1 /*******************************************************************************
2 * This file contains main functions related to the iSCSI Target Core Driver.
4 * (c) Copyright 2007-2013 Datera, Inc.
6 * Author: Nicholas A. Bellinger <nab@linux-iscsi.org>
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 ******************************************************************************/
19 #include <linux/string.h>
20 #include <linux/kthread.h>
21 #include <linux/crypto.h>
22 #include <linux/completion.h>
23 #include <linux/module.h>
24 #include <linux/vmalloc.h>
25 #include <linux/idr.h>
26 #include <asm/unaligned.h>
27 #include <scsi/scsi_proto.h>
28 #include <scsi/iscsi_proto.h>
29 #include <scsi/scsi_tcq.h>
30 #include <target/target_core_base.h>
31 #include <target/target_core_fabric.h>
33 #include <target/iscsi/iscsi_target_core.h>
34 #include "iscsi_target_parameters.h"
35 #include "iscsi_target_seq_pdu_list.h"
36 #include "iscsi_target_datain_values.h"
37 #include "iscsi_target_erl0.h"
38 #include "iscsi_target_erl1.h"
39 #include "iscsi_target_erl2.h"
40 #include "iscsi_target_login.h"
41 #include "iscsi_target_tmr.h"
42 #include "iscsi_target_tpg.h"
43 #include "iscsi_target_util.h"
44 #include "iscsi_target.h"
45 #include "iscsi_target_device.h"
46 #include <target/iscsi/iscsi_target_stat.h>
48 #include <target/iscsi/iscsi_transport.h>
50 static LIST_HEAD(g_tiqn_list
);
51 static LIST_HEAD(g_np_list
);
52 static DEFINE_SPINLOCK(tiqn_lock
);
53 static DEFINE_MUTEX(np_lock
);
55 static struct idr tiqn_idr
;
57 struct mutex auth_id_lock
;
58 spinlock_t sess_idr_lock
;
60 struct iscsit_global
*iscsit_global
;
62 struct kmem_cache
*lio_qr_cache
;
63 struct kmem_cache
*lio_dr_cache
;
64 struct kmem_cache
*lio_ooo_cache
;
65 struct kmem_cache
*lio_r2t_cache
;
67 static int iscsit_handle_immediate_data(struct iscsi_cmd
*,
68 struct iscsi_scsi_req
*, u32
);
70 struct iscsi_tiqn
*iscsit_get_tiqn_for_login(unsigned char *buf
)
72 struct iscsi_tiqn
*tiqn
= NULL
;
74 spin_lock(&tiqn_lock
);
75 list_for_each_entry(tiqn
, &g_tiqn_list
, tiqn_list
) {
76 if (!strcmp(tiqn
->tiqn
, buf
)) {
78 spin_lock(&tiqn
->tiqn_state_lock
);
79 if (tiqn
->tiqn_state
== TIQN_STATE_ACTIVE
) {
80 tiqn
->tiqn_access_count
++;
81 spin_unlock(&tiqn
->tiqn_state_lock
);
82 spin_unlock(&tiqn_lock
);
85 spin_unlock(&tiqn
->tiqn_state_lock
);
88 spin_unlock(&tiqn_lock
);
93 static int iscsit_set_tiqn_shutdown(struct iscsi_tiqn
*tiqn
)
95 spin_lock(&tiqn
->tiqn_state_lock
);
96 if (tiqn
->tiqn_state
== TIQN_STATE_ACTIVE
) {
97 tiqn
->tiqn_state
= TIQN_STATE_SHUTDOWN
;
98 spin_unlock(&tiqn
->tiqn_state_lock
);
101 spin_unlock(&tiqn
->tiqn_state_lock
);
106 void iscsit_put_tiqn_for_login(struct iscsi_tiqn
*tiqn
)
108 spin_lock(&tiqn
->tiqn_state_lock
);
109 tiqn
->tiqn_access_count
--;
110 spin_unlock(&tiqn
->tiqn_state_lock
);
114 * Note that IQN formatting is expected to be done in userspace, and
115 * no explict IQN format checks are done here.
117 struct iscsi_tiqn
*iscsit_add_tiqn(unsigned char *buf
)
119 struct iscsi_tiqn
*tiqn
= NULL
;
122 if (strlen(buf
) >= ISCSI_IQN_LEN
) {
123 pr_err("Target IQN exceeds %d bytes\n",
125 return ERR_PTR(-EINVAL
);
128 tiqn
= kzalloc(sizeof(struct iscsi_tiqn
), GFP_KERNEL
);
130 pr_err("Unable to allocate struct iscsi_tiqn\n");
131 return ERR_PTR(-ENOMEM
);
134 sprintf(tiqn
->tiqn
, "%s", buf
);
135 INIT_LIST_HEAD(&tiqn
->tiqn_list
);
136 INIT_LIST_HEAD(&tiqn
->tiqn_tpg_list
);
137 spin_lock_init(&tiqn
->tiqn_state_lock
);
138 spin_lock_init(&tiqn
->tiqn_tpg_lock
);
139 spin_lock_init(&tiqn
->sess_err_stats
.lock
);
140 spin_lock_init(&tiqn
->login_stats
.lock
);
141 spin_lock_init(&tiqn
->logout_stats
.lock
);
143 tiqn
->tiqn_state
= TIQN_STATE_ACTIVE
;
145 idr_preload(GFP_KERNEL
);
146 spin_lock(&tiqn_lock
);
148 ret
= idr_alloc(&tiqn_idr
, NULL
, 0, 0, GFP_NOWAIT
);
150 pr_err("idr_alloc() failed for tiqn->tiqn_index\n");
151 spin_unlock(&tiqn_lock
);
156 tiqn
->tiqn_index
= ret
;
157 list_add_tail(&tiqn
->tiqn_list
, &g_tiqn_list
);
159 spin_unlock(&tiqn_lock
);
162 pr_debug("CORE[0] - Added iSCSI Target IQN: %s\n", tiqn
->tiqn
);
168 static void iscsit_wait_for_tiqn(struct iscsi_tiqn
*tiqn
)
171 * Wait for accesses to said struct iscsi_tiqn to end.
173 spin_lock(&tiqn
->tiqn_state_lock
);
174 while (tiqn
->tiqn_access_count
!= 0) {
175 spin_unlock(&tiqn
->tiqn_state_lock
);
177 spin_lock(&tiqn
->tiqn_state_lock
);
179 spin_unlock(&tiqn
->tiqn_state_lock
);
182 void iscsit_del_tiqn(struct iscsi_tiqn
*tiqn
)
185 * iscsit_set_tiqn_shutdown sets tiqn->tiqn_state = TIQN_STATE_SHUTDOWN
186 * while holding tiqn->tiqn_state_lock. This means that all subsequent
187 * attempts to access this struct iscsi_tiqn will fail from both transport
188 * fabric and control code paths.
190 if (iscsit_set_tiqn_shutdown(tiqn
) < 0) {
191 pr_err("iscsit_set_tiqn_shutdown() failed\n");
195 iscsit_wait_for_tiqn(tiqn
);
197 spin_lock(&tiqn_lock
);
198 list_del(&tiqn
->tiqn_list
);
199 idr_remove(&tiqn_idr
, tiqn
->tiqn_index
);
200 spin_unlock(&tiqn_lock
);
202 pr_debug("CORE[0] - Deleted iSCSI Target IQN: %s\n",
207 int iscsit_access_np(struct iscsi_np
*np
, struct iscsi_portal_group
*tpg
)
211 * Determine if the network portal is accepting storage traffic.
213 spin_lock_bh(&np
->np_thread_lock
);
214 if (np
->np_thread_state
!= ISCSI_NP_THREAD_ACTIVE
) {
215 spin_unlock_bh(&np
->np_thread_lock
);
218 spin_unlock_bh(&np
->np_thread_lock
);
220 * Determine if the portal group is accepting storage traffic.
222 spin_lock_bh(&tpg
->tpg_state_lock
);
223 if (tpg
->tpg_state
!= TPG_STATE_ACTIVE
) {
224 spin_unlock_bh(&tpg
->tpg_state_lock
);
227 spin_unlock_bh(&tpg
->tpg_state_lock
);
230 * Here we serialize access across the TIQN+TPG Tuple.
232 ret
= down_interruptible(&tpg
->np_login_sem
);
236 spin_lock_bh(&tpg
->tpg_state_lock
);
237 if (tpg
->tpg_state
!= TPG_STATE_ACTIVE
) {
238 spin_unlock_bh(&tpg
->tpg_state_lock
);
239 up(&tpg
->np_login_sem
);
242 spin_unlock_bh(&tpg
->tpg_state_lock
);
247 void iscsit_login_kref_put(struct kref
*kref
)
249 struct iscsi_tpg_np
*tpg_np
= container_of(kref
,
250 struct iscsi_tpg_np
, tpg_np_kref
);
252 complete(&tpg_np
->tpg_np_comp
);
255 int iscsit_deaccess_np(struct iscsi_np
*np
, struct iscsi_portal_group
*tpg
,
256 struct iscsi_tpg_np
*tpg_np
)
258 struct iscsi_tiqn
*tiqn
= tpg
->tpg_tiqn
;
260 up(&tpg
->np_login_sem
);
263 kref_put(&tpg_np
->tpg_np_kref
, iscsit_login_kref_put
);
266 iscsit_put_tiqn_for_login(tiqn
);
271 bool iscsit_check_np_match(
272 struct __kernel_sockaddr_storage
*sockaddr
,
274 int network_transport
)
276 struct sockaddr_in
*sock_in
, *sock_in_e
;
277 struct sockaddr_in6
*sock_in6
, *sock_in6_e
;
278 bool ip_match
= false;
281 if (sockaddr
->ss_family
== AF_INET6
) {
282 sock_in6
= (struct sockaddr_in6
*)sockaddr
;
283 sock_in6_e
= (struct sockaddr_in6
*)&np
->np_sockaddr
;
285 if (!memcmp(&sock_in6
->sin6_addr
.in6_u
,
286 &sock_in6_e
->sin6_addr
.in6_u
,
287 sizeof(struct in6_addr
)))
290 port
= ntohs(sock_in6
->sin6_port
);
292 sock_in
= (struct sockaddr_in
*)sockaddr
;
293 sock_in_e
= (struct sockaddr_in
*)&np
->np_sockaddr
;
295 if (sock_in
->sin_addr
.s_addr
== sock_in_e
->sin_addr
.s_addr
)
298 port
= ntohs(sock_in
->sin_port
);
301 if (ip_match
&& (np
->np_port
== port
) &&
302 (np
->np_network_transport
== network_transport
))
309 * Called with mutex np_lock held
311 static struct iscsi_np
*iscsit_get_np(
312 struct __kernel_sockaddr_storage
*sockaddr
,
313 int network_transport
)
318 list_for_each_entry(np
, &g_np_list
, np_list
) {
319 spin_lock_bh(&np
->np_thread_lock
);
320 if (np
->np_thread_state
!= ISCSI_NP_THREAD_ACTIVE
) {
321 spin_unlock_bh(&np
->np_thread_lock
);
325 match
= iscsit_check_np_match(sockaddr
, np
, network_transport
);
328 * Increment the np_exports reference count now to
329 * prevent iscsit_del_np() below from being called
330 * while iscsi_tpg_add_network_portal() is called.
333 spin_unlock_bh(&np
->np_thread_lock
);
336 spin_unlock_bh(&np
->np_thread_lock
);
342 struct iscsi_np
*iscsit_add_np(
343 struct __kernel_sockaddr_storage
*sockaddr
,
345 int network_transport
)
347 struct sockaddr_in
*sock_in
;
348 struct sockaddr_in6
*sock_in6
;
352 mutex_lock(&np_lock
);
355 * Locate the existing struct iscsi_np if already active..
357 np
= iscsit_get_np(sockaddr
, network_transport
);
359 mutex_unlock(&np_lock
);
363 np
= kzalloc(sizeof(struct iscsi_np
), GFP_KERNEL
);
365 pr_err("Unable to allocate memory for struct iscsi_np\n");
366 mutex_unlock(&np_lock
);
367 return ERR_PTR(-ENOMEM
);
370 np
->np_flags
|= NPF_IP_NETWORK
;
371 if (sockaddr
->ss_family
== AF_INET6
) {
372 sock_in6
= (struct sockaddr_in6
*)sockaddr
;
373 snprintf(np
->np_ip
, IPV6_ADDRESS_SPACE
, "%s", ip_str
);
374 np
->np_port
= ntohs(sock_in6
->sin6_port
);
376 sock_in
= (struct sockaddr_in
*)sockaddr
;
377 sprintf(np
->np_ip
, "%s", ip_str
);
378 np
->np_port
= ntohs(sock_in
->sin_port
);
381 np
->np_network_transport
= network_transport
;
382 spin_lock_init(&np
->np_thread_lock
);
383 init_completion(&np
->np_restart_comp
);
384 INIT_LIST_HEAD(&np
->np_list
);
386 ret
= iscsi_target_setup_login_socket(np
, sockaddr
);
389 mutex_unlock(&np_lock
);
393 np
->np_thread
= kthread_run(iscsi_target_login_thread
, np
, "iscsi_np");
394 if (IS_ERR(np
->np_thread
)) {
395 pr_err("Unable to create kthread: iscsi_np\n");
396 ret
= PTR_ERR(np
->np_thread
);
398 mutex_unlock(&np_lock
);
402 * Increment the np_exports reference count now to prevent
403 * iscsit_del_np() below from being run while a new call to
404 * iscsi_tpg_add_network_portal() for a matching iscsi_np is
405 * active. We don't need to hold np->np_thread_lock at this
406 * point because iscsi_np has not been added to g_np_list yet.
409 np
->np_thread_state
= ISCSI_NP_THREAD_ACTIVE
;
411 list_add_tail(&np
->np_list
, &g_np_list
);
412 mutex_unlock(&np_lock
);
414 pr_debug("CORE[0] - Added Network Portal: %s:%hu on %s\n",
415 np
->np_ip
, np
->np_port
, np
->np_transport
->name
);
420 int iscsit_reset_np_thread(
422 struct iscsi_tpg_np
*tpg_np
,
423 struct iscsi_portal_group
*tpg
,
426 spin_lock_bh(&np
->np_thread_lock
);
427 if (np
->np_thread_state
== ISCSI_NP_THREAD_INACTIVE
) {
428 spin_unlock_bh(&np
->np_thread_lock
);
431 np
->np_thread_state
= ISCSI_NP_THREAD_RESET
;
434 spin_unlock_bh(&np
->np_thread_lock
);
435 send_sig(SIGINT
, np
->np_thread
, 1);
436 wait_for_completion(&np
->np_restart_comp
);
437 spin_lock_bh(&np
->np_thread_lock
);
439 spin_unlock_bh(&np
->np_thread_lock
);
441 if (tpg_np
&& shutdown
) {
442 kref_put(&tpg_np
->tpg_np_kref
, iscsit_login_kref_put
);
444 wait_for_completion(&tpg_np
->tpg_np_comp
);
450 static void iscsit_free_np(struct iscsi_np
*np
)
453 sock_release(np
->np_socket
);
456 int iscsit_del_np(struct iscsi_np
*np
)
458 spin_lock_bh(&np
->np_thread_lock
);
460 if (np
->np_exports
) {
462 spin_unlock_bh(&np
->np_thread_lock
);
465 np
->np_thread_state
= ISCSI_NP_THREAD_SHUTDOWN
;
466 spin_unlock_bh(&np
->np_thread_lock
);
470 * We need to send the signal to wakeup Linux/Net
471 * which may be sleeping in sock_accept()..
473 send_sig(SIGINT
, np
->np_thread
, 1);
474 kthread_stop(np
->np_thread
);
475 np
->np_thread
= NULL
;
478 np
->np_transport
->iscsit_free_np(np
);
480 mutex_lock(&np_lock
);
481 list_del(&np
->np_list
);
482 mutex_unlock(&np_lock
);
484 pr_debug("CORE[0] - Removed Network Portal: %s:%hu on %s\n",
485 np
->np_ip
, np
->np_port
, np
->np_transport
->name
);
487 iscsit_put_transport(np
->np_transport
);
492 static int iscsit_immediate_queue(struct iscsi_conn
*, struct iscsi_cmd
*, int);
493 static int iscsit_response_queue(struct iscsi_conn
*, struct iscsi_cmd
*, int);
495 static int iscsit_queue_rsp(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
)
497 iscsit_add_cmd_to_response_queue(cmd
, cmd
->conn
, cmd
->i_state
);
501 static void iscsit_aborted_task(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
)
503 bool scsi_cmd
= (cmd
->iscsi_opcode
== ISCSI_OP_SCSI_CMD
);
505 spin_lock_bh(&conn
->cmd_lock
);
506 if (!list_empty(&cmd
->i_conn_node
))
507 list_del_init(&cmd
->i_conn_node
);
508 spin_unlock_bh(&conn
->cmd_lock
);
510 __iscsit_free_cmd(cmd
, scsi_cmd
, true);
513 static enum target_prot_op
iscsit_get_sup_prot_ops(struct iscsi_conn
*conn
)
515 return TARGET_PROT_NORMAL
;
518 static struct iscsit_transport iscsi_target_transport
= {
520 .transport_type
= ISCSI_TCP
,
522 .iscsit_setup_np
= iscsit_setup_np
,
523 .iscsit_accept_np
= iscsit_accept_np
,
524 .iscsit_free_np
= iscsit_free_np
,
525 .iscsit_get_login_rx
= iscsit_get_login_rx
,
526 .iscsit_put_login_tx
= iscsit_put_login_tx
,
527 .iscsit_get_dataout
= iscsit_build_r2ts_for_cmd
,
528 .iscsit_immediate_queue
= iscsit_immediate_queue
,
529 .iscsit_response_queue
= iscsit_response_queue
,
530 .iscsit_queue_data_in
= iscsit_queue_rsp
,
531 .iscsit_queue_status
= iscsit_queue_rsp
,
532 .iscsit_aborted_task
= iscsit_aborted_task
,
533 .iscsit_get_sup_prot_ops
= iscsit_get_sup_prot_ops
,
536 static int __init
iscsi_target_init_module(void)
540 pr_debug("iSCSI-Target "ISCSIT_VERSION
"\n");
542 iscsit_global
= kzalloc(sizeof(struct iscsit_global
), GFP_KERNEL
);
543 if (!iscsit_global
) {
544 pr_err("Unable to allocate memory for iscsit_global\n");
547 spin_lock_init(&iscsit_global
->ts_bitmap_lock
);
548 mutex_init(&auth_id_lock
);
549 spin_lock_init(&sess_idr_lock
);
553 ret
= target_register_template(&iscsi_ops
);
557 size
= BITS_TO_LONGS(ISCSIT_BITMAP_BITS
) * sizeof(long);
558 iscsit_global
->ts_bitmap
= vzalloc(size
);
559 if (!iscsit_global
->ts_bitmap
) {
560 pr_err("Unable to allocate iscsit_global->ts_bitmap\n");
564 lio_qr_cache
= kmem_cache_create("lio_qr_cache",
565 sizeof(struct iscsi_queue_req
),
566 __alignof__(struct iscsi_queue_req
), 0, NULL
);
568 pr_err("nable to kmem_cache_create() for"
573 lio_dr_cache
= kmem_cache_create("lio_dr_cache",
574 sizeof(struct iscsi_datain_req
),
575 __alignof__(struct iscsi_datain_req
), 0, NULL
);
577 pr_err("Unable to kmem_cache_create() for"
582 lio_ooo_cache
= kmem_cache_create("lio_ooo_cache",
583 sizeof(struct iscsi_ooo_cmdsn
),
584 __alignof__(struct iscsi_ooo_cmdsn
), 0, NULL
);
585 if (!lio_ooo_cache
) {
586 pr_err("Unable to kmem_cache_create() for"
591 lio_r2t_cache
= kmem_cache_create("lio_r2t_cache",
592 sizeof(struct iscsi_r2t
), __alignof__(struct iscsi_r2t
),
594 if (!lio_r2t_cache
) {
595 pr_err("Unable to kmem_cache_create() for"
600 iscsit_register_transport(&iscsi_target_transport
);
602 if (iscsit_load_discovery_tpg() < 0)
607 iscsit_unregister_transport(&iscsi_target_transport
);
608 kmem_cache_destroy(lio_r2t_cache
);
610 kmem_cache_destroy(lio_ooo_cache
);
612 kmem_cache_destroy(lio_dr_cache
);
614 kmem_cache_destroy(lio_qr_cache
);
616 vfree(iscsit_global
->ts_bitmap
);
618 /* XXX: this probably wants it to be it's own unwind step.. */
619 if (iscsit_global
->discovery_tpg
)
620 iscsit_tpg_disable_portal_group(iscsit_global
->discovery_tpg
, 1);
621 target_unregister_template(&iscsi_ops
);
623 kfree(iscsit_global
);
627 static void __exit
iscsi_target_cleanup_module(void)
629 iscsit_release_discovery_tpg();
630 iscsit_unregister_transport(&iscsi_target_transport
);
631 kmem_cache_destroy(lio_qr_cache
);
632 kmem_cache_destroy(lio_dr_cache
);
633 kmem_cache_destroy(lio_ooo_cache
);
634 kmem_cache_destroy(lio_r2t_cache
);
637 * Shutdown discovery sessions and disable discovery TPG
639 if (iscsit_global
->discovery_tpg
)
640 iscsit_tpg_disable_portal_group(iscsit_global
->discovery_tpg
, 1);
642 target_unregister_template(&iscsi_ops
);
644 vfree(iscsit_global
->ts_bitmap
);
645 kfree(iscsit_global
);
648 static int iscsit_add_reject(
649 struct iscsi_conn
*conn
,
653 struct iscsi_cmd
*cmd
;
655 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
659 cmd
->iscsi_opcode
= ISCSI_OP_REJECT
;
660 cmd
->reject_reason
= reason
;
662 cmd
->buf_ptr
= kmemdup(buf
, ISCSI_HDR_LEN
, GFP_KERNEL
);
664 pr_err("Unable to allocate memory for cmd->buf_ptr\n");
665 iscsit_free_cmd(cmd
, false);
669 spin_lock_bh(&conn
->cmd_lock
);
670 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
671 spin_unlock_bh(&conn
->cmd_lock
);
673 cmd
->i_state
= ISTATE_SEND_REJECT
;
674 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
679 static int iscsit_add_reject_from_cmd(
680 struct iscsi_cmd
*cmd
,
685 struct iscsi_conn
*conn
;
688 pr_err("cmd->conn is NULL for ITT: 0x%08x\n",
694 cmd
->iscsi_opcode
= ISCSI_OP_REJECT
;
695 cmd
->reject_reason
= reason
;
697 cmd
->buf_ptr
= kmemdup(buf
, ISCSI_HDR_LEN
, GFP_KERNEL
);
699 pr_err("Unable to allocate memory for cmd->buf_ptr\n");
700 iscsit_free_cmd(cmd
, false);
705 spin_lock_bh(&conn
->cmd_lock
);
706 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
707 spin_unlock_bh(&conn
->cmd_lock
);
710 cmd
->i_state
= ISTATE_SEND_REJECT
;
711 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
713 * Perform the kref_put now if se_cmd has already been setup by
714 * scsit_setup_scsi_cmd()
716 if (cmd
->se_cmd
.se_tfo
!= NULL
) {
717 pr_debug("iscsi reject: calling target_put_sess_cmd >>>>>>\n");
718 target_put_sess_cmd(&cmd
->se_cmd
);
723 static int iscsit_add_reject_cmd(struct iscsi_cmd
*cmd
, u8 reason
,
726 return iscsit_add_reject_from_cmd(cmd
, reason
, true, buf
);
729 int iscsit_reject_cmd(struct iscsi_cmd
*cmd
, u8 reason
, unsigned char *buf
)
731 return iscsit_add_reject_from_cmd(cmd
, reason
, false, buf
);
735 * Map some portion of the allocated scatterlist to an iovec, suitable for
736 * kernel sockets to copy data in/out.
