Merge branch 'timers-for-linus-migration' of git://git.kernel.org/pub/scm/linux/kerne...
[linux-2.6] / drivers / scsi / bnx2i / bnx2i_iscsi.c
1 /*
2  * bnx2i_iscsi.c: Broadcom NetXtreme II iSCSI driver.
3  *
4  * Copyright (c) 2006 - 2009 Broadcom Corporation
5  * Copyright (c) 2007, 2008 Red Hat, Inc.  All rights reserved.
6  * Copyright (c) 2007, 2008 Mike Christie
7  *
8  * This program is free software; you can redistribute it and/or modify
9  * it under the terms of the GNU General Public License as published by
10  * the Free Software Foundation.
11  *
12  * Written by: Anil Veerabhadrappa (anilgv@broadcom.com)
13  */
14
15 #include <scsi/scsi_tcq.h>
16 #include <scsi/libiscsi.h>
17 #include "bnx2i.h"
18
19 struct scsi_transport_template *bnx2i_scsi_xport_template;
20 struct iscsi_transport bnx2i_iscsi_transport;
21 static struct scsi_host_template bnx2i_host_template;
22
23 /*
24  * Global endpoint resource info
25  */
26 static DEFINE_SPINLOCK(bnx2i_resc_lock); /* protects global resources */
27
28
29 static int bnx2i_adapter_ready(struct bnx2i_hba *hba)
30 {
31         int retval = 0;
32
33         if (!hba || !test_bit(ADAPTER_STATE_UP, &hba->adapter_state) ||
34             test_bit(ADAPTER_STATE_GOING_DOWN, &hba->adapter_state) ||
35             test_bit(ADAPTER_STATE_LINK_DOWN, &hba->adapter_state))
36                 retval = -EPERM;
37         return retval;
38 }
39
40 /**
41  * bnx2i_get_write_cmd_bd_idx - identifies various BD bookmarks
42  * @cmd:                iscsi cmd struct pointer
43  * @buf_off:            absolute buffer offset
44  * @start_bd_off:       u32 pointer to return the offset within the BD
45  *                      indicated by 'start_bd_idx' on which 'buf_off' falls
46  * @start_bd_idx:       index of the BD on which 'buf_off' falls
47  *
48  * identifies & marks various bd info for scsi command's imm data,
49  * unsolicited data and the first solicited data seq.
50  */
51 static void bnx2i_get_write_cmd_bd_idx(struct bnx2i_cmd *cmd, u32 buf_off,
52                                        u32 *start_bd_off, u32 *start_bd_idx)
53 {
54         struct iscsi_bd *bd_tbl = cmd->io_tbl.bd_tbl;
55         u32 cur_offset = 0;
56         u32 cur_bd_idx = 0;
57
58         if (buf_off) {
59                 while (buf_off >= (cur_offset + bd_tbl->buffer_length)) {
60                         cur_offset += bd_tbl->buffer_length;
61                         cur_bd_idx++;
62                         bd_tbl++;
63                 }
64         }
65
66         *start_bd_off = buf_off - cur_offset;
67         *start_bd_idx = cur_bd_idx;
68 }
69
70 /**
71  * bnx2i_setup_write_cmd_bd_info - sets up BD various information
72  * @task:       transport layer's cmd struct pointer
73  *
74  * identifies & marks various bd info for scsi command's immediate data,
75  * unsolicited data and first solicited data seq which includes BD start
76  * index & BD buf off. his function takes into account iscsi parameter such
77  * as immediate data and unsolicited data is support on this connection.
78  */
79 static void bnx2i_setup_write_cmd_bd_info(struct iscsi_task *task)
80 {
81         struct bnx2i_cmd *cmd = task->dd_data;
82         u32 start_bd_offset;
83         u32 start_bd_idx;
84         u32 buffer_offset = 0;
85         u32 cmd_len = cmd->req.total_data_transfer_length;
86
87         /* if ImmediateData is turned off & IntialR2T is turned on,
88          * there will be no immediate or unsolicited data, just return.
89          */
90         if (!iscsi_task_has_unsol_data(task) && !task->imm_count)
91                 return;
92
93         /* Immediate data */
94         buffer_offset += task->imm_count;
95         if (task->imm_count == cmd_len)
96                 return;
97
98         if (iscsi_task_has_unsol_data(task)) {
99                 bnx2i_get_write_cmd_bd_idx(cmd, buffer_offset,
100                                            &start_bd_offset, &start_bd_idx);
101                 cmd->req.ud_buffer_offset = start_bd_offset;
102                 cmd->req.ud_start_bd_index = start_bd_idx;
103                 buffer_offset += task->unsol_r2t.data_length;
104         }
105
106         if (buffer_offset != cmd_len) {
107                 bnx2i_get_write_cmd_bd_idx(cmd, buffer_offset,
108                                            &start_bd_offset, &start_bd_idx);
109                 if ((start_bd_offset > task->conn->session->first_burst) ||
110                     (start_bd_idx > scsi_sg_count(cmd->scsi_cmd))) {
111                         int i = 0;
112
113                         iscsi_conn_printk(KERN_ALERT, task->conn,
114                                           "bnx2i- error, buf offset 0x%x "
115                                           "bd_valid %d use_sg %d\n",
116                                           buffer_offset, cmd->io_tbl.bd_valid,
117                                           scsi_sg_count(cmd->scsi_cmd));
118                         for (i = 0; i < cmd->io_tbl.bd_valid; i++)
119                                 iscsi_conn_printk(KERN_ALERT, task->conn,
120                                                   "bnx2i err, bd[%d]: len %x\n",
121                                                   i, cmd->io_tbl.bd_tbl[i].\
122                                                   buffer_length);
123                 }
124                 cmd->req.sd_buffer_offset = start_bd_offset;
125                 cmd->req.sd_start_bd_index = start_bd_idx;
126         }
127 }
128
129
130
131 /**
132  * bnx2i_map_scsi_sg - maps IO buffer and prepares the BD table
133  * @hba:        adapter instance
134  * @cmd:        iscsi cmd struct pointer
135  *
136  * map SG list
137  */
138 static int bnx2i_map_scsi_sg(struct bnx2i_hba *hba, struct bnx2i_cmd *cmd)
139 {
140         struct scsi_cmnd *sc = cmd->scsi_cmd;
141         struct iscsi_bd *bd = cmd->io_tbl.bd_tbl;
142         struct scatterlist *sg;
143         int byte_count = 0;
144         int bd_count = 0;
145         int sg_count;
146         int sg_len;
147         u64 addr;
148         int i;
149
150         BUG_ON(scsi_sg_count(sc) > ISCSI_MAX_BDS_PER_CMD);
151
152         sg_count = scsi_dma_map(sc);
153
154         scsi_for_each_sg(sc, sg, sg_count, i) {
155                 sg_len = sg_dma_len(sg);
156                 addr = (u64) sg_dma_address(sg);
157                 bd[bd_count].buffer_addr_lo = addr & 0xffffffff;
158                 bd[bd_count].buffer_addr_hi = addr >> 32;
159                 bd[bd_count].buffer_length = sg_len;
160                 bd[bd_count].flags = 0;
161                 if (bd_count == 0)
162                         bd[bd_count].flags = ISCSI_BD_FIRST_IN_BD_CHAIN;
163
164                 byte_count += sg_len;
165                 bd_count++;
166         }
167
168         if (bd_count)
169                 bd[bd_count - 1].flags |= ISCSI_BD_LAST_IN_BD_CHAIN;
170
171         BUG_ON(byte_count != scsi_bufflen(sc));
172         return bd_count;
173 }
174
175 /**
176  * bnx2i_iscsi_map_sg_list - maps SG list
177  * @cmd:        iscsi cmd struct pointer
