPEN, "the tray is now closed\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001076 }
1077 /* the door should be closed now, check for the disc */
1078 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1079 if (ret!=CDS_DISC_OK) {
1080 ret = -ENOMEDIUM;
1081 goto clean_up_and_return;
1082 }
1083 }
1084 cdrom_count_tracks(cdi, &tracks);
1085 if (tracks.error == CDS_NO_DISC) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001086 cd_dbg(CD_OPEN, "bummer. no disc.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001087 ret=-ENOMEDIUM;
1088 goto clean_up_and_return;
1089 }
1090 /* CD-Players which don't use O_NONBLOCK, workman
1091 * for example, need bit CDO_CHECK_TYPE cleared! */
1092 if (tracks.data==0) {
1093 if (cdi->options & CDO_CHECK_TYPE) {
1094 /* give people a warning shot, now that CDO_CHECK_TYPE
1095 is the default case! */
Joe Perches5944b2c2014-05-04 17:05:02 -07001096 cd_dbg(CD_OPEN, "bummer. wrong media type.\n");
1097 cd_dbg(CD_WARNING, "pid %d must open device O_NONBLOCK!\n",
1098 (unsigned int)task_pid_nr(current));
Linus Torvalds1da177e2005-04-16 15:20:36 -07001099 ret=-EMEDIUMTYPE;
1100 goto clean_up_and_return;
1101 }
1102 else {
Joe Perches5944b2c2014-05-04 17:05:02 -07001103 cd_dbg(CD_OPEN, "wrong media type, but CDO_CHECK_TYPE not set\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001104 }
1105 }
1106
Joe Perches5944b2c2014-05-04 17:05:02 -07001107 cd_dbg(CD_OPEN, "all seems well, opening the devicen");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001108
1109 /* all seems well, we can open the device */
1110 ret = cdo->open(cdi, 0); /* open for data */
Joe Perches5944b2c2014-05-04 17:05:02 -07001111 cd_dbg(CD_OPEN, "opening the device gave me %d\n", ret);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001112 /* After all this careful checking, we shouldn't have problems
1113 opening the device, but we don't want the device locked if
1114 this somehow fails... */
1115 if (ret) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001116 cd_dbg(CD_OPEN, "open device failed\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001117 goto clean_up_and_return;
1118 }
1119 if (CDROM_CAN(CDC_LOCK) && (cdi->options & CDO_LOCK)) {
1120 cdo->lock_door(cdi, 1);
Joe Perches5944b2c2014-05-04 17:05:02 -07001121 cd_dbg(CD_OPEN, "door locked\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001122 }
Joe Perches5944b2c2014-05-04 17:05:02 -07001123 cd_dbg(CD_OPEN, "device opened successfully\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001124 return ret;
1125
1126 /* Something failed. Try to unlock the drive, because some drivers
1127 (notably ide-cd) lock the drive after every command. This produced
1128 a nasty bug where after mount failed, the drive would remain locked!
1129 This ensures that the drive gets unlocked after a mount fails. This
1130 is a goto to avoid bloating the driver with redundant code. */
1131clean_up_and_return:
Joe Perches5944b2c2014-05-04 17:05:02 -07001132 cd_dbg(CD_OPEN, "open failed\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001133 if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1134 cdo->lock_door(cdi, 0);
Joe Perches5944b2c2014-05-04 17:05:02 -07001135 cd_dbg(CD_OPEN, "door unlocked\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001136 }
1137 return ret;
1138}
1139
Joe Perches82b91542014-05-04 17:05:05 -07001140/* We use the open-option O_NONBLOCK to indicate that the
1141 * purpose of opening is only for subsequent ioctl() calls; no device
1142 * integrity checks are performed.
1143 *
1144 * We hope that all cd-player programs will adopt this convention. It
1145 * is in their own interest: device control becomes a lot easier
1146 * this way.
1147 */
1148int cdrom_open(struct cdrom_device_info *cdi, struct block_device *bdev,
1149 fmode_t mode)
1150{
1151 int ret;
1152
1153 cd_dbg(CD_OPEN, "entering cdrom_open\n");
1154
1155 /* open is event synchronization point, check events first */
1156 check_disk_change(bdev);
1157
1158 /* if this was a O_NONBLOCK open and we should honor the flags,
1159 * do a quick open without drive/disc integrity checks. */
1160 cdi->use_count++;
1161 if ((mode & FMODE_NDELAY) && (cdi->options & CDO_USE_FFLAGS)) {
1162 ret = cdi->ops->open(cdi, 1);
1163 } else {
1164 ret = open_for_data(cdi);
1165 if (ret)
1166 goto err;
1167 cdrom_mmc3_profile(cdi);
1168 if (mode & FMODE_WRITE) {
1169 ret = -EROFS;
1170 if (cdrom_open_write(cdi))
1171 goto err_release;
1172 if (!CDROM_CAN(CDC_RAM))
1173 goto err_release;
1174 ret = 0;
1175 cdi->media_written = 0;
1176 }
1177 }
1178
1179 if (ret)
1180 goto err;
1181
1182 cd_dbg(CD_OPEN, "Use count for \"/dev/%s\" now %d\n",
1183 cdi->name, cdi->use_count);
1184 return 0;
1185err_release:
1186 if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1187 cdi->ops->lock_door(cdi, 0);
1188 cd_dbg(CD_OPEN, "door unlocked\n");
1189 }
1190 cdi->ops->release(cdi);
1191err:
1192 cdi->use_count--;
1193 return ret;
1194}
1195
Linus Torvalds1da177e2005-04-16 15:20:36 -07001196/* This code is similar to that in open_for_data. The routine is called
1197 whenever an audio play operation is requested.
1198*/
Kees Cook853fe1b2017-02-13 16:25:26 -08001199static int check_for_audio_disc(struct cdrom_device_info *cdi,
1200 const struct cdrom_device_ops *cdo)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001201{
1202 int ret;
1203 tracktype tracks;
Joe Perches5944b2c2014-05-04 17:05:02 -07001204 cd_dbg(CD_OPEN, "entering check_for_audio_disc\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001205 if (!(cdi->options & CDO_CHECK_TYPE))
1206 return 0;
1207 if (cdo->drive_status != NULL) {
1208 ret = cdo->drive_status(cdi, CDSL_CURRENT);
Joe Perches5944b2c2014-05-04 17:05:02 -07001209 cd_dbg(CD_OPEN, "drive_status=%d\n", ret);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001210 if (ret == CDS_TRAY_OPEN) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001211 cd_dbg(CD_OPEN, "the tray is open...\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001212 /* can/may i close it? */
1213 if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1214 cdi->options & CDO_AUTO_CLOSE) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001215 cd_dbg(CD_OPEN, "trying to close the tray\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001216 ret=cdo->tray_move(cdi,0);
1217 if (ret) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001218 cd_dbg(CD_OPEN, "bummer. tried to close tray but failed.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001219 /* Ignore the error from the low
1220 level driver. We don't care why it
1221 couldn't close the tray. We only care
1222 that there is no disc in the drive,
1223 since that is the _REAL_ problem here.*/
1224 return -ENOMEDIUM;
1225 }
1226 } else {
Joe Perches5944b2c2014-05-04 17:05:02 -07001227 cd_dbg(CD_OPEN, "bummer. this driver can't close the tray.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001228 return -ENOMEDIUM;
1229 }
1230 /* Ok, the door should be closed now.. Check again */
1231 ret = cdo->drive_status(cdi, CDSL_CURRENT);
1232 if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001233 cd_dbg(CD_OPEN, "bummer. the tray is still not closed.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001234 return -ENOMEDIUM;
1235 }
1236 if (ret!=CDS_DISC_OK) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001237 cd_dbg(CD_OPEN, "bummer. disc isn't ready.\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001238 return -EIO;
1239 }
Joe Perches5944b2c2014-05-04 17:05:02 -07001240 cd_dbg(CD_OPEN, "the tray is now closed\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001241 }
1242 }
1243 cdrom_count_tracks(cdi, &tracks);
1244 if (tracks.error)
1245 return(tracks.error);
1246
1247 if (tracks.audio==0)
1248 return -EMEDIUMTYPE;
1249
1250 return 0;
1251}
1252
Al Virobbc1cc92007-10-07 17:54:28 -04001253void cdrom_release(struct cdrom_device_info *cdi, fmode_t mode)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001254{
Kees Cook853fe1b2017-02-13 16:25:26 -08001255 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001256 int opened_for_data;
1257
Joe Perches5944b2c2014-05-04 17:05:02 -07001258 cd_dbg(CD_CLOSE, "entering cdrom_release\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001259
1260 if (cdi->use_count > 0)
1261 cdi->use_count--;
Borislav Petkov35841f72008-02-06 01:38:08 -08001262
1263 if (cdi->use_count == 0) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001264 cd_dbg(CD_CLOSE, "Use count for \"/dev/%s\" now zero\n",
1265 cdi->name);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001266 cdrom_dvd_rw_close_write(cdi);
Borislav Petkov35841f72008-02-06 01:38:08 -08001267
Paolo Bonzinicdccaa92012-02-08 20:03:14 +01001268 if ((cdo->capability & CDC_LOCK) && !cdi->keeplocked) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001269 cd_dbg(CD_CLOSE, "Unlocking door!\n");
Borislav Petkov35841f72008-02-06 01:38:08 -08001270 cdo->lock_door(cdi, 0);
1271 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07001272 }
Borislav Petkov35841f72008-02-06 01:38:08 -08001273
Linus Torvalds1da177e2005-04-16 15:20:36 -07001274 opened_for_data = !(cdi->options & CDO_USE_FFLAGS) ||
Al Virobbc1cc92007-10-07 17:54:28 -04001275 !(mode & FMODE_NDELAY);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001276
1277 /*
1278 * flush cache on last write release
1279 */
1280 if (CDROM_CAN(CDC_RAM) && !cdi->use_count && cdi->for_data)
1281 cdrom_close_write(cdi);
1282
1283 cdo->release(cdi);
1284 if (cdi->use_count == 0) { /* last process that closes dev*/
1285 if (opened_for_data &&
1286 cdi->options & CDO_AUTO_EJECT && CDROM_CAN(CDC_OPEN_TRAY))
1287 cdo->tray_move(cdi, 1);
1288 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07001289}
1290
1291static int cdrom_read_mech_status(struct cdrom_device_info *cdi,
1292 struct cdrom_changer_info *buf)
1293{
1294 struct packet_command cgc;
Kees Cook853fe1b2017-02-13 16:25:26 -08001295 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001296 int length;
1297
1298 /*
1299 * Sanyo changer isn't spec compliant (doesn't use regular change
1300 * LOAD_UNLOAD command, and it doesn't implement the mech status
1301 * command below
1302 */
1303 if (cdi->sanyo_slot) {
1304 buf->hdr.nslots = 3;
1305 buf->hdr.curslot = cdi->sanyo_slot == 3 ? 0 : cdi->sanyo_slot;
1306 for (length = 0; length < 3; length++) {
1307 buf->slots[length].disc_present = 1;
1308 buf->slots[length].change = 0;
1309 }
1310 return 0;
1311 }
1312
1313 length = sizeof(struct cdrom_mechstat_header) +
1314 cdi->capacity * sizeof(struct cdrom_slot);
1315
1316 init_cdrom_command(&cgc, buf, length, CGC_DATA_READ);
1317 cgc.cmd[0] = GPCMD_MECHANISM_STATUS;
1318 cgc.cmd[8] = (length >> 8) & 0xff;
1319 cgc.cmd[9] = length & 0xff;
1320 return cdo->generic_packet(cdi, &cgc);
1321}
1322
1323static int cdrom_slot_status(struct cdrom_device_info *cdi, int slot)
1324{
1325 struct cdrom_changer_info *info;
1326 int ret;
1327
Joe Perches5944b2c2014-05-04 17:05:02 -07001328 cd_dbg(CD_CHANGER, "entering cdrom_slot_status()\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001329 if (cdi->sanyo_slot)
1330 return CDS_NO_INFO;
1331
1332 info = kmalloc(sizeof(*info), GFP_KERNEL);
1333 if (!info)
1334 return -ENOMEM;
1335
1336 if ((ret = cdrom_read_mech_status(cdi, info)))
1337 goto out_free;
1338
1339 if (info->slots[slot].disc_present)
1340 ret = CDS_DISC_OK;
1341 else
1342 ret = CDS_NO_DISC;
1343
1344out_free:
1345 kfree(info);
1346 return ret;
1347}
1348
1349/* Return the number of slots for an ATAPI/SCSI cdrom,
1350 * return 1 if not a changer.
1351 */
1352int cdrom_number_of_slots(struct cdrom_device_info *cdi)
1353{
1354 int status;
1355 int nslots = 1;
1356 struct cdrom_changer_info *info;
1357
Joe Perches5944b2c2014-05-04 17:05:02 -07001358 cd_dbg(CD_CHANGER, "entering cdrom_number_of_slots()\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001359 /* cdrom_read_mech_status requires a valid value for capacity: */
1360 cdi->capacity = 0;
1361
1362 info = kmalloc(sizeof(*info), GFP_KERNEL);
1363 if (!info)
1364 return -ENOMEM;
1365
1366 if ((status = cdrom_read_mech_status(cdi, info)) == 0)
1367 nslots = info->hdr.nslots;
1368
1369 kfree(info);
1370 return nslots;
1371}
1372
1373
1374/* If SLOT < 0, unload the current slot. Otherwise, try to load SLOT. */
1375static int cdrom_load_unload(struct cdrom_device_info *cdi, int slot)
1376{
1377 struct packet_command cgc;
1378
Joe Perches5944b2c2014-05-04 17:05:02 -07001379 cd_dbg(CD_CHANGER, "entering cdrom_load_unload()\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001380 if (cdi->sanyo_slot && slot < 0)
1381 return 0;
1382
1383 init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
1384 cgc.cmd[0] = GPCMD_LOAD_UNLOAD;
1385 cgc.cmd[4] = 2 + (slot >= 0);
1386 cgc.cmd[8] = slot;
1387 cgc.timeout = 60 * HZ;
1388
1389 /* The Sanyo 3 CD changer uses byte 7 of the
1390 GPCMD_TEST_UNIT_READY to command to switch CDs instead of
1391 using the GPCMD_LOAD_UNLOAD opcode. */
1392 if (cdi->sanyo_slot && -1 < slot) {
1393 cgc.cmd[0] = GPCMD_TEST_UNIT_READY;
1394 cgc.cmd[7] = slot;
1395 cgc.cmd[4] = cgc.cmd[8] = 0;
1396 cdi->sanyo_slot = slot ? slot : 3;
1397 }
1398
1399 return cdi->ops->generic_packet(cdi, &cgc);
1400}
1401
1402static int cdrom_select_disc(struct cdrom_device_info *cdi, int slot)
1403{
1404 struct cdrom_changer_info *info;
1405 int curslot;
1406 int ret;
1407
Joe Perches5944b2c2014-05-04 17:05:02 -07001408 cd_dbg(CD_CHANGER, "entering cdrom_select_disc()\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001409 if (!CDROM_CAN(CDC_SELECT_DISC))
1410 return -EDRIVE_CANT_DO_THIS;
1411
Tejun Heo2d921722010-12-08 20:57:38 +01001412 if (cdi->ops->check_events)
1413 cdi->ops->check_events(cdi, 0, slot);
1414 else
1415 cdi->ops->media_changed(cdi, slot);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001416
1417 if (slot == CDSL_NONE) {
1418 /* set media changed bits, on both queues */
1419 cdi->mc_flags = 0x3;
1420 return cdrom_load_unload(cdi, -1);
1421 }
1422
1423 info = kmalloc(sizeof(*info), GFP_KERNEL);
1424 if (!info)
1425 return -ENOMEM;
1426
1427 if ((ret = cdrom_read_mech_status(cdi, info))) {
1428 kfree(info);
1429 return ret;
1430 }
1431
1432 curslot = info->hdr.curslot;
1433 kfree(info);
1434
Paolo Bonzinicdccaa92012-02-08 20:03:14 +01001435 if (cdi->use_count > 1 || cdi->keeplocked) {
Linus Torvalds1da177e2005-04-16 15:20:36 -07001436 if (slot == CDSL_CURRENT) {
1437 return curslot;
1438 } else {
1439 return -EBUSY;
1440 }
1441 }
1442
1443 /* Specifying CDSL_CURRENT will attempt to load the currnet slot,
1444 which is useful if it had been previously unloaded.
