Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wirel...
[linux-2.6.git] / drivers / char / pcmcia / cm4000_cs.c
1  /*
2   * A driver for the PCMCIA Smartcard Reader "Omnikey CardMan Mobile 4000"
3   *
4   * cm4000_cs.c support.linux@omnikey.com
5   *
6   * Tue Oct 23 11:32:43 GMT 2001 herp - cleaned up header files
7   * Sun Jan 20 10:11:15 MET 2002 herp - added modversion header files
8   * Thu Nov 14 16:34:11 GMT 2002 mh   - added PPS functionality
9   * Tue Nov 19 16:36:27 GMT 2002 mh   - added SUSPEND/RESUME functionailty
10   * Wed Jul 28 12:55:01 CEST 2004 mh  - kernel 2.6 adjustments
11   *
12   * current version: 2.4.0gm4
13   *
14   * (C) 2000,2001,2002,2003,2004 Omnikey AG
15   *
16   * (C) 2005-2006 Harald Welte <laforge@gnumonks.org>
17   *     - Adhere to Kernel CodingStyle
18   *     - Port to 2.6.13 "new" style PCMCIA
19   *     - Check for copy_{from,to}_user return values
20   *     - Use nonseekable_open()
21   *     - add class interface for udev device creation
22   *
23   * All rights reserved. Licensed under dual BSD/GPL license.
24   */
25
26 #include <linux/kernel.h>
27 #include <linux/module.h>
28 #include <linux/slab.h>
29 #include <linux/init.h>
30 #include <linux/fs.h>
31 #include <linux/delay.h>
32 #include <linux/bitrev.h>
33 #include <linux/mutex.h>
34 #include <linux/uaccess.h>
35 #include <linux/io.h>
36
37 #include <pcmcia/cistpl.h>
38 #include <pcmcia/cisreg.h>
39 #include <pcmcia/ciscode.h>
40 #include <pcmcia/ds.h>
41
42 #include <linux/cm4000_cs.h>
43
44 /* #define ATR_CSUM */
45
46 #define reader_to_dev(x)        (&x->p_dev->dev)
47
48 /* n (debug level) is ignored */
49 /* additional debug output may be enabled by re-compiling with
50  * CM4000_DEBUG set */
51 /* #define CM4000_DEBUG */
52 #define DEBUGP(n, rdr, x, args...) do {                 \
53                 dev_dbg(reader_to_dev(rdr), "%s:" x,    \
54                            __func__ , ## args);         \
55         } while (0)
56
57 static DEFINE_MUTEX(cmm_mutex);
58
59 #define T_1SEC          (HZ)
60 #define T_10MSEC        msecs_to_jiffies(10)
61 #define T_20MSEC        msecs_to_jiffies(20)
62 #define T_40MSEC        msecs_to_jiffies(40)
63 #define T_50MSEC        msecs_to_jiffies(50)
64 #define T_100MSEC       msecs_to_jiffies(100)
65 #define T_500MSEC       msecs_to_jiffies(500)
66
67 static void cm4000_release(struct pcmcia_device *link);
68
69 static int major;               /* major number we get from the kernel */
70
71 /* note: the first state has to have number 0 always */
72
73 #define M_FETCH_ATR     0
74 #define M_TIMEOUT_WAIT  1
75 #define M_READ_ATR_LEN  2
76 #define M_READ_ATR      3
77 #define M_ATR_PRESENT   4
78 #define M_BAD_CARD      5
79 #define M_CARDOFF       6
80
81 #define LOCK_IO                 0
82 #define LOCK_MONITOR            1
83
84 #define IS_AUTOPPS_ACT           6
85 #define IS_PROCBYTE_PRESENT      7
86 #define IS_INVREV                8
87 #define IS_ANY_T0                9
88 #define IS_ANY_T1               10
89 #define IS_ATR_PRESENT          11
90 #define IS_ATR_VALID            12
91 #define IS_CMM_ABSENT           13
92 #define IS_BAD_LENGTH           14
93 #define IS_BAD_CSUM             15
94 #define IS_BAD_CARD             16
95
96 #define REG_FLAGS0(x)           (x + 0)
97 #define REG_FLAGS1(x)           (x + 1)
98 #define REG_NUM_BYTES(x)        (x + 2)
99 #define REG_BUF_ADDR(x)         (x + 3)
100 #define REG_BUF_DATA(x)         (x + 4)
101 #define REG_NUM_SEND(x)         (x + 5)
102 #define REG_BAUDRATE(x)         (x + 6)
103 #define REG_STOPBITS(x)         (x + 7)
104
105 struct cm4000_dev {
106         struct pcmcia_device *p_dev;
107
108         unsigned char atr[MAX_ATR];
109         unsigned char rbuf[512];
110         unsigned char sbuf[512];
111
112         wait_queue_head_t devq;         /* when removing cardman must not be
113                                            zeroed! */
114
115         wait_queue_head_t ioq;          /* if IO is locked, wait on this Q */
116         wait_queue_head_t atrq;         /* wait for ATR valid */
117         wait_queue_head_t readq;        /* used by write to wake blk.read */
118
119         /* warning: do not move this fields.
120          * initialising to zero depends on it - see ZERO_DEV below.  */
121         unsigned char atr_csum;
122         unsigned char atr_len_retry;
123         unsigned short atr_len;
124         unsigned short rlen;    /* bytes avail. after write */
125         unsigned short rpos;    /* latest read pos. write zeroes */
126         unsigned char procbyte; /* T=0 procedure byte */
127         unsigned char mstate;   /* state of card monitor */
128         unsigned char cwarn;    /* slow down warning */
129         unsigned char flags0;   /* cardman IO-flags 0 */
130         unsigned char flags1;   /* cardman IO-flags 1 */
131         unsigned int mdelay;    /* variable monitor speeds, in jiffies */
132
133         unsigned int baudv;     /* baud value for speed */
134         unsigned char ta1;
135         unsigned char proto;    /* T=0, T=1, ... */
136         unsigned long flags;    /* lock+flags (MONITOR,IO,ATR) * for concurrent
137                                    access */
138
139         unsigned char pts[4];
140
141         struct timer_list timer;        /* used to keep monitor running */
142         int monitor_running;
143 };
144
145 #define ZERO_DEV(dev)                                           \
146         memset(&dev->atr_csum,0,                                \
147                 sizeof(struct cm4000_dev) -                     \
148                 offsetof(struct cm4000_dev, atr_csum))
149
150 static struct pcmcia_device *dev_table[CM4000_MAX_DEV];
151 static struct class *cmm_class;
152
153 /* This table doesn't use spaces after the comma between fields and thus
154  * violates CodingStyle.  However, I don't really think wrapping it around will
155  * make it any clearer to read -HW */
156 static unsigned char fi_di_table[10][14] = {
157 /*FI     00   01   02   03   04   05   06   07   08   09   10   11   12   13 */
158 /*DI */
159 /* 0 */ {0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11},
160 /* 1 */ {0x01,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x91,0x11,0x11,0x11,0x11},
161 /* 2 */ {0x02,0x12,0x22,0x32,0x11,0x11,0x11,0x11,0x11,0x92,0xA2,0xB2,0x11,0x11},
162 /* 3 */ {0x03,0x13,0x23,0x33,0x43,0x53,0x63,0x11,0x11,0x93,0xA3,0xB3,0xC3,0xD3},
163 /* 4 */ {0x04,0x14,0x24,0x34,0x44,0x54,0x64,0x11,0x11,0x94,0xA4,0xB4,0xC4,0xD4},
164 /* 5 */ {0x00,0x15,0x25,0x35,0x45,0x55,0x65,0x11,0x11,0x95,0xA5,0xB5,0xC5,0xD5},
165 /* 6 */ {0x06,0x16,0x26,0x36,0x46,0x56,0x66,0x11,0x11,0x96,0xA6,0xB6,0xC6,0xD6},
166 /* 7 */ {0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11},
167 /* 8 */ {0x08,0x11,0x28,0x38,0x48,0x58,0x68,0x11,0x11,0x98,0xA8,0xB8,0xC8,0xD8},
168 /* 9 */ {0x09,0x19,0x29,0x39,0x49,0x59,0x69,0x11,0x11,0x99,0xA9,0xB9,0xC9,0xD9}
169 };
170
171 #ifndef CM4000_DEBUG
172 #define xoutb   outb
173 #define xinb    inb
174 #else
175 static inline void xoutb(unsigned char val, unsigned short port)
176 {
177         pr_debug("outb(val=%.2x,port=%.4x)\n", val, port);
178         outb(val, port);
179 }
180 static inline unsigned char xinb(unsigned short port)
181 {
182         unsigned char val;
183
184         val = inb(port);
185         pr_debug("%.2x=inb(%.4x)\n", val, port);
186
187         return val;
188 }
189 #endif
190
191 static inline unsigned char invert_revert(unsigned char ch)
192 {
193         return bitrev8(~ch);
194 }
195
196 static void str_invert_revert(unsigned char *b, int len)
197 {
198         int i;
199
200         for (i = 0; i < len; i++)
201                 b[i] = invert_revert(b[i]);
202 }
203
204 #define ATRLENCK(dev,pos) \
205         if (pos>=dev->atr_len || pos>=MAX_ATR) \
206                 goto return_0;
207
208 static unsigned int calc_baudv(unsigned char fidi)
209 {
210         unsigned int wcrcf, wbrcf, fi_rfu, di_rfu;
211
212         fi_rfu = 372;
213         di_rfu = 1;
214
215         /* FI */
216         switch ((fidi >> 4) & 0x0F) {
217         case 0x00:
218                 wcrcf = 372;
219                 break;
220         case 0x01:
221                 wcrcf = 372;
222                 break;
223         case 0x02:
224                 wcrcf = 558;
225                 break;
226         case 0x03:
227                 wcrcf = 744;
228                 break;
229         case 0x04:
230                 wcrcf = 1116;
231                 break;
232         case 0x05:
233                 wcrcf = 1488;
234                 break;
235         case 0x06:
236                 wcrcf = 1860;
237                 break;
238         case 0x07:
239                 wcrcf = fi_rfu;
240                 break;
241         case 0x08:
242                 wcrcf = fi_rfu;
243                 break;
244         case 0x09:
245                 wcrcf = 512;
246                 break;
247         case 0x0A:
248                 wcrcf = 768;
249                 break;
250         case 0x0B:
251                 wcrcf = 1024;
252                 break;
253         case 0x0C:
254                 wcrcf = 1536;
255                 break;
256         case 0x0D:
257                 wcrcf = 2048;
258                 break;
259         default:
260                 wcrcf = fi_rfu;
261                 break;
262         }
263
264         /* DI */
265         switch (fidi & 0x0F) {
266         case 0x00:
267                 wbrcf = di_rfu;
268                 break;
269         case 0x01:
270                 wbrcf = 1;
271                 break;
272         case 0x02:
273                 wbrcf = 2;
274                 break;
275         case 0x03:
276                 wbrcf = 4;
