]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - drivers/block/cciss.c
projects / mirror_ubuntu-bionic-kernel.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cciss: Use one scan thread per controller and fix hang during rmmod
[mirror_ubuntu-bionic-kernel.git] / drivers / block / cciss.c
CommitLineData
1da177e4 1/*
bd4f36d6
MM		 2 * Disk Array driver for HP Smart Array controllers.
3 * (C) Copyright 2000, 2007 Hewlett-Packard Development Company, L.P.
1da177e4
LT		 4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License as published by
bd4f36d6 7 * the Free Software Foundation; version 2 of the License.
1da177e4
LT		 8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
bd4f36d6
MM		 11 * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * General Public License for more details.
1da177e4
LT		 13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
bd4f36d6
MM		 16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA
17 * 02111-1307, USA.
1da177e4
LT		 18 *
19 * Questions/Comments/Bugfixes to iss_storagedev@hp.com
20 *
21 */
22
1da177e4
LT		 23#include <linux/module.h>
24#include <linux/interrupt.h>
25#include <linux/types.h>
26#include <linux/pci.h>
27#include <linux/kernel.h>
28#include <linux/slab.h>
405f5571 29#include <linux/smp_lock.h>
1da177e4
LT		 30#include <linux/delay.h>
31#include <linux/major.h>
32#include <linux/fs.h>
33#include <linux/bio.h>
34#include <linux/blkpg.h>
35#include <linux/timer.h>
36#include <linux/proc_fs.h>
89b6e743 37#include <linux/seq_file.h>
7c832835 38#include <linux/init.h>
4d761609 39#include <linux/jiffies.h>
1da177e4
LT		 40#include <linux/hdreg.h>
41#include <linux/spinlock.h>
42#include <linux/compat.h>
b368c9dd 43#include <linux/mutex.h>
1da177e4
LT		 44#include <asm/uaccess.h>
45#include <asm/io.h>
46
eb0df996 47#include <linux/dma-mapping.h>
1da177e4
LT		 48#include <linux/blkdev.h>
49#include <linux/genhd.h>
50#include <linux/completion.h>
d5d3b736 51#include <scsi/scsi.h>
03bbfee5
MMOD		 52#include <scsi/sg.h>
53#include <scsi/scsi_ioctl.h>
54#include <linux/cdrom.h>
231bc2a2 55#include <linux/scatterlist.h>
0a9279cc 56#include <linux/kthread.h>
1da177e4
LT		 57
58#define CCISS_DRIVER_VERSION(maj,min,submin) ((maj<<16)|(min<<8)|(submin))
24aac480
MM		 59#define DRIVER_NAME "HP CISS Driver (v 3.6.20)"
60#define DRIVER_VERSION CCISS_DRIVER_VERSION(3, 6, 20)
1da177e4
LT		 61
62/* Embedded module documentation macros - see modules.h */
63MODULE_AUTHOR("Hewlett-Packard Company");
24aac480 64MODULE_DESCRIPTION("Driver for HP Smart Array Controllers");
1da177e4 65MODULE_SUPPORTED_DEVICE("HP SA5i SA5i+ SA532 SA5300 SA5312 SA641 SA642 SA6400"
24aac480
MM		 66 " SA6i P600 P800 P400 P400i E200 E200i E500 P700m"
67 " Smart Array G2 Series SAS/SATA Controllers");
68MODULE_VERSION("3.6.20");
1da177e4
LT		 69MODULE_LICENSE("GPL");
70
71#include "cciss_cmd.h"
72#include "cciss.h"
73#include <linux/cciss_ioctl.h>
74
75/* define the PCI info for the cards we can control */
76static const struct pci_device_id cciss_pci_device_id[] = {
f82ccdb9
BH		 77 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISS, 0x0E11, 0x4070},
78 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4080},
79 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4082},
80 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSB, 0x0E11, 0x4083},
81 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x4091},
82 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409A},
83 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409B},
84 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409C},
85 {PCI_VENDOR_ID_COMPAQ, PCI_DEVICE_ID_COMPAQ_CISSC, 0x0E11, 0x409D},
86 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSA, 0x103C, 0x3225},
87 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3223},
88 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3234},
89 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3235},
90 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3211},
91 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3212},
92 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3213},
93 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3214},
94 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSD, 0x103C, 0x3215},
de923916 95 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x3237},
9cff3b38 96 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSC, 0x103C, 0x323D},
24aac480
MM		 97 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3241},
98 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3243},
99 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3245},
100 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3247},
101 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x3249},
77ca7286
MM		 102 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324A},
103 {PCI_VENDOR_ID_HP, PCI_DEVICE_ID_HP_CISSE, 0x103C, 0x324B},
4ff9a9a4
MM		 104 {PCI_VENDOR_ID_HP, PCI_ANY_ID, PCI_ANY_ID, PCI_ANY_ID,
105 PCI_CLASS_STORAGE_RAID << 8, 0xffff << 8, 0},
1da177e4
LT		 106 {0,}
107};
7c832835 108
1da177e4
LT		 109MODULE_DEVICE_TABLE(pci, cciss_pci_device_id);
110
1da177e4
LT		 111/* board_id = Subsystem Device ID & Vendor ID
112 * product = Marketing Name for the board
7c832835 113 * access = Address of the struct of function pointers
1da177e4
LT		 114 */
115static struct board_type products[] = {
49153998
MM		 116 {0x40700E11, "Smart Array 5300", &SA5_access},
117 {0x40800E11, "Smart Array 5i", &SA5B_access},
118 {0x40820E11, "Smart Array 532", &SA5B_access},
119 {0x40830E11, "Smart Array 5312", &SA5B_access},
120 {0x409A0E11, "Smart Array 641", &SA5_access},
121 {0x409B0E11, "Smart Array 642", &SA5_access},
122 {0x409C0E11, "Smart Array 6400", &SA5_access},
123 {0x409D0E11, "Smart Array 6400 EM", &SA5_access},
124 {0x40910E11, "Smart Array 6i", &SA5_access},
125 {0x3225103C, "Smart Array P600", &SA5_access},
126 {0x3223103C, "Smart Array P800", &SA5_access},
127 {0x3234103C, "Smart Array P400", &SA5_access},
128 {0x3235103C, "Smart Array P400i", &SA5_access},
129 {0x3211103C, "Smart Array E200i", &SA5_access},
130 {0x3212103C, "Smart Array E200", &SA5_access},
131 {0x3213103C, "Smart Array E200i", &SA5_access},
132 {0x3214103C, "Smart Array E200i", &SA5_access},
133 {0x3215103C, "Smart Array E200i", &SA5_access},
134 {0x3237103C, "Smart Array E500", &SA5_access},
135 {0x323D103C, "Smart Array P700m", &SA5_access},
136 {0x3241103C, "Smart Array P212", &SA5_access},
137 {0x3243103C, "Smart Array P410", &SA5_access},
138 {0x3245103C, "Smart Array P410i", &SA5_access},
139 {0x3247103C, "Smart Array P411", &SA5_access},
140 {0x3249103C, "Smart Array P812", &SA5_access},
77ca7286
MM		 141 {0x324A103C, "Smart Array P712m", &SA5_access},
142 {0x324B103C, "Smart Array P711m", &SA5_access},
49153998 143 {0xFFFF103C, "Unknown Smart Array", &SA5_access},
1da177e4
LT		 144};
145
d14c4ab5 146/* How long to wait (in milliseconds) for board to go into simple mode */
7c832835 147#define MAX_CONFIG_WAIT 30000
1da177e4
LT		 148#define MAX_IOCTL_CONFIG_WAIT 1000
149
150/*define how many times we will try a command because of bus resets */
151#define MAX_CMD_RETRIES 3
152
1da177e4
LT		 153#define MAX_CTLR 32
154
155/* Originally cciss driver only supports 8 major numbers */
156#define MAX_CTLR_ORIG 8
157
1da177e4
LT		 158static ctlr_info_t *hba[MAX_CTLR];
159
b368c9dd
AP		 160static struct task_struct *cciss_scan_thread;
161static DEFINE_MUTEX(scan_mutex);
162static LIST_HEAD(scan_q);
163
165125e1 164static void do_cciss_request(struct request_queue *q);
7d12e780 165static irqreturn_t do_cciss_intr(int irq, void *dev_id);
ef7822c2
AV		 166static int cciss_open(struct block_device *bdev, fmode_t mode);
167static int cciss_release(struct gendisk *disk, fmode_t mode);
168static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 169 unsigned int cmd, unsigned long arg);
a885c8c4 170static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo);
1da177e4 171
1da177e4 172static int cciss_revalidate(struct gendisk *disk);
6ae5ce8e 173static int rebuild_lun_table(ctlr_info_t *h, int first_time);
a0ea8622 174static int deregister_disk(ctlr_info_t *h, int drv_index,
7c832835 175 int clear_all);
1da177e4 176
00988a35
MMOD		 177static void cciss_read_capacity(int ctlr, int logvol, int withirq,
178 sector_t *total_size, unsigned int *block_size);
179static void cciss_read_capacity_16(int ctlr, int logvol, int withirq,
180 sector_t *total_size, unsigned int *block_size);
181static void cciss_geometry_inquiry(int ctlr, int logvol,
182 int withirq, sector_t total_size,
183 unsigned int block_size, InquiryData_struct *inq_buff,
7c832835 184 drive_info_struct *drv);
7c832835
BH		 185static void __devinit cciss_interrupt_mode(ctlr_info_t *, struct pci_dev *,
186 __u32);
187static void start_io(ctlr_info_t *h);
188static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
7c832835
BH		 189 __u8 page_code, unsigned char *scsi3addr, int cmd_type);
190static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
b57695fe 191 __u8 page_code, unsigned char scsi3addr[],
192 int cmd_type);
85cc61ae 193static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
194 int attempt_retry);
195static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c);
1da177e4 196
33079b21 197static void fail_all_cmds(unsigned long ctlr);
0a9279cc
MM		 198static int scan_thread(void *data);
199static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c);
33079b21 200
1da177e4 201#ifdef CONFIG_PROC_FS
1da177e4
LT		 202static void cciss_procinit(int i);
203#else
7c832835
BH		 204static void cciss_procinit(int i)
205{
206}
207#endif /* CONFIG_PROC_FS */
1da177e4
LT		 208
209#ifdef CONFIG_COMPAT
ef7822c2
AV		 210static int cciss_compat_ioctl(struct block_device *, fmode_t,
211 unsigned, unsigned long);
1da177e4
LT		 212#endif
213
83d5cde4 214static const struct block_device_operations cciss_fops = {
7c832835 215 .owner = THIS_MODULE,
ef7822c2
AV		 216 .open = cciss_open,
217 .release = cciss_release,
218 .locked_ioctl = cciss_ioctl,
7c832835 219 .getgeo = cciss_getgeo,
1da177e4 220#ifdef CONFIG_COMPAT
ef7822c2 221 .compat_ioctl = cciss_compat_ioctl,
1da177e4 222#endif
7c832835 223 .revalidate_disk = cciss_revalidate,
1da177e4
LT		 224};
225
226/*
227 * Enqueuing and dequeuing functions for cmdlists.
228 */
8a3173de 229static inline void addQ(struct hlist_head *list, CommandList_struct *c)
1da177e4 230{
8a3173de 231 hlist_add_head(&c->list, list);
1da177e4
LT		 232}
233
8a3173de 234static inline void removeQ(CommandList_struct *c)
1da177e4 235{
b59e64d0
HR		 236 /*
237 * After kexec/dump some commands might still
238 * be in flight, which the firmware will try
239 * to complete. Resetting the firmware doesn't work
240 * with old fw revisions, so we have to mark
241 * them off as 'stale' to prevent the driver from
242 * falling over.
243 */
244 if (WARN_ON(hlist_unhashed(&c->list))) {
245 c->cmd_type = CMD_MSG_STALE;
8a3173de 246 return;
b59e64d0 247 }
8a3173de
JA		 248
249 hlist_del_init(&c->list);
1da177e4
LT		 250}
251
252#include "cciss_scsi.c" /* For SCSI tape support */
253
0f5486ec
RD		 254#define RAID_UNKNOWN 6
255
1da177e4
LT		 256#ifdef CONFIG_PROC_FS
257
258/*
259 * Report information about this controller.
260 */
261#define ENG_GIG 1000000000
262#define ENG_GIG_FACTOR (ENG_GIG/512)
89b6e743 263#define ENGAGE_SCSI "engage scsi"
7c832835
BH		 264static const char *raid_label[] = { "0", "4", "1(1+0)", "5", "5+1", "ADG",
265 "UNKNOWN"
266};
1da177e4
LT		 267
268static struct proc_dir_entry *proc_cciss;
269
89b6e743 270static void cciss_seq_show_header(struct seq_file *seq)
1da177e4 271{
89b6e743
MM		 272 ctlr_info_t *h = seq->private;
273
274 seq_printf(seq, "%s: HP %s Controller\n"
275 "Board ID: 0x%08lx\n"
276 "Firmware Version: %c%c%c%c\n"
277 "IRQ: %d\n"
278 "Logical drives: %d\n"
279 "Current Q depth: %d\n"
280 "Current # commands on controller: %d\n"
281 "Max Q depth since init: %d\n"
282 "Max # commands on controller since init: %d\n"
283 "Max SG entries since init: %d\n",
284 h->devname,
285 h->product_name,
286 (unsigned long)h->board_id,
287 h->firm_ver[0], h->firm_ver[1], h->firm_ver[2],
288 h->firm_ver[3], (unsigned int)h->intr[SIMPLE_MODE_INT],
289 h->num_luns,
290 h->Qdepth, h->commands_outstanding,
291 h->maxQsinceinit, h->max_outstanding, h->maxSG);
292
293#ifdef CONFIG_CISS_SCSI_TAPE
294 cciss_seq_tape_report(seq, h->ctlr);
295#endif /* CONFIG_CISS_SCSI_TAPE */
296}
1da177e4 297
89b6e743
MM		 298static void *cciss_seq_start(struct seq_file *seq, loff_t *pos)
299{
300 ctlr_info_t *h = seq->private;
301 unsigned ctlr = h->ctlr;
302 unsigned long flags;
1da177e4
LT		 303
304 /* prevent displaying bogus info during configuration
305 * or deconfiguration of a logical volume
306 */
307 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
308 if (h->busy_configuring) {
309 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
89b6e743 310 return ERR_PTR(-EBUSY);
1da177e4
LT		 311 }
312 h->busy_configuring = 1;
313 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
314
89b6e743
MM		 315 if (*pos == 0)
316 cciss_seq_show_header(seq);
317
318 return pos;
319}
320
321static int cciss_seq_show(struct seq_file *seq, void *v)
322{
323 sector_t vol_sz, vol_sz_frac;
324 ctlr_info_t *h = seq->private;
325 unsigned ctlr = h->ctlr;
326 loff_t *pos = v;
327 drive_info_struct *drv = &h->drv[*pos];
328
329 if (*pos > h->highest_lun)
330 return 0;
331
332 if (drv->heads == 0)
333 return 0;
334
335 vol_sz = drv->nr_blocks;
336 vol_sz_frac = sector_div(vol_sz, ENG_GIG_FACTOR);
337 vol_sz_frac *= 100;
338 sector_div(vol_sz_frac, ENG_GIG_FACTOR);
339
340 if (drv->raid_level > 5)
341 drv->raid_level = RAID_UNKNOWN;
342 seq_printf(seq, "cciss/c%dd%d:"
343 "\t%4u.%02uGB\tRAID %s\n",
344 ctlr, (int) *pos, (int)vol_sz, (int)vol_sz_frac,
345 raid_label[drv->raid_level]);
346 return 0;
347}
348
349static void *cciss_seq_next(struct seq_file *seq, void *v, loff_t *pos)
350{
351 ctlr_info_t *h = seq->private;
352
353 if (*pos > h->highest_lun)
354 return NULL;
355 *pos += 1;
356
357 return pos;
358}
359
360static void cciss_seq_stop(struct seq_file *seq, void *v)
361{
362 ctlr_info_t *h = seq->private;
363
364 /* Only reset h->busy_configuring if we succeeded in setting
365 * it during cciss_seq_start. */
366 if (v == ERR_PTR(-EBUSY))
367 return;
7c832835 368
1da177e4 369 h->busy_configuring = 0;
1da177e4
LT		 370}
371
88e9d34c 372static const struct seq_operations cciss_seq_ops = {
89b6e743
MM		 373 .start = cciss_seq_start,
374 .show = cciss_seq_show,
375 .next = cciss_seq_next,
376 .stop = cciss_seq_stop,
377};
378
379static int cciss_seq_open(struct inode *inode, struct file *file)
380{
381 int ret = seq_open(file, &cciss_seq_ops);
382 struct seq_file *seq = file->private_data;
383
384 if (!ret)
385 seq->private = PDE(inode)->data;
386
387 return ret;
388}
389
390static ssize_t
391cciss_proc_write(struct file *file, const char __user *buf,
392 size_t length, loff_t *ppos)
1da177e4 393{
89b6e743
MM		 394 int err;
395 char *buffer;
396
397#ifndef CONFIG_CISS_SCSI_TAPE
398 return -EINVAL;
1da177e4
LT		 399#endif
400
89b6e743 401 if (!buf || length > PAGE_SIZE - 1)
7c832835 402 return -EINVAL;
89b6e743
MM		 403
404 buffer = (char *)__get_free_page(GFP_KERNEL);
405 if (!buffer)
406 return -ENOMEM;
407
408 err = -EFAULT;
409 if (copy_from_user(buffer, buf, length))
410 goto out;
411 buffer[length] = '\0';
412
413#ifdef CONFIG_CISS_SCSI_TAPE
414 if (strncmp(ENGAGE_SCSI, buffer, sizeof ENGAGE_SCSI - 1) == 0) {
415 struct seq_file *seq = file->private_data;
416 ctlr_info_t *h = seq->private;
417 int rc;
418
7c832835
BH		 419 rc = cciss_engage_scsi(h->ctlr);
420 if (rc != 0)
89b6e743
MM		 421 err = -rc;
422 else
423 err = length;
424 } else
425#endif /* CONFIG_CISS_SCSI_TAPE */
426 err = -EINVAL;
7c832835
BH		 427 /* might be nice to have "disengage" too, but it's not
428 safely possible. (only 1 module use count, lock issues.) */
89b6e743
MM		 429
430out:
431 free_page((unsigned long)buffer);
432 return err;
1da177e4
LT		 433}
434
89b6e743
MM		 435static struct file_operations cciss_proc_fops = {
436 .owner = THIS_MODULE,
437 .open = cciss_seq_open,
438 .read = seq_read,
439 .llseek = seq_lseek,
440 .release = seq_release,
441 .write = cciss_proc_write,
442};
443
1da177e4
LT		 444static void __devinit cciss_procinit(int i)
445{
446 struct proc_dir_entry *pde;
447
89b6e743 448 if (proc_cciss == NULL)
928b4d8c 449 proc_cciss = proc_mkdir("driver/cciss", NULL);
89b6e743
MM		 450 if (!proc_cciss)
451 return;
3dfcf9c4 452 pde = proc_create_data(hba[i]->devname, S_IWUSR | S_IRUSR | S_IRGRP |
89b6e743 453 S_IROTH, proc_cciss,
3dfcf9c4 454 &cciss_proc_fops, hba[i]);
1da177e4 455}
7c832835 456#endif /* CONFIG_PROC_FS */
1da177e4 457
7fe06326
AP		 458#define MAX_PRODUCT_NAME_LEN 19
459
460#define to_hba(n) container_of(n, struct ctlr_info, dev)
461#define to_drv(n) container_of(n, drive_info_struct, dev)
462
463static struct device_type cciss_host_type = {
464 .name = "cciss_host",
465};
466
467static ssize_t dev_show_unique_id(struct device *dev,
468 struct device_attribute *attr,
469 char *buf)
470{
471 drive_info_struct *drv = to_drv(dev);
472 struct ctlr_info *h = to_hba(drv->dev.parent);
473 __u8 sn[16];
474 unsigned long flags;
475 int ret = 0;
476
477 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
478 if (h->busy_configuring)
479 ret = -EBUSY;
480 else
481 memcpy(sn, drv->serial_no, sizeof(sn));
482 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
483
484 if (ret)
485 return ret;
486 else
487 return snprintf(buf, 16 * 2 + 2,
488 "%02X%02X%02X%02X%02X%02X%02X%02X"
489 "%02X%02X%02X%02X%02X%02X%02X%02X\n",
490 sn[0], sn[1], sn[2], sn[3],
491 sn[4], sn[5], sn[6], sn[7],
492 sn[8], sn[9], sn[10], sn[11],
493 sn[12], sn[13], sn[14], sn[15]);
494}
495DEVICE_ATTR(unique_id, S_IRUGO, dev_show_unique_id, NULL);
496
497static ssize_t dev_show_vendor(struct device *dev,
498 struct device_attribute *attr,
499 char *buf)
500{
501 drive_info_struct *drv = to_drv(dev);
502 struct ctlr_info *h = to_hba(drv->dev.parent);
503 char vendor[VENDOR_LEN + 1];
504 unsigned long flags;
505 int ret = 0;
506
507 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
508 if (h->busy_configuring)
509 ret = -EBUSY;
510 else
511 memcpy(vendor, drv->vendor, VENDOR_LEN + 1);
512 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
513
514 if (ret)
515 return ret;
516 else
517 return snprintf(buf, sizeof(vendor) + 1, "%s\n", drv->vendor);
518}
519DEVICE_ATTR(vendor, S_IRUGO, dev_show_vendor, NULL);
520
521static ssize_t dev_show_model(struct device *dev,
522 struct device_attribute *attr,
523 char *buf)
524{
525 drive_info_struct *drv = to_drv(dev);
526 struct ctlr_info *h = to_hba(drv->dev.parent);
527 char model[MODEL_LEN + 1];
528 unsigned long flags;
529 int ret = 0;
530
531 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
532 if (h->busy_configuring)
533 ret = -EBUSY;
534 else
535 memcpy(model, drv->model, MODEL_LEN + 1);
536 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
537
538 if (ret)
539 return ret;
540 else
541 return snprintf(buf, sizeof(model) + 1, "%s\n", drv->model);
542}
543DEVICE_ATTR(model, S_IRUGO, dev_show_model, NULL);
544
545static ssize_t dev_show_rev(struct device *dev,
546 struct device_attribute *attr,
547 char *buf)
548{
549 drive_info_struct *drv = to_drv(dev);
550 struct ctlr_info *h = to_hba(drv->dev.parent);
551 char rev[REV_LEN + 1];
552 unsigned long flags;
553 int ret = 0;
554
555 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
556 if (h->busy_configuring)
557 ret = -EBUSY;
558 else
559 memcpy(rev, drv->rev, REV_LEN + 1);
560 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
561
562 if (ret)
563 return ret;
564 else
565 return snprintf(buf, sizeof(rev) + 1, "%s\n", drv->rev);
566}
567DEVICE_ATTR(rev, S_IRUGO, dev_show_rev, NULL);
568
569static struct attribute *cciss_dev_attrs[] = {
570 &dev_attr_unique_id.attr,
571 &dev_attr_model.attr,
572 &dev_attr_vendor.attr,
573 &dev_attr_rev.attr,
574 NULL
575};
576
577static struct attribute_group cciss_dev_attr_group = {
578 .attrs = cciss_dev_attrs,
579};
580
a4dbd674 581static const struct attribute_group *cciss_dev_attr_groups[] = {
7fe06326
AP		 582 &cciss_dev_attr_group,
583 NULL
584};
585
586static struct device_type cciss_dev_type = {
587 .name = "cciss_device",
588 .groups = cciss_dev_attr_groups,
589};
590
591static struct bus_type cciss_bus_type = {
592 .name = "cciss",
593};
594
595
596/*
597 * Initialize sysfs entry for each controller. This sets up and registers
598 * the 'cciss#' directory for each individual controller under
599 * /sys/bus/pci/devices/<dev>/.
600 */
601static int cciss_create_hba_sysfs_entry(struct ctlr_info *h)
602{
603 device_initialize(&h->dev);
604 h->dev.type = &cciss_host_type;
605 h->dev.bus = &cciss_bus_type;
606 dev_set_name(&h->dev, "%s", h->devname);
607 h->dev.parent = &h->pdev->dev;
608
609 return device_add(&h->dev);
610}
611
612/*
613 * Remove sysfs entries for an hba.
