[qemu.git] / hw / scsi-bus.c

#include "hw.h"
#include "qemu-error.h"
#include "scsi.h"
#include "scsi-defs.h"
#include "qdev.h"

static struct BusInfo scsi_bus_info = {
    .name  = "SCSI",
    .size  = sizeof(SCSIBus),
    .props = (Property[]) {
        DEFINE_PROP_UINT32("scsi-id", SCSIDevice, id, -1),
        DEFINE_PROP_END_OF_LIST(),
    },
};
static int next_scsi_bus;

/* Create a scsi bus, and attach devices to it.  */
void scsi_bus_new(SCSIBus *bus, DeviceState *host, int tcq, int ndev,
                  scsi_completionfn complete)
{
    qbus_create_inplace(&bus->qbus, &scsi_bus_info, host, NULL);
    bus->busnr = next_scsi_bus++;
    bus->tcq = tcq;
    bus->ndev = ndev;
    bus->complete = complete;
    bus->qbus.allow_hotplug = 1;
}

static int scsi_qdev_init(DeviceState *qdev, DeviceInfo *base)
{
    SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
    SCSIDeviceInfo *info = DO_UPCAST(SCSIDeviceInfo, qdev, base);
    SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
    int rc = -1;

    if (dev->id == -1) {
        for (dev->id = 0; dev->id < bus->ndev; dev->id++) {
            if (bus->devs[dev->id] == NULL)
                break;
        }
    }
    if (dev->id >= bus->ndev) {
        error_report("bad scsi device id: %d", dev->id);
        goto err;
    }

    if (bus->devs[dev->id]) {
        qdev_free(&bus->devs[dev->id]->qdev);
    }
    bus->devs[dev->id] = dev;

    dev->info = info;
    QTAILQ_INIT(&dev->requests);
    rc = dev->info->init(dev);
    if (rc != 0) {
        bus->devs[dev->id] = NULL;
    }

err:
    return rc;
}

static int scsi_qdev_exit(DeviceState *qdev)
{
    SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
    SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);

    assert(bus->devs[dev->id] != NULL);
    if (bus->devs[dev->id]->info->destroy) {
        bus->devs[dev->id]->info->destroy(bus->devs[dev->id]);
    }
    bus->devs[dev->id] = NULL;
    return 0;
}

void scsi_qdev_register(SCSIDeviceInfo *info)
{
    info->qdev.bus_info = &scsi_bus_info;
    info->qdev.init     = scsi_qdev_init;
    info->qdev.unplug   = qdev_simple_unplug_cb;
    info->qdev.exit     = scsi_qdev_exit;
    qdev_register(&info->qdev);
}

/* handle legacy '-drive if=scsi,...' cmd line args */
/* FIXME callers should check for failure, but don't */
SCSIDevice *scsi_bus_legacy_add_drive(SCSIBus *bus, DriveInfo *dinfo, int unit)
{
    const char *driver;
    DeviceState *dev;

    driver = bdrv_is_sg(dinfo->bdrv) ? "scsi-generic" : "scsi-disk";
    dev = qdev_create(&bus->qbus, driver);
    qdev_prop_set_uint32(dev, "scsi-id", unit);
    qdev_prop_set_drive(dev, "drive", dinfo);
    if (qdev_init(dev) < 0)
        return NULL;
    return DO_UPCAST(SCSIDevice, qdev, dev);
}

void scsi_bus_legacy_handle_cmdline(SCSIBus *bus)
{
    DriveInfo *dinfo;
    int unit;

    for (unit = 0; unit < MAX_SCSI_DEVS; unit++) {
        dinfo = drive_get(IF_SCSI, bus->busnr, unit);
        if (dinfo == NULL) {
            continue;
        }
        scsi_bus_legacy_add_drive(bus, dinfo, unit);
    }
}

void scsi_dev_clear_sense(SCSIDevice *dev)
{
    memset(&dev->sense, 0, sizeof(dev->sense));
}

void scsi_dev_set_sense(SCSIDevice *dev, uint8_t key)
{
    dev->sense.key = key;
}

SCSIRequest *scsi_req_alloc(size_t size, SCSIDevice *d, uint32_t tag, uint32_t lun)
{
    SCSIRequest *req;

    req = qemu_mallocz(size);
    req->bus = scsi_bus_from_device(d);
    req->dev = d;
    req->tag = tag;
    req->lun = lun;
    req->status = -1;
    QTAILQ_INSERT_TAIL(&d->requests, req, next);
    return req;
}

SCSIRequest *scsi_req_find(SCSIDevice *d, uint32_t tag)
{
    SCSIRequest *req;

