cm4000_cs: fix error paths
[linux-2.6.git] / drivers / char / pcmcia / cm4000_cs.c
1  /*
2   * A driver for the PCMCIA Smartcard Reader "Omnikey CardMan Mobile 4000"
3   *
4   * cm4000_cs.c support.linux@omnikey.com
5   *
6   * Tue Oct 23 11:32:43 GMT 2001 herp - cleaned up header files
7   * Sun Jan 20 10:11:15 MET 2002 herp - added modversion header files
8   * Thu Nov 14 16:34:11 GMT 2002 mh   - added PPS functionality
9   * Tue Nov 19 16:36:27 GMT 2002 mh   - added SUSPEND/RESUME functionailty
10   * Wed Jul 28 12:55:01 CEST 2004 mh  - kernel 2.6 adjustments
11   *
12   * current version: 2.4.0gm4
13   *
14   * (C) 2000,2001,2002,2003,2004 Omnikey AG
15   *
16   * (C) 2005-2006 Harald Welte <laforge@gnumonks.org>
17   *     - Adhere to Kernel CodingStyle
18   *     - Port to 2.6.13 "new" style PCMCIA
19   *     - Check for copy_{from,to}_user return values
20   *     - Use nonseekable_open()
21   *     - add class interface for udev device creation
22   *
23   * All rights reserved. Licensed under dual BSD/GPL license.
24   */
25
26 /* #define PCMCIA_DEBUG 6 */
27
28 #include <linux/kernel.h>
29 #include <linux/module.h>
30 #include <linux/slab.h>
31 #include <linux/init.h>
32 #include <linux/fs.h>
33 #include <linux/delay.h>
34 #include <asm/uaccess.h>
35 #include <asm/io.h>
36
37 #include <pcmcia/cs_types.h>
38 #include <pcmcia/cs.h>
39 #include <pcmcia/cistpl.h>
40 #include <pcmcia/cisreg.h>
41 #include <pcmcia/ciscode.h>
42 #include <pcmcia/ds.h>
43
44 #include <linux/cm4000_cs.h>
45
46 /* #define ATR_CSUM */
47
48 #ifdef PCMCIA_DEBUG
49 #define reader_to_dev(x)        (&handle_to_dev(x->p_dev->handle))
50 static int pc_debug = PCMCIA_DEBUG;
51 module_param(pc_debug, int, 0600);
52 #define DEBUGP(n, rdr, x, args...) do {                                 \
53         if (pc_debug >= (n))                                            \
54                 dev_printk(KERN_DEBUG, reader_to_dev(rdr), "%s:" x,     \
55                            __FUNCTION__ , ## args);                     \
56         } while (0)
57 #else
58 #define DEBUGP(n, rdr, x, args...)
59 #endif
60 static char *version = "cm4000_cs.c v2.4.0gm6 - All bugs added by Harald Welte";
61
62 #define T_1SEC          (HZ)
63 #define T_10MSEC        msecs_to_jiffies(10)
64 #define T_20MSEC        msecs_to_jiffies(20)
65 #define T_40MSEC        msecs_to_jiffies(40)
66 #define T_50MSEC        msecs_to_jiffies(50)
67 #define T_100MSEC       msecs_to_jiffies(100)
68 #define T_500MSEC       msecs_to_jiffies(500)
69
70 static void cm4000_release(struct pcmcia_device *link);
71
72 static int major;               /* major number we get from the kernel */
73
74 /* note: the first state has to have number 0 always */
75
76 #define M_FETCH_ATR     0
77 #define M_TIMEOUT_WAIT  1
78 #define M_READ_ATR_LEN  2
79 #define M_READ_ATR      3
80 #define M_ATR_PRESENT   4
81 #define M_BAD_CARD      5
82 #define M_CARDOFF       6
83
84 #define LOCK_IO                 0
85 #define LOCK_MONITOR            1
86
87 #define IS_AUTOPPS_ACT           6
88 #define IS_PROCBYTE_PRESENT      7
89 #define IS_INVREV                8
90 #define IS_ANY_T0                9
91 #define IS_ANY_T1               10
92 #define IS_ATR_PRESENT          11
93 #define IS_ATR_VALID            12
94 #define IS_CMM_ABSENT           13
95 #define IS_BAD_LENGTH           14
96 #define IS_BAD_CSUM             15
97 #define IS_BAD_CARD             16
98
99 #define REG_FLAGS0(x)           (x + 0)
100 #define REG_FLAGS1(x)           (x + 1)
101 #define REG_NUM_BYTES(x)        (x + 2)
102 #define REG_BUF_ADDR(x)         (x + 3)
103 #define REG_BUF_DATA(x)         (x + 4)
104 #define REG_NUM_SEND(x)         (x + 5)
105 #define REG_BAUDRATE(x)         (x + 6)
106 #define REG_STOPBITS(x)         (x + 7)
107
108 struct cm4000_dev {
109         struct pcmcia_device *p_dev;
110         dev_node_t node;                /* OS node (major,minor) */
111
112         unsigned char atr[MAX_ATR];
113         unsigned char rbuf[512];
114         unsigned char sbuf[512];
115
116         wait_queue_head_t devq;         /* when removing cardman must not be
117                                            zeroed! */
118
119         wait_queue_head_t ioq;          /* if IO is locked, wait on this Q */
120         wait_queue_head_t atrq;         /* wait for ATR valid */
121         wait_queue_head_t readq;        /* used by write to wake blk.read */
122
123         /* warning: do not move this fields.
124          * initialising to zero depends on it - see ZERO_DEV below.  */
125         unsigned char atr_csum;
126         unsigned char atr_len_retry;
127         unsigned short atr_len;
128         unsigned short rlen;    /* bytes avail. after write */
129         unsigned short rpos;    /* latest read pos. write zeroes */
130         unsigned char procbyte; /* T=0 procedure byte */
131         unsigned char mstate;   /* state of card monitor */
132         unsigned char cwarn;    /* slow down warning */
133         unsigned char flags0;   /* cardman IO-flags 0 */
134         unsigned char flags1;   /* cardman IO-flags 1 */
135         unsigned int mdelay;    /* variable monitor speeds, in jiffies */
136
137         unsigned int baudv;     /* baud value for speed */
138         unsigned char ta1;
139         unsigned char proto;    /* T=0, T=1, ... */
140         unsigned long flags;    /* lock+flags (MONITOR,IO,ATR) * for concurrent
141                                    access */
142
143         unsigned char pts[4];
144
145         struct timer_list timer;        /* used to keep monitor running */
146         int monitor_running;
147 };
148
149 #define ZERO_DEV(dev)                                           \
150         memset(&dev->atr_csum,0,                                \
151                 sizeof(struct cm4000_dev) -                     \
152                 offsetof(struct cm4000_dev, atr_csum))
153
154 static struct pcmcia_device *dev_table[CM4000_MAX_DEV];
155 static struct class *cmm_class;
156
157 /* This table doesn't use spaces after the comma between fields and thus
158  * violates CodingStyle.  However, I don't really think wrapping it around will
159  * make it any clearer to read -HW */
160 static unsigned char fi_di_table[10][14] = {
161 /*FI     00   01   02   03   04   05   06   07   08   09   10   11   12   13 */
162 /*DI */
163 /* 0 */ {0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11},
164 /* 1 */ {0x01,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x91,0x11,0x11,0x11,0x11},
165 /* 2 */ {0x02,0x12,0x22,0x32,0x11,0x11,0x11,0x11,0x11,0x92,0xA2,0xB2,0x11,0x11},
166 /* 3 */ {0x03,0x13,0x23,0x33,0x43,0x53,0x63,0x11,0x11,0x93,0xA3,0xB3,0xC3,0xD3},
167 /* 4 */ {0x04,0x14,0x24,0x34,0x44,0x54,0x64,0x11,0x11,0x94,0xA4,0xB4,0xC4,0xD4},
168 /* 5 */ {0x00,0x15,0x25,0x35,0x45,0x55,0x65,0x11,0x11,0x95,0xA5,0xB5,0xC5,0xD5},
169 /* 6 */ {0x06,0x16,0x26,0x36,0x46,0x56,0x66,0x11,0x11,0x96,0xA6,0xB6,0xC6,0xD6},
170 /* 7 */ {0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11,0x11},
171 /* 8 */ {0x08,0x11,0x28,0x38,0x48,0x58,0x68,0x11,0x11,0x98,0xA8,0xB8,0xC8,0xD8},
172 /* 9 */ {0x09,0x19,0x29,0x39,0x49,0x59,0x69,0x11,0x11,0x99,0xA9,0xB9,0xC9,0xD9}
173 };
174
175 #ifndef PCMCIA_DEBUG
176 #define xoutb   outb
177 #define xinb    inb
178 #else
179 static inline void xoutb(unsigned char val, unsigned short port)
180 {
181         if (pc_debug >= 7)
182                 printk(KERN_DEBUG "outb(val=%.2x,port=%.4x)\n", val, port);
183         outb(val, port);
184 }
185 static inline unsigned char xinb(unsigned short port)
186 {
187         unsigned char val;
188
189         val = inb(port);
190         if (pc_debug >= 7)
191                 printk(KERN_DEBUG "%.2x=inb(%.4x)\n", val, port);
192
193         return val;
194 }
195 #endif
196
197 #define b_0000  15
198 #define b_0001  14
199 #define b_0010  13
200 #define b_0011  12
201 #define b_0100  11
202 #define b_0101  10
203 #define b_0110  9
204 #define b_0111  8
205 #define b_1000  7
206 #define b_1001  6
207 #define b_1010  5
208 #define b_1011  4
209 #define b_1100  3
210 #define b_1101  2
211 #define b_1110  1
212 #define b_1111  0
213
214 static unsigned char irtab[16] = {
215         b_0000, b_1000, b_0100, b_1100,
216         b_0010, b_1010, b_0110, b_1110,
217         b_0001, b_1001, b_0101, b_1101,
218         b_0011, b_1011, b_0111, b_1111
219 };
220
221 static void str_invert_revert(unsigned char *b, int len)
222 {
223         int i;
224
225         for (i = 0; i < len; i++)
226                 b[i] = (irtab[b[i] & 0x0f] << 4) | irtab[b[i] >> 4];
227 }
228
229 static unsigned char invert_revert(unsigned char ch)
230 {
231         return (irtab[ch & 0x0f] << 4) | irtab[ch >> 4];
232 }
233
234 #define ATRLENCK(dev,pos) \
235         if (pos>=dev->atr_len || pos>=MAX_ATR) \
236                 goto return_0;
237
238 static unsigned int calc_baudv(unsigned char fidi)
239 {
240         unsigned int wcrcf, wbrcf, fi_rfu, di_rfu;
241
242         fi_rfu = 372;
243         di_rfu = 1;
244
245         /* FI */
246         switch ((fidi >> 4) & 0x0F) {
247         case 0x00:
248                 wcrcf = 372;
249                 break;
250         case 0x01:
251                 wcrcf = 372;
252                 break;
253         case 0x02:
254                 wcrcf = 558;
255                 break;
256         case 0x03:
257                 wcrcf = 744;
258                 break;
259         case 0x04:
260                 wcrcf = 1116;
261                 break;
262         case 0x05:
263                 wcrcf = 1488;
264                 break;
265         case 0x06:
266                 wcrcf = 1860;
267                 break;
268         case 0x07:
269                 wcrcf = fi_rfu;
270                 break;
271         case 0x08:
272                 wcrcf = fi_rfu;
273                 break;
274         case 0x09:
275                 wcrcf = 512;
276                 break;
277         case 0x0A:
278                 wcrcf = 768;
279                 break;
280         case 0x0B:
281                 wcrcf = 1024;
282                 break;
283         case 0x0C:
284                 wcrcf = 1536;
285                 break;
286         case 0x0D:
287                 wcrcf = 2048;
288                 break;
289         default:
290                 wcrcf = fi_rfu;
291                 break;
