xref: /linux/drivers/cdrom/cdrom.c (revision 394d83c17fac2b7bcf05cb99d1e945135767bb6b)
1 /* linux/drivers/cdrom/cdrom.c
2    Copyright (c) 1996, 1997 David A. van Leeuwen.
3    Copyright (c) 1997, 1998 Erik Andersen <andersee@debian.org>
4    Copyright (c) 1998, 1999 Jens Axboe <axboe@image.dk>
5 
6    May be copied or modified under the terms of the GNU General Public
7    License.  See linux/COPYING for more information.
8 
9    Uniform CD-ROM driver for Linux.
10    See Documentation/cdrom/cdrom-standard.tex for usage information.
11 
12    The routines in the file provide a uniform interface between the
13    software that uses CD-ROMs and the various low-level drivers that
14    actually talk to the hardware. Suggestions are welcome.
15    Patches that work are more welcome though.  ;-)
16 
17  To Do List:
18  ----------------------------------
19 
20  -- Modify sysctl/proc interface. I plan on having one directory per
21  drive, with entries for outputing general drive information, and sysctl
22  based tunable parameters such as whether the tray should auto-close for
23  that drive. Suggestions (or patches) for this welcome!
24 
25 
26  Revision History
27  ----------------------------------
28  1.00  Date Unknown -- David van Leeuwen <david@tm.tno.nl>
29  -- Initial version by David A. van Leeuwen. I don't have a detailed
30   changelog for the 1.x series, David?
31 
32 2.00  Dec  2, 1997 -- Erik Andersen <andersee@debian.org>
33   -- New maintainer! As David A. van Leeuwen has been too busy to activly
34   maintain and improve this driver, I am now carrying on the torch. If
35   you have a problem with this driver, please feel free to contact me.
36 
37   -- Added (rudimentary) sysctl interface. I realize this is really weak
38   right now, and is _very_ badly implemented. It will be improved...
39 
40   -- Modified CDROM_DISC_STATUS so that it is now incorporated into
41   the Uniform CD-ROM driver via the cdrom_count_tracks function.
42   The cdrom_count_tracks function helps resolve some of the false
43   assumptions of the CDROM_DISC_STATUS ioctl, and is also used to check
44   for the correct media type when mounting or playing audio from a CD.
45 
46   -- Remove the calls to verify_area and only use the copy_from_user and
47   copy_to_user stuff, since these calls now provide their own memory
48   checking with the 2.1.x kernels.
49 
50   -- Major update to return codes so that errors from low-level drivers
51   are passed on through (thanks to Gerd Knorr for pointing out this
52   problem).
53 
54   -- Made it so if a function isn't implemented in a low-level driver,
55   ENOSYS is now returned instead of EINVAL.
56 
57   -- Simplified some complex logic so that the source code is easier to read.
58 
59   -- Other stuff I probably forgot to mention (lots of changes).
60 
61 2.01 to 2.11 Dec 1997-Jan 1998
62   -- TO-DO!  Write changelogs for 2.01 to 2.12.
63 
64 2.12  Jan  24, 1998 -- Erik Andersen <andersee@debian.org>
65   -- Fixed a bug in the IOCTL_IN and IOCTL_OUT macros.  It turns out that
66   copy_*_user does not return EFAULT on error, but instead returns the number
67   of bytes not copied.  I was returning whatever non-zero stuff came back from
68   the copy_*_user functions directly, which would result in strange errors.
69 
70 2.13  July 17, 1998 -- Erik Andersen <andersee@debian.org>
71   -- Fixed a bug in CDROM_SELECT_SPEED where you couldn't lower the speed
72   of the drive.  Thanks to Tobias Ringstr|m <tori@prosolvia.se> for pointing
73   this out and providing a simple fix.
74   -- Fixed the procfs-unload-module bug with the fill_inode procfs callback.
75   thanks to Andrea Arcangeli
76   -- Fixed it so that the /proc entry now also shows up when cdrom is
77   compiled into the kernel.  Before it only worked when loaded as a module.
78 
79   2.14 August 17, 1998 -- Erik Andersen <andersee@debian.org>
80   -- Fixed a bug in cdrom_media_changed and handling of reporting that
81   the media had changed for devices that _don't_ implement media_changed.
82   Thanks to Grant R. Guenther <grant@torque.net> for spotting this bug.
83   -- Made a few things more pedanticly correct.
84 
85 2.50 Oct 19, 1998 - Jens Axboe <axboe@image.dk>
86   -- New maintainers! Erik was too busy to continue the work on the driver,
87   so now Chris Zwilling <chris@cloudnet.com> and Jens Axboe <axboe@image.dk>
88   will do their best to follow in his footsteps
89 
90   2.51 Dec 20, 1998 - Jens Axboe <axboe@image.dk>
91   -- Check if drive is capable of doing what we ask before blindly changing
92   cdi->options in various ioctl.
93   -- Added version to proc entry.
94 
95   2.52 Jan 16, 1999 - Jens Axboe <axboe@image.dk>
96   -- Fixed an error in open_for_data where we would sometimes not return
97   the correct error value. Thanks Huba Gaspar <huba@softcell.hu>.
98   -- Fixed module usage count - usage was based on /proc/sys/dev
99   instead of /proc/sys/dev/cdrom. This could lead to an oops when other
100   modules had entries in dev. Feb 02 - real bug was in sysctl.c where
101   dev would be removed even though it was used. cdrom.c just illuminated
102   that bug.
103 
104   2.53 Feb 22, 1999 - Jens Axboe <axboe@image.dk>
105   -- Fixup of several ioctl calls, in particular CDROM_SET_OPTIONS has
106   been "rewritten" because capabilities and options aren't in sync. They
107   should be...
108   -- Added CDROM_LOCKDOOR ioctl. Locks the door and keeps it that way.
109   -- Added CDROM_RESET ioctl.
110   -- Added CDROM_DEBUG ioctl. Enable debug messages on-the-fly.
111   -- Added CDROM_GET_CAPABILITY ioctl. This relieves userspace programs
112   from parsing /proc/sys/dev/cdrom/info.
113 
114   2.54 Mar 15, 1999 - Jens Axboe <axboe@image.dk>
115   -- Check capability mask from low level driver when counting tracks as
116   per suggestion from Corey J. Scotts <cstotts@blue.weeg.uiowa.edu>.
117 
118   2.55 Apr 25, 1999 - Jens Axboe <axboe@image.dk>
119   -- autoclose was mistakenly checked against CDC_OPEN_TRAY instead of
120   CDC_CLOSE_TRAY.
121   -- proc info didn't mask against capabilities mask.
122 
123   3.00 Aug 5, 1999 - Jens Axboe <axboe@image.dk>
124   -- Unified audio ioctl handling across CD-ROM drivers. A lot of the
125   code was duplicated before. Drives that support the generic packet
126   interface are now being fed packets from here instead.
127   -- First attempt at adding support for MMC2 commands - for DVD and
128   CD-R(W) drives. Only the DVD parts are in now - the interface used is
129   the same as for the audio ioctls.
130   -- ioctl cleanups. if a drive couldn't play audio, it didn't get
131   a change to perform device specific ioctls as well.
132   -- Defined CDROM_CAN(CDC_XXX) for checking the capabilities.
133   -- Put in sysctl files for autoclose, autoeject, check_media, debug,
134   and lock.
135   -- /proc/sys/dev/cdrom/info has been updated to also contain info about
136   CD-Rx and DVD capabilities.
137   -- Now default to checking media type.
138   -- CDROM_SEND_PACKET ioctl added. The infrastructure was in place for
139   doing this anyway, with the generic_packet addition.
140 
141   3.01 Aug 6, 1999 - Jens Axboe <axboe@image.dk>
142   -- Fix up the sysctl handling so that the option flags get set
143   correctly.
144   -- Fix up ioctl handling so the device specific ones actually get
145   called :).
146 
147   3.02 Aug 8, 1999 - Jens Axboe <axboe@image.dk>
148   -- Fixed volume control on SCSI drives (or others with longer audio
149   page).
150   -- Fixed a couple of DVD minors. Thanks to Andrew T. Veliath
151   <andrewtv@usa.net> for telling me and for having defined the various
152   DVD structures and ioctls in the first place! He designed the original
153   DVD patches for ide-cd and while I rearranged and unified them, the
154   interface is still the same.
155 
156   3.03 Sep 1, 1999 - Jens Axboe <axboe@image.dk>
157   -- Moved the rest of the audio ioctls from the CD-ROM drivers here. Only
158   CDROMREADTOCENTRY and CDROMREADTOCHDR are left.
159   -- Moved the CDROMREADxxx ioctls in here.
160   -- Defined the cdrom_get_last_written and cdrom_get_next_block as ioctls
161   and exported functions.
162   -- Erik Andersen <andersen@xmission.com> modified all SCMD_ commands
163   to now read GPCMD_ for the new generic packet interface. All low level
164   drivers are updated as well.
165   -- Various other cleanups.
166 
167   3.04 Sep 12, 1999 - Jens Axboe <axboe@image.dk>
168   -- Fixed a couple of possible memory leaks (if an operation failed and
169   we didn't free the buffer before returning the error).
170   -- Integrated Uniform CD Changer handling from Richard Sharman
171   <rsharman@pobox.com>.
172   -- Defined CD_DVD and CD_CHANGER log levels.
173   -- Fixed the CDROMREADxxx ioctls.
174   -- CDROMPLAYTRKIND uses the GPCMD_PLAY_AUDIO_MSF command - too few
175   drives supported it. We lose the index part, however.
176   -- Small modifications to accommodate opens of /dev/hdc1, required
177   for ide-cd to handle multisession discs.
178   -- Export cdrom_mode_sense and cdrom_mode_select.
179   -- init_cdrom_command() for setting up a cgc command.
180 
181   3.05 Oct 24, 1999 - Jens Axboe <axboe@image.dk>
182   -- Changed the interface for CDROM_SEND_PACKET. Before it was virtually
183   impossible to send the drive data in a sensible way.
184   -- Lowered stack usage in mmc_ioctl(), dvd_read_disckey(), and
185   dvd_read_manufact.
186   -- Added setup of write mode for packet writing.
187   -- Fixed CDDA ripping with cdda2wav - accept much larger requests of
188   number of frames and split the reads in blocks of 8.
189 
190   3.06 Dec 13, 1999 - Jens Axboe <axboe@image.dk>
191   -- Added support for changing the region of DVD drives.
192   -- Added sense data to generic command.
193 
194   3.07 Feb 2, 2000 - Jens Axboe <axboe@suse.de>
195   -- Do same "read header length" trick in cdrom_get_disc_info() as
196   we do in cdrom_get_track_info() -- some drive don't obey specs and
197   fail if they can't supply the full Mt Fuji size table.
198   -- Deleted stuff related to setting up write modes. It has a different
199   home now.
200   -- Clear header length in mode_select unconditionally.
201   -- Removed the register_disk() that was added, not needed here.
202 
203   3.08 May 1, 2000 - Jens Axboe <axboe@suse.de>
204   -- Fix direction flag in setup_send_key and setup_report_key. This
205   gave some SCSI adapters problems.
206   -- Always return -EROFS for write opens
207   -- Convert to module_init/module_exit style init and remove some
208   of the #ifdef MODULE stuff
209   -- Fix several dvd errors - DVD_LU_SEND_ASF should pass agid,
210   DVD_HOST_SEND_RPC_STATE did not set buffer size in cdb, and
211   dvd_do_auth passed uninitialized data to drive because init_cdrom_command
212   did not clear a 0 sized buffer.
213 
214   3.09 May 12, 2000 - Jens Axboe <axboe@suse.de>
215   -- Fix Video-CD on SCSI drives that don't support READ_CD command. In
216   that case switch block size and issue plain READ_10 again, then switch
217   back.
218 
219   3.10 Jun 10, 2000 - Jens Axboe <axboe@suse.de>
220   -- Fix volume control on CD's - old SCSI-II drives now use their own
221   code, as doing MODE6 stuff in here is really not my intention.
222   -- Use READ_DISC_INFO for more reliable end-of-disc.
223 
224   3.11 Jun 12, 2000 - Jens Axboe <axboe@suse.de>
225   -- Fix bug in getting rpc phase 2 region info.
226   -- Reinstate "correct" CDROMPLAYTRKIND
227 
228    3.12 Oct 18, 2000 - Jens Axboe <axboe@suse.de>
229   -- Use quiet bit on packet commands not known to work
230 
231    3.20 Dec 17, 2003 - Jens Axboe <axboe@suse.de>
232   -- Various fixes and lots of cleanups not listed :-)
233   -- Locking fixes
234   -- Mt Rainier support
235   -- DVD-RAM write open fixes
236 
237   Nov 5 2001, Aug 8 2002. Modified by Andy Polyakov
238   <appro@fy.chalmers.se> to support MMC-3 compliant DVD+RW units.
239 
240   Modified by Nigel Kukard <nkukard@lbsd.net> - support DVD+RW
241   2.4.x patch by Andy Polyakov <appro@fy.chalmers.se>
242 
243 -------------------------------------------------------------------------*/
244 
245 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
246 
247 #define REVISION "Revision: 3.20"
248 #define VERSION "Id: cdrom.c 3.20 2003/12/17"
249 
250 /* I use an error-log mask to give fine grain control over the type of
251    messages dumped to the system logs.  The available masks include: */
252 #define CD_NOTHING      0x0
253 #define CD_WARNING	0x1
254 #define CD_REG_UNREG	0x2
255 #define CD_DO_IOCTL	0x4
256 #define CD_OPEN		0x8
257 #define CD_CLOSE	0x10
258 #define CD_COUNT_TRACKS 0x20
259 #define CD_CHANGER	0x40
260 #define CD_DVD		0x80
261 
262 /* Define this to remove _all_ the debugging messages */
263 /* #define ERRLOGMASK CD_NOTHING */
264 #define ERRLOGMASK CD_WARNING
265 /* #define ERRLOGMASK (CD_WARNING|CD_OPEN|CD_COUNT_TRACKS|CD_CLOSE) */
266 /* #define ERRLOGMASK (CD_WARNING|CD_REG_UNREG|CD_DO_IOCTL|CD_OPEN|CD_CLOSE|CD_COUNT_TRACKS) */
267 
268 #include <linux/module.h>
269 #include <linux/fs.h>
270 #include <linux/buffer_head.h>
271 #include <linux/major.h>
272 #include <linux/types.h>
273 #include <linux/errno.h>
274 #include <linux/kernel.h>
275 #include <linux/mm.h>
276 #include <linux/slab.h>
277 #include <linux/cdrom.h>
278 #include <linux/sysctl.h>
279 #include <linux/proc_fs.h>
280 #include <linux/blkpg.h>
281 #include <linux/init.h>
282 #include <linux/fcntl.h>
283 #include <linux/blkdev.h>
284 #include <linux/times.h>
285 
286 #include <asm/uaccess.h>
287 
288 /* used to tell the module to turn on full debugging messages */
289 static int debug;
290 /* used to keep tray locked at all times */
291 static int keeplocked;
292 /* default compatibility mode */
293 static int autoclose=1;
294 static int autoeject;
295 static int lockdoor = 1;
296 /* will we ever get to use this... sigh. */
297 static int check_media_type;
298 /* automatically restart mrw format */
299 static int mrw_format_restart = 1;
300 module_param(debug, bool, 0);
301 module_param(autoclose, bool, 0);
302 module_param(autoeject, bool, 0);
303 module_param(lockdoor, bool, 0);
304 module_param(check_media_type, bool, 0);
305 module_param(mrw_format_restart, bool, 0);
306 
307 static DEFINE_MUTEX(cdrom_mutex);
308 
309 static const char *mrw_format_status[] = {
310 	"not mrw",
311 	"bgformat inactive",
312 	"bgformat active",
313 	"mrw complete",
314 };
315 
316 static const char *mrw_address_space[] = { "DMA", "GAA" };
317 
318 #if (ERRLOGMASK!=CD_NOTHING)
319 #define cdinfo(type, fmt, args...)			\
320 do {							\
321 	if ((ERRLOGMASK & type) || debug == 1)		\
322 		pr_info(fmt, ##args);			\
323 } while (0)
324 #else
325 #define cdinfo(type, fmt, args...)			\
326 do {							\
327 	if (0 && (ERRLOGMASK & type) || debug == 1)	\
328 		pr_info(fmt, ##args);			\
329 } while (0)
330 #endif
331 
332 /* These are used to simplify getting data in from and back to user land */
333 #define IOCTL_IN(arg, type, in)					\
334 	if (copy_from_user(&(in), (type __user *) (arg), sizeof (in)))	\
335 		return -EFAULT;
336 
337 #define IOCTL_OUT(arg, type, out) \
338 	if (copy_to_user((type __user *) (arg), &(out), sizeof (out)))	\
339 		return -EFAULT;
340 
341 /* The (cdo->capability & ~cdi->mask & CDC_XXX) construct was used in
342    a lot of places. This macro makes the code more clear. */
343 #define CDROM_CAN(type) (cdi->ops->capability & ~cdi->mask & (type))
344 
345 /* used in the audio ioctls */
346 #define CHECKAUDIO if ((ret=check_for_audio_disc(cdi, cdo))) return ret
347 
348 /*
349  * Another popular OS uses 7 seconds as the hard timeout for default
350  * commands, so it is a good choice for us as well.
351  */
352 #define CDROM_DEF_TIMEOUT	(7 * HZ)
353 
354 /* Not-exported routines. */
355 static int open_for_data(struct cdrom_device_info * cdi);
356 static int check_for_audio_disc(struct cdrom_device_info * cdi,
357 			 struct cdrom_device_ops * cdo);
358 static void sanitize_format(union cdrom_addr *addr,
359 		u_char * curr, u_char requested);
360 static int mmc_ioctl(struct cdrom_device_info *cdi, unsigned int cmd,
361 		     unsigned long arg);
362 
363 int cdrom_get_last_written(struct cdrom_device_info *, long *);
364 static int cdrom_get_next_writable(struct cdrom_device_info *, long *);
365 static void cdrom_count_tracks(struct cdrom_device_info *, tracktype*);
366 
367 static int cdrom_mrw_exit(struct cdrom_device_info *cdi);
368 
369 static int cdrom_get_disc_info(struct cdrom_device_info *cdi, disc_information *di);
370 
371 static void cdrom_sysctl_register(void);
372 
373 static LIST_HEAD(cdrom_list);
374 
375 static int cdrom_dummy_generic_packet(struct cdrom_device_info *cdi,
376 				      struct packet_command *cgc)
377 {
378 	if (cgc->sense) {
379 		cgc->sense->sense_key = 0x05;
380 		cgc->sense->asc = 0x20;
381 		cgc->sense->ascq = 0x00;
382 	}
383 
384 	cgc->stat = -EIO;
385 	return -EIO;
386 }
387 
388 /* This macro makes sure we don't have to check on cdrom_device_ops
389  * existence in the run-time routines below. Change_capability is a
390  * hack to have the capability flags defined const, while we can still
391  * change it here without gcc complaining at every line.