614 */
615static void cciss_destroy_hba_sysfs_entry(struct ctlr_info *h)
616{
617 device_del(&h->dev);
618}
619
620/*
621 * Initialize sysfs for each logical drive. This sets up and registers
622 * the 'c#d#' directory for each individual logical drive under
623 * /sys/bus/pci/devices/<dev/ccis#/. We also create a link from
624 * /sys/block/cciss!c#d# to this entry.
625 */
626static int cciss_create_ld_sysfs_entry(struct ctlr_info *h,
627 drive_info_struct *drv,
628 int drv_index)
629{
630 device_initialize(&drv->dev);
631 drv->dev.type = &cciss_dev_type;
632 drv->dev.bus = &cciss_bus_type;
633 dev_set_name(&drv->dev, "c%dd%d", h->ctlr, drv_index);
634 drv->dev.parent = &h->dev;
635 return device_add(&drv->dev);
636}
637
638/*
639 * Remove sysfs entries for a logical drive.
640 */
641static void cciss_destroy_ld_sysfs_entry(drive_info_struct *drv)
642{
643 device_del(&drv->dev);
644}
645
7c832835
BH		 646/*
647 * For operations that cannot sleep, a command block is allocated at init,
1da177e4 648 * and managed by cmd_alloc() and cmd_free() using a simple bitmap to track
7c832835
BH		 649 * which ones are free or in use. For operations that can wait for kmalloc
650 * to possible sleep, this routine can be called with get_from_pool set to 0.
651 * cmd_free() MUST be called with a got_from_pool set to 0 if cmd_alloc was.
652 */
653static CommandList_struct *cmd_alloc(ctlr_info_t *h, int get_from_pool)
1da177e4
LT		 654{
655 CommandList_struct *c;
7c832835 656 int i;
1da177e4
LT		 657 u64bit temp64;
658 dma_addr_t cmd_dma_handle, err_dma_handle;
659
7c832835
BH		 660 if (!get_from_pool) {
661 c = (CommandList_struct *) pci_alloc_consistent(h->pdev,
662 sizeof(CommandList_struct), &cmd_dma_handle);
663 if (c == NULL)
664 return NULL;
1da177e4
LT		 665 memset(c, 0, sizeof(CommandList_struct));
666
33079b21
MM		 667 c->cmdindex = -1;
668
7c832835
BH		 669 c->err_info = (ErrorInfo_struct *)
670 pci_alloc_consistent(h->pdev, sizeof(ErrorInfo_struct),
671 &err_dma_handle);
672
673 if (c->err_info == NULL) {
674 pci_free_consistent(h->pdev,
1da177e4
LT		 675 sizeof(CommandList_struct), c, cmd_dma_handle);
676 return NULL;
677 }
678 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 679 } else { /* get it out of the controllers pool */
680
681 do {
f880632f
MM		 682 i = find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds);
683 if (i == h->nr_cmds)
7c832835
BH		 684 return NULL;
685 } while (test_and_set_bit
686 (i & (BITS_PER_LONG - 1),
687 h->cmd_pool_bits + (i / BITS_PER_LONG)) != 0);
1da177e4
LT		 688#ifdef CCISS_DEBUG
689 printk(KERN_DEBUG "cciss: using command buffer %d\n", i);
690#endif
7c832835 691 c = h->cmd_pool + i;
1da177e4 692 memset(c, 0, sizeof(CommandList_struct));
7c832835
BH		 693 cmd_dma_handle = h->cmd_pool_dhandle
694 + i * sizeof(CommandList_struct);
1da177e4
LT		 695 c->err_info = h->errinfo_pool + i;
696 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
7c832835
BH		 697 err_dma_handle = h->errinfo_pool_dhandle
698 + i * sizeof(ErrorInfo_struct);
699 h->nr_allocs++;
33079b21
MM		 700
701 c->cmdindex = i;
7c832835 702 }
1da177e4 703
8a3173de 704 INIT_HLIST_NODE(&c->list);
1da177e4 705 c->busaddr = (__u32) cmd_dma_handle;
7c832835 706 temp64.val = (__u64) err_dma_handle;
1da177e4
LT		 707 c->ErrDesc.Addr.lower = temp64.val32.lower;
708 c->ErrDesc.Addr.upper = temp64.val32.upper;
709 c->ErrDesc.Len = sizeof(ErrorInfo_struct);
1da177e4 710
7c832835
BH		 711 c->ctlr = h->ctlr;
712 return c;
1da177e4
LT		 713}
714
7c832835
BH		 715/*
716 * Frees a command block that was previously allocated with cmd_alloc().
1da177e4
LT		 717 */
718static void cmd_free(ctlr_info_t *h, CommandList_struct *c, int got_from_pool)
719{
720 int i;
721 u64bit temp64;
722
7c832835 723 if (!got_from_pool) {
1da177e4
LT		 724 temp64.val32.lower = c->ErrDesc.Addr.lower;
725 temp64.val32.upper = c->ErrDesc.Addr.upper;
7c832835
BH		 726 pci_free_consistent(h->pdev, sizeof(ErrorInfo_struct),
727 c->err_info, (dma_addr_t) temp64.val);
728 pci_free_consistent(h->pdev, sizeof(CommandList_struct),
729 c, (dma_addr_t) c->busaddr);
730 } else {
1da177e4 731 i = c - h->cmd_pool;
7c832835
BH		 732 clear_bit(i & (BITS_PER_LONG - 1),
733 h->cmd_pool_bits + (i / BITS_PER_LONG));
734 h->nr_frees++;
735 }
1da177e4
LT		 736}
737
738static inline ctlr_info_t *get_host(struct gendisk *disk)
739{
7c832835 740 return disk->queue->queuedata;
1da177e4
LT		 741}
742
743static inline drive_info_struct *get_drv(struct gendisk *disk)
744{
745 return disk->private_data;
746}
747
748/*
749 * Open. Make sure the device is really there.
750 */
ef7822c2 751static int cciss_open(struct block_device *bdev, fmode_t mode)
1da177e4 752{
ef7822c2
AV		 753 ctlr_info_t *host = get_host(bdev->bd_disk);
754 drive_info_struct *drv = get_drv(bdev->bd_disk);
1da177e4
LT		 755
756#ifdef CCISS_DEBUG
ef7822c2 757 printk(KERN_DEBUG "cciss_open %s\n", bdev->bd_disk->disk_name);
7c832835 758#endif /* CCISS_DEBUG */
1da177e4 759
ddd47442
MM		 760 if (host->busy_initializing || drv->busy_configuring)
761 return -EBUSY;
1da177e4
LT		 762 /*
763 * Root is allowed to open raw volume zero even if it's not configured
764 * so array config can still work. Root is also allowed to open any
765 * volume that has a LUN ID, so it can issue IOCTL to reread the
766 * disk information. I don't think I really like this
767 * but I'm already using way to many device nodes to claim another one
768 * for "raw controller".
769 */
7a06f789 770 if (drv->heads == 0) {
ef7822c2 771 if (MINOR(bdev->bd_dev) != 0) { /* not node 0? */
1da177e4 772 /* if not node 0 make sure it is a partition = 0 */
ef7822c2 773 if (MINOR(bdev->bd_dev) & 0x0f) {
7c832835 774 return -ENXIO;
1da177e4
LT		 775 /* if it is, make sure we have a LUN ID */
776 } else if (drv->LunID == 0) {
777 return -ENXIO;
778 }
779 }
780 if (!capable(CAP_SYS_ADMIN))
781 return -EPERM;
782 }
783 drv->usage_count++;
784 host->usage_count++;
785 return 0;
786}
7c832835 787
1da177e4
LT		 788/*
789 * Close. Sync first.
790 */
ef7822c2 791static int cciss_release(struct gendisk *disk, fmode_t mode)
1da177e4 792{
ef7822c2
AV		 793 ctlr_info_t *host = get_host(disk);
794 drive_info_struct *drv = get_drv(disk);
1da177e4
LT		 795
796#ifdef CCISS_DEBUG
ef7822c2 797 printk(KERN_DEBUG "cciss_release %s\n", disk->disk_name);
7c832835 798#endif /* CCISS_DEBUG */
1da177e4
LT		 799
800 drv->usage_count--;
801 host->usage_count--;
802 return 0;
803}
804
805#ifdef CONFIG_COMPAT
806
ef7822c2
AV		 807static int do_ioctl(struct block_device *bdev, fmode_t mode,
808 unsigned cmd, unsigned long arg)
1da177e4
LT		 809{
810 int ret;
811 lock_kernel();
ef7822c2 812 ret = cciss_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 813 unlock_kernel();
814 return ret;
815}
816
ef7822c2
AV		 817static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
818 unsigned cmd, unsigned long arg);
819static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
820 unsigned cmd, unsigned long arg);
1da177e4 821
ef7822c2
AV		 822static int cciss_compat_ioctl(struct block_device *bdev, fmode_t mode,
823 unsigned cmd, unsigned long arg)
1da177e4
LT		 824{
825 switch (cmd) {
826 case CCISS_GETPCIINFO:
827 case CCISS_GETINTINFO:
828 case CCISS_SETINTINFO:
829 case CCISS_GETNODENAME:
830 case CCISS_SETNODENAME:
831 case CCISS_GETHEARTBEAT:
832 case CCISS_GETBUSTYPES:
833 case CCISS_GETFIRMVER:
834 case CCISS_GETDRIVVER:
835 case CCISS_REVALIDVOLS:
836 case CCISS_DEREGDISK:
837 case CCISS_REGNEWDISK:
838 case CCISS_REGNEWD:
839 case CCISS_RESCANDISK:
840 case CCISS_GETLUNINFO:
ef7822c2 841 return do_ioctl(bdev, mode, cmd, arg);
1da177e4
LT		 842
843 case CCISS_PASSTHRU32:
ef7822c2 844 return cciss_ioctl32_passthru(bdev, mode, cmd, arg);
1da177e4 845 case CCISS_BIG_PASSTHRU32:
ef7822c2 846 return cciss_ioctl32_big_passthru(bdev, mode, cmd, arg);
1da177e4
LT		 847
848 default:
849 return -ENOIOCTLCMD;
850 }
851}
852
ef7822c2
AV		 853static int cciss_ioctl32_passthru(struct block_device *bdev, fmode_t mode,
854 unsigned cmd, unsigned long arg)
1da177e4
LT		 855{
856 IOCTL32_Command_struct __user *arg32 =
7c832835 857 (IOCTL32_Command_struct __user *) arg;
1da177e4
LT		 858 IOCTL_Command_struct arg64;
859 IOCTL_Command_struct __user *p = compat_alloc_user_space(sizeof(arg64));
860 int err;
861 u32 cp;
862
863 err = 0;
7c832835
BH		 864 err |=
865 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
866 sizeof(arg64.LUN_info));
867 err |=
868 copy_from_user(&arg64.Request, &arg32->Request,
869 sizeof(arg64.Request));
870 err |=
871 copy_from_user(&arg64.error_info, &arg32->error_info,
872 sizeof(arg64.error_info));
1da177e4
LT		 873 err |= get_user(arg64.buf_size, &arg32->buf_size);
874 err |= get_user(cp, &arg32->buf);
875 arg64.buf = compat_ptr(cp);
876 err |= copy_to_user(p, &arg64, sizeof(arg64));
877
878 if (err)
879 return -EFAULT;
880
ef7822c2 881 err = do_ioctl(bdev, mode, CCISS_PASSTHRU, (unsigned long)p);
1da177e4
LT		 882 if (err)
883 return err;
7c832835
BH		 884 err |=
885 copy_in_user(&arg32->error_info, &p->error_info,
886 sizeof(arg32->error_info));
1da177e4
LT		 887 if (err)
888 return -EFAULT;
889 return err;
890}
891
ef7822c2
AV		 892static int cciss_ioctl32_big_passthru(struct block_device *bdev, fmode_t mode,
893 unsigned cmd, unsigned long arg)
1da177e4
LT		 894{
895 BIG_IOCTL32_Command_struct __user *arg32 =
7c832835 896 (BIG_IOCTL32_Command_struct __user *) arg;
1da177e4 897 BIG_IOCTL_Command_struct arg64;
7c832835
BH		 898 BIG_IOCTL_Command_struct __user *p =
899 compat_alloc_user_space(sizeof(arg64));
1da177e4
LT		 900 int err;
901 u32 cp;
902
903 err = 0;
7c832835
BH		 904 err |=
905 copy_from_user(&arg64.LUN_info, &arg32->LUN_info,
906 sizeof(arg64.LUN_info));
907 err |=
908 copy_from_user(&arg64.Request, &arg32->Request,
909 sizeof(arg64.Request));
910 err |=
911 copy_from_user(&arg64.error_info, &arg32->error_info,
912 sizeof(arg64.error_info));
1da177e4
LT		 913 err |= get_user(arg64.buf_size, &arg32->buf_size);
914 err |= get_user(arg64.malloc_size, &arg32->malloc_size);
915 err |= get_user(cp, &arg32->buf);
916 arg64.buf = compat_ptr(cp);
917 err |= copy_to_user(p, &arg64, sizeof(arg64));
918
919 if (err)
7c832835 920 return -EFAULT;
1da177e4 921
ef7822c2 922 err = do_ioctl(bdev, mode, CCISS_BIG_PASSTHRU, (unsigned long)p);
1da177e4
LT		 923 if (err)
924 return err;
7c832835
BH		 925 err |=
926 copy_in_user(&arg32->error_info, &p->error_info,
927 sizeof(arg32->error_info));
1da177e4
LT		 928 if (err)
929 return -EFAULT;
930 return err;
931}
932#endif
a885c8c4
CH		 933
934static int cciss_getgeo(struct block_device *bdev, struct hd_geometry *geo)
935{
936 drive_info_struct *drv = get_drv(bdev->bd_disk);
937
938 if (!drv->cylinders)
939 return -ENXIO;
940
941 geo->heads = drv->heads;
942 geo->sectors = drv->sectors;
943 geo->cylinders = drv->cylinders;
944 return 0;
945}
946
0a9279cc
MM		 947static void check_ioctl_unit_attention(ctlr_info_t *host, CommandList_struct *c)
948{
949 if (c->err_info->CommandStatus == CMD_TARGET_STATUS &&
950 c->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION)
951 (void)check_for_unit_attention(host, c);
952}
1da177e4 953/*
7c832835 954 * ioctl
1da177e4 955 */
ef7822c2 956static int cciss_ioctl(struct block_device *bdev, fmode_t mode,
7c832835 957 unsigned int cmd, unsigned long arg)
1da177e4 958{
1da177e4
LT		 959 struct gendisk *disk = bdev->bd_disk;
960 ctlr_info_t *host = get_host(disk);
961 drive_info_struct *drv = get_drv(disk);
962 int ctlr = host->ctlr;
963 void __user *argp = (void __user *)arg;
964
965#ifdef CCISS_DEBUG
966 printk(KERN_DEBUG "cciss_ioctl: Called with cmd=%x %lx\n", cmd, arg);
7c832835
BH		 967#endif /* CCISS_DEBUG */
968
969 switch (cmd) {
1da177e4 970 case CCISS_GETPCIINFO:
7c832835
BH		 971 {
972 cciss_pci_info_struct pciinfo;
973
974 if (!arg)
975 return -EINVAL;
976 pciinfo.domain = pci_domain_nr(host->pdev->bus);
977 pciinfo.bus = host->pdev->bus->number;
978 pciinfo.dev_fn = host->pdev->devfn;
979 pciinfo.board_id = host->board_id;
980 if (copy_to_user
981 (argp, &pciinfo, sizeof(cciss_pci_info_struct)))
982 return -EFAULT;
983 return 0;
984 }
1da177e4 985 case CCISS_GETINTINFO:
7c832835
BH		 986 {
987 cciss_coalint_struct intinfo;
988 if (!arg)
989 return -EINVAL;
990 intinfo.delay =
991 readl(&host->cfgtable->HostWrite.CoalIntDelay);
992 intinfo.count =
993 readl(&host->cfgtable->HostWrite.CoalIntCount);
994 if (copy_to_user
995 (argp, &intinfo, sizeof(cciss_coalint_struct)))
996 return -EFAULT;
997 return 0;
998 }
1da177e4 999 case CCISS_SETINTINFO:
1da177e4 1000 {
7c832835
BH		 1001 cciss_coalint_struct intinfo;
1002 unsigned long flags;
1003 int i;
1004
1005 if (!arg)
1006 return -EINVAL;
1007 if (!capable(CAP_SYS_ADMIN))
1008 return -EPERM;
1009 if (copy_from_user
1010 (&intinfo, argp, sizeof(cciss_coalint_struct)))
1011 return -EFAULT;
1012 if ((intinfo.delay == 0) && (intinfo.count == 0))
1013 {
1014// printk("cciss_ioctl: delay and count cannot be 0\n");
1015 return -EINVAL;
1016 }
1017 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1018 /* Update the field, and then ring the doorbell */
1019 writel(intinfo.delay,
1020 &(host->cfgtable->HostWrite.CoalIntDelay));
1021 writel(intinfo.count,
1022 &(host->cfgtable->HostWrite.CoalIntCount));
1023 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1024
1025 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1026 if (!(readl(host->vaddr + SA5_DOORBELL)
1027 & CFGTBL_ChangeReq))
1028 break;
1029 /* delay and try again */
1030 udelay(1000);
1031 }
1032 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1033 if (i >= MAX_IOCTL_CONFIG_WAIT)
1034 return -EAGAIN;
1035 return 0;
1da177e4 1036 }
1da177e4 1037 case CCISS_GETNODENAME:
7c832835
BH		 1038 {
1039 NodeName_type NodeName;
1040 int i;
1041
1042 if (!arg)
1043 return -EINVAL;
1044 for (i = 0; i < 16; i++)
1045 NodeName[i] =
1046 readb(&host->cfgtable->ServerName[i]);
1047 if (copy_to_user(argp, NodeName, sizeof(NodeName_type)))
1048 return -EFAULT;
1049 return 0;
1050 }
1da177e4 1051 case CCISS_SETNODENAME:
7c832835
BH		 1052 {
1053 NodeName_type NodeName;
1054 unsigned long flags;
1055 int i;
1056
1057 if (!arg)
1058 return -EINVAL;
1059 if (!capable(CAP_SYS_ADMIN))
1060 return -EPERM;
1061
1062 if (copy_from_user
1063 (NodeName, argp, sizeof(NodeName_type)))
1064 return -EFAULT;
1065
1066 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1067
1068 /* Update the field, and then ring the doorbell */
1069 for (i = 0; i < 16; i++)
1070 writeb(NodeName[i],
1071 &host->cfgtable->ServerName[i]);
1072
1073 writel(CFGTBL_ChangeReq, host->vaddr + SA5_DOORBELL);
1074
1075 for (i = 0; i < MAX_IOCTL_CONFIG_WAIT; i++) {
1076 if (!(readl(host->vaddr + SA5_DOORBELL)
1077 & CFGTBL_ChangeReq))
1078 break;
1079 /* delay and try again */
1080 udelay(1000);
1081 }
1082 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1083 if (i >= MAX_IOCTL_CONFIG_WAIT)
1084 return -EAGAIN;
1085 return 0;
1086 }
1da177e4
LT		 1087
1088 case CCISS_GETHEARTBEAT:
7c832835
BH		 1089 {
1090 Heartbeat_type heartbeat;
1091
1092 if (!arg)
1093 return -EINVAL;
1094 heartbeat = readl(&host->cfgtable->HeartBeat);
1095 if (copy_to_user
1096 (argp, &heartbeat, sizeof(Heartbeat_type)))
1097 return -EFAULT;
1098 return 0;
1099 }
1da177e4 1100 case CCISS_GETBUSTYPES:
7c832835
BH		 1101 {
1102 BusTypes_type BusTypes;
1103
1104 if (!arg)
1105 return -EINVAL;
1106 BusTypes = readl(&host->cfgtable->BusTypes);
1107 if (copy_to_user
1108 (argp, &BusTypes, sizeof(BusTypes_type)))
1109 return -EFAULT;
1110 return 0;
1111 }
1da177e4 1112 case CCISS_GETFIRMVER:
7c832835
BH		 1113 {
1114 FirmwareVer_type firmware;
1da177e4 1115
7c832835
BH		 1116 if (!arg)
1117 return -EINVAL;
1118 memcpy(firmware, host->firm_ver, 4);
1da177e4 1119
7c832835
BH		 1120 if (copy_to_user
1121 (argp, firmware, sizeof(FirmwareVer_type)))
1122 return -EFAULT;
1123 return 0;
1124 }
1125 case CCISS_GETDRIVVER:
1126 {
1127 DriverVer_type DriverVer = DRIVER_VERSION;
1da177e4 1128
7c832835
BH		 1129 if (!arg)
1130 return -EINVAL;
1da177e4 1131
7c832835
BH		 1132 if (copy_to_user
1133 (argp, &DriverVer, sizeof(DriverVer_type)))
1134 return -EFAULT;
1135 return 0;
1136 }
1da177e4 1137
6ae5ce8e
MM		 1138 case CCISS_DEREGDISK:
1139 case CCISS_REGNEWD:
1da177e4 1140 case CCISS_REVALIDVOLS:
6ae5ce8e 1141 return rebuild_lun_table(host, 0);
7c832835
BH		 1142
1143 case CCISS_GETLUNINFO:{
1144 LogvolInfo_struct luninfo;
1145
1146 luninfo.LunID = drv->LunID;
1147 luninfo.num_opens = drv->usage_count;
1148 luninfo.num_parts = 0;
1149 if (copy_to_user(argp, &luninfo,
1150 sizeof(LogvolInfo_struct)))
1151 return -EFAULT;
1152 return 0;
1153 }
1da177e4 1154 case CCISS_PASSTHRU:
1da177e4 1155 {
7c832835
BH		 1156 IOCTL_Command_struct iocommand;
1157 CommandList_struct *c;
1158 char *buff = NULL;
1159 u64bit temp64;
1160 unsigned long flags;
6e9a4738 1161 DECLARE_COMPLETION_ONSTACK(wait);
1da177e4 1162
7c832835
BH		 1163 if (!arg)
1164 return -EINVAL;
1da177e4 1165
7c832835
BH		 1166 if (!capable(CAP_SYS_RAWIO))
1167 return -EPERM;
1da177e4 1168
7c832835
BH		 1169 if (copy_from_user
1170 (&iocommand, argp, sizeof(IOCTL_Command_struct)))
1171 return -EFAULT;
1172 if ((iocommand.buf_size < 1) &&
1173 (iocommand.Request.Type.Direction != XFER_NONE)) {
1174 return -EINVAL;
1175 }
1176#if 0 /* 'buf_size' member is 16-bits, and always smaller than kmalloc limit */
1177 /* Check kmalloc limits */
1178 if (iocommand.buf_size > 128000)
1179 return -EINVAL;
1180#endif
1181 if (iocommand.buf_size > 0) {
1182 buff = kmalloc(iocommand.buf_size, GFP_KERNEL);
1183 if (buff == NULL)
1184 return -EFAULT;
1185 }
1186 if (iocommand.Request.Type.Direction == XFER_WRITE) {
1187 /* Copy the data into the buffer we created */
1188 if (copy_from_user
1189 (buff, iocommand.buf, iocommand.buf_size)) {
1190 kfree(buff);
1191 return -EFAULT;
1192 }
1193 } else {
1194 memset(buff, 0, iocommand.buf_size);
1195 }
1196 if ((c = cmd_alloc(host, 0)) == NULL) {
1197 kfree(buff);
1198 return -ENOMEM;
1199 }
1200 // Fill in the command type
1201 c->cmd_type = CMD_IOCTL_PEND;
1202 // Fill in Command Header
1203 c->Header.ReplyQueue = 0; // unused in simple mode
1204 if (iocommand.buf_size > 0) // buffer to fill
1205 {
1206 c->Header.SGList = 1;
1207 c->Header.SGTotal = 1;
1208 } else // no buffers to fill
1209 {
1210 c->Header.SGList = 0;
1211 c->Header.SGTotal = 0;
1212 }
1213 c->Header.LUN = iocommand.LUN_info;
1214 c->Header.Tag.lower = c->busaddr; // use the kernel address the cmd block for tag
1da177e4 1215
7c832835
BH		 1216 // Fill in Request block
1217 c->Request = iocommand.Request;