    QTAILQ_FOREACH(req, &d->requests, next) {
        if (req->tag == tag) {
            return req;
        }
    }
    return NULL;
}

void scsi_req_free(SCSIRequest *req)
{
    QTAILQ_REMOVE(&req->dev->requests, req, next);
    qemu_free(req);
}

static int scsi_req_length(SCSIRequest *req, uint8_t *cmd)
{
    switch (cmd[0] >> 5) {
    case 0:
        req->cmd.xfer = cmd[4];
        req->cmd.len = 6;
        /* length 0 means 256 blocks */
        if (req->cmd.xfer == 0)
            req->cmd.xfer = 256;
        break;
    case 1:
    case 2:
        req->cmd.xfer = cmd[8] | (cmd[7] << 8);
        req->cmd.len = 10;
        break;
    case 4:
        req->cmd.xfer = cmd[13] | (cmd[12] << 8) | (cmd[11] << 16) | (cmd[10] << 24);
        req->cmd.len = 16;
        break;
    case 5:
        req->cmd.xfer = cmd[9] | (cmd[8] << 8) | (cmd[7] << 16) | (cmd[6] << 24);
        req->cmd.len = 12;
        break;
    default:
        return -1;
    }

    switch(cmd[0]) {
    case TEST_UNIT_READY:
    case REZERO_UNIT:
    case START_STOP:
    case SEEK_6:
    case WRITE_FILEMARKS:
    case SPACE:
    case ERASE:
    case ALLOW_MEDIUM_REMOVAL:
    case VERIFY:
    case SEEK_10:
    case SYNCHRONIZE_CACHE:
    case LOCK_UNLOCK_CACHE:
    case LOAD_UNLOAD:
    case SET_CD_SPEED:
    case SET_LIMITS:
    case WRITE_LONG:
    case MOVE_MEDIUM:
    case UPDATE_BLOCK:
        req->cmd.xfer = 0;
        break;
    case MODE_SENSE:
        break;
    case WRITE_SAME:
        req->cmd.xfer = 1;
        break;
    case READ_CAPACITY:
        req->cmd.xfer = 8;
        break;
    case READ_BLOCK_LIMITS:
        req->cmd.xfer = 6;
        break;
    case READ_POSITION:
        req->cmd.xfer = 20;
        break;
    case SEND_VOLUME_TAG:
        req->cmd.xfer *= 40;
        break;
    case MEDIUM_SCAN:
        req->cmd.xfer *= 8;
        break;
    case WRITE_10:
    case WRITE_VERIFY:
    case WRITE_6:
    case WRITE_12:
    case WRITE_VERIFY_12:
    case WRITE_16:
    case WRITE_VERIFY_16:
        req->cmd.xfer *= req->dev->blocksize;
        break;
    case READ_10:
    case READ_6:
    case READ_REVERSE:
    case RECOVER_BUFFERED_DATA:
    case READ_12:
    case READ_16:
        req->cmd.xfer *= req->dev->blocksize;
        break;
    case INQUIRY:
        req->cmd.xfer = cmd[4] | (cmd[3] << 8);
        break;
    }
    return 0;
}

static int scsi_req_stream_length(SCSIRequest *req, uint8_t *cmd)
{
    switch(cmd[0]) {
    /* stream commands */
    case READ_6:
    case READ_REVERSE:
    case RECOVER_BUFFERED_DATA:
    case WRITE_6:
        req->cmd.len = 6;
        req->cmd.xfer = cmd[4] | (cmd[3] << 8) | (cmd[2] << 16);
        if (cmd[1] & 0x01) /* fixed */
            req->cmd.xfer *= req->dev->blocksize;
        break;
    case REWIND:
    case START_STOP:
        req->cmd.len = 6;
        req->cmd.xfer = 0;
        break;
    /* generic commands */
    default:
        return scsi_req_length(req, cmd);
    }
    return 0;
}

static void scsi_req_xfer_mode(SCSIRequest *req)
{
    switch (req->cmd.buf[0]) {
    case WRITE_6:
    case WRITE_10:
    case WRITE_VERIFY:
    case WRITE_12:
    case WRITE_VERIFY_12:
    case WRITE_16:
    case WRITE_VERIFY_16:
    case COPY:
    case COPY_VERIFY:
    case COMPARE:
    case CHANGE_DEFINITION:
    case LOG_SELECT:
    case MODE_SELECT:
    case MODE_SELECT_10:
    case SEND_DIAGNOSTIC:
    case WRITE_BUFFER:
    case FORMAT_UNIT:
    case REASSIGN_BLOCKS:
    case RESERVE:
    case SEARCH_EQUAL:
    case SEARCH_HIGH:
    case SEARCH_LOW:
    case UPDATE_BLOCK:
    case WRITE_LONG:
    case WRITE_SAME:
    case SEARCH_HIGH_12:
    case SEARCH_EQUAL_12:
    case SEARCH_LOW_12:
    case SET_WINDOW:
    case MEDIUM_SCAN:
    case SEND_VOLUME_TAG:
    case WRITE_LONG_2:
    case PERSISTENT_RESERVE_OUT:
        req->cmd.mode = SCSI_XFER_TO_DEV;
        break;
    default:
        if (req->cmd.xfer)
            req->cmd.mode = SCSI_XFER_FROM_DEV;
        else {
            req->cmd.mode = SCSI_XFER_NONE;
        }
        break;
    }
}

static uint64_t scsi_req_lba(SCSIRequest *req)
{
    uint8_t *buf = req->cmd.buf;
    uint64_t lba;