392  */
393 #define ENSURE(call, bits) if (cdo->call == NULL) *change_capability &= ~(bits)
394 
395 int register_cdrom(struct cdrom_device_info *cdi)
396 {
397 	static char banner_printed;
398         struct cdrom_device_ops *cdo = cdi->ops;
399         int *change_capability = (int *)&cdo->capability; /* hack */
400 
401 	cdinfo(CD_OPEN, "entering register_cdrom\n");
402 
403 	if (cdo->open == NULL || cdo->release == NULL)
404 		return -EINVAL;
405 	if (!banner_printed) {
406 		pr_info("Uniform CD-ROM driver " REVISION "\n");
407 		banner_printed = 1;
408 		cdrom_sysctl_register();
409 	}
410 
411 	ENSURE(drive_status, CDC_DRIVE_STATUS );
412 	ENSURE(media_changed, CDC_MEDIA_CHANGED);
413 	ENSURE(tray_move, CDC_CLOSE_TRAY | CDC_OPEN_TRAY);
414 	ENSURE(lock_door, CDC_LOCK);
415 	ENSURE(select_speed, CDC_SELECT_SPEED);
416 	ENSURE(get_last_session, CDC_MULTI_SESSION);
417 	ENSURE(get_mcn, CDC_MCN);
418 	ENSURE(reset, CDC_RESET);
419 	ENSURE(generic_packet, CDC_GENERIC_PACKET);
420 	cdi->mc_flags = 0;
421 	cdo->n_minors = 0;
422         cdi->options = CDO_USE_FFLAGS;
423 
424 	if (autoclose==1 && CDROM_CAN(CDC_CLOSE_TRAY))
425 		cdi->options |= (int) CDO_AUTO_CLOSE;
426 	if (autoeject==1 && CDROM_CAN(CDC_OPEN_TRAY))
427 		cdi->options |= (int) CDO_AUTO_EJECT;
428 	if (lockdoor==1)
429 		cdi->options |= (int) CDO_LOCK;
430 	if (check_media_type==1)
431 		cdi->options |= (int) CDO_CHECK_TYPE;
432 
433 	if (CDROM_CAN(CDC_MRW_W))
434 		cdi->exit = cdrom_mrw_exit;
435 
436 	if (cdi->disk)
437 		cdi->cdda_method = CDDA_BPC_FULL;
438 	else
439 		cdi->cdda_method = CDDA_OLD;
440 
441 	if (!cdo->generic_packet)
442 		cdo->generic_packet = cdrom_dummy_generic_packet;
443 
444 	cdinfo(CD_REG_UNREG, "drive \"/dev/%s\" registered\n", cdi->name);
445 	mutex_lock(&cdrom_mutex);
446 	list_add(&cdi->list, &cdrom_list);
447 	mutex_unlock(&cdrom_mutex);
448 	return 0;
449 }
450 #undef ENSURE
451 
452 void unregister_cdrom(struct cdrom_device_info *cdi)
453 {
454 	cdinfo(CD_OPEN, "entering unregister_cdrom\n");
455 
456 	mutex_lock(&cdrom_mutex);
457 	list_del(&cdi->list);
458 	mutex_unlock(&cdrom_mutex);
459 
460 	if (cdi->exit)
461 		cdi->exit(cdi);
462 
463 	cdi->ops->n_minors--;
464 	cdinfo(CD_REG_UNREG, "drive \"/dev/%s\" unregistered\n", cdi->name);
465 }
466 
467 int cdrom_get_media_event(struct cdrom_device_info *cdi,
468 			  struct media_event_desc *med)
469 {
470 	struct packet_command cgc;
471 	unsigned char buffer[8];
472 	struct event_header *eh = (struct event_header *) buffer;
473 
474 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
475 	cgc.cmd[0] = GPCMD_GET_EVENT_STATUS_NOTIFICATION;
476 	cgc.cmd[1] = 1;		/* IMMED */
477 	cgc.cmd[4] = 1 << 4;	/* media event */
478 	cgc.cmd[8] = sizeof(buffer);
479 	cgc.quiet = 1;
480 
481 	if (cdi->ops->generic_packet(cdi, &cgc))
482 		return 1;
483 
484 	if (be16_to_cpu(eh->data_len) < sizeof(*med))
485 		return 1;
486 
487 	if (eh->nea || eh->notification_class != 0x4)
488 		return 1;
489 
490 	memcpy(med, &buffer[sizeof(*eh)], sizeof(*med));
491 	return 0;
492 }
493 
494 /*
495  * the first prototypes used 0x2c as the page code for the mrw mode page,
496  * subsequently this was changed to 0x03. probe the one used by this drive
497  */
498 static int cdrom_mrw_probe_pc(struct cdrom_device_info *cdi)
499 {
500 	struct packet_command cgc;
501 	char buffer[16];
502 
503 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
504 
505 	cgc.timeout = HZ;
506 	cgc.quiet = 1;
507 
508 	if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC, 0)) {
509 		cdi->mrw_mode_page = MRW_MODE_PC;
510 		return 0;
511 	} else if (!cdrom_mode_sense(cdi, &cgc, MRW_MODE_PC_PRE1, 0)) {
512 		cdi->mrw_mode_page = MRW_MODE_PC_PRE1;
513 		return 0;
514 	}
515 
516 	return 1;
517 }
518 
519 static int cdrom_is_mrw(struct cdrom_device_info *cdi, int *write)
520 {
521 	struct packet_command cgc;
522 	struct mrw_feature_desc *mfd;
523 	unsigned char buffer[16];
524 	int ret;
525 
526 	*write = 0;
527 
528 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
529 
530 	cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
531 	cgc.cmd[3] = CDF_MRW;
532 	cgc.cmd[8] = sizeof(buffer);
533 	cgc.quiet = 1;
534 
535 	if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
536 		return ret;
537 
538 	mfd = (struct mrw_feature_desc *)&buffer[sizeof(struct feature_header)];
539 	if (be16_to_cpu(mfd->feature_code) != CDF_MRW)
540 		return 1;
541 	*write = mfd->write;
542 
543 	if ((ret = cdrom_mrw_probe_pc(cdi))) {
544 		*write = 0;
545 		return ret;
546 	}
547 
548 	return 0;
549 }
550 
551 static int cdrom_mrw_bgformat(struct cdrom_device_info *cdi, int cont)
552 {
553 	struct packet_command cgc;
554 	unsigned char buffer[12];
555 	int ret;
556 
557 	pr_info("%sstarting format\n", cont ? "Re" : "");
558 
559 	/*
560 	 * FmtData bit set (bit 4), format type is 1
561 	 */
562 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_WRITE);
563 	cgc.cmd[0] = GPCMD_FORMAT_UNIT;
564 	cgc.cmd[1] = (1 << 4) | 1;
565 
566 	cgc.timeout = 5 * 60 * HZ;
567 
568 	/*
569 	 * 4 byte format list header, 8 byte format list descriptor
570 	 */
571 	buffer[1] = 1 << 1;
572 	buffer[3] = 8;
573 
574 	/*
575 	 * nr_blocks field
576 	 */
577 	buffer[4] = 0xff;
578 	buffer[5] = 0xff;
579 	buffer[6] = 0xff;
580 	buffer[7] = 0xff;
581 
582 	buffer[8] = 0x24 << 2;
583 	buffer[11] = cont;
584 
585 	ret = cdi->ops->generic_packet(cdi, &cgc);
586 	if (ret)
587 		pr_info("bgformat failed\n");
588 
589 	return ret;
590 }
591 
592 static int cdrom_mrw_bgformat_susp(struct cdrom_device_info *cdi, int immed)
593 {
594 	struct packet_command cgc;
595 
596 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
597 	cgc.cmd[0] = GPCMD_CLOSE_TRACK;
598 
599 	/*
600 	 * Session = 1, Track = 0
601 	 */
602 	cgc.cmd[1] = !!immed;
603 	cgc.cmd[2] = 1 << 1;
604 
605 	cgc.timeout = 5 * 60 * HZ;
606 
607 	return cdi->ops->generic_packet(cdi, &cgc);
608 }
609 
610 static int cdrom_flush_cache(struct cdrom_device_info *cdi)
611 {
612 	struct packet_command cgc;
613 
614 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
615 	cgc.cmd[0] = GPCMD_FLUSH_CACHE;
616 
617 	cgc.timeout = 5 * 60 * HZ;
618 
619 	return cdi->ops->generic_packet(cdi, &cgc);
620 }
621 
622 static int cdrom_mrw_exit(struct cdrom_device_info *cdi)
623 {
624 	disc_information di;
625 	int ret;
626 
627 	ret = cdrom_get_disc_info(cdi, &di);
628 	if (ret < 0 || ret < (int)offsetof(typeof(di),disc_type))
629 		return 1;
630 
631 	ret = 0;
632 	if (di.mrw_status == CDM_MRW_BGFORMAT_ACTIVE) {
633 		pr_info("issuing MRW background format suspend\n");
634 		ret = cdrom_mrw_bgformat_susp(cdi, 0);
635 	}
636 
637 	if (!ret && cdi->media_written)
638 		ret = cdrom_flush_cache(cdi);
639 
640 	return ret;
641 }
642 
643 static int cdrom_mrw_set_lba_space(struct cdrom_device_info *cdi, int space)
644 {
645 	struct packet_command cgc;
646 	struct mode_page_header *mph;
647 	char buffer[16];
648 	int ret, offset, size;
649 
650 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
651 
652 	cgc.buffer = buffer;
653 	cgc.buflen = sizeof(buffer);
654 
655 	if ((ret = cdrom_mode_sense(cdi, &cgc, cdi->mrw_mode_page, 0)))
656 		return ret;
657 
658 	mph = (struct mode_page_header *) buffer;
659 	offset = be16_to_cpu(mph->desc_length);
660 	size = be16_to_cpu(mph->mode_data_length) + 2;
661 
662 	buffer[offset + 3] = space;
663 	cgc.buflen = size;
664 
665 	if ((ret = cdrom_mode_select(cdi, &cgc)))
666 		return ret;
667 
668 	pr_info("%s: mrw address space %s selected\n",
669 		cdi->name, mrw_address_space[space]);
670 	return 0;
671 }
672 
673 static int cdrom_get_random_writable(struct cdrom_device_info *cdi,
674 			      struct rwrt_feature_desc *rfd)
675 {
676 	struct packet_command cgc;
677 	char buffer[24];
678 	int ret;
679 
680 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
681 
682 	cgc.cmd[0] = GPCMD_GET_CONFIGURATION;	/* often 0x46 */
683 	cgc.cmd[3] = CDF_RWRT;			/* often 0x0020 */
684 	cgc.cmd[8] = sizeof(buffer);		/* often 0x18 */
685 	cgc.quiet = 1;
686 
687 	if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
688 		return ret;
689 
690 	memcpy(rfd, &buffer[sizeof(struct feature_header)], sizeof (*rfd));
691 	return 0;
692 }
693 
694 static int cdrom_has_defect_mgt(struct cdrom_device_info *cdi)
695 {
696 	struct packet_command cgc;
697 	char buffer[16];
698 	__be16 *feature_code;
699 	int ret;
700 
701 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
702 
703 	cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
704 	cgc.cmd[3] = CDF_HWDM;
705 	cgc.cmd[8] = sizeof(buffer);
706 	cgc.quiet = 1;
707 
708 	if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
709 		return ret;
710 
711 	feature_code = (__be16 *) &buffer[sizeof(struct feature_header)];
712 	if (be16_to_cpu(*feature_code) == CDF_HWDM)
713 		return 0;
714 
715 	return 1;
716 }
717 
718 
719 static int cdrom_is_random_writable(struct cdrom_device_info *cdi, int *write)
720 {
721 	struct rwrt_feature_desc rfd;
722 	int ret;
723 
724 	*write = 0;
725 
726 	if ((ret = cdrom_get_random_writable(cdi, &rfd)))
727 		return ret;
728 
729 	if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
730 		*write = 1;
731 
732 	return 0;
733 }
734 
735 static int cdrom_media_erasable(struct cdrom_device_info *cdi)
736 {
737 	disc_information di;
738 	int ret;
739 
740 	ret = cdrom_get_disc_info(cdi, &di);
741 	if (ret < 0 || ret < offsetof(typeof(di), n_first_track))
742 		return -1;
743 
744 	return di.erasable;
745 }
746 
747 /*
748  * FIXME: check RO bit
749  */
750 static int cdrom_dvdram_open_write(struct cdrom_device_info *cdi)
751 {
752 	int ret = cdrom_media_erasable(cdi);
753 
754 	/*
755 	 * allow writable open if media info read worked and media is
756 	 * erasable, _or_ if it fails since not all drives support it
757 	 */
758 	if (!ret)
759 		return 1;
760 
761 	return 0;
762 }
763 
764 static int cdrom_mrw_open_write(struct cdrom_device_info *cdi)
765 {
766 	disc_information di;
767 	int ret;
768 
769 	/*
770 	 * always reset to DMA lba space on open
771 	 */
772 	if (cdrom_mrw_set_lba_space(cdi, MRW_LBA_DMA)) {
773 		pr_err("failed setting lba address space\n");
774 		return 1;
775 	}
776 
777 	ret = cdrom_get_disc_info(cdi, &di);
778 	if (ret < 0 || ret < offsetof(typeof(di),disc_type))
779 		return 1;
780 
781 	if (!di.erasable)
782 		return 1;
783 
784 	/*
785 	 * mrw_status
786 	 * 0	-	not MRW formatted
787 	 * 1	-	MRW bgformat started, but not running or complete
788 	 * 2	-	MRW bgformat in progress
789 	 * 3	-	MRW formatting complete
790 	 */
791 	ret = 0;
792 	pr_info("open: mrw_status '%s'\n", mrw_format_status[di.mrw_status]);
793 	if (!di.mrw_status)
794 		ret = 1;
795 	else if (di.mrw_status == CDM_MRW_BGFORMAT_INACTIVE &&
796 			mrw_format_restart)
797 		ret = cdrom_mrw_bgformat(cdi, 1);
798 
799 	return ret;
800 }
801 
802 static int mo_open_write(struct cdrom_device_info *cdi)
803 {
804 	struct packet_command cgc;
805 	char buffer[255];
806 	int ret;
807 
808 	init_cdrom_command(&cgc, &buffer, 4, CGC_DATA_READ);
809 	cgc.quiet = 1;
810 
811 	/*
812 	 * obtain write protect information as per
813 	 * drivers/scsi/sd.c:sd_read_write_protect_flag
814 	 */
815 
816 	ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
817 	if (ret)
818 		ret = cdrom_mode_sense(cdi, &cgc, GPMODE_VENDOR_PAGE, 0);
819 	if (ret) {
820 		cgc.buflen = 255;
821 		ret = cdrom_mode_sense(cdi, &cgc, GPMODE_ALL_PAGES, 0);
822 	}
823 
824 	/* drive gave us no info, let the user go ahead */
825 	if (ret)
826 		return 0;
827 
828 	return buffer[3] & 0x80;
829 }
830 
831 static int cdrom_ram_open_write(struct cdrom_device_info *cdi)
832 {
833 	struct rwrt_feature_desc rfd;
834 	int ret;
835 
836 	if ((ret = cdrom_has_defect_mgt(cdi)))
837 		return ret;
838 
839 	if ((ret = cdrom_get_random_writable(cdi, &rfd)))
840 		return ret;
841 	else if (CDF_RWRT == be16_to_cpu(rfd.feature_code))
842 		ret = !rfd.curr;
843 
844 	cdinfo(CD_OPEN, "can open for random write\n");
845 	return ret;
846 }
847 
848 static void cdrom_mmc3_profile(struct cdrom_device_info *cdi)
849 {
850 	struct packet_command cgc;
851 	char buffer[32];
852 	int ret, mmc3_profile;
853 
854 	init_cdrom_command(&cgc, buffer, sizeof(buffer), CGC_DATA_READ);
855 
856 	cgc.cmd[0] = GPCMD_GET_CONFIGURATION;
857 	cgc.cmd[1] = 0;
858 	cgc.cmd[2] = cgc.cmd[3] = 0;		/* Starting Feature Number */
859 	cgc.cmd[8] = sizeof(buffer);		/* Allocation Length */
860 	cgc.quiet = 1;
861 
862 	if ((ret = cdi->ops->generic_packet(cdi, &cgc)))
863 		mmc3_profile = 0xffff;
864 	else
865 		mmc3_profile = (buffer[6] << 8) | buffer[7];
866 
867 	cdi->mmc3_profile = mmc3_profile;
868 }
869 
870 static int cdrom_is_dvd_rw(struct cdrom_device_info *cdi)
871 {
872 	switch (cdi->mmc3_profile) {
873 	case 0x12:	/* DVD-RAM	*/
874 	case 0x1A:	/* DVD+RW	*/
875 		return 0;
876 	default:
877 		return 1;
878 	}
879 }
880 
881 /*
882  * returns 0 for ok to open write, non-0 to disallow
883  */
884 static int cdrom_open_write(struct cdrom_device_info *cdi)
885 {
886 	int mrw, mrw_write, ram_write;
887 	int ret = 1;
888 
889 	mrw = 0;
890 	if (!cdrom_is_mrw(cdi, &mrw_write))
891 		mrw = 1;
892 
893 	if (CDROM_CAN(CDC_MO_DRIVE))
894 		ram_write = 1;
895 	else
896 		(void) cdrom_is_random_writable(cdi, &ram_write);
897 
898 	if (mrw)
899 		cdi->mask &= ~CDC_MRW;
900 	else
901 		cdi->mask |= CDC_MRW;
902 
903 	if (mrw_write)
904 		cdi->mask &= ~CDC_MRW_W;
905 	else
906 		cdi->mask |= CDC_MRW_W;
907 
908 	if (ram_write)
909 		cdi->mask &= ~CDC_RAM;
910 	else
911 		cdi->mask |= CDC_RAM;
912 
913 	if (CDROM_CAN(CDC_MRW_W))
914 		ret = cdrom_mrw_open_write(cdi);
915 	else if (CDROM_CAN(CDC_DVD_RAM))
916 		ret = cdrom_dvdram_open_write(cdi);
917  	else if (CDROM_CAN(CDC_RAM) &&
918  		 !CDROM_CAN(CDC_CD_R|CDC_CD_RW|CDC_DVD|CDC_DVD_R|CDC_MRW|CDC_MO_DRIVE))
919  		ret = cdrom_ram_open_write(cdi);
920 	else if (CDROM_CAN(CDC_MO_DRIVE))
921 		ret = mo_open_write(cdi);
922 	else if (!cdrom_is_dvd_rw(cdi))
923 		ret = 0;
924 
925 	return ret;
926 }
927 
928 static void cdrom_dvd_rw_close_write(struct cdrom_device_info *cdi)
929 {
930 	struct packet_command cgc;
931 
932 	if (cdi->mmc3_profile != 0x1a) {
933 		cdinfo(CD_CLOSE, "%s: No DVD+RW\n", cdi->name);
934 		return;
935 	}
936 
937 	if (!cdi->media_written) {
938 		cdinfo(CD_CLOSE, "%s: DVD+RW media clean\n", cdi->name);
939 		return;
940 	}
941 
942 	pr_info("%s: dirty DVD+RW media, \"finalizing\"\n", cdi->name);
943 
944 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
945 	cgc.cmd[0] = GPCMD_FLUSH_CACHE;
946 	cgc.timeout = 30*HZ;
947 	cdi->ops->generic_packet(cdi, &cgc);
948 
949 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
950 	cgc.cmd[0] = GPCMD_CLOSE_TRACK;
951 	cgc.timeout = 3000*HZ;
952 	cgc.quiet = 1;
953 	cdi->ops->generic_packet(cdi, &cgc);
954 
955 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
956 	cgc.cmd[0] = GPCMD_CLOSE_TRACK;
957 	cgc.cmd[2] = 2;	 /* Close session */
958 	cgc.quiet = 1;
959 	cgc.timeout = 3000*HZ;
960 	cdi->ops->generic_packet(cdi, &cgc);
961 
962 	cdi->media_written = 0;
963 }
964 
965 static int cdrom_close_write(struct cdrom_device_info *cdi)
966 {
967 #if 0
968 	return cdrom_flush_cache(cdi);
969 #else
970 	return 0;
971 #endif
972 }
973 
974 /* We use the open-option O_NONBLOCK to indicate that the
975  * purpose of opening is only for subsequent ioctl() calls; no device
976  * integrity checks are performed.
