fedora core 6 1.2949 + vserver 2.2.0
[linux-2.6.git] / drivers / mtd / chips / cfi_cmdset_0002.c
index df33090..e3acd39 100644 (file)
@@ -3,12 +3,21 @@
  *   AMD & Fujitsu Standard Vendor Command Set (ID 0x0002)
  *
  * Copyright (C) 2000 Crossnet Co. <info@crossnet.co.jp>
+ * Copyright (C) 2004 Arcom Control Systems Ltd <linux@arcom.com>
+ * Copyright (C) 2005 MontaVista Software Inc. <source@mvista.com>
  *
  * 2_by_8 routines added by Simon Munton
  *
+ * 4_by_16 work by Carolyn J. Smith
+ *
+ * XIP support hooks by Vitaly Wool (based on code for Intel flash
+ * by Nicolas Pitre)
+ *
+ * Occasionally maintained by Thayne Harbaugh tharbaugh at lnxi dot com
+ *
  * This code is GPL
  *
- * $Id: cfi_cmdset_0002.c,v 1.74 2003/05/28 12:51:48 dwmw2 Exp $
+ * $Id: cfi_cmdset_0002.c,v 1.122 2005/11/07 11:14:22 gleixner Exp $
  *
  */
 
 #include <linux/slab.h>
 #include <linux/delay.h>
 #include <linux/interrupt.h>
+#include <linux/mtd/compatmac.h>
 #include <linux/mtd/map.h>
 #include <linux/mtd/mtd.h>
 #include <linux/mtd/cfi.h>
-#include <linux/mtd/compatmac.h>
+#include <linux/mtd/xip.h>
 
 #define AMD_BOOTLOC_BUG
+#define FORCE_WORD_WRITE 0
+
+#define MAX_WORD_RETRIES 3
+
+#define MANUFACTURER_AMD       0x0001
+#define MANUFACTURER_ATMEL     0x001F
+#define MANUFACTURER_SST       0x00BF
+#define SST49LF004B            0x0060
+#define SST49LF040B            0x0050
+#define SST49LF008A            0x005a
+#define AT49BV6416             0x00d6
 
 static int cfi_amdstd_read (struct mtd_info *, loff_t, size_t, size_t *, u_char *);
-static int cfi_amdstd_write(struct mtd_info *, loff_t, size_t, size_t *, const u_char *);
+static int cfi_amdstd_write_words(struct mtd_info *, loff_t, size_t, size_t *, const u_char *);
+static int cfi_amdstd_write_buffers(struct mtd_info *, loff_t, size_t, size_t *, const u_char *);
 static int cfi_amdstd_erase_chip(struct mtd_info *, struct erase_info *);
-static int cfi_amdstd_erase_onesize(struct mtd_info *, struct erase_info *);
 static int cfi_amdstd_erase_varsize(struct mtd_info *, struct erase_info *);
 static void cfi_amdstd_sync (struct mtd_info *);
 static int cfi_amdstd_suspend (struct mtd_info *);
@@ -44,8 +65,14 @@ static int cfi_amdstd_secsi_read (struct mtd_info *, loff_t, size_t, size_t *, u
 static void cfi_amdstd_destroy(struct mtd_info *);
 
 struct mtd_info *cfi_cmdset_0002(struct map_info *, int);
-static struct mtd_info *cfi_amdstd_setup (struct map_info *);
+static struct mtd_info *cfi_amdstd_setup (struct mtd_info *);
 
+static int get_chip(struct map_info *map, struct flchip *chip, unsigned long adr, int mode);
+static void put_chip(struct map_info *map, struct flchip *chip, unsigned long adr);
+#include "fwh_lock.h"
+
+static int cfi_atmel_lock(struct mtd_info *mtd, loff_t ofs, size_t len);
+static int cfi_atmel_unlock(struct mtd_info *mtd, loff_t ofs, size_t len);
 
 static struct mtd_chip_driver cfi_amdstd_chipdrv = {
        .probe          = NULL, /* Not usable directly */
@@ -55,233 +82,352 @@ static struct mtd_chip_driver cfi_amdstd_chipdrv = {
 };
 
 
+/* #define DEBUG_CFI_FEATURES */
+
+
+#ifdef DEBUG_CFI_FEATURES
+static void cfi_tell_features(struct cfi_pri_amdstd *extp)
+{
+       const char* erase_suspend[3] = {
+               "Not supported", "Read only", "Read/write"
+       };
+       const char* top_bottom[6] = {
+               "No WP", "8x8KiB sectors at top & bottom, no WP",
+               "Bottom boot", "Top boot",
+               "Uniform, Bottom WP", "Uniform, Top WP"
+       };
+
+       printk("  Silicon revision: %d\n", extp->SiliconRevision >> 1);
+       printk("  Address sensitive unlock: %s\n",
+              (extp->SiliconRevision & 1) ? "Not required" : "Required");
+
+       if (extp->EraseSuspend < ARRAY_SIZE(erase_suspend))
+               printk("  Erase Suspend: %s\n", erase_suspend[extp->EraseSuspend]);
+       else
+               printk("  Erase Suspend: Unknown value %d\n", extp->EraseSuspend);
+
+       if (extp->BlkProt == 0)
+               printk("  Block protection: Not supported\n");
+       else
+               printk("  Block protection: %d sectors per group\n", extp->BlkProt);
+
+
+       printk("  Temporary block unprotect: %s\n",
+              extp->TmpBlkUnprotect ? "Supported" : "Not supported");
+       printk("  Block protect/unprotect scheme: %d\n", extp->BlkProtUnprot);
+       printk("  Number of simultaneous operations: %d\n", extp->SimultaneousOps);
+       printk("  Burst mode: %s\n",
+              extp->BurstMode ? "Supported" : "Not supported");
+       if (extp->PageMode == 0)
+               printk("  Page mode: Not supported\n");
+       else
+               printk("  Page mode: %d word page\n", extp->PageMode << 2);
+
+       printk("  Vpp Supply Minimum Program/Erase Voltage: %d.%d V\n",
+              extp->VppMin >> 4, extp->VppMin & 0xf);
+       printk("  Vpp Supply Maximum Program/Erase Voltage: %d.%d V\n",
+              extp->VppMax >> 4, extp->VppMax & 0xf);
+
+       if (extp->TopBottom < ARRAY_SIZE(top_bottom))
+               printk("  Top/Bottom Boot Block: %s\n", top_bottom[extp->TopBottom]);
+       else
+               printk("  Top/Bottom Boot Block: Unknown value %d\n", extp->TopBottom);
+}
+#endif
+
+#ifdef AMD_BOOTLOC_BUG
+/* Wheee. Bring me the head of someone at AMD. */
+static void fixup_amd_bootblock(struct mtd_info *mtd, void* param)
+{
+       struct map_info *map = mtd->priv;
+       struct cfi_private *cfi = map->fldrv_priv;
+       struct cfi_pri_amdstd *extp = cfi->cmdset_priv;
+       __u8 major = extp->MajorVersion;
+       __u8 minor = extp->MinorVersion;
+
+       if (((major << 8) | minor) < 0x3131) {
+               /* CFI version 1.0 => don't trust bootloc */
+               if (cfi->id & 0x80) {
+                       printk(KERN_WARNING "%s: JEDEC Device ID is 0x%02X. Assuming broken CFI table.\n", map->name, cfi->id);
+                       extp->TopBottom = 3;    /* top boot */
+               } else {
+                       extp->TopBottom = 2;    /* bottom boot */
+               }
+       }
+}
+#endif
+
+static void fixup_use_write_buffers(struct mtd_info *mtd, void *param)
+{
+       struct map_info *map = mtd->priv;
+       struct cfi_private *cfi = map->fldrv_priv;
+       if (cfi->cfiq->BufWriteTimeoutTyp) {
+               DEBUG(MTD_DEBUG_LEVEL1, "Using buffer write method\n" );
+               mtd->write = cfi_amdstd_write_buffers;
+       }
+}
+
+/* Atmel chips don't use the same PRI format as AMD chips */
+static void fixup_convert_atmel_pri(struct mtd_info *mtd, void *param)
+{
+       struct map_info *map = mtd->priv;
+       struct cfi_private *cfi = map->fldrv_priv;
+       struct cfi_pri_amdstd *extp = cfi->cmdset_priv;
+       struct cfi_pri_atmel atmel_pri;
+
+       memcpy(&atmel_pri, extp, sizeof(atmel_pri));
+       memset((char *)extp + 5, 0, sizeof(*extp) - 5);
+
+       if (atmel_pri.Features & 0x02)
+               extp->EraseSuspend = 2;
+
+       if (atmel_pri.BottomBoot)
+               extp->TopBottom = 2;
+       else
+               extp->TopBottom = 3;
+}
+
+static void fixup_use_secsi(struct mtd_info *mtd, void *param)
+{
+       /* Setup for chips with a secsi area */
+       mtd->read_user_prot_reg = cfi_amdstd_secsi_read;
+       mtd->read_fact_prot_reg = cfi_amdstd_secsi_read;
+}
+
+static void fixup_use_erase_chip(struct mtd_info *mtd, void *param)
+{
+       struct map_info *map = mtd->priv;
+       struct cfi_private *cfi = map->fldrv_priv;
+       if ((cfi->cfiq->NumEraseRegions == 1) &&
+               ((cfi->cfiq->EraseRegionInfo[0] & 0xffff) == 0)) {
+               mtd->erase = cfi_amdstd_erase_chip;
+       }
+
+}
+
+/*
+ * Some Atmel chips (e.g. the AT49BV6416) power-up with all sectors
+ * locked by default.
+ */
+static void fixup_use_atmel_lock(struct mtd_info *mtd, void *param)
+{
+       mtd->lock = cfi_atmel_lock;
+       mtd->unlock = cfi_atmel_unlock;
+       mtd->flags |= MTD_STUPID_LOCK;
+}
+
+static struct cfi_fixup cfi_fixup_table[] = {
+#ifdef AMD_BOOTLOC_BUG
+       { CFI_MFR_AMD, CFI_ID_ANY, fixup_amd_bootblock, NULL },
+#endif
+       { CFI_MFR_AMD, 0x0050, fixup_use_secsi, NULL, },
+       { CFI_MFR_AMD, 0x0053, fixup_use_secsi, NULL, },
+       { CFI_MFR_AMD, 0x0055, fixup_use_secsi, NULL, },
+       { CFI_MFR_AMD, 0x0056, fixup_use_secsi, NULL, },
+       { CFI_MFR_AMD, 0x005C, fixup_use_secsi, NULL, },
+       { CFI_MFR_AMD, 0x005F, fixup_use_secsi, NULL, },
+#if !FORCE_WORD_WRITE
+       { CFI_MFR_ANY, CFI_ID_ANY, fixup_use_write_buffers, NULL, },
+#endif
+       { CFI_MFR_ATMEL, CFI_ID_ANY, fixup_convert_atmel_pri, NULL },
+       { 0, 0, NULL, NULL }
+};
+static struct cfi_fixup jedec_fixup_table[] = {
+       { MANUFACTURER_SST, SST49LF004B, fixup_use_fwh_lock, NULL, },
+       { MANUFACTURER_SST, SST49LF040B, fixup_use_fwh_lock, NULL, },
+       { MANUFACTURER_SST, SST49LF008A, fixup_use_fwh_lock, NULL, },
+       { 0, 0, NULL, NULL }
+};
+
+static struct cfi_fixup fixup_table[] = {
+       /* The CFI vendor ids and the JEDEC vendor IDs appear
+        * to be common.  It is like the devices id's are as
+        * well.  This table is to pick all cases where
+        * we know that is the case.
+        */
+       { CFI_MFR_ANY, CFI_ID_ANY, fixup_use_erase_chip, NULL },
+       { CFI_MFR_ATMEL, AT49BV6416, fixup_use_atmel_lock, NULL },
+       { 0, 0, NULL, NULL }
+};
+
+
 struct mtd_info *cfi_cmdset_0002(struct map_info *map, int primary)
 {
        struct cfi_private *cfi = map->fldrv_priv;
-       unsigned char bootloc;
-       int ofs_factor = cfi->interleave * cfi->device_type;
+       struct mtd_info *mtd;
        int i;
-       __u8 major, minor;
-       __u32 base = cfi->chips[0].start;
+
+       mtd = kzalloc(sizeof(*mtd), GFP_KERNEL);
+       if (!mtd) {
+               printk(KERN_WARNING "Failed to allocate memory for MTD device\n");
+               return NULL;
+       }
+       mtd->priv = map;
+       mtd->type = MTD_NORFLASH;
+
+       /* Fill in the default mtd operations */
+       mtd->erase   = cfi_amdstd_erase_varsize;
+       mtd->write   = cfi_amdstd_write_words;
+       mtd->read    = cfi_amdstd_read;
+       mtd->sync    = cfi_amdstd_sync;
+       mtd->suspend = cfi_amdstd_suspend;
+       mtd->resume  = cfi_amdstd_resume;
+       mtd->flags   = MTD_CAP_NORFLASH;
+       mtd->name    = map->name;
+       mtd->writesize = 1;
 
        if (cfi->cfi_mode==CFI_MODE_CFI){
+               unsigned char bootloc;
+               /*
+                * It's a real CFI chip, not one for which the probe
+                * routine faked a CFI structure. So we read the feature
+                * table from it.
+                */
                __u16 adr = primary?cfi->cfiq->P_ADR:cfi->cfiq->A_ADR;
+               struct cfi_pri_amdstd *extp;
 
