xref: /linux/drivers/usb/storage/sddr55.c (revision 367b8112fe2ea5c39a7bb4d263dcdd9b612fae18)
1 /* Driver for SanDisk SDDR-55 SmartMedia reader
2  *
3  * SDDR55 driver v0.1:
4  *
5  * First release
6  *
7  * Current development and maintenance by:
8  *   (c) 2002 Simon Munton
9  *
10  * This program is free software; you can redistribute it and/or modify it
11  * under the terms of the GNU General Public License as published by the
12  * Free Software Foundation; either version 2, or (at your option) any
13  * later version.
14  *
15  * This program is distributed in the hope that it will be useful, but
16  * WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
18  * General Public License for more details.
19  *
20  * You should have received a copy of the GNU General Public License along
21  * with this program; if not, write to the Free Software Foundation, Inc.,
22  * 675 Mass Ave, Cambridge, MA 02139, USA.
23  */
24 
25 #include <linux/jiffies.h>
26 #include <linux/errno.h>
27 #include <linux/slab.h>
28 
29 #include <scsi/scsi.h>
30 #include <scsi/scsi_cmnd.h>
31 
32 #include "usb.h"
33 #include "transport.h"
34 #include "protocol.h"
35 #include "debug.h"
36 #include "sddr55.h"
37 
38 
39 #define short_pack(lsb,msb) ( ((u16)(lsb)) | ( ((u16)(msb))<<8 ) )
40 #define LSB_of(s) ((s)&0xFF)
41 #define MSB_of(s) ((s)>>8)
42 #define PAGESIZE  512
43 
44 #define set_sense_info(sk, asc, ascq)	\
45     do {				\
46 	info->sense_data[2] = sk;	\
47 	info->sense_data[12] = asc;	\
48 	info->sense_data[13] = ascq;	\
49 	} while (0)
50 
51 
52 struct sddr55_card_info {
53 	unsigned long	capacity;	/* Size of card in bytes */
54 	int		max_log_blks;	/* maximum number of logical blocks */
55 	int		pageshift;	/* log2 of pagesize */
56 	int		smallpageshift;	/* 1 if pagesize == 256 */
57 	int		blocksize;	/* Size of block in pages */
58 	int		blockshift;	/* log2 of blocksize */
59 	int		blockmask;	/* 2^blockshift - 1 */
60 	int		read_only;	/* non zero if card is write protected */
61 	int		force_read_only;	/* non zero if we find a map error*/
62 	int		*lba_to_pba;	/* logical to physical map */
63 	int		*pba_to_lba;	/* physical to logical map */
64 	int		fatal_error;	/* set if we detect something nasty */
65 	unsigned long 	last_access;	/* number of jiffies since we last talked to device */
66 	unsigned char   sense_data[18];
67 };
68 
69 
70 #define NOT_ALLOCATED		0xffffffff
71 #define BAD_BLOCK		0xffff
72 #define CIS_BLOCK		0x400
73 #define UNUSED_BLOCK		0x3ff
74 
75 static int
76 sddr55_bulk_transport(struct us_data *us, int direction,
77 		      unsigned char *data, unsigned int len) {
78 	struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
79 	unsigned int pipe = (direction == DMA_FROM_DEVICE) ?
