projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cciss: Handle cases when cciss_add_disk fails.
[deliverable/linux.git] / drivers / block / cciss.c
CommitLineData
1da177e4 1/*
bd4f36d6
MM		 2 * Disk Array driver for HP Smart Array controllers.
3 * (C) Copyright 2000, 2007 Hewlett-Packard Development Company, L.P.
1da177e4
LT		 4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
bd4f36d6 7 * the Free Software Foundation; version 2 of the License.
1da177e4
LT		 8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
bd4f36d6
MM		 11 * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * General Public License for more details.
1da177e4
LT		 13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
bd4f36d6
MM		 16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
17 * 02111-1307, USA.
1da177e4
LT		 18 *
19 * Questions/Comments/Bugfixes to iss_storagedev@hp.com
20 *
21 */
22
1da177e4
LT		 23#include <linux/module.h>
24#include <linux/interrupt.h>
25#include <linux/types.h>
26#include <linux/pci.h>
27#include <linux/kernel.h>
28#include <linux/slab.h>
405f5571 29#include <linux/smp_lock.h>
1da177e4
LT		 30#include <linux/delay.h>
31#include <linux/major.h>
32#include <linux/fs.h>
33#include <linux/bio.h>
34#include <linux/blkpg.h>
35#include <linux/timer.h>
36#include <linux/proc_fs.h>
89b6e743 37#include <linux/seq_file.h>
7c832835 38#include <linux/init.h>
4d761609 39#include <linux/jiffies.h>
1da177e4
LT		 40#include <linux/hdreg.h>
41#include <linux/spinlock.h>
42#include <linux/compat.h>
b368c9dd 43#include <linux/mutex.h>
1da177e4
LT		 44#include <asm/uaccess.h>
45#include <asm/io.h>
46
eb0df996 47#include <linux/dma-mapping.h>
1da177e4
LT		 48#include <linux/blkdev.h>
49#include <linux/genhd.h>
50#include <linux/completion.h>
d5d3b736 51#include <scsi/scsi.h>
03bbfee5
MMOD		 52#include <scsi/sg.h>
53#include <scsi/scsi_ioctl.h>
54#include <linux/cdrom.h>
231bc2a2 55#include <linux/scatterlist.h>
0a9279cc 56#include <linux/kthread.h>
1da177e4
LT		 57
58#define CCISS_DRIVER_VERSION(maj,min,submin) ((maj<<16)|(min<<8)|(submin))
24aac480
MM		 59#define DRIVER_NAME "HP CISS Driver (v 3.6.20)"
60#define DRIVER_VERSION CCISS_DRIVER_VERSION(3, 6, 20)
1da177e4
LT		 61
62/* Embedded module documentation macros - see modules.h */
63MODULE_AUTHOR("Hewlett-Packard Company");
24aac480 64MODULE_DESCRIPTION("Driver for HP Smart Array Controllers");
1da177e4 65MODULE_SUPPORTED_DEVICE("HP SA5i SA5i+ SA532 SA5300 SA5312 SA641 SA642 SA6400"
24aac480
MM		 66 " SA6i P600 P800 P400 P400i E200 E200i E500 P700m"
67 " Smart Array G2 Series SAS/SATA Controllers");
68MODULE_VERSION("3.6.20");
1da177e4
LT		 69MODULE_LICENSE("GPL");
70
71#include "cciss_cmd.h"
72#include "cciss.h"
73#include <linux/cciss_ioctl.h>
74
75/* define the PCI info for the cards we can control */
76static const struct pci_device_id cciss_pci_device_id[] = {
f82ccdb9
BH		 77 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISS, 0x0E11, 0x4070},
78 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4080},
79 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4082},
80 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4083},
81 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x4091},
82 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409A},
83 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409B},
84 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409C},
85 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409D},
86 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSA, 0x103C, 0x3225},
87 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3223},
88 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3234},
89 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3235},
90 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3211},
91 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3212},
92 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3213},
93 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3214},
94 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3215},
de923916 95 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3237},
9cff3b38 96 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x323D},
24aac480
MM		 97 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3241},
98 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3243},
99 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3245},
100 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3247},
101 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3249},
77ca7286
MM		 102 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324A},
103 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324B},
4ff9a9a4
MM		 104 {PCI_VENDOR_ID_HP, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
105 PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
1da177e4
LT		 106 {0,}
107};
7c832835 108
1da177e4
LT		 109MODULE_DEVICE_TABLE(pci, cciss_pci_device_id);
110
1da177e4
LT		 111/* board_id = Subsystem Device ID & Vendor ID
112 * product = Marketing Name for the board
7c832835 113 * access = Address of the struct of function pointers
1da177e4
LT		 114 */
115static struct board_type products[] = {
49153998
MM		 116 {0x40700E11, "Smart Array 5300", &SA5_access},
117 {0x40800E11, "Smart Array 5i", &SA5B_access},
118 {0x40820E11, "Smart Array 532", &SA5B_access},
119 {0x40830E11, "Smart Array 5312", &SA5B_access},
120 {0x409A0E11, "Smart Array 641", &SA5_access},
121 {0x409B0E11, "Smart Array 642", &SA5_access},
122 {0x409C0E11, "Smart Array 6400", &SA5_access},
123 {0x409D0E11, "Smart Array 6400 EM", &SA5_access},
124 {0x40910E11, "Smart Array 6i", &SA5_access},
125 {0x3225103C, "Smart Array P600", &SA5_access},
126 {0x3223103C, "Smart Array P800", &SA5_access},
127 {0x3234103C, "Smart Array P400", &SA5_access},
128 {0x3235103C, "Smart Array P400i", &SA5_access},
129 {0x3211103C, "Smart Array E200i", &SA5_access},
130 {0x3212103C, "Smart Array E200", &SA5_access},
131 {0x3213103C, "Smart Array E200i", &SA5_access},
132 {0x3214103C, "Smart Array E200i", &SA5_access},
133 {0x3215103C, "Smart Array E200i", &SA5_access},
134 {0x3237103C, "Smart Array E500", &SA5_access},
135 {0x323D103C, "Smart Array P700m", &SA5_access},
136 {0x3241103C, "Smart Array P212", &SA5_access},
137 {0x3243103C, "Smart Array P410", &SA5_access},
138 {0x3245103C, "Smart Array P410i", &SA5_access},
139 {0x3247103C, "Smart Array P411", &SA5_access},
140 {0x3249103C, "Smart Array P812", &SA5_access},
77ca7286
MM		 141 {0x324A103C, "Smart Array P712m", &SA5_access},
142 {0x324B103C, "Smart Array P711m", &SA5_access},
49153998 143 {0xFFFF103C, "Unknown Smart Array", &SA5_access},
1da177e4
LT		 144};
145
d14c4ab5 146/* How long to wait (in milliseconds) for board to go into simple mode */
7c832835 147#define MAX_CONFIG_WAIT 30000
1da177e4
LT		 148#define MAX_IOCTL_CONFIG_WAIT 1000
149
150/*define how many times we will try a command because of bus resets */
151#define MAX_CMD_RETRIES 3
152
1da177e4
LT		 153#define MAX_CTLR 32
154
155/* Originally cciss driver only supports 8 major numbers */
156#define MAX_CTLR_ORIG 8
157
1da177e4
LT		 158static ctlr_info_t *hba[MAX_CTLR];
159
b368c9dd
AP		 160static struct task_struct *cciss_scan_thread;
161static DEFINE_MUTEX(scan_mutex);
162static LIST_HEAD(scan_q);
163
165125e1 164static void do_cciss_request(struct request_queue *q);
7d12e780 165static irqreturn_t do_cciss_intr(int irq, void *dev_id);
ef7822c2
AV		 166static int cciss_open(struct block_device *bdev, fmode_t mode);
167static int cciss_release(struct gendisk *disk, fmode_t mode);
168static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 169 unsigned int cmd, unsigned long arg);
a885c8c4 170static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo);
1da177e4 171
1da177e4 172static int cciss_revalidate(struct gendisk *disk);
6ae5ce8e 173static int rebuild_lun_table(ctlr_info_t *h, int first_time);
a0ea8622 174static int deregister_disk(ctlr_info_t *h, int drv_index,
7c832835 175 int clear_all);
1da177e4 176
00988a35
MMOD		 177static void cciss_read_capacity(int ctlr, int logvol, int withirq,
178 sector_t *total_size, unsigned int *block_size);
179static void cciss_read_capacity_16(int ctlr, int logvol, int withirq,
180 sector_t *total_size, unsigned int *block_size);
181static void cciss_geometry_inquiry(int ctlr, int logvol,
182 int withirq, sector_t total_size,
183 unsigned int block_size, InquiryData_struct *inq_buff,
7c832835 184 drive_info_struct *drv);
7c832835
BH		 185static void __devinit cciss_interrupt_mode(ctlr_info_t *, struct pci_dev *,
186 __u32);
187static void start_io(ctlr_info_t *h);
188static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
7c832835
BH		 189 __u8 page_code, unsigned char *scsi3addr, int cmd_type);
190static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
b57695fe 191 __u8 page_code, unsigned char scsi3addr[],
192 int cmd_type);
85cc61ae 193static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
194 int attempt_retry);
195static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c);
1da177e4 196
33079b21 197static void fail_all_cmds(unsigned long ctlr);
d6f4965d 198static int add_to_scan_list(struct ctlr_info *h);
0a9279cc
MM		 199static int scan_thread(void *data);
200static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c);
617e1344
SC		 201static void cciss_hba_release(struct device *dev);
202static void cciss_device_release(struct device *dev);
361e9b07 203static void cciss_free_gendisk(ctlr_info_t *h, int drv_index);
33079b21 204
1da177e4 205#ifdef CONFIG_PROC_FS
1da177e4
LT		 206static void cciss_procinit(int i);
207#else
7c832835
BH		 208static void cciss_procinit(int i)
209{
210}
211#endif /* CONFIG_PROC_FS */
1da177e4
LT		 212
213#ifdef CONFIG_COMPAT
ef7822c2
AV		 214static int cciss_compat_ioctl(struct block_device *, fmode_t,
215 unsigned, unsigned long);
1da177e4
LT		 216#endif
217
83d5cde4 218static const struct block_device_operations cciss_fops = {
7c832835 219 .owner = THIS_MODULE,
ef7822c2
AV		 220 .open = cciss_open,
221 .release = cciss_release,
222 .locked_ioctl = cciss_ioctl,
7c832835 223 .getgeo = cciss_getgeo,
1da177e4 224#ifdef CONFIG_COMPAT
ef7822c2 225 .compat_ioctl = cciss_compat_ioctl,
1da177e4 226#endif
7c832835 227 .revalidate_disk = cciss_revalidate,
1da177e4
LT		 228};
229
230/*
231 * Enqueuing and dequeuing functions for cmdlists.
232 */
8a3173de 233static inline void addQ(struct hlist_head *list, CommandList_struct *c)
1da177e4 234{
8a3173de 235 hlist_add_head(&c->list, list);
1da177e4
LT		 236}
237
8a3173de 238static inline void removeQ(CommandList_struct *c)
1da177e4 239{
b59e64d0
HR		 240 /*
241 * After kexec/dump some commands might still
242 * be in flight, which the firmware will try
243 * to complete. Resetting the firmware doesn't work
244 * with old fw revisions, so we have to mark
245 * them off as 'stale' to prevent the driver from
246 * falling over.
247 */
248 if (WARN_ON(hlist_unhashed(&c->list))) {
249 c->cmd_type = CMD_MSG_STALE;
8a3173de 250 return;
b59e64d0 251 }
8a3173de
JA		 252
253 hlist_del_init(&c->list);
1da177e4
LT		 254}
255
256#include "cciss_scsi.c" /* For SCSI tape support */
257
0f5486ec
RD		 258#define RAID_UNKNOWN 6
259
1da177e4
LT		 260#ifdef CONFIG_PROC_FS
261
262/*
263 * Report information about this controller.
264 */
265#define ENG_GIG 1000000000
266#define ENG_GIG_FACTOR (ENG_GIG/512)
89b6e743 267#define ENGAGE_SCSI "engage scsi"
7c832835
BH		 268static const char *raid_label[] = { "0", "4", "1(1+0)", "5", "5+1", "ADG",
269 "UNKNOWN"
270};
1da177e4
LT		 271
272static struct proc_dir_entry *proc_cciss;
273
89b6e743 274static void cciss_seq_show_header(struct seq_file *seq)
1da177e4 275{
89b6e743
MM		 276 ctlr_info_t *h = seq->private;
277
278 seq_printf(seq, "%s: HP %s Controller\n"
279 "Board ID: 0x%08lx\n"
280 "Firmware Version: %c%c%c%c\n"
281 "IRQ: %d\n"
282 "Logical drives: %d\n"
283 "Current Q depth: %d\n"
284 "Current # commands on controller: %d\n"
285 "Max Q depth since init: %d\n"
286 "Max # commands on controller since init: %d\n"
287 "Max SG entries since init: %d\n",
288 h->devname,
289 h->product_name,
290 (unsigned long)h->board_id,
291 h->firm_ver[0], h->firm_ver[1], h->firm_ver[2],
292 h->firm_ver[3], (unsigned int)h->intr[SIMPLE_MODE_INT],
293 h->num_luns,
294 h->Qdepth, h->commands_outstanding,
295 h->maxQsinceinit, h->max_outstanding, h->maxSG);
296
297#ifdef CONFIG_CISS_SCSI_TAPE
298 cciss_seq_tape_report(seq, h->ctlr);
299#endif /* CONFIG_CISS_SCSI_TAPE */
300}
1da177e4 301
89b6e743
MM		 302static void *cciss_seq_start(struct seq_file *seq, loff_t *pos)
303{
304 ctlr_info_t *h = seq->private;
305 unsigned ctlr = h->ctlr;
306 unsigned long flags;
1da177e4
LT		 307
308 /* prevent displaying bogus info during configuration
309 * or deconfiguration of a logical volume
310 */
311 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
312 if (h->busy_configuring) {
313 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
89b6e743 314 return ERR_PTR(-EBUSY);
1da177e4
LT		 315 }
316 h->busy_configuring = 1;
317 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
318
89b6e743
MM		 319 if (*pos == 0)
320 cciss_seq_show_header(seq);
321
322 return pos;
323}
324
325static int cciss_seq_show(struct seq_file *seq, void *v)
326{
327 sector_t vol_sz, vol_sz_frac;
328 ctlr_info_t *h = seq->private;
329 unsigned ctlr = h->ctlr;
330 loff_t *pos = v;
331 drive_info_struct *drv = &h->drv[*pos];
332
333 if (*pos > h->highest_lun)
334 return 0;
335
336 if (drv->heads == 0)
337 return 0;
338
339 vol_sz = drv->nr_blocks;
340 vol_sz_frac = sector_div(vol_sz, ENG_GIG_FACTOR);
341 vol_sz_frac *= 100;
342 sector_div(vol_sz_frac, ENG_GIG_FACTOR);
343
344 if (drv->raid_level > 5)
345 drv->raid_level = RAID_UNKNOWN;
346 seq_printf(seq, "cciss/c%dd%d:"
347 "\t%4u.%02uGB\tRAID %s\n",
348 ctlr, (int) *pos, (int)vol_sz, (int)vol_sz_frac,
349 raid_label[drv->raid_level]);
350 return 0;
351}
352
353static void *cciss_seq_next(struct seq_file *seq, void *v, loff_t *pos)
354{
355 ctlr_info_t *h = seq->private;
356
357 if (*pos > h->highest_lun)
358 return NULL;
359 *pos += 1;
360
361 return pos;
362}
363
364static void cciss_seq_stop(struct seq_file *seq, void *v)
365{
366 ctlr_info_t *h = seq->private;
367
368 /* Only reset h->busy_configuring if we succeeded in setting
369 * it during cciss_seq_start. */
370 if (v == ERR_PTR(-EBUSY))
371 return;
7c832835 372
1da177e4 373 h->busy_configuring = 0;
1da177e4
LT		 374}
375
88e9d34c 376static const struct seq_operations cciss_seq_ops = {
89b6e743
MM		 377 .start = cciss_seq_start,
378 .show = cciss_seq_show,
379 .next = cciss_seq_next,
380 .stop = cciss_seq_stop,
381};
382
383static int cciss_seq_open(struct inode *inode, struct file *file)
384{
385 int ret = seq_open(file, &cciss_seq_ops);
386 struct seq_file *seq = file->private_data;
387
388 if (!ret)
389 seq->private = PDE(inode)->data;
390
391 return ret;
392}
393
394static ssize_t
395cciss_proc_write(struct file *file, const char __user *buf,
396 size_t length, loff_t *ppos)
1da177e4 397{
89b6e743
MM		 398 int err;
399 char *buffer;
400
401#ifndef CONFIG_CISS_SCSI_TAPE
402 return -EINVAL;
1da177e4
LT		 403#endif
404
89b6e743 405 if (!buf || length > PAGE_SIZE - 1)
7c832835 406 return -EINVAL;
89b6e743
MM		 407
408 buffer = (char *)__get_free_page(GFP_KERNEL);
409 if (!buffer)
410 return -ENOMEM;
411
412 err = -EFAULT;
413 if (copy_from_user(buffer, buf, length))
414 goto out;
415 buffer[length] = '\0';
416
417#ifdef CONFIG_CISS_SCSI_TAPE
418 if (strncmp(ENGAGE_SCSI, buffer, sizeof ENGAGE_SCSI - 1) == 0) {
419 struct seq_file *seq = file->private_data;
420 ctlr_info_t *h = seq->private;
421 int rc;
422
7c832835
BH		 423 rc = cciss_engage_scsi(h->ctlr);
424 if (rc != 0)
89b6e743
MM		 425 err = -rc;
426 else
427 err = length;
428 } else
429#endif /* CONFIG_CISS_SCSI_TAPE */
430 err = -EINVAL;
7c832835
BH		 431 /* might be nice to have "disengage" too, but it's not
432 safely possible. (only 1 module use count, lock issues.) */
89b6e743
MM		 433
434out:
435 free_page((unsigned long)buffer);
436 return err;
1da177e4
LT		 437}
438
89b6e743
MM		 439static struct file_operations cciss_proc_fops = {
440 .owner = THIS_MODULE,
441 .open = cciss_seq_open,
442 .read = seq_read,
443 .llseek = seq_lseek,
444 .release = seq_release,
445 .write = cciss_proc_write,
446};
447
1da177e4
LT		 448static void __devinit cciss_procinit(int i)
449{
450 struct proc_dir_entry *pde;
451
89b6e743 452 if (proc_cciss == NULL)
928b4d8c 453 proc_cciss = proc_mkdir("driver/cciss", NULL);
89b6e743
MM		 454 if (!proc_cciss)
455 return;
3dfcf9c4 456 pde = proc_create_data(hba[i]->devname, S_IWUSR | S_IRUSR | S_IRGRP |
89b6e743 457 S_IROTH, proc_cciss,
3dfcf9c4 458 &cciss_proc_fops, hba[i]);
1da177e4 459}
7c832835 460#endif /* CONFIG_PROC_FS */
1da177e4 461
7fe06326
AP		 462#define MAX_PRODUCT_NAME_LEN 19
463
464#define to_hba(n) container_of(n, struct ctlr_info, dev)
7fe06326 465
d6f4965d
AP		 466static ssize_t host_store_rescan(struct device *dev,
467 struct device_attribute *attr,
468 const char *buf, size_t count)
469{
470 struct ctlr_info *h = to_hba(dev);
471
472 add_to_scan_list(h);
473 wake_up_process(cciss_scan_thread);
474 wait_for_completion_interruptible(&h->scan_wait);
475
476 return count;
477}
478DEVICE_ATTR(rescan, S_IWUSR, NULL, host_store_rescan);
7fe06326
AP		 479
480static ssize_t dev_show_unique_id(struct device *dev,
481 struct device_attribute *attr,
482 char *buf)
483{
617e1344
SC		 484 drive_info_struct *drv = dev_get_drvdata(dev);
485 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 486 __u8 sn[16];
487 unsigned long flags;
488 int ret = 0;
489
490 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
491 if (h->busy_configuring)
492 ret = -EBUSY;
493 else
494 memcpy(sn, drv->serial_no, sizeof(sn));
495 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
496
497 if (ret)
498 return ret;
499 else
500 return snprintf(buf, 16 * 2 + 2,
501 "%02X%02X%02X%02X%02X%02X%02X%02X"
502 "%02X%02X%02X%02X%02X%02X%02X%02X\n",
503 sn[0], sn[1], sn[2], sn[3],
504 sn[4], sn[5], sn[6], sn[7],
505 sn[8], sn[9], sn[10], sn[11],
506 sn[12], sn[13], sn[14], sn[15]);
507}
508DEVICE_ATTR(unique_id, S_IRUGO, dev_show_unique_id, NULL);
509
510static ssize_t dev_show_vendor(struct device *dev,
511 struct device_attribute *attr,
512 char *buf)
513{
617e1344
SC		 514 drive_info_struct *drv = dev_get_drvdata(dev);
515 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 516 char vendor[VENDOR_LEN + 1];
517 unsigned long flags;
518 int ret = 0;
519
520 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
521 if (h->busy_configuring)
522 ret = -EBUSY;
523 else
524 memcpy(vendor, drv->vendor, VENDOR_LEN + 1);
525 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
526
527 if (ret)
528 return ret;
529 else
530 return snprintf(buf, sizeof(vendor) + 1, "%s\n", drv->vendor);
531}
532DEVICE_ATTR(vendor, S_IRUGO, dev_show_vendor, NULL);
533
534static ssize_t dev_show_model(struct device *dev,
535 struct device_attribute *attr,
536 char *buf)
537{
617e1344
SC		 538 drive_info_struct *drv = dev_get_drvdata(dev);
539 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 540 char model[MODEL_LEN + 1];
541 unsigned long flags;
542 int ret = 0;
543
544 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
545 if (h->busy_configuring)
546 ret = -EBUSY;
547 else
548 memcpy(model, drv->model, MODEL_LEN + 1);
549 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
550
551 if (ret)
552 return ret;
553 else
554 return snprintf(buf, sizeof(model) + 1, "%s\n", drv->model);
555}
556DEVICE_ATTR(model, S_IRUGO, dev_show_model, NULL);
557
558static ssize_t dev_show_rev(struct device *dev,
559 struct device_attribute *attr,
560 char *buf)
561{
617e1344
SC		 562 drive_info_struct *drv = dev_get_drvdata(dev);
563 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 564 char rev[REV_LEN + 1];
565 unsigned long flags;
566 int ret = 0;
567
568 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
569 if (h->busy_configuring)
570 ret = -EBUSY;
571 else
572 memcpy(rev, drv->rev, REV_LEN + 1);
573 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
574
575 if (ret)
576 return ret;
577 else
578 return snprintf(buf, sizeof(rev) + 1, "%s\n", drv->rev);
579}
580DEVICE_ATTR(rev, S_IRUGO, dev_show_rev, NULL);
581
d6f4965d
AP		 582static struct attribute *cciss_host_attrs[] = {
583 &dev_attr_rescan.attr,
584 NULL
585};
586
587static struct attribute_group cciss_host_attr_group = {
588 .attrs = cciss_host_attrs,
589};
590
591static struct attribute_group *cciss_host_attr_groups[] = {
592 &cciss_host_attr_group,
593 NULL
594};
595
596static struct device_type cciss_host_type = {
597 .name = "cciss_host",
598 .groups = cciss_host_attr_groups,
617e1344 599 .release = cciss_hba_release,
d6f4965d
AP		 600};
601
7fe06326
AP		 602static struct attribute *cciss_dev_attrs[] = {
603 &dev_attr_unique_id.attr,
604 &dev_attr_model.attr,
605 &dev_attr_vendor.attr,
606 &dev_attr_rev.attr,
607 NULL
608};
609
610static struct attribute_group cciss_dev_attr_group = {
611 .attrs = cciss_dev_attrs,
612};
613
a4dbd674 614static const struct attribute_group *cciss_dev_attr_groups[] = {
7fe06326
AP		 615 &cciss_dev_attr_group,
616 NULL
617};
618
619static struct device_type cciss_dev_type = {
620 .name = "cciss_device",
621 .groups = cciss_dev_attr_groups,
617e1344 622 .release = cciss_device_release,
7fe06326
AP		 623};
624
625static struct bus_type cciss_bus_type = {
626 .name = "cciss",
627};
628
617e1344
SC		 629/*
630 * cciss_hba_release is called when the reference count
631 * of h->dev goes to zero.