977  *
978  * We hope that all cd-player programs will adopt this convention. It
979  * is in their own interest: device control becomes a lot easier
980  * this way.
981  */
982 int cdrom_open(struct cdrom_device_info *cdi, struct block_device *bdev, fmode_t mode)
983 {
984 	int ret;
985 
986 	cdinfo(CD_OPEN, "entering cdrom_open\n");
987 
988 	/* if this was a O_NONBLOCK open and we should honor the flags,
989 	 * do a quick open without drive/disc integrity checks. */
990 	cdi->use_count++;
991 	if ((mode & FMODE_NDELAY) && (cdi->options & CDO_USE_FFLAGS)) {
992 		ret = cdi->ops->open(cdi, 1);
993 	} else {
994 		ret = open_for_data(cdi);
995 		if (ret)
996 			goto err;
997 		cdrom_mmc3_profile(cdi);
998 		if (mode & FMODE_WRITE) {
999 			ret = -EROFS;
1000 			if (cdrom_open_write(cdi))
1001 				goto err_release;
1002 			if (!CDROM_CAN(CDC_RAM))
1003 				goto err_release;
1004 			ret = 0;
1005 			cdi->media_written = 0;
1006 		}
1007 	}
1008 
1009 	if (ret)
1010 		goto err;
1011 
1012 	cdinfo(CD_OPEN, "Use count for \"/dev/%s\" now %d\n",
1013 			cdi->name, cdi->use_count);
1014 	/* Do this on open.  Don't wait for mount, because they might
1015 	    not be mounting, but opening with O_NONBLOCK */
1016 	check_disk_change(bdev);
1017 	return 0;
1018 err_release:
1019 	if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1020 		cdi->ops->lock_door(cdi, 0);
1021 		cdinfo(CD_OPEN, "door unlocked.\n");
1022 	}
1023 	cdi->ops->release(cdi);
1024 err:
1025 	cdi->use_count--;
1026 	return ret;
1027 }
1028 
1029 static
1030 int open_for_data(struct cdrom_device_info * cdi)
1031 {
1032 	int ret;
1033 	struct cdrom_device_ops *cdo = cdi->ops;
1034 	tracktype tracks;
1035 	cdinfo(CD_OPEN, "entering open_for_data\n");
1036 	/* Check if the driver can report drive status.  If it can, we
1037 	   can do clever things.  If it can't, well, we at least tried! */
1038 	if (cdo->drive_status != NULL) {
1039 		ret = cdo->drive_status(cdi, CDSL_CURRENT);
1040 		cdinfo(CD_OPEN, "drive_status=%d\n", ret);
1041 		if (ret == CDS_TRAY_OPEN) {
1042 			cdinfo(CD_OPEN, "the tray is open...\n");
1043 			/* can/may i close it? */
1044 			if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1045 			    cdi->options & CDO_AUTO_CLOSE) {
1046 				cdinfo(CD_OPEN, "trying to close the tray.\n");
1047 				ret=cdo->tray_move(cdi,0);
1048 				if (ret) {
1049 					cdinfo(CD_OPEN, "bummer. tried to close the tray but failed.\n");
1050 					/* Ignore the error from the low
1051 					level driver.  We don't care why it
1052 					couldn't close the tray.  We only care
1053 					that there is no disc in the drive,
1054 					since that is the _REAL_ problem here.*/
1055 					ret=-ENOMEDIUM;
1056 					goto clean_up_and_return;
1057 				}
1058 			} else {
1059 				cdinfo(CD_OPEN, "bummer. this drive can't close the tray.\n");
1060 				ret=-ENOMEDIUM;
1061 				goto clean_up_and_return;
1062 			}
1063 			/* Ok, the door should be closed now.. Check again */
1064 			ret = cdo->drive_status(cdi, CDSL_CURRENT);
1065 			if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
1066 				cdinfo(CD_OPEN, "bummer. the tray is still not closed.\n");
1067 				cdinfo(CD_OPEN, "tray might not contain a medium.\n");
1068 				ret=-ENOMEDIUM;
1069 				goto clean_up_and_return;
1070 			}
1071 			cdinfo(CD_OPEN, "the tray is now closed.\n");
1072 		}
1073 		/* the door should be closed now, check for the disc */
1074 		ret = cdo->drive_status(cdi, CDSL_CURRENT);
1075 		if (ret!=CDS_DISC_OK) {
1076 			ret = -ENOMEDIUM;
1077 			goto clean_up_and_return;
1078 		}
1079 	}
1080 	cdrom_count_tracks(cdi, &tracks);
1081 	if (tracks.error == CDS_NO_DISC) {
1082 		cdinfo(CD_OPEN, "bummer. no disc.\n");
1083 		ret=-ENOMEDIUM;
1084 		goto clean_up_and_return;
1085 	}
1086 	/* CD-Players which don't use O_NONBLOCK, workman
1087 	 * for example, need bit CDO_CHECK_TYPE cleared! */
1088 	if (tracks.data==0) {
1089 		if (cdi->options & CDO_CHECK_TYPE) {
1090 		    /* give people a warning shot, now that CDO_CHECK_TYPE
1091 		       is the default case! */
1092 		    cdinfo(CD_OPEN, "bummer. wrong media type.\n");
1093 		    cdinfo(CD_WARNING, "pid %d must open device O_NONBLOCK!\n",
1094 					(unsigned int)task_pid_nr(current));
1095 		    ret=-EMEDIUMTYPE;
1096 		    goto clean_up_and_return;
1097 		}
1098 		else {
1099 		    cdinfo(CD_OPEN, "wrong media type, but CDO_CHECK_TYPE not set.\n");
1100 		}
1101 	}
1102 
1103 	cdinfo(CD_OPEN, "all seems well, opening the device.\n");
1104 
1105 	/* all seems well, we can open the device */
1106 	ret = cdo->open(cdi, 0); /* open for data */
1107 	cdinfo(CD_OPEN, "opening the device gave me %d.\n", ret);
1108 	/* After all this careful checking, we shouldn't have problems
1109 	   opening the device, but we don't want the device locked if
1110 	   this somehow fails... */
1111 	if (ret) {
1112 		cdinfo(CD_OPEN, "open device failed.\n");
1113 		goto clean_up_and_return;
1114 	}
1115 	if (CDROM_CAN(CDC_LOCK) && (cdi->options & CDO_LOCK)) {
1116 			cdo->lock_door(cdi, 1);
1117 			cdinfo(CD_OPEN, "door locked.\n");
1118 	}
1119 	cdinfo(CD_OPEN, "device opened successfully.\n");
1120 	return ret;
1121 
1122 	/* Something failed.  Try to unlock the drive, because some drivers
1123 	(notably ide-cd) lock the drive after every command.  This produced
1124 	a nasty bug where after mount failed, the drive would remain locked!
1125 	This ensures that the drive gets unlocked after a mount fails.  This
1126 	is a goto to avoid bloating the driver with redundant code. */
1127 clean_up_and_return:
1128 	cdinfo(CD_OPEN, "open failed.\n");
1129 	if (CDROM_CAN(CDC_LOCK) && cdi->options & CDO_LOCK) {
1130 			cdo->lock_door(cdi, 0);
1131 			cdinfo(CD_OPEN, "door unlocked.\n");
1132 	}
1133 	return ret;
1134 }
1135 
1136 /* This code is similar to that in open_for_data. The routine is called
1137    whenever an audio play operation is requested.
1138 */
1139 static int check_for_audio_disc(struct cdrom_device_info * cdi,
1140 				struct cdrom_device_ops * cdo)
1141 {
1142         int ret;
1143 	tracktype tracks;
1144 	cdinfo(CD_OPEN, "entering check_for_audio_disc\n");
1145 	if (!(cdi->options & CDO_CHECK_TYPE))
1146 		return 0;
1147 	if (cdo->drive_status != NULL) {
1148 		ret = cdo->drive_status(cdi, CDSL_CURRENT);
1149 		cdinfo(CD_OPEN, "drive_status=%d\n", ret);
1150 		if (ret == CDS_TRAY_OPEN) {
1151 			cdinfo(CD_OPEN, "the tray is open...\n");
1152 			/* can/may i close it? */
1153 			if (CDROM_CAN(CDC_CLOSE_TRAY) &&
1154 			    cdi->options & CDO_AUTO_CLOSE) {
1155 				cdinfo(CD_OPEN, "trying to close the tray.\n");
1156 				ret=cdo->tray_move(cdi,0);
1157 				if (ret) {
1158 					cdinfo(CD_OPEN, "bummer. tried to close tray but failed.\n");
1159 					/* Ignore the error from the low
1160 					level driver.  We don't care why it
1161 					couldn't close the tray.  We only care
1162 					that there is no disc in the drive,
1163 					since that is the _REAL_ problem here.*/
1164 					return -ENOMEDIUM;
1165 				}
1166 			} else {
1167 				cdinfo(CD_OPEN, "bummer. this driver can't close the tray.\n");
1168 				return -ENOMEDIUM;
1169 			}
1170 			/* Ok, the door should be closed now.. Check again */
1171 			ret = cdo->drive_status(cdi, CDSL_CURRENT);
1172 			if ((ret == CDS_NO_DISC) || (ret==CDS_TRAY_OPEN)) {
1173 				cdinfo(CD_OPEN, "bummer. the tray is still not closed.\n");
1174 				return -ENOMEDIUM;
1175 			}
1176 			if (ret!=CDS_DISC_OK) {
1177 				cdinfo(CD_OPEN, "bummer. disc isn't ready.\n");
1178 				return -EIO;
1179 			}
1180 			cdinfo(CD_OPEN, "the tray is now closed.\n");
1181 		}
1182 	}
1183 	cdrom_count_tracks(cdi, &tracks);
1184 	if (tracks.error)
1185 		return(tracks.error);
1186 
1187 	if (tracks.audio==0)
1188 		return -EMEDIUMTYPE;
1189 
1190 	return 0;
1191 }
1192 
1193 void cdrom_release(struct cdrom_device_info *cdi, fmode_t mode)
1194 {
1195 	struct cdrom_device_ops *cdo = cdi->ops;
1196 	int opened_for_data;
1197 
1198 	cdinfo(CD_CLOSE, "entering cdrom_release\n");
1199 
1200 	if (cdi->use_count > 0)
1201 		cdi->use_count--;
1202 
1203 	if (cdi->use_count == 0) {
1204 		cdinfo(CD_CLOSE, "Use count for \"/dev/%s\" now zero\n", cdi->name);
1205 		cdrom_dvd_rw_close_write(cdi);
1206 
1207 		if ((cdo->capability & CDC_LOCK) && !keeplocked) {
1208 			cdinfo(CD_CLOSE, "Unlocking door!\n");
1209 			cdo->lock_door(cdi, 0);
1210 		}
1211 	}
1212 
1213 	opened_for_data = !(cdi->options & CDO_USE_FFLAGS) ||
1214 		!(mode & FMODE_NDELAY);
1215 
1216 	/*
1217 	 * flush cache on last write release
1218 	 */
1219 	if (CDROM_CAN(CDC_RAM) && !cdi->use_count && cdi->for_data)
1220 		cdrom_close_write(cdi);
1221 
1222 	cdo->release(cdi);
1223 	if (cdi->use_count == 0) {      /* last process that closes dev*/
1224 		if (opened_for_data &&
1225 		    cdi->options & CDO_AUTO_EJECT && CDROM_CAN(CDC_OPEN_TRAY))
1226 			cdo->tray_move(cdi, 1);
1227 	}
1228 }
1229 
1230 static int cdrom_read_mech_status(struct cdrom_device_info *cdi,
1231 				  struct cdrom_changer_info *buf)
1232 {
1233 	struct packet_command cgc;
1234 	struct cdrom_device_ops *cdo = cdi->ops;
1235 	int length;
1236 
1237 	/*
1238 	 * Sanyo changer isn't spec compliant (doesn't use regular change
1239 	 * LOAD_UNLOAD command, and it doesn't implement the mech status
1240 	 * command below
1241 	 */
1242 	if (cdi->sanyo_slot) {
1243 		buf->hdr.nslots = 3;
1244 		buf->hdr.curslot = cdi->sanyo_slot == 3 ? 0 : cdi->sanyo_slot;
1245 		for (length = 0; length < 3; length++) {
1246 			buf->slots[length].disc_present = 1;
1247 			buf->slots[length].change = 0;
1248 		}
1249 		return 0;
1250 	}
1251 
1252 	length = sizeof(struct cdrom_mechstat_header) +
1253 		 cdi->capacity * sizeof(struct cdrom_slot);
1254 
1255 	init_cdrom_command(&cgc, buf, length, CGC_DATA_READ);
1256 	cgc.cmd[0] = GPCMD_MECHANISM_STATUS;
1257 	cgc.cmd[8] = (length >> 8) & 0xff;
1258 	cgc.cmd[9] = length & 0xff;
1259 	return cdo->generic_packet(cdi, &cgc);
1260 }
1261 
1262 static int cdrom_slot_status(struct cdrom_device_info *cdi, int slot)
1263 {
1264 	struct cdrom_changer_info *info;
1265 	int ret;
1266 
1267 	cdinfo(CD_CHANGER, "entering cdrom_slot_status()\n");
1268 	if (cdi->sanyo_slot)
1269 		return CDS_NO_INFO;
1270 
1271 	info = kmalloc(sizeof(*info), GFP_KERNEL);
1272 	if (!info)
1273 		return -ENOMEM;
1274 
1275 	if ((ret = cdrom_read_mech_status(cdi, info)))
1276 		goto out_free;
1277 
1278 	if (info->slots[slot].disc_present)
1279 		ret = CDS_DISC_OK;
1280 	else
1281 		ret = CDS_NO_DISC;
1282 
1283 out_free:
1284 	kfree(info);
1285 	return ret;
1286 }
1287 
1288 /* Return the number of slots for an ATAPI/SCSI cdrom,
1289  * return 1 if not a changer.
1290  */
1291 int cdrom_number_of_slots(struct cdrom_device_info *cdi)
1292 {
1293 	int status;
1294 	int nslots = 1;
1295 	struct cdrom_changer_info *info;
1296 
1297 	cdinfo(CD_CHANGER, "entering cdrom_number_of_slots()\n");
1298 	/* cdrom_read_mech_status requires a valid value for capacity: */
1299 	cdi->capacity = 0;
1300 
1301 	info = kmalloc(sizeof(*info), GFP_KERNEL);
1302 	if (!info)
1303 		return -ENOMEM;
1304 
1305 	if ((status = cdrom_read_mech_status(cdi, info)) == 0)
1306 		nslots = info->hdr.nslots;
1307 
1308 	kfree(info);
1309 	return nslots;
1310 }
1311 
1312 
1313 /* If SLOT < 0, unload the current slot.  Otherwise, try to load SLOT. */
1314 static int cdrom_load_unload(struct cdrom_device_info *cdi, int slot)
1315 {
1316 	struct packet_command cgc;
1317 
1318 	cdinfo(CD_CHANGER, "entering cdrom_load_unload()\n");
1319 	if (cdi->sanyo_slot && slot < 0)
1320 		return 0;
1321 
1322 	init_cdrom_command(&cgc, NULL, 0, CGC_DATA_NONE);
1323 	cgc.cmd[0] = GPCMD_LOAD_UNLOAD;
1324 	cgc.cmd[4] = 2 + (slot >= 0);
1325 	cgc.cmd[8] = slot;
1326 	cgc.timeout = 60 * HZ;
1327 
1328 	/* The Sanyo 3 CD changer uses byte 7 of the
1329 	GPCMD_TEST_UNIT_READY to command to switch CDs instead of
1330 	using the GPCMD_LOAD_UNLOAD opcode. */
1331 	if (cdi->sanyo_slot && -1 < slot) {
1332 		cgc.cmd[0] = GPCMD_TEST_UNIT_READY;
1333 		cgc.cmd[7] = slot;
1334 		cgc.cmd[4] = cgc.cmd[8] = 0;
1335 		cdi->sanyo_slot = slot ? slot : 3;
1336 	}
1337 
1338 	return cdi->ops->generic_packet(cdi, &cgc);
1339 }
1340 
1341 static int cdrom_select_disc(struct cdrom_device_info *cdi, int slot)
1342 {
1343 	struct cdrom_changer_info *info;
1344 	int curslot;
1345 	int ret;
1346 
1347 	cdinfo(CD_CHANGER, "entering cdrom_select_disc()\n");
1348 	if (!CDROM_CAN(CDC_SELECT_DISC))
1349 		return -EDRIVE_CANT_DO_THIS;
1350 
1351 	if (cdi->ops->check_events)
1352 		cdi->ops->check_events(cdi, 0, slot);
1353 	else
1354 		cdi->ops->media_changed(cdi, slot);
1355 
1356 	if (slot == CDSL_NONE) {
1357 		/* set media changed bits, on both queues */
1358 		cdi->mc_flags = 0x3;
1359 		return cdrom_load_unload(cdi, -1);
1360 	}
1361 
1362 	info = kmalloc(sizeof(*info), GFP_KERNEL);
1363 	if (!info)
1364 		return -ENOMEM;
1365 
1366 	if ((ret = cdrom_read_mech_status(cdi, info))) {
1367 		kfree(info);
1368 		return ret;
1369 	}
1370 
1371 	curslot = info->hdr.curslot;
1372 	kfree(info);
1373 
1374 	if (cdi->use_count > 1 || keeplocked) {
1375 		if (slot == CDSL_CURRENT) {
1376 	    		return curslot;
1377 		} else {
1378 			return -EBUSY;
1379 		}
1380 	}
1381 
1382 	/* Specifying CDSL_CURRENT will attempt to load the currnet slot,
1383 	which is useful if it had been previously unloaded.
1384 	Whether it can or not, it returns the current slot.
1385 	Similarly,  if slot happens to be the current one, we still
1386 	try and load it. */
1387 	if (slot == CDSL_CURRENT)
1388 		slot = curslot;
1389 
1390 	/* set media changed bits on both queues */
1391 	cdi->mc_flags = 0x3;
1392 	if ((ret = cdrom_load_unload(cdi, slot)))
1393 		return ret;
1394 
1395 	return slot;
1396 }
1397 
1398 /*
1399  * As cdrom implements an extra ioctl consumer for media changed
1400  * event, it needs to buffer ->check_events() output, such that event
1401  * is not lost for both the usual VFS and ioctl paths.
1402  * cdi->{vfs|ioctl}_events are used to buffer pending events for each
1403  * path.
1404  *
1405  * XXX: Locking is non-existent.  cdi->ops->check_events() can be
1406  * called in parallel and buffering fields are accessed without any
1407  * exclusion.  The original media_changed code had the same problem.
1408  * It might be better to simply deprecate CDROM_MEDIA_CHANGED ioctl
1409  * and remove this cruft altogether.  It doesn't have much usefulness
1410  * at this point.