1445 Whether it can or not, it returns the current slot.
1446 Similarly, if slot happens to be the current one, we still
1447 try and load it. */
1448 if (slot == CDSL_CURRENT)
1449 slot = curslot;
1450
1451 /* set media changed bits on both queues */
1452 cdi->mc_flags = 0x3;
1453 if ((ret = cdrom_load_unload(cdi, slot)))
1454 return ret;
1455
1456 return slot;
1457}
1458
Tejun Heo2d921722010-12-08 20:57:38 +01001459/*
1460 * As cdrom implements an extra ioctl consumer for media changed
1461 * event, it needs to buffer ->check_events() output, such that event
1462 * is not lost for both the usual VFS and ioctl paths.
1463 * cdi->{vfs|ioctl}_events are used to buffer pending events for each
1464 * path.
1465 *
1466 * XXX: Locking is non-existent. cdi->ops->check_events() can be
1467 * called in parallel and buffering fields are accessed without any
1468 * exclusion. The original media_changed code had the same problem.
1469 * It might be better to simply deprecate CDROM_MEDIA_CHANGED ioctl
1470 * and remove this cruft altogether. It doesn't have much usefulness
1471 * at this point.
1472 */
1473static void cdrom_update_events(struct cdrom_device_info *cdi,
1474 unsigned int clearing)
1475{
1476 unsigned int events;
1477
1478 events = cdi->ops->check_events(cdi, clearing, CDSL_CURRENT);
1479 cdi->vfs_events |= events;
1480 cdi->ioctl_events |= events;
1481}
1482
1483unsigned int cdrom_check_events(struct cdrom_device_info *cdi,
1484 unsigned int clearing)
1485{
1486 unsigned int events;
1487
1488 cdrom_update_events(cdi, clearing);
1489 events = cdi->vfs_events;
1490 cdi->vfs_events = 0;
1491 return events;
1492}
Jens Axboe30a7caa2010-12-16 17:58:50 +01001493EXPORT_SYMBOL(cdrom_check_events);
Tejun Heo2d921722010-12-08 20:57:38 +01001494
Linus Torvalds1da177e2005-04-16 15:20:36 -07001495/* We want to make media_changed accessible to the user through an
1496 * ioctl. The main problem now is that we must double-buffer the
1497 * low-level implementation, to assure that the VFS and the user both
1498 * see a medium change once.
1499 */
1500
1501static
1502int media_changed(struct cdrom_device_info *cdi, int queue)
1503{
1504 unsigned int mask = (1 << (queue & 1));
1505 int ret = !!(cdi->mc_flags & mask);
Tejun Heo2d921722010-12-08 20:57:38 +01001506 bool changed;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001507
1508 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
Tejun Heo2d921722010-12-08 20:57:38 +01001509 return ret;
1510
Linus Torvalds1da177e2005-04-16 15:20:36 -07001511 /* changed since last call? */
Tejun Heo2d921722010-12-08 20:57:38 +01001512 if (cdi->ops->check_events) {
1513 BUG_ON(!queue); /* shouldn't be called from VFS path */
1514 cdrom_update_events(cdi, DISK_EVENT_MEDIA_CHANGE);
1515 changed = cdi->ioctl_events & DISK_EVENT_MEDIA_CHANGE;
1516 cdi->ioctl_events = 0;
1517 } else
1518 changed = cdi->ops->media_changed(cdi, CDSL_CURRENT);
1519
1520 if (changed) {
Linus Torvalds1da177e2005-04-16 15:20:36 -07001521 cdi->mc_flags = 0x3; /* set bit on both queues */
1522 ret |= 1;
1523 cdi->media_written = 0;
1524 }
Tejun Heo2d921722010-12-08 20:57:38 +01001525
Linus Torvalds1da177e2005-04-16 15:20:36 -07001526 cdi->mc_flags &= ~mask; /* clear bit */
1527 return ret;
1528}
1529
1530int cdrom_media_changed(struct cdrom_device_info *cdi)
1531{
1532 /* This talks to the VFS, which doesn't like errors - just 1 or 0.
1533 * Returning "0" is always safe (media hasn't been changed). Do that
1534 * if the low-level cdrom driver dosn't support media changed. */
1535 if (cdi == NULL || cdi->ops->media_changed == NULL)
1536 return 0;
1537 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
1538 return 0;
1539 return media_changed(cdi, 0);
1540}
1541
Linus Torvalds1da177e2005-04-16 15:20:36 -07001542/* Requests to the low-level drivers will /always/ be done in the
1543 following format convention:
1544
1545 CDROM_LBA: all data-related requests.
1546 CDROM_MSF: all audio-related requests.
1547
1548 However, a low-level implementation is allowed to refuse this
1549 request, and return information in its own favorite format.
1550
1551 It doesn't make sense /at all/ to ask for a play_audio in LBA
1552 format, or ask for multi-session info in MSF format. However, for
1553 backward compatibility these format requests will be satisfied, but
1554 the requests to the low-level drivers will be sanitized in the more
1555 meaningful format indicated above.
1556 */
1557
1558static
1559void sanitize_format(union cdrom_addr *addr,
1560 u_char * curr, u_char requested)
1561{
1562 if (*curr == requested)
1563 return; /* nothing to be done! */
1564 if (requested == CDROM_LBA) {
1565 addr->lba = (int) addr->msf.frame +
1566 75 * (addr->msf.second - 2 + 60 * addr->msf.minute);
1567 } else { /* CDROM_MSF */
1568 int lba = addr->lba;
1569 addr->msf.frame = lba % 75;
1570 lba /= 75;
1571 lba += 2;
1572 addr->msf.second = lba % 60;
1573 addr->msf.minute = lba / 60;
1574 }
1575 *curr = requested;
1576}
1577
1578void init_cdrom_command(struct packet_command *cgc, void *buf, int len,
1579 int type)
1580{
1581 memset(cgc, 0, sizeof(struct packet_command));
1582 if (buf)
1583 memset(buf, 0, len);
1584 cgc->buffer = (char *) buf;
1585 cgc->buflen = len;
1586 cgc->data_direction = type;
Jens Axboe2e11c202007-01-03 08:10:35 +01001587 cgc->timeout = CDROM_DEF_TIMEOUT;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001588}
1589
1590/* DVD handling */
1591
1592#define copy_key(dest,src) memcpy((dest), (src), sizeof(dvd_key))
1593#define copy_chal(dest,src) memcpy((dest), (src), sizeof(dvd_challenge))
1594
1595static void setup_report_key(struct packet_command *cgc, unsigned agid, unsigned type)
1596{
1597 cgc->cmd[0] = GPCMD_REPORT_KEY;
1598 cgc->cmd[10] = type | (agid << 6);
1599 switch (type) {
1600 case 0: case 8: case 5: {
1601 cgc->buflen = 8;
1602 break;
1603 }
1604 case 1: {
1605 cgc->buflen = 16;
1606 break;
1607 }
1608 case 2: case 4: {
1609 cgc->buflen = 12;
1610 break;
1611 }
1612 }
1613 cgc->cmd[9] = cgc->buflen;
1614 cgc->data_direction = CGC_DATA_READ;
1615}
1616
1617static void setup_send_key(struct packet_command *cgc, unsigned agid, unsigned type)
1618{
1619 cgc->cmd[0] = GPCMD_SEND_KEY;
1620 cgc->cmd[10] = type | (agid << 6);
1621 switch (type) {
1622 case 1: {
1623 cgc->buflen = 16;
1624 break;
1625 }
1626 case 3: {
1627 cgc->buflen = 12;
1628 break;
1629 }
1630 case 6: {
1631 cgc->buflen = 8;
1632 break;
1633 }
1634 }
1635 cgc->cmd[9] = cgc->buflen;
1636 cgc->data_direction = CGC_DATA_WRITE;
1637}
1638
1639static int dvd_do_auth(struct cdrom_device_info *cdi, dvd_authinfo *ai)
1640{
1641 int ret;
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001642 u_char buf[20];
Linus Torvalds1da177e2005-04-16 15:20:36 -07001643 struct packet_command cgc;
Kees Cook853fe1b2017-02-13 16:25:26 -08001644 const struct cdrom_device_ops *cdo = cdi->ops;
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001645 rpc_state_t rpc_state;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001646
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001647 memset(buf, 0, sizeof(buf));
Linus Torvalds1da177e2005-04-16 15:20:36 -07001648 init_cdrom_command(&cgc, buf, 0, CGC_DATA_READ);
1649
1650 switch (ai->type) {
1651 /* LU data send */
1652 case DVD_LU_SEND_AGID:
Joe Perches5944b2c2014-05-04 17:05:02 -07001653 cd_dbg(CD_DVD, "entering DVD_LU_SEND_AGID\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001654 cgc.quiet = 1;
1655 setup_report_key(&cgc, ai->lsa.agid, 0);
1656
1657 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001658 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001659
1660 ai->lsa.agid = buf[7] >> 6;
1661 /* Returning data, let host change state */
1662 break;
1663
1664 case DVD_LU_SEND_KEY1:
Joe Perches5944b2c2014-05-04 17:05:02 -07001665 cd_dbg(CD_DVD, "entering DVD_LU_SEND_KEY1\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001666 setup_report_key(&cgc, ai->lsk.agid, 2);
1667
1668 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001669 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001670
1671 copy_key(ai->lsk.key, &buf[4]);
1672 /* Returning data, let host change state */
1673 break;
1674
1675 case DVD_LU_SEND_CHALLENGE:
Joe Perches5944b2c2014-05-04 17:05:02 -07001676 cd_dbg(CD_DVD, "entering DVD_LU_SEND_CHALLENGE\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001677 setup_report_key(&cgc, ai->lsc.agid, 1);
1678
1679 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001680 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001681
1682 copy_chal(ai->lsc.chal, &buf[4]);
1683 /* Returning data, let host change state */
1684 break;
1685
1686 /* Post-auth key */
1687 case DVD_LU_SEND_TITLE_KEY:
Joe Perches5944b2c2014-05-04 17:05:02 -07001688 cd_dbg(CD_DVD, "entering DVD_LU_SEND_TITLE_KEY\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001689 cgc.quiet = 1;
1690 setup_report_key(&cgc, ai->lstk.agid, 4);
1691 cgc.cmd[5] = ai->lstk.lba;
1692 cgc.cmd[4] = ai->lstk.lba >> 8;
1693 cgc.cmd[3] = ai->lstk.lba >> 16;
1694 cgc.cmd[2] = ai->lstk.lba >> 24;
1695
1696 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001697 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001698
1699 ai->lstk.cpm = (buf[4] >> 7) & 1;
1700 ai->lstk.cp_sec = (buf[4] >> 6) & 1;
1701 ai->lstk.cgms = (buf[4] >> 4) & 3;
1702 copy_key(ai->lstk.title_key, &buf[5]);
1703 /* Returning data, let host change state */
1704 break;
1705
1706 case DVD_LU_SEND_ASF:
Joe Perches5944b2c2014-05-04 17:05:02 -07001707 cd_dbg(CD_DVD, "entering DVD_LU_SEND_ASF\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001708 setup_report_key(&cgc, ai->lsasf.agid, 5);
1709
1710 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001711 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001712
1713 ai->lsasf.asf = buf[7] & 1;
1714 break;
1715
1716 /* LU data receive (LU changes state) */
1717 case DVD_HOST_SEND_CHALLENGE:
Joe Perches5944b2c2014-05-04 17:05:02 -07001718 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_CHALLENGE\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001719 setup_send_key(&cgc, ai->hsc.agid, 1);
1720 buf[1] = 0xe;
1721 copy_chal(&buf[4], ai->hsc.chal);
1722
1723 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001724 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001725
1726 ai->type = DVD_LU_SEND_KEY1;
1727 break;
1728
1729 case DVD_HOST_SEND_KEY2:
Joe Perches5944b2c2014-05-04 17:05:02 -07001730 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_KEY2\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001731 setup_send_key(&cgc, ai->hsk.agid, 3);
1732 buf[1] = 0xa;
1733 copy_key(&buf[4], ai->hsk.key);
1734
1735 if ((ret = cdo->generic_packet(cdi, &cgc))) {
1736 ai->type = DVD_AUTH_FAILURE;
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001737 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001738 }
1739 ai->type = DVD_AUTH_ESTABLISHED;
1740 break;
1741
1742 /* Misc */
1743 case DVD_INVALIDATE_AGID:
1744 cgc.quiet = 1;
Joe Perches5944b2c2014-05-04 17:05:02 -07001745 cd_dbg(CD_DVD, "entering DVD_INVALIDATE_AGID\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001746 setup_report_key(&cgc, ai->lsa.agid, 0x3f);
1747 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001748 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001749 break;
1750
1751 /* Get region settings */
1752 case DVD_LU_SEND_RPC_STATE:
Joe Perches5944b2c2014-05-04 17:05:02 -07001753 cd_dbg(CD_DVD, "entering DVD_LU_SEND_RPC_STATE\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001754 setup_report_key(&cgc, 0, 8);
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001755 memset(&rpc_state, 0, sizeof(rpc_state_t));
1756 cgc.buffer = (char *) &rpc_state;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001757
1758 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001759 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001760
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001761 ai->lrpcs.type = rpc_state.type_code;
1762 ai->lrpcs.vra = rpc_state.vra;
1763 ai->lrpcs.ucca = rpc_state.ucca;
1764 ai->lrpcs.region_mask = rpc_state.region_mask;
1765 ai->lrpcs.rpc_scheme = rpc_state.rpc_scheme;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001766 break;
1767
1768 /* Set region settings */
1769 case DVD_HOST_SEND_RPC_STATE:
Joe Perches5944b2c2014-05-04 17:05:02 -07001770 cd_dbg(CD_DVD, "entering DVD_HOST_SEND_RPC_STATE\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07001771 setup_send_key(&cgc, 0, 6);
1772 buf[1] = 6;
1773 buf[4] = ai->hrpcs.pdrc;
1774
1775 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001776 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001777 break;
1778
1779 default:
Joe Perches5944b2c2014-05-04 17:05:02 -07001780 cd_dbg(CD_WARNING, "Invalid DVD key ioctl (%d)\n", ai->type);
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001781 return -ENOTTY;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001782 }
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001783
1784 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001785}
1786
Marcin Slusarzd1941392008-11-16 19:06:37 +01001787static int dvd_read_physical(struct cdrom_device_info *cdi, dvd_struct *s,
1788 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001789{
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001790 unsigned char buf[21], *base;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001791 struct dvd_layer *layer;
Kees Cook853fe1b2017-02-13 16:25:26 -08001792 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001793 int ret, layer_num = s->physical.layer_num;
1794
1795 if (layer_num >= DVD_LAYERS)
1796 return -EINVAL;
1797
Marcin Slusarzd1941392008-11-16 19:06:37 +01001798 init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1799 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1800 cgc->cmd[6] = layer_num;
1801 cgc->cmd[7] = s->type;
1802 cgc->cmd[9] = cgc->buflen & 0xff;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001803
1804 /*
1805 * refrain from reporting errors on non-existing layers (mainly)
1806 */
Marcin Slusarzd1941392008-11-16 19:06:37 +01001807 cgc->quiet = 1;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001808
Marcin Slusarzd1941392008-11-16 19:06:37 +01001809 ret = cdo->generic_packet(cdi, cgc);
1810 if (ret)
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001811 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001812
1813 base = &buf[4];
1814 layer = &s->physical.layer[layer_num];
1815
1816 /*
1817 * place the data... really ugly, but at least we won't have to
1818 * worry about endianess in userspace.
