projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cciss: Handle failure of blk_init_queue gracefully in cciss_add_disk.
[deliverable/linux.git] / drivers / block / cciss.c
CommitLineData
1da177e4 1/*
bd4f36d6
MM		 2 * Disk Array driver for HP Smart Array controllers.
3 * (C) Copyright 2000, 2007 Hewlett-Packard Development Company, L.P.
1da177e4
LT		 4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
bd4f36d6 7 * the Free Software Foundation; version 2 of the License.
1da177e4
LT		 8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
bd4f36d6
MM		 11 * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * General Public License for more details.
1da177e4
LT		 13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
bd4f36d6
MM		 16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
17 * 02111-1307, USA.
1da177e4
LT		 18 *
19 * Questions/Comments/Bugfixes to iss_storagedev@hp.com
20 *
21 */
22
1da177e4
LT		 23#include <linux/module.h>
24#include <linux/interrupt.h>
25#include <linux/types.h>
26#include <linux/pci.h>
27#include <linux/kernel.h>
28#include <linux/slab.h>
405f5571 29#include <linux/smp_lock.h>
1da177e4
LT		 30#include <linux/delay.h>
31#include <linux/major.h>
32#include <linux/fs.h>
33#include <linux/bio.h>
34#include <linux/blkpg.h>
35#include <linux/timer.h>
36#include <linux/proc_fs.h>
89b6e743 37#include <linux/seq_file.h>
7c832835 38#include <linux/init.h>
4d761609 39#include <linux/jiffies.h>
1da177e4
LT		 40#include <linux/hdreg.h>
41#include <linux/spinlock.h>
42#include <linux/compat.h>
b368c9dd 43#include <linux/mutex.h>
1da177e4
LT		 44#include <asm/uaccess.h>
45#include <asm/io.h>
46
eb0df996 47#include <linux/dma-mapping.h>
1da177e4
LT		 48#include <linux/blkdev.h>
49#include <linux/genhd.h>
50#include <linux/completion.h>
d5d3b736 51#include <scsi/scsi.h>
03bbfee5
MMOD		 52#include <scsi/sg.h>
53#include <scsi/scsi_ioctl.h>
54#include <linux/cdrom.h>
231bc2a2 55#include <linux/scatterlist.h>
0a9279cc 56#include <linux/kthread.h>
1da177e4
LT		 57
58#define CCISS_DRIVER_VERSION(maj,min,submin) ((maj<<16)|(min<<8)|(submin))
24aac480
MM		 59#define DRIVER_NAME "HP CISS Driver (v 3.6.20)"
60#define DRIVER_VERSION CCISS_DRIVER_VERSION(3, 6, 20)
1da177e4
LT		 61
62/* Embedded module documentation macros - see modules.h */
63MODULE_AUTHOR("Hewlett-Packard Company");
24aac480 64MODULE_DESCRIPTION("Driver for HP Smart Array Controllers");
1da177e4 65MODULE_SUPPORTED_DEVICE("HP SA5i SA5i+ SA532 SA5300 SA5312 SA641 SA642 SA6400"
24aac480
MM		 66 " SA6i P600 P800 P400 P400i E200 E200i E500 P700m"
67 " Smart Array G2 Series SAS/SATA Controllers");
68MODULE_VERSION("3.6.20");
1da177e4
LT		 69MODULE_LICENSE("GPL");
70
71#include "cciss_cmd.h"
72#include "cciss.h"
73#include <linux/cciss_ioctl.h>
74
75/* define the PCI info for the cards we can control */
76static const struct pci_device_id cciss_pci_device_id[] = {
f82ccdb9
BH		 77 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISS, 0x0E11, 0x4070},
78 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4080},
79 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4082},
80 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4083},
81 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x4091},
82 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409A},
83 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409B},
84 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409C},
85 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409D},
86 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSA, 0x103C, 0x3225},
87 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3223},
88 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3234},
89 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3235},
90 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3211},
91 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3212},
92 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3213},
93 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3214},
94 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3215},
de923916 95 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3237},
9cff3b38 96 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x323D},
24aac480
MM		 97 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3241},
98 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3243},
99 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3245},
100 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3247},
101 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3249},
77ca7286
MM		 102 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324A},
103 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324B},
4ff9a9a4
MM		 104 {PCI_VENDOR_ID_HP, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
105 PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
1da177e4
LT		 106 {0,}
107};
7c832835 108
1da177e4
LT		 109MODULE_DEVICE_TABLE(pci, cciss_pci_device_id);
110
1da177e4
LT		 111/* board_id = Subsystem Device ID & Vendor ID
112 * product = Marketing Name for the board
7c832835 113 * access = Address of the struct of function pointers
1da177e4
LT		 114 */
115static struct board_type products[] = {
49153998
MM		 116 {0x40700E11, "Smart Array 5300", &SA5_access},
117 {0x40800E11, "Smart Array 5i", &SA5B_access},
118 {0x40820E11, "Smart Array 532", &SA5B_access},
119 {0x40830E11, "Smart Array 5312", &SA5B_access},
120 {0x409A0E11, "Smart Array 641", &SA5_access},
121 {0x409B0E11, "Smart Array 642", &SA5_access},
122 {0x409C0E11, "Smart Array 6400", &SA5_access},
123 {0x409D0E11, "Smart Array 6400 EM", &SA5_access},
124 {0x40910E11, "Smart Array 6i", &SA5_access},
125 {0x3225103C, "Smart Array P600", &SA5_access},
126 {0x3223103C, "Smart Array P800", &SA5_access},
127 {0x3234103C, "Smart Array P400", &SA5_access},
128 {0x3235103C, "Smart Array P400i", &SA5_access},
129 {0x3211103C, "Smart Array E200i", &SA5_access},
130 {0x3212103C, "Smart Array E200", &SA5_access},
131 {0x3213103C, "Smart Array E200i", &SA5_access},
132 {0x3214103C, "Smart Array E200i", &SA5_access},
133 {0x3215103C, "Smart Array E200i", &SA5_access},
134 {0x3237103C, "Smart Array E500", &SA5_access},
135 {0x323D103C, "Smart Array P700m", &SA5_access},
136 {0x3241103C, "Smart Array P212", &SA5_access},
137 {0x3243103C, "Smart Array P410", &SA5_access},
138 {0x3245103C, "Smart Array P410i", &SA5_access},
139 {0x3247103C, "Smart Array P411", &SA5_access},
140 {0x3249103C, "Smart Array P812", &SA5_access},
77ca7286
MM		 141 {0x324A103C, "Smart Array P712m", &SA5_access},
142 {0x324B103C, "Smart Array P711m", &SA5_access},
49153998 143 {0xFFFF103C, "Unknown Smart Array", &SA5_access},
1da177e4
LT		 144};
145
d14c4ab5 146/* How long to wait (in milliseconds) for board to go into simple mode */
7c832835 147#define MAX_CONFIG_WAIT 30000
1da177e4
LT		 148#define MAX_IOCTL_CONFIG_WAIT 1000
149
150/*define how many times we will try a command because of bus resets */
151#define MAX_CMD_RETRIES 3
152
1da177e4
LT		 153#define MAX_CTLR 32
154
155/* Originally cciss driver only supports 8 major numbers */
156#define MAX_CTLR_ORIG 8
157
1da177e4
LT		 158static ctlr_info_t *hba[MAX_CTLR];
159
b368c9dd
AP		 160static struct task_struct *cciss_scan_thread;
161static DEFINE_MUTEX(scan_mutex);
162static LIST_HEAD(scan_q);
163
165125e1 164static void do_cciss_request(struct request_queue *q);
7d12e780 165static irqreturn_t do_cciss_intr(int irq, void *dev_id);
ef7822c2
AV		 166static int cciss_open(struct block_device *bdev, fmode_t mode);
167static int cciss_release(struct gendisk *disk, fmode_t mode);
168static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 169 unsigned int cmd, unsigned long arg);
a885c8c4 170static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo);
1da177e4 171
1da177e4 172static int cciss_revalidate(struct gendisk *disk);
6ae5ce8e 173static int rebuild_lun_table(ctlr_info_t *h, int first_time);
a0ea8622 174static int deregister_disk(ctlr_info_t *h, int drv_index,
7c832835 175 int clear_all);
1da177e4 176
00988a35
MMOD		 177static void cciss_read_capacity(int ctlr, int logvol, int withirq,
178 sector_t *total_size, unsigned int *block_size);
179static void cciss_read_capacity_16(int ctlr, int logvol, int withirq,
180 sector_t *total_size, unsigned int *block_size);
181static void cciss_geometry_inquiry(int ctlr, int logvol,
182 int withirq, sector_t total_size,
183 unsigned int block_size, InquiryData_struct *inq_buff,
7c832835 184 drive_info_struct *drv);
7c832835
BH		 185static void __devinit cciss_interrupt_mode(ctlr_info_t *, struct pci_dev *,
186 __u32);
187static void start_io(ctlr_info_t *h);
188static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
7c832835
BH		 189 __u8 page_code, unsigned char *scsi3addr, int cmd_type);
190static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
b57695fe 191 __u8 page_code, unsigned char scsi3addr[],
192 int cmd_type);
85cc61ae 193static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
194 int attempt_retry);
195static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c);
1da177e4 196
33079b21 197static void fail_all_cmds(unsigned long ctlr);
d6f4965d 198static int add_to_scan_list(struct ctlr_info *h);
0a9279cc
MM		 199static int scan_thread(void *data);
200static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c);
617e1344
SC		 201static void cciss_hba_release(struct device *dev);
202static void cciss_device_release(struct device *dev);
33079b21 203
1da177e4 204#ifdef CONFIG_PROC_FS
1da177e4
LT		 205static void cciss_procinit(int i);
206#else
7c832835
BH		 207static void cciss_procinit(int i)
208{
209}
210#endif /* CONFIG_PROC_FS */
1da177e4
LT		 211
212#ifdef CONFIG_COMPAT
ef7822c2
AV		 213static int cciss_compat_ioctl(struct block_device *, fmode_t,
214 unsigned, unsigned long);
1da177e4
LT		 215#endif
216
83d5cde4 217static const struct block_device_operations cciss_fops = {
7c832835 218 .owner = THIS_MODULE,
ef7822c2
AV		 219 .open = cciss_open,
220 .release = cciss_release,
221 .locked_ioctl = cciss_ioctl,
7c832835 222 .getgeo = cciss_getgeo,
1da177e4 223#ifdef CONFIG_COMPAT
ef7822c2 224 .compat_ioctl = cciss_compat_ioctl,
1da177e4 225#endif
7c832835 226 .revalidate_disk = cciss_revalidate,
1da177e4
LT		 227};
228
229/*
230 * Enqueuing and dequeuing functions for cmdlists.
231 */
8a3173de 232static inline void addQ(struct hlist_head *list, CommandList_struct *c)
1da177e4 233{
8a3173de 234 hlist_add_head(&c->list, list);
1da177e4
LT		 235}
236
8a3173de 237static inline void removeQ(CommandList_struct *c)
1da177e4 238{
b59e64d0
HR		 239 /*
240 * After kexec/dump some commands might still
241 * be in flight, which the firmware will try
242 * to complete. Resetting the firmware doesn't work
243 * with old fw revisions, so we have to mark
244 * them off as 'stale' to prevent the driver from
245 * falling over.
246 */
247 if (WARN_ON(hlist_unhashed(&c->list))) {
248 c->cmd_type = CMD_MSG_STALE;
8a3173de 249 return;
b59e64d0 250 }
8a3173de
JA		 251
252 hlist_del_init(&c->list);
1da177e4
LT		 253}
254
255#include "cciss_scsi.c" /* For SCSI tape support */
256
0f5486ec
RD		 257#define RAID_UNKNOWN 6
258
1da177e4
LT		 259#ifdef CONFIG_PROC_FS
260
261/*
262 * Report information about this controller.
263 */
264#define ENG_GIG 1000000000
265#define ENG_GIG_FACTOR (ENG_GIG/512)
89b6e743 266#define ENGAGE_SCSI "engage scsi"
7c832835
BH		 267static const char *raid_label[] = { "0", "4", "1(1+0)", "5", "5+1", "ADG",
268 "UNKNOWN"
269};
1da177e4
LT		 270
271static struct proc_dir_entry *proc_cciss;
272
89b6e743 273static void cciss_seq_show_header(struct seq_file *seq)
1da177e4 274{
89b6e743
MM		 275 ctlr_info_t *h = seq->private;
276
277 seq_printf(seq, "%s: HP %s Controller\n"
278 "Board ID: 0x%08lx\n"
279 "Firmware Version: %c%c%c%c\n"
280 "IRQ: %d\n"
281 "Logical drives: %d\n"
282 "Current Q depth: %d\n"
283 "Current # commands on controller: %d\n"
284 "Max Q depth since init: %d\n"
285 "Max # commands on controller since init: %d\n"
286 "Max SG entries since init: %d\n",
287 h->devname,
288 h->product_name,
289 (unsigned long)h->board_id,
290 h->firm_ver[0], h->firm_ver[1], h->firm_ver[2],
291 h->firm_ver[3], (unsigned int)h->intr[SIMPLE_MODE_INT],
292 h->num_luns,
293 h->Qdepth, h->commands_outstanding,
294 h->maxQsinceinit, h->max_outstanding, h->maxSG);
295
296#ifdef CONFIG_CISS_SCSI_TAPE
297 cciss_seq_tape_report(seq, h->ctlr);
298#endif /* CONFIG_CISS_SCSI_TAPE */
299}
1da177e4 300
89b6e743
MM		 301static void *cciss_seq_start(struct seq_file *seq, loff_t *pos)
302{
303 ctlr_info_t *h = seq->private;
304 unsigned ctlr = h->ctlr;
305 unsigned long flags;
1da177e4
LT		 306
307 /* prevent displaying bogus info during configuration
308 * or deconfiguration of a logical volume
309 */
310 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
311 if (h->busy_configuring) {
312 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
89b6e743 313 return ERR_PTR(-EBUSY);
1da177e4
LT		 314 }
315 h->busy_configuring = 1;
316 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
317
89b6e743
MM		 318 if (*pos == 0)
319 cciss_seq_show_header(seq);
320
321 return pos;
322}
323
324static int cciss_seq_show(struct seq_file *seq, void *v)
325{
326 sector_t vol_sz, vol_sz_frac;
327 ctlr_info_t *h = seq->private;
328 unsigned ctlr = h->ctlr;
329 loff_t *pos = v;
330 drive_info_struct *drv = &h->drv[*pos];
331
332 if (*pos > h->highest_lun)
333 return 0;
334
335 if (drv->heads == 0)
336 return 0;
337
338 vol_sz = drv->nr_blocks;
339 vol_sz_frac = sector_div(vol_sz, ENG_GIG_FACTOR);
340 vol_sz_frac *= 100;
341 sector_div(vol_sz_frac, ENG_GIG_FACTOR);
342
343 if (drv->raid_level > 5)
344 drv->raid_level = RAID_UNKNOWN;
345 seq_printf(seq, "cciss/c%dd%d:"
346 "\t%4u.%02uGB\tRAID %s\n",
347 ctlr, (int) *pos, (int)vol_sz, (int)vol_sz_frac,
348 raid_label[drv->raid_level]);
349 return 0;
350}
351
352static void *cciss_seq_next(struct seq_file *seq, void *v, loff_t *pos)
353{
354 ctlr_info_t *h = seq->private;
355
356 if (*pos > h->highest_lun)
357 return NULL;
358 *pos += 1;
359
360 return pos;
361}
362
363static void cciss_seq_stop(struct seq_file *seq, void *v)
364{
365 ctlr_info_t *h = seq->private;
366
367 /* Only reset h->busy_configuring if we succeeded in setting
368 * it during cciss_seq_start. */
369 if (v == ERR_PTR(-EBUSY))
370 return;
7c832835 371
1da177e4 372 h->busy_configuring = 0;
1da177e4
LT		 373}
374
88e9d34c 375static const struct seq_operations cciss_seq_ops = {
89b6e743
MM		 376 .start = cciss_seq_start,
377 .show = cciss_seq_show,
378 .next = cciss_seq_next,
379 .stop = cciss_seq_stop,
380};
381
382static int cciss_seq_open(struct inode *inode, struct file *file)
383{
384 int ret = seq_open(file, &cciss_seq_ops);
385 struct seq_file *seq = file->private_data;
386
387 if (!ret)
388 seq->private = PDE(inode)->data;
389
390 return ret;
391}
392
393static ssize_t
394cciss_proc_write(struct file *file, const char __user *buf,
395 size_t length, loff_t *ppos)
1da177e4 396{
89b6e743
MM		 397 int err;
398 char *buffer;
399
400#ifndef CONFIG_CISS_SCSI_TAPE
401 return -EINVAL;
1da177e4
LT		 402#endif
403
89b6e743 404 if (!buf || length > PAGE_SIZE - 1)
7c832835 405 return -EINVAL;
89b6e743
MM		 406
407 buffer = (char *)__get_free_page(GFP_KERNEL);
408 if (!buffer)
409 return -ENOMEM;
410
411 err = -EFAULT;
412 if (copy_from_user(buffer, buf, length))
413 goto out;
414 buffer[length] = '\0';
415
416#ifdef CONFIG_CISS_SCSI_TAPE
417 if (strncmp(ENGAGE_SCSI, buffer, sizeof ENGAGE_SCSI - 1) == 0) {
418 struct seq_file *seq = file->private_data;
419 ctlr_info_t *h = seq->private;
420 int rc;
421
7c832835
BH		 422 rc = cciss_engage_scsi(h->ctlr);
423 if (rc != 0)
89b6e743
MM		 424 err = -rc;
425 else
426 err = length;
427 } else
428#endif /* CONFIG_CISS_SCSI_TAPE */
429 err = -EINVAL;
7c832835
BH		 430 /* might be nice to have "disengage" too, but it's not
431 safely possible. (only 1 module use count, lock issues.) */
89b6e743
MM		 432
433out:
434 free_page((unsigned long)buffer);
435 return err;
1da177e4
LT		 436}
437
89b6e743
MM		 438static struct file_operations cciss_proc_fops = {
439 .owner = THIS_MODULE,
440 .open = cciss_seq_open,
441 .read = seq_read,
442 .llseek = seq_lseek,
443 .release = seq_release,
444 .write = cciss_proc_write,
445};
446
1da177e4
LT		 447static void __devinit cciss_procinit(int i)
448{
449 struct proc_dir_entry *pde;
450
89b6e743 451 if (proc_cciss == NULL)
928b4d8c 452 proc_cciss = proc_mkdir("driver/cciss", NULL);
89b6e743
MM		 453 if (!proc_cciss)
454 return;
3dfcf9c4 455 pde = proc_create_data(hba[i]->devname, S_IWUSR | S_IRUSR | S_IRGRP |
89b6e743 456 S_IROTH, proc_cciss,
3dfcf9c4 457 &cciss_proc_fops, hba[i]);
1da177e4 458}
7c832835 459#endif /* CONFIG_PROC_FS */
1da177e4 460
7fe06326
AP		 461#define MAX_PRODUCT_NAME_LEN 19
462
463#define to_hba(n) container_of(n, struct ctlr_info, dev)
7fe06326 464
d6f4965d
AP		 465static ssize_t host_store_rescan(struct device *dev,
466 struct device_attribute *attr,
467 const char *buf, size_t count)
468{
469 struct ctlr_info *h = to_hba(dev);
470
471 add_to_scan_list(h);
472 wake_up_process(cciss_scan_thread);
473 wait_for_completion_interruptible(&h->scan_wait);
474
475 return count;
476}
477DEVICE_ATTR(rescan, S_IWUSR, NULL, host_store_rescan);
7fe06326
AP		 478
479static ssize_t dev_show_unique_id(struct device *dev,
480 struct device_attribute *attr,
481 char *buf)
482{
617e1344
SC		 483 drive_info_struct *drv = dev_get_drvdata(dev);
484 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 485 __u8 sn[16];
486 unsigned long flags;
487 int ret = 0;
488
489 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
490 if (h->busy_configuring)
491 ret = -EBUSY;
492 else
493 memcpy(sn, drv->serial_no, sizeof(sn));
494 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
495
496 if (ret)
497 return ret;
498 else
499 return snprintf(buf, 16 * 2 + 2,
500 "%02X%02X%02X%02X%02X%02X%02X%02X"
501 "%02X%02X%02X%02X%02X%02X%02X%02X\n",
502 sn[0], sn[1], sn[2], sn[3],
503 sn[4], sn[5], sn[6], sn[7],
504 sn[8], sn[9], sn[10], sn[11],
505 sn[12], sn[13], sn[14], sn[15]);
506}
507DEVICE_ATTR(unique_id, S_IRUGO, dev_show_unique_id, NULL);
508
509static ssize_t dev_show_vendor(struct device *dev,
510 struct device_attribute *attr,
511 char *buf)
512{
617e1344
SC		 513 drive_info_struct *drv = dev_get_drvdata(dev);
514 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 515 char vendor[VENDOR_LEN + 1];
516 unsigned long flags;
517 int ret = 0;
518
519 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
520 if (h->busy_configuring)
521 ret = -EBUSY;
522 else
523 memcpy(vendor, drv->vendor, VENDOR_LEN + 1);
524 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
525
526 if (ret)
527 return ret;
528 else
529 return snprintf(buf, sizeof(vendor) + 1, "%s\n", drv->vendor);
530}
531DEVICE_ATTR(vendor, S_IRUGO, dev_show_vendor, NULL);
532
533static ssize_t dev_show_model(struct device *dev,
534 struct device_attribute *attr,
535 char *buf)
536{
617e1344
SC		 537 drive_info_struct *drv = dev_get_drvdata(dev);
538 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 539 char model[MODEL_LEN + 1];
540 unsigned long flags;
541 int ret = 0;
542
543 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
544 if (h->busy_configuring)
545 ret = -EBUSY;
546 else
547 memcpy(model, drv->model, MODEL_LEN + 1);
548 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
549
550 if (ret)
551 return ret;
552 else
553 return snprintf(buf, sizeof(model) + 1, "%s\n", drv->model);
554}
555DEVICE_ATTR(model, S_IRUGO, dev_show_model, NULL);
556
557static ssize_t dev_show_rev(struct device *dev,
558 struct device_attribute *attr,
559 char *buf)
560{
617e1344
SC		 561 drive_info_struct *drv = dev_get_drvdata(dev);
562 struct ctlr_info *h = to_hba(drv->dev->parent);
7fe06326
AP		 563 char rev[REV_LEN + 1];
564 unsigned long flags;
565 int ret = 0;
566
567 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
568 if (h->busy_configuring)
569 ret = -EBUSY;
570 else
571 memcpy(rev, drv->rev, REV_LEN + 1);
572 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
573
574 if (ret)
575 return ret;
576 else
577 return snprintf(buf, sizeof(rev) + 1, "%s\n", drv->rev);
578}
579DEVICE_ATTR(rev, S_IRUGO, dev_show_rev, NULL);
580
d6f4965d
AP		 581static struct attribute *cciss_host_attrs[] = {
582 &dev_attr_rescan.attr,
583 NULL
584};
585
586static struct attribute_group cciss_host_attr_group = {
587 .attrs = cciss_host_attrs,
588};
589
590static struct attribute_group *cciss_host_attr_groups[] = {
591 &cciss_host_attr_group,
592 NULL
593};
594
595static struct device_type cciss_host_type = {
596 .name = "cciss_host",
597 .groups = cciss_host_attr_groups,
617e1344 598 .release = cciss_hba_release,
d6f4965d
AP		 599};
600
7fe06326
AP		 601static struct attribute *cciss_dev_attrs[] = {
602 &dev_attr_unique_id.attr,
603 &dev_attr_model.attr,
604 &dev_attr_vendor.attr,
605 &dev_attr_rev.attr,
606 NULL
607};
608
609static struct attribute_group cciss_dev_attr_group = {
610 .attrs = cciss_dev_attrs,
611};
612
a4dbd674 613static const struct attribute_group *cciss_dev_attr_groups[] = {
7fe06326
AP		 614 &cciss_dev_attr_group,
615 NULL
616};
617
618static struct device_type cciss_dev_type = {
619 .name = "cciss_device",
620 .groups = cciss_dev_attr_groups,
617e1344 621 .release = cciss_device_release,
7fe06326
AP		 622};
623
624static struct bus_type cciss_bus_type = {
625 .name = "cciss",
626};
627
617e1344
SC		 628/*
629 * cciss_hba_release is called when the reference count
630 * of h->dev goes to zero.