277                 break;
278         case 0x04:
279                 wbrcf = 8;
280                 break;
281         case 0x05:
282                 wbrcf = 16;
283                 break;
284         case 0x06:
285                 wbrcf = 32;
286                 break;
287         case 0x07:
288                 wbrcf = di_rfu;
289                 break;
290         case 0x08:
291                 wbrcf = 12;
292                 break;
293         case 0x09:
294                 wbrcf = 20;
295                 break;
296         default:
297                 wbrcf = di_rfu;
298                 break;
299         }
300
301         return (wcrcf / wbrcf);
302 }
303
304 static unsigned short io_read_num_rec_bytes(unsigned int iobase,
305                                             unsigned short *s)
306 {
307         unsigned short tmp;
308
309         tmp = *s = 0;
310         do {
311                 *s = tmp;
312                 tmp = inb(REG_NUM_BYTES(iobase)) |
313                                 (inb(REG_FLAGS0(iobase)) & 4 ? 0x100 : 0);
314         } while (tmp != *s);
315
316         return *s;
317 }
318
319 static int parse_atr(struct cm4000_dev *dev)
320 {
321         unsigned char any_t1, any_t0;
322         unsigned char ch, ifno;
323         int ix, done;
324
325         DEBUGP(3, dev, "-> parse_atr: dev->atr_len = %i\n", dev->atr_len);
326
327         if (dev->atr_len < 3) {
328                 DEBUGP(5, dev, "parse_atr: atr_len < 3\n");
329                 return 0;
330         }
331
332         if (dev->atr[0] == 0x3f)
333                 set_bit(IS_INVREV, &dev->flags);
334         else
335                 clear_bit(IS_INVREV, &dev->flags);
336         ix = 1;
337         ifno = 1;
338         ch = dev->atr[1];
339         dev->proto = 0;         /* XXX PROTO */
340         any_t1 = any_t0 = done = 0;
341         dev->ta1 = 0x11;        /* defaults to 9600 baud */
342         do {
343                 if (ifno == 1 && (ch & 0x10)) {
344                         /* read first interface byte and TA1 is present */
345                         dev->ta1 = dev->atr[2];
346                         DEBUGP(5, dev, "Card says FiDi is 0x%.2x\n", dev->ta1);
347                         ifno++;
348                 } else if ((ifno == 2) && (ch & 0x10)) { /* TA(2) */
349                         dev->ta1 = 0x11;
350                         ifno++;
351                 }
352
353                 DEBUGP(5, dev, "Yi=%.2x\n", ch & 0xf0);
354                 ix += ((ch & 0x10) >> 4)        /* no of int.face chars */
355                     +((ch & 0x20) >> 5)
356                     + ((ch & 0x40) >> 6)
357                     + ((ch & 0x80) >> 7);
358                 /* ATRLENCK(dev,ix); */
359                 if (ch & 0x80) {        /* TDi */
360                         ch = dev->atr[ix];
361                         if ((ch & 0x0f)) {
362                                 any_t1 = 1;
363                                 DEBUGP(5, dev, "card is capable of T=1\n");
364                         } else {
365                                 any_t0 = 1;
366                                 DEBUGP(5, dev, "card is capable of T=0\n");
367                         }
368                 } else
369                         done = 1;
370         } while (!done);
371
372         DEBUGP(5, dev, "ix=%d noHist=%d any_t1=%d\n",
373               ix, dev->atr[1] & 15, any_t1);
374         if (ix + 1 + (dev->atr[1] & 0x0f) + any_t1 != dev->atr_len) {
375                 DEBUGP(5, dev, "length error\n");
376                 return 0;
377         }
378         if (any_t0)
379                 set_bit(IS_ANY_T0, &dev->flags);
380
381         if (any_t1) {           /* compute csum */
382                 dev->atr_csum = 0;
383 #ifdef ATR_CSUM
384                 for (i = 1; i < dev->atr_len; i++)
385                         dev->atr_csum ^= dev->atr[i];
386                 if (dev->atr_csum) {
387                         set_bit(IS_BAD_CSUM, &dev->flags);
388                         DEBUGP(5, dev, "bad checksum\n");
389                         goto return_0;
390                 }
391 #endif
392                 if (any_t0 == 0)
393                         dev->proto = 1; /* XXX PROTO */
394                 set_bit(IS_ANY_T1, &dev->flags);
395         }
396
397         return 1;
398 }
399
400 struct card_fixup {
401         char atr[12];
402         u_int8_t atr_len;
403         u_int8_t stopbits;
404 };
405
406 static struct card_fixup card_fixups[] = {
407         {       /* ACOS */
408                 .atr = { 0x3b, 0xb3, 0x11, 0x00, 0x00, 0x41, 0x01 },
409                 .atr_len = 7,
410                 .stopbits = 0x03,
411         },
412         {       /* Motorola */
413                 .atr = {0x3b, 0x76, 0x13, 0x00, 0x00, 0x80, 0x62, 0x07,
414                         0x41, 0x81, 0x81 },
415                 .atr_len = 11,
416                 .stopbits = 0x04,
417         },
418 };
419
420 static void set_cardparameter(struct cm4000_dev *dev)
421 {
422         int i;
423         unsigned int iobase = dev->p_dev->resource[0]->start;
424         u_int8_t stopbits = 0x02; /* ISO default */
425
426         DEBUGP(3, dev, "-> set_cardparameter\n");
427
428         dev->flags1 = dev->flags1 | (((dev->baudv - 1) & 0x0100) >> 8);
429         xoutb(dev->flags1, REG_FLAGS1(iobase));
430         DEBUGP(5, dev, "flags1 = 0x%02x\n", dev->flags1);
431
432         /* set baudrate */
433         xoutb((unsigned char)((dev->baudv - 1) & 0xFF), REG_BAUDRATE(iobase));
434
435         DEBUGP(5, dev, "baudv = %i -> write 0x%02x\n", dev->baudv,
436               ((dev->baudv - 1) & 0xFF));
437
438         /* set stopbits */
439         for (i = 0; i < ARRAY_SIZE(card_fixups); i++) {
440                 if (!memcmp(dev->atr, card_fixups[i].atr,
441                             card_fixups[i].atr_len))
442                         stopbits = card_fixups[i].stopbits;
443         }
444         xoutb(stopbits, REG_STOPBITS(iobase));
445
446         DEBUGP(3, dev, "<- set_cardparameter\n");
447 }
448
449 static int set_protocol(struct cm4000_dev *dev, struct ptsreq *ptsreq)
450 {
451
452         unsigned long tmp, i;
453         unsigned short num_bytes_read;
454         unsigned char pts_reply[4];
455         ssize_t rc;
456         unsigned int iobase = dev->p_dev->resource[0]->start;
457
458         rc = 0;
459
460         DEBUGP(3, dev, "-> set_protocol\n");
461         DEBUGP(5, dev, "ptsreq->Protocol = 0x%.8x, ptsreq->Flags=0x%.8x, "
462                  "ptsreq->pts1=0x%.2x, ptsreq->pts2=0x%.2x, "
463                  "ptsreq->pts3=0x%.2x\n", (unsigned int)ptsreq->protocol,
464                  (unsigned int)ptsreq->flags, ptsreq->pts1, ptsreq->pts2,
465                  ptsreq->pts3);
466
467         /* Fill PTS structure */
468         dev->pts[0] = 0xff;
469         dev->pts[1] = 0x00;
470         tmp = ptsreq->protocol;
471         while ((tmp = (tmp >> 1)) > 0)
472                 dev->pts[1]++;
473         dev->proto = dev->pts[1];       /* Set new protocol */
474         dev->pts[1] = (0x01 << 4) | (dev->pts[1]);
475
476         /* Correct Fi/Di according to CM4000 Fi/Di table */
477         DEBUGP(5, dev, "Ta(1) from ATR is 0x%.2x\n", dev->ta1);
478         /* set Fi/Di according to ATR TA(1) */
479         dev->pts[2] = fi_di_table[dev->ta1 & 0x0F][(dev->ta1 >> 4) & 0x0F];
480
481         /* Calculate PCK character */
482         dev->pts[3] = dev->pts[0] ^ dev->pts[1] ^ dev->pts[2];
483
484         DEBUGP(5, dev, "pts0=%.2x, pts1=%.2x, pts2=%.2x, pts3=%.2x\n",
485                dev->pts[0], dev->pts[1], dev->pts[2], dev->pts[3]);
486
487         /* check card convention */
488         if (test_bit(IS_INVREV, &dev->flags))
489                 str_invert_revert(dev->pts, 4);
490
491         /* reset SM */
492         xoutb(0x80, REG_FLAGS0(iobase));
493
494         /* Enable access to the message buffer */
495         DEBUGP(5, dev, "Enable access to the messages buffer\n");
496         dev->flags1 = 0x20      /* T_Active */
497             | (test_bit(IS_INVREV, &dev->flags) ? 0x02 : 0x00) /* inv parity */
498             | ((dev->baudv >> 8) & 0x01);       /* MSB-baud */
499         xoutb(dev->flags1, REG_FLAGS1(iobase));
500
501         DEBUGP(5, dev, "Enable message buffer -> flags1 = 0x%.2x\n",
502                dev->flags1);
503
504         /* write challenge to the buffer */
505         DEBUGP(5, dev, "Write challenge to buffer: ");
506         for (i = 0; i < 4; i++) {
507                 xoutb(i, REG_BUF_ADDR(iobase));
508                 xoutb(dev->pts[i], REG_BUF_DATA(iobase));       /* buf data */
509 #ifdef CM4000_DEBUG
510                 pr_debug("0x%.2x ", dev->pts[i]);
511         }
512         pr_debug("\n");
513 #else
514         }
515 #endif
516
517         /* set number of bytes to write */
518         DEBUGP(5, dev, "Set number of bytes to write\n");
519         xoutb(0x04, REG_NUM_SEND(iobase));
520
521         /* Trigger CARDMAN CONTROLLER */
522         xoutb(0x50, REG_FLAGS0(iobase));
523
524         /* Monitor progress */
525         /* wait for xmit done */
526         DEBUGP(5, dev, "Waiting for NumRecBytes getting valid\n");
527
528         for (i = 0; i < 100; i++) {
529                 if (inb(REG_FLAGS0(iobase)) & 0x08) {
530                         DEBUGP(5, dev, "NumRecBytes is valid\n");
531                         break;
532                 }
533                 mdelay(10);
534         }
535         if (i == 100) {
536                 DEBUGP(5, dev, "Timeout waiting for NumRecBytes getting "
537                        "valid\n");
538                 rc = -EIO;
539                 goto exit_setprotocol;
540         }
541
542         DEBUGP(5, dev, "Reading NumRecBytes\n");