1da177e4 1218
7c832835
BH		 1219 // Fill in the scatter gather information
1220 if (iocommand.buf_size > 0) {
1221 temp64.val = pci_map_single(host->pdev, buff,
1222 iocommand.buf_size,
1223 PCI_DMA_BIDIRECTIONAL);
1224 c->SG[0].Addr.lower = temp64.val32.lower;
1225 c->SG[0].Addr.upper = temp64.val32.upper;
1226 c->SG[0].Len = iocommand.buf_size;
1227 c->SG[0].Ext = 0; // we are not chaining
1228 }
1229 c->waiting = &wait;
1230
1231 /* Put the request on the tail of the request queue */
1232 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1233 addQ(&host->reqQ, c);
1234 host->Qdepth++;
1235 start_io(host);
1236 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1237
1238 wait_for_completion(&wait);
1239
1240 /* unlock the buffers from DMA */
1241 temp64.val32.lower = c->SG[0].Addr.lower;
1242 temp64.val32.upper = c->SG[0].Addr.upper;
1243 pci_unmap_single(host->pdev, (dma_addr_t) temp64.val,
1244 iocommand.buf_size,
1245 PCI_DMA_BIDIRECTIONAL);
1246
0a9279cc
MM		 1247 check_ioctl_unit_attention(host, c);
1248
7c832835
BH		 1249 /* Copy the error information out */
1250 iocommand.error_info = *(c->err_info);
1251 if (copy_to_user
1252 (argp, &iocommand, sizeof(IOCTL_Command_struct))) {
1253 kfree(buff);
1da177e4
LT		 1254 cmd_free(host, c, 0);
1255 return -EFAULT;
1256 }
7c832835
BH		 1257
1258 if (iocommand.Request.Type.Direction == XFER_READ) {
1259 /* Copy the data out of the buffer we created */
1260 if (copy_to_user
1261 (iocommand.buf, buff, iocommand.buf_size)) {
1262 kfree(buff);
1263 cmd_free(host, c, 0);
1264 return -EFAULT;
1265 }
1266 }
1267 kfree(buff);
1268 cmd_free(host, c, 0);
1269 return 0;
1da177e4 1270 }
7c832835
BH		 1271 case CCISS_BIG_PASSTHRU:{
1272 BIG_IOCTL_Command_struct *ioc;
1273 CommandList_struct *c;
1274 unsigned char **buff = NULL;
1275 int *buff_size = NULL;
1276 u64bit temp64;
1277 unsigned long flags;
1278 BYTE sg_used = 0;
1279 int status = 0;
1280 int i;
6e9a4738 1281 DECLARE_COMPLETION_ONSTACK(wait);
7c832835
BH		 1282 __u32 left;
1283 __u32 sz;
1284 BYTE __user *data_ptr;
1285
1286 if (!arg)
1287 return -EINVAL;
1288 if (!capable(CAP_SYS_RAWIO))
1289 return -EPERM;
1290 ioc = (BIG_IOCTL_Command_struct *)
1291 kmalloc(sizeof(*ioc), GFP_KERNEL);
1292 if (!ioc) {
1293 status = -ENOMEM;
1294 goto cleanup1;
1295 }
1296 if (copy_from_user(ioc, argp, sizeof(*ioc))) {
1297 status = -EFAULT;
1298 goto cleanup1;
1299 }
1300 if ((ioc->buf_size < 1) &&
1301 (ioc->Request.Type.Direction != XFER_NONE)) {
1da177e4
LT		 1302 status = -EINVAL;
1303 goto cleanup1;
7c832835
BH		 1304 }
1305 /* Check kmalloc limits using all SGs */
1306 if (ioc->malloc_size > MAX_KMALLOC_SIZE) {
1307 status = -EINVAL;
1308 goto cleanup1;
1309 }
1310 if (ioc->buf_size > ioc->malloc_size * MAXSGENTRIES) {
1311 status = -EINVAL;
1312 goto cleanup1;
1313 }
1314 buff =
1315 kzalloc(MAXSGENTRIES * sizeof(char *), GFP_KERNEL);
1316 if (!buff) {
1da177e4
LT		 1317 status = -ENOMEM;
1318 goto cleanup1;
1319 }
5cbded58 1320 buff_size = kmalloc(MAXSGENTRIES * sizeof(int),
7c832835
BH		 1321 GFP_KERNEL);
1322 if (!buff_size) {
1323 status = -ENOMEM;
1324 goto cleanup1;
1325 }
1326 left = ioc->buf_size;
1327 data_ptr = ioc->buf;
1328 while (left) {
1329 sz = (left >
1330 ioc->malloc_size) ? ioc->
1331 malloc_size : left;
1332 buff_size[sg_used] = sz;
1333 buff[sg_used] = kmalloc(sz, GFP_KERNEL);
1334 if (buff[sg_used] == NULL) {
1da177e4 1335 status = -ENOMEM;
15534d38
JA		 1336 goto cleanup1;
1337 }
7c832835
BH		 1338 if (ioc->Request.Type.Direction == XFER_WRITE) {
1339 if (copy_from_user
1340 (buff[sg_used], data_ptr, sz)) {
f7108f91 1341 status = -EFAULT;
7c832835
BH		 1342 goto cleanup1;
1343 }
1344 } else {
1345 memset(buff[sg_used], 0, sz);
1346 }
1347 left -= sz;
1348 data_ptr += sz;
1349 sg_used++;
1350 }
1351 if ((c = cmd_alloc(host, 0)) == NULL) {
1352 status = -ENOMEM;
1353 goto cleanup1;
1354 }
1355 c->cmd_type = CMD_IOCTL_PEND;
1356 c->Header.ReplyQueue = 0;
1357
1358 if (ioc->buf_size > 0) {
1359 c->Header.SGList = sg_used;
1360 c->Header.SGTotal = sg_used;
1da177e4 1361 } else {
7c832835
BH		 1362 c->Header.SGList = 0;
1363 c->Header.SGTotal = 0;
1da177e4 1364 }
7c832835
BH		 1365 c->Header.LUN = ioc->LUN_info;
1366 c->Header.Tag.lower = c->busaddr;
1367
1368 c->Request = ioc->Request;
1369 if (ioc->buf_size > 0) {
1370 int i;
1371 for (i = 0; i < sg_used; i++) {
1372 temp64.val =
1373 pci_map_single(host->pdev, buff[i],
1374 buff_size[i],
1375 PCI_DMA_BIDIRECTIONAL);
1376 c->SG[i].Addr.lower =
1377 temp64.val32.lower;
1378 c->SG[i].Addr.upper =
1379 temp64.val32.upper;
1380 c->SG[i].Len = buff_size[i];
1381 c->SG[i].Ext = 0; /* we are not chaining */
1382 }
1383 }
1384 c->waiting = &wait;
1385 /* Put the request on the tail of the request queue */
1386 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
1387 addQ(&host->reqQ, c);
1388 host->Qdepth++;
1389 start_io(host);
1390 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
1391 wait_for_completion(&wait);
1392 /* unlock the buffers from DMA */
1393 for (i = 0; i < sg_used; i++) {
1394 temp64.val32.lower = c->SG[i].Addr.lower;
1395 temp64.val32.upper = c->SG[i].Addr.upper;
1396 pci_unmap_single(host->pdev,
1397 (dma_addr_t) temp64.val, buff_size[i],
1da177e4 1398 PCI_DMA_BIDIRECTIONAL);
1da177e4 1399 }
0a9279cc 1400 check_ioctl_unit_attention(host, c);
7c832835
BH		 1401 /* Copy the error information out */
1402 ioc->error_info = *(c->err_info);
1403 if (copy_to_user(argp, ioc, sizeof(*ioc))) {
1404 cmd_free(host, c, 0);
1405 status = -EFAULT;
1406 goto cleanup1;
1407 }
1408 if (ioc->Request.Type.Direction == XFER_READ) {
1409 /* Copy the data out of the buffer we created */
1410 BYTE __user *ptr = ioc->buf;
1411 for (i = 0; i < sg_used; i++) {
1412 if (copy_to_user
1413 (ptr, buff[i], buff_size[i])) {
1414 cmd_free(host, c, 0);
1415 status = -EFAULT;
1416 goto cleanup1;
1417 }
1418 ptr += buff_size[i];
1da177e4 1419 }
1da177e4 1420 }
7c832835
BH		 1421 cmd_free(host, c, 0);
1422 status = 0;
1423 cleanup1:
1424 if (buff) {
1425 for (i = 0; i < sg_used; i++)
1426 kfree(buff[i]);
1427 kfree(buff);
1428 }
1429 kfree(buff_size);
1430 kfree(ioc);
1431 return status;
1da177e4 1432 }
03bbfee5
MMOD		 1433
1434 /* scsi_cmd_ioctl handles these, below, though some are not */
1435 /* very meaningful for cciss. SG_IO is the main one people want. */
1436
1437 case SG_GET_VERSION_NUM:
1438 case SG_SET_TIMEOUT:
1439 case SG_GET_TIMEOUT:
1440 case SG_GET_RESERVED_SIZE:
1441 case SG_SET_RESERVED_SIZE:
1442 case SG_EMULATED_HOST:
1443 case SG_IO:
1444 case SCSI_IOCTL_SEND_COMMAND:
ef7822c2 1445 return scsi_cmd_ioctl(disk->queue, disk, mode, cmd, argp);
03bbfee5
MMOD		 1446
1447 /* scsi_cmd_ioctl would normally handle these, below, but */
1448 /* they aren't a good fit for cciss, as CD-ROMs are */
1449 /* not supported, and we don't have any bus/target/lun */
1450 /* which we present to the kernel. */
1451
1452 case CDROM_SEND_PACKET:
1453 case CDROMCLOSETRAY:
1454 case CDROMEJECT:
1455 case SCSI_IOCTL_GET_IDLUN:
1456 case SCSI_IOCTL_GET_BUS_NUMBER:
1da177e4
LT		 1457 default:
1458 return -ENOTTY;
1459 }
1da177e4
LT		 1460}
1461
7b30f092
JA		 1462static void cciss_check_queues(ctlr_info_t *h)
1463{
1464 int start_queue = h->next_to_run;
1465 int i;
1466
1467 /* check to see if we have maxed out the number of commands that can
1468 * be placed on the queue. If so then exit. We do this check here
1469 * in case the interrupt we serviced was from an ioctl and did not
1470 * free any new commands.
1471 */
f880632f 1472 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds)
7b30f092
JA		 1473 return;
1474
1475 /* We have room on the queue for more commands. Now we need to queue
1476 * them up. We will also keep track of the next queue to run so
1477 * that every queue gets a chance to be started first.
1478 */
1479 for (i = 0; i < h->highest_lun + 1; i++) {
1480 int curr_queue = (start_queue + i) % (h->highest_lun + 1);
1481 /* make sure the disk has been added and the drive is real
1482 * because this can be called from the middle of init_one.
1483 */
1484 if (!(h->drv[curr_queue].queue) || !(h->drv[curr_queue].heads))
1485 continue;
1486 blk_start_queue(h->gendisk[curr_queue]->queue);
1487
1488 /* check to see if we have maxed out the number of commands
1489 * that can be placed on the queue.
1490 */
f880632f 1491 if ((find_first_zero_bit(h->cmd_pool_bits, h->nr_cmds)) == h->nr_cmds) {
7b30f092
JA		 1492 if (curr_queue == start_queue) {
1493 h->next_to_run =
1494 (start_queue + 1) % (h->highest_lun + 1);
1495 break;
1496 } else {
1497 h->next_to_run = curr_queue;
1498 break;
1499 }
7b30f092
JA		 1500 }
1501 }
1502}
1503
ca1e0484
MM		 1504static void cciss_softirq_done(struct request *rq)
1505{
1506 CommandList_struct *cmd = rq->completion_data;
1507 ctlr_info_t *h = hba[cmd->ctlr];
1508 unsigned long flags;
1509 u64bit temp64;
1510 int i, ddir;
1511
1512 if (cmd->Request.Type.Direction == XFER_READ)
1513 ddir = PCI_DMA_FROMDEVICE;
1514 else
1515 ddir = PCI_DMA_TODEVICE;
1516
1517 /* command did not need to be retried */
1518 /* unmap the DMA mapping for all the scatter gather elements */
7c832835 1519 for (i = 0; i < cmd->Header.SGList; i++) {
ca1e0484
MM		 1520 temp64.val32.lower = cmd->SG[i].Addr.lower;
1521 temp64.val32.upper = cmd->SG[i].Addr.upper;
1522 pci_unmap_page(h->pdev, temp64.val, cmd->SG[i].Len, ddir);
1523 }
1524
ca1e0484
MM		 1525#ifdef CCISS_DEBUG
1526 printk("Done with %p\n", rq);
7c832835 1527#endif /* CCISS_DEBUG */
ca1e0484 1528
c3a4d78c 1529 /* set the residual count for pc requests */
ac44e5b2 1530 if (blk_pc_request(rq))
c3a4d78c 1531 rq->resid_len = cmd->err_info->ResidualCnt;
ac44e5b2 1532
c3a4d78c 1533 blk_end_request_all(rq, (rq->errors == 0) ? 0 : -EIO);
3daeea29 1534
ca1e0484 1535 spin_lock_irqsave(&h->lock, flags);
7c832835 1536 cmd_free(h, cmd, 1);
7b30f092 1537 cciss_check_queues(h);
ca1e0484
MM		 1538 spin_unlock_irqrestore(&h->lock, flags);
1539}
1540
b57695fe 1541static void log_unit_to_scsi3addr(ctlr_info_t *h, unsigned char scsi3addr[],
1542 uint32_t log_unit)
1543{
1544 log_unit = h->drv[log_unit].LunID & 0x03fff;
1545 memset(&scsi3addr[4], 0, 4);
1546 memcpy(&scsi3addr[0], &log_unit, 4);
1547 scsi3addr[3] |= 0x40;
1548}
1549
7fe06326
AP		 1550/* This function gets the SCSI vendor, model, and revision of a logical drive
1551 * via the inquiry page 0. Model, vendor, and rev are set to empty strings if
1552 * they cannot be read.
1553 */
1554static void cciss_get_device_descr(int ctlr, int logvol, int withirq,
1555 char *vendor, char *model, char *rev)
1556{
1557 int rc;
1558 InquiryData_struct *inq_buf;
b57695fe 1559 unsigned char scsi3addr[8];
7fe06326
AP		 1560
1561 *vendor = '\0';
1562 *model = '\0';
1563 *rev = '\0';
1564
1565 inq_buf = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1566 if (!inq_buf)
1567 return;
1568
b57695fe 1569 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
7fe06326
AP		 1570 if (withirq)
1571 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1572 sizeof(InquiryData_struct), 0,
1573 scsi3addr, TYPE_CMD);
7fe06326
AP		 1574 else
1575 rc = sendcmd(CISS_INQUIRY, ctlr, inq_buf,
b57695fe 1576 sizeof(InquiryData_struct), 0,
1577 scsi3addr, TYPE_CMD);
7fe06326
AP		 1578 if (rc == IO_OK) {
1579 memcpy(vendor, &inq_buf->data_byte[8], VENDOR_LEN);
1580 vendor[VENDOR_LEN] = '\0';
1581 memcpy(model, &inq_buf->data_byte[16], MODEL_LEN);
1582 model[MODEL_LEN] = '\0';
1583 memcpy(rev, &inq_buf->data_byte[32], REV_LEN);
1584 rev[REV_LEN] = '\0';
1585 }
1586
1587 kfree(inq_buf);
1588 return;
1589}
1590
a72da29b
MM		 1591/* This function gets the serial number of a logical drive via
1592 * inquiry page 0x83. Serial no. is 16 bytes. If the serial
1593 * number cannot be had, for whatever reason, 16 bytes of 0xff
1594 * are returned instead.
1595 */
1596static void cciss_get_serial_no(int ctlr, int logvol, int withirq,
1597 unsigned char *serial_no, int buflen)
1598{
1599#define PAGE_83_INQ_BYTES 64
1600 int rc;
1601 unsigned char *buf;
b57695fe 1602 unsigned char scsi3addr[8];
a72da29b
MM		 1603
1604 if (buflen > 16)
1605 buflen = 16;
1606 memset(serial_no, 0xff, buflen);
1607 buf = kzalloc(PAGE_83_INQ_BYTES, GFP_KERNEL);
1608 if (!buf)
1609 return;
1610 memset(serial_no, 0, buflen);
b57695fe 1611 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
a72da29b
MM		 1612 if (withirq)
1613 rc = sendcmd_withirq(CISS_INQUIRY, ctlr, buf,
b57695fe 1614 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1615 else
1616 rc = sendcmd(CISS_INQUIRY, ctlr, buf,
b57695fe 1617 PAGE_83_INQ_BYTES, 0x83, scsi3addr, TYPE_CMD);
a72da29b
MM		 1618 if (rc == IO_OK)
1619 memcpy(serial_no, &buf[8], buflen);
1620 kfree(buf);
1621 return;
1622}
1623
6ae5ce8e
MM		 1624static void cciss_add_disk(ctlr_info_t *h, struct gendisk *disk,
1625 int drv_index)
1626{
1627 disk->queue = blk_init_queue(do_cciss_request, &h->lock);
1628 sprintf(disk->disk_name, "cciss/c%dd%d", h->ctlr, drv_index);
1629 disk->major = h->major;
1630 disk->first_minor = drv_index << NWD_SHIFT;
1631 disk->fops = &cciss_fops;
1632 disk->private_data = &h->drv[drv_index];
7fe06326 1633 disk->driverfs_dev = &h->drv[drv_index].dev;
6ae5ce8e
MM		 1634
1635 /* Set up queue information */
1636 blk_queue_bounce_limit(disk->queue, h->pdev->dma_mask);
1637
1638 /* This is a hardware imposed limit. */
1639 blk_queue_max_hw_segments(disk->queue, MAXSGENTRIES);
1640
1641 /* This is a limit in the driver and could be eliminated. */
1642 blk_queue_max_phys_segments(disk->queue, MAXSGENTRIES);
1643
1644 blk_queue_max_sectors(disk->queue, h->cciss_max_sectors);
1645
1646 blk_queue_softirq_done(disk->queue, cciss_softirq_done);
1647
1648 disk->queue->queuedata = h;
1649
e1defc4f
MP		 1650 blk_queue_logical_block_size(disk->queue,
1651 h->drv[drv_index].block_size);
6ae5ce8e
MM		 1652
1653 /* Make sure all queue data is written out before */
1654 /* setting h->drv[drv_index].queue, as setting this */
1655 /* allows the interrupt handler to start the queue */
1656 wmb();
1657 h->drv[drv_index].queue = disk->queue;
1658 add_disk(disk);
1659}
1660
ddd47442 1661/* This function will check the usage_count of the drive to be updated/added.
a72da29b
MM		 1662 * If the usage_count is zero and it is a heretofore unknown drive, or,
1663 * the drive's capacity, geometry, or serial number has changed,
1664 * then the drive information will be updated and the disk will be
1665 * re-registered with the kernel. If these conditions don't hold,
1666 * then it will be left alone for the next reboot. The exception to this
1667 * is disk 0 which will always be left registered with the kernel since it
1668 * is also the controller node. Any changes to disk 0 will show up on
1669 * the next reboot.
7c832835 1670 */
6ae5ce8e 1671static void cciss_update_drive_info(int ctlr, int drv_index, int first_time)
7c832835 1672{
ddd47442
MM		 1673 ctlr_info_t *h = hba[ctlr];
1674 struct gendisk *disk;
ddd47442
MM		 1675 InquiryData_struct *inq_buff = NULL;
1676 unsigned int block_size;
00988a35 1677 sector_t total_size;
ddd47442
MM		 1678 unsigned long flags = 0;
1679 int ret = 0;
a72da29b 1680 drive_info_struct *drvinfo;
6ae5ce8e 1681 int was_only_controller_node;
a72da29b
MM		 1682
1683 /* Get information about the disk and modify the driver structure */
1684 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
1685 drvinfo = kmalloc(sizeof(*drvinfo), GFP_KERNEL);
1686 if (inq_buff == NULL || drvinfo == NULL)
1687 goto mem_msg;
1688
6ae5ce8e
MM		 1689 /* See if we're trying to update the "controller node"
1690 * this will happen the when the first logical drive gets
1691 * created by ACU.
1692 */
1693 was_only_controller_node = (drv_index == 0 &&
1694 h->drv[0].raid_level == -1);
1695
a72da29b
MM		 1696 /* testing to see if 16-byte CDBs are already being used */
1697 if (h->cciss_read == CCISS_READ_16) {
1698 cciss_read_capacity_16(h->ctlr, drv_index, 1,
1699 &total_size, &block_size);
1700
1701 } else {
1702 cciss_read_capacity(ctlr, drv_index, 1,
1703 &total_size, &block_size);
1704
1705 /* if read_capacity returns all F's this volume is >2TB */
1706 /* in size so we switch to 16-byte CDB's for all */
1707 /* read/write ops */
1708 if (total_size == 0xFFFFFFFFULL) {
1709 cciss_read_capacity_16(ctlr, drv_index, 1,
1710 &total_size, &block_size);
1711 h->cciss_read = CCISS_READ_16;
1712 h->cciss_write = CCISS_WRITE_16;
1713 } else {
1714 h->cciss_read = CCISS_READ_10;
1715 h->cciss_write = CCISS_WRITE_10;
1716 }
1717 }
1718
1719 cciss_geometry_inquiry(ctlr, drv_index, 1, total_size, block_size,
1720 inq_buff, drvinfo);
1721 drvinfo->block_size = block_size;
1722 drvinfo->nr_blocks = total_size + 1;
1723
7fe06326
AP		 1724 cciss_get_device_descr(ctlr, drv_index, 1, drvinfo->vendor,
1725 drvinfo->model, drvinfo->rev);
a72da29b
MM		 1726 cciss_get_serial_no(ctlr, drv_index, 1, drvinfo->serial_no,
1727 sizeof(drvinfo->serial_no));
1728
1729 /* Is it the same disk we already know, and nothing's changed? */
1730 if (h->drv[drv_index].raid_level != -1 &&
1731 ((memcmp(drvinfo->serial_no,
1732 h->drv[drv_index].serial_no, 16) == 0) &&
1733 drvinfo->block_size == h->drv[drv_index].block_size &&
1734 drvinfo->nr_blocks == h->drv[drv_index].nr_blocks &&
1735 drvinfo->heads == h->drv[drv_index].heads &&
1736 drvinfo->sectors == h->drv[drv_index].sectors &&
6ae5ce8e 1737 drvinfo->cylinders == h->drv[drv_index].cylinders))
a72da29b
MM		 1738 /* The disk is unchanged, nothing to update */
1739 goto freeret;
a72da29b 1740
6ae5ce8e
MM		 1741 /* If we get here it's not the same disk, or something's changed,
1742 * so we need to * deregister it, and re-register it, if it's not
1743 * in use.
1744 * If the disk already exists then deregister it before proceeding
1745 * (unless it's the first disk (for the controller node).
1746 */
a72da29b
MM		 1747 if (h->drv[drv_index].raid_level != -1 && drv_index != 0) {
1748 printk(KERN_WARNING "disk %d has changed.\n", drv_index);
ddd47442
MM		 1749 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
1750 h->drv[drv_index].busy_configuring = 1;
1751 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
e14ac670 1752
6ae5ce8e
MM		 1753 /* deregister_disk sets h->drv[drv_index].queue = NULL
1754 * which keeps the interrupt handler from starting
1755 * the queue.
1756 */
a0ea8622 1757 ret = deregister_disk(h, drv_index, 0);
ddd47442
MM		 1758 h->drv[drv_index].busy_configuring = 0;
1759 }
1760
1761 /* If the disk is in use return */
1762 if (ret)
a72da29b
MM		 1763 goto freeret;
1764
6ae5ce8e
MM		 1765 /* Save the new information from cciss_geometry_inquiry
1766 * and serial number inquiry.