292         }
293
294         /* DI */
295         switch (fidi & 0x0F) {
296         case 0x00:
297                 wbrcf = di_rfu;
298                 break;
299         case 0x01:
300                 wbrcf = 1;
301                 break;
302         case 0x02:
303                 wbrcf = 2;
304                 break;
305         case 0x03:
306                 wbrcf = 4;
307                 break;
308         case 0x04:
309                 wbrcf = 8;
310                 break;
311         case 0x05:
312                 wbrcf = 16;
313                 break;
314         case 0x06:
315                 wbrcf = 32;
316                 break;
317         case 0x07:
318                 wbrcf = di_rfu;
319                 break;
320         case 0x08:
321                 wbrcf = 12;
322                 break;
323         case 0x09:
324                 wbrcf = 20;
325                 break;
326         default:
327                 wbrcf = di_rfu;
328                 break;
329         }
330
331         return (wcrcf / wbrcf);
332 }
333
334 static unsigned short io_read_num_rec_bytes(ioaddr_t iobase, unsigned short *s)
335 {
336         unsigned short tmp;
337
338         tmp = *s = 0;
339         do {
340                 *s = tmp;
341                 tmp = inb(REG_NUM_BYTES(iobase)) |
342                                 (inb(REG_FLAGS0(iobase)) & 4 ? 0x100 : 0);
343         } while (tmp != *s);
344
345         return *s;
346 }
347
348 static int parse_atr(struct cm4000_dev *dev)
349 {
350         unsigned char any_t1, any_t0;
351         unsigned char ch, ifno;
352         int ix, done;
353
354         DEBUGP(3, dev, "-> parse_atr: dev->atr_len = %i\n", dev->atr_len);
355
356         if (dev->atr_len < 3) {
357                 DEBUGP(5, dev, "parse_atr: atr_len < 3\n");
358                 return 0;
359         }
360
361         if (dev->atr[0] == 0x3f)
362                 set_bit(IS_INVREV, &dev->flags);
363         else
364                 clear_bit(IS_INVREV, &dev->flags);
365         ix = 1;
366         ifno = 1;
367         ch = dev->atr[1];
368         dev->proto = 0;         /* XXX PROTO */
369         any_t1 = any_t0 = done = 0;
370         dev->ta1 = 0x11;        /* defaults to 9600 baud */
371         do {
372                 if (ifno == 1 && (ch & 0x10)) {
373                         /* read first interface byte and TA1 is present */
374                         dev->ta1 = dev->atr[2];
375                         DEBUGP(5, dev, "Card says FiDi is 0x%.2x\n", dev->ta1);
376                         ifno++;
377                 } else if ((ifno == 2) && (ch & 0x10)) { /* TA(2) */
378                         dev->ta1 = 0x11;
379                         ifno++;
380                 }
381
382                 DEBUGP(5, dev, "Yi=%.2x\n", ch & 0xf0);
383                 ix += ((ch & 0x10) >> 4)        /* no of int.face chars */
384                     +((ch & 0x20) >> 5)
385                     + ((ch & 0x40) >> 6)
386                     + ((ch & 0x80) >> 7);
387                 /* ATRLENCK(dev,ix); */
388                 if (ch & 0x80) {        /* TDi */
389                         ch = dev->atr[ix];
390                         if ((ch & 0x0f)) {
391                                 any_t1 = 1;
392                                 DEBUGP(5, dev, "card is capable of T=1\n");
393                         } else {
394                                 any_t0 = 1;
395                                 DEBUGP(5, dev, "card is capable of T=0\n");
396                         }
397                 } else
398                         done = 1;
399         } while (!done);
400
401         DEBUGP(5, dev, "ix=%d noHist=%d any_t1=%d\n",
402               ix, dev->atr[1] & 15, any_t1);
403         if (ix + 1 + (dev->atr[1] & 0x0f) + any_t1 != dev->atr_len) {
404                 DEBUGP(5, dev, "length error\n");
405                 return 0;
406         }
407         if (any_t0)
408                 set_bit(IS_ANY_T0, &dev->flags);
409
410         if (any_t1) {           /* compute csum */
411                 dev->atr_csum = 0;
412 #ifdef ATR_CSUM
413                 for (i = 1; i < dev->atr_len; i++)
414                         dev->atr_csum ^= dev->atr[i];
415                 if (dev->atr_csum) {
416                         set_bit(IS_BAD_CSUM, &dev->flags);
417                         DEBUGP(5, dev, "bad checksum\n");
418                         goto return_0;
419                 }
420 #endif
421                 if (any_t0 == 0)
422                         dev->proto = 1; /* XXX PROTO */
423                 set_bit(IS_ANY_T1, &dev->flags);
424         }
425
426         return 1;
427 }
428
429 struct card_fixup {
430         char atr[12];
431         u_int8_t atr_len;
432         u_int8_t stopbits;
433 };
434
435 static struct card_fixup card_fixups[] = {
436         {       /* ACOS */
437                 .atr = { 0x3b, 0xb3, 0x11, 0x00, 0x00, 0x41, 0x01 },
438                 .atr_len = 7,
439                 .stopbits = 0x03,
440         },
441         {       /* Motorola */
442                 .atr = {0x3b, 0x76, 0x13, 0x00, 0x00, 0x80, 0x62, 0x07,
443                         0x41, 0x81, 0x81 },
444                 .atr_len = 11,
445                 .stopbits = 0x04,
446         },
447 };
448
449 static void set_cardparameter(struct cm4000_dev *dev)
450 {
451         int i;
452         ioaddr_t iobase = dev->p_dev->io.BasePort1;
453         u_int8_t stopbits = 0x02; /* ISO default */
454
455         DEBUGP(3, dev, "-> set_cardparameter\n");
456
457         dev->flags1 = dev->flags1 | (((dev->baudv - 1) & 0x0100) >> 8);
458         xoutb(dev->flags1, REG_FLAGS1(iobase));
459         DEBUGP(5, dev, "flags1 = 0x%02x\n", dev->flags1);
460
461         /* set baudrate */
462         xoutb((unsigned char)((dev->baudv - 1) & 0xFF), REG_BAUDRATE(iobase));
463
464         DEBUGP(5, dev, "baudv = %i -> write 0x%02x\n", dev->baudv,
465               ((dev->baudv - 1) & 0xFF));
466
467         /* set stopbits */
468         for (i = 0; i < ARRAY_SIZE(card_fixups); i++) {
469                 if (!memcmp(dev->atr, card_fixups[i].atr,
470                             card_fixups[i].atr_len))
471                         stopbits = card_fixups[i].stopbits;
472         }
473         xoutb(stopbits, REG_STOPBITS(iobase));
474
475         DEBUGP(3, dev, "<- set_cardparameter\n");
476 }
477
478 static int set_protocol(struct cm4000_dev *dev, struct ptsreq *ptsreq)
479 {
480
481         unsigned long tmp, i;
482         unsigned short num_bytes_read;
483         unsigned char pts_reply[4];
484         ssize_t rc;
485         ioaddr_t iobase = dev->p_dev->io.BasePort1;
486
487         rc = 0;
488
489         DEBUGP(3, dev, "-> set_protocol\n");
490         DEBUGP(5, dev, "ptsreq->Protocol = 0x%.8x, ptsreq->Flags=0x%.8x, "
491                  "ptsreq->pts1=0x%.2x, ptsreq->pts2=0x%.2x, "
492                  "ptsreq->pts3=0x%.2x\n", (unsigned int)ptsreq->protocol,
493                  (unsigned int)ptsreq->flags, ptsreq->pts1, ptsreq->pts2,
494                  ptsreq->pts3);
495
496         /* Fill PTS structure */
497         dev->pts[0] = 0xff;
498         dev->pts[1] = 0x00;
499         tmp = ptsreq->protocol;
500         while ((tmp = (tmp >> 1)) > 0)
501                 dev->pts[1]++;
502         dev->proto = dev->pts[1];       /* Set new protocol */
503         dev->pts[1] = (0x01 << 4) | (dev->pts[1]);
504
505         /* Correct Fi/Di according to CM4000 Fi/Di table */
506         DEBUGP(5, dev, "Ta(1) from ATR is 0x%.2x\n", dev->ta1);
507         /* set Fi/Di according to ATR TA(1) */
508         dev->pts[2] = fi_di_table[dev->ta1 & 0x0F][(dev->ta1 >> 4) & 0x0F];
509
510         /* Calculate PCK character */
511         dev->pts[3] = dev->pts[0] ^ dev->pts[1] ^ dev->pts[2];
512
513         DEBUGP(5, dev, "pts0=%.2x, pts1=%.2x, pts2=%.2x, pts3=%.2x\n",
514                dev->pts[0], dev->pts[1], dev->pts[2], dev->pts[3]);
515
516         /* check card convention */
517         if (test_bit(IS_INVREV, &dev->flags))
518                 str_invert_revert(dev->pts, 4);
519
520         /* reset SM */
521         xoutb(0x80, REG_FLAGS0(iobase));
522
523         /* Enable access to the message buffer */
524         DEBUGP(5, dev, "Enable access to the messages buffer\n");
525         dev->flags1 = 0x20      /* T_Active */
526             | (test_bit(IS_INVREV, &dev->flags) ? 0x02 : 0x00) /* inv parity */
527             | ((dev->baudv >> 8) & 0x01);       /* MSB-baud */
528         xoutb(dev->flags1, REG_FLAGS1(iobase));
529
530         DEBUGP(5, dev, "Enable message buffer -> flags1 = 0x%.2x\n",
531                dev->flags1);
532
533         /* write challenge to the buffer */
534         DEBUGP(5, dev, "Write challenge to buffer: ");
535         for (i = 0; i < 4; i++) {
536                 xoutb(i, REG_BUF_ADDR(iobase));
537                 xoutb(dev->pts[i], REG_BUF_DATA(iobase));       /* buf data */
538 #ifdef PCMCIA_DEBUG
539                 if (pc_debug >= 5)
540                         printk("0x%.2x ", dev->pts[i]);
541         }
542         if (pc_debug >= 5)
543                 printk("\n");
544 #else
545         }
546 #endif
547
548         /* set number of bytes to write */
549         DEBUGP(5, dev, "Set number of bytes to write\n");
550         xoutb(0x04, REG_NUM_SEND(iobase));
551
552         /* Trigger CARDMAN CONTROLLER */
553         xoutb(0x50, REG_FLAGS0(iobase));
554
555         /* Monitor progress */
556         /* wait for xmit done */
557         DEBUGP(5, dev, "Waiting for NumRecBytes getting valid\n");
558
559         for (i = 0; i < 100; i++) {
560                 if (inb(REG_FLAGS0(iobase)) & 0x08) {
561                         DEBUGP(5, dev, "NumRecBytes is valid\n");
562                         break;
563                 }
564                 mdelay(10);
565         }
566         if (i == 100) {
567                 DEBUGP(5, dev, "Timeout waiting for NumRecBytes getting "
568                        "valid\n");
569                 rc = -EIO;
570                 goto exit_setprotocol;
571         }
572
573         DEBUGP(5, dev, "Reading NumRecBytes\n");
574         for (i = 0; i < 100; i++) {
575                 io_read_num_rec_bytes(iobase, &num_bytes_read);
576                 if (num_bytes_read >= 4) {