543         for (i = 0; i < 100; i++) {
544                 io_read_num_rec_bytes(iobase, &num_bytes_read);
545                 if (num_bytes_read >= 4) {
546                         DEBUGP(2, dev, "NumRecBytes = %i\n", num_bytes_read);
547                         break;
548                 }
549                 mdelay(10);
550         }
551
552         /* check whether it is a short PTS reply? */
553         if (num_bytes_read == 3)
554                 i = 0;
555
556         if (i == 100) {
557                 DEBUGP(5, dev, "Timeout reading num_bytes_read\n");
558                 rc = -EIO;
559                 goto exit_setprotocol;
560         }
561
562         DEBUGP(5, dev, "Reset the CARDMAN CONTROLLER\n");
563         xoutb(0x80, REG_FLAGS0(iobase));
564
565         /* Read PPS reply */
566         DEBUGP(5, dev, "Read PPS reply\n");
567         for (i = 0; i < num_bytes_read; i++) {
568                 xoutb(i, REG_BUF_ADDR(iobase));
569                 pts_reply[i] = inb(REG_BUF_DATA(iobase));
570         }
571
572 #ifdef CM4000_DEBUG
573         DEBUGP(2, dev, "PTSreply: ");
574         for (i = 0; i < num_bytes_read; i++) {
575                 pr_debug("0x%.2x ", pts_reply[i]);
576         }
577         pr_debug("\n");
578 #endif  /* CM4000_DEBUG */
579
580         DEBUGP(5, dev, "Clear Tactive in Flags1\n");
581         xoutb(0x20, REG_FLAGS1(iobase));
582
583         /* Compare ptsreq and ptsreply */
584         if ((dev->pts[0] == pts_reply[0]) &&
585             (dev->pts[1] == pts_reply[1]) &&
586             (dev->pts[2] == pts_reply[2]) && (dev->pts[3] == pts_reply[3])) {
587                 /* setcardparameter according to PPS */
588                 dev->baudv = calc_baudv(dev->pts[2]);
589                 set_cardparameter(dev);
590         } else if ((dev->pts[0] == pts_reply[0]) &&
591                    ((dev->pts[1] & 0xef) == pts_reply[1]) &&
592                    ((pts_reply[0] ^ pts_reply[1]) == pts_reply[2])) {
593                 /* short PTS reply, set card parameter to default values */
594                 dev->baudv = calc_baudv(0x11);
595                 set_cardparameter(dev);
596         } else
597                 rc = -EIO;
598
599 exit_setprotocol:
600         DEBUGP(3, dev, "<- set_protocol\n");
601         return rc;
602 }
603
604 static int io_detect_cm4000(unsigned int iobase, struct cm4000_dev *dev)
605 {
606
607         /* note: statemachine is assumed to be reset */
608         if (inb(REG_FLAGS0(iobase)) & 8) {
609                 clear_bit(IS_ATR_VALID, &dev->flags);
610                 set_bit(IS_CMM_ABSENT, &dev->flags);
611                 return 0;       /* detect CMM = 1 -> failure */
612         }
613         /* xoutb(0x40, REG_FLAGS1(iobase)); detectCMM */
614         xoutb(dev->flags1 | 0x40, REG_FLAGS1(iobase));
615         if ((inb(REG_FLAGS0(iobase)) & 8) == 0) {
616                 clear_bit(IS_ATR_VALID, &dev->flags);
617                 set_bit(IS_CMM_ABSENT, &dev->flags);
618                 return 0;       /* detect CMM=0 -> failure */
619         }
620         /* clear detectCMM again by restoring original flags1 */
621         xoutb(dev->flags1, REG_FLAGS1(iobase));
622         return 1;
623 }
624
625 static void terminate_monitor(struct cm4000_dev *dev)
626 {
627
628         /* tell the monitor to stop and wait until
629          * it terminates.
630          */
631         DEBUGP(3, dev, "-> terminate_monitor\n");
632         wait_event_interruptible(dev->devq,
633                                  test_and_set_bit(LOCK_MONITOR,
634                                                   (void *)&dev->flags));
635
636         /* now, LOCK_MONITOR has been set.
637          * allow a last cycle in the monitor.
638          * the monitor will indicate that it has
639          * finished by clearing this bit.
640          */
641         DEBUGP(5, dev, "Now allow last cycle of monitor!\n");
642         while (test_bit(LOCK_MONITOR, (void *)&dev->flags))
643                 msleep(25);
644
645         DEBUGP(5, dev, "Delete timer\n");
646         del_timer_sync(&dev->timer);
647 #ifdef CM4000_DEBUG
648         dev->monitor_running = 0;
649 #endif
650
651         DEBUGP(3, dev, "<- terminate_monitor\n");
652 }
653
654 /*
655  * monitor the card every 50msec. as a side-effect, retrieve the
656  * atr once a card is inserted. another side-effect of retrieving the
657  * atr is that the card will be powered on, so there is no need to
658  * power on the card explictely from the application: the driver
659  * is already doing that for you.
660  */
661
662 static void monitor_card(unsigned long p)
663 {
664         struct cm4000_dev *dev = (struct cm4000_dev *) p;
665         unsigned int iobase = dev->p_dev->resource[0]->start;
666         unsigned short s;
667         struct ptsreq ptsreq;
668         int i, atrc;
669
670         DEBUGP(7, dev, "->  monitor_card\n");
671
672         /* if someone has set the lock for us: we're done! */
673         if (test_and_set_bit(LOCK_MONITOR, &dev->flags)) {
674                 DEBUGP(4, dev, "About to stop monitor\n");
675                 /* no */
676                 dev->rlen =
677                     dev->rpos =
678                     dev->atr_csum = dev->atr_len_retry = dev->cwarn = 0;
679                 dev->mstate = M_FETCH_ATR;
680                 clear_bit(LOCK_MONITOR, &dev->flags);
681                 /* close et al. are sleeping on devq, so wake it */
682                 wake_up_interruptible(&dev->devq);
683                 DEBUGP(2, dev, "<- monitor_card (we are done now)\n");
684                 return;
685         }
686
687         /* try to lock io: if it is already locked, just add another timer */
688         if (test_and_set_bit(LOCK_IO, (void *)&dev->flags)) {
689                 DEBUGP(4, dev, "Couldn't get IO lock\n");
690                 goto return_with_timer;
691         }
692
693         /* is a card/a reader inserted at all ? */
694         dev->flags0 = xinb(REG_FLAGS0(iobase));
695         DEBUGP(7, dev, "dev->flags0 = 0x%2x\n", dev->flags0);
696         DEBUGP(7, dev, "smartcard present: %s\n",
697                dev->flags0 & 1 ? "yes" : "no");
698         DEBUGP(7, dev, "cardman present: %s\n",
699                dev->flags0 == 0xff ? "no" : "yes");
700
701         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
702             || dev->flags0 == 0xff) {   /* no cardman inserted */
703                 /* no */
704                 dev->rlen =
705                     dev->rpos =
706                     dev->atr_csum = dev->atr_len_retry = dev->cwarn = 0;
707                 dev->mstate = M_FETCH_ATR;
708
709                 dev->flags &= 0x000000ff; /* only keep IO and MONITOR locks */
710
711                 if (dev->flags0 == 0xff) {
712                         DEBUGP(4, dev, "set IS_CMM_ABSENT bit\n");
713                         set_bit(IS_CMM_ABSENT, &dev->flags);
714                 } else if (test_bit(IS_CMM_ABSENT, &dev->flags)) {
715                         DEBUGP(4, dev, "clear IS_CMM_ABSENT bit "
716                                "(card is removed)\n");
717                         clear_bit(IS_CMM_ABSENT, &dev->flags);
718                 }
719
720                 goto release_io;
721         } else if ((dev->flags0 & 1) && test_bit(IS_CMM_ABSENT, &dev->flags)) {
722                 /* cardman and card present but cardman was absent before
723                  * (after suspend with inserted card) */
724                 DEBUGP(4, dev, "clear IS_CMM_ABSENT bit (card is inserted)\n");
725                 clear_bit(IS_CMM_ABSENT, &dev->flags);
726         }
727
728         if (test_bit(IS_ATR_VALID, &dev->flags) == 1) {
729                 DEBUGP(7, dev, "believe ATR is already valid (do nothing)\n");
730                 goto release_io;
731         }
732
733         switch (dev->mstate) {
734                 unsigned char flags0;
735         case M_CARDOFF:
736                 DEBUGP(4, dev, "M_CARDOFF\n");
737                 flags0 = inb(REG_FLAGS0(iobase));
738                 if (flags0 & 0x02) {
739                         /* wait until Flags0 indicate power is off */
740                         dev->mdelay = T_10MSEC;
741                 } else {
742                         /* Flags0 indicate power off and no card inserted now;
743                          * Reset CARDMAN CONTROLLER */
744                         xoutb(0x80, REG_FLAGS0(iobase));
745
746                         /* prepare for fetching ATR again: after card off ATR
747                          * is read again automatically */
748                         dev->rlen =
749                             dev->rpos =
750                             dev->atr_csum =
751                             dev->atr_len_retry = dev->cwarn = 0;
752                         dev->mstate = M_FETCH_ATR;
753
754                         /* minimal gap between CARDOFF and read ATR is 50msec */
755                         dev->mdelay = T_50MSEC;
756                 }
757                 break;
758         case M_FETCH_ATR:
759                 DEBUGP(4, dev, "M_FETCH_ATR\n");
760                 xoutb(0x80, REG_FLAGS0(iobase));
761                 DEBUGP(4, dev, "Reset BAUDV to 9600\n");
762                 dev->baudv = 0x173;     /* 9600 */
763                 xoutb(0x02, REG_STOPBITS(iobase));      /* stopbits=2 */
764                 xoutb(0x73, REG_BAUDRATE(iobase));      /* baud value */
765                 xoutb(0x21, REG_FLAGS1(iobase));        /* T_Active=1, baud
766                                                            value */
767                 /* warm start vs. power on: */
768                 xoutb(dev->flags0 & 2 ? 0x46 : 0x44, REG_FLAGS0(iobase));