178  *
179  * creates BD list table for the command
180  */
181 static void bnx2i_iscsi_map_sg_list(struct bnx2i_cmd *cmd)
182 {
183         int bd_count;
184
185         bd_count  = bnx2i_map_scsi_sg(cmd->conn->hba, cmd);
186         if (!bd_count) {
187                 struct iscsi_bd *bd = cmd->io_tbl.bd_tbl;
188
189                 bd[0].buffer_addr_lo = bd[0].buffer_addr_hi = 0;
190                 bd[0].buffer_length = bd[0].flags = 0;
191         }
192         cmd->io_tbl.bd_valid = bd_count;
193 }
194
195
196 /**
197  * bnx2i_iscsi_unmap_sg_list - unmaps SG list
198  * @cmd:        iscsi cmd struct pointer
199  *
200  * unmap IO buffers and invalidate the BD table
201  */
202 void bnx2i_iscsi_unmap_sg_list(struct bnx2i_cmd *cmd)
203 {
204         struct scsi_cmnd *sc = cmd->scsi_cmd;
205
206         if (cmd->io_tbl.bd_valid && sc) {
207                 scsi_dma_unmap(sc);
208                 cmd->io_tbl.bd_valid = 0;
209         }
210 }
211
212 static void bnx2i_setup_cmd_wqe_template(struct bnx2i_cmd *cmd)
213 {
214         memset(&cmd->req, 0x00, sizeof(cmd->req));
215         cmd->req.op_code = 0xFF;
216         cmd->req.bd_list_addr_lo = (u32) cmd->io_tbl.bd_tbl_dma;
217         cmd->req.bd_list_addr_hi =
218                 (u32) ((u64) cmd->io_tbl.bd_tbl_dma >> 32);
219
220 }
221
222
223 /**
224  * bnx2i_bind_conn_to_iscsi_cid - bind conn structure to 'iscsi_cid'
225  * @hba:        pointer to adapter instance
226  * @conn:       pointer to iscsi connection
227  * @iscsi_cid:  iscsi context ID, range 0 - (MAX_CONN - 1)
228  *
229  * update iscsi cid table entry with connection pointer. This enables
230  *      driver to quickly get hold of connection structure pointer in
231  *      completion/interrupt thread using iscsi context ID
232  */
233 static int bnx2i_bind_conn_to_iscsi_cid(struct bnx2i_hba *hba,
234                                         struct bnx2i_conn *bnx2i_conn,
235                                         u32 iscsi_cid)
236 {
237         if (hba && hba->cid_que.conn_cid_tbl[iscsi_cid]) {
238                 iscsi_conn_printk(KERN_ALERT, bnx2i_conn->cls_conn->dd_data,
239                                  "conn bind - entry #%d not free\n", iscsi_cid);
240                 return -EBUSY;
241         }
242
243         hba->cid_que.conn_cid_tbl[iscsi_cid] = bnx2i_conn;
244         return 0;
245 }
246
247
248 /**
249  * bnx2i_get_conn_from_id - maps an iscsi cid to corresponding conn ptr
250  * @hba:        pointer to adapter instance
251  * @iscsi_cid:  iscsi context ID, range 0 - (MAX_CONN - 1)
252  */
253 struct bnx2i_conn *bnx2i_get_conn_from_id(struct bnx2i_hba *hba,
254                                           u16 iscsi_cid)
255 {
256         if (!hba->cid_que.conn_cid_tbl) {
257                 printk(KERN_ERR "bnx2i: ERROR - missing conn<->cid table\n");
258                 return NULL;
259
260         } else if (iscsi_cid >= hba->max_active_conns) {
261                 printk(KERN_ERR "bnx2i: wrong cid #%d\n", iscsi_cid);
262                 return NULL;
263         }
264         return hba->cid_que.conn_cid_tbl[iscsi_cid];
265 }
266
267
268 /**
269  * bnx2i_alloc_iscsi_cid - allocates a iscsi_cid from free pool
270  * @hba:        pointer to adapter instance
271  */
272 static u32 bnx2i_alloc_iscsi_cid(struct bnx2i_hba *hba)
273 {
274         int idx;
275
276         if (!hba->cid_que.cid_free_cnt)
277                 return -1;
278
279         idx = hba->cid_que.cid_q_cons_idx;
280         hba->cid_que.cid_q_cons_idx++;
281         if (hba->cid_que.cid_q_cons_idx == hba->cid_que.cid_q_max_idx)
282                 hba->cid_que.cid_q_cons_idx = 0;
283
284         hba->cid_que.cid_free_cnt--;
285         return hba->cid_que.cid_que[idx];
286 }
287
288
289 /**
290  * bnx2i_free_iscsi_cid - returns tcp port to free list
291  * @hba:                pointer to adapter instance
292  * @iscsi_cid:          iscsi context ID to free
293  */
294 static void bnx2i_free_iscsi_cid(struct bnx2i_hba *hba, u16 iscsi_cid)
295 {
296         int idx;
297
298         if (iscsi_cid == (u16) -1)
299                 return;
300
301         hba->cid_que.cid_free_cnt++;
302
303         idx = hba->cid_que.cid_q_prod_idx;
304         hba->cid_que.cid_que[idx] = iscsi_cid;
305         hba->cid_que.conn_cid_tbl[iscsi_cid] = NULL;
306         hba->cid_que.cid_q_prod_idx++;
307         if (hba->cid_que.cid_q_prod_idx == hba->cid_que.cid_q_max_idx)
308                 hba->cid_que.cid_q_prod_idx = 0;
309 }
310
311
312 /**
313  * bnx2i_setup_free_cid_que - sets up free iscsi cid queue
314  * @hba:        pointer to adapter instance
315  *
316  * allocates memory for iscsi cid queue & 'cid - conn ptr' mapping table,
317  *      and initialize table attributes
318  */
319 static int bnx2i_setup_free_cid_que(struct bnx2i_hba *hba)
320 {
321         int mem_size;
322         int i;
323
324         mem_size = hba->max_active_conns * sizeof(u32);
325         mem_size = (mem_size + (PAGE_SIZE - 1)) & PAGE_MASK;
326
327         hba->cid_que.cid_que_base = kmalloc(mem_size, GFP_KERNEL);
328         if (!hba->cid_que.cid_que_base)
329                 return -ENOMEM;
330
331         mem_size = hba->max_active_conns * sizeof(struct bnx2i_conn *);
332         mem_size = (mem_size + (PAGE_SIZE - 1)) & PAGE_MASK;
333         hba->cid_que.conn_cid_tbl = kmalloc(mem_size, GFP_KERNEL);
334         if (!hba->cid_que.conn_cid_tbl) {
335                 kfree(hba->cid_que.cid_que_base);
336                 hba->cid_que.cid_que_base = NULL;
337                 return -ENOMEM;
338         }
339
340         hba->cid_que.cid_que = (u32 *)hba->cid_que.cid_que_base;
341         hba->cid_que.cid_q_prod_idx = 0;
342         hba->cid_que.cid_q_cons_idx = 0;
343         hba->cid_que.cid_q_max_idx = hba->max_active_conns;
344         hba->cid_que.cid_free_cnt = hba->max_active_conns;
345
346         for (i = 0; i < hba->max_active_conns; i++) {
347                 hba->cid_que.cid_que[i] = i;
348                 hba->cid_que.conn_cid_tbl[i] = NULL;
349         }
350         return 0;
351 }
352
353
354 /**
355  * bnx2i_release_free_cid_que - releases 'iscsi_cid' queue resources
356  * @hba:        pointer to adapter instance
357  */
358 static void bnx2i_release_free_cid_que(struct bnx2i_hba *hba)
359 {
360         kfree(hba->cid_que.cid_que_base);
361         hba->cid_que.cid_que_base = NULL;
362
363         kfree(hba->cid_que.conn_cid_tbl);
364         hba->cid_que.conn_cid_tbl = NULL;
365 }
366
367
368 /**
369  * bnx2i_alloc_ep - allocates ep structure from global pool
370  * @hba:        pointer to adapter instance
371  *
372  * routine allocates a free endpoint structure from global pool and
373  *      a tcp port to be used for this connection.  Global resource lock,
374  *      'bnx2i_resc_lock' is held while accessing shared global data structures
375  */
376 static struct iscsi_endpoint *bnx2i_alloc_ep(struct bnx2i_hba *hba)
377 {
378         struct iscsi_endpoint *ep;
379         struct bnx2i_endpoint *bnx2i_ep;
380