577                         DEBUGP(2, dev, "NumRecBytes = %i\n", num_bytes_read);
578                         break;
579                 }
580                 mdelay(10);
581         }
582
583         /* check whether it is a short PTS reply? */
584         if (num_bytes_read == 3)
585                 i = 0;
586
587         if (i == 100) {
588                 DEBUGP(5, dev, "Timeout reading num_bytes_read\n");
589                 rc = -EIO;
590                 goto exit_setprotocol;
591         }
592
593         DEBUGP(5, dev, "Reset the CARDMAN CONTROLLER\n");
594         xoutb(0x80, REG_FLAGS0(iobase));
595
596         /* Read PPS reply */
597         DEBUGP(5, dev, "Read PPS reply\n");
598         for (i = 0; i < num_bytes_read; i++) {
599                 xoutb(i, REG_BUF_ADDR(iobase));
600                 pts_reply[i] = inb(REG_BUF_DATA(iobase));
601         }
602
603 #ifdef PCMCIA_DEBUG
604         DEBUGP(2, dev, "PTSreply: ");
605         for (i = 0; i < num_bytes_read; i++) {
606                 if (pc_debug >= 5)
607                         printk("0x%.2x ", pts_reply[i]);
608         }
609         printk("\n");
610 #endif  /* PCMCIA_DEBUG */
611
612         DEBUGP(5, dev, "Clear Tactive in Flags1\n");
613         xoutb(0x20, REG_FLAGS1(iobase));
614
615         /* Compare ptsreq and ptsreply */
616         if ((dev->pts[0] == pts_reply[0]) &&
617             (dev->pts[1] == pts_reply[1]) &&
618             (dev->pts[2] == pts_reply[2]) && (dev->pts[3] == pts_reply[3])) {
619                 /* setcardparameter according to PPS */
620                 dev->baudv = calc_baudv(dev->pts[2]);
621                 set_cardparameter(dev);
622         } else if ((dev->pts[0] == pts_reply[0]) &&
623                    ((dev->pts[1] & 0xef) == pts_reply[1]) &&
624                    ((pts_reply[0] ^ pts_reply[1]) == pts_reply[2])) {
625                 /* short PTS reply, set card parameter to default values */
626                 dev->baudv = calc_baudv(0x11);
627                 set_cardparameter(dev);
628         } else
629                 rc = -EIO;
630
631 exit_setprotocol:
632         DEBUGP(3, dev, "<- set_protocol\n");
633         return rc;
634 }
635
636 static int io_detect_cm4000(ioaddr_t iobase, struct cm4000_dev *dev)
637 {
638
639         /* note: statemachine is assumed to be reset */
640         if (inb(REG_FLAGS0(iobase)) & 8) {
641                 clear_bit(IS_ATR_VALID, &dev->flags);
642                 set_bit(IS_CMM_ABSENT, &dev->flags);
643                 return 0;       /* detect CMM = 1 -> failure */
644         }
645         /* xoutb(0x40, REG_FLAGS1(iobase)); detectCMM */
646         xoutb(dev->flags1 | 0x40, REG_FLAGS1(iobase));
647         if ((inb(REG_FLAGS0(iobase)) & 8) == 0) {
648                 clear_bit(IS_ATR_VALID, &dev->flags);
649                 set_bit(IS_CMM_ABSENT, &dev->flags);
650                 return 0;       /* detect CMM=0 -> failure */
651         }
652         /* clear detectCMM again by restoring original flags1 */
653         xoutb(dev->flags1, REG_FLAGS1(iobase));
654         return 1;
655 }
656
657 static void terminate_monitor(struct cm4000_dev *dev)
658 {
659
660         /* tell the monitor to stop and wait until
661          * it terminates.
662          */
663         DEBUGP(3, dev, "-> terminate_monitor\n");
664         wait_event_interruptible(dev->devq,
665                                  test_and_set_bit(LOCK_MONITOR,
666                                                   (void *)&dev->flags));
667
668         /* now, LOCK_MONITOR has been set.
669          * allow a last cycle in the monitor.
670          * the monitor will indicate that it has
671          * finished by clearing this bit.
672          */
673         DEBUGP(5, dev, "Now allow last cycle of monitor!\n");
674         while (test_bit(LOCK_MONITOR, (void *)&dev->flags))
675                 msleep(25);
676
677         DEBUGP(5, dev, "Delete timer\n");
678         del_timer_sync(&dev->timer);
679 #ifdef PCMCIA_DEBUG
680         dev->monitor_running = 0;
681 #endif
682
683         DEBUGP(3, dev, "<- terminate_monitor\n");
684 }
685
686 /*
687  * monitor the card every 50msec. as a side-effect, retrieve the
688  * atr once a card is inserted. another side-effect of retrieving the
689  * atr is that the card will be powered on, so there is no need to
690  * power on the card explictely from the application: the driver
691  * is already doing that for you.
692  */
693
694 static void monitor_card(unsigned long p)
695 {
696         struct cm4000_dev *dev = (struct cm4000_dev *) p;
697         ioaddr_t iobase = dev->p_dev->io.BasePort1;
698         unsigned short s;
699         struct ptsreq ptsreq;
700         int i, atrc;
701
702         DEBUGP(7, dev, "->  monitor_card\n");
703
704         /* if someone has set the lock for us: we're done! */
705         if (test_and_set_bit(LOCK_MONITOR, &dev->flags)) {
706                 DEBUGP(4, dev, "About to stop monitor\n");
707                 /* no */
708                 dev->rlen =
709                     dev->rpos =
710                     dev->atr_csum = dev->atr_len_retry = dev->cwarn = 0;
711                 dev->mstate = M_FETCH_ATR;
712                 clear_bit(LOCK_MONITOR, &dev->flags);
713                 /* close et al. are sleeping on devq, so wake it */
714                 wake_up_interruptible(&dev->devq);
715                 DEBUGP(2, dev, "<- monitor_card (we are done now)\n");
716                 return;
717         }
718
719         /* try to lock io: if it is already locked, just add another timer */
720         if (test_and_set_bit(LOCK_IO, (void *)&dev->flags)) {
721                 DEBUGP(4, dev, "Couldn't get IO lock\n");
722                 goto return_with_timer;
723         }
724
725         /* is a card/a reader inserted at all ? */
726         dev->flags0 = xinb(REG_FLAGS0(iobase));
727         DEBUGP(7, dev, "dev->flags0 = 0x%2x\n", dev->flags0);
728         DEBUGP(7, dev, "smartcard present: %s\n",
729                dev->flags0 & 1 ? "yes" : "no");
730         DEBUGP(7, dev, "cardman present: %s\n",
731                dev->flags0 == 0xff ? "no" : "yes");
732
733         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
734             || dev->flags0 == 0xff) {   /* no cardman inserted */
735                 /* no */
736                 dev->rlen =
737                     dev->rpos =
738                     dev->atr_csum = dev->atr_len_retry = dev->cwarn = 0;
739                 dev->mstate = M_FETCH_ATR;
740
741                 dev->flags &= 0x000000ff; /* only keep IO and MONITOR locks */
742
743                 if (dev->flags0 == 0xff) {
744                         DEBUGP(4, dev, "set IS_CMM_ABSENT bit\n");
745                         set_bit(IS_CMM_ABSENT, &dev->flags);
746                 } else if (test_bit(IS_CMM_ABSENT, &dev->flags)) {
747                         DEBUGP(4, dev, "clear IS_CMM_ABSENT bit "
748                                "(card is removed)\n");
749                         clear_bit(IS_CMM_ABSENT, &dev->flags);
750                 }
751
752                 goto release_io;
753         } else if ((dev->flags0 & 1) && test_bit(IS_CMM_ABSENT, &dev->flags)) {
754                 /* cardman and card present but cardman was absent before
755                  * (after suspend with inserted card) */
756                 DEBUGP(4, dev, "clear IS_CMM_ABSENT bit (card is inserted)\n");
757                 clear_bit(IS_CMM_ABSENT, &dev->flags);
758         }
759
760         if (test_bit(IS_ATR_VALID, &dev->flags) == 1) {
761                 DEBUGP(7, dev, "believe ATR is already valid (do nothing)\n");
762                 goto release_io;
763         }
764
765         switch (dev->mstate) {
766                 unsigned char flags0;
767         case M_CARDOFF:
768                 DEBUGP(4, dev, "M_CARDOFF\n");
769                 flags0 = inb(REG_FLAGS0(iobase));
770                 if (flags0 & 0x02) {
771                         /* wait until Flags0 indicate power is off */
772                         dev->mdelay = T_10MSEC;
773                 } else {
774                         /* Flags0 indicate power off and no card inserted now;
775                          * Reset CARDMAN CONTROLLER */
776                         xoutb(0x80, REG_FLAGS0(iobase));
777
778                         /* prepare for fetching ATR again: after card off ATR
779                          * is read again automatically */
780                         dev->rlen =
781                             dev->rpos =
782                             dev->atr_csum =
783                             dev->atr_len_retry = dev->cwarn = 0;
784                         dev->mstate = M_FETCH_ATR;
785
786                         /* minimal gap between CARDOFF and read ATR is 50msec */
787                         dev->mdelay = T_50MSEC;
788                 }
789                 break;
790         case M_FETCH_ATR:
791                 DEBUGP(4, dev, "M_FETCH_ATR\n");
792                 xoutb(0x80, REG_FLAGS0(iobase));
793                 DEBUGP(4, dev, "Reset BAUDV to 9600\n");
794                 dev->baudv = 0x173;     /* 9600 */
795                 xoutb(0x02, REG_STOPBITS(iobase));      /* stopbits=2 */
796                 xoutb(0x73, REG_BAUDRATE(iobase));      /* baud value */
797                 xoutb(0x21, REG_FLAGS1(iobase));        /* T_Active=1, baud
798                                                            value */
799                 /* warm start vs. power on: */
800                 xoutb(dev->flags0 & 2 ? 0x46 : 0x44, REG_FLAGS0(iobase));
801                 dev->mdelay = T_40MSEC;
802                 dev->mstate = M_TIMEOUT_WAIT;
803                 break;
804         case M_TIMEOUT_WAIT:
805                 DEBUGP(4, dev, "M_TIMEOUT_WAIT\n");
806                 /* numRecBytes */
807                 io_read_num_rec_bytes(iobase, &dev->atr_len);
808                 dev->mdelay = T_10MSEC;
809                 dev->mstate = M_READ_ATR_LEN;
810                 break;
811         case M_READ_ATR_LEN:
812                 DEBUGP(4, dev, "M_READ_ATR_LEN\n");
813                 /* infinite loop possible, since there is no timeout */
814
815 #define MAX_ATR_LEN_RETRY       100
816
817                 if (dev->atr_len == io_read_num_rec_bytes(iobase, &s)) {