738 static int iscsit_map_iovec(
739 struct iscsi_cmd
*cmd
,
745 struct scatterlist
*sg
;
746 unsigned int page_off
;
749 * We know each entry in t_data_sg contains a page.
751 sg
= &cmd
->se_cmd
.t_data_sg
[data_offset
/ PAGE_SIZE
];
752 page_off
= (data_offset
% PAGE_SIZE
);
754 cmd
->first_data_sg
= sg
;
755 cmd
->first_data_sg_off
= page_off
;
757 while (data_length
) {
758 u32 cur_len
= min_t(u32
, data_length
, sg
->length
- page_off
);
760 iov
[i
].iov_base
= kmap(sg_page(sg
)) + sg
->offset
+ page_off
;
761 iov
[i
].iov_len
= cur_len
;
763 data_length
-= cur_len
;
769 cmd
->kmapped_nents
= i
;
774 static void iscsit_unmap_iovec(struct iscsi_cmd
*cmd
)
777 struct scatterlist
*sg
;
779 sg
= cmd
->first_data_sg
;
781 for (i
= 0; i
< cmd
->kmapped_nents
; i
++)
782 kunmap(sg_page(&sg
[i
]));
785 static void iscsit_ack_from_expstatsn(struct iscsi_conn
*conn
, u32 exp_statsn
)
788 struct iscsi_cmd
*cmd
, *cmd_p
;
790 conn
->exp_statsn
= exp_statsn
;
792 if (conn
->sess
->sess_ops
->RDMAExtensions
)
795 spin_lock_bh(&conn
->cmd_lock
);
796 list_for_each_entry_safe(cmd
, cmd_p
, &conn
->conn_cmd_list
, i_conn_node
) {
797 spin_lock(&cmd
->istate_lock
);
798 if ((cmd
->i_state
== ISTATE_SENT_STATUS
) &&
799 iscsi_sna_lt(cmd
->stat_sn
, exp_statsn
)) {
800 cmd
->i_state
= ISTATE_REMOVE
;
801 spin_unlock(&cmd
->istate_lock
);
802 list_move_tail(&cmd
->i_conn_node
, &ack_list
);
805 spin_unlock(&cmd
->istate_lock
);
807 spin_unlock_bh(&conn
->cmd_lock
);
809 list_for_each_entry_safe(cmd
, cmd_p
, &ack_list
, i_conn_node
) {
810 list_del_init(&cmd
->i_conn_node
);
811 iscsit_free_cmd(cmd
, false);
815 static int iscsit_allocate_iovecs(struct iscsi_cmd
*cmd
)
817 u32 iov_count
= max(1UL, DIV_ROUND_UP(cmd
->se_cmd
.data_length
, PAGE_SIZE
));
819 iov_count
+= ISCSI_IOV_DATA_BUFFER
;
821 cmd
->iov_data
= kzalloc(iov_count
* sizeof(struct kvec
), GFP_KERNEL
);
822 if (!cmd
->iov_data
) {
823 pr_err("Unable to allocate cmd->iov_data\n");
827 cmd
->orig_iov_data_count
= iov_count
;
831 int iscsit_setup_scsi_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
834 int data_direction
, payload_length
;
835 struct iscsi_scsi_req
*hdr
;
839 atomic_long_inc(&conn
->sess
->cmd_pdus
);
841 hdr
= (struct iscsi_scsi_req
*) buf
;
842 payload_length
= ntoh24(hdr
->dlength
);
844 /* FIXME; Add checks for AdditionalHeaderSegment */
846 if (!(hdr
->flags
& ISCSI_FLAG_CMD_WRITE
) &&
847 !(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
)) {
848 pr_err("ISCSI_FLAG_CMD_WRITE & ISCSI_FLAG_CMD_FINAL"
849 " not set. Bad iSCSI Initiator.\n");
850 return iscsit_add_reject_cmd(cmd
,
851 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
854 if (((hdr
->flags
& ISCSI_FLAG_CMD_READ
) ||
855 (hdr
->flags
& ISCSI_FLAG_CMD_WRITE
)) && !hdr
->data_length
) {
857 * From RFC-3720 Section 10.3.1:
859 * "Either or both of R and W MAY be 1 when either the
860 * Expected Data Transfer Length and/or Bidirectional Read
861 * Expected Data Transfer Length are 0"
863 * For this case, go ahead and clear the unnecssary bits
864 * to avoid any confusion with ->data_direction.
866 hdr
->flags
&= ~ISCSI_FLAG_CMD_READ
;
867 hdr
->flags
&= ~ISCSI_FLAG_CMD_WRITE
;
869 pr_warn("ISCSI_FLAG_CMD_READ or ISCSI_FLAG_CMD_WRITE"
870 " set when Expected Data Transfer Length is 0 for"
871 " CDB: 0x%02x, Fixing up flags\n", hdr
->cdb
[0]);
874 if (!(hdr
->flags
& ISCSI_FLAG_CMD_READ
) &&
875 !(hdr
->flags
& ISCSI_FLAG_CMD_WRITE
) && (hdr
->data_length
!= 0)) {
876 pr_err("ISCSI_FLAG_CMD_READ and/or ISCSI_FLAG_CMD_WRITE"
877 " MUST be set if Expected Data Transfer Length is not 0."
878 " Bad iSCSI Initiator\n");
879 return iscsit_add_reject_cmd(cmd
,
880 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
883 if ((hdr
->flags
& ISCSI_FLAG_CMD_READ
) &&
884 (hdr
->flags
& ISCSI_FLAG_CMD_WRITE
)) {
885 pr_err("Bidirectional operations not supported!\n");
886 return iscsit_add_reject_cmd(cmd
,
887 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
890 if (hdr
->opcode
& ISCSI_OP_IMMEDIATE
) {
891 pr_err("Illegally set Immediate Bit in iSCSI Initiator"
892 " Scsi Command PDU.\n");
893 return iscsit_add_reject_cmd(cmd
,
894 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
897 if (payload_length
&& !conn
->sess
->sess_ops
->ImmediateData
) {
898 pr_err("ImmediateData=No but DataSegmentLength=%u,"
899 " protocol error.\n", payload_length
);
900 return iscsit_add_reject_cmd(cmd
,
901 ISCSI_REASON_PROTOCOL_ERROR
, buf
);
904 if ((be32_to_cpu(hdr
->data_length
) == payload_length
) &&
905 (!(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
))) {
906 pr_err("Expected Data Transfer Length and Length of"
907 " Immediate Data are the same, but ISCSI_FLAG_CMD_FINAL"
908 " bit is not set protocol error\n");
909 return iscsit_add_reject_cmd(cmd
,
910 ISCSI_REASON_PROTOCOL_ERROR
, buf
);
913 if (payload_length
> be32_to_cpu(hdr
->data_length
)) {
914 pr_err("DataSegmentLength: %u is greater than"
915 " EDTL: %u, protocol error.\n", payload_length
,
917 return iscsit_add_reject_cmd(cmd
,
918 ISCSI_REASON_PROTOCOL_ERROR
, buf
);
921 if (payload_length
> conn
->conn_ops
->MaxXmitDataSegmentLength
) {
922 pr_err("DataSegmentLength: %u is greater than"
923 " MaxXmitDataSegmentLength: %u, protocol error.\n",
924 payload_length
, conn
->conn_ops
->MaxXmitDataSegmentLength
);
925 return iscsit_add_reject_cmd(cmd
,
926 ISCSI_REASON_PROTOCOL_ERROR
, buf
);
929 if (payload_length
> conn
->sess
->sess_ops
->FirstBurstLength
) {
930 pr_err("DataSegmentLength: %u is greater than"
931 " FirstBurstLength: %u, protocol error.\n",
932 payload_length
, conn
->sess
->sess_ops
->FirstBurstLength
);
933 return iscsit_add_reject_cmd(cmd
,
934 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
937 data_direction
= (hdr
->flags
& ISCSI_FLAG_CMD_WRITE
) ? DMA_TO_DEVICE
:
938 (hdr
->flags
& ISCSI_FLAG_CMD_READ
) ? DMA_FROM_DEVICE
:
941 cmd
->data_direction
= data_direction
;
942 iscsi_task_attr
= hdr
->flags
& ISCSI_FLAG_CMD_ATTR_MASK
;
944 * Figure out the SAM Task Attribute for the incoming SCSI CDB
946 if ((iscsi_task_attr
== ISCSI_ATTR_UNTAGGED
) ||
947 (iscsi_task_attr
== ISCSI_ATTR_SIMPLE
))
948 sam_task_attr
= TCM_SIMPLE_TAG
;
949 else if (iscsi_task_attr
== ISCSI_ATTR_ORDERED
)
950 sam_task_attr
= TCM_ORDERED_TAG
;
951 else if (iscsi_task_attr
== ISCSI_ATTR_HEAD_OF_QUEUE
)
952 sam_task_attr
= TCM_HEAD_TAG
;
953 else if (iscsi_task_attr
== ISCSI_ATTR_ACA
)
954 sam_task_attr
= TCM_ACA_TAG
;
956 pr_debug("Unknown iSCSI Task Attribute: 0x%02x, using"
957 " TCM_SIMPLE_TAG\n", iscsi_task_attr
);
958 sam_task_attr
= TCM_SIMPLE_TAG
;
961 cmd
->iscsi_opcode
= ISCSI_OP_SCSI_CMD
;
962 cmd
->i_state
= ISTATE_NEW_CMD
;
963 cmd
->immediate_cmd
= ((hdr
->opcode
& ISCSI_OP_IMMEDIATE
) ? 1 : 0);
964 cmd
->immediate_data
= (payload_length
) ? 1 : 0;
965 cmd
->unsolicited_data
= ((!(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
) &&
966 (hdr
->flags
& ISCSI_FLAG_CMD_WRITE
)) ? 1 : 0);
967 if (cmd
->unsolicited_data
)
968 cmd
->cmd_flags
|= ICF_NON_IMMEDIATE_UNSOLICITED_DATA
;
970 conn
->sess
->init_task_tag
= cmd
->init_task_tag
= hdr
->itt
;
971 if (hdr
->flags
& ISCSI_FLAG_CMD_READ
)
972 cmd
->targ_xfer_tag
= session_get_next_ttt(conn
->sess
);
974 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
975 cmd
->cmd_sn
= be32_to_cpu(hdr
->cmdsn
);
976 cmd
->exp_stat_sn
= be32_to_cpu(hdr
->exp_statsn
);
977 cmd
->first_burst_len
= payload_length
;
979 if (!conn
->sess
->sess_ops
->RDMAExtensions
&&
980 cmd
->data_direction
== DMA_FROM_DEVICE
) {
981 struct iscsi_datain_req
*dr
;
983 dr
= iscsit_allocate_datain_req();
985 return iscsit_add_reject_cmd(cmd
,
986 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
988 iscsit_attach_datain_req(cmd
, dr
);
992 * Initialize struct se_cmd descriptor from target_core_mod infrastructure
994 transport_init_se_cmd(&cmd
->se_cmd
, &iscsi_ops
,
995 conn
->sess
->se_sess
, be32_to_cpu(hdr
->data_length
),
996 cmd
->data_direction
, sam_task_attr
,
997 cmd
->sense_buffer
+ 2);
999 pr_debug("Got SCSI Command, ITT: 0x%08x, CmdSN: 0x%08x,"
1000 " ExpXferLen: %u, Length: %u, CID: %hu\n", hdr
->itt
,
1001 hdr
->cmdsn
, be32_to_cpu(hdr
->data_length
), payload_length
,
1004 target_get_sess_cmd(&cmd
->se_cmd
, true);
1006 cmd
->sense_reason
= transport_lookup_cmd_lun(&cmd
->se_cmd
,
1007 scsilun_to_int(&hdr
->lun
));
1008 if (cmd
->sense_reason
)
1011 /* only used for printks or comparing with ->ref_task_tag */
1012 cmd
->se_cmd
.tag
= (__force u32
)cmd
->init_task_tag
;
1013 cmd
->sense_reason
= target_setup_cmd_from_cdb(&cmd
->se_cmd
, hdr
->cdb
);
1014 if (cmd
->sense_reason
) {
1015 if (cmd
->sense_reason
== TCM_OUT_OF_RESOURCES
) {
1016 return iscsit_add_reject_cmd(cmd
,
1017 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
1023 if (iscsit_build_pdu_and_seq_lists(cmd
, payload_length
) < 0) {
1024 return iscsit_add_reject_cmd(cmd
,
1025 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
1029 spin_lock_bh(&conn
->cmd_lock
);
1030 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
1031 spin_unlock_bh(&conn
->cmd_lock
);
1033 * Check if we need to delay processing because of ALUA
1034 * Active/NonOptimized primary access state..
1036 core_alua_check_nonop_delay(&cmd
->se_cmd
);
1040 EXPORT_SYMBOL(iscsit_setup_scsi_cmd
);
1042 void iscsit_set_unsoliticed_dataout(struct iscsi_cmd
*cmd
)
1044 iscsit_set_dataout_sequence_values(cmd
);
1046 spin_lock_bh(&cmd
->dataout_timeout_lock
);
1047 iscsit_start_dataout_timer(cmd
, cmd
->conn
);
1048 spin_unlock_bh(&cmd
->dataout_timeout_lock
);
1050 EXPORT_SYMBOL(iscsit_set_unsoliticed_dataout
);
1052 int iscsit_process_scsi_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1053 struct iscsi_scsi_req
*hdr
)
1057 * Check the CmdSN against ExpCmdSN/MaxCmdSN here if
1058 * the Immediate Bit is not set, and no Immediate
1061 * A PDU/CmdSN carrying Immediate Data can only
1062 * be processed after the DataCRC has passed.
1063 * If the DataCRC fails, the CmdSN MUST NOT
1064 * be acknowledged. (See below)
1066 if (!cmd
->immediate_data
) {
1067 cmdsn_ret
= iscsit_sequence_cmd(conn
, cmd
,
1068 (unsigned char *)hdr
, hdr
->cmdsn
);
1069 if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
1071 else if (cmdsn_ret
== CMDSN_LOWER_THAN_EXP
) {
1072 target_put_sess_cmd(&cmd
->se_cmd
);
1077 iscsit_ack_from_expstatsn(conn
, be32_to_cpu(hdr
->exp_statsn
));
1080 * If no Immediate Data is attached, it's OK to return now.
1082 if (!cmd
->immediate_data
) {
1083 if (!cmd
->sense_reason
&& cmd
->unsolicited_data
)
1084 iscsit_set_unsoliticed_dataout(cmd
);
1085 if (!cmd
->sense_reason
)
1088 target_put_sess_cmd(&cmd
->se_cmd
);
1093 * Early CHECK_CONDITIONs with ImmediateData never make it to command
1094 * execution. These exceptions are processed in CmdSN order using
1095 * iscsit_check_received_cmdsn() in iscsit_get_immediate_data() below.
1097 if (cmd
->sense_reason
) {
1098 if (cmd
->reject_reason
)
1104 * Call directly into transport_generic_new_cmd() to perform
1105 * the backend memory allocation.
1107 cmd
->sense_reason
= transport_generic_new_cmd(&cmd
->se_cmd
);
1108 if (cmd
->sense_reason
)
1113 EXPORT_SYMBOL(iscsit_process_scsi_cmd
);
1116 iscsit_get_immediate_data(struct iscsi_cmd
*cmd
, struct iscsi_scsi_req
*hdr
,
1119 int cmdsn_ret
= 0, immed_ret
= IMMEDIATE_DATA_NORMAL_OPERATION
;
1121 * Special case for Unsupported SAM WRITE Opcodes and ImmediateData=Yes.
1124 goto after_immediate_data
;
1126 immed_ret
= iscsit_handle_immediate_data(cmd
, hdr
,
1127 cmd
->first_burst_len
);
1128 after_immediate_data
:
1129 if (immed_ret
== IMMEDIATE_DATA_NORMAL_OPERATION
) {
1131 * A PDU/CmdSN carrying Immediate Data passed
1132 * DataCRC, check against ExpCmdSN/MaxCmdSN if
1133 * Immediate Bit is not set.
1135 cmdsn_ret
= iscsit_sequence_cmd(cmd
->conn
, cmd
,
1136 (unsigned char *)hdr
, hdr
->cmdsn
);
1137 if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
1140 if (cmd
->sense_reason
|| cmdsn_ret
== CMDSN_LOWER_THAN_EXP
) {
1143 rc
= iscsit_dump_data_payload(cmd
->conn
,
1144 cmd
->first_burst_len
, 1);
1145 target_put_sess_cmd(&cmd
->se_cmd
);
1147 } else if (cmd
->unsolicited_data
)
1148 iscsit_set_unsoliticed_dataout(cmd
);
1150 } else if (immed_ret
== IMMEDIATE_DATA_ERL1_CRC_FAILURE
) {
1152 * Immediate Data failed DataCRC and ERL>=1,
1153 * silently drop this PDU and let the initiator
1154 * plug the CmdSN gap.
1156 * FIXME: Send Unsolicited NOPIN with reserved
1157 * TTT here to help the initiator figure out
1158 * the missing CmdSN, although they should be
1159 * intelligent enough to determine the missing
1160 * CmdSN and issue a retry to plug the sequence.
1162 cmd
->i_state
= ISTATE_REMOVE
;
1163 iscsit_add_cmd_to_immediate_queue(cmd
, cmd
->conn
, cmd
->i_state
);
1164 } else /* immed_ret == IMMEDIATE_DATA_CANNOT_RECOVER */
1171 iscsit_handle_scsi_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1174 struct iscsi_scsi_req
*hdr
= (struct iscsi_scsi_req
*)buf
;
1176 bool dump_payload
= false;
1178 rc
= iscsit_setup_scsi_cmd(conn
, cmd
, buf
);
1182 * Allocation iovecs needed for struct socket operations for
1183 * traditional iSCSI block I/O.