1819 */
1820 memset(layer, 0, sizeof(*layer));
1821 layer->book_version = base[0] & 0xf;
1822 layer->book_type = base[0] >> 4;
1823 layer->min_rate = base[1] & 0xf;
1824 layer->disc_size = base[1] >> 4;
1825 layer->layer_type = base[2] & 0xf;
1826 layer->track_path = (base[2] >> 4) & 1;
1827 layer->nlayers = (base[2] >> 5) & 3;
1828 layer->track_density = base[3] & 0xf;
1829 layer->linear_density = base[3] >> 4;
1830 layer->start_sector = base[5] << 16 | base[6] << 8 | base[7];
1831 layer->end_sector = base[9] << 16 | base[10] << 8 | base[11];
1832 layer->end_sector_l0 = base[13] << 16 | base[14] << 8 | base[15];
1833 layer->bca = base[16] >> 7;
1834
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001835 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001836}
1837
Marcin Slusarzd1941392008-11-16 19:06:37 +01001838static int dvd_read_copyright(struct cdrom_device_info *cdi, dvd_struct *s,
1839 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001840{
1841 int ret;
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001842 u_char buf[8];
Kees Cook853fe1b2017-02-13 16:25:26 -08001843 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001844
Marcin Slusarzd1941392008-11-16 19:06:37 +01001845 init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1846 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1847 cgc->cmd[6] = s->copyright.layer_num;
1848 cgc->cmd[7] = s->type;
1849 cgc->cmd[8] = cgc->buflen >> 8;
1850 cgc->cmd[9] = cgc->buflen & 0xff;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001851
Marcin Slusarzd1941392008-11-16 19:06:37 +01001852 ret = cdo->generic_packet(cdi, cgc);
1853 if (ret)
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001854 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001855
1856 s->copyright.cpst = buf[4];
1857 s->copyright.rmi = buf[5];
1858
FUJITA Tomonorifce53842008-07-04 09:33:01 +02001859 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001860}
1861
Marcin Slusarzd1941392008-11-16 19:06:37 +01001862static int dvd_read_disckey(struct cdrom_device_info *cdi, dvd_struct *s,
1863 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001864{
1865 int ret, size;
1866 u_char *buf;
Kees Cook853fe1b2017-02-13 16:25:26 -08001867 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001868
1869 size = sizeof(s->disckey.value) + 4;
1870
Marcin Slusarzd1941392008-11-16 19:06:37 +01001871 buf = kmalloc(size, GFP_KERNEL);
1872 if (!buf)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001873 return -ENOMEM;
1874
Marcin Slusarzd1941392008-11-16 19:06:37 +01001875 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1876 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1877 cgc->cmd[7] = s->type;
1878 cgc->cmd[8] = size >> 8;
1879 cgc->cmd[9] = size & 0xff;
1880 cgc->cmd[10] = s->disckey.agid << 6;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001881
Marcin Slusarzd1941392008-11-16 19:06:37 +01001882 ret = cdo->generic_packet(cdi, cgc);
1883 if (!ret)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001884 memcpy(s->disckey.value, &buf[4], sizeof(s->disckey.value));
1885
1886 kfree(buf);
1887 return ret;
1888}
1889
Marcin Slusarzd1941392008-11-16 19:06:37 +01001890static int dvd_read_bca(struct cdrom_device_info *cdi, dvd_struct *s,
1891 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001892{
Marcin Slusarzd1941392008-11-16 19:06:37 +01001893 int ret, size = 4 + 188;
1894 u_char *buf;
Kees Cook853fe1b2017-02-13 16:25:26 -08001895 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001896
Marcin Slusarzd1941392008-11-16 19:06:37 +01001897 buf = kmalloc(size, GFP_KERNEL);
1898 if (!buf)
1899 return -ENOMEM;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001900
Marcin Slusarzd1941392008-11-16 19:06:37 +01001901 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1902 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1903 cgc->cmd[7] = s->type;
1904 cgc->cmd[9] = cgc->buflen & 0xff;
1905
1906 ret = cdo->generic_packet(cdi, cgc);
1907 if (ret)
1908 goto out;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001909
1910 s->bca.len = buf[0] << 8 | buf[1];
1911 if (s->bca.len < 12 || s->bca.len > 188) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001912 cd_dbg(CD_WARNING, "Received invalid BCA length (%d)\n",
1913 s->bca.len);
Marcin Slusarzd1941392008-11-16 19:06:37 +01001914 ret = -EIO;
1915 goto out;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001916 }
1917 memcpy(s->bca.value, &buf[4], s->bca.len);
Marcin Slusarzd1941392008-11-16 19:06:37 +01001918 ret = 0;
1919out:
1920 kfree(buf);
1921 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001922}
1923
Marcin Slusarzd1941392008-11-16 19:06:37 +01001924static int dvd_read_manufact(struct cdrom_device_info *cdi, dvd_struct *s,
1925 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001926{
1927 int ret = 0, size;
1928 u_char *buf;
Kees Cook853fe1b2017-02-13 16:25:26 -08001929 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001930
1931 size = sizeof(s->manufact.value) + 4;
1932
Marcin Slusarzd1941392008-11-16 19:06:37 +01001933 buf = kmalloc(size, GFP_KERNEL);
1934 if (!buf)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001935 return -ENOMEM;
1936
Marcin Slusarzd1941392008-11-16 19:06:37 +01001937 init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1938 cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1939 cgc->cmd[7] = s->type;
1940 cgc->cmd[8] = size >> 8;
1941 cgc->cmd[9] = size & 0xff;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001942
Marcin Slusarzd1941392008-11-16 19:06:37 +01001943 ret = cdo->generic_packet(cdi, cgc);
1944 if (ret)
1945 goto out;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001946
1947 s->manufact.len = buf[0] << 8 | buf[1];
Andrew Mortonaec9f372011-08-02 12:43:50 +02001948 if (s->manufact.len < 0) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001949 cd_dbg(CD_WARNING, "Received invalid manufacture info length (%d)\n",
1950 s->manufact.len);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001951 ret = -EIO;
1952 } else {
Andrew Mortonaec9f372011-08-02 12:43:50 +02001953 if (s->manufact.len > 2048) {
Joe Perches5944b2c2014-05-04 17:05:02 -07001954 cd_dbg(CD_WARNING, "Received invalid manufacture info length (%d): truncating to 2048\n",
1955 s->manufact.len);
Andrew Mortonaec9f372011-08-02 12:43:50 +02001956 s->manufact.len = 2048;
1957 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07001958 memcpy(s->manufact.value, &buf[4], s->manufact.len);
1959 }
1960
Marcin Slusarzd1941392008-11-16 19:06:37 +01001961out:
Linus Torvalds1da177e2005-04-16 15:20:36 -07001962 kfree(buf);
1963 return ret;
1964}
1965
Marcin Slusarzd1941392008-11-16 19:06:37 +01001966static int dvd_read_struct(struct cdrom_device_info *cdi, dvd_struct *s,
1967 struct packet_command *cgc)
Linus Torvalds1da177e2005-04-16 15:20:36 -07001968{
1969 switch (s->type) {
1970 case DVD_STRUCT_PHYSICAL:
Marcin Slusarzd1941392008-11-16 19:06:37 +01001971 return dvd_read_physical(cdi, s, cgc);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001972
1973 case DVD_STRUCT_COPYRIGHT:
Marcin Slusarzd1941392008-11-16 19:06:37 +01001974 return dvd_read_copyright(cdi, s, cgc);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001975
1976 case DVD_STRUCT_DISCKEY:
Marcin Slusarzd1941392008-11-16 19:06:37 +01001977 return dvd_read_disckey(cdi, s, cgc);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001978
1979 case DVD_STRUCT_BCA:
Marcin Slusarzd1941392008-11-16 19:06:37 +01001980 return dvd_read_bca(cdi, s, cgc);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001981
1982 case DVD_STRUCT_MANUFACT:
Marcin Slusarzd1941392008-11-16 19:06:37 +01001983 return dvd_read_manufact(cdi, s, cgc);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001984
1985 default:
Joe Perches5944b2c2014-05-04 17:05:02 -07001986 cd_dbg(CD_WARNING, ": Invalid DVD structure read requested (%d)\n",
1987 s->type);
Linus Torvalds1da177e2005-04-16 15:20:36 -07001988 return -EINVAL;
1989 }
1990}
1991
1992int cdrom_mode_sense(struct cdrom_device_info *cdi,
1993 struct packet_command *cgc,
1994 int page_code, int page_control)
1995{
Kees Cook853fe1b2017-02-13 16:25:26 -08001996 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07001997
1998 memset(cgc->cmd, 0, sizeof(cgc->cmd));
1999
2000 cgc->cmd[0] = GPCMD_MODE_SENSE_10;
2001 cgc->cmd[2] = page_code | (page_control << 6);
2002 cgc->cmd[7] = cgc->buflen >> 8;
2003 cgc->cmd[8] = cgc->buflen & 0xff;
2004 cgc->data_direction = CGC_DATA_READ;
2005 return cdo->generic_packet(cdi, cgc);
2006}
2007
2008int cdrom_mode_select(struct cdrom_device_info *cdi,
2009 struct packet_command *cgc)
2010{
Kees Cook853fe1b2017-02-13 16:25:26 -08002011 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002012
2013 memset(cgc->cmd, 0, sizeof(cgc->cmd));
2014 memset(cgc->buffer, 0, 2);
2015 cgc->cmd[0] = GPCMD_MODE_SELECT_10;
2016 cgc->cmd[1] = 0x10; /* PF */
2017 cgc->cmd[7] = cgc->buflen >> 8;
2018 cgc->cmd[8] = cgc->buflen & 0xff;
2019 cgc->data_direction = CGC_DATA_WRITE;
2020 return cdo->generic_packet(cdi, cgc);
2021}
2022
2023static int cdrom_read_subchannel(struct cdrom_device_info *cdi,
2024 struct cdrom_subchnl *subchnl, int mcn)
2025{
Kees Cook853fe1b2017-02-13 16:25:26 -08002026 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002027 struct packet_command cgc;
FUJITA Tomonorifce53842008-07-04 09:33:01 +02002028 char buffer[32];
Linus Torvalds1da177e2005-04-16 15:20:36 -07002029 int ret;
2030
2031 init_cdrom_command(&cgc, buffer, 16, CGC_DATA_READ);
2032 cgc.cmd[0] = GPCMD_READ_SUBCHANNEL;
vchannaiahbf294e82016-06-29 08:18:25 -04002033 cgc.cmd[1] = subchnl->cdsc_format;/* MSF or LBA addressing */
Linus Torvalds1da177e2005-04-16 15:20:36 -07002034 cgc.cmd[2] = 0x40; /* request subQ data */
2035 cgc.cmd[3] = mcn ? 2 : 1;
2036 cgc.cmd[8] = 16;
2037
2038 if ((ret = cdo->generic_packet(cdi, &cgc)))
FUJITA Tomonorifce53842008-07-04 09:33:01 +02002039 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002040
2041 subchnl->cdsc_audiostatus = cgc.buffer[1];
Linus Torvalds1da177e2005-04-16 15:20:36 -07002042 subchnl->cdsc_ctrl = cgc.buffer[5] & 0xf;
2043 subchnl->cdsc_trk = cgc.buffer[6];
2044 subchnl->cdsc_ind = cgc.buffer[7];
2045
vchannaiahbf294e82016-06-29 08:18:25 -04002046 if (subchnl->cdsc_format == CDROM_LBA) {
2047 subchnl->cdsc_absaddr.lba = ((cgc.buffer[8] << 24) |
2048 (cgc.buffer[9] << 16) |
2049 (cgc.buffer[10] << 8) |
2050 (cgc.buffer[11]));
2051 subchnl->cdsc_reladdr.lba = ((cgc.buffer[12] << 24) |
2052 (cgc.buffer[13] << 16) |
2053 (cgc.buffer[14] << 8) |
2054 (cgc.buffer[15]));
2055 } else {
2056 subchnl->cdsc_reladdr.msf.minute = cgc.buffer[13];
2057 subchnl->cdsc_reladdr.msf.second = cgc.buffer[14];
2058 subchnl->cdsc_reladdr.msf.frame = cgc.buffer[15];
2059 subchnl->cdsc_absaddr.msf.minute = cgc.buffer[9];
2060 subchnl->cdsc_absaddr.msf.second = cgc.buffer[10];
2061 subchnl->cdsc_absaddr.msf.frame = cgc.buffer[11];
2062 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07002063
FUJITA Tomonorifce53842008-07-04 09:33:01 +02002064 return 0;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002065}
2066
2067/*
2068 * Specific READ_10 interface
2069 */
2070static int cdrom_read_cd(struct cdrom_device_info *cdi,
2071 struct packet_command *cgc, int lba,
2072 int blocksize, int nblocks)
2073{
Kees Cook853fe1b2017-02-13 16:25:26 -08002074 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002075
2076 memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2077 cgc->cmd[0] = GPCMD_READ_10;
2078 cgc->cmd[2] = (lba >> 24) & 0xff;
2079 cgc->cmd[3] = (lba >> 16) & 0xff;
2080 cgc->cmd[4] = (lba >> 8) & 0xff;
2081 cgc->cmd[5] = lba & 0xff;
2082 cgc->cmd[6] = (nblocks >> 16) & 0xff;
2083 cgc->cmd[7] = (nblocks >> 8) & 0xff;
2084 cgc->cmd[8] = nblocks & 0xff;
2085 cgc->buflen = blocksize * nblocks;
2086 return cdo->generic_packet(cdi, cgc);
2087}
2088
2089/* very generic interface for reading the various types of blocks */
2090static int cdrom_read_block(struct cdrom_device_info *cdi,
2091 struct packet_command *cgc,
2092 int lba, int nblocks, int format, int blksize)
2093{