631 */
632static void cciss_hba_release(struct device *dev)
633{
634 /*
635 * nothing to do, but need this to avoid a warning
636 * about not having a release handler from lib/kref.c.
637 */
638}
7fe06326
AP		 639
640/*
641 * Initialize sysfs entry for each controller. This sets up and registers
642 * the 'cciss#' directory for each individual controller under
643 * /sys/bus/pci/devices/<dev>/.
644 */
645static int cciss_create_hba_sysfs_entry(struct ctlr_info *h)
646{
647 device_initialize(&h->dev);
648 h->dev.type = &cciss_host_type;
649 h->dev.bus = &cciss_bus_type;
650 dev_set_name(&h->dev, "%s", h->devname);
651 h->dev.parent = &h->pdev->dev;
652
653 return device_add(&h->dev);
654}
655
656/*
657 * Remove sysfs entries for an hba.
658 */
659static void cciss_destroy_hba_sysfs_entry(struct ctlr_info *h)
660{
661 device_del(&h->dev);
617e1344
SC		 662 put_device(&h->dev); /* final put. */
663}
664
665/* cciss_device_release is called when the reference count
666 * of h->drv[x].dev goes to zero.
667 */
668static void cciss_device_release(struct device *dev)
669{
670 kfree(dev);
7fe06326
AP		 671}
672
673/*
674 * Initialize sysfs for each logical drive. This sets up and registers
675 * the 'c#d#' directory for each individual logical drive under
676 * /sys/bus/pci/devices/<dev/ccis#/. We also create a link from
677 * /sys/block/cciss!c#d# to this entry.
678 */
617e1344 679static long cciss_create_ld_sysfs_entry(struct ctlr_info *h,
7fe06326
AP		 680 int drv_index)
681{
617e1344
SC		 682 struct device *dev;
683
684 dev = kzalloc(sizeof(*dev), GFP_KERNEL);
685 if (!dev)
686 return -ENOMEM;
687 device_initialize(dev);
688 dev->type = &cciss_dev_type;
689 dev->bus = &cciss_bus_type;
690 dev_set_name(dev, "c%dd%d", h->ctlr, drv_index);
691 dev->parent = &h->dev;
692 h->drv[drv_index].dev = dev;
693 dev_set_drvdata(dev, &h->drv[drv_index]);
694 return device_add(dev);
7fe06326
AP		 695}
696
697/*
698 * Remove sysfs entries for a logical drive.
699 */
617e1344 700static void cciss_destroy_ld_sysfs_entry(struct ctlr_info *h, int drv_index)
7fe06326 701{
617e1344
SC		 702 struct device *dev = h->drv[drv_index].dev;
703 device_del(dev);
704 put_device(dev); /* the "final" put. */
705 h->drv[drv_index].dev = NULL;
7fe06326
AP		 706}
707
7c832835
BH		 708/*
709 * For operations that cannot sleep, a command block is allocated at init,
1da177e4 710 * and managed by cmd_alloc() and cmd_free() using a simple bitmap to track
7c832835
BH		 711 * which ones are free or in use. For operations that can wait for kmalloc
712 * to possible sleep, this routine can be called with get_from_pool set to 0.
713 * cmd_free() MUST be called with a got_from_pool set to 0 if cmd_alloc was.
714 */
715static CommandList_struct *cmd_alloc(ctlr_info_t *h, int get_from_pool)
1da177e4
LT		 716{
717 CommandList_struct *c;
7c832835 718 int i;
1da177e4
LT		 719 u64bit temp64;
720 dma_addr_t cmd_dma_handle, err_dma_handle;
721
7c832835
BH		 722 if (!get_from_pool) {
723 c = (CommandList_struct *) pci_alloc_consistent(h->pdev,
724 sizeof(CommandList_struct), &cmd_dma_handle);
725 if (c == NULL)
726 return NULL;
1da177e4
LT		 727 memset(c, 0, sizeof(CommandList_struct));
728
33079b21
MM		 729 c->cmdindex = -1;
730
7c832835
BH		 731 c->err_info = (ErrorInfo_struct *)
732 pci_alloc_consistent(h->pdev, sizeof(ErrorInfo_struct),
733 &err_dma_handle);
734
735 if (c->err_info == NULL) {
736 pci_free_consistent(h->pdev,
1da177e4
LT		 737 sizeof(CommandList_struct), c, cmd_dma_handle);
738 return NULL;
739 }
740 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 741 } else { /* get it out of the controllers pool */
742
743 do {
f880632f
MM		 744 i = find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds);
745 if (i == h->nr_cmds)
7c832835
BH		 746 return NULL;
747 } while (test_and_set_bit
748 (i & (BITS_PER_LONG - 1),
749 h->cmd_pool_bits + (i / BITS_PER_LONG)) != 0);
1da177e4
LT		 750#ifdef CCISS_DEBUG
751 printk(KERN_DEBUG "cciss: using command buffer %d\n", i);
752#endif
7c832835 753 c = h->cmd_pool + i;
1da177e4 754 memset(c, 0, sizeof(CommandList_struct));
7c832835
BH		 755 cmd_dma_handle = h->cmd_pool_dhandle
756 + i * sizeof(CommandList_struct);
1da177e4
LT		 757 c->err_info = h->errinfo_pool + i;
758 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 759 err_dma_handle = h->errinfo_pool_dhandle
760 + i * sizeof(ErrorInfo_struct);
761 h->nr_allocs++;
33079b21
MM		 762
763 c->cmdindex = i;
7c832835 764 }
1da177e4 765
8a3173de 766 INIT_HLIST_NODE(&c->list);
1da177e4 767 c->busaddr = (__u32) cmd_dma_handle;
7c832835 768 temp64.val = (__u64) err_dma_handle;
1da177e4
LT		 769 c->ErrDesc.Addr.lower = temp64.val32.lower;
770 c->ErrDesc.Addr.upper = temp64.val32.upper;
771 c->ErrDesc.Len = sizeof(ErrorInfo_struct);
1da177e4 772
7c832835
BH		 773 c->ctlr = h->ctlr;
774 return c;
1da177e4
LT		 775}
776
7c832835
BH		 777/*
778 * Frees a command block that was previously allocated with cmd_alloc().
1da177e4
LT		 779 */
780static void cmd_free(ctlr_info_t *h, CommandList_struct *c, int got_from_pool)
781{
782 int i;
783 u64bit temp64;
784
7c832835 785 if (!got_from_pool) {
1da177e4
LT		 786 temp64.val32.lower = c->ErrDesc.Addr.lower;
787 temp64.val32.upper = c->ErrDesc.Addr.upper;
7c832835
BH		 788 pci_free_consistent(h->pdev, sizeof(ErrorInfo_struct),
789 c->err_info, (dma_addr_t) temp64.val);
790 pci_free_consistent(h->pdev, sizeof(CommandList_struct),
791 c, (dma_addr_t) c->busaddr);
792 } else {
1da177e4 793 i = c - h->cmd_pool;
7c832835
BH		 794 clear_bit(i & (BITS_PER_LONG - 1),
795 h->cmd_pool_bits + (i / BITS_PER_LONG));
796 h->nr_frees++;
797 }
1da177e4
LT		 798}
799
800static inline ctlr_info_t *get_host(struct gendisk *disk)
801{
7c832835 802 return disk->queue->queuedata;
1da177e4
LT		 803}
804
805static inline drive_info_struct *get_drv(struct gendisk *disk)
806{
807 return disk->private_data;
808}
809
810/*
811 * Open. Make sure the device is really there.
812 */
ef7822c2 813static int cciss_open(struct block_device *bdev, fmode_t mode)
1da177e4 814{
ef7822c2
AV		 815 ctlr_info_t *host = get_host(bdev->bd_disk);
816 drive_info_struct *drv = get_drv(bdev->bd_disk);
1da177e4
LT		 817
818#ifdef CCISS_DEBUG
ef7822c2 819 printk(KERN_DEBUG "cciss_open %s\n", bdev->bd_disk->disk_name);
7c832835 820#endif /* CCISS_DEBUG */
1da177e4 821
ddd47442
MM		 822 if (host->busy_initializing || drv->busy_configuring)
823 return -EBUSY;
1da177e4
LT		 824 /*
825 * Root is allowed to open raw volume zero even if it's not configured
826 * so array config can still work. Root is also allowed to open any
827 * volume that has a LUN ID, so it can issue IOCTL to reread the
828 * disk information. I don't think I really like this
829 * but I'm already using way to many device nodes to claim another one
830 * for "raw controller".
831 */
7a06f789 832 if (drv->heads == 0) {
ef7822c2 833 if (MINOR(bdev->bd_dev) != 0) { /* not node 0? */
1da177e4 834 /* if not node 0 make sure it is a partition = 0 */
ef7822c2 835 if (MINOR(bdev->bd_dev) & 0x0f) {
7c832835 836 return -ENXIO;
1da177e4
LT		 837 /* if it is, make sure we have a LUN ID */
838 } else if (drv->LunID == 0) {
839 return -ENXIO;
840 }
841 }
842 if (!capable(CAP_SYS_ADMIN))
843 return -EPERM;
844 }
845 drv->usage_count++;
846 host->usage_count++;
847 return 0;
848}
7c832835 849
1da177e4
LT		 850/*
851 * Close. Sync first.
852 */
ef7822c2 853static int cciss_release(struct gendisk *disk, fmode_t mode)
1da177e4 854{
ef7822c2
AV		 855 ctlr_info_t *host = get_host(disk);
856 drive_info_struct *drv = get_drv(disk);
1da177e4
LT		 857
858#ifdef CCISS_DEBUG
ef7822c2 859 printk(KERN_DEBUG "cciss_release %s\n", disk->disk_name);
7c832835 860#endif /* CCISS_DEBUG */
1da177e4
LT		 861
862 drv->usage_count--;
863 host->usage_count--;
864 return 0;
865}
866
867#ifdef CONFIG_COMPAT
868
ef7822c2
AV		 869static int do_ioctl(struct block_device *bdev, fmode_t mode,
870 unsigned cmd, unsigned long arg)
1da177e4
LT		 871{
872 int ret;
873 lock_kernel();
ef7822c2 874 ret = cciss_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 875 unlock_kernel();
876 return ret;
877}
878
ef7822c2
AV		 879static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
880 unsigned cmd, unsigned long arg);
881static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
882 unsigned cmd, unsigned long arg);
1da177e4 883
ef7822c2
AV		 884static int cciss_compat_ioctl(struct block_device *bdev, fmode_t mode,
885 unsigned cmd, unsigned long arg)
1da177e4
LT		 886{
887 switch (cmd) {
888 case CCISS_GETPCIINFO:
889 case CCISS_GETINTINFO:
890 case CCISS_SETINTINFO:
891 case CCISS_GETNODENAME:
892 case CCISS_SETNODENAME:
893 case CCISS_GETHEARTBEAT:
894 case CCISS_GETBUSTYPES:
895 case CCISS_GETFIRMVER:
896 case CCISS_GETDRIVVER:
897 case CCISS_REVALIDVOLS:
898 case CCISS_DEREGDISK:
899 case CCISS_REGNEWDISK:
900 case CCISS_REGNEWD:
901 case CCISS_RESCANDISK:
902 case CCISS_GETLUNINFO:
ef7822c2 903 return do_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 904
905 case CCISS_PASSTHRU32:
ef7822c2 906 return cciss_ioctl32_passthru(bdev, mode, cmd, arg);
1da177e4 907 case CCISS_BIG_PASSTHRU32:
ef7822c2 908 return cciss_ioctl32_big_passthru(bdev, mode, cmd, arg);
1da177e4
LT		 909
910 default:
911 return -ENOIOCTLCMD;
912 }
913}
914
ef7822c2
AV		 915static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
916 unsigned cmd, unsigned long arg)
1da177e4
LT		 917{
918 IOCTL32_Command_struct __user *arg32 =
7c832835 919 (IOCTL32_Command_struct __user *) arg;
1da177e4
LT		 920 IOCTL_Command_struct arg64;
921 IOCTL_Command_struct __user *p = compat_alloc_user_space(sizeof(arg64));
922 int err;
923 u32 cp;
924
925 err = 0;
7c832835
BH		 926 err |=
927 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
928 sizeof(arg64.LUN_info));
929 err |=
930 copy_from_user(&arg64.Request, &arg32->Request,
931 sizeof(arg64.Request));
932 err |=
933 copy_from_user(&arg64.error_info, &arg32->error_info,
934 sizeof(arg64.error_info));
1da177e4
LT		 935 err |= get_user(arg64.buf_size, &arg32->buf_size);
936 err |= get_user(cp, &arg32->buf);
937 arg64.buf = compat_ptr(cp);
938 err |= copy_to_user(p, &arg64, sizeof(arg64));
939
940 if (err)
941 return -EFAULT;
942
ef7822c2 943 err = do_ioctl(bdev, mode, CCISS_PASSTHRU, (unsigned long)p);
1da177e4
LT		 944 if (err)
945 return err;
7c832835
BH		 946 err |=
947 copy_in_user(&arg32->error_info, &p->error_info,
948 sizeof(arg32->error_info));
1da177e4
LT		 949 if (err)
950 return -EFAULT;
951 return err;
952}
953
ef7822c2
AV		 954static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
955 unsigned cmd, unsigned long arg)
1da177e4
LT		 956{
957 BIG_IOCTL32_Command_struct __user *arg32 =
7c832835 958 (BIG_IOCTL32_Command_struct __user *) arg;
1da177e4 959 BIG_IOCTL_Command_struct arg64;
7c832835
BH		 960 BIG_IOCTL_Command_struct __user *p =
961 compat_alloc_user_space(sizeof(arg64));
1da177e4
LT		 962 int err;
963 u32 cp;
964
965 err = 0;
7c832835
BH		 966 err |=
967 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
968 sizeof(arg64.LUN_info));
969 err |=
970 copy_from_user(&arg64.Request, &arg32->Request,
971 sizeof(arg64.Request));
972 err |=
973 copy_from_user(&arg64.error_info, &arg32->error_info,
974 sizeof(arg64.error_info));
1da177e4
LT		 975 err |= get_user(arg64.buf_size, &arg32->buf_size);
976 err |= get_user(arg64.malloc_size, &arg32->malloc_size);
977 err |= get_user(cp, &arg32->buf);
978 arg64.buf = compat_ptr(cp);
979 err |= copy_to_user(p, &arg64, sizeof(arg64));
980
981 if (err)
7c832835 982 return -EFAULT;
1da177e4 983
ef7822c2 984 err = do_ioctl(bdev, mode, CCISS_BIG_PASSTHRU, (unsigned long)p);
1da177e4
LT		 985 if (err)
986 return err;
7c832835
BH		 987 err |=
988 copy_in_user(&arg32->error_info, &p->error_info,
989 sizeof(arg32->error_info));
1da177e4
LT		 990 if (err)
991 return -EFAULT;
992 return err;
993}
994#endif
a885c8c4
CH		 995
996static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo)
997{
998 drive_info_struct *drv = get_drv(bdev->bd_disk);
999
1000 if (!drv->cylinders)
1001 return -ENXIO;
1002
1003 geo->heads = drv->heads;
1004 geo->sectors = drv->sectors;
1005 geo->cylinders = drv->cylinders;
1006 return 0;
1007}
1008
0a9279cc
MM		 1009static void check_ioctl_unit_attention(ctlr_info_t *host, CommandList_struct *c)
1010{
1011 if (c->err_info->CommandStatus == CMD_TARGET_STATUS &&
1012 c->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION)
1013 (void)check_for_unit_attention(host, c);
1014}
1da177e4 1015/*
7c832835 1016 * ioctl
1da177e4 1017 */
ef7822c2 1018static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 1019 unsigned int cmd, unsigned long arg)
1da177e4 1020{
1da177e4
LT		 1021 struct gendisk *disk = bdev->bd_disk;
1022 ctlr_info_t *host = get_host(disk);
1023 drive_info_struct *drv = get_drv(disk);
1024 int ctlr = host->ctlr;
1025 void __user *argp = (void __user *)arg;
1026
1027#ifdef CCISS_DEBUG
1028 printk(KERN_DEBUG "cciss_ioctl: Called with cmd=%x %lx\n", cmd, arg);
7c832835
BH		 1029#endif /* CCISS_DEBUG */
1030
1031 switch (cmd) {
1da177e4 1032 case CCISS_GETPCIINFO:
7c832835
BH		 1033 {
1034 cciss_pci_info_struct pciinfo;
1035
1036 if (!arg)
1037 return -EINVAL;
1038 pciinfo.domain = pci_domain_nr(host->pdev->bus);
1039 pciinfo.bus = host->pdev->bus->number;
1040 pciinfo.dev_fn = host->pdev->devfn;
1041 pciinfo.board_id = host->board_id;
1042 if (copy_to_user
1043 (argp, &pciinfo, sizeof(cciss_pci_info_struct)))
1044 return -EFAULT;
1045 return 0;
1046 }
1da177e4 1047 case CCISS_GETINTINFO:
7c832835
BH		 1048 {
1049 cciss_coalint_struct intinfo;
1050 if (!arg)
1051 return -EINVAL;
1052 intinfo.delay =
1053 readl(&host->cfgtable->HostWrite.CoalIntDelay);
1054 intinfo.count =
1055 readl(&host->cfgtable->HostWrite.CoalIntCount);
1056 if (copy_to_user
1057 (argp, &intinfo, sizeof(cciss_coalint_struct)))
1058 return -EFAULT;
1059 return 0;
1060 }
1da177e4 1061 case CCISS_SETINTINFO:
1da177e4 1062 {
7c832835
BH		 1063 cciss_coalint_struct intinfo;
1064 unsigned long flags;
1065 int i;
1066
1067 if (!arg)
1068 return -EINVAL;
1069 if (!capable(CAP_SYS_ADMIN))
1070 return -EPERM;
1071 if (copy_from_user
1072 (&intinfo, argp, sizeof(cciss_coalint_struct)))
1073 return -EFAULT;
1074 if ((intinfo.delay == 0) && (intinfo.count == 0))
1075 {
1076// printk("cciss_ioctl: delay and count cannot be 0\n");
1077 return -EINVAL;
1078 }
1079 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1080 /* Update the field, and then ring the doorbell */
1081 writel(intinfo.delay,
1082 &(host->cfgtable->HostWrite.CoalIntDelay));
1083 writel(intinfo.count,
1084 &(host->cfgtable->HostWrite.CoalIntCount));
1085 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1086
1087 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1088 if (!(readl(host->vaddr + SA5_DOORBELL)
1089 & CFGTBL_ChangeReq))
1090 break;
1091 /* delay and try again */
1092 udelay(1000);
1093 }
1094 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1095 if (i >= MAX_IOCTL_CONFIG_WAIT)
1096 return -EAGAIN;
1097 return 0;
1da177e4 1098 }
1da177e4 1099 case CCISS_GETNODENAME:
7c832835
BH		 1100 {
1101 NodeName_type NodeName;
1102 int i;
1103
1104 if (!arg)
1105 return -EINVAL;
1106 for (i = 0; i < 16; i++)
1107 NodeName[i] =
1108 readb(&host->cfgtable->ServerName[i]);
1109 if (copy_to_user(argp, NodeName, sizeof(NodeName_type)))
1110 return -EFAULT;
1111 return 0;
1112 }
1da177e4 1113 case CCISS_SETNODENAME:
7c832835
BH		 1114 {
1115 NodeName_type NodeName;
1116 unsigned long flags;
1117 int i;
1118
1119 if (!arg)
1120 return -EINVAL;
1121 if (!capable(CAP_SYS_ADMIN))
1122 return -EPERM;
1123
1124 if (copy_from_user
1125 (NodeName, argp, sizeof(NodeName_type)))
1126 return -EFAULT;
1127
1128 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1129
1130 /* Update the field, and then ring the doorbell */
1131 for (i = 0; i < 16; i++)
1132 writeb(NodeName[i],
1133 &host->cfgtable->ServerName[i]);
1134
1135 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1136
1137 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1138 if (!(readl(host->vaddr + SA5_DOORBELL)
1139 & CFGTBL_ChangeReq))
1140 break;
1141 /* delay and try again */
1142 udelay(1000);
1143 }
1144 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1145 if (i >= MAX_IOCTL_CONFIG_WAIT)
1146 return -EAGAIN;
1147 return 0;
1148 }
1da177e4
LT		 1149
1150 case CCISS_GETHEARTBEAT:
7c832835
BH		 1151 {
1152 Heartbeat_type heartbeat;
1153
1154 if (!arg)
1155 return -EINVAL;
1156 heartbeat = readl(&host->cfgtable->HeartBeat);
1157 if (copy_to_user
1158 (argp, &heartbeat, sizeof(Heartbeat_type)))
1159 return -EFAULT;
1160 return 0;
1161 }
1da177e4 1162 case CCISS_GETBUSTYPES:
7c832835
BH		 1163 {
1164 BusTypes_type BusTypes;
1165
1166 if (!arg)
1167 return -EINVAL;
1168 BusTypes = readl(&host->cfgtable->BusTypes);
1169 if (copy_to_user
1170 (argp, &BusTypes, sizeof(BusTypes_type)))
1171 return -EFAULT;
1172 return 0;
1173 }
1da177e4 1174 case CCISS_GETFIRMVER:
7c832835
BH		 1175 {
1176 FirmwareVer_type firmware;
1da177e4 1177
7c832835
BH		 1178 if (!arg)
1179 return -EINVAL;
1180 memcpy(firmware, host->firm_ver, 4);
1da177e4 1181
7c832835
BH		 1182 if (copy_to_user
1183 (argp, firmware, sizeof(FirmwareVer_type)))
1184 return -EFAULT;
1185 return 0;
1186 }
1187 case CCISS_GETDRIVVER:
1188 {
1189 DriverVer_type DriverVer = DRIVER_VERSION;
1da177e4 1190
7c832835
BH		 1191 if (!arg)
1192 return -EINVAL;
1da177e4 1193
7c832835
BH		 1194 if (copy_to_user
1195 (argp, &DriverVer, sizeof(DriverVer_type)))
1196 return -EFAULT;
1197 return 0;
1198 }
1da177e4 1199
6ae5ce8e
MM		 1200 case CCISS_DEREGDISK:
1201 case CCISS_REGNEWD:
1da177e4 1202 case CCISS_REVALIDVOLS:
6ae5ce8e 1203 return rebuild_lun_table(host, 0);
7c832835
BH		 1204
1205 case CCISS_GETLUNINFO:{
1206 LogvolInfo_struct luninfo;
1207
1208 luninfo.LunID = drv->LunID;
1209 luninfo.num_opens = drv->usage_count;
1210 luninfo.num_parts = 0;
1211 if (copy_to_user(argp, &luninfo,
1212 sizeof(LogvolInfo_struct)))
1213 return -EFAULT;
1214 return 0;
1215 }
1da177e4 1216 case CCISS_PASSTHRU:
1da177e4 1217 {
7c832835
BH		 1218 IOCTL_Command_struct iocommand;
1219 CommandList_struct *c;
1220 char *buff = NULL;
1221 u64bit temp64;
1222 unsigned long flags;
6e9a4738 1223 DECLARE_COMPLETION_ONSTACK(wait);
1da177e4 1224
7c832835
BH		 1225 if (!arg)
1226 return -EINVAL;
1da177e4 1227
7c832835
BH		 1228 if (!capable(CAP_SYS_RAWIO))
1229 return -EPERM;
1da177e4 1230
7c832835
BH		 1231 if (copy_from_user
1232 (&iocommand, argp, sizeof(IOCTL_Command_struct)))
1233 return -EFAULT;
1234 if ((iocommand.buf_size < 1) &&
1235 (iocommand.Request.Type.Direction != XFER_NONE)) {
1236 return -EINVAL;
1237 }
1238#if 0 /* 'buf_size' member is 16-bits, and always smaller than kmalloc limit */
1239 /* Check kmalloc limits */
1240 if (iocommand.buf_size > 128000)
1241 return -EINVAL;
1242#endif
1243 if (iocommand.buf_size > 0) {