80 			us->recv_bulk_pipe : us->send_bulk_pipe;
81 
82 	if (!len)
83 		return USB_STOR_XFER_GOOD;
84 	info->last_access = jiffies;
85 	return usb_stor_bulk_transfer_buf(us, pipe, data, len, NULL);
86 }
87 
88 /* check if card inserted, if there is, update read_only status
89  * return non zero if no card
90  */
91 
92 static int sddr55_status(struct us_data *us)
93 {
94 	int result;
95 	unsigned char *command = us->iobuf;
96 	unsigned char *status = us->iobuf;
97 	struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
98 
99 	/* send command */
100 	memset(command, 0, 8);
101 	command[5] = 0xB0;
102 	command[7] = 0x80;
103 	result = sddr55_bulk_transport(us,
104 		DMA_TO_DEVICE, command, 8);
105 
106 	US_DEBUGP("Result for send_command in status %d\n",
107 		result);
108 
109 	if (result != USB_STOR_XFER_GOOD) {
110 		set_sense_info (4, 0, 0);	/* hardware error */
111 		return USB_STOR_TRANSPORT_ERROR;
112 	}
113 
114 	result = sddr55_bulk_transport(us,
115 		DMA_FROM_DEVICE, status,	4);
116 
117 	/* expect to get short transfer if no card fitted */
118 	if (result == USB_STOR_XFER_SHORT || result == USB_STOR_XFER_STALLED) {
119 		/* had a short transfer, no card inserted, free map memory */
120 		kfree(info->lba_to_pba);
121 		kfree(info->pba_to_lba);
122 		info->lba_to_pba = NULL;
123 		info->pba_to_lba = NULL;
124 
125 		info->fatal_error = 0;
126 		info->force_read_only = 0;
127 
128 		set_sense_info (2, 0x3a, 0);	/* not ready, medium not present */
129 		return USB_STOR_TRANSPORT_FAILED;
130 	}
131 
132 	if (result != USB_STOR_XFER_GOOD) {
133 		set_sense_info (4, 0, 0);	/* hardware error */
134 		return USB_STOR_TRANSPORT_FAILED;
135 	}
136 
137 	/* check write protect status */
138 	info->read_only = (status[0] & 0x20);
139 
140 	/* now read status */
141 	result = sddr55_bulk_transport(us,
142 		DMA_FROM_DEVICE, status,	2);
143 
144 	if (result != USB_STOR_XFER_GOOD) {
145 		set_sense_info (4, 0, 0);	/* hardware error */
146 	}
147 
148 	return (result == USB_STOR_XFER_GOOD ?
149 			USB_STOR_TRANSPORT_GOOD : USB_STOR_TRANSPORT_FAILED);
150 }
151 
152 
153 static int sddr55_read_data(struct us_data *us,
154 		unsigned int lba,
155 		unsigned int page,
156 		unsigned short sectors) {
157 
158 	int result = USB_STOR_TRANSPORT_GOOD;
159 	unsigned char *command = us->iobuf;
160 	unsigned char *status = us->iobuf;
161 	struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
162 	unsigned char *buffer;
163 
164 	unsigned int pba;
165 	unsigned long address;
166 
167 	unsigned short pages;
168 	unsigned int len, offset;
169 	struct scatterlist *sg;
170 
171 	// Since we only read in one block at a time, we have to create
172 	// a bounce buffer and move the data a piece at a time between the
173 	// bounce buffer and the actual transfer buffer.
174 
175 	len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
176 			info->smallpageshift) * PAGESIZE;
177 	buffer = kmalloc(len, GFP_NOIO);
178 	if (buffer == NULL)
179 		return USB_STOR_TRANSPORT_ERROR; /* out of memory */
180 	offset = 0;
181 	sg = NULL;
182 
183 	while (sectors>0) {
184 
185 		/* have we got to end? */
186 		if (lba >= info->max_log_blks)
187 			break;
188 
189 		pba = info->lba_to_pba[lba];
190 
191 		// Read as many sectors as possible in this block
192 
193 		pages = min((unsigned int) sectors << info->smallpageshift,
194 				info->blocksize - page);
195 		len = pages << info->pageshift;
196 
197 		US_DEBUGP("Read %02X pages, from PBA %04X"
198 			" (LBA %04X) page %02X\n",
199 			pages, pba, lba, page);
200 
201 		if (pba == NOT_ALLOCATED) {
202 			/* no pba for this lba, fill with zeroes */
203 			memset (buffer, 0, len);
204 		} else {
205 
206 			address = (pba << info->blockshift) + page;
207 
208 			command[0] = 0;
209 			command[1] = LSB_of(address>>16);
210 			command[2] = LSB_of(address>>8);
211 			command[3] = LSB_of(address);
212 
213 			command[4] = 0;
214 			command[5] = 0xB0;