769                 dev->mdelay = T_40MSEC;
770                 dev->mstate = M_TIMEOUT_WAIT;
771                 break;
772         case M_TIMEOUT_WAIT:
773                 DEBUGP(4, dev, "M_TIMEOUT_WAIT\n");
774                 /* numRecBytes */
775                 io_read_num_rec_bytes(iobase, &dev->atr_len);
776                 dev->mdelay = T_10MSEC;
777                 dev->mstate = M_READ_ATR_LEN;
778                 break;
779         case M_READ_ATR_LEN:
780                 DEBUGP(4, dev, "M_READ_ATR_LEN\n");
781                 /* infinite loop possible, since there is no timeout */
782
783 #define MAX_ATR_LEN_RETRY       100
784
785                 if (dev->atr_len == io_read_num_rec_bytes(iobase, &s)) {
786                         if (dev->atr_len_retry++ >= MAX_ATR_LEN_RETRY) {                                        /* + XX msec */
787                                 dev->mdelay = T_10MSEC;
788                                 dev->mstate = M_READ_ATR;
789                         }
790                 } else {
791                         dev->atr_len = s;
792                         dev->atr_len_retry = 0; /* set new timeout */
793                 }
794
795                 DEBUGP(4, dev, "Current ATR_LEN = %i\n", dev->atr_len);
796                 break;
797         case M_READ_ATR:
798                 DEBUGP(4, dev, "M_READ_ATR\n");
799                 xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM */
800                 for (i = 0; i < dev->atr_len; i++) {
801                         xoutb(i, REG_BUF_ADDR(iobase));
802                         dev->atr[i] = inb(REG_BUF_DATA(iobase));
803                 }
804                 /* Deactivate T_Active flags */
805                 DEBUGP(4, dev, "Deactivate T_Active flags\n");
806                 dev->flags1 = 0x01;
807                 xoutb(dev->flags1, REG_FLAGS1(iobase));
808
809                 /* atr is present (which doesnt mean it's valid) */
810                 set_bit(IS_ATR_PRESENT, &dev->flags);
811                 if (dev->atr[0] == 0x03)
812                         str_invert_revert(dev->atr, dev->atr_len);
813                 atrc = parse_atr(dev);
814                 if (atrc == 0) {        /* atr invalid */
815                         dev->mdelay = 0;
816                         dev->mstate = M_BAD_CARD;
817                 } else {
818                         dev->mdelay = T_50MSEC;
819                         dev->mstate = M_ATR_PRESENT;
820                         set_bit(IS_ATR_VALID, &dev->flags);
821                 }
822
823                 if (test_bit(IS_ATR_VALID, &dev->flags) == 1) {
824                         DEBUGP(4, dev, "monitor_card: ATR valid\n");
825                         /* if ta1 == 0x11, no PPS necessary (default values) */
826                         /* do not do PPS with multi protocol cards */
827                         if ((test_bit(IS_AUTOPPS_ACT, &dev->flags) == 0) &&
828                             (dev->ta1 != 0x11) &&
829                             !(test_bit(IS_ANY_T0, &dev->flags) &&
830                             test_bit(IS_ANY_T1, &dev->flags))) {
831                                 DEBUGP(4, dev, "Perform AUTOPPS\n");
832                                 set_bit(IS_AUTOPPS_ACT, &dev->flags);
833                                 ptsreq.protocol = ptsreq.protocol =
834                                     (0x01 << dev->proto);
835                                 ptsreq.flags = 0x01;
836                                 ptsreq.pts1 = 0x00;
837                                 ptsreq.pts2 = 0x00;
838                                 ptsreq.pts3 = 0x00;
839                                 if (set_protocol(dev, &ptsreq) == 0) {
840                                         DEBUGP(4, dev, "AUTOPPS ret SUCC\n");
841                                         clear_bit(IS_AUTOPPS_ACT, &dev->flags);
842                                         wake_up_interruptible(&dev->atrq);
843                                 } else {
844                                         DEBUGP(4, dev, "AUTOPPS failed: "
845                                                "repower using defaults\n");
846                                         /* prepare for repowering  */
847                                         clear_bit(IS_ATR_PRESENT, &dev->flags);
848                                         clear_bit(IS_ATR_VALID, &dev->flags);
849                                         dev->rlen =
850                                             dev->rpos =
851                                             dev->atr_csum =
852                                             dev->atr_len_retry = dev->cwarn = 0;
853                                         dev->mstate = M_FETCH_ATR;
854
855                                         dev->mdelay = T_50MSEC;
856                                 }
857                         } else {
858                                 /* for cards which use slightly different
859                                  * params (extra guard time) */
860                                 set_cardparameter(dev);
861                                 if (test_bit(IS_AUTOPPS_ACT, &dev->flags) == 1)
862                                         DEBUGP(4, dev, "AUTOPPS already active "
863                                                "2nd try:use default values\n");
864                                 if (dev->ta1 == 0x11)
865                                         DEBUGP(4, dev, "No AUTOPPS necessary "
866                                                "TA(1)==0x11\n");
867                                 if (test_bit(IS_ANY_T0, &dev->flags)
868                                     && test_bit(IS_ANY_T1, &dev->flags))
869                                         DEBUGP(4, dev, "Do NOT perform AUTOPPS "
870                                                "with multiprotocol cards\n");
871                                 clear_bit(IS_AUTOPPS_ACT, &dev->flags);
872                                 wake_up_interruptible(&dev->atrq);
873                         }
874                 } else {
875                         DEBUGP(4, dev, "ATR invalid\n");
876                         wake_up_interruptible(&dev->atrq);
877                 }
878                 break;
879         case M_BAD_CARD:
880                 DEBUGP(4, dev, "M_BAD_CARD\n");
881                 /* slow down warning, but prompt immediately after insertion */
882                 if (dev->cwarn == 0 || dev->cwarn == 10) {
883                         set_bit(IS_BAD_CARD, &dev->flags);
884                         dev_warn(&dev->p_dev->dev, MODULE_NAME ": ");
885                         if (test_bit(IS_BAD_CSUM, &dev->flags)) {
886                                 DEBUGP(4, dev, "ATR checksum (0x%.2x, should "
887                                        "be zero) failed\n", dev->atr_csum);
888                         }
889 #ifdef CM4000_DEBUG
890                         else if (test_bit(IS_BAD_LENGTH, &dev->flags)) {
891                                 DEBUGP(4, dev, "ATR length error\n");
892                         } else {
893                                 DEBUGP(4, dev, "card damaged or wrong way "
894                                         "inserted\n");
895                         }
896 #endif
897                         dev->cwarn = 0;
898                         wake_up_interruptible(&dev->atrq);      /* wake open */
899                 }
900                 dev->cwarn++;
901                 dev->mdelay = T_100MSEC;
902                 dev->mstate = M_FETCH_ATR;
903                 break;
904         default:
905                 DEBUGP(7, dev, "Unknown action\n");
906                 break;          /* nothing */
907         }
908
909 release_io:
910         DEBUGP(7, dev, "release_io\n");
911         clear_bit(LOCK_IO, &dev->flags);
912         wake_up_interruptible(&dev->ioq);       /* whoever needs IO */
913
914 return_with_timer:
915         DEBUGP(7, dev, "<- monitor_card (returns with timer)\n");
916         mod_timer(&dev->timer, jiffies + dev->mdelay);
917         clear_bit(LOCK_MONITOR, &dev->flags);
918 }
919
920 /* Interface to userland (file_operations) */
921
922 static ssize_t cmm_read(struct file *filp, __user char *buf, size_t count,
923                         loff_t *ppos)
924 {
925         struct cm4000_dev *dev = filp->private_data;
926         unsigned int iobase = dev->p_dev->resource[0]->start;
927         ssize_t rc;
928         int i, j, k;
929
930         DEBUGP(2, dev, "-> cmm_read(%s,%d)\n", current->comm, current->pid);
931
932         if (count == 0)         /* according to manpage */
933                 return 0;
934
935         if (!pcmcia_dev_present(dev->p_dev) || /* device removed */
936             test_bit(IS_CMM_ABSENT, &dev->flags))
937                 return -ENODEV;
938
939         if (test_bit(IS_BAD_CSUM, &dev->flags))
940                 return -EIO;
941
942         /* also see the note about this in cmm_write */
943         if (wait_event_interruptible
944             (dev->atrq,
945              ((filp->f_flags & O_NONBLOCK)
946               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags) != 0)))) {
947                 if (filp->f_flags & O_NONBLOCK)
948                         return -EAGAIN;
949                 return -ERESTARTSYS;
950         }
951
952         if (test_bit(IS_ATR_VALID, &dev->flags) == 0)
953                 return -EIO;
954
955         /* this one implements blocking IO */
956         if (wait_event_interruptible
957             (dev->readq,
958              ((filp->f_flags & O_NONBLOCK) || (dev->rpos < dev->rlen)))) {
959                 if (filp->f_flags & O_NONBLOCK)
960                         return -EAGAIN;
961                 return -ERESTARTSYS;