1244 buff = kmalloc(iocommand.buf_size, GFP_KERNEL);
1245 if (buff == NULL)
1246 return -EFAULT;
1247 }
1248 if (iocommand.Request.Type.Direction == XFER_WRITE) {
1249 /* Copy the data into the buffer we created */
1250 if (copy_from_user
1251 (buff, iocommand.buf, iocommand.buf_size)) {
1252 kfree(buff);
1253 return -EFAULT;
1254 }
1255 } else {
1256 memset(buff, 0, iocommand.buf_size);
1257 }
1258 if ((c = cmd_alloc(host, 0)) == NULL) {
1259 kfree(buff);
1260 return -ENOMEM;
1261 }
1262 // Fill in the command type
1263 c->cmd_type = CMD_IOCTL_PEND;
1264 // Fill in Command Header
1265 c->Header.ReplyQueue = 0; // unused in simple mode
1266 if (iocommand.buf_size > 0) // buffer to fill
1267 {
1268 c->Header.SGList = 1;
1269 c->Header.SGTotal = 1;
1270 } else // no buffers to fill
1271 {
1272 c->Header.SGList = 0;
1273 c->Header.SGTotal = 0;
1274 }
1275 c->Header.LUN = iocommand.LUN_info;
1276 c->Header.Tag.lower = c->busaddr; // use the kernel address the cmd block for tag
1da177e4 1277
7c832835
BH		 1278 // Fill in Request block
1279 c->Request = iocommand.Request;
1da177e4 1280
7c832835
BH		 1281 // Fill in the scatter gather information
1282 if (iocommand.buf_size > 0) {
1283 temp64.val = pci_map_single(host->pdev, buff,
1284 iocommand.buf_size,
1285 PCI_DMA_BIDIRECTIONAL);
1286 c->SG[0].Addr.lower = temp64.val32.lower;
1287 c->SG[0].Addr.upper = temp64.val32.upper;
1288 c->SG[0].Len = iocommand.buf_size;
1289 c->SG[0].Ext = 0; // we are not chaining
1290 }
1291 c->waiting = &wait;
1292
1293 /* Put the request on the tail of the request queue */
1294 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1295 addQ(&host->reqQ, c);
1296 host->Qdepth++;
1297 start_io(host);
1298 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1299
1300 wait_for_completion(&wait);
1301
1302 /* unlock the buffers from DMA */
1303 temp64.val32.lower = c->SG[0].Addr.lower;
1304 temp64.val32.upper = c->SG[0].Addr.upper;
1305 pci_unmap_single(host->pdev, (dma_addr_t) temp64.val,
1306 iocommand.buf_size,
1307 PCI_DMA_BIDIRECTIONAL);
1308
0a9279cc
MM		 1309 check_ioctl_unit_attention(host, c);
1310
7c832835
BH		 1311 /* Copy the error information out */
1312 iocommand.error_info = *(c->err_info);
1313 if (copy_to_user
1314 (argp, &iocommand, sizeof(IOCTL_Command_struct))) {
1315 kfree(buff);
1da177e4
LT		 1316 cmd_free(host, c, 0);
1317 return -EFAULT;
1318 }
7c832835
BH		 1319
1320 if (iocommand.Request.Type.Direction == XFER_READ) {
1321 /* Copy the data out of the buffer we created */
1322 if (copy_to_user
1323 (iocommand.buf, buff, iocommand.buf_size)) {
1324 kfree(buff);
1325 cmd_free(host, c, 0);
1326 return -EFAULT;
1327 }
1328 }
1329 kfree(buff);
1330 cmd_free(host, c, 0);
1331 return 0;
1da177e4 1332 }
7c832835
BH		 1333 case CCISS_BIG_PASSTHRU:{
1334 BIG_IOCTL_Command_struct *ioc;
1335 CommandList_struct *c;
1336 unsigned char **buff = NULL;
1337 int *buff_size = NULL;
1338 u64bit temp64;
1339 unsigned long flags;
1340 BYTE sg_used = 0;
1341 int status = 0;
1342 int i;
6e9a4738 1343 DECLARE_COMPLETION_ONSTACK(wait);
7c832835
BH		 1344 __u32 left;
1345 __u32 sz;
1346 BYTE __user *data_ptr;
1347
1348 if (!arg)
1349 return -EINVAL;
1350 if (!capable(CAP_SYS_RAWIO))
1351 return -EPERM;
1352 ioc = (BIG_IOCTL_Command_struct *)
1353 kmalloc(sizeof(*ioc), GFP_KERNEL);
1354 if (!ioc) {
1355 status = -ENOMEM;
1356 goto cleanup1;
1357 }
1358 if (copy_from_user(ioc, argp, sizeof(*ioc))) {
1359 status = -EFAULT;
1360 goto cleanup1;
1361 }
1362 if ((ioc->buf_size < 1) &&
1363 (ioc->Request.Type.Direction != XFER_NONE)) {
1da177e4
LT		 1364 status = -EINVAL;
1365 goto cleanup1;
7c832835
BH		 1366 }
1367 /* Check kmalloc limits using all SGs */
1368 if (ioc->malloc_size > MAX_KMALLOC_SIZE) {
1369 status = -EINVAL;
1370 goto cleanup1;
1371 }
1372 if (ioc->buf_size > ioc->malloc_size * MAXSGENTRIES) {
1373 status = -EINVAL;
1374 goto cleanup1;
1375 }
1376 buff =
1377 kzalloc(MAXSGENTRIES * sizeof(char *), GFP_KERNEL);
1378 if (!buff) {
1da177e4
LT		 1379 status = -ENOMEM;
1380 goto cleanup1;
1381 }
5cbded58 1382 buff_size = kmalloc(MAXSGENTRIES * sizeof(int),
7c832835
BH		 1383 GFP_KERNEL);
1384 if (!buff_size) {
1385 status = -ENOMEM;
1386 goto cleanup1;
1387 }
1388 left = ioc->buf_size;
1389 data_ptr = ioc->buf;
1390 while (left) {
1391 sz = (left >
1392 ioc->malloc_size) ? ioc->
1393 malloc_size : left;
1394 buff_size[sg_used] = sz;
1395 buff[sg_used] = kmalloc(sz, GFP_KERNEL);
1396 if (buff[sg_used] == NULL) {
1da177e4 1397 status = -ENOMEM;
15534d38
JA		 1398 goto cleanup1;
1399 }
7c832835
BH		 1400 if (ioc->Request.Type.Direction == XFER_WRITE) {
1401 if (copy_from_user
1402 (buff[sg_used], data_ptr, sz)) {
f7108f91 1403 status = -EFAULT;
7c832835
BH		 1404 goto cleanup1;
1405 }
1406 } else {
1407 memset(buff[sg_used], 0, sz);
1408 }
1409 left -= sz;
1410 data_ptr += sz;
1411 sg_used++;
1412 }
1413 if ((c = cmd_alloc(host, 0)) == NULL) {
1414 status = -ENOMEM;
1415 goto cleanup1;
1416 }
1417 c->cmd_type = CMD_IOCTL_PEND;
1418 c->Header.ReplyQueue = 0;
1419
1420 if (ioc->buf_size > 0) {
1421 c->Header.SGList = sg_used;
1422 c->Header.SGTotal = sg_used;
1da177e4 1423 } else {
7c832835
BH		 1424 c->Header.SGList = 0;
1425 c->Header.SGTotal = 0;
1da177e4 1426 }
7c832835
BH		 1427 c->Header.LUN = ioc->LUN_info;
1428 c->Header.Tag.lower = c->busaddr;
1429
1430 c->Request = ioc->Request;
1431 if (ioc->buf_size > 0) {
1432 int i;
1433 for (i = 0; i < sg_used; i++) {
1434 temp64.val =
1435 pci_map_single(host->pdev, buff[i],
1436 buff_size[i],
1437 PCI_DMA_BIDIRECTIONAL);
1438 c->SG[i].Addr.lower =
1439 temp64.val32.lower;
1440 c->SG[i].Addr.upper =
1441 temp64.val32.upper;
1442 c->SG[i].Len = buff_size[i];
1443 c->SG[i].Ext = 0; /* we are not chaining */
1444 }
1445 }
1446 c->waiting = &wait;
1447 /* Put the request on the tail of the request queue */
1448 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1449 addQ(&host->reqQ, c);
1450 host->Qdepth++;
1451 start_io(host);
1452 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1453 wait_for_completion(&wait);
1454 /* unlock the buffers from DMA */
1455 for (i = 0; i < sg_used; i++) {
1456 temp64.val32.lower = c->SG[i].Addr.lower;
1457 temp64.val32.upper = c->SG[i].Addr.upper;
1458 pci_unmap_single(host->pdev,
1459 (dma_addr_t) temp64.val, buff_size[i],
1da177e4 1460 PCI_DMA_BIDIRECTIONAL);
1da177e4 1461 }
0a9279cc 1462 check_ioctl_unit_attention(host, c);
7c832835
BH		 1463 /* Copy the error information out */
1464 ioc->error_info = *(c->err_info);
1465 if (copy_to_user(argp, ioc, sizeof(*ioc))) {
1466 cmd_free(host, c, 0);
1467 status = -EFAULT;
1468 goto cleanup1;
1469 }
1470 if (ioc->Request.Type.Direction == XFER_READ) {
1471 /* Copy the data out of the buffer we created */
1472 BYTE __user *ptr = ioc->buf;
1473 for (i = 0; i < sg_used; i++) {
1474 if (copy_to_user
1475 (ptr, buff[i], buff_size[i])) {
1476 cmd_free(host, c, 0);
1477 status = -EFAULT;
1478 goto cleanup1;
1479 }
1480 ptr += buff_size[i];
1da177e4 1481 }
1da177e4 1482 }
7c832835
BH		 1483 cmd_free(host, c, 0);
1484 status = 0;
1485 cleanup1:
1486 if (buff) {
1487 for (i = 0; i < sg_used; i++)
1488 kfree(buff[i]);
1489 kfree(buff);
1490 }
1491 kfree(buff_size);
1492 kfree(ioc);
1493 return status;
1da177e4 1494 }
03bbfee5
MMOD		 1495
1496 /* scsi_cmd_ioctl handles these, below, though some are not */
1497 /* very meaningful for cciss. SG_IO is the main one people want. */
1498
1499 case SG_GET_VERSION_NUM:
1500 case SG_SET_TIMEOUT:
1501 case SG_GET_TIMEOUT:
1502 case SG_GET_RESERVED_SIZE:
1503 case SG_SET_RESERVED_SIZE:
1504 case SG_EMULATED_HOST:
1505 case SG_IO:
1506 case SCSI_IOCTL_SEND_COMMAND:
ef7822c2 1507 return scsi_cmd_ioctl(disk->queue, disk, mode, cmd, argp);
03bbfee5
MMOD		 1508
1509 /* scsi_cmd_ioctl would normally handle these, below, but */
1510 /* they aren't a good fit for cciss, as CD-ROMs are */
1511 /* not supported, and we don't have any bus/target/lun */
1512 /* which we present to the kernel. */
1513
1514 case CDROM_SEND_PACKET:
1515 case CDROMCLOSETRAY:
1516 case CDROMEJECT:
1517 case SCSI_IOCTL_GET_IDLUN:
1518 case SCSI_IOCTL_GET_BUS_NUMBER:
1da177e4
LT		 1519 default:
1520 return -ENOTTY;
1521 }
1da177e4
LT		 1522}
1523
7b30f092
JA		 1524static void cciss_check_queues(ctlr_info_t *h)
1525{
1526 int start_queue = h->next_to_run;
1527 int i;
1528
1529 /* check to see if we have maxed out the number of commands that can
1530 * be placed on the queue. If so then exit. We do this check here
1531 * in case the interrupt we serviced was from an ioctl and did not
1532 * free any new commands.
1533 */
f880632f 1534 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds)
7b30f092
JA		 1535 return;
1536
1537 /* We have room on the queue for more commands. Now we need to queue
1538 * them up. We will also keep track of the next queue to run so
1539 * that every queue gets a chance to be started first.
1540 */
1541 for (i = 0; i < h->highest_lun + 1; i++) {
1542 int curr_queue = (start_queue + i) % (h->highest_lun + 1);
1543 /* make sure the disk has been added and the drive is real
1544 * because this can be called from the middle of init_one.
1545 */
1546 if (!(h->drv[curr_queue].queue) || !(h->drv[curr_queue].heads))
1547 continue;
1548 blk_start_queue(h->gendisk[curr_queue]->queue);
1549
1550 /* check to see if we have maxed out the number of commands
1551 * that can be placed on the queue.
1552 */
f880632f 1553 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds) {
7b30f092
JA		 1554 if (curr_queue == start_queue) {
1555 h->next_to_run =
1556 (start_queue + 1) % (h->highest_lun + 1);
1557 break;
1558 } else {
1559 h->next_to_run = curr_queue;
1560 break;
1561 }
7b30f092
JA		 1562 }
1563 }
1564}
1565
ca1e0484
MM		 1566static void cciss_softirq_done(struct request *rq)
1567{
1568 CommandList_struct *cmd = rq->completion_data;
1569 ctlr_info_t *h = hba[cmd->ctlr];
1570 unsigned long flags;
1571 u64bit temp64;
1572 int i, ddir;
1573
1574 if (cmd->Request.Type.Direction == XFER_READ)
1575 ddir = PCI_DMA_FROMDEVICE;
1576 else
1577 ddir = PCI_DMA_TODEVICE;
1578
1579 /* command did not need to be retried */
1580 /* unmap the DMA mapping for all the scatter gather elements */
7c832835 1581 for (i = 0; i < cmd->Header.SGList; i++) {
ca1e0484
MM		 1582 temp64.val32.lower = cmd->SG[i].Addr.lower;
1583 temp64.val32.upper = cmd->SG[i].Addr.upper;
1584 pci_unmap_page(h->pdev, temp64.val, cmd->SG[i].Len, ddir);
1585 }
1586
ca1e0484
MM		 1587#ifdef CCISS_DEBUG
1588 printk("Done with %p\n", rq);
7c832835 1589#endif /* CCISS_DEBUG */
ca1e0484 1590
c3a4d78c 1591 /* set the residual count for pc requests */
ac44e5b2 1592 if (blk_pc_request(rq))
c3a4d78c 1593 rq->resid_len = cmd->err_info->ResidualCnt;
ac44e5b2 1594
c3a4d78c 1595 blk_end_request_all(rq, (rq->errors == 0) ? 0 : -EIO);
3daeea29 1596
ca1e0484 1597 spin_lock_irqsave(&h->lock, flags);
7c832835 1598 cmd_free(h, cmd, 1);
7b30f092 1599 cciss_check_queues(h);
ca1e0484
MM		 1600 spin_unlock_irqrestore(&h->lock, flags);
1601}
1602
b57695fe 1603static void log_unit_to_scsi3addr(ctlr_info_t *h, unsigned char scsi3addr[],
1604 uint32_t log_unit)
1605{
1606 log_unit = h->drv[log_unit].LunID & 0x03fff;
1607 memset(&scsi3addr[4], 0, 4);
1608 memcpy(&scsi3addr[0], &log_unit, 4);
1609 scsi3addr[3] |= 0x40;
1610}
1611
7fe06326
AP		 1612/* This function gets the SCSI vendor, model, and revision of a logical drive
1613 * via the inquiry page 0. Model, vendor, and rev are set to empty strings if
1614 * they cannot be read.
1615 */
1616static void cciss_get_device_descr(int ctlr, int logvol, int withirq,
1617 char *vendor, char *model, char *rev)
1618{
1619 int rc;
1620 InquiryData_struct *inq_buf;
b57695fe 1621 unsigned char scsi3addr[8];
7fe06326
AP		 1622
1623 *vendor = '\0';
1624 *model = '\0';
1625 *rev = '\0';
1626
1627 inq_buf = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1628 if (!inq_buf)
1629 return;
1630
b57695fe 1631 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
7fe06326
AP		 1632 if (withirq)
1633 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1634 sizeof(InquiryData_struct), 0,
1635 scsi3addr, TYPE_CMD);
7fe06326
AP		 1636 else
1637 rc = sendcmd(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1638 sizeof(InquiryData_struct), 0,
1639 scsi3addr, TYPE_CMD);
7fe06326
AP		 1640 if (rc == IO_OK) {
1641 memcpy(vendor, &inq_buf->data_byte[8], VENDOR_LEN);
1642 vendor[VENDOR_LEN] = '\0';
1643 memcpy(model, &inq_buf->data_byte[16], MODEL_LEN);
1644 model[MODEL_LEN] = '\0';
1645 memcpy(rev, &inq_buf->data_byte[32], REV_LEN);
1646 rev[REV_LEN] = '\0';
1647 }
1648
1649 kfree(inq_buf);
1650 return;
1651}
1652
a72da29b
MM		 1653/* This function gets the serial number of a logical drive via
1654 * inquiry page 0x83. Serial no. is 16 bytes. If the serial
1655 * number cannot be had, for whatever reason, 16 bytes of 0xff
1656 * are returned instead.
1657 */
1658static void cciss_get_serial_no(int ctlr, int logvol, int withirq,
1659 unsigned char *serial_no, int buflen)
1660{
1661#define PAGE_83_INQ_BYTES 64
1662 int rc;
1663 unsigned char *buf;
b57695fe 1664 unsigned char scsi3addr[8];
a72da29b
MM		 1665
1666 if (buflen > 16)
1667 buflen = 16;
1668 memset(serial_no, 0xff, buflen);
1669 buf = kzalloc(PAGE_83_INQ_BYTES, GFP_KERNEL);
1670 if (!buf)
1671 return;
1672 memset(serial_no, 0, buflen);
b57695fe 1673 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
a72da29b
MM		 1674 if (withirq)
1675 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, buf,
b57695fe 1676 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1677 else
1678 rc = sendcmd(CISS_INQUIRY, ctlr, buf,
b57695fe 1679 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1680 if (rc == IO_OK)
1681 memcpy(serial_no, &buf[8], buflen);
1682 kfree(buf);
1683 return;
1684}
1685
617e1344
SC		 1686/*
1687 * cciss_add_disk sets up the block device queue for a logical drive
1688 */
1689static int cciss_add_disk(ctlr_info_t *h, struct gendisk *disk,
6ae5ce8e
MM		 1690 int drv_index)
1691{
1692 disk->queue = blk_init_queue(do_cciss_request, &h->lock);
e8074f79
SC		 1693 if (!disk->queue)
1694 goto init_queue_failure;
6ae5ce8e
MM		 1695 sprintf(disk->disk_name, "cciss/c%dd%d", h->ctlr, drv_index);
1696 disk->major = h->major;
1697 disk->first_minor = drv_index << NWD_SHIFT;
1698 disk->fops = &cciss_fops;
617e1344
SC		 1699 if (h->drv[drv_index].dev == NULL) {
1700 if (cciss_create_ld_sysfs_entry(h, drv_index))
1701 goto cleanup_queue;
1702 }
6ae5ce8e 1703 disk->private_data = &h->drv[drv_index];
617e1344 1704 disk->driverfs_dev = h->drv[drv_index].dev;
6ae5ce8e
MM		 1705
1706 /* Set up queue information */
1707 blk_queue_bounce_limit(disk->queue, h->pdev->dma_mask);
1708
1709 /* This is a hardware imposed limit. */
1710 blk_queue_max_hw_segments(disk->queue, MAXSGENTRIES);
1711
1712 /* This is a limit in the driver and could be eliminated. */
1713 blk_queue_max_phys_segments(disk->queue, MAXSGENTRIES);
1714
1715 blk_queue_max_sectors(disk->queue, h->cciss_max_sectors);
1716
1717 blk_queue_softirq_done(disk->queue, cciss_softirq_done);
1718
1719 disk->queue->queuedata = h;
1720
e1defc4f
MP		 1721 blk_queue_logical_block_size(disk->queue,
1722 h->drv[drv_index].block_size);
6ae5ce8e
MM		 1723
1724 /* Make sure all queue data is written out before */
1725 /* setting h->drv[drv_index].queue, as setting this */
1726 /* allows the interrupt handler to start the queue */
1727 wmb();
1728 h->drv[drv_index].queue = disk->queue;
1729 add_disk(disk);
617e1344
SC		 1730 return 0;
1731
1732cleanup_queue:
1733 blk_cleanup_queue(disk->queue);
1734 disk->queue = NULL;
e8074f79 1735init_queue_failure:
617e1344 1736 return -1;
6ae5ce8e
MM		 1737}
1738
ddd47442 1739/* This function will check the usage_count of the drive to be updated/added.
a72da29b
MM		 1740 * If the usage_count is zero and it is a heretofore unknown drive, or,
1741 * the drive's capacity, geometry, or serial number has changed,
1742 * then the drive information will be updated and the disk will be
1743 * re-registered with the kernel. If these conditions don't hold,
1744 * then it will be left alone for the next reboot. The exception to this
1745 * is disk 0 which will always be left registered with the kernel since it
1746 * is also the controller node. Any changes to disk 0 will show up on
1747 * the next reboot.
7c832835 1748 */
6ae5ce8e 1749static void cciss_update_drive_info(int ctlr, int drv_index, int first_time)
7c832835 1750{
ddd47442
MM		 1751 ctlr_info_t *h = hba[ctlr];
1752 struct gendisk *disk;
ddd47442
MM		 1753 InquiryData_struct *inq_buff = NULL;
1754 unsigned int block_size;
00988a35 1755 sector_t total_size;
ddd47442
MM		 1756 unsigned long flags = 0;
1757 int ret = 0;
a72da29b
MM		 1758 drive_info_struct *drvinfo;
1759
1760 /* Get information about the disk and modify the driver structure */
1761 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1762 drvinfo = kmalloc(sizeof(*drvinfo), GFP_KERNEL);
1763 if (inq_buff == NULL || drvinfo == NULL)
1764 goto mem_msg;
1765
1766 /* testing to see if 16-byte CDBs are already being used */
1767 if (h->cciss_read == CCISS_READ_16) {
1768 cciss_read_capacity_16(h->ctlr, drv_index, 1,
1769 &total_size, &block_size);
1770
1771 } else {
1772 cciss_read_capacity(ctlr, drv_index, 1,
1773 &total_size, &block_size);
1774
1775 /* if read_capacity returns all F's this volume is >2TB */
1776 /* in size so we switch to 16-byte CDB's for all */
1777 /* read/write ops */
1778 if (total_size == 0xFFFFFFFFULL) {
1779 cciss_read_capacity_16(ctlr, drv_index, 1,
1780 &total_size, &block_size);
1781 h->cciss_read = CCISS_READ_16;
1782 h->cciss_write = CCISS_WRITE_16;
1783 } else {
1784 h->cciss_read = CCISS_READ_10;
1785 h->cciss_write = CCISS_WRITE_10;
1786 }
1787 }
1788
1789 cciss_geometry_inquiry(ctlr, drv_index, 1, total_size, block_size,
1790 inq_buff, drvinfo);
1791 drvinfo->block_size = block_size;
1792 drvinfo->nr_blocks = total_size + 1;
1793
7fe06326
AP		 1794 cciss_get_device_descr(ctlr, drv_index, 1, drvinfo->vendor,
1795 drvinfo->model, drvinfo->rev);
a72da29b
MM		 1796 cciss_get_serial_no(ctlr, drv_index, 1, drvinfo->serial_no,
1797 sizeof(drvinfo->serial_no));
1798
1799 /* Is it the same disk we already know, and nothing's changed? */
1800 if (h->drv[drv_index].raid_level != -1 &&
1801 ((memcmp(drvinfo->serial_no,
1802 h->drv[drv_index].serial_no, 16) == 0) &&
1803 drvinfo->block_size == h->drv[drv_index].block_size &&
1804 drvinfo->nr_blocks == h->drv[drv_index].nr_blocks &&
1805 drvinfo->heads == h->drv[drv_index].heads &&
1806 drvinfo->sectors == h->drv[drv_index].sectors &&
6ae5ce8e 1807 drvinfo->cylinders == h->drv[drv_index].cylinders))
a72da29b
MM		 1808 /* The disk is unchanged, nothing to update */
1809 goto freeret;
a72da29b 1810
6ae5ce8e
MM		 1811 /* If we get here it's not the same disk, or something's changed,
1812 * so we need to * deregister it, and re-register it, if it's not
1813 * in use.