818                         if (dev->atr_len_retry++ >= MAX_ATR_LEN_RETRY) {                                        /* + XX msec */
819                                 dev->mdelay = T_10MSEC;
820                                 dev->mstate = M_READ_ATR;
821                         }
822                 } else {
823                         dev->atr_len = s;
824                         dev->atr_len_retry = 0; /* set new timeout */
825                 }
826
827                 DEBUGP(4, dev, "Current ATR_LEN = %i\n", dev->atr_len);
828                 break;
829         case M_READ_ATR:
830                 DEBUGP(4, dev, "M_READ_ATR\n");
831                 xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM */
832                 for (i = 0; i < dev->atr_len; i++) {
833                         xoutb(i, REG_BUF_ADDR(iobase));
834                         dev->atr[i] = inb(REG_BUF_DATA(iobase));
835                 }
836                 /* Deactivate T_Active flags */
837                 DEBUGP(4, dev, "Deactivate T_Active flags\n");
838                 dev->flags1 = 0x01;
839                 xoutb(dev->flags1, REG_FLAGS1(iobase));
840
841                 /* atr is present (which doesnt mean it's valid) */
842                 set_bit(IS_ATR_PRESENT, &dev->flags);
843                 if (dev->atr[0] == 0x03)
844                         str_invert_revert(dev->atr, dev->atr_len);
845                 atrc = parse_atr(dev);
846                 if (atrc == 0) {        /* atr invalid */
847                         dev->mdelay = 0;
848                         dev->mstate = M_BAD_CARD;
849                 } else {
850                         dev->mdelay = T_50MSEC;
851                         dev->mstate = M_ATR_PRESENT;
852                         set_bit(IS_ATR_VALID, &dev->flags);
853                 }
854
855                 if (test_bit(IS_ATR_VALID, &dev->flags) == 1) {
856                         DEBUGP(4, dev, "monitor_card: ATR valid\n");
857                         /* if ta1 == 0x11, no PPS necessary (default values) */
858                         /* do not do PPS with multi protocol cards */
859                         if ((test_bit(IS_AUTOPPS_ACT, &dev->flags) == 0) &&
860                             (dev->ta1 != 0x11) &&
861                             !(test_bit(IS_ANY_T0, &dev->flags) &&
862                             test_bit(IS_ANY_T1, &dev->flags))) {
863                                 DEBUGP(4, dev, "Perform AUTOPPS\n");
864                                 set_bit(IS_AUTOPPS_ACT, &dev->flags);
865                                 ptsreq.protocol = ptsreq.protocol =
866                                     (0x01 << dev->proto);
867                                 ptsreq.flags = 0x01;
868                                 ptsreq.pts1 = 0x00;
869                                 ptsreq.pts2 = 0x00;
870                                 ptsreq.pts3 = 0x00;
871                                 if (set_protocol(dev, &ptsreq) == 0) {
872                                         DEBUGP(4, dev, "AUTOPPS ret SUCC\n");
873                                         clear_bit(IS_AUTOPPS_ACT, &dev->flags);
874                                         wake_up_interruptible(&dev->atrq);
875                                 } else {
876                                         DEBUGP(4, dev, "AUTOPPS failed: "
877                                                "repower using defaults\n");
878                                         /* prepare for repowering  */
879                                         clear_bit(IS_ATR_PRESENT, &dev->flags);
880                                         clear_bit(IS_ATR_VALID, &dev->flags);
881                                         dev->rlen =
882                                             dev->rpos =
883                                             dev->atr_csum =
884                                             dev->atr_len_retry = dev->cwarn = 0;
885                                         dev->mstate = M_FETCH_ATR;
886
887                                         dev->mdelay = T_50MSEC;
888                                 }
889                         } else {
890                                 /* for cards which use slightly different
891                                  * params (extra guard time) */
892                                 set_cardparameter(dev);
893                                 if (test_bit(IS_AUTOPPS_ACT, &dev->flags) == 1)
894                                         DEBUGP(4, dev, "AUTOPPS already active "
895                                                "2nd try:use default values\n");
896                                 if (dev->ta1 == 0x11)
897                                         DEBUGP(4, dev, "No AUTOPPS necessary "
898                                                "TA(1)==0x11\n");
899                                 if (test_bit(IS_ANY_T0, &dev->flags)
900                                     && test_bit(IS_ANY_T1, &dev->flags))
901                                         DEBUGP(4, dev, "Do NOT perform AUTOPPS "
902                                                "with multiprotocol cards\n");
903                                 clear_bit(IS_AUTOPPS_ACT, &dev->flags);
904                                 wake_up_interruptible(&dev->atrq);
905                         }
906                 } else {
907                         DEBUGP(4, dev, "ATR invalid\n");
908                         wake_up_interruptible(&dev->atrq);
909                 }
910                 break;
911         case M_BAD_CARD:
912                 DEBUGP(4, dev, "M_BAD_CARD\n");
913                 /* slow down warning, but prompt immediately after insertion */
914                 if (dev->cwarn == 0 || dev->cwarn == 10) {
915                         set_bit(IS_BAD_CARD, &dev->flags);
916                         printk(KERN_WARNING MODULE_NAME ": device %s: ",
917                                dev->node.dev_name);
918                         if (test_bit(IS_BAD_CSUM, &dev->flags)) {
919                                 DEBUGP(4, dev, "ATR checksum (0x%.2x, should "
920                                        "be zero) failed\n", dev->atr_csum);
921                         }
922 #ifdef PCMCIA_DEBUG
923                         else if (test_bit(IS_BAD_LENGTH, &dev->flags)) {
924                                 DEBUGP(4, dev, "ATR length error\n");
925                         } else {
926                                 DEBUGP(4, dev, "card damaged or wrong way "
927                                         "inserted\n");
928                         }
929 #endif
930                         dev->cwarn = 0;
931                         wake_up_interruptible(&dev->atrq);      /* wake open */
932                 }
933                 dev->cwarn++;
934                 dev->mdelay = T_100MSEC;
935                 dev->mstate = M_FETCH_ATR;
936                 break;
937         default:
938                 DEBUGP(7, dev, "Unknown action\n");
939                 break;          /* nothing */
940         }
941
942 release_io:
943         DEBUGP(7, dev, "release_io\n");
944         clear_bit(LOCK_IO, &dev->flags);
945         wake_up_interruptible(&dev->ioq);       /* whoever needs IO */
946
947 return_with_timer:
948         DEBUGP(7, dev, "<- monitor_card (returns with timer)\n");
949         mod_timer(&dev->timer, jiffies + dev->mdelay);
950         clear_bit(LOCK_MONITOR, &dev->flags);
951 }
952
953 /* Interface to userland (file_operations) */
954
955 static ssize_t cmm_read(struct file *filp, __user char *buf, size_t count,
956                         loff_t *ppos)
957 {
958         struct cm4000_dev *dev = filp->private_data;
959         ioaddr_t iobase = dev->p_dev->io.BasePort1;
960         ssize_t rc;
961         int i, j, k;
962
963         DEBUGP(2, dev, "-> cmm_read(%s,%d)\n", current->comm, current->pid);
964
965         if (count == 0)         /* according to manpage */
966                 return 0;
967
968         if (!pcmcia_dev_present(dev->p_dev) || /* device removed */
969             test_bit(IS_CMM_ABSENT, &dev->flags))
970                 return -ENODEV;
971
972         if (test_bit(IS_BAD_CSUM, &dev->flags))
973                 return -EIO;
974
975         /* also see the note about this in cmm_write */
976         if (wait_event_interruptible
977             (dev->atrq,
978              ((filp->f_flags & O_NONBLOCK)
979               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags) != 0)))) {
980                 if (filp->f_flags & O_NONBLOCK)
981                         return -EAGAIN;
982                 return -ERESTARTSYS;
983         }
984
985         if (test_bit(IS_ATR_VALID, &dev->flags) == 0)
986                 return -EIO;
987
988         /* this one implements blocking IO */
989         if (wait_event_interruptible
990             (dev->readq,
991              ((filp->f_flags & O_NONBLOCK) || (dev->rpos < dev->rlen)))) {
992                 if (filp->f_flags & O_NONBLOCK)
993                         return -EAGAIN;
994                 return -ERESTARTSYS;
995         }
996
997         /* lock io */
998         if (wait_event_interruptible
999             (dev->ioq,
1000              ((filp->f_flags & O_NONBLOCK)
1001               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags) == 0)))) {
1002                 if (filp->f_flags & O_NONBLOCK)
1003                         return -EAGAIN;
1004                 return -ERESTARTSYS;
1005         }
1006
1007         rc = 0;
1008         dev->flags0 = inb(REG_FLAGS0(iobase));
1009         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
1010             || dev->flags0 == 0xff) {   /* no cardman inserted */
1011                 clear_bit(IS_ATR_VALID, &dev->flags);
1012                 if (dev->flags0 & 1) {
1013                         set_bit(IS_CMM_ABSENT, &dev->flags);
1014                         rc = -ENODEV;
1015                 }
1016                 rc = -EIO;
1017                 goto release_io;
1018         }
1019
1020         DEBUGP(4, dev, "begin read answer\n");
1021         j = min(count, (size_t)(dev->rlen - dev->rpos));
1022         k = dev->rpos;
1023         if (k + j > 255)
1024                 j = 256 - k;
1025         DEBUGP(4, dev, "read1 j=%d\n", j);
1026         for (i = 0; i < j; i++) {
1027                 xoutb(k++, REG_BUF_ADDR(iobase));