962         }
963
964         /* lock io */
965         if (wait_event_interruptible
966             (dev->ioq,
967              ((filp->f_flags & O_NONBLOCK)
968               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags) == 0)))) {
969                 if (filp->f_flags & O_NONBLOCK)
970                         return -EAGAIN;
971                 return -ERESTARTSYS;
972         }
973
974         rc = 0;
975         dev->flags0 = inb(REG_FLAGS0(iobase));
976         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
977             || dev->flags0 == 0xff) {   /* no cardman inserted */
978                 clear_bit(IS_ATR_VALID, &dev->flags);
979                 if (dev->flags0 & 1) {
980                         set_bit(IS_CMM_ABSENT, &dev->flags);
981                         rc = -ENODEV;
982                 } else {
983                         rc = -EIO;
984                 }
985                 goto release_io;
986         }
987
988         DEBUGP(4, dev, "begin read answer\n");
989         j = min(count, (size_t)(dev->rlen - dev->rpos));
990         k = dev->rpos;
991         if (k + j > 255)
992                 j = 256 - k;
993         DEBUGP(4, dev, "read1 j=%d\n", j);
994         for (i = 0; i < j; i++) {
995                 xoutb(k++, REG_BUF_ADDR(iobase));
996                 dev->rbuf[i] = xinb(REG_BUF_DATA(iobase));
997         }
998         j = min(count, (size_t)(dev->rlen - dev->rpos));
999         if (k + j > 255) {
1000                 DEBUGP(4, dev, "read2 j=%d\n", j);
1001                 dev->flags1 |= 0x10;    /* MSB buf addr set */
1002                 xoutb(dev->flags1, REG_FLAGS1(iobase));
1003                 for (; i < j; i++) {
1004                         xoutb(k++, REG_BUF_ADDR(iobase));
1005                         dev->rbuf[i] = xinb(REG_BUF_DATA(iobase));
1006                 }
1007         }
1008
1009         if (dev->proto == 0 && count > dev->rlen - dev->rpos && i) {
1010                 DEBUGP(4, dev, "T=0 and count > buffer\n");
1011                 dev->rbuf[i] = dev->rbuf[i - 1];
1012                 dev->rbuf[i - 1] = dev->procbyte;
1013                 j++;
1014         }
1015         count = j;
1016
1017         dev->rpos = dev->rlen + 1;
1018
1019         /* Clear T1Active */
1020         DEBUGP(4, dev, "Clear T1Active\n");
1021         dev->flags1 &= 0xdf;
1022         xoutb(dev->flags1, REG_FLAGS1(iobase));
1023
1024         xoutb(0, REG_FLAGS1(iobase));   /* clear detectCMM */
1025         /* last check before exit */
1026         if (!io_detect_cm4000(iobase, dev)) {
1027                 rc = -ENODEV;
1028                 goto release_io;
1029         }
1030
1031         if (test_bit(IS_INVREV, &dev->flags) && count > 0)
1032                 str_invert_revert(dev->rbuf, count);
1033
1034         if (copy_to_user(buf, dev->rbuf, count))
1035                 rc = -EFAULT;
1036
1037 release_io:
1038         clear_bit(LOCK_IO, &dev->flags);
1039         wake_up_interruptible(&dev->ioq);
1040
1041         DEBUGP(2, dev, "<- cmm_read returns: rc = %Zi\n",
1042                (rc < 0 ? rc : count));
1043         return rc < 0 ? rc : count;
1044 }
1045
1046 static ssize_t cmm_write(struct file *filp, const char __user *buf,
1047                          size_t count, loff_t *ppos)
1048 {
1049         struct cm4000_dev *dev = filp->private_data;
1050         unsigned int iobase = dev->p_dev->resource[0]->start;
1051         unsigned short s;
1052         unsigned char tmp;
1053         unsigned char infolen;
1054         unsigned char sendT0;
1055         unsigned short nsend;
1056         unsigned short nr;
1057         ssize_t rc;
1058         int i;
1059
1060         DEBUGP(2, dev, "-> cmm_write(%s,%d)\n", current->comm, current->pid);
1061
1062         if (count == 0)         /* according to manpage */
1063                 return 0;
1064
1065         if (dev->proto == 0 && count < 4) {
1066                 /* T0 must have at least 4 bytes */
1067                 DEBUGP(4, dev, "T0 short write\n");
1068                 return -EIO;
1069         }
1070
1071         nr = count & 0x1ff;     /* max bytes to write */
1072
1073         sendT0 = dev->proto ? 0 : nr > 5 ? 0x08 : 0;
1074
1075         if (!pcmcia_dev_present(dev->p_dev) || /* device removed */
1076             test_bit(IS_CMM_ABSENT, &dev->flags))
1077                 return -ENODEV;
1078
1079         if (test_bit(IS_BAD_CSUM, &dev->flags)) {
1080                 DEBUGP(4, dev, "bad csum\n");
1081                 return -EIO;
1082         }
1083
1084         /*
1085          * wait for atr to become valid.
1086          * note: it is important to lock this code. if we dont, the monitor
1087          * could be run between test_bit and the call to sleep on the
1088          * atr-queue.  if *then* the monitor detects atr valid, it will wake up
1089          * any process on the atr-queue, *but* since we have been interrupted,
1090          * we do not yet sleep on this queue. this would result in a missed
1091          * wake_up and the calling process would sleep forever (until
1092          * interrupted).  also, do *not* restore_flags before sleep_on, because
1093          * this could result in the same situation!
1094          */
1095         if (wait_event_interruptible
1096             (dev->atrq,
1097              ((filp->f_flags & O_NONBLOCK)
1098               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags) != 0)))) {
1099                 if (filp->f_flags & O_NONBLOCK)
1100                         return -EAGAIN;
1101                 return -ERESTARTSYS;
1102         }
1103
1104         if (test_bit(IS_ATR_VALID, &dev->flags) == 0) { /* invalid atr */
1105                 DEBUGP(4, dev, "invalid ATR\n");
1106                 return -EIO;
1107         }
1108
1109         /* lock io */
1110         if (wait_event_interruptible
1111             (dev->ioq,
1112              ((filp->f_flags & O_NONBLOCK)
1113               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags) == 0)))) {
1114                 if (filp->f_flags & O_NONBLOCK)
1115                         return -EAGAIN;
1116                 return -ERESTARTSYS;
1117         }
1118
1119         if (copy_from_user(dev->sbuf, buf, ((count > 512) ? 512 : count)))
1120                 return -EFAULT;
1121
1122         rc = 0;
1123         dev->flags0 = inb(REG_FLAGS0(iobase));
1124         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
1125             || dev->flags0 == 0xff) {   /* no cardman inserted */
1126                 clear_bit(IS_ATR_VALID, &dev->flags);
1127                 if (dev->flags0 & 1) {
1128                         set_bit(IS_CMM_ABSENT, &dev->flags);
1129                         rc = -ENODEV;
1130                 } else {
1131                         DEBUGP(4, dev, "IO error\n");
1132                         rc = -EIO;
1133                 }
1134                 goto release_io;
1135         }
1136
1137         xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM  */
1138
1139         if (!io_detect_cm4000(iobase, dev)) {
1140                 rc = -ENODEV;
1141                 goto release_io;
1142         }
1143
1144         /* reflect T=0 send/read mode in flags1 */
1145         dev->flags1 |= (sendT0);
1146
1147         set_cardparameter(dev);
1148
1149         /* dummy read, reset flag procedure received */
1150         tmp = inb(REG_FLAGS1(iobase));
1151
1152         dev->flags1 = 0x20      /* T_Active */
1153             | (sendT0)
1154             | (test_bit(IS_INVREV, &dev->flags) ? 2 : 0)/* inverse parity  */
1155             | (((dev->baudv - 1) & 0x0100) >> 8);       /* MSB-Baud */
1156         DEBUGP(1, dev, "set dev->flags1 = 0x%.2x\n", dev->flags1);
1157         xoutb(dev->flags1, REG_FLAGS1(iobase));
1158
1159         /* xmit data */
1160         DEBUGP(4, dev, "Xmit data\n");
1161         for (i = 0; i < nr; i++) {
1162                 if (i >= 256) {
1163                         dev->flags1 = 0x20      /* T_Active */
1164                             | (sendT0)  /* SendT0 */
1165                                 /* inverse parity: */
1166                             | (test_bit(IS_INVREV, &dev->flags) ? 2 : 0)
1167                             | (((dev->baudv - 1) & 0x0100) >> 8) /* MSB-Baud */
1168                             | 0x10;     /* set address high */
1169                         DEBUGP(4, dev, "dev->flags = 0x%.2x - set address "
1170                                "high\n", dev->flags1);
1171                         xoutb(dev->flags1, REG_FLAGS1(iobase));
1172                 }
1173                 if (test_bit(IS_INVREV, &dev->flags)) {
1174                         DEBUGP(4, dev, "Apply inverse convention for 0x%.2x "
1175                                 "-> 0x%.2x\n", (unsigned char)dev->sbuf[i],
1176                               invert_revert(dev->sbuf[i]));
1177                         xoutb(i, REG_BUF_ADDR(iobase));
1178                         xoutb(invert_revert(dev->sbuf[i]),
1179                               REG_BUF_DATA(iobase));
1180                 } else {
1181                         xoutb(i, REG_BUF_ADDR(iobase));
1182                         xoutb(dev->sbuf[i], REG_BUF_DATA(iobase));
1183                 }
1184         }
1185         DEBUGP(4, dev, "Xmit done\n");
1186
1187         if (dev->proto == 0) {
1188                 /* T=0 proto: 0 byte reply  */
1189                 if (nr == 4) {
1190                         DEBUGP(4, dev, "T=0 assumes 0 byte reply\n");
1191                         xoutb(i, REG_BUF_ADDR(iobase));
1192                         if (test_bit(IS_INVREV, &dev->flags))
1193                                 xoutb(0xff, REG_BUF_DATA(iobase));
1194                         else
