linux-kernel - Re: Commit 9f10d9ee breaks CD mounting/burning

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20080307214934.GB19778@gollum.tnic>
Date:	Fri, 7 Mar 2008 22:49:34 +0100
From:	Borislav Petkov <petkovbb@...glemail.com>
To:	Bartlomiej Zolnierkiewicz <bzolnier@...il.com>
Cc:	walt <w41ter@...il.com>, linux-ide@...r.kernel.org,
	linux-kernel@...r.kernel.org
Subject: Re: Commit 9f10d9ee breaks CD mounting/burning

On Fri, Mar 07, 2008 at 09:39:43PM +0100, Bartlomiej Zolnierkiewicz wrote:
> On Friday 07 March 2008, Borislav Petkov wrote:
> > On Thu, Mar 06, 2008 at 10:35:00PM +0100, Bartlomiej Zolnierkiewicz wrote:
> > > 
> > > On Thursday 06 March 2008, walt wrote:
> > > > Hi Bartolmiej,
> > > > 
> > > > For me, this commit causes the problem it's intended to fix:
> > > > 
> > > > commit 9f10d9ee0ac6d79d7bc8b9a158bf4a29322d84d3
> > > > Author: Bartlomiej Zolnierkiewicz <bzolnier@...il.com>
> > > > Date:   Tue Feb 26 21:50:35 2008 +0100
> > > > 
> > > >      ide-cd: fix 'ireason' handling for REQ_TYPE_ATA_PC requests
> > > > 
> > > >      This fixes some hangs caused by not finishing the transfer before ending
> > > >      the request and also makes use of 'ireason == 1' quirk for spurious IRQs.
> > > > 
> > > > When I mount a CD there is a long delay, and I see this error message:
> > > > 
> > > > hdc: ide_cd_check_ireason: wrong transfer direction!
> > > > cdrom: failed setting lba address space
> > > > hdc: status error: status=0x58 { DriveReady SeekComplete DataRequest }
> > > > ide: failed opcode was: unknown
> > > > hdc: drive not ready for command
> > > > <repeated many times>
> > > > 
> > > > When I revert this commit everything works properly again, including
> > > > CD burning.
> > > > 
> > > > Here is the drive info:
> > > > 
> > > > hdc: TSSTcorpCD/DVDW SH-S182M, ATAPI CD/DVD-ROM drive
> > > > hdc: host max PIO5 wanted PIO255(auto-tune) selected PIO4
> > > > hdc: UDMA/33 mode selected
> > > > hdc: ATAPI 48X DVD-ROM DVD-R-RAM CD-R/RW drive, 2048kB Cache
> > > > Uniform CD-ROM driver Revision: 3.20
> > > > hdc: UDMA/33 mode selected
> > > > 
> > > > I'm happy to try patches or supply more info, just let me know
> > > > what you need.
> > > 
> > > Does the following patch help?
> > > 
> > > [ Borislav, please take a look and double check that it is OK. ]
> > > 
> > > From: Bartlomiej Zolnierkiewicz <bzolnier@...il.com>
> > > Subject: [PATCH] ide-cd: mark REQ_TYPE_ATA_PC write requests with REQ_RW flag
> > > 
> > > On Thursday 06 March 2008, walt wrote:
> > > 
> > > > For me, this commit causes the problem it's intended to fix:
> > > > 
> > > > commit 9f10d9ee0ac6d79d7bc8b9a158bf4a29322d84d3
> > > > Author: Bartlomiej Zolnierkiewicz <bzolnier@...il.com>
> > > > Date:   Tue Feb 26 21:50:35 2008 +0100
> > > > 
> > > >      ide-cd: fix 'ireason' handling for REQ_TYPE_ATA_PC requests
> > > > 
> > > >      This fixes some hangs caused by not finishing the transfer before ending
> > > >      the request and also makes use of 'ireason == 1' quirk for spurious IRQs.
> > > > 
> > > > When I mount a CD there is a long delay, and I see this error message:
> > > > 
> > > > hdc: ide_cd_check_ireason: wrong transfer direction!
> > > > cdrom: failed setting lba address space
> > > > hdc: status error: status=0x58 { DriveReady SeekComplete DataRequest }
> > > > ide: failed opcode was: unknown
> > > > hdc: drive not ready for command
> > > > <repeated many times>
> > > > 
> > > > When I revert this commit everything works properly again, including
> > > > CD burning.
> > > 
> > > It turned out that REQ_TYPE_ATA_PC write requests were not marked as such
> > > (the previous commit assumed them to be).
> > > 
> > > Reported-by: walt <w41ter@...il.com>
> > > Cc: Borislav Petkov <petkovbb@...glemail.com>
> > > Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@...il.com>
> > > ---
> > >  drivers/ide/ide-cd_ioctl.c |    4 ++++
> > >  1 file changed, 4 insertions(+)
> > > 
> > > Index: b/drivers/ide/ide-cd_ioctl.c
> > > ===================================================================
> > > --- a/drivers/ide/ide-cd_ioctl.c
> > > +++ b/drivers/ide/ide-cd_ioctl.c
> > > @@ -457,6 +457,10 @@ int ide_cdrom_packet(struct cdrom_device
> > >  	   layer. the packet must be complete, as we do not
> > >  	   touch it at all. */
> > >  	ide_cd_init_rq(drive, &req);
> > > +
> > > +	if (cgc->data_direction == CGC_DATA_WRITE)
> > > +		req.cmd_flags |= REQ_RW;
> > > +
> > >  	memcpy(req.cmd, cgc->cmd, CDROM_PACKET_SIZE);
> > >  	if (cgc->sense)
> > >  		memset(cgc->sense, 0, sizeof(struct request_sense));
> > 
> > Here's how i understand it (and correct me if i'm wrong):
> > 
> > req.cmd_flags & 0x1 (i.e. the least sig. bit) was remaining unset for write requests
> > and that's why the ireason check in the interrupt handler was failing loudly.
> > This sets it correctly so that rq_data_dir(rq) evaluates to the correct data
> > direction of the request, no?
> 
> Yep.
> 
> Thanks for checking it, I'll push the patch to Linus.

Cool, can we close http://bugzilla.kernel.org/show_bug.cgi?id=10185 now?

-- 
Regards/Gruß,
    Boris.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/