1814 * If the disk already exists then deregister it before proceeding
1815 * (unless it's the first disk (for the controller node).
1816 */
a72da29b
MM		 1817 if (h->drv[drv_index].raid_level != -1 && drv_index != 0) {
1818 printk(KERN_WARNING "disk %d has changed.\n", drv_index);
ddd47442
MM		 1819 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
1820 h->drv[drv_index].busy_configuring = 1;
1821 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
e14ac670 1822
6ae5ce8e
MM		 1823 /* deregister_disk sets h->drv[drv_index].queue = NULL
1824 * which keeps the interrupt handler from starting
1825 * the queue.
1826 */
a0ea8622 1827 ret = deregister_disk(h, drv_index, 0);
ddd47442
MM		 1828 h->drv[drv_index].busy_configuring = 0;
1829 }
1830
1831 /* If the disk is in use return */
1832 if (ret)
a72da29b
MM		 1833 goto freeret;
1834
6ae5ce8e
MM		 1835 /* Save the new information from cciss_geometry_inquiry
1836 * and serial number inquiry.
1837 */
a72da29b
MM		 1838 h->drv[drv_index].block_size = drvinfo->block_size;
1839 h->drv[drv_index].nr_blocks = drvinfo->nr_blocks;
1840 h->drv[drv_index].heads = drvinfo->heads;
1841 h->drv[drv_index].sectors = drvinfo->sectors;
1842 h->drv[drv_index].cylinders = drvinfo->cylinders;
1843 h->drv[drv_index].raid_level = drvinfo->raid_level;
1844 memcpy(h->drv[drv_index].serial_no, drvinfo->serial_no, 16);
7fe06326
AP		 1845 memcpy(h->drv[drv_index].vendor, drvinfo->vendor, VENDOR_LEN + 1);
1846 memcpy(h->drv[drv_index].model, drvinfo->model, MODEL_LEN + 1);
1847 memcpy(h->drv[drv_index].rev, drvinfo->rev, REV_LEN + 1);
ddd47442
MM		 1848
1849 ++h->num_luns;
1850 disk = h->gendisk[drv_index];
1851 set_capacity(disk, h->drv[drv_index].nr_blocks);
1852
6ae5ce8e
MM		 1853 /* If it's not disk 0 (drv_index != 0)
1854 * or if it was disk 0, but there was previously
1855 * no actual corresponding configured logical drive
1856 * (raid_leve == -1) then we want to update the
1857 * logical drive's information.
1858 */
1859 if (drv_index || first_time)
1860 cciss_add_disk(h, disk, drv_index);
ddd47442 1861
6ae5ce8e 1862freeret:
ddd47442 1863 kfree(inq_buff);
a72da29b 1864 kfree(drvinfo);
ddd47442 1865 return;
6ae5ce8e 1866mem_msg:
ddd47442
MM		 1867 printk(KERN_ERR "cciss: out of memory\n");
1868 goto freeret;
1869}
1870
1871/* This function will find the first index of the controllers drive array
1872 * that has a -1 for the raid_level and will return that index. This is
1873 * where new drives will be added. If the index to be returned is greater
1874 * than the highest_lun index for the controller then highest_lun is set
1875 * to this new index. If there are no available indexes then -1 is returned.
eece695f
MM		 1876 * "controller_node" is used to know if this is a real logical drive, or just
1877 * the controller node, which determines if this counts towards highest_lun.
7c832835 1878 */
eece695f 1879static int cciss_find_free_drive_index(int ctlr, int controller_node)
ddd47442
MM		 1880{
1881 int i;
1882
7c832835
BH		 1883 for (i = 0; i < CISS_MAX_LUN; i++) {
1884 if (hba[ctlr]->drv[i].raid_level == -1) {
ddd47442 1885 if (i > hba[ctlr]->highest_lun)
eece695f
MM		 1886 if (!controller_node)
1887 hba[ctlr]->highest_lun = i;
ddd47442
MM		 1888 return i;
1889 }
1890 }
1891 return -1;
1892}
1893
6ae5ce8e
MM		 1894/* cciss_add_gendisk finds a free hba[]->drv structure
1895 * and allocates a gendisk if needed, and sets the lunid
1896 * in the drvinfo structure. It returns the index into
1897 * the ->drv[] array, or -1 if none are free.
1898 * is_controller_node indicates whether highest_lun should
1899 * count this disk, or if it's only being added to provide
1900 * a means to talk to the controller in case no logical
1901 * drives have yet been configured.
1902 */
eece695f 1903static int cciss_add_gendisk(ctlr_info_t *h, __u32 lunid, int controller_node)
6ae5ce8e
MM		 1904{
1905 int drv_index;
1906
eece695f 1907 drv_index = cciss_find_free_drive_index(h->ctlr, controller_node);
6ae5ce8e
MM		 1908 if (drv_index == -1)
1909 return -1;
1910 /*Check if the gendisk needs to be allocated */
1911 if (!h->gendisk[drv_index]) {
1912 h->gendisk[drv_index] =
1913 alloc_disk(1 << NWD_SHIFT);
1914 if (!h->gendisk[drv_index]) {
1915 printk(KERN_ERR "cciss%d: could not "
1916 "allocate a new disk %d\n",
1917 h->ctlr, drv_index);
1918 return -1;
1919 }
1920 }
1921 h->drv[drv_index].LunID = lunid;
097d0264
SC		 1922 if (h->drv[drv_index].dev == NULL) {
1923 if (cciss_create_ld_sysfs_entry(h, drv_index))
1924 goto err_free_disk;
1925 }
6ae5ce8e
MM		 1926 /* Don't need to mark this busy because nobody */
1927 /* else knows about this disk yet to contend */
1928 /* for access to it. */
1929 h->drv[drv_index].busy_configuring = 0;
1930 wmb();
1931 return drv_index;
7fe06326
AP		 1932
1933err_free_disk:
1934 put_disk(h->gendisk[drv_index]);
1935 h->gendisk[drv_index] = NULL;
1936 return -1;
6ae5ce8e
MM		 1937}
1938
1939/* This is for the special case of a controller which
1940 * has no logical drives. In this case, we still need
1941 * to register a disk so the controller can be accessed
1942 * by the Array Config Utility.
1943 */
1944static void cciss_add_controller_node(ctlr_info_t *h)
1945{
1946 struct gendisk *disk;
1947 int drv_index;
1948
1949 if (h->gendisk[0] != NULL) /* already did this? Then bail. */
1950 return;
1951
eece695f 1952 drv_index = cciss_add_gendisk(h, 0, 1);
6ae5ce8e
MM		 1953 if (drv_index == -1) {
1954 printk(KERN_WARNING "cciss%d: could not "
1955 "add disk 0.\n", h->ctlr);
1956 return;
1957 }
1958 h->drv[drv_index].block_size = 512;
1959 h->drv[drv_index].nr_blocks = 0;
1960 h->drv[drv_index].heads = 0;
1961 h->drv[drv_index].sectors = 0;
1962 h->drv[drv_index].cylinders = 0;
1963 h->drv[drv_index].raid_level = -1;
1964 memset(h->drv[drv_index].serial_no, 0, 16);
1965 disk = h->gendisk[drv_index];
1966 cciss_add_disk(h, disk, drv_index);
1967}
1968
ddd47442 1969/* This function will add and remove logical drives from the Logical
d14c4ab5 1970 * drive array of the controller and maintain persistency of ordering
ddd47442
MM		 1971 * so that mount points are preserved until the next reboot. This allows
1972 * for the removal of logical drives in the middle of the drive array
1973 * without a re-ordering of those drives.
1974 * INPUT
1975 * h = The controller to perform the operations on
7c832835 1976 */
6ae5ce8e 1977static int rebuild_lun_table(ctlr_info_t *h, int first_time)
1da177e4 1978{
ddd47442
MM		 1979 int ctlr = h->ctlr;
1980 int num_luns;
1981 ReportLunData_struct *ld_buff = NULL;
ddd47442
MM		 1982 int return_code;
1983 int listlength = 0;
1984 int i;
1985 int drv_found;
1986 int drv_index = 0;
1987 __u32 lunid = 0;
1da177e4 1988 unsigned long flags;
ddd47442 1989
6ae5ce8e
MM		 1990 if (!capable(CAP_SYS_RAWIO))
1991 return -EPERM;
1992
ddd47442
MM		 1993 /* Set busy_configuring flag for this operation */
1994 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
7c832835 1995 if (h->busy_configuring) {
ddd47442
MM		 1996 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
1997 return -EBUSY;
1998 }
1999 h->busy_configuring = 1;
a72da29b 2000 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
ddd47442 2001
a72da29b
MM		 2002 ld_buff = kzalloc(sizeof(ReportLunData_struct), GFP_KERNEL);
2003 if (ld_buff == NULL)
2004 goto mem_msg;
2005
2006 return_code = sendcmd_withirq(CISS_REPORT_LOG, ctlr, ld_buff,
b57695fe 2007 sizeof(ReportLunData_struct),
2008 0, CTLR_LUNID, TYPE_CMD);
ddd47442 2009
a72da29b
MM		 2010 if (return_code == IO_OK)
2011 listlength = be32_to_cpu(*(__be32 *) ld_buff->LUNListLength);
2012 else { /* reading number of logical volumes failed */
2013 printk(KERN_WARNING "cciss: report logical volume"
2014 " command failed\n");
2015 listlength = 0;
2016 goto freeret;
2017 }
2018
2019 num_luns = listlength / 8; /* 8 bytes per entry */
2020 if (num_luns > CISS_MAX_LUN) {
2021 num_luns = CISS_MAX_LUN;
2022 printk(KERN_WARNING "cciss: more luns configured"
2023 " on controller than can be handled by"
2024 " this driver.\n");
2025 }
2026
6ae5ce8e
MM		 2027 if (num_luns == 0)
2028 cciss_add_controller_node(h);
2029
2030 /* Compare controller drive array to driver's drive array
2031 * to see if any drives are missing on the controller due
2032 * to action of Array Config Utility (user deletes drive)
2033 * and deregister logical drives which have disappeared.
2034 */
a72da29b
MM		 2035 for (i = 0; i <= h->highest_lun; i++) {
2036 int j;
2037 drv_found = 0;
d8a0be6a
SC		 2038
2039 /* skip holes in the array from already deleted drives */
2040 if (h->drv[i].raid_level == -1)
2041 continue;
2042
a72da29b
MM		 2043 for (j = 0; j < num_luns; j++) {
2044 memcpy(&lunid, &ld_buff->LUN[j][0], 4);
2045 lunid = le32_to_cpu(lunid);
2046 if (h->drv[i].LunID == lunid) {
2047 drv_found = 1;
2048 break;
2049 }
2050 }
2051 if (!drv_found) {
2052 /* Deregister it from the OS, it's gone. */
2053 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
2054 h->drv[i].busy_configuring = 1;
2055 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
a0ea8622 2056 return_code = deregister_disk(h, i, 1);
a72da29b 2057 h->drv[i].busy_configuring = 0;
ddd47442 2058 }
a72da29b 2059 }
ddd47442 2060
a72da29b
MM		 2061 /* Compare controller drive array to driver's drive array.
2062 * Check for updates in the drive information and any new drives
2063 * on the controller due to ACU adding logical drives, or changing
2064 * a logical drive's size, etc. Reregister any new/changed drives
2065 */
2066 for (i = 0; i < num_luns; i++) {
2067 int j;
ddd47442 2068
a72da29b 2069 drv_found = 0;
ddd47442 2070
a72da29b
MM		 2071 memcpy(&lunid, &ld_buff->LUN[i][0], 4);
2072 lunid = le32_to_cpu(lunid);
ddd47442 2073
a72da29b
MM		 2074 /* Find if the LUN is already in the drive array
2075 * of the driver. If so then update its info
2076 * if not in use. If it does not exist then find
2077 * the first free index and add it.
2078 */
2079 for (j = 0; j <= h->highest_lun; j++) {
2080 if (h->drv[j].raid_level != -1 &&
2081 h->drv[j].LunID == lunid) {
2082 drv_index = j;
2083 drv_found = 1;
2084 break;
ddd47442 2085 }
a72da29b 2086 }
ddd47442 2087
a72da29b
MM		 2088 /* check if the drive was found already in the array */
2089 if (!drv_found) {
eece695f 2090 drv_index = cciss_add_gendisk(h, lunid, 0);
a72da29b
MM		 2091 if (drv_index == -1)
2092 goto freeret;
a72da29b 2093 }
6ae5ce8e 2094 cciss_update_drive_info(ctlr, drv_index, first_time);
a72da29b 2095 } /* end for */
ddd47442 2096
6ae5ce8e 2097freeret:
ddd47442
MM		 2098 kfree(ld_buff);
2099 h->busy_configuring = 0;
2100 /* We return -1 here to tell the ACU that we have registered/updated
2101 * all of the drives that we can and to keep it from calling us
2102 * additional times.
7c832835 2103 */
ddd47442 2104 return -1;
6ae5ce8e 2105mem_msg:
ddd47442 2106 printk(KERN_ERR "cciss: out of memory\n");
a72da29b 2107 h->busy_configuring = 0;
ddd47442
MM		 2108 goto freeret;
2109}
2110
2111/* This function will deregister the disk and it's queue from the
2112 * kernel. It must be called with the controller lock held and the
2113 * drv structures busy_configuring flag set. It's parameters are:
2114 *
2115 * disk = This is the disk to be deregistered
2116 * drv = This is the drive_info_struct associated with the disk to be
2117 * deregistered. It contains information about the disk used
2118 * by the driver.
2119 * clear_all = This flag determines whether or not the disk information
2120 * is going to be completely cleared out and the highest_lun
2121 * reset. Sometimes we want to clear out information about
d14c4ab5 2122 * the disk in preparation for re-adding it. In this case
ddd47442
MM		 2123 * the highest_lun should be left unchanged and the LunID
2124 * should not be cleared.
2125*/
a0ea8622 2126static int deregister_disk(ctlr_info_t *h, int drv_index,
ddd47442
MM		 2127 int clear_all)
2128{
799202cb 2129 int i;
a0ea8622
SC		 2130 struct gendisk *disk;
2131 drive_info_struct *drv;
1da177e4
LT		 2132
2133 if (!capable(CAP_SYS_RAWIO))
2134 return -EPERM;
2135
a0ea8622
SC		 2136 drv = &h->drv[drv_index];
2137 disk = h->gendisk[drv_index];
2138
1da177e4 2139 /* make sure logical volume is NOT is use */
7c832835
BH		 2140 if (clear_all || (h->gendisk[0] == disk)) {
2141 if (drv->usage_count > 1)
2142 return -EBUSY;
2143 } else if (drv->usage_count > 0)
2144 return -EBUSY;
1da177e4 2145
ddd47442
MM		 2146 /* invalidate the devices and deregister the disk. If it is disk
2147 * zero do not deregister it but just zero out it's values. This
2148 * allows us to delete disk zero but keep the controller registered.
7c832835
BH		 2149 */
2150 if (h->gendisk[0] != disk) {
5a9df732 2151 struct request_queue *q = disk->queue;
097d0264
SC		 2152 if (disk->flags & GENHD_FL_UP) {
2153 cciss_destroy_ld_sysfs_entry(h, drv_index);
5a9df732 2154 del_gendisk(disk);
097d0264 2155 }
5a9df732
AB		 2156 if (q) {
2157 blk_cleanup_queue(q);
2158 /* Set drv->queue to NULL so that we do not try
2159 * to call blk_start_queue on this queue in the
2160 * interrupt handler
2161 */
2162 drv->queue = NULL;
2163 }
2164 /* If clear_all is set then we are deleting the logical
2165 * drive, not just refreshing its info. For drives
2166 * other than disk 0 we will call put_disk. We do not
2167 * do this for disk 0 as we need it to be able to
2168 * configure the controller.
a72da29b 2169 */
5a9df732
AB		 2170 if (clear_all){
2171 /* This isn't pretty, but we need to find the
2172 * disk in our array and NULL our the pointer.
2173 * This is so that we will call alloc_disk if
2174 * this index is used again later.
a72da29b 2175 */
5a9df732 2176 for (i=0; i < CISS_MAX_LUN; i++){
a72da29b 2177 if (h->gendisk[i] == disk) {
5a9df732
AB		 2178 h->gendisk[i] = NULL;
2179 break;
799202cb 2180 }
799202cb 2181 }
5a9df732 2182 put_disk(disk);
ddd47442 2183 }
799202cb
MM		 2184 } else {
2185 set_capacity(disk, 0);
ddd47442
MM		 2186 }
2187
2188 --h->num_luns;
2189 /* zero out the disk size info */
2190 drv->nr_blocks = 0;
2191 drv->block_size = 0;
2192 drv->heads = 0;
2193 drv->sectors = 0;
2194 drv->cylinders = 0;
2195 drv->raid_level = -1; /* This can be used as a flag variable to
2196 * indicate that this element of the drive
2197 * array is free.
7c832835
BH		 2198 */
2199
2200 if (clear_all) {
2201 /* check to see if it was the last disk */
2202 if (drv == h->drv + h->highest_lun) {
2203 /* if so, find the new hightest lun */
2204 int i, newhighest = -1;
a72da29b 2205 for (i = 0; i <= h->highest_lun; i++) {
7c832835 2206 /* if the disk has size > 0, it is available */
ddd47442 2207 if (h->drv[i].heads)
7c832835
BH		 2208 newhighest = i;
2209 }
2210 h->highest_lun = newhighest;
1da177e4 2211 }
ddd47442 2212
7c832835 2213 drv->LunID = 0;
ddd47442 2214 }
e2019b58 2215 return 0;
1da177e4 2216}
ddd47442 2217
b57695fe 2218static int fill_cmd(CommandList_struct *c, __u8 cmd, int ctlr, void *buff,
2219 size_t size, __u8 page_code, unsigned char *scsi3addr,
2220 int cmd_type)
1da177e4 2221{
7c832835 2222 ctlr_info_t *h = hba[ctlr];
1da177e4
LT		 2223 u64bit buff_dma_handle;
2224 int status = IO_OK;
2225
2226 c->cmd_type = CMD_IOCTL_PEND;
2227 c->Header.ReplyQueue = 0;
7c832835 2228 if (buff != NULL) {
1da177e4 2229 c->Header.SGList = 1;
7c832835 2230 c->Header.SGTotal = 1;
1da177e4
LT		 2231 } else {
2232 c->Header.SGList = 0;
7c832835 2233 c->Header.SGTotal = 0;
1da177e4
LT		 2234 }
2235 c->Header.Tag.lower = c->busaddr;
b57695fe 2236 memcpy(c->Header.LUN.LunAddrBytes, scsi3addr, 8);
1da177e4
LT		 2237
2238 c->Request.Type.Type = cmd_type;
2239 if (cmd_type == TYPE_CMD) {
7c832835
BH		 2240 switch (cmd) {
2241 case CISS_INQUIRY:
1da177e4 2242 /* are we trying to read a vital product page */
7c832835 2243 if (page_code != 0) {
1da177e4
LT		 2244 c->Request.CDB[1] = 0x01;
2245 c->Request.CDB[2] = page_code;
2246 }
2247 c->Request.CDBLen = 6;
7c832835 2248 c->Request.Type.Attribute = ATTR_SIMPLE;
1da177e4
LT		 2249 c->Request.Type.Direction = XFER_READ;
2250 c->Request.Timeout = 0;
7c832835
BH		 2251 c->Request.CDB[0] = CISS_INQUIRY;
2252 c->Request.CDB[4] = size & 0xFF;
2253 break;
1da177e4
LT		 2254 case CISS_REPORT_LOG:
2255 case CISS_REPORT_PHYS:
7c832835 2256 /* Talking to controller so It's a physical command
1da177e4 2257 mode = 00 target = 0. Nothing to write.