632 */
633static void cciss_hba_release(struct device *dev)
634{
635 /*
636 * nothing to do, but need this to avoid a warning
637 * about not having a release handler from lib/kref.c.
638 */
639}
7fe06326
AP		 640
641/*
642 * Initialize sysfs entry for each controller. This sets up and registers
643 * the 'cciss#' directory for each individual controller under
644 * /sys/bus/pci/devices/<dev>/.
645 */
646static int cciss_create_hba_sysfs_entry(struct ctlr_info *h)
647{
648 device_initialize(&h->dev);
649 h->dev.type = &cciss_host_type;
650 h->dev.bus = &cciss_bus_type;
651 dev_set_name(&h->dev, "%s", h->devname);
652 h->dev.parent = &h->pdev->dev;
653
654 return device_add(&h->dev);
655}
656
657/*
658 * Remove sysfs entries for an hba.
659 */
660static void cciss_destroy_hba_sysfs_entry(struct ctlr_info *h)
661{
662 device_del(&h->dev);
617e1344
SC		 663 put_device(&h->dev); /* final put. */
664}
665
666/* cciss_device_release is called when the reference count
667 * of h->drv[x].dev goes to zero.
668 */
669static void cciss_device_release(struct device *dev)
670{
671 kfree(dev);
7fe06326
AP		 672}
673
674/*
675 * Initialize sysfs for each logical drive. This sets up and registers
676 * the 'c#d#' directory for each individual logical drive under
677 * /sys/bus/pci/devices/<dev/ccis#/. We also create a link from
678 * /sys/block/cciss!c#d# to this entry.
679 */
617e1344 680static long cciss_create_ld_sysfs_entry(struct ctlr_info *h,
7fe06326
AP		 681 int drv_index)
682{
617e1344
SC		 683 struct device *dev;
684
685 dev = kzalloc(sizeof(*dev), GFP_KERNEL);
686 if (!dev)
687 return -ENOMEM;
688 device_initialize(dev);
689 dev->type = &cciss_dev_type;
690 dev->bus = &cciss_bus_type;
691 dev_set_name(dev, "c%dd%d", h->ctlr, drv_index);
692 dev->parent = &h->dev;
693 h->drv[drv_index].dev = dev;
694 dev_set_drvdata(dev, &h->drv[drv_index]);
695 return device_add(dev);
7fe06326
AP		 696}
697
698/*
699 * Remove sysfs entries for a logical drive.
700 */
617e1344 701static void cciss_destroy_ld_sysfs_entry(struct ctlr_info *h, int drv_index)
7fe06326 702{
617e1344
SC		 703 struct device *dev = h->drv[drv_index].dev;
704 device_del(dev);
705 put_device(dev); /* the "final" put. */
706 h->drv[drv_index].dev = NULL;
7fe06326
AP		 707}
708
7c832835
BH		 709/*
710 * For operations that cannot sleep, a command block is allocated at init,
1da177e4 711 * and managed by cmd_alloc() and cmd_free() using a simple bitmap to track
7c832835
BH		 712 * which ones are free or in use. For operations that can wait for kmalloc
713 * to possible sleep, this routine can be called with get_from_pool set to 0.
714 * cmd_free() MUST be called with a got_from_pool set to 0 if cmd_alloc was.
715 */
716static CommandList_struct *cmd_alloc(ctlr_info_t *h, int get_from_pool)
1da177e4
LT		 717{
718 CommandList_struct *c;
7c832835 719 int i;
1da177e4
LT		 720 u64bit temp64;
721 dma_addr_t cmd_dma_handle, err_dma_handle;
722
7c832835
BH		 723 if (!get_from_pool) {
724 c = (CommandList_struct *) pci_alloc_consistent(h->pdev,
725 sizeof(CommandList_struct), &cmd_dma_handle);
726 if (c == NULL)
727 return NULL;
1da177e4
LT		 728 memset(c, 0, sizeof(CommandList_struct));
729
33079b21
MM		 730 c->cmdindex = -1;
731
7c832835
BH		 732 c->err_info = (ErrorInfo_struct *)
733 pci_alloc_consistent(h->pdev, sizeof(ErrorInfo_struct),
734 &err_dma_handle);
735
736 if (c->err_info == NULL) {
737 pci_free_consistent(h->pdev,
1da177e4
LT		 738 sizeof(CommandList_struct), c, cmd_dma_handle);
739 return NULL;
740 }
741 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 742 } else { /* get it out of the controllers pool */
743
744 do {
f880632f
MM		 745 i = find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds);
746 if (i == h->nr_cmds)
7c832835
BH		 747 return NULL;
748 } while (test_and_set_bit
749 (i & (BITS_PER_LONG - 1),
750 h->cmd_pool_bits + (i / BITS_PER_LONG)) != 0);
1da177e4
LT		 751#ifdef CCISS_DEBUG
752 printk(KERN_DEBUG "cciss: using command buffer %d\n", i);
753#endif
7c832835 754 c = h->cmd_pool + i;
1da177e4 755 memset(c, 0, sizeof(CommandList_struct));
7c832835
BH		 756 cmd_dma_handle = h->cmd_pool_dhandle
757 + i * sizeof(CommandList_struct);
1da177e4
LT		 758 c->err_info = h->errinfo_pool + i;
759 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 760 err_dma_handle = h->errinfo_pool_dhandle
761 + i * sizeof(ErrorInfo_struct);
762 h->nr_allocs++;
33079b21
MM		 763
764 c->cmdindex = i;
7c832835 765 }
1da177e4 766
8a3173de 767 INIT_HLIST_NODE(&c->list);
1da177e4 768 c->busaddr = (__u32) cmd_dma_handle;
7c832835 769 temp64.val = (__u64) err_dma_handle;
1da177e4
LT		 770 c->ErrDesc.Addr.lower = temp64.val32.lower;
771 c->ErrDesc.Addr.upper = temp64.val32.upper;
772 c->ErrDesc.Len = sizeof(ErrorInfo_struct);
1da177e4 773
7c832835
BH		 774 c->ctlr = h->ctlr;
775 return c;
1da177e4
LT		 776}
777
7c832835
BH		 778/*
779 * Frees a command block that was previously allocated with cmd_alloc().
1da177e4
LT		 780 */
781static void cmd_free(ctlr_info_t *h, CommandList_struct *c, int got_from_pool)
782{
783 int i;
784 u64bit temp64;
785
7c832835 786 if (!got_from_pool) {
1da177e4
LT		 787 temp64.val32.lower = c->ErrDesc.Addr.lower;
788 temp64.val32.upper = c->ErrDesc.Addr.upper;
7c832835
BH		 789 pci_free_consistent(h->pdev, sizeof(ErrorInfo_struct),
790 c->err_info, (dma_addr_t) temp64.val);
791 pci_free_consistent(h->pdev, sizeof(CommandList_struct),
792 c, (dma_addr_t) c->busaddr);
793 } else {
1da177e4 794 i = c - h->cmd_pool;
7c832835
BH		 795 clear_bit(i & (BITS_PER_LONG - 1),
796 h->cmd_pool_bits + (i / BITS_PER_LONG));
797 h->nr_frees++;
798 }
1da177e4
LT		 799}
800
801static inline ctlr_info_t *get_host(struct gendisk *disk)
802{
7c832835 803 return disk->queue->queuedata;
1da177e4
LT		 804}
805
806static inline drive_info_struct *get_drv(struct gendisk *disk)
807{
808 return disk->private_data;
809}
810
811/*
812 * Open. Make sure the device is really there.
813 */
ef7822c2 814static int cciss_open(struct block_device *bdev, fmode_t mode)
1da177e4 815{
ef7822c2
AV		 816 ctlr_info_t *host = get_host(bdev->bd_disk);
817 drive_info_struct *drv = get_drv(bdev->bd_disk);
1da177e4
LT		 818
819#ifdef CCISS_DEBUG
ef7822c2 820 printk(KERN_DEBUG "cciss_open %s\n", bdev->bd_disk->disk_name);
7c832835 821#endif /* CCISS_DEBUG */
1da177e4 822
ddd47442
MM		 823 if (host->busy_initializing || drv->busy_configuring)
824 return -EBUSY;
1da177e4
LT		 825 /*
826 * Root is allowed to open raw volume zero even if it's not configured
827 * so array config can still work. Root is also allowed to open any
828 * volume that has a LUN ID, so it can issue IOCTL to reread the
829 * disk information. I don't think I really like this
830 * but I'm already using way to many device nodes to claim another one
831 * for "raw controller".
832 */
7a06f789 833 if (drv->heads == 0) {
ef7822c2 834 if (MINOR(bdev->bd_dev) != 0) { /* not node 0? */
1da177e4 835 /* if not node 0 make sure it is a partition = 0 */
ef7822c2 836 if (MINOR(bdev->bd_dev) & 0x0f) {
7c832835 837 return -ENXIO;
1da177e4
LT		 838 /* if it is, make sure we have a LUN ID */
839 } else if (drv->LunID == 0) {
840 return -ENXIO;
841 }
842 }
843 if (!capable(CAP_SYS_ADMIN))
844 return -EPERM;
845 }
846 drv->usage_count++;
847 host->usage_count++;
848 return 0;
849}
7c832835 850
1da177e4
LT		 851/*
852 * Close. Sync first.
853 */
ef7822c2 854static int cciss_release(struct gendisk *disk, fmode_t mode)
1da177e4 855{
ef7822c2
AV		 856 ctlr_info_t *host = get_host(disk);
857 drive_info_struct *drv = get_drv(disk);
1da177e4
LT		 858
859#ifdef CCISS_DEBUG
ef7822c2 860 printk(KERN_DEBUG "cciss_release %s\n", disk->disk_name);
7c832835 861#endif /* CCISS_DEBUG */
1da177e4
LT		 862
863 drv->usage_count--;
864 host->usage_count--;
865 return 0;
866}
867
868#ifdef CONFIG_COMPAT
869
ef7822c2
AV		 870static int do_ioctl(struct block_device *bdev, fmode_t mode,
871 unsigned cmd, unsigned long arg)
1da177e4
LT		 872{
873 int ret;
874 lock_kernel();
ef7822c2 875 ret = cciss_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 876 unlock_kernel();
877 return ret;
878}
879
ef7822c2
AV		 880static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
881 unsigned cmd, unsigned long arg);
882static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
883 unsigned cmd, unsigned long arg);
1da177e4 884
ef7822c2
AV		 885static int cciss_compat_ioctl(struct block_device *bdev, fmode_t mode,
886 unsigned cmd, unsigned long arg)
1da177e4
LT		 887{
888 switch (cmd) {
889 case CCISS_GETPCIINFO:
890 case CCISS_GETINTINFO:
891 case CCISS_SETINTINFO:
892 case CCISS_GETNODENAME:
893 case CCISS_SETNODENAME:
894 case CCISS_GETHEARTBEAT:
895 case CCISS_GETBUSTYPES:
896 case CCISS_GETFIRMVER:
897 case CCISS_GETDRIVVER:
898 case CCISS_REVALIDVOLS:
899 case CCISS_DEREGDISK:
900 case CCISS_REGNEWDISK:
901 case CCISS_REGNEWD:
902 case CCISS_RESCANDISK:
903 case CCISS_GETLUNINFO:
ef7822c2 904 return do_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 905
906 case CCISS_PASSTHRU32:
ef7822c2 907 return cciss_ioctl32_passthru(bdev, mode, cmd, arg);
1da177e4 908 case CCISS_BIG_PASSTHRU32:
ef7822c2 909 return cciss_ioctl32_big_passthru(bdev, mode, cmd, arg);
1da177e4
LT		 910
911 default:
912 return -ENOIOCTLCMD;
913 }
914}
915
ef7822c2
AV		 916static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
917 unsigned cmd, unsigned long arg)
1da177e4
LT		 918{
919 IOCTL32_Command_struct __user *arg32 =
7c832835 920 (IOCTL32_Command_struct __user *) arg;
1da177e4
LT		 921 IOCTL_Command_struct arg64;
922 IOCTL_Command_struct __user *p = compat_alloc_user_space(sizeof(arg64));
923 int err;
924 u32 cp;
925
926 err = 0;
7c832835
BH		 927 err |=
928 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
929 sizeof(arg64.LUN_info));
930 err |=
931 copy_from_user(&arg64.Request, &arg32->Request,
932 sizeof(arg64.Request));
933 err |=
934 copy_from_user(&arg64.error_info, &arg32->error_info,
935 sizeof(arg64.error_info));
1da177e4
LT		 936 err |= get_user(arg64.buf_size, &arg32->buf_size);
937 err |= get_user(cp, &arg32->buf);
938 arg64.buf = compat_ptr(cp);
939 err |= copy_to_user(p, &arg64, sizeof(arg64));
940
941 if (err)
942 return -EFAULT;
943
ef7822c2 944 err = do_ioctl(bdev, mode, CCISS_PASSTHRU, (unsigned long)p);
1da177e4
LT		 945 if (err)
946 return err;
7c832835
BH		 947 err |=
948 copy_in_user(&arg32->error_info, &p->error_info,
949 sizeof(arg32->error_info));
1da177e4
LT		 950 if (err)
951 return -EFAULT;
952 return err;
953}
954
ef7822c2
AV		 955static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
956 unsigned cmd, unsigned long arg)
1da177e4
LT		 957{
958 BIG_IOCTL32_Command_struct __user *arg32 =
7c832835 959 (BIG_IOCTL32_Command_struct __user *) arg;
1da177e4 960 BIG_IOCTL_Command_struct arg64;
7c832835
BH		 961 BIG_IOCTL_Command_struct __user *p =
962 compat_alloc_user_space(sizeof(arg64));
1da177e4
LT		 963 int err;
964 u32 cp;
965
966 err = 0;
7c832835
BH		 967 err |=
968 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
969 sizeof(arg64.LUN_info));
970 err |=
971 copy_from_user(&arg64.Request, &arg32->Request,
972 sizeof(arg64.Request));
973 err |=
974 copy_from_user(&arg64.error_info, &arg32->error_info,
975 sizeof(arg64.error_info));
1da177e4
LT		 976 err |= get_user(arg64.buf_size, &arg32->buf_size);
977 err |= get_user(arg64.malloc_size, &arg32->malloc_size);
978 err |= get_user(cp, &arg32->buf);
979 arg64.buf = compat_ptr(cp);
980 err |= copy_to_user(p, &arg64, sizeof(arg64));
981
982 if (err)
7c832835 983 return -EFAULT;
1da177e4 984
ef7822c2 985 err = do_ioctl(bdev, mode, CCISS_BIG_PASSTHRU, (unsigned long)p);
1da177e4
LT		 986 if (err)
987 return err;
7c832835
BH		 988 err |=
989 copy_in_user(&arg32->error_info, &p->error_info,
990 sizeof(arg32->error_info));
1da177e4
LT		 991 if (err)
992 return -EFAULT;
993 return err;
994}
995#endif
a885c8c4
CH		 996
997static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo)
998{
999 drive_info_struct *drv = get_drv(bdev->bd_disk);
1000
1001 if (!drv->cylinders)
1002 return -ENXIO;
1003
1004 geo->heads = drv->heads;
1005 geo->sectors = drv->sectors;
1006 geo->cylinders = drv->cylinders;
1007 return 0;
1008}
1009
0a9279cc
MM		 1010static void check_ioctl_unit_attention(ctlr_info_t *host, CommandList_struct *c)
1011{
1012 if (c->err_info->CommandStatus == CMD_TARGET_STATUS &&
1013 c->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION)
1014 (void)check_for_unit_attention(host, c);
1015}
1da177e4 1016/*
7c832835 1017 * ioctl
1da177e4 1018 */
ef7822c2 1019static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 1020 unsigned int cmd, unsigned long arg)
1da177e4 1021{
1da177e4
LT		 1022 struct gendisk *disk = bdev->bd_disk;
1023 ctlr_info_t *host = get_host(disk);
1024 drive_info_struct *drv = get_drv(disk);
1025 int ctlr = host->ctlr;
1026 void __user *argp = (void __user *)arg;
1027
1028#ifdef CCISS_DEBUG
1029 printk(KERN_DEBUG "cciss_ioctl: Called with cmd=%x %lx\n", cmd, arg);
7c832835
BH		 1030#endif /* CCISS_DEBUG */
1031
1032 switch (cmd) {
1da177e4 1033 case CCISS_GETPCIINFO:
7c832835
BH		 1034 {
1035 cciss_pci_info_struct pciinfo;
1036
1037 if (!arg)
1038 return -EINVAL;
1039 pciinfo.domain = pci_domain_nr(host->pdev->bus);
1040 pciinfo.bus = host->pdev->bus->number;
1041 pciinfo.dev_fn = host->pdev->devfn;
1042 pciinfo.board_id = host->board_id;
1043 if (copy_to_user
1044 (argp, &pciinfo, sizeof(cciss_pci_info_struct)))
1045 return -EFAULT;
1046 return 0;
1047 }
1da177e4 1048 case CCISS_GETINTINFO:
7c832835
BH		 1049 {
1050 cciss_coalint_struct intinfo;
1051 if (!arg)
1052 return -EINVAL;
1053 intinfo.delay =
1054 readl(&host->cfgtable->HostWrite.CoalIntDelay);
1055 intinfo.count =
1056 readl(&host->cfgtable->HostWrite.CoalIntCount);
1057 if (copy_to_user
1058 (argp, &intinfo, sizeof(cciss_coalint_struct)))
1059 return -EFAULT;
1060 return 0;
1061 }
1da177e4 1062 case CCISS_SETINTINFO:
1da177e4 1063 {
7c832835
BH		 1064 cciss_coalint_struct intinfo;
1065 unsigned long flags;
1066 int i;
1067
1068 if (!arg)
1069 return -EINVAL;
1070 if (!capable(CAP_SYS_ADMIN))
1071 return -EPERM;
1072 if (copy_from_user
1073 (&intinfo, argp, sizeof(cciss_coalint_struct)))
1074 return -EFAULT;
1075 if ((intinfo.delay == 0) && (intinfo.count == 0))
1076 {
1077// printk("cciss_ioctl: delay and count cannot be 0\n");
1078 return -EINVAL;
1079 }
1080 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1081 /* Update the field, and then ring the doorbell */
1082 writel(intinfo.delay,
1083 &(host->cfgtable->HostWrite.CoalIntDelay));
1084 writel(intinfo.count,
1085 &(host->cfgtable->HostWrite.CoalIntCount));
1086 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1087
1088 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1089 if (!(readl(host->vaddr + SA5_DOORBELL)
1090 & CFGTBL_ChangeReq))
1091 break;
1092 /* delay and try again */
1093 udelay(1000);
1094 }
1095 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1096 if (i >= MAX_IOCTL_CONFIG_WAIT)
1097 return -EAGAIN;
1098 return 0;
1da177e4 1099 }
1da177e4 1100 case CCISS_GETNODENAME:
7c832835
BH		 1101 {
1102 NodeName_type NodeName;
1103 int i;
1104
1105 if (!arg)
1106 return -EINVAL;
1107 for (i = 0; i < 16; i++)
1108 NodeName[i] =
1109 readb(&host->cfgtable->ServerName[i]);
1110 if (copy_to_user(argp, NodeName, sizeof(NodeName_type)))
1111 return -EFAULT;
1112 return 0;
1113 }
1da177e4 1114 case CCISS_SETNODENAME:
7c832835
BH		 1115 {
1116 NodeName_type NodeName;
1117 unsigned long flags;
1118 int i;
1119
1120 if (!arg)
1121 return -EINVAL;
1122 if (!capable(CAP_SYS_ADMIN))
1123 return -EPERM;
1124
1125 if (copy_from_user
1126 (NodeName, argp, sizeof(NodeName_type)))
1127 return -EFAULT;
1128
1129 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1130
1131 /* Update the field, and then ring the doorbell */
1132 for (i = 0; i < 16; i++)
1133 writeb(NodeName[i],
1134 &host->cfgtable->ServerName[i]);
1135
1136 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1137
1138 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1139 if (!(readl(host->vaddr + SA5_DOORBELL)
1140 & CFGTBL_ChangeReq))
1141 break;
1142 /* delay and try again */
1143 udelay(1000);
1144 }
1145 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1146 if (i >= MAX_IOCTL_CONFIG_WAIT)
1147 return -EAGAIN;
1148 return 0;
1149 }
1da177e4
LT		 1150
1151 case CCISS_GETHEARTBEAT:
7c832835
BH		 1152 {
1153 Heartbeat_type heartbeat;
1154
1155 if (!arg)
1156 return -EINVAL;
1157 heartbeat = readl(&host->cfgtable->HeartBeat);
1158 if (copy_to_user
1159 (argp, &heartbeat, sizeof(Heartbeat_type)))
1160 return -EFAULT;
1161 return 0;
1162 }
1da177e4 1163 case CCISS_GETBUSTYPES:
7c832835
BH		 1164 {
1165 BusTypes_type BusTypes;
1166
1167 if (!arg)
1168 return -EINVAL;
1169 BusTypes = readl(&host->cfgtable->BusTypes);
1170 if (copy_to_user
1171 (argp, &BusTypes, sizeof(BusTypes_type)))
1172 return -EFAULT;
1173 return 0;
1174 }
1da177e4 1175 case CCISS_GETFIRMVER:
7c832835
BH		 1176 {
1177 FirmwareVer_type firmware;
1da177e4 1178
7c832835
BH		 1179 if (!arg)
1180 return -EINVAL;
1181 memcpy(firmware, host->firm_ver, 4);
1da177e4 1182
7c832835
BH		 1183 if (copy_to_user
1184 (argp, firmware, sizeof(FirmwareVer_type)))
1185 return -EFAULT;
1186 return 0;
1187 }
1188 case CCISS_GETDRIVVER:
1189 {
1190 DriverVer_type DriverVer = DRIVER_VERSION;
1da177e4 1191
7c832835
BH		 1192 if (!arg)
1193 return -EINVAL;
1da177e4 1194
7c832835
BH		 1195 if (copy_to_user
1196 (argp, &DriverVer, sizeof(DriverVer_type)))
1197 return -EFAULT;
1198 return 0;
1199 }
1da177e4 1200
6ae5ce8e
MM		 1201 case CCISS_DEREGDISK:
1202 case CCISS_REGNEWD:
1da177e4 1203 case CCISS_REVALIDVOLS:
6ae5ce8e 1204 return rebuild_lun_table(host, 0);
7c832835
BH		 1205
1206 case CCISS_GETLUNINFO:{
1207 LogvolInfo_struct luninfo;
1208
1209 luninfo.LunID = drv->LunID;
1210 luninfo.num_opens = drv->usage_count;
1211 luninfo.num_parts = 0;
1212 if (copy_to_user(argp, &luninfo,
1213 sizeof(LogvolInfo_struct)))
1214 return -EFAULT;
1215 return 0;
1216 }
1da177e4 1217 case CCISS_PASSTHRU:
1da177e4 1218 {
7c832835
BH		 1219 IOCTL_Command_struct iocommand;
1220 CommandList_struct *c;
1221 char *buff = NULL;
1222 u64bit temp64;
1223 unsigned long flags;
6e9a4738 1224 DECLARE_COMPLETION_ONSTACK(wait);
1da177e4 1225
7c832835
BH		 1226 if (!arg)
1227 return -EINVAL;
1da177e4 1228
7c832835
BH		 1229 if (!capable(CAP_SYS_RAWIO))
1230 return -EPERM;
1da177e4 1231
7c832835
BH		 1232 if (copy_from_user
1233 (&iocommand, argp, sizeof(IOCTL_Command_struct)))
1234 return -EFAULT;
1235 if ((iocommand.buf_size < 1) &&
1236 (iocommand.Request.Type.Direction != XFER_NONE)) {
1237 return -EINVAL;
1238 }
1239#if 0 /* 'buf_size' member is 16-bits, and always smaller than kmalloc limit */
1240 /* Check kmalloc limits */
1241 if (iocommand.buf_size > 128000)
1242 return -EINVAL;
1243#endif
1244 if (iocommand.buf_size > 0) {