1028                 dev->rbuf[i] = xinb(REG_BUF_DATA(iobase));
1029         }
1030         j = min(count, (size_t)(dev->rlen - dev->rpos));
1031         if (k + j > 255) {
1032                 DEBUGP(4, dev, "read2 j=%d\n", j);
1033                 dev->flags1 |= 0x10;    /* MSB buf addr set */
1034                 xoutb(dev->flags1, REG_FLAGS1(iobase));
1035                 for (; i < j; i++) {
1036                         xoutb(k++, REG_BUF_ADDR(iobase));
1037                         dev->rbuf[i] = xinb(REG_BUF_DATA(iobase));
1038                 }
1039         }
1040
1041         if (dev->proto == 0 && count > dev->rlen - dev->rpos) {
1042                 DEBUGP(4, dev, "T=0 and count > buffer\n");
1043                 dev->rbuf[i] = dev->rbuf[i - 1];
1044                 dev->rbuf[i - 1] = dev->procbyte;
1045                 j++;
1046         }
1047         count = j;
1048
1049         dev->rpos = dev->rlen + 1;
1050
1051         /* Clear T1Active */
1052         DEBUGP(4, dev, "Clear T1Active\n");
1053         dev->flags1 &= 0xdf;
1054         xoutb(dev->flags1, REG_FLAGS1(iobase));
1055
1056         xoutb(0, REG_FLAGS1(iobase));   /* clear detectCMM */
1057         /* last check before exit */
1058         if (!io_detect_cm4000(iobase, dev))
1059                 count = -ENODEV;
1060
1061         if (test_bit(IS_INVREV, &dev->flags) && count > 0)
1062                 str_invert_revert(dev->rbuf, count);
1063
1064         if (copy_to_user(buf, dev->rbuf, count))
1065                 return -EFAULT;
1066
1067 release_io:
1068         clear_bit(LOCK_IO, &dev->flags);
1069         wake_up_interruptible(&dev->ioq);
1070
1071         DEBUGP(2, dev, "<- cmm_read returns: rc = %Zi\n",
1072                (rc < 0 ? rc : count));
1073         return rc < 0 ? rc : count;
1074 }
1075
1076 static ssize_t cmm_write(struct file *filp, const char __user *buf,
1077                          size_t count, loff_t *ppos)
1078 {
1079         struct cm4000_dev *dev = (struct cm4000_dev *) filp->private_data;
1080         ioaddr_t iobase = dev->p_dev->io.BasePort1;
1081         unsigned short s;
1082         unsigned char tmp;
1083         unsigned char infolen;
1084         unsigned char sendT0;
1085         unsigned short nsend;
1086         unsigned short nr;
1087         ssize_t rc;
1088         int i;
1089
1090         DEBUGP(2, dev, "-> cmm_write(%s,%d)\n", current->comm, current->pid);
1091
1092         if (count == 0)         /* according to manpage */
1093                 return 0;
1094
1095         if (dev->proto == 0 && count < 4) {
1096                 /* T0 must have at least 4 bytes */
1097                 DEBUGP(4, dev, "T0 short write\n");
1098                 return -EIO;
1099         }
1100
1101         nr = count & 0x1ff;     /* max bytes to write */
1102
1103         sendT0 = dev->proto ? 0 : nr > 5 ? 0x08 : 0;
1104
1105         if (!pcmcia_dev_present(dev->p_dev) || /* device removed */
1106             test_bit(IS_CMM_ABSENT, &dev->flags))
1107                 return -ENODEV;
1108
1109         if (test_bit(IS_BAD_CSUM, &dev->flags)) {
1110                 DEBUGP(4, dev, "bad csum\n");
1111                 return -EIO;
1112         }
1113
1114         /*
1115          * wait for atr to become valid.
1116          * note: it is important to lock this code. if we dont, the monitor
1117          * could be run between test_bit and the the call the sleep on the
1118          * atr-queue.  if *then* the monitor detects atr valid, it will wake up
1119          * any process on the atr-queue, *but* since we have been interrupted,
1120          * we do not yet sleep on this queue. this would result in a missed
1121          * wake_up and the calling process would sleep forever (until
1122          * interrupted).  also, do *not* restore_flags before sleep_on, because
1123          * this could result in the same situation!
1124          */
1125         if (wait_event_interruptible
1126             (dev->atrq,
1127              ((filp->f_flags & O_NONBLOCK)
1128               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags) != 0)))) {
1129                 if (filp->f_flags & O_NONBLOCK)
1130                         return -EAGAIN;
1131                 return -ERESTARTSYS;
1132         }
1133
1134         if (test_bit(IS_ATR_VALID, &dev->flags) == 0) { /* invalid atr */
1135                 DEBUGP(4, dev, "invalid ATR\n");
1136                 return -EIO;
1137         }
1138
1139         /* lock io */
1140         if (wait_event_interruptible
1141             (dev->ioq,
1142              ((filp->f_flags & O_NONBLOCK)
1143               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags) == 0)))) {
1144                 if (filp->f_flags & O_NONBLOCK)
1145                         return -EAGAIN;
1146                 return -ERESTARTSYS;
1147         }
1148
1149         if (copy_from_user(dev->sbuf, buf, ((count > 512) ? 512 : count)))
1150                 return -EFAULT;
1151
1152         rc = 0;
1153         dev->flags0 = inb(REG_FLAGS0(iobase));
1154         if ((dev->flags0 & 1) == 0      /* no smartcard inserted */
1155             || dev->flags0 == 0xff) {   /* no cardman inserted */
1156                 clear_bit(IS_ATR_VALID, &dev->flags);
1157                 if (dev->flags0 & 1) {
1158                         set_bit(IS_CMM_ABSENT, &dev->flags);
1159                         rc = -ENODEV;
1160                 } else {
1161                         DEBUGP(4, dev, "IO error\n");
1162                         rc = -EIO;
1163                 }
1164                 goto release_io;
1165         }
1166
1167         xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM  */
1168
1169         if (!io_detect_cm4000(iobase, dev)) {
1170                 rc = -ENODEV;
1171                 goto release_io;
1172         }
1173
1174         /* reflect T=0 send/read mode in flags1 */
1175         dev->flags1 |= (sendT0);
1176
1177         set_cardparameter(dev);
1178
1179         /* dummy read, reset flag procedure received */
1180         tmp = inb(REG_FLAGS1(iobase));
1181
1182         dev->flags1 = 0x20      /* T_Active */
1183             | (sendT0)
1184             | (test_bit(IS_INVREV, &dev->flags) ? 2 : 0)/* inverse parity  */
1185             | (((dev->baudv - 1) & 0x0100) >> 8);       /* MSB-Baud */
1186         DEBUGP(1, dev, "set dev->flags1 = 0x%.2x\n", dev->flags1);
1187         xoutb(dev->flags1, REG_FLAGS1(iobase));
1188
1189         /* xmit data */
1190         DEBUGP(4, dev, "Xmit data\n");
1191         for (i = 0; i < nr; i++) {
1192                 if (i >= 256) {
1193                         dev->flags1 = 0x20      /* T_Active */
1194                             | (sendT0)  /* SendT0 */
1195                                 /* inverse parity: */
1196                             | (test_bit(IS_INVREV, &dev->flags) ? 2 : 0)
1197                             | (((dev->baudv - 1) & 0x0100) >> 8) /* MSB-Baud */
1198                             | 0x10;     /* set address high */
1199                         DEBUGP(4, dev, "dev->flags = 0x%.2x - set address "
1200                                "high\n", dev->flags1);
1201                         xoutb(dev->flags1, REG_FLAGS1(iobase));
1202                 }
1203                 if (test_bit(IS_INVREV, &dev->flags)) {
1204                         DEBUGP(4, dev, "Apply inverse convention for 0x%.2x "
1205                                 "-> 0x%.2x\n", (unsigned char)dev->sbuf[i],
1206                               invert_revert(dev->sbuf[i]));
1207                         xoutb(i, REG_BUF_ADDR(iobase));
1208                         xoutb(invert_revert(dev->sbuf[i]),
1209                               REG_BUF_DATA(iobase));
1210                 } else {
1211                         xoutb(i, REG_BUF_ADDR(iobase));
1212                         xoutb(dev->sbuf[i], REG_BUF_DATA(iobase));
1213                 }
1214         }
1215         DEBUGP(4, dev, "Xmit done\n");
1216
1217         if (dev->proto == 0) {
1218                 /* T=0 proto: 0 byte reply  */
1219                 if (nr == 4) {
1220                         DEBUGP(4, dev, "T=0 assumes 0 byte reply\n");
1221                         xoutb(i, REG_BUF_ADDR(iobase));
1222                         if (test_bit(IS_INVREV, &dev->flags))
1223                                 xoutb(0xff, REG_BUF_DATA(iobase));
1224                         else
1225                                 xoutb(0x00, REG_BUF_DATA(iobase));
1226                 }
1227
1228                 /* numSendBytes */
1229                 if (sendT0)
1230                         nsend = nr;
1231                 else {
1232                         if (nr == 4)
1233                                 nsend = 5;
1234                         else {
1235                                 nsend = 5 + (unsigned char)dev->sbuf[4];
1236                                 if (dev->sbuf[4] == 0)
1237                                         nsend += 0x100;
1238                         }
1239                 }
1240         } else
1241                 nsend = nr;
1242
1243         /* T0: output procedure byte */
1244         if (test_bit(IS_INVREV, &dev->flags)) {
1245                 DEBUGP(4, dev, "T=0 set Procedure byte (inverse-reverse) "
1246                        "0x%.2x\n", invert_revert(dev->sbuf[1]));
1247                 xoutb(invert_revert(dev->sbuf[1]), REG_NUM_BYTES(iobase));
1248         } else {
1249                 DEBUGP(4, dev, "T=0 set Procedure byte 0x%.2x\n", dev->sbuf[1]);
1250                 xoutb(dev->sbuf[1], REG_NUM_BYTES(iobase));
1251         }
1252
1253         DEBUGP(1, dev, "set NumSendBytes = 0x%.2x\n",
1254                (unsigned char)(nsend & 0xff));
1255         xoutb((unsigned char)(nsend & 0xff), REG_NUM_SEND(iobase));
1256
1257         DEBUGP(1, dev, "Trigger CARDMAN CONTROLLER (0x%.2x)\n",
1258                0x40     /* SM_Active */
1259               | (dev->flags0 & 2 ? 0 : 4)       /* power on if needed */
1260               |(dev->proto ? 0x10 : 0x08)       /* T=1/T=0 */
1261               |(nsend & 0x100) >> 8 /* MSB numSendBytes */ );
1262         xoutb(0x40              /* SM_Active */
1263               | (dev->flags0 & 2 ? 0 : 4)       /* power on if needed */
1264               |(dev->proto ? 0x10 : 0x08)       /* T=1/T=0 */