1411  */
1412 static void cdrom_update_events(struct cdrom_device_info *cdi,
1413 				unsigned int clearing)
1414 {
1415 	unsigned int events;
1416 
1417 	events = cdi->ops->check_events(cdi, clearing, CDSL_CURRENT);
1418 	cdi->vfs_events |= events;
1419 	cdi->ioctl_events |= events;
1420 }
1421 
1422 unsigned int cdrom_check_events(struct cdrom_device_info *cdi,
1423 				unsigned int clearing)
1424 {
1425 	unsigned int events;
1426 
1427 	cdrom_update_events(cdi, clearing);
1428 	events = cdi->vfs_events;
1429 	cdi->vfs_events = 0;
1430 	return events;
1431 }
1432 EXPORT_SYMBOL(cdrom_check_events);
1433 
1434 /* We want to make media_changed accessible to the user through an
1435  * ioctl. The main problem now is that we must double-buffer the
1436  * low-level implementation, to assure that the VFS and the user both
1437  * see a medium change once.
1438  */
1439 
1440 static
1441 int media_changed(struct cdrom_device_info *cdi, int queue)
1442 {
1443 	unsigned int mask = (1 << (queue & 1));
1444 	int ret = !!(cdi->mc_flags & mask);
1445 	bool changed;
1446 
1447 	if (!CDROM_CAN(CDC_MEDIA_CHANGED))
1448 		return ret;
1449 
1450 	/* changed since last call? */
1451 	if (cdi->ops->check_events) {
1452 		BUG_ON(!queue);	/* shouldn't be called from VFS path */
1453 		cdrom_update_events(cdi, DISK_EVENT_MEDIA_CHANGE);
1454 		changed = cdi->ioctl_events & DISK_EVENT_MEDIA_CHANGE;
1455 		cdi->ioctl_events = 0;
1456 	} else
1457 		changed = cdi->ops->media_changed(cdi, CDSL_CURRENT);
1458 
1459 	if (changed) {
1460 		cdi->mc_flags = 0x3;    /* set bit on both queues */
1461 		ret |= 1;
1462 		cdi->media_written = 0;
1463 	}
1464 
1465 	cdi->mc_flags &= ~mask;         /* clear bit */
1466 	return ret;
1467 }
1468 
1469 int cdrom_media_changed(struct cdrom_device_info *cdi)
1470 {
1471 	/* This talks to the VFS, which doesn't like errors - just 1 or 0.
1472 	 * Returning "0" is always safe (media hasn't been changed). Do that
1473 	 * if the low-level cdrom driver dosn't support media changed. */
1474 	if (cdi == NULL || cdi->ops->media_changed == NULL)
1475 		return 0;
1476 	if (!CDROM_CAN(CDC_MEDIA_CHANGED))
1477 		return 0;
1478 	return media_changed(cdi, 0);
1479 }
1480 
1481 /* badly broken, I know. Is due for a fixup anytime. */
1482 static void cdrom_count_tracks(struct cdrom_device_info *cdi, tracktype* tracks)
1483 {
1484 	struct cdrom_tochdr header;
1485 	struct cdrom_tocentry entry;
1486 	int ret, i;
1487 	tracks->data=0;
1488 	tracks->audio=0;
1489 	tracks->cdi=0;
1490 	tracks->xa=0;
1491 	tracks->error=0;
1492 	cdinfo(CD_COUNT_TRACKS, "entering cdrom_count_tracks\n");
1493 	/* Grab the TOC header so we can see how many tracks there are */
1494 	if ((ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header))) {
1495 		if (ret == -ENOMEDIUM)
1496 			tracks->error = CDS_NO_DISC;
1497 		else
1498 			tracks->error = CDS_NO_INFO;
1499 		return;
1500 	}
1501 	/* check what type of tracks are on this disc */
1502 	entry.cdte_format = CDROM_MSF;
1503 	for (i = header.cdth_trk0; i <= header.cdth_trk1; i++) {
1504 		entry.cdte_track  = i;
1505 		if (cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry)) {
1506 			tracks->error=CDS_NO_INFO;
1507 			return;
1508 		}
1509 		if (entry.cdte_ctrl & CDROM_DATA_TRACK) {
1510 		    if (entry.cdte_format == 0x10)
1511 			tracks->cdi++;
1512 		    else if (entry.cdte_format == 0x20)
1513 			tracks->xa++;
1514 		    else
1515 			tracks->data++;
1516 		} else
1517 		    tracks->audio++;
1518 		cdinfo(CD_COUNT_TRACKS, "track %d: format=%d, ctrl=%d\n",
1519 		       i, entry.cdte_format, entry.cdte_ctrl);
1520 	}
1521 	cdinfo(CD_COUNT_TRACKS, "disc has %d tracks: %d=audio %d=data %d=Cd-I %d=XA\n",
1522 		header.cdth_trk1, tracks->audio, tracks->data,
1523 		tracks->cdi, tracks->xa);
1524 }
1525 
1526 /* Requests to the low-level drivers will /always/ be done in the
1527    following format convention:
1528 
1529    CDROM_LBA: all data-related requests.
1530    CDROM_MSF: all audio-related requests.
1531 
1532    However, a low-level implementation is allowed to refuse this
1533    request, and return information in its own favorite format.
1534 
1535    It doesn't make sense /at all/ to ask for a play_audio in LBA
1536    format, or ask for multi-session info in MSF format. However, for
1537    backward compatibility these format requests will be satisfied, but
1538    the requests to the low-level drivers will be sanitized in the more
1539    meaningful format indicated above.
1540  */
1541 
1542 static
1543 void sanitize_format(union cdrom_addr *addr,
1544 		     u_char * curr, u_char requested)
1545 {
1546 	if (*curr == requested)
1547 		return;                 /* nothing to be done! */
1548 	if (requested == CDROM_LBA) {
1549 		addr->lba = (int) addr->msf.frame +
1550 			75 * (addr->msf.second - 2 + 60 * addr->msf.minute);
1551 	} else {                        /* CDROM_MSF */
1552 		int lba = addr->lba;
1553 		addr->msf.frame = lba % 75;
1554 		lba /= 75;
1555 		lba += 2;
1556 		addr->msf.second = lba % 60;
1557 		addr->msf.minute = lba / 60;
1558 	}
1559 	*curr = requested;
1560 }
1561 
1562 void init_cdrom_command(struct packet_command *cgc, void *buf, int len,
1563 			int type)
1564 {
1565 	memset(cgc, 0, sizeof(struct packet_command));
1566 	if (buf)
1567 		memset(buf, 0, len);
1568 	cgc->buffer = (char *) buf;
1569 	cgc->buflen = len;
1570 	cgc->data_direction = type;
1571 	cgc->timeout = CDROM_DEF_TIMEOUT;
1572 }
1573 
1574 /* DVD handling */
1575 
1576 #define copy_key(dest,src)	memcpy((dest), (src), sizeof(dvd_key))
1577 #define copy_chal(dest,src)	memcpy((dest), (src), sizeof(dvd_challenge))
1578 
1579 static void setup_report_key(struct packet_command *cgc, unsigned agid, unsigned type)
1580 {
1581 	cgc->cmd[0] = GPCMD_REPORT_KEY;
1582 	cgc->cmd[10] = type | (agid << 6);
1583 	switch (type) {
1584 		case 0: case 8: case 5: {
1585 			cgc->buflen = 8;
1586 			break;
1587 		}
1588 		case 1: {
1589 			cgc->buflen = 16;
1590 			break;
1591 		}
1592 		case 2: case 4: {
1593 			cgc->buflen = 12;
1594 			break;
1595 		}
1596 	}
1597 	cgc->cmd[9] = cgc->buflen;
1598 	cgc->data_direction = CGC_DATA_READ;
1599 }
1600 
1601 static void setup_send_key(struct packet_command *cgc, unsigned agid, unsigned type)
1602 {
1603 	cgc->cmd[0] = GPCMD_SEND_KEY;
1604 	cgc->cmd[10] = type | (agid << 6);
1605 	switch (type) {
1606 		case 1: {
1607 			cgc->buflen = 16;
1608 			break;
1609 		}
1610 		case 3: {
1611 			cgc->buflen = 12;
1612 			break;
1613 		}
1614 		case 6: {
1615 			cgc->buflen = 8;
1616 			break;
1617 		}
1618 	}
1619 	cgc->cmd[9] = cgc->buflen;
1620 	cgc->data_direction = CGC_DATA_WRITE;
1621 }
1622 
1623 static int dvd_do_auth(struct cdrom_device_info *cdi, dvd_authinfo *ai)
1624 {
1625 	int ret;
1626 	u_char buf[20];
1627 	struct packet_command cgc;
1628 	struct cdrom_device_ops *cdo = cdi->ops;
1629 	rpc_state_t rpc_state;
1630 
1631 	memset(buf, 0, sizeof(buf));
1632 	init_cdrom_command(&cgc, buf, 0, CGC_DATA_READ);
1633 
1634 	switch (ai->type) {
1635 	/* LU data send */
1636 	case DVD_LU_SEND_AGID:
1637 		cdinfo(CD_DVD, "entering DVD_LU_SEND_AGID\n");
1638 		cgc.quiet = 1;
1639 		setup_report_key(&cgc, ai->lsa.agid, 0);
1640 
1641 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1642 			return ret;
1643 
1644 		ai->lsa.agid = buf[7] >> 6;
1645 		/* Returning data, let host change state */
1646 		break;
1647 
1648 	case DVD_LU_SEND_KEY1:
1649 		cdinfo(CD_DVD, "entering DVD_LU_SEND_KEY1\n");
1650 		setup_report_key(&cgc, ai->lsk.agid, 2);
1651 
1652 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1653 			return ret;
1654 
1655 		copy_key(ai->lsk.key, &buf[4]);
1656 		/* Returning data, let host change state */
1657 		break;
1658 
1659 	case DVD_LU_SEND_CHALLENGE:
1660 		cdinfo(CD_DVD, "entering DVD_LU_SEND_CHALLENGE\n");
1661 		setup_report_key(&cgc, ai->lsc.agid, 1);
1662 
1663 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1664 			return ret;
1665 
1666 		copy_chal(ai->lsc.chal, &buf[4]);
1667 		/* Returning data, let host change state */
1668 		break;
1669 
1670 	/* Post-auth key */
1671 	case DVD_LU_SEND_TITLE_KEY:
1672 		cdinfo(CD_DVD, "entering DVD_LU_SEND_TITLE_KEY\n");
1673 		cgc.quiet = 1;
1674 		setup_report_key(&cgc, ai->lstk.agid, 4);
1675 		cgc.cmd[5] = ai->lstk.lba;
1676 		cgc.cmd[4] = ai->lstk.lba >> 8;
1677 		cgc.cmd[3] = ai->lstk.lba >> 16;
1678 		cgc.cmd[2] = ai->lstk.lba >> 24;
1679 
1680 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1681 			return ret;
1682 
1683 		ai->lstk.cpm = (buf[4] >> 7) & 1;
1684 		ai->lstk.cp_sec = (buf[4] >> 6) & 1;
1685 		ai->lstk.cgms = (buf[4] >> 4) & 3;
1686 		copy_key(ai->lstk.title_key, &buf[5]);
1687 		/* Returning data, let host change state */
1688 		break;
1689 
1690 	case DVD_LU_SEND_ASF:
1691 		cdinfo(CD_DVD, "entering DVD_LU_SEND_ASF\n");
1692 		setup_report_key(&cgc, ai->lsasf.agid, 5);
1693 
1694 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1695 			return ret;
1696 
1697 		ai->lsasf.asf = buf[7] & 1;
1698 		break;
1699 
1700 	/* LU data receive (LU changes state) */
1701 	case DVD_HOST_SEND_CHALLENGE:
1702 		cdinfo(CD_DVD, "entering DVD_HOST_SEND_CHALLENGE\n");
1703 		setup_send_key(&cgc, ai->hsc.agid, 1);
1704 		buf[1] = 0xe;
1705 		copy_chal(&buf[4], ai->hsc.chal);
1706 
1707 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1708 			return ret;
1709 
1710 		ai->type = DVD_LU_SEND_KEY1;
1711 		break;
1712 
1713 	case DVD_HOST_SEND_KEY2:
1714 		cdinfo(CD_DVD, "entering DVD_HOST_SEND_KEY2\n");
1715 		setup_send_key(&cgc, ai->hsk.agid, 3);
1716 		buf[1] = 0xa;
1717 		copy_key(&buf[4], ai->hsk.key);
1718 
1719 		if ((ret = cdo->generic_packet(cdi, &cgc))) {
1720 			ai->type = DVD_AUTH_FAILURE;
1721 			return ret;
1722 		}
1723 		ai->type = DVD_AUTH_ESTABLISHED;
1724 		break;
1725 
1726 	/* Misc */
1727 	case DVD_INVALIDATE_AGID:
1728 		cgc.quiet = 1;
1729 		cdinfo(CD_DVD, "entering DVD_INVALIDATE_AGID\n");
1730 		setup_report_key(&cgc, ai->lsa.agid, 0x3f);
1731 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1732 			return ret;
1733 		break;
1734 
1735 	/* Get region settings */
1736 	case DVD_LU_SEND_RPC_STATE:
1737 		cdinfo(CD_DVD, "entering DVD_LU_SEND_RPC_STATE\n");
1738 		setup_report_key(&cgc, 0, 8);
1739 		memset(&rpc_state, 0, sizeof(rpc_state_t));
1740 		cgc.buffer = (char *) &rpc_state;
1741 
1742 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1743 			return ret;
1744 
1745 		ai->lrpcs.type = rpc_state.type_code;
1746 		ai->lrpcs.vra = rpc_state.vra;
1747 		ai->lrpcs.ucca = rpc_state.ucca;
1748 		ai->lrpcs.region_mask = rpc_state.region_mask;
1749 		ai->lrpcs.rpc_scheme = rpc_state.rpc_scheme;
1750 		break;
1751 
1752 	/* Set region settings */
1753 	case DVD_HOST_SEND_RPC_STATE:
1754 		cdinfo(CD_DVD, "entering DVD_HOST_SEND_RPC_STATE\n");
1755 		setup_send_key(&cgc, 0, 6);
1756 		buf[1] = 6;
1757 		buf[4] = ai->hrpcs.pdrc;
1758 
1759 		if ((ret = cdo->generic_packet(cdi, &cgc)))
1760 			return ret;
1761 		break;
1762 
1763 	default:
1764 		cdinfo(CD_WARNING, "Invalid DVD key ioctl (%d)\n", ai->type);
1765 		return -ENOTTY;
1766 	}
1767 
1768 	return 0;
1769 }
1770 
1771 static int dvd_read_physical(struct cdrom_device_info *cdi, dvd_struct *s,
1772 				struct packet_command *cgc)
1773 {
1774 	unsigned char buf[21], *base;
1775 	struct dvd_layer *layer;
1776 	struct cdrom_device_ops *cdo = cdi->ops;
1777 	int ret, layer_num = s->physical.layer_num;
1778 
1779 	if (layer_num >= DVD_LAYERS)
1780 		return -EINVAL;
1781 
1782 	init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1783 	cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1784 	cgc->cmd[6] = layer_num;
1785 	cgc->cmd[7] = s->type;
1786 	cgc->cmd[9] = cgc->buflen & 0xff;
1787 
1788 	/*
1789 	 * refrain from reporting errors on non-existing layers (mainly)
1790 	 */
1791 	cgc->quiet = 1;
1792 
1793 	ret = cdo->generic_packet(cdi, cgc);
1794 	if (ret)
1795 		return ret;
1796 
1797 	base = &buf[4];
1798 	layer = &s->physical.layer[layer_num];
1799 
1800 	/*
1801 	 * place the data... really ugly, but at least we won't have to
1802 	 * worry about endianess in userspace.