1245 buff = kmalloc(iocommand.buf_size, GFP_KERNEL);
1246 if (buff == NULL)
1247 return -EFAULT;
1248 }
1249 if (iocommand.Request.Type.Direction == XFER_WRITE) {
1250 /* Copy the data into the buffer we created */
1251 if (copy_from_user
1252 (buff, iocommand.buf, iocommand.buf_size)) {
1253 kfree(buff);
1254 return -EFAULT;
1255 }
1256 } else {
1257 memset(buff, 0, iocommand.buf_size);
1258 }
1259 if ((c = cmd_alloc(host, 0)) == NULL) {
1260 kfree(buff);
1261 return -ENOMEM;
1262 }
1263 // Fill in the command type
1264 c->cmd_type = CMD_IOCTL_PEND;
1265 // Fill in Command Header
1266 c->Header.ReplyQueue = 0; // unused in simple mode
1267 if (iocommand.buf_size > 0) // buffer to fill
1268 {
1269 c->Header.SGList = 1;
1270 c->Header.SGTotal = 1;
1271 } else // no buffers to fill
1272 {
1273 c->Header.SGList = 0;
1274 c->Header.SGTotal = 0;
1275 }
1276 c->Header.LUN = iocommand.LUN_info;
1277 c->Header.Tag.lower = c->busaddr; // use the kernel address the cmd block for tag
1da177e4 1278
7c832835
BH		 1279 // Fill in Request block
1280 c->Request = iocommand.Request;
1da177e4 1281
7c832835
BH		 1282 // Fill in the scatter gather information
1283 if (iocommand.buf_size > 0) {
1284 temp64.val = pci_map_single(host->pdev, buff,
1285 iocommand.buf_size,
1286 PCI_DMA_BIDIRECTIONAL);
1287 c->SG[0].Addr.lower = temp64.val32.lower;
1288 c->SG[0].Addr.upper = temp64.val32.upper;
1289 c->SG[0].Len = iocommand.buf_size;
1290 c->SG[0].Ext = 0; // we are not chaining
1291 }
1292 c->waiting = &wait;
1293
1294 /* Put the request on the tail of the request queue */
1295 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1296 addQ(&host->reqQ, c);
1297 host->Qdepth++;
1298 start_io(host);
1299 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1300
1301 wait_for_completion(&wait);
1302
1303 /* unlock the buffers from DMA */
1304 temp64.val32.lower = c->SG[0].Addr.lower;
1305 temp64.val32.upper = c->SG[0].Addr.upper;
1306 pci_unmap_single(host->pdev, (dma_addr_t) temp64.val,
1307 iocommand.buf_size,
1308 PCI_DMA_BIDIRECTIONAL);
1309
0a9279cc
MM		 1310 check_ioctl_unit_attention(host, c);
1311
7c832835
BH		 1312 /* Copy the error information out */
1313 iocommand.error_info = *(c->err_info);
1314 if (copy_to_user
1315 (argp, &iocommand, sizeof(IOCTL_Command_struct))) {
1316 kfree(buff);
1da177e4
LT		 1317 cmd_free(host, c, 0);
1318 return -EFAULT;
1319 }
7c832835
BH		 1320
1321 if (iocommand.Request.Type.Direction == XFER_READ) {
1322 /* Copy the data out of the buffer we created */
1323 if (copy_to_user
1324 (iocommand.buf, buff, iocommand.buf_size)) {
1325 kfree(buff);
1326 cmd_free(host, c, 0);
1327 return -EFAULT;
1328 }
1329 }
1330 kfree(buff);
1331 cmd_free(host, c, 0);
1332 return 0;
1da177e4 1333 }
7c832835
BH		 1334 case CCISS_BIG_PASSTHRU:{
1335 BIG_IOCTL_Command_struct *ioc;
1336 CommandList_struct *c;
1337 unsigned char **buff = NULL;
1338 int *buff_size = NULL;
1339 u64bit temp64;
1340 unsigned long flags;
1341 BYTE sg_used = 0;
1342 int status = 0;
1343 int i;
6e9a4738 1344 DECLARE_COMPLETION_ONSTACK(wait);
7c832835
BH		 1345 __u32 left;
1346 __u32 sz;
1347 BYTE __user *data_ptr;
1348
1349 if (!arg)
1350 return -EINVAL;
1351 if (!capable(CAP_SYS_RAWIO))
1352 return -EPERM;
1353 ioc = (BIG_IOCTL_Command_struct *)
1354 kmalloc(sizeof(*ioc), GFP_KERNEL);
1355 if (!ioc) {
1356 status = -ENOMEM;
1357 goto cleanup1;
1358 }
1359 if (copy_from_user(ioc, argp, sizeof(*ioc))) {
1360 status = -EFAULT;
1361 goto cleanup1;
1362 }
1363 if ((ioc->buf_size < 1) &&
1364 (ioc->Request.Type.Direction != XFER_NONE)) {
1da177e4
LT		 1365 status = -EINVAL;
1366 goto cleanup1;
7c832835
BH		 1367 }
1368 /* Check kmalloc limits using all SGs */
1369 if (ioc->malloc_size > MAX_KMALLOC_SIZE) {
1370 status = -EINVAL;
1371 goto cleanup1;
1372 }
1373 if (ioc->buf_size > ioc->malloc_size * MAXSGENTRIES) {
1374 status = -EINVAL;
1375 goto cleanup1;
1376 }
1377 buff =
1378 kzalloc(MAXSGENTRIES * sizeof(char *), GFP_KERNEL);
1379 if (!buff) {
1da177e4
LT		 1380 status = -ENOMEM;
1381 goto cleanup1;
1382 }
5cbded58 1383 buff_size = kmalloc(MAXSGENTRIES * sizeof(int),
7c832835
BH		 1384 GFP_KERNEL);
1385 if (!buff_size) {
1386 status = -ENOMEM;
1387 goto cleanup1;
1388 }
1389 left = ioc->buf_size;
1390 data_ptr = ioc->buf;
1391 while (left) {
1392 sz = (left >
1393 ioc->malloc_size) ? ioc->
1394 malloc_size : left;
1395 buff_size[sg_used] = sz;
1396 buff[sg_used] = kmalloc(sz, GFP_KERNEL);
1397 if (buff[sg_used] == NULL) {
1da177e4 1398 status = -ENOMEM;
15534d38
JA		 1399 goto cleanup1;
1400 }
7c832835
BH		 1401 if (ioc->Request.Type.Direction == XFER_WRITE) {
1402 if (copy_from_user
1403 (buff[sg_used], data_ptr, sz)) {
f7108f91 1404 status = -EFAULT;
7c832835
BH		 1405 goto cleanup1;
1406 }
1407 } else {
1408 memset(buff[sg_used], 0, sz);
1409 }
1410 left -= sz;
1411 data_ptr += sz;
1412 sg_used++;
1413 }
1414 if ((c = cmd_alloc(host, 0)) == NULL) {
1415 status = -ENOMEM;
1416 goto cleanup1;
1417 }
1418 c->cmd_type = CMD_IOCTL_PEND;
1419 c->Header.ReplyQueue = 0;
1420
1421 if (ioc->buf_size > 0) {
1422 c->Header.SGList = sg_used;
1423 c->Header.SGTotal = sg_used;
1da177e4 1424 } else {
7c832835
BH		 1425 c->Header.SGList = 0;
1426 c->Header.SGTotal = 0;
1da177e4 1427 }
7c832835
BH		 1428 c->Header.LUN = ioc->LUN_info;
1429 c->Header.Tag.lower = c->busaddr;
1430
1431 c->Request = ioc->Request;
1432 if (ioc->buf_size > 0) {
1433 int i;
1434 for (i = 0; i < sg_used; i++) {
1435 temp64.val =
1436 pci_map_single(host->pdev, buff[i],
1437 buff_size[i],
1438 PCI_DMA_BIDIRECTIONAL);
1439 c->SG[i].Addr.lower =
1440 temp64.val32.lower;
1441 c->SG[i].Addr.upper =
1442 temp64.val32.upper;
1443 c->SG[i].Len = buff_size[i];
1444 c->SG[i].Ext = 0; /* we are not chaining */
1445 }
1446 }
1447 c->waiting = &wait;
1448 /* Put the request on the tail of the request queue */
1449 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1450 addQ(&host->reqQ, c);
1451 host->Qdepth++;
1452 start_io(host);
1453 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1454 wait_for_completion(&wait);
1455 /* unlock the buffers from DMA */
1456 for (i = 0; i < sg_used; i++) {
1457 temp64.val32.lower = c->SG[i].Addr.lower;
1458 temp64.val32.upper = c->SG[i].Addr.upper;
1459 pci_unmap_single(host->pdev,
1460 (dma_addr_t) temp64.val, buff_size[i],
1da177e4 1461 PCI_DMA_BIDIRECTIONAL);
1da177e4 1462 }
0a9279cc 1463 check_ioctl_unit_attention(host, c);
7c832835
BH		 1464 /* Copy the error information out */
1465 ioc->error_info = *(c->err_info);
1466 if (copy_to_user(argp, ioc, sizeof(*ioc))) {
1467 cmd_free(host, c, 0);
1468 status = -EFAULT;
1469 goto cleanup1;
1470 }
1471 if (ioc->Request.Type.Direction == XFER_READ) {
1472 /* Copy the data out of the buffer we created */
1473 BYTE __user *ptr = ioc->buf;
1474 for (i = 0; i < sg_used; i++) {
1475 if (copy_to_user
1476 (ptr, buff[i], buff_size[i])) {
1477 cmd_free(host, c, 0);
1478 status = -EFAULT;
1479 goto cleanup1;
1480 }
1481 ptr += buff_size[i];
1da177e4 1482 }
1da177e4 1483 }
7c832835
BH		 1484 cmd_free(host, c, 0);
1485 status = 0;
1486 cleanup1:
1487 if (buff) {
1488 for (i = 0; i < sg_used; i++)
1489 kfree(buff[i]);
1490 kfree(buff);
1491 }
1492 kfree(buff_size);
1493 kfree(ioc);
1494 return status;
1da177e4 1495 }
03bbfee5
MMOD		 1496
1497 /* scsi_cmd_ioctl handles these, below, though some are not */
1498 /* very meaningful for cciss. SG_IO is the main one people want. */
1499
1500 case SG_GET_VERSION_NUM:
1501 case SG_SET_TIMEOUT:
1502 case SG_GET_TIMEOUT:
1503 case SG_GET_RESERVED_SIZE:
1504 case SG_SET_RESERVED_SIZE:
1505 case SG_EMULATED_HOST:
1506 case SG_IO:
1507 case SCSI_IOCTL_SEND_COMMAND:
ef7822c2 1508 return scsi_cmd_ioctl(disk->queue, disk, mode, cmd, argp);
03bbfee5
MMOD		 1509
1510 /* scsi_cmd_ioctl would normally handle these, below, but */
1511 /* they aren't a good fit for cciss, as CD-ROMs are */
1512 /* not supported, and we don't have any bus/target/lun */
1513 /* which we present to the kernel. */
1514
1515 case CDROM_SEND_PACKET:
1516 case CDROMCLOSETRAY:
1517 case CDROMEJECT:
1518 case SCSI_IOCTL_GET_IDLUN:
1519 case SCSI_IOCTL_GET_BUS_NUMBER:
1da177e4
LT		 1520 default:
1521 return -ENOTTY;
1522 }
1da177e4
LT		 1523}
1524
7b30f092
JA		 1525static void cciss_check_queues(ctlr_info_t *h)
1526{
1527 int start_queue = h->next_to_run;
1528 int i;
1529
1530 /* check to see if we have maxed out the number of commands that can
1531 * be placed on the queue. If so then exit. We do this check here
1532 * in case the interrupt we serviced was from an ioctl and did not
1533 * free any new commands.
1534 */
f880632f 1535 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds)
7b30f092
JA		 1536 return;
1537
1538 /* We have room on the queue for more commands. Now we need to queue
1539 * them up. We will also keep track of the next queue to run so
1540 * that every queue gets a chance to be started first.
1541 */
1542 for (i = 0; i < h->highest_lun + 1; i++) {
1543 int curr_queue = (start_queue + i) % (h->highest_lun + 1);
1544 /* make sure the disk has been added and the drive is real
1545 * because this can be called from the middle of init_one.
1546 */
1547 if (!(h->drv[curr_queue].queue) || !(h->drv[curr_queue].heads))
1548 continue;
1549 blk_start_queue(h->gendisk[curr_queue]->queue);
1550
1551 /* check to see if we have maxed out the number of commands
1552 * that can be placed on the queue.
1553 */
f880632f 1554 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds) {
7b30f092
JA		 1555 if (curr_queue == start_queue) {
1556 h->next_to_run =
1557 (start_queue + 1) % (h->highest_lun + 1);
1558 break;
1559 } else {
1560 h->next_to_run = curr_queue;
1561 break;
1562 }
7b30f092
JA		 1563 }
1564 }
1565}
1566
ca1e0484
MM		 1567static void cciss_softirq_done(struct request *rq)
1568{
1569 CommandList_struct *cmd = rq->completion_data;
1570 ctlr_info_t *h = hba[cmd->ctlr];
1571 unsigned long flags;
1572 u64bit temp64;
1573 int i, ddir;
1574
1575 if (cmd->Request.Type.Direction == XFER_READ)
1576 ddir = PCI_DMA_FROMDEVICE;
1577 else
1578 ddir = PCI_DMA_TODEVICE;
1579
1580 /* command did not need to be retried */
1581 /* unmap the DMA mapping for all the scatter gather elements */
7c832835 1582 for (i = 0; i < cmd->Header.SGList; i++) {
ca1e0484
MM		 1583 temp64.val32.lower = cmd->SG[i].Addr.lower;
1584 temp64.val32.upper = cmd->SG[i].Addr.upper;
1585 pci_unmap_page(h->pdev, temp64.val, cmd->SG[i].Len, ddir);
1586 }
1587
ca1e0484
MM		 1588#ifdef CCISS_DEBUG
1589 printk("Done with %p\n", rq);
7c832835 1590#endif /* CCISS_DEBUG */
ca1e0484 1591
c3a4d78c 1592 /* set the residual count for pc requests */
ac44e5b2 1593 if (blk_pc_request(rq))
c3a4d78c 1594 rq->resid_len = cmd->err_info->ResidualCnt;
ac44e5b2 1595
c3a4d78c 1596 blk_end_request_all(rq, (rq->errors == 0) ? 0 : -EIO);
3daeea29 1597
ca1e0484 1598 spin_lock_irqsave(&h->lock, flags);
7c832835 1599 cmd_free(h, cmd, 1);
7b30f092 1600 cciss_check_queues(h);
ca1e0484
MM		 1601 spin_unlock_irqrestore(&h->lock, flags);
1602}
1603
b57695fe 1604static void log_unit_to_scsi3addr(ctlr_info_t *h, unsigned char scsi3addr[],
1605 uint32_t log_unit)
1606{
1607 log_unit = h->drv[log_unit].LunID & 0x03fff;
1608 memset(&scsi3addr[4], 0, 4);
1609 memcpy(&scsi3addr[0], &log_unit, 4);
1610 scsi3addr[3] |= 0x40;
1611}
1612
7fe06326
AP		 1613/* This function gets the SCSI vendor, model, and revision of a logical drive
1614 * via the inquiry page 0. Model, vendor, and rev are set to empty strings if
1615 * they cannot be read.
1616 */
1617static void cciss_get_device_descr(int ctlr, int logvol, int withirq,
1618 char *vendor, char *model, char *rev)
1619{
1620 int rc;
1621 InquiryData_struct *inq_buf;
b57695fe 1622 unsigned char scsi3addr[8];
7fe06326
AP		 1623
1624 *vendor = '\0';
1625 *model = '\0';
1626 *rev = '\0';
1627
1628 inq_buf = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1629 if (!inq_buf)
1630 return;
1631
b57695fe 1632 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
7fe06326
AP		 1633 if (withirq)
1634 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1635 sizeof(InquiryData_struct), 0,
1636 scsi3addr, TYPE_CMD);
7fe06326
AP		 1637 else
1638 rc = sendcmd(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1639 sizeof(InquiryData_struct), 0,
1640 scsi3addr, TYPE_CMD);
7fe06326
AP		 1641 if (rc == IO_OK) {
1642 memcpy(vendor, &inq_buf->data_byte[8], VENDOR_LEN);
1643 vendor[VENDOR_LEN] = '\0';
1644 memcpy(model, &inq_buf->data_byte[16], MODEL_LEN);
1645 model[MODEL_LEN] = '\0';
1646 memcpy(rev, &inq_buf->data_byte[32], REV_LEN);
1647 rev[REV_LEN] = '\0';
1648 }
1649
1650 kfree(inq_buf);
1651 return;
1652}
1653
a72da29b
MM		 1654/* This function gets the serial number of a logical drive via
1655 * inquiry page 0x83. Serial no. is 16 bytes. If the serial
1656 * number cannot be had, for whatever reason, 16 bytes of 0xff
1657 * are returned instead.
1658 */
1659static void cciss_get_serial_no(int ctlr, int logvol, int withirq,
1660 unsigned char *serial_no, int buflen)
1661{
1662#define PAGE_83_INQ_BYTES 64
1663 int rc;
1664 unsigned char *buf;
b57695fe 1665 unsigned char scsi3addr[8];
a72da29b
MM		 1666
1667 if (buflen > 16)
1668 buflen = 16;
1669 memset(serial_no, 0xff, buflen);
1670 buf = kzalloc(PAGE_83_INQ_BYTES, GFP_KERNEL);
1671 if (!buf)
1672 return;
1673 memset(serial_no, 0, buflen);
b57695fe 1674 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
a72da29b
MM		 1675 if (withirq)
1676 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, buf,
b57695fe 1677 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1678 else
1679 rc = sendcmd(CISS_INQUIRY, ctlr, buf,
b57695fe 1680 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1681 if (rc == IO_OK)
1682 memcpy(serial_no, &buf[8], buflen);
1683 kfree(buf);
1684 return;
1685}
1686
617e1344
SC		 1687/*
1688 * cciss_add_disk sets up the block device queue for a logical drive
1689 */
1690static int cciss_add_disk(ctlr_info_t *h, struct gendisk *disk,
6ae5ce8e
MM		 1691 int drv_index)
1692{
1693 disk->queue = blk_init_queue(do_cciss_request, &h->lock);
e8074f79
SC		 1694 if (!disk->queue)
1695 goto init_queue_failure;
6ae5ce8e
MM		 1696 sprintf(disk->disk_name, "cciss/c%dd%d", h->ctlr, drv_index);
1697 disk->major = h->major;
1698 disk->first_minor = drv_index << NWD_SHIFT;
1699 disk->fops = &cciss_fops;
617e1344
SC		 1700 if (h->drv[drv_index].dev == NULL) {
1701 if (cciss_create_ld_sysfs_entry(h, drv_index))
1702 goto cleanup_queue;
1703 }
6ae5ce8e 1704 disk->private_data = &h->drv[drv_index];
617e1344 1705 disk->driverfs_dev = h->drv[drv_index].dev;
6ae5ce8e
MM		 1706
1707 /* Set up queue information */
1708 blk_queue_bounce_limit(disk->queue, h->pdev->dma_mask);
1709
1710 /* This is a hardware imposed limit. */
1711 blk_queue_max_hw_segments(disk->queue, MAXSGENTRIES);
1712
1713 /* This is a limit in the driver and could be eliminated. */
1714 blk_queue_max_phys_segments(disk->queue, MAXSGENTRIES);
1715
1716 blk_queue_max_sectors(disk->queue, h->cciss_max_sectors);
1717
1718 blk_queue_softirq_done(disk->queue, cciss_softirq_done);
1719
1720 disk->queue->queuedata = h;
1721
e1defc4f
MP		 1722 blk_queue_logical_block_size(disk->queue,
1723 h->drv[drv_index].block_size);
6ae5ce8e
MM		 1724
1725 /* Make sure all queue data is written out before */
1726 /* setting h->drv[drv_index].queue, as setting this */
1727 /* allows the interrupt handler to start the queue */
1728 wmb();
1729 h->drv[drv_index].queue = disk->queue;
1730 add_disk(disk);
617e1344
SC		 1731 return 0;
1732
1733cleanup_queue:
1734 blk_cleanup_queue(disk->queue);
1735 disk->queue = NULL;
e8074f79 1736init_queue_failure:
617e1344 1737 return -1;
6ae5ce8e
MM		 1738}
1739
ddd47442 1740/* This function will check the usage_count of the drive to be updated/added.
a72da29b
MM		 1741 * If the usage_count is zero and it is a heretofore unknown drive, or,
1742 * the drive's capacity, geometry, or serial number has changed,
1743 * then the drive information will be updated and the disk will be
1744 * re-registered with the kernel. If these conditions don't hold,
1745 * then it will be left alone for the next reboot. The exception to this
1746 * is disk 0 which will always be left registered with the kernel since it
1747 * is also the controller node. Any changes to disk 0 will show up on
1748 * the next reboot.
7c832835 1749 */
6ae5ce8e 1750static void cciss_update_drive_info(int ctlr, int drv_index, int first_time)
7c832835 1751{
ddd47442
MM		 1752 ctlr_info_t *h = hba[ctlr];
1753 struct gendisk *disk;
ddd47442
MM		 1754 InquiryData_struct *inq_buff = NULL;
1755 unsigned int block_size;
00988a35 1756 sector_t total_size;
ddd47442
MM		 1757 unsigned long flags = 0;
1758 int ret = 0;
a72da29b
MM		 1759 drive_info_struct *drvinfo;
1760
1761 /* Get information about the disk and modify the driver structure */
1762 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1763 drvinfo = kmalloc(sizeof(*drvinfo), GFP_KERNEL);
1764 if (inq_buff == NULL || drvinfo == NULL)
1765 goto mem_msg;
1766
1767 /* testing to see if 16-byte CDBs are already being used */
1768 if (h->cciss_read == CCISS_READ_16) {
1769 cciss_read_capacity_16(h->ctlr, drv_index, 1,
1770 &total_size, &block_size);
1771
1772 } else {
1773 cciss_read_capacity(ctlr, drv_index, 1,
1774 &total_size, &block_size);
1775
1776 /* if read_capacity returns all F's this volume is >2TB */
1777 /* in size so we switch to 16-byte CDB's for all */
1778 /* read/write ops */
1779 if (total_size == 0xFFFFFFFFULL) {
1780 cciss_read_capacity_16(ctlr, drv_index, 1,
1781 &total_size, &block_size);
1782 h->cciss_read = CCISS_READ_16;
1783 h->cciss_write = CCISS_WRITE_16;
1784 } else {
1785 h->cciss_read = CCISS_READ_10;
1786 h->cciss_write = CCISS_WRITE_10;
1787 }
1788 }
1789
1790 cciss_geometry_inquiry(ctlr, drv_index, 1, total_size, block_size,
1791 inq_buff, drvinfo);
1792 drvinfo->block_size = block_size;
1793 drvinfo->nr_blocks = total_size + 1;
1794
7fe06326
AP		 1795 cciss_get_device_descr(ctlr, drv_index, 1, drvinfo->vendor,
1796 drvinfo->model, drvinfo->rev);
a72da29b
MM		 1797 cciss_get_serial_no(ctlr, drv_index, 1, drvinfo->serial_no,
1798 sizeof(drvinfo->serial_no));
1799
1800 /* Is it the same disk we already know, and nothing's changed? */
1801 if (h->drv[drv_index].raid_level != -1 &&
1802 ((memcmp(drvinfo->serial_no,
1803 h->drv[drv_index].serial_no, 16) == 0) &&
1804 drvinfo->block_size == h->drv[drv_index].block_size &&
1805 drvinfo->nr_blocks == h->drv[drv_index].nr_blocks &&
1806 drvinfo->heads == h->drv[drv_index].heads &&
1807 drvinfo->sectors == h->drv[drv_index].sectors &&
6ae5ce8e 1808 drvinfo->cylinders == h->drv[drv_index].cylinders))
a72da29b
MM		 1809 /* The disk is unchanged, nothing to update */
1810 goto freeret;
a72da29b 1811
6ae5ce8e
MM		 1812 /* If we get here it's not the same disk, or something's changed,
1813 * so we need to * deregister it, and re-register it, if it's not
1814 * in use.