381         ep = iscsi_create_endpoint(sizeof(*bnx2i_ep));
382         if (!ep) {
383                 printk(KERN_ERR "bnx2i: Could not allocate ep\n");
384                 return NULL;
385         }
386
387         bnx2i_ep = ep->dd_data;
388         INIT_LIST_HEAD(&bnx2i_ep->link);
389         bnx2i_ep->state = EP_STATE_IDLE;
390         bnx2i_ep->hba = hba;
391         bnx2i_ep->hba_age = hba->age;
392         hba->ofld_conns_active++;
393         init_waitqueue_head(&bnx2i_ep->ofld_wait);
394         return ep;
395 }
396
397
398 /**
399  * bnx2i_free_ep - free endpoint
400  * @ep:         pointer to iscsi endpoint structure
401  */
402 static void bnx2i_free_ep(struct iscsi_endpoint *ep)
403 {
404         struct bnx2i_endpoint *bnx2i_ep = ep->dd_data;
405         unsigned long flags;
406
407         spin_lock_irqsave(&bnx2i_resc_lock, flags);
408         bnx2i_ep->state = EP_STATE_IDLE;
409         bnx2i_ep->hba->ofld_conns_active--;
410
411         bnx2i_free_iscsi_cid(bnx2i_ep->hba, bnx2i_ep->ep_iscsi_cid);
412         if (bnx2i_ep->conn) {
413                 bnx2i_ep->conn->ep = NULL;
414                 bnx2i_ep->conn = NULL;
415         }
416
417         bnx2i_ep->hba = NULL;
418         spin_unlock_irqrestore(&bnx2i_resc_lock, flags);
419         iscsi_destroy_endpoint(ep);
420 }
421
422
423 /**
424  * bnx2i_alloc_bdt - allocates buffer descriptor (BD) table for the command
425  * @hba:        adapter instance pointer
426  * @session:    iscsi session pointer
427  * @cmd:        iscsi command structure
428  */
429 static int bnx2i_alloc_bdt(struct bnx2i_hba *hba, struct iscsi_session *session,
430                            struct bnx2i_cmd *cmd)
431 {
432         struct io_bdt *io = &cmd->io_tbl;
433         struct iscsi_bd *bd;
434
435         io->bd_tbl = dma_alloc_coherent(&hba->pcidev->dev,
436                                         ISCSI_MAX_BDS_PER_CMD * sizeof(*bd),
437                                         &io->bd_tbl_dma, GFP_KERNEL);
438         if (!io->bd_tbl) {
439                 iscsi_session_printk(KERN_ERR, session, "Could not "
440                                      "allocate bdt.\n");
441                 return -ENOMEM;
442         }
443         io->bd_valid = 0;
444         return 0;
445 }
446
447 /**
448  * bnx2i_destroy_cmd_pool - destroys iscsi command pool and release BD table
449  * @hba:        adapter instance pointer
450  * @session:    iscsi session pointer
451  * @cmd:        iscsi command structure
452  */
453 static void bnx2i_destroy_cmd_pool(struct bnx2i_hba *hba,
454                                    struct iscsi_session *session)
455 {
456         int i;
457
458         for (i = 0; i < session->cmds_max; i++) {
459                 struct iscsi_task *task = session->cmds[i];
460                 struct bnx2i_cmd *cmd = task->dd_data;
461
462                 if (cmd->io_tbl.bd_tbl)
463                         dma_free_coherent(&hba->pcidev->dev,
464                                           ISCSI_MAX_BDS_PER_CMD *
465                                           sizeof(struct iscsi_bd),
466                                           cmd->io_tbl.bd_tbl,
467                                           cmd->io_tbl.bd_tbl_dma);
468         }
469
470 }
471
472
473 /**
474  * bnx2i_setup_cmd_pool - sets up iscsi command pool for the session
475  * @hba:        adapter instance pointer
476  * @session:    iscsi session pointer
477  */
478 static int bnx2i_setup_cmd_pool(struct bnx2i_hba *hba,
479                                 struct iscsi_session *session)
480 {
481         int i;
482
483         for (i = 0; i < session->cmds_max; i++) {
484                 struct iscsi_task *task = session->cmds[i];
485                 struct bnx2i_cmd *cmd = task->dd_data;
486
487                 /* Anil */
488                 task->hdr = &cmd->hdr;
489                 task->hdr_max = sizeof(struct iscsi_hdr);
490
491                 if (bnx2i_alloc_bdt(hba, session, cmd))
492                         goto free_bdts;
493         }
494
495         return 0;
496
497 free_bdts:
498         bnx2i_destroy_cmd_pool(hba, session);
499         return -ENOMEM;
500 }
501
502
503 /**
504  * bnx2i_setup_mp_bdt - allocate BD table resources
505  * @hba:        pointer to adapter structure
506  *
507  * Allocate memory for dummy buffer and associated BD
508  * table to be used by middle path (MP) requests
509  */
510 static int bnx2i_setup_mp_bdt(struct bnx2i_hba *hba)
511 {
512         int rc = 0;
513         struct iscsi_bd *mp_bdt;
514         u64 addr;
515
516         hba->mp_bd_tbl = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
517                                             &hba->mp_bd_dma, GFP_KERNEL);
518         if (!hba->mp_bd_tbl) {
519                 printk(KERN_ERR "unable to allocate Middle Path BDT\n");
520                 rc = -1;
521                 goto out;
522         }
523
524         hba->dummy_buffer = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
525                                                &hba->dummy_buf_dma, GFP_KERNEL);
526         if (!hba->dummy_buffer) {
527                 printk(KERN_ERR "unable to alloc Middle Path Dummy Buffer\n");
528                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
529                                   hba->mp_bd_tbl, hba->mp_bd_dma);
530                 hba->mp_bd_tbl = NULL;
531                 rc = -1;
532                 goto out;
533         }
534
535         mp_bdt = (struct iscsi_bd *) hba->mp_bd_tbl;
536         addr = (unsigned long) hba->dummy_buf_dma;
537         mp_bdt->buffer_addr_lo = addr & 0xffffffff;
538         mp_bdt->buffer_addr_hi = addr >> 32;
539         mp_bdt->buffer_length = PAGE_SIZE;
540         mp_bdt->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
541                         ISCSI_BD_FIRST_IN_BD_CHAIN;
542 out:
543         return rc;
544 }
545
546
547 /**
548  * bnx2i_free_mp_bdt - releases ITT back to free pool
549  * @hba:        pointer to adapter instance
550  *
551  * free MP dummy buffer and associated BD table
552  */
553 static void bnx2i_free_mp_bdt(struct bnx2i_hba *hba)
554 {
555         if (hba->mp_bd_tbl) {
556                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
557                                   hba->mp_bd_tbl, hba->mp_bd_dma);
558                 hba->mp_bd_tbl = NULL;
559         }
560         if (hba->dummy_buffer) {
561                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
562                                   hba->dummy_buffer, hba->dummy_buf_dma);
563                 hba->dummy_buffer = NULL;
564         }
565                 return;
566 }
567
568 /**
569  * bnx2i_drop_session - notifies iscsid of connection error.
570  * @hba:        adapter instance pointer
571  * @session:    iscsi session pointer
572  *
573  * This notifies iscsid that there is a error, so it can initiate
574  * recovery.
575  *
576  * This relies on caller using the iscsi class iterator so the object
577  * is refcounted and does not disapper from under us.