Kees Cook853fe1b2017-02-13 16:25:26 -08002094 const struct cdrom_device_ops *cdo = cdi->ops;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002095
2096 memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2097 cgc->cmd[0] = GPCMD_READ_CD;
2098 /* expected sector size - cdda,mode1,etc. */
2099 cgc->cmd[1] = format << 2;
2100 /* starting address */
2101 cgc->cmd[2] = (lba >> 24) & 0xff;
2102 cgc->cmd[3] = (lba >> 16) & 0xff;
2103 cgc->cmd[4] = (lba >> 8) & 0xff;
2104 cgc->cmd[5] = lba & 0xff;
2105 /* number of blocks */
2106 cgc->cmd[6] = (nblocks >> 16) & 0xff;
2107 cgc->cmd[7] = (nblocks >> 8) & 0xff;
2108 cgc->cmd[8] = nblocks & 0xff;
2109 cgc->buflen = blksize * nblocks;
2110
2111 /* set the header info returned */
2112 switch (blksize) {
2113 case CD_FRAMESIZE_RAW0 : cgc->cmd[9] = 0x58; break;
2114 case CD_FRAMESIZE_RAW1 : cgc->cmd[9] = 0x78; break;
2115 case CD_FRAMESIZE_RAW : cgc->cmd[9] = 0xf8; break;
2116 default : cgc->cmd[9] = 0x10;
2117 }
2118
2119 return cdo->generic_packet(cdi, cgc);
2120}
2121
2122static int cdrom_read_cdda_old(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2123 int lba, int nframes)
2124{
2125 struct packet_command cgc;
2126 int ret = 0;
2127 int nr;
2128
2129 cdi->last_sense = 0;
2130
2131 memset(&cgc, 0, sizeof(cgc));
2132
2133 /*
2134 * start with will ra.nframes size, back down if alloc fails
2135 */
2136 nr = nframes;
2137 do {
2138 cgc.buffer = kmalloc(CD_FRAMESIZE_RAW * nr, GFP_KERNEL);
2139 if (cgc.buffer)
2140 break;
2141
2142 nr >>= 1;
2143 } while (nr);
2144
2145 if (!nr)
2146 return -ENOMEM;
2147
Linus Torvalds1da177e2005-04-16 15:20:36 -07002148 cgc.data_direction = CGC_DATA_READ;
2149 while (nframes > 0) {
2150 if (nr > nframes)
2151 nr = nframes;
2152
2153 ret = cdrom_read_block(cdi, &cgc, lba, nr, 1, CD_FRAMESIZE_RAW);
2154 if (ret)
2155 break;
Dan Carpenter822bfa52012-02-06 10:20:45 +01002156 if (copy_to_user(ubuf, cgc.buffer, CD_FRAMESIZE_RAW * nr)) {
Linus Torvalds1da177e2005-04-16 15:20:36 -07002157 ret = -EFAULT;
2158 break;
2159 }
2160 ubuf += CD_FRAMESIZE_RAW * nr;
2161 nframes -= nr;
2162 lba += nr;
2163 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07002164 kfree(cgc.buffer);
2165 return ret;
2166}
2167
2168static int cdrom_read_cdda_bpc(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2169 int lba, int nframes)
2170{
Jens Axboe165125e2007-07-24 09:28:11 +02002171 struct request_queue *q = cdi->disk->queue;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002172 struct request *rq;
Christoph Hellwig82ed4db2017-01-27 09:46:29 +01002173 struct scsi_request *req;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002174 struct bio *bio;
2175 unsigned int len;
2176 int nr, ret = 0;
2177
2178 if (!q)
2179 return -ENXIO;
2180
2181 cdi->last_sense = 0;
2182
2183 while (nframes) {
2184 nr = nframes;
2185 if (cdi->cdda_method == CDDA_BPC_SINGLE)
2186 nr = 1;
Martin K. Petersenae03bf62009-05-22 17:17:50 -04002187 if (nr * CD_FRAMESIZE_RAW > (queue_max_sectors(q) << 9))
2188 nr = (queue_max_sectors(q) << 9) / CD_FRAMESIZE_RAW;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002189
2190 len = nr * CD_FRAMESIZE_RAW;
2191
Christoph Hellwigaebf5262017-01-31 16:57:31 +01002192 rq = blk_get_request(q, REQ_OP_SCSI_IN, GFP_KERNEL);
Joe Lawrencea492f072014-08-28 08:15:21 -06002193 if (IS_ERR(rq)) {
2194 ret = PTR_ERR(rq);
Jens Axboedd1cab92005-06-20 14:06:01 +02002195 break;
Alan D. Brunellefebd7a52008-12-09 15:52:15 +01002196 }
Christoph Hellwig82ed4db2017-01-27 09:46:29 +01002197 req = scsi_req(rq);
2198 scsi_req_init(rq);
Alan D. Brunellefebd7a52008-12-09 15:52:15 +01002199
2200 ret = blk_rq_map_user(q, rq, NULL, ubuf, len, GFP_KERNEL);
2201 if (ret) {
2202 blk_put_request(rq);
2203 break;
2204 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07002205
Christoph Hellwig82ed4db2017-01-27 09:46:29 +01002206 req->cmd[0] = GPCMD_READ_CD;
2207 req->cmd[1] = 1 << 2;
2208 req->cmd[2] = (lba >> 24) & 0xff;
2209 req->cmd[3] = (lba >> 16) & 0xff;
2210 req->cmd[4] = (lba >> 8) & 0xff;
2211 req->cmd[5] = lba & 0xff;
2212 req->cmd[6] = (nr >> 16) & 0xff;
2213 req->cmd[7] = (nr >> 8) & 0xff;
2214 req->cmd[8] = nr & 0xff;
2215 req->cmd[9] = 0xf8;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002216
Christoph Hellwig82ed4db2017-01-27 09:46:29 +01002217 req->cmd_len = 12;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002218 rq->timeout = 60 * HZ;
2219 bio = rq->bio;
2220
James Bottomley 994ca9a2005-06-20 14:11:09 +02002221 if (blk_execute_rq(q, cdi->disk, rq, 0)) {
Christoph Hellwig82ed4db2017-01-27 09:46:29 +01002222 struct request_sense *s = req->sense;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002223 ret = -EIO;
2224 cdi->last_sense = s->sense_key;
2225 }
2226
Jens Axboe8e5cfc42006-12-19 11:12:46 +01002227 if (blk_rq_unmap_user(bio))
Linus Torvalds1da177e2005-04-16 15:20:36 -07002228 ret = -EFAULT;
Alan D. Brunellefebd7a52008-12-09 15:52:15 +01002229 blk_put_request(rq);
Linus Torvalds1da177e2005-04-16 15:20:36 -07002230
2231 if (ret)
2232 break;
2233
2234 nframes -= nr;
2235 lba += nr;
2236 ubuf += len;
2237 }
2238
Linus Torvalds1da177e2005-04-16 15:20:36 -07002239 return ret;
2240}
2241
2242static int cdrom_read_cdda(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2243 int lba, int nframes)
2244{
2245 int ret;
2246
2247 if (cdi->cdda_method == CDDA_OLD)
2248 return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2249
2250retry:
2251 /*
2252 * for anything else than success and io error, we need to retry
2253 */
2254 ret = cdrom_read_cdda_bpc(cdi, ubuf, lba, nframes);
2255 if (!ret || ret != -EIO)
2256 return ret;
2257
2258 /*
2259 * I've seen drives get sense 4/8/3 udma crc errors on multi
2260 * frame dma, so drop to single frame dma if we need to
2261 */
2262 if (cdi->cdda_method == CDDA_BPC_FULL && nframes > 1) {
Joe Perchese597cd02010-07-01 08:24:32 +02002263 pr_info("dropping to single frame dma\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002264 cdi->cdda_method = CDDA_BPC_SINGLE;
2265 goto retry;
2266 }
2267
2268 /*
2269 * so we have an io error of some sort with multi frame dma. if the
2270 * condition wasn't a hardware error
2271 * problems, not for any error
2272 */
2273 if (cdi->last_sense != 0x04 && cdi->last_sense != 0x0b)
2274 return ret;
2275
Joe Perchese597cd02010-07-01 08:24:32 +02002276 pr_info("dropping to old style cdda (sense=%x)\n", cdi->last_sense);
Linus Torvalds1da177e2005-04-16 15:20:36 -07002277 cdi->cdda_method = CDDA_OLD;
2278 return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2279}
2280
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002281static int cdrom_ioctl_multisession(struct cdrom_device_info *cdi,
2282 void __user *argp)
Linus Torvalds1da177e2005-04-16 15:20:36 -07002283{
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002284 struct cdrom_multisession ms_info;
2285 u8 requested_format;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002286 int ret;
2287
Joe Perches5944b2c2014-05-04 17:05:02 -07002288 cd_dbg(CD_DO_IOCTL, "entering CDROMMULTISESSION\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002289
2290 if (!(cdi->ops->capability & CDC_MULTI_SESSION))
2291 return -ENOSYS;
2292
2293 if (copy_from_user(&ms_info, argp, sizeof(ms_info)))
2294 return -EFAULT;
2295
2296 requested_format = ms_info.addr_format;
2297 if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2298 return -EINVAL;
2299 ms_info.addr_format = CDROM_LBA;
2300
2301 ret = cdi->ops->get_last_session(cdi, &ms_info);
2302 if (ret)
Linus Torvalds1da177e2005-04-16 15:20:36 -07002303 return ret;
2304
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002305 sanitize_format(&ms_info.addr, &ms_info.addr_format, requested_format);
2306
2307 if (copy_to_user(argp, &ms_info, sizeof(ms_info)))
2308 return -EFAULT;
2309
Joe Perches5944b2c2014-05-04 17:05:02 -07002310 cd_dbg(CD_DO_IOCTL, "CDROMMULTISESSION successful\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002311 return 0;
2312}
2313
2314static int cdrom_ioctl_eject(struct cdrom_device_info *cdi)
2315{
Joe Perches5944b2c2014-05-04 17:05:02 -07002316 cd_dbg(CD_DO_IOCTL, "entering CDROMEJECT\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002317
2318 if (!CDROM_CAN(CDC_OPEN_TRAY))
2319 return -ENOSYS;
Paolo Bonzinicdccaa92012-02-08 20:03:14 +01002320 if (cdi->use_count != 1 || cdi->keeplocked)
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002321 return -EBUSY;
2322 if (CDROM_CAN(CDC_LOCK)) {
2323 int ret = cdi->ops->lock_door(cdi, 0);
2324 if (ret)
Linus Torvalds1da177e2005-04-16 15:20:36 -07002325 return ret;
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002326 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07002327
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002328 return cdi->ops->tray_move(cdi, 1);
2329}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002330
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002331static int cdrom_ioctl_closetray(struct cdrom_device_info *cdi)
2332{
Joe Perches5944b2c2014-05-04 17:05:02 -07002333 cd_dbg(CD_DO_IOCTL, "entering CDROMCLOSETRAY\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002334
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002335 if (!CDROM_CAN(CDC_CLOSE_TRAY))
2336 return -ENOSYS;
2337 return cdi->ops->tray_move(cdi, 0);
2338}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002339
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002340static int cdrom_ioctl_eject_sw(struct cdrom_device_info *cdi,
2341 unsigned long arg)
2342{
Joe Perches5944b2c2014-05-04 17:05:02 -07002343 cd_dbg(CD_DO_IOCTL, "entering CDROMEJECT_SW\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002344
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002345 if (!CDROM_CAN(CDC_OPEN_TRAY))
2346 return -ENOSYS;
Paolo Bonzinicdccaa92012-02-08 20:03:14 +01002347 if (cdi->keeplocked)
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002348 return -EBUSY;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002349
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002350 cdi->options &= ~(CDO_AUTO_CLOSE | CDO_AUTO_EJECT);
2351 if (arg)
2352 cdi->options |= CDO_AUTO_CLOSE | CDO_AUTO_EJECT;
2353 return 0;
2354}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002355
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002356static int cdrom_ioctl_media_changed(struct cdrom_device_info *cdi,
2357 unsigned long arg)
2358{
2359 struct cdrom_changer_info *info;
2360 int ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002361
Joe Perches5944b2c2014-05-04 17:05:02 -07002362 cd_dbg(CD_DO_IOCTL, "entering CDROM_MEDIA_CHANGED\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002363
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002364 if (!CDROM_CAN(CDC_MEDIA_CHANGED))
2365 return -ENOSYS;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002366
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002367 /* cannot select disc or select current disc */
2368 if (!CDROM_CAN(CDC_SELECT_DISC) || arg == CDSL_CURRENT)
2369 return media_changed(cdi, 1);
Linus Torvalds1da177e2005-04-16 15:20:36 -07002370
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002371 if ((unsigned int)arg >= cdi->capacity)
2372 return -EINVAL;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002373
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002374 info = kmalloc(sizeof(*info), GFP_KERNEL);
2375 if (!info)
2376 return -ENOMEM;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002377
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002378 ret = cdrom_read_mech_status(cdi, info);
2379 if (!ret)
2380 ret = info->slots[arg].change;
2381 kfree(info);
2382 return ret;
2383}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002384
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002385static int cdrom_ioctl_set_options(struct cdrom_device_info *cdi,
2386 unsigned long arg)
2387{
Joe Perches5944b2c2014-05-04 17:05:02 -07002388 cd_dbg(CD_DO_IOCTL, "entering CDROM_SET_OPTIONS\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002389
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002390 /*
2391 * Options need to be in sync with capability.
2392 * Too late for that, so we have to check each one separately.