1815 * If the disk already exists then deregister it before proceeding
1816 * (unless it's the first disk (for the controller node).
1817 */
a72da29b
MM		 1818 if (h->drv[drv_index].raid_level != -1 && drv_index != 0) {
1819 printk(KERN_WARNING "disk %d has changed.\n", drv_index);
ddd47442
MM		 1820 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
1821 h->drv[drv_index].busy_configuring = 1;
1822 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
e14ac670 1823
6ae5ce8e
MM		 1824 /* deregister_disk sets h->drv[drv_index].queue = NULL
1825 * which keeps the interrupt handler from starting
1826 * the queue.
1827 */
a0ea8622 1828 ret = deregister_disk(h, drv_index, 0);
ddd47442
MM		 1829 h->drv[drv_index].busy_configuring = 0;
1830 }
1831
1832 /* If the disk is in use return */
1833 if (ret)
a72da29b
MM		 1834 goto freeret;
1835
6ae5ce8e
MM		 1836 /* Save the new information from cciss_geometry_inquiry
1837 * and serial number inquiry.
1838 */
a72da29b
MM		 1839 h->drv[drv_index].block_size = drvinfo->block_size;
1840 h->drv[drv_index].nr_blocks = drvinfo->nr_blocks;
1841 h->drv[drv_index].heads = drvinfo->heads;
1842 h->drv[drv_index].sectors = drvinfo->sectors;
1843 h->drv[drv_index].cylinders = drvinfo->cylinders;
1844 h->drv[drv_index].raid_level = drvinfo->raid_level;
1845 memcpy(h->drv[drv_index].serial_no, drvinfo->serial_no, 16);
7fe06326
AP		 1846 memcpy(h->drv[drv_index].vendor, drvinfo->vendor, VENDOR_LEN + 1);
1847 memcpy(h->drv[drv_index].model, drvinfo->model, MODEL_LEN + 1);
1848 memcpy(h->drv[drv_index].rev, drvinfo->rev, REV_LEN + 1);
ddd47442
MM		 1849
1850 ++h->num_luns;
1851 disk = h->gendisk[drv_index];
1852 set_capacity(disk, h->drv[drv_index].nr_blocks);
1853
6ae5ce8e
MM		 1854 /* If it's not disk 0 (drv_index != 0)
1855 * or if it was disk 0, but there was previously
1856 * no actual corresponding configured logical drive
1857 * (raid_leve == -1) then we want to update the
1858 * logical drive's information.
1859 */
361e9b07
SC		 1860 if (drv_index || first_time) {
1861 if (cciss_add_disk(h, disk, drv_index) != 0) {
1862 cciss_free_gendisk(h, drv_index);
1863 printk(KERN_WARNING "cciss:%d could not update "
1864 "disk %d\n", h->ctlr, drv_index);
1865 --h->num_luns;
1866 }
1867 }
ddd47442 1868
6ae5ce8e 1869freeret:
ddd47442 1870 kfree(inq_buff);
a72da29b 1871 kfree(drvinfo);
ddd47442 1872 return;
6ae5ce8e 1873mem_msg:
ddd47442
MM		 1874 printk(KERN_ERR "cciss: out of memory\n");
1875 goto freeret;
1876}
1877
1878/* This function will find the first index of the controllers drive array
1879 * that has a -1 for the raid_level and will return that index. This is
1880 * where new drives will be added. If the index to be returned is greater
1881 * than the highest_lun index for the controller then highest_lun is set
1882 * to this new index. If there are no available indexes then -1 is returned.
eece695f
MM		 1883 * "controller_node" is used to know if this is a real logical drive, or just
1884 * the controller node, which determines if this counts towards highest_lun.
7c832835 1885 */
eece695f 1886static int cciss_find_free_drive_index(int ctlr, int controller_node)
ddd47442
MM		 1887{
1888 int i;
1889
7c832835
BH		 1890 for (i = 0; i < CISS_MAX_LUN; i++) {
1891 if (hba[ctlr]->drv[i].raid_level == -1) {
ddd47442 1892 if (i > hba[ctlr]->highest_lun)
eece695f
MM		 1893 if (!controller_node)
1894 hba[ctlr]->highest_lun = i;
ddd47442
MM		 1895 return i;
1896 }
1897 }
1898 return -1;
1899}
1900
361e9b07
SC		 1901static void cciss_free_gendisk(ctlr_info_t *h, int drv_index)
1902{
1903 put_disk(h->gendisk[drv_index]);
1904 h->gendisk[drv_index] = NULL;
1905}
1906
6ae5ce8e
MM		 1907/* cciss_add_gendisk finds a free hba[]->drv structure
1908 * and allocates a gendisk if needed, and sets the lunid
1909 * in the drvinfo structure. It returns the index into
1910 * the ->drv[] array, or -1 if none are free.
1911 * is_controller_node indicates whether highest_lun should
1912 * count this disk, or if it's only being added to provide
1913 * a means to talk to the controller in case no logical
1914 * drives have yet been configured.
1915 */
eece695f 1916static int cciss_add_gendisk(ctlr_info_t *h, __u32 lunid, int controller_node)
6ae5ce8e
MM		 1917{
1918 int drv_index;
1919
eece695f 1920 drv_index = cciss_find_free_drive_index(h->ctlr, controller_node);
6ae5ce8e
MM		 1921 if (drv_index == -1)
1922 return -1;
1923 /*Check if the gendisk needs to be allocated */
1924 if (!h->gendisk[drv_index]) {
1925 h->gendisk[drv_index] =
1926 alloc_disk(1 << NWD_SHIFT);
1927 if (!h->gendisk[drv_index]) {
1928 printk(KERN_ERR "cciss%d: could not "
1929 "allocate a new disk %d\n",
1930 h->ctlr, drv_index);
1931 return -1;
1932 }
1933 }
1934 h->drv[drv_index].LunID = lunid;
097d0264
SC		 1935 if (h->drv[drv_index].dev == NULL) {
1936 if (cciss_create_ld_sysfs_entry(h, drv_index))
1937 goto err_free_disk;
1938 }
6ae5ce8e
MM		 1939 /* Don't need to mark this busy because nobody */
1940 /* else knows about this disk yet to contend */
1941 /* for access to it. */
1942 h->drv[drv_index].busy_configuring = 0;
1943 wmb();
1944 return drv_index;
7fe06326
AP		 1945
1946err_free_disk:
361e9b07 1947 cciss_free_gendisk(h, drv_index);
7fe06326 1948 return -1;
6ae5ce8e
MM		 1949}
1950
1951/* This is for the special case of a controller which
1952 * has no logical drives. In this case, we still need
1953 * to register a disk so the controller can be accessed
1954 * by the Array Config Utility.
1955 */
1956static void cciss_add_controller_node(ctlr_info_t *h)
1957{
1958 struct gendisk *disk;
1959 int drv_index;
1960
1961 if (h->gendisk[0] != NULL) /* already did this? Then bail. */
1962 return;
1963
eece695f 1964 drv_index = cciss_add_gendisk(h, 0, 1);
361e9b07
SC		 1965 if (drv_index == -1)
1966 goto error;
6ae5ce8e
MM		 1967 h->drv[drv_index].block_size = 512;
1968 h->drv[drv_index].nr_blocks = 0;
1969 h->drv[drv_index].heads = 0;
1970 h->drv[drv_index].sectors = 0;
1971 h->drv[drv_index].cylinders = 0;
1972 h->drv[drv_index].raid_level = -1;
1973 memset(h->drv[drv_index].serial_no, 0, 16);
1974 disk = h->gendisk[drv_index];
361e9b07
SC		 1975 if (cciss_add_disk(h, disk, drv_index) == 0)
1976 return;
1977 cciss_free_gendisk(h, drv_index);
1978error:
1979 printk(KERN_WARNING "cciss%d: could not "
1980 "add disk 0.\n", h->ctlr);
1981 return;
6ae5ce8e
MM		 1982}
1983
ddd47442 1984/* This function will add and remove logical drives from the Logical
d14c4ab5 1985 * drive array of the controller and maintain persistency of ordering
ddd47442
MM		 1986 * so that mount points are preserved until the next reboot. This allows
1987 * for the removal of logical drives in the middle of the drive array
1988 * without a re-ordering of those drives.
1989 * INPUT
1990 * h = The controller to perform the operations on
7c832835 1991 */
6ae5ce8e 1992static int rebuild_lun_table(ctlr_info_t *h, int first_time)
1da177e4 1993{
ddd47442
MM		 1994 int ctlr = h->ctlr;
1995 int num_luns;
1996 ReportLunData_struct *ld_buff = NULL;
ddd47442
MM		 1997 int return_code;
1998 int listlength = 0;
1999 int i;
2000 int drv_found;
2001 int drv_index = 0;
2002 __u32 lunid = 0;
1da177e4 2003 unsigned long flags;
ddd47442 2004
6ae5ce8e
MM		 2005 if (!capable(CAP_SYS_RAWIO))
2006 return -EPERM;
2007
ddd47442
MM		 2008 /* Set busy_configuring flag for this operation */
2009 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
7c832835 2010 if (h->busy_configuring) {
ddd47442
MM		 2011 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
2012 return -EBUSY;
2013 }
2014 h->busy_configuring = 1;
a72da29b 2015 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
ddd47442 2016
a72da29b
MM		 2017 ld_buff = kzalloc(sizeof(ReportLunData_struct), GFP_KERNEL);
2018 if (ld_buff == NULL)
2019 goto mem_msg;
2020
2021 return_code = sendcmd_withirq(CISS_REPORT_LOG, ctlr, ld_buff,
b57695fe 2022 sizeof(ReportLunData_struct),
2023 0, CTLR_LUNID, TYPE_CMD);
ddd47442 2024
a72da29b
MM		 2025 if (return_code == IO_OK)
2026 listlength = be32_to_cpu(*(__be32 *) ld_buff->LUNListLength);
2027 else { /* reading number of logical volumes failed */
2028 printk(KERN_WARNING "cciss: report logical volume"
2029 " command failed\n");
2030 listlength = 0;
2031 goto freeret;
2032 }
2033
2034 num_luns = listlength / 8; /* 8 bytes per entry */
2035 if (num_luns > CISS_MAX_LUN) {
2036 num_luns = CISS_MAX_LUN;
2037 printk(KERN_WARNING "cciss: more luns configured"
2038 " on controller than can be handled by"
2039 " this driver.\n");
2040 }
2041
6ae5ce8e
MM		 2042 if (num_luns == 0)
2043 cciss_add_controller_node(h);
2044
2045 /* Compare controller drive array to driver's drive array
2046 * to see if any drives are missing on the controller due
2047 * to action of Array Config Utility (user deletes drive)
2048 * and deregister logical drives which have disappeared.
2049 */
a72da29b
MM		 2050 for (i = 0; i <= h->highest_lun; i++) {
2051 int j;
2052 drv_found = 0;
d8a0be6a
SC		 2053
2054 /* skip holes in the array from already deleted drives */
2055 if (h->drv[i].raid_level == -1)
2056 continue;
2057
a72da29b
MM		 2058 for (j = 0; j < num_luns; j++) {
2059 memcpy(&lunid, &ld_buff->LUN[j][0], 4);
2060 lunid = le32_to_cpu(lunid);
2061 if (h->drv[i].LunID == lunid) {
2062 drv_found = 1;
2063 break;
2064 }
2065 }
2066 if (!drv_found) {
2067 /* Deregister it from the OS, it's gone. */
2068 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
2069 h->drv[i].busy_configuring = 1;
2070 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
a0ea8622 2071 return_code = deregister_disk(h, i, 1);
a72da29b 2072 h->drv[i].busy_configuring = 0;
ddd47442 2073 }
a72da29b 2074 }
ddd47442 2075
a72da29b
MM		 2076 /* Compare controller drive array to driver's drive array.
2077 * Check for updates in the drive information and any new drives
2078 * on the controller due to ACU adding logical drives, or changing
2079 * a logical drive's size, etc. Reregister any new/changed drives
2080 */
2081 for (i = 0; i < num_luns; i++) {
2082 int j;
ddd47442 2083
a72da29b 2084 drv_found = 0;
ddd47442 2085
a72da29b
MM		 2086 memcpy(&lunid, &ld_buff->LUN[i][0], 4);
2087 lunid = le32_to_cpu(lunid);
ddd47442 2088
a72da29b
MM		 2089 /* Find if the LUN is already in the drive array
2090 * of the driver. If so then update its info
2091 * if not in use. If it does not exist then find
2092 * the first free index and add it.
2093 */
2094 for (j = 0; j <= h->highest_lun; j++) {
2095 if (h->drv[j].raid_level != -1 &&
2096 h->drv[j].LunID == lunid) {
2097 drv_index = j;
2098 drv_found = 1;
2099 break;
ddd47442 2100 }
a72da29b 2101 }
ddd47442 2102
a72da29b
MM		 2103 /* check if the drive was found already in the array */
2104 if (!drv_found) {
eece695f 2105 drv_index = cciss_add_gendisk(h, lunid, 0);
a72da29b
MM		 2106 if (drv_index == -1)
2107 goto freeret;
a72da29b 2108 }
6ae5ce8e 2109 cciss_update_drive_info(ctlr, drv_index, first_time);
a72da29b 2110 } /* end for */
ddd47442 2111
6ae5ce8e 2112freeret:
ddd47442
MM		 2113 kfree(ld_buff);
2114 h->busy_configuring = 0;
2115 /* We return -1 here to tell the ACU that we have registered/updated
2116 * all of the drives that we can and to keep it from calling us
2117 * additional times.
7c832835 2118 */
ddd47442 2119 return -1;
6ae5ce8e 2120mem_msg:
ddd47442 2121 printk(KERN_ERR "cciss: out of memory\n");
a72da29b 2122 h->busy_configuring = 0;
ddd47442
MM		 2123 goto freeret;
2124}
2125
2126/* This function will deregister the disk and it's queue from the
2127 * kernel. It must be called with the controller lock held and the
2128 * drv structures busy_configuring flag set. It's parameters are:
2129 *
2130 * disk = This is the disk to be deregistered
2131 * drv = This is the drive_info_struct associated with the disk to be
2132 * deregistered. It contains information about the disk used
2133 * by the driver.
2134 * clear_all = This flag determines whether or not the disk information
2135 * is going to be completely cleared out and the highest_lun
2136 * reset. Sometimes we want to clear out information about
d14c4ab5 2137 * the disk in preparation for re-adding it. In this case
ddd47442
MM		 2138 * the highest_lun should be left unchanged and the LunID
2139 * should not be cleared.
2140*/
a0ea8622 2141static int deregister_disk(ctlr_info_t *h, int drv_index,
ddd47442
MM		 2142 int clear_all)
2143{
799202cb 2144 int i;
a0ea8622
SC		 2145 struct gendisk *disk;
2146 drive_info_struct *drv;
1da177e4
LT		 2147
2148 if (!capable(CAP_SYS_RAWIO))
2149 return -EPERM;
2150
a0ea8622
SC		 2151 drv = &h->drv[drv_index];
2152 disk = h->gendisk[drv_index];
2153
1da177e4 2154 /* make sure logical volume is NOT is use */
7c832835
BH		 2155 if (clear_all || (h->gendisk[0] == disk)) {
2156 if (drv->usage_count > 1)
2157 return -EBUSY;
2158 } else if (drv->usage_count > 0)
2159 return -EBUSY;
1da177e4 2160
ddd47442
MM		 2161 /* invalidate the devices and deregister the disk. If it is disk
2162 * zero do not deregister it but just zero out it's values. This
2163 * allows us to delete disk zero but keep the controller registered.
7c832835
BH		 2164 */
2165 if (h->gendisk[0] != disk) {
5a9df732 2166 struct request_queue *q = disk->queue;
097d0264
SC		 2167 if (disk->flags & GENHD_FL_UP) {
2168 cciss_destroy_ld_sysfs_entry(h, drv_index);
5a9df732 2169 del_gendisk(disk);
097d0264 2170 }
5a9df732
AB		 2171 if (q) {
2172 blk_cleanup_queue(q);
2173 /* Set drv->queue to NULL so that we do not try
2174 * to call blk_start_queue on this queue in the
2175 * interrupt handler
2176 */
2177 drv->queue = NULL;
2178 }
2179 /* If clear_all is set then we are deleting the logical
2180 * drive, not just refreshing its info. For drives
2181 * other than disk 0 we will call put_disk. We do not
2182 * do this for disk 0 as we need it to be able to
2183 * configure the controller.
a72da29b 2184 */
5a9df732
AB		 2185 if (clear_all){
2186 /* This isn't pretty, but we need to find the
2187 * disk in our array and NULL our the pointer.
2188 * This is so that we will call alloc_disk if
2189 * this index is used again later.
a72da29b 2190 */
5a9df732 2191 for (i=0; i < CISS_MAX_LUN; i++){
a72da29b 2192 if (h->gendisk[i] == disk) {
5a9df732
AB		 2193 h->gendisk[i] = NULL;
2194 break;
799202cb 2195 }
799202cb 2196 }
5a9df732 2197 put_disk(disk);
ddd47442 2198 }
799202cb
MM		 2199 } else {
2200 set_capacity(disk, 0);
ddd47442
MM		 2201 }
2202
2203 --h->num_luns;
2204 /* zero out the disk size info */
2205 drv->nr_blocks = 0;
2206 drv->block_size = 0;
2207 drv->heads = 0;
2208 drv->sectors = 0;
2209 drv->cylinders = 0;
2210 drv->raid_level = -1; /* This can be used as a flag variable to
2211 * indicate that this element of the drive
2212 * array is free.
7c832835
BH		 2213 */
2214
2215 if (clear_all) {
2216 /* check to see if it was the last disk */
2217 if (drv == h->drv + h->highest_lun) {
2218 /* if so, find the new hightest lun */
2219 int i, newhighest = -1;
a72da29b 2220 for (i = 0; i <= h->highest_lun; i++) {
7c832835 2221 /* if the disk has size > 0, it is available */
ddd47442 2222 if (h->drv[i].heads)
7c832835
BH		 2223 newhighest = i;
2224 }
2225 h->highest_lun = newhighest;
1da177e4 2226 }
ddd47442 2227
7c832835 2228 drv->LunID = 0;
ddd47442 2229 }
e2019b58 2230 return 0;
1da177e4 2231}
ddd47442 2232
b57695fe 2233static int fill_cmd(CommandList_struct *c, __u8 cmd, int ctlr, void *buff,
2234 size_t size, __u8 page_code, unsigned char *scsi3addr,
2235 int cmd_type)
1da177e4 2236{
7c832835 2237 ctlr_info_t *h = hba[ctlr];
1da177e4
LT		 2238 u64bit buff_dma_handle;
2239 int status = IO_OK;
2240
2241 c->cmd_type = CMD_IOCTL_PEND;
2242 c->Header.ReplyQueue = 0;
7c832835 2243 if (buff != NULL) {
1da177e4 2244 c->Header.SGList = 1;
7c832835 2245 c->Header.SGTotal = 1;
1da177e4
LT		 2246 } else {
2247 c->Header.SGList = 0;
7c832835 2248 c->Header.SGTotal = 0;
1da177e4
LT		 2249 }
2250 c->Header.Tag.lower = c->busaddr;
b57695fe 2251 memcpy(c->Header.LUN.LunAddrBytes, scsi3addr, 8);
1da177e4
LT		 2252
2253 c->Request.Type.Type = cmd_type;
2254 if (cmd_type == TYPE_CMD) {
7c832835
BH		 2255 switch (cmd) {
2256 case CISS_INQUIRY:
1da177e4 2257 /* are we trying to read a vital product page */
7c832835 2258 if (page_code != 0) {
1da177e4
LT		 2259 c->Request.CDB[1] = 0x01;
2260 c->Request.CDB[2] = page_code;
2261 }
2262 c->Request.CDBLen = 6;
7c832835 2263 c->Request.Type.Attribute = ATTR_SIMPLE;
1da177e4
LT		 2264 c->Request.Type.Direction = XFER_READ;
2265 c->Request.Timeout = 0;
7c832835
BH		 2266 c->Request.CDB[0] = CISS_INQUIRY;
2267 c->Request.CDB[4] = size & 0xFF;
2268 break;
1da177e4
LT		 2269 case CISS_REPORT_LOG:
2270 case CISS_REPORT_PHYS:
7c832835 2271 /* Talking to controller so It's a physical command
1da177e4 2272 mode = 00 target = 0. Nothing to write.