1185 if (iscsit_allocate_iovecs(cmd
) < 0) {
1186 return iscsit_reject_cmd(cmd
,
1187 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
1189 immed_data
= cmd
->immediate_data
;
1191 rc
= iscsit_process_scsi_cmd(conn
, cmd
, hdr
);
1195 dump_payload
= true;
1200 return iscsit_get_immediate_data(cmd
, hdr
, dump_payload
);
1203 static u32
iscsit_do_crypto_hash_sg(
1204 struct hash_desc
*hash
,
1205 struct iscsi_cmd
*cmd
,
1213 struct scatterlist
*sg
;
1214 unsigned int page_off
;
1216 crypto_hash_init(hash
);
1218 sg
= cmd
->first_data_sg
;
1219 page_off
= cmd
->first_data_sg_off
;
1222 while (data_length
) {
1223 u32 cur_len
= min_t(u32
, data_length
, (sg
[i
].length
- page_off
));
1225 crypto_hash_update(hash
, &sg
[i
], cur_len
);
1227 data_length
-= cur_len
;
1233 struct scatterlist pad_sg
;
1235 sg_init_one(&pad_sg
, pad_bytes
, padding
);
1236 crypto_hash_update(hash
, &pad_sg
, padding
);
1238 crypto_hash_final(hash
, (u8
*) &data_crc
);
1243 static void iscsit_do_crypto_hash_buf(
1244 struct hash_desc
*hash
,
1251 struct scatterlist sg
;
1253 crypto_hash_init(hash
);
1255 sg_init_one(&sg
, buf
, payload_length
);
1256 crypto_hash_update(hash
, &sg
, payload_length
);
1259 sg_init_one(&sg
, pad_bytes
, padding
);
1260 crypto_hash_update(hash
, &sg
, padding
);
1262 crypto_hash_final(hash
, data_crc
);
1266 iscsit_check_dataout_hdr(struct iscsi_conn
*conn
, unsigned char *buf
,
1267 struct iscsi_cmd
**out_cmd
)
1269 struct iscsi_data
*hdr
= (struct iscsi_data
*)buf
;
1270 struct iscsi_cmd
*cmd
= NULL
;
1271 struct se_cmd
*se_cmd
;
1272 u32 payload_length
= ntoh24(hdr
->dlength
);
1275 if (!payload_length
) {
1276 pr_warn("DataOUT payload is ZERO, ignoring.\n");
1281 atomic_long_add(payload_length
, &conn
->sess
->rx_data_octets
);
1283 if (payload_length
> conn
->conn_ops
->MaxXmitDataSegmentLength
) {
1284 pr_err("DataSegmentLength: %u is greater than"
1285 " MaxXmitDataSegmentLength: %u\n", payload_length
,
1286 conn
->conn_ops
->MaxXmitDataSegmentLength
);
1287 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
1291 cmd
= iscsit_find_cmd_from_itt_or_dump(conn
, hdr
->itt
,
1296 pr_debug("Got DataOut ITT: 0x%08x, TTT: 0x%08x,"
1297 " DataSN: 0x%08x, Offset: %u, Length: %u, CID: %hu\n",
1298 hdr
->itt
, hdr
->ttt
, hdr
->datasn
, ntohl(hdr
->offset
),
1299 payload_length
, conn
->cid
);
1301 if (cmd
->cmd_flags
& ICF_GOT_LAST_DATAOUT
) {
1302 pr_err("Command ITT: 0x%08x received DataOUT after"
1303 " last DataOUT received, dumping payload\n",
1304 cmd
->init_task_tag
);
1305 return iscsit_dump_data_payload(conn
, payload_length
, 1);
1308 if (cmd
->data_direction
!= DMA_TO_DEVICE
) {
1309 pr_err("Command ITT: 0x%08x received DataOUT for a"
1310 " NON-WRITE command.\n", cmd
->init_task_tag
);
1311 return iscsit_dump_data_payload(conn
, payload_length
, 1);
1313 se_cmd
= &cmd
->se_cmd
;
1314 iscsit_mod_dataout_timer(cmd
);
1316 if ((be32_to_cpu(hdr
->offset
) + payload_length
) > cmd
->se_cmd
.data_length
) {
1317 pr_err("DataOut Offset: %u, Length %u greater than"
1318 " iSCSI Command EDTL %u, protocol error.\n",
1319 hdr
->offset
, payload_length
, cmd
->se_cmd
.data_length
);
1320 return iscsit_reject_cmd(cmd
, ISCSI_REASON_BOOKMARK_INVALID
, buf
);
1323 if (cmd
->unsolicited_data
) {
1324 int dump_unsolicited_data
= 0;
1326 if (conn
->sess
->sess_ops
->InitialR2T
) {
1327 pr_err("Received unexpected unsolicited data"
1328 " while InitialR2T=Yes, protocol error.\n");
1329 transport_send_check_condition_and_sense(&cmd
->se_cmd
,
1330 TCM_UNEXPECTED_UNSOLICITED_DATA
, 0);
1334 * Special case for dealing with Unsolicited DataOUT
1335 * and Unsupported SAM WRITE Opcodes and SE resource allocation
1339 /* Something's amiss if we're not in WRITE_PENDING state... */
1340 WARN_ON(se_cmd
->t_state
!= TRANSPORT_WRITE_PENDING
);
1341 if (!(se_cmd
->se_cmd_flags
& SCF_SUPPORTED_SAM_OPCODE
))
1342 dump_unsolicited_data
= 1;
1344 if (dump_unsolicited_data
) {
1346 * Check if a delayed TASK_ABORTED status needs to
1347 * be sent now if the ISCSI_FLAG_CMD_FINAL has been
1348 * received with the unsolicitied data out.
1350 if (hdr
->flags
& ISCSI_FLAG_CMD_FINAL
)
1351 iscsit_stop_dataout_timer(cmd
);
1353 transport_check_aborted_status(se_cmd
,
1354 (hdr
->flags
& ISCSI_FLAG_CMD_FINAL
));
1355 return iscsit_dump_data_payload(conn
, payload_length
, 1);
1359 * For the normal solicited data path:
1361 * Check for a delayed TASK_ABORTED status and dump any
1362 * incoming data out payload if one exists. Also, when the
1363 * ISCSI_FLAG_CMD_FINAL is set to denote the end of the current
1364 * data out sequence, we decrement outstanding_r2ts. Once
1365 * outstanding_r2ts reaches zero, go ahead and send the delayed
1366 * TASK_ABORTED status.
1368 if (se_cmd
->transport_state
& CMD_T_ABORTED
) {
1369 if (hdr
->flags
& ISCSI_FLAG_CMD_FINAL
)
1370 if (--cmd
->outstanding_r2ts
< 1) {
1371 iscsit_stop_dataout_timer(cmd
);
1372 transport_check_aborted_status(
1376 return iscsit_dump_data_payload(conn
, payload_length
, 1);
1380 * Preform DataSN, DataSequenceInOrder, DataPDUInOrder, and
1381 * within-command recovery checks before receiving the payload.
1383 rc
= iscsit_check_pre_dataout(cmd
, buf
);
1384 if (rc
== DATAOUT_WITHIN_COMMAND_RECOVERY
)
1386 else if (rc
== DATAOUT_CANNOT_RECOVER
)
1392 EXPORT_SYMBOL(iscsit_check_dataout_hdr
);
1395 iscsit_get_dataout(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1396 struct iscsi_data
*hdr
)
1399 u32 checksum
, iov_count
= 0, padding
= 0, rx_got
= 0, rx_size
= 0;
1400 u32 payload_length
= ntoh24(hdr
->dlength
);
1401 int iov_ret
, data_crc_failed
= 0;
1403 rx_size
+= payload_length
;
1404 iov
= &cmd
->iov_data
[0];
1406 iov_ret
= iscsit_map_iovec(cmd
, iov
, be32_to_cpu(hdr
->offset
),
1411 iov_count
+= iov_ret
;
1413 padding
= ((-payload_length
) & 3);
1415 iov
[iov_count
].iov_base
= cmd
->pad_bytes
;
1416 iov
[iov_count
++].iov_len
= padding
;
1418 pr_debug("Receiving %u padding bytes.\n", padding
);
1421 if (conn
->conn_ops
->DataDigest
) {
1422 iov
[iov_count
].iov_base
= &checksum
;
1423 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
1424 rx_size
+= ISCSI_CRC_LEN
;
1427 rx_got
= rx_data(conn
, &cmd
->iov_data
[0], iov_count
, rx_size
);
1429 iscsit_unmap_iovec(cmd
);
1431 if (rx_got
!= rx_size
)
1434 if (conn
->conn_ops
->DataDigest
) {
1437 data_crc
= iscsit_do_crypto_hash_sg(&conn
->conn_rx_hash
, cmd
,
1438 be32_to_cpu(hdr
->offset
),
1439 payload_length
, padding
,
1442 if (checksum
!= data_crc
) {
1443 pr_err("ITT: 0x%08x, Offset: %u, Length: %u,"
1444 " DataSN: 0x%08x, CRC32C DataDigest 0x%08x"
1445 " does not match computed 0x%08x\n",
1446 hdr
->itt
, hdr
->offset
, payload_length
,
1447 hdr
->datasn
, checksum
, data_crc
);
1448 data_crc_failed
= 1;
1450 pr_debug("Got CRC32C DataDigest 0x%08x for"
1451 " %u bytes of Data Out\n", checksum
,
1456 return data_crc_failed
;
1460 iscsit_check_dataout_payload(struct iscsi_cmd
*cmd
, struct iscsi_data
*hdr
,
1461 bool data_crc_failed
)
1463 struct iscsi_conn
*conn
= cmd
->conn
;
1466 * Increment post receive data and CRC values or perform
1467 * within-command recovery.
1469 rc
= iscsit_check_post_dataout(cmd
, (unsigned char *)hdr
, data_crc_failed
);
1470 if ((rc
== DATAOUT_NORMAL
) || (rc
== DATAOUT_WITHIN_COMMAND_RECOVERY
))
1472 else if (rc
== DATAOUT_SEND_R2T
) {
1473 iscsit_set_dataout_sequence_values(cmd
);
1474 conn
->conn_transport
->iscsit_get_dataout(conn
, cmd
, false);
1475 } else if (rc
== DATAOUT_SEND_TO_TRANSPORT
) {
1477 * Handle extra special case for out of order
1478 * Unsolicited Data Out.
1480 spin_lock_bh(&cmd
->istate_lock
);
1481 ooo_cmdsn
= (cmd
->cmd_flags
& ICF_OOO_CMDSN
);
1482 cmd
->cmd_flags
|= ICF_GOT_LAST_DATAOUT
;
1483 cmd
->i_state
= ISTATE_RECEIVED_LAST_DATAOUT
;
1484 spin_unlock_bh(&cmd
->istate_lock
);
1486 iscsit_stop_dataout_timer(cmd
);
1489 target_execute_cmd(&cmd
->se_cmd
);
1491 } else /* DATAOUT_CANNOT_RECOVER */
1496 EXPORT_SYMBOL(iscsit_check_dataout_payload
);
1498 static int iscsit_handle_data_out(struct iscsi_conn
*conn
, unsigned char *buf
)
1500 struct iscsi_cmd
*cmd
= NULL
;
1501 struct iscsi_data
*hdr
= (struct iscsi_data
*)buf
;
1503 bool data_crc_failed
= false;
1505 rc
= iscsit_check_dataout_hdr(conn
, buf
, &cmd
);
1511 rc
= iscsit_get_dataout(conn
, cmd
, hdr
);
1515 data_crc_failed
= true;
1517 return iscsit_check_dataout_payload(cmd
, hdr
, data_crc_failed
);
1520 int iscsit_setup_nop_out(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1521 struct iscsi_nopout
*hdr
)
1523 u32 payload_length
= ntoh24(hdr
->dlength
);
1525 if (!(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
)) {
1526 pr_err("NopOUT Flag's, Left Most Bit not set, protocol error.\n");
1528 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
1529 (unsigned char *)hdr
);
1531 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
,
1532 (unsigned char *)hdr
);
1535 if (hdr
->itt
== RESERVED_ITT
&& !(hdr
->opcode
& ISCSI_OP_IMMEDIATE
)) {
1536 pr_err("NOPOUT ITT is reserved, but Immediate Bit is"
1537 " not set, protocol error.\n");
1539 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
1540 (unsigned char *)hdr
);
1542 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
,
1543 (unsigned char *)hdr
);
1546 if (payload_length
> conn
->conn_ops
->MaxXmitDataSegmentLength
) {
1547 pr_err("NOPOUT Ping Data DataSegmentLength: %u is"
1548 " greater than MaxXmitDataSegmentLength: %u, protocol"
1549 " error.\n", payload_length
,
1550 conn
->conn_ops
->MaxXmitDataSegmentLength
);
1552 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
1553 (unsigned char *)hdr
);
1555 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
,
1556 (unsigned char *)hdr
);
1559 pr_debug("Got NOPOUT Ping %s ITT: 0x%08x, TTT: 0x%08x,"
1560 " CmdSN: 0x%08x, ExpStatSN: 0x%08x, Length: %u\n",
1561 hdr
->itt
== RESERVED_ITT
? "Response" : "Request",
1562 hdr
->itt
, hdr
->ttt
, hdr
->cmdsn
, hdr
->exp_statsn
,
1565 * This is not a response to a Unsolicited NopIN, which means
1566 * it can either be a NOPOUT ping request (with a valid ITT),
1567 * or a NOPOUT not requesting a NOPIN (with a reserved ITT).
1568 * Either way, make sure we allocate an struct iscsi_cmd, as both
1569 * can contain ping data.
1571 if (hdr
->ttt
== cpu_to_be32(0xFFFFFFFF)) {
1572 cmd
->iscsi_opcode
= ISCSI_OP_NOOP_OUT
;
1573 cmd
->i_state
= ISTATE_SEND_NOPIN
;
1574 cmd
->immediate_cmd
= ((hdr
->opcode
& ISCSI_OP_IMMEDIATE
) ?
1576 conn
->sess
->init_task_tag
= cmd
->init_task_tag
= hdr
->itt
;
1577 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
1578 cmd
->cmd_sn
= be32_to_cpu(hdr
->cmdsn
);
1579 cmd
->exp_stat_sn
= be32_to_cpu(hdr
->exp_statsn
);
1580 cmd
->data_direction
= DMA_NONE
;
1585 EXPORT_SYMBOL(iscsit_setup_nop_out
);
1587 int iscsit_process_nop_out(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1588 struct iscsi_nopout
*hdr
)
1590 struct iscsi_cmd
*cmd_p
= NULL
;
1593 * Initiator is expecting a NopIN ping reply..
1595 if (hdr
->itt
!= RESERVED_ITT
) {
1597 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
1598 (unsigned char *)hdr
);
1600 spin_lock_bh(&conn
->cmd_lock
);
1601 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
1602 spin_unlock_bh(&conn
->cmd_lock
);
1604 iscsit_ack_from_expstatsn(conn
, be32_to_cpu(hdr
->exp_statsn
));
1606 if (hdr
->opcode
& ISCSI_OP_IMMEDIATE
) {
1607 iscsit_add_cmd_to_response_queue(cmd
, conn
,
1612 cmdsn_ret
= iscsit_sequence_cmd(conn
, cmd
,
1613 (unsigned char *)hdr
, hdr
->cmdsn
);
1614 if (cmdsn_ret
== CMDSN_LOWER_THAN_EXP
)
1616 if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
1622 * This was a response to a unsolicited NOPIN ping.
1624 if (hdr
->ttt
!= cpu_to_be32(0xFFFFFFFF)) {
1625 cmd_p
= iscsit_find_cmd_from_ttt(conn
, be32_to_cpu(hdr
->ttt
));
1629 iscsit_stop_nopin_response_timer(conn
);
1631 cmd_p
->i_state
= ISTATE_REMOVE
;
1632 iscsit_add_cmd_to_immediate_queue(cmd_p
, conn
, cmd_p
->i_state
);
1634 iscsit_start_nopin_timer(conn
);
1638 * Otherwise, initiator is not expecting a NOPIN is response.
1639 * Just ignore for now.
1643 EXPORT_SYMBOL(iscsit_process_nop_out
);
1645 static int iscsit_handle_nop_out(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1648 unsigned char *ping_data
= NULL
;
1649 struct iscsi_nopout
*hdr
= (struct iscsi_nopout
*)buf
;
1650 struct kvec
*iov
= NULL
;
1651 u32 payload_length
= ntoh24(hdr
->dlength
);
1654 ret
= iscsit_setup_nop_out(conn
, cmd
, hdr
);
1658 * Handle NOP-OUT payload for traditional iSCSI sockets
1660 if (payload_length
&& hdr
->ttt
== cpu_to_be32(0xFFFFFFFF)) {
1661 u32 checksum
, data_crc
, padding
= 0;
1662 int niov
= 0, rx_got
, rx_size
= payload_length
;
1664 ping_data
= kzalloc(payload_length
+ 1, GFP_KERNEL
);
1666 pr_err("Unable to allocate memory for"
1667 " NOPOUT ping data.\n");
1672 iov
= &cmd
->iov_misc
[0];
1673 iov
[niov
].iov_base
= ping_data
;
1674 iov
[niov
++].iov_len
= payload_length
;
1676 padding
= ((-payload_length
) & 3);
1678 pr_debug("Receiving %u additional bytes"
1679 " for padding.\n", padding
);
1680 iov
[niov
].iov_base
= &cmd
->pad_bytes
;
1681 iov
[niov
++].iov_len
= padding
;
1684 if (conn
->conn_ops
->DataDigest
) {
1685 iov
[niov
].iov_base
= &checksum
;
1686 iov
[niov
++].iov_len
= ISCSI_CRC_LEN
;
1687 rx_size
+= ISCSI_CRC_LEN
;
1690 rx_got
= rx_data(conn
, &cmd
->iov_misc
[0], niov
, rx_size
);
1691 if (rx_got
!= rx_size
) {
1696 if (conn
->conn_ops
->DataDigest
) {
1697 iscsit_do_crypto_hash_buf(&conn
->conn_rx_hash
,
1698 ping_data
, payload_length
,
1699 padding
, cmd
->pad_bytes
,
1702 if (checksum
!= data_crc
) {
1703 pr_err("Ping data CRC32C DataDigest"
1704 " 0x%08x does not match computed 0x%08x\n",
1705 checksum
, data_crc
);
1706 if (!conn
->sess
->sess_ops
->ErrorRecoveryLevel
) {
1707 pr_err("Unable to recover from"
1708 " NOPOUT Ping DataCRC failure while in"
1714 * Silently drop this PDU and let the
1715 * initiator plug the CmdSN gap.
1717 pr_debug("Dropping NOPOUT"
1718 " Command CmdSN: 0x%08x due to"
1719 " DataCRC error.\n", hdr
->cmdsn
);
1724 pr_debug("Got CRC32C DataDigest"
1725 " 0x%08x for %u bytes of ping data.\n",
1726 checksum
, payload_length
);
1730 ping_data
[payload_length
] = '\0';
1732 * Attach ping data to struct iscsi_cmd->buf_ptr.
1734 cmd
->buf_ptr
= ping_data
;
1735 cmd
->buf_ptr_size
= payload_length
;
1737 pr_debug("Got %u bytes of NOPOUT ping"
1738 " data.\n", payload_length
);
1739 pr_debug("Ping Data: \"%s\"\n", ping_data
);
1742 return iscsit_process_nop_out(conn
, cmd
, hdr
);
1745 iscsit_free_cmd(cmd
, false);
1752 iscsit_handle_task_mgt_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1755 struct se_tmr_req
*se_tmr
;
1756 struct iscsi_tmr_req
*tmr_req
;
1757 struct iscsi_tm
*hdr
;
1758 int out_of_order_cmdsn
= 0, ret
;
1759 bool sess_ref
= false;
1762 hdr
= (struct iscsi_tm
*) buf
;
1763 hdr
->flags
&= ~ISCSI_FLAG_CMD_FINAL
;
1764 function
= hdr
->flags
;
1766 pr_debug("Got Task Management Request ITT: 0x%08x, CmdSN:"
1767 " 0x%08x, Function: 0x%02x, RefTaskTag: 0x%08x, RefCmdSN:"
1768 " 0x%08x, CID: %hu\n", hdr
->itt
, hdr
->cmdsn
, function
,
1769 hdr
->rtt
, hdr
->refcmdsn
, conn
->cid
);
1771 if ((function
!= ISCSI_TM_FUNC_ABORT_TASK
) &&
1772 ((function
!= ISCSI_TM_FUNC_TASK_REASSIGN
) &&
1773 hdr
->rtt
!= RESERVED_ITT
)) {
1774 pr_err("RefTaskTag should be set to 0xFFFFFFFF.\n");
1775 hdr
->rtt
= RESERVED_ITT
;
1778 if ((function
== ISCSI_TM_FUNC_TASK_REASSIGN
) &&
1779 !(hdr
->opcode
& ISCSI_OP_IMMEDIATE
)) {
1780 pr_err("Task Management Request TASK_REASSIGN not"
1781 " issued as immediate command, bad iSCSI Initiator"
1782 "implementation\n");
1783 return iscsit_add_reject_cmd(cmd
,
1784 ISCSI_REASON_PROTOCOL_ERROR
, buf
);
1786 if ((function
!= ISCSI_TM_FUNC_ABORT_TASK
) &&
1787 be32_to_cpu(hdr
->refcmdsn
) != ISCSI_RESERVED_TAG
)
1788 hdr
->refcmdsn
= cpu_to_be32(ISCSI_RESERVED_TAG
);
1790 cmd
->data_direction
= DMA_NONE
;
1792 cmd
->tmr_req
= kzalloc(sizeof(struct iscsi_tmr_req
), GFP_KERNEL
);
1793 if (!cmd
->tmr_req
) {
1794 pr_err("Unable to allocate memory for"
1795 " Task Management command!\n");
1796 return iscsit_add_reject_cmd(cmd
,
1797 ISCSI_REASON_BOOKMARK_NO_RESOURCES
,
1802 * TASK_REASSIGN for ERL=2 / connection stays inside of
1803 * LIO-Target $FABRIC_MOD
1805 if (function
!= ISCSI_TM_FUNC_TASK_REASSIGN
) {
1810 transport_init_se_cmd(&cmd
->se_cmd
, &iscsi_ops
,
1811 conn
->sess
->se_sess
, 0, DMA_NONE
,
1812 TCM_SIMPLE_TAG
, cmd
->sense_buffer
+ 2);
1814 target_get_sess_cmd(&cmd
->se_cmd
, true);
1818 case ISCSI_TM_FUNC_ABORT_TASK
:
1819 tcm_function
= TMR_ABORT_TASK
;
1821 case ISCSI_TM_FUNC_ABORT_TASK_SET
:
1822 tcm_function
= TMR_ABORT_TASK_SET
;
1824 case ISCSI_TM_FUNC_CLEAR_ACA
:
1825 tcm_function
= TMR_CLEAR_ACA
;
1827 case ISCSI_TM_FUNC_CLEAR_TASK_SET
:
1828 tcm_function
= TMR_CLEAR_TASK_SET
;
1830 case ISCSI_TM_FUNC_LOGICAL_UNIT_RESET
:
1831 tcm_function
= TMR_LUN_RESET
;
1833 case ISCSI_TM_FUNC_TARGET_WARM_RESET
:
1834 tcm_function
= TMR_TARGET_WARM_RESET
;
1836 case ISCSI_TM_FUNC_TARGET_COLD_RESET
:
1837 tcm_function
= TMR_TARGET_COLD_RESET
;
1840 pr_err("Unknown iSCSI TMR Function:"
1841 " 0x%02x\n", function
);
1842 return iscsit_add_reject_cmd(cmd
,
1843 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
1846 ret
= core_tmr_alloc_req(&cmd
->se_cmd
, cmd
->tmr_req
,
1847 tcm_function
, GFP_KERNEL
);
1849 return iscsit_add_reject_cmd(cmd
,
1850 ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
1852 cmd
->tmr_req
->se_tmr_req
= cmd
->se_cmd
.se_tmr_req
;
1855 cmd
->iscsi_opcode
= ISCSI_OP_SCSI_TMFUNC
;
1856 cmd
->i_state
= ISTATE_SEND_TASKMGTRSP
;
1857 cmd
->immediate_cmd
= ((hdr
->opcode
& ISCSI_OP_IMMEDIATE
) ? 1 : 0);
1858 cmd
->init_task_tag
= hdr
->itt
;
1859 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
1860 cmd
->cmd_sn
= be32_to_cpu(hdr
->cmdsn
);
1861 cmd
->exp_stat_sn
= be32_to_cpu(hdr
->exp_statsn
);
1862 se_tmr
= cmd
->se_cmd
.se_tmr_req
;
1863 tmr_req
= cmd
->tmr_req
;
1865 * Locate the struct se_lun for all TMRs not related to ERL=2 TASK_REASSIGN
1867 if (function
!= ISCSI_TM_FUNC_TASK_REASSIGN
) {
1868 ret
= transport_lookup_tmr_lun(&cmd
->se_cmd
,
1869 scsilun_to_int(&hdr
->lun
));
1871 se_tmr
->response
= ISCSI_TMF_RSP_NO_LUN
;
1877 case ISCSI_TM_FUNC_ABORT_TASK
:
1878 se_tmr
->response
= iscsit_tmr_abort_task(cmd
, buf
);
1879 if (se_tmr
->response
)
1882 case ISCSI_TM_FUNC_ABORT_TASK_SET
:
1883 case ISCSI_TM_FUNC_CLEAR_ACA
:
1884 case ISCSI_TM_FUNC_CLEAR_TASK_SET
:
1885 case ISCSI_TM_FUNC_LOGICAL_UNIT_RESET
:
1887 case ISCSI_TM_FUNC_TARGET_WARM_RESET
:
1888 if (iscsit_tmr_task_warm_reset(conn
, tmr_req
, buf
) < 0) {
1889 se_tmr
->response
= ISCSI_TMF_RSP_AUTH_FAILED
;
1893 case ISCSI_TM_FUNC_TARGET_COLD_RESET
:
1894 if (iscsit_tmr_task_cold_reset(conn
, tmr_req
, buf
) < 0) {
1895 se_tmr
->response
= ISCSI_TMF_RSP_AUTH_FAILED
;
1899 case ISCSI_TM_FUNC_TASK_REASSIGN
:
1900 se_tmr
->response
= iscsit_tmr_task_reassign(cmd
, buf
);
1902 * Perform sanity checks on the ExpDataSN only if the
1903 * TASK_REASSIGN was successful.