2393 */
2394 switch (arg) {
2395 case CDO_USE_FFLAGS:
2396 case CDO_CHECK_TYPE:
2397 break;
2398 case CDO_LOCK:
Linus Torvalds1da177e2005-04-16 15:20:36 -07002399 if (!CDROM_CAN(CDC_LOCK))
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002400 return -ENOSYS;
2401 break;
2402 case 0:
2403 return cdi->options;
2404 /* default is basically CDO_[AUTO_CLOSE|AUTO_EJECT] */
2405 default:
2406 if (!CDROM_CAN(arg))
2407 return -ENOSYS;
2408 }
2409 cdi->options |= (int) arg;
2410 return cdi->options;
2411}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002412
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002413static int cdrom_ioctl_clear_options(struct cdrom_device_info *cdi,
2414 unsigned long arg)
2415{
Joe Perches5944b2c2014-05-04 17:05:02 -07002416 cd_dbg(CD_DO_IOCTL, "entering CDROM_CLEAR_OPTIONS\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002417
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002418 cdi->options &= ~(int) arg;
2419 return cdi->options;
2420}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002421
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002422static int cdrom_ioctl_select_speed(struct cdrom_device_info *cdi,
2423 unsigned long arg)
2424{
Joe Perches5944b2c2014-05-04 17:05:02 -07002425 cd_dbg(CD_DO_IOCTL, "entering CDROM_SELECT_SPEED\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002426
2427 if (!CDROM_CAN(CDC_SELECT_SPEED))
2428 return -ENOSYS;
2429 return cdi->ops->select_speed(cdi, arg);
2430}
2431
2432static int cdrom_ioctl_select_disc(struct cdrom_device_info *cdi,
2433 unsigned long arg)
2434{
Joe Perches5944b2c2014-05-04 17:05:02 -07002435 cd_dbg(CD_DO_IOCTL, "entering CDROM_SELECT_DISC\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002436
2437 if (!CDROM_CAN(CDC_SELECT_DISC))
2438 return -ENOSYS;
2439
2440 if (arg != CDSL_CURRENT && arg != CDSL_NONE) {
2441 if ((int)arg >= cdi->capacity)
2442 return -EINVAL;
2443 }
2444
2445 /*
2446 * ->select_disc is a hook to allow a driver-specific way of
2447 * seleting disc. However, since there is no equivalent hook for
2448 * cdrom_slot_status this may not actually be useful...
2449 */
2450 if (cdi->ops->select_disc)
2451 return cdi->ops->select_disc(cdi, arg);
2452
Joe Perches5944b2c2014-05-04 17:05:02 -07002453 cd_dbg(CD_CHANGER, "Using generic cdrom_select_disc()\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002454 return cdrom_select_disc(cdi, arg);
2455}
2456
2457static int cdrom_ioctl_reset(struct cdrom_device_info *cdi,
2458 struct block_device *bdev)
2459{
Joe Perches5944b2c2014-05-04 17:05:02 -07002460 cd_dbg(CD_DO_IOCTL, "entering CDROM_RESET\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002461
2462 if (!capable(CAP_SYS_ADMIN))
2463 return -EACCES;
2464 if (!CDROM_CAN(CDC_RESET))
2465 return -ENOSYS;
Peter Zijlstraf98393a2007-05-06 14:49:54 -07002466 invalidate_bdev(bdev);
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002467 return cdi->ops->reset(cdi);
2468}
2469
2470static int cdrom_ioctl_lock_door(struct cdrom_device_info *cdi,
2471 unsigned long arg)
2472{
Joe Perches5944b2c2014-05-04 17:05:02 -07002473 cd_dbg(CD_DO_IOCTL, "%socking door\n", arg ? "L" : "Unl");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002474
2475 if (!CDROM_CAN(CDC_LOCK))
2476 return -EDRIVE_CANT_DO_THIS;
2477
Paolo Bonzinicdccaa92012-02-08 20:03:14 +01002478 cdi->keeplocked = arg ? 1 : 0;
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002479
2480 /*
2481 * Don't unlock the door on multiple opens by default, but allow
2482 * root to do so.
2483 */
2484 if (cdi->use_count != 1 && !arg && !capable(CAP_SYS_ADMIN))
2485 return -EBUSY;
2486 return cdi->ops->lock_door(cdi, arg);
2487}
2488
2489static int cdrom_ioctl_debug(struct cdrom_device_info *cdi,
2490 unsigned long arg)
2491{
Joe Perches5944b2c2014-05-04 17:05:02 -07002492 cd_dbg(CD_DO_IOCTL, "%sabling debug\n", arg ? "En" : "Dis");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002493
2494 if (!capable(CAP_SYS_ADMIN))
2495 return -EACCES;
2496 debug = arg ? 1 : 0;
2497 return debug;
2498}
2499
2500static int cdrom_ioctl_get_capability(struct cdrom_device_info *cdi)
2501{
Joe Perches5944b2c2014-05-04 17:05:02 -07002502 cd_dbg(CD_DO_IOCTL, "entering CDROM_GET_CAPABILITY\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002503 return (cdi->ops->capability & ~cdi->mask);
2504}
2505
2506/*
2507 * The following function is implemented, although very few audio
Linus Torvalds1da177e2005-04-16 15:20:36 -07002508 * discs give Universal Product Code information, which should just be
2509 * the Medium Catalog Number on the box. Note, that the way the code
2510 * is written on the CD is /not/ uniform across all discs!
2511 */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002512static int cdrom_ioctl_get_mcn(struct cdrom_device_info *cdi,
2513 void __user *argp)
2514{
2515 struct cdrom_mcn mcn;
2516 int ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002517
Joe Perches5944b2c2014-05-04 17:05:02 -07002518 cd_dbg(CD_DO_IOCTL, "entering CDROM_GET_MCN\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002519
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002520 if (!(cdi->ops->capability & CDC_MCN))
2521 return -ENOSYS;
2522 ret = cdi->ops->get_mcn(cdi, &mcn);
2523 if (ret)
2524 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002525
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002526 if (copy_to_user(argp, &mcn, sizeof(mcn)))
2527 return -EFAULT;
Joe Perches5944b2c2014-05-04 17:05:02 -07002528 cd_dbg(CD_DO_IOCTL, "CDROM_GET_MCN successful\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002529 return 0;
2530}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002531
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002532static int cdrom_ioctl_drive_status(struct cdrom_device_info *cdi,
2533 unsigned long arg)
2534{
Joe Perches5944b2c2014-05-04 17:05:02 -07002535 cd_dbg(CD_DO_IOCTL, "entering CDROM_DRIVE_STATUS\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07002536
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002537 if (!(cdi->ops->capability & CDC_DRIVE_STATUS))
2538 return -ENOSYS;
2539 if (!CDROM_CAN(CDC_SELECT_DISC) ||
2540 (arg == CDSL_CURRENT || arg == CDSL_NONE))
2541 return cdi->ops->drive_status(cdi, CDSL_CURRENT);
2542 if (((int)arg >= cdi->capacity))
2543 return -EINVAL;
2544 return cdrom_slot_status(cdi, arg);
2545}
Linus Torvalds1da177e2005-04-16 15:20:36 -07002546
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002547/*
2548 * Ok, this is where problems start. The current interface for the
2549 * CDROM_DISC_STATUS ioctl is flawed. It makes the false assumption that
Lucas De Marchi25985ed2011-03-30 22:57:33 -03002550 * CDs are all CDS_DATA_1 or all CDS_AUDIO, etc. Unfortunately, while this
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002551 * is often the case, it is also very common for CDs to have some tracks
2552 * with data, and some tracks with audio. Just because I feel like it,
2553 * I declare the following to be the best way to cope. If the CD has ANY
2554 * data tracks on it, it will be returned as a data CD. If it has any XA
2555 * tracks, I will return it as that. Now I could simplify this interface
2556 * by combining these returns with the above, but this more clearly
2557 * demonstrates the problem with the current interface. Too bad this
2558 * wasn't designed to use bitmasks... -Erik
2559 *
2560 * Well, now we have the option CDS_MIXED: a mixed-type CD.
2561 * User level programmers might feel the ioctl is not very useful.
2562 * ---david
2563 */
2564static int cdrom_ioctl_disc_status(struct cdrom_device_info *cdi)
2565{
2566 tracktype tracks;
2567
Joe Perches5944b2c2014-05-04 17:05:02 -07002568 cd_dbg(CD_DO_IOCTL, "entering CDROM_DISC_STATUS\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002569
2570 cdrom_count_tracks(cdi, &tracks);
2571 if (tracks.error)
2572 return tracks.error;
2573
2574 /* Policy mode on */
2575 if (tracks.audio > 0) {
2576 if (!tracks.data && !tracks.cdi && !tracks.xa)
2577 return CDS_AUDIO;
2578 else
2579 return CDS_MIXED;
Linus Torvalds1da177e2005-04-16 15:20:36 -07002580 }
2581
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002582 if (tracks.cdi > 0)
2583 return CDS_XA_2_2;
2584 if (tracks.xa > 0)
2585 return CDS_XA_2_1;
2586 if (tracks.data > 0)
2587 return CDS_DATA_1;
2588 /* Policy mode off */
2589
Joe Perches5944b2c2014-05-04 17:05:02 -07002590 cd_dbg(CD_WARNING, "This disc doesn't have any tracks I recognize!\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002591 return CDS_NO_INFO;
2592}
2593
2594static int cdrom_ioctl_changer_nslots(struct cdrom_device_info *cdi)
2595{
Joe Perches5944b2c2014-05-04 17:05:02 -07002596 cd_dbg(CD_DO_IOCTL, "entering CDROM_CHANGER_NSLOTS\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002597 return cdi->capacity;
2598}
2599
2600static int cdrom_ioctl_get_subchnl(struct cdrom_device_info *cdi,
2601 void __user *argp)
2602{
2603 struct cdrom_subchnl q;
2604 u8 requested, back;
2605 int ret;
2606
Joe Perches5944b2c2014-05-04 17:05:02 -07002607 /* cd_dbg(CD_DO_IOCTL,"entering CDROMSUBCHNL\n");*/
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002608
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002609 if (copy_from_user(&q, argp, sizeof(q)))
2610 return -EFAULT;
2611
2612 requested = q.cdsc_format;
2613 if (requested != CDROM_MSF && requested != CDROM_LBA)
2614 return -EINVAL;
2615 q.cdsc_format = CDROM_MSF;
2616
2617 ret = cdi->ops->audio_ioctl(cdi, CDROMSUBCHNL, &q);
2618 if (ret)
2619 return ret;
2620
2621 back = q.cdsc_format; /* local copy */
2622 sanitize_format(&q.cdsc_absaddr, &back, requested);
2623 sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
2624
2625 if (copy_to_user(argp, &q, sizeof(q)))
2626 return -EFAULT;
Joe Perches5944b2c2014-05-04 17:05:02 -07002627 /* cd_dbg(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002628 return 0;
2629}
2630
2631static int cdrom_ioctl_read_tochdr(struct cdrom_device_info *cdi,
2632 void __user *argp)
2633{
2634 struct cdrom_tochdr header;
2635 int ret;
2636
Joe Perches5944b2c2014-05-04 17:05:02 -07002637 /* cd_dbg(CD_DO_IOCTL, "entering CDROMREADTOCHDR\n"); */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002638
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002639 if (copy_from_user(&header, argp, sizeof(header)))
2640 return -EFAULT;
2641
2642 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header);
2643 if (ret)
2644 return ret;
2645
2646 if (copy_to_user(argp, &header, sizeof(header)))
2647 return -EFAULT;
Joe Perches5944b2c2014-05-04 17:05:02 -07002648 /* cd_dbg(CD_DO_IOCTL, "CDROMREADTOCHDR successful\n"); */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002649 return 0;
2650}
2651
2652static int cdrom_ioctl_read_tocentry(struct cdrom_device_info *cdi,
2653 void __user *argp)
2654{
2655 struct cdrom_tocentry entry;
2656 u8 requested_format;
2657 int ret;
2658
Joe Perches5944b2c2014-05-04 17:05:02 -07002659 /* cd_dbg(CD_DO_IOCTL, "entering CDROMREADTOCENTRY\n"); */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002660
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002661 if (copy_from_user(&entry, argp, sizeof(entry)))
2662 return -EFAULT;
2663
2664 requested_format = entry.cdte_format;
2665 if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2666 return -EINVAL;
2667 /* make interface to low-level uniform */
2668 entry.cdte_format = CDROM_MSF;
2669 ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry);
2670 if (ret)
2671 return ret;
2672 sanitize_format(&entry.cdte_addr, &entry.cdte_format, requested_format);
2673
2674 if (copy_to_user(argp, &entry, sizeof(entry)))
2675 return -EFAULT;
Joe Perches5944b2c2014-05-04 17:05:02 -07002676 /* cd_dbg(CD_DO_IOCTL, "CDROMREADTOCENTRY successful\n"); */