7c832835 2273 */
1da177e4
LT		 2274 c->Request.CDBLen = 12;
2275 c->Request.Type.Attribute = ATTR_SIMPLE;
2276 c->Request.Type.Direction = XFER_READ;
2277 c->Request.Timeout = 0;
2278 c->Request.CDB[0] = cmd;
7c832835 2279 c->Request.CDB[6] = (size >> 24) & 0xFF; //MSB
1da177e4
LT		 2280 c->Request.CDB[7] = (size >> 16) & 0xFF;
2281 c->Request.CDB[8] = (size >> 8) & 0xFF;
2282 c->Request.CDB[9] = size & 0xFF;
2283 break;
2284
2285 case CCISS_READ_CAPACITY:
1da177e4
LT		 2286 c->Request.CDBLen = 10;
2287 c->Request.Type.Attribute = ATTR_SIMPLE;
2288 c->Request.Type.Direction = XFER_READ;
2289 c->Request.Timeout = 0;
2290 c->Request.CDB[0] = cmd;
7c832835 2291 break;
00988a35 2292 case CCISS_READ_CAPACITY_16:
00988a35
MMOD		 2293 c->Request.CDBLen = 16;
2294 c->Request.Type.Attribute = ATTR_SIMPLE;
2295 c->Request.Type.Direction = XFER_READ;
2296 c->Request.Timeout = 0;
2297 c->Request.CDB[0] = cmd;
2298 c->Request.CDB[1] = 0x10;
2299 c->Request.CDB[10] = (size >> 24) & 0xFF;
2300 c->Request.CDB[11] = (size >> 16) & 0xFF;
2301 c->Request.CDB[12] = (size >> 8) & 0xFF;
2302 c->Request.CDB[13] = size & 0xFF;
2303 c->Request.Timeout = 0;
2304 c->Request.CDB[0] = cmd;
2305 break;
1da177e4
LT		 2306 case CCISS_CACHE_FLUSH:
2307 c->Request.CDBLen = 12;
2308 c->Request.Type.Attribute = ATTR_SIMPLE;
2309 c->Request.Type.Direction = XFER_WRITE;
2310 c->Request.Timeout = 0;
2311 c->Request.CDB[0] = BMIC_WRITE;
2312 c->Request.CDB[6] = BMIC_CACHE_FLUSH;
7c832835 2313 break;
88f627ae 2314 case TEST_UNIT_READY:
88f627ae
SC		 2315 c->Request.CDBLen = 6;
2316 c->Request.Type.Attribute = ATTR_SIMPLE;
2317 c->Request.Type.Direction = XFER_NONE;
2318 c->Request.Timeout = 0;
2319 break;
1da177e4
LT		 2320 default:
2321 printk(KERN_WARNING
7c832835 2322 "cciss%d: Unknown Command 0x%c\n", ctlr, cmd);
e2019b58 2323 return IO_ERROR;
1da177e4
LT		 2324 }
2325 } else if (cmd_type == TYPE_MSG) {
2326 switch (cmd) {
7c832835 2327 case 0: /* ABORT message */
3da8b713 2328 c->Request.CDBLen = 12;
2329 c->Request.Type.Attribute = ATTR_SIMPLE;
2330 c->Request.Type.Direction = XFER_WRITE;
2331 c->Request.Timeout = 0;
7c832835
BH		 2332 c->Request.CDB[0] = cmd; /* abort */
2333 c->Request.CDB[1] = 0; /* abort a command */
3da8b713 2334 /* buff contains the tag of the command to abort */
2335 memcpy(&c->Request.CDB[4], buff, 8);
2336 break;
7c832835 2337 case 1: /* RESET message */
88f627ae 2338 c->Request.CDBLen = 16;
3da8b713 2339 c->Request.Type.Attribute = ATTR_SIMPLE;
88f627ae 2340 c->Request.Type.Direction = XFER_NONE;
3da8b713 2341 c->Request.Timeout = 0;
2342 memset(&c->Request.CDB[0], 0, sizeof(c->Request.CDB));
7c832835 2343 c->Request.CDB[0] = cmd; /* reset */
88f627ae 2344 c->Request.CDB[1] = 0x03; /* reset a target */
00988a35 2345 break;
1da177e4
LT		 2346 case 3: /* No-Op message */
2347 c->Request.CDBLen = 1;
2348 c->Request.Type.Attribute = ATTR_SIMPLE;
2349 c->Request.Type.Direction = XFER_WRITE;
2350 c->Request.Timeout = 0;
2351 c->Request.CDB[0] = cmd;
2352 break;
2353 default:
2354 printk(KERN_WARNING
7c832835 2355 "cciss%d: unknown message type %d\n", ctlr, cmd);
1da177e4
LT		 2356 return IO_ERROR;
2357 }
2358 } else {
2359 printk(KERN_WARNING
7c832835 2360 "cciss%d: unknown command type %d\n", ctlr, cmd_type);
1da177e4
LT		 2361 return IO_ERROR;
2362 }
2363 /* Fill in the scatter gather information */
2364 if (size > 0) {
2365 buff_dma_handle.val = (__u64) pci_map_single(h->pdev,
7c832835
BH		 2366 buff, size,
2367 PCI_DMA_BIDIRECTIONAL);
1da177e4
LT		 2368 c->SG[0].Addr.lower = buff_dma_handle.val32.lower;
2369 c->SG[0].Addr.upper = buff_dma_handle.val32.upper;
2370 c->SG[0].Len = size;
7c832835 2371 c->SG[0].Ext = 0; /* we are not chaining */
1da177e4
LT		 2372 }
2373 return status;
2374}
7c832835 2375
3c2ab402 2376static int check_target_status(ctlr_info_t *h, CommandList_struct *c)
2377{
2378 switch (c->err_info->ScsiStatus) {
2379 case SAM_STAT_GOOD:
2380 return IO_OK;
2381 case SAM_STAT_CHECK_CONDITION:
2382 switch (0xf & c->err_info->SenseInfo[2]) {
2383 case 0: return IO_OK; /* no sense */
2384 case 1: return IO_OK; /* recovered error */
2385 default:
2386 printk(KERN_WARNING "cciss%d: cmd 0x%02x "
2387 "check condition, sense key = 0x%02x\n",
2388 h->ctlr, c->Request.CDB[0],
2389 c->err_info->SenseInfo[2]);
2390 }
2391 break;
2392 default:
2393 printk(KERN_WARNING "cciss%d: cmd 0x%02x"
2394 "scsi status = 0x%02x\n", h->ctlr,
2395 c->Request.CDB[0], c->err_info->ScsiStatus);
2396 break;
2397 }
2398 return IO_ERROR;
2399}
2400
789a424a 2401static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2402{
5390cfc3 2403 int return_status = IO_OK;
7c832835 2404
789a424a 2405 if (c->err_info->CommandStatus == CMD_SUCCESS)
2406 return IO_OK;
5390cfc3 2407
2408 switch (c->err_info->CommandStatus) {
2409 case CMD_TARGET_STATUS:
3c2ab402 2410 return_status = check_target_status(h, c);
5390cfc3 2411 break;
2412 case CMD_DATA_UNDERRUN:
2413 case CMD_DATA_OVERRUN:
2414 /* expected for inquiry and report lun commands */
2415 break;
2416 case CMD_INVALID:
789a424a 2417 printk(KERN_WARNING "cciss: cmd 0x%02x is "
5390cfc3 2418 "reported invalid\n", c->Request.CDB[0]);
2419 return_status = IO_ERROR;
2420 break;
2421 case CMD_PROTOCOL_ERR:
2422 printk(KERN_WARNING "cciss: cmd 0x%02x has "
2423 "protocol error \n", c->Request.CDB[0]);
2424 return_status = IO_ERROR;
2425 break;
2426 case CMD_HARDWARE_ERR:
2427 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2428 " hardware error\n", c->Request.CDB[0]);
2429 return_status = IO_ERROR;
2430 break;
2431 case CMD_CONNECTION_LOST:
2432 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2433 "connection lost\n", c->Request.CDB[0]);
2434 return_status = IO_ERROR;
2435 break;
2436 case CMD_ABORTED:
2437 printk(KERN_WARNING "cciss: cmd 0x%02x was "
2438 "aborted\n", c->Request.CDB[0]);
2439 return_status = IO_ERROR;
2440 break;
2441 case CMD_ABORT_FAILED:
2442 printk(KERN_WARNING "cciss: cmd 0x%02x reports "
2443 "abort failed\n", c->Request.CDB[0]);
2444 return_status = IO_ERROR;
2445 break;
2446 case CMD_UNSOLICITED_ABORT:
2447 printk(KERN_WARNING
2448 "cciss%d: unsolicited abort 0x%02x\n", h->ctlr,
2449 c->Request.CDB[0]);
789a424a 2450 return_status = IO_NEEDS_RETRY;
5390cfc3 2451 break;
2452 default:
2453 printk(KERN_WARNING "cciss: cmd 0x%02x returned "
2454 "unknown status %x\n", c->Request.CDB[0],
2455 c->err_info->CommandStatus);
2456 return_status = IO_ERROR;
7c832835 2457 }
789a424a 2458 return return_status;
2459}
2460
2461static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
2462 int attempt_retry)
2463{
2464 DECLARE_COMPLETION_ONSTACK(wait);
2465 u64bit buff_dma_handle;
2466 unsigned long flags;
2467 int return_status = IO_OK;
2468
2469resend_cmd2:
2470 c->waiting = &wait;
2471 /* Put the request on the tail of the queue and send it */
2472 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
2473 addQ(&h->reqQ, c);
2474 h->Qdepth++;
2475 start_io(h);
2476 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
2477
2478 wait_for_completion(&wait);
2479
2480 if (c->err_info->CommandStatus == 0 || !attempt_retry)
2481 goto command_done;
2482
2483 return_status = process_sendcmd_error(h, c);
2484
2485 if (return_status == IO_NEEDS_RETRY &&
2486 c->retry_count < MAX_CMD_RETRIES) {
2487 printk(KERN_WARNING "cciss%d: retrying 0x%02x\n", h->ctlr,
2488 c->Request.CDB[0]);
2489 c->retry_count++;
2490 /* erase the old error information */
2491 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2492 return_status = IO_OK;
2493 INIT_COMPLETION(wait);
2494 goto resend_cmd2;
2495 }
5390cfc3 2496
2497command_done:
1da177e4 2498 /* unlock the buffers from DMA */
bb2a37bf
MM		 2499 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2500 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
7c832835
BH		 2501 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
2502 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
5390cfc3 2503 return return_status;
2504}
2505
b57695fe 2506static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
2507 __u8 page_code, unsigned char scsi3addr[],
2508 int cmd_type)
5390cfc3 2509{
2510 ctlr_info_t *h = hba[ctlr];
2511 CommandList_struct *c;
2512 int return_status;
2513
2514 c = cmd_alloc(h, 0);
2515 if (!c)
2516 return -ENOMEM;
b57695fe 2517 return_status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2518 scsi3addr, cmd_type);
5390cfc3 2519 if (return_status == IO_OK)
789a424a 2520 return_status = sendcmd_withirq_core(h, c, 1);
2521
1da177e4 2522 cmd_free(h, c, 0);
7c832835 2523 return return_status;
1da177e4 2524}
7c832835 2525
1da177e4 2526static void cciss_geometry_inquiry(int ctlr, int logvol,
00988a35 2527 int withirq, sector_t total_size,
7c832835
BH		 2528 unsigned int block_size,
2529 InquiryData_struct *inq_buff,
2530 drive_info_struct *drv)
1da177e4
LT		 2531{
2532 int return_code;
00988a35 2533 unsigned long t;
b57695fe 2534 unsigned char scsi3addr[8];
00988a35 2535
1da177e4 2536 memset(inq_buff, 0, sizeof(InquiryData_struct));
b57695fe 2537 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2538 if (withirq)
2539 return_code = sendcmd_withirq(CISS_INQUIRY, ctlr,
b57695fe 2540 inq_buff, sizeof(*inq_buff),
2541 0xC1, scsi3addr, TYPE_CMD);
1da177e4
LT		 2542 else
2543 return_code = sendcmd(CISS_INQUIRY, ctlr, inq_buff,
b57695fe 2544 sizeof(*inq_buff), 0xC1, scsi3addr,
7c832835 2545 TYPE_CMD);
1da177e4 2546 if (return_code == IO_OK) {
7c832835 2547 if (inq_buff->data_byte[8] == 0xFF) {
1da177e4 2548 printk(KERN_WARNING
7c832835
BH		 2549 "cciss: reading geometry failed, volume "
2550 "does not support reading geometry\n");
1da177e4 2551 drv->heads = 255;
7c832835 2552 drv->sectors = 32; // Sectors per track
7f42d3b8 2553 drv->cylinders = total_size + 1;
89f97ad1 2554 drv->raid_level = RAID_UNKNOWN;
1da177e4 2555 } else {
1da177e4
LT		 2556 drv->heads = inq_buff->data_byte[6];
2557 drv->sectors = inq_buff->data_byte[7];
2558 drv->cylinders = (inq_buff->data_byte[4] & 0xff) << 8;
2559 drv->cylinders += inq_buff->data_byte[5];
2560 drv->raid_level = inq_buff->data_byte[8];
3f7705ea
MW		 2561 }
2562 drv->block_size = block_size;
97c06978 2563 drv->nr_blocks = total_size + 1;
3f7705ea
MW		 2564 t = drv->heads * drv->sectors;
2565 if (t > 1) {
97c06978
MMOD		 2566 sector_t real_size = total_size + 1;
2567 unsigned long rem = sector_div(real_size, t);
3f7705ea 2568 if (rem)
97c06978
MMOD		 2569 real_size++;
2570 drv->cylinders = real_size;
1da177e4 2571 }
7c832835 2572 } else { /* Get geometry failed */
1da177e4
LT		 2573 printk(KERN_WARNING "cciss: reading geometry failed\n");
2574 }
cc088d10 2575 printk(KERN_INFO " heads=%d, sectors=%d, cylinders=%d\n\n",
7c832835 2576 drv->heads, drv->sectors, drv->cylinders);
1da177e4 2577}
7c832835 2578
1da177e4 2579static void
00988a35 2580cciss_read_capacity(int ctlr, int logvol, int withirq, sector_t *total_size,
7c832835 2581 unsigned int *block_size)
1da177e4 2582{
00988a35 2583 ReadCapdata_struct *buf;
1da177e4 2584 int return_code;
b57695fe 2585 unsigned char scsi3addr[8];
1aebe187
MK		 2586
2587 buf = kzalloc(sizeof(ReadCapdata_struct), GFP_KERNEL);
2588 if (!buf) {
00988a35
MMOD		 2589 printk(KERN_WARNING "cciss: out of memory\n");
2590 return;
2591 }
1aebe187 2592
b57695fe 2593 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2594 if (withirq)
2595 return_code = sendcmd_withirq(CCISS_READ_CAPACITY,
00988a35 2596 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2597 0, scsi3addr, TYPE_CMD);
1da177e4
LT		 2598 else
2599 return_code = sendcmd(CCISS_READ_CAPACITY,
00988a35 2600 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2601 0, scsi3addr, TYPE_CMD);
1da177e4 2602 if (return_code == IO_OK) {
4c1f2b31
AV		 2603 *total_size = be32_to_cpu(*(__be32 *) buf->total_size);
2604 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
7c832835 2605 } else { /* read capacity command failed */
1da177e4
LT		 2606 printk(KERN_WARNING "cciss: read capacity failed\n");
2607 *total_size = 0;
2608 *block_size = BLOCK_SIZE;
2609 }
97c06978 2610 if (*total_size != 0)
7b92aadf 2611 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2612 (unsigned long long)*total_size+1, *block_size);
00988a35 2613 kfree(buf);
00988a35
MMOD		 2614}
2615
2616static void
2617cciss_read_capacity_16(int ctlr, int logvol, int withirq, sector_t *total_size, unsigned int *block_size)
2618{
2619 ReadCapdata_struct_16 *buf;
2620 int return_code;
b57695fe 2621 unsigned char scsi3addr[8];
1aebe187
MK		 2622
2623 buf = kzalloc(sizeof(ReadCapdata_struct_16), GFP_KERNEL);
2624 if (!buf) {
00988a35
MMOD		 2625 printk(KERN_WARNING "cciss: out of memory\n");
2626 return;
2627 }
1aebe187 2628
b57695fe 2629 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
00988a35
MMOD		 2630 if (withirq) {
2631 return_code = sendcmd_withirq(CCISS_READ_CAPACITY_16,
2632 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2633 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2634 }
2635 else {
2636 return_code = sendcmd(CCISS_READ_CAPACITY_16,
2637 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2638 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2639 }
2640 if (return_code == IO_OK) {
4c1f2b31
AV		 2641 *total_size = be64_to_cpu(*(__be64 *) buf->total_size);
2642 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
00988a35
MMOD		 2643 } else { /* read capacity command failed */
2644 printk(KERN_WARNING "cciss: read capacity failed\n");
2645 *total_size = 0;
2646 *block_size = BLOCK_SIZE;
2647 }
7b92aadf 2648 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2649 (unsigned long long)*total_size+1, *block_size);
00988a35 2650 kfree(buf);
1da177e4
LT		 2651}
2652
1da177e4
LT		 2653static int cciss_revalidate(struct gendisk *disk)
2654{
2655 ctlr_info_t *h = get_host(disk);
2656 drive_info_struct *drv = get_drv(disk);
2657 int logvol;
7c832835 2658 int FOUND = 0;
1da177e4 2659 unsigned int block_size;
00988a35 2660 sector_t total_size;
1da177e4
LT		 2661 InquiryData_struct *inq_buff = NULL;
2662
7c832835
BH		 2663 for (logvol = 0; logvol < CISS_MAX_LUN; logvol++) {
2664 if (h->drv[logvol].LunID == drv->LunID) {
2665 FOUND = 1;
1da177e4
LT		 2666 break;
2667 }
2668 }
2669
7c832835
BH		 2670 if (!FOUND)
2671 return 1;
1da177e4 2672
7c832835
BH		 2673 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
2674 if (inq_buff == NULL) {
2675 printk(KERN_WARNING "cciss: out of memory\n");
7c832835
BH		 2676 return 1;
2677 }
00988a35
MMOD		 2678 if (h->cciss_read == CCISS_READ_10) {
2679 cciss_read_capacity(h->ctlr, logvol, 1,
2680 &total_size, &block_size);
2681 } else {
2682 cciss_read_capacity_16(h->ctlr, logvol, 1,
2683 &total_size, &block_size);
2684 }
7c832835
BH		 2685 cciss_geometry_inquiry(h->ctlr, logvol, 1, total_size, block_size,
2686 inq_buff, drv);
1da177e4 2687
e1defc4f 2688 blk_queue_logical_block_size(drv->queue, drv->block_size);
1da177e4
LT		 2689 set_capacity(disk, drv->nr_blocks);
2690
1da177e4
LT		 2691 kfree(inq_buff);
2692 return 0;
2693}
2694
2695/*
2696 * Wait polling for a command to complete.
2697 * The memory mapped FIFO is polled for the completion.
2698 * Used only at init time, interrupts from the HBA are disabled.
2699 */
2700static unsigned long pollcomplete(int ctlr)
2701{
2702 unsigned long done;
2703 int i;
2704
2705 /* Wait (up to 20 seconds) for a command to complete */
2706
2707 for (i = 20 * HZ; i > 0; i--) {
2708 done = hba[ctlr]->access.command_completed(hba[ctlr]);
86e84862
NA		 2709 if (done == FIFO_EMPTY)
2710 schedule_timeout_uninterruptible(1);
2711 else
e2019b58 2712 return done;
1da177e4
LT		 2713 }
2714 /* Invalid address to tell caller we ran out of time */
2715 return 1;
2716}
3da8b713 2717
4a4b2d76
SC		 2718/* Send command c to controller h and poll for it to complete.
2719 * Turns interrupts off on the board. Used at driver init time
2720 * and during SCSI error recovery.
1da177e4 2721 */
4a4b2d76 2722static int sendcmd_core(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2723{
1da177e4
LT		 2724 int i;
2725 unsigned long complete;
4a4b2d76 2726 int status = IO_ERROR;
1da177e4 2727 u64bit buff_dma_handle;
1da177e4 2728
4a4b2d76
SC		 2729resend_cmd1:
2730
2731 /* Disable interrupt on the board. */
2732 h->access.set_intr_mask(h, CCISS_INTR_OFF);
7c832835 2733
1da177e4 2734 /* Make sure there is room in the command FIFO */
7c832835 2735 /* Actually it should be completely empty at this time */
3da8b713 2736 /* unless we are in here doing error handling for the scsi */
2737 /* tape side of the driver. */
7c832835 2738 for (i = 200000; i > 0; i--) {
1da177e4 2739 /* if fifo isn't full go */
4a4b2d76 2740 if (!(h->access.fifo_full(h)))
7c832835 2741 break;
7c832835
BH		 2742 udelay(10);
2743 printk(KERN_WARNING "cciss cciss%d: SendCmd FIFO full,"
4a4b2d76 2744 " waiting!\n", h->ctlr);
7c832835 2745 }
4a4b2d76 2746 h->access.submit_command(h, c); /* Send the cmd */
3da8b713 2747 do {
4a4b2d76 2748 complete = pollcomplete(h->ctlr);
1da177e4
LT		 2749
2750#ifdef CCISS_DEBUG
3da8b713 2751 printk(KERN_DEBUG "cciss: command completed\n");
7c832835 2752#endif /* CCISS_DEBUG */
1da177e4 2753
3da8b713 2754 if (complete == 1) {
7c832835
BH		 2755 printk(KERN_WARNING
2756 "cciss cciss%d: SendCmd Timeout out, "
4a4b2d76 2757 "No command list address returned!\n", h->ctlr);
3da8b713 2758 status = IO_ERROR;
3da8b713 2759 break;
2760 }
2761
72f9f132 2762 /* Make sure it's the command we're expecting. */
4a4b2d76 2763 if ((complete & ~CISS_ERROR_BIT) != c->busaddr) {
72f9f132 2764 printk(KERN_WARNING "cciss%d: Unexpected command "
2765 "completion.\n", h->ctlr);
4a4b2d76
SC		 2766 continue;
2767 }
2768
2769 /* It is our command. If no error, we're done. */
2770 if (!(complete & CISS_ERROR_BIT)) {
2771 status = IO_OK;
2772 break;
2773 }
2774
2775 /* There is an error... */
2776
2777 /* if data overrun or underun on Report command ignore it */
2778 if (((c->Request.CDB[0] == CISS_REPORT_LOG) ||
2779 (c->Request.CDB[0] == CISS_REPORT_PHYS) ||
2780 (c->Request.CDB[0] == CISS_INQUIRY)) &&
2781 ((c->err_info->CommandStatus == CMD_DATA_OVERRUN) ||
2782 (c->err_info->CommandStatus == CMD_DATA_UNDERRUN))) {
2783 complete = c->busaddr;
2784 status = IO_OK;
2785 break;
1da177e4 2786 }
4a4b2d76
SC		 2787
2788 if (c->err_info->CommandStatus == CMD_UNSOLICITED_ABORT) {
2789 printk(KERN_WARNING "cciss%d: unsolicited abort %p\n",
2790 h->ctlr, c);
2791 if (c->retry_count < MAX_CMD_RETRIES) {
2792 printk(KERN_WARNING "cciss%d: retrying %p\n",
2793 h->ctlr, c);
2794 c->retry_count++;
2795 /* erase the old error information */
2796 memset(c->err_info, 0, sizeof(c->err_info));
2797 goto resend_cmd1;
3da8b713 2798 }
4a4b2d76
SC		 2799 printk(KERN_WARNING "cciss%d: retried %p too many "
2800 "times\n", h->ctlr, c);
2801 status = IO_ERROR;
3c2ab402 2802 break;
4a4b2d76
SC		 2803 }
2804
2805 if (c->err_info->CommandStatus == CMD_UNABORTABLE) {
2806 printk(KERN_WARNING "cciss%d: command could not be "
2807 "aborted.\n", h->ctlr);
2808 status = IO_ERROR;
3c2ab402 2809 break;
4a4b2d76
SC		 2810 }
2811
4a4b2d76 2812 if (c->err_info->CommandStatus == CMD_TARGET_STATUS) {
3c2ab402 2813 status = check_target_status(h, c);
2814 break;
4a4b2d76
SC		 2815 }
2816
3c2ab402 2817 printk(KERN_WARNING "cciss%d: sendcmd error\n", h->ctlr);
2818 printk(KERN_WARNING "cmd = 0x%02x, CommandStatus = 0x%02x\n",
2819 c->Request.CDB[0], c->err_info->CommandStatus);
4a4b2d76 2820 status = IO_ERROR;
3c2ab402 2821 break;
4a4b2d76
SC		 2822
2823 } while (1);
7c832835 2824
1da177e4 2825 /* unlock the data buffer from DMA */
bb2a37bf
MM		 2826 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2827 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
4a4b2d76 2828 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
7c832835 2829 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
4a4b2d76
SC		 2830 return status;
2831}
2832
2833/*
2834 * Send a command to the controller, and wait for it to complete.
2835 * Used at init time, and during SCSI error recovery.
2836 */
2837static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
4a4b2d76
SC		 2838 __u8 page_code, unsigned char *scsi3addr, int cmd_type)
2839{
2840 CommandList_struct *c;
2841 int status;
2842
2843 c = cmd_alloc(hba[ctlr], 1);
2844 if (!c) {
2845 printk(KERN_WARNING "cciss: unable to get memory");
2846 return IO_ERROR;
2847 }
b57695fe 2848 status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2849 scsi3addr, cmd_type);
4a4b2d76
SC		 2850 if (status == IO_OK)
2851 status = sendcmd_core(hba[ctlr], c);
2852 cmd_free(hba[ctlr], c, 1);
e2019b58 2853 return status;
7c832835
BH		 2854}
2855
1da177e4
LT		 2856/*
2857 * Map (physical) PCI mem into (virtual) kernel space
2858 */
2859static void __iomem *remap_pci_mem(ulong base, ulong size)
2860{
7c832835
BH		 2861 ulong page_base = ((ulong) base) & PAGE_MASK;
2862 ulong page_offs = ((ulong) base) - page_base;
2863 void __iomem *page_remapped = ioremap(page_base, page_offs + size);
1da177e4 2864
7c832835 2865 return page_remapped ? (page_remapped + page_offs) : NULL;
1da177e4
LT		 2866}
2867
7c832835
BH		 2868/*
2869 * Takes jobs of the Q and sends them to the hardware, then puts it on
2870 * the Q to wait for completion.