215 			command[6] = LSB_of(pages << (1 - info->smallpageshift));
216 			command[7] = 0x85;
217 
218 			/* send command */
219 			result = sddr55_bulk_transport(us,
220 				DMA_TO_DEVICE, command, 8);
221 
222 			US_DEBUGP("Result for send_command in read_data %d\n",
223 				result);
224 
225 			if (result != USB_STOR_XFER_GOOD) {
226 				result = USB_STOR_TRANSPORT_ERROR;
227 				goto leave;
228 			}
229 
230 			/* read data */
231 			result = sddr55_bulk_transport(us,
232 				DMA_FROM_DEVICE, buffer, len);
233 
234 			if (result != USB_STOR_XFER_GOOD) {
235 				result = USB_STOR_TRANSPORT_ERROR;
236 				goto leave;
237 			}
238 
239 			/* now read status */
240 			result = sddr55_bulk_transport(us,
241 				DMA_FROM_DEVICE, status, 2);
242 
243 			if (result != USB_STOR_XFER_GOOD) {
244 				result = USB_STOR_TRANSPORT_ERROR;
245 				goto leave;
246 			}
247 
248 			/* check status for error */
249 			if (status[0] == 0xff && status[1] == 0x4) {
250 				set_sense_info (3, 0x11, 0);
251 				result = USB_STOR_TRANSPORT_FAILED;
252 				goto leave;
253 			}
254 		}
255 
256 		// Store the data in the transfer buffer
257 		usb_stor_access_xfer_buf(buffer, len, us->srb,
258 				&sg, &offset, TO_XFER_BUF);
259 
260 		page = 0;
261 		lba++;
262 		sectors -= pages >> info->smallpageshift;
263 	}
264 
265 	result = USB_STOR_TRANSPORT_GOOD;
266 
267 leave:
268 	kfree(buffer);
269 
270 	return result;
271 }
272 
273 static int sddr55_write_data(struct us_data *us,
274 		unsigned int lba,
275 		unsigned int page,
276 		unsigned short sectors) {
277 
278 	int result = USB_STOR_TRANSPORT_GOOD;
279 	unsigned char *command = us->iobuf;
280 	unsigned char *status = us->iobuf;
281 	struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
282 	unsigned char *buffer;
283 
284 	unsigned int pba;
285 	unsigned int new_pba;
286 	unsigned long address;
287 
288 	unsigned short pages;
289 	int i;
290 	unsigned int len, offset;
291 	struct scatterlist *sg;
292 
293 	/* check if we are allowed to write */
294 	if (info->read_only || info->force_read_only) {
295 		set_sense_info (7, 0x27, 0);	/* read only */
296 		return USB_STOR_TRANSPORT_FAILED;
297 	}
298 
299 	// Since we only write one block at a time, we have to create
300 	// a bounce buffer and move the data a piece at a time between the
301 	// bounce buffer and the actual transfer buffer.
302 
303 	len = min((unsigned int) sectors, (unsigned int) info->blocksize >>
304 			info->smallpageshift) * PAGESIZE;
305 	buffer = kmalloc(len, GFP_NOIO);
306 	if (buffer == NULL)
307 		return USB_STOR_TRANSPORT_ERROR;
308 	offset = 0;
309 	sg = NULL;
310 
311 	while (sectors > 0) {
312 
313 		/* have we got to end? */
314 		if (lba >= info->max_log_blks)
315 			break;
316 
317 		pba = info->lba_to_pba[lba];
318 
319 		// Write as many sectors as possible in this block
320 
321 		pages = min((unsigned int) sectors << info->smallpageshift,
322 				info->blocksize - page);
323 		len = pages << info->pageshift;
324 
325 		// Get the data from the transfer buffer
326 		usb_stor_access_xfer_buf(buffer, len, us->srb,
327 				&sg, &offset, FROM_XFER_BUF);
328 
329 		US_DEBUGP("Write %02X pages, to PBA %04X"
330 			" (LBA %04X) page %02X\n",
331 			pages, pba, lba, page);
332 
333 		command[4] = 0;
334 
335 		if (pba == NOT_ALLOCATED) {
336 			/* no pba allocated for this lba, find a free pba to use */
337 
338 			int max_pba = (info->max_log_blks / 250 ) * 256;
339 			int found_count = 0;
340 			int found_pba = -1;
341 
342 			/* set pba to first block in zone lba is in */
343 			pba = (lba / 1000) * 1024;
344 
345 			US_DEBUGP("No PBA for LBA %04X\n",lba);
346 
347 			if (max_pba > 1024)
348 				max_pba = 1024;
349 
350 			/*
351 			 * Scan through the map looking for an unused block
352 			 * leave 16 unused blocks at start (or as many as
353 			 * possible) since the sddr55 seems to reuse a used
354 			 * block when it shouldn't if we don't leave space.