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002677 return 0;
2678}
2679
2680static int cdrom_ioctl_play_msf(struct cdrom_device_info *cdi,
2681 void __user *argp)
2682{
2683 struct cdrom_msf msf;
2684
Joe Perches5944b2c2014-05-04 17:05:02 -07002685 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002686
2687 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2688 return -ENOSYS;
2689 if (copy_from_user(&msf, argp, sizeof(msf)))
2690 return -EFAULT;
2691 return cdi->ops->audio_ioctl(cdi, CDROMPLAYMSF, &msf);
2692}
2693
2694static int cdrom_ioctl_play_trkind(struct cdrom_device_info *cdi,
2695 void __user *argp)
2696{
2697 struct cdrom_ti ti;
2698 int ret;
2699
Joe Perches5944b2c2014-05-04 17:05:02 -07002700 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYTRKIND\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002701
2702 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2703 return -ENOSYS;
2704 if (copy_from_user(&ti, argp, sizeof(ti)))
2705 return -EFAULT;
2706
2707 ret = check_for_audio_disc(cdi, cdi->ops);
2708 if (ret)
2709 return ret;
2710 return cdi->ops->audio_ioctl(cdi, CDROMPLAYTRKIND, &ti);
2711}
2712static int cdrom_ioctl_volctrl(struct cdrom_device_info *cdi,
2713 void __user *argp)
2714{
2715 struct cdrom_volctrl volume;
2716
Joe Perches5944b2c2014-05-04 17:05:02 -07002717 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLCTRL\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002718
2719 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2720 return -ENOSYS;
2721 if (copy_from_user(&volume, argp, sizeof(volume)))
2722 return -EFAULT;
2723 return cdi->ops->audio_ioctl(cdi, CDROMVOLCTRL, &volume);
2724}
2725
2726static int cdrom_ioctl_volread(struct cdrom_device_info *cdi,
2727 void __user *argp)
2728{
2729 struct cdrom_volctrl volume;
2730 int ret;
2731
Joe Perches5944b2c2014-05-04 17:05:02 -07002732 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLREAD\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002733
2734 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2735 return -ENOSYS;
2736
2737 ret = cdi->ops->audio_ioctl(cdi, CDROMVOLREAD, &volume);
2738 if (ret)
2739 return ret;
2740
2741 if (copy_to_user(argp, &volume, sizeof(volume)))
2742 return -EFAULT;
2743 return 0;
2744}
2745
2746static int cdrom_ioctl_audioctl(struct cdrom_device_info *cdi,
2747 unsigned int cmd)
2748{
2749 int ret;
2750
Joe Perches5944b2c2014-05-04 17:05:02 -07002751 cd_dbg(CD_DO_IOCTL, "doing audio ioctl (start/stop/pause/resume)\n");
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08002752
2753 if (!CDROM_CAN(CDC_PLAY_AUDIO))
2754 return -ENOSYS;
2755 ret = check_for_audio_disc(cdi, cdi->ops);
2756 if (ret)
2757 return ret;
2758 return cdi->ops->audio_ioctl(cdi, cmd, NULL);
2759}
2760
2761/*
Joe Perches2e9aa082014-05-04 17:05:08 -07002762 * Required when we need to use READ_10 to issue other than 2048 block
2763 * reads
2764 */
2765static int cdrom_switch_blocksize(struct cdrom_device_info *cdi, int size)
2766{
Kees Cook853fe1b2017-02-13 16:25:26 -08002767 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches2e9aa082014-05-04 17:05:08 -07002768 struct packet_command cgc;
2769 struct modesel_head mh;
2770
2771 memset(&mh, 0, sizeof(mh));
2772 mh.block_desc_length = 0x08;
2773 mh.block_length_med = (size >> 8) & 0xff;
2774 mh.block_length_lo = size & 0xff;
2775
2776 memset(&cgc, 0, sizeof(cgc));
2777 cgc.cmd[0] = 0x15;
2778 cgc.cmd[1] = 1 << 4;
2779 cgc.cmd[4] = 12;
2780 cgc.buflen = sizeof(mh);
2781 cgc.buffer = (char *) &mh;
2782 cgc.data_direction = CGC_DATA_WRITE;
2783 mh.block_desc_length = 0x08;
2784 mh.block_length_med = (size >> 8) & 0xff;
2785 mh.block_length_lo = size & 0xff;
2786
2787 return cdo->generic_packet(cdi, &cgc);
2788}
2789
Joe Perchese1e60fd2014-05-04 17:05:09 -07002790static int cdrom_get_track_info(struct cdrom_device_info *cdi,
2791 __u16 track, __u8 type, track_information *ti)
2792{
Kees Cook853fe1b2017-02-13 16:25:26 -08002793 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perchese1e60fd2014-05-04 17:05:09 -07002794 struct packet_command cgc;
2795 int ret, buflen;
2796
2797 init_cdrom_command(&cgc, ti, 8, CGC_DATA_READ);
2798 cgc.cmd[0] = GPCMD_READ_TRACK_RZONE_INFO;
2799 cgc.cmd[1] = type & 3;
2800 cgc.cmd[4] = (track & 0xff00) >> 8;
2801 cgc.cmd[5] = track & 0xff;
2802 cgc.cmd[8] = 8;
2803 cgc.quiet = 1;
2804
2805 ret = cdo->generic_packet(cdi, &cgc);
2806 if (ret)
2807 return ret;
2808
2809 buflen = be16_to_cpu(ti->track_information_length) +
2810 sizeof(ti->track_information_length);
2811
2812 if (buflen > sizeof(track_information))
2813 buflen = sizeof(track_information);
2814
2815 cgc.cmd[8] = cgc.buflen = buflen;
2816 ret = cdo->generic_packet(cdi, &cgc);
2817 if (ret)
2818 return ret;
2819
2820 /* return actual fill size */
2821 return buflen;
2822}
2823
2824/* return the last written block on the CD-R media. this is for the udf
2825 file system. */
2826int cdrom_get_last_written(struct cdrom_device_info *cdi, long *last_written)
2827{
2828 struct cdrom_tocentry toc;
2829 disc_information di;
2830 track_information ti;
2831 __u32 last_track;
2832 int ret = -1, ti_size;
2833
2834 if (!CDROM_CAN(CDC_GENERIC_PACKET))
2835 goto use_toc;
2836
2837 ret = cdrom_get_disc_info(cdi, &di);
2838 if (ret < (int)(offsetof(typeof(di), last_track_lsb)
2839 + sizeof(di.last_track_lsb)))
2840 goto use_toc;
2841
2842 /* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
2843 last_track = (di.last_track_msb << 8) | di.last_track_lsb;
2844 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2845 if (ti_size < (int)offsetof(typeof(ti), track_start))
2846 goto use_toc;
2847
2848 /* if this track is blank, try the previous. */
2849 if (ti.blank) {
2850 if (last_track == 1)
2851 goto use_toc;
2852 last_track--;
2853 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2854 }
2855
2856 if (ti_size < (int)(offsetof(typeof(ti), track_size)
2857 + sizeof(ti.track_size)))
2858 goto use_toc;
2859
2860 /* if last recorded field is valid, return it. */
2861 if (ti.lra_v && ti_size >= (int)(offsetof(typeof(ti), last_rec_address)
2862 + sizeof(ti.last_rec_address))) {
2863 *last_written = be32_to_cpu(ti.last_rec_address);
2864 } else {
2865 /* make it up instead */
2866 *last_written = be32_to_cpu(ti.track_start) +
2867 be32_to_cpu(ti.track_size);
2868 if (ti.free_blocks)
2869 *last_written -= (be32_to_cpu(ti.free_blocks) + 7);
2870 }
2871 return 0;
2872
2873 /* this is where we end up if the drive either can't do a
2874 GPCMD_READ_DISC_INFO or GPCMD_READ_TRACK_RZONE_INFO or if
2875 it doesn't give enough information or fails. then we return
2876 the toc contents. */
2877use_toc:
2878 toc.cdte_format = CDROM_MSF;
2879 toc.cdte_track = CDROM_LEADOUT;
2880 if ((ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &toc)))
2881 return ret;
2882 sanitize_format(&toc.cdte_addr, &toc.cdte_format, CDROM_LBA);
2883 *last_written = toc.cdte_addr.lba;
2884 return 0;
2885}
2886
Joe Perchesdac1c5c2014-05-04 17:05:10 -07002887/* return the next writable block. also for udf file system. */
2888static int cdrom_get_next_writable(struct cdrom_device_info *cdi,
2889 long *next_writable)
2890{
2891 disc_information di;
2892 track_information ti;
2893 __u16 last_track;
2894 int ret, ti_size;
2895
2896 if (!CDROM_CAN(CDC_GENERIC_PACKET))
2897 goto use_last_written;
2898
2899 ret = cdrom_get_disc_info(cdi, &di);
2900 if (ret < 0 || ret < offsetof(typeof(di), last_track_lsb)
2901 + sizeof(di.last_track_lsb))
2902 goto use_last_written;
2903
2904 /* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
2905 last_track = (di.last_track_msb << 8) | di.last_track_lsb;
2906 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2907 if (ti_size < 0 || ti_size < offsetof(typeof(ti), track_start))
2908 goto use_last_written;
2909
2910 /* if this track is blank, try the previous. */
2911 if (ti.blank) {
2912 if (last_track == 1)
2913 goto use_last_written;
2914 last_track--;
2915 ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
2916 if (ti_size < 0)
2917 goto use_last_written;
2918 }
2919
2920 /* if next recordable address field is valid, use it. */
2921 if (ti.nwa_v && ti_size >= offsetof(typeof(ti), next_writable)
2922 + sizeof(ti.next_writable)) {
2923 *next_writable = be32_to_cpu(ti.next_writable);
2924 return 0;
2925 }
2926
2927use_last_written:
2928 ret = cdrom_get_last_written(cdi, next_writable);
2929 if (ret) {
2930 *next_writable = 0;
2931 return ret;
2932 } else {
2933 *next_writable += 7;
2934 return 0;
2935 }
2936}
2937
Joe Perches2e9aa082014-05-04 17:05:08 -07002938static noinline int mmc_ioctl_cdrom_read_data(struct cdrom_device_info *cdi,
2939 void __user *arg,
2940 struct packet_command *cgc,
2941 int cmd)
2942{
2943 struct request_sense sense;
2944 struct cdrom_msf msf;
2945 int blocksize = 0, format = 0, lba;
2946 int ret;
2947
2948 switch (cmd) {
2949 case CDROMREADRAW:
2950 blocksize = CD_FRAMESIZE_RAW;
2951 break;
2952 case CDROMREADMODE1:
2953 blocksize = CD_FRAMESIZE;
2954 format = 2;
2955 break;
2956 case CDROMREADMODE2:
2957 blocksize = CD_FRAMESIZE_RAW0;
2958 break;
2959 }
2960 if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))
2961 return -EFAULT;
2962 lba = msf_to_lba(msf.cdmsf_min0, msf.cdmsf_sec0, msf.cdmsf_frame0);
2963 /* FIXME: we need upper bound checking, too!! */
2964 if (lba < 0)
2965 return -EINVAL;
2966
2967 cgc->buffer = kzalloc(blocksize, GFP_KERNEL);
2968 if (cgc->buffer == NULL)
2969 return -ENOMEM;
2970
2971 memset(&sense, 0, sizeof(sense));
2972 cgc->sense = &sense;
2973 cgc->data_direction = CGC_DATA_READ;
2974 ret = cdrom_read_block(cdi, cgc, lba, 1, format, blocksize);
2975 if (ret && sense.sense_key == 0x05 &&
2976 sense.asc == 0x20 &&
2977 sense.ascq == 0x00) {
2978 /*
2979 * SCSI-II devices are not required to support
2980 * READ_CD, so let's try switching block size
2981 */
2982 /* FIXME: switch back again... */
2983 ret = cdrom_switch_blocksize(cdi, blocksize);
2984 if (ret)
2985 goto out;
2986 cgc->sense = NULL;
2987 ret = cdrom_read_cd(cdi, cgc, lba, blocksize, 1);
2988 ret |= cdrom_switch_blocksize(cdi, blocksize);
2989 }
2990 if (!ret && copy_to_user(arg, cgc->buffer, blocksize))
2991 ret = -EFAULT;
2992out:
2993 kfree(cgc->buffer);
2994 return ret;
2995}
2996
2997static noinline int mmc_ioctl_cdrom_read_audio(struct cdrom_device_info *cdi,
2998 void __user *arg)
2999{
3000 struct cdrom_read_audio ra;
3001 int lba;
3002
3003 if (copy_from_user(&ra, (struct cdrom_read_audio __user *)arg,
3004 sizeof(ra)))
3005 return -EFAULT;
3006
3007 if (ra.addr_format == CDROM_MSF)
3008 lba = msf_to_lba(ra.addr.msf.minute,
3009 ra.addr.msf.second,
3010 ra.addr.msf.frame);
3011 else if (ra.addr_format == CDROM_LBA)
3012 lba = ra.addr.lba;
3013 else
3014 return -EINVAL;
3015
3016 /* FIXME: we need upper bound checking, too!! */
3017 if (lba < 0 || ra.nframes <= 0 || ra.nframes > CD_FRAMES)
3018 return -EINVAL;
3019
3020 return cdrom_read_cdda(cdi, ra.buf, lba, ra.nframes);
3021}
3022
3023static noinline int mmc_ioctl_cdrom_subchannel(struct cdrom_device_info *cdi,
3024 void __user *arg)
3025{
3026 int ret;
3027 struct cdrom_subchnl q;
3028 u_char requested, back;
3029 if (copy_from_user(&q, (struct cdrom_subchnl __user *)arg, sizeof(q)))
3030 return -EFAULT;
3031 requested = q.cdsc_format;
3032 if (!((requested == CDROM_MSF) ||
3033 (requested == CDROM_LBA)))
3034 return -EINVAL;
vchannaiahbf294e82016-06-29 08:18:25 -04003035
Joe Perches2e9aa082014-05-04 17:05:08 -07003036 ret = cdrom_read_subchannel(cdi, &q, 0);
3037 if (ret)
3038 return ret;
3039 back = q.cdsc_format; /* local copy */
3040 sanitize_format(&q.cdsc_absaddr, &back, requested);
3041 sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