-               cfi_send_gen_cmd(0x98, 0x55, base, map, cfi, cfi->device_type, NULL);
-               
-               major = cfi_read_query(map, base + (adr+3)*ofs_factor);
-               minor = cfi_read_query(map, base + (adr+4)*ofs_factor);
-               
-               printk(KERN_NOTICE " Amd/Fujitsu Extended Query Table v%c.%c at 0x%4.4X\n",
-                      major, minor, adr);
-                               cfi_send_gen_cmd(0xf0, 0x55, base, map, cfi, cfi->device_type, NULL);
-               
-               cfi_send_gen_cmd(0xaa, 0x555, base, map, cfi, cfi->device_type, NULL);
-               cfi_send_gen_cmd(0x55, 0x2aa, base, map, cfi, cfi->device_type, NULL);
-               cfi_send_gen_cmd(0x90, 0x555, base, map, cfi, cfi->device_type, NULL);
-               /* FIXME - should have a delay before continuing */
-               cfi->mfr = cfi_read_query(map, base);
-               cfi->id = cfi_read_query(map, base + ofs_factor);    
-
-               /* Wheee. Bring me the head of someone at AMD. */
-#ifdef AMD_BOOTLOC_BUG
-               if (((major << 8) | minor) < 0x3131) {
-                       /* CFI version 1.0 => don't trust bootloc */
-                       if (cfi->id & 0x80) {
-                               printk(KERN_WARNING "%s: JEDEC Device ID is 0x%02X. Assuming broken CFI table.\n", map->name, cfi->id);
-                               bootloc = 3;    /* top boot */
-                       } else {
-                               bootloc = 2;    /* bottom boot */
-                       }
-               } else
+               extp = (struct cfi_pri_amdstd*)cfi_read_pri(map, adr, sizeof(*extp), "Amd/Fujitsu");
+               if (!extp) {
+                       kfree(mtd);
+                       return NULL;
+               }
+
+               if (extp->MajorVersion != '1' ||
+                   (extp->MinorVersion < '0' || extp->MinorVersion > '4')) {
+                       printk(KERN_ERR "  Unknown Amd/Fujitsu Extended Query "
+                              "version %c.%c.\n",  extp->MajorVersion,
+                              extp->MinorVersion);
+                       kfree(extp);
+                       kfree(mtd);
+                       return NULL;
+               }
+
+               /* Install our own private info structure */
+               cfi->cmdset_priv = extp;
+
+               /* Apply cfi device specific fixups */
+               cfi_fixup(mtd, cfi_fixup_table);
+
+#ifdef DEBUG_CFI_FEATURES
+               /* Tell the user about it in lots of lovely detail */
+               cfi_tell_features(extp);
 #endif
-                       {
-                               cfi_send_gen_cmd(0x98, 0x55, base, map, cfi, cfi->device_type, NULL);
-                               bootloc = cfi_read_query(map, base + (adr+15)*ofs_factor);
-                       }
+
+               bootloc = extp->TopBottom;
+               if ((bootloc != 2) && (bootloc != 3)) {
+                       printk(KERN_WARNING "%s: CFI does not contain boot "
+                              "bank location. Assuming top.\n", map->name);
+                       bootloc = 2;
+               }
+
                if (bootloc == 3 && cfi->cfiq->NumEraseRegions > 1) {
                        printk(KERN_WARNING "%s: Swapping erase regions for broken CFI table.\n", map->name);
-                       
+
                        for (i=0; i<cfi->cfiq->NumEraseRegions / 2; i++) {
                                int j = (cfi->cfiq->NumEraseRegions-1)-i;
                                __u32 swap;
-                               
+
                                swap = cfi->cfiq->EraseRegionInfo[i];
                                cfi->cfiq->EraseRegionInfo[i] = cfi->cfiq->EraseRegionInfo[j];
                                cfi->cfiq->EraseRegionInfo[j] = swap;
                        }
                }
-               /*
-                * FIXME - These might already be setup (more correctly)
-                * buy jedec_probe.c.
-                */
-               switch (cfi->device_type) {
-               case CFI_DEVICETYPE_X8:
-                       cfi->addr_unlock1 = 0x555; 
-                       cfi->addr_unlock2 = 0x2aa; 
-                       break;
-               case CFI_DEVICETYPE_X16:
+               /* Set the default CFI lock/unlock addresses */
+               cfi->addr_unlock1 = 0x555;
+               cfi->addr_unlock2 = 0x2aa;
+               /* Modify the unlock address if we are in compatibility mode */
+               if (    /* x16 in x8 mode */
+                       ((cfi->device_type == CFI_DEVICETYPE_X8) &&
+                               (cfi->cfiq->InterfaceDesc == 2)) ||
+                       /* x32 in x16 mode */
+                       ((cfi->device_type == CFI_DEVICETYPE_X16) &&
+                               (cfi->cfiq->InterfaceDesc == 4)))
+               {
                        cfi->addr_unlock1 = 0xaaa;
-                       if (map->buswidth == cfi->interleave) {
-                               /* X16 chip(s) in X8 mode */
-                               cfi->addr_unlock2 = 0x555;
-                       } else {
-                               cfi->addr_unlock2 = 0x554;
-                       }
-                       break;
-               case CFI_DEVICETYPE_X32:
-                       cfi->addr_unlock1 = 0x1555; 
-                       cfi->addr_unlock2 = 0xaaa; 
-                       break;
-               default:
-                       printk(KERN_NOTICE "Eep. Unknown cfi_cmdset_0002 device type %d\n", cfi->device_type);
-                       return NULL;
+                       cfi->addr_unlock2 = 0x555;
                }
+
        } /* CFI mode */
+       else if (cfi->cfi_mode == CFI_MODE_JEDEC) {
+               /* Apply jedec specific fixups */
+               cfi_fixup(mtd, jedec_fixup_table);
+       }
+       /* Apply generic fixups */
+       cfi_fixup(mtd, fixup_table);
 
        for (i=0; i< cfi->numchips; i++) {
                cfi->chips[i].word_write_time = 1<<cfi->cfiq->WordWriteTimeoutTyp;
                cfi->chips[i].buffer_write_time = 1<<cfi->cfiq->BufWriteTimeoutTyp;
                cfi->chips[i].erase_time = 1<<cfi->cfiq->BlockEraseTimeoutTyp;
-       }               
-       
+       }
+
        map->fldrv = &cfi_amdstd_chipdrv;
 
-       cfi_send_gen_cmd(0xf0, 0x55, base, map, cfi, cfi->device_type, NULL);
-       return cfi_amdstd_setup(map);
+       return cfi_amdstd_setup(mtd);
 }
+EXPORT_SYMBOL_GPL(cfi_cmdset_0002);
 
-static struct mtd_info *cfi_amdstd_setup(struct map_info *map)
+static struct mtd_info *cfi_amdstd_setup(struct mtd_info *mtd)
 {
+       struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
-       struct mtd_info *mtd;
        unsigned long devsize = (1<<cfi->cfiq->DevSize) * cfi->interleave;
+       unsigned long offset = 0;
+       int i,j;
 
-       mtd = kmalloc(sizeof(*mtd), GFP_KERNEL);
-       printk(KERN_NOTICE "number of %s chips: %d\n", 
-               (cfi->cfi_mode == CFI_MODE_CFI)?"CFI":"JEDEC",cfi->numchips);
+       printk(KERN_NOTICE "number of %s chips: %d\n",
+              (cfi->cfi_mode == CFI_MODE_CFI)?"CFI":"JEDEC",cfi->numchips);
+       /* Select the correct geometry setup */
+       mtd->size = devsize * cfi->numchips;
 
-       if (!mtd) {
-         printk(KERN_WARNING "Failed to allocate memory for MTD device\n");
-         goto setup_err;
+       mtd->numeraseregions = cfi->cfiq->NumEraseRegions * cfi->numchips;
+       mtd->eraseregions = kmalloc(sizeof(struct mtd_erase_region_info)
+                                   * mtd->numeraseregions, GFP_KERNEL);
+       if (!mtd->eraseregions) {
+               printk(KERN_WARNING "Failed to allocate memory for MTD erase region info\n");
+               goto setup_err;
        }
 
-       memset(mtd, 0, sizeof(*mtd));
-       mtd->priv = map;
-       mtd->type = MTD_NORFLASH;
-       /* Also select the correct geometry setup too */ 
-       mtd->size = devsize * cfi->numchips;
-       
-       if (cfi->cfiq->NumEraseRegions == 1) {
-               /* No need to muck about with multiple erase sizes */
-               mtd->erasesize = ((cfi->cfiq->EraseRegionInfo[0] >> 8) & ~0xff) * cfi->interleave;
-       } else {
-               unsigned long offset = 0;
-               int i,j;
-
-               mtd->numeraseregions = cfi->cfiq->NumEraseRegions * cfi->numchips;
-               mtd->eraseregions = kmalloc(sizeof(struct mtd_erase_region_info) * mtd->numeraseregions, GFP_KERNEL);
-               if (!mtd->eraseregions) { 
-                       printk(KERN_WARNING "Failed to allocate memory for MTD erase region info\n");
-                       goto setup_err;
-               }
-                       
-               for (i=0; i<cfi->cfiq->NumEraseRegions; i++) {
-                       unsigned long ernum, ersize;
-                       ersize = ((cfi->cfiq->EraseRegionInfo[i] >> 8) & ~0xff) * cfi->interleave;
-                       ernum = (cfi->cfiq->EraseRegionInfo[i] & 0xffff) + 1;
-                       
-                       if (mtd->erasesize < ersize) {
-                               mtd->erasesize = ersize;
-                       }
-                       for (j=0; j<cfi->numchips; j++) {
-                               mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].offset = (j*devsize)+offset;
-                               mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].erasesize = ersize;
-                               mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].numblocks = ernum;
-                       }
-                       offset += (ersize * ernum);
-               }
-               if (offset != devsize) {
-                       /* Argh */
-                       printk(KERN_WARNING "Sum of regions (%lx) != total size of set of interleaved chips (%lx)\n", offset, devsize);
-                       goto setup_err;
+       for (i=0; i<cfi->cfiq->NumEraseRegions; i++) {
+               unsigned long ernum, ersize;
+               ersize = ((cfi->cfiq->EraseRegionInfo[i] >> 8) & ~0xff) * cfi->interleave;
+               ernum = (cfi->cfiq->EraseRegionInfo[i] & 0xffff) + 1;
+
+               if (mtd->erasesize < ersize) {
+                       mtd->erasesize = ersize;
                }
-#if 0
-               // debug
-               for (i=0; i<mtd->numeraseregions;i++){
-                       printk("%d: offset=0x%x,size=0x%x,blocks=%d\n",
-                              i,mtd->eraseregions[i].offset,
-                              mtd->eraseregions[i].erasesize,
-                              mtd->eraseregions[i].numblocks);
+               for (j=0; j<cfi->numchips; j++) {
+                       mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].offset = (j*devsize)+offset;
+                       mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].erasesize = ersize;
+                       mtd->eraseregions[(j*cfi->cfiq->NumEraseRegions)+i].numblocks = ernum;
                }
-#endif
+               offset += (ersize * ernum);
        }
-
-       switch (CFIDEV_BUSWIDTH)
-       {
-       case 1:
-       case 2:
-       case 4:
-#if 1
-               if (mtd->numeraseregions > 1)
-                       mtd->erase = cfi_amdstd_erase_varsize;
-               else
-#endif
-               if (((cfi->cfiq->EraseRegionInfo[0] & 0xffff) + 1) == 1)
-                       mtd->erase = cfi_amdstd_erase_chip;
-               else
-                       mtd->erase = cfi_amdstd_erase_onesize;
-               mtd->read = cfi_amdstd_read;
-               mtd->write = cfi_amdstd_write;
-               break;
-
-       default:
-               printk(KERN_WARNING "Unsupported buswidth\n");
+       if (offset != devsize) {
+               /* Argh */
+               printk(KERN_WARNING "Sum of regions (%lx) != total size of set of interleaved chips (%lx)\n", offset, devsize);
                goto setup_err;
-               break;
        }
-       if (cfi->fast_prog) {
-               /* In cfi_amdstd_write() we frob the protection stuff
-                  without paying any attention to the state machine.
-                  This upsets in-progress erases. So we turn this flag
-                  off for now till the code gets fixed. */
-               printk(KERN_NOTICE "cfi_cmdset_0002: Disabling fast programming due to code brokenness.\n");
-               cfi->fast_prog = 0;
+#if 0
+       // debug
+       for (i=0; i<mtd->numeraseregions;i++){
+               printk("%d: offset=0x%x,size=0x%x,blocks=%d\n",
+                      i,mtd->eraseregions[i].offset,
+                      mtd->eraseregions[i].erasesize,
+                      mtd->eraseregions[i].numblocks);
        }
+#endif
 