1265               |(nsend & 0x100) >> 8,    /* MSB numSendBytes */
1266               REG_FLAGS0(iobase));
1267
1268         /* wait for xmit done */
1269         if (dev->proto == 1) {
1270                 DEBUGP(4, dev, "Wait for xmit done\n");
1271                 for (i = 0; i < 1000; i++) {
1272                         if (inb(REG_FLAGS0(iobase)) & 0x08)
1273                                 break;
1274                         msleep_interruptible(10);
1275                 }
1276                 if (i == 1000) {
1277                         DEBUGP(4, dev, "timeout waiting for xmit done\n");
1278                         rc = -EIO;
1279                         goto release_io;
1280                 }
1281         }
1282
1283         /* T=1: wait for infoLen */
1284
1285         infolen = 0;
1286         if (dev->proto) {
1287                 /* wait until infoLen is valid */
1288                 for (i = 0; i < 6000; i++) {    /* max waiting time of 1 min */
1289                         io_read_num_rec_bytes(iobase, &s);
1290                         if (s >= 3) {
1291                                 infolen = inb(REG_FLAGS1(iobase));
1292                                 DEBUGP(4, dev, "infolen=%d\n", infolen);
1293                                 break;
1294                         }
1295                         msleep_interruptible(10);
1296                 }
1297                 if (i == 6000) {
1298                         DEBUGP(4, dev, "timeout waiting for infoLen\n");
1299                         rc = -EIO;
1300                         goto release_io;
1301                 }
1302         } else
1303                 clear_bit(IS_PROCBYTE_PRESENT, &dev->flags);
1304
1305         /* numRecBytes | bit9 of numRecytes */
1306         io_read_num_rec_bytes(iobase, &dev->rlen);
1307         for (i = 0; i < 600; i++) {     /* max waiting time of 2 sec */
1308                 if (dev->proto) {
1309                         if (dev->rlen >= infolen + 4)
1310                                 break;
1311                 }
1312                 msleep_interruptible(10);
1313                 /* numRecBytes | bit9 of numRecytes */
1314                 io_read_num_rec_bytes(iobase, &s);
1315                 if (s > dev->rlen) {
1316                         DEBUGP(1, dev, "NumRecBytes inc (reset timeout)\n");
1317                         i = 0;  /* reset timeout */
1318                         dev->rlen = s;
1319                 }
1320                 /* T=0: we are done when numRecBytes doesn't
1321                  *      increment any more and NoProcedureByte
1322                  *      is set and numRecBytes == bytes sent + 6
1323                  *      (header bytes + data + 1 for sw2)
1324                  *      except when the card replies an error
1325                  *      which means, no data will be sent back.
1326                  */
1327                 else if (dev->proto == 0) {
1328                         if ((inb(REG_BUF_ADDR(iobase)) & 0x80)) {
1329                                 /* no procedure byte received since last read */
1330                                 DEBUGP(1, dev, "NoProcedure byte set\n");
1331                                 /* i=0; */
1332                         } else {
1333                                 /* procedure byte received since last read */
1334                                 DEBUGP(1, dev, "NoProcedure byte unset "
1335                                         "(reset timeout)\n");
1336                                 dev->procbyte = inb(REG_FLAGS1(iobase));
1337                                 DEBUGP(1, dev, "Read procedure byte 0x%.2x\n",
1338                                       dev->procbyte);
1339                                 i = 0;  /* resettimeout */
1340                         }
1341                         if (inb(REG_FLAGS0(iobase)) & 0x08) {
1342                                 DEBUGP(1, dev, "T0Done flag (read reply)\n");
1343                                 break;
1344                         }
1345                 }
1346                 if (dev->proto)
1347                         infolen = inb(REG_FLAGS1(iobase));
1348         }
1349         if (i == 600) {
1350                 DEBUGP(1, dev, "timeout waiting for numRecBytes\n");
1351                 rc = -EIO;
1352                 goto release_io;
1353         } else {
1354                 if (dev->proto == 0) {
1355                         DEBUGP(1, dev, "Wait for T0Done bit to be  set\n");
1356                         for (i = 0; i < 1000; i++) {
1357                                 if (inb(REG_FLAGS0(iobase)) & 0x08)
1358                                         break;
1359                                 msleep_interruptible(10);
1360                         }
1361                         if (i == 1000) {
1362                                 DEBUGP(1, dev, "timeout waiting for T0Done\n");
1363                                 rc = -EIO;
1364                                 goto release_io;
1365                         }
1366
1367                         dev->procbyte = inb(REG_FLAGS1(iobase));
1368                         DEBUGP(4, dev, "Read procedure byte 0x%.2x\n",
1369                               dev->procbyte);
1370
1371                         io_read_num_rec_bytes(iobase, &dev->rlen);
1372                         DEBUGP(4, dev, "Read NumRecBytes = %i\n", dev->rlen);
1373
1374                 }
1375         }
1376         /* T=1: read offset=zero, T=0: read offset=after challenge */
1377         dev->rpos = dev->proto ? 0 : nr == 4 ? 5 : nr > dev->rlen ? 5 : nr;
1378         DEBUGP(4, dev, "dev->rlen = %i,  dev->rpos = %i, nr = %i\n",
1379               dev->rlen, dev->rpos, nr);
1380
1381 release_io:
1382         DEBUGP(4, dev, "Reset SM\n");
1383         xoutb(0x80, REG_FLAGS0(iobase));        /* reset SM */
1384
1385         if (rc < 0) {
1386                 DEBUGP(4, dev, "Write failed but clear T_Active\n");
1387                 dev->flags1 &= 0xdf;
1388                 xoutb(dev->flags1, REG_FLAGS1(iobase));
1389         }
1390
1391         clear_bit(LOCK_IO, &dev->flags);
1392         wake_up_interruptible(&dev->ioq);
1393         wake_up_interruptible(&dev->readq);     /* tell read we have data */
1394
1395         /* ITSEC E2: clear write buffer */
1396         memset((char *)dev->sbuf, 0, 512);
1397
1398         /* return error or actually written bytes */
1399         DEBUGP(2, dev, "<- cmm_write\n");
1400         return rc < 0 ? rc : nr;
1401 }
1402
1403 static void start_monitor(struct cm4000_dev *dev)
1404 {
1405         DEBUGP(3, dev, "-> start_monitor\n");
1406         if (!dev->monitor_running) {
1407                 DEBUGP(5, dev, "create, init and add timer\n");
1408                 setup_timer(&dev->timer, monitor_card, (unsigned long)dev);
1409                 dev->monitor_running = 1;
1410                 mod_timer(&dev->timer, jiffies);
1411         } else
1412                 DEBUGP(5, dev, "monitor already running\n");
1413         DEBUGP(3, dev, "<- start_monitor\n");
1414 }
1415
1416 static void stop_monitor(struct cm4000_dev *dev)
1417 {
1418         DEBUGP(3, dev, "-> stop_monitor\n");
1419         if (dev->monitor_running) {
1420                 DEBUGP(5, dev, "stopping monitor\n");
1421                 terminate_monitor(dev);
1422                 /* reset monitor SM */
1423                 clear_bit(IS_ATR_VALID, &dev->flags);
1424                 clear_bit(IS_ATR_PRESENT, &dev->flags);
1425         } else
1426                 DEBUGP(5, dev, "monitor already stopped\n");
1427         DEBUGP(3, dev, "<- stop_monitor\n");
1428 }
1429
1430 static int cmm_ioctl(struct inode *inode, struct file *filp, unsigned int cmd,
1431                      unsigned long arg)
1432 {
1433         struct cm4000_dev *dev = filp->private_data;
1434         ioaddr_t iobase = dev->p_dev->io.BasePort1;
1435         struct pcmcia_device *link;
1436         int size;
1437         int rc;
1438         void __user *argp = (void __user *)arg;
1439 #ifdef PCMCIA_DEBUG
1440         char *ioctl_names[CM_IOC_MAXNR + 1] = {
1441                 [_IOC_NR(CM_IOCGSTATUS)] "CM_IOCGSTATUS",
1442                 [_IOC_NR(CM_IOCGATR)] "CM_IOCGATR",
1443                 [_IOC_NR(CM_IOCARDOFF)] "CM_IOCARDOFF",
1444                 [_IOC_NR(CM_IOCSPTS)] "CM_IOCSPTS",
1445                 [_IOC_NR(CM_IOSDBGLVL)] "CM4000_DBGLVL",
1446         };
1447 #endif
1448         DEBUGP(3, dev, "cmm_ioctl(device=%d.%d) %s\n", imajor(inode),
1449                iminor(inode), ioctl_names[_IOC_NR(cmd)]);
1450
1451         link = dev_table[iminor(inode)];
1452         if (!pcmcia_dev_present(link)) {
1453                 DEBUGP(4, dev, "DEV_OK false\n");
1454                 return -ENODEV;
1455         }
1456
1457         if (test_bit(IS_CMM_ABSENT, &dev->flags)) {
1458                 DEBUGP(4, dev, "CMM_ABSENT flag set\n");
1459                 return -ENODEV;
1460         }
1461
1462         if (_IOC_TYPE(cmd) != CM_IOC_MAGIC) {
1463                 DEBUGP(4, dev, "ioctype mismatch\n");
1464                 return -EINVAL;
1465         }
1466         if (_IOC_NR(cmd) > CM_IOC_MAXNR) {
1467                 DEBUGP(4, dev, "iocnr mismatch\n");
1468                 return -EINVAL;
1469         }
1470         size = _IOC_SIZE(cmd);
1471         rc = 0;
1472         DEBUGP(4, dev, "iocdir=%.4x iocr=%.4x iocw=%.4x iocsize=%d cmd=%.4x\n",
1473               _IOC_DIR(cmd), _IOC_READ, _IOC_WRITE, size, cmd);
1474
1475         if (_IOC_DIR(cmd) & _IOC_READ) {
1476                 if (!access_ok(VERIFY_WRITE, argp, size))
1477                         return -EFAULT;
1478         }
1479         if (_IOC_DIR(cmd) & _IOC_WRITE) {
1480                 if (!access_ok(VERIFY_READ, argp, size))
1481                         return -EFAULT;
1482         }
1483
1484         switch (cmd) {
1485         case CM_IOCGSTATUS:
1486                 DEBUGP(4, dev, " ... in CM_IOCGSTATUS\n");
1487                 {
1488                         int status;
1489
1490                         /* clear other bits, but leave inserted & powered as
1491                          * they are */
1492                         status = dev->flags0 & 3;
1493                         if (test_bit(IS_ATR_PRESENT, &dev->flags))
1494                                 status |= CM_ATR_PRESENT;