3042 if (copy_to_user((struct cdrom_subchnl __user *)arg, &q, sizeof(q)))
3043 return -EFAULT;
3044 /* cd_dbg(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
3045 return 0;
3046}
3047
3048static noinline int mmc_ioctl_cdrom_play_msf(struct cdrom_device_info *cdi,
3049 void __user *arg,
3050 struct packet_command *cgc)
3051{
Kees Cook853fe1b2017-02-13 16:25:26 -08003052 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches2e9aa082014-05-04 17:05:08 -07003053 struct cdrom_msf msf;
3054 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
3055 if (copy_from_user(&msf, (struct cdrom_msf __user *)arg, sizeof(msf)))
3056 return -EFAULT;
3057 cgc->cmd[0] = GPCMD_PLAY_AUDIO_MSF;
3058 cgc->cmd[3] = msf.cdmsf_min0;
3059 cgc->cmd[4] = msf.cdmsf_sec0;
3060 cgc->cmd[5] = msf.cdmsf_frame0;
3061 cgc->cmd[6] = msf.cdmsf_min1;
3062 cgc->cmd[7] = msf.cdmsf_sec1;
3063 cgc->cmd[8] = msf.cdmsf_frame1;
3064 cgc->data_direction = CGC_DATA_NONE;
3065 return cdo->generic_packet(cdi, cgc);
3066}
3067
3068static noinline int mmc_ioctl_cdrom_play_blk(struct cdrom_device_info *cdi,
3069 void __user *arg,
3070 struct packet_command *cgc)
3071{
Kees Cook853fe1b2017-02-13 16:25:26 -08003072 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches2e9aa082014-05-04 17:05:08 -07003073 struct cdrom_blk blk;
3074 cd_dbg(CD_DO_IOCTL, "entering CDROMPLAYBLK\n");
3075 if (copy_from_user(&blk, (struct cdrom_blk __user *)arg, sizeof(blk)))
3076 return -EFAULT;
3077 cgc->cmd[0] = GPCMD_PLAY_AUDIO_10;
3078 cgc->cmd[2] = (blk.from >> 24) & 0xff;
3079 cgc->cmd[3] = (blk.from >> 16) & 0xff;
3080 cgc->cmd[4] = (blk.from >> 8) & 0xff;
3081 cgc->cmd[5] = blk.from & 0xff;
3082 cgc->cmd[7] = (blk.len >> 8) & 0xff;
3083 cgc->cmd[8] = blk.len & 0xff;
3084 cgc->data_direction = CGC_DATA_NONE;
3085 return cdo->generic_packet(cdi, cgc);
3086}
3087
3088static noinline int mmc_ioctl_cdrom_volume(struct cdrom_device_info *cdi,
3089 void __user *arg,
3090 struct packet_command *cgc,
3091 unsigned int cmd)
3092{
3093 struct cdrom_volctrl volctrl;
3094 unsigned char buffer[32];
3095 char mask[sizeof(buffer)];
3096 unsigned short offset;
3097 int ret;
3098
3099 cd_dbg(CD_DO_IOCTL, "entering CDROMVOLUME\n");
3100
3101 if (copy_from_user(&volctrl, (struct cdrom_volctrl __user *)arg,
3102 sizeof(volctrl)))
3103 return -EFAULT;
3104
3105 cgc->buffer = buffer;
3106 cgc->buflen = 24;
3107 ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 0);
3108 if (ret)
3109 return ret;
3110
3111 /* originally the code depended on buffer[1] to determine
3112 how much data is available for transfer. buffer[1] is
3113 unfortunately ambigious and the only reliable way seem
3114 to be to simply skip over the block descriptor... */
3115 offset = 8 + be16_to_cpu(*(__be16 *)(buffer + 6));
3116
3117 if (offset + 16 > sizeof(buffer))
3118 return -E2BIG;
3119
3120 if (offset + 16 > cgc->buflen) {
3121 cgc->buflen = offset + 16;
3122 ret = cdrom_mode_sense(cdi, cgc,
3123 GPMODE_AUDIO_CTL_PAGE, 0);
3124 if (ret)
3125 return ret;
3126 }
3127
3128 /* sanity check */
3129 if ((buffer[offset] & 0x3f) != GPMODE_AUDIO_CTL_PAGE ||
3130 buffer[offset + 1] < 14)
3131 return -EINVAL;
3132
3133 /* now we have the current volume settings. if it was only
3134 a CDROMVOLREAD, return these values */
3135 if (cmd == CDROMVOLREAD) {
3136 volctrl.channel0 = buffer[offset+9];
3137 volctrl.channel1 = buffer[offset+11];
3138 volctrl.channel2 = buffer[offset+13];
3139 volctrl.channel3 = buffer[offset+15];
3140 if (copy_to_user((struct cdrom_volctrl __user *)arg, &volctrl,
3141 sizeof(volctrl)))
3142 return -EFAULT;
3143 return 0;
3144 }
3145
3146 /* get the volume mask */
3147 cgc->buffer = mask;
3148 ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 1);
3149 if (ret)
3150 return ret;
3151
3152 buffer[offset + 9] = volctrl.channel0 & mask[offset + 9];
3153 buffer[offset + 11] = volctrl.channel1 & mask[offset + 11];
3154 buffer[offset + 13] = volctrl.channel2 & mask[offset + 13];
3155 buffer[offset + 15] = volctrl.channel3 & mask[offset + 15];
3156
3157 /* set volume */
3158 cgc->buffer = buffer + offset - 8;
3159 memset(cgc->buffer, 0, 8);
3160 return cdrom_mode_select(cdi, cgc);
3161}
3162
3163static noinline int mmc_ioctl_cdrom_start_stop(struct cdrom_device_info *cdi,
3164 struct packet_command *cgc,
3165 int cmd)
3166{
Kees Cook853fe1b2017-02-13 16:25:26 -08003167 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches2e9aa082014-05-04 17:05:08 -07003168 cd_dbg(CD_DO_IOCTL, "entering CDROMSTART/CDROMSTOP\n");
3169 cgc->cmd[0] = GPCMD_START_STOP_UNIT;
3170 cgc->cmd[1] = 1;
3171 cgc->cmd[4] = (cmd == CDROMSTART) ? 1 : 0;
3172 cgc->data_direction = CGC_DATA_NONE;
3173 return cdo->generic_packet(cdi, cgc);
3174}
3175
3176static noinline int mmc_ioctl_cdrom_pause_resume(struct cdrom_device_info *cdi,
3177 struct packet_command *cgc,
3178 int cmd)
3179{
Kees Cook853fe1b2017-02-13 16:25:26 -08003180 const struct cdrom_device_ops *cdo = cdi->ops;
Joe Perches2e9aa082014-05-04 17:05:08 -07003181 cd_dbg(CD_DO_IOCTL, "entering CDROMPAUSE/CDROMRESUME\n");
3182 cgc->cmd[0] = GPCMD_PAUSE_RESUME;
3183 cgc->cmd[8] = (cmd == CDROMRESUME) ? 1 : 0;
3184 cgc->data_direction = CGC_DATA_NONE;
3185 return cdo->generic_packet(cdi, cgc);
3186}
3187
3188static noinline int mmc_ioctl_dvd_read_struct(struct cdrom_device_info *cdi,
3189 void __user *arg,
3190 struct packet_command *cgc)
3191{
3192 int ret;
3193 dvd_struct *s;
3194 int size = sizeof(dvd_struct);
3195
3196 if (!CDROM_CAN(CDC_DVD))
3197 return -ENOSYS;
3198
Al Viroabb0f6a2016-01-02 14:59:38 -05003199 s = memdup_user(arg, size);
3200 if (IS_ERR(s))
3201 return PTR_ERR(s);
Joe Perches2e9aa082014-05-04 17:05:08 -07003202
3203 cd_dbg(CD_DO_IOCTL, "entering DVD_READ_STRUCT\n");
Joe Perches2e9aa082014-05-04 17:05:08 -07003204
3205 ret = dvd_read_struct(cdi, s, cgc);
3206 if (ret)
3207 goto out;
3208
3209 if (copy_to_user(arg, s, size))
3210 ret = -EFAULT;
3211out:
3212 kfree(s);
3213 return ret;
3214}
3215
3216static noinline int mmc_ioctl_dvd_auth(struct cdrom_device_info *cdi,
3217 void __user *arg)
3218{
3219 int ret;
3220 dvd_authinfo ai;
3221 if (!CDROM_CAN(CDC_DVD))
3222 return -ENOSYS;
3223 cd_dbg(CD_DO_IOCTL, "entering DVD_AUTH\n");
3224 if (copy_from_user(&ai, (dvd_authinfo __user *)arg, sizeof(ai)))
3225 return -EFAULT;
3226 ret = dvd_do_auth(cdi, &ai);
3227 if (ret)
3228 return ret;
3229 if (copy_to_user((dvd_authinfo __user *)arg, &ai, sizeof(ai)))
3230 return -EFAULT;
3231 return 0;
3232}
3233
3234static noinline int mmc_ioctl_cdrom_next_writable(struct cdrom_device_info *cdi,
3235 void __user *arg)
3236{
3237 int ret;
3238 long next = 0;
3239 cd_dbg(CD_DO_IOCTL, "entering CDROM_NEXT_WRITABLE\n");
3240 ret = cdrom_get_next_writable(cdi, &next);
3241 if (ret)
3242 return ret;
3243 if (copy_to_user((long __user *)arg, &next, sizeof(next)))
3244 return -EFAULT;
3245 return 0;
3246}
3247
3248static noinline int mmc_ioctl_cdrom_last_written(struct cdrom_device_info *cdi,
3249 void __user *arg)
3250{
3251 int ret;
3252 long last = 0;
3253 cd_dbg(CD_DO_IOCTL, "entering CDROM_LAST_WRITTEN\n");
3254 ret = cdrom_get_last_written(cdi, &last);
3255 if (ret)
3256 return ret;
3257 if (copy_to_user((long __user *)arg, &last, sizeof(last)))
3258 return -EFAULT;
3259 return 0;
3260}
3261
3262static int mmc_ioctl(struct cdrom_device_info *cdi, unsigned int cmd,
3263 unsigned long arg)
3264{
3265 struct packet_command cgc;
3266 void __user *userptr = (void __user *)arg;
3267
3268 memset(&cgc, 0, sizeof(cgc));
3269
3270 /* build a unified command and queue it through
3271 cdo->generic_packet() */
3272 switch (cmd) {
3273 case CDROMREADRAW:
3274 case CDROMREADMODE1:
3275 case CDROMREADMODE2:
3276 return mmc_ioctl_cdrom_read_data(cdi, userptr, &cgc, cmd);
3277 case CDROMREADAUDIO:
3278 return mmc_ioctl_cdrom_read_audio(cdi, userptr);
3279 case CDROMSUBCHNL:
3280 return mmc_ioctl_cdrom_subchannel(cdi, userptr);
3281 case CDROMPLAYMSF:
3282 return mmc_ioctl_cdrom_play_msf(cdi, userptr, &cgc);
3283 case CDROMPLAYBLK:
3284 return mmc_ioctl_cdrom_play_blk(cdi, userptr, &cgc);
3285 case CDROMVOLCTRL:
3286 case CDROMVOLREAD:
3287 return mmc_ioctl_cdrom_volume(cdi, userptr, &cgc, cmd);
3288 case CDROMSTART:
3289 case CDROMSTOP:
3290 return mmc_ioctl_cdrom_start_stop(cdi, &cgc, cmd);
3291 case CDROMPAUSE:
3292 case CDROMRESUME:
3293 return mmc_ioctl_cdrom_pause_resume(cdi, &cgc, cmd);
3294 case DVD_READ_STRUCT:
3295 return mmc_ioctl_dvd_read_struct(cdi, userptr, &cgc);
3296 case DVD_AUTH:
3297 return mmc_ioctl_dvd_auth(cdi, userptr);
3298 case CDROM_NEXT_WRITABLE:
3299 return mmc_ioctl_cdrom_next_writable(cdi, userptr);
3300 case CDROM_LAST_WRITTEN:
3301 return mmc_ioctl_cdrom_last_written(cdi, userptr);
3302 }
3303
3304 return -ENOTTY;
3305}
3306
3307/*
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003308 * Just about every imaginable ioctl is supported in the Uniform layer
3309 * these days.
3310 * ATAPI / SCSI specific code now mainly resides in mmc_ioctl().
3311 */
Al Virobbc1cc92007-10-07 17:54:28 -04003312int cdrom_ioctl(struct cdrom_device_info *cdi, struct block_device *bdev,
3313 fmode_t mode, unsigned int cmd, unsigned long arg)
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003314{
3315 void __user *argp = (void __user *)arg;
3316 int ret;
3317
3318 /*
3319 * Try the generic SCSI command ioctl's first.
3320 */
Paolo Bonzini577ebb32012-01-12 16:01:27 +01003321 ret = scsi_cmd_blk_ioctl(bdev, mode, cmd, argp);
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003322 if (ret != -ENOTTY)
3323 return ret;
3324
3325 switch (cmd) {
3326 case CDROMMULTISESSION:
3327 return cdrom_ioctl_multisession(cdi, argp);
3328 case CDROMEJECT:
3329 return cdrom_ioctl_eject(cdi);
3330 case CDROMCLOSETRAY:
3331 return cdrom_ioctl_closetray(cdi);
3332 case CDROMEJECT_SW:
3333 return cdrom_ioctl_eject_sw(cdi, arg);
3334 case CDROM_MEDIA_CHANGED:
3335 return cdrom_ioctl_media_changed(cdi, arg);
3336 case CDROM_SET_OPTIONS:
3337 return cdrom_ioctl_set_options(cdi, arg);
3338 case CDROM_CLEAR_OPTIONS:
3339 return cdrom_ioctl_clear_options(cdi, arg);
3340 case CDROM_SELECT_SPEED:
3341 return cdrom_ioctl_select_speed(cdi, arg);
3342 case CDROM_SELECT_DISC:
3343 return cdrom_ioctl_select_disc(cdi, arg);
3344 case CDROMRESET:
Al Virobbc1cc92007-10-07 17:54:28 -04003345 return cdrom_ioctl_reset(cdi, bdev);
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003346 case CDROM_LOCKDOOR:
3347 return cdrom_ioctl_lock_door(cdi, arg);
3348 case CDROM_DEBUG:
3349 return cdrom_ioctl_debug(cdi, arg);
3350 case CDROM_GET_CAPABILITY:
3351 return cdrom_ioctl_get_capability(cdi);
3352 case CDROM_GET_MCN:
3353 return cdrom_ioctl_get_mcn(cdi, argp);
3354 case CDROM_DRIVE_STATUS:
3355 return cdrom_ioctl_drive_status(cdi, arg);
3356 case CDROM_DISC_STATUS:
3357 return cdrom_ioctl_disc_status(cdi);
3358 case CDROM_CHANGER_NSLOTS:
3359 return cdrom_ioctl_changer_nslots(cdi);
3360 }
3361
3362 /*
3363 * Use the ioctls that are implemented through the generic_packet()
3364 * interface. this may look at bit funny, but if -ENOTTY is
3365 * returned that particular ioctl is not implemented and we
3366 * let it go through the device specific ones.
3367 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07003368 if (CDROM_CAN(CDC_GENERIC_PACKET)) {
3369 ret = mmc_ioctl(cdi, cmd, arg);
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003370 if (ret != -ENOTTY)
Linus Torvalds1da177e2005-04-16 15:20:36 -07003371 return ret;
Linus Torvalds1da177e2005-04-16 15:20:36 -07003372 }
3373
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003374 /*
Joe Perches5944b2c2014-05-04 17:05:02 -07003375 * Note: most of the cd_dbg() calls are commented out here,
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003376 * because they fill up the sys log when CD players poll
3377 * the drive.