1195                                 xoutb(0x00, REG_BUF_DATA(iobase));
1196                 }
1197
1198                 /* numSendBytes */
1199                 if (sendT0)
1200                         nsend = nr;
1201                 else {
1202                         if (nr == 4)
1203                                 nsend = 5;
1204                         else {
1205                                 nsend = 5 + (unsigned char)dev->sbuf[4];
1206                                 if (dev->sbuf[4] == 0)
1207                                         nsend += 0x100;
1208                         }
1209                 }
1210         } else
1211                 nsend = nr;
1212
1213         /* T0: output procedure byte */
1214         if (test_bit(IS_INVREV, &dev->flags)) {
1215                 DEBUGP(4, dev, "T=0 set Procedure byte (inverse-reverse) "
1216                        "0x%.2x\n", invert_revert(dev->sbuf[1]));
1217                 xoutb(invert_revert(dev->sbuf[1]), REG_NUM_BYTES(iobase));
1218         } else {
1219                 DEBUGP(4, dev, "T=0 set Procedure byte 0x%.2x\n", dev->sbuf[1]);
1220                 xoutb(dev->sbuf[1], REG_NUM_BYTES(iobase));
1221         }
1222
1223         DEBUGP(1, dev, "set NumSendBytes = 0x%.2x\n",
1224                (unsigned char)(nsend & 0xff));
1225         xoutb((unsigned char)(nsend & 0xff), REG_NUM_SEND(iobase));
1226
1227         DEBUGP(1, dev, "Trigger CARDMAN CONTROLLER (0x%.2x)\n",
1228                0x40     /* SM_Active */
1229               | (dev->flags0 & 2 ? 0 : 4)       /* power on if needed */
1230               |(dev->proto ? 0x10 : 0x08)       /* T=1/T=0 */
1231               |(nsend & 0x100) >> 8 /* MSB numSendBytes */ );
1232         xoutb(0x40              /* SM_Active */
1233               | (dev->flags0 & 2 ? 0 : 4)       /* power on if needed */
1234               |(dev->proto ? 0x10 : 0x08)       /* T=1/T=0 */
1235               |(nsend & 0x100) >> 8,    /* MSB numSendBytes */
1236               REG_FLAGS0(iobase));
1237
1238         /* wait for xmit done */
1239         if (dev->proto == 1) {
1240                 DEBUGP(4, dev, "Wait for xmit done\n");
1241                 for (i = 0; i < 1000; i++) {
1242                         if (inb(REG_FLAGS0(iobase)) & 0x08)
1243                                 break;
1244                         msleep_interruptible(10);
1245                 }
1246                 if (i == 1000) {
1247                         DEBUGP(4, dev, "timeout waiting for xmit done\n");
1248                         rc = -EIO;
1249                         goto release_io;
1250                 }
1251         }
1252
1253         /* T=1: wait for infoLen */
1254
1255         infolen = 0;
1256         if (dev->proto) {
1257                 /* wait until infoLen is valid */
1258                 for (i = 0; i < 6000; i++) {    /* max waiting time of 1 min */
1259                         io_read_num_rec_bytes(iobase, &s);
1260                         if (s >= 3) {
1261                                 infolen = inb(REG_FLAGS1(iobase));
1262                                 DEBUGP(4, dev, "infolen=%d\n", infolen);
1263                                 break;
1264                         }
1265                         msleep_interruptible(10);
1266                 }
1267                 if (i == 6000) {
1268                         DEBUGP(4, dev, "timeout waiting for infoLen\n");
1269                         rc = -EIO;
1270                         goto release_io;
1271                 }
1272         } else
1273                 clear_bit(IS_PROCBYTE_PRESENT, &dev->flags);
1274
1275         /* numRecBytes | bit9 of numRecytes */
1276         io_read_num_rec_bytes(iobase, &dev->rlen);
1277         for (i = 0; i < 600; i++) {     /* max waiting time of 2 sec */
1278                 if (dev->proto) {
1279                         if (dev->rlen >= infolen + 4)
1280                                 break;
1281                 }
1282                 msleep_interruptible(10);
1283                 /* numRecBytes | bit9 of numRecytes */
1284                 io_read_num_rec_bytes(iobase, &s);
1285                 if (s > dev->rlen) {
1286                         DEBUGP(1, dev, "NumRecBytes inc (reset timeout)\n");
1287                         i = 0;  /* reset timeout */
1288                         dev->rlen = s;
1289                 }
1290                 /* T=0: we are done when numRecBytes doesn't
1291                  *      increment any more and NoProcedureByte
1292                  *      is set and numRecBytes == bytes sent + 6
1293                  *      (header bytes + data + 1 for sw2)
1294                  *      except when the card replies an error
1295                  *      which means, no data will be sent back.
1296                  */
1297                 else if (dev->proto == 0) {
1298                         if ((inb(REG_BUF_ADDR(iobase)) & 0x80)) {
1299                                 /* no procedure byte received since last read */
1300                                 DEBUGP(1, dev, "NoProcedure byte set\n");
1301                                 /* i=0; */
1302                         } else {
1303                                 /* procedure byte received since last read */
1304                                 DEBUGP(1, dev, "NoProcedure byte unset "
1305                                         "(reset timeout)\n");
1306                                 dev->procbyte = inb(REG_FLAGS1(iobase));
1307                                 DEBUGP(1, dev, "Read procedure byte 0x%.2x\n",
1308                                       dev->procbyte);
1309                                 i = 0;  /* resettimeout */
1310                         }
1311                         if (inb(REG_FLAGS0(iobase)) & 0x08) {
1312                                 DEBUGP(1, dev, "T0Done flag (read reply)\n");
1313                                 break;
1314                         }
1315                 }
1316                 if (dev->proto)
1317                         infolen = inb(REG_FLAGS1(iobase));
1318         }
1319         if (i == 600) {
1320                 DEBUGP(1, dev, "timeout waiting for numRecBytes\n");
1321                 rc = -EIO;
1322                 goto release_io;
1323         } else {
1324                 if (dev->proto == 0) {
1325                         DEBUGP(1, dev, "Wait for T0Done bit to be  set\n");
1326                         for (i = 0; i < 1000; i++) {
1327                                 if (inb(REG_FLAGS0(iobase)) & 0x08)
1328                                         break;
1329                                 msleep_interruptible(10);
1330                         }
1331                         if (i == 1000) {
1332                                 DEBUGP(1, dev, "timeout waiting for T0Done\n");
1333                                 rc = -EIO;
1334                                 goto release_io;
1335                         }
1336
1337                         dev->procbyte = inb(REG_FLAGS1(iobase));
1338                         DEBUGP(4, dev, "Read procedure byte 0x%.2x\n",
1339                               dev->procbyte);
1340
1341                         io_read_num_rec_bytes(iobase, &dev->rlen);
1342                         DEBUGP(4, dev, "Read NumRecBytes = %i\n", dev->rlen);
1343
1344                 }
1345         }
1346         /* T=1: read offset=zero, T=0: read offset=after challenge */
1347         dev->rpos = dev->proto ? 0 : nr == 4 ? 5 : nr > dev->rlen ? 5 : nr;
1348         DEBUGP(4, dev, "dev->rlen = %i,  dev->rpos = %i, nr = %i\n",
1349               dev->rlen, dev->rpos, nr);
1350
1351 release_io:
1352         DEBUGP(4, dev, "Reset SM\n");
1353         xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM */
1354
1355         if (rc < 0) {
1356                 DEBUGP(4, dev, "Write failed but clear T_Active\n");
1357                 dev->flags1 &= 0xdf;
1358                 xoutb(dev->flags1, REG_FLAGS1(iobase));
1359         }
1360
1361         clear_bit(LOCK_IO, &dev->flags);
1362         wake_up_interruptible(&dev->ioq);
1363         wake_up_interruptible(&dev->readq);     /* tell read we have data */
1364
1365         /* ITSEC E2: clear write buffer */
1366         memset((char *)dev->sbuf, 0, 512);
1367
1368         /* return error or actually written bytes */
1369         DEBUGP(2, dev, "<- cmm_write\n");
1370         return rc < 0 ? rc : nr;
1371 }
1372
1373 static void start_monitor(struct cm4000_dev *dev)
1374 {
1375         DEBUGP(3, dev, "-> start_monitor\n");
1376         if (!dev->monitor_running) {
1377                 DEBUGP(5, dev, "create, init and add timer\n");
1378                 setup_timer(&dev->timer, monitor_card, (unsigned long)dev);
1379                 dev->monitor_running = 1;
1380                 mod_timer(&dev->timer, jiffies);
1381         } else
1382                 DEBUGP(5, dev, "monitor already running\n");
1383         DEBUGP(3, dev, "<- start_monitor\n");
1384 }
1385
1386 static void stop_monitor(struct cm4000_dev *dev)
1387 {
1388         DEBUGP(3, dev, "-> stop_monitor\n");
1389         if (dev->monitor_running) {
1390                 DEBUGP(5, dev, "stopping monitor\n");
1391                 terminate_monitor(dev);
1392                 /* reset monitor SM */
1393                 clear_bit(IS_ATR_VALID, &dev->flags);
1394                 clear_bit(IS_ATR_PRESENT, &dev->flags);
1395         } else
1396                 DEBUGP(5, dev, "monitor already stopped\n");
1397         DEBUGP(3, dev, "<- stop_monitor\n");
1398 }
1399
1400 static long cmm_ioctl(struct file *filp, unsigned int cmd, unsigned long arg)
1401 {
1402         struct cm4000_dev *dev = filp->private_data;