578  */
579 void bnx2i_drop_session(struct iscsi_cls_session *cls_session)
580 {
581         iscsi_session_failure(cls_session->dd_data, ISCSI_ERR_CONN_FAILED);
582 }
583
584 /**
585  * bnx2i_ep_destroy_list_add - add an entry to EP destroy list
586  * @hba:        pointer to adapter instance
587  * @ep:         pointer to endpoint (transport indentifier) structure
588  *
589  * EP destroy queue manager
590  */
591 static int bnx2i_ep_destroy_list_add(struct bnx2i_hba *hba,
592                                      struct bnx2i_endpoint *ep)
593 {
594         write_lock_bh(&hba->ep_rdwr_lock);
595         list_add_tail(&ep->link, &hba->ep_destroy_list);
596         write_unlock_bh(&hba->ep_rdwr_lock);
597         return 0;
598 }
599
600 /**
601  * bnx2i_ep_destroy_list_del - add an entry to EP destroy list
602  *
603  * @hba:                pointer to adapter instance
604  * @ep:                 pointer to endpoint (transport indentifier) structure
605  *
606  * EP destroy queue manager
607  */
608 static int bnx2i_ep_destroy_list_del(struct bnx2i_hba *hba,
609                                      struct bnx2i_endpoint *ep)
610 {
611         write_lock_bh(&hba->ep_rdwr_lock);
612         list_del_init(&ep->link);
613         write_unlock_bh(&hba->ep_rdwr_lock);
614
615         return 0;
616 }
617
618 /**
619  * bnx2i_ep_ofld_list_add - add an entry to ep offload pending list
620  * @hba:        pointer to adapter instance
621  * @ep:         pointer to endpoint (transport indentifier) structure
622  *
623  * pending conn offload completion queue manager
624  */
625 static int bnx2i_ep_ofld_list_add(struct bnx2i_hba *hba,
626                                   struct bnx2i_endpoint *ep)
627 {
628         write_lock_bh(&hba->ep_rdwr_lock);
629         list_add_tail(&ep->link, &hba->ep_ofld_list);
630         write_unlock_bh(&hba->ep_rdwr_lock);
631         return 0;
632 }
633
634 /**
635  * bnx2i_ep_ofld_list_del - add an entry to ep offload pending list
636  * @hba:                pointer to adapter instance
637  * @ep:                 pointer to endpoint (transport indentifier) structure
638  *
639  * pending conn offload completion queue manager
640  */
641 static int bnx2i_ep_ofld_list_del(struct bnx2i_hba *hba,
642                                   struct bnx2i_endpoint *ep)
643 {
644         write_lock_bh(&hba->ep_rdwr_lock);
645         list_del_init(&ep->link);
646         write_unlock_bh(&hba->ep_rdwr_lock);
647         return 0;
648 }
649
650
651 /**
652  * bnx2i_find_ep_in_ofld_list - find iscsi_cid in pending list of endpoints
653  *
654  * @hba:                pointer to adapter instance
655  * @iscsi_cid:          iscsi context ID to find
656  *
657  */
658 struct bnx2i_endpoint *
659 bnx2i_find_ep_in_ofld_list(struct bnx2i_hba *hba, u32 iscsi_cid)
660 {
661         struct list_head *list;
662         struct list_head *tmp;
663         struct bnx2i_endpoint *ep;
664
665         read_lock_bh(&hba->ep_rdwr_lock);
666         list_for_each_safe(list, tmp, &hba->ep_ofld_list) {
667                 ep = (struct bnx2i_endpoint *)list;
668
669                 if (ep->ep_iscsi_cid == iscsi_cid)
670                         break;
671                 ep = NULL;
672         }
673         read_unlock_bh(&hba->ep_rdwr_lock);
674
675         if (!ep)
676                 printk(KERN_ERR "l5 cid %d not found\n", iscsi_cid);
677         return ep;
678 }
679
680
681 /**
682  * bnx2i_find_ep_in_destroy_list - find iscsi_cid in destroy list
683  * @hba:                pointer to adapter instance
684  * @iscsi_cid:          iscsi context ID to find
685  *
686  */
687 struct bnx2i_endpoint *
688 bnx2i_find_ep_in_destroy_list(struct bnx2i_hba *hba, u32 iscsi_cid)
689 {
690         struct list_head *list;
691         struct list_head *tmp;
692         struct bnx2i_endpoint *ep;
693
694         read_lock_bh(&hba->ep_rdwr_lock);
695         list_for_each_safe(list, tmp, &hba->ep_destroy_list) {
696                 ep = (struct bnx2i_endpoint *)list;
697
698                 if (ep->ep_iscsi_cid == iscsi_cid)
699                         break;
700                 ep = NULL;
701         }
702         read_unlock_bh(&hba->ep_rdwr_lock);
703
704         if (!ep)
705                 printk(KERN_ERR "l5 cid %d not found\n", iscsi_cid);
706
707         return ep;
708 }
709
710 /**
711  * bnx2i_setup_host_queue_size - assigns shost->can_queue param
712  * @hba:        pointer to adapter instance
713  * @shost:      scsi host pointer
714  *
715  * Initializes 'can_queue' parameter based on how many outstanding commands
716  *      the device can handle. Each device 5708/5709/57710 has different
717  *      capabilities
718  */
719 static void bnx2i_setup_host_queue_size(struct bnx2i_hba *hba,
720                                         struct Scsi_Host *shost)
721 {
722         if (test_bit(BNX2I_NX2_DEV_5708, &hba->cnic_dev_type))
723                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5708;
724         else if (test_bit(BNX2I_NX2_DEV_5709, &hba->cnic_dev_type))
725                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5709;
726         else if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type))
727                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_57710;
728         else
729                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5708;
730 }
731
732
733 /**
734  * bnx2i_alloc_hba - allocate and init adapter instance
735  * @cnic:       cnic device pointer
736  *
737  * allocate & initialize adapter structure and call other
738  *      support routines to do per adapter initialization
739  */
740 struct bnx2i_hba *bnx2i_alloc_hba(struct cnic_dev *cnic)
741 {
742         struct Scsi_Host *shost;
743         struct bnx2i_hba *hba;
744
745         shost = iscsi_host_alloc(&bnx2i_host_template, sizeof(*hba), 0);
746         if (!shost)
747                 return NULL;
748         shost->dma_boundary = cnic->pcidev->dma_mask;
749         shost->transportt = bnx2i_scsi_xport_template;
750         shost->max_id = ISCSI_MAX_CONNS_PER_HBA;
751         shost->max_channel = 0;
752         shost->max_lun = 512;
753         shost->max_cmd_len = 16;
754
755         hba = iscsi_host_priv(shost);
756         hba->shost = shost;
757         hba->netdev = cnic->netdev;
758         /* Get PCI related information and update hba struct members */
759         hba->pcidev = cnic->pcidev;
760         pci_dev_get(hba->pcidev);
761         hba->pci_did = hba->pcidev->device;
762         hba->pci_vid = hba->pcidev->vendor;
763         hba->pci_sdid = hba->pcidev->subsystem_device;
764         hba->pci_svid = hba->pcidev->subsystem_vendor;
765         hba->pci_func = PCI_FUNC(hba->pcidev->devfn);
766         hba->pci_devno = PCI_SLOT(hba->pcidev->devfn);
767         bnx2i_identify_device(hba);
768
769         bnx2i_identify_device(hba);
770         bnx2i_setup_host_queue_size(hba, shost);
771
772         if (test_bit(BNX2I_NX2_DEV_5709, &hba->cnic_dev_type)) {
773                 hba->regview = ioremap_nocache(hba->netdev->base_addr,
774                                                BNX2_MQ_CONFIG2);
775                 if (!hba->regview)
776                         goto ioreg_map_err;
777         } else if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
778                 hba->regview = ioremap_nocache(hba->netdev->base_addr, 4096);
779                 if (!hba->regview)
780                         goto ioreg_map_err;
781         }
782
783         if (bnx2i_setup_mp_bdt(hba))
784                 goto mp_bdt_mem_err;
785
786         INIT_LIST_HEAD(&hba->ep_ofld_list);
787         INIT_LIST_HEAD(&hba->ep_destroy_list);
788         rwlock_init(&hba->ep_rdwr_lock);
789
790         hba->mtu_supported = BNX2I_MAX_MTU_SUPPORTED;
791
792         /* different values for 5708/5709/57710 */
793         hba->max_active_conns = ISCSI_MAX_CONNS_PER_HBA;
794
795         if (bnx2i_setup_free_cid_que(hba))
796                 goto cid_que_err;
797
798         /* SQ/RQ/CQ size can be changed via sysfx interface */
799         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
800                 if (sq_size && sq_size <= BNX2I_5770X_SQ_WQES_MAX)
801                         hba->max_sqes = sq_size;
802                 else
803                         hba->max_sqes = BNX2I_5770X_SQ_WQES_DEFAULT;
804         } else {        /* 5706/5708/5709 */
805                 if (sq_size && sq_size <= BNX2I_570X_SQ_WQES_MAX)
806                         hba->max_sqes = sq_size;
807                 else
808                         hba->max_sqes = BNX2I_570X_SQ_WQES_DEFAULT;
809         }
810
811         hba->max_rqes = rq_size;
812         hba->max_cqes = hba->max_sqes + rq_size;
813         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
814                 if (hba->max_cqes > BNX2I_5770X_CQ_WQES_MAX)
815                         hba->max_cqes = BNX2I_5770X_CQ_WQES_MAX;
816         } else if (hba->max_cqes > BNX2I_570X_CQ_WQES_MAX)
817                 hba->max_cqes = BNX2I_570X_CQ_WQES_MAX;
818
819         hba->num_ccell = hba->max_sqes / 2;
820
821         spin_lock_init(&hba->lock);
822         mutex_init(&hba->net_dev_lock);
823
824         if (iscsi_host_add(shost, &hba->pcidev->dev))
825                 goto free_dump_mem;
826         return hba;
827
828 free_dump_mem:
829         bnx2i_release_free_cid_que(hba);
830 cid_que_err:
831         bnx2i_free_mp_bdt(hba);
832 mp_bdt_mem_err:
833         if (hba->regview) {
834                 iounmap(hba->regview);
835                 hba->regview = NULL;
836         }
837 ioreg_map_err:
838         pci_dev_put(hba->pcidev);
839         scsi_host_put(shost);
840         return NULL;
841 }
842
843 /**
844  * bnx2i_free_hba- releases hba structure and resources held by the adapter
845  * @hba:        pointer to adapter instance
846  *
847  * free adapter structure and call various cleanup routines.