1495                         if (test_bit(IS_ATR_VALID, &dev->flags))
1496                                 status |= CM_ATR_VALID;
1497                         if (test_bit(IS_CMM_ABSENT, &dev->flags))
1498                                 status |= CM_NO_READER;
1499                         if (test_bit(IS_BAD_CARD, &dev->flags))
1500                                 status |= CM_BAD_CARD;
1501                         if (copy_to_user(argp, &status, sizeof(int)))
1502                                 return -EFAULT;
1503                 }
1504                 return 0;
1505         case CM_IOCGATR:
1506                 DEBUGP(4, dev, "... in CM_IOCGATR\n");
1507                 {
1508                         struct atreq __user *atreq = argp;
1509                         int tmp;
1510                         /* allow nonblocking io and being interrupted */
1511                         if (wait_event_interruptible
1512                             (dev->atrq,
1513                              ((filp->f_flags & O_NONBLOCK)
1514                               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags)
1515                                   != 0)))) {
1516                                 if (filp->f_flags & O_NONBLOCK)
1517                                         return -EAGAIN;
1518                                 return -ERESTARTSYS;
1519                         }
1520
1521                         if (test_bit(IS_ATR_VALID, &dev->flags) == 0) {
1522                                 tmp = -1;
1523                                 if (copy_to_user(&(atreq->atr_len), &tmp,
1524                                                  sizeof(int)))
1525                                         return -EFAULT;
1526                         } else {
1527                                 if (copy_to_user(atreq->atr, dev->atr,
1528                                                  dev->atr_len))
1529                                         return -EFAULT;
1530
1531                                 tmp = dev->atr_len;
1532                                 if (copy_to_user(&(atreq->atr_len), &tmp, sizeof(int)))
1533                                         return -EFAULT;
1534                         }
1535                         return 0;
1536                 }
1537         case CM_IOCARDOFF:
1538
1539 #ifdef PCMCIA_DEBUG
1540                 DEBUGP(4, dev, "... in CM_IOCARDOFF\n");
1541                 if (dev->flags0 & 0x01) {
1542                         DEBUGP(4, dev, "    Card inserted\n");
1543                 } else {
1544                         DEBUGP(2, dev, "    No card inserted\n");
1545                 }
1546                 if (dev->flags0 & 0x02) {
1547                         DEBUGP(4, dev, "    Card powered\n");
1548                 } else {
1549                         DEBUGP(2, dev, "    Card not powered\n");
1550                 }
1551 #endif
1552
1553                 /* is a card inserted and powered? */
1554                 if ((dev->flags0 & 0x01) && (dev->flags0 & 0x02)) {
1555
1556                         /* get IO lock */
1557                         if (wait_event_interruptible
1558                             (dev->ioq,
1559                              ((filp->f_flags & O_NONBLOCK)
1560                               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags)
1561                                   == 0)))) {
1562                                 if (filp->f_flags & O_NONBLOCK)
1563                                         return -EAGAIN;
1564                                 return -ERESTARTSYS;
1565                         }
1566                         /* Set Flags0 = 0x42 */
1567                         DEBUGP(4, dev, "Set Flags0=0x42 \n");
1568                         xoutb(0x42, REG_FLAGS0(iobase));
1569                         clear_bit(IS_ATR_PRESENT, &dev->flags);
1570                         clear_bit(IS_ATR_VALID, &dev->flags);
1571                         dev->mstate = M_CARDOFF;
1572                         clear_bit(LOCK_IO, &dev->flags);
1573                         if (wait_event_interruptible
1574                             (dev->atrq,
1575                              ((filp->f_flags & O_NONBLOCK)
1576                               || (test_bit(IS_ATR_VALID, (void *)&dev->flags) !=
1577                                   0)))) {
1578                                 if (filp->f_flags & O_NONBLOCK)
1579                                         return -EAGAIN;
1580                                 return -ERESTARTSYS;
1581                         }
1582                 }
1583                 /* release lock */
1584                 clear_bit(LOCK_IO, &dev->flags);
1585                 wake_up_interruptible(&dev->ioq);
1586
1587                 return 0;
1588         case CM_IOCSPTS:
1589                 {
1590                         struct ptsreq krnptsreq;
1591
1592                         if (copy_from_user(&krnptsreq, argp,
1593                                            sizeof(struct ptsreq)))
1594                                 return -EFAULT;
1595
1596                         rc = 0;
1597                         DEBUGP(4, dev, "... in CM_IOCSPTS\n");
1598                         /* wait for ATR to get valid */
1599                         if (wait_event_interruptible
1600                             (dev->atrq,
1601                              ((filp->f_flags & O_NONBLOCK)
1602                               || (test_bit(IS_ATR_PRESENT, (void *)&dev->flags)
1603                                   != 0)))) {
1604                                 if (filp->f_flags & O_NONBLOCK)
1605                                         return -EAGAIN;
1606                                 return -ERESTARTSYS;
1607                         }
1608                         /* get IO lock */
1609                         if (wait_event_interruptible
1610                             (dev->ioq,
1611                              ((filp->f_flags & O_NONBLOCK)
1612                               || (test_and_set_bit(LOCK_IO, (void *)&dev->flags)
1613                                   == 0)))) {
1614                                 if (filp->f_flags & O_NONBLOCK)
1615                                         return -EAGAIN;
1616                                 return -ERESTARTSYS;
1617                         }
1618
1619                         if ((rc = set_protocol(dev, &krnptsreq)) != 0) {
1620                                 /* auto power_on again */
1621                                 dev->mstate = M_FETCH_ATR;
1622                                 clear_bit(IS_ATR_VALID, &dev->flags);
1623                         }
1624                         /* release lock */
1625                         clear_bit(LOCK_IO, &dev->flags);
1626                         wake_up_interruptible(&dev->ioq);
1627
1628                 }
1629                 return rc;
1630 #ifdef PCMCIA_DEBUG
1631         case CM_IOSDBGLVL:      /* set debug log level */
1632                 {
1633                         int old_pc_debug = 0;
1634
1635                         old_pc_debug = pc_debug;
1636                         if (copy_from_user(&pc_debug, argp, sizeof(int)))
1637                                 return -EFAULT;
1638
1639                         if (old_pc_debug != pc_debug)
1640                                 DEBUGP(0, dev, "Changed debug log level "
1641                                        "to %i\n", pc_debug);
1642                 }
1643                 return rc;
1644 #endif
1645         default:
1646                 DEBUGP(4, dev, "... in default (unknown IOCTL code)\n");
1647                 return -EINVAL;
1648         }
1649 }
1650
1651 static int cmm_open(struct inode *inode, struct file *filp)
1652 {
1653         struct cm4000_dev *dev;
1654         struct pcmcia_device *link;
1655         int rc, minor = iminor(inode);
1656
1657         if (minor >= CM4000_MAX_DEV)
1658                 return -ENODEV;
1659
1660         link = dev_table[minor];
1661         if (link == NULL || !pcmcia_dev_present(link))
1662                 return -ENODEV;
1663
1664         if (link->open)
1665                 return -EBUSY;
1666
1667         dev = link->priv;
1668         filp->private_data = dev;
1669
1670         DEBUGP(2, dev, "-> cmm_open(device=%d.%d process=%s,%d)\n",
1671               imajor(inode), minor, current->comm, current->pid);
1672
1673         /* init device variables, they may be "polluted" after close
1674          * or, the device may never have been closed (i.e. open failed)
1675          */
1676
1677         ZERO_DEV(dev);
1678
1679         /* opening will always block since the
1680          * monitor will be started by open, which
1681          * means we have to wait for ATR becoming
1682          * vaild = block until valid (or card
1683          * inserted)
1684          */
1685         if (filp->f_flags & O_NONBLOCK)
1686                 return -EAGAIN;
1687
1688         dev->mdelay = T_50MSEC;
1689
1690         /* start monitoring the cardstatus */
1691         start_monitor(dev);
1692
1693         link->open = 1;         /* only one open per device */
1694         rc = 0;
1695
1696         DEBUGP(2, dev, "<- cmm_open\n");
1697         return nonseekable_open(inode, filp);
1698 }
1699
1700 static int cmm_close(struct inode *inode, struct file *filp)
1701 {
1702         struct cm4000_dev *dev;
1703         struct pcmcia_device *link;
1704         int minor = iminor(inode);
1705
1706         if (minor >= CM4000_MAX_DEV)
1707                 return -ENODEV;
1708
1709         link = dev_table[minor];
1710         if (link == NULL)
1711                 return -ENODEV;
1712
1713         dev = link->priv;
1714
1715         DEBUGP(2, dev, "-> cmm_close(maj/min=%d.%d)\n",
1716                imajor(inode), minor);
1717
1718         stop_monitor(dev);
1719
1720         ZERO_DEV(dev);
1721
1722         link->open = 0;         /* only one open per device */
1723         wake_up(&dev->devq);    /* socket removed? */
1724
1725         DEBUGP(2, dev, "cmm_close\n");
1726         return 0;
1727 }
1728
1729 static void cmm_cm4000_release(struct pcmcia_device * link)
1730 {
1731         struct cm4000_dev *dev = link->priv;
1732
1733         /* dont terminate the monitor, rather rely on
1734          * close doing that for us.