7c832835 2258 */
1da177e4
LT		 2259 c->Request.CDBLen = 12;
2260 c->Request.Type.Attribute = ATTR_SIMPLE;
2261 c->Request.Type.Direction = XFER_READ;
2262 c->Request.Timeout = 0;
2263 c->Request.CDB[0] = cmd;
7c832835 2264 c->Request.CDB[6] = (size >> 24) & 0xFF; //MSB
1da177e4
LT		 2265 c->Request.CDB[7] = (size >> 16) & 0xFF;
2266 c->Request.CDB[8] = (size >> 8) & 0xFF;
2267 c->Request.CDB[9] = size & 0xFF;
2268 break;
2269
2270 case CCISS_READ_CAPACITY:
1da177e4
LT		 2271 c->Request.CDBLen = 10;
2272 c->Request.Type.Attribute = ATTR_SIMPLE;
2273 c->Request.Type.Direction = XFER_READ;
2274 c->Request.Timeout = 0;
2275 c->Request.CDB[0] = cmd;
7c832835 2276 break;
00988a35 2277 case CCISS_READ_CAPACITY_16:
00988a35
MMOD		 2278 c->Request.CDBLen = 16;
2279 c->Request.Type.Attribute = ATTR_SIMPLE;
2280 c->Request.Type.Direction = XFER_READ;
2281 c->Request.Timeout = 0;
2282 c->Request.CDB[0] = cmd;
2283 c->Request.CDB[1] = 0x10;
2284 c->Request.CDB[10] = (size >> 24) & 0xFF;
2285 c->Request.CDB[11] = (size >> 16) & 0xFF;
2286 c->Request.CDB[12] = (size >> 8) & 0xFF;
2287 c->Request.CDB[13] = size & 0xFF;
2288 c->Request.Timeout = 0;
2289 c->Request.CDB[0] = cmd;
2290 break;
1da177e4
LT		 2291 case CCISS_CACHE_FLUSH:
2292 c->Request.CDBLen = 12;
2293 c->Request.Type.Attribute = ATTR_SIMPLE;
2294 c->Request.Type.Direction = XFER_WRITE;
2295 c->Request.Timeout = 0;
2296 c->Request.CDB[0] = BMIC_WRITE;
2297 c->Request.CDB[6] = BMIC_CACHE_FLUSH;
7c832835 2298 break;
88f627ae 2299 case TEST_UNIT_READY:
88f627ae
SC		 2300 c->Request.CDBLen = 6;
2301 c->Request.Type.Attribute = ATTR_SIMPLE;
2302 c->Request.Type.Direction = XFER_NONE;
2303 c->Request.Timeout = 0;
2304 break;
1da177e4
LT		 2305 default:
2306 printk(KERN_WARNING
7c832835 2307 "cciss%d: Unknown Command 0x%c\n", ctlr, cmd);
e2019b58 2308 return IO_ERROR;
1da177e4
LT		 2309 }
2310 } else if (cmd_type == TYPE_MSG) {
2311 switch (cmd) {
7c832835 2312 case 0: /* ABORT message */
3da8b713 2313 c->Request.CDBLen = 12;
2314 c->Request.Type.Attribute = ATTR_SIMPLE;
2315 c->Request.Type.Direction = XFER_WRITE;
2316 c->Request.Timeout = 0;
7c832835
BH		 2317 c->Request.CDB[0] = cmd; /* abort */
2318 c->Request.CDB[1] = 0; /* abort a command */
3da8b713 2319 /* buff contains the tag of the command to abort */
2320 memcpy(&c->Request.CDB[4], buff, 8);
2321 break;
7c832835 2322 case 1: /* RESET message */
88f627ae 2323 c->Request.CDBLen = 16;
3da8b713 2324 c->Request.Type.Attribute = ATTR_SIMPLE;
88f627ae 2325 c->Request.Type.Direction = XFER_NONE;
3da8b713 2326 c->Request.Timeout = 0;
2327 memset(&c->Request.CDB[0], 0, sizeof(c->Request.CDB));
7c832835 2328 c->Request.CDB[0] = cmd; /* reset */
88f627ae 2329 c->Request.CDB[1] = 0x03; /* reset a target */
00988a35 2330 break;
1da177e4
LT		 2331 case 3: /* No-Op message */
2332 c->Request.CDBLen = 1;
2333 c->Request.Type.Attribute = ATTR_SIMPLE;
2334 c->Request.Type.Direction = XFER_WRITE;
2335 c->Request.Timeout = 0;
2336 c->Request.CDB[0] = cmd;
2337 break;
2338 default:
2339 printk(KERN_WARNING
7c832835 2340 "cciss%d: unknown message type %d\n", ctlr, cmd);
1da177e4
LT		 2341 return IO_ERROR;
2342 }
2343 } else {
2344 printk(KERN_WARNING
7c832835 2345 "cciss%d: unknown command type %d\n", ctlr, cmd_type);
1da177e4
LT		 2346 return IO_ERROR;
2347 }
2348 /* Fill in the scatter gather information */
2349 if (size > 0) {
2350 buff_dma_handle.val = (__u64) pci_map_single(h->pdev,
7c832835
BH		 2351 buff, size,
2352 PCI_DMA_BIDIRECTIONAL);
1da177e4
LT		 2353 c->SG[0].Addr.lower = buff_dma_handle.val32.lower;
2354 c->SG[0].Addr.upper = buff_dma_handle.val32.upper;
2355 c->SG[0].Len = size;
7c832835 2356 c->SG[0].Ext = 0; /* we are not chaining */
1da177e4
LT		 2357 }
2358 return status;
2359}
7c832835 2360
3c2ab402 2361static int check_target_status(ctlr_info_t *h, CommandList_struct *c)
2362{
2363 switch (c->err_info->ScsiStatus) {
2364 case SAM_STAT_GOOD:
2365 return IO_OK;
2366 case SAM_STAT_CHECK_CONDITION:
2367 switch (0xf & c->err_info->SenseInfo[2]) {
2368 case 0: return IO_OK; /* no sense */
2369 case 1: return IO_OK; /* recovered error */
2370 default:
2371 printk(KERN_WARNING "cciss%d: cmd 0x%02x "
2372 "check condition, sense key = 0x%02x\n",
2373 h->ctlr, c->Request.CDB[0],
2374 c->err_info->SenseInfo[2]);
2375 }
2376 break;
2377 default:
2378 printk(KERN_WARNING "cciss%d: cmd 0x%02x"
2379 "scsi status = 0x%02x\n", h->ctlr,
2380 c->Request.CDB[0], c->err_info->ScsiStatus);
2381 break;
2382 }
2383 return IO_ERROR;
2384}
2385
789a424a 2386static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2387{
5390cfc3 2388 int return_status = IO_OK;
7c832835 2389
789a424a 2390 if (c->err_info->CommandStatus == CMD_SUCCESS)
2391 return IO_OK;
5390cfc3 2392
2393 switch (c->err_info->CommandStatus) {
2394 case CMD_TARGET_STATUS:
3c2ab402 2395 return_status = check_target_status(h, c);
5390cfc3 2396 break;
2397 case CMD_DATA_UNDERRUN:
2398 case CMD_DATA_OVERRUN:
2399 /* expected for inquiry and report lun commands */
2400 break;
2401 case CMD_INVALID:
789a424a 2402 printk(KERN_WARNING "cciss: cmd 0x%02x is "
5390cfc3 2403 "reported invalid\n", c->Request.CDB[0]);
2404 return_status = IO_ERROR;
2405 break;
2406 case CMD_PROTOCOL_ERR:
2407 printk(KERN_WARNING "cciss: cmd 0x%02x has "
2408 "protocol error \n", c->Request.CDB[0]);
2409 return_status = IO_ERROR;
2410 break;
2411 case CMD_HARDWARE_ERR:
2412 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2413 " hardware error\n", c->Request.CDB[0]);
2414 return_status = IO_ERROR;
2415 break;
2416 case CMD_CONNECTION_LOST:
2417 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2418 "connection lost\n", c->Request.CDB[0]);
2419 return_status = IO_ERROR;
2420 break;
2421 case CMD_ABORTED:
2422 printk(KERN_WARNING "cciss: cmd 0x%02x was "
2423 "aborted\n", c->Request.CDB[0]);
2424 return_status = IO_ERROR;
2425 break;
2426 case CMD_ABORT_FAILED:
2427 printk(KERN_WARNING "cciss: cmd 0x%02x reports "
2428 "abort failed\n", c->Request.CDB[0]);
2429 return_status = IO_ERROR;
2430 break;
2431 case CMD_UNSOLICITED_ABORT:
2432 printk(KERN_WARNING
2433 "cciss%d: unsolicited abort 0x%02x\n", h->ctlr,
2434 c->Request.CDB[0]);
789a424a 2435 return_status = IO_NEEDS_RETRY;
5390cfc3 2436 break;
2437 default:
2438 printk(KERN_WARNING "cciss: cmd 0x%02x returned "
2439 "unknown status %x\n", c->Request.CDB[0],
2440 c->err_info->CommandStatus);
2441 return_status = IO_ERROR;
7c832835 2442 }
789a424a 2443 return return_status;
2444}
2445
2446static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
2447 int attempt_retry)
2448{
2449 DECLARE_COMPLETION_ONSTACK(wait);
2450 u64bit buff_dma_handle;
2451 unsigned long flags;
2452 int return_status = IO_OK;
2453
2454resend_cmd2:
2455 c->waiting = &wait;
2456 /* Put the request on the tail of the queue and send it */
2457 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
2458 addQ(&h->reqQ, c);
2459 h->Qdepth++;
2460 start_io(h);
2461 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
2462
2463 wait_for_completion(&wait);
2464
2465 if (c->err_info->CommandStatus == 0 || !attempt_retry)
2466 goto command_done;
2467
2468 return_status = process_sendcmd_error(h, c);
2469
2470 if (return_status == IO_NEEDS_RETRY &&
2471 c->retry_count < MAX_CMD_RETRIES) {
2472 printk(KERN_WARNING "cciss%d: retrying 0x%02x\n", h->ctlr,
2473 c->Request.CDB[0]);
2474 c->retry_count++;
2475 /* erase the old error information */
2476 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2477 return_status = IO_OK;
2478 INIT_COMPLETION(wait);
2479 goto resend_cmd2;
2480 }
5390cfc3 2481
2482command_done:
1da177e4 2483 /* unlock the buffers from DMA */
bb2a37bf
MM		 2484 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2485 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
7c832835
BH		 2486 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
2487 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
5390cfc3 2488 return return_status;
2489}
2490
b57695fe 2491static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
2492 __u8 page_code, unsigned char scsi3addr[],
2493 int cmd_type)
5390cfc3 2494{
2495 ctlr_info_t *h = hba[ctlr];
2496 CommandList_struct *c;
2497 int return_status;
2498
2499 c = cmd_alloc(h, 0);
2500 if (!c)
2501 return -ENOMEM;
b57695fe 2502 return_status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2503 scsi3addr, cmd_type);
5390cfc3 2504 if (return_status == IO_OK)
789a424a 2505 return_status = sendcmd_withirq_core(h, c, 1);
2506
1da177e4 2507 cmd_free(h, c, 0);
7c832835 2508 return return_status;
1da177e4 2509}
7c832835 2510
1da177e4 2511static void cciss_geometry_inquiry(int ctlr, int logvol,
00988a35 2512 int withirq, sector_t total_size,
7c832835
BH		 2513 unsigned int block_size,
2514 InquiryData_struct *inq_buff,
2515 drive_info_struct *drv)
1da177e4
LT		 2516{
2517 int return_code;
00988a35 2518 unsigned long t;
b57695fe 2519 unsigned char scsi3addr[8];
00988a35 2520
1da177e4 2521 memset(inq_buff, 0, sizeof(InquiryData_struct));
b57695fe 2522 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2523 if (withirq)
2524 return_code = sendcmd_withirq(CISS_INQUIRY, ctlr,
b57695fe 2525 inq_buff, sizeof(*inq_buff),
2526 0xC1, scsi3addr, TYPE_CMD);
1da177e4
LT		 2527 else
2528 return_code = sendcmd(CISS_INQUIRY, ctlr, inq_buff,
b57695fe 2529 sizeof(*inq_buff), 0xC1, scsi3addr,
7c832835 2530 TYPE_CMD);
1da177e4 2531 if (return_code == IO_OK) {
7c832835 2532 if (inq_buff->data_byte[8] == 0xFF) {
1da177e4 2533 printk(KERN_WARNING
7c832835
BH		 2534 "cciss: reading geometry failed, volume "
2535 "does not support reading geometry\n");
1da177e4 2536 drv->heads = 255;
7c832835 2537 drv->sectors = 32; // Sectors per track
7f42d3b8 2538 drv->cylinders = total_size + 1;
89f97ad1 2539 drv->raid_level = RAID_UNKNOWN;
1da177e4 2540 } else {
1da177e4
LT		 2541 drv->heads = inq_buff->data_byte[6];
2542 drv->sectors = inq_buff->data_byte[7];
2543 drv->cylinders = (inq_buff->data_byte[4] & 0xff) << 8;
2544 drv->cylinders += inq_buff->data_byte[5];
2545 drv->raid_level = inq_buff->data_byte[8];
3f7705ea
MW		 2546 }
2547 drv->block_size = block_size;
97c06978 2548 drv->nr_blocks = total_size + 1;
3f7705ea
MW		 2549 t = drv->heads * drv->sectors;
2550 if (t > 1) {
97c06978
MMOD		 2551 sector_t real_size = total_size + 1;
2552 unsigned long rem = sector_div(real_size, t);
3f7705ea 2553 if (rem)
97c06978
MMOD		 2554 real_size++;
2555 drv->cylinders = real_size;
1da177e4 2556 }
7c832835 2557 } else { /* Get geometry failed */
1da177e4
LT		 2558 printk(KERN_WARNING "cciss: reading geometry failed\n");
2559 }
cc088d10 2560 printk(KERN_INFO " heads=%d, sectors=%d, cylinders=%d\n\n",
7c832835 2561 drv->heads, drv->sectors, drv->cylinders);
1da177e4 2562}
7c832835 2563
1da177e4 2564static void
00988a35 2565cciss_read_capacity(int ctlr, int logvol, int withirq, sector_t *total_size,
7c832835 2566 unsigned int *block_size)
1da177e4 2567{
00988a35 2568 ReadCapdata_struct *buf;
1da177e4 2569 int return_code;
b57695fe 2570 unsigned char scsi3addr[8];
1aebe187
MK		 2571
2572 buf = kzalloc(sizeof(ReadCapdata_struct), GFP_KERNEL);
2573 if (!buf) {
00988a35
MMOD		 2574 printk(KERN_WARNING "cciss: out of memory\n");
2575 return;
2576 }
1aebe187 2577
b57695fe 2578 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2579 if (withirq)
2580 return_code = sendcmd_withirq(CCISS_READ_CAPACITY,
00988a35 2581 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2582 0, scsi3addr, TYPE_CMD);
1da177e4
LT		 2583 else
2584 return_code = sendcmd(CCISS_READ_CAPACITY,
00988a35 2585 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2586 0, scsi3addr, TYPE_CMD);
1da177e4 2587 if (return_code == IO_OK) {
4c1f2b31
AV		 2588 *total_size = be32_to_cpu(*(__be32 *) buf->total_size);
2589 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
7c832835 2590 } else { /* read capacity command failed */
1da177e4
LT		 2591 printk(KERN_WARNING "cciss: read capacity failed\n");
2592 *total_size = 0;
2593 *block_size = BLOCK_SIZE;
2594 }
97c06978 2595 if (*total_size != 0)
7b92aadf 2596 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2597 (unsigned long long)*total_size+1, *block_size);
00988a35 2598 kfree(buf);
00988a35
MMOD		 2599}
2600
2601static void
2602cciss_read_capacity_16(int ctlr, int logvol, int withirq, sector_t *total_size, unsigned int *block_size)
2603{
2604 ReadCapdata_struct_16 *buf;
2605 int return_code;
b57695fe 2606 unsigned char scsi3addr[8];
1aebe187
MK		 2607
2608 buf = kzalloc(sizeof(ReadCapdata_struct_16), GFP_KERNEL);
2609 if (!buf) {
00988a35
MMOD		 2610 printk(KERN_WARNING "cciss: out of memory\n");
2611 return;
2612 }
1aebe187 2613
b57695fe 2614 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
00988a35
MMOD		 2615 if (withirq) {
2616 return_code = sendcmd_withirq(CCISS_READ_CAPACITY_16,
2617 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2618 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2619 }
2620 else {
2621 return_code = sendcmd(CCISS_READ_CAPACITY_16,
2622 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2623 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2624 }
2625 if (return_code == IO_OK) {
4c1f2b31
AV		 2626 *total_size = be64_to_cpu(*(__be64 *) buf->total_size);
2627 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
00988a35
MMOD		 2628 } else { /* read capacity command failed */
2629 printk(KERN_WARNING "cciss: read capacity failed\n");
2630 *total_size = 0;
2631 *block_size = BLOCK_SIZE;
2632 }
7b92aadf 2633 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2634 (unsigned long long)*total_size+1, *block_size);
00988a35 2635 kfree(buf);
1da177e4
LT		 2636}
2637
1da177e4
LT		 2638static int cciss_revalidate(struct gendisk *disk)
2639{
2640 ctlr_info_t *h = get_host(disk);
2641 drive_info_struct *drv = get_drv(disk);
2642 int logvol;
7c832835 2643 int FOUND = 0;
1da177e4 2644 unsigned int block_size;
00988a35 2645 sector_t total_size;
1da177e4
LT		 2646 InquiryData_struct *inq_buff = NULL;
2647
7c832835
BH		 2648 for (logvol = 0; logvol < CISS_MAX_LUN; logvol++) {
2649 if (h->drv[logvol].LunID == drv->LunID) {
2650 FOUND = 1;
1da177e4
LT		 2651 break;
2652 }
2653 }
2654
7c832835
BH		 2655 if (!FOUND)
2656 return 1;
1da177e4 2657
7c832835
BH		 2658 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
2659 if (inq_buff == NULL) {
2660 printk(KERN_WARNING "cciss: out of memory\n");
7c832835
BH		 2661 return 1;
2662 }
00988a35
MMOD		 2663 if (h->cciss_read == CCISS_READ_10) {
2664 cciss_read_capacity(h->ctlr, logvol, 1,
2665 &total_size, &block_size);
2666 } else {
2667 cciss_read_capacity_16(h->ctlr, logvol, 1,
2668 &total_size, &block_size);
2669 }
7c832835
BH		 2670 cciss_geometry_inquiry(h->ctlr, logvol, 1, total_size, block_size,
2671 inq_buff, drv);
1da177e4 2672
e1defc4f 2673 blk_queue_logical_block_size(drv->queue, drv->block_size);
1da177e4
LT		 2674 set_capacity(disk, drv->nr_blocks);
2675
1da177e4
LT		 2676 kfree(inq_buff);
2677 return 0;
2678}
2679
2680/*
2681 * Wait polling for a command to complete.
2682 * The memory mapped FIFO is polled for the completion.
2683 * Used only at init time, interrupts from the HBA are disabled.
2684 */
2685static unsigned long pollcomplete(int ctlr)
2686{
2687 unsigned long done;
2688 int i;
2689
2690 /* Wait (up to 20 seconds) for a command to complete */
2691
2692 for (i = 20 * HZ; i > 0; i--) {
2693 done = hba[ctlr]->access.command_completed(hba[ctlr]);
86e84862
NA		 2694 if (done == FIFO_EMPTY)
2695 schedule_timeout_uninterruptible(1);
2696 else
e2019b58 2697 return done;
1da177e4
LT		 2698 }
2699 /* Invalid address to tell caller we ran out of time */
2700 return 1;
2701}
3da8b713 2702
4a4b2d76
SC		 2703/* Send command c to controller h and poll for it to complete.
2704 * Turns interrupts off on the board. Used at driver init time
2705 * and during SCSI error recovery.
1da177e4 2706 */
4a4b2d76 2707static int sendcmd_core(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2708{
1da177e4
LT		 2709 int i;
2710 unsigned long complete;
4a4b2d76 2711 int status = IO_ERROR;
1da177e4 2712 u64bit buff_dma_handle;
1da177e4 2713
4a4b2d76
SC		 2714resend_cmd1:
2715
2716 /* Disable interrupt on the board. */
2717 h->access.set_intr_mask(h, CCISS_INTR_OFF);
7c832835 2718
1da177e4 2719 /* Make sure there is room in the command FIFO */
7c832835 2720 /* Actually it should be completely empty at this time */
3da8b713 2721 /* unless we are in here doing error handling for the scsi */
2722 /* tape side of the driver. */
7c832835 2723 for (i = 200000; i > 0; i--) {
1da177e4 2724 /* if fifo isn't full go */
4a4b2d76 2725 if (!(h->access.fifo_full(h)))
7c832835 2726 break;
7c832835
BH		 2727 udelay(10);
2728 printk(KERN_WARNING "cciss cciss%d: SendCmd FIFO full,"
4a4b2d76 2729 " waiting!\n", h->ctlr);
7c832835 2730 }
4a4b2d76 2731 h->access.submit_command(h, c); /* Send the cmd */
3da8b713 2732 do {
4a4b2d76 2733 complete = pollcomplete(h->ctlr);
1da177e4
LT		 2734
2735#ifdef CCISS_DEBUG
3da8b713 2736 printk(KERN_DEBUG "cciss: command completed\n");
7c832835 2737#endif /* CCISS_DEBUG */
1da177e4 2738
3da8b713 2739 if (complete == 1) {
7c832835
BH		 2740 printk(KERN_WARNING
2741 "cciss cciss%d: SendCmd Timeout out, "
4a4b2d76 2742 "No command list address returned!\n", h->ctlr);
3da8b713 2743 status = IO_ERROR;
3da8b713 2744 break;
2745 }
2746
72f9f132 2747 /* Make sure it's the command we're expecting. */
4a4b2d76 2748 if ((complete & ~CISS_ERROR_BIT) != c->busaddr) {
72f9f132 2749 printk(KERN_WARNING "cciss%d: Unexpected command "
2750 "completion.\n", h->ctlr);
4a4b2d76
SC		 2751 continue;
2752 }
2753
2754 /* It is our command. If no error, we're done. */
2755 if (!(complete & CISS_ERROR_BIT)) {
2756 status = IO_OK;
2757 break;
2758 }
2759
2760 /* There is an error... */
2761
2762 /* if data overrun or underun on Report command ignore it */
2763 if (((c->Request.CDB[0] == CISS_REPORT_LOG) ||
2764 (c->Request.CDB[0] == CISS_REPORT_PHYS) ||
2765 (c->Request.CDB[0] == CISS_INQUIRY)) &&
2766 ((c->err_info->CommandStatus == CMD_DATA_OVERRUN) ||
2767 (c->err_info->CommandStatus == CMD_DATA_UNDERRUN))) {
2768 complete = c->busaddr;
2769 status = IO_OK;
2770 break;
1da177e4 2771 }
4a4b2d76
SC		 2772
2773 if (c->err_info->CommandStatus == CMD_UNSOLICITED_ABORT) {
2774 printk(KERN_WARNING "cciss%d: unsolicited abort %p\n",
2775 h->ctlr, c);
2776 if (c->retry_count < MAX_CMD_RETRIES) {
2777 printk(KERN_WARNING "cciss%d: retrying %p\n",
2778 h->ctlr, c);
2779 c->retry_count++;
2780 /* erase the old error information */
2781 memset(c->err_info, 0, sizeof(c->err_info));
2782 goto resend_cmd1;
3da8b713 2783 }
4a4b2d76
SC		 2784 printk(KERN_WARNING "cciss%d: retried %p too many "
2785 "times\n", h->ctlr, c);
2786 status = IO_ERROR;
3c2ab402 2787 break;
4a4b2d76
SC		 2788 }
2789
2790 if (c->err_info->CommandStatus == CMD_UNABORTABLE) {
2791 printk(KERN_WARNING "cciss%d: command could not be "
2792 "aborted.\n", h->ctlr);
2793 status = IO_ERROR;
3c2ab402 2794 break;
4a4b2d76
SC		 2795 }
2796
4a4b2d76 2797 if (c->err_info->CommandStatus == CMD_TARGET_STATUS) {
3c2ab402 2798 status = check_target_status(h, c);
2799 break;
4a4b2d76
SC		 2800 }
2801
3c2ab402 2802 printk(KERN_WARNING "cciss%d: sendcmd error\n", h->ctlr);
2803 printk(KERN_WARNING "cmd = 0x%02x, CommandStatus = 0x%02x\n",
2804 c->Request.CDB[0], c->err_info->CommandStatus);
4a4b2d76 2805 status = IO_ERROR;
3c2ab402 2806 break;
4a4b2d76
SC		 2807
2808 } while (1);
7c832835 2809
1da177e4 2810 /* unlock the data buffer from DMA */
bb2a37bf
MM		 2811 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2812 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
4a4b2d76 2813 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
7c832835 2814 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
4a4b2d76
SC		 2815 return status;
2816}
2817
2818/*
2819 * Send a command to the controller, and wait for it to complete.
2820 * Used at init time, and during SCSI error recovery.
2821 */
2822static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
4a4b2d76
SC		 2823 __u8 page_code, unsigned char *scsi3addr, int cmd_type)
2824{
2825 CommandList_struct *c;
2826 int status;
2827
2828 c = cmd_alloc(hba[ctlr], 1);
2829 if (!c) {
2830 printk(KERN_WARNING "cciss: unable to get memory");
2831 return IO_ERROR;
2832 }
b57695fe 2833 status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2834 scsi3addr, cmd_type);
4a4b2d76
SC		 2835 if (status == IO_OK)
2836 status = sendcmd_core(hba[ctlr], c);
2837 cmd_free(hba[ctlr], c, 1);
e2019b58 2838 return status;
7c832835
BH		 2839}
2840
1da177e4
LT		 2841/*
2842 * Map (physical) PCI mem into (virtual) kernel space
2843 */
2844static void __iomem *remap_pci_mem(ulong base, ulong size)
2845{
7c832835
BH		 2846 ulong page_base = ((ulong) base) & PAGE_MASK;
2847 ulong page_offs = ((ulong) base) - page_base;
2848 void __iomem *page_remapped = ioremap(page_base, page_offs + size);
1da177e4 2849
7c832835 2850 return page_remapped ? (page_remapped + page_offs) : NULL;
1da177e4
LT		 2851}
2852
7c832835
BH		 2853/*
2854 * Takes jobs of the Q and sends them to the hardware, then puts it on
2855 * the Q to wait for completion.