+       /* FIXME: erase-suspend-program is broken.  See
+          http://lists.infradead.org/pipermail/linux-mtd/2003-December/009001.html */
+       printk(KERN_NOTICE "cfi_cmdset_0002: Disabling erase-suspend-program due to code brokenness.\n");
 
-        /* does this chip have a secsi area? */
-       if(cfi->mfr==1){
-               
-               switch(cfi->id){
-               case 0x50:
-               case 0x53:
-               case 0x55:
-               case 0x56:
-               case 0x5C:
-               case 0x5F:
-                       /* Yes */
-                       mtd->read_user_prot_reg = cfi_amdstd_secsi_read;
-                       mtd->read_fact_prot_reg = cfi_amdstd_secsi_read;
-               default:                       
-                       ;
-               }
-       }
-       
-               
-       mtd->sync = cfi_amdstd_sync;
-       mtd->suspend = cfi_amdstd_suspend;
-       mtd->resume = cfi_amdstd_resume;
-       mtd->flags = MTD_CAP_NORFLASH;
-       map->fldrv = &cfi_amdstd_chipdrv;
-       mtd->name = map->name;
        __module_get(THIS_MODULE);
        return mtd;
 
  setup_err:
        if(mtd) {
-               if(mtd->eraseregions)
-                       kfree(mtd->eraseregions);
+               kfree(mtd->eraseregions);
                kfree(mtd);
        }
        kfree(cfi->cmdset_priv);
@@ -289,46 +435,415 @@ static struct mtd_info *cfi_amdstd_setup(struct map_info *map)
        return NULL;
 }
 
-static inline int do_read_onechip(struct map_info *map, struct flchip *chip, loff_t adr, size_t len, u_char *buf)
+/*
+ * Return true if the chip is ready.
+ *
+ * Ready is one of: read mode, query mode, erase-suspend-read mode (in any
+ * non-suspended sector) and is indicated by no toggle bits toggling.
+ *
+ * Note that anything more complicated than checking if no bits are toggling
+ * (including checking DQ5 for an error status) is tricky to get working
+ * correctly and is therefore not done (particulary with interleaved chips
+ * as each chip must be checked independantly of the others).
+ */
+static int __xipram chip_ready(struct map_info *map, unsigned long addr)
+{
+       map_word d, t;
+
+       d = map_read(map, addr);
+       t = map_read(map, addr);
+
+       return map_word_equal(map, d, t);
+}
+
+/*
+ * Return true if the chip is ready and has the correct value.
+ *
+ * Ready is one of: read mode, query mode, erase-suspend-read mode (in any
+ * non-suspended sector) and it is indicated by no bits toggling.
+ *
+ * Error are indicated by toggling bits or bits held with the wrong value,
+ * or with bits toggling.
+ *
+ * Note that anything more complicated than checking if no bits are toggling
+ * (including checking DQ5 for an error status) is tricky to get working
+ * correctly and is therefore not done (particulary with interleaved chips
+ * as each chip must be checked independantly of the others).
+ *
+ */
+static int __xipram chip_good(struct map_info *map, unsigned long addr, map_word expected)
+{
+       map_word oldd, curd;
+
+       oldd = map_read(map, addr);
+       curd = map_read(map, addr);
+
+       return  map_word_equal(map, oldd, curd) &&
+               map_word_equal(map, curd, expected);
+}
+
+static int get_chip(struct map_info *map, struct flchip *chip, unsigned long adr, int mode)
 {
        DECLARE_WAITQUEUE(wait, current);
-       unsigned long timeo = jiffies + HZ;
+       struct cfi_private *cfi = map->fldrv_priv;
+       unsigned long timeo;
+       struct cfi_pri_amdstd *cfip = (struct cfi_pri_amdstd *)cfi->cmdset_priv;
 
+ resettime:
+       timeo = jiffies + HZ;
  retry:
-       cfi_spin_lock(chip->mutex);
+       switch (chip->state) {
 
-       if (chip->state != FL_READY){
-#if 0
-               printk(KERN_DEBUG "Waiting for chip to read, status = %d\n", chip->state);
-#endif
+       case FL_STATUS:
+               for (;;) {
+                       if (chip_ready(map, adr))
+                               break;
+
+                       if (time_after(jiffies, timeo)) {
+                               printk(KERN_ERR "Waiting for chip to be ready timed out.\n");
+                               spin_unlock(chip->mutex);
+                               return -EIO;
+                       }
+                       spin_unlock(chip->mutex);
+                       cfi_udelay(1);
+                       spin_lock(chip->mutex);
+                       /* Someone else might have been playing with it. */
+                       goto retry;
+               }
+
+       case FL_READY:
+       case FL_CFI_QUERY:
+       case FL_JEDEC_QUERY:
+               return 0;
+
+       case FL_ERASING:
+               if (mode == FL_WRITING) /* FIXME: Erase-suspend-program appears broken. */
+                       goto sleep;
+
+               if (!(   mode == FL_READY
+                     || mode == FL_POINT
+                     || !cfip
+                     || (mode == FL_WRITING && (cfip->EraseSuspend & 0x2))
+                     || (mode == FL_WRITING && (cfip->EraseSuspend & 0x1)
+                   )))
+                       goto sleep;
+
+               /* We could check to see if we're trying to access the sector
+                * that is currently being erased. However, no user will try
+                * anything like that so we just wait for the timeout. */
+
+               /* Erase suspend */
+               /* It's harmless to issue the Erase-Suspend and Erase-Resume
+                * commands when the erase algorithm isn't in progress. */
+               map_write(map, CMD(0xB0), chip->in_progress_block_addr);
+               chip->oldstate = FL_ERASING;
+               chip->state = FL_ERASE_SUSPENDING;
+               chip->erase_suspended = 1;
+               for (;;) {
+                       if (chip_ready(map, adr))
+                               break;
+
+                       if (time_after(jiffies, timeo)) {
+                               /* Should have suspended the erase by now.
+                                * Send an Erase-Resume command as either
+                                * there was an error (so leave the erase
+                                * routine to recover from it) or we trying to
+                                * use the erase-in-progress sector. */
+                               map_write(map, CMD(0x30), chip->in_progress_block_addr);
+                               chip->state = FL_ERASING;
+                               chip->oldstate = FL_READY;
+                               printk(KERN_ERR "MTD %s(): chip not ready after erase suspend\n", __func__);
+                               return -EIO;
+                       }
+
+                       spin_unlock(chip->mutex);
+                       cfi_udelay(1);
+                       spin_lock(chip->mutex);
+                       /* Nobody will touch it while it's in state FL_ERASE_SUSPENDING.
+                          So we can just loop here. */
+               }
+               chip->state = FL_READY;
+               return 0;
+
+       case FL_XIP_WHILE_ERASING:
+               if (mode != FL_READY && mode != FL_POINT &&
+                   (!cfip || !(cfip->EraseSuspend&2)))
+                       goto sleep;
+               chip->oldstate = chip->state;
+               chip->state = FL_READY;
+               return 0;
+
+       case FL_POINT:
+               /* Only if there's no operation suspended... */
+               if (mode == FL_READY && chip->oldstate == FL_READY)
+                       return 0;
+
+       default:
+       sleep:
                set_current_state(TASK_UNINTERRUPTIBLE);
                add_wait_queue(&chip->wq, &wait);
-                
-               cfi_spin_unlock(chip->mutex);
-
+               spin_unlock(chip->mutex);
                schedule();
                remove_wait_queue(&chip->wq, &wait);
-#if 0
-               if(signal_pending(current))
-                       return -EINTR;
+               spin_lock(chip->mutex);
+               goto resettime;
+       }
+}
+
+
+static void put_chip(struct map_info *map, struct flchip *chip, unsigned long adr)
+{
+       struct cfi_private *cfi = map->fldrv_priv;
+
+       switch(chip->oldstate) {
+       case FL_ERASING:
+               chip->state = chip->oldstate;
+               map_write(map, CMD(0x30), chip->in_progress_block_addr);
+               chip->oldstate = FL_READY;
+               chip->state = FL_ERASING;
+               break;
+
+       case FL_XIP_WHILE_ERASING:
+               chip->state = chip->oldstate;
+               chip->oldstate = FL_READY;
+               break;
+
+       case FL_READY:
+       case FL_STATUS:
+               /* We should really make set_vpp() count, rather than doing this */
+               DISABLE_VPP(map);
+               break;
+       default:
+               printk(KERN_ERR "MTD: put_chip() called with oldstate %d!!\n", chip->oldstate);
+       }
+       wake_up(&chip->wq);
+}
+
+#ifdef CONFIG_MTD_XIP
+
+/*
+ * No interrupt what so ever can be serviced while the flash isn't in array
+ * mode.  This is ensured by the xip_disable() and xip_enable() functions
+ * enclosing any code path where the flash is known not to be in array mode.
+ * And within a XIP disabled code path, only functions marked with __xipram
+ * may be called and nothing else (it's a good thing to inspect generated
+ * assembly to make sure inline functions were actually inlined and that gcc
+ * didn't emit calls to its own support functions). Also configuring MTD CFI
+ * support to a single buswidth and a single interleave is also recommended.
+ */
+
+static void xip_disable(struct map_info *map, struct flchip *chip,
+                       unsigned long adr)
+{
+       /* TODO: chips with no XIP use should ignore and return */
+       (void) map_read(map, adr); /* ensure mmu mapping is up to date */
+       local_irq_disable();
+}
+
+static void __xipram xip_enable(struct map_info *map, struct flchip *chip,
+                               unsigned long adr)
+{
+       struct cfi_private *cfi = map->fldrv_priv;
+
+       if (chip->state != FL_POINT && chip->state != FL_READY) {
+               map_write(map, CMD(0xf0), adr);
+               chip->state = FL_READY;
+       }
+       (void) map_read(map, adr);
+       xip_iprefetch();
+       local_irq_enable();
+}
+
+/*
+ * When a delay is required for the flash operation to complete, the
+ * xip_udelay() function is polling for both the given timeout and pending
+ * (but still masked) hardware interrupts.  Whenever there is an interrupt
+ * pending then the flash erase operation is suspended, array mode restored
+ * and interrupts unmasked.  Task scheduling might also happen at that
+ * point.  The CPU eventually returns from the interrupt or the call to
+ * schedule() and the suspended flash operation is resumed for the remaining
+ * of the delay period.
+ *
+ * Warning: this function _will_ fool interrupt latency tracing tools.
+ */
+
+static void __xipram xip_udelay(struct map_info *map, struct flchip *chip,
+                               unsigned long adr, int usec)
+{
+       struct cfi_private *cfi = map->fldrv_priv;
+       struct cfi_pri_amdstd *extp = cfi->cmdset_priv;
+       map_word status, OK = CMD(0x80);
+       unsigned long suspended, start = xip_currtime();
+       flstate_t oldstate;
+
+       do {
+               cpu_relax();
+               if (xip_irqpending() && extp &&
+                   ((chip->state == FL_ERASING && (extp->EraseSuspend & 2))) &&
+                   (cfi_interleave_is_1(cfi) || chip->oldstate == FL_READY)) {
+                       /*
+                        * Let's suspend the erase operation when supported.
+                        * Note that we currently don't try to suspend
+                        * interleaved chips if there is already another
+                        * operation suspended (imagine what happens
+                        * when one chip was already done with the current
+                        * operation while another chip suspended it, then
+                        * we resume the whole thing at once).  Yes, it
+                        * can happen!
+                        */
+                       map_write(map, CMD(0xb0), adr);
+                       usec -= xip_elapsed_since(start);
+                       suspended = xip_currtime();
+                       do {
+                               if (xip_elapsed_since(suspended) > 100000) {
+                                       /*
+                                        * The chip doesn't want to suspend
+                                        * after waiting for 100 msecs.
+                                        * This is a critical error but there
+                                        * is not much we can do here.
+                                        */
+                                       return;
+                               }
+                               status = map_read(map, adr);
+                       } while (!map_word_andequal(map, status, OK, OK));
+
+                       /* Suspend succeeded */
+                       oldstate = chip->state;
+                       if (!map_word_bitsset(map, status, CMD(0x40)))
+                               break;
+                       chip->state = FL_XIP_WHILE_ERASING;
+                       chip->erase_suspended = 1;
+                       map_write(map, CMD(0xf0), adr);
+                       (void) map_read(map, adr);
+                       asm volatile (".rep 8; nop; .endr");
+                       local_irq_enable();
+                       spin_unlock(chip->mutex);
+                       asm volatile (".rep 8; nop; .endr");
+                       cond_resched();
+
+                       /*
+                        * We're back.  However someone else might have
+                        * decided to go write to the chip if we are in
+                        * a suspended erase state.  If so let's wait
+                        * until it's done.
+                        */
+                       spin_lock(chip->mutex);
+                       while (chip->state != FL_XIP_WHILE_ERASING) {
+                               DECLARE_WAITQUEUE(wait, current);
+                               set_current_state(TASK_UNINTERRUPTIBLE);
+                               add_wait_queue(&chip->wq, &wait);
+                               spin_unlock(chip->mutex);
+                               schedule();
+                               remove_wait_queue(&chip->wq, &wait);
+                               spin_lock(chip->mutex);
+                       }
+                       /* Disallow XIP again */
+                       local_irq_disable();
+
+                       /* Resume the write or erase operation */
+                       map_write(map, CMD(0x30), adr);
+                       chip->state = oldstate;
+                       start = xip_currtime();
+               } else if (usec >= 1000000/HZ) {
+                       /*
+                        * Try to save on CPU power when waiting delay
+                        * is at least a system timer tick period.
+                        * No need to be extremely accurate here.
+                        */
+                       xip_cpu_idle();
+               }
+               status = map_read(map, adr);
+       } while (!map_word_andequal(map, status, OK, OK)
+                && xip_elapsed_since(start) < usec);
+}
+
+#define UDELAY(map, chip, adr, usec)  xip_udelay(map, chip, adr, usec)
+
+/*
+ * The INVALIDATE_CACHED_RANGE() macro is normally used in parallel while
+ * the flash is actively programming or erasing since we have to poll for
+ * the operation to complete anyway.  We can't do that in a generic way with
+ * a XIP setup so do it before the actual flash operation in this case
+ * and stub it out from INVALIDATE_CACHE_UDELAY.
+ */
+#define XIP_INVAL_CACHED_RANGE(map, from, size)  \
+       INVALIDATE_CACHED_RANGE(map, from, size)
+
+#define INVALIDATE_CACHE_UDELAY(map, chip, adr, len, usec)  \
+       UDELAY(map, chip, adr, usec)
+
+/*
+ * Extra notes:
+ *
+ * Activating this XIP support changes the way the code works a bit.  For
+ * example the code to suspend the current process when concurrent access
+ * happens is never executed because xip_udelay() will always return with the
+ * same chip state as it was entered with.  This is why there is no care for
+ * the presence of add_wait_queue() or schedule() calls from within a couple
+ * xip_disable()'d  areas of code, like in do_erase_oneblock for example.
+ * The queueing and scheduling are always happening within xip_udelay().
+ *
+ * Similarly, get_chip() and put_chip() just happen to always be executed
+ * with chip->state set to FL_READY (or FL_XIP_WHILE_*) where flash state
+ * is in array mode, therefore never executing many cases therein and not
+ * causing any problem with XIP.
+ */
+
+#else
+
+#define xip_disable(map, chip, adr)
+#define xip_enable(map, chip, adr)
+#define XIP_INVAL_CACHED_RANGE(x...)
+
+#define UDELAY(map, chip, adr, usec)  \
+do {  \
+       spin_unlock(chip->mutex);  \
+       cfi_udelay(usec);  \
+       spin_lock(chip->mutex);  \
+} while (0)
+
+#define INVALIDATE_CACHE_UDELAY(map, chip, adr, len, usec)  \
+do {  \
+       spin_unlock(chip->mutex);  \
+       INVALIDATE_CACHED_RANGE(map, adr, len);  \
+       cfi_udelay(usec);  \
+       spin_lock(chip->mutex);  \
+} while (0)
+
 #endif
-               timeo = jiffies + HZ;
 