1735          */
1736         DEBUGP(3, dev, "-> cmm_cm4000_release\n");
1737         while (link->open) {
1738                 printk(KERN_INFO MODULE_NAME ": delaying release until "
1739                        "process has terminated\n");
1740                 /* note: don't interrupt us:
1741                  * close the applications which own
1742                  * the devices _first_ !
1743                  */
1744                 wait_event(dev->devq, (link->open == 0));
1745         }
1746         /* dev->devq=NULL;      this cannot be zeroed earlier */
1747         DEBUGP(3, dev, "<- cmm_cm4000_release\n");
1748         return;
1749 }
1750
1751 /*==== Interface to PCMCIA Layer =======================================*/
1752
1753 static int cm4000_config(struct pcmcia_device * link, int devno)
1754 {
1755         struct cm4000_dev *dev;
1756         tuple_t tuple;
1757         cisparse_t parse;
1758         u_char buf[64];
1759         int fail_fn, fail_rc;
1760         int rc;
1761
1762         /* read the config-tuples */
1763         tuple.Attributes = 0;
1764         tuple.TupleData = buf;
1765         tuple.TupleDataMax = sizeof(buf);
1766         tuple.TupleOffset = 0;
1767
1768         link->io.BasePort2 = 0;
1769         link->io.NumPorts2 = 0;
1770         link->io.Attributes2 = 0;
1771         tuple.DesiredTuple = CISTPL_CFTABLE_ENTRY;
1772         for (rc = pcmcia_get_first_tuple(link, &tuple);
1773              rc == CS_SUCCESS; rc = pcmcia_get_next_tuple(link, &tuple)) {
1774
1775                 rc = pcmcia_get_tuple_data(link, &tuple);
1776                 if (rc != CS_SUCCESS)
1777                         continue;
1778                 rc = pcmcia_parse_tuple(link, &tuple, &parse);
1779                 if (rc != CS_SUCCESS)
1780                         continue;
1781
1782                 link->conf.ConfigIndex = parse.cftable_entry.index;
1783
1784                 if (!parse.cftable_entry.io.nwin)
1785                         continue;
1786
1787                 /* Get the IOaddr */
1788                 link->io.BasePort1 = parse.cftable_entry.io.win[0].base;
1789                 link->io.NumPorts1 = parse.cftable_entry.io.win[0].len;
1790                 link->io.Attributes1 = IO_DATA_PATH_WIDTH_AUTO;
1791                 if (!(parse.cftable_entry.io.flags & CISTPL_IO_8BIT))
1792                         link->io.Attributes1 = IO_DATA_PATH_WIDTH_16;
1793                 if (!(parse.cftable_entry.io.flags & CISTPL_IO_16BIT))
1794                         link->io.Attributes1 = IO_DATA_PATH_WIDTH_8;
1795                 link->io.IOAddrLines = parse.cftable_entry.io.flags
1796                     & CISTPL_IO_LINES_MASK;
1797
1798                 rc = pcmcia_request_io(link, &link->io);
1799                 if (rc == CS_SUCCESS)
1800                         break;  /* we are done */
1801         }
1802         if (rc != CS_SUCCESS)
1803                 goto cs_release;
1804
1805         link->conf.IntType = 00000002;
1806
1807         if ((fail_rc =
1808              pcmcia_request_configuration(link, &link->conf)) != CS_SUCCESS) {
1809                 fail_fn = RequestConfiguration;
1810                 goto cs_release;
1811         }
1812
1813         dev = link->priv;
1814         sprintf(dev->node.dev_name, DEVICE_NAME "%d", devno);
1815         dev->node.major = major;
1816         dev->node.minor = devno;
1817         dev->node.next = NULL;
1818         link->dev_node = &dev->node;
1819
1820         return 0;
1821
1822 cs_release:
1823         cm4000_release(link);
1824         return -ENODEV;
1825 }
1826
1827 static int cm4000_suspend(struct pcmcia_device *link)
1828 {
1829         struct cm4000_dev *dev;
1830
1831         dev = link->priv;
1832         stop_monitor(dev);
1833
1834         return 0;
1835 }
1836
1837 static int cm4000_resume(struct pcmcia_device *link)
1838 {
1839         struct cm4000_dev *dev;
1840
1841         dev = link->priv;
1842         if (link->open)
1843                 start_monitor(dev);
1844
1845         return 0;
1846 }
1847
1848 static void cm4000_release(struct pcmcia_device *link)
1849 {
1850         cmm_cm4000_release(link->priv); /* delay release until device closed */
1851         pcmcia_disable_device(link);
1852 }
1853
1854 static int cm4000_probe(struct pcmcia_device *link)
1855 {
1856         struct cm4000_dev *dev;
1857         int i, ret;
1858
1859         for (i = 0; i < CM4000_MAX_DEV; i++)
1860                 if (dev_table[i] == NULL)
1861                         break;
1862
1863         if (i == CM4000_MAX_DEV) {
1864                 printk(KERN_NOTICE MODULE_NAME ": all devices in use\n");
1865                 return -ENODEV;
1866         }
1867
1868         /* create a new cm4000_cs device */
1869         dev = kzalloc(sizeof(struct cm4000_dev), GFP_KERNEL);
1870         if (dev == NULL)
1871                 return -ENOMEM;
1872
1873         dev->p_dev = link;
1874         link->priv = dev;
1875         link->conf.IntType = INT_MEMORY_AND_IO;
1876         dev_table[i] = link;
1877
1878         init_waitqueue_head(&dev->devq);
1879         init_waitqueue_head(&dev->ioq);
1880         init_waitqueue_head(&dev->atrq);
1881         init_waitqueue_head(&dev->readq);
1882
1883         ret = cm4000_config(link, i);
1884         if (ret) {
1885                 dev_table[i] = NULL;
1886                 kfree(dev);
1887                 return ret;
1888         }
1889
1890         class_device_create(cmm_class, NULL, MKDEV(major, i), NULL,
1891                             "cmm%d", i);
1892
1893         return 0;
1894 }
1895
1896 static void cm4000_detach(struct pcmcia_device *link)
1897 {
1898         struct cm4000_dev *dev = link->priv;
1899         int devno;
1900
1901         /* find device */
1902         for (devno = 0; devno < CM4000_MAX_DEV; devno++)
1903                 if (dev_table[devno] == link)
1904                         break;
1905         if (devno == CM4000_MAX_DEV)
1906                 return;
1907
1908         stop_monitor(dev);
1909
1910         cm4000_release(link);
1911
1912         dev_table[devno] = NULL;
1913         kfree(dev);
1914
1915         class_device_destroy(cmm_class, MKDEV(major, devno));
1916
1917         return;
1918 }
1919
1920 static const struct file_operations cm4000_fops = {
1921         .owner  = THIS_MODULE,
1922         .read   = cmm_read,
1923         .write  = cmm_write,
1924         .ioctl  = cmm_ioctl,
1925         .open   = cmm_open,
1926         .release= cmm_close,
1927 };
1928
1929 static struct pcmcia_device_id cm4000_ids[] = {
1930         PCMCIA_DEVICE_MANF_CARD(0x0223, 0x0002),
1931         PCMCIA_DEVICE_PROD_ID12("CardMan", "4000", 0x2FB368CA, 0xA2BD8C39),
1932         PCMCIA_DEVICE_NULL,
1933 };
1934 MODULE_DEVICE_TABLE(pcmcia, cm4000_ids);
1935
1936 static struct pcmcia_driver cm4000_driver = {
1937         .owner    = THIS_MODULE,
1938         .drv      = {
1939                 .name = "cm4000_cs",
1940                 },
1941         .probe    = cm4000_probe,
1942         .remove   = cm4000_detach,
1943         .suspend  = cm4000_suspend,
1944         .resume   = cm4000_resume,
1945         .id_table = cm4000_ids,
1946 };
1947
1948 static int __init cmm_init(void)
1949 {
1950         int rc;
1951
1952         printk(KERN_INFO "%s\n", version);
1953
1954         cmm_class = class_create(THIS_MODULE, "cardman_4000");
1955         if (IS_ERR(cmm_class))
1956                 return PTR_ERR(cmm_class);
1957
1958         major = register_chrdev(0, DEVICE_NAME, &cm4000_fops);
1959         if (major < 0) {
1960                 printk(KERN_WARNING MODULE_NAME
1961                         ": could not get major number\n");
1962                 class_destroy(cmm_class);
1963                 return major;
1964         }
1965
1966         rc = pcmcia_register_driver(&cm4000_driver);
1967         if (rc < 0) {
1968                 unregister_chrdev(major, DEVICE_NAME);
1969                 class_destroy(cmm_class);
1970                 return rc;
1971         }
1972
1973         return 0;
1974 }
1975
1976 static void __exit cmm_exit(void)
1977 {
1978         printk(KERN_INFO MODULE_NAME ": unloading\n");
1979         pcmcia_unregister_driver(&cm4000_driver);
1980         unregister_chrdev(major, DEVICE_NAME);
1981         class_destroy(cmm_class);
1982 };
1983
1984 module_init(cmm_init);
1985 module_exit(cmm_exit);
1986 MODULE_LICENSE("Dual BSD/GPL");