1803 	 */
1804 	memset(layer, 0, sizeof(*layer));
1805 	layer->book_version = base[0] & 0xf;
1806 	layer->book_type = base[0] >> 4;
1807 	layer->min_rate = base[1] & 0xf;
1808 	layer->disc_size = base[1] >> 4;
1809 	layer->layer_type = base[2] & 0xf;
1810 	layer->track_path = (base[2] >> 4) & 1;
1811 	layer->nlayers = (base[2] >> 5) & 3;
1812 	layer->track_density = base[3] & 0xf;
1813 	layer->linear_density = base[3] >> 4;
1814 	layer->start_sector = base[5] << 16 | base[6] << 8 | base[7];
1815 	layer->end_sector = base[9] << 16 | base[10] << 8 | base[11];
1816 	layer->end_sector_l0 = base[13] << 16 | base[14] << 8 | base[15];
1817 	layer->bca = base[16] >> 7;
1818 
1819 	return 0;
1820 }
1821 
1822 static int dvd_read_copyright(struct cdrom_device_info *cdi, dvd_struct *s,
1823 				struct packet_command *cgc)
1824 {
1825 	int ret;
1826 	u_char buf[8];
1827 	struct cdrom_device_ops *cdo = cdi->ops;
1828 
1829 	init_cdrom_command(cgc, buf, sizeof(buf), CGC_DATA_READ);
1830 	cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1831 	cgc->cmd[6] = s->copyright.layer_num;
1832 	cgc->cmd[7] = s->type;
1833 	cgc->cmd[8] = cgc->buflen >> 8;
1834 	cgc->cmd[9] = cgc->buflen & 0xff;
1835 
1836 	ret = cdo->generic_packet(cdi, cgc);
1837 	if (ret)
1838 		return ret;
1839 
1840 	s->copyright.cpst = buf[4];
1841 	s->copyright.rmi = buf[5];
1842 
1843 	return 0;
1844 }
1845 
1846 static int dvd_read_disckey(struct cdrom_device_info *cdi, dvd_struct *s,
1847 				struct packet_command *cgc)
1848 {
1849 	int ret, size;
1850 	u_char *buf;
1851 	struct cdrom_device_ops *cdo = cdi->ops;
1852 
1853 	size = sizeof(s->disckey.value) + 4;
1854 
1855 	buf = kmalloc(size, GFP_KERNEL);
1856 	if (!buf)
1857 		return -ENOMEM;
1858 
1859 	init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1860 	cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1861 	cgc->cmd[7] = s->type;
1862 	cgc->cmd[8] = size >> 8;
1863 	cgc->cmd[9] = size & 0xff;
1864 	cgc->cmd[10] = s->disckey.agid << 6;
1865 
1866 	ret = cdo->generic_packet(cdi, cgc);
1867 	if (!ret)
1868 		memcpy(s->disckey.value, &buf[4], sizeof(s->disckey.value));
1869 
1870 	kfree(buf);
1871 	return ret;
1872 }
1873 
1874 static int dvd_read_bca(struct cdrom_device_info *cdi, dvd_struct *s,
1875 			struct packet_command *cgc)
1876 {
1877 	int ret, size = 4 + 188;
1878 	u_char *buf;
1879 	struct cdrom_device_ops *cdo = cdi->ops;
1880 
1881 	buf = kmalloc(size, GFP_KERNEL);
1882 	if (!buf)
1883 		return -ENOMEM;
1884 
1885 	init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1886 	cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1887 	cgc->cmd[7] = s->type;
1888 	cgc->cmd[9] = cgc->buflen & 0xff;
1889 
1890 	ret = cdo->generic_packet(cdi, cgc);
1891 	if (ret)
1892 		goto out;
1893 
1894 	s->bca.len = buf[0] << 8 | buf[1];
1895 	if (s->bca.len < 12 || s->bca.len > 188) {
1896 		cdinfo(CD_WARNING, "Received invalid BCA length (%d)\n", s->bca.len);
1897 		ret = -EIO;
1898 		goto out;
1899 	}
1900 	memcpy(s->bca.value, &buf[4], s->bca.len);
1901 	ret = 0;
1902 out:
1903 	kfree(buf);
1904 	return ret;
1905 }
1906 
1907 static int dvd_read_manufact(struct cdrom_device_info *cdi, dvd_struct *s,
1908 				struct packet_command *cgc)
1909 {
1910 	int ret = 0, size;
1911 	u_char *buf;
1912 	struct cdrom_device_ops *cdo = cdi->ops;
1913 
1914 	size = sizeof(s->manufact.value) + 4;
1915 
1916 	buf = kmalloc(size, GFP_KERNEL);
1917 	if (!buf)
1918 		return -ENOMEM;
1919 
1920 	init_cdrom_command(cgc, buf, size, CGC_DATA_READ);
1921 	cgc->cmd[0] = GPCMD_READ_DVD_STRUCTURE;
1922 	cgc->cmd[7] = s->type;
1923 	cgc->cmd[8] = size >> 8;
1924 	cgc->cmd[9] = size & 0xff;
1925 
1926 	ret = cdo->generic_packet(cdi, cgc);
1927 	if (ret)
1928 		goto out;
1929 
1930 	s->manufact.len = buf[0] << 8 | buf[1];
1931 	if (s->manufact.len < 0 || s->manufact.len > 2048) {
1932 		cdinfo(CD_WARNING, "Received invalid manufacture info length"
1933 				   " (%d)\n", s->manufact.len);
1934 		ret = -EIO;
1935 	} else {
1936 		memcpy(s->manufact.value, &buf[4], s->manufact.len);
1937 	}
1938 
1939 out:
1940 	kfree(buf);
1941 	return ret;
1942 }
1943 
1944 static int dvd_read_struct(struct cdrom_device_info *cdi, dvd_struct *s,
1945 				struct packet_command *cgc)
1946 {
1947 	switch (s->type) {
1948 	case DVD_STRUCT_PHYSICAL:
1949 		return dvd_read_physical(cdi, s, cgc);
1950 
1951 	case DVD_STRUCT_COPYRIGHT:
1952 		return dvd_read_copyright(cdi, s, cgc);
1953 
1954 	case DVD_STRUCT_DISCKEY:
1955 		return dvd_read_disckey(cdi, s, cgc);
1956 
1957 	case DVD_STRUCT_BCA:
1958 		return dvd_read_bca(cdi, s, cgc);
1959 
1960 	case DVD_STRUCT_MANUFACT:
1961 		return dvd_read_manufact(cdi, s, cgc);
1962 
1963 	default:
1964 		cdinfo(CD_WARNING, ": Invalid DVD structure read requested (%d)\n",
1965 					s->type);
1966 		return -EINVAL;
1967 	}
1968 }
1969 
1970 int cdrom_mode_sense(struct cdrom_device_info *cdi,
1971 		     struct packet_command *cgc,
1972 		     int page_code, int page_control)
1973 {
1974 	struct cdrom_device_ops *cdo = cdi->ops;
1975 
1976 	memset(cgc->cmd, 0, sizeof(cgc->cmd));
1977 
1978 	cgc->cmd[0] = GPCMD_MODE_SENSE_10;
1979 	cgc->cmd[2] = page_code | (page_control << 6);
1980 	cgc->cmd[7] = cgc->buflen >> 8;
1981 	cgc->cmd[8] = cgc->buflen & 0xff;
1982 	cgc->data_direction = CGC_DATA_READ;
1983 	return cdo->generic_packet(cdi, cgc);
1984 }
1985 
1986 int cdrom_mode_select(struct cdrom_device_info *cdi,
1987 		      struct packet_command *cgc)
1988 {
1989 	struct cdrom_device_ops *cdo = cdi->ops;
1990 
1991 	memset(cgc->cmd, 0, sizeof(cgc->cmd));
1992 	memset(cgc->buffer, 0, 2);
1993 	cgc->cmd[0] = GPCMD_MODE_SELECT_10;
1994 	cgc->cmd[1] = 0x10;		/* PF */
1995 	cgc->cmd[7] = cgc->buflen >> 8;
1996 	cgc->cmd[8] = cgc->buflen & 0xff;
1997 	cgc->data_direction = CGC_DATA_WRITE;
1998 	return cdo->generic_packet(cdi, cgc);
1999 }
2000 
2001 static int cdrom_read_subchannel(struct cdrom_device_info *cdi,
2002 				 struct cdrom_subchnl *subchnl, int mcn)
2003 {
2004 	struct cdrom_device_ops *cdo = cdi->ops;
2005 	struct packet_command cgc;
2006 	char buffer[32];
2007 	int ret;
2008 
2009 	init_cdrom_command(&cgc, buffer, 16, CGC_DATA_READ);
2010 	cgc.cmd[0] = GPCMD_READ_SUBCHANNEL;
2011 	cgc.cmd[1] = 2;     /* MSF addressing */
2012 	cgc.cmd[2] = 0x40;  /* request subQ data */
2013 	cgc.cmd[3] = mcn ? 2 : 1;
2014 	cgc.cmd[8] = 16;
2015 
2016 	if ((ret = cdo->generic_packet(cdi, &cgc)))
2017 		return ret;
2018 
2019 	subchnl->cdsc_audiostatus = cgc.buffer[1];
2020 	subchnl->cdsc_format = CDROM_MSF;
2021 	subchnl->cdsc_ctrl = cgc.buffer[5] & 0xf;
2022 	subchnl->cdsc_trk = cgc.buffer[6];
2023 	subchnl->cdsc_ind = cgc.buffer[7];
2024 
2025 	subchnl->cdsc_reladdr.msf.minute = cgc.buffer[13];
2026 	subchnl->cdsc_reladdr.msf.second = cgc.buffer[14];
2027 	subchnl->cdsc_reladdr.msf.frame = cgc.buffer[15];
2028 	subchnl->cdsc_absaddr.msf.minute = cgc.buffer[9];
2029 	subchnl->cdsc_absaddr.msf.second = cgc.buffer[10];
2030 	subchnl->cdsc_absaddr.msf.frame = cgc.buffer[11];
2031 
2032 	return 0;
2033 }
2034 
2035 /*
2036  * Specific READ_10 interface
2037  */
2038 static int cdrom_read_cd(struct cdrom_device_info *cdi,
2039 			 struct packet_command *cgc, int lba,
2040 			 int blocksize, int nblocks)
2041 {
2042 	struct cdrom_device_ops *cdo = cdi->ops;
2043 
2044 	memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2045 	cgc->cmd[0] = GPCMD_READ_10;
2046 	cgc->cmd[2] = (lba >> 24) & 0xff;
2047 	cgc->cmd[3] = (lba >> 16) & 0xff;
2048 	cgc->cmd[4] = (lba >>  8) & 0xff;
2049 	cgc->cmd[5] = lba & 0xff;
2050 	cgc->cmd[6] = (nblocks >> 16) & 0xff;
2051 	cgc->cmd[7] = (nblocks >>  8) & 0xff;
2052 	cgc->cmd[8] = nblocks & 0xff;
2053 	cgc->buflen = blocksize * nblocks;
2054 	return cdo->generic_packet(cdi, cgc);
2055 }
2056 
2057 /* very generic interface for reading the various types of blocks */
2058 static int cdrom_read_block(struct cdrom_device_info *cdi,
2059 			    struct packet_command *cgc,
2060 			    int lba, int nblocks, int format, int blksize)
2061 {
2062 	struct cdrom_device_ops *cdo = cdi->ops;
2063 
2064 	memset(&cgc->cmd, 0, sizeof(cgc->cmd));
2065 	cgc->cmd[0] = GPCMD_READ_CD;
2066 	/* expected sector size - cdda,mode1,etc. */
2067 	cgc->cmd[1] = format << 2;
2068 	/* starting address */
2069 	cgc->cmd[2] = (lba >> 24) & 0xff;
2070 	cgc->cmd[3] = (lba >> 16) & 0xff;
2071 	cgc->cmd[4] = (lba >>  8) & 0xff;
2072 	cgc->cmd[5] = lba & 0xff;
2073 	/* number of blocks */
2074 	cgc->cmd[6] = (nblocks >> 16) & 0xff;
2075 	cgc->cmd[7] = (nblocks >>  8) & 0xff;
2076 	cgc->cmd[8] = nblocks & 0xff;
2077 	cgc->buflen = blksize * nblocks;
2078 
2079 	/* set the header info returned */
2080 	switch (blksize) {
2081 	case CD_FRAMESIZE_RAW0	: cgc->cmd[9] = 0x58; break;
2082 	case CD_FRAMESIZE_RAW1	: cgc->cmd[9] = 0x78; break;
2083 	case CD_FRAMESIZE_RAW	: cgc->cmd[9] = 0xf8; break;
2084 	default			: cgc->cmd[9] = 0x10;
2085 	}
2086 
2087 	return cdo->generic_packet(cdi, cgc);
2088 }
2089 
2090 static int cdrom_read_cdda_old(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2091 			       int lba, int nframes)
2092 {
2093 	struct packet_command cgc;
2094 	int ret = 0;
2095 	int nr;
2096 
2097 	cdi->last_sense = 0;
2098 
2099 	memset(&cgc, 0, sizeof(cgc));
2100 
2101 	/*
2102 	 * start with will ra.nframes size, back down if alloc fails
2103 	 */
2104 	nr = nframes;
2105 	do {
2106 		cgc.buffer = kmalloc(CD_FRAMESIZE_RAW * nr, GFP_KERNEL);
2107 		if (cgc.buffer)
2108 			break;
2109 
2110 		nr >>= 1;
2111 	} while (nr);
2112 
2113 	if (!nr)
2114 		return -ENOMEM;
2115 
2116 	if (!access_ok(VERIFY_WRITE, ubuf, nframes * CD_FRAMESIZE_RAW)) {
2117 		ret = -EFAULT;
2118 		goto out;
2119 	}
2120 
2121 	cgc.data_direction = CGC_DATA_READ;
2122 	while (nframes > 0) {
2123 		if (nr > nframes)
2124 			nr = nframes;
2125 
2126 		ret = cdrom_read_block(cdi, &cgc, lba, nr, 1, CD_FRAMESIZE_RAW);
2127 		if (ret)
2128 			break;
2129 		if (__copy_to_user(ubuf, cgc.buffer, CD_FRAMESIZE_RAW * nr)) {
2130 			ret = -EFAULT;
2131 			break;
2132 		}
2133 		ubuf += CD_FRAMESIZE_RAW * nr;
2134 		nframes -= nr;
2135 		lba += nr;
2136 	}
2137 out:
2138 	kfree(cgc.buffer);
2139 	return ret;
2140 }
2141 
2142 static int cdrom_read_cdda_bpc(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2143 			       int lba, int nframes)
2144 {
2145 	struct request_queue *q = cdi->disk->queue;
2146 	struct request *rq;
2147 	struct bio *bio;
2148 	unsigned int len;
2149 	int nr, ret = 0;
2150 
2151 	if (!q)
2152 		return -ENXIO;
2153 
2154 	cdi->last_sense = 0;
2155 
2156 	while (nframes) {
2157 		nr = nframes;
2158 		if (cdi->cdda_method == CDDA_BPC_SINGLE)
2159 			nr = 1;
2160 		if (nr * CD_FRAMESIZE_RAW > (queue_max_sectors(q) << 9))
2161 			nr = (queue_max_sectors(q) << 9) / CD_FRAMESIZE_RAW;
2162 
2163 		len = nr * CD_FRAMESIZE_RAW;
2164 
2165 		rq = blk_get_request(q, READ, GFP_KERNEL);
2166 		if (!rq) {
2167 			ret = -ENOMEM;
2168 			break;
2169 		}
2170 
2171 		ret = blk_rq_map_user(q, rq, NULL, ubuf, len, GFP_KERNEL);
2172 		if (ret) {
2173 			blk_put_request(rq);
2174 			break;
2175 		}
2176 
2177 		rq->cmd[0] = GPCMD_READ_CD;
2178 		rq->cmd[1] = 1 << 2;
2179 		rq->cmd[2] = (lba >> 24) & 0xff;
2180 		rq->cmd[3] = (lba >> 16) & 0xff;
2181 		rq->cmd[4] = (lba >>  8) & 0xff;
2182 		rq->cmd[5] = lba & 0xff;
2183 		rq->cmd[6] = (nr >> 16) & 0xff;
2184 		rq->cmd[7] = (nr >>  8) & 0xff;
2185 		rq->cmd[8] = nr & 0xff;
2186 		rq->cmd[9] = 0xf8;
2187 
2188 		rq->cmd_len = 12;
2189 		rq->cmd_type = REQ_TYPE_BLOCK_PC;
2190 		rq->timeout = 60 * HZ;
2191 		bio = rq->bio;
2192 
2193 		if (blk_execute_rq(q, cdi->disk, rq, 0)) {
2194 			struct request_sense *s = rq->sense;
2195 			ret = -EIO;
2196 			cdi->last_sense = s->sense_key;
2197 		}
2198 
2199 		if (blk_rq_unmap_user(bio))
2200 			ret = -EFAULT;
2201 		blk_put_request(rq);
2202 
2203 		if (ret)
2204 			break;
2205 
2206 		nframes -= nr;
2207 		lba += nr;
2208 		ubuf += len;
2209 	}
2210 
2211 	return ret;
2212 }
2213 
2214 static int cdrom_read_cdda(struct cdrom_device_info *cdi, __u8 __user *ubuf,
2215 			   int lba, int nframes)
2216 {
2217 	int ret;
2218 
2219 	if (cdi->cdda_method == CDDA_OLD)
2220 		return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2221 
2222 retry:
2223 	/*
2224 	 * for anything else than success and io error, we need to retry
2225 	 */
2226 	ret = cdrom_read_cdda_bpc(cdi, ubuf, lba, nframes);
2227 	if (!ret || ret != -EIO)
2228 		return ret;
2229 
2230 	/*
2231 	 * I've seen drives get sense 4/8/3 udma crc errors on multi
2232 	 * frame dma, so drop to single frame dma if we need to
2233 	 */
2234 	if (cdi->cdda_method == CDDA_BPC_FULL && nframes > 1) {
2235 		pr_info("dropping to single frame dma\n");
2236 		cdi->cdda_method = CDDA_BPC_SINGLE;
2237 		goto retry;
2238 	}
2239 
2240 	/*
2241 	 * so we have an io error of some sort with multi frame dma. if the
2242 	 * condition wasn't a hardware error
2243 	 * problems, not for any error
2244 	 */
2245 	if (cdi->last_sense != 0x04 && cdi->last_sense != 0x0b)
2246 		return ret;
2247 
2248 	pr_info("dropping to old style cdda (sense=%x)\n", cdi->last_sense);
2249 	cdi->cdda_method = CDDA_OLD;
2250 	return cdrom_read_cdda_old(cdi, ubuf, lba, nframes);
2251 }
2252 
2253 static int cdrom_ioctl_multisession(struct cdrom_device_info *cdi,
2254 		void __user *argp)
2255 {
2256 	struct cdrom_multisession ms_info;
2257 	u8 requested_format;
2258 	int ret;
2259 
2260 	cdinfo(CD_DO_IOCTL, "entering CDROMMULTISESSION\n");
2261 
2262 	if (!(cdi->ops->capability & CDC_MULTI_SESSION))
2263 		return -ENOSYS;
2264 
2265 	if (copy_from_user(&ms_info, argp, sizeof(ms_info)))
2266 		return -EFAULT;
2267 
2268 	requested_format = ms_info.addr_format;
2269 	if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2270 		return -EINVAL;
2271 	ms_info.addr_format = CDROM_LBA;
2272 
2273 	ret = cdi->ops->get_last_session(cdi, &ms_info);
2274 	if (ret)
2275 		return ret;
2276 
2277 	sanitize_format(&ms_info.addr, &ms_info.addr_format, requested_format);
2278 
2279 	if (copy_to_user(argp, &ms_info, sizeof(ms_info)))
2280 		return -EFAULT;
2281 
2282 	cdinfo(CD_DO_IOCTL, "CDROMMULTISESSION successful\n");
2283 	return 0;
2284 }
2285 
2286 static int cdrom_ioctl_eject(struct cdrom_device_info *cdi)
2287 {
2288 	cdinfo(CD_DO_IOCTL, "entering CDROMEJECT\n");
2289 
2290 	if (!CDROM_CAN(CDC_OPEN_TRAY))
2291 		return -ENOSYS;
2292 	if (cdi->use_count != 1 || keeplocked)
2293 		return -EBUSY;
2294 	if (CDROM_CAN(CDC_LOCK)) {
2295 		int ret = cdi->ops->lock_door(cdi, 0);
2296 		if (ret)
2297 			return ret;
2298 	}
2299 
2300 	return cdi->ops->tray_move(cdi, 1);
2301 }
2302 
2303 static int cdrom_ioctl_closetray(struct cdrom_device_info *cdi)
2304 {
2305 	cdinfo(CD_DO_IOCTL, "entering CDROMCLOSETRAY\n");
2306 
2307 	if (!CDROM_CAN(CDC_CLOSE_TRAY))
2308 		return -ENOSYS;
2309 	return cdi->ops->tray_move(cdi, 0);
2310 }
2311 
2312 static int cdrom_ioctl_eject_sw(struct cdrom_device_info *cdi,
2313 		unsigned long arg)
2314 {
2315 	cdinfo(CD_DO_IOCTL, "entering CDROMEJECT_SW\n");
2316 
2317 	if (!CDROM_CAN(CDC_OPEN_TRAY))
2318 		return -ENOSYS;
2319 	if (keeplocked)
2320 		return -EBUSY;
2321 
2322 	cdi->options &= ~(CDO_AUTO_CLOSE | CDO_AUTO_EJECT);
2323 	if (arg)
2324 		cdi->options |= CDO_AUTO_CLOSE | CDO_AUTO_EJECT;
2325 	return 0;
2326 }
2327 
2328 static int cdrom_ioctl_media_changed(struct cdrom_device_info *cdi,
2329 		unsigned long arg)
2330 {
2331 	struct cdrom_changer_info *info;
2332 	int ret;
2333 
2334 	cdinfo(CD_DO_IOCTL, "entering CDROM_MEDIA_CHANGED\n");
2335 
2336 	if (!CDROM_CAN(CDC_MEDIA_CHANGED))
2337 		return -ENOSYS;
2338 
2339 	/* cannot select disc or select current disc */
2340 	if (!CDROM_CAN(CDC_SELECT_DISC) || arg == CDSL_CURRENT)
2341 		return media_changed(cdi, 1);
2342 
2343 	if ((unsigned int)arg >= cdi->capacity)
2344 		return -EINVAL;
2345 
2346 	info = kmalloc(sizeof(*info), GFP_KERNEL);
2347 	if (!info)
2348 		return -ENOMEM;
2349 
2350 	ret = cdrom_read_mech_status(cdi, info);
2351 	if (!ret)
2352 		ret = info->slots[arg].change;
2353 	kfree(info);
2354 	return ret;
2355 }
2356 
2357 static int cdrom_ioctl_set_options(struct cdrom_device_info *cdi,
2358 		unsigned long arg)
2359 {
2360 	cdinfo(CD_DO_IOCTL, "entering CDROM_SET_OPTIONS\n");
2361 
2362 	/*
2363 	 * Options need to be in sync with capability.
2364 	 * Too late for that, so we have to check each one separately.