848  */
849 void bnx2i_free_hba(struct bnx2i_hba *hba)
850 {
851         struct Scsi_Host *shost = hba->shost;
852
853         iscsi_host_remove(shost);
854         INIT_LIST_HEAD(&hba->ep_ofld_list);
855         INIT_LIST_HEAD(&hba->ep_destroy_list);
856         pci_dev_put(hba->pcidev);
857
858         if (hba->regview) {
859                 iounmap(hba->regview);
860                 hba->regview = NULL;
861         }
862         bnx2i_free_mp_bdt(hba);
863         bnx2i_release_free_cid_que(hba);
864         iscsi_host_free(shost);
865 }
866
867 /**
868  * bnx2i_conn_free_login_resources - free DMA resources used for login process
869  * @hba:                pointer to adapter instance
870  * @bnx2i_conn:         iscsi connection pointer
871  *
872  * Login related resources, mostly BDT & payload DMA memory is freed
873  */
874 static void bnx2i_conn_free_login_resources(struct bnx2i_hba *hba,
875                                             struct bnx2i_conn *bnx2i_conn)
876 {
877         if (bnx2i_conn->gen_pdu.resp_bd_tbl) {
878                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
879                                   bnx2i_conn->gen_pdu.resp_bd_tbl,
880                                   bnx2i_conn->gen_pdu.resp_bd_dma);
881                 bnx2i_conn->gen_pdu.resp_bd_tbl = NULL;
882         }
883
884         if (bnx2i_conn->gen_pdu.req_bd_tbl) {
885                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
886                                   bnx2i_conn->gen_pdu.req_bd_tbl,
887                                   bnx2i_conn->gen_pdu.req_bd_dma);
888                 bnx2i_conn->gen_pdu.req_bd_tbl = NULL;
889         }
890
891         if (bnx2i_conn->gen_pdu.resp_buf) {
892                 dma_free_coherent(&hba->pcidev->dev,
893                                   ISCSI_DEF_MAX_RECV_SEG_LEN,
894                                   bnx2i_conn->gen_pdu.resp_buf,
895                                   bnx2i_conn->gen_pdu.resp_dma_addr);
896                 bnx2i_conn->gen_pdu.resp_buf = NULL;
897         }
898
899         if (bnx2i_conn->gen_pdu.req_buf) {
900                 dma_free_coherent(&hba->pcidev->dev,
901                                   ISCSI_DEF_MAX_RECV_SEG_LEN,
902                                   bnx2i_conn->gen_pdu.req_buf,
903                                   bnx2i_conn->gen_pdu.req_dma_addr);
904                 bnx2i_conn->gen_pdu.req_buf = NULL;
905         }
906 }
907
908 /**
909  * bnx2i_conn_alloc_login_resources - alloc DMA resources for login/nop.
910  * @hba:                pointer to adapter instance
911  * @bnx2i_conn:         iscsi connection pointer
912  *
913  * Mgmt task DNA resources are allocated in this routine.
914  */
915 static int bnx2i_conn_alloc_login_resources(struct bnx2i_hba *hba,
916                                             struct bnx2i_conn *bnx2i_conn)
917 {
918         /* Allocate memory for login request/response buffers */
919         bnx2i_conn->gen_pdu.req_buf =
920                 dma_alloc_coherent(&hba->pcidev->dev,
921                                    ISCSI_DEF_MAX_RECV_SEG_LEN,
922                                    &bnx2i_conn->gen_pdu.req_dma_addr,
923                                    GFP_KERNEL);
924         if (bnx2i_conn->gen_pdu.req_buf == NULL)
925                 goto login_req_buf_failure;
926
927         bnx2i_conn->gen_pdu.req_buf_size = 0;
928         bnx2i_conn->gen_pdu.req_wr_ptr = bnx2i_conn->gen_pdu.req_buf;
929
930         bnx2i_conn->gen_pdu.resp_buf =
931                 dma_alloc_coherent(&hba->pcidev->dev,
932                                    ISCSI_DEF_MAX_RECV_SEG_LEN,
933                                    &bnx2i_conn->gen_pdu.resp_dma_addr,
934                                    GFP_KERNEL);
935         if (bnx2i_conn->gen_pdu.resp_buf == NULL)
936                 goto login_resp_buf_failure;
937
938         bnx2i_conn->gen_pdu.resp_buf_size = ISCSI_DEF_MAX_RECV_SEG_LEN;
939         bnx2i_conn->gen_pdu.resp_wr_ptr = bnx2i_conn->gen_pdu.resp_buf;
940
941         bnx2i_conn->gen_pdu.req_bd_tbl =
942                 dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
943                                    &bnx2i_conn->gen_pdu.req_bd_dma, GFP_KERNEL);
944         if (bnx2i_conn->gen_pdu.req_bd_tbl == NULL)
945                 goto login_req_bd_tbl_failure;
946
947         bnx2i_conn->gen_pdu.resp_bd_tbl =
948                 dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
949                                    &bnx2i_conn->gen_pdu.resp_bd_dma,
950                                    GFP_KERNEL);
951         if (bnx2i_conn->gen_pdu.resp_bd_tbl == NULL)
952                 goto login_resp_bd_tbl_failure;
953
954         return 0;
955
956 login_resp_bd_tbl_failure:
957         dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
958                           bnx2i_conn->gen_pdu.req_bd_tbl,
959                           bnx2i_conn->gen_pdu.req_bd_dma);
960         bnx2i_conn->gen_pdu.req_bd_tbl = NULL;
961
962 login_req_bd_tbl_failure:
963         dma_free_coherent(&hba->pcidev->dev, ISCSI_DEF_MAX_RECV_SEG_LEN,
964                           bnx2i_conn->gen_pdu.resp_buf,
965                           bnx2i_conn->gen_pdu.resp_dma_addr);
966         bnx2i_conn->gen_pdu.resp_buf = NULL;
967 login_resp_buf_failure:
968         dma_free_coherent(&hba->pcidev->dev, ISCSI_DEF_MAX_RECV_SEG_LEN,
969                           bnx2i_conn->gen_pdu.req_buf,
970                           bnx2i_conn->gen_pdu.req_dma_addr);
971         bnx2i_conn->gen_pdu.req_buf = NULL;
972 login_req_buf_failure:
973         iscsi_conn_printk(KERN_ERR, bnx2i_conn->cls_conn->dd_data,
974                           "login resource alloc failed!!\n");
975         return -ENOMEM;
976
977 }
978
979
980 /**
981  * bnx2i_iscsi_prep_generic_pdu_bd - prepares BD table.
982  * @bnx2i_conn:         iscsi connection pointer
983  *
984  * Allocates buffers and BD tables before shipping requests to cnic
985  *      for PDUs prepared by 'iscsid' daemon
986  */
987 static void bnx2i_iscsi_prep_generic_pdu_bd(struct bnx2i_conn *bnx2i_conn)
988 {
989         struct iscsi_bd *bd_tbl;
990
991         bd_tbl = (struct iscsi_bd *) bnx2i_conn->gen_pdu.req_bd_tbl;
992
993         bd_tbl->buffer_addr_hi =
994                 (u32) ((u64) bnx2i_conn->gen_pdu.req_dma_addr >> 32);
995         bd_tbl->buffer_addr_lo = (u32) bnx2i_conn->gen_pdu.req_dma_addr;
996         bd_tbl->buffer_length = bnx2i_conn->gen_pdu.req_wr_ptr -
997                                 bnx2i_conn->gen_pdu.req_buf;
998         bd_tbl->reserved0 = 0;
999         bd_tbl->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
1000                         ISCSI_BD_FIRST_IN_BD_CHAIN;
1001
1002         bd_tbl = (struct iscsi_bd  *) bnx2i_conn->gen_pdu.resp_bd_tbl;
1003         bd_tbl->buffer_addr_hi = (u64) bnx2i_conn->gen_pdu.resp_dma_addr >> 32;
1004         bd_tbl->buffer_addr_lo = (u32) bnx2i_conn->gen_pdu.resp_dma_addr;
1005         bd_tbl->buffer_length = ISCSI_DEF_MAX_RECV_SEG_LEN;
1006         bd_tbl->reserved0 = 0;
1007         bd_tbl->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
1008                         ISCSI_BD_FIRST_IN_BD_CHAIN;
1009 }
1010
1011
1012 /**
1013  * bnx2i_iscsi_send_generic_request - called to send mgmt tasks.
1014  * @task:       transport layer task pointer
1015  *
1016  * called to transmit PDUs prepared by the 'iscsid' daemon. iSCSI login,
1017  *      Nop-out and Logout requests flow through this path.