2871 */
2872static void start_io(ctlr_info_t *h)
1da177e4
LT		 2873{
2874 CommandList_struct *c;
7c832835 2875
8a3173de
JA		 2876 while (!hlist_empty(&h->reqQ)) {
2877 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
1da177e4
LT		 2878 /* can't do anything if fifo is full */
2879 if ((h->access.fifo_full(h))) {
2880 printk(KERN_WARNING "cciss: fifo full\n");
2881 break;
2882 }
2883
7c832835 2884 /* Get the first entry from the Request Q */
8a3173de 2885 removeQ(c);
1da177e4 2886 h->Qdepth--;
7c832835
BH		 2887
2888 /* Tell the controller execute command */
1da177e4 2889 h->access.submit_command(h, c);
7c832835
BH		 2890
2891 /* Put job onto the completed Q */
8a3173de 2892 addQ(&h->cmpQ, c);
1da177e4
LT		 2893 }
2894}
7c832835 2895
1da177e4
LT		 2896/* Assumes that CCISS_LOCK(h->ctlr) is held. */
2897/* Zeros out the error record and then resends the command back */
2898/* to the controller */
7c832835 2899static inline void resend_cciss_cmd(ctlr_info_t *h, CommandList_struct *c)
1da177e4
LT		 2900{
2901 /* erase the old error information */
2902 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2903
2904 /* add it to software queue and then send it to the controller */
8a3173de 2905 addQ(&h->reqQ, c);
1da177e4 2906 h->Qdepth++;
7c832835 2907 if (h->Qdepth > h->maxQsinceinit)
1da177e4
LT		 2908 h->maxQsinceinit = h->Qdepth;
2909
2910 start_io(h);
2911}
a9925a06 2912
1a614f50
SC		 2913static inline unsigned int make_status_bytes(unsigned int scsi_status_byte,
2914 unsigned int msg_byte, unsigned int host_byte,
2915 unsigned int driver_byte)
2916{
2917 /* inverse of macros in scsi.h */
2918 return (scsi_status_byte & 0xff) |
2919 ((msg_byte & 0xff) << 8) |
2920 ((host_byte & 0xff) << 16) |
2921 ((driver_byte & 0xff) << 24);
2922}
2923
0a9279cc
MM		 2924static inline int evaluate_target_status(ctlr_info_t *h,
2925 CommandList_struct *cmd, int *retry_cmd)
03bbfee5
MMOD		 2926{
2927 unsigned char sense_key;
1a614f50
SC		 2928 unsigned char status_byte, msg_byte, host_byte, driver_byte;
2929 int error_value;
2930
0a9279cc 2931 *retry_cmd = 0;
1a614f50
SC		 2932 /* If we get in here, it means we got "target status", that is, scsi status */
2933 status_byte = cmd->err_info->ScsiStatus;
2934 driver_byte = DRIVER_OK;
2935 msg_byte = cmd->err_info->CommandStatus; /* correct? seems too device specific */
2936
2937 if (blk_pc_request(cmd->rq))
2938 host_byte = DID_PASSTHROUGH;
2939 else
2940 host_byte = DID_OK;
2941
2942 error_value = make_status_bytes(status_byte, msg_byte,
2943 host_byte, driver_byte);
03bbfee5 2944
1a614f50 2945 if (cmd->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION) {
03bbfee5
MMOD		 2946 if (!blk_pc_request(cmd->rq))
2947 printk(KERN_WARNING "cciss: cmd %p "
2948 "has SCSI Status 0x%x\n",
2949 cmd, cmd->err_info->ScsiStatus);
1a614f50 2950 return error_value;
03bbfee5
MMOD		 2951 }
2952
2953 /* check the sense key */
2954 sense_key = 0xf & cmd->err_info->SenseInfo[2];
2955 /* no status or recovered error */
1a614f50
SC		 2956 if (((sense_key == 0x0) || (sense_key == 0x1)) && !blk_pc_request(cmd->rq))
2957 error_value = 0;
03bbfee5 2958
0a9279cc
MM		 2959 if (check_for_unit_attention(h, cmd)) {
2960 *retry_cmd = !blk_pc_request(cmd->rq);
2961 return 0;
2962 }
2963
03bbfee5 2964 if (!blk_pc_request(cmd->rq)) { /* Not SG_IO or similar? */
1a614f50 2965 if (error_value != 0)
03bbfee5
MMOD		 2966 printk(KERN_WARNING "cciss: cmd %p has CHECK CONDITION"
2967 " sense key = 0x%x\n", cmd, sense_key);
1a614f50 2968 return error_value;
03bbfee5
MMOD		 2969 }
2970
2971 /* SG_IO or similar, copy sense data back */
2972 if (cmd->rq->sense) {
2973 if (cmd->rq->sense_len > cmd->err_info->SenseLen)
2974 cmd->rq->sense_len = cmd->err_info->SenseLen;
2975 memcpy(cmd->rq->sense, cmd->err_info->SenseInfo,
2976 cmd->rq->sense_len);
2977 } else
2978 cmd->rq->sense_len = 0;
2979
1a614f50 2980 return error_value;
03bbfee5
MMOD		 2981}
2982
7c832835 2983/* checks the status of the job and calls complete buffers to mark all
a9925a06
JA		 2984 * buffers for the completed job. Note that this function does not need
2985 * to hold the hba/queue lock.
7c832835
BH		 2986 */
2987static inline void complete_command(ctlr_info_t *h, CommandList_struct *cmd,
2988 int timeout)
1da177e4 2989{
1da177e4 2990 int retry_cmd = 0;
198b7660
MMOD		 2991 struct request *rq = cmd->rq;
2992
2993 rq->errors = 0;
7c832835 2994
1da177e4 2995 if (timeout)
1a614f50 2996 rq->errors = make_status_bytes(0, 0, 0, DRIVER_TIMEOUT);
1da177e4 2997
d38ae168
MMOD		 2998 if (cmd->err_info->CommandStatus == 0) /* no error has occurred */
2999 goto after_error_processing;
7c832835 3000
d38ae168 3001 switch (cmd->err_info->CommandStatus) {
d38ae168 3002 case CMD_TARGET_STATUS:
0a9279cc 3003 rq->errors = evaluate_target_status(h, cmd, &retry_cmd);
d38ae168
MMOD		 3004 break;
3005 case CMD_DATA_UNDERRUN:
03bbfee5
MMOD		 3006 if (blk_fs_request(cmd->rq)) {
3007 printk(KERN_WARNING "cciss: cmd %p has"
3008 " completed with data underrun "
3009 "reported\n", cmd);
c3a4d78c 3010 cmd->rq->resid_len = cmd->err_info->ResidualCnt;
03bbfee5 3011 }
d38ae168
MMOD		 3012 break;
3013 case CMD_DATA_OVERRUN:
03bbfee5
MMOD		 3014 if (blk_fs_request(cmd->rq))
3015 printk(KERN_WARNING "cciss: cmd %p has"
3016 " completed with data overrun "
3017 "reported\n", cmd);
d38ae168
MMOD		 3018 break;
3019 case CMD_INVALID:
3020 printk(KERN_WARNING "cciss: cmd %p is "
3021 "reported invalid\n", cmd);
1a614f50
SC		 3022 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3023 cmd->err_info->CommandStatus, DRIVER_OK,
3024 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3025 break;
3026 case CMD_PROTOCOL_ERR:
3027 printk(KERN_WARNING "cciss: cmd %p has "
3028 "protocol error \n", cmd);
1a614f50
SC		 3029 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3030 cmd->err_info->CommandStatus, DRIVER_OK,
3031 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3032 break;
3033 case CMD_HARDWARE_ERR:
3034 printk(KERN_WARNING "cciss: cmd %p had "
3035 " hardware error\n", cmd);
1a614f50
SC		 3036 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3037 cmd->err_info->CommandStatus, DRIVER_OK,
3038 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3039 break;
3040 case CMD_CONNECTION_LOST:
3041 printk(KERN_WARNING "cciss: cmd %p had "
3042 "connection lost\n", cmd);
1a614f50
SC		 3043 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3044 cmd->err_info->CommandStatus, DRIVER_OK,
3045 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3046 break;
3047 case CMD_ABORTED:
3048 printk(KERN_WARNING "cciss: cmd %p was "
3049 "aborted\n", cmd);
1a614f50
SC		 3050 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3051 cmd->err_info->CommandStatus, DRIVER_OK,
3052 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 3053 break;
3054 case CMD_ABORT_FAILED:
3055 printk(KERN_WARNING "cciss: cmd %p reports "
3056 "abort failed\n", cmd);
1a614f50
SC		 3057 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3058 cmd->err_info->CommandStatus, DRIVER_OK,
3059 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3060 break;
3061 case CMD_UNSOLICITED_ABORT:
3062 printk(KERN_WARNING "cciss%d: unsolicited "
3063 "abort %p\n", h->ctlr, cmd);
3064 if (cmd->retry_count < MAX_CMD_RETRIES) {
3065 retry_cmd = 1;
3066 printk(KERN_WARNING
3067 "cciss%d: retrying %p\n", h->ctlr, cmd);
3068 cmd->retry_count++;
3069 } else
3070 printk(KERN_WARNING
3071 "cciss%d: %p retried too "
3072 "many times\n", h->ctlr, cmd);
1a614f50
SC		 3073 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3074 cmd->err_info->CommandStatus, DRIVER_OK,
3075 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 3076 break;
3077 case CMD_TIMEOUT:
3078 printk(KERN_WARNING "cciss: cmd %p timedout\n", cmd);
1a614f50
SC		 3079 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3080 cmd->err_info->CommandStatus, DRIVER_OK,
3081 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3082 break;
3083 default:
3084 printk(KERN_WARNING "cciss: cmd %p returned "
3085 "unknown status %x\n", cmd,
3086 cmd->err_info->CommandStatus);
1a614f50
SC		 3087 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3088 cmd->err_info->CommandStatus, DRIVER_OK,
3089 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
1da177e4 3090 }
d38ae168
MMOD		 3091
3092after_error_processing:
3093
1da177e4 3094 /* We need to return this command */
7c832835
BH		 3095 if (retry_cmd) {
3096 resend_cciss_cmd(h, cmd);
1da177e4 3097 return;
7c832835 3098 }
03bbfee5 3099 cmd->rq->completion_data = cmd;
a9925a06 3100 blk_complete_request(cmd->rq);
1da177e4
LT		 3101}
3102
7c832835
BH		 3103/*
3104 * Get a request and submit it to the controller.
1da177e4 3105 */
165125e1 3106static void do_cciss_request(struct request_queue *q)
1da177e4 3107{
7c832835 3108 ctlr_info_t *h = q->queuedata;
1da177e4 3109 CommandList_struct *c;
00988a35
MMOD		 3110 sector_t start_blk;
3111 int seg;
1da177e4
LT		 3112 struct request *creq;
3113 u64bit temp64;
3114 struct scatterlist tmp_sg[MAXSGENTRIES];
3115 drive_info_struct *drv;
3116 int i, dir;
3117
3118 /* We call start_io here in case there is a command waiting on the
3119 * queue that has not been sent.
7c832835 3120 */
1da177e4
LT		 3121 if (blk_queue_plugged(q))
3122 goto startio;
3123
7c832835 3124 queue:
9934c8c0 3125 creq = blk_peek_request(q);
1da177e4
LT		 3126 if (!creq)
3127 goto startio;
3128
089fe1b2 3129 BUG_ON(creq->nr_phys_segments > MAXSGENTRIES);
1da177e4 3130
7c832835 3131 if ((c = cmd_alloc(h, 1)) == NULL)
1da177e4
LT		 3132 goto full;
3133
9934c8c0 3134 blk_start_request(creq);
1da177e4
LT		 3135
3136 spin_unlock_irq(q->queue_lock);
3137
3138 c->cmd_type = CMD_RWREQ;
3139 c->rq = creq;
7c832835
BH		 3140
3141 /* fill in the request */
1da177e4 3142 drv = creq->rq_disk->private_data;
7c832835 3143 c->Header.ReplyQueue = 0; // unused in simple mode
33079b21
MM		 3144 /* got command from pool, so use the command block index instead */
3145 /* for direct lookups. */
3146 /* The first 2 bits are reserved for controller error reporting. */
3147 c->Header.Tag.lower = (c->cmdindex << 3);
7c832835
BH		 3148 c->Header.Tag.lower |= 0x04; /* flag for direct lookup. */
3149 c->Header.LUN.LogDev.VolId = drv->LunID;
1da177e4 3150 c->Header.LUN.LogDev.Mode = 1;
7c832835
BH		 3151 c->Request.CDBLen = 10; // 12 byte commands not in FW yet;
3152 c->Request.Type.Type = TYPE_CMD; // It is a command.
3153 c->Request.Type.Attribute = ATTR_SIMPLE;
3154 c->Request.Type.Direction =
a52de245 3155 (rq_data_dir(creq) == READ) ? XFER_READ : XFER_WRITE;
7c832835
BH		 3156 c->Request.Timeout = 0; // Don't time out
3157 c->Request.CDB[0] =
00988a35 3158 (rq_data_dir(creq) == READ) ? h->cciss_read : h->cciss_write;
83096ebf 3159 start_blk = blk_rq_pos(creq);
1da177e4 3160#ifdef CCISS_DEBUG
83096ebf
TH		 3161 printk(KERN_DEBUG "ciss: sector =%d nr_sectors=%d\n",
3162 (int)blk_rq_pos(creq), (int)blk_rq_sectors(creq));
7c832835 3163#endif /* CCISS_DEBUG */
1da177e4 3164
45711f1a 3165 sg_init_table(tmp_sg, MAXSGENTRIES);
1da177e4
LT		 3166 seg = blk_rq_map_sg(q, creq, tmp_sg);
3167
7c832835 3168 /* get the DMA records for the setup */
1da177e4
LT		 3169 if (c->Request.Type.Direction == XFER_READ)
3170 dir = PCI_DMA_FROMDEVICE;
3171 else
3172 dir = PCI_DMA_TODEVICE;
3173
7c832835 3174 for (i = 0; i < seg; i++) {
1da177e4 3175 c->SG[i].Len = tmp_sg[i].length;
45711f1a 3176 temp64.val = (__u64) pci_map_page(h->pdev, sg_page(&tmp_sg[i]),
7c832835
BH		 3177 tmp_sg[i].offset,
3178 tmp_sg[i].length, dir);
1da177e4 3179 c->SG[i].Addr.lower = temp64.val32.lower;
7c832835
BH		 3180 c->SG[i].Addr.upper = temp64.val32.upper;
3181 c->SG[i].Ext = 0; // we are not chaining
1da177e4 3182 }
7c832835
BH		 3183 /* track how many SG entries we are using */
3184 if (seg > h->maxSG)
3185 h->maxSG = seg;
1da177e4
LT		 3186
3187#ifdef CCISS_DEBUG
83096ebf
TH		 3188 printk(KERN_DEBUG "cciss: Submitting %u sectors in %d segments\n",
3189 blk_rq_sectors(creq), seg);
7c832835 3190#endif /* CCISS_DEBUG */
1da177e4
LT		 3191
3192 c->Header.SGList = c->Header.SGTotal = seg;
03bbfee5
MMOD		 3193 if (likely(blk_fs_request(creq))) {
3194 if(h->cciss_read == CCISS_READ_10) {
3195 c->Request.CDB[1] = 0;
3196 c->Request.CDB[2] = (start_blk >> 24) & 0xff; //MSB
3197 c->Request.CDB[3] = (start_blk >> 16) & 0xff;
3198 c->Request.CDB[4] = (start_blk >> 8) & 0xff;
3199 c->Request.CDB[5] = start_blk & 0xff;
3200 c->Request.CDB[6] = 0; // (sect >> 24) & 0xff; MSB
83096ebf
TH		 3201 c->Request.CDB[7] = (blk_rq_sectors(creq) >> 8) & 0xff;
3202 c->Request.CDB[8] = blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3203 c->Request.CDB[9] = c->Request.CDB[11] = c->Request.CDB[12] = 0;
3204 } else {
582539e5
RD		 3205 u32 upper32 = upper_32_bits(start_blk);
3206
03bbfee5
MMOD		 3207 c->Request.CDBLen = 16;
3208 c->Request.CDB[1]= 0;
582539e5
RD		 3209 c->Request.CDB[2]= (upper32 >> 24) & 0xff; //MSB
3210 c->Request.CDB[3]= (upper32 >> 16) & 0xff;
3211 c->Request.CDB[4]= (upper32 >> 8) & 0xff;
3212 c->Request.CDB[5]= upper32 & 0xff;
03bbfee5
MMOD		 3213 c->Request.CDB[6]= (start_blk >> 24) & 0xff;
3214 c->Request.CDB[7]= (start_blk >> 16) & 0xff;
3215 c->Request.CDB[8]= (start_blk >> 8) & 0xff;
3216 c->Request.CDB[9]= start_blk & 0xff;
83096ebf
TH		 3217 c->Request.CDB[10]= (blk_rq_sectors(creq) >> 24) & 0xff;
3218 c->Request.CDB[11]= (blk_rq_sectors(creq) >> 16) & 0xff;
3219 c->Request.CDB[12]= (blk_rq_sectors(creq) >> 8) & 0xff;
3220 c->Request.CDB[13]= blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3221 c->Request.CDB[14] = c->Request.CDB[15] = 0;
3222 }
3223 } else if (blk_pc_request(creq)) {
3224 c->Request.CDBLen = creq->cmd_len;
3225 memcpy(c->Request.CDB, creq->cmd, BLK_MAX_CDB);
00988a35 3226 } else {
03bbfee5
MMOD		 3227 printk(KERN_WARNING "cciss%d: bad request type %d\n", h->ctlr, creq->cmd_type);
3228 BUG();
00988a35 3229 }
1da177e4
LT		 3230
3231 spin_lock_irq(q->queue_lock);
3232
8a3173de 3233 addQ(&h->reqQ, c);
1da177e4 3234 h->Qdepth++;
7c832835
BH		 3235 if (h->Qdepth > h->maxQsinceinit)
3236 h->maxQsinceinit = h->Qdepth;
1da177e4
LT		 3237
3238 goto queue;
00988a35 3239full:
1da177e4 3240 blk_stop_queue(q);
00988a35 3241startio:
1da177e4
LT		 3242 /* We will already have the driver lock here so not need
3243 * to lock it.
7c832835 3244 */
1da177e4
LT		 3245 start_io(h);
3246}
3247
3da8b713 3248static inline unsigned long get_next_completion(ctlr_info_t *h)
3249{
3da8b713 3250 return h->access.command_completed(h);
3da8b713 3251}
3252
3253static inline int interrupt_pending(ctlr_info_t *h)
3254{
3da8b713 3255 return h->access.intr_pending(h);
3da8b713 3256}
3257
3258static inline long interrupt_not_for_us(ctlr_info_t *h)
3259{
7c832835 3260 return (((h->access.intr_pending(h) == 0) ||
3da8b713 3261 (h->interrupts_enabled == 0)));
3da8b713 3262}
3263
7d12e780 3264static irqreturn_t do_cciss_intr(int irq, void *dev_id)
1da177e4
LT		 3265{
3266 ctlr_info_t *h = dev_id;
3267 CommandList_struct *c;
3268 unsigned long flags;
33079b21 3269 __u32 a, a1, a2;
1da177e4 3270
3da8b713 3271 if (interrupt_not_for_us(h))
1da177e4 3272 return IRQ_NONE;
1da177e4
LT		 3273 /*
3274 * If there are completed commands in the completion queue,
3275 * we had better do something about it.
3276 */
3277 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
3da8b713 3278 while (interrupt_pending(h)) {
7c832835 3279 while ((a = get_next_completion(h)) != FIFO_EMPTY) {
1da177e4 3280 a1 = a;
33079b21
MM		 3281 if ((a & 0x04)) {
3282 a2 = (a >> 3);
f880632f 3283 if (a2 >= h->nr_cmds) {
7c832835
BH		 3284 printk(KERN_WARNING
3285 "cciss: controller cciss%d failed, stopping.\n",
3286 h->ctlr);
33079b21
MM		 3287 fail_all_cmds(h->ctlr);
3288 return IRQ_HANDLED;
3289 }
3290
3291 c = h->cmd_pool + a2;
3292 a = c->busaddr;
3293
3294 } else {
8a3173de
JA		 3295 struct hlist_node *tmp;
3296
7c832835 3297 a &= ~3;
8a3173de
JA		 3298 c = NULL;
3299 hlist_for_each_entry(c, tmp, &h->cmpQ, list) {
3300 if (c->busaddr == a)
7c832835
BH		 3301 break;
3302 }
33079b21 3303 }
1da177e4
LT		 3304 /*
3305 * If we've found the command, take it off the
3306 * completion Q and free it
3307 */
8a3173de
JA		 3308 if (c && c->busaddr == a) {
3309 removeQ(c);
1da177e4
LT		 3310 if (c->cmd_type == CMD_RWREQ) {
3311 complete_command(h, c, 0);
3312 } else if (c->cmd_type == CMD_IOCTL_PEND) {
3313 complete(c->waiting);
3314 }
3315# ifdef CONFIG_CISS_SCSI_TAPE
3316 else if (c->cmd_type == CMD_SCSI)
3317 complete_scsi_command(c, 0, a1);
3318# endif
3319 continue;
3320 }
3321 }
3322 }
3323
1da177e4
LT		 3324 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
3325 return IRQ_HANDLED;
3326}
7c832835 3327
b368c9dd
AP		 3328/**
3329 * add_to_scan_list() - add controller to rescan queue
3330 * @h: Pointer to the controller.
3331 *
3332 * Adds the controller to the rescan queue if not already on the queue.
3333 *
3334 * returns 1 if added to the queue, 0 if skipped (could be on the
3335 * queue already, or the controller could be initializing or shutting
3336 * down).
3337 **/
3338static int add_to_scan_list(struct ctlr_info *h)
3339{
3340 struct ctlr_info *test_h;
3341 int found = 0;
3342 int ret = 0;
3343
3344 if (h->busy_initializing)
3345 return 0;
3346
3347 if (!mutex_trylock(&h->busy_shutting_down))
3348 return 0;
3349
3350 mutex_lock(&scan_mutex);
3351 list_for_each_entry(test_h, &scan_q, scan_list) {
3352 if (test_h == h) {
3353 found = 1;
3354 break;
3355 }
3356 }
3357 if (!found && !h->busy_scanning) {
3358 INIT_COMPLETION(h->scan_wait);
3359 list_add_tail(&h->scan_list, &scan_q);
3360 ret = 1;
3361 }
3362 mutex_unlock(&scan_mutex);
3363 mutex_unlock(&h->busy_shutting_down);
3364
3365 return ret;
3366}
3367
3368/**
3369 * remove_from_scan_list() - remove controller from rescan queue
3370 * @h: Pointer to the controller.
3371 *
3372 * Removes the controller from the rescan queue if present. Blocks if
3373 * the controller is currently conducting a rescan.
3374 **/
3375static void remove_from_scan_list(struct ctlr_info *h)
3376{
3377 struct ctlr_info *test_h, *tmp_h;
3378 int scanning = 0;
3379
3380 mutex_lock(&scan_mutex);
3381 list_for_each_entry_safe(test_h, tmp_h, &scan_q, scan_list) {
3382 if (test_h == h) {
3383 list_del(&h->scan_list);
3384 complete_all(&h->scan_wait);
3385 mutex_unlock(&scan_mutex);
3386 return;
3387 }
3388 }
3389 if (&h->busy_scanning)
3390 scanning = 0;
3391 mutex_unlock(&scan_mutex);
3392
3393 if (scanning)
3394 wait_for_completion(&h->scan_wait);
3395}
3396
3397/**
3398 * scan_thread() - kernel thread used to rescan controllers
3399 * @data: Ignored.
3400 *
3401 * A kernel thread used scan for drive topology changes on
3402 * controllers. The thread processes only one controller at a time
3403 * using a queue. Controllers are added to the queue using
3404 * add_to_scan_list() and removed from the queue either after done
3405 * processing or using remove_from_scan_list().
3406 *
3407 * returns 0.