1905 if (se_tmr
->response
)
1908 if (iscsit_check_task_reassign_expdatasn(tmr_req
, conn
) < 0)
1909 return iscsit_add_reject_cmd(cmd
,
1910 ISCSI_REASON_BOOKMARK_INVALID
, buf
);
1913 pr_err("Unknown TMR function: 0x%02x, protocol"
1914 " error.\n", function
);
1915 se_tmr
->response
= ISCSI_TMF_RSP_NOT_SUPPORTED
;
1919 if ((function
!= ISCSI_TM_FUNC_TASK_REASSIGN
) &&
1920 (se_tmr
->response
== ISCSI_TMF_RSP_COMPLETE
))
1921 se_tmr
->call_transport
= 1;
1923 spin_lock_bh(&conn
->cmd_lock
);
1924 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
1925 spin_unlock_bh(&conn
->cmd_lock
);
1927 if (!(hdr
->opcode
& ISCSI_OP_IMMEDIATE
)) {
1928 int cmdsn_ret
= iscsit_sequence_cmd(conn
, cmd
, buf
, hdr
->cmdsn
);
1929 if (cmdsn_ret
== CMDSN_HIGHER_THAN_EXP
)
1930 out_of_order_cmdsn
= 1;
1931 else if (cmdsn_ret
== CMDSN_LOWER_THAN_EXP
)
1933 else if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
1936 iscsit_ack_from_expstatsn(conn
, be32_to_cpu(hdr
->exp_statsn
));
1938 if (out_of_order_cmdsn
|| !(hdr
->opcode
& ISCSI_OP_IMMEDIATE
))
1941 * Found the referenced task, send to transport for processing.
1943 if (se_tmr
->call_transport
)
1944 return transport_generic_handle_tmr(&cmd
->se_cmd
);
1947 * Could not find the referenced LUN, task, or Task Management
1948 * command not authorized or supported. Change state and
1949 * let the tx_thread send the response.
1951 * For connection recovery, this is also the default action for
1952 * TMR TASK_REASSIGN.
1955 pr_debug("Handle TMR, using sess_ref=true check\n");
1956 target_put_sess_cmd(&cmd
->se_cmd
);
1959 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
1962 EXPORT_SYMBOL(iscsit_handle_task_mgt_cmd
);
1964 /* #warning FIXME: Support Text Command parameters besides SendTargets */
1966 iscsit_setup_text_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
1967 struct iscsi_text
*hdr
)
1969 u32 payload_length
= ntoh24(hdr
->dlength
);
1971 if (payload_length
> conn
->conn_ops
->MaxXmitDataSegmentLength
) {
1972 pr_err("Unable to accept text parameter length: %u"
1973 "greater than MaxXmitDataSegmentLength %u.\n",
1974 payload_length
, conn
->conn_ops
->MaxXmitDataSegmentLength
);
1975 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
,
1976 (unsigned char *)hdr
);
1979 if (!(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
) ||
1980 (hdr
->flags
& ISCSI_FLAG_TEXT_CONTINUE
)) {
1981 pr_err("Multi sequence text commands currently not supported\n");
1982 return iscsit_reject_cmd(cmd
, ISCSI_REASON_CMD_NOT_SUPPORTED
,
1983 (unsigned char *)hdr
);
1986 pr_debug("Got Text Request: ITT: 0x%08x, CmdSN: 0x%08x,"
1987 " ExpStatSN: 0x%08x, Length: %u\n", hdr
->itt
, hdr
->cmdsn
,
1988 hdr
->exp_statsn
, payload_length
);
1990 cmd
->iscsi_opcode
= ISCSI_OP_TEXT
;
1991 cmd
->i_state
= ISTATE_SEND_TEXTRSP
;
1992 cmd
->immediate_cmd
= ((hdr
->opcode
& ISCSI_OP_IMMEDIATE
) ? 1 : 0);
1993 conn
->sess
->init_task_tag
= cmd
->init_task_tag
= hdr
->itt
;
1994 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
1995 cmd
->cmd_sn
= be32_to_cpu(hdr
->cmdsn
);
1996 cmd
->exp_stat_sn
= be32_to_cpu(hdr
->exp_statsn
);
1997 cmd
->data_direction
= DMA_NONE
;
1998 cmd
->text_in_ptr
= NULL
;
2002 EXPORT_SYMBOL(iscsit_setup_text_cmd
);
2005 iscsit_process_text_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
2006 struct iscsi_text
*hdr
)
2008 unsigned char *text_in
= cmd
->text_in_ptr
, *text_ptr
;
2012 cmd
->targ_xfer_tag
= be32_to_cpu(hdr
->ttt
);
2013 if (cmd
->targ_xfer_tag
== 0xFFFFFFFF) {
2014 pr_err("Unable to locate text_in buffer for sendtargets"
2018 goto empty_sendtargets
;
2020 if (strncmp("SendTargets", text_in
, 11) != 0) {
2021 pr_err("Received Text Data that is not"
2022 " SendTargets, cannot continue.\n");
2025 text_ptr
= strchr(text_in
, '=');
2027 pr_err("No \"=\" separator found in Text Data,"
2028 " cannot continue.\n");
2031 if (!strncmp("=All", text_ptr
, 4)) {
2032 cmd
->cmd_flags
|= ICF_SENDTARGETS_ALL
;
2033 } else if (!strncmp("=iqn.", text_ptr
, 5) ||
2034 !strncmp("=eui.", text_ptr
, 5)) {
2035 cmd
->cmd_flags
|= ICF_SENDTARGETS_SINGLE
;
2037 pr_err("Unable to locate valid SendTargets=%s value\n", text_ptr
);
2041 spin_lock_bh(&conn
->cmd_lock
);
2042 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
2043 spin_unlock_bh(&conn
->cmd_lock
);
2046 iscsit_ack_from_expstatsn(conn
, be32_to_cpu(hdr
->exp_statsn
));
2048 if (!(hdr
->opcode
& ISCSI_OP_IMMEDIATE
)) {
2049 cmdsn_ret
= iscsit_sequence_cmd(conn
, cmd
,
2050 (unsigned char *)hdr
, hdr
->cmdsn
);
2051 if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
2057 return iscsit_execute_cmd(cmd
, 0);
2060 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
,
2061 (unsigned char *)hdr
);
2063 EXPORT_SYMBOL(iscsit_process_text_cmd
);
2066 iscsit_handle_text_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
2069 struct iscsi_text
*hdr
= (struct iscsi_text
*)buf
;
2070 char *text_in
= NULL
;
2071 u32 payload_length
= ntoh24(hdr
->dlength
);
2074 rc
= iscsit_setup_text_cmd(conn
, cmd
, hdr
);
2078 rx_size
= payload_length
;
2079 if (payload_length
) {
2080 u32 checksum
= 0, data_crc
= 0;
2081 u32 padding
= 0, pad_bytes
= 0;
2082 int niov
= 0, rx_got
;
2085 text_in
= kzalloc(payload_length
, GFP_KERNEL
);
2087 pr_err("Unable to allocate memory for"
2088 " incoming text parameters\n");
2091 cmd
->text_in_ptr
= text_in
;
2093 memset(iov
, 0, 3 * sizeof(struct kvec
));
2094 iov
[niov
].iov_base
= text_in
;
2095 iov
[niov
++].iov_len
= payload_length
;
2097 padding
= ((-payload_length
) & 3);
2099 iov
[niov
].iov_base
= &pad_bytes
;
2100 iov
[niov
++].iov_len
= padding
;
2102 pr_debug("Receiving %u additional bytes"
2103 " for padding.\n", padding
);
2105 if (conn
->conn_ops
->DataDigest
) {
2106 iov
[niov
].iov_base
= &checksum
;
2107 iov
[niov
++].iov_len
= ISCSI_CRC_LEN
;
2108 rx_size
+= ISCSI_CRC_LEN
;
2111 rx_got
= rx_data(conn
, &iov
[0], niov
, rx_size
);
2112 if (rx_got
!= rx_size
)
2115 if (conn
->conn_ops
->DataDigest
) {
2116 iscsit_do_crypto_hash_buf(&conn
->conn_rx_hash
,
2117 text_in
, payload_length
,
2118 padding
, (u8
*)&pad_bytes
,
2121 if (checksum
!= data_crc
) {
2122 pr_err("Text data CRC32C DataDigest"
2123 " 0x%08x does not match computed"
2124 " 0x%08x\n", checksum
, data_crc
);
2125 if (!conn
->sess
->sess_ops
->ErrorRecoveryLevel
) {
2126 pr_err("Unable to recover from"
2127 " Text Data digest failure while in"
2132 * Silently drop this PDU and let the
2133 * initiator plug the CmdSN gap.
2135 pr_debug("Dropping Text"
2136 " Command CmdSN: 0x%08x due to"
2137 " DataCRC error.\n", hdr
->cmdsn
);
2142 pr_debug("Got CRC32C DataDigest"
2143 " 0x%08x for %u bytes of text data.\n",
2144 checksum
, payload_length
);
2147 text_in
[payload_length
- 1] = '\0';
2148 pr_debug("Successfully read %d bytes of text"
2149 " data.\n", payload_length
);
2152 return iscsit_process_text_cmd(conn
, cmd
, hdr
);
2155 kfree(cmd
->text_in_ptr
);
2156 cmd
->text_in_ptr
= NULL
;
2157 return iscsit_reject_cmd(cmd
, ISCSI_REASON_PROTOCOL_ERROR
, buf
);
2160 int iscsit_logout_closesession(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2162 struct iscsi_conn
*conn_p
;
2163 struct iscsi_session
*sess
= conn
->sess
;
2165 pr_debug("Received logout request CLOSESESSION on CID: %hu"
2166 " for SID: %u.\n", conn
->cid
, conn
->sess
->sid
);
2168 atomic_set(&sess
->session_logout
, 1);
2169 atomic_set(&conn
->conn_logout_remove
, 1);
2170 conn
->conn_logout_reason
= ISCSI_LOGOUT_REASON_CLOSE_SESSION
;
2172 iscsit_inc_conn_usage_count(conn
);
2173 iscsit_inc_session_usage_count(sess
);
2175 spin_lock_bh(&sess
->conn_lock
);
2176 list_for_each_entry(conn_p
, &sess
->sess_conn_list
, conn_list
) {
2177 if (conn_p
->conn_state
!= TARG_CONN_STATE_LOGGED_IN
)
2180 pr_debug("Moving to TARG_CONN_STATE_IN_LOGOUT.\n");
2181 conn_p
->conn_state
= TARG_CONN_STATE_IN_LOGOUT
;
2183 spin_unlock_bh(&sess
->conn_lock
);
2185 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
2190 int iscsit_logout_closeconnection(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2192 struct iscsi_conn
*l_conn
;
2193 struct iscsi_session
*sess
= conn
->sess
;
2195 pr_debug("Received logout request CLOSECONNECTION for CID:"
2196 " %hu on CID: %hu.\n", cmd
->logout_cid
, conn
->cid
);
2199 * A Logout Request with a CLOSECONNECTION reason code for a CID
2200 * can arrive on a connection with a differing CID.
2202 if (conn
->cid
== cmd
->logout_cid
) {
2203 spin_lock_bh(&conn
->state_lock
);
2204 pr_debug("Moving to TARG_CONN_STATE_IN_LOGOUT.\n");
2205 conn
->conn_state
= TARG_CONN_STATE_IN_LOGOUT
;
2207 atomic_set(&conn
->conn_logout_remove
, 1);
2208 conn
->conn_logout_reason
= ISCSI_LOGOUT_REASON_CLOSE_CONNECTION
;
2209 iscsit_inc_conn_usage_count(conn
);
2211 spin_unlock_bh(&conn
->state_lock
);
2214 * Handle all different cid CLOSECONNECTION requests in
2215 * iscsit_logout_post_handler_diffcid() as to give enough
2216 * time for any non immediate command's CmdSN to be
2217 * acknowledged on the connection in question.
2219 * Here we simply make sure the CID is still around.
2221 l_conn
= iscsit_get_conn_from_cid(sess
,
2224 cmd
->logout_response
= ISCSI_LOGOUT_CID_NOT_FOUND
;
2225 iscsit_add_cmd_to_response_queue(cmd
, conn
,
2230 iscsit_dec_conn_usage_count(l_conn
);
2233 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
2238 int iscsit_logout_removeconnforrecovery(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2240 struct iscsi_session
*sess
= conn
->sess
;
2242 pr_debug("Received explicit REMOVECONNFORRECOVERY logout for"
2243 " CID: %hu on CID: %hu.\n", cmd
->logout_cid
, conn
->cid
);
2245 if (sess
->sess_ops
->ErrorRecoveryLevel
!= 2) {
2246 pr_err("Received Logout Request REMOVECONNFORRECOVERY"
2247 " while ERL!=2.\n");
2248 cmd
->logout_response
= ISCSI_LOGOUT_RECOVERY_UNSUPPORTED
;
2249 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
2253 if (conn
->cid
== cmd
->logout_cid
) {
2254 pr_err("Received Logout Request REMOVECONNFORRECOVERY"
2255 " with CID: %hu on CID: %hu, implementation error.\n",
2256 cmd
->logout_cid
, conn
->cid
);
2257 cmd
->logout_response
= ISCSI_LOGOUT_CLEANUP_FAILED
;
2258 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
2262 iscsit_add_cmd_to_response_queue(cmd
, conn
, cmd
->i_state
);
2268 iscsit_handle_logout_cmd(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
,
2271 int cmdsn_ret
, logout_remove
= 0;
2273 struct iscsi_logout
*hdr
;
2274 struct iscsi_tiqn
*tiqn
= iscsit_snmp_get_tiqn(conn
);
2276 hdr
= (struct iscsi_logout
*) buf
;
2277 reason_code
= (hdr
->flags
& 0x7f);
2280 spin_lock(&tiqn
->logout_stats
.lock
);
2281 if (reason_code
== ISCSI_LOGOUT_REASON_CLOSE_SESSION
)
2282 tiqn
->logout_stats
.normal_logouts
++;
2284 tiqn
->logout_stats
.abnormal_logouts
++;
2285 spin_unlock(&tiqn
->logout_stats
.lock
);
2288 pr_debug("Got Logout Request ITT: 0x%08x CmdSN: 0x%08x"
2289 " ExpStatSN: 0x%08x Reason: 0x%02x CID: %hu on CID: %hu\n",
2290 hdr
->itt
, hdr
->cmdsn
, hdr
->exp_statsn
, reason_code
,
2291 hdr
->cid
, conn
->cid
);
2293 if (conn
->conn_state
!= TARG_CONN_STATE_LOGGED_IN
) {
2294 pr_err("Received logout request on connection that"
2295 " is not in logged in state, ignoring request.\n");
2296 iscsit_free_cmd(cmd
, false);
2300 cmd
->iscsi_opcode
= ISCSI_OP_LOGOUT
;
2301 cmd
->i_state
= ISTATE_SEND_LOGOUTRSP
;
2302 cmd
->immediate_cmd
= ((hdr
->opcode
& ISCSI_OP_IMMEDIATE
) ? 1 : 0);
2303 conn
->sess
->init_task_tag
= cmd
->init_task_tag
= hdr
->itt
;
2304 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
2305 cmd
->cmd_sn
= be32_to_cpu(hdr
->cmdsn
);
2306 cmd
->exp_stat_sn
= be32_to_cpu(hdr
->exp_statsn
);
2307 cmd
->logout_cid
= be16_to_cpu(hdr
->cid
);
2308 cmd
->logout_reason
= reason_code
;
2309 cmd
->data_direction
= DMA_NONE
;
2312 * We need to sleep in these cases (by returning 1) until the Logout
2313 * Response gets sent in the tx thread.
2315 if ((reason_code
== ISCSI_LOGOUT_REASON_CLOSE_SESSION
) ||
2316 ((reason_code
== ISCSI_LOGOUT_REASON_CLOSE_CONNECTION
) &&
2317 be16_to_cpu(hdr
->cid
) == conn
->cid
))
2320 spin_lock_bh(&conn
->cmd_lock
);
2321 list_add_tail(&cmd
->i_conn_node
, &conn
->conn_cmd_list
);
2322 spin_unlock_bh(&conn
->cmd_lock
);
2324 if (reason_code
!= ISCSI_LOGOUT_REASON_RECOVERY
)
2325 iscsit_ack_from_expstatsn(conn
, be32_to_cpu(hdr
->exp_statsn
));
2328 * Immediate commands are executed, well, immediately.
2329 * Non-Immediate Logout Commands are executed in CmdSN order.
2331 if (cmd
->immediate_cmd
) {
2332 int ret
= iscsit_execute_cmd(cmd
, 0);
2337 cmdsn_ret
= iscsit_sequence_cmd(conn
, cmd
, buf
, hdr
->cmdsn
);
2338 if (cmdsn_ret
== CMDSN_LOWER_THAN_EXP
)
2340 else if (cmdsn_ret
== CMDSN_ERROR_CANNOT_RECOVER
)
2344 return logout_remove
;
2346 EXPORT_SYMBOL(iscsit_handle_logout_cmd
);
2348 static int iscsit_handle_snack(
2349 struct iscsi_conn
*conn
,
2352 struct iscsi_snack
*hdr
;
2354 hdr
= (struct iscsi_snack
*) buf
;
2355 hdr
->flags
&= ~ISCSI_FLAG_CMD_FINAL
;
2357 pr_debug("Got ISCSI_INIT_SNACK, ITT: 0x%08x, ExpStatSN:"
2358 " 0x%08x, Type: 0x%02x, BegRun: 0x%08x, RunLength: 0x%08x,"
2359 " CID: %hu\n", hdr
->itt
, hdr
->exp_statsn
, hdr
->flags
,
2360 hdr
->begrun
, hdr
->runlength
, conn
->cid
);
2362 if (!conn
->sess
->sess_ops
->ErrorRecoveryLevel
) {
2363 pr_err("Initiator sent SNACK request while in"
2364 " ErrorRecoveryLevel=0.\n");
2365 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
2369 * SNACK_DATA and SNACK_R2T are both 0, so check which function to
2370 * call from inside iscsi_send_recovery_datain_or_r2t().
2372 switch (hdr
->flags
& ISCSI_FLAG_SNACK_TYPE_MASK
) {
2374 return iscsit_handle_recovery_datain_or_r2t(conn
, buf
,
2376 be32_to_cpu(hdr
->ttt
),
2377 be32_to_cpu(hdr
->begrun
),
2378 be32_to_cpu(hdr
->runlength
));
2379 case ISCSI_FLAG_SNACK_TYPE_STATUS
:
2380 return iscsit_handle_status_snack(conn
, hdr
->itt
,
2381 be32_to_cpu(hdr
->ttt
),
2382 be32_to_cpu(hdr
->begrun
), be32_to_cpu(hdr
->runlength
));
2383 case ISCSI_FLAG_SNACK_TYPE_DATA_ACK
:
2384 return iscsit_handle_data_ack(conn
, be32_to_cpu(hdr
->ttt
),
2385 be32_to_cpu(hdr
->begrun
),
2386 be32_to_cpu(hdr
->runlength
));
2387 case ISCSI_FLAG_SNACK_TYPE_RDATA
:
2388 /* FIXME: Support R-Data SNACK */
2389 pr_err("R-Data SNACK Not Supported.\n");
2390 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
2393 pr_err("Unknown SNACK type 0x%02x, protocol"
2394 " error.\n", hdr
->flags
& 0x0f);
2395 return iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
2402 static void iscsit_rx_thread_wait_for_tcp(struct iscsi_conn
*conn
)
2404 if ((conn
->sock
->sk
->sk_shutdown
& SEND_SHUTDOWN
) ||
2405 (conn
->sock
->sk
->sk_shutdown
& RCV_SHUTDOWN
)) {
2406 wait_for_completion_interruptible_timeout(
2407 &conn
->rx_half_close_comp
,
2408 ISCSI_RX_THREAD_TCP_TIMEOUT
* HZ
);
2412 static int iscsit_handle_immediate_data(
2413 struct iscsi_cmd
*cmd
,
2414 struct iscsi_scsi_req
*hdr
,
2417 int iov_ret
, rx_got
= 0, rx_size
= 0;
2418 u32 checksum
, iov_count
= 0, padding
= 0;
2419 struct iscsi_conn
*conn
= cmd
->conn
;
2422 iov_ret
= iscsit_map_iovec(cmd
, cmd
->iov_data
, cmd
->write_data_done
, length
);
2424 return IMMEDIATE_DATA_CANNOT_RECOVER
;
2427 iov_count
= iov_ret
;
2428 iov
= &cmd
->iov_data
[0];
2430 padding
= ((-length
) & 3);
2432 iov
[iov_count
].iov_base
= cmd
->pad_bytes
;
2433 iov
[iov_count
++].iov_len
= padding
;
2437 if (conn
->conn_ops
->DataDigest
) {
2438 iov
[iov_count
].iov_base
= &checksum
;
2439 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
2440 rx_size
+= ISCSI_CRC_LEN
;
2443 rx_got
= rx_data(conn
, &cmd
->iov_data
[0], iov_count
, rx_size
);
2445 iscsit_unmap_iovec(cmd
);
2447 if (rx_got
!= rx_size
) {
2448 iscsit_rx_thread_wait_for_tcp(conn
);
2449 return IMMEDIATE_DATA_CANNOT_RECOVER
;
2452 if (conn
->conn_ops
->DataDigest
) {
2455 data_crc
= iscsit_do_crypto_hash_sg(&conn
->conn_rx_hash
, cmd
,
2456 cmd
->write_data_done
, length
, padding
,
2459 if (checksum
!= data_crc
) {
2460 pr_err("ImmediateData CRC32C DataDigest 0x%08x"
2461 " does not match computed 0x%08x\n", checksum
,
2464 if (!conn
->sess
->sess_ops
->ErrorRecoveryLevel
) {
2465 pr_err("Unable to recover from"
2466 " Immediate Data digest failure while"
2468 iscsit_reject_cmd(cmd
,
2469 ISCSI_REASON_DATA_DIGEST_ERROR
,
2470 (unsigned char *)hdr
);
2471 return IMMEDIATE_DATA_CANNOT_RECOVER
;
2473 iscsit_reject_cmd(cmd
,
2474 ISCSI_REASON_DATA_DIGEST_ERROR
,
2475 (unsigned char *)hdr
);
2476 return IMMEDIATE_DATA_ERL1_CRC_FAILURE
;
2479 pr_debug("Got CRC32C DataDigest 0x%08x for"
2480 " %u bytes of Immediate Data\n", checksum
,
2485 cmd
->write_data_done
+= length
;
2487 if (cmd
->write_data_done
== cmd
->se_cmd
.data_length
) {
2488 spin_lock_bh(&cmd
->istate_lock
);
2489 cmd
->cmd_flags
|= ICF_GOT_LAST_DATAOUT
;
2490 cmd
->i_state
= ISTATE_RECEIVED_LAST_DATAOUT
;
2491 spin_unlock_bh(&cmd
->istate_lock
);
2494 return IMMEDIATE_DATA_NORMAL_OPERATION
;
2498 * Called with sess->conn_lock held.