-               goto retry;
-       }       
+static inline int do_read_onechip(struct map_info *map, struct flchip *chip, loff_t adr, size_t len, u_char *buf)
+{
+       unsigned long cmd_addr;
+       struct cfi_private *cfi = map->fldrv_priv;
+       int ret;
 
        adr += chip->start;
 
-       chip->state = FL_READY;
+       /* Ensure cmd read/writes are aligned. */
+       cmd_addr = adr & ~(map_bankwidth(map)-1);
+
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, cmd_addr, FL_READY);
+       if (ret) {
+               spin_unlock(chip->mutex);
+               return ret;
+       }
+
+       if (chip->state != FL_POINT && chip->state != FL_READY) {
+               map_write(map, CMD(0xf0), cmd_addr);
+               chip->state = FL_READY;
+       }
 
        map_copy_from(map, buf, adr, len);
 
-       wake_up(&chip->wq);
-       cfi_spin_unlock(chip->mutex);
+       put_chip(map, chip, cmd_addr);
 
+       spin_unlock(chip->mutex);
        return 0;
 }
 
+
 static int cfi_amdstd_read (struct mtd_info *mtd, loff_t from, size_t len, size_t *retlen, u_char *buf)
 {
        struct map_info *map = mtd->priv;
@@ -370,6 +885,7 @@ static int cfi_amdstd_read (struct mtd_info *mtd, loff_t from, size_t len, size_
        return ret;
 }
 
+
 static inline int do_read_secsi_onechip(struct map_info *map, struct flchip *chip, loff_t adr, size_t len, u_char *buf)
 {
        DECLARE_WAITQUEUE(wait, current);
@@ -377,16 +893,16 @@ static inline int do_read_secsi_onechip(struct map_info *map, struct flchip *chi
        struct cfi_private *cfi = map->fldrv_priv;
 
  retry:
-       cfi_spin_lock(chip->mutex);
+       spin_lock(chip->mutex);
 
        if (chip->state != FL_READY){
 #if 0
-               printk(KERN_DEBUG "Waiting for chip to read, status = %d\n", chip->state);
+               printk(KERN_DEBUG "Waiting for chip to read, status = %d\n", chip->state);
 #endif
                set_current_state(TASK_UNINTERRUPTIBLE);
                add_wait_queue(&chip->wq, &wait);
-                
-               cfi_spin_unlock(chip->mutex);
+
+               spin_unlock(chip->mutex);
 
                schedule();
                remove_wait_queue(&chip->wq, &wait);
@@ -397,25 +913,25 @@ static inline int do_read_secsi_onechip(struct map_info *map, struct flchip *chi
                timeo = jiffies + HZ;
 
                goto retry;
-       }       
+       }
 
        adr += chip->start;
 
        chip->state = FL_READY;
-       
+
        cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
        cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
        cfi_send_gen_cmd(0x88, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
-       
+
        map_copy_from(map, buf, adr, len);
 
        cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
        cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
        cfi_send_gen_cmd(0x90, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
        cfi_send_gen_cmd(0x00, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
-       
+
        wake_up(&chip->wq);
-       cfi_spin_unlock(chip->mutex);
+       spin_unlock(chip->mutex);
 
        return 0;
 }
@@ -463,215 +979,381 @@ static int cfi_amdstd_secsi_read (struct mtd_info *mtd, loff_t from, size_t len,
        return ret;
 }
 
-static int do_write_oneword(struct map_info *map, struct flchip *chip, unsigned long adr, cfi_word datum, int fast)
+
+static int __xipram do_write_oneword(struct map_info *map, struct flchip *chip, unsigned long adr, map_word datum)
 {
+       struct cfi_private *cfi = map->fldrv_priv;
        unsigned long timeo = jiffies + HZ;
-       unsigned int oldstatus, status, prev_oldstatus, prev_status;
-       unsigned int dq6;
+       /*
+        * We use a 1ms + 1 jiffies generic timeout for writes (most devices
+        * have a max write time of a few hundreds usec). However, we should
+        * use the maximum timeout value given by the chip at probe time
+        * instead.  Unfortunately, struct flchip does have a field for
+        * maximum timeout, only for typical which can be far too short
+        * depending of the conditions.  The ' + 1' is to avoid having a
+        * timeout of 0 jiffies if HZ is smaller than 1000.
+        */
+       unsigned long uWriteTimeout = ( HZ / 1000 ) + 1;
+       int ret = 0;
+       map_word oldd;
+       int retry_cnt = 0;
+
+       adr += chip->start;
+
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr, FL_WRITING);
+       if (ret) {
+               spin_unlock(chip->mutex);
+               return ret;
+       }
+
+       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): WRITE 0x%.8lx(0x%.8lx)\n",
+              __func__, adr, datum.x[0] );
+
+       /*
+        * Check for a NOP for the case when the datum to write is already
+        * present - it saves time and works around buggy chips that corrupt
+        * data at other locations when 0xff is written to a location that
+        * already contains 0xff.
+        */
+       oldd = map_read(map, adr);
+       if (map_word_equal(map, oldd, datum)) {
+               DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): NOP\n",
+                      __func__);
+               goto op_done;
+       }
+
+       XIP_INVAL_CACHED_RANGE(map, adr, map_bankwidth(map));
+       ENABLE_VPP(map);
+       xip_disable(map, chip, adr);
+ retry:
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0xA0, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       map_write(map, datum, adr);
+       chip->state = FL_WRITING;
+
+       INVALIDATE_CACHE_UDELAY(map, chip,
+                               adr, map_bankwidth(map),
+                               chip->word_write_time);
+
+       /* See comment above for timeout value. */
+       timeo = jiffies + uWriteTimeout;
+       for (;;) {
+               if (chip->state != FL_WRITING) {
+                       /* Someone's suspended the write. Sleep */
+                       DECLARE_WAITQUEUE(wait, current);
+
+                       set_current_state(TASK_UNINTERRUPTIBLE);
+                       add_wait_queue(&chip->wq, &wait);
+                       spin_unlock(chip->mutex);
+                       schedule();
+                       remove_wait_queue(&chip->wq, &wait);
+                       timeo = jiffies + (HZ / 2); /* FIXME */
+                       spin_lock(chip->mutex);
+                       continue;
+               }
+
+               if (time_after(jiffies, timeo) && !chip_ready(map, adr)){
+                       xip_enable(map, chip, adr);
+                       printk(KERN_WARNING "MTD %s(): software timeout\n", __func__);
+                       xip_disable(map, chip, adr);
+                       break;
+               }
+
+               if (chip_ready(map, adr))
+                       break;
+
+               /* Latency issues. Drop the lock, wait a while and retry */
+               UDELAY(map, chip, adr, 1);
+       }
+       /* Did we succeed? */
+       if (!chip_good(map, adr, datum)) {
+               /* reset on all failures. */
+               map_write( map, CMD(0xF0), chip->start );
+               /* FIXME - should have reset delay before continuing */
+
+               if (++retry_cnt <= MAX_WORD_RETRIES)
+                       goto retry;
+
+               ret = -EIO;
+       }
+       xip_enable(map, chip, adr);
+ op_done:
+       chip->state = FL_READY;
+       put_chip(map, chip, adr);
+       spin_unlock(chip->mutex);
+
+       return ret;
+}
+
+
+static int cfi_amdstd_write_words(struct mtd_info *mtd, loff_t to, size_t len,
+                                 size_t *retlen, const u_char *buf)
+{
+       struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
-    /* We use a 1ms + 1 jiffies generic timeout for writes (most devices have
-       a max write time of a few hundreds usec). However, we should use the
-       maximum timeout value given by the chip at probe time instead. 
-       Unfortunately, struct flchip does have a field for maximum timeout, 
-       only for typical which can be far too short depending of the conditions.
-       The ' + 1' is to avoid having a timeout of 0 jiffies if HZ is smaller
-       than 1000. Using a static variable allows makes us save the costly
-       divide operation at each word write.*/ 
-    static unsigned long uWriteTimeout = ( HZ / 1000 ) + 1;
-       DECLARE_WAITQUEUE(wait, current);
        int ret = 0;
-       int ta = 0;
+       int chipnum;
+       unsigned long ofs, chipstart;
+       DECLARE_WAITQUEUE(wait, current);
+
+       *retlen = 0;
+       if (!len)
+               return 0;
+
+       chipnum = to >> cfi->chipshift;
+       ofs = to  - (chipnum << cfi->chipshift);
+       chipstart = cfi->chips[chipnum].start;
+
+       /* If it's not bus-aligned, do the first byte write */
+       if (ofs & (map_bankwidth(map)-1)) {
+               unsigned long bus_ofs = ofs & ~(map_bankwidth(map)-1);
+               int i = ofs - bus_ofs;
+               int n = 0;
+               map_word tmp_buf;
 
  retry:
-       cfi_spin_lock(chip->mutex);
+               spin_lock(cfi->chips[chipnum].mutex);
 