355 			 */
356 			for (i = 0; i < max_pba; i++, pba++) {
357 				if (info->pba_to_lba[pba] == UNUSED_BLOCK) {
358 					found_pba = pba;
359 					if (found_count++ > 16)
360 						break;
361 				}
362 			}
363 
364 			pba = found_pba;
365 
366 			if (pba == -1) {
367 				/* oh dear */
368 				US_DEBUGP("Couldn't find unallocated block\n");
369 
370 				set_sense_info (3, 0x31, 0);	/* medium error */
371 				result = USB_STOR_TRANSPORT_FAILED;
372 				goto leave;
373 			}
374 
375 			US_DEBUGP("Allocating PBA %04X for LBA %04X\n", pba, lba);
376 
377 			/* set writing to unallocated block flag */
378 			command[4] = 0x40;
379 		}
380 
381 		address = (pba << info->blockshift) + page;
382 
383 		command[1] = LSB_of(address>>16);
384 		command[2] = LSB_of(address>>8);
385 		command[3] = LSB_of(address);
386 
387 		/* set the lba into the command, modulo 1000 */
388 		command[0] = LSB_of(lba % 1000);
389 		command[6] = MSB_of(lba % 1000);
390 
391 		command[4] |= LSB_of(pages >> info->smallpageshift);
392 		command[5] = 0xB0;
393 		command[7] = 0x86;
394 
395 		/* send command */
396 		result = sddr55_bulk_transport(us,
397 			DMA_TO_DEVICE, command, 8);
398 
399 		if (result != USB_STOR_XFER_GOOD) {
400 			US_DEBUGP("Result for send_command in write_data %d\n",
401 			result);
402 
403 			/* set_sense_info is superfluous here? */
404 			set_sense_info (3, 0x3, 0);/* peripheral write error */
405 			result = USB_STOR_TRANSPORT_FAILED;
406 			goto leave;
407 		}
408 
409 		/* send the data */
410 		result = sddr55_bulk_transport(us,
411 			DMA_TO_DEVICE, buffer, len);
412 
413 		if (result != USB_STOR_XFER_GOOD) {
414 			US_DEBUGP("Result for send_data in write_data %d\n",
415 				  result);
416 
417 			/* set_sense_info is superfluous here? */
418 			set_sense_info (3, 0x3, 0);/* peripheral write error */
419 			result = USB_STOR_TRANSPORT_FAILED;
420 			goto leave;
421 		}
422 
423 		/* now read status */
424 		result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, status, 6);
425 
426 		if (result != USB_STOR_XFER_GOOD) {
427 			US_DEBUGP("Result for get_status in write_data %d\n",
428 				  result);
429 
430 			/* set_sense_info is superfluous here? */
431 			set_sense_info (3, 0x3, 0);/* peripheral write error */
432 			result = USB_STOR_TRANSPORT_FAILED;
433 			goto leave;
434 		}
435 
436 		new_pba = (status[3] + (status[4] << 8) + (status[5] << 16))
437 						  >> info->blockshift;
438 
439 		/* check status for error */
440 		if (status[0] == 0xff && status[1] == 0x4) {
441 			info->pba_to_lba[new_pba] = BAD_BLOCK;
442 
443 			set_sense_info (3, 0x0c, 0);
444 			result = USB_STOR_TRANSPORT_FAILED;
445 			goto leave;
446 		}
447 
448 		US_DEBUGP("Updating maps for LBA %04X: old PBA %04X, new PBA %04X\n",
449 			lba, pba, new_pba);
450 
451 		/* update the lba<->pba maps, note new_pba might be the same as pba */