2500 /* #warning iscsi_build_conn_drop_async_message() only sends out on connections
2501 with active network interface */
2502 static void iscsit_build_conn_drop_async_message(struct iscsi_conn
*conn
)
2504 struct iscsi_cmd
*cmd
;
2505 struct iscsi_conn
*conn_p
;
2509 * Only send a Asynchronous Message on connections whos network
2510 * interface is still functional.
2512 list_for_each_entry(conn_p
, &conn
->sess
->sess_conn_list
, conn_list
) {
2513 if (conn_p
->conn_state
== TARG_CONN_STATE_LOGGED_IN
) {
2514 iscsit_inc_conn_usage_count(conn_p
);
2523 cmd
= iscsit_allocate_cmd(conn_p
, TASK_RUNNING
);
2525 iscsit_dec_conn_usage_count(conn_p
);
2529 cmd
->logout_cid
= conn
->cid
;
2530 cmd
->iscsi_opcode
= ISCSI_OP_ASYNC_EVENT
;
2531 cmd
->i_state
= ISTATE_SEND_ASYNCMSG
;
2533 spin_lock_bh(&conn_p
->cmd_lock
);
2534 list_add_tail(&cmd
->i_conn_node
, &conn_p
->conn_cmd_list
);
2535 spin_unlock_bh(&conn_p
->cmd_lock
);
2537 iscsit_add_cmd_to_response_queue(cmd
, conn_p
, cmd
->i_state
);
2538 iscsit_dec_conn_usage_count(conn_p
);
2541 static int iscsit_send_conn_drop_async_message(
2542 struct iscsi_cmd
*cmd
,
2543 struct iscsi_conn
*conn
)
2545 struct iscsi_async
*hdr
;
2547 cmd
->tx_size
= ISCSI_HDR_LEN
;
2548 cmd
->iscsi_opcode
= ISCSI_OP_ASYNC_EVENT
;
2550 hdr
= (struct iscsi_async
*) cmd
->pdu
;
2551 hdr
->opcode
= ISCSI_OP_ASYNC_EVENT
;
2552 hdr
->flags
= ISCSI_FLAG_CMD_FINAL
;
2553 cmd
->init_task_tag
= RESERVED_ITT
;
2554 cmd
->targ_xfer_tag
= 0xFFFFFFFF;
2555 put_unaligned_be64(0xFFFFFFFFFFFFFFFFULL
, &hdr
->rsvd4
[0]);
2556 cmd
->stat_sn
= conn
->stat_sn
++;
2557 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
2558 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
2559 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
2560 hdr
->async_event
= ISCSI_ASYNC_MSG_DROPPING_CONNECTION
;
2561 hdr
->param1
= cpu_to_be16(cmd
->logout_cid
);
2562 hdr
->param2
= cpu_to_be16(conn
->sess
->sess_ops
->DefaultTime2Wait
);
2563 hdr
->param3
= cpu_to_be16(conn
->sess
->sess_ops
->DefaultTime2Retain
);
2565 if (conn
->conn_ops
->HeaderDigest
) {
2566 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
2568 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
2569 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
2571 cmd
->tx_size
+= ISCSI_CRC_LEN
;
2572 pr_debug("Attaching CRC32C HeaderDigest to"
2573 " Async Message 0x%08x\n", *header_digest
);
2576 cmd
->iov_misc
[0].iov_base
= cmd
->pdu
;
2577 cmd
->iov_misc
[0].iov_len
= cmd
->tx_size
;
2578 cmd
->iov_misc_count
= 1;
2580 pr_debug("Sending Connection Dropped Async Message StatSN:"
2581 " 0x%08x, for CID: %hu on CID: %hu\n", cmd
->stat_sn
,
2582 cmd
->logout_cid
, conn
->cid
);
2586 static void iscsit_tx_thread_wait_for_tcp(struct iscsi_conn
*conn
)
2588 if ((conn
->sock
->sk
->sk_shutdown
& SEND_SHUTDOWN
) ||
2589 (conn
->sock
->sk
->sk_shutdown
& RCV_SHUTDOWN
)) {
2590 wait_for_completion_interruptible_timeout(
2591 &conn
->tx_half_close_comp
,
2592 ISCSI_TX_THREAD_TCP_TIMEOUT
* HZ
);
2597 iscsit_build_datain_pdu(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
2598 struct iscsi_datain
*datain
, struct iscsi_data_rsp
*hdr
,
2601 hdr
->opcode
= ISCSI_OP_SCSI_DATA_IN
;
2602 hdr
->flags
= datain
->flags
;
2603 if (hdr
->flags
& ISCSI_FLAG_DATA_STATUS
) {
2604 if (cmd
->se_cmd
.se_cmd_flags
& SCF_OVERFLOW_BIT
) {
2605 hdr
->flags
|= ISCSI_FLAG_DATA_OVERFLOW
;
2606 hdr
->residual_count
= cpu_to_be32(cmd
->se_cmd
.residual_count
);
2607 } else if (cmd
->se_cmd
.se_cmd_flags
& SCF_UNDERFLOW_BIT
) {
2608 hdr
->flags
|= ISCSI_FLAG_DATA_UNDERFLOW
;
2609 hdr
->residual_count
= cpu_to_be32(cmd
->se_cmd
.residual_count
);
2612 hton24(hdr
->dlength
, datain
->length
);
2613 if (hdr
->flags
& ISCSI_FLAG_DATA_ACK
)
2614 int_to_scsilun(cmd
->se_cmd
.orig_fe_lun
,
2615 (struct scsi_lun
*)&hdr
->lun
);
2617 put_unaligned_le64(0xFFFFFFFFFFFFFFFFULL
, &hdr
->lun
);
2619 hdr
->itt
= cmd
->init_task_tag
;
2621 if (hdr
->flags
& ISCSI_FLAG_DATA_ACK
)
2622 hdr
->ttt
= cpu_to_be32(cmd
->targ_xfer_tag
);
2624 hdr
->ttt
= cpu_to_be32(0xFFFFFFFF);
2626 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
2628 hdr
->statsn
= cpu_to_be32(0xFFFFFFFF);
2630 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
2631 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
2632 hdr
->datasn
= cpu_to_be32(datain
->data_sn
);
2633 hdr
->offset
= cpu_to_be32(datain
->offset
);
2635 pr_debug("Built DataIN ITT: 0x%08x, StatSN: 0x%08x,"
2636 " DataSN: 0x%08x, Offset: %u, Length: %u, CID: %hu\n",
2637 cmd
->init_task_tag
, ntohl(hdr
->statsn
), ntohl(hdr
->datasn
),
2638 ntohl(hdr
->offset
), datain
->length
, conn
->cid
);
2641 static int iscsit_send_datain(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2643 struct iscsi_data_rsp
*hdr
= (struct iscsi_data_rsp
*)&cmd
->pdu
[0];
2644 struct iscsi_datain datain
;
2645 struct iscsi_datain_req
*dr
;
2647 u32 iov_count
= 0, tx_size
= 0;
2648 int eodr
= 0, ret
, iov_ret
;
2649 bool set_statsn
= false;
2651 memset(&datain
, 0, sizeof(struct iscsi_datain
));
2652 dr
= iscsit_get_datain_values(cmd
, &datain
);
2654 pr_err("iscsit_get_datain_values failed for ITT: 0x%08x\n",
2655 cmd
->init_task_tag
);
2659 * Be paranoid and double check the logic for now.
2661 if ((datain
.offset
+ datain
.length
) > cmd
->se_cmd
.data_length
) {
2662 pr_err("Command ITT: 0x%08x, datain.offset: %u and"
2663 " datain.length: %u exceeds cmd->data_length: %u\n",
2664 cmd
->init_task_tag
, datain
.offset
, datain
.length
,
2665 cmd
->se_cmd
.data_length
);
2669 atomic_long_add(datain
.length
, &conn
->sess
->tx_data_octets
);
2671 * Special case for successfully execution w/ both DATAIN
2674 if ((datain
.flags
& ISCSI_FLAG_DATA_STATUS
) &&
2675 (cmd
->se_cmd
.se_cmd_flags
& SCF_TRANSPORT_TASK_SENSE
))
2676 datain
.flags
&= ~ISCSI_FLAG_DATA_STATUS
;
2678 if ((dr
->dr_complete
== DATAIN_COMPLETE_NORMAL
) ||
2679 (dr
->dr_complete
== DATAIN_COMPLETE_CONNECTION_RECOVERY
)) {
2680 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
2681 cmd
->stat_sn
= conn
->stat_sn
++;
2683 } else if (dr
->dr_complete
==
2684 DATAIN_COMPLETE_WITHIN_COMMAND_RECOVERY
)
2688 iscsit_build_datain_pdu(cmd
, conn
, &datain
, hdr
, set_statsn
);
2690 iov
= &cmd
->iov_data
[0];
2691 iov
[iov_count
].iov_base
= cmd
->pdu
;
2692 iov
[iov_count
++].iov_len
= ISCSI_HDR_LEN
;
2693 tx_size
+= ISCSI_HDR_LEN
;
2695 if (conn
->conn_ops
->HeaderDigest
) {
2696 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
2698 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, cmd
->pdu
,
2699 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
2701 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
2702 tx_size
+= ISCSI_CRC_LEN
;
2704 pr_debug("Attaching CRC32 HeaderDigest"
2705 " for DataIN PDU 0x%08x\n", *header_digest
);
2708 iov_ret
= iscsit_map_iovec(cmd
, &cmd
->iov_data
[1],
2709 datain
.offset
, datain
.length
);
2713 iov_count
+= iov_ret
;
2714 tx_size
+= datain
.length
;
2716 cmd
->padding
= ((-datain
.length
) & 3);
2718 iov
[iov_count
].iov_base
= cmd
->pad_bytes
;
2719 iov
[iov_count
++].iov_len
= cmd
->padding
;
2720 tx_size
+= cmd
->padding
;
2722 pr_debug("Attaching %u padding bytes\n",
2725 if (conn
->conn_ops
->DataDigest
) {
2726 cmd
->data_crc
= iscsit_do_crypto_hash_sg(&conn
->conn_tx_hash
, cmd
,
2727 datain
.offset
, datain
.length
, cmd
->padding
, cmd
->pad_bytes
);
2729 iov
[iov_count
].iov_base
= &cmd
->data_crc
;
2730 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
2731 tx_size
+= ISCSI_CRC_LEN
;
2733 pr_debug("Attached CRC32C DataDigest %d bytes, crc"
2734 " 0x%08x\n", datain
.length
+cmd
->padding
, cmd
->data_crc
);
2737 cmd
->iov_data_count
= iov_count
;
2738 cmd
->tx_size
= tx_size
;
2740 ret
= iscsit_fe_sendpage_sg(cmd
, conn
);
2742 iscsit_unmap_iovec(cmd
);
2745 iscsit_tx_thread_wait_for_tcp(conn
);
2749 if (dr
->dr_complete
) {
2750 eodr
= (cmd
->se_cmd
.se_cmd_flags
& SCF_TRANSPORT_TASK_SENSE
) ?
2752 iscsit_free_datain_req(cmd
, dr
);
2759 iscsit_build_logout_rsp(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
2760 struct iscsi_logout_rsp
*hdr
)
2762 struct iscsi_conn
*logout_conn
= NULL
;
2763 struct iscsi_conn_recovery
*cr
= NULL
;
2764 struct iscsi_session
*sess
= conn
->sess
;
2766 * The actual shutting down of Sessions and/or Connections
2767 * for CLOSESESSION and CLOSECONNECTION Logout Requests
2768 * is done in scsi_logout_post_handler().
2770 switch (cmd
->logout_reason
) {
2771 case ISCSI_LOGOUT_REASON_CLOSE_SESSION
:
2772 pr_debug("iSCSI session logout successful, setting"
2773 " logout response to ISCSI_LOGOUT_SUCCESS.\n");
2774 cmd
->logout_response
= ISCSI_LOGOUT_SUCCESS
;
2776 case ISCSI_LOGOUT_REASON_CLOSE_CONNECTION
:
2777 if (cmd
->logout_response
== ISCSI_LOGOUT_CID_NOT_FOUND
)
2780 * For CLOSECONNECTION logout requests carrying
2781 * a matching logout CID -> local CID, the reference
2782 * for the local CID will have been incremented in
2783 * iscsi_logout_closeconnection().
2785 * For CLOSECONNECTION logout requests carrying
2786 * a different CID than the connection it arrived
2787 * on, the connection responding to cmd->logout_cid
2788 * is stopped in iscsit_logout_post_handler_diffcid().
2791 pr_debug("iSCSI CID: %hu logout on CID: %hu"
2792 " successful.\n", cmd
->logout_cid
, conn
->cid
);
2793 cmd
->logout_response
= ISCSI_LOGOUT_SUCCESS
;
2795 case ISCSI_LOGOUT_REASON_RECOVERY
:
2796 if ((cmd
->logout_response
== ISCSI_LOGOUT_RECOVERY_UNSUPPORTED
) ||
2797 (cmd
->logout_response
== ISCSI_LOGOUT_CLEANUP_FAILED
))
2800 * If the connection is still active from our point of view
2801 * force connection recovery to occur.
2803 logout_conn
= iscsit_get_conn_from_cid_rcfr(sess
,
2806 iscsit_connection_reinstatement_rcfr(logout_conn
);
2807 iscsit_dec_conn_usage_count(logout_conn
);
2810 cr
= iscsit_get_inactive_connection_recovery_entry(
2811 conn
->sess
, cmd
->logout_cid
);
2813 pr_err("Unable to locate CID: %hu for"
2814 " REMOVECONNFORRECOVERY Logout Request.\n",
2816 cmd
->logout_response
= ISCSI_LOGOUT_CID_NOT_FOUND
;
2820 iscsit_discard_cr_cmds_by_expstatsn(cr
, cmd
->exp_stat_sn
);
2822 pr_debug("iSCSI REMOVECONNFORRECOVERY logout"
2823 " for recovery for CID: %hu on CID: %hu successful.\n",
2824 cmd
->logout_cid
, conn
->cid
);
2825 cmd
->logout_response
= ISCSI_LOGOUT_SUCCESS
;
2828 pr_err("Unknown cmd->logout_reason: 0x%02x\n",
2829 cmd
->logout_reason
);
2833 hdr
->opcode
= ISCSI_OP_LOGOUT_RSP
;
2834 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
2835 hdr
->response
= cmd
->logout_response
;
2836 hdr
->itt
= cmd
->init_task_tag
;
2837 cmd
->stat_sn
= conn
->stat_sn
++;
2838 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
2840 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
2841 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
2842 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
2844 pr_debug("Built Logout Response ITT: 0x%08x StatSN:"
2845 " 0x%08x Response: 0x%02x CID: %hu on CID: %hu\n",
2846 cmd
->init_task_tag
, cmd
->stat_sn
, hdr
->response
,
2847 cmd
->logout_cid
, conn
->cid
);
2851 EXPORT_SYMBOL(iscsit_build_logout_rsp
);
2854 iscsit_send_logout(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2857 int niov
= 0, tx_size
, rc
;
2859 rc
= iscsit_build_logout_rsp(cmd
, conn
,
2860 (struct iscsi_logout_rsp
*)&cmd
->pdu
[0]);
2864 tx_size
= ISCSI_HDR_LEN
;
2865 iov
= &cmd
->iov_misc
[0];
2866 iov
[niov
].iov_base
= cmd
->pdu
;
2867 iov
[niov
++].iov_len
= ISCSI_HDR_LEN
;
2869 if (conn
->conn_ops
->HeaderDigest
) {
2870 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
2872 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, &cmd
->pdu
[0],
2873 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
2875 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
2876 tx_size
+= ISCSI_CRC_LEN
;
2877 pr_debug("Attaching CRC32C HeaderDigest to"
2878 " Logout Response 0x%08x\n", *header_digest
);
2880 cmd
->iov_misc_count
= niov
;
2881 cmd
->tx_size
= tx_size
;
2887 iscsit_build_nopin_rsp(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
2888 struct iscsi_nopin
*hdr
, bool nopout_response
)
2890 hdr
->opcode
= ISCSI_OP_NOOP_IN
;
2891 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
2892 hton24(hdr
->dlength
, cmd
->buf_ptr_size
);
2893 if (nopout_response
)
2894 put_unaligned_le64(0xFFFFFFFFFFFFFFFFULL
, &hdr
->lun
);
2895 hdr
->itt
= cmd
->init_task_tag
;
2896 hdr
->ttt
= cpu_to_be32(cmd
->targ_xfer_tag
);
2897 cmd
->stat_sn
= (nopout_response
) ? conn
->stat_sn
++ :
2899 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
2901 if (nopout_response
)
2902 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
2904 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
2905 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
2907 pr_debug("Built NOPIN %s Response ITT: 0x%08x, TTT: 0x%08x,"
2908 " StatSN: 0x%08x, Length %u\n", (nopout_response
) ?
2909 "Solicitied" : "Unsolicitied", cmd
->init_task_tag
,
2910 cmd
->targ_xfer_tag
, cmd
->stat_sn
, cmd
->buf_ptr_size
);
2912 EXPORT_SYMBOL(iscsit_build_nopin_rsp
);
2915 * Unsolicited NOPIN, either requesting a response or not.
2917 static int iscsit_send_unsolicited_nopin(
2918 struct iscsi_cmd
*cmd
,
2919 struct iscsi_conn
*conn
,
2922 struct iscsi_nopin
*hdr
= (struct iscsi_nopin
*)&cmd
->pdu
[0];
2923 int tx_size
= ISCSI_HDR_LEN
, ret
;
2925 iscsit_build_nopin_rsp(cmd
, conn
, hdr
, false);
2927 if (conn
->conn_ops
->HeaderDigest
) {
2928 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
2930 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
2931 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
2933 tx_size
+= ISCSI_CRC_LEN
;
2934 pr_debug("Attaching CRC32C HeaderDigest to"
2935 " NopIN 0x%08x\n", *header_digest
);
2938 cmd
->iov_misc
[0].iov_base
= cmd
->pdu
;
2939 cmd
->iov_misc
[0].iov_len
= tx_size
;
2940 cmd
->iov_misc_count
= 1;
2941 cmd
->tx_size
= tx_size
;
2943 pr_debug("Sending Unsolicited NOPIN TTT: 0x%08x StatSN:"
2944 " 0x%08x CID: %hu\n", hdr
->ttt
, cmd
->stat_sn
, conn
->cid
);
2946 ret
= iscsit_send_tx_data(cmd
, conn
, 1);
2948 iscsit_tx_thread_wait_for_tcp(conn
);
2952 spin_lock_bh(&cmd
->istate_lock
);
2953 cmd
->i_state
= want_response
?
2954 ISTATE_SENT_NOPIN_WANT_RESPONSE
: ISTATE_SENT_STATUS
;
2955 spin_unlock_bh(&cmd
->istate_lock
);
2961 iscsit_send_nopin(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
2963 struct iscsi_nopin
*hdr
= (struct iscsi_nopin
*)&cmd
->pdu
[0];
2966 int niov
= 0, tx_size
;
2968 iscsit_build_nopin_rsp(cmd
, conn
, hdr
, true);
2970 tx_size
= ISCSI_HDR_LEN
;
2971 iov
= &cmd
->iov_misc
[0];
2972 iov
[niov
].iov_base
= cmd
->pdu
;
2973 iov
[niov
++].iov_len
= ISCSI_HDR_LEN
;
2975 if (conn
->conn_ops
->HeaderDigest
) {
2976 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
2978 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
2979 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
2981 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
2982 tx_size
+= ISCSI_CRC_LEN
;
2983 pr_debug("Attaching CRC32C HeaderDigest"
2984 " to NopIn 0x%08x\n", *header_digest
);
2988 * NOPOUT Ping Data is attached to struct iscsi_cmd->buf_ptr.
2989 * NOPOUT DataSegmentLength is at struct iscsi_cmd->buf_ptr_size.