2365 	 */
2366 	switch (arg) {
2367 	case CDO_USE_FFLAGS:
2368 	case CDO_CHECK_TYPE:
2369 		break;
2370 	case CDO_LOCK:
2371 		if (!CDROM_CAN(CDC_LOCK))
2372 			return -ENOSYS;
2373 		break;
2374 	case 0:
2375 		return cdi->options;
2376 	/* default is basically CDO_[AUTO_CLOSE|AUTO_EJECT] */
2377 	default:
2378 		if (!CDROM_CAN(arg))
2379 			return -ENOSYS;
2380 	}
2381 	cdi->options |= (int) arg;
2382 	return cdi->options;
2383 }
2384 
2385 static int cdrom_ioctl_clear_options(struct cdrom_device_info *cdi,
2386 		unsigned long arg)
2387 {
2388 	cdinfo(CD_DO_IOCTL, "entering CDROM_CLEAR_OPTIONS\n");
2389 
2390 	cdi->options &= ~(int) arg;
2391 	return cdi->options;
2392 }
2393 
2394 static int cdrom_ioctl_select_speed(struct cdrom_device_info *cdi,
2395 		unsigned long arg)
2396 {
2397 	cdinfo(CD_DO_IOCTL, "entering CDROM_SELECT_SPEED\n");
2398 
2399 	if (!CDROM_CAN(CDC_SELECT_SPEED))
2400 		return -ENOSYS;
2401 	return cdi->ops->select_speed(cdi, arg);
2402 }
2403 
2404 static int cdrom_ioctl_select_disc(struct cdrom_device_info *cdi,
2405 		unsigned long arg)
2406 {
2407 	cdinfo(CD_DO_IOCTL, "entering CDROM_SELECT_DISC\n");
2408 
2409 	if (!CDROM_CAN(CDC_SELECT_DISC))
2410 		return -ENOSYS;
2411 
2412 	if (arg != CDSL_CURRENT && arg != CDSL_NONE) {
2413 		if ((int)arg >= cdi->capacity)
2414 			return -EINVAL;
2415 	}
2416 
2417 	/*
2418 	 * ->select_disc is a hook to allow a driver-specific way of
2419 	 * seleting disc.  However, since there is no equivalent hook for
2420 	 * cdrom_slot_status this may not actually be useful...
2421 	 */
2422 	if (cdi->ops->select_disc)
2423 		return cdi->ops->select_disc(cdi, arg);
2424 
2425 	cdinfo(CD_CHANGER, "Using generic cdrom_select_disc()\n");
2426 	return cdrom_select_disc(cdi, arg);
2427 }
2428 
2429 static int cdrom_ioctl_reset(struct cdrom_device_info *cdi,
2430 		struct block_device *bdev)
2431 {
2432 	cdinfo(CD_DO_IOCTL, "entering CDROM_RESET\n");
2433 
2434 	if (!capable(CAP_SYS_ADMIN))
2435 		return -EACCES;
2436 	if (!CDROM_CAN(CDC_RESET))
2437 		return -ENOSYS;
2438 	invalidate_bdev(bdev);
2439 	return cdi->ops->reset(cdi);
2440 }
2441 
2442 static int cdrom_ioctl_lock_door(struct cdrom_device_info *cdi,
2443 		unsigned long arg)
2444 {
2445 	cdinfo(CD_DO_IOCTL, "%socking door.\n", arg ? "L" : "Unl");
2446 
2447 	if (!CDROM_CAN(CDC_LOCK))
2448 		return -EDRIVE_CANT_DO_THIS;
2449 
2450 	keeplocked = arg ? 1 : 0;
2451 
2452 	/*
2453 	 * Don't unlock the door on multiple opens by default, but allow
2454 	 * root to do so.
2455 	 */
2456 	if (cdi->use_count != 1 && !arg && !capable(CAP_SYS_ADMIN))
2457 		return -EBUSY;
2458 	return cdi->ops->lock_door(cdi, arg);
2459 }
2460 
2461 static int cdrom_ioctl_debug(struct cdrom_device_info *cdi,
2462 		unsigned long arg)
2463 {
2464 	cdinfo(CD_DO_IOCTL, "%sabling debug.\n", arg ? "En" : "Dis");
2465 
2466 	if (!capable(CAP_SYS_ADMIN))
2467 		return -EACCES;
2468 	debug = arg ? 1 : 0;
2469 	return debug;
2470 }
2471 
2472 static int cdrom_ioctl_get_capability(struct cdrom_device_info *cdi)
2473 {
2474 	cdinfo(CD_DO_IOCTL, "entering CDROM_GET_CAPABILITY\n");
2475 	return (cdi->ops->capability & ~cdi->mask);
2476 }
2477 
2478 /*
2479  * The following function is implemented, although very few audio
2480  * discs give Universal Product Code information, which should just be
2481  * the Medium Catalog Number on the box.  Note, that the way the code
2482  * is written on the CD is /not/ uniform across all discs!
2483  */
2484 static int cdrom_ioctl_get_mcn(struct cdrom_device_info *cdi,
2485 		void __user *argp)
2486 {
2487 	struct cdrom_mcn mcn;
2488 	int ret;
2489 
2490 	cdinfo(CD_DO_IOCTL, "entering CDROM_GET_MCN\n");
2491 
2492 	if (!(cdi->ops->capability & CDC_MCN))
2493 		return -ENOSYS;
2494 	ret = cdi->ops->get_mcn(cdi, &mcn);
2495 	if (ret)
2496 		return ret;
2497 
2498 	if (copy_to_user(argp, &mcn, sizeof(mcn)))
2499 		return -EFAULT;
2500 	cdinfo(CD_DO_IOCTL, "CDROM_GET_MCN successful\n");
2501 	return 0;
2502 }
2503 
2504 static int cdrom_ioctl_drive_status(struct cdrom_device_info *cdi,
2505 		unsigned long arg)
2506 {
2507 	cdinfo(CD_DO_IOCTL, "entering CDROM_DRIVE_STATUS\n");
2508 
2509 	if (!(cdi->ops->capability & CDC_DRIVE_STATUS))
2510 		return -ENOSYS;
2511 	if (!CDROM_CAN(CDC_SELECT_DISC) ||
2512 	    (arg == CDSL_CURRENT || arg == CDSL_NONE))
2513 		return cdi->ops->drive_status(cdi, CDSL_CURRENT);
2514 	if (((int)arg >= cdi->capacity))
2515 		return -EINVAL;
2516 	return cdrom_slot_status(cdi, arg);
2517 }
2518 
2519 /*
2520  * Ok, this is where problems start.  The current interface for the
2521  * CDROM_DISC_STATUS ioctl is flawed.  It makes the false assumption that
2522  * CDs are all CDS_DATA_1 or all CDS_AUDIO, etc.  Unfortunatly, while this
2523  * is often the case, it is also very common for CDs to have some tracks
2524  * with data, and some tracks with audio.  Just because I feel like it,
2525  * I declare the following to be the best way to cope.  If the CD has ANY
2526  * data tracks on it, it will be returned as a data CD.  If it has any XA
2527  * tracks, I will return it as that.  Now I could simplify this interface
2528  * by combining these  returns with the above, but this more clearly
2529  * demonstrates the problem with the current interface.  Too bad this
2530  * wasn't designed to use bitmasks...         -Erik
2531  *
2532  * Well, now we have the option CDS_MIXED: a mixed-type CD.
2533  * User level programmers might feel the ioctl is not very useful.
2534  *					---david
2535  */
2536 static int cdrom_ioctl_disc_status(struct cdrom_device_info *cdi)
2537 {
2538 	tracktype tracks;
2539 
2540 	cdinfo(CD_DO_IOCTL, "entering CDROM_DISC_STATUS\n");
2541 
2542 	cdrom_count_tracks(cdi, &tracks);
2543 	if (tracks.error)
2544 		return tracks.error;
2545 
2546 	/* Policy mode on */
2547 	if (tracks.audio > 0) {
2548 		if (!tracks.data && !tracks.cdi && !tracks.xa)
2549 			return CDS_AUDIO;
2550 		else
2551 			return CDS_MIXED;
2552 	}
2553 
2554 	if (tracks.cdi > 0)
2555 		return CDS_XA_2_2;
2556 	if (tracks.xa > 0)
2557 		return CDS_XA_2_1;
2558 	if (tracks.data > 0)
2559 		return CDS_DATA_1;
2560 	/* Policy mode off */
2561 
2562 	cdinfo(CD_WARNING,"This disc doesn't have any tracks I recognize!\n");
2563 	return CDS_NO_INFO;
2564 }
2565 
2566 static int cdrom_ioctl_changer_nslots(struct cdrom_device_info *cdi)
2567 {
2568 	cdinfo(CD_DO_IOCTL, "entering CDROM_CHANGER_NSLOTS\n");
2569 	return cdi->capacity;
2570 }
2571 
2572 static int cdrom_ioctl_get_subchnl(struct cdrom_device_info *cdi,
2573 		void __user *argp)
2574 {
2575 	struct cdrom_subchnl q;
2576 	u8 requested, back;
2577 	int ret;
2578 
2579 	/* cdinfo(CD_DO_IOCTL,"entering CDROMSUBCHNL\n");*/
2580 
2581 	if (copy_from_user(&q, argp, sizeof(q)))
2582 		return -EFAULT;
2583 
2584 	requested = q.cdsc_format;
2585 	if (requested != CDROM_MSF && requested != CDROM_LBA)
2586 		return -EINVAL;
2587 	q.cdsc_format = CDROM_MSF;
2588 
2589 	ret = cdi->ops->audio_ioctl(cdi, CDROMSUBCHNL, &q);
2590 	if (ret)
2591 		return ret;
2592 
2593 	back = q.cdsc_format; /* local copy */
2594 	sanitize_format(&q.cdsc_absaddr, &back, requested);
2595 	sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
2596 
2597 	if (copy_to_user(argp, &q, sizeof(q)))
2598 		return -EFAULT;
2599 	/* cdinfo(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
2600 	return 0;
2601 }
2602 
2603 static int cdrom_ioctl_read_tochdr(struct cdrom_device_info *cdi,
2604 		void __user *argp)
2605 {
2606 	struct cdrom_tochdr header;
2607 	int ret;
2608 
2609 	/* cdinfo(CD_DO_IOCTL, "entering CDROMREADTOCHDR\n"); */
2610 
2611 	if (copy_from_user(&header, argp, sizeof(header)))
2612 		return -EFAULT;
2613 
2614 	ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCHDR, &header);
2615 	if (ret)
2616 		return ret;
2617 
2618 	if (copy_to_user(argp, &header, sizeof(header)))
2619 		return -EFAULT;
2620 	/* cdinfo(CD_DO_IOCTL, "CDROMREADTOCHDR successful\n"); */
2621 	return 0;
2622 }
2623 
2624 static int cdrom_ioctl_read_tocentry(struct cdrom_device_info *cdi,
2625 		void __user *argp)
2626 {
2627 	struct cdrom_tocentry entry;
2628 	u8 requested_format;
2629 	int ret;
2630 
2631 	/* cdinfo(CD_DO_IOCTL, "entering CDROMREADTOCENTRY\n"); */
2632 
2633 	if (copy_from_user(&entry, argp, sizeof(entry)))
2634 		return -EFAULT;
2635 
2636 	requested_format = entry.cdte_format;
2637 	if (requested_format != CDROM_MSF && requested_format != CDROM_LBA)
2638 		return -EINVAL;
2639 	/* make interface to low-level uniform */
2640 	entry.cdte_format = CDROM_MSF;
2641 	ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &entry);
2642 	if (ret)
2643 		return ret;
2644 	sanitize_format(&entry.cdte_addr, &entry.cdte_format, requested_format);
2645 
2646 	if (copy_to_user(argp, &entry, sizeof(entry)))
2647 		return -EFAULT;
2648 	/* cdinfo(CD_DO_IOCTL, "CDROMREADTOCENTRY successful\n"); */
2649 	return 0;
2650 }
2651 
2652 static int cdrom_ioctl_play_msf(struct cdrom_device_info *cdi,
2653 		void __user *argp)
2654 {
2655 	struct cdrom_msf msf;
2656 
2657 	cdinfo(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
2658 
2659 	if (!CDROM_CAN(CDC_PLAY_AUDIO))
2660 		return -ENOSYS;
2661 	if (copy_from_user(&msf, argp, sizeof(msf)))
2662 		return -EFAULT;
2663 	return cdi->ops->audio_ioctl(cdi, CDROMPLAYMSF, &msf);
2664 }
2665 
2666 static int cdrom_ioctl_play_trkind(struct cdrom_device_info *cdi,
2667 		void __user *argp)
2668 {
2669 	struct cdrom_ti ti;
2670 	int ret;
2671 
2672 	cdinfo(CD_DO_IOCTL, "entering CDROMPLAYTRKIND\n");
2673 
2674 	if (!CDROM_CAN(CDC_PLAY_AUDIO))
2675 		return -ENOSYS;
2676 	if (copy_from_user(&ti, argp, sizeof(ti)))
2677 		return -EFAULT;
2678 
2679 	ret = check_for_audio_disc(cdi, cdi->ops);
2680 	if (ret)
2681 		return ret;
2682 	return cdi->ops->audio_ioctl(cdi, CDROMPLAYTRKIND, &ti);
2683 }
2684 static int cdrom_ioctl_volctrl(struct cdrom_device_info *cdi,
2685 		void __user *argp)
2686 {
2687 	struct cdrom_volctrl volume;
2688 
2689 	cdinfo(CD_DO_IOCTL, "entering CDROMVOLCTRL\n");
2690 
2691 	if (!CDROM_CAN(CDC_PLAY_AUDIO))
2692 		return -ENOSYS;
2693 	if (copy_from_user(&volume, argp, sizeof(volume)))
2694 		return -EFAULT;
2695 	return cdi->ops->audio_ioctl(cdi, CDROMVOLCTRL, &volume);
2696 }
2697 
2698 static int cdrom_ioctl_volread(struct cdrom_device_info *cdi,
2699 		void __user *argp)
2700 {
2701 	struct cdrom_volctrl volume;
2702 	int ret;
2703 
2704 	cdinfo(CD_DO_IOCTL, "entering CDROMVOLREAD\n");
2705 
2706 	if (!CDROM_CAN(CDC_PLAY_AUDIO))
2707 		return -ENOSYS;
2708 
2709 	ret = cdi->ops->audio_ioctl(cdi, CDROMVOLREAD, &volume);
2710 	if (ret)
2711 		return ret;
2712 
2713 	if (copy_to_user(argp, &volume, sizeof(volume)))
2714 		return -EFAULT;
2715 	return 0;
2716 }
2717 
2718 static int cdrom_ioctl_audioctl(struct cdrom_device_info *cdi,
2719 		unsigned int cmd)
2720 {
2721 	int ret;
2722 
2723 	cdinfo(CD_DO_IOCTL, "doing audio ioctl (start/stop/pause/resume)\n");
2724 
2725 	if (!CDROM_CAN(CDC_PLAY_AUDIO))
2726 		return -ENOSYS;
2727 	ret = check_for_audio_disc(cdi, cdi->ops);
2728 	if (ret)
2729 		return ret;
2730 	return cdi->ops->audio_ioctl(cdi, cmd, NULL);
2731 }
2732 
2733 /*
2734  * Just about every imaginable ioctl is supported in the Uniform layer
2735  * these days.
2736  * ATAPI / SCSI specific code now mainly resides in mmc_ioctl().
2737  */
2738 int cdrom_ioctl(struct cdrom_device_info *cdi, struct block_device *bdev,
2739 		fmode_t mode, unsigned int cmd, unsigned long arg)
2740 {
2741 	void __user *argp = (void __user *)arg;
2742 	int ret;
2743 	struct gendisk *disk = bdev->bd_disk;
2744 
2745 	/*
2746 	 * Try the generic SCSI command ioctl's first.
2747 	 */
2748 	ret = scsi_cmd_ioctl(disk->queue, disk, mode, cmd, argp);
2749 	if (ret != -ENOTTY)
2750 		return ret;
2751 
2752 	switch (cmd) {
2753 	case CDROMMULTISESSION:
2754 		return cdrom_ioctl_multisession(cdi, argp);
2755 	case CDROMEJECT:
2756 		return cdrom_ioctl_eject(cdi);
2757 	case CDROMCLOSETRAY:
2758 		return cdrom_ioctl_closetray(cdi);
2759 	case CDROMEJECT_SW:
2760 		return cdrom_ioctl_eject_sw(cdi, arg);
2761 	case CDROM_MEDIA_CHANGED:
2762 		return cdrom_ioctl_media_changed(cdi, arg);
2763 	case CDROM_SET_OPTIONS:
2764 		return cdrom_ioctl_set_options(cdi, arg);
2765 	case CDROM_CLEAR_OPTIONS:
2766 		return cdrom_ioctl_clear_options(cdi, arg);
2767 	case CDROM_SELECT_SPEED:
2768 		return cdrom_ioctl_select_speed(cdi, arg);
2769 	case CDROM_SELECT_DISC:
2770 		return cdrom_ioctl_select_disc(cdi, arg);
2771 	case CDROMRESET:
2772 		return cdrom_ioctl_reset(cdi, bdev);
2773 	case CDROM_LOCKDOOR:
2774 		return cdrom_ioctl_lock_door(cdi, arg);
2775 	case CDROM_DEBUG:
2776 		return cdrom_ioctl_debug(cdi, arg);
2777 	case CDROM_GET_CAPABILITY:
2778 		return cdrom_ioctl_get_capability(cdi);
2779 	case CDROM_GET_MCN:
2780 		return cdrom_ioctl_get_mcn(cdi, argp);
2781 	case CDROM_DRIVE_STATUS:
2782 		return cdrom_ioctl_drive_status(cdi, arg);
2783 	case CDROM_DISC_STATUS:
2784 		return cdrom_ioctl_disc_status(cdi);
2785 	case CDROM_CHANGER_NSLOTS:
2786 		return cdrom_ioctl_changer_nslots(cdi);
2787 	}
2788 
2789 	/*
2790 	 * Use the ioctls that are implemented through the generic_packet()
2791 	 * interface. this may look at bit funny, but if -ENOTTY is
2792 	 * returned that particular ioctl is not implemented and we
2793 	 * let it go through the device specific ones.
2794 	 */
2795 	if (CDROM_CAN(CDC_GENERIC_PACKET)) {
2796 		ret = mmc_ioctl(cdi, cmd, arg);
2797 		if (ret != -ENOTTY)
2798 			return ret;
2799 	}
2800 
2801 	/*
2802 	 * Note: most of the cdinfo() calls are commented out here,
2803 	 * because they fill up the sys log when CD players poll
2804 	 * the drive.