452 		info->lba_to_pba[lba] = new_pba;
453 		info->pba_to_lba[pba] = UNUSED_BLOCK;
454 
455 		/* check that new_pba wasn't already being used */
456 		if (info->pba_to_lba[new_pba] != UNUSED_BLOCK) {
457 			printk(KERN_ERR "sddr55 error: new PBA %04X already in use for LBA %04X\n",
458 				new_pba, info->pba_to_lba[new_pba]);
459 			info->fatal_error = 1;
460 			set_sense_info (3, 0x31, 0);
461 			result = USB_STOR_TRANSPORT_FAILED;
462 			goto leave;
463 		}
464 
465 		/* update the pba<->lba maps for new_pba */
466 		info->pba_to_lba[new_pba] = lba % 1000;
467 
468 		page = 0;
469 		lba++;
470 		sectors -= pages >> info->smallpageshift;
471 	}
472 	result = USB_STOR_TRANSPORT_GOOD;
473 
474  leave:
475 	kfree(buffer);
476 	return result;
477 }
478 
479 static int sddr55_read_deviceID(struct us_data *us,
480 		unsigned char *manufacturerID,
481 		unsigned char *deviceID) {
482 
483 	int result;
484 	unsigned char *command = us->iobuf;
485 	unsigned char *content = us->iobuf;
486 
487 	memset(command, 0, 8);
488 	command[5] = 0xB0;
489 	command[7] = 0x84;
490 	result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
491 
492 	US_DEBUGP("Result of send_control for device ID is %d\n",
493 		result);
494 
495 	if (result != USB_STOR_XFER_GOOD)
496 		return USB_STOR_TRANSPORT_ERROR;
497 
498 	result = sddr55_bulk_transport(us,
499 		DMA_FROM_DEVICE, content, 4);
500 
501 	if (result != USB_STOR_XFER_GOOD)
502 		return USB_STOR_TRANSPORT_ERROR;
503 
504 	*manufacturerID = content[0];
505 	*deviceID = content[1];
506 
507 	if (content[0] != 0xff)	{
508     		result = sddr55_bulk_transport(us,
509 			DMA_FROM_DEVICE, content, 2);
510 	}
511 
512 	return USB_STOR_TRANSPORT_GOOD;
513 }
514 
515 
516 int sddr55_reset(struct us_data *us) {
517 	return 0;
518 }
519 
520 
521 static unsigned long sddr55_get_capacity(struct us_data *us) {
522 
523 	unsigned char uninitialized_var(manufacturerID);
524 	unsigned char uninitialized_var(deviceID);
525 	int result;
526 	struct sddr55_card_info *info = (struct sddr55_card_info *)us->extra;
527 
528 	US_DEBUGP("Reading capacity...\n");
529 
530 	result = sddr55_read_deviceID(us,
531 		&manufacturerID,
532 		&deviceID);
533 
534 	US_DEBUGP("Result of read_deviceID is %d\n",
535 		result);
536 
537 	if (result != USB_STOR_XFER_GOOD)
538 		return 0;
539 
540 	US_DEBUGP("Device ID = %02X\n", deviceID);
541 	US_DEBUGP("Manuf  ID = %02X\n", manufacturerID);
542 
543 	info->pageshift = 9;
544 	info->smallpageshift = 0;
545 	info->blocksize = 16;
546 	info->blockshift = 4;
547 	info->blockmask = 15;
548 
549 	switch (deviceID) {
550 
551 	case 0x6e: // 1MB
552 	case 0xe8:
553 	case 0xec:
554 		info->pageshift = 8;
555 		info->smallpageshift = 1;
556 		return 0x00100000;
557 
558 	case 0xea: // 2MB
559 	case 0x64:
560 		info->pageshift = 8;
561 		info->smallpageshift = 1;
562 	case 0x5d: // 5d is a ROM card with pagesize 512.