2991 if (cmd
->buf_ptr_size
) {
2992 iov
[niov
].iov_base
= cmd
->buf_ptr
;
2993 iov
[niov
++].iov_len
= cmd
->buf_ptr_size
;
2994 tx_size
+= cmd
->buf_ptr_size
;
2996 pr_debug("Echoing back %u bytes of ping"
2997 " data.\n", cmd
->buf_ptr_size
);
2999 padding
= ((-cmd
->buf_ptr_size
) & 3);
3001 iov
[niov
].iov_base
= &cmd
->pad_bytes
;
3002 iov
[niov
++].iov_len
= padding
;
3004 pr_debug("Attaching %u additional"
3005 " padding bytes.\n", padding
);
3007 if (conn
->conn_ops
->DataDigest
) {
3008 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
,
3009 cmd
->buf_ptr
, cmd
->buf_ptr_size
,
3010 padding
, (u8
*)&cmd
->pad_bytes
,
3011 (u8
*)&cmd
->data_crc
);
3013 iov
[niov
].iov_base
= &cmd
->data_crc
;
3014 iov
[niov
++].iov_len
= ISCSI_CRC_LEN
;
3015 tx_size
+= ISCSI_CRC_LEN
;
3016 pr_debug("Attached DataDigest for %u"
3017 " bytes of ping data, CRC 0x%08x\n",
3018 cmd
->buf_ptr_size
, cmd
->data_crc
);
3022 cmd
->iov_misc_count
= niov
;
3023 cmd
->tx_size
= tx_size
;
3028 static int iscsit_send_r2t(
3029 struct iscsi_cmd
*cmd
,
3030 struct iscsi_conn
*conn
)
3033 struct iscsi_r2t
*r2t
;
3034 struct iscsi_r2t_rsp
*hdr
;
3037 r2t
= iscsit_get_r2t_from_list(cmd
);
3041 hdr
= (struct iscsi_r2t_rsp
*) cmd
->pdu
;
3042 memset(hdr
, 0, ISCSI_HDR_LEN
);
3043 hdr
->opcode
= ISCSI_OP_R2T
;
3044 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
3045 int_to_scsilun(cmd
->se_cmd
.orig_fe_lun
,
3046 (struct scsi_lun
*)&hdr
->lun
);
3047 hdr
->itt
= cmd
->init_task_tag
;
3048 r2t
->targ_xfer_tag
= session_get_next_ttt(conn
->sess
);
3049 hdr
->ttt
= cpu_to_be32(r2t
->targ_xfer_tag
);
3050 hdr
->statsn
= cpu_to_be32(conn
->stat_sn
);
3051 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
3052 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
3053 hdr
->r2tsn
= cpu_to_be32(r2t
->r2t_sn
);
3054 hdr
->data_offset
= cpu_to_be32(r2t
->offset
);
3055 hdr
->data_length
= cpu_to_be32(r2t
->xfer_len
);
3057 cmd
->iov_misc
[0].iov_base
= cmd
->pdu
;
3058 cmd
->iov_misc
[0].iov_len
= ISCSI_HDR_LEN
;
3059 tx_size
+= ISCSI_HDR_LEN
;
3061 if (conn
->conn_ops
->HeaderDigest
) {
3062 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
3064 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
3065 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
3067 cmd
->iov_misc
[0].iov_len
+= ISCSI_CRC_LEN
;
3068 tx_size
+= ISCSI_CRC_LEN
;
3069 pr_debug("Attaching CRC32 HeaderDigest for R2T"
3070 " PDU 0x%08x\n", *header_digest
);
3073 pr_debug("Built %sR2T, ITT: 0x%08x, TTT: 0x%08x, StatSN:"
3074 " 0x%08x, R2TSN: 0x%08x, Offset: %u, DDTL: %u, CID: %hu\n",
3075 (!r2t
->recovery_r2t
) ? "" : "Recovery ", cmd
->init_task_tag
,
3076 r2t
->targ_xfer_tag
, ntohl(hdr
->statsn
), r2t
->r2t_sn
,
3077 r2t
->offset
, r2t
->xfer_len
, conn
->cid
);
3079 cmd
->iov_misc_count
= 1;
3080 cmd
->tx_size
= tx_size
;
3082 spin_lock_bh(&cmd
->r2t_lock
);
3084 spin_unlock_bh(&cmd
->r2t_lock
);
3086 ret
= iscsit_send_tx_data(cmd
, conn
, 1);
3088 iscsit_tx_thread_wait_for_tcp(conn
);
3092 spin_lock_bh(&cmd
->dataout_timeout_lock
);
3093 iscsit_start_dataout_timer(cmd
, conn
);
3094 spin_unlock_bh(&cmd
->dataout_timeout_lock
);
3100 * @recovery: If called from iscsi_task_reassign_complete_write() for
3101 * connection recovery.
3103 int iscsit_build_r2ts_for_cmd(
3104 struct iscsi_conn
*conn
,
3105 struct iscsi_cmd
*cmd
,
3109 u32 offset
= 0, xfer_len
= 0;
3111 spin_lock_bh(&cmd
->r2t_lock
);
3112 if (cmd
->cmd_flags
& ICF_SENT_LAST_R2T
) {
3113 spin_unlock_bh(&cmd
->r2t_lock
);
3117 if (conn
->sess
->sess_ops
->DataSequenceInOrder
&&
3119 cmd
->r2t_offset
= max(cmd
->r2t_offset
, cmd
->write_data_done
);
3121 while (cmd
->outstanding_r2ts
< conn
->sess
->sess_ops
->MaxOutstandingR2T
) {
3122 if (conn
->sess
->sess_ops
->DataSequenceInOrder
) {
3123 offset
= cmd
->r2t_offset
;
3125 if (first_r2t
&& recovery
) {
3126 int new_data_end
= offset
+
3127 conn
->sess
->sess_ops
->MaxBurstLength
-
3128 cmd
->next_burst_len
;
3130 if (new_data_end
> cmd
->se_cmd
.data_length
)
3131 xfer_len
= cmd
->se_cmd
.data_length
- offset
;
3134 conn
->sess
->sess_ops
->MaxBurstLength
-
3135 cmd
->next_burst_len
;
3137 int new_data_end
= offset
+
3138 conn
->sess
->sess_ops
->MaxBurstLength
;
3140 if (new_data_end
> cmd
->se_cmd
.data_length
)
3141 xfer_len
= cmd
->se_cmd
.data_length
- offset
;
3143 xfer_len
= conn
->sess
->sess_ops
->MaxBurstLength
;
3145 cmd
->r2t_offset
+= xfer_len
;
3147 if (cmd
->r2t_offset
== cmd
->se_cmd
.data_length
)
3148 cmd
->cmd_flags
|= ICF_SENT_LAST_R2T
;
3150 struct iscsi_seq
*seq
;
3152 seq
= iscsit_get_seq_holder_for_r2t(cmd
);
3154 spin_unlock_bh(&cmd
->r2t_lock
);
3158 offset
= seq
->offset
;
3159 xfer_len
= seq
->xfer_len
;
3161 if (cmd
->seq_send_order
== cmd
->seq_count
)
3162 cmd
->cmd_flags
|= ICF_SENT_LAST_R2T
;
3164 cmd
->outstanding_r2ts
++;
3167 if (iscsit_add_r2t_to_list(cmd
, offset
, xfer_len
, 0, 0) < 0) {
3168 spin_unlock_bh(&cmd
->r2t_lock
);
3172 if (cmd
->cmd_flags
& ICF_SENT_LAST_R2T
)
3175 spin_unlock_bh(&cmd
->r2t_lock
);
3180 void iscsit_build_rsp_pdu(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
3181 bool inc_stat_sn
, struct iscsi_scsi_rsp
*hdr
)
3184 cmd
->stat_sn
= conn
->stat_sn
++;
3186 atomic_long_inc(&conn
->sess
->rsp_pdus
);
3188 memset(hdr
, 0, ISCSI_HDR_LEN
);
3189 hdr
->opcode
= ISCSI_OP_SCSI_CMD_RSP
;
3190 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
3191 if (cmd
->se_cmd
.se_cmd_flags
& SCF_OVERFLOW_BIT
) {
3192 hdr
->flags
|= ISCSI_FLAG_CMD_OVERFLOW
;
3193 hdr
->residual_count
= cpu_to_be32(cmd
->se_cmd
.residual_count
);
3194 } else if (cmd
->se_cmd
.se_cmd_flags
& SCF_UNDERFLOW_BIT
) {
3195 hdr
->flags
|= ISCSI_FLAG_CMD_UNDERFLOW
;
3196 hdr
->residual_count
= cpu_to_be32(cmd
->se_cmd
.residual_count
);
3198 hdr
->response
= cmd
->iscsi_response
;
3199 hdr
->cmd_status
= cmd
->se_cmd
.scsi_status
;
3200 hdr
->itt
= cmd
->init_task_tag
;
3201 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
3203 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
3204 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
3205 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
3207 pr_debug("Built SCSI Response, ITT: 0x%08x, StatSN: 0x%08x,"
3208 " Response: 0x%02x, SAM Status: 0x%02x, CID: %hu\n",
3209 cmd
->init_task_tag
, cmd
->stat_sn
, cmd
->se_cmd
.scsi_status
,
3210 cmd
->se_cmd
.scsi_status
, conn
->cid
);
3212 EXPORT_SYMBOL(iscsit_build_rsp_pdu
);
3214 static int iscsit_send_response(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
3216 struct iscsi_scsi_rsp
*hdr
= (struct iscsi_scsi_rsp
*)&cmd
->pdu
[0];
3218 u32 padding
= 0, tx_size
= 0;
3220 bool inc_stat_sn
= (cmd
->i_state
== ISTATE_SEND_STATUS
);
3222 iscsit_build_rsp_pdu(cmd
, conn
, inc_stat_sn
, hdr
);
3224 iov
= &cmd
->iov_misc
[0];
3225 iov
[iov_count
].iov_base
= cmd
->pdu
;
3226 iov
[iov_count
++].iov_len
= ISCSI_HDR_LEN
;
3227 tx_size
+= ISCSI_HDR_LEN
;
3230 * Attach SENSE DATA payload to iSCSI Response PDU
3232 if (cmd
->se_cmd
.sense_buffer
&&
3233 ((cmd
->se_cmd
.se_cmd_flags
& SCF_TRANSPORT_TASK_SENSE
) ||
3234 (cmd
->se_cmd
.se_cmd_flags
& SCF_EMULATED_TASK_SENSE
))) {
3235 put_unaligned_be16(cmd
->se_cmd
.scsi_sense_length
, cmd
->sense_buffer
);
3236 cmd
->se_cmd
.scsi_sense_length
+= sizeof (__be16
);
3238 padding
= -(cmd
->se_cmd
.scsi_sense_length
) & 3;
3239 hton24(hdr
->dlength
, (u32
)cmd
->se_cmd
.scsi_sense_length
);
3240 iov
[iov_count
].iov_base
= cmd
->sense_buffer
;
3241 iov
[iov_count
++].iov_len
=
3242 (cmd
->se_cmd
.scsi_sense_length
+ padding
);
3243 tx_size
+= cmd
->se_cmd
.scsi_sense_length
;
3246 memset(cmd
->sense_buffer
+
3247 cmd
->se_cmd
.scsi_sense_length
, 0, padding
);
3249 pr_debug("Adding %u bytes of padding to"
3250 " SENSE.\n", padding
);
3253 if (conn
->conn_ops
->DataDigest
) {
3254 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
,
3256 (cmd
->se_cmd
.scsi_sense_length
+ padding
),
3257 0, NULL
, (u8
*)&cmd
->data_crc
);
3259 iov
[iov_count
].iov_base
= &cmd
->data_crc
;
3260 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
3261 tx_size
+= ISCSI_CRC_LEN
;
3263 pr_debug("Attaching CRC32 DataDigest for"
3264 " SENSE, %u bytes CRC 0x%08x\n",
3265 (cmd
->se_cmd
.scsi_sense_length
+ padding
),
3269 pr_debug("Attaching SENSE DATA: %u bytes to iSCSI"
3271 cmd
->se_cmd
.scsi_sense_length
);
3274 if (conn
->conn_ops
->HeaderDigest
) {
3275 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
3277 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, cmd
->pdu
,
3278 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
3280 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
3281 tx_size
+= ISCSI_CRC_LEN
;
3282 pr_debug("Attaching CRC32 HeaderDigest for Response"
3283 " PDU 0x%08x\n", *header_digest
);
3286 cmd
->iov_misc_count
= iov_count
;
3287 cmd
->tx_size
= tx_size
;
3292 static u8
iscsit_convert_tcm_tmr_rsp(struct se_tmr_req
*se_tmr
)
3294 switch (se_tmr
->response
) {
3295 case TMR_FUNCTION_COMPLETE
:
3296 return ISCSI_TMF_RSP_COMPLETE
;
3297 case TMR_TASK_DOES_NOT_EXIST
:
3298 return ISCSI_TMF_RSP_NO_TASK
;
3299 case TMR_LUN_DOES_NOT_EXIST
:
3300 return ISCSI_TMF_RSP_NO_LUN
;
3301 case TMR_TASK_MGMT_FUNCTION_NOT_SUPPORTED
:
3302 return ISCSI_TMF_RSP_NOT_SUPPORTED
;
3303 case TMR_FUNCTION_REJECTED
:
3305 return ISCSI_TMF_RSP_REJECTED
;
3310 iscsit_build_task_mgt_rsp(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
3311 struct iscsi_tm_rsp
*hdr
)
3313 struct se_tmr_req
*se_tmr
= cmd
->se_cmd
.se_tmr_req
;
3315 hdr
->opcode
= ISCSI_OP_SCSI_TMFUNC_RSP
;
3316 hdr
->flags
= ISCSI_FLAG_CMD_FINAL
;
3317 hdr
->response
= iscsit_convert_tcm_tmr_rsp(se_tmr
);
3318 hdr
->itt
= cmd
->init_task_tag
;
3319 cmd
->stat_sn
= conn
->stat_sn
++;
3320 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
3322 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
3323 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
3324 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
3326 pr_debug("Built Task Management Response ITT: 0x%08x,"
3327 " StatSN: 0x%08x, Response: 0x%02x, CID: %hu\n",
3328 cmd
->init_task_tag
, cmd
->stat_sn
, hdr
->response
, conn
->cid
);
3330 EXPORT_SYMBOL(iscsit_build_task_mgt_rsp
);
3333 iscsit_send_task_mgt_rsp(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
)
3335 struct iscsi_tm_rsp
*hdr
= (struct iscsi_tm_rsp
*)&cmd
->pdu
[0];
3338 iscsit_build_task_mgt_rsp(cmd
, conn
, hdr
);
3340 cmd
->iov_misc
[0].iov_base
= cmd
->pdu
;
3341 cmd
->iov_misc
[0].iov_len
= ISCSI_HDR_LEN
;
3342 tx_size
+= ISCSI_HDR_LEN
;
3344 if (conn
->conn_ops
->HeaderDigest
) {
3345 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
3347 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
3348 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
3350 cmd
->iov_misc
[0].iov_len
+= ISCSI_CRC_LEN
;
3351 tx_size
+= ISCSI_CRC_LEN
;
3352 pr_debug("Attaching CRC32 HeaderDigest for Task"
3353 " Mgmt Response PDU 0x%08x\n", *header_digest
);
3356 cmd
->iov_misc_count
= 1;
3357 cmd
->tx_size
= tx_size
;
3362 static bool iscsit_check_inaddr_any(struct iscsi_np
*np
)
3366 if (np
->np_sockaddr
.ss_family
== AF_INET6
) {
3367 const struct sockaddr_in6 sin6
= {
3368 .sin6_addr
= IN6ADDR_ANY_INIT
};
3369 struct sockaddr_in6
*sock_in6
=
3370 (struct sockaddr_in6
*)&np
->np_sockaddr
;
3372 if (!memcmp(sock_in6
->sin6_addr
.s6_addr
,
3373 sin6
.sin6_addr
.s6_addr
, 16))
3376 struct sockaddr_in
* sock_in
=
3377 (struct sockaddr_in
*)&np
->np_sockaddr
;
3379 if (sock_in
->sin_addr
.s_addr
== htonl(INADDR_ANY
))
3386 #define SENDTARGETS_BUF_LIMIT 32768U
3389 iscsit_build_sendtargets_response(struct iscsi_cmd
*cmd
,
3390 enum iscsit_transport_type network_transport
,
3391 int skip_bytes
, bool *completed
)
3393 char *payload
= NULL
;
3394 struct iscsi_conn
*conn
= cmd
->conn
;
3395 struct iscsi_portal_group
*tpg
;
3396 struct iscsi_tiqn
*tiqn
;
3397 struct iscsi_tpg_np
*tpg_np
;
3398 int buffer_len
, end_of_buf
= 0, len
= 0, payload_len
= 0;
3399 int target_name_printed
;
3400 unsigned char buf
[ISCSI_IQN_LEN
+12]; /* iqn + "TargetName=" + \0 */
3401 unsigned char *text_in
= cmd
->text_in_ptr
, *text_ptr
= NULL
;
3403 buffer_len
= min(conn
->conn_ops
->MaxRecvDataSegmentLength
,
3404 SENDTARGETS_BUF_LIMIT
);
3406 payload
= kzalloc(buffer_len
, GFP_KERNEL
);
3408 pr_err("Unable to allocate memory for sendtargets"
3413 * Locate pointer to iqn./eui. string for ICF_SENDTARGETS_SINGLE
3416 if (cmd
->cmd_flags
& ICF_SENDTARGETS_SINGLE
) {
3417 text_ptr
= strchr(text_in
, '=');
3419 pr_err("Unable to locate '=' string in text_in:"
3425 * Skip over '=' character..
3430 spin_lock(&tiqn_lock
);
3431 list_for_each_entry(tiqn
, &g_tiqn_list
, tiqn_list
) {
3432 if ((cmd
->cmd_flags
& ICF_SENDTARGETS_SINGLE
) &&
3433 strcmp(tiqn
->tiqn
, text_ptr
)) {
3437 target_name_printed
= 0;
3439 spin_lock(&tiqn
->tiqn_tpg_lock
);
3440 list_for_each_entry(tpg
, &tiqn
->tiqn_tpg_list
, tpg_list
) {
3442 /* If demo_mode_discovery=0 and generate_node_acls=0
3443 * (demo mode dislabed) do not return
3444 * TargetName+TargetAddress unless a NodeACL exists.
3447 if ((tpg
->tpg_attrib
.generate_node_acls
== 0) &&
3448 (tpg
->tpg_attrib
.demo_mode_discovery
== 0) &&
3449 (!core_tpg_get_initiator_node_acl(&tpg
->tpg_se_tpg
,
3450 cmd
->conn
->sess
->sess_ops
->InitiatorName
))) {
3454 spin_lock(&tpg
->tpg_state_lock
);
3455 if ((tpg
->tpg_state
== TPG_STATE_FREE
) ||
3456 (tpg
->tpg_state
== TPG_STATE_INACTIVE
)) {
3457 spin_unlock(&tpg
->tpg_state_lock
);
3460 spin_unlock(&tpg
->tpg_state_lock
);
3462 spin_lock(&tpg
->tpg_np_lock
);
3463 list_for_each_entry(tpg_np
, &tpg
->tpg_gnp_list
,
3465 struct iscsi_np
*np
= tpg_np
->tpg_np
;
3466 bool inaddr_any
= iscsit_check_inaddr_any(np
);
3469 if (np
->np_network_transport
!= network_transport
)
3472 if (!target_name_printed
) {
3473 len
= sprintf(buf
, "TargetName=%s",
3477 if ((len
+ payload_len
) > buffer_len
) {
3478 spin_unlock(&tpg
->tpg_np_lock
);
3479 spin_unlock(&tiqn
->tiqn_tpg_lock
);
3484 if (skip_bytes
&& len
<= skip_bytes
) {
3487 memcpy(payload
+ payload_len
, buf
, len
);
3489 target_name_printed
= 1;
3490 if (len
> skip_bytes
)
3495 if (np
->np_sockaddr
.ss_family
== AF_INET6
)
3496 fmt_str
= "TargetAddress=[%s]:%hu,%hu";
3498 fmt_str
= "TargetAddress=%s:%hu,%hu";
3500 len
= sprintf(buf
, fmt_str
,
3501 inaddr_any
? conn
->local_ip
: np
->np_ip
,
3506 if ((len
+ payload_len
) > buffer_len
) {
3507 spin_unlock(&tpg
->tpg_np_lock
);
3508 spin_unlock(&tiqn
->tiqn_tpg_lock
);
3513 if (skip_bytes
&& len
<= skip_bytes
) {
3516 memcpy(payload
+ payload_len
, buf
, len
);
3518 if (len
> skip_bytes
)
3522 spin_unlock(&tpg
->tpg_np_lock
);
3524 spin_unlock(&tiqn
->tiqn_tpg_lock
);
3531 if (cmd
->cmd_flags
& ICF_SENDTARGETS_SINGLE
)
3534 spin_unlock(&tiqn_lock
);
3536 cmd
->buf_ptr
= payload
;
3542 iscsit_build_text_rsp(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
3543 struct iscsi_text_rsp
*hdr
,
3544 enum iscsit_transport_type network_transport
)
3546 int text_length
, padding
;
3547 bool completed
= true;
3549 text_length
= iscsit_build_sendtargets_response(cmd
, network_transport
,
3550 cmd
->read_data_done
,
3552 if (text_length
< 0)
3556 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
3558 hdr
->flags
|= ISCSI_FLAG_TEXT_CONTINUE
;
3559 cmd
->read_data_done
+= text_length
;
3560 if (cmd
->targ_xfer_tag
== 0xFFFFFFFF)
3561 cmd
->targ_xfer_tag
= session_get_next_ttt(conn
->sess
);
3563 hdr
->opcode
= ISCSI_OP_TEXT_RSP
;
3564 padding
= ((-text_length
) & 3);
3565 hton24(hdr
->dlength
, text_length
);
3566 hdr
->itt
= cmd
->init_task_tag
;
3567 hdr
->ttt
= cpu_to_be32(cmd
->targ_xfer_tag
);
3568 cmd
->stat_sn
= conn
->stat_sn
++;
3569 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
3571 iscsit_increment_maxcmdsn(cmd
, conn
->sess
);
3573 * Reset maxcmdsn_inc in multi-part text payload exchanges to
3574 * correctly increment MaxCmdSN for each response answering a
3575 * non immediate text request with a valid CmdSN.