2856 */
2857static void start_io(ctlr_info_t *h)
1da177e4
LT		 2858{
2859 CommandList_struct *c;
7c832835 2860
8a3173de
JA		 2861 while (!hlist_empty(&h->reqQ)) {
2862 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
1da177e4
LT		 2863 /* can't do anything if fifo is full */
2864 if ((h->access.fifo_full(h))) {
2865 printk(KERN_WARNING "cciss: fifo full\n");
2866 break;
2867 }
2868
7c832835 2869 /* Get the first entry from the Request Q */
8a3173de 2870 removeQ(c);
1da177e4 2871 h->Qdepth--;
7c832835
BH		 2872
2873 /* Tell the controller execute command */
1da177e4 2874 h->access.submit_command(h, c);
7c832835
BH		 2875
2876 /* Put job onto the completed Q */
8a3173de 2877 addQ(&h->cmpQ, c);
1da177e4
LT		 2878 }
2879}
7c832835 2880
1da177e4
LT		 2881/* Assumes that CCISS_LOCK(h->ctlr) is held. */
2882/* Zeros out the error record and then resends the command back */
2883/* to the controller */
7c832835 2884static inline void resend_cciss_cmd(ctlr_info_t *h, CommandList_struct *c)
1da177e4
LT		 2885{
2886 /* erase the old error information */
2887 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2888
2889 /* add it to software queue and then send it to the controller */
8a3173de 2890 addQ(&h->reqQ, c);
1da177e4 2891 h->Qdepth++;
7c832835 2892 if (h->Qdepth > h->maxQsinceinit)
1da177e4
LT		 2893 h->maxQsinceinit = h->Qdepth;
2894
2895 start_io(h);
2896}
a9925a06 2897
1a614f50
SC		 2898static inline unsigned int make_status_bytes(unsigned int scsi_status_byte,
2899 unsigned int msg_byte, unsigned int host_byte,
2900 unsigned int driver_byte)
2901{
2902 /* inverse of macros in scsi.h */
2903 return (scsi_status_byte & 0xff) |
2904 ((msg_byte & 0xff) << 8) |
2905 ((host_byte & 0xff) << 16) |
2906 ((driver_byte & 0xff) << 24);
2907}
2908
0a9279cc
MM		 2909static inline int evaluate_target_status(ctlr_info_t *h,
2910 CommandList_struct *cmd, int *retry_cmd)
03bbfee5
MMOD		 2911{
2912 unsigned char sense_key;
1a614f50
SC		 2913 unsigned char status_byte, msg_byte, host_byte, driver_byte;
2914 int error_value;
2915
0a9279cc 2916 *retry_cmd = 0;
1a614f50
SC		 2917 /* If we get in here, it means we got "target status", that is, scsi status */
2918 status_byte = cmd->err_info->ScsiStatus;
2919 driver_byte = DRIVER_OK;
2920 msg_byte = cmd->err_info->CommandStatus; /* correct? seems too device specific */
2921
2922 if (blk_pc_request(cmd->rq))
2923 host_byte = DID_PASSTHROUGH;
2924 else
2925 host_byte = DID_OK;
2926
2927 error_value = make_status_bytes(status_byte, msg_byte,
2928 host_byte, driver_byte);
03bbfee5 2929
1a614f50 2930 if (cmd->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION) {
03bbfee5
MMOD		 2931 if (!blk_pc_request(cmd->rq))
2932 printk(KERN_WARNING "cciss: cmd %p "
2933 "has SCSI Status 0x%x\n",
2934 cmd, cmd->err_info->ScsiStatus);
1a614f50 2935 return error_value;
03bbfee5
MMOD		 2936 }
2937
2938 /* check the sense key */
2939 sense_key = 0xf & cmd->err_info->SenseInfo[2];
2940 /* no status or recovered error */
1a614f50
SC		 2941 if (((sense_key == 0x0) || (sense_key == 0x1)) && !blk_pc_request(cmd->rq))
2942 error_value = 0;
03bbfee5 2943
0a9279cc
MM		 2944 if (check_for_unit_attention(h, cmd)) {
2945 *retry_cmd = !blk_pc_request(cmd->rq);
2946 return 0;
2947 }
2948
03bbfee5 2949 if (!blk_pc_request(cmd->rq)) { /* Not SG_IO or similar? */
1a614f50 2950 if (error_value != 0)
03bbfee5
MMOD		 2951 printk(KERN_WARNING "cciss: cmd %p has CHECK CONDITION"
2952 " sense key = 0x%x\n", cmd, sense_key);
1a614f50 2953 return error_value;
03bbfee5
MMOD		 2954 }
2955
2956 /* SG_IO or similar, copy sense data back */
2957 if (cmd->rq->sense) {
2958 if (cmd->rq->sense_len > cmd->err_info->SenseLen)
2959 cmd->rq->sense_len = cmd->err_info->SenseLen;
2960 memcpy(cmd->rq->sense, cmd->err_info->SenseInfo,
2961 cmd->rq->sense_len);
2962 } else
2963 cmd->rq->sense_len = 0;
2964
1a614f50 2965 return error_value;
03bbfee5
MMOD		 2966}
2967
7c832835 2968/* checks the status of the job and calls complete buffers to mark all
a9925a06
JA		 2969 * buffers for the completed job. Note that this function does not need
2970 * to hold the hba/queue lock.
7c832835
BH		 2971 */
2972static inline void complete_command(ctlr_info_t *h, CommandList_struct *cmd,
2973 int timeout)
1da177e4 2974{
1da177e4 2975 int retry_cmd = 0;
198b7660
MMOD		 2976 struct request *rq = cmd->rq;
2977
2978 rq->errors = 0;
7c832835 2979
1da177e4 2980 if (timeout)
1a614f50 2981 rq->errors = make_status_bytes(0, 0, 0, DRIVER_TIMEOUT);
1da177e4 2982
d38ae168
MMOD		 2983 if (cmd->err_info->CommandStatus == 0) /* no error has occurred */
2984 goto after_error_processing;
7c832835 2985
d38ae168 2986 switch (cmd->err_info->CommandStatus) {
d38ae168 2987 case CMD_TARGET_STATUS:
0a9279cc 2988 rq->errors = evaluate_target_status(h, cmd, &retry_cmd);
d38ae168
MMOD		 2989 break;
2990 case CMD_DATA_UNDERRUN:
03bbfee5
MMOD		 2991 if (blk_fs_request(cmd->rq)) {
2992 printk(KERN_WARNING "cciss: cmd %p has"
2993 " completed with data underrun "
2994 "reported\n", cmd);
c3a4d78c 2995 cmd->rq->resid_len = cmd->err_info->ResidualCnt;
03bbfee5 2996 }
d38ae168
MMOD		 2997 break;
2998 case CMD_DATA_OVERRUN:
03bbfee5
MMOD		 2999 if (blk_fs_request(cmd->rq))
3000 printk(KERN_WARNING "cciss: cmd %p has"
3001 " completed with data overrun "
3002 "reported\n", cmd);
d38ae168
MMOD		 3003 break;
3004 case CMD_INVALID:
3005 printk(KERN_WARNING "cciss: cmd %p is "
3006 "reported invalid\n", cmd);
1a614f50
SC		 3007 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3008 cmd->err_info->CommandStatus, DRIVER_OK,
3009 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3010 break;
3011 case CMD_PROTOCOL_ERR:
3012 printk(KERN_WARNING "cciss: cmd %p has "
3013 "protocol error \n", cmd);
1a614f50
SC		 3014 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3015 cmd->err_info->CommandStatus, DRIVER_OK,
3016 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3017 break;
3018 case CMD_HARDWARE_ERR:
3019 printk(KERN_WARNING "cciss: cmd %p had "
3020 " hardware error\n", cmd);
1a614f50
SC		 3021 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3022 cmd->err_info->CommandStatus, DRIVER_OK,
3023 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3024 break;
3025 case CMD_CONNECTION_LOST:
3026 printk(KERN_WARNING "cciss: cmd %p had "
3027 "connection lost\n", cmd);
1a614f50
SC		 3028 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3029 cmd->err_info->CommandStatus, DRIVER_OK,
3030 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3031 break;
3032 case CMD_ABORTED:
3033 printk(KERN_WARNING "cciss: cmd %p was "
3034 "aborted\n", cmd);
1a614f50
SC		 3035 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3036 cmd->err_info->CommandStatus, DRIVER_OK,
3037 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 3038 break;
3039 case CMD_ABORT_FAILED:
3040 printk(KERN_WARNING "cciss: cmd %p reports "
3041 "abort failed\n", cmd);
1a614f50
SC		 3042 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3043 cmd->err_info->CommandStatus, DRIVER_OK,
3044 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3045 break;
3046 case CMD_UNSOLICITED_ABORT:
3047 printk(KERN_WARNING "cciss%d: unsolicited "
3048 "abort %p\n", h->ctlr, cmd);
3049 if (cmd->retry_count < MAX_CMD_RETRIES) {
3050 retry_cmd = 1;
3051 printk(KERN_WARNING
3052 "cciss%d: retrying %p\n", h->ctlr, cmd);
3053 cmd->retry_count++;
3054 } else
3055 printk(KERN_WARNING
3056 "cciss%d: %p retried too "
3057 "many times\n", h->ctlr, cmd);
1a614f50
SC		 3058 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3059 cmd->err_info->CommandStatus, DRIVER_OK,
3060 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 3061 break;
3062 case CMD_TIMEOUT:
3063 printk(KERN_WARNING "cciss: cmd %p timedout\n", cmd);
1a614f50
SC		 3064 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3065 cmd->err_info->CommandStatus, DRIVER_OK,
3066 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 3067 break;
3068 default:
3069 printk(KERN_WARNING "cciss: cmd %p returned "
3070 "unknown status %x\n", cmd,
3071 cmd->err_info->CommandStatus);
1a614f50
SC		 3072 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3073 cmd->err_info->CommandStatus, DRIVER_OK,
3074 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
1da177e4 3075 }
d38ae168
MMOD		 3076
3077after_error_processing:
3078
1da177e4 3079 /* We need to return this command */
7c832835
BH		 3080 if (retry_cmd) {
3081 resend_cciss_cmd(h, cmd);
1da177e4 3082 return;
7c832835 3083 }
03bbfee5 3084 cmd->rq->completion_data = cmd;
a9925a06 3085 blk_complete_request(cmd->rq);
1da177e4
LT		 3086}
3087
7c832835
BH		 3088/*
3089 * Get a request and submit it to the controller.
1da177e4 3090 */
165125e1 3091static void do_cciss_request(struct request_queue *q)
1da177e4 3092{
7c832835 3093 ctlr_info_t *h = q->queuedata;
1da177e4 3094 CommandList_struct *c;
00988a35
MMOD		 3095 sector_t start_blk;
3096 int seg;
1da177e4
LT		 3097 struct request *creq;
3098 u64bit temp64;
3099 struct scatterlist tmp_sg[MAXSGENTRIES];
3100 drive_info_struct *drv;
3101 int i, dir;
3102
3103 /* We call start_io here in case there is a command waiting on the
3104 * queue that has not been sent.
7c832835 3105 */
1da177e4
LT		 3106 if (blk_queue_plugged(q))
3107 goto startio;
3108
7c832835 3109 queue:
9934c8c0 3110 creq = blk_peek_request(q);
1da177e4
LT		 3111 if (!creq)
3112 goto startio;
3113
089fe1b2 3114 BUG_ON(creq->nr_phys_segments > MAXSGENTRIES);
1da177e4 3115
7c832835 3116 if ((c = cmd_alloc(h, 1)) == NULL)
1da177e4
LT		 3117 goto full;
3118
9934c8c0 3119 blk_start_request(creq);
1da177e4
LT		 3120
3121 spin_unlock_irq(q->queue_lock);
3122
3123 c->cmd_type = CMD_RWREQ;
3124 c->rq = creq;
7c832835
BH		 3125
3126 /* fill in the request */
1da177e4 3127 drv = creq->rq_disk->private_data;
7c832835 3128 c->Header.ReplyQueue = 0; // unused in simple mode
33079b21
MM		 3129 /* got command from pool, so use the command block index instead */
3130 /* for direct lookups. */
3131 /* The first 2 bits are reserved for controller error reporting. */
3132 c->Header.Tag.lower = (c->cmdindex << 3);
7c832835
BH		 3133 c->Header.Tag.lower |= 0x04; /* flag for direct lookup. */
3134 c->Header.LUN.LogDev.VolId = drv->LunID;
1da177e4 3135 c->Header.LUN.LogDev.Mode = 1;
7c832835
BH		 3136 c->Request.CDBLen = 10; // 12 byte commands not in FW yet;
3137 c->Request.Type.Type = TYPE_CMD; // It is a command.
3138 c->Request.Type.Attribute = ATTR_SIMPLE;
3139 c->Request.Type.Direction =
a52de245 3140 (rq_data_dir(creq) == READ) ? XFER_READ : XFER_WRITE;
7c832835
BH		 3141 c->Request.Timeout = 0; // Don't time out
3142 c->Request.CDB[0] =
00988a35 3143 (rq_data_dir(creq) == READ) ? h->cciss_read : h->cciss_write;
83096ebf 3144 start_blk = blk_rq_pos(creq);
1da177e4 3145#ifdef CCISS_DEBUG
83096ebf
TH		 3146 printk(KERN_DEBUG "ciss: sector =%d nr_sectors=%d\n",
3147 (int)blk_rq_pos(creq), (int)blk_rq_sectors(creq));
7c832835 3148#endif /* CCISS_DEBUG */
1da177e4 3149
45711f1a 3150 sg_init_table(tmp_sg, MAXSGENTRIES);
1da177e4
LT		 3151 seg = blk_rq_map_sg(q, creq, tmp_sg);
3152
7c832835 3153 /* get the DMA records for the setup */
1da177e4
LT		 3154 if (c->Request.Type.Direction == XFER_READ)
3155 dir = PCI_DMA_FROMDEVICE;
3156 else
3157 dir = PCI_DMA_TODEVICE;
3158
7c832835 3159 for (i = 0; i < seg; i++) {
1da177e4 3160 c->SG[i].Len = tmp_sg[i].length;
45711f1a 3161 temp64.val = (__u64) pci_map_page(h->pdev, sg_page(&tmp_sg[i]),
7c832835
BH		 3162 tmp_sg[i].offset,
3163 tmp_sg[i].length, dir);
1da177e4 3164 c->SG[i].Addr.lower = temp64.val32.lower;
7c832835
BH		 3165 c->SG[i].Addr.upper = temp64.val32.upper;
3166 c->SG[i].Ext = 0; // we are not chaining
1da177e4 3167 }
7c832835
BH		 3168 /* track how many SG entries we are using */
3169 if (seg > h->maxSG)
3170 h->maxSG = seg;
1da177e4
LT		 3171
3172#ifdef CCISS_DEBUG
83096ebf
TH		 3173 printk(KERN_DEBUG "cciss: Submitting %u sectors in %d segments\n",
3174 blk_rq_sectors(creq), seg);
7c832835 3175#endif /* CCISS_DEBUG */
1da177e4
LT		 3176
3177 c->Header.SGList = c->Header.SGTotal = seg;
03bbfee5
MMOD		 3178 if (likely(blk_fs_request(creq))) {
3179 if(h->cciss_read == CCISS_READ_10) {
3180 c->Request.CDB[1] = 0;
3181 c->Request.CDB[2] = (start_blk >> 24) & 0xff; //MSB
3182 c->Request.CDB[3] = (start_blk >> 16) & 0xff;
3183 c->Request.CDB[4] = (start_blk >> 8) & 0xff;
3184 c->Request.CDB[5] = start_blk & 0xff;
3185 c->Request.CDB[6] = 0; // (sect >> 24) & 0xff; MSB
83096ebf
TH		 3186 c->Request.CDB[7] = (blk_rq_sectors(creq) >> 8) & 0xff;
3187 c->Request.CDB[8] = blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3188 c->Request.CDB[9] = c->Request.CDB[11] = c->Request.CDB[12] = 0;
3189 } else {
582539e5
RD		 3190 u32 upper32 = upper_32_bits(start_blk);
3191
03bbfee5
MMOD		 3192 c->Request.CDBLen = 16;
3193 c->Request.CDB[1]= 0;
582539e5
RD		 3194 c->Request.CDB[2]= (upper32 >> 24) & 0xff; //MSB
3195 c->Request.CDB[3]= (upper32 >> 16) & 0xff;
3196 c->Request.CDB[4]= (upper32 >> 8) & 0xff;
3197 c->Request.CDB[5]= upper32 & 0xff;
03bbfee5
MMOD		 3198 c->Request.CDB[6]= (start_blk >> 24) & 0xff;
3199 c->Request.CDB[7]= (start_blk >> 16) & 0xff;
3200 c->Request.CDB[8]= (start_blk >> 8) & 0xff;
3201 c->Request.CDB[9]= start_blk & 0xff;
83096ebf
TH		 3202 c->Request.CDB[10]= (blk_rq_sectors(creq) >> 24) & 0xff;
3203 c->Request.CDB[11]= (blk_rq_sectors(creq) >> 16) & 0xff;
3204 c->Request.CDB[12]= (blk_rq_sectors(creq) >> 8) & 0xff;
3205 c->Request.CDB[13]= blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3206 c->Request.CDB[14] = c->Request.CDB[15] = 0;
3207 }
3208 } else if (blk_pc_request(creq)) {
3209 c->Request.CDBLen = creq->cmd_len;
3210 memcpy(c->Request.CDB, creq->cmd, BLK_MAX_CDB);
00988a35 3211 } else {
03bbfee5
MMOD		 3212 printk(KERN_WARNING "cciss%d: bad request type %d\n", h->ctlr, creq->cmd_type);
3213 BUG();
00988a35 3214 }
1da177e4
LT		 3215
3216 spin_lock_irq(q->queue_lock);
3217
8a3173de 3218 addQ(&h->reqQ, c);
1da177e4 3219 h->Qdepth++;
7c832835
BH		 3220 if (h->Qdepth > h->maxQsinceinit)
3221 h->maxQsinceinit = h->Qdepth;
1da177e4
LT		 3222
3223 goto queue;
00988a35 3224full:
1da177e4 3225 blk_stop_queue(q);
00988a35 3226startio:
1da177e4
LT		 3227 /* We will already have the driver lock here so not need
3228 * to lock it.
7c832835 3229 */
1da177e4
LT		 3230 start_io(h);
3231}
3232
3da8b713 3233static inline unsigned long get_next_completion(ctlr_info_t *h)
3234{
3da8b713 3235 return h->access.command_completed(h);
3da8b713 3236}
3237
3238static inline int interrupt_pending(ctlr_info_t *h)
3239{
3da8b713 3240 return h->access.intr_pending(h);
3da8b713 3241}
3242
3243static inline long interrupt_not_for_us(ctlr_info_t *h)
3244{
7c832835 3245 return (((h->access.intr_pending(h) == 0) ||
3da8b713 3246 (h->interrupts_enabled == 0)));
3da8b713 3247}
3248
7d12e780 3249static irqreturn_t do_cciss_intr(int irq, void *dev_id)
1da177e4
LT		 3250{
3251 ctlr_info_t *h = dev_id;
3252 CommandList_struct *c;
3253 unsigned long flags;
33079b21 3254 __u32 a, a1, a2;
1da177e4 3255
3da8b713 3256 if (interrupt_not_for_us(h))
1da177e4 3257 return IRQ_NONE;
1da177e4
LT		 3258 /*
3259 * If there are completed commands in the completion queue,
3260 * we had better do something about it.
3261 */
3262 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
3da8b713 3263 while (interrupt_pending(h)) {
7c832835 3264 while ((a = get_next_completion(h)) != FIFO_EMPTY) {
1da177e4 3265 a1 = a;
33079b21
MM		 3266 if ((a & 0x04)) {
3267 a2 = (a >> 3);
f880632f 3268 if (a2 >= h->nr_cmds) {
7c832835
BH		 3269 printk(KERN_WARNING
3270 "cciss: controller cciss%d failed, stopping.\n",
3271 h->ctlr);
33079b21
MM		 3272 fail_all_cmds(h->ctlr);
3273 return IRQ_HANDLED;
3274 }
3275
3276 c = h->cmd_pool + a2;
3277 a = c->busaddr;
3278
3279 } else {
8a3173de
JA		 3280 struct hlist_node *tmp;
3281
7c832835 3282 a &= ~3;
8a3173de
JA		 3283 c = NULL;
3284 hlist_for_each_entry(c, tmp, &h->cmpQ, list) {
3285 if (c->busaddr == a)
7c832835
BH		 3286 break;
3287 }
33079b21 3288 }
1da177e4
LT		 3289 /*
3290 * If we've found the command, take it off the
3291 * completion Q and free it
3292 */
8a3173de
JA		 3293 if (c && c->busaddr == a) {
3294 removeQ(c);
1da177e4
LT		 3295 if (c->cmd_type == CMD_RWREQ) {
3296 complete_command(h, c, 0);
3297 } else if (c->cmd_type == CMD_IOCTL_PEND) {
3298 complete(c->waiting);
3299 }
3300# ifdef CONFIG_CISS_SCSI_TAPE
3301 else if (c->cmd_type == CMD_SCSI)
3302 complete_scsi_command(c, 0, a1);
3303# endif
3304 continue;
3305 }
3306 }
3307 }
3308
1da177e4
LT		 3309 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
3310 return IRQ_HANDLED;
3311}
7c832835 3312
b368c9dd
AP		 3313/**
3314 * add_to_scan_list() - add controller to rescan queue
3315 * @h: Pointer to the controller.
3316 *
3317 * Adds the controller to the rescan queue if not already on the queue.
3318 *
3319 * returns 1 if added to the queue, 0 if skipped (could be on the
3320 * queue already, or the controller could be initializing or shutting
3321 * down).
3322 **/
3323static int add_to_scan_list(struct ctlr_info *h)
3324{
3325 struct ctlr_info *test_h;
3326 int found = 0;
3327 int ret = 0;
3328
3329 if (h->busy_initializing)
3330 return 0;
3331
3332 if (!mutex_trylock(&h->busy_shutting_down))
3333 return 0;
3334
3335 mutex_lock(&scan_mutex);
3336 list_for_each_entry(test_h, &scan_q, scan_list) {
3337 if (test_h == h) {
3338 found = 1;
3339 break;
3340 }
3341 }
3342 if (!found && !h->busy_scanning) {
3343 INIT_COMPLETION(h->scan_wait);
3344 list_add_tail(&h->scan_list, &scan_q);
3345 ret = 1;
3346 }
3347 mutex_unlock(&scan_mutex);
3348 mutex_unlock(&h->busy_shutting_down);
3349
3350 return ret;
3351}
3352
3353/**
3354 * remove_from_scan_list() - remove controller from rescan queue
3355 * @h: Pointer to the controller.
3356 *
3357 * Removes the controller from the rescan queue if present. Blocks if
3358 * the controller is currently conducting a rescan.
3359 **/
3360static void remove_from_scan_list(struct ctlr_info *h)
3361{
3362 struct ctlr_info *test_h, *tmp_h;
3363 int scanning = 0;
3364
3365 mutex_lock(&scan_mutex);
3366 list_for_each_entry_safe(test_h, tmp_h, &scan_q, scan_list) {
3367 if (test_h == h) {
3368 list_del(&h->scan_list);
3369 complete_all(&h->scan_wait);
3370 mutex_unlock(&scan_mutex);
3371 return;
3372 }
3373 }
3374 if (&h->busy_scanning)
3375 scanning = 0;
3376 mutex_unlock(&scan_mutex);
3377
3378 if (scanning)
3379 wait_for_completion(&h->scan_wait);
3380}
3381
3382/**
3383 * scan_thread() - kernel thread used to rescan controllers
3384 * @data: Ignored.
3385 *
3386 * A kernel thread used scan for drive topology changes on
3387 * controllers. The thread processes only one controller at a time
3388 * using a queue. Controllers are added to the queue using
3389 * add_to_scan_list() and removed from the queue either after done
3390 * processing or using remove_from_scan_list().
3391 *
3392 * returns 0.
3393 **/
0a9279cc
MM		 3394static int scan_thread(void *data)
3395{
b368c9dd 3396 struct ctlr_info *h;
0a9279cc 3397
b368c9dd
AP		 3398 while (1) {
3399 set_current_state(TASK_INTERRUPTIBLE);
3400 schedule();
0a9279cc
MM		 3401 if (kthread_should_stop())
3402 break;
b368c9dd
AP		 3403
3404 while (1) {
3405 mutex_lock(&scan_mutex);
3406 if (list_empty(&scan_q)) {
3407 mutex_unlock(&scan_mutex);
3408 break;
3409 }
3410
3411 h = list_entry(scan_q.next,
3412 struct ctlr_info,
3413 scan_list);
3414 list_del(&h->scan_list);
3415 h->busy_scanning = 1;
3416 mutex_unlock(&scan_mutex);
3417
3418 if (h) {
3419 rebuild_lun_table(h, 0);
3420 complete_all(&h->scan_wait);
3421 mutex_lock(&scan_mutex);
3422 h->busy_scanning = 0;
3423 mutex_unlock(&scan_mutex);
3424 }
3425 }
0a9279cc 3426 }
b368c9dd 3427
0a9279cc
MM		 3428 return 0;
3429}
3430
3431static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c)
3432{
3433 if (c->err_info->SenseInfo[2] != UNIT_ATTENTION)
3434 return 0;
3435
3436 switch (c->err_info->SenseInfo[12]) {
3437 case STATE_CHANGED:
3438 printk(KERN_WARNING "cciss%d: a state change "
3439 "detected, command retried\n", h->ctlr);
3440 return 1;
3441 break;
3442 case LUN_FAILED:
3443 printk(KERN_WARNING "cciss%d: LUN failure "
3444 "detected, action required\n", h->ctlr);
3445 return 1;
3446 break;
3447 case REPORT_LUNS_CHANGED:
3448 printk(KERN_WARNING "cciss%d: report LUN data "
3449 "changed\n", h->ctlr);
b368c9dd
AP		 3450 add_to_scan_list(h);
3451 wake_up_process(cciss_scan_thread);
0a9279cc
MM		 3452 return 1;
3453 break;
3454 case POWER_OR_RESET:
3455 printk(KERN_WARNING "cciss%d: a power on "
3456 "or device reset detected\n", h->ctlr);
3457 return 1;
3458 break;
3459 case UNIT_ATTENTION_CLEARED:
3460 printk(KERN_WARNING "cciss%d: unit attention "
3461 "cleared by another initiator\n", h->ctlr);
3462 return 1;
3463 break;
3464 default:
3465 printk(KERN_WARNING "cciss%d: unknown "
3466 "unit attention detected\n", h->ctlr);
3467 return 1;
3468 }
3469}
3470
7c832835 3471/*
d14c4ab5 3472 * We cannot read the structure directly, for portability we must use
1da177e4 3473 * the io functions.