    switch (buf[0] >> 5) {
    case 0:
        lba = (uint64_t) buf[3] | ((uint64_t) buf[2] << 8) |
              (((uint64_t) buf[1] & 0x1f) << 16);
        break;
    case 1:
    case 2:
        lba = (uint64_t) buf[5] | ((uint64_t) buf[4] << 8) |
              ((uint64_t) buf[3] << 16) | ((uint64_t) buf[2] << 24);
        break;
    case 4:
        lba = (uint64_t) buf[9] | ((uint64_t) buf[8] << 8) |
              ((uint64_t) buf[7] << 16) | ((uint64_t) buf[6] << 24) |
              ((uint64_t) buf[5] << 32) | ((uint64_t) buf[4] << 40) |
              ((uint64_t) buf[3] << 48) | ((uint64_t) buf[2] << 56);
        break;
    case 5:
        lba = (uint64_t) buf[5] | ((uint64_t) buf[4] << 8) |
              ((uint64_t) buf[3] << 16) | ((uint64_t) buf[2] << 24);
        break;
    default:
        lba = -1;

    }
    return lba;
}

int scsi_req_parse(SCSIRequest *req, uint8_t *buf)
{
    int rc;

    if (req->dev->type == TYPE_TAPE) {
        rc = scsi_req_stream_length(req, buf);
    } else {
        rc = scsi_req_length(req, buf);
    }
    if (rc != 0)
        return rc;

    memcpy(req->cmd.buf, buf, req->cmd.len);
    scsi_req_xfer_mode(req);
    req->cmd.lba = scsi_req_lba(req);
    return 0;
}

static const char *scsi_command_name(uint8_t cmd)
{
    static const char *names[] = {
        [ TEST_UNIT_READY          ] = "TEST_UNIT_READY",
        [ REZERO_UNIT              ] = "REZERO_UNIT",
        /* REWIND and REZERO_UNIT use the same operation code */
        [ REQUEST_SENSE            ] = "REQUEST_SENSE",
        [ FORMAT_UNIT              ] = "FORMAT_UNIT",
        [ READ_BLOCK_LIMITS        ] = "READ_BLOCK_LIMITS",
        [ REASSIGN_BLOCKS          ] = "REASSIGN_BLOCKS",
        [ READ_6                   ] = "READ_6",
        [ WRITE_6                  ] = "WRITE_6",
        [ SEEK_6                   ] = "SEEK_6",
        [ READ_REVERSE             ] = "READ_REVERSE",
        [ WRITE_FILEMARKS          ] = "WRITE_FILEMARKS",
        [ SPACE                    ] = "SPACE",
        [ INQUIRY                  ] = "INQUIRY",
        [ RECOVER_BUFFERED_DATA    ] = "RECOVER_BUFFERED_DATA",
        [ MODE_SELECT              ] = "MODE_SELECT",
        [ RESERVE                  ] = "RESERVE",
        [ RELEASE                  ] = "RELEASE",
        [ COPY                     ] = "COPY",
        [ ERASE                    ] = "ERASE",
        [ MODE_SENSE               ] = "MODE_SENSE",
        [ START_STOP               ] = "START_STOP",
        [ RECEIVE_DIAGNOSTIC       ] = "RECEIVE_DIAGNOSTIC",
        [ SEND_DIAGNOSTIC          ] = "SEND_DIAGNOSTIC",
        [ ALLOW_MEDIUM_REMOVAL     ] = "ALLOW_MEDIUM_REMOVAL",

        [ SET_WINDOW               ] = "SET_WINDOW",
        [ READ_CAPACITY            ] = "READ_CAPACITY",
        [ READ_10                  ] = "READ_10",
        [ WRITE_10                 ] = "WRITE_10",
        [ SEEK_10                  ] = "SEEK_10",
        [ WRITE_VERIFY             ] = "WRITE_VERIFY",
        [ VERIFY                   ] = "VERIFY",
        [ SEARCH_HIGH              ] = "SEARCH_HIGH",
        [ SEARCH_EQUAL             ] = "SEARCH_EQUAL",
        [ SEARCH_LOW               ] = "SEARCH_LOW",
        [ SET_LIMITS               ] = "SET_LIMITS",
        [ PRE_FETCH                ] = "PRE_FETCH",
        /* READ_POSITION and PRE_FETCH use the same operation code */
        [ SYNCHRONIZE_CACHE        ] = "SYNCHRONIZE_CACHE",
        [ LOCK_UNLOCK_CACHE        ] = "LOCK_UNLOCK_CACHE",
        [ READ_DEFECT_DATA         ] = "READ_DEFECT_DATA",
        [ MEDIUM_SCAN              ] = "MEDIUM_SCAN",
        [ COMPARE                  ] = "COMPARE",
        [ COPY_VERIFY              ] = "COPY_VERIFY",
        [ WRITE_BUFFER             ] = "WRITE_BUFFER",
        [ READ_BUFFER              ] = "READ_BUFFER",
        [ UPDATE_BLOCK             ] = "UPDATE_BLOCK",
        [ READ_LONG                ] = "READ_LONG",
        [ WRITE_LONG               ] = "WRITE_LONG",
        [ CHANGE_DEFINITION        ] = "CHANGE_DEFINITION",
        [ WRITE_SAME               ] = "WRITE_SAME",
        [ READ_TOC                 ] = "READ_TOC",
        [ LOG_SELECT               ] = "LOG_SELECT",
        [ LOG_SENSE                ] = "LOG_SENSE",
        [ MODE_SELECT_10           ] = "MODE_SELECT_10",
        [ RESERVE_10               ] = "RESERVE_10",
        [ RELEASE_10               ] = "RELEASE_10",
        [ MODE_SENSE_10            ] = "MODE_SENSE_10",
        [ PERSISTENT_RESERVE_IN    ] = "PERSISTENT_RESERVE_IN",
        [ PERSISTENT_RESERVE_OUT   ] = "PERSISTENT_RESERVE_OUT",
        [ MOVE_MEDIUM              ] = "MOVE_MEDIUM",
        [ READ_12                  ] = "READ_12",
        [ WRITE_12                 ] = "WRITE_12",
        [ WRITE_VERIFY_12          ] = "WRITE_VERIFY_12",
        [ SEARCH_HIGH_12           ] = "SEARCH_HIGH_12",
        [ SEARCH_EQUAL_12          ] = "SEARCH_EQUAL_12",
        [ SEARCH_LOW_12            ] = "SEARCH_LOW_12",
        [ READ_ELEMENT_STATUS      ] = "READ_ELEMENT_STATUS",
        [ SEND_VOLUME_TAG          ] = "SEND_VOLUME_TAG",
        [ WRITE_LONG_2             ] = "WRITE_LONG_2",