2805 	 */
2806 	switch (cmd) {
2807 	case CDROMSUBCHNL:
2808 		return cdrom_ioctl_get_subchnl(cdi, argp);
2809 	case CDROMREADTOCHDR:
2810 		return cdrom_ioctl_read_tochdr(cdi, argp);
2811 	case CDROMREADTOCENTRY:
2812 		return cdrom_ioctl_read_tocentry(cdi, argp);
2813 	case CDROMPLAYMSF:
2814 		return cdrom_ioctl_play_msf(cdi, argp);
2815 	case CDROMPLAYTRKIND:
2816 		return cdrom_ioctl_play_trkind(cdi, argp);
2817 	case CDROMVOLCTRL:
2818 		return cdrom_ioctl_volctrl(cdi, argp);
2819 	case CDROMVOLREAD:
2820 		return cdrom_ioctl_volread(cdi, argp);
2821 	case CDROMSTART:
2822 	case CDROMSTOP:
2823 	case CDROMPAUSE:
2824 	case CDROMRESUME:
2825 		return cdrom_ioctl_audioctl(cdi, cmd);
2826 	}
2827 
2828 	return -ENOSYS;
2829 }
2830 
2831 /*
2832  * Required when we need to use READ_10 to issue other than 2048 block
2833  * reads
2834  */
2835 static int cdrom_switch_blocksize(struct cdrom_device_info *cdi, int size)
2836 {
2837 	struct cdrom_device_ops *cdo = cdi->ops;
2838 	struct packet_command cgc;
2839 	struct modesel_head mh;
2840 
2841 	memset(&mh, 0, sizeof(mh));
2842 	mh.block_desc_length = 0x08;
2843 	mh.block_length_med = (size >> 8) & 0xff;
2844 	mh.block_length_lo = size & 0xff;
2845 
2846 	memset(&cgc, 0, sizeof(cgc));
2847 	cgc.cmd[0] = 0x15;
2848 	cgc.cmd[1] = 1 << 4;
2849 	cgc.cmd[4] = 12;
2850 	cgc.buflen = sizeof(mh);
2851 	cgc.buffer = (char *) &mh;
2852 	cgc.data_direction = CGC_DATA_WRITE;
2853 	mh.block_desc_length = 0x08;
2854 	mh.block_length_med = (size >> 8) & 0xff;
2855 	mh.block_length_lo = size & 0xff;
2856 
2857 	return cdo->generic_packet(cdi, &cgc);
2858 }
2859 
2860 static noinline int mmc_ioctl_cdrom_read_data(struct cdrom_device_info *cdi,
2861 					void __user *arg,
2862 					struct packet_command *cgc,
2863 					int cmd)
2864 {
2865 	struct request_sense sense;
2866 	struct cdrom_msf msf;
2867 	int blocksize = 0, format = 0, lba;
2868 	int ret;
2869 
2870 	switch (cmd) {
2871 	case CDROMREADRAW:
2872 		blocksize = CD_FRAMESIZE_RAW;
2873 		break;
2874 	case CDROMREADMODE1:
2875 		blocksize = CD_FRAMESIZE;
2876 		format = 2;
2877 		break;
2878 	case CDROMREADMODE2:
2879 		blocksize = CD_FRAMESIZE_RAW0;
2880 		break;
2881 	}
2882 	IOCTL_IN(arg, struct cdrom_msf, msf);
2883 	lba = msf_to_lba(msf.cdmsf_min0, msf.cdmsf_sec0, msf.cdmsf_frame0);
2884 	/* FIXME: we need upper bound checking, too!! */
2885 	if (lba < 0)
2886 		return -EINVAL;
2887 
2888 	cgc->buffer = kmalloc(blocksize, GFP_KERNEL);
2889 	if (cgc->buffer == NULL)
2890 		return -ENOMEM;
2891 
2892 	memset(&sense, 0, sizeof(sense));
2893 	cgc->sense = &sense;
2894 	cgc->data_direction = CGC_DATA_READ;
2895 	ret = cdrom_read_block(cdi, cgc, lba, 1, format, blocksize);
2896 	if (ret && sense.sense_key == 0x05 &&
2897 		   sense.asc == 0x20 &&
2898 		   sense.ascq == 0x00) {
2899 		/*
2900 		 * SCSI-II devices are not required to support
2901 		 * READ_CD, so let's try switching block size
2902 		 */
2903 		/* FIXME: switch back again... */
2904 		ret = cdrom_switch_blocksize(cdi, blocksize);
2905 		if (ret)
2906 			goto out;
2907 		cgc->sense = NULL;
2908 		ret = cdrom_read_cd(cdi, cgc, lba, blocksize, 1);
2909 		ret |= cdrom_switch_blocksize(cdi, blocksize);
2910 	}
2911 	if (!ret && copy_to_user(arg, cgc->buffer, blocksize))
2912 		ret = -EFAULT;
2913 out:
2914 	kfree(cgc->buffer);
2915 	return ret;
2916 }
2917 
2918 static noinline int mmc_ioctl_cdrom_read_audio(struct cdrom_device_info *cdi,
2919 					void __user *arg)
2920 {
2921 	struct cdrom_read_audio ra;
2922 	int lba;
2923 
2924 	IOCTL_IN(arg, struct cdrom_read_audio, ra);
2925 
2926 	if (ra.addr_format == CDROM_MSF)
2927 		lba = msf_to_lba(ra.addr.msf.minute,
2928 				 ra.addr.msf.second,
2929 				 ra.addr.msf.frame);
2930 	else if (ra.addr_format == CDROM_LBA)
2931 		lba = ra.addr.lba;
2932 	else
2933 		return -EINVAL;
2934 
2935 	/* FIXME: we need upper bound checking, too!! */
2936 	if (lba < 0 || ra.nframes <= 0 || ra.nframes > CD_FRAMES)
2937 		return -EINVAL;
2938 
2939 	return cdrom_read_cdda(cdi, ra.buf, lba, ra.nframes);
2940 }
2941 
2942 static noinline int mmc_ioctl_cdrom_subchannel(struct cdrom_device_info *cdi,
2943 					void __user *arg)
2944 {
2945 	int ret;
2946 	struct cdrom_subchnl q;
2947 	u_char requested, back;
2948 	IOCTL_IN(arg, struct cdrom_subchnl, q);
2949 	requested = q.cdsc_format;
2950 	if (!((requested == CDROM_MSF) ||
2951 	      (requested == CDROM_LBA)))
2952 		return -EINVAL;
2953 	q.cdsc_format = CDROM_MSF;
2954 	ret = cdrom_read_subchannel(cdi, &q, 0);
2955 	if (ret)
2956 		return ret;
2957 	back = q.cdsc_format; /* local copy */
2958 	sanitize_format(&q.cdsc_absaddr, &back, requested);
2959 	sanitize_format(&q.cdsc_reladdr, &q.cdsc_format, requested);
2960 	IOCTL_OUT(arg, struct cdrom_subchnl, q);
2961 	/* cdinfo(CD_DO_IOCTL, "CDROMSUBCHNL successful\n"); */
2962 	return 0;
2963 }
2964 
2965 static noinline int mmc_ioctl_cdrom_play_msf(struct cdrom_device_info *cdi,
2966 					void __user *arg,
2967 					struct packet_command *cgc)
2968 {
2969 	struct cdrom_device_ops *cdo = cdi->ops;
2970 	struct cdrom_msf msf;
2971 	cdinfo(CD_DO_IOCTL, "entering CDROMPLAYMSF\n");
2972 	IOCTL_IN(arg, struct cdrom_msf, msf);
2973 	cgc->cmd[0] = GPCMD_PLAY_AUDIO_MSF;
2974 	cgc->cmd[3] = msf.cdmsf_min0;
2975 	cgc->cmd[4] = msf.cdmsf_sec0;
2976 	cgc->cmd[5] = msf.cdmsf_frame0;
2977 	cgc->cmd[6] = msf.cdmsf_min1;
2978 	cgc->cmd[7] = msf.cdmsf_sec1;
2979 	cgc->cmd[8] = msf.cdmsf_frame1;
2980 	cgc->data_direction = CGC_DATA_NONE;
2981 	return cdo->generic_packet(cdi, cgc);
2982 }
2983 
2984 static noinline int mmc_ioctl_cdrom_play_blk(struct cdrom_device_info *cdi,
2985 					void __user *arg,
2986 					struct packet_command *cgc)
2987 {
2988 	struct cdrom_device_ops *cdo = cdi->ops;
2989 	struct cdrom_blk blk;
2990 	cdinfo(CD_DO_IOCTL, "entering CDROMPLAYBLK\n");
2991 	IOCTL_IN(arg, struct cdrom_blk, blk);
2992 	cgc->cmd[0] = GPCMD_PLAY_AUDIO_10;
2993 	cgc->cmd[2] = (blk.from >> 24) & 0xff;
2994 	cgc->cmd[3] = (blk.from >> 16) & 0xff;
2995 	cgc->cmd[4] = (blk.from >>  8) & 0xff;
2996 	cgc->cmd[5] = blk.from & 0xff;
2997 	cgc->cmd[7] = (blk.len >> 8) & 0xff;
2998 	cgc->cmd[8] = blk.len & 0xff;
2999 	cgc->data_direction = CGC_DATA_NONE;
3000 	return cdo->generic_packet(cdi, cgc);
3001 }
3002 
3003 static noinline int mmc_ioctl_cdrom_volume(struct cdrom_device_info *cdi,
3004 					void __user *arg,
3005 					struct packet_command *cgc,
3006 					unsigned int cmd)
3007 {
3008 	struct cdrom_volctrl volctrl;
3009 	unsigned char buffer[32];
3010 	char mask[sizeof(buffer)];
3011 	unsigned short offset;
3012 	int ret;
3013 
3014 	cdinfo(CD_DO_IOCTL, "entering CDROMVOLUME\n");
3015 
3016 	IOCTL_IN(arg, struct cdrom_volctrl, volctrl);
3017 
3018 	cgc->buffer = buffer;
3019 	cgc->buflen = 24;
3020 	ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 0);
3021 	if (ret)
3022 		return ret;
3023 
3024 	/* originally the code depended on buffer[1] to determine
3025 	   how much data is available for transfer. buffer[1] is
3026 	   unfortunately ambigious and the only reliable way seem
3027 	   to be to simply skip over the block descriptor... */
3028 	offset = 8 + be16_to_cpu(*(__be16 *)(buffer + 6));
3029 
3030 	if (offset + 16 > sizeof(buffer))
3031 		return -E2BIG;
3032 
3033 	if (offset + 16 > cgc->buflen) {
3034 		cgc->buflen = offset + 16;
3035 		ret = cdrom_mode_sense(cdi, cgc,
3036 					GPMODE_AUDIO_CTL_PAGE, 0);
3037 		if (ret)
3038 			return ret;
3039 	}
3040 
3041 	/* sanity check */
3042 	if ((buffer[offset] & 0x3f) != GPMODE_AUDIO_CTL_PAGE ||
3043 			buffer[offset + 1] < 14)
3044 		return -EINVAL;
3045 
3046 	/* now we have the current volume settings. if it was only
3047 	   a CDROMVOLREAD, return these values */
3048 	if (cmd == CDROMVOLREAD) {
3049 		volctrl.channel0 = buffer[offset+9];
3050 		volctrl.channel1 = buffer[offset+11];
3051 		volctrl.channel2 = buffer[offset+13];
3052 		volctrl.channel3 = buffer[offset+15];
3053 		IOCTL_OUT(arg, struct cdrom_volctrl, volctrl);
3054 		return 0;
3055 	}
3056 
3057 	/* get the volume mask */
3058 	cgc->buffer = mask;
3059 	ret = cdrom_mode_sense(cdi, cgc, GPMODE_AUDIO_CTL_PAGE, 1);
3060 	if (ret)
3061 		return ret;
3062 
3063 	buffer[offset + 9]  = volctrl.channel0 & mask[offset + 9];
3064 	buffer[offset + 11] = volctrl.channel1 & mask[offset + 11];
3065 	buffer[offset + 13] = volctrl.channel2 & mask[offset + 13];
3066 	buffer[offset + 15] = volctrl.channel3 & mask[offset + 15];
3067 
3068 	/* set volume */
3069 	cgc->buffer = buffer + offset - 8;
3070 	memset(cgc->buffer, 0, 8);
3071 	return cdrom_mode_select(cdi, cgc);
3072 }
3073 
3074 static noinline int mmc_ioctl_cdrom_start_stop(struct cdrom_device_info *cdi,
3075 					struct packet_command *cgc,
3076 					int cmd)
3077 {
3078 	struct cdrom_device_ops *cdo = cdi->ops;
3079 	cdinfo(CD_DO_IOCTL, "entering CDROMSTART/CDROMSTOP\n");
3080 	cgc->cmd[0] = GPCMD_START_STOP_UNIT;
3081 	cgc->cmd[1] = 1;
3082 	cgc->cmd[4] = (cmd == CDROMSTART) ? 1 : 0;
3083 	cgc->data_direction = CGC_DATA_NONE;
3084 	return cdo->generic_packet(cdi, cgc);
3085 }
3086 
3087 static noinline int mmc_ioctl_cdrom_pause_resume(struct cdrom_device_info *cdi,
3088 					struct packet_command *cgc,
3089 					int cmd)
3090 {
3091 	struct cdrom_device_ops *cdo = cdi->ops;
3092 	cdinfo(CD_DO_IOCTL, "entering CDROMPAUSE/CDROMRESUME\n");
3093 	cgc->cmd[0] = GPCMD_PAUSE_RESUME;
3094 	cgc->cmd[8] = (cmd == CDROMRESUME) ? 1 : 0;
3095 	cgc->data_direction = CGC_DATA_NONE;
3096 	return cdo->generic_packet(cdi, cgc);
3097 }
3098 
3099 static noinline int mmc_ioctl_dvd_read_struct(struct cdrom_device_info *cdi,
3100 						void __user *arg,
3101 						struct packet_command *cgc)
3102 {
3103 	int ret;
3104 	dvd_struct *s;
3105 	int size = sizeof(dvd_struct);
3106 
3107 	if (!CDROM_CAN(CDC_DVD))
3108 		return -ENOSYS;
3109 
3110 	s = kmalloc(size, GFP_KERNEL);
3111 	if (!s)
3112 		return -ENOMEM;
3113 
3114 	cdinfo(CD_DO_IOCTL, "entering DVD_READ_STRUCT\n");
3115 	if (copy_from_user(s, arg, size)) {
3116 		kfree(s);
3117 		return -EFAULT;
3118 	}
3119 
3120 	ret = dvd_read_struct(cdi, s, cgc);
3121 	if (ret)
3122 		goto out;
3123 
3124 	if (copy_to_user(arg, s, size))
3125 		ret = -EFAULT;
3126 out:
3127 	kfree(s);
3128 	return ret;
3129 }
3130 
3131 static noinline int mmc_ioctl_dvd_auth(struct cdrom_device_info *cdi,
3132 					void __user *arg)
3133 {
3134 	int ret;
3135 	dvd_authinfo ai;
3136 	if (!CDROM_CAN(CDC_DVD))
3137 		return -ENOSYS;
3138 	cdinfo(CD_DO_IOCTL, "entering DVD_AUTH\n");
3139 	IOCTL_IN(arg, dvd_authinfo, ai);
3140 	ret = dvd_do_auth(cdi, &ai);
3141 	if (ret)
3142 		return ret;
3143 	IOCTL_OUT(arg, dvd_authinfo, ai);
3144 	return 0;
3145 }
3146 
3147 static noinline int mmc_ioctl_cdrom_next_writable(struct cdrom_device_info *cdi,
3148 						void __user *arg)
3149 {
3150 	int ret;
3151 	long next = 0;
3152 	cdinfo(CD_DO_IOCTL, "entering CDROM_NEXT_WRITABLE\n");
3153 	ret = cdrom_get_next_writable(cdi, &next);
3154 	if (ret)
3155 		return ret;
3156 	IOCTL_OUT(arg, long, next);
3157 	return 0;
3158 }
3159 
3160 static noinline int mmc_ioctl_cdrom_last_written(struct cdrom_device_info *cdi,
3161 						void __user *arg)
3162 {
3163 	int ret;
3164 	long last = 0;
3165 	cdinfo(CD_DO_IOCTL, "entering CDROM_LAST_WRITTEN\n");
3166 	ret = cdrom_get_last_written(cdi, &last);
3167 	if (ret)
3168 		return ret;
3169 	IOCTL_OUT(arg, long, last);
3170 	return 0;
3171 }
3172 
3173 static int mmc_ioctl(struct cdrom_device_info *cdi, unsigned int cmd,
3174 		     unsigned long arg)
3175 {
3176 	struct packet_command cgc;
3177 	void __user *userptr = (void __user *)arg;
3178 
3179 	memset(&cgc, 0, sizeof(cgc));
3180 
3181 	/* build a unified command and queue it through
3182 	   cdo->generic_packet() */
3183 	switch (cmd) {
3184 	case CDROMREADRAW:
3185 	case CDROMREADMODE1:
3186 	case CDROMREADMODE2:
3187 		return mmc_ioctl_cdrom_read_data(cdi, userptr, &cgc, cmd);
3188 	case CDROMREADAUDIO:
3189 		return mmc_ioctl_cdrom_read_audio(cdi, userptr);
3190 	case CDROMSUBCHNL:
3191 		return mmc_ioctl_cdrom_subchannel(cdi, userptr);
3192 	case CDROMPLAYMSF:
3193 		return mmc_ioctl_cdrom_play_msf(cdi, userptr, &cgc);
3194 	case CDROMPLAYBLK:
3195 		return mmc_ioctl_cdrom_play_blk(cdi, userptr, &cgc);
3196 	case CDROMVOLCTRL:
3197 	case CDROMVOLREAD:
3198 		return mmc_ioctl_cdrom_volume(cdi, userptr, &cgc, cmd);
3199 	case CDROMSTART:
3200 	case CDROMSTOP:
3201 		return mmc_ioctl_cdrom_start_stop(cdi, &cgc, cmd);
3202 	case CDROMPAUSE:
3203 	case CDROMRESUME:
3204 		return mmc_ioctl_cdrom_pause_resume(cdi, &cgc, cmd);
3205 	case DVD_READ_STRUCT:
3206 		return mmc_ioctl_dvd_read_struct(cdi, userptr, &cgc);
3207 	case DVD_AUTH:
3208 		return mmc_ioctl_dvd_auth(cdi, userptr);
3209 	case CDROM_NEXT_WRITABLE:
3210 		return mmc_ioctl_cdrom_next_writable(cdi, userptr);
3211 	case CDROM_LAST_WRITTEN:
3212 		return mmc_ioctl_cdrom_last_written(cdi, userptr);
3213 	}
3214 
3215 	return -ENOTTY;
3216 }
3217 
3218 static int cdrom_get_track_info(struct cdrom_device_info *cdi, __u16 track, __u8 type,
3219 			 track_information *ti)
3220 {
3221 	struct cdrom_device_ops *cdo = cdi->ops;
3222 	struct packet_command cgc;
3223 	int ret, buflen;
3224 
3225 	init_cdrom_command(&cgc, ti, 8, CGC_DATA_READ);
3226 	cgc.cmd[0] = GPCMD_READ_TRACK_RZONE_INFO;
3227 	cgc.cmd[1] = type & 3;
3228 	cgc.cmd[4] = (track & 0xff00) >> 8;
3229 	cgc.cmd[5] = track & 0xff;
3230 	cgc.cmd[8] = 8;
3231 	cgc.quiet = 1;
3232 
3233 	if ((ret = cdo->generic_packet(cdi, &cgc)))
3234 		return ret;
3235 
3236 	buflen = be16_to_cpu(ti->track_information_length) +
3237 		     sizeof(ti->track_information_length);
3238 
3239 	if (buflen > sizeof(track_information))
3240 		buflen = sizeof(track_information);
3241 
3242 	cgc.cmd[8] = cgc.buflen = buflen;
3243 	if ((ret = cdo->generic_packet(cdi, &cgc)))
3244 		return ret;
3245 
3246 	/* return actual fill size */
3247 	return buflen;
3248 }
3249 
3250 /* requires CD R/RW */
3251 static int cdrom_get_disc_info(struct cdrom_device_info *cdi, disc_information *di)
3252 {
3253 	struct cdrom_device_ops *cdo = cdi->ops;
3254 	struct packet_command cgc;
3255 	int ret, buflen;
3256 
3257 	/* set up command and get the disc info */
3258 	init_cdrom_command(&cgc, di, sizeof(*di), CGC_DATA_READ);
3259 	cgc.cmd[0] = GPCMD_READ_DISC_INFO;
3260 	cgc.cmd[8] = cgc.buflen = 2;
3261 	cgc.quiet = 1;
3262 
3263 	if ((ret = cdo->generic_packet(cdi, &cgc)))
3264 		return ret;
3265 