3408 **/
0a9279cc
MM		 3409static int scan_thread(void *data)
3410{
b368c9dd 3411 struct ctlr_info *h;
0a9279cc 3412
b368c9dd
AP		 3413 while (1) {
3414 set_current_state(TASK_INTERRUPTIBLE);
3415 schedule();
0a9279cc
MM		 3416 if (kthread_should_stop())
3417 break;
b368c9dd
AP		 3418
3419 while (1) {
3420 mutex_lock(&scan_mutex);
3421 if (list_empty(&scan_q)) {
3422 mutex_unlock(&scan_mutex);
3423 break;
3424 }
3425
3426 h = list_entry(scan_q.next,
3427 struct ctlr_info,
3428 scan_list);
3429 list_del(&h->scan_list);
3430 h->busy_scanning = 1;
3431 mutex_unlock(&scan_mutex);
3432
3433 if (h) {
3434 rebuild_lun_table(h, 0);
3435 complete_all(&h->scan_wait);
3436 mutex_lock(&scan_mutex);
3437 h->busy_scanning = 0;
3438 mutex_unlock(&scan_mutex);
3439 }
3440 }
0a9279cc 3441 }
b368c9dd 3442
0a9279cc
MM		 3443 return 0;
3444}
3445
3446static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c)
3447{
3448 if (c->err_info->SenseInfo[2] != UNIT_ATTENTION)
3449 return 0;
3450
3451 switch (c->err_info->SenseInfo[12]) {
3452 case STATE_CHANGED:
3453 printk(KERN_WARNING "cciss%d: a state change "
3454 "detected, command retried\n", h->ctlr);
3455 return 1;
3456 break;
3457 case LUN_FAILED:
3458 printk(KERN_WARNING "cciss%d: LUN failure "
3459 "detected, action required\n", h->ctlr);
3460 return 1;
3461 break;
3462 case REPORT_LUNS_CHANGED:
3463 printk(KERN_WARNING "cciss%d: report LUN data "
3464 "changed\n", h->ctlr);
b368c9dd
AP		 3465 add_to_scan_list(h);
3466 wake_up_process(cciss_scan_thread);
0a9279cc
MM		 3467 return 1;
3468 break;
3469 case POWER_OR_RESET:
3470 printk(KERN_WARNING "cciss%d: a power on "
3471 "or device reset detected\n", h->ctlr);
3472 return 1;
3473 break;
3474 case UNIT_ATTENTION_CLEARED:
3475 printk(KERN_WARNING "cciss%d: unit attention "
3476 "cleared by another initiator\n", h->ctlr);
3477 return 1;
3478 break;
3479 default:
3480 printk(KERN_WARNING "cciss%d: unknown "
3481 "unit attention detected\n", h->ctlr);
3482 return 1;
3483 }
3484}
3485
7c832835 3486/*
d14c4ab5 3487 * We cannot read the structure directly, for portability we must use
1da177e4 3488 * the io functions.
7c832835 3489 * This is for debug only.
1da177e4
LT		 3490 */
3491#ifdef CCISS_DEBUG
7c832835 3492static void print_cfg_table(CfgTable_struct *tb)
1da177e4
LT		 3493{
3494 int i;
3495 char temp_name[17];
3496
3497 printk("Controller Configuration information\n");
3498 printk("------------------------------------\n");
7c832835 3499 for (i = 0; i < 4; i++)
1da177e4 3500 temp_name[i] = readb(&(tb->Signature[i]));
7c832835
BH		 3501 temp_name[4] = '\0';
3502 printk(" Signature = %s\n", temp_name);
1da177e4 3503 printk(" Spec Number = %d\n", readl(&(tb->SpecValence)));
7c832835
BH		 3504 printk(" Transport methods supported = 0x%x\n",
3505 readl(&(tb->TransportSupport)));
3506 printk(" Transport methods active = 0x%x\n",
3507 readl(&(tb->TransportActive)));
3508 printk(" Requested transport Method = 0x%x\n",
3509 readl(&(tb->HostWrite.TransportRequest)));
d14c4ab5 3510 printk(" Coalesce Interrupt Delay = 0x%x\n",
7c832835 3511 readl(&(tb->HostWrite.CoalIntDelay)));
d14c4ab5 3512 printk(" Coalesce Interrupt Count = 0x%x\n",
7c832835
BH		 3513 readl(&(tb->HostWrite.CoalIntCount)));
3514 printk(" Max outstanding commands = 0x%d\n",
3515 readl(&(tb->CmdsOutMax)));
3516 printk(" Bus Types = 0x%x\n", readl(&(tb->BusTypes)));
3517 for (i = 0; i < 16; i++)
1da177e4
LT		 3518 temp_name[i] = readb(&(tb->ServerName[i]));
3519 temp_name[16] = '\0';
3520 printk(" Server Name = %s\n", temp_name);
7c832835 3521 printk(" Heartbeat Counter = 0x%x\n\n\n", readl(&(tb->HeartBeat)));
1da177e4 3522}
7c832835 3523#endif /* CCISS_DEBUG */
1da177e4 3524
7c832835 3525static int find_PCI_BAR_index(struct pci_dev *pdev, unsigned long pci_bar_addr)
1da177e4
LT		 3526{
3527 int i, offset, mem_type, bar_type;
7c832835 3528 if (pci_bar_addr == PCI_BASE_ADDRESS_0) /* looking for BAR zero? */
1da177e4
LT		 3529 return 0;
3530 offset = 0;
7c832835
BH		 3531 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3532 bar_type = pci_resource_flags(pdev, i) & PCI_BASE_ADDRESS_SPACE;
1da177e4
LT		 3533 if (bar_type == PCI_BASE_ADDRESS_SPACE_IO)
3534 offset += 4;
3535 else {
3536 mem_type = pci_resource_flags(pdev, i) &
7c832835 3537 PCI_BASE_ADDRESS_MEM_TYPE_MASK;
1da177e4 3538 switch (mem_type) {
7c832835
BH		 3539 case PCI_BASE_ADDRESS_MEM_TYPE_32:
3540 case PCI_BASE_ADDRESS_MEM_TYPE_1M:
3541 offset += 4; /* 32 bit */
3542 break;
3543 case PCI_BASE_ADDRESS_MEM_TYPE_64:
3544 offset += 8;
3545 break;
3546 default: /* reserved in PCI 2.2 */
3547 printk(KERN_WARNING
3548 "Base address is invalid\n");
3549 return -1;
1da177e4
LT		 3550 break;
3551 }
3552 }
7c832835
BH		 3553 if (offset == pci_bar_addr - PCI_BASE_ADDRESS_0)
3554 return i + 1;
1da177e4
LT		 3555 }
3556 return -1;
3557}
3558
fb86a35b
MM		 3559/* If MSI/MSI-X is supported by the kernel we will try to enable it on
3560 * controllers that are capable. If not, we use IO-APIC mode.
3561 */
3562
7c832835
BH		 3563static void __devinit cciss_interrupt_mode(ctlr_info_t *c,
3564 struct pci_dev *pdev, __u32 board_id)
fb86a35b
MM		 3565{
3566#ifdef CONFIG_PCI_MSI
7c832835
BH		 3567 int err;
3568 struct msix_entry cciss_msix_entries[4] = { {0, 0}, {0, 1},
3569 {0, 2}, {0, 3}
3570 };
fb86a35b
MM		 3571
3572 /* Some boards advertise MSI but don't really support it */
3573 if ((board_id == 0x40700E11) ||
7c832835
BH		 3574 (board_id == 0x40800E11) ||
3575 (board_id == 0x40820E11) || (board_id == 0x40830E11))
fb86a35b
MM		 3576 goto default_int_mode;
3577
7c832835
BH		 3578 if (pci_find_capability(pdev, PCI_CAP_ID_MSIX)) {
3579 err = pci_enable_msix(pdev, cciss_msix_entries, 4);
3580 if (!err) {
3581 c->intr[0] = cciss_msix_entries[0].vector;
3582 c->intr[1] = cciss_msix_entries[1].vector;
3583 c->intr[2] = cciss_msix_entries[2].vector;
3584 c->intr[3] = cciss_msix_entries[3].vector;
3585 c->msix_vector = 1;
3586 return;
3587 }
3588 if (err > 0) {
3589 printk(KERN_WARNING "cciss: only %d MSI-X vectors "
3590 "available\n", err);
1ecb9c0f 3591 goto default_int_mode;
7c832835
BH		 3592 } else {
3593 printk(KERN_WARNING "cciss: MSI-X init failed %d\n",
3594 err);
1ecb9c0f 3595 goto default_int_mode;
7c832835
BH		 3596 }
3597 }
3598 if (pci_find_capability(pdev, PCI_CAP_ID_MSI)) {
3599 if (!pci_enable_msi(pdev)) {
7c832835 3600 c->msi_vector = 1;
7c832835
BH		 3601 } else {
3602 printk(KERN_WARNING "cciss: MSI init failed\n");
7c832835
BH		 3603 }
3604 }
1ecb9c0f 3605default_int_mode:
7c832835 3606#endif /* CONFIG_PCI_MSI */
fb86a35b 3607 /* if we get here we're going to use the default interrupt mode */
7c832835 3608 c->intr[SIMPLE_MODE_INT] = pdev->irq;
fb86a35b
MM		 3609 return;
3610}
3611
7d1fd970 3612static int __devinit cciss_pci_init(ctlr_info_t *c, struct pci_dev *pdev)
1da177e4
LT		 3613{
3614 ushort subsystem_vendor_id, subsystem_device_id, command;
3615 __u32 board_id, scratchpad = 0;
3616 __u64 cfg_offset;
3617 __u32 cfg_base_addr;
3618 __u64 cfg_base_addr_index;
c33ac89b 3619 int i, err;
1da177e4
LT		 3620
3621 /* check to see if controller has been disabled */
3622 /* BEFORE trying to enable it */
7c832835
BH		 3623 (void)pci_read_config_word(pdev, PCI_COMMAND, &command);
3624 if (!(command & 0x02)) {
3625 printk(KERN_WARNING
3626 "cciss: controller appears to be disabled\n");
c33ac89b 3627 return -ENODEV;
1da177e4
LT		 3628 }
3629
c33ac89b 3630 err = pci_enable_device(pdev);
7c832835 3631 if (err) {
1da177e4 3632 printk(KERN_ERR "cciss: Unable to Enable PCI device\n");
c33ac89b 3633 return err;
1da177e4 3634 }
1da177e4 3635
4e570309
BH		 3636 err = pci_request_regions(pdev, "cciss");
3637 if (err) {
3638 printk(KERN_ERR "cciss: Cannot obtain PCI resources, "
7c832835 3639 "aborting\n");
872225ca 3640 return err;
4e570309
BH		 3641 }
3642
1da177e4
LT		 3643 subsystem_vendor_id = pdev->subsystem_vendor;
3644 subsystem_device_id = pdev->subsystem_device;
3645 board_id = (((__u32) (subsystem_device_id << 16) & 0xffff0000) |
7c832835 3646 subsystem_vendor_id);
1da177e4 3647
1da177e4
LT		 3648#ifdef CCISS_DEBUG
3649 printk("command = %x\n", command);
3650 printk("irq = %x\n", pdev->irq);
3651 printk("board_id = %x\n", board_id);
7c832835 3652#endif /* CCISS_DEBUG */
1da177e4 3653
fb86a35b
MM		 3654/* If the kernel supports MSI/MSI-X we will try to enable that functionality,
3655 * else we use the IO-APIC interrupt assigned to us by system ROM.
3656 */
3657 cciss_interrupt_mode(c, pdev, board_id);
1da177e4 3658
e1438581
MM		 3659 /* find the memory BAR */
3660 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3661 if (pci_resource_flags(pdev, i) & IORESOURCE_MEM)
3662 break;
3663 }
3664 if (i == DEVICE_COUNT_RESOURCE) {
3665 printk(KERN_WARNING "cciss: No memory BAR found\n");
3666 err = -ENODEV;
3667 goto err_out_free_res;
3668 }
3669
3670 c->paddr = pci_resource_start(pdev, i); /* addressing mode bits
3671 * already removed
3672 */
1da177e4 3673
1da177e4 3674#ifdef CCISS_DEBUG
9f92f471 3675 printk("address 0 = %lx\n", c->paddr);
7c832835 3676#endif /* CCISS_DEBUG */
a5b92873 3677 c->vaddr = remap_pci_mem(c->paddr, 0x250);
1da177e4
LT		 3678
3679 /* Wait for the board to become ready. (PCI hotplug needs this.)
3680 * We poll for up to 120 secs, once per 100ms. */
7c832835 3681 for (i = 0; i < 1200; i++) {
1da177e4
LT		 3682 scratchpad = readl(c->vaddr + SA5_SCRATCHPAD_OFFSET);
3683 if (scratchpad == CCISS_FIRMWARE_READY)
3684 break;
3685 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3686 schedule_timeout(msecs_to_jiffies(100)); /* wait 100ms */
1da177e4
LT		 3687 }
3688 if (scratchpad != CCISS_FIRMWARE_READY) {
3689 printk(KERN_WARNING "cciss: Board not ready. Timed out.\n");
c33ac89b 3690 err = -ENODEV;
4e570309 3691 goto err_out_free_res;
1da177e4
LT		 3692 }
3693
3694 /* get the address index number */
3695 cfg_base_addr = readl(c->vaddr + SA5_CTCFG_OFFSET);
3696 cfg_base_addr &= (__u32) 0x0000ffff;
3697#ifdef CCISS_DEBUG
3698 printk("cfg base address = %x\n", cfg_base_addr);
7c832835
BH		 3699#endif /* CCISS_DEBUG */
3700 cfg_base_addr_index = find_PCI_BAR_index(pdev, cfg_base_addr);
1da177e4 3701#ifdef CCISS_DEBUG
9f92f471
RD		 3702 printk("cfg base address index = %llx\n",
3703 (unsigned long long)cfg_base_addr_index);
7c832835 3704#endif /* CCISS_DEBUG */
1da177e4
LT		 3705 if (cfg_base_addr_index == -1) {
3706 printk(KERN_WARNING "cciss: Cannot find cfg_base_addr_index\n");
c33ac89b 3707 err = -ENODEV;
4e570309 3708 goto err_out_free_res;
1da177e4
LT		 3709 }
3710
3711 cfg_offset = readl(c->vaddr + SA5_CTMEM_OFFSET);
3712#ifdef CCISS_DEBUG
9f92f471 3713 printk("cfg offset = %llx\n", (unsigned long long)cfg_offset);
7c832835
BH		 3714#endif /* CCISS_DEBUG */
3715 c->cfgtable = remap_pci_mem(pci_resource_start(pdev,
3716 cfg_base_addr_index) +
3717 cfg_offset, sizeof(CfgTable_struct));
1da177e4
LT		 3718 c->board_id = board_id;
3719
3720#ifdef CCISS_DEBUG
945f390f 3721 print_cfg_table(c->cfgtable);
7c832835 3722#endif /* CCISS_DEBUG */
1da177e4 3723
49153998
MM		 3724 /* Some controllers support Zero Memory Raid (ZMR).
3725 * When configured in ZMR mode the number of supported
3726 * commands drops to 64. So instead of just setting an
3727 * arbitrary value we make the driver a little smarter.
3728 * We read the config table to tell us how many commands
3729 * are supported on the controller then subtract 4 to
3730 * leave a little room for ioctl calls.
3731 */
3732 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835 3733 for (i = 0; i < ARRAY_SIZE(products); i++) {
1da177e4
LT		 3734 if (board_id == products[i].board_id) {
3735 c->product_name = products[i].product_name;
3736 c->access = *(products[i].access);
49153998 3737 c->nr_cmds = c->max_commands - 4;
1da177e4
LT		 3738 break;
3739 }
3740 }
7c832835
BH		 3741 if ((readb(&c->cfgtable->Signature[0]) != 'C') ||
3742 (readb(&c->cfgtable->Signature[1]) != 'I') ||
3743 (readb(&c->cfgtable->Signature[2]) != 'S') ||
3744 (readb(&c->cfgtable->Signature[3]) != 'S')) {
1da177e4 3745 printk("Does not appear to be a valid CISS config table\n");
c33ac89b 3746 err = -ENODEV;
4e570309 3747 goto err_out_free_res;
1da177e4 3748 }
4ff9a9a4
MM		 3749 /* We didn't find the controller in our list. We know the
3750 * signature is valid. If it's an HP device let's try to
3751 * bind to the device and fire it up. Otherwise we bail.
3752 */
3753 if (i == ARRAY_SIZE(products)) {
3754 if (subsystem_vendor_id == PCI_VENDOR_ID_HP) {
3755 c->product_name = products[i-1].product_name;
3756 c->access = *(products[i-1].access);
49153998 3757 c->nr_cmds = c->max_commands - 4;
4ff9a9a4
MM		 3758 printk(KERN_WARNING "cciss: This is an unknown "
3759 "Smart Array controller.\n"
3760 "cciss: Please update to the latest driver "
3761 "available from www.hp.com.\n");
3762 } else {
3763 printk(KERN_WARNING "cciss: Sorry, I don't know how"
3764 " to access the Smart Array controller %08lx\n"
3765 , (unsigned long)board_id);
3766 err = -ENODEV;
3767 goto err_out_free_res;
3768 }
3769 }
1da177e4 3770#ifdef CONFIG_X86
7c832835
BH		 3771 {
3772 /* Need to enable prefetch in the SCSI core for 6400 in x86 */
3773 __u32 prefetch;
3774 prefetch = readl(&(c->cfgtable->SCSI_Prefetch));
3775 prefetch |= 0x100;
3776 writel(prefetch, &(c->cfgtable->SCSI_Prefetch));
3777 }
1da177e4
LT		 3778#endif
3779
8bf50f71
MMOD		 3780 /* Disabling DMA prefetch and refetch for the P600.
3781 * An ASIC bug may result in accesses to invalid memory addresses.
3782 * We've disabled prefetch for some time now. Testing with XEN
3783 * kernels revealed a bug in the refetch if dom0 resides on a P600.
f92e2f5f
MM		 3784 */
3785 if(board_id == 0x3225103C) {
3786 __u32 dma_prefetch;
8bf50f71 3787 __u32 dma_refetch;
f92e2f5f
MM		 3788 dma_prefetch = readl(c->vaddr + I2O_DMA1_CFG);
3789 dma_prefetch |= 0x8000;
3790 writel(dma_prefetch, c->vaddr + I2O_DMA1_CFG);
8bf50f71
MMOD		 3791 pci_read_config_dword(pdev, PCI_COMMAND_PARITY, &dma_refetch);
3792 dma_refetch |= 0x1;
3793 pci_write_config_dword(pdev, PCI_COMMAND_PARITY, dma_refetch);
f92e2f5f
MM		 3794 }
3795
1da177e4
LT		 3796#ifdef CCISS_DEBUG
3797 printk("Trying to put board into Simple mode\n");
7c832835 3798#endif /* CCISS_DEBUG */
1da177e4 3799 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835
BH		 3800 /* Update the field, and then ring the doorbell */
3801 writel(CFGTBL_Trans_Simple, &(c->cfgtable->HostWrite.TransportRequest));
3802 writel(CFGTBL_ChangeReq, c->vaddr + SA5_DOORBELL);
1da177e4
LT		 3803
3804 /* under certain very rare conditions, this can take awhile.
3805 * (e.g.: hot replace a failed 144GB drive in a RAID 5 set right
3806 * as we enter this code.) */
7c832835 3807 for (i = 0; i < MAX_CONFIG_WAIT; i++) {
1da177e4
LT		 3808 if (!(readl(c->vaddr + SA5_DOORBELL) & CFGTBL_ChangeReq))
3809 break;
3810 /* delay and try again */
3811 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3812 schedule_timeout(msecs_to_jiffies(1));
7c832835 3813 }
1da177e4
LT		 3814
3815#ifdef CCISS_DEBUG
7c832835
BH		 3816 printk(KERN_DEBUG "I counter got to %d %x\n", i,
3817 readl(c->vaddr + SA5_DOORBELL));
3818#endif /* CCISS_DEBUG */
1da177e4 3819#ifdef CCISS_DEBUG
7c832835
BH		 3820 print_cfg_table(c->cfgtable);
3821#endif /* CCISS_DEBUG */
1da177e4 3822
7c832835 3823 if (!(readl(&(c->cfgtable->TransportActive)) & CFGTBL_Trans_Simple)) {
1da177e4 3824 printk(KERN_WARNING "cciss: unable to get board into"
7c832835 3825 " simple mode\n");
c33ac89b 3826 err = -ENODEV;
4e570309 3827 goto err_out_free_res;
1da177e4
LT		 3828 }
3829 return 0;
3830
5faad620 3831err_out_free_res:
872225ca
MM		 3832 /*
3833 * Deliberately omit pci_disable_device(): it does something nasty to
3834 * Smart Array controllers that pci_enable_device does not undo
3835 */
4e570309 3836 pci_release_regions(pdev);
c33ac89b 3837 return err;
1da177e4
LT		 3838}
3839
6ae5ce8e
MM		 3840/* Function to find the first free pointer into our hba[] array
3841 * Returns -1 if no free entries are left.