        [ REPORT_DENSITY_SUPPORT   ] = "REPORT_DENSITY_SUPPORT",
        [ GET_CONFIGURATION        ] = "GET_CONFIGURATION",
        [ READ_16                  ] = "READ_16",
        [ WRITE_16                 ] = "WRITE_16",
        [ WRITE_VERIFY_16          ] = "WRITE_VERIFY_16",
        [ SERVICE_ACTION_IN        ] = "SERVICE_ACTION_IN",
        [ REPORT_LUNS              ] = "REPORT_LUNS",
        [ LOAD_UNLOAD              ] = "LOAD_UNLOAD",
        [ SET_CD_SPEED             ] = "SET_CD_SPEED",
        [ BLANK                    ] = "BLANK",
    };

    if (cmd >= ARRAY_SIZE(names) || names[cmd] == NULL)
        return "*UNKNOWN*";
    return names[cmd];
}

void scsi_req_print(SCSIRequest *req)
{
    FILE *fp = stderr;
    int i;

    fprintf(fp, "[%s id=%d] %s",
            req->dev->qdev.parent_bus->name,
            req->dev->id,
            scsi_command_name(req->cmd.buf[0]));
    for (i = 1; i < req->cmd.len; i++) {
        fprintf(fp, " 0x%02x", req->cmd.buf[i]);
    }
    switch (req->cmd.mode) {
    case SCSI_XFER_NONE:
        fprintf(fp, " - none\n");
        break;
    case SCSI_XFER_FROM_DEV:
        fprintf(fp, " - from-dev len=%zd\n", req->cmd.xfer);
        break;
    case SCSI_XFER_TO_DEV:
        fprintf(fp, " - to-dev len=%zd\n", req->cmd.xfer);
        break;
    default:
        fprintf(fp, " - Oops\n");
        break;
    }
}