1403         unsigned int iobase = dev->p_dev->resource[0]->start;
1404         struct inode *inode = filp->f_path.dentry->d_inode;
1405         struct pcmcia_device *link;
1406         int size;
1407         int rc;
1408         void __user *argp = (void __user *)arg;
1409 #ifdef CM4000_DEBUG
1410         char *ioctl_names[CM_IOC_MAXNR + 1] = {
1411                 [_IOC_NR(CM_IOCGSTATUS)] "CM_IOCGSTATUS",
1412                 [_IOC_NR(CM_IOCGATR)] "CM_IOCGATR",
1413                 [_IOC_NR(CM_IOCARDOFF)] "CM_IOCARDOFF",
1414                 [_IOC_NR(CM_IOCSPTS)] "CM_IOCSPTS",
1415                 [_IOC_NR(CM_IOSDBGLVL)] "CM4000_DBGLVL",
1416         };
1417         DEBUGP(3, dev, "cmm_ioctl(device=%d.%d) %s\n", imajor(inode),
1418                iminor(inode), ioctl_names[_IOC_NR(cmd)]);
1419 #endif
1420
1421         mutex_lock(&cmm_mutex);
1422         rc = -ENODEV;
1423         link = dev_table[iminor(inode)];
1424         if (!pcmcia_dev_present(link)) {
1425                 DEBUGP(4, dev, "DEV_OK false\n");
1426                 goto out;
1427         }
1428
1429         if (test_bit(IS_CMM_ABSENT, &dev->flags)) {
1430                 DEBUGP(4, dev, "CMM_ABSENT flag set\n");
1431                 goto out;
1432         }
1433         rc = -EINVAL;
1434
1435         if (_IOC_TYPE(cmd) != CM_IOC_MAGIC) {
1436                 DEBUGP(4, dev, "ioctype mismatch\n");
1437                 goto out;
1438         }
1439         if (_IOC_NR(cmd) > CM_IOC_MAXNR) {
1440                 DEBUGP(4, dev, "iocnr mismatch\n");
1441                 goto out;
1442         }
1443         size = _IOC_SIZE(cmd);
1444         rc = -EFAULT;
1445         DEBUGP(4, dev, "iocdir=%.4x iocr=%.4x iocw=%.4x iocsize=%d cmd=%.4x\n",
1446               _IOC_DIR(cmd), _IOC_READ, _IOC_WRITE, size, cmd);
1447
1448         if (_IOC_DIR(cmd) & _IOC_READ) {
1449                 if (!access_ok(VERIFY_WRITE, argp, size))
1450                         goto out;
1451         }
1452         if (_IOC_DIR(cmd) & _IOC_WRITE) {
1453                 if (!access_ok(VERIFY_READ, argp, size))
1454                         goto out;
1455         }
1456         rc = 0;
1457
1458         switch (cmd) {
1459         case CM_IOCGSTATUS:
1460                 DEBUGP(4, dev, " ... in CM_IOCGSTATUS\n");
1461                 {
1462                         int status;
1463
1464                         /* clear other bits, but leave inserted & powered as
1465                          * they are */
1466                         status = dev->flags0 & 3;
1467                         if (test_bit(IS_ATR_PRESENT, &dev->flags))
1468                                 status |= CM_ATR_PRESENT;
1469                         if (test_bit(IS_ATR_VALID, &dev->flags))
1470                                 status |= CM_ATR_VALID;
1471                         if (test_bit(IS_CMM_ABSENT, &dev->flags))
1472                                 status |= CM_NO_READER;
1473                         if (test_bit(IS_BAD_CARD, &dev->flags))
1474                                 status |= CM_BAD_CARD;
1475                         if (copy_to_user(argp, &status, sizeof(int)))
1476                                 rc = -EFAULT;
1477                 }
1478                 break;
1479         case CM_IOCGATR:
1480                 DEBUGP(4, dev, "... in CM_IOCGATR\n");
1481                 {
1482                         struct atreq __user *atreq = argp;
1483                         int tmp;
1484                         /* allow nonblocking io and being interrupted */
1485                         if (wait_event_interruptible
1486                             (dev->atrq,
1487                              ((filp->f_flags & O_NONBLOCK)
1488                               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags)
1489                                   != 0)))) {
1490                                 if (filp->f_flags & O_NONBLOCK)
1491                                         rc = -EAGAIN;
1492                                 else
1493                                         rc = -ERESTARTSYS;
1494                                 break;
1495                         }
1496
1497                         rc = -EFAULT;
1498                         if (test_bit(IS_ATR_VALID, &dev->flags) == 0) {
1499                                 tmp = -1;
1500                                 if (copy_to_user(&(atreq->atr_len), &tmp,
1501                                                  sizeof(int)))
1502                                         break;
1503                         } else {
1504                                 if (copy_to_user(atreq->atr, dev->atr,
1505                                                  dev->atr_len))
1506                                         break;
1507
1508                                 tmp = dev->atr_len;
1509                                 if (copy_to_user(&(atreq->atr_len), &tmp, sizeof(int)))
1510                                         break;
1511                         }
1512                         rc = 0;
1513                         break;
1514                 }
1515         case CM_IOCARDOFF:
1516
1517 #ifdef CM4000_DEBUG
1518                 DEBUGP(4, dev, "... in CM_IOCARDOFF\n");
1519                 if (dev->flags0 & 0x01) {
1520                         DEBUGP(4, dev, "    Card inserted\n");
1521                 } else {
1522                         DEBUGP(2, dev, "    No card inserted\n");
1523                 }
1524                 if (dev->flags0 & 0x02) {
1525                         DEBUGP(4, dev, "    Card powered\n");
1526                 } else {
1527                         DEBUGP(2, dev, "    Card not powered\n");
1528                 }
1529 #endif
1530
1531                 /* is a card inserted and powered? */
1532                 if ((dev->flags0 & 0x01) && (dev->flags0 & 0x02)) {
1533
1534                         /* get IO lock */
1535                         if (wait_event_interruptible
1536                             (dev->ioq,
1537                              ((filp->f_flags & O_NONBLOCK)
1538                               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags)
1539                                   == 0)))) {
1540                                 if (filp->f_flags & O_NONBLOCK)
1541                                         rc = -EAGAIN;
1542                                 else
1543                                         rc = -ERESTARTSYS;
1544                                 break;
1545                         }
1546                         /* Set Flags0 = 0x42 */
1547                         DEBUGP(4, dev, "Set Flags0=0x42 \n");
1548                         xoutb(0x42, REG_FLAGS0(iobase));
1549                         clear_bit(IS_ATR_PRESENT, &dev->flags);
1550                         clear_bit(IS_ATR_VALID, &dev->flags);
1551                         dev->mstate = M_CARDOFF;
1552                         clear_bit(LOCK_IO, &dev->flags);
1553                         if (wait_event_interruptible
1554                             (dev->atrq,
1555                              ((filp->f_flags & O_NONBLOCK)
1556                               || (test_bit(IS_ATR_VALID, (void *)&dev->flags) !=
1557                                   0)))) {
1558                                 if (filp->f_flags & O_NONBLOCK)
1559                                         rc = -EAGAIN;
1560                                 else
1561                                         rc = -ERESTARTSYS;
1562                                 break;
1563                         }
1564                 }
1565                 /* release lock */
1566                 clear_bit(LOCK_IO, &dev->flags);
1567                 wake_up_interruptible(&dev->ioq);
1568
1569                 rc = 0;
1570                 break;
1571         case CM_IOCSPTS:
1572                 {
1573                         struct ptsreq krnptsreq;
1574
1575                         if (copy_from_user(&krnptsreq, argp,
1576                                            sizeof(struct ptsreq))) {
1577                                 rc = -EFAULT;
1578                                 break;
1579                         }
1580
1581                         rc = 0;
1582                         DEBUGP(4, dev, "... in CM_IOCSPTS\n");
1583                         /* wait for ATR to get valid */
1584                         if (wait_event_interruptible
1585                             (dev->atrq,
1586                              ((filp->f_flags & O_NONBLOCK)
1587                               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags)
1588                                   != 0)))) {
1589                                 if (filp->f_flags & O_NONBLOCK)
1590                                         rc = -EAGAIN;
1591                                 else
1592                                         rc = -ERESTARTSYS;
1593                                 break;
1594                         }
1595                         /* get IO lock */
1596                         if (wait_event_interruptible
1597                             (dev->ioq,
1598                              ((filp->f_flags & O_NONBLOCK)
1599                               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags)
1600                                   == 0)))) {
1601                                 if (filp->f_flags & O_NONBLOCK)
1602                                         rc = -EAGAIN;
1603                                 else
1604                                         rc = -ERESTARTSYS;
1605                                 break;
1606                         }
1607
1608                         if ((rc = set_protocol(dev, &krnptsreq)) != 0) {
1609                                 /* auto power_on again */