-       if (chip->state != FL_READY) {
+               if (cfi->chips[chipnum].state != FL_READY) {
 #if 0
-               printk(KERN_DEBUG "Waiting for chip to write, status = %d\n", chip->state);
+                       printk(KERN_DEBUG "Waiting for chip to write, status = %d\n", cfi->chips[chipnum].state);
 #endif
-               set_current_state(TASK_UNINTERRUPTIBLE);
-               add_wait_queue(&chip->wq, &wait);
-                
-               cfi_spin_unlock(chip->mutex);
+                       set_current_state(TASK_UNINTERRUPTIBLE);
+                       add_wait_queue(&cfi->chips[chipnum].wq, &wait);
 
-               schedule();
-               remove_wait_queue(&chip->wq, &wait);
+                       spin_unlock(cfi->chips[chipnum].mutex);
+
+                       schedule();
+                       remove_wait_queue(&cfi->chips[chipnum].wq, &wait);
 #if 0
-               printk(KERN_DEBUG "Wake up to write:\n");
-               if(signal_pending(current))
-                       return -EINTR;
+                       if(signal_pending(current))
+                               return -EINTR;
 #endif
-               timeo = jiffies + HZ;
+                       goto retry;
+               }
 
-               goto retry;
-       }       
+               /* Load 'tmp_buf' with old contents of flash */
+               tmp_buf = map_read(map, bus_ofs+chipstart);
 
-       chip->state = FL_WRITING;
+               spin_unlock(cfi->chips[chipnum].mutex);
 
-       adr += chip->start;
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): WRITE 0x%.8lx(0x%.8x)\n",
-              __func__, adr, datum );
+               /* Number of bytes to copy from buffer */
+               n = min_t(int, len, map_bankwidth(map)-i);
 
-       ENABLE_VPP(map);
-       if (fast) { /* Unlock bypass */
-               cfi_send_gen_cmd(0xA0, 0, chip->start, map, cfi, cfi->device_type, NULL);
+               tmp_buf = map_word_load_partial(map, tmp_buf, buf, i, n);
+
+               ret = do_write_oneword(map, &cfi->chips[chipnum],
+                                      bus_ofs, tmp_buf);
+               if (ret)
+                       return ret;
+
+               ofs += n;
+               buf += n;
+               (*retlen) += n;
+               len -= n;
+
+               if (ofs >> cfi->chipshift) {
+                       chipnum ++;
+                       ofs = 0;
+                       if (chipnum == cfi->numchips)
+                               return 0;
+               }
        }
-       else {
-               cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-               cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-               cfi_send_gen_cmd(0xA0, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
+
+       /* We are now aligned, write as much as possible */
+       while(len >= map_bankwidth(map)) {
+               map_word datum;
+
+               datum = map_word_load(map, buf);
+
+               ret = do_write_oneword(map, &cfi->chips[chipnum],
+                                      ofs, datum);
+               if (ret)
+                       return ret;
+
+               ofs += map_bankwidth(map);
+               buf += map_bankwidth(map);
+               (*retlen) += map_bankwidth(map);
+               len -= map_bankwidth(map);
+
+               if (ofs >> cfi->chipshift) {
+                       chipnum ++;
+                       ofs = 0;
+                       if (chipnum == cfi->numchips)
+                               return 0;
+                       chipstart = cfi->chips[chipnum].start;
+               }
        }
-       cfi_write(map, datum, adr);
 
-       cfi_spin_unlock(chip->mutex);
-       cfi_udelay(chip->word_write_time);
-       cfi_spin_lock(chip->mutex);
+       /* Write the trailing bytes if any */
+       if (len & (map_bankwidth(map)-1)) {
+               map_word tmp_buf;
 
-       /*
-        * Polling toggle bits instead of reading back many times
-        * This ensures that write operation is really completed,
-        * or tells us why it failed.
-        *
-        * It appears tha the polling and decoding of error state might
-        * be simplified.  Don't do it unless you really know what you
-        * are doing.  You must remember that JESD21-C 3.5.3 states that
-        * the status must be read back an _additional_ two times before
-        * a failure is determined.  This is because these devices have
-        * internal state machines that are asynchronous to the external
-        * data bus.  During an erase or write the read-back status of the
-        * polling bits might be transitioning internaly when the external
-        * read-back occurs.  This means that the bits aren't in the final
-        * state and they might appear to report an error as they transition
-        * and are in a weird state.  This will produce infrequent errors
-        * that will usually disappear the next time an erase or write
-        * happens (Try tracking those errors down!).  To ensure that
-        * the bits are not in transition the location must be read-back
-        * two more times and compared against what was written - BOTH reads
-        * MUST match what was written - don't think this can be simplified
-        * to only the last read matching.  If the comparison fails, error
-        * state can then be decoded.
-        *
-        * - Thayne Harbaugh
-        */
-       dq6 = CMD(1<<6);
-       /* See comment above for timeout value. */
-       timeo = jiffies + uWriteTimeout; 
-               
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
+ retry1:
+               spin_lock(cfi->chips[chipnum].mutex);
 
-       /*
-        * This only checks if dq6 is still toggling and that our
-        * timer hasn't expired.  We purposefully ignore the chips
-        * internal timer that will assert dq5 and leave dq6 toggling.
-        * This is done for a variety of reasons:
-        * 1) Not all chips support dq5.
-        * 2) Dealing with asynchronous status bit and data updates
-        *    and reading a device two more times creates _messy_
-        *    logic when trying to deal with interleaved devices -
-        *    some may be changing while others are still busy.
-        * 3) Checking dq5 only helps to optimize an error case that
-        *    should at worst be infrequent and at best non-existent.
-        *
-        * If our timeout occurs _then_ we will check dq5 to see
-        * if the device also had an internal timeout.
-        */
-       while( ( ( status ^ oldstatus ) & dq6 )
-              && ! ( ta = time_after(jiffies, timeo) ) ) {
-
-               if (need_resched()) {
-                       cfi_spin_unlock(chip->mutex);
-                       yield();
-                       cfi_spin_lock(chip->mutex);
-               } else 
-                       udelay(1);
-
-               oldstatus = cfi_read( map, adr );
-               status = cfi_read( map, adr );
-               DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-                      __func__, oldstatus, status );
+               if (cfi->chips[chipnum].state != FL_READY) {
+#if 0
+                       printk(KERN_DEBUG "Waiting for chip to write, status = %d\n", cfi->chips[chipnum].state);
+#endif
+                       set_current_state(TASK_UNINTERRUPTIBLE);
+                       add_wait_queue(&cfi->chips[chipnum].wq, &wait);
+
+                       spin_unlock(cfi->chips[chipnum].mutex);
+
+                       schedule();
+                       remove_wait_queue(&cfi->chips[chipnum].wq, &wait);
+#if 0
+                       if(signal_pending(current))
+                               return -EINTR;
+#endif
+                       goto retry1;
+               }
+
+               tmp_buf = map_read(map, ofs + chipstart);
+
+               spin_unlock(cfi->chips[chipnum].mutex);
+
+               tmp_buf = map_word_load_partial(map, tmp_buf, buf, 0, len);
+
+               ret = do_write_oneword(map, &cfi->chips[chipnum],
+                               ofs, tmp_buf);
+               if (ret)
+                       return ret;
+
+               (*retlen) += len;
        }
 
-       /*
-        * Something kicked us out of the read-back loop.  We'll
-        * check success befor checking failure.
-        * Even though dq6 might be true data, it is unkown if
-        * all of the other bits have changed to true data due to
-        * the asynchronous nature of the internal state machine.
-        * We will read two more times and use this to either
-        * verify that the write completed successfully or
-        * that something really went wrong.  BOTH reads
-        * must match what was written - this certifies that
-        * bits aren't still changing  and that the status
-        * bits erroneously match the datum that was written.
-        */
-       prev_oldstatus = oldstatus;
-       prev_status = status;
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
-
-       if ( oldstatus == datum && status == datum ) {
-               /* success - do nothing */
-               goto write_done;
+       return 0;
+}
+
+
+/*
+ * FIXME: interleaved mode not tested, and probably not supported!
+ */
+static int __xipram do_write_buffer(struct map_info *map, struct flchip *chip,
+                                   unsigned long adr, const u_char *buf,
+                                   int len)
+{
+       struct cfi_private *cfi = map->fldrv_priv;
+       unsigned long timeo = jiffies + HZ;
+       /* see comments in do_write_oneword() regarding uWriteTimeo. */
+       unsigned long uWriteTimeout = ( HZ / 1000 ) + 1;
+       int ret = -EIO;
+       unsigned long cmd_adr;
+       int z, words;
+       map_word datum;
+
+       adr += chip->start;
+       cmd_adr = adr;
+
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr, FL_WRITING);
+       if (ret) {
+               spin_unlock(chip->mutex);
+               return ret;
        }
 
-       if ( ta ) {
-               int dq5mask = ( ( status ^ oldstatus ) & dq6 ) >> 1;
-               if ( status & dq5mask ) {
-                       /* dq5 asserted - decode interleave chips */
-                       printk( KERN_WARNING
-                               "MTD %s(): FLASH internal timeout: 0x%.8x\n",
-                               __func__,
-                               status & dq5mask );
-               } else {
-                       printk( KERN_WARNING
-                               "MTD %s(): Software timed out during write.\n",
-                               __func__ );
-               }
-               goto write_failed;
+       datum = map_word_load(map, buf);
+
+       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): WRITE 0x%.8lx(0x%.8lx)\n",
+              __func__, adr, datum.x[0] );
+
+       XIP_INVAL_CACHED_RANGE(map, adr, len);
+       ENABLE_VPP(map);
+       xip_disable(map, chip, cmd_adr);
+
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       //cfi_send_gen_cmd(0xA0, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+
+       /* Write Buffer Load */
+       map_write(map, CMD(0x25), cmd_adr);
+
+       chip->state = FL_WRITING_TO_BUFFER;
+
+       /* Write length of data to come */
+       words = len / map_bankwidth(map);
+       map_write(map, CMD(words - 1), cmd_adr);
+       /* Write data */
+       z = 0;
+       while(z < words * map_bankwidth(map)) {
+               datum = map_word_load(map, buf);
+               map_write(map, datum, adr + z);
+
+               z += map_bankwidth(map);
+               buf += map_bankwidth(map);
        }
+       z -= map_bankwidth(map);
+
+       adr += z;
+
+       /* Write Buffer Program Confirm: GO GO GO */
+       map_write(map, CMD(0x29), cmd_adr);
+       chip->state = FL_WRITING;
+
+       INVALIDATE_CACHE_UDELAY(map, chip,
+                               adr, map_bankwidth(map),
+                               chip->word_write_time);
+
+       timeo = jiffies + uWriteTimeout;
+
+       for (;;) {
+               if (chip->state != FL_WRITING) {
+                       /* Someone's suspended the write. Sleep */
+                       DECLARE_WAITQUEUE(wait, current);
+
+                       set_current_state(TASK_UNINTERRUPTIBLE);
+                       add_wait_queue(&chip->wq, &wait);
+                       spin_unlock(chip->mutex);
+                       schedule();
+                       remove_wait_queue(&chip->wq, &wait);
+                       timeo = jiffies + (HZ / 2); /* FIXME */
+                       spin_lock(chip->mutex);
+                       continue;
+               }
 