void scsi_req_complete(SCSIRequest *req)
{
    assert(req->status != -1);
    req->bus->complete(req->bus, SCSI_REASON_DONE,
                       req->tag,
                       req->status);
}
Commit	Line	Data
d52affa7	1	#include "hw.h"
2f792016	2	#include "qemu-error.h"
43b443b6	3	#include "scsi.h"
2ec749cb	4	#include "scsi-defs.h"
d52affa7 GH	5	#include "qdev.h"
	6
	7	static struct BusInfo scsi_bus_info = {
	8	.name = "SCSI",
	9	.size = sizeof(SCSIBus),
	10	.props = (Property[]) {
	11	DEFINE_PROP_UINT32("scsi-id", SCSIDevice, id, -1),
	12	DEFINE_PROP_END_OF_LIST(),
	13	},
	14	};
	15	static int next_scsi_bus;
	16
	17	/* Create a scsi bus, and attach devices to it. */
ca9c39fa GH	18	void scsi_bus_new(SCSIBus bus, DeviceState host, int tcq, int ndev,
ca9c39fa GH	19	scsi_completionfn complete)
d52affa7	20	{
ca9c39fa	21	qbus_create_inplace(&bus->qbus, &scsi_bus_info, host, NULL);
d52affa7 GH	22	bus->busnr = next_scsi_bus++;
	23	bus->tcq = tcq;
	24	bus->ndev = ndev;
	25	bus->complete = complete;
cb23117b	26	bus->qbus.allow_hotplug = 1;
d52affa7 GH	27	}
	28
	29	static int scsi_qdev_init(DeviceState qdev, DeviceInfo base)
	30	{
	31	SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
	32	SCSIDeviceInfo *info = DO_UPCAST(SCSIDeviceInfo, qdev, base);
	33	SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
01985dcf	34	int rc = -1;
d52affa7 GH	35
	36	if (dev->id == -1) {
	37	for (dev->id = 0; dev->id < bus->ndev; dev->id++) {
	38	if (bus->devs[dev->id] == NULL)
	39	break;
	40	}
	41	}
	42	if (dev->id >= bus->ndev) {
1ecda02b	43	error_report("bad scsi device id: %d", dev->id);
d52affa7 GH	44	goto err;
	45	}
	46
	47	if (bus->devs[dev->id]) {
01985dcf	48	qdev_free(&bus->devs[dev->id]->qdev);
d52affa7 GH	49	}
	50	bus->devs[dev->id] = dev;
	51
	52	dev->info = info;
9af99d98	53	QTAILQ_INIT(&dev->requests);
01985dcf GH	54	rc = dev->info->init(dev);
	55	if (rc != 0) {
	56	bus->devs[dev->id] = NULL;
	57	}
d52affa7 GH	58
d52affa7 GH	59	err:
01985dcf GH	60	return rc;
	61	}
	62
	63	static int scsi_qdev_exit(DeviceState *qdev)
	64	{
	65	SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
	66	SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
	67
	68	assert(bus->devs[dev->id] != NULL);
	69	if (bus->devs[dev->id]->info->destroy) {
	70	bus->devs[dev->id]->info->destroy(bus->devs[dev->id]);
	71	}
	72	bus->devs[dev->id] = NULL;
	73	return 0;
d52affa7 GH	74	}
	75
	76	void scsi_qdev_register(SCSIDeviceInfo *info)
	77	{
	78	info->qdev.bus_info = &scsi_bus_info;
	79	info->qdev.init = scsi_qdev_init;
cb23117b	80	info->qdev.unplug = qdev_simple_unplug_cb;
01985dcf	81	info->qdev.exit = scsi_qdev_exit;
d52affa7 GH	82	qdev_register(&info->qdev);
	83	}
	84
	85	/* handle legacy '-drive if=scsi,...' cmd line args */
33e66b86	86	/* FIXME callers should check for failure, but don't */
d52affa7 GH	87	SCSIDevice scsi_bus_legacy_add_drive(SCSIBus bus, DriveInfo *dinfo, int unit)
	88	{
	89	const char *driver;
	90	DeviceState *dev;
	91
	92	driver = bdrv_is_sg(dinfo->bdrv) ? "scsi-generic" : "scsi-disk";
	93	dev = qdev_create(&bus->qbus, driver);
	94	qdev_prop_set_uint32(dev, "scsi-id", unit);
	95	qdev_prop_set_drive(dev, "drive", dinfo);
33e66b86 MA	96	if (qdev_init(dev) < 0)
33e66b86 MA	97	return NULL;
d52affa7 GH	98	return DO_UPCAST(SCSIDevice, qdev, dev);
	99	}
	100
	101	void scsi_bus_legacy_handle_cmdline(SCSIBus *bus)
	102	{
	103	DriveInfo *dinfo;
	104	int unit;
	105
	106	for (unit = 0; unit < MAX_SCSI_DEVS; unit++) {
	107	dinfo = drive_get(IF_SCSI, bus->busnr, unit);
	108	if (dinfo == NULL) {
	109	continue;
	110	}