3577 cmd
->maxcmdsn_inc
= 0;
3578 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
3579 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
3581 pr_debug("Built Text Response: ITT: 0x%08x, TTT: 0x%08x, StatSN: 0x%08x,"
3582 " Length: %u, CID: %hu F: %d C: %d\n", cmd
->init_task_tag
,
3583 cmd
->targ_xfer_tag
, cmd
->stat_sn
, text_length
, conn
->cid
,
3584 !!(hdr
->flags
& ISCSI_FLAG_CMD_FINAL
),
3585 !!(hdr
->flags
& ISCSI_FLAG_TEXT_CONTINUE
));
3587 return text_length
+ padding
;
3589 EXPORT_SYMBOL(iscsit_build_text_rsp
);
3591 static int iscsit_send_text_rsp(
3592 struct iscsi_cmd
*cmd
,
3593 struct iscsi_conn
*conn
)
3595 struct iscsi_text_rsp
*hdr
= (struct iscsi_text_rsp
*)cmd
->pdu
;
3598 int text_length
, iov_count
= 0, rc
;
3600 rc
= iscsit_build_text_rsp(cmd
, conn
, hdr
, ISCSI_TCP
);
3605 iov
= &cmd
->iov_misc
[0];
3606 iov
[iov_count
].iov_base
= cmd
->pdu
;
3607 iov
[iov_count
++].iov_len
= ISCSI_HDR_LEN
;
3608 iov
[iov_count
].iov_base
= cmd
->buf_ptr
;
3609 iov
[iov_count
++].iov_len
= text_length
;
3611 tx_size
+= (ISCSI_HDR_LEN
+ text_length
);
3613 if (conn
->conn_ops
->HeaderDigest
) {
3614 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
3616 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
3617 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
3619 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
3620 tx_size
+= ISCSI_CRC_LEN
;
3621 pr_debug("Attaching CRC32 HeaderDigest for"
3622 " Text Response PDU 0x%08x\n", *header_digest
);
3625 if (conn
->conn_ops
->DataDigest
) {
3626 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
,
3627 cmd
->buf_ptr
, text_length
,
3628 0, NULL
, (u8
*)&cmd
->data_crc
);
3630 iov
[iov_count
].iov_base
= &cmd
->data_crc
;
3631 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
3632 tx_size
+= ISCSI_CRC_LEN
;
3634 pr_debug("Attaching DataDigest for %u bytes of text"
3635 " data, CRC 0x%08x\n", text_length
,
3639 cmd
->iov_misc_count
= iov_count
;
3640 cmd
->tx_size
= tx_size
;
3646 iscsit_build_reject(struct iscsi_cmd
*cmd
, struct iscsi_conn
*conn
,
3647 struct iscsi_reject
*hdr
)
3649 hdr
->opcode
= ISCSI_OP_REJECT
;
3650 hdr
->reason
= cmd
->reject_reason
;
3651 hdr
->flags
|= ISCSI_FLAG_CMD_FINAL
;
3652 hton24(hdr
->dlength
, ISCSI_HDR_LEN
);
3653 hdr
->ffffffff
= cpu_to_be32(0xffffffff);
3654 cmd
->stat_sn
= conn
->stat_sn
++;
3655 hdr
->statsn
= cpu_to_be32(cmd
->stat_sn
);
3656 hdr
->exp_cmdsn
= cpu_to_be32(conn
->sess
->exp_cmd_sn
);
3657 hdr
->max_cmdsn
= cpu_to_be32(conn
->sess
->max_cmd_sn
);
3660 EXPORT_SYMBOL(iscsit_build_reject
);
3662 static int iscsit_send_reject(
3663 struct iscsi_cmd
*cmd
,
3664 struct iscsi_conn
*conn
)
3666 struct iscsi_reject
*hdr
= (struct iscsi_reject
*)&cmd
->pdu
[0];
3668 u32 iov_count
= 0, tx_size
;
3670 iscsit_build_reject(cmd
, conn
, hdr
);
3672 iov
= &cmd
->iov_misc
[0];
3673 iov
[iov_count
].iov_base
= cmd
->pdu
;
3674 iov
[iov_count
++].iov_len
= ISCSI_HDR_LEN
;
3675 iov
[iov_count
].iov_base
= cmd
->buf_ptr
;
3676 iov
[iov_count
++].iov_len
= ISCSI_HDR_LEN
;
3678 tx_size
= (ISCSI_HDR_LEN
+ ISCSI_HDR_LEN
);
3680 if (conn
->conn_ops
->HeaderDigest
) {
3681 u32
*header_digest
= (u32
*)&cmd
->pdu
[ISCSI_HDR_LEN
];
3683 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, hdr
,
3684 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)header_digest
);
3686 iov
[0].iov_len
+= ISCSI_CRC_LEN
;
3687 tx_size
+= ISCSI_CRC_LEN
;
3688 pr_debug("Attaching CRC32 HeaderDigest for"
3689 " REJECT PDU 0x%08x\n", *header_digest
);
3692 if (conn
->conn_ops
->DataDigest
) {
3693 iscsit_do_crypto_hash_buf(&conn
->conn_tx_hash
, cmd
->buf_ptr
,
3694 ISCSI_HDR_LEN
, 0, NULL
, (u8
*)&cmd
->data_crc
);
3696 iov
[iov_count
].iov_base
= &cmd
->data_crc
;
3697 iov
[iov_count
++].iov_len
= ISCSI_CRC_LEN
;
3698 tx_size
+= ISCSI_CRC_LEN
;
3699 pr_debug("Attaching CRC32 DataDigest for REJECT"
3700 " PDU 0x%08x\n", cmd
->data_crc
);
3703 cmd
->iov_misc_count
= iov_count
;
3704 cmd
->tx_size
= tx_size
;
3706 pr_debug("Built Reject PDU StatSN: 0x%08x, Reason: 0x%02x,"
3707 " CID: %hu\n", ntohl(hdr
->statsn
), hdr
->reason
, conn
->cid
);
3712 void iscsit_thread_get_cpumask(struct iscsi_conn
*conn
)
3716 * bitmap_id is assigned from iscsit_global->ts_bitmap from
3717 * within iscsit_start_kthreads()
3719 * Here we use bitmap_id to determine which CPU that this
3720 * iSCSI connection's RX/TX threads will be scheduled to
3723 ord
= conn
->bitmap_id
% cpumask_weight(cpu_online_mask
);
3724 for_each_online_cpu(cpu
) {
3726 cpumask_set_cpu(cpu
, conn
->conn_cpumask
);
3731 * This should never be reached..
3734 cpumask_setall(conn
->conn_cpumask
);
3737 static inline void iscsit_thread_check_cpumask(
3738 struct iscsi_conn
*conn
,
3739 struct task_struct
*p
,
3743 * mode == 1 signals iscsi_target_tx_thread() usage.
3744 * mode == 0 signals iscsi_target_rx_thread() usage.
3747 if (!conn
->conn_tx_reset_cpumask
)
3749 conn
->conn_tx_reset_cpumask
= 0;
3751 if (!conn
->conn_rx_reset_cpumask
)
3753 conn
->conn_rx_reset_cpumask
= 0;
3756 * Update the CPU mask for this single kthread so that
3757 * both TX and RX kthreads are scheduled to run on the
3760 set_cpus_allowed_ptr(p
, conn
->conn_cpumask
);
3764 iscsit_immediate_queue(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
, int state
)
3769 case ISTATE_SEND_R2T
:
3770 ret
= iscsit_send_r2t(cmd
, conn
);
3775 spin_lock_bh(&conn
->cmd_lock
);
3776 list_del_init(&cmd
->i_conn_node
);
3777 spin_unlock_bh(&conn
->cmd_lock
);
3779 iscsit_free_cmd(cmd
, false);
3781 case ISTATE_SEND_NOPIN_WANT_RESPONSE
:
3782 iscsit_mod_nopin_response_timer(conn
);
3783 ret
= iscsit_send_unsolicited_nopin(cmd
, conn
, 1);
3787 case ISTATE_SEND_NOPIN_NO_RESPONSE
:
3788 ret
= iscsit_send_unsolicited_nopin(cmd
, conn
, 0);
3793 pr_err("Unknown Opcode: 0x%02x ITT:"
3794 " 0x%08x, i_state: %d on CID: %hu\n",
3795 cmd
->iscsi_opcode
, cmd
->init_task_tag
, state
,
3807 iscsit_handle_immediate_queue(struct iscsi_conn
*conn
)
3809 struct iscsit_transport
*t
= conn
->conn_transport
;
3810 struct iscsi_queue_req
*qr
;
3811 struct iscsi_cmd
*cmd
;
3815 while ((qr
= iscsit_get_cmd_from_immediate_queue(conn
))) {
3816 atomic_set(&conn
->check_immediate_queue
, 0);
3819 kmem_cache_free(lio_qr_cache
, qr
);
3821 ret
= t
->iscsit_immediate_queue(conn
, cmd
, state
);
3830 iscsit_response_queue(struct iscsi_conn
*conn
, struct iscsi_cmd
*cmd
, int state
)
3836 case ISTATE_SEND_DATAIN
:
3837 ret
= iscsit_send_datain(cmd
, conn
);
3842 goto check_rsp_state
;
3843 else if (ret
== 1) {
3845 spin_lock_bh(&cmd
->istate_lock
);
3846 cmd
->i_state
= ISTATE_SENT_STATUS
;
3847 spin_unlock_bh(&cmd
->istate_lock
);
3849 if (atomic_read(&conn
->check_immediate_queue
))
3853 } else if (ret
== 2) {
3854 /* Still must send status,
3855 SCF_TRANSPORT_TASK_SENSE was set */
3856 spin_lock_bh(&cmd
->istate_lock
);
3857 cmd
->i_state
= ISTATE_SEND_STATUS
;
3858 spin_unlock_bh(&cmd
->istate_lock
);
3859 state
= ISTATE_SEND_STATUS
;
3860 goto check_rsp_state
;
3864 case ISTATE_SEND_STATUS
:
3865 case ISTATE_SEND_STATUS_RECOVERY
:
3866 ret
= iscsit_send_response(cmd
, conn
);
3868 case ISTATE_SEND_LOGOUTRSP
:
3869 ret
= iscsit_send_logout(cmd
, conn
);
3871 case ISTATE_SEND_ASYNCMSG
:
3872 ret
= iscsit_send_conn_drop_async_message(
3875 case ISTATE_SEND_NOPIN
:
3876 ret
= iscsit_send_nopin(cmd
, conn
);
3878 case ISTATE_SEND_REJECT
:
3879 ret
= iscsit_send_reject(cmd
, conn
);
3881 case ISTATE_SEND_TASKMGTRSP
:
3882 ret
= iscsit_send_task_mgt_rsp(cmd
, conn
);
3885 ret
= iscsit_tmr_post_handler(cmd
, conn
);
3887 iscsit_fall_back_to_erl0(conn
->sess
);
3889 case ISTATE_SEND_TEXTRSP
:
3890 ret
= iscsit_send_text_rsp(cmd
, conn
);
3893 pr_err("Unknown Opcode: 0x%02x ITT:"
3894 " 0x%08x, i_state: %d on CID: %hu\n",
3895 cmd
->iscsi_opcode
, cmd
->init_task_tag
,
3902 if (iscsit_send_tx_data(cmd
, conn
, 1) < 0) {
3903 iscsit_tx_thread_wait_for_tcp(conn
);
3904 iscsit_unmap_iovec(cmd
);
3907 iscsit_unmap_iovec(cmd
);
3910 case ISTATE_SEND_LOGOUTRSP
:
3911 if (!iscsit_logout_post_handler(cmd
, conn
))
3914 case ISTATE_SEND_STATUS
:
3915 case ISTATE_SEND_ASYNCMSG
:
3916 case ISTATE_SEND_NOPIN
:
3917 case ISTATE_SEND_STATUS_RECOVERY
:
3918 case ISTATE_SEND_TEXTRSP
:
3919 case ISTATE_SEND_TASKMGTRSP
:
3920 case ISTATE_SEND_REJECT
:
3921 spin_lock_bh(&cmd
->istate_lock
);
3922 cmd
->i_state
= ISTATE_SENT_STATUS
;
3923 spin_unlock_bh(&cmd
->istate_lock
);
3926 pr_err("Unknown Opcode: 0x%02x ITT:"
3927 " 0x%08x, i_state: %d on CID: %hu\n",
3928 cmd
->iscsi_opcode
, cmd
->init_task_tag
,
3929 cmd
->i_state
, conn
->cid
);
3933 if (atomic_read(&conn
->check_immediate_queue
))
3942 static int iscsit_handle_response_queue(struct iscsi_conn
*conn
)
3944 struct iscsit_transport
*t
= conn
->conn_transport
;
3945 struct iscsi_queue_req
*qr
;
3946 struct iscsi_cmd
*cmd
;
3950 while ((qr
= iscsit_get_cmd_from_response_queue(conn
))) {
3953 kmem_cache_free(lio_qr_cache
, qr
);
3955 ret
= t
->iscsit_response_queue(conn
, cmd
, state
);
3956 if (ret
== 1 || ret
< 0)
3963 int iscsi_target_tx_thread(void *arg
)
3966 struct iscsi_conn
*conn
= arg
;
3968 * Allow ourselves to be interrupted by SIGINT so that a
3969 * connection recovery / failure event can be triggered externally.
3971 allow_signal(SIGINT
);
3973 while (!kthread_should_stop()) {
3975 * Ensure that both TX and RX per connection kthreads
3976 * are scheduled to run on the same CPU.
3978 iscsit_thread_check_cpumask(conn
, current
, 1);
3980 wait_event_interruptible(conn
->queues_wq
,
3981 !iscsit_conn_all_queues_empty(conn
));
3983 if (signal_pending(current
))
3987 ret
= iscsit_handle_immediate_queue(conn
);
3991 ret
= iscsit_handle_response_queue(conn
);
3994 else if (ret
== -ECONNRESET
)
4002 * Avoid the normal connection failure code-path if this connection
4003 * is still within LOGIN mode, and iscsi_np process context is
4004 * responsible for cleaning up the early connection failure.
4006 if (conn
->conn_state
!= TARG_CONN_STATE_IN_LOGIN
)
4007 iscsit_take_action_for_connection_exit(conn
);
4012 static int iscsi_target_rx_opcode(struct iscsi_conn
*conn
, unsigned char *buf
)
4014 struct iscsi_hdr
*hdr
= (struct iscsi_hdr
*)buf
;
4015 struct iscsi_cmd
*cmd
;
4018 switch (hdr
->opcode
& ISCSI_OPCODE_MASK
) {
4019 case ISCSI_OP_SCSI_CMD
:
4020 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
4024 ret
= iscsit_handle_scsi_cmd(conn
, cmd
, buf
);
4026 case ISCSI_OP_SCSI_DATA_OUT
:
4027 ret
= iscsit_handle_data_out(conn
, buf
);
4029 case ISCSI_OP_NOOP_OUT
:
4031 if (hdr
->ttt
== cpu_to_be32(0xFFFFFFFF)) {
4032 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
4036 ret
= iscsit_handle_nop_out(conn
, cmd
, buf
);
4038 case ISCSI_OP_SCSI_TMFUNC
:
4039 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
4043 ret
= iscsit_handle_task_mgt_cmd(conn
, cmd
, buf
);
4046 if (hdr
->ttt
!= cpu_to_be32(0xFFFFFFFF)) {
4047 cmd
= iscsit_find_cmd_from_itt(conn
, hdr
->itt
);
4051 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
4056 ret
= iscsit_handle_text_cmd(conn
, cmd
, buf
);
4058 case ISCSI_OP_LOGOUT
:
4059 cmd
= iscsit_allocate_cmd(conn
, TASK_INTERRUPTIBLE
);
4063 ret
= iscsit_handle_logout_cmd(conn
, cmd
, buf
);
4065 wait_for_completion_timeout(&conn
->conn_logout_comp
,
4066 SECONDS_FOR_LOGOUT_COMP
* HZ
);
4068 case ISCSI_OP_SNACK
:
4069 ret
= iscsit_handle_snack(conn
, buf
);
4072 pr_err("Got unknown iSCSI OpCode: 0x%02x\n", hdr
->opcode
);
4073 if (!conn
->sess
->sess_ops
->ErrorRecoveryLevel
) {
4074 pr_err("Cannot recover from unknown"
4075 " opcode while ERL=0, closing iSCSI connection.\n");
4078 pr_err("Unable to recover from unknown opcode while OFMarker=No,"
4079 " closing iSCSI connection.\n");
4086 return iscsit_add_reject(conn
, ISCSI_REASON_BOOKMARK_NO_RESOURCES
, buf
);
4089 int iscsi_target_rx_thread(void *arg
)
4092 u8 buffer
[ISCSI_HDR_LEN
], opcode
;
4093 u32 checksum
= 0, digest
= 0;
4094 struct iscsi_conn
*conn
= arg
;
4097 * Allow ourselves to be interrupted by SIGINT so that a
4098 * connection recovery / failure event can be triggered externally.
4100 allow_signal(SIGINT
);
4102 * Wait for iscsi_post_login_handler() to complete before allowing
4103 * incoming iscsi/tcp socket I/O, and/or failing the connection.
4105 rc
= wait_for_completion_interruptible(&conn
->rx_login_comp
);
4109 if (conn
->conn_transport
->transport_type
== ISCSI_INFINIBAND
) {
4110 struct completion comp
;
4112 init_completion(&comp
);
4113 rc
= wait_for_completion_interruptible(&comp
);
4120 while (!kthread_should_stop()) {
4122 * Ensure that both TX and RX per connection kthreads
4123 * are scheduled to run on the same CPU.
4125 iscsit_thread_check_cpumask(conn
, current
, 0);
4127 memset(buffer
, 0, ISCSI_HDR_LEN
);
4128 memset(&iov
, 0, sizeof(struct kvec
));
4130 iov
.iov_base
= buffer
;
4131 iov
.iov_len
= ISCSI_HDR_LEN
;
4133 ret
= rx_data(conn
, &iov
, 1, ISCSI_HDR_LEN
);
4134 if (ret
!= ISCSI_HDR_LEN
) {
4135 iscsit_rx_thread_wait_for_tcp(conn
);
4139 if (conn
->conn_ops
->HeaderDigest
) {
4140 iov
.iov_base
= &digest
;
4141 iov
.iov_len
= ISCSI_CRC_LEN
;
4143 ret
= rx_data(conn
, &iov
, 1, ISCSI_CRC_LEN
);
4144 if (ret
!= ISCSI_CRC_LEN
) {
4145 iscsit_rx_thread_wait_for_tcp(conn
);
4149 iscsit_do_crypto_hash_buf(&conn
->conn_rx_hash
,
4150 buffer
, ISCSI_HDR_LEN
,
4151 0, NULL
, (u8
*)&checksum
);
4153 if (digest
!= checksum
) {
4154 pr_err("HeaderDigest CRC32C failed,"
4155 " received 0x%08x, computed 0x%08x\n",
4158 * Set the PDU to 0xff so it will intentionally
4159 * hit default in the switch below.
4161 memset(buffer
, 0xff, ISCSI_HDR_LEN
);
4162 atomic_long_inc(&conn
->sess
->conn_digest_errors
);
4164 pr_debug("Got HeaderDigest CRC32C"
4165 " 0x%08x\n", checksum
);
4169 if (conn
->conn_state
== TARG_CONN_STATE_IN_LOGOUT
)
4172 opcode
= buffer
[0] & ISCSI_OPCODE_MASK
;
4174 if (conn
->sess
->sess_ops
->SessionType
&&
4175 ((!(opcode
& ISCSI_OP_TEXT
)) ||
4176 (!(opcode
& ISCSI_OP_LOGOUT
)))) {
4177 pr_err("Received illegal iSCSI Opcode: 0x%02x"
4178 " while in Discovery Session, rejecting.\n", opcode
);
4179 iscsit_add_reject(conn
, ISCSI_REASON_PROTOCOL_ERROR
,
4184 ret
= iscsi_target_rx_opcode(conn
, buffer
);
4190 if (!signal_pending(current
))
4191 atomic_set(&conn
->transport_failed
, 1);
4192 iscsit_take_action_for_connection_exit(conn
);
4196 static void iscsit_release_commands_from_conn(struct iscsi_conn
*conn
)
4198 struct iscsi_cmd
*cmd
= NULL
, *cmd_tmp
= NULL
;
4199 struct iscsi_session
*sess
= conn
->sess
;
4201 * We expect this function to only ever be called from either RX or TX
4202 * thread context via iscsit_close_connection() once the other context
4203 * has been reset -> returned sleeping pre-handler state.
4205 spin_lock_bh(&conn
->cmd_lock
);
4206 list_for_each_entry_safe(cmd
, cmd_tmp
, &conn
->conn_cmd_list
, i_conn_node
) {
4208 list_del_init(&cmd
->i_conn_node
);
4209 spin_unlock_bh(&conn
->cmd_lock
);
4211 iscsit_increment_maxcmdsn(cmd
, sess
);
4213 iscsit_free_cmd(cmd
, true);
4215 spin_lock_bh(&conn
->cmd_lock
);
4217 spin_unlock_bh(&conn
->cmd_lock
);
4220 static void iscsit_stop_timers_for_cmds(
4221 struct iscsi_conn
*conn
)
4223 struct iscsi_cmd
*cmd
;
4225 spin_lock_bh(&conn
->cmd_lock
);
4226 list_for_each_entry(cmd
, &conn
->conn_cmd_list
, i_conn_node
) {
4227 if (cmd
->data_direction
== DMA_TO_DEVICE
)
4228 iscsit_stop_dataout_timer(cmd
);
4230 spin_unlock_bh(&conn
->cmd_lock
);
4233 int iscsit_close_connection(
4234 struct iscsi_conn
*conn
)
4236 int conn_logout
= (conn
->conn_state
== TARG_CONN_STATE_IN_LOGOUT
);
4237 struct iscsi_session
*sess
= conn
->sess
;
4239 pr_debug("Closing iSCSI connection CID %hu on SID:"
4240 " %u\n", conn
->cid
, sess
->sid
);
4242 * Always up conn_logout_comp for the traditional TCP case just in case
4243 * the RX Thread in iscsi_target_rx_opcode() is sleeping and the logout
4244 * response never got sent because the connection failed.