1018  */
1019 static int bnx2i_iscsi_send_generic_request(struct iscsi_task *task)
1020 {
1021         struct bnx2i_cmd *cmd = task->dd_data;
1022         struct bnx2i_conn *bnx2i_conn = cmd->conn;
1023         int rc = 0;
1024         char *buf;
1025         int data_len;
1026
1027         bnx2i_iscsi_prep_generic_pdu_bd(bnx2i_conn);
1028         switch (task->hdr->opcode & ISCSI_OPCODE_MASK) {
1029         case ISCSI_OP_LOGIN:
1030                 bnx2i_send_iscsi_login(bnx2i_conn, task);
1031                 break;
1032         case ISCSI_OP_NOOP_OUT:
1033                 data_len = bnx2i_conn->gen_pdu.req_buf_size;
1034                 buf = bnx2i_conn->gen_pdu.req_buf;
1035                 if (data_len)
1036                         rc = bnx2i_send_iscsi_nopout(bnx2i_conn, task,
1037                                                      RESERVED_ITT,
1038                                                      buf, data_len, 1);
1039                 else
1040                         rc = bnx2i_send_iscsi_nopout(bnx2i_conn, task,
1041                                                      RESERVED_ITT,
1042                                                      NULL, 0, 1);
1043                 break;
1044         case ISCSI_OP_LOGOUT:
1045                 rc = bnx2i_send_iscsi_logout(bnx2i_conn, task);
1046                 break;
1047         case ISCSI_OP_SCSI_TMFUNC:
1048                 rc = bnx2i_send_iscsi_tmf(bnx2i_conn, task);
1049                 break;
1050         default:
1051                 iscsi_conn_printk(KERN_ALERT, bnx2i_conn->cls_conn->dd_data,
1052                                   "send_gen: unsupported op 0x%x\n",
1053                                   task->hdr->opcode);
1054         }
1055         return rc;
1056 }
1057
1058
1059 /**********************************************************************
1060  *              SCSI-ML Interface
1061  **********************************************************************/
1062
1063 /**
1064  * bnx2i_cpy_scsi_cdb - copies LUN & CDB fields in required format to sq wqe
1065  * @sc:         SCSI-ML command pointer
1066  * @cmd:        iscsi cmd pointer
1067  */
1068 static void bnx2i_cpy_scsi_cdb(struct scsi_cmnd *sc, struct bnx2i_cmd *cmd)
1069 {
1070         u32 dword;
1071         int lpcnt;
1072         u8 *srcp;
1073         u32 *dstp;
1074         u32 scsi_lun[2];
1075
1076         int_to_scsilun(sc->device->lun, (struct scsi_lun *) scsi_lun);
1077         cmd->req.lun[0] = be32_to_cpu(scsi_lun[0]);
1078         cmd->req.lun[1] = be32_to_cpu(scsi_lun[1]);
1079
1080         lpcnt = cmd->scsi_cmd->cmd_len / sizeof(dword);
1081         srcp = (u8 *) sc->cmnd;
1082         dstp = (u32 *) cmd->req.cdb;
1083         while (lpcnt--) {
1084                 memcpy(&dword, (const void *) srcp, 4);
1085                 *dstp = cpu_to_be32(dword);
1086                 srcp += 4;
1087                 dstp++;
1088         }
1089         if (sc->cmd_len & 0x3) {
1090                 dword = (u32) srcp[0] | ((u32) srcp[1] << 8);
1091                 *dstp = cpu_to_be32(dword);
1092         }
1093 }
1094
1095 static void bnx2i_cleanup_task(struct iscsi_task *task)
1096 {
1097         struct iscsi_conn *conn = task->conn;
1098         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1099         struct bnx2i_hba *hba = bnx2i_conn->hba;
1100
1101         /*
1102          * mgmt task or cmd was never sent to us to transmit.
1103          */
1104         if (!task->sc || task->state == ISCSI_TASK_PENDING)
1105                 return;
1106         /*
1107          * need to clean-up task context to claim dma buffers
1108          */
1109         if (task->state == ISCSI_TASK_ABRT_TMF) {
1110                 bnx2i_send_cmd_cleanup_req(hba, task->dd_data);
1111
1112                 spin_unlock_bh(&conn->session->lock);
1113                 wait_for_completion_timeout(&bnx2i_conn->cmd_cleanup_cmpl,
1114                                 msecs_to_jiffies(ISCSI_CMD_CLEANUP_TIMEOUT));
1115                 spin_lock_bh(&conn->session->lock);
1116         }
1117         bnx2i_iscsi_unmap_sg_list(task->dd_data);
1118 }
1119
1120 /**
1121  * bnx2i_mtask_xmit - transmit mtask to chip for further processing
1122  * @conn:       transport layer conn structure pointer
1123  * @task:       transport layer command structure pointer
1124  */
1125 static int
1126 bnx2i_mtask_xmit(struct iscsi_conn *conn, struct iscsi_task *task)
1127 {
1128         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1129         struct bnx2i_cmd *cmd = task->dd_data;
1130
1131         memset(bnx2i_conn->gen_pdu.req_buf, 0, ISCSI_DEF_MAX_RECV_SEG_LEN);
1132
1133         bnx2i_setup_cmd_wqe_template(cmd);
1134         bnx2i_conn->gen_pdu.req_buf_size = task->data_count;
1135         if (task->data_count) {
1136                 memcpy(bnx2i_conn->gen_pdu.req_buf, task->data,
1137                        task->data_count);
1138                 bnx2i_conn->gen_pdu.req_wr_ptr =
1139                         bnx2i_conn->gen_pdu.req_buf + task->data_count;
1140         }
1141         cmd->conn = conn->dd_data;
1142         cmd->scsi_cmd = NULL;
1143         return bnx2i_iscsi_send_generic_request(task);
1144 }
1145
1146 /**
1147  * bnx2i_task_xmit - transmit iscsi command to chip for further processing
1148  * @task:       transport layer command structure pointer
1149  *
1150  * maps SG buffers and send request to chip/firmware in the form of SQ WQE
1151  */
1152 static int bnx2i_task_xmit(struct iscsi_task *task)
1153 {
1154         struct iscsi_conn *conn = task->conn;
1155         struct iscsi_session *session = conn->session;
1156         struct Scsi_Host *shost = iscsi_session_to_shost(session->cls_session);
1157         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1158         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1159         struct scsi_cmnd *sc = task->sc;
1160         struct bnx2i_cmd *cmd = task->dd_data;
1161         struct iscsi_cmd *hdr = (struct iscsi_cmd *) task->hdr;
1162
1163         if (test_bit(ADAPTER_STATE_LINK_DOWN, &hba->adapter_state))
1164                 return -ENOTCONN;
1165
1166         if (!bnx2i_conn->is_bound)
1167                 return -ENOTCONN;
1168
1169         /*
1170          * If there is no scsi_cmnd this must be a mgmt task
1171          */
1172         if (!sc)
1173                 return bnx2i_mtask_xmit(conn, task);
1174
1175         bnx2i_setup_cmd_wqe_template(cmd);
1176         cmd->req.op_code = ISCSI_OP_SCSI_CMD;
1177         cmd->conn = bnx2i_conn;
1178         cmd->scsi_cmd = sc;
1179         cmd->req.total_data_transfer_length = scsi_bufflen(sc);
1180         cmd->req.cmd_sn = be32_to_cpu(hdr->cmdsn);
1181
1182         bnx2i_iscsi_map_sg_list(cmd);
1183         bnx2i_cpy_scsi_cdb(sc, cmd);
1184
1185         cmd->req.op_attr = ISCSI_ATTR_SIMPLE;
1186         if (sc->sc_data_direction == DMA_TO_DEVICE) {
1187                 cmd->req.op_attr |= ISCSI_CMD_REQUEST_WRITE;
1188                 cmd->req.itt = task->itt |
1189                         (ISCSI_TASK_TYPE_WRITE << ISCSI_CMD_REQUEST_TYPE_SHIFT);
1190                 bnx2i_setup_write_cmd_bd_info(task);
1191         } else {
1192                 if (scsi_bufflen(sc))
1193                         cmd->req.op_attr |= ISCSI_CMD_REQUEST_READ;
1194                 cmd->req.itt = task->itt |
1195                         (ISCSI_TASK_TYPE_READ << ISCSI_CMD_REQUEST_TYPE_SHIFT);
1196         }
1197
1198         cmd->req.num_bds = cmd->io_tbl.bd_valid;
1199         if (!cmd->io_tbl.bd_valid) {
1200                 cmd->req.bd_list_addr_lo = (u32) hba->mp_bd_dma;
1201                 cmd->req.bd_list_addr_hi = (u32) ((u64) hba->mp_bd_dma >> 32);
1202                 cmd->req.num_bds = 1;
1203         }
1204
1205         bnx2i_send_iscsi_scsicmd(bnx2i_conn, cmd);
1206         return 0;
1207 }
1208
1209 /**
1210  * bnx2i_session_create - create a new iscsi session
1211  * @cmds_max:           max commands supported
1212  * @qdepth:             scsi queue depth to support
1213  * @initial_cmdsn:      initial iscsi CMDSN to be used for this session
1214  *
1215  * Creates a new iSCSI session instance on given device.