	111	scsi_bus_legacy_add_drive(bus, dinfo, unit);
	112	}
	113	}
89b08ae1	114
37659e51 GH	115	void scsi_dev_clear_sense(SCSIDevice *dev)
	116	{
	117	memset(&dev->sense, 0, sizeof(dev->sense));
	118	}
	119
	120	void scsi_dev_set_sense(SCSIDevice *dev, uint8_t key)
	121	{
	122	dev->sense.key = key;
	123	}
	124
89b08ae1 GH	125	SCSIRequest scsi_req_alloc(size_t size, SCSIDevice d, uint32_t tag, uint32_t lun)
	126	{
	127	SCSIRequest *req;
	128
	129	req = qemu_mallocz(size);
	130	req->bus = scsi_bus_from_device(d);
	131	req->dev = d;
	132	req->tag = tag;
	133	req->lun = lun;
ed3a34a3	134	req->status = -1;
89b08ae1 GH	135	QTAILQ_INSERT_TAIL(&d->requests, req, next);
	136	return req;
	137	}
	138
	139	SCSIRequest scsi_req_find(SCSIDevice d, uint32_t tag)
	140	{
	141	SCSIRequest *req;
	142
	143	QTAILQ_FOREACH(req, &d->requests, next) {
	144	if (req->tag == tag) {
	145	return req;
	146	}
	147	}
	148	return NULL;
	149	}
	150
	151	void scsi_req_free(SCSIRequest *req)
	152	{
	153	QTAILQ_REMOVE(&req->dev->requests, req, next);
	154	qemu_free(req);
	155	}
2ec749cb GH	156
	157	static int scsi_req_length(SCSIRequest req, uint8_t cmd)
	158	{
	159	switch (cmd[0] >> 5) {
	160	case 0:
	161	req->cmd.xfer = cmd[4];
	162	req->cmd.len = 6;
	163	/* length 0 means 256 blocks */
	164	if (req->cmd.xfer == 0)
	165	req->cmd.xfer = 256;
	166	break;
	167	case 1:
	168	case 2:
	169	req->cmd.xfer = cmd[8] \| (cmd[7] << 8);
	170	req->cmd.len = 10;
	171	break;
	172	case 4:
	173	req->cmd.xfer = cmd[13] \| (cmd[12] << 8) \| (cmd[11] << 16) \| (cmd[10] << 24);
	174	req->cmd.len = 16;
	175	break;
	176	case 5:
	177	req->cmd.xfer = cmd[9] \| (cmd[8] << 8) \| (cmd[7] << 16) \| (cmd[6] << 24);
	178	req->cmd.len = 12;
	179	break;
	180	default:
	181	return -1;
	182	}
	183
	184	switch(cmd[0]) {
	185	case TEST_UNIT_READY:
	186	case REZERO_UNIT:
	187	case START_STOP:
	188	case SEEK_6:
	189	case WRITE_FILEMARKS:
	190	case SPACE:
	191	case ERASE:
	192	case ALLOW_MEDIUM_REMOVAL:
	193	case VERIFY:
	194	case SEEK_10:
	195	case SYNCHRONIZE_CACHE:
	196	case LOCK_UNLOCK_CACHE:
	197	case LOAD_UNLOAD:
	198	case SET_CD_SPEED:
	199	case SET_LIMITS:
	200	case WRITE_LONG:
	201	case MOVE_MEDIUM:
	202	case UPDATE_BLOCK:
	203	req->cmd.xfer = 0;
	204	break;
	205	case MODE_SENSE:
	206	break;
	207	case WRITE_SAME:
	208	req->cmd.xfer = 1;
	209	break;
	210	case READ_CAPACITY:
	211	req->cmd.xfer = 8;
	212	break;
	213	case READ_BLOCK_LIMITS:
	214	req->cmd.xfer = 6;
	215	break;
	216	case READ_POSITION:
	217	req->cmd.xfer = 20;
	218	break;
	219	case SEND_VOLUME_TAG:
220	req->cmd.xfer *= 40;
221	break;
222	case MEDIUM_SCAN:
223	req->cmd.xfer *= 8;
224	break;
225	case WRITE_10:
226	case WRITE_VERIFY:
227	case WRITE_6:
228	case WRITE_12:
229	case WRITE_VERIFY_12:
bd536cf3 GH	230	case WRITE_16:
bd536cf3 GH	231	case WRITE_VERIFY_16:
2ec749cb GH	232	req->cmd.xfer *= req->dev->blocksize;
	233	break;
	234	case READ_10:
	235	case READ_6:
	236	case READ_REVERSE:
	237	case RECOVER_BUFFERED_DATA:
	238	case READ_12:
bd536cf3	239	case READ_16:
2ec749cb GH	240	req->cmd.xfer *= req->dev->blocksize;
	241	break;
	242	case INQUIRY:
	243	req->cmd.xfer = cmd[4] \| (cmd[3] << 8);
	244	break;
	245	}
	246	return 0;
	247	}
	248
	249	static int scsi_req_stream_length(SCSIRequest req, uint8_t cmd)
	250	{
	251	switch(cmd[0]) {
	252	/* stream commands */
	253	case READ_6:
	254	case READ_REVERSE:
	255	case RECOVER_BUFFERED_DATA:
	256	case WRITE_6:
	257	req->cmd.len = 6;
	258	req->cmd.xfer = cmd[4] \| (cmd[3] << 8) \| (cmd[2] << 16);
	259	if (cmd[1] & 0x01) /* fixed */
	260	req->cmd.xfer *= req->dev->blocksize;
	261	break;