1767 */
a72da29b
MM		 1768 h->drv[drv_index].block_size = drvinfo->block_size;
1769 h->drv[drv_index].nr_blocks = drvinfo->nr_blocks;
1770 h->drv[drv_index].heads = drvinfo->heads;
1771 h->drv[drv_index].sectors = drvinfo->sectors;
1772 h->drv[drv_index].cylinders = drvinfo->cylinders;
1773 h->drv[drv_index].raid_level = drvinfo->raid_level;
1774 memcpy(h->drv[drv_index].serial_no, drvinfo->serial_no, 16);
7fe06326
AP		 1775 memcpy(h->drv[drv_index].vendor, drvinfo->vendor, VENDOR_LEN + 1);
1776 memcpy(h->drv[drv_index].model, drvinfo->model, MODEL_LEN + 1);
1777 memcpy(h->drv[drv_index].rev, drvinfo->rev, REV_LEN + 1);
ddd47442
MM		 1778
1779 ++h->num_luns;
1780 disk = h->gendisk[drv_index];
1781 set_capacity(disk, h->drv[drv_index].nr_blocks);
1782
6ae5ce8e
MM		 1783 /* If it's not disk 0 (drv_index != 0)
1784 * or if it was disk 0, but there was previously
1785 * no actual corresponding configured logical drive
1786 * (raid_leve == -1) then we want to update the
1787 * logical drive's information.
1788 */
1789 if (drv_index || first_time)
1790 cciss_add_disk(h, disk, drv_index);
ddd47442 1791
6ae5ce8e 1792freeret:
ddd47442 1793 kfree(inq_buff);
a72da29b 1794 kfree(drvinfo);
ddd47442 1795 return;
6ae5ce8e 1796mem_msg:
ddd47442
MM		 1797 printk(KERN_ERR "cciss: out of memory\n");
1798 goto freeret;
1799}
1800
1801/* This function will find the first index of the controllers drive array
1802 * that has a -1 for the raid_level and will return that index. This is
1803 * where new drives will be added. If the index to be returned is greater
1804 * than the highest_lun index for the controller then highest_lun is set
1805 * to this new index. If there are no available indexes then -1 is returned.
eece695f
MM		 1806 * "controller_node" is used to know if this is a real logical drive, or just
1807 * the controller node, which determines if this counts towards highest_lun.
7c832835 1808 */
eece695f 1809static int cciss_find_free_drive_index(int ctlr, int controller_node)
ddd47442
MM		 1810{
1811 int i;
1812
7c832835
BH		 1813 for (i = 0; i < CISS_MAX_LUN; i++) {
1814 if (hba[ctlr]->drv[i].raid_level == -1) {
ddd47442 1815 if (i > hba[ctlr]->highest_lun)
eece695f
MM		 1816 if (!controller_node)
1817 hba[ctlr]->highest_lun = i;
ddd47442
MM		 1818 return i;
1819 }
1820 }
1821 return -1;
1822}
1823
6ae5ce8e
MM		 1824/* cciss_add_gendisk finds a free hba[]->drv structure
1825 * and allocates a gendisk if needed, and sets the lunid
1826 * in the drvinfo structure. It returns the index into
1827 * the ->drv[] array, or -1 if none are free.
1828 * is_controller_node indicates whether highest_lun should
1829 * count this disk, or if it's only being added to provide
1830 * a means to talk to the controller in case no logical
1831 * drives have yet been configured.
1832 */
eece695f 1833static int cciss_add_gendisk(ctlr_info_t *h, __u32 lunid, int controller_node)
6ae5ce8e
MM		 1834{
1835 int drv_index;
1836
eece695f 1837 drv_index = cciss_find_free_drive_index(h->ctlr, controller_node);
6ae5ce8e
MM		 1838 if (drv_index == -1)
1839 return -1;
1840 /*Check if the gendisk needs to be allocated */
1841 if (!h->gendisk[drv_index]) {
1842 h->gendisk[drv_index] =
1843 alloc_disk(1 << NWD_SHIFT);
1844 if (!h->gendisk[drv_index]) {
1845 printk(KERN_ERR "cciss%d: could not "
1846 "allocate a new disk %d\n",
1847 h->ctlr, drv_index);
1848 return -1;
1849 }
1850 }
1851 h->drv[drv_index].LunID = lunid;
7fe06326
AP		 1852 if (cciss_create_ld_sysfs_entry(h, &h->drv[drv_index], drv_index))
1853 goto err_free_disk;
6ae5ce8e
MM		 1854
1855 /* Don't need to mark this busy because nobody */
1856 /* else knows about this disk yet to contend */
1857 /* for access to it. */
1858 h->drv[drv_index].busy_configuring = 0;
1859 wmb();
1860 return drv_index;
7fe06326
AP		 1861
1862err_free_disk:
1863 put_disk(h->gendisk[drv_index]);
1864 h->gendisk[drv_index] = NULL;
1865 return -1;
6ae5ce8e
MM		 1866}
1867
1868/* This is for the special case of a controller which
1869 * has no logical drives. In this case, we still need
1870 * to register a disk so the controller can be accessed
1871 * by the Array Config Utility.
1872 */
1873static void cciss_add_controller_node(ctlr_info_t *h)
1874{
1875 struct gendisk *disk;
1876 int drv_index;
1877
1878 if (h->gendisk[0] != NULL) /* already did this? Then bail. */
1879 return;
1880
eece695f 1881 drv_index = cciss_add_gendisk(h, 0, 1);
6ae5ce8e
MM		 1882 if (drv_index == -1) {
1883 printk(KERN_WARNING "cciss%d: could not "
1884 "add disk 0.\n", h->ctlr);
1885 return;
1886 }
1887 h->drv[drv_index].block_size = 512;
1888 h->drv[drv_index].nr_blocks = 0;
1889 h->drv[drv_index].heads = 0;
1890 h->drv[drv_index].sectors = 0;
1891 h->drv[drv_index].cylinders = 0;
1892 h->drv[drv_index].raid_level = -1;
1893 memset(h->drv[drv_index].serial_no, 0, 16);
1894 disk = h->gendisk[drv_index];
1895 cciss_add_disk(h, disk, drv_index);
1896}
1897
ddd47442 1898/* This function will add and remove logical drives from the Logical
d14c4ab5 1899 * drive array of the controller and maintain persistency of ordering
ddd47442
MM		 1900 * so that mount points are preserved until the next reboot. This allows
1901 * for the removal of logical drives in the middle of the drive array
1902 * without a re-ordering of those drives.
1903 * INPUT
1904 * h = The controller to perform the operations on
7c832835 1905 */
6ae5ce8e 1906static int rebuild_lun_table(ctlr_info_t *h, int first_time)
1da177e4 1907{
ddd47442
MM		 1908 int ctlr = h->ctlr;
1909 int num_luns;
1910 ReportLunData_struct *ld_buff = NULL;
ddd47442
MM		 1911 int return_code;
1912 int listlength = 0;
1913 int i;
1914 int drv_found;
1915 int drv_index = 0;
1916 __u32 lunid = 0;
1da177e4 1917 unsigned long flags;
ddd47442 1918
6ae5ce8e
MM		 1919 if (!capable(CAP_SYS_RAWIO))
1920 return -EPERM;
1921
ddd47442
MM		 1922 /* Set busy_configuring flag for this operation */
1923 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
7c832835 1924 if (h->busy_configuring) {
ddd47442
MM		 1925 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
1926 return -EBUSY;
1927 }
1928 h->busy_configuring = 1;
a72da29b 1929 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
ddd47442 1930
a72da29b
MM		 1931 ld_buff = kzalloc(sizeof(ReportLunData_struct), GFP_KERNEL);
1932 if (ld_buff == NULL)
1933 goto mem_msg;
1934
1935 return_code = sendcmd_withirq(CISS_REPORT_LOG, ctlr, ld_buff,
b57695fe 1936 sizeof(ReportLunData_struct),
1937 0, CTLR_LUNID, TYPE_CMD);
ddd47442 1938
a72da29b
MM		 1939 if (return_code == IO_OK)
1940 listlength = be32_to_cpu(*(__be32 *) ld_buff->LUNListLength);
1941 else { /* reading number of logical volumes failed */
1942 printk(KERN_WARNING "cciss: report logical volume"
1943 " command failed\n");
1944 listlength = 0;
1945 goto freeret;
1946 }
1947
1948 num_luns = listlength / 8; /* 8 bytes per entry */
1949 if (num_luns > CISS_MAX_LUN) {
1950 num_luns = CISS_MAX_LUN;
1951 printk(KERN_WARNING "cciss: more luns configured"
1952 " on controller than can be handled by"
1953 " this driver.\n");
1954 }
1955
6ae5ce8e
MM		 1956 if (num_luns == 0)
1957 cciss_add_controller_node(h);
1958
1959 /* Compare controller drive array to driver's drive array
1960 * to see if any drives are missing on the controller due
1961 * to action of Array Config Utility (user deletes drive)
1962 * and deregister logical drives which have disappeared.
1963 */
a72da29b
MM		 1964 for (i = 0; i <= h->highest_lun; i++) {
1965 int j;
1966 drv_found = 0;
d8a0be6a
SC		 1967
1968 /* skip holes in the array from already deleted drives */
1969 if (h->drv[i].raid_level == -1)
1970 continue;
1971
a72da29b
MM		 1972 for (j = 0; j < num_luns; j++) {
1973 memcpy(&lunid, &ld_buff->LUN[j][0], 4);
1974 lunid = le32_to_cpu(lunid);
1975 if (h->drv[i].LunID == lunid) {
1976 drv_found = 1;
1977 break;
1978 }
1979 }
1980 if (!drv_found) {
1981 /* Deregister it from the OS, it's gone. */
1982 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
1983 h->drv[i].busy_configuring = 1;
1984 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
a0ea8622 1985 return_code = deregister_disk(h, i, 1);
a72da29b 1986 h->drv[i].busy_configuring = 0;
ddd47442 1987 }
a72da29b 1988 }
ddd47442 1989
a72da29b
MM		 1990 /* Compare controller drive array to driver's drive array.
1991 * Check for updates in the drive information and any new drives
1992 * on the controller due to ACU adding logical drives, or changing
1993 * a logical drive's size, etc. Reregister any new/changed drives
1994 */
1995 for (i = 0; i < num_luns; i++) {
1996 int j;
ddd47442 1997
a72da29b 1998 drv_found = 0;
ddd47442 1999
a72da29b
MM		 2000 memcpy(&lunid, &ld_buff->LUN[i][0], 4);
2001 lunid = le32_to_cpu(lunid);
ddd47442 2002
a72da29b
MM		 2003 /* Find if the LUN is already in the drive array
2004 * of the driver. If so then update its info
2005 * if not in use. If it does not exist then find
2006 * the first free index and add it.
2007 */
2008 for (j = 0; j <= h->highest_lun; j++) {
2009 if (h->drv[j].raid_level != -1 &&
2010 h->drv[j].LunID == lunid) {
2011 drv_index = j;
2012 drv_found = 1;
2013 break;
ddd47442 2014 }
a72da29b 2015 }
ddd47442 2016
a72da29b
MM		 2017 /* check if the drive was found already in the array */
2018 if (!drv_found) {
eece695f 2019 drv_index = cciss_add_gendisk(h, lunid, 0);
a72da29b
MM		 2020 if (drv_index == -1)
2021 goto freeret;
a72da29b 2022 }
6ae5ce8e 2023 cciss_update_drive_info(ctlr, drv_index, first_time);
a72da29b 2024 } /* end for */
ddd47442 2025
6ae5ce8e 2026freeret:
ddd47442
MM		 2027 kfree(ld_buff);
2028 h->busy_configuring = 0;
2029 /* We return -1 here to tell the ACU that we have registered/updated
2030 * all of the drives that we can and to keep it from calling us
2031 * additional times.
7c832835 2032 */
ddd47442 2033 return -1;
6ae5ce8e 2034mem_msg:
ddd47442 2035 printk(KERN_ERR "cciss: out of memory\n");
a72da29b 2036 h->busy_configuring = 0;
ddd47442
MM		 2037 goto freeret;
2038}
2039
2040/* This function will deregister the disk and it's queue from the
2041 * kernel. It must be called with the controller lock held and the
2042 * drv structures busy_configuring flag set. It's parameters are:
2043 *
2044 * disk = This is the disk to be deregistered
2045 * drv = This is the drive_info_struct associated with the disk to be
2046 * deregistered. It contains information about the disk used
2047 * by the driver.
2048 * clear_all = This flag determines whether or not the disk information
2049 * is going to be completely cleared out and the highest_lun
2050 * reset. Sometimes we want to clear out information about
d14c4ab5 2051 * the disk in preparation for re-adding it. In this case
ddd47442
MM		 2052 * the highest_lun should be left unchanged and the LunID
2053 * should not be cleared.
2054*/
a0ea8622 2055static int deregister_disk(ctlr_info_t *h, int drv_index,
ddd47442
MM		 2056 int clear_all)
2057{
799202cb 2058 int i;
a0ea8622
SC		 2059 struct gendisk *disk;
2060 drive_info_struct *drv;
1da177e4
LT		 2061
2062 if (!capable(CAP_SYS_RAWIO))
2063 return -EPERM;
2064
a0ea8622
SC		 2065 drv = &h->drv[drv_index];
2066 disk = h->gendisk[drv_index];
2067
1da177e4 2068 /* make sure logical volume is NOT is use */
7c832835
BH		 2069 if (clear_all || (h->gendisk[0] == disk)) {
2070 if (drv->usage_count > 1)
2071 return -EBUSY;
2072 } else if (drv->usage_count > 0)
2073 return -EBUSY;
1da177e4 2074
ddd47442
MM		 2075 /* invalidate the devices and deregister the disk. If it is disk
2076 * zero do not deregister it but just zero out it's values. This
2077 * allows us to delete disk zero but keep the controller registered.
7c832835
BH		 2078 */
2079 if (h->gendisk[0] != disk) {
5a9df732
AB		 2080 struct request_queue *q = disk->queue;
2081 if (disk->flags & GENHD_FL_UP)
2082 del_gendisk(disk);
2083 if (q) {
2084 blk_cleanup_queue(q);
2085 /* Set drv->queue to NULL so that we do not try
2086 * to call blk_start_queue on this queue in the
2087 * interrupt handler
2088 */
2089 drv->queue = NULL;
2090 }
2091 /* If clear_all is set then we are deleting the logical
2092 * drive, not just refreshing its info. For drives
2093 * other than disk 0 we will call put_disk. We do not
2094 * do this for disk 0 as we need it to be able to
2095 * configure the controller.
a72da29b 2096 */
5a9df732
AB		 2097 if (clear_all){
2098 /* This isn't pretty, but we need to find the
2099 * disk in our array and NULL our the pointer.
2100 * This is so that we will call alloc_disk if
2101 * this index is used again later.
a72da29b 2102 */
5a9df732 2103 for (i=0; i < CISS_MAX_LUN; i++){
a72da29b 2104 if (h->gendisk[i] == disk) {
5a9df732
AB		 2105 h->gendisk[i] = NULL;
2106 break;
799202cb 2107 }
799202cb 2108 }
5a9df732 2109 put_disk(disk);
ddd47442 2110 }
799202cb
MM		 2111 } else {
2112 set_capacity(disk, 0);
ddd47442
MM		 2113 }
2114
2115 --h->num_luns;
2116 /* zero out the disk size info */
2117 drv->nr_blocks = 0;
2118 drv->block_size = 0;
2119 drv->heads = 0;
2120 drv->sectors = 0;
2121 drv->cylinders = 0;
2122 drv->raid_level = -1; /* This can be used as a flag variable to
2123 * indicate that this element of the drive
2124 * array is free.
7c832835 2125 */
c64bebcd 2126 cciss_destroy_ld_sysfs_entry(drv);
7c832835
BH		 2127
2128 if (clear_all) {
2129 /* check to see if it was the last disk */
2130 if (drv == h->drv + h->highest_lun) {
2131 /* if so, find the new hightest lun */
2132 int i, newhighest = -1;
a72da29b 2133 for (i = 0; i <= h->highest_lun; i++) {
7c832835 2134 /* if the disk has size > 0, it is available */
ddd47442 2135 if (h->drv[i].heads)
7c832835
BH		 2136 newhighest = i;
2137 }
2138 h->highest_lun = newhighest;
1da177e4 2139 }
ddd47442 2140
7c832835 2141 drv->LunID = 0;
ddd47442 2142 }
e2019b58 2143 return 0;
1da177e4 2144}
ddd47442 2145
b57695fe 2146static int fill_cmd(CommandList_struct *c, __u8 cmd, int ctlr, void *buff,
2147 size_t size, __u8 page_code, unsigned char *scsi3addr,
2148 int cmd_type)
1da177e4 2149{
7c832835 2150 ctlr_info_t *h = hba[ctlr];
1da177e4
LT		 2151 u64bit buff_dma_handle;
2152 int status = IO_OK;
2153
2154 c->cmd_type = CMD_IOCTL_PEND;
2155 c->Header.ReplyQueue = 0;
7c832835 2156 if (buff != NULL) {
1da177e4 2157 c->Header.SGList = 1;
7c832835 2158 c->Header.SGTotal = 1;
1da177e4
LT		 2159 } else {
2160 c->Header.SGList = 0;
7c832835 2161 c->Header.SGTotal = 0;
1da177e4
LT		 2162 }
2163 c->Header.Tag.lower = c->busaddr;
b57695fe 2164 memcpy(c->Header.LUN.LunAddrBytes, scsi3addr, 8);
1da177e4
LT		 2165
2166 c->Request.Type.Type = cmd_type;
2167 if (cmd_type == TYPE_CMD) {
7c832835
BH		 2168 switch (cmd) {
2169 case CISS_INQUIRY:
1da177e4 2170 /* are we trying to read a vital product page */
7c832835 2171 if (page_code != 0) {
1da177e4
LT		 2172 c->Request.CDB[1] = 0x01;
2173 c->Request.CDB[2] = page_code;
2174 }
2175 c->Request.CDBLen = 6;
7c832835 2176 c->Request.Type.Attribute = ATTR_SIMPLE;
1da177e4
LT		 2177 c->Request.Type.Direction = XFER_READ;
2178 c->Request.Timeout = 0;
7c832835
BH		 2179 c->Request.CDB[0] = CISS_INQUIRY;
2180 c->Request.CDB[4] = size & 0xFF;
2181 break;
1da177e4
LT		 2182 case CISS_REPORT_LOG:
2183 case CISS_REPORT_PHYS:
7c832835 2184 /* Talking to controller so It's a physical command
1da177e4 2185 mode = 00 target = 0. Nothing to write.