3266 	/* not all drives have the same disc_info length, so requeue
3267 	 * packet with the length the drive tells us it can supply
3268 	 */
3269 	buflen = be16_to_cpu(di->disc_information_length) +
3270 		     sizeof(di->disc_information_length);
3271 
3272 	if (buflen > sizeof(disc_information))
3273 		buflen = sizeof(disc_information);
3274 
3275 	cgc.cmd[8] = cgc.buflen = buflen;
3276 	if ((ret = cdo->generic_packet(cdi, &cgc)))
3277 		return ret;
3278 
3279 	/* return actual fill size */
3280 	return buflen;
3281 }
3282 
3283 /* return the last written block on the CD-R media. this is for the udf
3284    file system. */
3285 int cdrom_get_last_written(struct cdrom_device_info *cdi, long *last_written)
3286 {
3287 	struct cdrom_tocentry toc;
3288 	disc_information di;
3289 	track_information ti;
3290 	__u32 last_track;
3291 	int ret = -1, ti_size;
3292 
3293 	if (!CDROM_CAN(CDC_GENERIC_PACKET))
3294 		goto use_toc;
3295 
3296 	ret = cdrom_get_disc_info(cdi, &di);
3297 	if (ret < (int)(offsetof(typeof(di), last_track_lsb)
3298 			+ sizeof(di.last_track_lsb)))
3299 		goto use_toc;
3300 
3301 	/* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
3302 	last_track = (di.last_track_msb << 8) | di.last_track_lsb;
3303 	ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
3304 	if (ti_size < (int)offsetof(typeof(ti), track_start))
3305 		goto use_toc;
3306 
3307 	/* if this track is blank, try the previous. */
3308 	if (ti.blank) {
3309 		if (last_track==1)
3310 			goto use_toc;
3311 		last_track--;
3312 		ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
3313 	}
3314 
3315 	if (ti_size < (int)(offsetof(typeof(ti), track_size)
3316 				+ sizeof(ti.track_size)))
3317 		goto use_toc;
3318 
3319 	/* if last recorded field is valid, return it. */
3320 	if (ti.lra_v && ti_size >= (int)(offsetof(typeof(ti), last_rec_address)
3321 				+ sizeof(ti.last_rec_address))) {
3322 		*last_written = be32_to_cpu(ti.last_rec_address);
3323 	} else {
3324 		/* make it up instead */
3325 		*last_written = be32_to_cpu(ti.track_start) +
3326 				be32_to_cpu(ti.track_size);
3327 		if (ti.free_blocks)
3328 			*last_written -= (be32_to_cpu(ti.free_blocks) + 7);
3329 	}
3330 	return 0;
3331 
3332 	/* this is where we end up if the drive either can't do a
3333 	   GPCMD_READ_DISC_INFO or GPCMD_READ_TRACK_RZONE_INFO or if
3334 	   it doesn't give enough information or fails. then we return
3335 	   the toc contents. */
3336 use_toc:
3337 	toc.cdte_format = CDROM_MSF;
3338 	toc.cdte_track = CDROM_LEADOUT;
3339 	if ((ret = cdi->ops->audio_ioctl(cdi, CDROMREADTOCENTRY, &toc)))
3340 		return ret;
3341 	sanitize_format(&toc.cdte_addr, &toc.cdte_format, CDROM_LBA);
3342 	*last_written = toc.cdte_addr.lba;
3343 	return 0;
3344 }
3345 
3346 /* return the next writable block. also for udf file system. */
3347 static int cdrom_get_next_writable(struct cdrom_device_info *cdi, long *next_writable)
3348 {
3349 	disc_information di;
3350 	track_information ti;
3351 	__u16 last_track;
3352 	int ret, ti_size;
3353 
3354 	if (!CDROM_CAN(CDC_GENERIC_PACKET))
3355 		goto use_last_written;
3356 
3357 	ret = cdrom_get_disc_info(cdi, &di);
3358 	if (ret < 0 || ret < offsetof(typeof(di), last_track_lsb)
3359 				+ sizeof(di.last_track_lsb))
3360 		goto use_last_written;
3361 
3362 	/* if unit didn't return msb, it's zeroed by cdrom_get_disc_info */
3363 	last_track = (di.last_track_msb << 8) | di.last_track_lsb;
3364 	ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
3365 	if (ti_size < 0 || ti_size < offsetof(typeof(ti), track_start))
3366 		goto use_last_written;
3367 
3368         /* if this track is blank, try the previous. */
3369 	if (ti.blank) {
3370 		if (last_track == 1)
3371 			goto use_last_written;
3372 		last_track--;
3373 		ti_size = cdrom_get_track_info(cdi, last_track, 1, &ti);
3374 		if (ti_size < 0)
3375 			goto use_last_written;
3376 	}
3377 
3378 	/* if next recordable address field is valid, use it. */
3379 	if (ti.nwa_v && ti_size >= offsetof(typeof(ti), next_writable)
3380 				+ sizeof(ti.next_writable)) {
3381 		*next_writable = be32_to_cpu(ti.next_writable);
3382 		return 0;
3383 	}
3384 
3385 use_last_written:
3386 	if ((ret = cdrom_get_last_written(cdi, next_writable))) {
3387 		*next_writable = 0;
3388 		return ret;
3389 	} else {
3390 		*next_writable += 7;
3391 		return 0;
3392 	}
3393 }
3394 
3395 EXPORT_SYMBOL(cdrom_get_last_written);
3396 EXPORT_SYMBOL(register_cdrom);
3397 EXPORT_SYMBOL(unregister_cdrom);
3398 EXPORT_SYMBOL(cdrom_open);
3399 EXPORT_SYMBOL(cdrom_release);
3400 EXPORT_SYMBOL(cdrom_ioctl);
3401 EXPORT_SYMBOL(cdrom_media_changed);
3402 EXPORT_SYMBOL(cdrom_number_of_slots);
3403 EXPORT_SYMBOL(cdrom_mode_select);
3404 EXPORT_SYMBOL(cdrom_mode_sense);
3405 EXPORT_SYMBOL(init_cdrom_command);
3406 EXPORT_SYMBOL(cdrom_get_media_event);
3407 
3408 #ifdef CONFIG_SYSCTL
3409 
3410 #define CDROM_STR_SIZE 1000
3411 
3412 static struct cdrom_sysctl_settings {
3413 	char	info[CDROM_STR_SIZE];	/* general info */
3414 	int	autoclose;		/* close tray upon mount, etc */
3415 	int	autoeject;		/* eject on umount */
3416 	int	debug;			/* turn on debugging messages */
3417 	int	lock;			/* lock the door on device open */
3418 	int	check;			/* check media type */
3419 } cdrom_sysctl_settings;
3420 
3421 enum cdrom_print_option {
3422 	CTL_NAME,
3423 	CTL_SPEED,
3424 	CTL_SLOTS,
3425 	CTL_CAPABILITY
3426 };
3427 
3428 static int cdrom_print_info(const char *header, int val, char *info,
3429 				int *pos, enum cdrom_print_option option)
3430 {
3431 	const int max_size = sizeof(cdrom_sysctl_settings.info);
3432 	struct cdrom_device_info *cdi;
3433 	int ret;
3434 
3435 	ret = scnprintf(info + *pos, max_size - *pos, header);
3436 	if (!ret)
3437 		return 1;
3438 
3439 	*pos += ret;
3440 
3441 	list_for_each_entry(cdi, &cdrom_list, list) {
3442 		switch (option) {
3443 		case CTL_NAME:
3444 			ret = scnprintf(info + *pos, max_size - *pos,
3445 					"\t%s", cdi->name);
3446 			break;
3447 		case CTL_SPEED:
3448 			ret = scnprintf(info + *pos, max_size - *pos,
3449 					"\t%d", cdi->speed);
3450 			break;
3451 		case CTL_SLOTS:
3452 			ret = scnprintf(info + *pos, max_size - *pos,
3453 					"\t%d", cdi->capacity);
3454 			break;
3455 		case CTL_CAPABILITY:
3456 			ret = scnprintf(info + *pos, max_size - *pos,
3457 					"\t%d", CDROM_CAN(val) != 0);
3458 			break;
3459 		default:
3460 			pr_info("invalid option%d\n", option);
3461 			return 1;
3462 		}
3463 		if (!ret)
3464 			return 1;
3465 		*pos += ret;
3466 	}
3467 
3468 	return 0;
3469 }
3470 
3471 static int cdrom_sysctl_info(ctl_table *ctl, int write,
3472                            void __user *buffer, size_t *lenp, loff_t *ppos)
3473 {
3474 	int pos;
3475 	char *info = cdrom_sysctl_settings.info;
3476 	const int max_size = sizeof(cdrom_sysctl_settings.info);
3477 
3478 	if (!*lenp || (*ppos && !write)) {
3479 		*lenp = 0;
3480 		return 0;
3481 	}
3482 
3483 	mutex_lock(&cdrom_mutex);
3484 
3485 	pos = sprintf(info, "CD-ROM information, " VERSION "\n");
3486 
3487 	if (cdrom_print_info("\ndrive name:\t", 0, info, &pos, CTL_NAME))
3488 		goto done;
3489 	if (cdrom_print_info("\ndrive speed:\t", 0, info, &pos, CTL_SPEED))
3490 		goto done;
3491 	if (cdrom_print_info("\ndrive # of slots:", 0, info, &pos, CTL_SLOTS))
3492 		goto done;
3493 	if (cdrom_print_info("\nCan close tray:\t",
3494 				CDC_CLOSE_TRAY, info, &pos, CTL_CAPABILITY))
3495 		goto done;
3496 	if (cdrom_print_info("\nCan open tray:\t",
3497 				CDC_OPEN_TRAY, info, &pos, CTL_CAPABILITY))
3498 		goto done;
3499 	if (cdrom_print_info("\nCan lock tray:\t",
3500 				CDC_LOCK, info, &pos, CTL_CAPABILITY))
3501 		goto done;
3502 	if (cdrom_print_info("\nCan change speed:",
3503 				CDC_SELECT_SPEED, info, &pos, CTL_CAPABILITY))
3504 		goto done;
3505 	if (cdrom_print_info("\nCan select disk:",
3506 				CDC_SELECT_DISC, info, &pos, CTL_CAPABILITY))
3507 		goto done;
3508 	if (cdrom_print_info("\nCan read multisession:",
3509 				CDC_MULTI_SESSION, info, &pos, CTL_CAPABILITY))
3510 		goto done;
3511 	if (cdrom_print_info("\nCan read MCN:\t",
3512 				CDC_MCN, info, &pos, CTL_CAPABILITY))
3513 		goto done;
3514 	if (cdrom_print_info("\nReports media changed:",
3515 				CDC_MEDIA_CHANGED, info, &pos, CTL_CAPABILITY))
3516 		goto done;
3517 	if (cdrom_print_info("\nCan play audio:\t",
3518 				CDC_PLAY_AUDIO, info, &pos, CTL_CAPABILITY))
3519 		goto done;
3520 	if (cdrom_print_info("\nCan write CD-R:\t",
3521 				CDC_CD_R, info, &pos, CTL_CAPABILITY))
3522 		goto done;
3523 	if (cdrom_print_info("\nCan write CD-RW:",
3524 				CDC_CD_RW, info, &pos, CTL_CAPABILITY))
3525 		goto done;
3526 	if (cdrom_print_info("\nCan read DVD:\t",
3527 				CDC_DVD, info, &pos, CTL_CAPABILITY))
3528 		goto done;
3529 	if (cdrom_print_info("\nCan write DVD-R:",
3530 				CDC_DVD_R, info, &pos, CTL_CAPABILITY))
3531 		goto done;
3532 	if (cdrom_print_info("\nCan write DVD-RAM:",
3533 				CDC_DVD_RAM, info, &pos, CTL_CAPABILITY))
3534 		goto done;
3535 	if (cdrom_print_info("\nCan read MRW:\t",
3536 				CDC_MRW, info, &pos, CTL_CAPABILITY))
3537 		goto done;
3538 	if (cdrom_print_info("\nCan write MRW:\t",
3539 				CDC_MRW_W, info, &pos, CTL_CAPABILITY))
3540 		goto done;
3541 	if (cdrom_print_info("\nCan write RAM:\t",
3542 				CDC_RAM, info, &pos, CTL_CAPABILITY))
3543 		goto done;
3544 	if (!scnprintf(info + pos, max_size - pos, "\n\n"))
3545 		goto done;
3546 doit:
3547 	mutex_unlock(&cdrom_mutex);
3548 	return proc_dostring(ctl, write, buffer, lenp, ppos);
3549 done:
3550 	pr_info("info buffer too small\n");
3551 	goto doit;
3552 }
3553 
3554 /* Unfortunately, per device settings are not implemented through
3555    procfs/sysctl yet. When they are, this will naturally disappear. For now
3556    just update all drives. Later this will become the template on which
3557    new registered drives will be based. */
3558 static void cdrom_update_settings(void)
3559 {
3560 	struct cdrom_device_info *cdi;
3561 
3562 	mutex_lock(&cdrom_mutex);
3563 	list_for_each_entry(cdi, &cdrom_list, list) {
3564 		if (autoclose && CDROM_CAN(CDC_CLOSE_TRAY))
3565 			cdi->options |= CDO_AUTO_CLOSE;
3566 		else if (!autoclose)
3567 			cdi->options &= ~CDO_AUTO_CLOSE;
3568 		if (autoeject && CDROM_CAN(CDC_OPEN_TRAY))
3569 			cdi->options |= CDO_AUTO_EJECT;
3570 		else if (!autoeject)
3571 			cdi->options &= ~CDO_AUTO_EJECT;
3572 		if (lockdoor && CDROM_CAN(CDC_LOCK))
3573 			cdi->options |= CDO_LOCK;
3574 		else if (!lockdoor)
3575 			cdi->options &= ~CDO_LOCK;
3576 		if (check_media_type)
3577 			cdi->options |= CDO_CHECK_TYPE;
3578 		else
3579 			cdi->options &= ~CDO_CHECK_TYPE;
3580 	}
3581 	mutex_unlock(&cdrom_mutex);
3582 }
3583 
3584 static int cdrom_sysctl_handler(ctl_table *ctl, int write,
3585 				void __user *buffer, size_t *lenp, loff_t *ppos)
3586 {
3587 	int ret;
3588 
3589 	ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
3590 
3591 	if (write) {
3592 
3593 		/* we only care for 1 or 0. */
3594 		autoclose        = !!cdrom_sysctl_settings.autoclose;
3595 		autoeject        = !!cdrom_sysctl_settings.autoeject;
3596 		debug	         = !!cdrom_sysctl_settings.debug;
3597 		lockdoor         = !!cdrom_sysctl_settings.lock;
3598 		check_media_type = !!cdrom_sysctl_settings.check;
3599 
3600 		/* update the option flags according to the changes. we
3601 		   don't have per device options through sysctl yet,
3602 		   but we will have and then this will disappear. */
3603 		cdrom_update_settings();
3604 	}
3605 
3606         return ret;
3607 }
3608 
3609 /* Place files in /proc/sys/dev/cdrom */
3610 static ctl_table cdrom_table[] = {
3611 	{
3612 		.procname	= "info",
3613 		.data		= &cdrom_sysctl_settings.info,
3614 		.maxlen		= CDROM_STR_SIZE,
3615 		.mode		= 0444,
3616 		.proc_handler	= cdrom_sysctl_info,
3617 	},
3618 	{
3619 		.procname	= "autoclose",
3620 		.data		= &cdrom_sysctl_settings.autoclose,
3621 		.maxlen		= sizeof(int),
3622 		.mode		= 0644,
3623 		.proc_handler	= cdrom_sysctl_handler,
3624 	},
3625 	{
3626 		.procname	= "autoeject",
3627 		.data		= &cdrom_sysctl_settings.autoeject,
3628 		.maxlen		= sizeof(int),
3629 		.mode		= 0644,
3630 		.proc_handler	= cdrom_sysctl_handler,
3631 	},
3632 	{
3633 		.procname	= "debug",
3634 		.data		= &cdrom_sysctl_settings.debug,
3635 		.maxlen		= sizeof(int),
3636 		.mode		= 0644,
3637 		.proc_handler	= cdrom_sysctl_handler,
3638 	},
3639 	{
3640 		.procname	= "lock",
3641 		.data		= &cdrom_sysctl_settings.lock,
3642 		.maxlen		= sizeof(int),
3643 		.mode		= 0644,
3644 		.proc_handler	= cdrom_sysctl_handler,
3645 	},
3646 	{
3647 		.procname	= "check_media",
3648 		.data		= &cdrom_sysctl_settings.check,
3649 		.maxlen		= sizeof(int),
3650 		.mode		= 0644,
3651 		.proc_handler	= cdrom_sysctl_handler
3652 	},
3653 	{ }
3654 };
3655 
3656 static ctl_table cdrom_cdrom_table[] = {
3657 	{
3658 		.procname	= "cdrom",
3659 		.maxlen		= 0,
3660 		.mode		= 0555,
3661 		.child		= cdrom_table,
3662 	},
3663 	{ }
3664 };
3665 
3666 /* Make sure that /proc/sys/dev is there */
3667 static ctl_table cdrom_root_table[] = {
3668 	{
3669 		.procname	= "dev",
3670 		.maxlen		= 0,
3671 		.mode		= 0555,
3672 		.child		= cdrom_cdrom_table,
3673 	},
3674 	{ }
3675 };
3676 static struct ctl_table_header *cdrom_sysctl_header;
3677 
3678 static void cdrom_sysctl_register(void)
3679 {
3680 	static int initialized;
3681 
3682 	if (initialized == 1)
3683 		return;
3684 
3685 	cdrom_sysctl_header = register_sysctl_table(cdrom_root_table);
3686 
3687 	/* set the defaults */
3688 	cdrom_sysctl_settings.autoclose = autoclose;
3689 	cdrom_sysctl_settings.autoeject = autoeject;
3690 	cdrom_sysctl_settings.debug = debug;
3691 	cdrom_sysctl_settings.lock = lockdoor;
3692 	cdrom_sysctl_settings.check = check_media_type;
3693 
3694 	initialized = 1;
3695 }
3696 
3697 static void cdrom_sysctl_unregister(void)
3698 {
3699 	if (cdrom_sysctl_header)
3700 		unregister_sysctl_table(cdrom_sysctl_header);
3701 }
3702 
3703 #else /* CONFIG_SYSCTL */
3704 
3705 static void cdrom_sysctl_register(void)
3706 {
3707 }
3708 
3709 static void cdrom_sysctl_unregister(void)
3710 {
3711 }
3712 
3713 #endif /* CONFIG_SYSCTL */
3714 
3715 static int __init cdrom_init(void)
3716 {
3717 	cdrom_sysctl_register();
3718 
3719 	return 0;
3720 }
3721 
3722 static void __exit cdrom_exit(void)
3723 {
3724 	pr_info("Uniform CD-ROM driver unloaded\n");
3725 	cdrom_sysctl_unregister();
3726 }
3727 
3728 module_init(cdrom_init);
3729 module_exit(cdrom_exit);
3730 MODULE_LICENSE("GPL");
3731