7c832835 3842 */
1da177e4
LT		 3843static int alloc_cciss_hba(void)
3844{
799202cb 3845 int i;
1da177e4 3846
7c832835 3847 for (i = 0; i < MAX_CTLR; i++) {
1da177e4
LT		 3848 if (!hba[i]) {
3849 ctlr_info_t *p;
f2912a12 3850
06ff37ff 3851 p = kzalloc(sizeof(ctlr_info_t), GFP_KERNEL);
1da177e4
LT		 3852 if (!p)
3853 goto Enomem;
1da177e4
LT		 3854 hba[i] = p;
3855 return i;
3856 }
3857 }
3858 printk(KERN_WARNING "cciss: This driver supports a maximum"
7c832835 3859 " of %d controllers.\n", MAX_CTLR);
799202cb
MM		 3860 return -1;
3861Enomem:
1da177e4 3862 printk(KERN_ERR "cciss: out of memory.\n");
1da177e4
LT		 3863 return -1;
3864}
3865
3866static void free_hba(int i)
3867{
3868 ctlr_info_t *p = hba[i];
3869 int n;
3870
3871 hba[i] = NULL;
799202cb 3872 for (n = 0; n < CISS_MAX_LUN; n++)
1da177e4
LT		 3873 put_disk(p->gendisk[n]);
3874 kfree(p);
3875}
3876
82eb03cf
CC		 3877/* Send a message CDB to the firmware. */
3878static __devinit int cciss_message(struct pci_dev *pdev, unsigned char opcode, unsigned char type)
3879{
3880 typedef struct {
3881 CommandListHeader_struct CommandHeader;
3882 RequestBlock_struct Request;
3883 ErrDescriptor_struct ErrorDescriptor;
3884 } Command;
3885 static const size_t cmd_sz = sizeof(Command) + sizeof(ErrorInfo_struct);
3886 Command *cmd;
3887 dma_addr_t paddr64;
3888 uint32_t paddr32, tag;
3889 void __iomem *vaddr;
3890 int i, err;
3891
3892 vaddr = ioremap_nocache(pci_resource_start(pdev, 0), pci_resource_len(pdev, 0));
3893 if (vaddr == NULL)
3894 return -ENOMEM;
3895
3896 /* The Inbound Post Queue only accepts 32-bit physical addresses for the
3897 CCISS commands, so they must be allocated from the lower 4GiB of
3898 memory. */
e930438c 3899 err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32));
82eb03cf
CC		 3900 if (err) {
3901 iounmap(vaddr);
3902 return -ENOMEM;
3903 }
3904
3905 cmd = pci_alloc_consistent(pdev, cmd_sz, &paddr64);
3906 if (cmd == NULL) {
3907 iounmap(vaddr);
3908 return -ENOMEM;
3909 }
3910
3911 /* This must fit, because of the 32-bit consistent DMA mask. Also,
3912 although there's no guarantee, we assume that the address is at
3913 least 4-byte aligned (most likely, it's page-aligned). */
3914 paddr32 = paddr64;
3915
3916 cmd->CommandHeader.ReplyQueue = 0;
3917 cmd->CommandHeader.SGList = 0;
3918 cmd->CommandHeader.SGTotal = 0;
3919 cmd->CommandHeader.Tag.lower = paddr32;
3920 cmd->CommandHeader.Tag.upper = 0;
3921 memset(&cmd->CommandHeader.LUN.LunAddrBytes, 0, 8);
3922
3923 cmd->Request.CDBLen = 16;
3924 cmd->Request.Type.Type = TYPE_MSG;
3925 cmd->Request.Type.Attribute = ATTR_HEADOFQUEUE;
3926 cmd->Request.Type.Direction = XFER_NONE;
3927 cmd->Request.Timeout = 0; /* Don't time out */
3928 cmd->Request.CDB[0] = opcode;
3929 cmd->Request.CDB[1] = type;
3930 memset(&cmd->Request.CDB[2], 0, 14); /* the rest of the CDB is reserved */
3931
3932 cmd->ErrorDescriptor.Addr.lower = paddr32 + sizeof(Command);
3933 cmd->ErrorDescriptor.Addr.upper = 0;
3934 cmd->ErrorDescriptor.Len = sizeof(ErrorInfo_struct);
3935
3936 writel(paddr32, vaddr + SA5_REQUEST_PORT_OFFSET);
3937
3938 for (i = 0; i < 10; i++) {
3939 tag = readl(vaddr + SA5_REPLY_PORT_OFFSET);
3940 if ((tag & ~3) == paddr32)
3941 break;
3942 schedule_timeout_uninterruptible(HZ);
3943 }
3944
3945 iounmap(vaddr);
3946
3947 /* we leak the DMA buffer here ... no choice since the controller could
3948 still complete the command. */
3949 if (i == 10) {
3950 printk(KERN_ERR "cciss: controller message %02x:%02x timed out\n",
3951 opcode, type);
3952 return -ETIMEDOUT;
3953 }
3954
3955 pci_free_consistent(pdev, cmd_sz, cmd, paddr64);
3956
3957 if (tag & 2) {
3958 printk(KERN_ERR "cciss: controller message %02x:%02x failed\n",
3959 opcode, type);
3960 return -EIO;
3961 }
3962
3963 printk(KERN_INFO "cciss: controller message %02x:%02x succeeded\n",
3964 opcode, type);
3965 return 0;
3966}
3967
3968#define cciss_soft_reset_controller(p) cciss_message(p, 1, 0)
3969#define cciss_noop(p) cciss_message(p, 3, 0)
3970
3971static __devinit int cciss_reset_msi(struct pci_dev *pdev)
3972{
3973/* the #defines are stolen from drivers/pci/msi.h. */
3974#define msi_control_reg(base) (base + PCI_MSI_FLAGS)
3975#define PCI_MSIX_FLAGS_ENABLE (1 << 15)
3976
3977 int pos;
3978 u16 control = 0;
3979
3980 pos = pci_find_capability(pdev, PCI_CAP_ID_MSI);
3981 if (pos) {
3982 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3983 if (control & PCI_MSI_FLAGS_ENABLE) {
3984 printk(KERN_INFO "cciss: resetting MSI\n");
3985 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSI_FLAGS_ENABLE);
3986 }
3987 }
3988
3989 pos = pci_find_capability(pdev, PCI_CAP_ID_MSIX);
3990 if (pos) {
3991 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3992 if (control & PCI_MSIX_FLAGS_ENABLE) {
3993 printk(KERN_INFO "cciss: resetting MSI-X\n");
3994 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSIX_FLAGS_ENABLE);
3995 }
3996 }
3997
3998 return 0;
3999}
4000
4001/* This does a hard reset of the controller using PCI power management
4002 * states. */
4003static __devinit int cciss_hard_reset_controller(struct pci_dev *pdev)
4004{
4005 u16 pmcsr, saved_config_space[32];
4006 int i, pos;
4007
4008 printk(KERN_INFO "cciss: using PCI PM to reset controller\n");
4009
4010 /* This is very nearly the same thing as
4011
4012 pci_save_state(pci_dev);
4013 pci_set_power_state(pci_dev, PCI_D3hot);
4014 pci_set_power_state(pci_dev, PCI_D0);
4015 pci_restore_state(pci_dev);
4016
4017 but we can't use these nice canned kernel routines on
4018 kexec, because they also check the MSI/MSI-X state in PCI
4019 configuration space and do the wrong thing when it is
4020 set/cleared. Also, the pci_save/restore_state functions
4021 violate the ordering requirements for restoring the
4022 configuration space from the CCISS document (see the
4023 comment below). So we roll our own .... */
4024
4025 for (i = 0; i < 32; i++)
4026 pci_read_config_word(pdev, 2*i, &saved_config_space[i]);
4027
4028 pos = pci_find_capability(pdev, PCI_CAP_ID_PM);
4029 if (pos == 0) {
4030 printk(KERN_ERR "cciss_reset_controller: PCI PM not supported\n");
4031 return -ENODEV;
4032 }
4033
4034 /* Quoting from the Open CISS Specification: "The Power
4035 * Management Control/Status Register (CSR) controls the power
4036 * state of the device. The normal operating state is D0,
4037 * CSR=00h. The software off state is D3, CSR=03h. To reset
4038 * the controller, place the interface device in D3 then to
4039 * D0, this causes a secondary PCI reset which will reset the
4040 * controller." */
4041
4042 /* enter the D3hot power management state */
4043 pci_read_config_word(pdev, pos + PCI_PM_CTRL, &pmcsr);
4044 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
4045 pmcsr |= PCI_D3hot;
4046 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
4047
4048 schedule_timeout_uninterruptible(HZ >> 1);
4049
4050 /* enter the D0 power management state */
4051 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
4052 pmcsr |= PCI_D0;
4053 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
4054
4055 schedule_timeout_uninterruptible(HZ >> 1);
4056
4057 /* Restore the PCI configuration space. The Open CISS
4058 * Specification says, "Restore the PCI Configuration
4059 * Registers, offsets 00h through 60h. It is important to
4060 * restore the command register, 16-bits at offset 04h,
4061 * last. Do not restore the configuration status register,
4062 * 16-bits at offset 06h." Note that the offset is 2*i. */
4063 for (i = 0; i < 32; i++) {
4064 if (i == 2 || i == 3)
4065 continue;
4066 pci_write_config_word(pdev, 2*i, saved_config_space[i]);
4067 }
4068 wmb();
4069 pci_write_config_word(pdev, 4, saved_config_space[2]);
4070
4071 return 0;
4072}
4073
1da177e4
LT		 4074/*
4075 * This is it. Find all the controllers and register them. I really hate
4076 * stealing all these major device numbers.
4077 * returns the number of block devices registered.
4078 */
4079static int __devinit cciss_init_one(struct pci_dev *pdev,
7c832835 4080 const struct pci_device_id *ent)
1da177e4 4081{
1da177e4 4082 int i;
799202cb 4083 int j = 0;
1da177e4 4084 int rc;
22bece00 4085 int dac, return_code;
212a5026 4086 InquiryData_struct *inq_buff;
1da177e4 4087
82eb03cf
CC		 4088 if (reset_devices) {
4089 /* Reset the controller with a PCI power-cycle */
4090 if (cciss_hard_reset_controller(pdev) || cciss_reset_msi(pdev))
4091 return -ENODEV;
4092
5e18cfd0
JA		 4093 /* Now try to get the controller to respond to a no-op. Some
4094 devices (notably the HP Smart Array 5i Controller) need
4095 up to 30 seconds to respond. */
5e4c91c8 4096 for (i=0; i<30; i++) {
82eb03cf
CC		 4097 if (cciss_noop(pdev) == 0)
4098 break;
5e4c91c8
JA		 4099
4100 schedule_timeout_uninterruptible(HZ);
4101 }
4102 if (i == 30) {
4103 printk(KERN_ERR "cciss: controller seems dead\n");
4104 return -EBUSY;
82eb03cf
CC		 4105 }
4106 }
4107
1da177e4 4108 i = alloc_cciss_hba();
7c832835 4109 if (i < 0)
e2019b58 4110 return -1;
1f8ef380
MM		 4111
4112 hba[i]->busy_initializing = 1;
8a3173de
JA		 4113 INIT_HLIST_HEAD(&hba[i]->cmpQ);
4114 INIT_HLIST_HEAD(&hba[i]->reqQ);
b368c9dd 4115 mutex_init(&hba[i]->busy_shutting_down);
1f8ef380 4116
1da177e4 4117 if (cciss_pci_init(hba[i], pdev) != 0)
7fe06326 4118 goto clean0;
1da177e4
LT		 4119
4120 sprintf(hba[i]->devname, "cciss%d", i);
4121 hba[i]->ctlr = i;
4122 hba[i]->pdev = pdev;
4123
b368c9dd
AP		 4124 init_completion(&hba[i]->scan_wait);
4125
7fe06326
AP		 4126 if (cciss_create_hba_sysfs_entry(hba[i]))
4127 goto clean0;
4128
1da177e4 4129 /* configure PCI DMA stuff */
6a35528a 4130 if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64)))
40aabb58 4131 dac = 1;
284901a9 4132 else if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32)))
40aabb58 4133 dac = 0;
1da177e4 4134 else {
40aabb58 4135 printk(KERN_ERR "cciss: no suitable DMA available\n");
1da177e4
LT		 4136 goto clean1;
4137 }
4138
4139 /*
4140 * register with the major number, or get a dynamic major number
4141 * by passing 0 as argument. This is done for greater than
4142 * 8 controller support.
4143 */
4144 if (i < MAX_CTLR_ORIG)
564de74a 4145 hba[i]->major = COMPAQ_CISS_MAJOR + i;
1da177e4 4146 rc = register_blkdev(hba[i]->major, hba[i]->devname);
7c832835 4147 if (rc == -EBUSY || rc == -EINVAL) {
1da177e4 4148 printk(KERN_ERR
7c832835
BH		 4149 "cciss: Unable to get major number %d for %s "
4150 "on hba %d\n", hba[i]->major, hba[i]->devname, i);
1da177e4 4151 goto clean1;
7c832835 4152 } else {
1da177e4
LT		 4153 if (i >= MAX_CTLR_ORIG)
4154 hba[i]->major = rc;
4155 }
4156
4157 /* make sure the board interrupts are off */
4158 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_OFF);
7c832835 4159 if (request_irq(hba[i]->intr[SIMPLE_MODE_INT], do_cciss_intr,
69ab3912 4160 IRQF_DISABLED | IRQF_SHARED, hba[i]->devname, hba[i])) {
1da177e4 4161 printk(KERN_ERR "cciss: Unable to get irq %d for %s\n",
7c832835 4162 hba[i]->intr[SIMPLE_MODE_INT], hba[i]->devname);
1da177e4
LT		 4163 goto clean2;
4164 }
40aabb58
BH		 4165
4166 printk(KERN_INFO "%s: <0x%x> at PCI %s IRQ %d%s using DAC\n",
7c832835
BH		 4167 hba[i]->devname, pdev->device, pci_name(pdev),
4168 hba[i]->intr[SIMPLE_MODE_INT], dac ? "" : " not");
4169
4170 hba[i]->cmd_pool_bits =
061837bc
JL		 4171 kmalloc(DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4172 * sizeof(unsigned long), GFP_KERNEL);
7c832835
BH		 4173 hba[i]->cmd_pool = (CommandList_struct *)
4174 pci_alloc_consistent(hba[i]->pdev,
f880632f 4175 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4176 &(hba[i]->cmd_pool_dhandle));
4177 hba[i]->errinfo_pool = (ErrorInfo_struct *)
4178 pci_alloc_consistent(hba[i]->pdev,
f880632f 4179 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4180 &(hba[i]->errinfo_pool_dhandle));
4181 if ((hba[i]->cmd_pool_bits == NULL)
4182 || (hba[i]->cmd_pool == NULL)
4183 || (hba[i]->errinfo_pool == NULL)) {
4184 printk(KERN_ERR "cciss: out of memory");
1da177e4
LT		 4185 goto clean4;
4186 }
1da177e4 4187 spin_lock_init(&hba[i]->lock);
1da177e4 4188
7c832835
BH		 4189 /* Initialize the pdev driver private data.
4190 have it point to hba[i]. */
1da177e4 4191 pci_set_drvdata(pdev, hba[i]);
7c832835
BH		 4192 /* command and error info recs zeroed out before
4193 they are used */
4194 memset(hba[i]->cmd_pool_bits, 0,
061837bc
JL		 4195 DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4196 * sizeof(unsigned long));
1da177e4 4197
6ae5ce8e
MM		 4198 hba[i]->num_luns = 0;
4199 hba[i]->highest_lun = -1;
4200 for (j = 0; j < CISS_MAX_LUN; j++) {
4201 hba[i]->drv[j].raid_level = -1;
4202 hba[i]->drv[j].queue = NULL;
4203 hba[i]->gendisk[j] = NULL;
4204 }
1da177e4
LT		 4205
4206 cciss_scsi_setup(i);
4207
4208 /* Turn the interrupts on so we can service requests */
4209 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_ON);
4210
22bece00
MM		 4211 /* Get the firmware version */
4212 inq_buff = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
4213 if (inq_buff == NULL) {
4214 printk(KERN_ERR "cciss: out of memory\n");
4215 goto clean4;
4216 }
4217
4218 return_code = sendcmd_withirq(CISS_INQUIRY, i, inq_buff,
b57695fe 4219 sizeof(InquiryData_struct), 0, CTLR_LUNID, TYPE_CMD);
22bece00
MM		 4220 if (return_code == IO_OK) {
4221 hba[i]->firm_ver[0] = inq_buff->data_byte[32];
4222 hba[i]->firm_ver[1] = inq_buff->data_byte[33];
4223 hba[i]->firm_ver[2] = inq_buff->data_byte[34];
4224 hba[i]->firm_ver[3] = inq_buff->data_byte[35];
4225 } else { /* send command failed */
4226 printk(KERN_WARNING "cciss: unable to determine firmware"
4227 " version of controller\n");
4228 }
212a5026 4229 kfree(inq_buff);
22bece00 4230
1da177e4 4231 cciss_procinit(i);
92c4231a
MM		 4232
4233 hba[i]->cciss_max_sectors = 2048;
4234
6ae5ce8e 4235 rebuild_lun_table(hba[i], 1);
b368c9dd 4236 hba[i]->busy_initializing = 0;
e2019b58 4237 return 1;
1da177e4 4238
6ae5ce8e 4239clean4:
6044ec88 4240 kfree(hba[i]->cmd_pool_bits);
7c832835 4241 if (hba[i]->cmd_pool)
1da177e4 4242 pci_free_consistent(hba[i]->pdev,
f880632f 4243 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4244 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
4245 if (hba[i]->errinfo_pool)
1da177e4 4246 pci_free_consistent(hba[i]->pdev,
f880632f 4247 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4248 hba[i]->errinfo_pool,
4249 hba[i]->errinfo_pool_dhandle);
fb86a35b 4250 free_irq(hba[i]->intr[SIMPLE_MODE_INT], hba[i]);
6ae5ce8e 4251clean2:
1da177e4 4252 unregister_blkdev(hba[i]->major, hba[i]->devname);
6ae5ce8e 4253clean1:
7fe06326
AP		 4254 cciss_destroy_hba_sysfs_entry(hba[i]);
4255clean0:
1f8ef380 4256 hba[i]->busy_initializing = 0;
799202cb
MM		 4257 /* cleanup any queues that may have been initialized */
4258 for (j=0; j <= hba[i]->highest_lun; j++){
4259 drive_info_struct *drv = &(hba[i]->drv[j]);
4260 if (drv->queue)
4261 blk_cleanup_queue(drv->queue);
4262 }
872225ca
MM		 4263 /*
4264 * Deliberately omit pci_disable_device(): it does something nasty to
4265 * Smart Array controllers that pci_enable_device does not undo
4266 */
799202cb 4267 pci_release_regions(pdev);
799202cb 4268 pci_set_drvdata(pdev, NULL);
61808c2b 4269 free_hba(i);
e2019b58 4270 return -1;
1da177e4
LT		 4271}
4272
e9ca75b5 4273static void cciss_shutdown(struct pci_dev *pdev)
1da177e4
LT		 4274{
4275 ctlr_info_t *tmp_ptr;
e9ca75b5 4276 int i;
1da177e4 4277 char flush_buf[4];
7c832835 4278 int return_code;
1da177e4 4279
e9ca75b5
GB		 4280 tmp_ptr = pci_get_drvdata(pdev);
4281 if (tmp_ptr == NULL)
4282 return;
4283 i = tmp_ptr->ctlr;
4284 if (hba[i] == NULL)
4285 return;
4286
4287 /* Turn board interrupts off and send the flush cache command */
4288 /* sendcmd will turn off interrupt, and send the flush...
4289 * To write all data in the battery backed cache to disks */
4290 memset(flush_buf, 0, 4);
b57695fe 4291 return_code = sendcmd(CCISS_CACHE_FLUSH, i, flush_buf, 4, 0,
4292 CTLR_LUNID, TYPE_CMD);
e9ca75b5
GB		 4293 if (return_code == IO_OK) {
4294 printk(KERN_INFO "Completed flushing cache on controller %d\n", i);
4295 } else {
4296 printk(KERN_WARNING "Error flushing cache on controller %d\n", i);
4297 }
4298 free_irq(hba[i]->intr[2], hba[i]);
4299}
4300
4301static void __devexit cciss_remove_one(struct pci_dev *pdev)
4302{
4303 ctlr_info_t *tmp_ptr;
4304 int i, j;
4305
7c832835
BH		 4306 if (pci_get_drvdata(pdev) == NULL) {
4307 printk(KERN_ERR "cciss: Unable to remove device \n");
1da177e4
LT		 4308 return;
4309 }
0a9279cc 4310
1da177e4
LT		 4311 tmp_ptr = pci_get_drvdata(pdev);
4312 i = tmp_ptr->ctlr;
7c832835 4313 if (hba[i] == NULL) {
1da177e4 4314 printk(KERN_ERR "cciss: device appears to "
7c832835 4315 "already be removed \n");
1da177e4
LT		 4316 return;
4317 }
b6550777 4318
b368c9dd 4319 mutex_lock(&hba[i]->busy_shutting_down);
0a9279cc 4320
b368c9dd 4321 remove_from_scan_list(hba[i]);
b6550777
BH		 4322 remove_proc_entry(hba[i]->devname, proc_cciss);
4323 unregister_blkdev(hba[i]->major, hba[i]->devname);
4324
4325 /* remove it from the disk list */
4326 for (j = 0; j < CISS_MAX_LUN; j++) {
4327 struct gendisk *disk = hba[i]->gendisk[j];
4328 if (disk) {
165125e1 4329 struct request_queue *q = disk->queue;
b6550777 4330
097d0264
SC		 4331 if (disk->flags & GENHD_FL_UP) {
4332 cciss_destroy_ld_sysfs_entry(hba[i], j);
b6550777 4333 del_gendisk(disk);
097d0264 4334 }
b6550777
BH		 4335 if (q)
4336 blk_cleanup_queue(q);
4337 }
4338 }
4339
ba198efb 4340#ifdef CONFIG_CISS_SCSI_TAPE
b6550777 4341 cciss_unregister_scsi(i); /* unhook from SCSI subsystem */
ba198efb 4342#endif
b6550777 4343
e9ca75b5 4344 cciss_shutdown(pdev);
fb86a35b
MM		 4345
4346#ifdef CONFIG_PCI_MSI
7c832835
BH		 4347 if (hba[i]->msix_vector)
4348 pci_disable_msix(hba[i]->pdev);
4349 else if (hba[i]->msi_vector)
4350 pci_disable_msi(hba[i]->pdev);
4351#endif /* CONFIG_PCI_MSI */
fb86a35b 4352
1da177e4 4353 iounmap(hba[i]->vaddr);
1da177e4 4354
f880632f 4355 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(CommandList_struct),
1da177e4 4356 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
f880632f 4357 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835 4358 hba[i]->errinfo_pool, hba[i]->errinfo_pool_dhandle);
1da177e4 4359 kfree(hba[i]->cmd_pool_bits);
872225ca
MM		 4360 /*
4361 * Deliberately omit pci_disable_device(): it does something nasty to
4362 * Smart Array controllers that pci_enable_device does not undo
4363 */
7c832835 4364 pci_release_regions(pdev);
4e570309 4365 pci_set_drvdata(pdev, NULL);
7fe06326 4366 cciss_destroy_hba_sysfs_entry(hba[i]);
b368c9dd 4367 mutex_unlock(&hba[i]->busy_shutting_down);
1da177e4 4368 free_hba(i);
7c832835 4369}
1da177e4
LT		 4370
4371static struct pci_driver cciss_pci_driver = {
7c832835
BH		 4372 .name = "cciss",
4373 .probe = cciss_init_one,
4374 .remove = __devexit_p(cciss_remove_one),
4375 .id_table = cciss_pci_device_id, /* id_table */
e9ca75b5 4376 .shutdown = cciss_shutdown,
1da177e4
LT		 4377};
4378
4379/*
4380 * This is it. Register the PCI driver information for the cards we control
7c832835 4381 * the OS will call our registered routines when it finds one of our cards.
1da177e4
LT		 4382 */
4383static int __init cciss_init(void)
4384{
7fe06326
AP		 4385 int err;
4386
10cbda97
JA		 4387 /*
4388 * The hardware requires that commands are aligned on a 64-bit
4389 * boundary. Given that we use pci_alloc_consistent() to allocate an
4390 * array of them, the size must be a multiple of 8 bytes.
4391 */
4392 BUILD_BUG_ON(sizeof(CommandList_struct) % 8);
4393
1da177e4
LT		 4394 printk(KERN_INFO DRIVER_NAME "\n");
4395
7fe06326
AP		 4396 err = bus_register(&cciss_bus_type);
4397 if (err)
4398 return err;
4399
b368c9dd
AP		 4400 /* Start the scan thread */
4401 cciss_scan_thread = kthread_run(scan_thread, NULL, "cciss_scan");
4402 if (IS_ERR(cciss_scan_thread)) {
4403 err = PTR_ERR(cciss_scan_thread);
4404 goto err_bus_unregister;
4405 }
4406
1da177e4 4407 /* Register for our PCI devices */
7fe06326
AP		 4408 err = pci_register_driver(&cciss_pci_driver);
4409 if (err)
b368c9dd 4410 goto err_thread_stop;
7fe06326 4411
617e1344 4412 return err;
7fe06326 4413
b368c9dd
AP		 4414err_thread_stop:
4415 kthread_stop(cciss_scan_thread);
4416err_bus_unregister:
7fe06326 4417 bus_unregister(&cciss_bus_type);
b368c9dd 4418
7fe06326 4419 return err;
1da177e4
LT		 4420}
4421
4422static void __exit cciss_cleanup(void)
4423{
4424 int i;
4425
4426 pci_unregister_driver(&cciss_pci_driver);
4427 /* double check that all controller entrys have been removed */
7c832835
BH		 4428 for (i = 0; i < MAX_CTLR; i++) {
4429 if (hba[i] != NULL) {
1da177e4 4430 printk(KERN_WARNING "cciss: had to remove"
7c832835 4431 " controller %d\n", i);
1da177e4
LT		 4432 cciss_remove_one(hba[i]->pdev);
4433 }
4434 }
b368c9dd 4435 kthread_stop(cciss_scan_thread);
928b4d8c 4436 remove_proc_entry("driver/cciss", NULL);
7fe06326 4437 bus_unregister(&cciss_bus_type);
1da177e4
LT		 4438}
4439
33079b21
MM		 4440static void fail_all_cmds(unsigned long ctlr)
4441{
4442 /* If we get here, the board is apparently dead. */
4443 ctlr_info_t *h = hba[ctlr];
4444 CommandList_struct *c;
4445 unsigned long flags;
4446
4447 printk(KERN_WARNING "cciss%d: controller not responding.\n", h->ctlr);
7c832835 4448 h->alive = 0; /* the controller apparently died... */
33079b21
MM		 4449
4450 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
4451
7c832835 4452 pci_disable_device(h->pdev); /* Make sure it is really dead. */
33079b21
MM		 4453
4454 /* move everything off the request queue onto the completed queue */
8a3173de
JA		 4455 while (!hlist_empty(&h->reqQ)) {
4456 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
4457 removeQ(c);
33079b21 4458 h->Qdepth--;
8a3173de 4459 addQ(&h->cmpQ, c);
33079b21
MM		 4460 }
4461
4462 /* Now, fail everything on the completed queue with a HW error */
8a3173de
JA		 4463 while (!hlist_empty(&h->cmpQ)) {
4464 c = hlist_entry(h->cmpQ.first, CommandList_struct, list);
4465 removeQ(c);
b59e64d0
HR		 4466 if (c->cmd_type != CMD_MSG_STALE)
4467 c->err_info->CommandStatus = CMD_HARDWARE_ERR;
33079b21
MM		 4468 if (c->cmd_type == CMD_RWREQ) {
4469 complete_command(h, c, 0);
4470 } else if (c->cmd_type == CMD_IOCTL_PEND)
4471 complete(c->waiting);
4472#ifdef CONFIG_CISS_SCSI_TAPE
7c832835
BH		 4473 else if (c->cmd_type == CMD_SCSI)
4474 complete_scsi_command(c, 0, 0);
33079b21
MM		 4475#endif
4476 }
4477 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
4478 return;
4479}
4480
1da177e4
LT		 4481module_init(cciss_init);
4482module_exit(cciss_cleanup);
Linux kernel - Deliverables
This page took 0.861223 seconds and 5 git commands to generate.