7c832835 2186 */
1da177e4
LT		 2187 c->Request.CDBLen = 12;
2188 c->Request.Type.Attribute = ATTR_SIMPLE;
2189 c->Request.Type.Direction = XFER_READ;
2190 c->Request.Timeout = 0;
2191 c->Request.CDB[0] = cmd;
7c832835 2192 c->Request.CDB[6] = (size >> 24) & 0xFF; //MSB
1da177e4
LT		 2193 c->Request.CDB[7] = (size >> 16) & 0xFF;
2194 c->Request.CDB[8] = (size >> 8) & 0xFF;
2195 c->Request.CDB[9] = size & 0xFF;
2196 break;
2197
2198 case CCISS_READ_CAPACITY:
1da177e4
LT		 2199 c->Request.CDBLen = 10;
2200 c->Request.Type.Attribute = ATTR_SIMPLE;
2201 c->Request.Type.Direction = XFER_READ;
2202 c->Request.Timeout = 0;
2203 c->Request.CDB[0] = cmd;
7c832835 2204 break;
00988a35 2205 case CCISS_READ_CAPACITY_16:
00988a35
MMOD		 2206 c->Request.CDBLen = 16;
2207 c->Request.Type.Attribute = ATTR_SIMPLE;
2208 c->Request.Type.Direction = XFER_READ;
2209 c->Request.Timeout = 0;
2210 c->Request.CDB[0] = cmd;
2211 c->Request.CDB[1] = 0x10;
2212 c->Request.CDB[10] = (size >> 24) & 0xFF;
2213 c->Request.CDB[11] = (size >> 16) & 0xFF;
2214 c->Request.CDB[12] = (size >> 8) & 0xFF;
2215 c->Request.CDB[13] = size & 0xFF;
2216 c->Request.Timeout = 0;
2217 c->Request.CDB[0] = cmd;
2218 break;
1da177e4
LT		 2219 case CCISS_CACHE_FLUSH:
2220 c->Request.CDBLen = 12;
2221 c->Request.Type.Attribute = ATTR_SIMPLE;
2222 c->Request.Type.Direction = XFER_WRITE;
2223 c->Request.Timeout = 0;
2224 c->Request.CDB[0] = BMIC_WRITE;
2225 c->Request.CDB[6] = BMIC_CACHE_FLUSH;
7c832835 2226 break;
88f627ae 2227 case TEST_UNIT_READY:
88f627ae
SC		 2228 c->Request.CDBLen = 6;
2229 c->Request.Type.Attribute = ATTR_SIMPLE;
2230 c->Request.Type.Direction = XFER_NONE;
2231 c->Request.Timeout = 0;
2232 break;
1da177e4
LT		 2233 default:
2234 printk(KERN_WARNING
7c832835 2235 "cciss%d: Unknown Command 0x%c\n", ctlr, cmd);
e2019b58 2236 return IO_ERROR;
1da177e4
LT		 2237 }
2238 } else if (cmd_type == TYPE_MSG) {
2239 switch (cmd) {
7c832835 2240 case 0: /* ABORT message */
3da8b713 2241 c->Request.CDBLen = 12;
2242 c->Request.Type.Attribute = ATTR_SIMPLE;
2243 c->Request.Type.Direction = XFER_WRITE;
2244 c->Request.Timeout = 0;
7c832835
BH		 2245 c->Request.CDB[0] = cmd; /* abort */
2246 c->Request.CDB[1] = 0; /* abort a command */
3da8b713 2247 /* buff contains the tag of the command to abort */
2248 memcpy(&c->Request.CDB[4], buff, 8);
2249 break;
7c832835 2250 case 1: /* RESET message */
88f627ae 2251 c->Request.CDBLen = 16;
3da8b713 2252 c->Request.Type.Attribute = ATTR_SIMPLE;
88f627ae 2253 c->Request.Type.Direction = XFER_NONE;
3da8b713 2254 c->Request.Timeout = 0;
2255 memset(&c->Request.CDB[0], 0, sizeof(c->Request.CDB));
7c832835 2256 c->Request.CDB[0] = cmd; /* reset */
88f627ae 2257 c->Request.CDB[1] = 0x03; /* reset a target */
00988a35 2258 break;
1da177e4
LT		 2259 case 3: /* No-Op message */
2260 c->Request.CDBLen = 1;
2261 c->Request.Type.Attribute = ATTR_SIMPLE;
2262 c->Request.Type.Direction = XFER_WRITE;
2263 c->Request.Timeout = 0;
2264 c->Request.CDB[0] = cmd;
2265 break;
2266 default:
2267 printk(KERN_WARNING
7c832835 2268 "cciss%d: unknown message type %d\n", ctlr, cmd);
1da177e4
LT		 2269 return IO_ERROR;
2270 }
2271 } else {
2272 printk(KERN_WARNING
7c832835 2273 "cciss%d: unknown command type %d\n", ctlr, cmd_type);
1da177e4
LT		 2274 return IO_ERROR;
2275 }
2276 /* Fill in the scatter gather information */
2277 if (size > 0) {
2278 buff_dma_handle.val = (__u64) pci_map_single(h->pdev,
7c832835
BH		 2279 buff, size,
2280 PCI_DMA_BIDIRECTIONAL);
1da177e4
LT		 2281 c->SG[0].Addr.lower = buff_dma_handle.val32.lower;
2282 c->SG[0].Addr.upper = buff_dma_handle.val32.upper;
2283 c->SG[0].Len = size;
7c832835 2284 c->SG[0].Ext = 0; /* we are not chaining */
1da177e4
LT		 2285 }
2286 return status;
2287}
7c832835 2288
3c2ab402 2289static int check_target_status(ctlr_info_t *h, CommandList_struct *c)
2290{
2291 switch (c->err_info->ScsiStatus) {
2292 case SAM_STAT_GOOD:
2293 return IO_OK;
2294 case SAM_STAT_CHECK_CONDITION:
2295 switch (0xf & c->err_info->SenseInfo[2]) {
2296 case 0: return IO_OK; /* no sense */
2297 case 1: return IO_OK; /* recovered error */
2298 default:
2299 printk(KERN_WARNING "cciss%d: cmd 0x%02x "
2300 "check condition, sense key = 0x%02x\n",
2301 h->ctlr, c->Request.CDB[0],
2302 c->err_info->SenseInfo[2]);
2303 }
2304 break;
2305 default:
2306 printk(KERN_WARNING "cciss%d: cmd 0x%02x"
2307 "scsi status = 0x%02x\n", h->ctlr,
2308 c->Request.CDB[0], c->err_info->ScsiStatus);
2309 break;
2310 }
2311 return IO_ERROR;
2312}
2313
789a424a 2314static int process_sendcmd_error(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2315{
5390cfc3 2316 int return_status = IO_OK;
7c832835 2317
789a424a 2318 if (c->err_info->CommandStatus == CMD_SUCCESS)
2319 return IO_OK;
5390cfc3 2320
2321 switch (c->err_info->CommandStatus) {
2322 case CMD_TARGET_STATUS:
3c2ab402 2323 return_status = check_target_status(h, c);
5390cfc3 2324 break;
2325 case CMD_DATA_UNDERRUN:
2326 case CMD_DATA_OVERRUN:
2327 /* expected for inquiry and report lun commands */
2328 break;
2329 case CMD_INVALID:
789a424a 2330 printk(KERN_WARNING "cciss: cmd 0x%02x is "
5390cfc3 2331 "reported invalid\n", c->Request.CDB[0]);
2332 return_status = IO_ERROR;
2333 break;
2334 case CMD_PROTOCOL_ERR:
2335 printk(KERN_WARNING "cciss: cmd 0x%02x has "
2336 "protocol error \n", c->Request.CDB[0]);
2337 return_status = IO_ERROR;
2338 break;
2339 case CMD_HARDWARE_ERR:
2340 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2341 " hardware error\n", c->Request.CDB[0]);
2342 return_status = IO_ERROR;
2343 break;
2344 case CMD_CONNECTION_LOST:
2345 printk(KERN_WARNING "cciss: cmd 0x%02x had "
2346 "connection lost\n", c->Request.CDB[0]);
2347 return_status = IO_ERROR;
2348 break;
2349 case CMD_ABORTED:
2350 printk(KERN_WARNING "cciss: cmd 0x%02x was "
2351 "aborted\n", c->Request.CDB[0]);
2352 return_status = IO_ERROR;
2353 break;
2354 case CMD_ABORT_FAILED:
2355 printk(KERN_WARNING "cciss: cmd 0x%02x reports "
2356 "abort failed\n", c->Request.CDB[0]);
2357 return_status = IO_ERROR;
2358 break;
2359 case CMD_UNSOLICITED_ABORT:
2360 printk(KERN_WARNING
2361 "cciss%d: unsolicited abort 0x%02x\n", h->ctlr,
2362 c->Request.CDB[0]);
789a424a 2363 return_status = IO_NEEDS_RETRY;
5390cfc3 2364 break;
2365 default:
2366 printk(KERN_WARNING "cciss: cmd 0x%02x returned "
2367 "unknown status %x\n", c->Request.CDB[0],
2368 c->err_info->CommandStatus);
2369 return_status = IO_ERROR;
7c832835 2370 }
789a424a 2371 return return_status;
2372}
2373
2374static int sendcmd_withirq_core(ctlr_info_t *h, CommandList_struct *c,
2375 int attempt_retry)
2376{
2377 DECLARE_COMPLETION_ONSTACK(wait);
2378 u64bit buff_dma_handle;
2379 unsigned long flags;
2380 int return_status = IO_OK;
2381
2382resend_cmd2:
2383 c->waiting = &wait;
2384 /* Put the request on the tail of the queue and send it */
2385 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
2386 addQ(&h->reqQ, c);
2387 h->Qdepth++;
2388 start_io(h);
2389 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
2390
2391 wait_for_completion(&wait);
2392
2393 if (c->err_info->CommandStatus == 0 || !attempt_retry)
2394 goto command_done;
2395
2396 return_status = process_sendcmd_error(h, c);
2397
2398 if (return_status == IO_NEEDS_RETRY &&
2399 c->retry_count < MAX_CMD_RETRIES) {
2400 printk(KERN_WARNING "cciss%d: retrying 0x%02x\n", h->ctlr,
2401 c->Request.CDB[0]);
2402 c->retry_count++;
2403 /* erase the old error information */
2404 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2405 return_status = IO_OK;
2406 INIT_COMPLETION(wait);
2407 goto resend_cmd2;
2408 }
5390cfc3 2409
2410command_done:
1da177e4 2411 /* unlock the buffers from DMA */
bb2a37bf
MM		 2412 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2413 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
7c832835
BH		 2414 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
2415 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
5390cfc3 2416 return return_status;
2417}
2418
b57695fe 2419static int sendcmd_withirq(__u8 cmd, int ctlr, void *buff, size_t size,
2420 __u8 page_code, unsigned char scsi3addr[],
2421 int cmd_type)
5390cfc3 2422{
2423 ctlr_info_t *h = hba[ctlr];
2424 CommandList_struct *c;
2425 int return_status;
2426
2427 c = cmd_alloc(h, 0);
2428 if (!c)
2429 return -ENOMEM;
b57695fe 2430 return_status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2431 scsi3addr, cmd_type);
5390cfc3 2432 if (return_status == IO_OK)
789a424a 2433 return_status = sendcmd_withirq_core(h, c, 1);
2434
1da177e4 2435 cmd_free(h, c, 0);
7c832835 2436 return return_status;
1da177e4 2437}
7c832835 2438
1da177e4 2439static void cciss_geometry_inquiry(int ctlr, int logvol,
00988a35 2440 int withirq, sector_t total_size,
7c832835
BH		 2441 unsigned int block_size,
2442 InquiryData_struct *inq_buff,
2443 drive_info_struct *drv)
1da177e4
LT		 2444{
2445 int return_code;
00988a35 2446 unsigned long t;
b57695fe 2447 unsigned char scsi3addr[8];
00988a35 2448
1da177e4 2449 memset(inq_buff, 0, sizeof(InquiryData_struct));
b57695fe 2450 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2451 if (withirq)
2452 return_code = sendcmd_withirq(CISS_INQUIRY, ctlr,
b57695fe 2453 inq_buff, sizeof(*inq_buff),
2454 0xC1, scsi3addr, TYPE_CMD);
1da177e4
LT		 2455 else
2456 return_code = sendcmd(CISS_INQUIRY, ctlr, inq_buff,
b57695fe 2457 sizeof(*inq_buff), 0xC1, scsi3addr,
7c832835 2458 TYPE_CMD);
1da177e4 2459 if (return_code == IO_OK) {
7c832835 2460 if (inq_buff->data_byte[8] == 0xFF) {
1da177e4 2461 printk(KERN_WARNING
7c832835
BH		 2462 "cciss: reading geometry failed, volume "
2463 "does not support reading geometry\n");
1da177e4 2464 drv->heads = 255;
7c832835 2465 drv->sectors = 32; // Sectors per track
7f42d3b8 2466 drv->cylinders = total_size + 1;
89f97ad1 2467 drv->raid_level = RAID_UNKNOWN;
1da177e4 2468 } else {
1da177e4
LT		 2469 drv->heads = inq_buff->data_byte[6];
2470 drv->sectors = inq_buff->data_byte[7];
2471 drv->cylinders = (inq_buff->data_byte[4] & 0xff) << 8;
2472 drv->cylinders += inq_buff->data_byte[5];
2473 drv->raid_level = inq_buff->data_byte[8];
3f7705ea
MW		 2474 }
2475 drv->block_size = block_size;
97c06978 2476 drv->nr_blocks = total_size + 1;
3f7705ea
MW		 2477 t = drv->heads * drv->sectors;
2478 if (t > 1) {
97c06978
MMOD		 2479 sector_t real_size = total_size + 1;
2480 unsigned long rem = sector_div(real_size, t);
3f7705ea 2481 if (rem)
97c06978
MMOD		 2482 real_size++;
2483 drv->cylinders = real_size;
1da177e4 2484 }
7c832835 2485 } else { /* Get geometry failed */
1da177e4
LT		 2486 printk(KERN_WARNING "cciss: reading geometry failed\n");
2487 }
cc088d10 2488 printk(KERN_INFO " heads=%d, sectors=%d, cylinders=%d\n\n",
7c832835 2489 drv->heads, drv->sectors, drv->cylinders);
1da177e4 2490}
7c832835 2491
1da177e4 2492static void
00988a35 2493cciss_read_capacity(int ctlr, int logvol, int withirq, sector_t *total_size,
7c832835 2494 unsigned int *block_size)
1da177e4 2495{
00988a35 2496 ReadCapdata_struct *buf;
1da177e4 2497 int return_code;
b57695fe 2498 unsigned char scsi3addr[8];
1aebe187
MK		 2499
2500 buf = kzalloc(sizeof(ReadCapdata_struct), GFP_KERNEL);
2501 if (!buf) {
00988a35
MMOD		 2502 printk(KERN_WARNING "cciss: out of memory\n");
2503 return;
2504 }
1aebe187 2505
b57695fe 2506 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
1da177e4
LT		 2507 if (withirq)
2508 return_code = sendcmd_withirq(CCISS_READ_CAPACITY,
00988a35 2509 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2510 0, scsi3addr, TYPE_CMD);
1da177e4
LT		 2511 else
2512 return_code = sendcmd(CCISS_READ_CAPACITY,
00988a35 2513 ctlr, buf, sizeof(ReadCapdata_struct),
b57695fe 2514 0, scsi3addr, TYPE_CMD);
1da177e4 2515 if (return_code == IO_OK) {
4c1f2b31
AV		 2516 *total_size = be32_to_cpu(*(__be32 *) buf->total_size);
2517 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
7c832835 2518 } else { /* read capacity command failed */
1da177e4
LT		 2519 printk(KERN_WARNING "cciss: read capacity failed\n");
2520 *total_size = 0;
2521 *block_size = BLOCK_SIZE;
2522 }
97c06978 2523 if (*total_size != 0)
7b92aadf 2524 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2525 (unsigned long long)*total_size+1, *block_size);
00988a35 2526 kfree(buf);
00988a35
MMOD		 2527}
2528
2529static void
2530cciss_read_capacity_16(int ctlr, int logvol, int withirq, sector_t *total_size, unsigned int *block_size)
2531{
2532 ReadCapdata_struct_16 *buf;
2533 int return_code;
b57695fe 2534 unsigned char scsi3addr[8];
1aebe187
MK		 2535
2536 buf = kzalloc(sizeof(ReadCapdata_struct_16), GFP_KERNEL);
2537 if (!buf) {
00988a35
MMOD		 2538 printk(KERN_WARNING "cciss: out of memory\n");
2539 return;
2540 }
1aebe187 2541
b57695fe 2542 log_unit_to_scsi3addr(hba[ctlr], scsi3addr, logvol);
00988a35
MMOD		 2543 if (withirq) {
2544 return_code = sendcmd_withirq(CCISS_READ_CAPACITY_16,
2545 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2546 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2547 }
2548 else {
2549 return_code = sendcmd(CCISS_READ_CAPACITY_16,
2550 ctlr, buf, sizeof(ReadCapdata_struct_16),
b57695fe 2551 0, scsi3addr, TYPE_CMD);
00988a35
MMOD		 2552 }
2553 if (return_code == IO_OK) {
4c1f2b31
AV		 2554 *total_size = be64_to_cpu(*(__be64 *) buf->total_size);
2555 *block_size = be32_to_cpu(*(__be32 *) buf->block_size);
00988a35
MMOD		 2556 } else { /* read capacity command failed */
2557 printk(KERN_WARNING "cciss: read capacity failed\n");
2558 *total_size = 0;
2559 *block_size = BLOCK_SIZE;
2560 }
7b92aadf 2561 printk(KERN_INFO " blocks= %llu block_size= %d\n",
97c06978 2562 (unsigned long long)*total_size+1, *block_size);
00988a35 2563 kfree(buf);
1da177e4
LT		 2564}
2565
1da177e4
LT		 2566static int cciss_revalidate(struct gendisk *disk)
2567{
2568 ctlr_info_t *h = get_host(disk);
2569 drive_info_struct *drv = get_drv(disk);
2570 int logvol;
7c832835 2571 int FOUND = 0;
1da177e4 2572 unsigned int block_size;
00988a35 2573 sector_t total_size;
1da177e4
LT		 2574 InquiryData_struct *inq_buff = NULL;
2575
7c832835
BH		 2576 for (logvol = 0; logvol < CISS_MAX_LUN; logvol++) {
2577 if (h->drv[logvol].LunID == drv->LunID) {
2578 FOUND = 1;
1da177e4
LT		 2579 break;
2580 }
2581 }
2582
7c832835
BH		 2583 if (!FOUND)
2584 return 1;
1da177e4 2585
7c832835
BH		 2586 inq_buff = kmalloc(sizeof(InquiryData_struct), GFP_KERNEL);
2587 if (inq_buff == NULL) {
2588 printk(KERN_WARNING "cciss: out of memory\n");
7c832835
BH		 2589 return 1;
2590 }
00988a35
MMOD		 2591 if (h->cciss_read == CCISS_READ_10) {
2592 cciss_read_capacity(h->ctlr, logvol, 1,
2593 &total_size, &block_size);
2594 } else {
2595 cciss_read_capacity_16(h->ctlr, logvol, 1,
2596 &total_size, &block_size);
2597 }
7c832835
BH		 2598 cciss_geometry_inquiry(h->ctlr, logvol, 1, total_size, block_size,
2599 inq_buff, drv);
1da177e4 2600
e1defc4f 2601 blk_queue_logical_block_size(drv->queue, drv->block_size);
1da177e4
LT		 2602 set_capacity(disk, drv->nr_blocks);
2603
1da177e4
LT		 2604 kfree(inq_buff);
2605 return 0;
2606}
2607
2608/*
2609 * Wait polling for a command to complete.
2610 * The memory mapped FIFO is polled for the completion.
2611 * Used only at init time, interrupts from the HBA are disabled.
2612 */
2613static unsigned long pollcomplete(int ctlr)
2614{
2615 unsigned long done;
2616 int i;
2617
2618 /* Wait (up to 20 seconds) for a command to complete */
2619
2620 for (i = 20 * HZ; i > 0; i--) {
2621 done = hba[ctlr]->access.command_completed(hba[ctlr]);
86e84862
NA		 2622 if (done == FIFO_EMPTY)
2623 schedule_timeout_uninterruptible(1);
2624 else
e2019b58 2625 return done;
1da177e4
LT		 2626 }
2627 /* Invalid address to tell caller we ran out of time */
2628 return 1;
2629}
3da8b713 2630
4a4b2d76
SC		 2631/* Send command c to controller h and poll for it to complete.
2632 * Turns interrupts off on the board. Used at driver init time
2633 * and during SCSI error recovery.
1da177e4 2634 */
4a4b2d76 2635static int sendcmd_core(ctlr_info_t *h, CommandList_struct *c)
1da177e4 2636{
1da177e4
LT		 2637 int i;
2638 unsigned long complete;
4a4b2d76 2639 int status = IO_ERROR;
1da177e4 2640 u64bit buff_dma_handle;
1da177e4 2641
4a4b2d76
SC		 2642resend_cmd1:
2643
2644 /* Disable interrupt on the board. */
2645 h->access.set_intr_mask(h, CCISS_INTR_OFF);
7c832835 2646
1da177e4 2647 /* Make sure there is room in the command FIFO */
7c832835 2648 /* Actually it should be completely empty at this time */
3da8b713 2649 /* unless we are in here doing error handling for the scsi */
2650 /* tape side of the driver. */
7c832835 2651 for (i = 200000; i > 0; i--) {
1da177e4 2652 /* if fifo isn't full go */
4a4b2d76 2653 if (!(h->access.fifo_full(h)))
7c832835 2654 break;
7c832835
BH		 2655 udelay(10);
2656 printk(KERN_WARNING "cciss cciss%d: SendCmd FIFO full,"
4a4b2d76 2657 " waiting!\n", h->ctlr);
7c832835 2658 }
4a4b2d76 2659 h->access.submit_command(h, c); /* Send the cmd */
3da8b713 2660 do {
4a4b2d76 2661 complete = pollcomplete(h->ctlr);
1da177e4
LT		 2662
2663#ifdef CCISS_DEBUG
3da8b713 2664 printk(KERN_DEBUG "cciss: command completed\n");
7c832835 2665#endif /* CCISS_DEBUG */
1da177e4 2666
3da8b713 2667 if (complete == 1) {
7c832835
BH		 2668 printk(KERN_WARNING
2669 "cciss cciss%d: SendCmd Timeout out, "
4a4b2d76 2670 "No command list address returned!\n", h->ctlr);
3da8b713 2671 status = IO_ERROR;
3da8b713 2672 break;
2673 }
2674
72f9f132 2675 /* Make sure it's the command we're expecting. */
4a4b2d76 2676 if ((complete & ~CISS_ERROR_BIT) != c->busaddr) {
72f9f132 2677 printk(KERN_WARNING "cciss%d: Unexpected command "
2678 "completion.\n", h->ctlr);
4a4b2d76
SC		 2679 continue;
2680 }
2681
2682 /* It is our command. If no error, we're done. */
2683 if (!(complete & CISS_ERROR_BIT)) {
2684 status = IO_OK;
2685 break;
2686 }
2687
2688 /* There is an error... */
2689
2690 /* if data overrun or underun on Report command ignore it */
2691 if (((c->Request.CDB[0] == CISS_REPORT_LOG) ||
2692 (c->Request.CDB[0] == CISS_REPORT_PHYS) ||
2693 (c->Request.CDB[0] == CISS_INQUIRY)) &&
2694 ((c->err_info->CommandStatus == CMD_DATA_OVERRUN) ||
2695 (c->err_info->CommandStatus == CMD_DATA_UNDERRUN))) {
2696 complete = c->busaddr;
2697 status = IO_OK;
2698 break;
1da177e4 2699 }
4a4b2d76
SC		 2700
2701 if (c->err_info->CommandStatus == CMD_UNSOLICITED_ABORT) {
2702 printk(KERN_WARNING "cciss%d: unsolicited abort %p\n",
2703 h->ctlr, c);
2704 if (c->retry_count < MAX_CMD_RETRIES) {
2705 printk(KERN_WARNING "cciss%d: retrying %p\n",
2706 h->ctlr, c);
2707 c->retry_count++;
2708 /* erase the old error information */
2709 memset(c->err_info, 0, sizeof(c->err_info));
2710 goto resend_cmd1;
3da8b713 2711 }
4a4b2d76
SC		 2712 printk(KERN_WARNING "cciss%d: retried %p too many "
2713 "times\n", h->ctlr, c);
2714 status = IO_ERROR;
3c2ab402 2715 break;
4a4b2d76
SC		 2716 }
2717
2718 if (c->err_info->CommandStatus == CMD_UNABORTABLE) {
2719 printk(KERN_WARNING "cciss%d: command could not be "
2720 "aborted.\n", h->ctlr);
2721 status = IO_ERROR;
3c2ab402 2722 break;
4a4b2d76
SC		 2723 }
2724
4a4b2d76 2725 if (c->err_info->CommandStatus == CMD_TARGET_STATUS) {
3c2ab402 2726 status = check_target_status(h, c);
2727 break;
4a4b2d76
SC		 2728 }
2729
3c2ab402 2730 printk(KERN_WARNING "cciss%d: sendcmd error\n", h->ctlr);
2731 printk(KERN_WARNING "cmd = 0x%02x, CommandStatus = 0x%02x\n",
2732 c->Request.CDB[0], c->err_info->CommandStatus);
4a4b2d76 2733 status = IO_ERROR;
3c2ab402 2734 break;
4a4b2d76
SC		 2735
2736 } while (1);
7c832835 2737
1da177e4 2738 /* unlock the data buffer from DMA */
bb2a37bf
MM		 2739 buff_dma_handle.val32.lower = c->SG[0].Addr.lower;
2740 buff_dma_handle.val32.upper = c->SG[0].Addr.upper;
4a4b2d76 2741 pci_unmap_single(h->pdev, (dma_addr_t) buff_dma_handle.val,
7c832835 2742 c->SG[0].Len, PCI_DMA_BIDIRECTIONAL);
4a4b2d76
SC		 2743 return status;
2744}
2745
2746/*
2747 * Send a command to the controller, and wait for it to complete.
2748 * Used at init time, and during SCSI error recovery.
2749 */
2750static int sendcmd(__u8 cmd, int ctlr, void *buff, size_t size,
4a4b2d76
SC		 2751 __u8 page_code, unsigned char *scsi3addr, int cmd_type)
2752{
2753 CommandList_struct *c;
2754 int status;
2755
2756 c = cmd_alloc(hba[ctlr], 1);
2757 if (!c) {
2758 printk(KERN_WARNING "cciss: unable to get memory");
2759 return IO_ERROR;
2760 }
b57695fe 2761 status = fill_cmd(c, cmd, ctlr, buff, size, page_code,
2762 scsi3addr, cmd_type);
4a4b2d76
SC		 2763 if (status == IO_OK)
2764 status = sendcmd_core(hba[ctlr], c);
2765 cmd_free(hba[ctlr], c, 1);
e2019b58 2766 return status;
7c832835
BH		 2767}
2768
1da177e4
LT		 2769/*
2770 * Map (physical) PCI mem into (virtual) kernel space
2771 */
2772static void __iomem *remap_pci_mem(ulong base, ulong size)
2773{
7c832835
BH		 2774 ulong page_base = ((ulong) base) & PAGE_MASK;
2775 ulong page_offs = ((ulong) base) - page_base;
2776 void __iomem *page_remapped = ioremap(page_base, page_offs + size);
1da177e4 2777
7c832835 2778 return page_remapped ? (page_remapped + page_offs) : NULL;
1da177e4
LT		 2779}
2780
7c832835
BH		 2781/*
2782 * Takes jobs of the Q and sends them to the hardware, then puts it on
2783 * the Q to wait for completion.
2784 */
2785static void start_io(ctlr_info_t *h)
1da177e4
LT		 2786{
2787 CommandList_struct *c;
7c832835 2788
8a3173de
JA		 2789 while (!hlist_empty(&h->reqQ)) {
2790 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
1da177e4
LT		 2791 /* can't do anything if fifo is full */
2792 if ((h->access.fifo_full(h))) {
2793 printk(KERN_WARNING "cciss: fifo full\n");
2794 break;
2795 }
2796
7c832835 2797 /* Get the first entry from the Request Q */
8a3173de 2798 removeQ(c);
1da177e4 2799 h->Qdepth--;
7c832835
BH		 2800
2801 /* Tell the controller execute command */
1da177e4 2802 h->access.submit_command(h, c);
7c832835
BH		 2803
2804 /* Put job onto the completed Q */
8a3173de 2805 addQ(&h->cmpQ, c);
1da177e4
LT		 2806 }
2807}
7c832835 2808
1da177e4
LT		 2809/* Assumes that CCISS_LOCK(h->ctlr) is held. */
2810/* Zeros out the error record and then resends the command back */
2811/* to the controller */
7c832835 2812static inline void resend_cciss_cmd(ctlr_info_t *h, CommandList_struct *c)
1da177e4
LT		 2813{
2814 /* erase the old error information */
2815 memset(c->err_info, 0, sizeof(ErrorInfo_struct));
2816
2817 /* add it to software queue and then send it to the controller */
8a3173de 2818 addQ(&h->reqQ, c);
1da177e4 2819 h->Qdepth++;
7c832835 2820 if (h->Qdepth > h->maxQsinceinit)
1da177e4
LT		 2821 h->maxQsinceinit = h->Qdepth;
2822
2823 start_io(h);
2824}
a9925a06 2825
1a614f50
SC		 2826static inline unsigned int make_status_bytes(unsigned int scsi_status_byte,
2827 unsigned int msg_byte, unsigned int host_byte,
2828 unsigned int driver_byte)
2829{
2830 /* inverse of macros in scsi.h */
2831 return (scsi_status_byte & 0xff) |
2832 ((msg_byte & 0xff) << 8) |
2833 ((host_byte & 0xff) << 16) |
2834 ((driver_byte & 0xff) << 24);
2835}
2836
0a9279cc
MM		 2837static inline int evaluate_target_status(ctlr_info_t *h,
2838 CommandList_struct *cmd, int *retry_cmd)
03bbfee5
MMOD		 2839{
2840 unsigned char sense_key;
1a614f50
SC		 2841 unsigned char status_byte, msg_byte, host_byte, driver_byte;
2842 int error_value;
2843
0a9279cc 2844 *retry_cmd = 0;
1a614f50
SC		 2845 /* If we get in here, it means we got "target status", that is, scsi status */
2846 status_byte = cmd->err_info->ScsiStatus;
2847 driver_byte = DRIVER_OK;
2848 msg_byte = cmd->err_info->CommandStatus; /* correct? seems too device specific */
2849
2850 if (blk_pc_request(cmd->rq))
2851 host_byte = DID_PASSTHROUGH;
2852 else
2853 host_byte = DID_OK;
2854
2855 error_value = make_status_bytes(status_byte, msg_byte,
2856 host_byte, driver_byte);
03bbfee5 2857
1a614f50 2858 if (cmd->err_info->ScsiStatus != SAM_STAT_CHECK_CONDITION) {
03bbfee5
MMOD		 2859 if (!blk_pc_request(cmd->rq))
2860 printk(KERN_WARNING "cciss: cmd %p "
2861 "has SCSI Status 0x%x\n",
2862 cmd, cmd->err_info->ScsiStatus);
1a614f50 2863 return error_value;
03bbfee5
MMOD		 2864 }
2865
2866 /* check the sense key */
2867 sense_key = 0xf & cmd->err_info->SenseInfo[2];
2868 /* no status or recovered error */
1a614f50
SC		 2869 if (((sense_key == 0x0) || (sense_key == 0x1)) && !blk_pc_request(cmd->rq))
2870 error_value = 0;
03bbfee5 2871
0a9279cc
MM		 2872 if (check_for_unit_attention(h, cmd)) {
2873 *retry_cmd = !blk_pc_request(cmd->rq);
2874 return 0;
2875 }
2876
03bbfee5 2877 if (!blk_pc_request(cmd->rq)) { /* Not SG_IO or similar? */
1a614f50 2878 if (error_value != 0)
03bbfee5
MMOD		 2879 printk(KERN_WARNING "cciss: cmd %p has CHECK CONDITION"
2880 " sense key = 0x%x\n", cmd, sense_key);
1a614f50 2881 return error_value;
03bbfee5
MMOD		 2882 }
2883
2884 /* SG_IO or similar, copy sense data back */
2885 if (cmd->rq->sense) {
2886 if (cmd->rq->sense_len > cmd->err_info->SenseLen)
2887 cmd->rq->sense_len = cmd->err_info->SenseLen;
2888 memcpy(cmd->rq->sense, cmd->err_info->SenseInfo,
2889 cmd->rq->sense_len);
2890 } else
2891 cmd->rq->sense_len = 0;
2892
1a614f50 2893 return error_value;
03bbfee5
MMOD		 2894}
2895
7c832835 2896/* checks the status of the job and calls complete buffers to mark all
a9925a06
JA		 2897 * buffers for the completed job. Note that this function does not need
2898 * to hold the hba/queue lock.