-       /*
-        * If we get to here then it means that something
-        * is wrong and it's not a timeout.  Something
-        * is seriously wacky!  Dump some debug info.
-        */
-       printk(KERN_WARNING
-              "MTD %s(): Wacky!  Unable to decode failure status\n",
-              __func__ );
+               if (time_after(jiffies, timeo) && !chip_ready(map, adr))
+                       break;
 
-       printk(KERN_WARNING
-              "MTD %s(): 0x%.8lx(0x%.8x): 0x%.8x 0x%.8x 0x%.8x 0x%.8x\n",
-              __func__, adr, datum,
-              prev_oldstatus, prev_status,
-              oldstatus, status);
+               if (chip_ready(map, adr)) {
+                       xip_enable(map, chip, adr);
+                       goto op_done;
+               }
+
+               /* Latency issues. Drop the lock, wait a while and retry */
+               UDELAY(map, chip, adr, 1);
+       }
 
- write_failed:
-       ret = -EIO;
        /* reset on all failures. */
-       cfi_write( map, CMD(0xF0), chip->start );
+       map_write( map, CMD(0xF0), chip->start );
+       xip_enable(map, chip, adr);
        /* FIXME - should have reset delay before continuing */
 
- write_done:
-       DISABLE_VPP(map);
+       printk(KERN_WARNING "MTD %s(): software timeout\n",
+              __func__ );
+
+       ret = -EIO;
+ op_done:
        chip->state = FL_READY;
-       wake_up(&chip->wq);
-       cfi_spin_unlock(chip->mutex);
+       put_chip(map, chip, adr);
+       spin_unlock(chip->mutex);
 
        return ret;
 }
 
-static int cfi_amdstd_write (struct mtd_info *mtd, loff_t to , size_t len, size_t *retlen, const u_char *buf)
+
+static int cfi_amdstd_write_buffers(struct mtd_info *mtd, loff_t to, size_t len,
+                                   size_t *retlen, const u_char *buf)
 {
        struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
+       int wbufsize = cfi_interleave(cfi) << cfi->cfiq->MaxBufWriteSize;
        int ret = 0;
        int chipnum;
-       unsigned long ofs, chipstart;
+       unsigned long ofs;
 
        *retlen = 0;
        if (!len)
@@ -679,657 +1361,368 @@ static int cfi_amdstd_write (struct mtd_info *mtd, loff_t to , size_t len, size_
 
        chipnum = to >> cfi->chipshift;
        ofs = to  - (chipnum << cfi->chipshift);
-       chipstart = cfi->chips[chipnum].start;
 
-       /* If it's not bus-aligned, do the first byte write */
-       if (ofs & (CFIDEV_BUSWIDTH-1)) {
-               unsigned long bus_ofs = ofs & ~(CFIDEV_BUSWIDTH-1);
-               int i = ofs - bus_ofs;
-               int n = 0;
-               u_char tmp_buf[8];
-               cfi_word datum;
-
-               map_copy_from(map, tmp_buf, bus_ofs + cfi->chips[chipnum].start, CFIDEV_BUSWIDTH);
-               while (len && i < CFIDEV_BUSWIDTH)
-                       tmp_buf[i++] = buf[n++], len--;
-
-               if (cfi_buswidth_is_2()) {
-                       datum = *(__u16*)tmp_buf;
-               } else if (cfi_buswidth_is_4()) {
-                       datum = *(__u32*)tmp_buf;
-               } else {
-                       return -EINVAL;  /* should never happen, but be safe */
-               }
-
-               ret = do_write_oneword(map, &cfi->chips[chipnum], 
-                                      bus_ofs, datum, 0);
-               if (ret) 
+       /* If it's not bus-aligned, do the first word write */
+       if (ofs & (map_bankwidth(map)-1)) {
+               size_t local_len = (-ofs)&(map_bankwidth(map)-1);
+               if (local_len > len)
+                       local_len = len;
+               ret = cfi_amdstd_write_words(mtd, ofs + (chipnum<<cfi->chipshift),
+                                            local_len, retlen, buf);
+               if (ret)
                        return ret;
-               
-               ofs += n;
-               buf += n;
-               (*retlen) += n;
+               ofs += local_len;
+               buf += local_len;
+               len -= local_len;
 
                if (ofs >> cfi->chipshift) {
-                       chipnum ++; 
+                       chipnum ++;
                        ofs = 0;
                        if (chipnum == cfi->numchips)
                                return 0;
                }
        }
-       
-       if (cfi->fast_prog) {
-               /* Go into unlock bypass mode */
-               cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-               cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-               cfi_send_gen_cmd(0x20, cfi->addr_unlock1, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       }
 
-       /* We are now aligned, write as much as possible */
-       while(len >= CFIDEV_BUSWIDTH) {
-               cfi_word datum;
-
-               if (cfi_buswidth_is_1()) {
-                       datum = *(__u8*)buf;
-               } else if (cfi_buswidth_is_2()) {
-                       datum = *(__u16*)buf;
-               } else if (cfi_buswidth_is_4()) {
-                       datum = *(__u32*)buf;
-               } else {
-                       return -EINVAL;
-               }
-               ret = do_write_oneword(map, &cfi->chips[chipnum],
-                                      ofs, datum, cfi->fast_prog);
-               if (ret) {
-                       if (cfi->fast_prog){
-                               /* Get out of unlock bypass mode */
-                               cfi_send_gen_cmd(0x90, 0, chipstart, map, cfi, cfi->device_type, NULL);
-                               cfi_send_gen_cmd(0x00, 0, chipstart, map, cfi, cfi->device_type, NULL);
-                       }
+       /* Write buffer is worth it only if more than one word to write... */
+       while (len >= map_bankwidth(map) * 2) {
+               /* We must not cross write block boundaries */
+               int size = wbufsize - (ofs & (wbufsize-1));
+
+               if (size > len)
+                       size = len;
+               if (size % map_bankwidth(map))
+                       size -= size % map_bankwidth(map);
+
+               ret = do_write_buffer(map, &cfi->chips[chipnum],
+                                     ofs, buf, size);
+               if (ret)
                        return ret;
-               }
 
-               ofs += CFIDEV_BUSWIDTH;
-               buf += CFIDEV_BUSWIDTH;
-               (*retlen) += CFIDEV_BUSWIDTH;
-               len -= CFIDEV_BUSWIDTH;
+               ofs += size;
+               buf += size;
+               (*retlen) += size;
+               len -= size;
 
                if (ofs >> cfi->chipshift) {
-                       if (cfi->fast_prog){
-                               /* Get out of unlock bypass mode */
-                               cfi_send_gen_cmd(0x90, 0, chipstart, map, cfi, cfi->device_type, NULL);
-                               cfi_send_gen_cmd(0x00, 0, chipstart, map, cfi, cfi->device_type, NULL);
-                       }
-
-                       chipnum ++; 
+                       chipnum ++;
                        ofs = 0;
                        if (chipnum == cfi->numchips)
                                return 0;
-                       chipstart = cfi->chips[chipnum].start;
-                       if (cfi->fast_prog){
-                               /* Go into unlock bypass mode for next set of chips */
-                               cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-                               cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-                               cfi_send_gen_cmd(0x20, cfi->addr_unlock1, chipstart, map, cfi, CFI_DEVICETYPE_X8, NULL);
-                       }
                }
        }
 
-       if (cfi->fast_prog){
-               /* Get out of unlock bypass mode */
-               cfi_send_gen_cmd(0x90, 0, chipstart, map, cfi, cfi->device_type, NULL);
-               cfi_send_gen_cmd(0x00, 0, chipstart, map, cfi, cfi->device_type, NULL);
-       }
+       if (len) {
+               size_t retlen_dregs = 0;
 
-       /* Write the trailing bytes if any */
-       if (len & (CFIDEV_BUSWIDTH-1)) {
-               int i = 0, n = 0;
-               u_char tmp_buf[8];
-               cfi_word datum;
-
-               map_copy_from(map, tmp_buf, ofs + cfi->chips[chipnum].start, CFIDEV_BUSWIDTH);
-               while (len--)
-                       tmp_buf[i++] = buf[n++];
-
-               if (cfi_buswidth_is_2()) {
-                       datum = *(__u16*)tmp_buf;
-               } else if (cfi_buswidth_is_4()) {
-                       datum = *(__u32*)tmp_buf;
-               } else {
-                       return -EINVAL;  /* should never happen, but be safe */
-               }
+               ret = cfi_amdstd_write_words(mtd, ofs + (chipnum<<cfi->chipshift),
+                                            len, &retlen_dregs, buf);
 
-               ret = do_write_oneword(map, &cfi->chips[chipnum], 
-                               ofs, datum, 0);
-               if (ret) 
-                       return ret;
-               
-               (*retlen) += n;
+               *retlen += retlen_dregs;
+               return ret;
        }
 
        return 0;
 }
 
-static inline int do_erase_chip(struct map_info *map, struct flchip *chip)
+
+/*
+ * Handle devices with one erase region, that only implement
+ * the chip erase command.
+ */
+static int __xipram do_erase_chip(struct map_info *map, struct flchip *chip)
 {
-       unsigned int oldstatus, status, prev_oldstatus, prev_status;
-       unsigned int dq6;
+       struct cfi_private *cfi = map->fldrv_priv;
        unsigned long timeo = jiffies + HZ;
        unsigned long int adr;
-       struct cfi_private *cfi = map->fldrv_priv;
        DECLARE_WAITQUEUE(wait, current);
        int ret = 0;
-       int ta = 0;
-       cfi_word ones = 0;
-
- retry:
-       cfi_spin_lock(chip->mutex);
 
-       if (chip->state != FL_READY){
-               set_current_state(TASK_UNINTERRUPTIBLE);
-               add_wait_queue(&chip->wq, &wait);
-                
-               cfi_spin_unlock(chip->mutex);
-
-               schedule();
-               remove_wait_queue(&chip->wq, &wait);
-#if 0
-               if(signal_pending(current))
-                       return -EINTR;
-#endif
-               timeo = jiffies + HZ;
+       adr = cfi->addr_unlock1;
 
-               goto retry;
-       }       
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr, FL_WRITING);
+       if (ret) {
+               spin_unlock(chip->mutex);
+               return ret;
+       }
 
-       chip->state = FL_ERASING;
        DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): ERASE 0x%.8lx\n",
               __func__, chip->start );
-       
-       /* Handle devices with one erase region, that only implement
-        * the chip erase command.
-        */
+
+       XIP_INVAL_CACHED_RANGE(map, adr, map->size);
        ENABLE_VPP(map);
-       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x80, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x10, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
+       xip_disable(map, chip, adr);
+
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x80, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x10, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+
+       chip->state = FL_ERASING;
+       chip->erase_suspended = 0;
+       chip->in_progress_block_addr = adr;
+
+       INVALIDATE_CACHE_UDELAY(map, chip,
+                               adr, map->size,
+                               chip->erase_time*500);
+
        timeo = jiffies + (HZ*20);
-       adr = cfi->addr_unlock1;
 