563 		return 0x00200000;
564 
565 	case 0xe3: // 4MB
566 	case 0xe5:
567 	case 0x6b:
568 	case 0xd5:
569 		return 0x00400000;
570 
571 	case 0xe6: // 8MB
572 	case 0xd6:
573 		return 0x00800000;
574 
575 	case 0x73: // 16MB
576 		info->blocksize = 32;
577 		info->blockshift = 5;
578 		info->blockmask = 31;
579 		return 0x01000000;
580 
581 	case 0x75: // 32MB
582 		info->blocksize = 32;
583 		info->blockshift = 5;
584 		info->blockmask = 31;
585 		return 0x02000000;
586 
587 	case 0x76: // 64MB
588 		info->blocksize = 32;
589 		info->blockshift = 5;
590 		info->blockmask = 31;
591 		return 0x04000000;
592 
593 	case 0x79: // 128MB
594 		info->blocksize = 32;
595 		info->blockshift = 5;
596 		info->blockmask = 31;
597 		return 0x08000000;
598 
599 	default: // unknown
600 		return 0;
601 
602 	}
603 }
604 
605 static int sddr55_read_map(struct us_data *us) {
606 
607 	struct sddr55_card_info *info = (struct sddr55_card_info *)(us->extra);
608 	int numblocks;
609 	unsigned char *buffer;
610 	unsigned char *command = us->iobuf;
611 	int i;
612 	unsigned short lba;
613 	unsigned short max_lba;
614 	int result;
615 
616 	if (!info->capacity)
617 		return -1;
618 
619 	numblocks = info->capacity >> (info->blockshift + info->pageshift);
620 
621 	buffer = kmalloc( numblocks * 2, GFP_NOIO );
622 
623 	if (!buffer)
624 		return -1;
625 
626 	memset(command, 0, 8);
627 	command[5] = 0xB0;
628 	command[6] = numblocks * 2 / 256;
629 	command[7] = 0x8A;
630 
631 	result = sddr55_bulk_transport(us, DMA_TO_DEVICE, command, 8);
632 
633 	if ( result != USB_STOR_XFER_GOOD) {
634 		kfree (buffer);
635 		return -1;
636 	}
637 
638 	result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, buffer, numblocks * 2);
639 
640 	if ( result != USB_STOR_XFER_GOOD) {
641 		kfree (buffer);
642 		return -1;
643 	}
644 
645 	result = sddr55_bulk_transport(us, DMA_FROM_DEVICE, command, 2);
646 
647 	if ( result != USB_STOR_XFER_GOOD) {
648 		kfree (buffer);
649 		return -1;
650 	}
651 
652 	kfree(info->lba_to_pba);
653 	kfree(info->pba_to_lba);
654 	info->lba_to_pba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
655 	info->pba_to_lba = kmalloc(numblocks*sizeof(int), GFP_NOIO);
656 
657 	if (info->lba_to_pba == NULL || info->pba_to_lba == NULL) {
658 		kfree(info->lba_to_pba);
659 		kfree(info->pba_to_lba);
660 		info->lba_to_pba = NULL;
661 		info->pba_to_lba = NULL;
662 		kfree(buffer);
663 		return -1;
664 	}
665 
666 	memset(info->lba_to_pba, 0xff, numblocks*sizeof(int));
667 	memset(info->pba_to_lba, 0xff, numblocks*sizeof(int));
668 
669 	/* set maximum lba */
670 	max_lba = info->max_log_blks;
671 	if (max_lba > 1000)
672 		max_lba = 1000;
673 
674 	// Each block is 64 bytes of control data, so block i is located in
675 	// scatterlist block i*64/128k = i*(2^6)*(2^-17) = i*(2^-11)
676 
677 	for (i=0; i<numblocks; i++) {
678 		int zone = i / 1024;
679 
680 		lba = short_pack(buffer[i * 2], buffer[i * 2 + 1]);
681 
682 			/* Every 1024 physical blocks ("zone"), the LBA numbers
683 			 * go back to zero, but are within a higher
684 			 * block of LBA's. Also, there is a maximum of
685 			 * 1000 LBA's per zone. In other words, in PBA
686 			 * 1024-2047 you will find LBA 0-999 which are
687 			 * really LBA 1000-1999. Yes, this wastes 24
688 			 * physical blocks per zone. Go figure.
689 			 * These devices can have blocks go bad, so there
690 			 * are 24 spare blocks to use when blocks do go bad.
691 			 */
692 
693 			/* SDDR55 returns 0xffff for a bad block, and 0x400 for the
694 			 * CIS block. (Is this true for cards 8MB or less??)