7c832835
BH		 2899 */
2900static inline void complete_command(ctlr_info_t *h, CommandList_struct *cmd,
2901 int timeout)
1da177e4 2902{
1da177e4 2903 int retry_cmd = 0;
198b7660
MMOD		 2904 struct request *rq = cmd->rq;
2905
2906 rq->errors = 0;
7c832835 2907
1da177e4 2908 if (timeout)
1a614f50 2909 rq->errors = make_status_bytes(0, 0, 0, DRIVER_TIMEOUT);
1da177e4 2910
d38ae168
MMOD		 2911 if (cmd->err_info->CommandStatus == 0) /* no error has occurred */
2912 goto after_error_processing;
7c832835 2913
d38ae168 2914 switch (cmd->err_info->CommandStatus) {
d38ae168 2915 case CMD_TARGET_STATUS:
0a9279cc 2916 rq->errors = evaluate_target_status(h, cmd, &retry_cmd);
d38ae168
MMOD		 2917 break;
2918 case CMD_DATA_UNDERRUN:
03bbfee5
MMOD		 2919 if (blk_fs_request(cmd->rq)) {
2920 printk(KERN_WARNING "cciss: cmd %p has"
2921 " completed with data underrun "
2922 "reported\n", cmd);
c3a4d78c 2923 cmd->rq->resid_len = cmd->err_info->ResidualCnt;
03bbfee5 2924 }
d38ae168
MMOD		 2925 break;
2926 case CMD_DATA_OVERRUN:
03bbfee5
MMOD		 2927 if (blk_fs_request(cmd->rq))
2928 printk(KERN_WARNING "cciss: cmd %p has"
2929 " completed with data overrun "
2930 "reported\n", cmd);
d38ae168
MMOD		 2931 break;
2932 case CMD_INVALID:
2933 printk(KERN_WARNING "cciss: cmd %p is "
2934 "reported invalid\n", cmd);
1a614f50
SC		 2935 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2936 cmd->err_info->CommandStatus, DRIVER_OK,
2937 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2938 break;
2939 case CMD_PROTOCOL_ERR:
2940 printk(KERN_WARNING "cciss: cmd %p has "
2941 "protocol error \n", cmd);
1a614f50
SC		 2942 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2943 cmd->err_info->CommandStatus, DRIVER_OK,
2944 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2945 break;
2946 case CMD_HARDWARE_ERR:
2947 printk(KERN_WARNING "cciss: cmd %p had "
2948 " hardware error\n", cmd);
1a614f50
SC		 2949 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2950 cmd->err_info->CommandStatus, DRIVER_OK,
2951 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2952 break;
2953 case CMD_CONNECTION_LOST:
2954 printk(KERN_WARNING "cciss: cmd %p had "
2955 "connection lost\n", cmd);
1a614f50
SC		 2956 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2957 cmd->err_info->CommandStatus, DRIVER_OK,
2958 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2959 break;
2960 case CMD_ABORTED:
2961 printk(KERN_WARNING "cciss: cmd %p was "
2962 "aborted\n", cmd);
1a614f50
SC		 2963 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2964 cmd->err_info->CommandStatus, DRIVER_OK,
2965 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 2966 break;
2967 case CMD_ABORT_FAILED:
2968 printk(KERN_WARNING "cciss: cmd %p reports "
2969 "abort failed\n", cmd);
1a614f50
SC		 2970 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2971 cmd->err_info->CommandStatus, DRIVER_OK,
2972 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2973 break;
2974 case CMD_UNSOLICITED_ABORT:
2975 printk(KERN_WARNING "cciss%d: unsolicited "
2976 "abort %p\n", h->ctlr, cmd);
2977 if (cmd->retry_count < MAX_CMD_RETRIES) {
2978 retry_cmd = 1;
2979 printk(KERN_WARNING
2980 "cciss%d: retrying %p\n", h->ctlr, cmd);
2981 cmd->retry_count++;
2982 } else
2983 printk(KERN_WARNING
2984 "cciss%d: %p retried too "
2985 "many times\n", h->ctlr, cmd);
1a614f50
SC		 2986 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2987 cmd->err_info->CommandStatus, DRIVER_OK,
2988 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ABORT);
d38ae168
MMOD		 2989 break;
2990 case CMD_TIMEOUT:
2991 printk(KERN_WARNING "cciss: cmd %p timedout\n", cmd);
1a614f50
SC		 2992 rq->errors = make_status_bytes(SAM_STAT_GOOD,
2993 cmd->err_info->CommandStatus, DRIVER_OK,
2994 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
d38ae168
MMOD		 2995 break;
2996 default:
2997 printk(KERN_WARNING "cciss: cmd %p returned "
2998 "unknown status %x\n", cmd,
2999 cmd->err_info->CommandStatus);
1a614f50
SC		 3000 rq->errors = make_status_bytes(SAM_STAT_GOOD,
3001 cmd->err_info->CommandStatus, DRIVER_OK,
3002 blk_pc_request(cmd->rq) ? DID_PASSTHROUGH : DID_ERROR);
1da177e4 3003 }
d38ae168
MMOD		 3004
3005after_error_processing:
3006
1da177e4 3007 /* We need to return this command */
7c832835
BH		 3008 if (retry_cmd) {
3009 resend_cciss_cmd(h, cmd);
1da177e4 3010 return;
7c832835 3011 }
03bbfee5 3012 cmd->rq->completion_data = cmd;
a9925a06 3013 blk_complete_request(cmd->rq);
1da177e4
LT		 3014}
3015
7c832835
BH		 3016/*
3017 * Get a request and submit it to the controller.
1da177e4 3018 */
165125e1 3019static void do_cciss_request(struct request_queue *q)
1da177e4 3020{
7c832835 3021 ctlr_info_t *h = q->queuedata;
1da177e4 3022 CommandList_struct *c;
00988a35
MMOD		 3023 sector_t start_blk;
3024 int seg;
1da177e4
LT		 3025 struct request *creq;
3026 u64bit temp64;
3027 struct scatterlist tmp_sg[MAXSGENTRIES];
3028 drive_info_struct *drv;
3029 int i, dir;
3030
3031 /* We call start_io here in case there is a command waiting on the
3032 * queue that has not been sent.
7c832835 3033 */
1da177e4
LT		 3034 if (blk_queue_plugged(q))
3035 goto startio;
3036
7c832835 3037 queue:
9934c8c0 3038 creq = blk_peek_request(q);
1da177e4
LT		 3039 if (!creq)
3040 goto startio;
3041
089fe1b2 3042 BUG_ON(creq->nr_phys_segments > MAXSGENTRIES);
1da177e4 3043
7c832835 3044 if ((c = cmd_alloc(h, 1)) == NULL)
1da177e4
LT		 3045 goto full;
3046
9934c8c0 3047 blk_start_request(creq);
1da177e4
LT		 3048
3049 spin_unlock_irq(q->queue_lock);
3050
3051 c->cmd_type = CMD_RWREQ;
3052 c->rq = creq;
7c832835
BH		 3053
3054 /* fill in the request */
1da177e4 3055 drv = creq->rq_disk->private_data;
7c832835 3056 c->Header.ReplyQueue = 0; // unused in simple mode
33079b21
MM		 3057 /* got command from pool, so use the command block index instead */
3058 /* for direct lookups. */
3059 /* The first 2 bits are reserved for controller error reporting. */
3060 c->Header.Tag.lower = (c->cmdindex << 3);
7c832835
BH		 3061 c->Header.Tag.lower |= 0x04; /* flag for direct lookup. */
3062 c->Header.LUN.LogDev.VolId = drv->LunID;
1da177e4 3063 c->Header.LUN.LogDev.Mode = 1;
7c832835
BH		 3064 c->Request.CDBLen = 10; // 12 byte commands not in FW yet;
3065 c->Request.Type.Type = TYPE_CMD; // It is a command.
3066 c->Request.Type.Attribute = ATTR_SIMPLE;
3067 c->Request.Type.Direction =
a52de245 3068 (rq_data_dir(creq) == READ) ? XFER_READ : XFER_WRITE;
7c832835
BH		 3069 c->Request.Timeout = 0; // Don't time out
3070 c->Request.CDB[0] =
00988a35 3071 (rq_data_dir(creq) == READ) ? h->cciss_read : h->cciss_write;
83096ebf 3072 start_blk = blk_rq_pos(creq);
1da177e4 3073#ifdef CCISS_DEBUG
83096ebf
TH		 3074 printk(KERN_DEBUG "ciss: sector =%d nr_sectors=%d\n",
3075 (int)blk_rq_pos(creq), (int)blk_rq_sectors(creq));
7c832835 3076#endif /* CCISS_DEBUG */
1da177e4 3077
45711f1a 3078 sg_init_table(tmp_sg, MAXSGENTRIES);
1da177e4
LT		 3079 seg = blk_rq_map_sg(q, creq, tmp_sg);
3080
7c832835 3081 /* get the DMA records for the setup */
1da177e4
LT		 3082 if (c->Request.Type.Direction == XFER_READ)
3083 dir = PCI_DMA_FROMDEVICE;
3084 else
3085 dir = PCI_DMA_TODEVICE;
3086
7c832835 3087 for (i = 0; i < seg; i++) {
1da177e4 3088 c->SG[i].Len = tmp_sg[i].length;
45711f1a 3089 temp64.val = (__u64) pci_map_page(h->pdev, sg_page(&tmp_sg[i]),
7c832835
BH		 3090 tmp_sg[i].offset,
3091 tmp_sg[i].length, dir);
1da177e4 3092 c->SG[i].Addr.lower = temp64.val32.lower;
7c832835
BH		 3093 c->SG[i].Addr.upper = temp64.val32.upper;
3094 c->SG[i].Ext = 0; // we are not chaining
1da177e4 3095 }
7c832835
BH		 3096 /* track how many SG entries we are using */
3097 if (seg > h->maxSG)
3098 h->maxSG = seg;
1da177e4
LT		 3099
3100#ifdef CCISS_DEBUG
83096ebf
TH		 3101 printk(KERN_DEBUG "cciss: Submitting %u sectors in %d segments\n",
3102 blk_rq_sectors(creq), seg);
7c832835 3103#endif /* CCISS_DEBUG */
1da177e4
LT		 3104
3105 c->Header.SGList = c->Header.SGTotal = seg;
03bbfee5
MMOD		 3106 if (likely(blk_fs_request(creq))) {
3107 if(h->cciss_read == CCISS_READ_10) {
3108 c->Request.CDB[1] = 0;
3109 c->Request.CDB[2] = (start_blk >> 24) & 0xff; //MSB
3110 c->Request.CDB[3] = (start_blk >> 16) & 0xff;
3111 c->Request.CDB[4] = (start_blk >> 8) & 0xff;
3112 c->Request.CDB[5] = start_blk & 0xff;
3113 c->Request.CDB[6] = 0; // (sect >> 24) & 0xff; MSB
83096ebf
TH		 3114 c->Request.CDB[7] = (blk_rq_sectors(creq) >> 8) & 0xff;
3115 c->Request.CDB[8] = blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3116 c->Request.CDB[9] = c->Request.CDB[11] = c->Request.CDB[12] = 0;
3117 } else {
582539e5
RD		 3118 u32 upper32 = upper_32_bits(start_blk);
3119
03bbfee5
MMOD		 3120 c->Request.CDBLen = 16;
3121 c->Request.CDB[1]= 0;
582539e5
RD		 3122 c->Request.CDB[2]= (upper32 >> 24) & 0xff; //MSB
3123 c->Request.CDB[3]= (upper32 >> 16) & 0xff;
3124 c->Request.CDB[4]= (upper32 >> 8) & 0xff;
3125 c->Request.CDB[5]= upper32 & 0xff;
03bbfee5
MMOD		 3126 c->Request.CDB[6]= (start_blk >> 24) & 0xff;
3127 c->Request.CDB[7]= (start_blk >> 16) & 0xff;
3128 c->Request.CDB[8]= (start_blk >> 8) & 0xff;
3129 c->Request.CDB[9]= start_blk & 0xff;
83096ebf
TH		 3130 c->Request.CDB[10]= (blk_rq_sectors(creq) >> 24) & 0xff;
3131 c->Request.CDB[11]= (blk_rq_sectors(creq) >> 16) & 0xff;
3132 c->Request.CDB[12]= (blk_rq_sectors(creq) >> 8) & 0xff;
3133 c->Request.CDB[13]= blk_rq_sectors(creq) & 0xff;
03bbfee5
MMOD		 3134 c->Request.CDB[14] = c->Request.CDB[15] = 0;
3135 }
3136 } else if (blk_pc_request(creq)) {
3137 c->Request.CDBLen = creq->cmd_len;
3138 memcpy(c->Request.CDB, creq->cmd, BLK_MAX_CDB);
00988a35 3139 } else {
03bbfee5
MMOD		 3140 printk(KERN_WARNING "cciss%d: bad request type %d\n", h->ctlr, creq->cmd_type);
3141 BUG();
00988a35 3142 }
1da177e4
LT		 3143
3144 spin_lock_irq(q->queue_lock);
3145
8a3173de 3146 addQ(&h->reqQ, c);
1da177e4 3147 h->Qdepth++;
7c832835
BH		 3148 if (h->Qdepth > h->maxQsinceinit)
3149 h->maxQsinceinit = h->Qdepth;
1da177e4
LT		 3150
3151 goto queue;
00988a35 3152full:
1da177e4 3153 blk_stop_queue(q);
00988a35 3154startio:
1da177e4
LT		 3155 /* We will already have the driver lock here so not need
3156 * to lock it.
7c832835 3157 */
1da177e4
LT		 3158 start_io(h);
3159}
3160
3da8b713 3161static inline unsigned long get_next_completion(ctlr_info_t *h)
3162{
3da8b713 3163 return h->access.command_completed(h);
3da8b713 3164}
3165
3166static inline int interrupt_pending(ctlr_info_t *h)
3167{
3da8b713 3168 return h->access.intr_pending(h);
3da8b713 3169}
3170
3171static inline long interrupt_not_for_us(ctlr_info_t *h)
3172{
7c832835 3173 return (((h->access.intr_pending(h) == 0) ||
3da8b713 3174 (h->interrupts_enabled == 0)));
3da8b713 3175}
3176
7d12e780 3177static irqreturn_t do_cciss_intr(int irq, void *dev_id)
1da177e4
LT		 3178{
3179 ctlr_info_t *h = dev_id;
3180 CommandList_struct *c;
3181 unsigned long flags;
33079b21 3182 __u32 a, a1, a2;
1da177e4 3183
3da8b713 3184 if (interrupt_not_for_us(h))
1da177e4 3185 return IRQ_NONE;
1da177e4
LT		 3186 /*
3187 * If there are completed commands in the completion queue,
3188 * we had better do something about it.
3189 */
3190 spin_lock_irqsave(CCISS_LOCK(h->ctlr), flags);
3da8b713 3191 while (interrupt_pending(h)) {
7c832835 3192 while ((a = get_next_completion(h)) != FIFO_EMPTY) {
1da177e4 3193 a1 = a;
33079b21
MM		 3194 if ((a & 0x04)) {
3195 a2 = (a >> 3);
f880632f 3196 if (a2 >= h->nr_cmds) {
7c832835
BH		 3197 printk(KERN_WARNING
3198 "cciss: controller cciss%d failed, stopping.\n",
3199 h->ctlr);
33079b21
MM		 3200 fail_all_cmds(h->ctlr);
3201 return IRQ_HANDLED;
3202 }
3203
3204 c = h->cmd_pool + a2;
3205 a = c->busaddr;
3206
3207 } else {
8a3173de
JA		 3208 struct hlist_node *tmp;
3209
7c832835 3210 a &= ~3;
8a3173de
JA		 3211 c = NULL;
3212 hlist_for_each_entry(c, tmp, &h->cmpQ, list) {
3213 if (c->busaddr == a)
7c832835
BH		 3214 break;
3215 }
33079b21 3216 }
1da177e4
LT		 3217 /*
3218 * If we've found the command, take it off the
3219 * completion Q and free it
3220 */
8a3173de
JA		 3221 if (c && c->busaddr == a) {
3222 removeQ(c);
1da177e4
LT		 3223 if (c->cmd_type == CMD_RWREQ) {
3224 complete_command(h, c, 0);
3225 } else if (c->cmd_type == CMD_IOCTL_PEND) {
3226 complete(c->waiting);
3227 }
3228# ifdef CONFIG_CISS_SCSI_TAPE
3229 else if (c->cmd_type == CMD_SCSI)
3230 complete_scsi_command(c, 0, a1);
3231# endif
3232 continue;
3233 }
3234 }
3235 }
3236
1da177e4
LT		 3237 spin_unlock_irqrestore(CCISS_LOCK(h->ctlr), flags);
3238 return IRQ_HANDLED;
3239}
7c832835 3240
b368c9dd
AP		 3241/**
3242 * add_to_scan_list() - add controller to rescan queue
3243 * @h: Pointer to the controller.
3244 *
3245 * Adds the controller to the rescan queue if not already on the queue.
3246 *
3247 * returns 1 if added to the queue, 0 if skipped (could be on the
3248 * queue already, or the controller could be initializing or shutting
3249 * down).
3250 **/
3251static int add_to_scan_list(struct ctlr_info *h)
3252{
3253 struct ctlr_info *test_h;
3254 int found = 0;
3255 int ret = 0;
3256
3257 if (h->busy_initializing)
3258 return 0;
3259
3260 if (!mutex_trylock(&h->busy_shutting_down))
3261 return 0;
3262
3263 mutex_lock(&scan_mutex);
3264 list_for_each_entry(test_h, &scan_q, scan_list) {
3265 if (test_h == h) {
3266 found = 1;
3267 break;
3268 }
3269 }
3270 if (!found && !h->busy_scanning) {
3271 INIT_COMPLETION(h->scan_wait);
3272 list_add_tail(&h->scan_list, &scan_q);
3273 ret = 1;
3274 }
3275 mutex_unlock(&scan_mutex);
3276 mutex_unlock(&h->busy_shutting_down);
3277
3278 return ret;
3279}
3280
3281/**
3282 * remove_from_scan_list() - remove controller from rescan queue
3283 * @h: Pointer to the controller.
3284 *
3285 * Removes the controller from the rescan queue if present. Blocks if
3286 * the controller is currently conducting a rescan.
3287 **/
3288static void remove_from_scan_list(struct ctlr_info *h)
3289{
3290 struct ctlr_info *test_h, *tmp_h;
3291 int scanning = 0;
3292
3293 mutex_lock(&scan_mutex);
3294 list_for_each_entry_safe(test_h, tmp_h, &scan_q, scan_list) {
3295 if (test_h == h) {
3296 list_del(&h->scan_list);
3297 complete_all(&h->scan_wait);
3298 mutex_unlock(&scan_mutex);
3299 return;
3300 }
3301 }
3302 if (&h->busy_scanning)
3303 scanning = 0;
3304 mutex_unlock(&scan_mutex);
3305
3306 if (scanning)
3307 wait_for_completion(&h->scan_wait);
3308}
3309
3310/**
3311 * scan_thread() - kernel thread used to rescan controllers
3312 * @data: Ignored.
3313 *
3314 * A kernel thread used scan for drive topology changes on
3315 * controllers. The thread processes only one controller at a time
3316 * using a queue. Controllers are added to the queue using
3317 * add_to_scan_list() and removed from the queue either after done
3318 * processing or using remove_from_scan_list().
3319 *
3320 * returns 0.
3321 **/
0a9279cc
MM		 3322static int scan_thread(void *data)
3323{
b368c9dd 3324 struct ctlr_info *h;
0a9279cc 3325
b368c9dd
AP		 3326 while (1) {
3327 set_current_state(TASK_INTERRUPTIBLE);
3328 schedule();
0a9279cc
MM		 3329 if (kthread_should_stop())
3330 break;
b368c9dd
AP		 3331
3332 while (1) {
3333 mutex_lock(&scan_mutex);
3334 if (list_empty(&scan_q)) {
3335 mutex_unlock(&scan_mutex);
3336 break;
3337 }
3338
3339 h = list_entry(scan_q.next,
3340 struct ctlr_info,
3341 scan_list);
3342 list_del(&h->scan_list);
3343 h->busy_scanning = 1;
3344 mutex_unlock(&scan_mutex);
3345
3346 if (h) {
3347 rebuild_lun_table(h, 0);
3348 complete_all(&h->scan_wait);
3349 mutex_lock(&scan_mutex);
3350 h->busy_scanning = 0;
3351 mutex_unlock(&scan_mutex);
3352 }
3353 }
0a9279cc 3354 }
b368c9dd 3355
0a9279cc
MM		 3356 return 0;
3357}
3358
3359static int check_for_unit_attention(ctlr_info_t *h, CommandList_struct *c)
3360{
3361 if (c->err_info->SenseInfo[2] != UNIT_ATTENTION)
3362 return 0;
3363
3364 switch (c->err_info->SenseInfo[12]) {
3365 case STATE_CHANGED:
3366 printk(KERN_WARNING "cciss%d: a state change "
3367 "detected, command retried\n", h->ctlr);
3368 return 1;
3369 break;
3370 case LUN_FAILED:
3371 printk(KERN_WARNING "cciss%d: LUN failure "
3372 "detected, action required\n", h->ctlr);
3373 return 1;
3374 break;
3375 case REPORT_LUNS_CHANGED:
3376 printk(KERN_WARNING "cciss%d: report LUN data "
3377 "changed\n", h->ctlr);
b368c9dd
AP		 3378 add_to_scan_list(h);
3379 wake_up_process(cciss_scan_thread);
0a9279cc
MM		 3380 return 1;
3381 break;
3382 case POWER_OR_RESET:
3383 printk(KERN_WARNING "cciss%d: a power on "
3384 "or device reset detected\n", h->ctlr);
3385 return 1;
3386 break;
3387 case UNIT_ATTENTION_CLEARED:
3388 printk(KERN_WARNING "cciss%d: unit attention "
3389 "cleared by another initiator\n", h->ctlr);
3390 return 1;
3391 break;
3392 default:
3393 printk(KERN_WARNING "cciss%d: unknown "
3394 "unit attention detected\n", h->ctlr);
3395 return 1;
3396 }
3397}
3398
7c832835 3399/*
d14c4ab5 3400 * We cannot read the structure directly, for portability we must use
1da177e4 3401 * the io functions.