-       /* Wait for the end of programing/erasure by using the toggle method.
-        * As long as there is a programming procedure going on, bit 6
-        * is toggling it's state with each consecutive read.
-        * The toggling stops as soon as the procedure is completed.
-        *
-        * If the process has gone on for too long on the chip bit 5 gets.
-        * After bit5 is set you can kill the operation by sending a reset
-        * command to the chip.
-        */
-       /* see comments in do_write_oneword */
-       dq6 = CMD(1<<6);
-
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
-
-       while( ( ( status ^ oldstatus ) & dq6 )
-              && ! ( ta = time_after(jiffies, timeo) ) ) {
-               int wait_reps;
-
-               /* an initial short sleep */
-               cfi_spin_unlock(chip->mutex);
-               schedule_timeout(HZ/100);
-               cfi_spin_lock(chip->mutex);
-               
+       for (;;) {
                if (chip->state != FL_ERASING) {
                        /* Someone's suspended the erase. Sleep */
                        set_current_state(TASK_UNINTERRUPTIBLE);
                        add_wait_queue(&chip->wq, &wait);
-                       
-                       cfi_spin_unlock(chip->mutex);
-                       printk("erase suspended. Sleeping\n");
-                       
+                       spin_unlock(chip->mutex);
                        schedule();
                        remove_wait_queue(&chip->wq, &wait);
-#if 0                  
-                       if (signal_pending(current))
-                               return -EINTR;
-#endif                 
-                       timeo = jiffies + (HZ*2); /* FIXME */
-                       cfi_spin_lock(chip->mutex);
+                       spin_lock(chip->mutex);
                        continue;
                }
-
-               /* Busy wait for 1/10 of a milisecond */
-               for(wait_reps = 0;
-                   (wait_reps < 100)
-                           && ( ( status ^ oldstatus ) & dq6 );
-                   wait_reps++) {
-                       
-                       /* Latency issues. Drop the lock, wait a while and retry */
-                       cfi_spin_unlock(chip->mutex);
-
-                       cfi_udelay(1);
-
-                       cfi_spin_lock(chip->mutex);
-                       oldstatus = cfi_read(map, adr);
-                       status = cfi_read(map, adr);
-                       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-                              __func__, oldstatus, status );
+               if (chip->erase_suspended) {
+                       /* This erase was suspended and resumed.
+                          Adjust the timeout */
+                       timeo = jiffies + (HZ*20); /* FIXME */
+                       chip->erase_suspended = 0;
                }
-               oldstatus = cfi_read(map, adr);
-               status = cfi_read(map, adr);
-               DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-                      __func__, oldstatus, status );
-       }
 
-       prev_oldstatus = oldstatus;
-       prev_status = status;
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
-
-       if ( cfi_buswidth_is_1() ) {
-               ones =  (__u8)~0;
-       } else if ( cfi_buswidth_is_2() ) {
-               ones = (__u16)~0;
-       } else if ( cfi_buswidth_is_4() ) {
-               ones = (__u32)~0;
-       } else {
-               printk(KERN_WARNING "Unsupported buswidth\n");
-               goto erase_failed;
-       }
-       
-       if ( oldstatus == ones && status == ones ) {
-               /* success - do nothing */
-               goto erase_done;
-       }
+               if (chip_ready(map, adr))
+                       break;
 
-       if ( ta ) {
-               int dq5mask = ( ( status ^ oldstatus ) & dq6 ) >> 1;
-               if ( status & dq5mask ) {
-                       /* dq5 asserted - decode interleave chips */
-                       printk( KERN_WARNING
-                               "MTD %s(): FLASH internal timeout: 0x%.8x\n",
-                               __func__,
-                               status & dq5mask );
-               } else {
-                       printk( KERN_WARNING
-                               "MTD %s(): Software timed out during write.\n",
+               if (time_after(jiffies, timeo)) {
+                       printk(KERN_WARNING "MTD %s(): software timeout\n",
                                __func__ );
+                       break;
                }
-               goto erase_failed;
-       }
-
-       printk(KERN_WARNING
-              "MTD %s(): Wacky!  Unable to decode failure status\n",
-              __func__ );
 
-       printk(KERN_WARNING
-              "MTD %s(): 0x%.8lx(0x%.8x): 0x%.8x 0x%.8x 0x%.8x 0x%.8x\n",
-              __func__, adr, ones,
-              prev_oldstatus, prev_status,
-              oldstatus, status);
+               /* Latency issues. Drop the lock, wait a while and retry */
+               UDELAY(map, chip, adr, 1000000/HZ);
+       }
+       /* Did we succeed? */
+       if (!chip_good(map, adr, map_word_ff(map))) {
+               /* reset on all failures. */
+               map_write( map, CMD(0xF0), chip->start );
+               /* FIXME - should have reset delay before continuing */
 
- erase_failed:
-       ret = -EIO;
-       /* reset on all failures. */
-       cfi_write( map, CMD(0xF0), chip->start );
-       /* FIXME - should have reset delay before continuing */
+               ret = -EIO;
+       }
 
- erase_done:
-       DISABLE_VPP(map);
        chip->state = FL_READY;
-       wake_up(&chip->wq);
-       cfi_spin_unlock(chip->mutex);
+       xip_enable(map, chip, adr);
+       put_chip(map, chip, adr);
+       spin_unlock(chip->mutex);
+
        return ret;
 }
 
 
-static inline int do_erase_oneblock(struct map_info *map, struct flchip *chip, unsigned long adr)
+static int __xipram do_erase_oneblock(struct map_info *map, struct flchip *chip, unsigned long adr, int len, void *thunk)
 {
-       unsigned int oldstatus, status, prev_oldstatus, prev_status;
-       unsigned int dq6;
-       unsigned long timeo = jiffies + HZ;
        struct cfi_private *cfi = map->fldrv_priv;
+       unsigned long timeo = jiffies + HZ;
        DECLARE_WAITQUEUE(wait, current);
        int ret = 0;
-       int ta = 0;
-       cfi_word ones = 0;
 
- retry:
-       cfi_spin_lock(chip->mutex);
+       adr += chip->start;
 
-       if (chip->state != FL_READY){
-               set_current_state(TASK_UNINTERRUPTIBLE);
-               add_wait_queue(&chip->wq, &wait);
-                
-               cfi_spin_unlock(chip->mutex);
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr, FL_ERASING);
+       if (ret) {
+               spin_unlock(chip->mutex);
+               return ret;
+       }
 
-               schedule();
-               remove_wait_queue(&chip->wq, &wait);
-#if 0
-               if(signal_pending(current))
-                       return -EINTR;
-#endif
-               timeo = jiffies + HZ;
+       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): ERASE 0x%.8lx\n",
+              __func__, adr );
 
-               goto retry;
-       }       
+       XIP_INVAL_CACHED_RANGE(map, adr, len);
+       ENABLE_VPP(map);
+       xip_disable(map, chip, adr);
+
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x80, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, cfi->device_type, NULL);
+       map_write(map, CMD(0x30), adr);
 
        chip->state = FL_ERASING;
+       chip->erase_suspended = 0;
+       chip->in_progress_block_addr = adr;
 
-       adr += chip->start;
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): ERASE 0x%.8lx\n",
-              __func__, adr );
+       INVALIDATE_CACHE_UDELAY(map, chip,
+                               adr, len,
+                               chip->erase_time*500);
 
-       ENABLE_VPP(map);
-       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x80, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi, CFI_DEVICETYPE_X8, NULL);
-
-       cfi_write(map, CMD(0x30), adr);
-       
        timeo = jiffies + (HZ*20);
 
-       /* Wait for the end of programing/erasure by using the toggle method.
-        * As long as there is a programming procedure going on, bit 6
-        * is toggling it's state with each consecutive read.
-        * The toggling stops as soon as the procedure is completed.
-        *
-        * If the process has gone on for too long on the chip bit 5 gets.
-        * After bit5 is set you can kill the operation by sending a reset
-        * command to the chip.
-        */
-       /* see comments in do_write_oneword */
-       dq6 = CMD(1<<6);
-
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
-
-       while( ( ( status ^ oldstatus ) & dq6 )
-              && ! ( ta = time_after(jiffies, timeo) ) ) {
-               int wait_reps;
-
-               /* an initial short sleep */
-               cfi_spin_unlock(chip->mutex);
-               schedule_timeout(HZ/100);
-               cfi_spin_lock(chip->mutex);
-               
+       for (;;) {
                if (chip->state != FL_ERASING) {
                        /* Someone's suspended the erase. Sleep */
                        set_current_state(TASK_UNINTERRUPTIBLE);
                        add_wait_queue(&chip->wq, &wait);
-                       
-                       cfi_spin_unlock(chip->mutex);
-                       printk(KERN_DEBUG "erase suspended. Sleeping\n");
-                       
+                       spin_unlock(chip->mutex);
                        schedule();
                        remove_wait_queue(&chip->wq, &wait);
-#if 0                  
-                       if (signal_pending(current))
-                               return -EINTR;
-#endif                 
-                       timeo = jiffies + (HZ*2); /* FIXME */
-                       cfi_spin_lock(chip->mutex);
+                       spin_lock(chip->mutex);
                        continue;
                }
-
-               /* Busy wait for 1/10 of a milisecond */
-               for(wait_reps = 0;
-                   (wait_reps < 100)
-                           && ( ( status ^ oldstatus ) & dq6 );
-                   wait_reps++) {
-                       
-                       /* Latency issues. Drop the lock, wait a while and retry */
-                       cfi_spin_unlock(chip->mutex);
-                       
-                       cfi_udelay(1);
-               
-                       cfi_spin_lock(chip->mutex);
-                       oldstatus = cfi_read(map, adr);
-                       status = cfi_read(map, adr);
-                       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-                              __func__, oldstatus, status );
+               if (chip->erase_suspended) {
+                       /* This erase was suspended and resumed.
+                          Adjust the timeout */
+                       timeo = jiffies + (HZ*20); /* FIXME */
+                       chip->erase_suspended = 0;
                }
-               oldstatus = cfi_read(map, adr);
-               status = cfi_read(map, adr);
-               DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-                      __func__, oldstatus, status );
-       }
-
-       prev_oldstatus = oldstatus;
-       prev_status = status;
-       oldstatus = cfi_read(map, adr);
-       status = cfi_read(map, adr);
-       DEBUG( MTD_DEBUG_LEVEL3, "MTD %s(): Check 0x%.8x 0x%.8x\n",
-              __func__, oldstatus, status );
-
-       if ( cfi_buswidth_is_1() ) {
-               ones =  (__u8)~0;
-       } else if ( cfi_buswidth_is_2() ) {
-               ones = (__u16)~0;
-       } else if ( cfi_buswidth_is_4() ) {
-               ones = (__u32)~0;
-       } else {
-               printk(KERN_WARNING "Unsupported buswidth\n");
-               goto erase_failed;
-       }
 
-       if ( oldstatus == ones && status == ones ) {
-               /* success - do nothing */
-               goto erase_done;
-       }
+               if (chip_ready(map, adr)) {
+                       xip_enable(map, chip, adr);
+                       break;
+               }
 
-       if ( ta ) {
-               int dq5mask = ( ( status ^ oldstatus ) & dq6 ) >> 1;
-               if ( status & dq5mask ) {
-                       /* dq5 asserted - decode interleave chips */
-                       printk( KERN_WARNING
-                               "MTD %s(): FLASH internal timeout: 0x%.8x\n",
-                               __func__,
-                               status & dq5mask );
-               } else {
-                       printk( KERN_WARNING
-                               "MTD %s(): Software timed out during write.\n",
+               if (time_after(jiffies, timeo)) {
+                       xip_enable(map, chip, adr);
+                       printk(KERN_WARNING "MTD %s(): software timeout\n",
                                __func__ );
+                       break;
                }
-               goto erase_failed;
-       }
-
-       printk(KERN_WARNING
-              "MTD %s(): Wacky!  Unable to decode failure status\n",
-              __func__ );
 
-       printk(KERN_WARNING
-              "MTD %s(): 0x%.8lx(0x%.8x): 0x%.8x 0x%.8x 0x%.8x 0x%.8x\n",
-              __func__, adr, ones,
-              prev_oldstatus, prev_status,
-              oldstatus, status);
+               /* Latency issues. Drop the lock, wait a while and retry */
+               UDELAY(map, chip, adr, 1000000/HZ);
+       }
+       /* Did we succeed? */
+       if (!chip_good(map, adr, map_word_ff(map))) {
+               /* reset on all failures. */
+               map_write( map, CMD(0xF0), chip->start );
+               /* FIXME - should have reset delay before continuing */
 
- erase_failed:
-       ret = -EIO;
-       /* reset on all failures. */
-       cfi_write( map, CMD(0xF0), chip->start );
-       /* FIXME - should have reset delay before continuing */
+               ret = -EIO;
+       }
 
- erase_done:
-       DISABLE_VPP(map);
        chip->state = FL_READY;
-       wake_up(&chip->wq);
-       cfi_spin_unlock(chip->mutex);
+       put_chip(map, chip, adr);
+       spin_unlock(chip->mutex);
        return ret;
 }
 