7c832835 3474 * This is for debug only.
1da177e4
LT		 3475 */
3476#ifdef CCISS_DEBUG
7c832835 3477static void print_cfg_table(CfgTable_struct *tb)
1da177e4
LT		 3478{
3479 int i;
3480 char temp_name[17];
3481
3482 printk("Controller Configuration information\n");
3483 printk("------------------------------------\n");
7c832835 3484 for (i = 0; i < 4; i++)
1da177e4 3485 temp_name[i] = readb(&(tb->Signature[i]));
7c832835
BH		 3486 temp_name[4] = '\0';
3487 printk(" Signature = %s\n", temp_name);
1da177e4 3488 printk(" Spec Number = %d\n", readl(&(tb->SpecValence)));
7c832835
BH		 3489 printk(" Transport methods supported = 0x%x\n",
3490 readl(&(tb->TransportSupport)));
3491 printk(" Transport methods active = 0x%x\n",
3492 readl(&(tb->TransportActive)));
3493 printk(" Requested transport Method = 0x%x\n",
3494 readl(&(tb->HostWrite.TransportRequest)));
d14c4ab5 3495 printk(" Coalesce Interrupt Delay = 0x%x\n",
7c832835 3496 readl(&(tb->HostWrite.CoalIntDelay)));
d14c4ab5 3497 printk(" Coalesce Interrupt Count = 0x%x\n",
7c832835
BH		 3498 readl(&(tb->HostWrite.CoalIntCount)));
3499 printk(" Max outstanding commands = 0x%d\n",
3500 readl(&(tb->CmdsOutMax)));
3501 printk(" Bus Types = 0x%x\n", readl(&(tb->BusTypes)));
3502 for (i = 0; i < 16; i++)
1da177e4
LT		 3503 temp_name[i] = readb(&(tb->ServerName[i]));
3504 temp_name[16] = '\0';
3505 printk(" Server Name = %s\n", temp_name);
7c832835 3506 printk(" Heartbeat Counter = 0x%x\n\n\n", readl(&(tb->HeartBeat)));
1da177e4 3507}
7c832835 3508#endif /* CCISS_DEBUG */
1da177e4 3509
7c832835 3510static int find_PCI_BAR_index(struct pci_dev *pdev, unsigned long pci_bar_addr)
1da177e4
LT		 3511{
3512 int i, offset, mem_type, bar_type;
7c832835 3513 if (pci_bar_addr == PCI_BASE_ADDRESS_0) /* looking for BAR zero? */
1da177e4
LT		 3514 return 0;
3515 offset = 0;
7c832835
BH		 3516 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3517 bar_type = pci_resource_flags(pdev, i) & PCI_BASE_ADDRESS_SPACE;
1da177e4
LT		 3518 if (bar_type == PCI_BASE_ADDRESS_SPACE_IO)
3519 offset += 4;
3520 else {
3521 mem_type = pci_resource_flags(pdev, i) &
7c832835 3522 PCI_BASE_ADDRESS_MEM_TYPE_MASK;
1da177e4 3523 switch (mem_type) {
7c832835
BH		 3524 case PCI_BASE_ADDRESS_MEM_TYPE_32:
3525 case PCI_BASE_ADDRESS_MEM_TYPE_1M:
3526 offset += 4; /* 32 bit */
3527 break;
3528 case PCI_BASE_ADDRESS_MEM_TYPE_64:
3529 offset += 8;
3530 break;
3531 default: /* reserved in PCI 2.2 */
3532 printk(KERN_WARNING
3533 "Base address is invalid\n");
3534 return -1;
1da177e4
LT		 3535 break;
3536 }
3537 }
7c832835
BH		 3538 if (offset == pci_bar_addr - PCI_BASE_ADDRESS_0)
3539 return i + 1;
1da177e4
LT		 3540 }
3541 return -1;
3542}
3543
fb86a35b
MM		 3544/* If MSI/MSI-X is supported by the kernel we will try to enable it on
3545 * controllers that are capable. If not, we use IO-APIC mode.
3546 */
3547
7c832835
BH		 3548static void __devinit cciss_interrupt_mode(ctlr_info_t *c,
3549 struct pci_dev *pdev, __u32 board_id)
fb86a35b
MM		 3550{
3551#ifdef CONFIG_PCI_MSI
7c832835
BH		 3552 int err;
3553 struct msix_entry cciss_msix_entries[4] = { {0, 0}, {0, 1},
3554 {0, 2}, {0, 3}
3555 };
fb86a35b
MM		 3556
3557 /* Some boards advertise MSI but don't really support it */
3558 if ((board_id == 0x40700E11) ||
7c832835
BH		 3559 (board_id == 0x40800E11) ||
3560 (board_id == 0x40820E11) || (board_id == 0x40830E11))
fb86a35b
MM		 3561 goto default_int_mode;
3562
7c832835
BH		 3563 if (pci_find_capability(pdev, PCI_CAP_ID_MSIX)) {
3564 err = pci_enable_msix(pdev, cciss_msix_entries, 4);
3565 if (!err) {
3566 c->intr[0] = cciss_msix_entries[0].vector;
3567 c->intr[1] = cciss_msix_entries[1].vector;
3568 c->intr[2] = cciss_msix_entries[2].vector;
3569 c->intr[3] = cciss_msix_entries[3].vector;
3570 c->msix_vector = 1;
3571 return;
3572 }
3573 if (err > 0) {
3574 printk(KERN_WARNING "cciss: only %d MSI-X vectors "
3575 "available\n", err);
1ecb9c0f 3576 goto default_int_mode;
7c832835
BH		 3577 } else {
3578 printk(KERN_WARNING "cciss: MSI-X init failed %d\n",
3579 err);
1ecb9c0f 3580 goto default_int_mode;
7c832835
BH		 3581 }
3582 }
3583 if (pci_find_capability(pdev, PCI_CAP_ID_MSI)) {
3584 if (!pci_enable_msi(pdev)) {
7c832835 3585 c->msi_vector = 1;
7c832835
BH		 3586 } else {
3587 printk(KERN_WARNING "cciss: MSI init failed\n");
7c832835
BH		 3588 }
3589 }
1ecb9c0f 3590default_int_mode:
7c832835 3591#endif /* CONFIG_PCI_MSI */
fb86a35b 3592 /* if we get here we're going to use the default interrupt mode */
7c832835 3593 c->intr[SIMPLE_MODE_INT] = pdev->irq;
fb86a35b
MM		 3594 return;
3595}
3596
7d1fd970 3597static int __devinit cciss_pci_init(ctlr_info_t *c, struct pci_dev *pdev)
1da177e4
LT		 3598{
3599 ushort subsystem_vendor_id, subsystem_device_id, command;
3600 __u32 board_id, scratchpad = 0;
3601 __u64 cfg_offset;
3602 __u32 cfg_base_addr;
3603 __u64 cfg_base_addr_index;
c33ac89b 3604 int i, err;
1da177e4
LT		 3605
3606 /* check to see if controller has been disabled */
3607 /* BEFORE trying to enable it */
7c832835
BH		 3608 (void)pci_read_config_word(pdev, PCI_COMMAND, &command);
3609 if (!(command & 0x02)) {
3610 printk(KERN_WARNING
3611 "cciss: controller appears to be disabled\n");
c33ac89b 3612 return -ENODEV;
1da177e4
LT		 3613 }
3614
c33ac89b 3615 err = pci_enable_device(pdev);
7c832835 3616 if (err) {
1da177e4 3617 printk(KERN_ERR "cciss: Unable to Enable PCI device\n");
c33ac89b 3618 return err;
1da177e4 3619 }
1da177e4 3620
4e570309
BH		 3621 err = pci_request_regions(pdev, "cciss");
3622 if (err) {
3623 printk(KERN_ERR "cciss: Cannot obtain PCI resources, "
7c832835 3624 "aborting\n");
872225ca 3625 return err;
4e570309
BH		 3626 }
3627
1da177e4
LT		 3628 subsystem_vendor_id = pdev->subsystem_vendor;
3629 subsystem_device_id = pdev->subsystem_device;
3630 board_id = (((__u32) (subsystem_device_id << 16) & 0xffff0000) |
7c832835 3631 subsystem_vendor_id);
1da177e4 3632
1da177e4
LT		 3633#ifdef CCISS_DEBUG
3634 printk("command = %x\n", command);
3635 printk("irq = %x\n", pdev->irq);
3636 printk("board_id = %x\n", board_id);
7c832835 3637#endif /* CCISS_DEBUG */
1da177e4 3638
fb86a35b
MM		 3639/* If the kernel supports MSI/MSI-X we will try to enable that functionality,
3640 * else we use the IO-APIC interrupt assigned to us by system ROM.
3641 */
3642 cciss_interrupt_mode(c, pdev, board_id);
1da177e4 3643
e1438581
MM		 3644 /* find the memory BAR */
3645 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3646 if (pci_resource_flags(pdev, i) & IORESOURCE_MEM)
3647 break;
3648 }
3649 if (i == DEVICE_COUNT_RESOURCE) {
3650 printk(KERN_WARNING "cciss: No memory BAR found\n");
3651 err = -ENODEV;
3652 goto err_out_free_res;
3653 }
3654
3655 c->paddr = pci_resource_start(pdev, i); /* addressing mode bits
3656 * already removed
3657 */
1da177e4 3658
1da177e4 3659#ifdef CCISS_DEBUG
9f92f471 3660 printk("address 0 = %lx\n", c->paddr);
7c832835 3661#endif /* CCISS_DEBUG */
a5b92873 3662 c->vaddr = remap_pci_mem(c->paddr, 0x250);
1da177e4
LT		 3663
3664 /* Wait for the board to become ready. (PCI hotplug needs this.)
3665 * We poll for up to 120 secs, once per 100ms. */
7c832835 3666 for (i = 0; i < 1200; i++) {
1da177e4
LT		 3667 scratchpad = readl(c->vaddr + SA5_SCRATCHPAD_OFFSET);
3668 if (scratchpad == CCISS_FIRMWARE_READY)
3669 break;
3670 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3671 schedule_timeout(msecs_to_jiffies(100)); /* wait 100ms */
1da177e4
LT		 3672 }
3673 if (scratchpad != CCISS_FIRMWARE_READY) {
3674 printk(KERN_WARNING "cciss: Board not ready. Timed out.\n");
c33ac89b 3675 err = -ENODEV;
4e570309 3676 goto err_out_free_res;
1da177e4
LT		 3677 }
3678
3679 /* get the address index number */
3680 cfg_base_addr = readl(c->vaddr + SA5_CTCFG_OFFSET);
3681 cfg_base_addr &= (__u32) 0x0000ffff;
3682#ifdef CCISS_DEBUG
3683 printk("cfg base address = %x\n", cfg_base_addr);
7c832835
BH		 3684#endif /* CCISS_DEBUG */
3685 cfg_base_addr_index = find_PCI_BAR_index(pdev, cfg_base_addr);
1da177e4 3686#ifdef CCISS_DEBUG
9f92f471
RD		 3687 printk("cfg base address index = %llx\n",
3688 (unsigned long long)cfg_base_addr_index);
7c832835 3689#endif /* CCISS_DEBUG */
1da177e4
LT		 3690 if (cfg_base_addr_index == -1) {
3691 printk(KERN_WARNING "cciss: Cannot find cfg_base_addr_index\n");
c33ac89b 3692 err = -ENODEV;
4e570309 3693 goto err_out_free_res;
1da177e4
LT		 3694 }
3695
3696 cfg_offset = readl(c->vaddr + SA5_CTMEM_OFFSET);
3697#ifdef CCISS_DEBUG
9f92f471 3698 printk("cfg offset = %llx\n", (unsigned long long)cfg_offset);
7c832835
BH		 3699#endif /* CCISS_DEBUG */
3700 c->cfgtable = remap_pci_mem(pci_resource_start(pdev,
3701 cfg_base_addr_index) +
3702 cfg_offset, sizeof(CfgTable_struct));
1da177e4
LT		 3703 c->board_id = board_id;
3704
3705#ifdef CCISS_DEBUG
945f390f 3706 print_cfg_table(c->cfgtable);
7c832835 3707#endif /* CCISS_DEBUG */
1da177e4 3708
49153998
MM		 3709 /* Some controllers support Zero Memory Raid (ZMR).
3710 * When configured in ZMR mode the number of supported
3711 * commands drops to 64. So instead of just setting an
3712 * arbitrary value we make the driver a little smarter.
3713 * We read the config table to tell us how many commands
3714 * are supported on the controller then subtract 4 to
3715 * leave a little room for ioctl calls.
3716 */
3717 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835 3718 for (i = 0; i < ARRAY_SIZE(products); i++) {
1da177e4
LT		 3719 if (board_id == products[i].board_id) {
3720 c->product_name = products[i].product_name;
3721 c->access = *(products[i].access);
49153998 3722 c->nr_cmds = c->max_commands - 4;
1da177e4
LT		 3723 break;
3724 }
3725 }
7c832835
BH		 3726 if ((readb(&c->cfgtable->Signature[0]) != 'C') ||
3727 (readb(&c->cfgtable->Signature[1]) != 'I') ||
3728 (readb(&c->cfgtable->Signature[2]) != 'S') ||
3729 (readb(&c->cfgtable->Signature[3]) != 'S')) {
1da177e4 3730 printk("Does not appear to be a valid CISS config table\n");
c33ac89b 3731 err = -ENODEV;
4e570309 3732 goto err_out_free_res;
1da177e4 3733 }
4ff9a9a4
MM		 3734 /* We didn't find the controller in our list. We know the
3735 * signature is valid. If it's an HP device let's try to
3736 * bind to the device and fire it up. Otherwise we bail.
3737 */
3738 if (i == ARRAY_SIZE(products)) {
3739 if (subsystem_vendor_id == PCI_VENDOR_ID_HP) {
3740 c->product_name = products[i-1].product_name;
3741 c->access = *(products[i-1].access);
49153998 3742 c->nr_cmds = c->max_commands - 4;
4ff9a9a4
MM		 3743 printk(KERN_WARNING "cciss: This is an unknown "
3744 "Smart Array controller.\n"
3745 "cciss: Please update to the latest driver "
3746 "available from www.hp.com.\n");
3747 } else {
3748 printk(KERN_WARNING "cciss: Sorry, I don't know how"
3749 " to access the Smart Array controller %08lx\n"
3750 , (unsigned long)board_id);
3751 err = -ENODEV;
3752 goto err_out_free_res;
3753 }
3754 }
1da177e4 3755#ifdef CONFIG_X86
7c832835
BH		 3756 {
3757 /* Need to enable prefetch in the SCSI core for 6400 in x86 */
3758 __u32 prefetch;
3759 prefetch = readl(&(c->cfgtable->SCSI_Prefetch));
3760 prefetch |= 0x100;
3761 writel(prefetch, &(c->cfgtable->SCSI_Prefetch));
3762 }
1da177e4
LT		 3763#endif
3764
8bf50f71
MMOD		 3765 /* Disabling DMA prefetch and refetch for the P600.
3766 * An ASIC bug may result in accesses to invalid memory addresses.
3767 * We've disabled prefetch for some time now. Testing with XEN
3768 * kernels revealed a bug in the refetch if dom0 resides on a P600.
f92e2f5f
MM		 3769 */
3770 if(board_id == 0x3225103C) {
3771 __u32 dma_prefetch;
8bf50f71 3772 __u32 dma_refetch;
f92e2f5f
MM		 3773 dma_prefetch = readl(c->vaddr + I2O_DMA1_CFG);
3774 dma_prefetch |= 0x8000;
3775 writel(dma_prefetch, c->vaddr + I2O_DMA1_CFG);
8bf50f71
MMOD		 3776 pci_read_config_dword(pdev, PCI_COMMAND_PARITY, &dma_refetch);
3777 dma_refetch |= 0x1;
3778 pci_write_config_dword(pdev, PCI_COMMAND_PARITY, dma_refetch);
f92e2f5f
MM		 3779 }
3780
1da177e4
LT		 3781#ifdef CCISS_DEBUG
3782 printk("Trying to put board into Simple mode\n");
7c832835 3783#endif /* CCISS_DEBUG */
1da177e4 3784 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835
BH		 3785 /* Update the field, and then ring the doorbell */
3786 writel(CFGTBL_Trans_Simple, &(c->cfgtable->HostWrite.TransportRequest));
3787 writel(CFGTBL_ChangeReq, c->vaddr + SA5_DOORBELL);
1da177e4
LT		 3788
3789 /* under certain very rare conditions, this can take awhile.
3790 * (e.g.: hot replace a failed 144GB drive in a RAID 5 set right
3791 * as we enter this code.) */
7c832835 3792 for (i = 0; i < MAX_CONFIG_WAIT; i++) {
1da177e4
LT		 3793 if (!(readl(c->vaddr + SA5_DOORBELL) & CFGTBL_ChangeReq))
3794 break;
3795 /* delay and try again */
3796 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3797 schedule_timeout(msecs_to_jiffies(1));
7c832835 3798 }
1da177e4
LT		 3799
3800#ifdef CCISS_DEBUG
7c832835
BH		 3801 printk(KERN_DEBUG "I counter got to %d %x\n", i,
3802 readl(c->vaddr + SA5_DOORBELL));
3803#endif /* CCISS_DEBUG */
1da177e4 3804#ifdef CCISS_DEBUG
7c832835
BH		 3805 print_cfg_table(c->cfgtable);
3806#endif /* CCISS_DEBUG */
1da177e4 3807
7c832835 3808 if (!(readl(&(c->cfgtable->TransportActive)) & CFGTBL_Trans_Simple)) {
1da177e4 3809 printk(KERN_WARNING "cciss: unable to get board into"
7c832835 3810 " simple mode\n");
c33ac89b 3811 err = -ENODEV;
4e570309 3812 goto err_out_free_res;
1da177e4
LT		 3813 }
3814 return 0;
3815
5faad620 3816err_out_free_res:
872225ca
MM		 3817 /*
3818 * Deliberately omit pci_disable_device(): it does something nasty to
3819 * Smart Array controllers that pci_enable_device does not undo
3820 */
4e570309 3821 pci_release_regions(pdev);
c33ac89b 3822 return err;
1da177e4
LT		 3823}
3824
6ae5ce8e
MM		 3825/* Function to find the first free pointer into our hba[] array
3826 * Returns -1 if no free entries are left.