1216  */
1217 static struct iscsi_cls_session *
1218 bnx2i_session_create(struct iscsi_endpoint *ep,
1219                      uint16_t cmds_max, uint16_t qdepth,
1220                      uint32_t initial_cmdsn)
1221 {
1222         struct Scsi_Host *shost;
1223         struct iscsi_cls_session *cls_session;
1224         struct bnx2i_hba *hba;
1225         struct bnx2i_endpoint *bnx2i_ep;
1226
1227         if (!ep) {
1228                 printk(KERN_ERR "bnx2i: missing ep.\n");
1229                 return NULL;
1230         }
1231
1232         bnx2i_ep = ep->dd_data;
1233         shost = bnx2i_ep->hba->shost;
1234         hba = iscsi_host_priv(shost);
1235         if (bnx2i_adapter_ready(hba))
1236                 return NULL;
1237
1238         /*
1239          * user can override hw limit as long as it is within
1240          * the min/max.
1241          */
1242         if (cmds_max > hba->max_sqes)
1243                 cmds_max = hba->max_sqes;
1244         else if (cmds_max < BNX2I_SQ_WQES_MIN)
1245                 cmds_max = BNX2I_SQ_WQES_MIN;
1246
1247         cls_session = iscsi_session_setup(&bnx2i_iscsi_transport, shost,
1248                                           cmds_max, sizeof(struct bnx2i_cmd),
1249                                           initial_cmdsn, ISCSI_MAX_TARGET);
1250         if (!cls_session)
1251                 return NULL;
1252
1253         if (bnx2i_setup_cmd_pool(hba, cls_session->dd_data))
1254                 goto session_teardown;
1255         return cls_session;
1256
1257 session_teardown:
1258         iscsi_session_teardown(cls_session);
1259         return NULL;
1260 }
1261
1262
1263 /**
1264  * bnx2i_session_destroy - destroys iscsi session
1265  * @cls_session:        pointer to iscsi cls session
1266  *
1267  * Destroys previously created iSCSI session instance and releases
1268  *      all resources held by it
1269  */
1270 static void bnx2i_session_destroy(struct iscsi_cls_session *cls_session)
1271 {
1272         struct iscsi_session *session = cls_session->dd_data;
1273         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1274         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1275
1276         bnx2i_destroy_cmd_pool(hba, session);
1277         iscsi_session_teardown(cls_session);
1278 }
1279
1280
1281 /**
1282  * bnx2i_conn_create - create iscsi connection instance
1283  * @cls_session:        pointer to iscsi cls session
1284  * @cid:                iscsi cid as per rfc (not NX2's CID terminology)
1285  *
1286  * Creates a new iSCSI connection instance for a given session
1287  */
1288 static struct iscsi_cls_conn *
1289 bnx2i_conn_create(struct iscsi_cls_session *cls_session, uint32_t cid)
1290 {
1291         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1292         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1293         struct bnx2i_conn *bnx2i_conn;
1294         struct iscsi_cls_conn *cls_conn;
1295         struct iscsi_conn *conn;
1296
1297         cls_conn = iscsi_conn_setup(cls_session, sizeof(*bnx2i_conn),
1298                                     cid);
1299         if (!cls_conn)
1300                 return NULL;
1301         conn = cls_conn->dd_data;
1302
1303         bnx2i_conn = conn->dd_data;
1304         bnx2i_conn->cls_conn = cls_conn;
1305         bnx2i_conn->hba = hba;
1306         /* 'ep' ptr will be assigned in bind() call */
1307         bnx2i_conn->ep = NULL;
1308         init_completion(&bnx2i_conn->cmd_cleanup_cmpl);
1309
1310         if (bnx2i_conn_alloc_login_resources(hba, bnx2i_conn)) {
1311                 iscsi_conn_printk(KERN_ALERT, conn,
1312                                   "conn_new: login resc alloc failed!!\n");
1313                 goto free_conn;
1314         }
1315
1316         return cls_conn;
1317
1318 free_conn:
1319         iscsi_conn_teardown(cls_conn);
1320         return NULL;
1321 }
1322
1323 /**
1324  * bnx2i_conn_bind - binds iscsi sess, conn and ep objects together
1325  * @cls_session:        pointer to iscsi cls session
1326  * @cls_conn:           pointer to iscsi cls conn
1327  * @transport_fd:       64-bit EP handle
1328  * @is_leading:         leading connection on this session?
1329  *
1330  * Binds together iSCSI session instance, iSCSI connection instance
1331  *      and the TCP connection. This routine returns error code if
1332  *      TCP connection does not belong on the device iSCSI sess/conn
1333  *      is bound
1334  */
1335 static int bnx2i_conn_bind(struct iscsi_cls_session *cls_session,
1336                            struct iscsi_cls_conn *cls_conn,
1337                            uint64_t transport_fd, int is_leading)
1338 {
1339         struct iscsi_conn *conn = cls_conn->dd_data;
1340         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1341         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1342         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1343         struct bnx2i_endpoint *bnx2i_ep;
1344         struct iscsi_endpoint *ep;
1345         int ret_code;
1346
1347         ep = iscsi_lookup_endpoint(transport_fd);
1348         if (!ep)
1349                 return -EINVAL;
1350
1351         bnx2i_ep = ep->dd_data;
1352         if ((bnx2i_ep->state == EP_STATE_TCP_FIN_RCVD) ||
1353             (bnx2i_ep->state == EP_STATE_TCP_RST_RCVD))
1354                 /* Peer disconnect via' FIN or RST */
1355                 return -EINVAL;
1356
1357         if (iscsi_conn_bind(cls_session, cls_conn, is_leading))
1358                 return -EINVAL;
1359
1360         if (bnx2i_ep->hba != hba) {
1361                 /* Error - TCP connection does not belong to this device
1362                  */
1363                 iscsi_conn_printk(KERN_ALERT, cls_conn->dd_data,
1364                                   "conn bind, ep=0x%p (%s) does not",
1365                                   bnx2i_ep, bnx2i_ep->hba->netdev->name);
1366                 iscsi_conn_printk(KERN_ALERT, cls_conn->dd_data,
1367                                   "belong to hba (%s)\n",
1368                                   hba->netdev->name);
1369                 return -EEXIST;
1370         }
1371
1372         bnx2i_ep->conn = bnx2i_conn;
1373         bnx2i_conn->ep = bnx2i_ep;
1374         bnx2i_conn->iscsi_conn_cid = bnx2i_ep->ep_iscsi_cid;
1375         bnx2i_conn->fw_cid = bnx2i_ep->ep_cid;
1376         bnx2i_conn->is_bound = 1;
1377
1378         ret_code = bnx2i_bind_conn_to_iscsi_cid(hba, bnx2i_conn,
1379                                                 bnx2i_ep->ep_iscsi_cid);
1380
1381         /* 5706/5708/5709 FW takes RQ as full when initiated, but for 57710
1382          * driver needs to explicitly replenish RQ index during setup.
1383          */
1384         if (test_bit(BNX2I_NX2_DEV_57710, &bnx2i_ep->hba->cnic_dev_type))
1385                 bnx2i_put_rq_buf(bnx2i_conn, 0);
1386
1387         bnx2i_arm_cq_event_coalescing(bnx2i_conn->ep, CNIC_ARM_CQE);
1388         return ret_code;
1389 }
1390
1391
1392 /**
1393  * bnx2i_conn_destroy - destroy iscsi connection instance & release resources
1394  * @cls_conn:   pointer to iscsi cls conn
1395  *
1396  * Destroy an iSCSI connection instance and release memory resources held by
1397  *      this connection
1398  */
1399 static void bnx2i_conn_destroy(struct iscsi_cls_conn *cls_conn)
1400 {
1401         struct iscsi_conn *conn = cls_conn->dd_data;
1402         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1403         struct Scsi_Host *shost;
1404         struct bnx2i_hba *hba;
1405
1406         shost = iscsi_session_to_shost(iscsi_conn_to_session(cls_conn));
1407         hba = iscsi_host_priv(shost);
1408
1409         bnx2i_conn_free_login_resources(hba, bnx2i_conn);
1410         iscsi_conn_teardown(cls_conn);
1411 }
1412
1413
1414 /**
1415  * bnx2i_conn_get_param - return iscsi connection parameter to caller
1416  * @cls_conn:   pointer to iscsi cls conn
1417  * @param:      parameter type identifier
1418  * @buf:        buffer pointer
1419  *
1420  * returns iSCSI connection parameters
1421  */
1422 static int bnx2i_conn_get_param(struct iscsi_cls_conn *cls_conn,
1423                                 enum iscsi_param param, char *buf)
1424 {
1425         struct iscsi_conn *conn = cls_conn->dd_data;
1426         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1427         int len = 0;
1428
1429         switch (param) {
1430         case ISCSI_PARAM_CONN_PORT:
1431                 if (bnx2i_conn->ep)
1432                         len = sprintf(buf, "%hu\n",
1433                                       bnx2i_conn->ep->cm_sk->dst_port);
1434                 break;
1435         case ISCSI_PARAM_CONN_ADDRESS:
1436                 if (bnx2i_conn->ep)
1437                         len = sprintf(buf, NIPQUAD_FMT "\n",
1438                                       NIPQUAD(bnx2i_conn->ep->cm_sk->dst_ip));
1439                 break;
1440         default:
1441                 return iscsi_conn_get_param(cls_conn, param, buf);
1442         }
1443
1444         return len;
1445 }
1446
1447 /**
1448  * bnx2i_host_get_param - returns host (adapter) related parameters
1449  * @shost:      scsi host pointer
1450  * @param:      parameter type identifier
1451  * @buf:        buffer pointer
1452  */
1453 static int bnx2i_host_get_param(struct Scsi_Host *shost,
1454                                 enum iscsi_host_param param, char *buf)
1455 {
1456         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1457         int len = 0;
1458
1459         switch (param) {
1460         case ISCSI_HOST_PARAM_HWADDRESS:
1461                 len = sysfs_format_mac(buf, hba->cnic->mac_addr, 6);
1462                 break;
1463         case ISCSI_HOST_PARAM_NETDEV_NAME:
1464                 len = sprintf(buf, "%s\n", hba->netdev->name);
1465                 break;
1466         default:
1467                 return iscsi_host_get_param(shost, param, buf);
1468         }
1469         return len;
1470 }
1471
1472 /**
1473  * bnx2i_conn_start - completes iscsi connection migration to FFP
1474  * @cls_conn:   pointer to iscsi cls conn
1475  *
1476  * last call in FFP migration to handover iscsi conn to the driver
1477  */
1478 static int bnx2i_conn_start(struct iscsi_cls_conn *cls_conn)
1479 {
1480         struct iscsi_conn *conn = cls_conn->dd_data;
1481         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1482
1483         bnx2i_conn->ep->state = EP_STATE_ULP_UPDATE_START;
1484         bnx2i_update_iscsi_conn(conn);
1485
1486         /*
1487          * this should normally not sleep for a long time so it should
1488          * not disrupt the caller.