695 			 * Record these in the physical to logical map
696 			 */
697 
698 		info->pba_to_lba[i] = lba;
699 
700 		if (lba >= max_lba) {
701 			continue;
702 		}
703 
704 		if (info->lba_to_pba[lba + zone * 1000] != NOT_ALLOCATED &&
705 		    !info->force_read_only) {
706 			printk("sddr55: map inconsistency at LBA %04X\n", lba + zone * 1000);
707 			info->force_read_only = 1;
708 		}
709 
710 		if (lba<0x10 || (lba>=0x3E0 && lba<0x3EF))
711 			US_DEBUGP("LBA %04X <-> PBA %04X\n", lba, i);
712 
713 		info->lba_to_pba[lba + zone * 1000] = i;
714 	}
715 
716 	kfree(buffer);
717 	return 0;
718 }
719 
720 
721 static void sddr55_card_info_destructor(void *extra) {
722 	struct sddr55_card_info *info = (struct sddr55_card_info *)extra;
723 
724 	if (!extra)
725 		return;
726 
727 	kfree(info->lba_to_pba);
728 	kfree(info->pba_to_lba);
729 }
730 
731 
732 /*
733  * Transport for the Sandisk SDDR-55
734  */
735 int sddr55_transport(struct scsi_cmnd *srb, struct us_data *us)
736 {
737 	int result;
738 	static unsigned char inquiry_response[8] = {
739 		0x00, 0x80, 0x00, 0x02, 0x1F, 0x00, 0x00, 0x00
740 	};
741  	// write-protected for now, no block descriptor support
742 	static unsigned char mode_page_01[20] = {
743 		0x0, 0x12, 0x00, 0x80, 0x0, 0x0, 0x0, 0x0,
744 		0x01, 0x0A,
745 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
746 	};
747 	unsigned char *ptr = us->iobuf;
748 	unsigned long capacity;
749 	unsigned int lba;
750 	unsigned int pba;
751 	unsigned int page;
752 	unsigned short pages;
753 	struct sddr55_card_info *info;
754 
755 	if (!us->extra) {
756 		us->extra = kzalloc(
757 			sizeof(struct sddr55_card_info), GFP_NOIO);
758 		if (!us->extra)
759 			return USB_STOR_TRANSPORT_ERROR;
760 		us->extra_destructor = sddr55_card_info_destructor;
761 	}
762 
763 	info = (struct sddr55_card_info *)(us->extra);
764 
765 	if (srb->cmnd[0] == REQUEST_SENSE) {
766 		US_DEBUGP("SDDR55: request sense %02x/%02x/%02x\n", info->sense_data[2], info->sense_data[12], info->sense_data[13]);
767 
768 		memcpy (ptr, info->sense_data, sizeof info->sense_data);
769 		ptr[0] = 0x70;
770 		ptr[7] = 11;
771 		usb_stor_set_xfer_buf (ptr, sizeof info->sense_data, srb);
772 		memset (info->sense_data, 0, sizeof info->sense_data);
773 
774 		return USB_STOR_TRANSPORT_GOOD;
775 	}
776 
777 	memset (info->sense_data, 0, sizeof info->sense_data);
778 
779 	/* Dummy up a response for INQUIRY since SDDR55 doesn't
780 	   respond to INQUIRY commands */
781 
782 	if (srb->cmnd[0] == INQUIRY) {
783 		memcpy(ptr, inquiry_response, 8);
784 		fill_inquiry_response(us, ptr, 36);
785 		return USB_STOR_TRANSPORT_GOOD;
786 	}
787 
788 	/* only check card status if the map isn't allocated, ie no card seen yet
789 	 * or if it's been over half a second since we last accessed it
790 	 */
791 	if (info->lba_to_pba == NULL || time_after(jiffies, info->last_access + HZ/2)) {
792 
793 		/* check to see if a card is fitted */
794 		result = sddr55_status (us);
795 		if (result) {
796 			result = sddr55_status (us);
797 			if (!result) {
798 			set_sense_info (6, 0x28, 0);	/* new media, set unit attention, not ready to ready */
799 			}
800 			return USB_STOR_TRANSPORT_FAILED;
801 		}
802 	}
803 
804 	/* if we detected a problem with the map when writing,
805 	   don't allow any more access */
806 	if (info->fatal_error) {
807 
808 		set_sense_info (3, 0x31, 0);
809 		return USB_STOR_TRANSPORT_FAILED;
810 	}
811 
812 	if (srb->cmnd[0] == READ_CAPACITY) {