7c832835 3827 */
1da177e4
LT		 3828static int alloc_cciss_hba(void)
3829{
799202cb 3830 int i;
1da177e4 3831
7c832835 3832 for (i = 0; i < MAX_CTLR; i++) {
1da177e4
LT		 3833 if (!hba[i]) {
3834 ctlr_info_t *p;
f2912a12 3835
06ff37ff 3836 p = kzalloc(sizeof(ctlr_info_t), GFP_KERNEL);
1da177e4
LT		 3837 if (!p)
3838 goto Enomem;
1da177e4
LT		 3839 hba[i] = p;
3840 return i;
3841 }
3842 }
3843 printk(KERN_WARNING "cciss: This driver supports a maximum"
7c832835 3844 " of %d controllers.\n", MAX_CTLR);
799202cb
MM		 3845 return -1;
3846Enomem:
1da177e4 3847 printk(KERN_ERR "cciss: out of memory.\n");
1da177e4
LT		 3848 return -1;
3849}
3850
3851static void free_hba(int i)
3852{
3853 ctlr_info_t *p = hba[i];
3854 int n;
3855
3856 hba[i] = NULL;
799202cb 3857 for (n = 0; n < CISS_MAX_LUN; n++)
1da177e4
LT		 3858 put_disk(p->gendisk[n]);
3859 kfree(p);
3860}
3861
82eb03cf
CC		 3862/* Send a message CDB to the firmware. */
3863static __devinit int cciss_message(struct pci_dev *pdev, unsigned char opcode, unsigned char type)
3864{
3865 typedef struct {
3866 CommandListHeader_struct CommandHeader;
3867 RequestBlock_struct Request;
3868 ErrDescriptor_struct ErrorDescriptor;
3869 } Command;
3870 static const size_t cmd_sz = sizeof(Command) + sizeof(ErrorInfo_struct);
3871 Command *cmd;
3872 dma_addr_t paddr64;
3873 uint32_t paddr32, tag;
3874 void __iomem *vaddr;
3875 int i, err;
3876
3877 vaddr = ioremap_nocache(pci_resource_start(pdev, 0), pci_resource_len(pdev, 0));
3878 if (vaddr == NULL)
3879 return -ENOMEM;
3880
3881 /* The Inbound Post Queue only accepts 32-bit physical addresses for the
3882 CCISS commands, so they must be allocated from the lower 4GiB of
3883 memory. */
e930438c 3884 err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32));
82eb03cf
CC		 3885 if (err) {
3886 iounmap(vaddr);
3887 return -ENOMEM;
3888 }
3889
3890 cmd = pci_alloc_consistent(pdev, cmd_sz, &paddr64);
3891 if (cmd == NULL) {
3892 iounmap(vaddr);
3893 return -ENOMEM;
3894 }
3895
3896 /* This must fit, because of the 32-bit consistent DMA mask. Also,
3897 although there's no guarantee, we assume that the address is at
3898 least 4-byte aligned (most likely, it's page-aligned). */
3899 paddr32 = paddr64;
3900
3901 cmd->CommandHeader.ReplyQueue = 0;
3902 cmd->CommandHeader.SGList = 0;
3903 cmd->CommandHeader.SGTotal = 0;
3904 cmd->CommandHeader.Tag.lower = paddr32;
3905 cmd->CommandHeader.Tag.upper = 0;
3906 memset(&cmd->CommandHeader.LUN.LunAddrBytes, 0, 8);
3907
3908 cmd->Request.CDBLen = 16;
3909 cmd->Request.Type.Type = TYPE_MSG;
3910 cmd->Request.Type.Attribute = ATTR_HEADOFQUEUE;
3911 cmd->Request.Type.Direction = XFER_NONE;
3912 cmd->Request.Timeout = 0; /* Don't time out */
3913 cmd->Request.CDB[0] = opcode;
3914 cmd->Request.CDB[1] = type;
3915 memset(&cmd->Request.CDB[2], 0, 14); /* the rest of the CDB is reserved */
3916
3917 cmd->ErrorDescriptor.Addr.lower = paddr32 + sizeof(Command);
3918 cmd->ErrorDescriptor.Addr.upper = 0;
3919 cmd->ErrorDescriptor.Len = sizeof(ErrorInfo_struct);
3920
3921 writel(paddr32, vaddr + SA5_REQUEST_PORT_OFFSET);
3922
3923 for (i = 0; i < 10; i++) {
3924 tag = readl(vaddr + SA5_REPLY_PORT_OFFSET);
3925 if ((tag & ~3) == paddr32)
3926 break;
3927 schedule_timeout_uninterruptible(HZ);
3928 }
3929
3930 iounmap(vaddr);
3931
3932 /* we leak the DMA buffer here ... no choice since the controller could
3933 still complete the command. */
3934 if (i == 10) {
3935 printk(KERN_ERR "cciss: controller message %02x:%02x timed out\n",
3936 opcode, type);
3937 return -ETIMEDOUT;
3938 }
3939
3940 pci_free_consistent(pdev, cmd_sz, cmd, paddr64);
3941
3942 if (tag & 2) {
3943 printk(KERN_ERR "cciss: controller message %02x:%02x failed\n",
3944 opcode, type);
3945 return -EIO;
3946 }
3947
3948 printk(KERN_INFO "cciss: controller message %02x:%02x succeeded\n",
3949 opcode, type);
3950 return 0;
3951}
3952
3953#define cciss_soft_reset_controller(p) cciss_message(p, 1, 0)
3954#define cciss_noop(p) cciss_message(p, 3, 0)
3955
3956static __devinit int cciss_reset_msi(struct pci_dev *pdev)
3957{
3958/* the #defines are stolen from drivers/pci/msi.h. */
3959#define msi_control_reg(base) (base + PCI_MSI_FLAGS)
3960#define PCI_MSIX_FLAGS_ENABLE (1 << 15)
3961
3962 int pos;
3963 u16 control = 0;
3964
3965 pos = pci_find_capability(pdev, PCI_CAP_ID_MSI);
3966 if (pos) {
3967 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3968 if (control & PCI_MSI_FLAGS_ENABLE) {
3969 printk(KERN_INFO "cciss: resetting MSI\n");
3970 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSI_FLAGS_ENABLE);
3971 }
3972 }
3973
3974 pos = pci_find_capability(pdev, PCI_CAP_ID_MSIX);
3975 if (pos) {
3976 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3977 if (control & PCI_MSIX_FLAGS_ENABLE) {
3978 printk(KERN_INFO "cciss: resetting MSI-X\n");
3979 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSIX_FLAGS_ENABLE);
3980 }
3981 }
3982
3983 return 0;
3984}
3985
3986/* This does a hard reset of the controller using PCI power management
3987 * states. */
3988static __devinit int cciss_hard_reset_controller(struct pci_dev *pdev)
3989{
3990 u16 pmcsr, saved_config_space[32];
3991 int i, pos;
3992
3993 printk(KERN_INFO "cciss: using PCI PM to reset controller\n");
3994
3995 /* This is very nearly the same thing as
3996
3997 pci_save_state(pci_dev);
3998 pci_set_power_state(pci_dev, PCI_D3hot);
3999 pci_set_power_state(pci_dev, PCI_D0);
4000 pci_restore_state(pci_dev);
4001
4002 but we can't use these nice canned kernel routines on
4003 kexec, because they also check the MSI/MSI-X state in PCI
4004 configuration space and do the wrong thing when it is
4005 set/cleared. Also, the pci_save/restore_state functions
4006 violate the ordering requirements for restoring the
4007 configuration space from the CCISS document (see the
4008 comment below). So we roll our own .... */
4009
4010 for (i = 0; i < 32; i++)
4011 pci_read_config_word(pdev, 2*i, &saved_config_space[i]);
4012
4013 pos = pci_find_capability(pdev, PCI_CAP_ID_PM);
4014 if (pos == 0) {
4015 printk(KERN_ERR "cciss_reset_controller: PCI PM not supported\n");
4016 return -ENODEV;
4017 }
4018
4019 /* Quoting from the Open CISS Specification: "The Power
4020 * Management Control/Status Register (CSR) controls the power
4021 * state of the device. The normal operating state is D0,
4022 * CSR=00h. The software off state is D3, CSR=03h. To reset
4023 * the controller, place the interface device in D3 then to
4024 * D0, this causes a secondary PCI reset which will reset the
4025 * controller." */
4026
4027 /* enter the D3hot power management state */
4028 pci_read_config_word(pdev, pos + PCI_PM_CTRL, &pmcsr);
4029 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
4030 pmcsr |= PCI_D3hot;
4031 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
4032
4033 schedule_timeout_uninterruptible(HZ >> 1);
4034
4035 /* enter the D0 power management state */
4036 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
4037 pmcsr |= PCI_D0;
4038 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
4039
4040 schedule_timeout_uninterruptible(HZ >> 1);
4041
4042 /* Restore the PCI configuration space. The Open CISS
4043 * Specification says, "Restore the PCI Configuration
4044 * Registers, offsets 00h through 60h. It is important to
4045 * restore the command register, 16-bits at offset 04h,
4046 * last. Do not restore the configuration status register,
4047 * 16-bits at offset 06h." Note that the offset is 2*i. */
4048 for (i = 0; i < 32; i++) {
4049 if (i == 2 || i == 3)
4050 continue;
4051 pci_write_config_word(pdev, 2*i, saved_config_space[i]);
4052 }
4053 wmb();
4054 pci_write_config_word(pdev, 4, saved_config_space[2]);
4055
4056 return 0;
4057}
4058
1da177e4
LT		 4059/*
4060 * This is it. Find all the controllers and register them. I really hate
4061 * stealing all these major device numbers.
4062 * returns the number of block devices registered.
4063 */
4064static int __devinit cciss_init_one(struct pci_dev *pdev,
7c832835 4065 const struct pci_device_id *ent)
1da177e4 4066{
1da177e4 4067 int i;
799202cb 4068 int j = 0;
1da177e4 4069 int rc;
22bece00 4070 int dac, return_code;
212a5026 4071 InquiryData_struct *inq_buff;
1da177e4 4072
82eb03cf
CC		 4073 if (reset_devices) {
4074 /* Reset the controller with a PCI power-cycle */
4075 if (cciss_hard_reset_controller(pdev) || cciss_reset_msi(pdev))
4076 return -ENODEV;
4077
5e18cfd0
JA		 4078 /* Now try to get the controller to respond to a no-op. Some
4079 devices (notably the HP Smart Array 5i Controller) need
4080 up to 30 seconds to respond. */
5e4c91c8 4081 for (i=0; i<30; i++) {
82eb03cf
CC		 4082 if (cciss_noop(pdev) == 0)
4083 break;
5e4c91c8
JA		 4084
4085 schedule_timeout_uninterruptible(HZ);
4086 }
4087 if (i == 30) {
4088 printk(KERN_ERR "cciss: controller seems dead\n");
4089 return -EBUSY;
82eb03cf
CC		 4090 }
4091 }
4092
1da177e4 4093 i = alloc_cciss_hba();
7c832835 4094 if (i < 0)
e2019b58 4095 return -1;
1f8ef380
MM		 4096
4097 hba[i]->busy_initializing = 1;
8a3173de
JA		 4098 INIT_HLIST_HEAD(&hba[i]->cmpQ);
4099 INIT_HLIST_HEAD(&hba[i]->reqQ);
b368c9dd 4100 mutex_init(&hba[i]->busy_shutting_down);
1f8ef380 4101
1da177e4 4102 if (cciss_pci_init(hba[i], pdev) != 0)
7fe06326 4103 goto clean0;
1da177e4
LT		 4104
4105 sprintf(hba[i]->devname, "cciss%d", i);
4106 hba[i]->ctlr = i;
4107 hba[i]->pdev = pdev;
4108
b368c9dd
AP		 4109 init_completion(&hba[i]->scan_wait);
4110
7fe06326
AP		 4111 if (cciss_create_hba_sysfs_entry(hba[i]))
4112 goto clean0;
4113
1da177e4 4114 /* configure PCI DMA stuff */
6a35528a 4115 if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64)))
40aabb58 4116 dac = 1;
284901a9 4117 else if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32)))
40aabb58 4118 dac = 0;
1da177e4 4119 else {
40aabb58 4120 printk(KERN_ERR "cciss: no suitable DMA available\n");
1da177e4
LT		 4121 goto clean1;
4122 }
4123
4124 /*
4125 * register with the major number, or get a dynamic major number
4126 * by passing 0 as argument. This is done for greater than
4127 * 8 controller support.
4128 */
4129 if (i < MAX_CTLR_ORIG)
564de74a 4130 hba[i]->major = COMPAQ_CISS_MAJOR + i;
1da177e4 4131 rc = register_blkdev(hba[i]->major, hba[i]->devname);
7c832835 4132 if (rc == -EBUSY || rc == -EINVAL) {
1da177e4 4133 printk(KERN_ERR
7c832835
BH		 4134 "cciss: Unable to get major number %d for %s "
4135 "on hba %d\n", hba[i]->major, hba[i]->devname, i);
1da177e4 4136 goto clean1;
7c832835 4137 } else {
1da177e4
LT		 4138 if (i >= MAX_CTLR_ORIG)
4139 hba[i]->major = rc;
4140 }
4141
4142 /* make sure the board interrupts are off */
4143 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_OFF);
7c832835 4144 if (request_irq(hba[i]->intr[SIMPLE_MODE_INT], do_cciss_intr,
69ab3912 4145 IRQF_DISABLED | IRQF_SHARED, hba[i]->devname, hba[i])) {
1da177e4 4146 printk(KERN_ERR "cciss: Unable to get irq %d for %s\n",
7c832835 4147 hba[i]->intr[SIMPLE_MODE_INT], hba[i]->devname);
1da177e4
LT		 4148 goto clean2;
4149 }
40aabb58
BH		 4150
4151 printk(KERN_INFO "%s: <0x%x> at PCI %s IRQ %d%s using DAC\n",
7c832835
BH		 4152 hba[i]->devname, pdev->device, pci_name(pdev),
4153 hba[i]->intr[SIMPLE_MODE_INT], dac ? "" : " not");
4154
4155 hba[i]->cmd_pool_bits =
061837bc
JL		 4156 kmalloc(DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4157 * sizeof(unsigned long), GFP_KERNEL);
7c832835
BH		 4158 hba[i]->cmd_pool = (CommandList_struct *)
4159 pci_alloc_consistent(hba[i]->pdev,
f880632f 4160 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4161 &(hba[i]->cmd_pool_dhandle));
4162 hba[i]->errinfo_pool = (ErrorInfo_struct *)
4163 pci_alloc_consistent(hba[i]->pdev,
f880632f 4164 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4165 &(hba[i]->errinfo_pool_dhandle));
4166 if ((hba[i]->cmd_pool_bits == NULL)
4167 || (hba[i]->cmd_pool == NULL)
4168 || (hba[i]->errinfo_pool == NULL)) {
4169 printk(KERN_ERR "cciss: out of memory");
1da177e4
LT		 4170 goto clean4;
4171 }
1da177e4 4172 spin_lock_init(&hba[i]->lock);
1da177e4 4173
7c832835
BH		 4174 /* Initialize the pdev driver private data.
4175 have it point to hba[i]. */
1da177e4 4176 pci_set_drvdata(pdev, hba[i]);
7c832835
BH		 4177 /* command and error info recs zeroed out before
4178 they are used */
4179 memset(hba[i]->cmd_pool_bits, 0,
061837bc
JL		 4180 DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4181 * sizeof(unsigned long));
1da177e4 4182
6ae5ce8e
MM		 4183 hba[i]->num_luns = 0;
4184 hba[i]->highest_lun = -1;
4185 for (j = 0; j < CISS_MAX_LUN; j++) {
4186 hba[i]->drv[j].raid_level = -1;
4187 hba[i]->drv[j].queue = NULL;
4188 hba[i]->gendisk[j] = NULL;
4189 }
1da177e4
LT		 4190
4191 cciss_scsi_setup(i);
4192
4193 /* Turn the interrupts on so we can service requests */
4194 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_ON);
4195
22bece00
MM		 4196 /* Get the firmware version */
4197 inq_buff = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
4198 if (inq_buff == NULL) {
4199 printk(KERN_ERR "cciss: out of memory\n");
4200 goto clean4;
4201 }
4202
4203 return_code = sendcmd_withirq(CISS_INQUIRY, i, inq_buff,
b57695fe 4204 sizeof(InquiryData_struct), 0, CTLR_LUNID, TYPE_CMD);
22bece00
MM		 4205 if (return_code == IO_OK) {
4206 hba[i]->firm_ver[0] = inq_buff->data_byte[32];
4207 hba[i]->firm_ver[1] = inq_buff->data_byte[33];
4208 hba[i]->firm_ver[2] = inq_buff->data_byte[34];
4209 hba[i]->firm_ver[3] = inq_buff->data_byte[35];
4210 } else { /* send command failed */
4211 printk(KERN_WARNING "cciss: unable to determine firmware"
4212 " version of controller\n");
4213 }
212a5026 4214 kfree(inq_buff);
22bece00 4215
1da177e4 4216 cciss_procinit(i);
92c4231a
MM		 4217
4218 hba[i]->cciss_max_sectors = 2048;
4219
6ae5ce8e 4220 rebuild_lun_table(hba[i], 1);
b368c9dd 4221 hba[i]->busy_initializing = 0;
e2019b58 4222 return 1;
1da177e4 4223
6ae5ce8e 4224clean4:
6044ec88 4225 kfree(hba[i]->cmd_pool_bits);
7c832835 4226 if (hba[i]->cmd_pool)
1da177e4 4227 pci_free_consistent(hba[i]->pdev,
f880632f 4228 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4229 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
4230 if (hba[i]->errinfo_pool)
1da177e4 4231 pci_free_consistent(hba[i]->pdev,
f880632f 4232 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4233 hba[i]->errinfo_pool,
4234 hba[i]->errinfo_pool_dhandle);
fb86a35b 4235 free_irq(hba[i]->intr[SIMPLE_MODE_INT], hba[i]);
6ae5ce8e 4236clean2:
1da177e4 4237 unregister_blkdev(hba[i]->major, hba[i]->devname);
6ae5ce8e 4238clean1:
7fe06326
AP		 4239 cciss_destroy_hba_sysfs_entry(hba[i]);
4240clean0:
1f8ef380 4241 hba[i]->busy_initializing = 0;
799202cb
MM		 4242 /* cleanup any queues that may have been initialized */
4243 for (j=0; j <= hba[i]->highest_lun; j++){
4244 drive_info_struct *drv = &(hba[i]->drv[j]);
4245 if (drv->queue)
4246 blk_cleanup_queue(drv->queue);
4247 }
872225ca
MM		 4248 /*
4249 * Deliberately omit pci_disable_device(): it does something nasty to
4250 * Smart Array controllers that pci_enable_device does not undo
4251 */
799202cb 4252 pci_release_regions(pdev);
799202cb 4253 pci_set_drvdata(pdev, NULL);
61808c2b 4254 free_hba(i);
e2019b58 4255 return -1;
1da177e4
LT		 4256}
4257
e9ca75b5 4258static void cciss_shutdown(struct pci_dev *pdev)
1da177e4
LT		 4259{
4260 ctlr_info_t *tmp_ptr;
e9ca75b5 4261 int i;
1da177e4 4262 char flush_buf[4];
7c832835 4263 int return_code;
1da177e4 4264
e9ca75b5
GB		 4265 tmp_ptr = pci_get_drvdata(pdev);
4266 if (tmp_ptr == NULL)
4267 return;
4268 i = tmp_ptr->ctlr;
4269 if (hba[i] == NULL)
4270 return;
4271
4272 /* Turn board interrupts off and send the flush cache command */
4273 /* sendcmd will turn off interrupt, and send the flush...
4274 * To write all data in the battery backed cache to disks */
4275 memset(flush_buf, 0, 4);
b57695fe 4276 return_code = sendcmd(CCISS_CACHE_FLUSH, i, flush_buf, 4, 0,
4277 CTLR_LUNID, TYPE_CMD);
e9ca75b5
GB		 4278 if (return_code == IO_OK) {
4279 printk(KERN_INFO "Completed flushing cache on controller %d\n", i);
4280 } else {
4281 printk(KERN_WARNING "Error flushing cache on controller %d\n", i);
4282 }
4283 free_irq(hba[i]->intr[2], hba[i]);
4284}
4285
4286static void __devexit cciss_remove_one(struct pci_dev *pdev)
4287{
4288 ctlr_info_t *tmp_ptr;
4289 int i, j;
4290
7c832835
BH		 4291 if (pci_get_drvdata(pdev) == NULL) {
4292 printk(KERN_ERR "cciss: Unable to remove device \n");
1da177e4
LT		 4293 return;
4294 }
0a9279cc 4295
1da177e4
LT		 4296 tmp_ptr = pci_get_drvdata(pdev);
4297 i = tmp_ptr->ctlr;
7c832835 4298 if (hba[i] == NULL) {
1da177e4 4299 printk(KERN_ERR "cciss: device appears to "
7c832835 4300 "already be removed \n");
1da177e4
LT		 4301 return;
4302 }
b6550777 4303
b368c9dd 4304 mutex_lock(&hba[i]->busy_shutting_down);
0a9279cc 4305
b368c9dd 4306 remove_from_scan_list(hba[i]);
b6550777
BH		 4307 remove_proc_entry(hba[i]->devname, proc_cciss);
4308 unregister_blkdev(hba[i]->major, hba[i]->devname);
4309
4310 /* remove it from the disk list */
4311 for (j = 0; j < CISS_MAX_LUN; j++) {
4312 struct gendisk *disk = hba[i]->gendisk[j];
4313 if (disk) {
165125e1 4314 struct request_queue *q = disk->queue;
b6550777 4315
097d0264
SC		 4316 if (disk->flags & GENHD_FL_UP) {
4317 cciss_destroy_ld_sysfs_entry(hba[i], j);
b6550777 4318 del_gendisk(disk);
097d0264 4319 }
b6550777
BH		 4320 if (q)
4321 blk_cleanup_queue(q);
4322 }
4323 }
4324
ba198efb 4325#ifdef CONFIG_CISS_SCSI_TAPE
b6550777 4326 cciss_unregister_scsi(i); /* unhook from SCSI subsystem */
ba198efb 4327#endif
b6550777 4328
e9ca75b5 4329 cciss_shutdown(pdev);
fb86a35b
MM		 4330
4331#ifdef CONFIG_PCI_MSI
7c832835
BH		 4332 if (hba[i]->msix_vector)
4333 pci_disable_msix(hba[i]->pdev);
4334 else if (hba[i]->msi_vector)
4335 pci_disable_msi(hba[i]->pdev);
4336#endif /* CONFIG_PCI_MSI */
fb86a35b 4337
1da177e4 4338 iounmap(hba[i]->vaddr);
1da177e4 4339
f880632f 4340 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(CommandList_struct),
1da177e4 4341 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
f880632f 4342 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835 4343 hba[i]->errinfo_pool, hba[i]->errinfo_pool_dhandle);
1da177e4 4344 kfree(hba[i]->cmd_pool_bits);
872225ca
MM		 4345 /*
4346 * Deliberately omit pci_disable_device(): it does something nasty to
4347 * Smart Array controllers that pci_enable_device does not undo
4348 */
7c832835 4349 pci_release_regions(pdev);
4e570309 4350 pci_set_drvdata(pdev, NULL);
7fe06326 4351 cciss_destroy_hba_sysfs_entry(hba[i]);
b368c9dd 4352 mutex_unlock(&hba[i]->busy_shutting_down);
1da177e4 4353 free_hba(i);
7c832835 4354}
1da177e4
LT		 4355
4356static struct pci_driver cciss_pci_driver = {
7c832835
BH		 4357 .name = "cciss",
4358 .probe = cciss_init_one,
4359 .remove = __devexit_p(cciss_remove_one),
4360 .id_table = cciss_pci_device_id, /* id_table */
e9ca75b5 4361 .shutdown = cciss_shutdown,
1da177e4
LT		 4362};
4363
4364/*
4365 * This is it. Register the PCI driver information for the cards we control
7c832835 4366 * the OS will call our registered routines when it finds one of our cards.
1da177e4
LT		 4367 */
4368static int __init cciss_init(void)
4369{
7fe06326
AP		 4370 int err;
4371
10cbda97
JA		 4372 /*
4373 * The hardware requires that commands are aligned on a 64-bit
4374 * boundary. Given that we use pci_alloc_consistent() to allocate an
4375 * array of them, the size must be a multiple of 8 bytes.
4376 */
4377 BUILD_BUG_ON(sizeof(CommandList_struct) % 8);
4378
1da177e4
LT		 4379 printk(KERN_INFO DRIVER_NAME "\n");
4380
7fe06326
AP		 4381 err = bus_register(&cciss_bus_type);
4382 if (err)
4383 return err;
4384
b368c9dd
AP		 4385 /* Start the scan thread */
4386 cciss_scan_thread = kthread_run(scan_thread, NULL, "cciss_scan");
4387 if (IS_ERR(cciss_scan_thread)) {
4388 err = PTR_ERR(cciss_scan_thread);
4389 goto err_bus_unregister;
4390 }
4391
1da177e4 4392 /* Register for our PCI devices */
7fe06326
AP		 4393 err = pci_register_driver(&cciss_pci_driver);
4394 if (err)
b368c9dd 4395 goto err_thread_stop;
7fe06326 4396
617e1344 4397 return err;
7fe06326 4398
b368c9dd
AP		 4399err_thread_stop:
4400 kthread_stop(cciss_scan_thread);
4401err_bus_unregister:
7fe06326 4402 bus_unregister(&cciss_bus_type);
b368c9dd 4403
7fe06326 4404 return err;
1da177e4
LT		 4405}
4406
4407static void __exit cciss_cleanup(void)
4408{
4409 int i;
4410
4411 pci_unregister_driver(&cciss_pci_driver);
4412 /* double check that all controller entrys have been removed */
7c832835
BH		 4413 for (i = 0; i < MAX_CTLR; i++) {
4414 if (hba[i] != NULL) {
1da177e4 4415 printk(KERN_WARNING "cciss: had to remove"
7c832835 4416 " controller %d\n", i);
1da177e4
LT		 4417 cciss_remove_one(hba[i]->pdev);
4418 }
4419 }
b368c9dd 4420 kthread_stop(cciss_scan_thread);
928b4d8c 4421 remove_proc_entry("driver/cciss", NULL);
7fe06326 4422 bus_unregister(&cciss_bus_type);
1da177e4
LT		 4423}
4424
33079b21
MM		 4425static void fail_all_cmds(unsigned long ctlr)
4426{
4427 /* If we get here, the board is apparently dead. */
4428 ctlr_info_t *h = hba[ctlr];
4429 CommandList_struct *c;
4430 unsigned long flags;
4431
4432 printk(KERN_WARNING "cciss%d: controller not responding.\n", h->ctlr);
7c832835 4433 h->alive = 0; /* the controller apparently died... */
33079b21
MM		 4434
4435 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
4436
7c832835 4437 pci_disable_device(h->pdev); /* Make sure it is really dead. */
33079b21
MM		 4438
4439 /* move everything off the request queue onto the completed queue */
8a3173de
JA		 4440 while (!hlist_empty(&h->reqQ)) {
4441 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
4442 removeQ(c);
33079b21 4443 h->Qdepth--;
8a3173de 4444 addQ(&h->cmpQ, c);
33079b21
MM		 4445 }
4446
4447 /* Now, fail everything on the completed queue with a HW error */
8a3173de
JA		 4448 while (!hlist_empty(&h->cmpQ)) {
4449 c = hlist_entry(h->cmpQ.first, CommandList_struct, list);
4450 removeQ(c);
b59e64d0
HR		 4451 if (c->cmd_type != CMD_MSG_STALE)
4452 c->err_info->CommandStatus = CMD_HARDWARE_ERR;
33079b21
MM		 4453 if (c->cmd_type == CMD_RWREQ) {
4454 complete_command(h, c, 0);
4455 } else if (c->cmd_type == CMD_IOCTL_PEND)
4456 complete(c->waiting);
4457#ifdef CONFIG_CISS_SCSI_TAPE
7c832835
BH		 4458 else if (c->cmd_type == CMD_SCSI)
4459 complete_scsi_command(c, 0, 0);
33079b21
MM		 4460#endif
4461 }
4462 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
4463 return;
4464}
4465
1da177e4
LT		 4466module_init(cciss_init);
4467module_exit(cciss_cleanup);
Linux kernel - Deliverables
This page took 0.907781 seconds and 5 git commands to generate.