3378 */
Linus Torvalds1da177e2005-04-16 15:20:36 -07003379 switch (cmd) {
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003380 case CDROMSUBCHNL:
3381 return cdrom_ioctl_get_subchnl(cdi, argp);
3382 case CDROMREADTOCHDR:
3383 return cdrom_ioctl_read_tochdr(cdi, argp);
3384 case CDROMREADTOCENTRY:
3385 return cdrom_ioctl_read_tocentry(cdi, argp);
3386 case CDROMPLAYMSF:
3387 return cdrom_ioctl_play_msf(cdi, argp);
3388 case CDROMPLAYTRKIND:
3389 return cdrom_ioctl_play_trkind(cdi, argp);
3390 case CDROMVOLCTRL:
3391 return cdrom_ioctl_volctrl(cdi, argp);
3392 case CDROMVOLREAD:
3393 return cdrom_ioctl_volread(cdi, argp);
Linus Torvalds1da177e2005-04-16 15:20:36 -07003394 case CDROMSTART:
3395 case CDROMSTOP:
3396 case CDROMPAUSE:
Christoph Hellwigd2c5d4f2006-03-23 03:00:14 -08003397 case CDROMRESUME:
3398 return cdrom_ioctl_audioctl(cdi, cmd);
3399 }
Linus Torvalds1da177e2005-04-16 15:20:36 -07003400
Linus Torvalds1da177e2005-04-16 15:20:36 -07003401 return -ENOSYS;
3402}
3403
Linus Torvalds1da177e2005-04-16 15:20:36 -07003404EXPORT_SYMBOL(cdrom_get_last_written);
3405EXPORT_SYMBOL(register_cdrom);
3406EXPORT_SYMBOL(unregister_cdrom);
3407EXPORT_SYMBOL(cdrom_open);
3408EXPORT_SYMBOL(cdrom_release);
3409EXPORT_SYMBOL(cdrom_ioctl);
3410EXPORT_SYMBOL(cdrom_media_changed);
3411EXPORT_SYMBOL(cdrom_number_of_slots);
3412EXPORT_SYMBOL(cdrom_mode_select);
3413EXPORT_SYMBOL(cdrom_mode_sense);
3414EXPORT_SYMBOL(init_cdrom_command);
3415EXPORT_SYMBOL(cdrom_get_media_event);
3416
3417#ifdef CONFIG_SYSCTL
3418
3419#define CDROM_STR_SIZE 1000
3420
3421static struct cdrom_sysctl_settings {
3422 char info[CDROM_STR_SIZE]; /* general info */
3423 int autoclose; /* close tray upon mount, etc */
3424 int autoeject; /* eject on umount */
3425 int debug; /* turn on debugging messages */
3426 int lock; /* lock the door on device open */
3427 int check; /* check media type */
3428} cdrom_sysctl_settings;
3429
Dave Young554988d2007-06-19 09:14:26 +02003430enum cdrom_print_option {
3431 CTL_NAME,
3432 CTL_SPEED,
3433 CTL_SLOTS,
3434 CTL_CAPABILITY
3435};
3436
3437static int cdrom_print_info(const char *header, int val, char *info,
3438 int *pos, enum cdrom_print_option option)
3439{
3440 const int max_size = sizeof(cdrom_sysctl_settings.info);
3441 struct cdrom_device_info *cdi;
3442 int ret;
3443
3444 ret = scnprintf(info + *pos, max_size - *pos, header);
3445 if (!ret)
3446 return 1;
3447
3448 *pos += ret;
3449
Akinobu Mita7fd097d2008-03-26 12:09:02 +01003450 list_for_each_entry(cdi, &cdrom_list, list) {
Dave Young554988d2007-06-19 09:14:26 +02003451 switch (option) {
3452 case CTL_NAME:
3453 ret = scnprintf(info + *pos, max_size - *pos,
3454 "\t%s", cdi->name);
3455 break;
3456 case CTL_SPEED:
3457 ret = scnprintf(info + *pos, max_size - *pos,
3458 "\t%d", cdi->speed);
3459 break;
3460 case CTL_SLOTS:
3461 ret = scnprintf(info + *pos, max_size - *pos,
3462 "\t%d", cdi->capacity);
3463 break;
3464 case CTL_CAPABILITY:
3465 ret = scnprintf(info + *pos, max_size - *pos,
3466 "\t%d", CDROM_CAN(val) != 0);
3467 break;
3468 default:
Joe Perchese597cd02010-07-01 08:24:32 +02003469 pr_info("invalid option%d\n", option);
Dave Young554988d2007-06-19 09:14:26 +02003470 return 1;
3471 }
3472 if (!ret)
3473 return 1;
3474 *pos += ret;
3475 }
3476
3477 return 0;
3478}
3479
Joe Perches90a3b892014-06-06 14:37:57 -07003480static int cdrom_sysctl_info(struct ctl_table *ctl, int write,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003481 void __user *buffer, size_t *lenp, loff_t *ppos)
3482{
Dave Young554988d2007-06-19 09:14:26 +02003483 int pos;
Linus Torvalds1da177e2005-04-16 15:20:36 -07003484 char *info = cdrom_sysctl_settings.info;
Dave Young554988d2007-06-19 09:14:26 +02003485 const int max_size = sizeof(cdrom_sysctl_settings.info);
Linus Torvalds1da177e2005-04-16 15:20:36 -07003486
3487 if (!*lenp || (*ppos && !write)) {
3488 *lenp = 0;
3489 return 0;
3490 }
3491
Dave Young554988d2007-06-19 09:14:26 +02003492 mutex_lock(&cdrom_mutex);
3493
Linus Torvalds1da177e2005-04-16 15:20:36 -07003494 pos = sprintf(info, "CD-ROM information, " VERSION "\n");
3495
Dave Young554988d2007-06-19 09:14:26 +02003496 if (cdrom_print_info("\ndrive name:\t", 0, info, &pos, CTL_NAME))
3497 goto done;
3498 if (cdrom_print_info("\ndrive speed:\t", 0, info, &pos, CTL_SPEED))
3499 goto done;
3500 if (cdrom_print_info("\ndrive # of slots:", 0, info, &pos, CTL_SLOTS))
3501 goto done;
3502 if (cdrom_print_info("\nCan close tray:\t",
3503 CDC_CLOSE_TRAY, info, &pos, CTL_CAPABILITY))
3504 goto done;
3505 if (cdrom_print_info("\nCan open tray:\t",
3506 CDC_OPEN_TRAY, info, &pos, CTL_CAPABILITY))
3507 goto done;
3508 if (cdrom_print_info("\nCan lock tray:\t",
3509 CDC_LOCK, info, &pos, CTL_CAPABILITY))
3510 goto done;
3511 if (cdrom_print_info("\nCan change speed:",
3512 CDC_SELECT_SPEED, info, &pos, CTL_CAPABILITY))
3513 goto done;
3514 if (cdrom_print_info("\nCan select disk:",
3515 CDC_SELECT_DISC, info, &pos, CTL_CAPABILITY))
3516 goto done;
3517 if (cdrom_print_info("\nCan read multisession:",
3518 CDC_MULTI_SESSION, info, &pos, CTL_CAPABILITY))
3519 goto done;
3520 if (cdrom_print_info("\nCan read MCN:\t",
3521 CDC_MCN, info, &pos, CTL_CAPABILITY))
3522 goto done;
3523 if (cdrom_print_info("\nReports media changed:",
3524 CDC_MEDIA_CHANGED, info, &pos, CTL_CAPABILITY))
3525 goto done;
3526 if (cdrom_print_info("\nCan play audio:\t",
3527 CDC_PLAY_AUDIO, info, &pos, CTL_CAPABILITY))
3528 goto done;
3529 if (cdrom_print_info("\nCan write CD-R:\t",
3530 CDC_CD_R, info, &pos, CTL_CAPABILITY))
3531 goto done;
3532 if (cdrom_print_info("\nCan write CD-RW:",
3533 CDC_CD_RW, info, &pos, CTL_CAPABILITY))
3534 goto done;
3535 if (cdrom_print_info("\nCan read DVD:\t",
3536 CDC_DVD, info, &pos, CTL_CAPABILITY))
3537 goto done;
3538 if (cdrom_print_info("\nCan write DVD-R:",
3539 CDC_DVD_R, info, &pos, CTL_CAPABILITY))
3540 goto done;
3541 if (cdrom_print_info("\nCan write DVD-RAM:",
3542 CDC_DVD_RAM, info, &pos, CTL_CAPABILITY))
3543 goto done;
3544 if (cdrom_print_info("\nCan read MRW:\t",
3545 CDC_MRW, info, &pos, CTL_CAPABILITY))
3546 goto done;
3547 if (cdrom_print_info("\nCan write MRW:\t",
3548 CDC_MRW_W, info, &pos, CTL_CAPABILITY))
3549 goto done;
3550 if (cdrom_print_info("\nCan write RAM:\t",
3551 CDC_RAM, info, &pos, CTL_CAPABILITY))
3552 goto done;
3553 if (!scnprintf(info + pos, max_size - pos, "\n\n"))
3554 goto done;
3555doit:
3556 mutex_unlock(&cdrom_mutex);
Alexey Dobriyan8d65af72009-09-23 15:57:19 -07003557 return proc_dostring(ctl, write, buffer, lenp, ppos);
Dave Young554988d2007-06-19 09:14:26 +02003558done:
Joe Perchese597cd02010-07-01 08:24:32 +02003559 pr_info("info buffer too small\n");
Dave Young554988d2007-06-19 09:14:26 +02003560 goto doit;
Linus Torvalds1da177e2005-04-16 15:20:36 -07003561}
3562
3563/* Unfortunately, per device settings are not implemented through
3564 procfs/sysctl yet. When they are, this will naturally disappear. For now
3565 just update all drives. Later this will become the template on which
3566 new registered drives will be based. */
3567static void cdrom_update_settings(void)
3568{
3569 struct cdrom_device_info *cdi;
3570
Akinobu Mita032d8d92008-03-26 12:09:01 +01003571 mutex_lock(&cdrom_mutex);
Akinobu Mita7fd097d2008-03-26 12:09:02 +01003572 list_for_each_entry(cdi, &cdrom_list, list) {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003573 if (autoclose && CDROM_CAN(CDC_CLOSE_TRAY))
3574 cdi->options |= CDO_AUTO_CLOSE;
3575 else if (!autoclose)
3576 cdi->options &= ~CDO_AUTO_CLOSE;
3577 if (autoeject && CDROM_CAN(CDC_OPEN_TRAY))
3578 cdi->options |= CDO_AUTO_EJECT;
3579 else if (!autoeject)
3580 cdi->options &= ~CDO_AUTO_EJECT;
3581 if (lockdoor && CDROM_CAN(CDC_LOCK))
3582 cdi->options |= CDO_LOCK;
3583 else if (!lockdoor)
3584 cdi->options &= ~CDO_LOCK;
3585 if (check_media_type)
3586 cdi->options |= CDO_CHECK_TYPE;
3587 else
3588 cdi->options &= ~CDO_CHECK_TYPE;
3589 }
Akinobu Mita032d8d92008-03-26 12:09:01 +01003590 mutex_unlock(&cdrom_mutex);
Linus Torvalds1da177e2005-04-16 15:20:36 -07003591}
3592
Joe Perches90a3b892014-06-06 14:37:57 -07003593static int cdrom_sysctl_handler(struct ctl_table *ctl, int write,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003594 void __user *buffer, size_t *lenp, loff_t *ppos)
3595{
Linus Torvalds1da177e2005-04-16 15:20:36 -07003596 int ret;
3597
Alexey Dobriyan8d65af72009-09-23 15:57:19 -07003598 ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
Linus Torvalds1da177e2005-04-16 15:20:36 -07003599
Eric W. Biederman06489b42007-10-18 03:05:28 -07003600 if (write) {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003601
3602 /* we only care for 1 or 0. */
Eric W. Biederman06489b42007-10-18 03:05:28 -07003603 autoclose = !!cdrom_sysctl_settings.autoclose;
3604 autoeject = !!cdrom_sysctl_settings.autoeject;
3605 debug = !!cdrom_sysctl_settings.debug;
3606 lockdoor = !!cdrom_sysctl_settings.lock;
3607 check_media_type = !!cdrom_sysctl_settings.check;
Linus Torvalds1da177e2005-04-16 15:20:36 -07003608
Linus Torvalds1da177e2005-04-16 15:20:36 -07003609 /* update the option flags according to the changes. we
3610 don't have per device options through sysctl yet,
3611 but we will have and then this will disappear. */
3612 cdrom_update_settings();
3613 }
3614
3615 return ret;
3616}
3617
3618/* Place files in /proc/sys/dev/cdrom */
Joe Perches90a3b892014-06-06 14:37:57 -07003619static struct ctl_table cdrom_table[] = {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003620 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003621 .procname = "info",
3622 .data = &cdrom_sysctl_settings.info,
3623 .maxlen = CDROM_STR_SIZE,
3624 .mode = 0444,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003625 .proc_handler = cdrom_sysctl_info,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003626 },
3627 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003628 .procname = "autoclose",
3629 .data = &cdrom_sysctl_settings.autoclose,
3630 .maxlen = sizeof(int),
3631 .mode = 0644,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003632 .proc_handler = cdrom_sysctl_handler,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003633 },
3634 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003635 .procname = "autoeject",
3636 .data = &cdrom_sysctl_settings.autoeject,
3637 .maxlen = sizeof(int),
3638 .mode = 0644,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003639 .proc_handler = cdrom_sysctl_handler,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003640 },
3641 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003642 .procname = "debug",
3643 .data = &cdrom_sysctl_settings.debug,
3644 .maxlen = sizeof(int),
3645 .mode = 0644,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003646 .proc_handler = cdrom_sysctl_handler,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003647 },
3648 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003649 .procname = "lock",
3650 .data = &cdrom_sysctl_settings.lock,
3651 .maxlen = sizeof(int),
3652 .mode = 0644,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003653 .proc_handler = cdrom_sysctl_handler,
Linus Torvalds1da177e2005-04-16 15:20:36 -07003654 },
3655 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003656 .procname = "check_media",
3657 .data = &cdrom_sysctl_settings.check,
3658 .maxlen = sizeof(int),
3659 .mode = 0644,
Eric W. Biederman6d456112009-11-16 03:11:48 -08003660 .proc_handler = cdrom_sysctl_handler
Linus Torvalds1da177e2005-04-16 15:20:36 -07003661 },
Eric W. Biederman894d2492009-11-05 14:34:02 -08003662 { }
Linus Torvalds1da177e2005-04-16 15:20:36 -07003663};
3664
Joe Perches90a3b892014-06-06 14:37:57 -07003665static struct ctl_table cdrom_cdrom_table[] = {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003666 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003667 .procname = "cdrom",
3668 .maxlen = 0,
3669 .mode = 0555,
3670 .child = cdrom_table,
3671 },
Eric W. Biederman894d2492009-11-05 14:34:02 -08003672 { }
Linus Torvalds1da177e2005-04-16 15:20:36 -07003673};
3674
3675/* Make sure that /proc/sys/dev is there */
Joe Perches90a3b892014-06-06 14:37:57 -07003676static struct ctl_table cdrom_root_table[] = {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003677 {
Linus Torvalds1da177e2005-04-16 15:20:36 -07003678 .procname = "dev",
3679 .maxlen = 0,
3680 .mode = 0555,
3681 .child = cdrom_cdrom_table,
3682 },
Eric W. Biederman894d2492009-11-05 14:34:02 -08003683 { }
Linus Torvalds1da177e2005-04-16 15:20:36 -07003684};
3685static struct ctl_table_header *cdrom_sysctl_header;
3686
3687static void cdrom_sysctl_register(void)
3688{
3689 static int initialized;
3690
3691 if (initialized == 1)
3692 return;
3693
Eric W. Biederman0b4d4142007-02-14 00:34:09 -08003694 cdrom_sysctl_header = register_sysctl_table(cdrom_root_table);
Linus Torvalds1da177e2005-04-16 15:20:36 -07003695
3696 /* set the defaults */
3697 cdrom_sysctl_settings.autoclose = autoclose;
3698 cdrom_sysctl_settings.autoeject = autoeject;
3699 cdrom_sysctl_settings.debug = debug;
3700 cdrom_sysctl_settings.lock = lockdoor;
3701 cdrom_sysctl_settings.check = check_media_type;
3702
3703 initialized = 1;
3704}
3705
3706static void cdrom_sysctl_unregister(void)
3707{
3708 if (cdrom_sysctl_header)
3709 unregister_sysctl_table(cdrom_sysctl_header);
3710}
3711
Akinobu Mita17672cf2008-03-26 12:08:59 +01003712#else /* CONFIG_SYSCTL */
3713
3714static void cdrom_sysctl_register(void)
3715{
3716}
3717
3718static void cdrom_sysctl_unregister(void)
3719{
3720}
3721
Linus Torvalds1da177e2005-04-16 15:20:36 -07003722#endif /* CONFIG_SYSCTL */
3723
3724static int __init cdrom_init(void)
3725{
Linus Torvalds1da177e2005-04-16 15:20:36 -07003726 cdrom_sysctl_register();
Akinobu Mita17672cf2008-03-26 12:08:59 +01003727
Linus Torvalds1da177e2005-04-16 15:20:36 -07003728 return 0;
3729}
3730
3731static void __exit cdrom_exit(void)
3732{
Joe Perchese597cd02010-07-01 08:24:32 +02003733 pr_info("Uniform CD-ROM driver unloaded\n");
Linus Torvalds1da177e2005-04-16 15:20:36 -07003734 cdrom_sysctl_unregister();
Linus Torvalds1da177e2005-04-16 15:20:36 -07003735}
3736
3737module_init(cdrom_init);
3738module_exit(cdrom_exit);
3739MODULE_LICENSE("GPL");