4246 * However for iser-target, isert_wait4logout() is using conn_logout_comp
4247 * to signal logout response TX interrupt completion. Go ahead and skip
4248 * this for iser since isert_rx_opcode() does not wait on logout failure,
4249 * and to avoid iscsi_conn pointer dereference in iser-target code.
4251 if (conn
->conn_transport
->transport_type
== ISCSI_TCP
)
4252 complete(&conn
->conn_logout_comp
);
4254 if (!strcmp(current
->comm
, ISCSI_RX_THREAD_NAME
)) {
4255 if (conn
->tx_thread
&&
4256 cmpxchg(&conn
->tx_thread_active
, true, false)) {
4257 send_sig(SIGINT
, conn
->tx_thread
, 1);
4258 kthread_stop(conn
->tx_thread
);
4260 } else if (!strcmp(current
->comm
, ISCSI_TX_THREAD_NAME
)) {
4261 if (conn
->rx_thread
&&
4262 cmpxchg(&conn
->rx_thread_active
, true, false)) {
4263 send_sig(SIGINT
, conn
->rx_thread
, 1);
4264 kthread_stop(conn
->rx_thread
);
4268 spin_lock(&iscsit_global
->ts_bitmap_lock
);
4269 bitmap_release_region(iscsit_global
->ts_bitmap
, conn
->bitmap_id
,
4271 spin_unlock(&iscsit_global
->ts_bitmap_lock
);
4273 iscsit_stop_timers_for_cmds(conn
);
4274 iscsit_stop_nopin_response_timer(conn
);
4275 iscsit_stop_nopin_timer(conn
);
4277 if (conn
->conn_transport
->iscsit_wait_conn
)
4278 conn
->conn_transport
->iscsit_wait_conn(conn
);
4281 * During Connection recovery drop unacknowledged out of order
4282 * commands for this connection, and prepare the other commands
4285 * During normal operation clear the out of order commands (but
4286 * do not free the struct iscsi_ooo_cmdsn's) and release all
4287 * struct iscsi_cmds.
4289 if (atomic_read(&conn
->connection_recovery
)) {
4290 iscsit_discard_unacknowledged_ooo_cmdsns_for_conn(conn
);
4291 iscsit_prepare_cmds_for_realligance(conn
);
4293 iscsit_clear_ooo_cmdsns_for_conn(conn
);
4294 iscsit_release_commands_from_conn(conn
);
4296 iscsit_free_queue_reqs_for_conn(conn
);
4299 * Handle decrementing session or connection usage count if
4300 * a logout response was not able to be sent because the
4301 * connection failed. Fall back to Session Recovery here.
4303 if (atomic_read(&conn
->conn_logout_remove
)) {
4304 if (conn
->conn_logout_reason
== ISCSI_LOGOUT_REASON_CLOSE_SESSION
) {
4305 iscsit_dec_conn_usage_count(conn
);
4306 iscsit_dec_session_usage_count(sess
);
4308 if (conn
->conn_logout_reason
== ISCSI_LOGOUT_REASON_CLOSE_CONNECTION
)
4309 iscsit_dec_conn_usage_count(conn
);
4311 atomic_set(&conn
->conn_logout_remove
, 0);
4312 atomic_set(&sess
->session_reinstatement
, 0);
4313 atomic_set(&sess
->session_fall_back_to_erl0
, 1);
4316 spin_lock_bh(&sess
->conn_lock
);
4317 list_del(&conn
->conn_list
);
4320 * Attempt to let the Initiator know this connection failed by
4321 * sending an Connection Dropped Async Message on another
4322 * active connection.
4324 if (atomic_read(&conn
->connection_recovery
))
4325 iscsit_build_conn_drop_async_message(conn
);
4327 spin_unlock_bh(&sess
->conn_lock
);
4330 * If connection reinstatement is being performed on this connection,
4331 * up the connection reinstatement semaphore that is being blocked on
4332 * in iscsit_cause_connection_reinstatement().
4334 spin_lock_bh(&conn
->state_lock
);
4335 if (atomic_read(&conn
->sleep_on_conn_wait_comp
)) {
4336 spin_unlock_bh(&conn
->state_lock
);
4337 complete(&conn
->conn_wait_comp
);
4338 wait_for_completion(&conn
->conn_post_wait_comp
);
4339 spin_lock_bh(&conn
->state_lock
);
4343 * If connection reinstatement is being performed on this connection
4344 * by receiving a REMOVECONNFORRECOVERY logout request, up the
4345 * connection wait rcfr semaphore that is being blocked on
4346 * an iscsit_connection_reinstatement_rcfr().
4348 if (atomic_read(&conn
->connection_wait_rcfr
)) {
4349 spin_unlock_bh(&conn
->state_lock
);
4350 complete(&conn
->conn_wait_rcfr_comp
);
4351 wait_for_completion(&conn
->conn_post_wait_comp
);
4352 spin_lock_bh(&conn
->state_lock
);
4354 atomic_set(&conn
->connection_reinstatement
, 1);
4355 spin_unlock_bh(&conn
->state_lock
);
4358 * If any other processes are accessing this connection pointer we
4359 * must wait until they have completed.
4361 iscsit_check_conn_usage_count(conn
);
4363 if (conn
->conn_rx_hash
.tfm
)
4364 crypto_free_hash(conn
->conn_rx_hash
.tfm
);
4365 if (conn
->conn_tx_hash
.tfm
)
4366 crypto_free_hash(conn
->conn_tx_hash
.tfm
);
4368 free_cpumask_var(conn
->conn_cpumask
);
4370 kfree(conn
->conn_ops
);
4371 conn
->conn_ops
= NULL
;
4374 sock_release(conn
->sock
);
4376 if (conn
->conn_transport
->iscsit_free_conn
)
4377 conn
->conn_transport
->iscsit_free_conn(conn
);
4379 iscsit_put_transport(conn
->conn_transport
);
4381 pr_debug("Moving to TARG_CONN_STATE_FREE.\n");
4382 conn
->conn_state
= TARG_CONN_STATE_FREE
;
4385 spin_lock_bh(&sess
->conn_lock
);
4386 atomic_dec(&sess
->nconn
);
4387 pr_debug("Decremented iSCSI connection count to %hu from node:"
4388 " %s\n", atomic_read(&sess
->nconn
),
4389 sess
->sess_ops
->InitiatorName
);
4391 * Make sure that if one connection fails in an non ERL=2 iSCSI
4392 * Session that they all fail.
4394 if ((sess
->sess_ops
->ErrorRecoveryLevel
!= 2) && !conn_logout
&&
4395 !atomic_read(&sess
->session_logout
))
4396 atomic_set(&sess
->session_fall_back_to_erl0
, 1);
4399 * If this was not the last connection in the session, and we are
4400 * performing session reinstatement or falling back to ERL=0, call
4401 * iscsit_stop_session() without sleeping to shutdown the other
4402 * active connections.
4404 if (atomic_read(&sess
->nconn
)) {
4405 if (!atomic_read(&sess
->session_reinstatement
) &&
4406 !atomic_read(&sess
->session_fall_back_to_erl0
)) {
4407 spin_unlock_bh(&sess
->conn_lock
);
4410 if (!atomic_read(&sess
->session_stop_active
)) {
4411 atomic_set(&sess
->session_stop_active
, 1);
4412 spin_unlock_bh(&sess
->conn_lock
);
4413 iscsit_stop_session(sess
, 0, 0);
4416 spin_unlock_bh(&sess
->conn_lock
);
4421 * If this was the last connection in the session and one of the
4422 * following is occurring:
4424 * Session Reinstatement is not being performed, and are falling back
4425 * to ERL=0 call iscsit_close_session().
4427 * Session Logout was requested. iscsit_close_session() will be called
4430 * Session Continuation is not being performed, start the Time2Retain
4431 * handler and check if sleep_on_sess_wait_sem is active.
4433 if (!atomic_read(&sess
->session_reinstatement
) &&
4434 atomic_read(&sess
->session_fall_back_to_erl0
)) {
4435 spin_unlock_bh(&sess
->conn_lock
);
4436 target_put_session(sess
->se_sess
);
4439 } else if (atomic_read(&sess
->session_logout
)) {
4440 pr_debug("Moving to TARG_SESS_STATE_FREE.\n");
4441 sess
->session_state
= TARG_SESS_STATE_FREE
;
4442 spin_unlock_bh(&sess
->conn_lock
);
4444 if (atomic_read(&sess
->sleep_on_sess_wait_comp
))
4445 complete(&sess
->session_wait_comp
);
4449 pr_debug("Moving to TARG_SESS_STATE_FAILED.\n");
4450 sess
->session_state
= TARG_SESS_STATE_FAILED
;
4452 if (!atomic_read(&sess
->session_continuation
)) {
4453 spin_unlock_bh(&sess
->conn_lock
);
4454 iscsit_start_time2retain_handler(sess
);
4456 spin_unlock_bh(&sess
->conn_lock
);
4458 if (atomic_read(&sess
->sleep_on_sess_wait_comp
))
4459 complete(&sess
->session_wait_comp
);
4463 spin_unlock_bh(&sess
->conn_lock
);
4468 int iscsit_close_session(struct iscsi_session
*sess
)
4470 struct iscsi_portal_group
*tpg
= sess
->tpg
;
4471 struct se_portal_group
*se_tpg
= &tpg
->tpg_se_tpg
;
4473 if (atomic_read(&sess
->nconn
)) {
4474 pr_err("%d connection(s) still exist for iSCSI session"
4475 " to %s\n", atomic_read(&sess
->nconn
),
4476 sess
->sess_ops
->InitiatorName
);
4480 spin_lock_bh(&se_tpg
->session_lock
);
4481 atomic_set(&sess
->session_logout
, 1);
4482 atomic_set(&sess
->session_reinstatement
, 1);
4483 iscsit_stop_time2retain_timer(sess
);
4484 spin_unlock_bh(&se_tpg
->session_lock
);
4487 * transport_deregister_session_configfs() will clear the
4488 * struct se_node_acl->nacl_sess pointer now as a iscsi_np process context
4489 * can be setting it again with __transport_register_session() in
4490 * iscsi_post_login_handler() again after the iscsit_stop_session()
4491 * completes in iscsi_np context.
4493 transport_deregister_session_configfs(sess
->se_sess
);
4496 * If any other processes are accessing this session pointer we must
4497 * wait until they have completed. If we are in an interrupt (the
4498 * time2retain handler) and contain and active session usage count we
4499 * restart the timer and exit.
4501 if (!in_interrupt()) {
4502 if (iscsit_check_session_usage_count(sess
) == 1)
4503 iscsit_stop_session(sess
, 1, 1);
4505 if (iscsit_check_session_usage_count(sess
) == 2) {
4506 atomic_set(&sess
->session_logout
, 0);
4507 iscsit_start_time2retain_handler(sess
);
4512 transport_deregister_session(sess
->se_sess
);
4514 if (sess
->sess_ops
->ErrorRecoveryLevel
== 2)
4515 iscsit_free_connection_recovery_entires(sess
);
4517 iscsit_free_all_ooo_cmdsns(sess
);
4519 spin_lock_bh(&se_tpg
->session_lock
);
4520 pr_debug("Moving to TARG_SESS_STATE_FREE.\n");
4521 sess
->session_state
= TARG_SESS_STATE_FREE
;
4522 pr_debug("Released iSCSI session from node: %s\n",
4523 sess
->sess_ops
->InitiatorName
);
4526 tpg
->tpg_tiqn
->tiqn_nsessions
--;
4528 pr_debug("Decremented number of active iSCSI Sessions on"
4529 " iSCSI TPG: %hu to %u\n", tpg
->tpgt
, tpg
->nsessions
);
4531 spin_lock(&sess_idr_lock
);
4532 idr_remove(&sess_idr
, sess
->session_index
);
4533 spin_unlock(&sess_idr_lock
);
4535 kfree(sess
->sess_ops
);
4536 sess
->sess_ops
= NULL
;
4537 spin_unlock_bh(&se_tpg
->session_lock
);
4543 static void iscsit_logout_post_handler_closesession(
4544 struct iscsi_conn
*conn
)
4546 struct iscsi_session
*sess
= conn
->sess
;
4549 * Traditional iscsi/tcp will invoke this logic from TX thread
4550 * context during session logout, so clear tx_thread_active and
4551 * sleep if iscsit_close_connection() has not already occured.
4553 * Since iser-target invokes this logic from it's own workqueue,
4554 * always sleep waiting for RX/TX thread shutdown to complete
4555 * within iscsit_close_connection().
4557 if (conn
->conn_transport
->transport_type
== ISCSI_TCP
)
4558 sleep
= cmpxchg(&conn
->tx_thread_active
, true, false);
4560 atomic_set(&conn
->conn_logout_remove
, 0);
4561 complete(&conn
->conn_logout_comp
);
4563 iscsit_dec_conn_usage_count(conn
);
4564 iscsit_stop_session(sess
, sleep
, sleep
);
4565 iscsit_dec_session_usage_count(sess
);
4566 target_put_session(sess
->se_sess
);
4569 static void iscsit_logout_post_handler_samecid(
4570 struct iscsi_conn
*conn
)
4574 if (conn
->conn_transport
->transport_type
== ISCSI_TCP
)
4575 sleep
= cmpxchg(&conn
->tx_thread_active
, true, false);
4577 atomic_set(&conn
->conn_logout_remove
, 0);
4578 complete(&conn
->conn_logout_comp
);
4580 iscsit_cause_connection_reinstatement(conn
, sleep
);
4581 iscsit_dec_conn_usage_count(conn
);
4584 static void iscsit_logout_post_handler_diffcid(
4585 struct iscsi_conn
*conn
,
4588 struct iscsi_conn
*l_conn
;
4589 struct iscsi_session
*sess
= conn
->sess
;
4590 bool conn_found
= false;
4595 spin_lock_bh(&sess
->conn_lock
);
4596 list_for_each_entry(l_conn
, &sess
->sess_conn_list
, conn_list
) {
4597 if (l_conn
->cid
== cid
) {
4598 iscsit_inc_conn_usage_count(l_conn
);
4603 spin_unlock_bh(&sess
->conn_lock
);
4609 l_conn
->sock
->ops
->shutdown(l_conn
->sock
, RCV_SHUTDOWN
);
4611 spin_lock_bh(&l_conn
->state_lock
);
4612 pr_debug("Moving to TARG_CONN_STATE_IN_LOGOUT.\n");
4613 l_conn
->conn_state
= TARG_CONN_STATE_IN_LOGOUT
;
4614 spin_unlock_bh(&l_conn
->state_lock
);
4616 iscsit_cause_connection_reinstatement(l_conn
, 1);
4617 iscsit_dec_conn_usage_count(l_conn
);
4621 * Return of 0 causes the TX thread to restart.
4623 int iscsit_logout_post_handler(
4624 struct iscsi_cmd
*cmd
,
4625 struct iscsi_conn
*conn
)
4629 switch (cmd
->logout_reason
) {
4630 case ISCSI_LOGOUT_REASON_CLOSE_SESSION
:
4631 switch (cmd
->logout_response
) {
4632 case ISCSI_LOGOUT_SUCCESS
:
4633 case ISCSI_LOGOUT_CLEANUP_FAILED
:
4635 iscsit_logout_post_handler_closesession(conn
);
4640 case ISCSI_LOGOUT_REASON_CLOSE_CONNECTION
:
4641 if (conn
->cid
== cmd
->logout_cid
) {
4642 switch (cmd
->logout_response
) {
4643 case ISCSI_LOGOUT_SUCCESS
:
4644 case ISCSI_LOGOUT_CLEANUP_FAILED
:
4646 iscsit_logout_post_handler_samecid(conn
);
4651 switch (cmd
->logout_response
) {
4652 case ISCSI_LOGOUT_SUCCESS
:
4653 iscsit_logout_post_handler_diffcid(conn
,
4656 case ISCSI_LOGOUT_CID_NOT_FOUND
:
4657 case ISCSI_LOGOUT_CLEANUP_FAILED
:
4664 case ISCSI_LOGOUT_REASON_RECOVERY
:
4665 switch (cmd
->logout_response
) {
4666 case ISCSI_LOGOUT_SUCCESS
:
4667 case ISCSI_LOGOUT_CID_NOT_FOUND
:
4668 case ISCSI_LOGOUT_RECOVERY_UNSUPPORTED
:
4669 case ISCSI_LOGOUT_CLEANUP_FAILED
:
4681 EXPORT_SYMBOL(iscsit_logout_post_handler
);
4683 void iscsit_fail_session(struct iscsi_session
*sess
)
4685 struct iscsi_conn
*conn
;
4687 spin_lock_bh(&sess
->conn_lock
);
4688 list_for_each_entry(conn
, &sess
->sess_conn_list
, conn_list
) {
4689 pr_debug("Moving to TARG_CONN_STATE_CLEANUP_WAIT.\n");
4690 conn
->conn_state
= TARG_CONN_STATE_CLEANUP_WAIT
;
4692 spin_unlock_bh(&sess
->conn_lock
);
4694 pr_debug("Moving to TARG_SESS_STATE_FAILED.\n");
4695 sess
->session_state
= TARG_SESS_STATE_FAILED
;
4698 int iscsit_free_session(struct iscsi_session
*sess
)
4700 u16 conn_count
= atomic_read(&sess
->nconn
);
4701 struct iscsi_conn
*conn
, *conn_tmp
= NULL
;
4704 spin_lock_bh(&sess
->conn_lock
);
4705 atomic_set(&sess
->sleep_on_sess_wait_comp
, 1);
4707 list_for_each_entry_safe(conn
, conn_tmp
, &sess
->sess_conn_list
,
4709 if (conn_count
== 0)
4712 if (list_is_last(&conn
->conn_list
, &sess
->sess_conn_list
)) {
4715 iscsit_inc_conn_usage_count(conn_tmp
);
4718 iscsit_inc_conn_usage_count(conn
);
4720 spin_unlock_bh(&sess
->conn_lock
);
4721 iscsit_cause_connection_reinstatement(conn
, 1);
4722 spin_lock_bh(&sess
->conn_lock
);
4724 iscsit_dec_conn_usage_count(conn
);
4726 iscsit_dec_conn_usage_count(conn_tmp
);
4731 if (atomic_read(&sess
->nconn
)) {
4732 spin_unlock_bh(&sess
->conn_lock
);
4733 wait_for_completion(&sess
->session_wait_comp
);
4735 spin_unlock_bh(&sess
->conn_lock
);
4737 target_put_session(sess
->se_sess
);
4741 void iscsit_stop_session(
4742 struct iscsi_session
*sess
,
4744 int connection_sleep
)
4746 u16 conn_count
= atomic_read(&sess
->nconn
);
4747 struct iscsi_conn
*conn
, *conn_tmp
= NULL
;
4750 spin_lock_bh(&sess
->conn_lock
);
4752 atomic_set(&sess
->sleep_on_sess_wait_comp
, 1);
4754 if (connection_sleep
) {
4755 list_for_each_entry_safe(conn
, conn_tmp
, &sess
->sess_conn_list
,
4757 if (conn_count
== 0)
4760 if (list_is_last(&conn
->conn_list
, &sess
->sess_conn_list
)) {
4763 iscsit_inc_conn_usage_count(conn_tmp
);
4766 iscsit_inc_conn_usage_count(conn
);
4768 spin_unlock_bh(&sess
->conn_lock
);
4769 iscsit_cause_connection_reinstatement(conn
, 1);
4770 spin_lock_bh(&sess
->conn_lock
);
4772 iscsit_dec_conn_usage_count(conn
);
4774 iscsit_dec_conn_usage_count(conn_tmp
);
4778 list_for_each_entry(conn
, &sess
->sess_conn_list
, conn_list
)
4779 iscsit_cause_connection_reinstatement(conn
, 0);
4782 if (session_sleep
&& atomic_read(&sess
->nconn
)) {
4783 spin_unlock_bh(&sess
->conn_lock
);
4784 wait_for_completion(&sess
->session_wait_comp
);
4786 spin_unlock_bh(&sess
->conn_lock
);
4789 int iscsit_release_sessions_for_tpg(struct iscsi_portal_group
*tpg
, int force
)
4791 struct iscsi_session
*sess
;
4792 struct se_portal_group
*se_tpg
= &tpg
->tpg_se_tpg
;
4793 struct se_session
*se_sess
, *se_sess_tmp
;
4794 LIST_HEAD(free_list
);
4795 int session_count
= 0;
4797 spin_lock_bh(&se_tpg
->session_lock
);
4798 if (tpg
->nsessions
&& !force
) {
4799 spin_unlock_bh(&se_tpg
->session_lock
);
4803 list_for_each_entry_safe(se_sess
, se_sess_tmp
, &se_tpg
->tpg_sess_list
,
4805 sess
= (struct iscsi_session
*)se_sess
->fabric_sess_ptr
;
4807 spin_lock(&sess
->conn_lock
);
4808 if (atomic_read(&sess
->session_fall_back_to_erl0
) ||
4809 atomic_read(&sess
->session_logout
) ||
4810 (sess
->time2retain_timer_flags
& ISCSI_TF_EXPIRED
)) {
4811 spin_unlock(&sess
->conn_lock
);
4814 atomic_set(&sess
->session_reinstatement
, 1);
4815 spin_unlock(&sess
->conn_lock
);
4817 list_move_tail(&se_sess
->sess_list
, &free_list
);
4819 spin_unlock_bh(&se_tpg
->session_lock
);
4821 list_for_each_entry_safe(se_sess
, se_sess_tmp
, &free_list
, sess_list
) {
4822 sess
= (struct iscsi_session
*)se_sess
->fabric_sess_ptr
;
4824 iscsit_free_session(sess
);
4828 pr_debug("Released %d iSCSI Session(s) from Target Portal"
4829 " Group: %hu\n", session_count
, tpg
->tpgt
);
4833 MODULE_DESCRIPTION("iSCSI-Target Driver for mainline target infrastructure");
4834 MODULE_VERSION("4.1.x");
4835 MODULE_AUTHOR("nab@Linux-iSCSI.org");
4836 MODULE_LICENSE("GPL");
4838 module_init(iscsi_target_init_module
);
4839 module_exit(iscsi_target_cleanup_module
);