7c832835 3402 * This is for debug only.
1da177e4
LT		 3403 */
3404#ifdef CCISS_DEBUG
7c832835 3405static void print_cfg_table(CfgTable_struct *tb)
1da177e4
LT		 3406{
3407 int i;
3408 char temp_name[17];
3409
3410 printk("Controller Configuration information\n");
3411 printk("------------------------------------\n");
7c832835 3412 for (i = 0; i < 4; i++)
1da177e4 3413 temp_name[i] = readb(&(tb->Signature[i]));
7c832835
BH		 3414 temp_name[4] = '\0';
3415 printk(" Signature = %s\n", temp_name);
1da177e4 3416 printk(" Spec Number = %d\n", readl(&(tb->SpecValence)));
7c832835
BH		 3417 printk(" Transport methods supported = 0x%x\n",
3418 readl(&(tb->TransportSupport)));
3419 printk(" Transport methods active = 0x%x\n",
3420 readl(&(tb->TransportActive)));
3421 printk(" Requested transport Method = 0x%x\n",
3422 readl(&(tb->HostWrite.TransportRequest)));
d14c4ab5 3423 printk(" Coalesce Interrupt Delay = 0x%x\n",
7c832835 3424 readl(&(tb->HostWrite.CoalIntDelay)));
d14c4ab5 3425 printk(" Coalesce Interrupt Count = 0x%x\n",
7c832835
BH		 3426 readl(&(tb->HostWrite.CoalIntCount)));
3427 printk(" Max outstanding commands = 0x%d\n",
3428 readl(&(tb->CmdsOutMax)));
3429 printk(" Bus Types = 0x%x\n", readl(&(tb->BusTypes)));
3430 for (i = 0; i < 16; i++)
1da177e4
LT		 3431 temp_name[i] = readb(&(tb->ServerName[i]));
3432 temp_name[16] = '\0';
3433 printk(" Server Name = %s\n", temp_name);
7c832835 3434 printk(" Heartbeat Counter = 0x%x\n\n\n", readl(&(tb->HeartBeat)));
1da177e4 3435}
7c832835 3436#endif /* CCISS_DEBUG */
1da177e4 3437
7c832835 3438static int find_PCI_BAR_index(struct pci_dev *pdev, unsigned long pci_bar_addr)
1da177e4
LT		 3439{
3440 int i, offset, mem_type, bar_type;
7c832835 3441 if (pci_bar_addr == PCI_BASE_ADDRESS_0) /* looking for BAR zero? */
1da177e4
LT		 3442 return 0;
3443 offset = 0;
7c832835
BH		 3444 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3445 bar_type = pci_resource_flags(pdev, i) & PCI_BASE_ADDRESS_SPACE;
1da177e4
LT		 3446 if (bar_type == PCI_BASE_ADDRESS_SPACE_IO)
3447 offset += 4;
3448 else {
3449 mem_type = pci_resource_flags(pdev, i) &
7c832835 3450 PCI_BASE_ADDRESS_MEM_TYPE_MASK;
1da177e4 3451 switch (mem_type) {
7c832835
BH		 3452 case PCI_BASE_ADDRESS_MEM_TYPE_32:
3453 case PCI_BASE_ADDRESS_MEM_TYPE_1M:
3454 offset += 4; /* 32 bit */
3455 break;
3456 case PCI_BASE_ADDRESS_MEM_TYPE_64:
3457 offset += 8;
3458 break;
3459 default: /* reserved in PCI 2.2 */
3460 printk(KERN_WARNING
3461 "Base address is invalid\n");
3462 return -1;
1da177e4
LT		 3463 break;
3464 }
3465 }
7c832835
BH		 3466 if (offset == pci_bar_addr - PCI_BASE_ADDRESS_0)
3467 return i + 1;
1da177e4
LT		 3468 }
3469 return -1;
3470}
3471
fb86a35b
MM		 3472/* If MSI/MSI-X is supported by the kernel we will try to enable it on
3473 * controllers that are capable. If not, we use IO-APIC mode.
3474 */
3475
7c832835
BH		 3476static void __devinit cciss_interrupt_mode(ctlr_info_t *c,
3477 struct pci_dev *pdev, __u32 board_id)
fb86a35b
MM		 3478{
3479#ifdef CONFIG_PCI_MSI
7c832835
BH		 3480 int err;
3481 struct msix_entry cciss_msix_entries[4] = { {0, 0}, {0, 1},
3482 {0, 2}, {0, 3}
3483 };
fb86a35b
MM		 3484
3485 /* Some boards advertise MSI but don't really support it */
3486 if ((board_id == 0x40700E11) ||
7c832835
BH		 3487 (board_id == 0x40800E11) ||
3488 (board_id == 0x40820E11) || (board_id == 0x40830E11))
fb86a35b
MM		 3489 goto default_int_mode;
3490
7c832835
BH		 3491 if (pci_find_capability(pdev, PCI_CAP_ID_MSIX)) {
3492 err = pci_enable_msix(pdev, cciss_msix_entries, 4);
3493 if (!err) {
3494 c->intr[0] = cciss_msix_entries[0].vector;
3495 c->intr[1] = cciss_msix_entries[1].vector;
3496 c->intr[2] = cciss_msix_entries[2].vector;
3497 c->intr[3] = cciss_msix_entries[3].vector;
3498 c->msix_vector = 1;
3499 return;
3500 }
3501 if (err > 0) {
3502 printk(KERN_WARNING "cciss: only %d MSI-X vectors "
3503 "available\n", err);
1ecb9c0f 3504 goto default_int_mode;
7c832835
BH		 3505 } else {
3506 printk(KERN_WARNING "cciss: MSI-X init failed %d\n",
3507 err);
1ecb9c0f 3508 goto default_int_mode;
7c832835
BH		 3509 }
3510 }
3511 if (pci_find_capability(pdev, PCI_CAP_ID_MSI)) {
3512 if (!pci_enable_msi(pdev)) {
7c832835 3513 c->msi_vector = 1;
7c832835
BH		 3514 } else {
3515 printk(KERN_WARNING "cciss: MSI init failed\n");
7c832835
BH		 3516 }
3517 }
1ecb9c0f 3518default_int_mode:
7c832835 3519#endif /* CONFIG_PCI_MSI */
fb86a35b 3520 /* if we get here we're going to use the default interrupt mode */
7c832835 3521 c->intr[SIMPLE_MODE_INT] = pdev->irq;
fb86a35b
MM		 3522 return;
3523}
3524
7d1fd970 3525static int __devinit cciss_pci_init(ctlr_info_t *c, struct pci_dev *pdev)
1da177e4
LT		 3526{
3527 ushort subsystem_vendor_id, subsystem_device_id, command;
3528 __u32 board_id, scratchpad = 0;
3529 __u64 cfg_offset;
3530 __u32 cfg_base_addr;
3531 __u64 cfg_base_addr_index;
c33ac89b 3532 int i, err;
1da177e4
LT		 3533
3534 /* check to see if controller has been disabled */
3535 /* BEFORE trying to enable it */
7c832835
BH		 3536 (void)pci_read_config_word(pdev, PCI_COMMAND, &command);
3537 if (!(command & 0x02)) {
3538 printk(KERN_WARNING
3539 "cciss: controller appears to be disabled\n");
c33ac89b 3540 return -ENODEV;
1da177e4
LT		 3541 }
3542
c33ac89b 3543 err = pci_enable_device(pdev);
7c832835 3544 if (err) {
1da177e4 3545 printk(KERN_ERR "cciss: Unable to Enable PCI device\n");
c33ac89b 3546 return err;
1da177e4 3547 }
1da177e4 3548
4e570309
BH		 3549 err = pci_request_regions(pdev, "cciss");
3550 if (err) {
3551 printk(KERN_ERR "cciss: Cannot obtain PCI resources, "
7c832835 3552 "aborting\n");
872225ca 3553 return err;
4e570309
BH		 3554 }
3555
1da177e4
LT		 3556 subsystem_vendor_id = pdev->subsystem_vendor;
3557 subsystem_device_id = pdev->subsystem_device;
3558 board_id = (((__u32) (subsystem_device_id << 16) & 0xffff0000) |
7c832835 3559 subsystem_vendor_id);
1da177e4 3560
1da177e4
LT		 3561#ifdef CCISS_DEBUG
3562 printk("command = %x\n", command);
3563 printk("irq = %x\n", pdev->irq);
3564 printk("board_id = %x\n", board_id);
7c832835 3565#endif /* CCISS_DEBUG */
1da177e4 3566
fb86a35b
MM		 3567/* If the kernel supports MSI/MSI-X we will try to enable that functionality,
3568 * else we use the IO-APIC interrupt assigned to us by system ROM.
3569 */
3570 cciss_interrupt_mode(c, pdev, board_id);
1da177e4 3571
e1438581
MM		 3572 /* find the memory BAR */
3573 for (i = 0; i < DEVICE_COUNT_RESOURCE; i++) {
3574 if (pci_resource_flags(pdev, i) & IORESOURCE_MEM)
3575 break;
3576 }
3577 if (i == DEVICE_COUNT_RESOURCE) {
3578 printk(KERN_WARNING "cciss: No memory BAR found\n");
3579 err = -ENODEV;
3580 goto err_out_free_res;
3581 }
3582
3583 c->paddr = pci_resource_start(pdev, i); /* addressing mode bits
3584 * already removed
3585 */
1da177e4 3586
1da177e4 3587#ifdef CCISS_DEBUG
9f92f471 3588 printk("address 0 = %lx\n", c->paddr);
7c832835 3589#endif /* CCISS_DEBUG */
a5b92873 3590 c->vaddr = remap_pci_mem(c->paddr, 0x250);
1da177e4
LT		 3591
3592 /* Wait for the board to become ready. (PCI hotplug needs this.)
3593 * We poll for up to 120 secs, once per 100ms. */
7c832835 3594 for (i = 0; i < 1200; i++) {
1da177e4
LT		 3595 scratchpad = readl(c->vaddr + SA5_SCRATCHPAD_OFFSET);
3596 if (scratchpad == CCISS_FIRMWARE_READY)
3597 break;
3598 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3599 schedule_timeout(msecs_to_jiffies(100)); /* wait 100ms */
1da177e4
LT		 3600 }
3601 if (scratchpad != CCISS_FIRMWARE_READY) {
3602 printk(KERN_WARNING "cciss: Board not ready. Timed out.\n");
c33ac89b 3603 err = -ENODEV;
4e570309 3604 goto err_out_free_res;
1da177e4
LT		 3605 }
3606
3607 /* get the address index number */
3608 cfg_base_addr = readl(c->vaddr + SA5_CTCFG_OFFSET);
3609 cfg_base_addr &= (__u32) 0x0000ffff;
3610#ifdef CCISS_DEBUG
3611 printk("cfg base address = %x\n", cfg_base_addr);
7c832835
BH		 3612#endif /* CCISS_DEBUG */
3613 cfg_base_addr_index = find_PCI_BAR_index(pdev, cfg_base_addr);
1da177e4 3614#ifdef CCISS_DEBUG
9f92f471
RD		 3615 printk("cfg base address index = %llx\n",
3616 (unsigned long long)cfg_base_addr_index);
7c832835 3617#endif /* CCISS_DEBUG */
1da177e4
LT		 3618 if (cfg_base_addr_index == -1) {
3619 printk(KERN_WARNING "cciss: Cannot find cfg_base_addr_index\n");
c33ac89b 3620 err = -ENODEV;
4e570309 3621 goto err_out_free_res;
1da177e4
LT		 3622 }
3623
3624 cfg_offset = readl(c->vaddr + SA5_CTMEM_OFFSET);
3625#ifdef CCISS_DEBUG
9f92f471 3626 printk("cfg offset = %llx\n", (unsigned long long)cfg_offset);
7c832835
BH		 3627#endif /* CCISS_DEBUG */
3628 c->cfgtable = remap_pci_mem(pci_resource_start(pdev,
3629 cfg_base_addr_index) +
3630 cfg_offset, sizeof(CfgTable_struct));
1da177e4
LT		 3631 c->board_id = board_id;
3632
3633#ifdef CCISS_DEBUG
945f390f 3634 print_cfg_table(c->cfgtable);
7c832835 3635#endif /* CCISS_DEBUG */
1da177e4 3636
49153998
MM		 3637 /* Some controllers support Zero Memory Raid (ZMR).
3638 * When configured in ZMR mode the number of supported
3639 * commands drops to 64. So instead of just setting an
3640 * arbitrary value we make the driver a little smarter.
3641 * We read the config table to tell us how many commands
3642 * are supported on the controller then subtract 4 to
3643 * leave a little room for ioctl calls.
3644 */
3645 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835 3646 for (i = 0; i < ARRAY_SIZE(products); i++) {
1da177e4
LT		 3647 if (board_id == products[i].board_id) {
3648 c->product_name = products[i].product_name;
3649 c->access = *(products[i].access);
49153998 3650 c->nr_cmds = c->max_commands - 4;
1da177e4
LT		 3651 break;
3652 }
3653 }
7c832835
BH		 3654 if ((readb(&c->cfgtable->Signature[0]) != 'C') ||
3655 (readb(&c->cfgtable->Signature[1]) != 'I') ||
3656 (readb(&c->cfgtable->Signature[2]) != 'S') ||
3657 (readb(&c->cfgtable->Signature[3]) != 'S')) {
1da177e4 3658 printk("Does not appear to be a valid CISS config table\n");
c33ac89b 3659 err = -ENODEV;
4e570309 3660 goto err_out_free_res;
1da177e4 3661 }
4ff9a9a4
MM		 3662 /* We didn't find the controller in our list. We know the
3663 * signature is valid. If it's an HP device let's try to
3664 * bind to the device and fire it up. Otherwise we bail.
3665 */
3666 if (i == ARRAY_SIZE(products)) {
3667 if (subsystem_vendor_id == PCI_VENDOR_ID_HP) {
3668 c->product_name = products[i-1].product_name;
3669 c->access = *(products[i-1].access);
49153998 3670 c->nr_cmds = c->max_commands - 4;
4ff9a9a4
MM		 3671 printk(KERN_WARNING "cciss: This is an unknown "
3672 "Smart Array controller.\n"
3673 "cciss: Please update to the latest driver "
3674 "available from www.hp.com.\n");
3675 } else {
3676 printk(KERN_WARNING "cciss: Sorry, I don't know how"
3677 " to access the Smart Array controller %08lx\n"
3678 , (unsigned long)board_id);
3679 err = -ENODEV;
3680 goto err_out_free_res;
3681 }
3682 }
1da177e4 3683#ifdef CONFIG_X86
7c832835
BH		 3684 {
3685 /* Need to enable prefetch in the SCSI core for 6400 in x86 */
3686 __u32 prefetch;
3687 prefetch = readl(&(c->cfgtable->SCSI_Prefetch));
3688 prefetch |= 0x100;
3689 writel(prefetch, &(c->cfgtable->SCSI_Prefetch));
3690 }
1da177e4
LT		 3691#endif
3692
8bf50f71
MMOD		 3693 /* Disabling DMA prefetch and refetch for the P600.
3694 * An ASIC bug may result in accesses to invalid memory addresses.
3695 * We've disabled prefetch for some time now. Testing with XEN
3696 * kernels revealed a bug in the refetch if dom0 resides on a P600.
f92e2f5f
MM		 3697 */
3698 if(board_id == 0x3225103C) {
3699 __u32 dma_prefetch;
8bf50f71 3700 __u32 dma_refetch;
f92e2f5f
MM		 3701 dma_prefetch = readl(c->vaddr + I2O_DMA1_CFG);
3702 dma_prefetch |= 0x8000;
3703 writel(dma_prefetch, c->vaddr + I2O_DMA1_CFG);
8bf50f71
MMOD		 3704 pci_read_config_dword(pdev, PCI_COMMAND_PARITY, &dma_refetch);
3705 dma_refetch |= 0x1;
3706 pci_write_config_dword(pdev, PCI_COMMAND_PARITY, dma_refetch);
f92e2f5f
MM		 3707 }
3708
1da177e4
LT		 3709#ifdef CCISS_DEBUG
3710 printk("Trying to put board into Simple mode\n");
7c832835 3711#endif /* CCISS_DEBUG */
1da177e4 3712 c->max_commands = readl(&(c->cfgtable->CmdsOutMax));
7c832835
BH		 3713 /* Update the field, and then ring the doorbell */
3714 writel(CFGTBL_Trans_Simple, &(c->cfgtable->HostWrite.TransportRequest));
3715 writel(CFGTBL_ChangeReq, c->vaddr + SA5_DOORBELL);
1da177e4
LT		 3716
3717 /* under certain very rare conditions, this can take awhile.
3718 * (e.g.: hot replace a failed 144GB drive in a RAID 5 set right
3719 * as we enter this code.) */
7c832835 3720 for (i = 0; i < MAX_CONFIG_WAIT; i++) {
1da177e4
LT		 3721 if (!(readl(c->vaddr + SA5_DOORBELL) & CFGTBL_ChangeReq))
3722 break;
3723 /* delay and try again */
3724 set_current_state(TASK_INTERRUPTIBLE);
4d761609 3725 schedule_timeout(msecs_to_jiffies(1));
7c832835 3726 }
1da177e4
LT		 3727
3728#ifdef CCISS_DEBUG
7c832835
BH		 3729 printk(KERN_DEBUG "I counter got to %d %x\n", i,
3730 readl(c->vaddr + SA5_DOORBELL));
3731#endif /* CCISS_DEBUG */
1da177e4 3732#ifdef CCISS_DEBUG
7c832835
BH		 3733 print_cfg_table(c->cfgtable);
3734#endif /* CCISS_DEBUG */
1da177e4 3735
7c832835 3736 if (!(readl(&(c->cfgtable->TransportActive)) & CFGTBL_Trans_Simple)) {
1da177e4 3737 printk(KERN_WARNING "cciss: unable to get board into"
7c832835 3738 " simple mode\n");
c33ac89b 3739 err = -ENODEV;
4e570309 3740 goto err_out_free_res;
1da177e4
LT		 3741 }
3742 return 0;
3743
5faad620 3744err_out_free_res:
872225ca
MM		 3745 /*
3746 * Deliberately omit pci_disable_device(): it does something nasty to
3747 * Smart Array controllers that pci_enable_device does not undo
3748 */
4e570309 3749 pci_release_regions(pdev);
c33ac89b 3750 return err;
1da177e4
LT		 3751}
3752
6ae5ce8e
MM		 3753/* Function to find the first free pointer into our hba[] array
3754 * Returns -1 if no free entries are left.
7c832835 3755 */
1da177e4
LT		 3756static int alloc_cciss_hba(void)
3757{
799202cb 3758 int i;
1da177e4 3759
7c832835 3760 for (i = 0; i < MAX_CTLR; i++) {
1da177e4
LT		 3761 if (!hba[i]) {
3762 ctlr_info_t *p;
f2912a12 3763
06ff37ff 3764 p = kzalloc(sizeof(ctlr_info_t), GFP_KERNEL);
1da177e4
LT		 3765 if (!p)
3766 goto Enomem;
1da177e4
LT		 3767 hba[i] = p;
3768 return i;
3769 }
3770 }
3771 printk(KERN_WARNING "cciss: This driver supports a maximum"
7c832835 3772 " of %d controllers.\n", MAX_CTLR);
799202cb
MM		 3773 return -1;
3774Enomem:
1da177e4 3775 printk(KERN_ERR "cciss: out of memory.\n");
1da177e4
LT		 3776 return -1;
3777}
3778
3779static void free_hba(int i)
3780{
3781 ctlr_info_t *p = hba[i];
3782 int n;
3783
3784 hba[i] = NULL;
799202cb 3785 for (n = 0; n < CISS_MAX_LUN; n++)
1da177e4
LT		 3786 put_disk(p->gendisk[n]);
3787 kfree(p);
3788}
3789
82eb03cf
CC		 3790/* Send a message CDB to the firmware. */
3791static __devinit int cciss_message(struct pci_dev *pdev, unsigned char opcode, unsigned char type)
3792{
3793 typedef struct {
3794 CommandListHeader_struct CommandHeader;
3795 RequestBlock_struct Request;
3796 ErrDescriptor_struct ErrorDescriptor;
3797 } Command;
3798 static const size_t cmd_sz = sizeof(Command) + sizeof(ErrorInfo_struct);
3799 Command *cmd;
3800 dma_addr_t paddr64;
3801 uint32_t paddr32, tag;
3802 void __iomem *vaddr;
3803 int i, err;
3804
3805 vaddr = ioremap_nocache(pci_resource_start(pdev, 0), pci_resource_len(pdev, 0));
3806 if (vaddr == NULL)
3807 return -ENOMEM;
3808
3809 /* The Inbound Post Queue only accepts 32-bit physical addresses for the
3810 CCISS commands, so they must be allocated from the lower 4GiB of
3811 memory. */
e930438c 3812 err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32));
82eb03cf
CC		 3813 if (err) {
3814 iounmap(vaddr);
3815 return -ENOMEM;
3816 }
3817
3818 cmd = pci_alloc_consistent(pdev, cmd_sz, &paddr64);
3819 if (cmd == NULL) {
3820 iounmap(vaddr);
3821 return -ENOMEM;
3822 }
3823
3824 /* This must fit, because of the 32-bit consistent DMA mask. Also,
3825 although there's no guarantee, we assume that the address is at
3826 least 4-byte aligned (most likely, it's page-aligned). */
3827 paddr32 = paddr64;
3828
3829 cmd->CommandHeader.ReplyQueue = 0;
3830 cmd->CommandHeader.SGList = 0;
3831 cmd->CommandHeader.SGTotal = 0;
3832 cmd->CommandHeader.Tag.lower = paddr32;
3833 cmd->CommandHeader.Tag.upper = 0;
3834 memset(&cmd->CommandHeader.LUN.LunAddrBytes, 0, 8);
3835
3836 cmd->Request.CDBLen = 16;
3837 cmd->Request.Type.Type = TYPE_MSG;
3838 cmd->Request.Type.Attribute = ATTR_HEADOFQUEUE;
3839 cmd->Request.Type.Direction = XFER_NONE;
3840 cmd->Request.Timeout = 0; /* Don't time out */
3841 cmd->Request.CDB[0] = opcode;
3842 cmd->Request.CDB[1] = type;
3843 memset(&cmd->Request.CDB[2], 0, 14); /* the rest of the CDB is reserved */
3844
3845 cmd->ErrorDescriptor.Addr.lower = paddr32 + sizeof(Command);
3846 cmd->ErrorDescriptor.Addr.upper = 0;
3847 cmd->ErrorDescriptor.Len = sizeof(ErrorInfo_struct);
3848
3849 writel(paddr32, vaddr + SA5_REQUEST_PORT_OFFSET);
3850
3851 for (i = 0; i < 10; i++) {
3852 tag = readl(vaddr + SA5_REPLY_PORT_OFFSET);
3853 if ((tag & ~3) == paddr32)
3854 break;
3855 schedule_timeout_uninterruptible(HZ);
3856 }
3857
3858 iounmap(vaddr);
3859
3860 /* we leak the DMA buffer here ... no choice since the controller could
3861 still complete the command. */
3862 if (i == 10) {
3863 printk(KERN_ERR "cciss: controller message %02x:%02x timed out\n",
3864 opcode, type);
3865 return -ETIMEDOUT;
3866 }
3867
3868 pci_free_consistent(pdev, cmd_sz, cmd, paddr64);
3869
3870 if (tag & 2) {
3871 printk(KERN_ERR "cciss: controller message %02x:%02x failed\n",
3872 opcode, type);
3873 return -EIO;
3874 }
3875
3876 printk(KERN_INFO "cciss: controller message %02x:%02x succeeded\n",
3877 opcode, type);
3878 return 0;
3879}
3880
3881#define cciss_soft_reset_controller(p) cciss_message(p, 1, 0)
3882#define cciss_noop(p) cciss_message(p, 3, 0)
3883
3884static __devinit int cciss_reset_msi(struct pci_dev *pdev)
3885{
3886/* the #defines are stolen from drivers/pci/msi.h. */
3887#define msi_control_reg(base) (base + PCI_MSI_FLAGS)
3888#define PCI_MSIX_FLAGS_ENABLE (1 << 15)
3889
3890 int pos;
3891 u16 control = 0;
3892
3893 pos = pci_find_capability(pdev, PCI_CAP_ID_MSI);
3894 if (pos) {
3895 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3896 if (control & PCI_MSI_FLAGS_ENABLE) {
3897 printk(KERN_INFO "cciss: resetting MSI\n");
3898 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSI_FLAGS_ENABLE);
3899 }
3900 }
3901
3902 pos = pci_find_capability(pdev, PCI_CAP_ID_MSIX);
3903 if (pos) {
3904 pci_read_config_word(pdev, msi_control_reg(pos), &control);
3905 if (control & PCI_MSIX_FLAGS_ENABLE) {
3906 printk(KERN_INFO "cciss: resetting MSI-X\n");
3907 pci_write_config_word(pdev, msi_control_reg(pos), control & ~PCI_MSIX_FLAGS_ENABLE);
3908 }
3909 }
3910
3911 return 0;
3912}
3913
3914/* This does a hard reset of the controller using PCI power management
3915 * states. */
3916static __devinit int cciss_hard_reset_controller(struct pci_dev *pdev)
3917{
3918 u16 pmcsr, saved_config_space[32];
3919 int i, pos;
3920
3921 printk(KERN_INFO "cciss: using PCI PM to reset controller\n");
3922
3923 /* This is very nearly the same thing as
3924
3925 pci_save_state(pci_dev);
3926 pci_set_power_state(pci_dev, PCI_D3hot);
3927 pci_set_power_state(pci_dev, PCI_D0);
3928 pci_restore_state(pci_dev);
3929
3930 but we can't use these nice canned kernel routines on
3931 kexec, because they also check the MSI/MSI-X state in PCI
3932 configuration space and do the wrong thing when it is
3933 set/cleared. Also, the pci_save/restore_state functions
3934 violate the ordering requirements for restoring the
3935 configuration space from the CCISS document (see the
3936 comment below). So we roll our own .... */
3937
3938 for (i = 0; i < 32; i++)
3939 pci_read_config_word(pdev, 2*i, &saved_config_space[i]);
3940
3941 pos = pci_find_capability(pdev, PCI_CAP_ID_PM);
3942 if (pos == 0) {
3943 printk(KERN_ERR "cciss_reset_controller: PCI PM not supported\n");
3944 return -ENODEV;
3945 }
3946
3947 /* Quoting from the Open CISS Specification: "The Power
3948 * Management Control/Status Register (CSR) controls the power
3949 * state of the device. The normal operating state is D0,
3950 * CSR=00h. The software off state is D3, CSR=03h. To reset
3951 * the controller, place the interface device in D3 then to
3952 * D0, this causes a secondary PCI reset which will reset the
3953 * controller." */
3954
3955 /* enter the D3hot power management state */
3956 pci_read_config_word(pdev, pos + PCI_PM_CTRL, &pmcsr);
3957 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
3958 pmcsr |= PCI_D3hot;
3959 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
3960
3961 schedule_timeout_uninterruptible(HZ >> 1);
3962
3963 /* enter the D0 power management state */
3964 pmcsr &= ~PCI_PM_CTRL_STATE_MASK;
3965 pmcsr |= PCI_D0;
3966 pci_write_config_word(pdev, pos + PCI_PM_CTRL, pmcsr);
3967
3968 schedule_timeout_uninterruptible(HZ >> 1);
3969
3970 /* Restore the PCI configuration space. The Open CISS
3971 * Specification says, "Restore the PCI Configuration
3972 * Registers, offsets 00h through 60h. It is important to
3973 * restore the command register, 16-bits at offset 04h,
3974 * last. Do not restore the configuration status register,
3975 * 16-bits at offset 06h." Note that the offset is 2*i. */
3976 for (i = 0; i < 32; i++) {
3977 if (i == 2 || i == 3)
3978 continue;
3979 pci_write_config_word(pdev, 2*i, saved_config_space[i]);
3980 }
3981 wmb();
3982 pci_write_config_word(pdev, 4, saved_config_space[2]);
3983
3984 return 0;
3985}
3986
1da177e4
LT		 3987/*
3988 * This is it. Find all the controllers and register them. I really hate
3989 * stealing all these major device numbers.