-static int cfi_amdstd_erase_varsize(struct mtd_info *mtd, struct erase_info *instr)
-{
-       struct map_info *map = mtd->priv;
-       struct cfi_private *cfi = map->fldrv_priv;
-       unsigned long adr, len;
-       int chipnum, ret = 0;
-       int i, first;
-       struct mtd_erase_region_info *regions = mtd->eraseregions;
-
-       if (instr->addr > mtd->size)
-               return -EINVAL;
-
-       if ((instr->len + instr->addr) > mtd->size)
-               return -EINVAL;
-
-       /* Check that both start and end of the requested erase are
-        * aligned with the erasesize at the appropriate addresses.
-        */
-
-       i = 0;
-
-       /* Skip all erase regions which are ended before the start of 
-          the requested erase. Actually, to save on the calculations,
-          we skip to the first erase region which starts after the
-          start of the requested erase, and then go back one.
-       */
-       
-       while (i < mtd->numeraseregions && instr->addr >= regions[i].offset)
-              i++;
-       i--;
-
-       /* OK, now i is pointing at the erase region in which this 
-          erase request starts. Check the start of the requested
-          erase range is aligned with the erase size which is in
-          effect here.
-       */
-
-       if (instr->addr & (regions[i].erasesize-1))
-               return -EINVAL;
-
-       /* Remember the erase region we start on */
-       first = i;
-
-       /* Next, check that the end of the requested erase is aligned
-        * with the erase region at that address.
-        */
 
-       while (i<mtd->numeraseregions && (instr->addr + instr->len) >= regions[i].offset)
-               i++;
+int cfi_amdstd_erase_varsize(struct mtd_info *mtd, struct erase_info *instr)
+{
+       unsigned long ofs, len;
+       int ret;
 
-       /* As before, drop back one to point at the region in which
-          the address actually falls
-       */
-       i--;
-       
-       if ((instr->addr + instr->len) & (regions[i].erasesize-1))
-               return -EINVAL;
-       
-       chipnum = instr->addr >> cfi->chipshift;
-       adr = instr->addr - (chipnum << cfi->chipshift);
+       ofs = instr->addr;
        len = instr->len;
 
-       i=first;
-
-       while(len) {
-               ret = do_erase_oneblock(map, &cfi->chips[chipnum], adr);
-
-               if (ret)
-                       return ret;
-
-               adr += regions[i].erasesize;
-               len -= regions[i].erasesize;
-
-               if (adr % (1<< cfi->chipshift) == ((regions[i].offset + (regions[i].erasesize * regions[i].numblocks)) %( 1<< cfi->chipshift)))
-                       i++;
-
-               if (adr >> cfi->chipshift) {
-                       adr = 0;
-                       chipnum++;
-                       
-                       if (chipnum >= cfi->numchips)
-                       break;
-               }
-       }
+       ret = cfi_varsize_frob(mtd, do_erase_oneblock, ofs, len, NULL);
+       if (ret)
+               return ret;
 
        instr->state = MTD_ERASE_DONE;
-       if (instr->callback)
-               instr->callback(instr);
-       
+       mtd_erase_callback(instr);
+
        return 0;
 }
 
-static int cfi_amdstd_erase_onesize(struct mtd_info *mtd, struct erase_info *instr)
+
+static int cfi_amdstd_erase_chip(struct mtd_info *mtd, struct erase_info *instr)
 {
        struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
-       unsigned long adr, len;
-       int chipnum, ret = 0;
+       int ret = 0;
 
-       if (instr->addr & (mtd->erasesize - 1))
+       if (instr->addr != 0)
                return -EINVAL;
 
-       if (instr->len & (mtd->erasesize -1))
+       if (instr->len != mtd->size)
                return -EINVAL;
 
-       if ((instr->len + instr->addr) > mtd->size)
-               return -EINVAL;
+       ret = do_erase_chip(map, &cfi->chips[0]);
+       if (ret)
+               return ret;
 
-       chipnum = instr->addr >> cfi->chipshift;
-       adr = instr->addr - (chipnum << cfi->chipshift);
-       len = instr->len;
+       instr->state = MTD_ERASE_DONE;
+       mtd_erase_callback(instr);
 
-       while(len) {
-               ret = do_erase_oneblock(map, &cfi->chips[chipnum], adr);
+       return 0;
+}
 
-               if (ret)
-                       return ret;
+static int do_atmel_lock(struct map_info *map, struct flchip *chip,
+                        unsigned long adr, int len, void *thunk)
+{
+       struct cfi_private *cfi = map->fldrv_priv;
+       int ret;
 
-               adr += mtd->erasesize;
-               len -= mtd->erasesize;
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr + chip->start, FL_LOCKING);
+       if (ret)
+               goto out_unlock;
+       chip->state = FL_LOCKING;
+
+       DEBUG(MTD_DEBUG_LEVEL3, "MTD %s(): LOCK 0x%08lx len %d\n",
+             __func__, adr, len);
+
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x80, cfi->addr_unlock1, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       cfi_send_gen_cmd(0x55, cfi->addr_unlock2, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       map_write(map, CMD(0x40), chip->start + adr);
 
-               if (adr >> cfi->chipshift) {
-                       adr = 0;
-                       chipnum++;
-                       
-                       if (chipnum >= cfi->numchips)
-                       break;
-               }
-       }
-               
-       instr->state = MTD_ERASE_DONE;
-       if (instr->callback)
-               instr->callback(instr);
-       
-       return 0;
+       chip->state = FL_READY;
+       put_chip(map, chip, adr + chip->start);
+       ret = 0;
+
+out_unlock:
+       spin_unlock(chip->mutex);
+       return ret;
 }
 
-static int cfi_amdstd_erase_chip(struct mtd_info *mtd, struct erase_info *instr)
+static int do_atmel_unlock(struct map_info *map, struct flchip *chip,
+                          unsigned long adr, int len, void *thunk)
 {
-       struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
-       int ret = 0;
+       int ret;
 
-       if (instr->addr != 0)
-               return -EINVAL;
+       spin_lock(chip->mutex);
+       ret = get_chip(map, chip, adr + chip->start, FL_UNLOCKING);
+       if (ret)
+               goto out_unlock;
+       chip->state = FL_UNLOCKING;
 
-       if (instr->len != mtd->size)
-               return -EINVAL;
+       DEBUG(MTD_DEBUG_LEVEL3, "MTD %s(): LOCK 0x%08lx len %d\n",
+             __func__, adr, len);
 
-       ret = do_erase_chip(map, &cfi->chips[0]);
-       if (ret)
-               return ret;
+       cfi_send_gen_cmd(0xAA, cfi->addr_unlock1, chip->start, map, cfi,
+                        cfi->device_type, NULL);
+       map_write(map, CMD(0x70), adr);
 
-       instr->state = MTD_ERASE_DONE;
-       if (instr->callback)
-               instr->callback(instr);
-       
-       return 0;
+       chip->state = FL_READY;
+       put_chip(map, chip, adr + chip->start);
+       ret = 0;
+
+out_unlock:
+       spin_unlock(chip->mutex);
+       return ret;
+}
+
+static int cfi_atmel_lock(struct mtd_info *mtd, loff_t ofs, size_t len)
+{
+       return cfi_varsize_frob(mtd, do_atmel_lock, ofs, len, NULL);
 }
 
+static int cfi_atmel_unlock(struct mtd_info *mtd, loff_t ofs, size_t len)
+{
+       return cfi_varsize_frob(mtd, do_atmel_unlock, ofs, len, NULL);
+}
+
+
 static void cfi_amdstd_sync (struct mtd_info *mtd)
 {
        struct map_info *map = mtd->priv;
@@ -1343,7 +1736,7 @@ static void cfi_amdstd_sync (struct mtd_info *mtd)
                chip = &cfi->chips[i];
 
        retry:
-               cfi_spin_lock(chip->mutex);
+               spin_lock(chip->mutex);
 
                switch(chip->state) {
                case FL_READY:
@@ -1352,24 +1745,24 @@ static void cfi_amdstd_sync (struct mtd_info *mtd)
                case FL_JEDEC_QUERY:
                        chip->oldstate = chip->state;
                        chip->state = FL_SYNCING;
-                       /* No need to wake_up() on this state change - 
+                       /* No need to wake_up() on this state change -
                         * as the whole point is that nobody can do anything
                         * with the chip now anyway.
                         */
                case FL_SYNCING:
-                       cfi_spin_unlock(chip->mutex);
+                       spin_unlock(chip->mutex);
                        break;
 
                default:
                        /* Not an idle state */
                        add_wait_queue(&chip->wq, &wait);
-                       
-                       cfi_spin_unlock(chip->mutex);
+
+                       spin_unlock(chip->mutex);
 
                        schedule();
 
-                       remove_wait_queue(&chip->wq, &wait);
-                       
+                       remove_wait_queue(&chip->wq, &wait);
+
                        goto retry;
                }
        }
@@ -1379,13 +1772,13 @@ static void cfi_amdstd_sync (struct mtd_info *mtd)
        for (i--; i >=0; i--) {
                chip = &cfi->chips[i];
 
-               cfi_spin_lock(chip->mutex);
-               
+               spin_lock(chip->mutex);
+
                if (chip->state == FL_SYNCING) {
                        chip->state = chip->oldstate;
                        wake_up(&chip->wq);
                }
-               cfi_spin_unlock(chip->mutex);
+               spin_unlock(chip->mutex);
        }
 }
 
@@ -1401,7 +1794,7 @@ static int cfi_amdstd_suspend(struct mtd_info *mtd)
        for (i=0; !ret && i<cfi->numchips; i++) {
                chip = &cfi->chips[i];
 
-               cfi_spin_lock(chip->mutex);
+               spin_lock(chip->mutex);
 
                switch(chip->state) {
                case FL_READY:
@@ -1410,7 +1803,7 @@ static int cfi_amdstd_suspend(struct mtd_info *mtd)
                case FL_JEDEC_QUERY:
                        chip->oldstate = chip->state;
                        chip->state = FL_PM_SUSPENDED;
-                       /* No need to wake_up() on this state change - 
+                       /* No need to wake_up() on this state change -
                         * as the whole point is that nobody can do anything
                         * with the chip now anyway.
                         */
@@ -1421,28 +1814,29 @@ static int cfi_amdstd_suspend(struct mtd_info *mtd)
                        ret = -EAGAIN;
                        break;
                }
-               cfi_spin_unlock(chip->mutex);
+               spin_unlock(chip->mutex);
        }
 
        /* Unlock the chips again */
 
        if (ret) {
-               for (i--; i >=0; i--) {
+               for (i--; i >=0; i--) {
                        chip = &cfi->chips[i];
 
-                       cfi_spin_lock(chip->mutex);
-               
+                       spin_lock(chip->mutex);
+
                        if (chip->state == FL_PM_SUSPENDED) {
                                chip->state = chip->oldstate;
                                wake_up(&chip->wq);
                        }
-                       cfi_spin_unlock(chip->mutex);
+                       spin_unlock(chip->mutex);
                }
        }
-       
+
        return ret;
 }
 
+
 static void cfi_amdstd_resume(struct mtd_info *mtd)
 {
        struct map_info *map = mtd->priv;
@@ -1451,20 +1845,20 @@ static void cfi_amdstd_resume(struct mtd_info *mtd)
        struct flchip *chip;
 
        for (i=0; i<cfi->numchips; i++) {
-       
+
                chip = &cfi->chips[i];
 
-               cfi_spin_lock(chip->mutex);
-               
+               spin_lock(chip->mutex);
+
                if (chip->state == FL_PM_SUSPENDED) {
                        chip->state = FL_READY;
-                       cfi_write(map, CMD(0xF0), chip->start);
+                       map_write(map, CMD(0xF0), chip->start);
                        wake_up(&chip->wq);
                }
                else
                        printk(KERN_ERR "Argh. Chip not in PM_SUSPENDED state upon resume()\n");
 
-               cfi_spin_unlock(chip->mutex);
+               spin_unlock(chip->mutex);
        }
 }
 
@@ -1472,29 +1866,13 @@ static void cfi_amdstd_destroy(struct mtd_info *mtd)
 {
        struct map_info *map = mtd->priv;
        struct cfi_private *cfi = map->fldrv_priv;
+
        kfree(cfi->cmdset_priv);
        kfree(cfi->cfiq);
        kfree(cfi);
        kfree(mtd->eraseregions);
 }
 
-static char im_name[]="cfi_cmdset_0002";
-
-int __init cfi_amdstd_init(void)
-{
-       inter_module_register(im_name, THIS_MODULE, &cfi_cmdset_0002);
-       return 0;
-}
-
-static void __exit cfi_amdstd_exit(void)
-{
-       inter_module_unregister(im_name);
-}
-
-module_init(cfi_amdstd_init);
-module_exit(cfi_amdstd_exit);
-
 MODULE_LICENSE("GPL");
 MODULE_AUTHOR("Crossnet Co. <info@crossnet.co.jp> et al.");
 MODULE_DESCRIPTION("MTD chip driver for AMD/Fujitsu flash chips");
-