	262	case REWIND:
	263	case START_STOP:
	264	req->cmd.len = 6;
	265	req->cmd.xfer = 0;
	266	break;
	267	/* generic commands */
	268	default:
	269	return scsi_req_length(req, cmd);
	270	}
	271	return 0;
	272	}
	273
97a06435 GH	274	static void scsi_req_xfer_mode(SCSIRequest *req)
	275	{
	276	switch (req->cmd.buf[0]) {
	277	case WRITE_6:
	278	case WRITE_10:
	279	case WRITE_VERIFY:
	280	case WRITE_12:
	281	case WRITE_VERIFY_12:
bd536cf3 GH	282	case WRITE_16:
bd536cf3 GH	283	case WRITE_VERIFY_16:
97a06435 GH	284	case COPY:
	285	case COPY_VERIFY:
	286	case COMPARE:
	287	case CHANGE_DEFINITION:
	288	case LOG_SELECT:
	289	case MODE_SELECT:
	290	case MODE_SELECT_10:
	291	case SEND_DIAGNOSTIC:
	292	case WRITE_BUFFER:
	293	case FORMAT_UNIT:
	294	case REASSIGN_BLOCKS:
	295	case RESERVE:
	296	case SEARCH_EQUAL:
	297	case SEARCH_HIGH:
	298	case SEARCH_LOW:
	299	case UPDATE_BLOCK:
	300	case WRITE_LONG:
	301	case WRITE_SAME:
	302	case SEARCH_HIGH_12:
	303	case SEARCH_EQUAL_12:
	304	case SEARCH_LOW_12:
	305	case SET_WINDOW:
	306	case MEDIUM_SCAN:
	307	case SEND_VOLUME_TAG:
	308	case WRITE_LONG_2:
01bedeba	309	case PERSISTENT_RESERVE_OUT:
97a06435 GH	310	req->cmd.mode = SCSI_XFER_TO_DEV;
	311	break;
	312	default:
	313	if (req->cmd.xfer)
	314	req->cmd.mode = SCSI_XFER_FROM_DEV;
	315	else {
	316	req->cmd.mode = SCSI_XFER_NONE;
	317	}
	318	break;
	319	}
	320	}
	321
2ec749cb GH	322	static uint64_t scsi_req_lba(SCSIRequest *req)
	323	{
	324	uint8_t *buf = req->cmd.buf;
	325	uint64_t lba;
	326
	327	switch (buf[0] >> 5) {
	328	case 0:
	329	lba = (uint64_t) buf[3] \| ((uint64_t) buf[2] << 8) \|
	330	(((uint64_t) buf[1] & 0x1f) << 16);
	331	break;
	332	case 1:
	333	case 2:
	334	lba = (uint64_t) buf[5] \| ((uint64_t) buf[4] << 8) \|
	335	((uint64_t) buf[3] << 16) \| ((uint64_t) buf[2] << 24);
	336	break;
	337	case 4:
	338	lba = (uint64_t) buf[9] \| ((uint64_t) buf[8] << 8) \|
	339	((uint64_t) buf[7] << 16) \| ((uint64_t) buf[6] << 24) \|
	340	((uint64_t) buf[5] << 32) \| ((uint64_t) buf[4] << 40) \|
	341	((uint64_t) buf[3] << 48) \| ((uint64_t) buf[2] << 56);
	342	break;
	343	case 5:
	344	lba = (uint64_t) buf[5] \| ((uint64_t) buf[4] << 8) \|
	345	((uint64_t) buf[3] << 16) \| ((uint64_t) buf[2] << 24);
	346	break;
	347	default:
	348	lba = -1;
	349
	350	}
	351	return lba;
	352	}
	353
	354	int scsi_req_parse(SCSIRequest req, uint8_t buf)
	355	{
	356	int rc;
	357
	358	if (req->dev->type == TYPE_TAPE) {
	359	rc = scsi_req_stream_length(req, buf);
	360	} else {
	361	rc = scsi_req_length(req, buf);
	362	}
	363	if (rc != 0)
	364	return rc;
	365
	366	memcpy(req->cmd.buf, buf, req->cmd.len);
97a06435	367	scsi_req_xfer_mode(req);
2ec749cb GH	368	req->cmd.lba = scsi_req_lba(req);
	369	return 0;
	370	}
ed3a34a3	371
ec766865 GH	372	static const char *scsi_command_name(uint8_t cmd)
	373	{
	374	static const char *names[] = {
	375	[ TEST_UNIT_READY ] = "TEST_UNIT_READY",
	376	[ REZERO_UNIT ] = "REZERO_UNIT",
545557d4	377	/* REWIND and REZERO_UNIT use the same operation code */
ec766865 GH	378	[ REQUEST_SENSE ] = "REQUEST_SENSE",
	379	[ FORMAT_UNIT ] = "FORMAT_UNIT",
	380	[ READ_BLOCK_LIMITS ] = "READ_BLOCK_LIMITS",
	381	[ REASSIGN_BLOCKS ] = "REASSIGN_BLOCKS",
	382	[ READ_6 ] = "READ_6",
	383	[ WRITE_6 ] = "WRITE_6",
	384	[ SEEK_6 ] = "SEEK_6",
	385	[ READ_REVERSE ] = "READ_REVERSE",
	386	[ WRITE_FILEMARKS ] = "WRITE_FILEMARKS",
	387	[ SPACE ] = "SPACE",
	388	[ INQUIRY ] = "INQUIRY",
	389	[ RECOVER_BUFFERED_DATA ] = "RECOVER_BUFFERED_DATA",
	390	[ MODE_SELECT ] = "MODE_SELECT",
	391	[ RESERVE ] = "RESERVE",
	392	[ RELEASE ] = "RELEASE",
	393	[ COPY ] = "COPY",