3990 * returns the number of block devices registered.
3991 */
3992static int __devinit cciss_init_one(struct pci_dev *pdev,
7c832835 3993 const struct pci_device_id *ent)
1da177e4 3994{
1da177e4 3995 int i;
799202cb 3996 int j = 0;
1da177e4 3997 int rc;
22bece00 3998 int dac, return_code;
212a5026 3999 InquiryData_struct *inq_buff;
1da177e4 4000
82eb03cf
CC		 4001 if (reset_devices) {
4002 /* Reset the controller with a PCI power-cycle */
4003 if (cciss_hard_reset_controller(pdev) || cciss_reset_msi(pdev))
4004 return -ENODEV;
4005
5e18cfd0
JA		 4006 /* Now try to get the controller to respond to a no-op. Some
4007 devices (notably the HP Smart Array 5i Controller) need
4008 up to 30 seconds to respond. */
5e4c91c8 4009 for (i=0; i<30; i++) {
82eb03cf
CC		 4010 if (cciss_noop(pdev) == 0)
4011 break;
5e4c91c8
JA		 4012
4013 schedule_timeout_uninterruptible(HZ);
4014 }
4015 if (i == 30) {
4016 printk(KERN_ERR "cciss: controller seems dead\n");
4017 return -EBUSY;
82eb03cf
CC		 4018 }
4019 }
4020
1da177e4 4021 i = alloc_cciss_hba();
7c832835 4022 if (i < 0)
e2019b58 4023 return -1;
1f8ef380
MM		 4024
4025 hba[i]->busy_initializing = 1;
8a3173de
JA		 4026 INIT_HLIST_HEAD(&hba[i]->cmpQ);
4027 INIT_HLIST_HEAD(&hba[i]->reqQ);
b368c9dd 4028 mutex_init(&hba[i]->busy_shutting_down);
1f8ef380 4029
1da177e4 4030 if (cciss_pci_init(hba[i], pdev) != 0)
7fe06326 4031 goto clean0;
1da177e4
LT		 4032
4033 sprintf(hba[i]->devname, "cciss%d", i);
4034 hba[i]->ctlr = i;
4035 hba[i]->pdev = pdev;
4036
b368c9dd
AP		 4037 init_completion(&hba[i]->scan_wait);
4038
7fe06326
AP		 4039 if (cciss_create_hba_sysfs_entry(hba[i]))
4040 goto clean0;
4041
1da177e4 4042 /* configure PCI DMA stuff */
6a35528a 4043 if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(64)))
40aabb58 4044 dac = 1;
284901a9 4045 else if (!pci_set_dma_mask(pdev, DMA_BIT_MASK(32)))
40aabb58 4046 dac = 0;
1da177e4 4047 else {
40aabb58 4048 printk(KERN_ERR "cciss: no suitable DMA available\n");
1da177e4
LT		 4049 goto clean1;
4050 }
4051
4052 /*
4053 * register with the major number, or get a dynamic major number
4054 * by passing 0 as argument. This is done for greater than
4055 * 8 controller support.
4056 */
4057 if (i < MAX_CTLR_ORIG)
564de74a 4058 hba[i]->major = COMPAQ_CISS_MAJOR + i;
1da177e4 4059 rc = register_blkdev(hba[i]->major, hba[i]->devname);
7c832835 4060 if (rc == -EBUSY || rc == -EINVAL) {
1da177e4 4061 printk(KERN_ERR
7c832835
BH		 4062 "cciss: Unable to get major number %d for %s "
4063 "on hba %d\n", hba[i]->major, hba[i]->devname, i);
1da177e4 4064 goto clean1;
7c832835 4065 } else {
1da177e4
LT		 4066 if (i >= MAX_CTLR_ORIG)
4067 hba[i]->major = rc;
4068 }
4069
4070 /* make sure the board interrupts are off */
4071 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_OFF);
7c832835 4072 if (request_irq(hba[i]->intr[SIMPLE_MODE_INT], do_cciss_intr,
69ab3912 4073 IRQF_DISABLED | IRQF_SHARED, hba[i]->devname, hba[i])) {
1da177e4 4074 printk(KERN_ERR "cciss: Unable to get irq %d for %s\n",
7c832835 4075 hba[i]->intr[SIMPLE_MODE_INT], hba[i]->devname);
1da177e4
LT		 4076 goto clean2;
4077 }
40aabb58
BH		 4078
4079 printk(KERN_INFO "%s: <0x%x> at PCI %s IRQ %d%s using DAC\n",
7c832835
BH		 4080 hba[i]->devname, pdev->device, pci_name(pdev),
4081 hba[i]->intr[SIMPLE_MODE_INT], dac ? "" : " not");
4082
4083 hba[i]->cmd_pool_bits =
061837bc
JL		 4084 kmalloc(DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4085 * sizeof(unsigned long), GFP_KERNEL);
7c832835
BH		 4086 hba[i]->cmd_pool = (CommandList_struct *)
4087 pci_alloc_consistent(hba[i]->pdev,
f880632f 4088 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4089 &(hba[i]->cmd_pool_dhandle));
4090 hba[i]->errinfo_pool = (ErrorInfo_struct *)
4091 pci_alloc_consistent(hba[i]->pdev,
f880632f 4092 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4093 &(hba[i]->errinfo_pool_dhandle));
4094 if ((hba[i]->cmd_pool_bits == NULL)
4095 || (hba[i]->cmd_pool == NULL)
4096 || (hba[i]->errinfo_pool == NULL)) {
4097 printk(KERN_ERR "cciss: out of memory");
1da177e4
LT		 4098 goto clean4;
4099 }
1da177e4 4100 spin_lock_init(&hba[i]->lock);
1da177e4 4101
7c832835
BH		 4102 /* Initialize the pdev driver private data.
4103 have it point to hba[i]. */
1da177e4 4104 pci_set_drvdata(pdev, hba[i]);
7c832835
BH		 4105 /* command and error info recs zeroed out before
4106 they are used */
4107 memset(hba[i]->cmd_pool_bits, 0,
061837bc
JL		 4108 DIV_ROUND_UP(hba[i]->nr_cmds, BITS_PER_LONG)
4109 * sizeof(unsigned long));
1da177e4 4110
6ae5ce8e
MM		 4111 hba[i]->num_luns = 0;
4112 hba[i]->highest_lun = -1;
4113 for (j = 0; j < CISS_MAX_LUN; j++) {
4114 hba[i]->drv[j].raid_level = -1;
4115 hba[i]->drv[j].queue = NULL;
4116 hba[i]->gendisk[j] = NULL;
4117 }
1da177e4
LT		 4118
4119 cciss_scsi_setup(i);
4120
4121 /* Turn the interrupts on so we can service requests */
4122 hba[i]->access.set_intr_mask(hba[i], CCISS_INTR_ON);
4123
22bece00
MM		 4124 /* Get the firmware version */
4125 inq_buff = kzalloc(sizeof(InquiryData_struct), GFP_KERNEL);
4126 if (inq_buff == NULL) {
4127 printk(KERN_ERR "cciss: out of memory\n");
4128 goto clean4;
4129 }
4130
4131 return_code = sendcmd_withirq(CISS_INQUIRY, i, inq_buff,
b57695fe 4132 sizeof(InquiryData_struct), 0, CTLR_LUNID, TYPE_CMD);
22bece00
MM		 4133 if (return_code == IO_OK) {
4134 hba[i]->firm_ver[0] = inq_buff->data_byte[32];
4135 hba[i]->firm_ver[1] = inq_buff->data_byte[33];
4136 hba[i]->firm_ver[2] = inq_buff->data_byte[34];
4137 hba[i]->firm_ver[3] = inq_buff->data_byte[35];
4138 } else { /* send command failed */
4139 printk(KERN_WARNING "cciss: unable to determine firmware"
4140 " version of controller\n");
4141 }
212a5026 4142 kfree(inq_buff);
22bece00 4143
1da177e4 4144 cciss_procinit(i);
92c4231a
MM		 4145
4146 hba[i]->cciss_max_sectors = 2048;
4147
6ae5ce8e 4148 rebuild_lun_table(hba[i], 1);
b368c9dd 4149 hba[i]->busy_initializing = 0;
e2019b58 4150 return 1;
1da177e4 4151
6ae5ce8e 4152clean4:
6044ec88 4153 kfree(hba[i]->cmd_pool_bits);
7c832835 4154 if (hba[i]->cmd_pool)
1da177e4 4155 pci_free_consistent(hba[i]->pdev,
f880632f 4156 hba[i]->nr_cmds * sizeof(CommandList_struct),
7c832835
BH		 4157 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
4158 if (hba[i]->errinfo_pool)
1da177e4 4159 pci_free_consistent(hba[i]->pdev,
f880632f 4160 hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835
BH		 4161 hba[i]->errinfo_pool,
4162 hba[i]->errinfo_pool_dhandle);
fb86a35b 4163 free_irq(hba[i]->intr[SIMPLE_MODE_INT], hba[i]);
6ae5ce8e 4164clean2:
1da177e4 4165 unregister_blkdev(hba[i]->major, hba[i]->devname);
6ae5ce8e 4166clean1:
7fe06326
AP		 4167 cciss_destroy_hba_sysfs_entry(hba[i]);
4168clean0:
1f8ef380 4169 hba[i]->busy_initializing = 0;
799202cb
MM		 4170 /* cleanup any queues that may have been initialized */
4171 for (j=0; j <= hba[i]->highest_lun; j++){
4172 drive_info_struct *drv = &(hba[i]->drv[j]);
4173 if (drv->queue)
4174 blk_cleanup_queue(drv->queue);
4175 }
872225ca
MM		 4176 /*
4177 * Deliberately omit pci_disable_device(): it does something nasty to
4178 * Smart Array controllers that pci_enable_device does not undo
4179 */
799202cb 4180 pci_release_regions(pdev);
799202cb 4181 pci_set_drvdata(pdev, NULL);
61808c2b 4182 free_hba(i);
e2019b58 4183 return -1;
1da177e4
LT		 4184}
4185
e9ca75b5 4186static void cciss_shutdown(struct pci_dev *pdev)
1da177e4
LT		 4187{
4188 ctlr_info_t *tmp_ptr;
e9ca75b5 4189 int i;
1da177e4 4190 char flush_buf[4];
7c832835 4191 int return_code;
1da177e4 4192
e9ca75b5
GB		 4193 tmp_ptr = pci_get_drvdata(pdev);
4194 if (tmp_ptr == NULL)
4195 return;
4196 i = tmp_ptr->ctlr;
4197 if (hba[i] == NULL)
4198 return;
4199
4200 /* Turn board interrupts off and send the flush cache command */
4201 /* sendcmd will turn off interrupt, and send the flush...
4202 * To write all data in the battery backed cache to disks */
4203 memset(flush_buf, 0, 4);
b57695fe 4204 return_code = sendcmd(CCISS_CACHE_FLUSH, i, flush_buf, 4, 0,
4205 CTLR_LUNID, TYPE_CMD);
e9ca75b5
GB		 4206 if (return_code == IO_OK) {
4207 printk(KERN_INFO "Completed flushing cache on controller %d\n", i);
4208 } else {
4209 printk(KERN_WARNING "Error flushing cache on controller %d\n", i);
4210 }
4211 free_irq(hba[i]->intr[2], hba[i]);
4212}
4213
4214static void __devexit cciss_remove_one(struct pci_dev *pdev)
4215{
4216 ctlr_info_t *tmp_ptr;
4217 int i, j;
4218
7c832835
BH		 4219 if (pci_get_drvdata(pdev) == NULL) {
4220 printk(KERN_ERR "cciss: Unable to remove device \n");
1da177e4
LT		 4221 return;
4222 }
0a9279cc 4223
1da177e4
LT		 4224 tmp_ptr = pci_get_drvdata(pdev);
4225 i = tmp_ptr->ctlr;
7c832835 4226 if (hba[i] == NULL) {
1da177e4 4227 printk(KERN_ERR "cciss: device appears to "
7c832835 4228 "already be removed \n");
1da177e4
LT		 4229 return;
4230 }
b6550777 4231
b368c9dd 4232 mutex_lock(&hba[i]->busy_shutting_down);
0a9279cc 4233
b368c9dd 4234 remove_from_scan_list(hba[i]);
b6550777
BH		 4235 remove_proc_entry(hba[i]->devname, proc_cciss);
4236 unregister_blkdev(hba[i]->major, hba[i]->devname);
4237
4238 /* remove it from the disk list */
4239 for (j = 0; j < CISS_MAX_LUN; j++) {
4240 struct gendisk *disk = hba[i]->gendisk[j];
4241 if (disk) {
165125e1 4242 struct request_queue *q = disk->queue;
b6550777
BH		 4243
4244 if (disk->flags & GENHD_FL_UP)
4245 del_gendisk(disk);
4246 if (q)
4247 blk_cleanup_queue(q);
4248 }
c64bebcd
AP		 4249 if (hba[i]->drv[j].raid_level != -1)
4250 cciss_destroy_ld_sysfs_entry(&hba[i]->drv[j]);
4251
b6550777
BH		 4252 }
4253
ba198efb 4254#ifdef CONFIG_CISS_SCSI_TAPE
b6550777 4255 cciss_unregister_scsi(i); /* unhook from SCSI subsystem */
ba198efb 4256#endif
b6550777 4257
e9ca75b5 4258 cciss_shutdown(pdev);
fb86a35b
MM		 4259
4260#ifdef CONFIG_PCI_MSI
7c832835
BH		 4261 if (hba[i]->msix_vector)
4262 pci_disable_msix(hba[i]->pdev);
4263 else if (hba[i]->msi_vector)
4264 pci_disable_msi(hba[i]->pdev);
4265#endif /* CONFIG_PCI_MSI */
fb86a35b 4266
1da177e4 4267 iounmap(hba[i]->vaddr);
1da177e4 4268
f880632f 4269 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(CommandList_struct),
1da177e4 4270 hba[i]->cmd_pool, hba[i]->cmd_pool_dhandle);
f880632f 4271 pci_free_consistent(hba[i]->pdev, hba[i]->nr_cmds * sizeof(ErrorInfo_struct),
7c832835 4272 hba[i]->errinfo_pool, hba[i]->errinfo_pool_dhandle);
1da177e4 4273 kfree(hba[i]->cmd_pool_bits);
872225ca
MM		 4274 /*
4275 * Deliberately omit pci_disable_device(): it does something nasty to
4276 * Smart Array controllers that pci_enable_device does not undo
4277 */
7c832835 4278 pci_release_regions(pdev);
4e570309 4279 pci_set_drvdata(pdev, NULL);
7fe06326 4280 cciss_destroy_hba_sysfs_entry(hba[i]);
b368c9dd 4281 mutex_unlock(&hba[i]->busy_shutting_down);
1da177e4 4282 free_hba(i);
7c832835 4283}
1da177e4
LT		 4284
4285static struct pci_driver cciss_pci_driver = {
7c832835
BH		 4286 .name = "cciss",
4287 .probe = cciss_init_one,
4288 .remove = __devexit_p(cciss_remove_one),
4289 .id_table = cciss_pci_device_id, /* id_table */
e9ca75b5 4290 .shutdown = cciss_shutdown,
1da177e4
LT		 4291};
4292
4293/*
4294 * This is it. Register the PCI driver information for the cards we control
7c832835 4295 * the OS will call our registered routines when it finds one of our cards.
1da177e4
LT		 4296 */
4297static int __init cciss_init(void)
4298{
7fe06326
AP		 4299 int err;
4300
10cbda97
JA		 4301 /*
4302 * The hardware requires that commands are aligned on a 64-bit
4303 * boundary. Given that we use pci_alloc_consistent() to allocate an
4304 * array of them, the size must be a multiple of 8 bytes.
4305 */
4306 BUILD_BUG_ON(sizeof(CommandList_struct) % 8);
4307
1da177e4
LT		 4308 printk(KERN_INFO DRIVER_NAME "\n");
4309
7fe06326
AP		 4310 err = bus_register(&cciss_bus_type);
4311 if (err)
4312 return err;
4313
b368c9dd
AP		 4314 /* Start the scan thread */
4315 cciss_scan_thread = kthread_run(scan_thread, NULL, "cciss_scan");
4316 if (IS_ERR(cciss_scan_thread)) {
4317 err = PTR_ERR(cciss_scan_thread);
4318 goto err_bus_unregister;
4319 }
4320
1da177e4 4321 /* Register for our PCI devices */
7fe06326
AP		 4322 err = pci_register_driver(&cciss_pci_driver);
4323 if (err)
b368c9dd 4324 goto err_thread_stop;
7fe06326
AP		 4325
4326 return 0;
4327
b368c9dd
AP		 4328err_thread_stop:
4329 kthread_stop(cciss_scan_thread);
4330err_bus_unregister:
7fe06326 4331 bus_unregister(&cciss_bus_type);
b368c9dd 4332
7fe06326 4333 return err;
1da177e4
LT		 4334}
4335
4336static void __exit cciss_cleanup(void)
4337{
4338 int i;
4339
4340 pci_unregister_driver(&cciss_pci_driver);
4341 /* double check that all controller entrys have been removed */
7c832835
BH		 4342 for (i = 0; i < MAX_CTLR; i++) {
4343 if (hba[i] != NULL) {
1da177e4 4344 printk(KERN_WARNING "cciss: had to remove"
7c832835 4345 " controller %d\n", i);
1da177e4
LT		 4346 cciss_remove_one(hba[i]->pdev);
4347 }
4348 }
b368c9dd 4349 kthread_stop(cciss_scan_thread);
928b4d8c 4350 remove_proc_entry("driver/cciss", NULL);
7fe06326 4351 bus_unregister(&cciss_bus_type);
1da177e4
LT		 4352}
4353
33079b21
MM		 4354static void fail_all_cmds(unsigned long ctlr)
4355{
4356 /* If we get here, the board is apparently dead. */
4357 ctlr_info_t *h = hba[ctlr];
4358 CommandList_struct *c;
4359 unsigned long flags;
4360
4361 printk(KERN_WARNING "cciss%d: controller not responding.\n", h->ctlr);
7c832835 4362 h->alive = 0; /* the controller apparently died... */
33079b21
MM		 4363
4364 spin_lock_irqsave(CCISS_LOCK(ctlr), flags);
4365
7c832835 4366 pci_disable_device(h->pdev); /* Make sure it is really dead. */
33079b21
MM		 4367
4368 /* move everything off the request queue onto the completed queue */
8a3173de
JA		 4369 while (!hlist_empty(&h->reqQ)) {
4370 c = hlist_entry(h->reqQ.first, CommandList_struct, list);
4371 removeQ(c);
33079b21 4372 h->Qdepth--;
8a3173de 4373 addQ(&h->cmpQ, c);
33079b21
MM		 4374 }
4375
4376 /* Now, fail everything on the completed queue with a HW error */
8a3173de
JA		 4377 while (!hlist_empty(&h->cmpQ)) {
4378 c = hlist_entry(h->cmpQ.first, CommandList_struct, list);
4379 removeQ(c);
b59e64d0
HR		 4380 if (c->cmd_type != CMD_MSG_STALE)
4381 c->err_info->CommandStatus = CMD_HARDWARE_ERR;
33079b21
MM		 4382 if (c->cmd_type == CMD_RWREQ) {
4383 complete_command(h, c, 0);
4384 } else if (c->cmd_type == CMD_IOCTL_PEND)
4385 complete(c->waiting);
4386#ifdef CONFIG_CISS_SCSI_TAPE
7c832835
BH		 4387 else if (c->cmd_type == CMD_SCSI)
4388 complete_scsi_command(c, 0, 0);
33079b21
MM		 4389#endif
4390 }
4391 spin_unlock_irqrestore(CCISS_LOCK(ctlr), flags);
4392 return;
4393}
4394
1da177e4
LT		 4395module_init(cciss_init);
4396module_exit(cciss_cleanup);
ubuntu-bionic-kernel mirror