1610                                 dev->mstate = M_FETCH_ATR;
1611                                 clear_bit(IS_ATR_VALID, &dev->flags);
1612                         }
1613                         /* release lock */
1614                         clear_bit(LOCK_IO, &dev->flags);
1615                         wake_up_interruptible(&dev->ioq);
1616
1617                 }
1618                 break;
1619 #ifdef CM4000_DEBUG
1620         case CM_IOSDBGLVL:
1621                 rc = -ENOTTY;
1622                 break;
1623 #endif
1624         default:
1625                 DEBUGP(4, dev, "... in default (unknown IOCTL code)\n");
1626                 rc = -ENOTTY;
1627         }
1628 out:
1629         mutex_unlock(&cmm_mutex);
1630         return rc;
1631 }
1632
1633 static int cmm_open(struct inode *inode, struct file *filp)
1634 {
1635         struct cm4000_dev *dev;
1636         struct pcmcia_device *link;
1637         int minor = iminor(inode);
1638         int ret;
1639
1640         if (minor >= CM4000_MAX_DEV)
1641                 return -ENODEV;
1642
1643         mutex_lock(&cmm_mutex);
1644         link = dev_table[minor];
1645         if (link == NULL || !pcmcia_dev_present(link)) {
1646                 ret = -ENODEV;
1647                 goto out;
1648         }
1649
1650         if (link->open) {
1651                 ret = -EBUSY;
1652                 goto out;
1653         }
1654
1655         dev = link->priv;
1656         filp->private_data = dev;
1657
1658         DEBUGP(2, dev, "-> cmm_open(device=%d.%d process=%s,%d)\n",
1659               imajor(inode), minor, current->comm, current->pid);
1660
1661         /* init device variables, they may be "polluted" after close
1662          * or, the device may never have been closed (i.e. open failed)
1663          */
1664
1665         ZERO_DEV(dev);
1666
1667         /* opening will always block since the
1668          * monitor will be started by open, which
1669          * means we have to wait for ATR becoming
1670          * valid = block until valid (or card
1671          * inserted)
1672          */
1673         if (filp->f_flags & O_NONBLOCK) {
1674                 ret = -EAGAIN;
1675                 goto out;
1676         }
1677
1678         dev->mdelay = T_50MSEC;
1679
1680         /* start monitoring the cardstatus */
1681         start_monitor(dev);
1682
1683         link->open = 1;         /* only one open per device */
1684
1685         DEBUGP(2, dev, "<- cmm_open\n");
1686         ret = nonseekable_open(inode, filp);
1687 out:
1688         mutex_unlock(&cmm_mutex);
1689         return ret;
1690 }
1691
1692 static int cmm_close(struct inode *inode, struct file *filp)
1693 {
1694         struct cm4000_dev *dev;
1695         struct pcmcia_device *link;
1696         int minor = iminor(inode);
1697
1698         if (minor >= CM4000_MAX_DEV)
1699                 return -ENODEV;
1700
1701         link = dev_table[minor];
1702         if (link == NULL)
1703                 return -ENODEV;
1704
1705         dev = link->priv;
1706
1707         DEBUGP(2, dev, "-> cmm_close(maj/min=%d.%d)\n",
1708                imajor(inode), minor);
1709
1710         stop_monitor(dev);
1711
1712         ZERO_DEV(dev);
1713
1714         link->open = 0;         /* only one open per device */
1715         wake_up(&dev->devq);    /* socket removed? */
1716
1717         DEBUGP(2, dev, "cmm_close\n");
1718         return 0;
1719 }
1720
1721 static void cmm_cm4000_release(struct pcmcia_device * link)
1722 {
1723         struct cm4000_dev *dev = link->priv;
1724
1725         /* dont terminate the monitor, rather rely on
1726          * close doing that for us.
1727          */
1728         DEBUGP(3, dev, "-> cmm_cm4000_release\n");
1729         while (link->open) {
1730                 printk(KERN_INFO MODULE_NAME ": delaying release until "
1731                        "process has terminated\n");
1732                 /* note: don't interrupt us:
1733                  * close the applications which own
1734                  * the devices _first_ !
1735                  */
1736                 wait_event(dev->devq, (link->open == 0));
1737         }
1738         /* dev->devq=NULL;      this cannot be zeroed earlier */
1739         DEBUGP(3, dev, "<- cmm_cm4000_release\n");
1740         return;
1741 }
1742
1743 /*==== Interface to PCMCIA Layer =======================================*/
1744
1745 static int cm4000_config_check(struct pcmcia_device *p_dev, void *priv_data)
1746 {
1747         return pcmcia_request_io(p_dev);
1748 }
1749
1750 static int cm4000_config(struct pcmcia_device * link, int devno)
1751 {
1752         struct cm4000_dev *dev;
1753
1754         link->config_flags |= CONF_AUTO_SET_IO;
1755
1756         /* read the config-tuples */
1757         if (pcmcia_loop_config(link, cm4000_config_check, NULL))
1758                 goto cs_release;
1759
1760         if (pcmcia_enable_device(link))
1761                 goto cs_release;
1762
1763         dev = link->priv;
1764
1765         return 0;
1766
1767 cs_release:
1768         cm4000_release(link);
1769         return -ENODEV;
1770 }
1771
1772 static int cm4000_suspend(struct pcmcia_device *link)
1773 {
1774         struct cm4000_dev *dev;
1775
1776         dev = link->priv;
1777         stop_monitor(dev);
1778
1779         return 0;
1780 }
1781
1782 static int cm4000_resume(struct pcmcia_device *link)
1783 {
1784         struct cm4000_dev *dev;
1785
1786         dev = link->priv;
1787         if (link->open)
1788                 start_monitor(dev);
1789
1790         return 0;
1791 }
1792
1793 static void cm4000_release(struct pcmcia_device *link)
1794 {
1795         cmm_cm4000_release(link);       /* delay release until device closed */
1796         pcmcia_disable_device(link);
1797 }
1798
1799 static int cm4000_probe(struct pcmcia_device *link)
1800 {
1801         struct cm4000_dev *dev;
1802         int i, ret;
1803
1804         for (i = 0; i < CM4000_MAX_DEV; i++)
1805                 if (dev_table[i] == NULL)
1806                         break;
1807
1808         if (i == CM4000_MAX_DEV) {
1809                 printk(KERN_NOTICE MODULE_NAME ": all devices in use\n");
1810                 return -ENODEV;
1811         }
1812
1813         /* create a new cm4000_cs device */
1814         dev = kzalloc(sizeof(struct cm4000_dev), GFP_KERNEL);
1815         if (dev == NULL)
1816                 return -ENOMEM;
1817
1818         dev->p_dev = link;
1819         link->priv = dev;
1820         dev_table[i] = link;
1821
1822         init_waitqueue_head(&dev->devq);
1823         init_waitqueue_head(&dev->ioq);
1824         init_waitqueue_head(&dev->atrq);
1825         init_waitqueue_head(&dev->readq);
1826
1827         ret = cm4000_config(link, i);
1828         if (ret) {
1829                 dev_table[i] = NULL;
1830                 kfree(dev);
1831                 return ret;
1832         }
1833
1834         device_create(cmm_class, NULL, MKDEV(major, i), NULL, "cmm%d", i);
1835
1836         return 0;
1837 }
1838
1839 static void cm4000_detach(struct pcmcia_device *link)
1840 {
1841         struct cm4000_dev *dev = link->priv;
1842         int devno;
1843
1844         /* find device */
1845         for (devno = 0; devno < CM4000_MAX_DEV; devno++)
1846                 if (dev_table[devno] == link)
1847                         break;
1848         if (devno == CM4000_MAX_DEV)
1849                 return;
1850
1851         stop_monitor(dev);
1852
1853         cm4000_release(link);
1854
1855         dev_table[devno] = NULL;
1856         kfree(dev);
1857
1858         device_destroy(cmm_class, MKDEV(major, devno));
1859
1860         return;
1861 }
1862
1863 static const struct file_operations cm4000_fops = {
1864         .owner  = THIS_MODULE,
1865         .read   = cmm_read,
1866         .write  = cmm_write,
1867         .unlocked_ioctl = cmm_ioctl,
1868         .open   = cmm_open,
1869         .release= cmm_close,
1870         .llseek = no_llseek,
1871 };
1872
1873 static struct pcmcia_device_id cm4000_ids[] = {
1874         PCMCIA_DEVICE_MANF_CARD(0x0223, 0x0002),
1875         PCMCIA_DEVICE_PROD_ID12("CardMan", "4000", 0x2FB368CA, 0xA2BD8C39),
1876         PCMCIA_DEVICE_NULL,
1877 };
1878 MODULE_DEVICE_TABLE(pcmcia, cm4000_ids);
1879
1880 static struct pcmcia_driver cm4000_driver = {
1881         .owner    = THIS_MODULE,
1882         .name     = "cm4000_cs",
1883         .probe    = cm4000_probe,
1884         .remove   = cm4000_detach,
1885         .suspend  = cm4000_suspend,
1886         .resume   = cm4000_resume,
1887         .id_table = cm4000_ids,
1888 };
1889
1890 static int __init cmm_init(void)
1891 {
1892         int rc;
1893
1894         cmm_class = class_create(THIS_MODULE, "cardman_4000");
1895         if (IS_ERR(cmm_class))
1896                 return PTR_ERR(cmm_class);
1897
1898         major = register_chrdev(0, DEVICE_NAME, &cm4000_fops);
1899         if (major < 0) {
1900                 printk(KERN_WARNING MODULE_NAME
1901                         ": could not get major number\n");
1902                 class_destroy(cmm_class);
1903                 return major;
1904         }
1905
1906         rc = pcmcia_register_driver(&cm4000_driver);
1907         if (rc < 0) {
1908                 unregister_chrdev(major, DEVICE_NAME);
1909                 class_destroy(cmm_class);
1910                 return rc;
1911         }
1912
1913         return 0;
1914 }
1915
1916 static void __exit cmm_exit(void)
1917 {
1918         pcmcia_unregister_driver(&cm4000_driver);
1919         unregister_chrdev(major, DEVICE_NAME);
1920         class_destroy(cmm_class);
1921 };
1922
1923 module_init(cmm_init);
1924 module_exit(cmm_exit);
1925 MODULE_LICENSE("Dual BSD/GPL");