813 
814 		capacity = sddr55_get_capacity(us);
815 
816 		if (!capacity) {
817 			set_sense_info (3, 0x30, 0); /* incompatible medium */
818 			return USB_STOR_TRANSPORT_FAILED;
819 		}
820 
821 		info->capacity = capacity;
822 
823 		/* figure out the maximum logical block number, allowing for
824 		 * the fact that only 250 out of every 256 are used */
825 		info->max_log_blks = ((info->capacity >> (info->pageshift + info->blockshift)) / 256) * 250;
826 
827 		/* Last page in the card, adjust as we only use 250 out of
828 		 * every 256 pages */
829 		capacity = (capacity / 256) * 250;
830 
831 		capacity /= PAGESIZE;
832 		capacity--;
833 
834 		((__be32 *) ptr)[0] = cpu_to_be32(capacity);
835 		((__be32 *) ptr)[1] = cpu_to_be32(PAGESIZE);
836 		usb_stor_set_xfer_buf(ptr, 8, srb);
837 
838 		sddr55_read_map(us);
839 
840 		return USB_STOR_TRANSPORT_GOOD;
841 	}
842 
843 	if (srb->cmnd[0] == MODE_SENSE_10) {
844 
845 		memcpy(ptr, mode_page_01, sizeof mode_page_01);
846 		ptr[3] = (info->read_only || info->force_read_only) ? 0x80 : 0;
847 		usb_stor_set_xfer_buf(ptr, sizeof(mode_page_01), srb);
848 
849 		if ( (srb->cmnd[2] & 0x3F) == 0x01 ) {
850 			US_DEBUGP(
851 			  "SDDR55: Dummy up request for mode page 1\n");
852 			return USB_STOR_TRANSPORT_GOOD;
853 
854 		} else if ( (srb->cmnd[2] & 0x3F) == 0x3F ) {
855 			US_DEBUGP(
856 			  "SDDR55: Dummy up request for all mode pages\n");
857 			return USB_STOR_TRANSPORT_GOOD;
858 		}
859 
860 		set_sense_info (5, 0x24, 0);	/* invalid field in command */
861 		return USB_STOR_TRANSPORT_FAILED;
862 	}
863 
864 	if (srb->cmnd[0] == ALLOW_MEDIUM_REMOVAL) {
865 
866 		US_DEBUGP(
867 		  "SDDR55: %s medium removal. Not that I can do"
868 		  " anything about it...\n",
869 		  (srb->cmnd[4]&0x03) ? "Prevent" : "Allow");
870 
871 		return USB_STOR_TRANSPORT_GOOD;
872 
873 	}
874 
875 	if (srb->cmnd[0] == READ_10 || srb->cmnd[0] == WRITE_10) {
876 
877 		page = short_pack(srb->cmnd[3], srb->cmnd[2]);
878 		page <<= 16;
879 		page |= short_pack(srb->cmnd[5], srb->cmnd[4]);
880 		pages = short_pack(srb->cmnd[8], srb->cmnd[7]);
881 
882 		page <<= info->smallpageshift;
883 
884 		// convert page to block and page-within-block
885 
886 		lba = page >> info->blockshift;
887 		page = page & info->blockmask;
888 
889 		// locate physical block corresponding to logical block
890 
891 		if (lba >= info->max_log_blks) {
892 
893 			US_DEBUGP("Error: Requested LBA %04X exceeds maximum "
894 			  "block %04X\n", lba, info->max_log_blks-1);
895 
896 			set_sense_info (5, 0x24, 0);	/* invalid field in command */
897 
898 			return USB_STOR_TRANSPORT_FAILED;
899 		}
900 
901 		pba = info->lba_to_pba[lba];
902 
903 		if (srb->cmnd[0] == WRITE_10) {
904 			US_DEBUGP("WRITE_10: write block %04X (LBA %04X) page %01X"
905 				" pages %d\n",
906 				pba, lba, page, pages);
907 
908 			return sddr55_write_data(us, lba, page, pages);
909 		} else {
910 			US_DEBUGP("READ_10: read block %04X (LBA %04X) page %01X"
911 				" pages %d\n",
912 				pba, lba, page, pages);
913 
914 			return sddr55_read_data(us, lba, page, pages);
915 		}
916 	}
917 
918 
919 	if (srb->cmnd[0] == TEST_UNIT_READY) {
920 		return USB_STOR_TRANSPORT_GOOD;
921 	}
922 
923 	if (srb->cmnd[0] == START_STOP) {
924 		return USB_STOR_TRANSPORT_GOOD;
925 	}
926 
927 	set_sense_info (5, 0x20, 0);	/* illegal command */
928 
929 	return USB_STOR_TRANSPORT_FAILED; // FIXME: sense buffer?
930 }
931 
932