	394	[ ERASE ] = "ERASE",
	395	[ MODE_SENSE ] = "MODE_SENSE",
	396	[ START_STOP ] = "START_STOP",
	397	[ RECEIVE_DIAGNOSTIC ] = "RECEIVE_DIAGNOSTIC",
	398	[ SEND_DIAGNOSTIC ] = "SEND_DIAGNOSTIC",
	399	[ ALLOW_MEDIUM_REMOVAL ] = "ALLOW_MEDIUM_REMOVAL",
	400
	401	[ SET_WINDOW ] = "SET_WINDOW",
	402	[ READ_CAPACITY ] = "READ_CAPACITY",
	403	[ READ_10 ] = "READ_10",
	404	[ WRITE_10 ] = "WRITE_10",
	405	[ SEEK_10 ] = "SEEK_10",
	406	[ WRITE_VERIFY ] = "WRITE_VERIFY",
	407	[ VERIFY ] = "VERIFY",
	408	[ SEARCH_HIGH ] = "SEARCH_HIGH",
	409	[ SEARCH_EQUAL ] = "SEARCH_EQUAL",
	410	[ SEARCH_LOW ] = "SEARCH_LOW",
	411	[ SET_LIMITS ] = "SET_LIMITS",
	412	[ PRE_FETCH ] = "PRE_FETCH",
545557d4	413	/* READ_POSITION and PRE_FETCH use the same operation code */
ec766865 GH	414	[ SYNCHRONIZE_CACHE ] = "SYNCHRONIZE_CACHE",
	415	[ LOCK_UNLOCK_CACHE ] = "LOCK_UNLOCK_CACHE",
	416	[ READ_DEFECT_DATA ] = "READ_DEFECT_DATA",
	417	[ MEDIUM_SCAN ] = "MEDIUM_SCAN",
	418	[ COMPARE ] = "COMPARE",
	419	[ COPY_VERIFY ] = "COPY_VERIFY",
	420	[ WRITE_BUFFER ] = "WRITE_BUFFER",
	421	[ READ_BUFFER ] = "READ_BUFFER",
	422	[ UPDATE_BLOCK ] = "UPDATE_BLOCK",
	423	[ READ_LONG ] = "READ_LONG",
	424	[ WRITE_LONG ] = "WRITE_LONG",
	425	[ CHANGE_DEFINITION ] = "CHANGE_DEFINITION",
	426	[ WRITE_SAME ] = "WRITE_SAME",
	427	[ READ_TOC ] = "READ_TOC",
	428	[ LOG_SELECT ] = "LOG_SELECT",
	429	[ LOG_SENSE ] = "LOG_SENSE",
	430	[ MODE_SELECT_10 ] = "MODE_SELECT_10",
	431	[ RESERVE_10 ] = "RESERVE_10",
	432	[ RELEASE_10 ] = "RELEASE_10",
	433	[ MODE_SENSE_10 ] = "MODE_SENSE_10",
	434	[ PERSISTENT_RESERVE_IN ] = "PERSISTENT_RESERVE_IN",
	435	[ PERSISTENT_RESERVE_OUT ] = "PERSISTENT_RESERVE_OUT",
	436	[ MOVE_MEDIUM ] = "MOVE_MEDIUM",
	437	[ READ_12 ] = "READ_12",
	438	[ WRITE_12 ] = "WRITE_12",
	439	[ WRITE_VERIFY_12 ] = "WRITE_VERIFY_12",
	440	[ SEARCH_HIGH_12 ] = "SEARCH_HIGH_12",
	441	[ SEARCH_EQUAL_12 ] = "SEARCH_EQUAL_12",
	442	[ SEARCH_LOW_12 ] = "SEARCH_LOW_12",
	443	[ READ_ELEMENT_STATUS ] = "READ_ELEMENT_STATUS",
	444	[ SEND_VOLUME_TAG ] = "SEND_VOLUME_TAG",
	445	[ WRITE_LONG_2 ] = "WRITE_LONG_2",
	446
ec766865	447	[ REPORT_DENSITY_SUPPORT ] = "REPORT_DENSITY_SUPPORT",
38215553	448	[ GET_CONFIGURATION ] = "GET_CONFIGURATION",
bd536cf3 GH	449	[ READ_16 ] = "READ_16",
	450	[ WRITE_16 ] = "WRITE_16",
	451	[ WRITE_VERIFY_16 ] = "WRITE_VERIFY_16",
5dd90e2a	452	[ SERVICE_ACTION_IN ] = "SERVICE_ACTION_IN",
39ec9a50	453	[ REPORT_LUNS ] = "REPORT_LUNS",
ec766865 GH	454	[ LOAD_UNLOAD ] = "LOAD_UNLOAD",
	455	[ SET_CD_SPEED ] = "SET_CD_SPEED",
	456	[ BLANK ] = "BLANK",
	457	};
	458
	459	if (cmd >= ARRAY_SIZE(names) \|\| names[cmd] == NULL)
	460	return "UNKNOWN";
	461	return names[cmd];
	462	}
	463
	464	void scsi_req_print(SCSIRequest *req)
	465	{
	466	FILE *fp = stderr;
	467	int i;
	468
	469	fprintf(fp, "[%s id=%d] %s",
	470	req->dev->qdev.parent_bus->name,
	471	req->dev->id,
	472	scsi_command_name(req->cmd.buf[0]));
	473	for (i = 1; i < req->cmd.len; i++) {
	474	fprintf(fp, " 0x%02x", req->cmd.buf[i]);
	475	}
	476	switch (req->cmd.mode) {
	477	case SCSI_XFER_NONE:
	478	fprintf(fp, " - none\n");
	479	break;
	480	case SCSI_XFER_FROM_DEV:
	481	fprintf(fp, " - from-dev len=%zd\n", req->cmd.xfer);
	482	break;
	483	case SCSI_XFER_TO_DEV:
	484	fprintf(fp, " - to-dev len=%zd\n", req->cmd.xfer);
	485	break;
	486	default:
	487	fprintf(fp, " - Oops\n");
	488	break;
	489	}
	490	}
	491
ed3a34a3 GH	492	void scsi_req_complete(SCSIRequest *req)
	493	{
	494	assert(req->status != -1);
	495	req->bus->complete(req->bus, SCSI_REASON_DONE,
	496	req->tag,
	497	req->status);
	498	}