1489          */
1490         bnx2i_conn->ep->ofld_timer.expires = 1 * HZ + jiffies;
1491         bnx2i_conn->ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1492         bnx2i_conn->ep->ofld_timer.data = (unsigned long) bnx2i_conn->ep;
1493         add_timer(&bnx2i_conn->ep->ofld_timer);
1494         /* update iSCSI context for this conn, wait for CNIC to complete */
1495         wait_event_interruptible(bnx2i_conn->ep->ofld_wait,
1496                         bnx2i_conn->ep->state != EP_STATE_ULP_UPDATE_START);
1497
1498         if (signal_pending(current))
1499                 flush_signals(current);
1500         del_timer_sync(&bnx2i_conn->ep->ofld_timer);
1501
1502         iscsi_conn_start(cls_conn);
1503         return 0;
1504 }
1505
1506
1507 /**
1508  * bnx2i_conn_get_stats - returns iSCSI stats
1509  * @cls_conn:   pointer to iscsi cls conn
1510  * @stats:      pointer to iscsi statistic struct
1511  */
1512 static void bnx2i_conn_get_stats(struct iscsi_cls_conn *cls_conn,
1513                                  struct iscsi_stats *stats)
1514 {
1515         struct iscsi_conn *conn = cls_conn->dd_data;
1516
1517         stats->txdata_octets = conn->txdata_octets;
1518         stats->rxdata_octets = conn->rxdata_octets;
1519         stats->scsicmd_pdus = conn->scsicmd_pdus_cnt;
1520         stats->dataout_pdus = conn->dataout_pdus_cnt;
1521         stats->scsirsp_pdus = conn->scsirsp_pdus_cnt;
1522         stats->datain_pdus = conn->datain_pdus_cnt;
1523         stats->r2t_pdus = conn->r2t_pdus_cnt;
1524         stats->tmfcmd_pdus = conn->tmfcmd_pdus_cnt;
1525         stats->tmfrsp_pdus = conn->tmfrsp_pdus_cnt;
1526         stats->custom_length = 3;
1527         strcpy(stats->custom[2].desc, "eh_abort_cnt");
1528         stats->custom[2].value = conn->eh_abort_cnt;
1529         stats->digest_err = 0;
1530         stats->timeout_err = 0;
1531         stats->custom_length = 0;
1532 }
1533
1534
1535 /**
1536  * bnx2i_check_route - checks if target IP route belongs to one of NX2 devices
1537  * @dst_addr:   target IP address
1538  *
1539  * check if route resolves to BNX2 device
1540  */
1541 static struct bnx2i_hba *bnx2i_check_route(struct sockaddr *dst_addr)
1542 {
1543         struct sockaddr_in *desti = (struct sockaddr_in *) dst_addr;
1544         struct bnx2i_hba *hba;
1545         struct cnic_dev *cnic = NULL;
1546
1547         bnx2i_reg_dev_all();
1548
1549         hba = get_adapter_list_head();
1550         if (hba && hba->cnic)
1551                 cnic = hba->cnic->cm_select_dev(desti, CNIC_ULP_ISCSI);
1552         if (!cnic) {
1553                 printk(KERN_ALERT "bnx2i: no route,"
1554                        "can't connect using cnic\n");
1555                 goto no_nx2_route;
1556         }
1557         hba = bnx2i_find_hba_for_cnic(cnic);
1558         if (!hba)
1559                 goto no_nx2_route;
1560
1561         if (bnx2i_adapter_ready(hba)) {
1562                 printk(KERN_ALERT "bnx2i: check route, hba not found\n");
1563                 goto no_nx2_route;
1564         }
1565         if (hba->netdev->mtu > hba->mtu_supported) {
1566                 printk(KERN_ALERT "bnx2i: %s network i/f mtu is set to %d\n",
1567                                   hba->netdev->name, hba->netdev->mtu);
1568                 printk(KERN_ALERT "bnx2i: iSCSI HBA can support mtu of %d\n",
1569                                   hba->mtu_supported);
1570                 goto no_nx2_route;
1571         }
1572         return hba;
1573 no_nx2_route:
1574         return NULL;
1575 }
1576
1577
1578 /**
1579  * bnx2i_tear_down_conn - tear down iscsi/tcp connection and free resources
1580  * @hba:        pointer to adapter instance
1581  * @ep:         endpoint (transport indentifier) structure
1582  *
1583  * destroys cm_sock structure and on chip iscsi context
1584  */
1585 static int bnx2i_tear_down_conn(struct bnx2i_hba *hba,
1586                                  struct bnx2i_endpoint *ep)
1587 {
1588         if (test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic))
1589                 hba->cnic->cm_destroy(ep->cm_sk);
1590
1591         if (test_bit(ADAPTER_STATE_GOING_DOWN, &ep->hba->adapter_state))
1592                 ep->state = EP_STATE_DISCONN_COMPL;
1593
1594         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type) &&
1595             ep->state == EP_STATE_DISCONN_TIMEDOUT) {
1596                 printk(KERN_ALERT "bnx2i - ERROR - please submit GRC Dump,"
1597                                   " NW/PCIe trace, driver msgs to developers"
1598                                   " for analysis\n");
1599                 return 1;
1600         }
1601
1602         ep->state = EP_STATE_CLEANUP_START;
1603         init_timer(&ep->ofld_timer);
1604         ep->ofld_timer.expires = 10*HZ + jiffies;
1605         ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1606         ep->ofld_timer.data = (unsigned long) ep;
1607         add_timer(&ep->ofld_timer);
1608
1609         bnx2i_ep_destroy_list_add(hba, ep);
1610
1611         /* destroy iSCSI context, wait for it to complete */
1612         bnx2i_send_conn_destroy(hba, ep);
1613         wait_event_interruptible(ep->ofld_wait,
1614                                  (ep->state != EP_STATE_CLEANUP_START));
1615
1616         if (signal_pending(current))
1617                 flush_signals(current);
1618         del_timer_sync(&ep->ofld_timer);
1619
1620         bnx2i_ep_destroy_list_del(hba, ep);
1621
1622         if (ep->state != EP_STATE_CLEANUP_CMPL)
1623                 /* should never happen */
1624                 printk(KERN_ALERT "bnx2i - conn destroy failed\n");
1625
1626         return 0;
1627 }
1628
1629
1630 /**
1631  * bnx2i_ep_connect - establish TCP connection to target portal
1632  * @shost:              scsi host
1633  * @dst_addr:           target IP address
1634  * @non_blocking:       blocking or non-blocking call
1635  *
1636  * this routine initiates the TCP/IP connection by invoking Option-2 i/f
1637  *      with l5_core and the CNIC. This is a multi-step process of resolving
1638  *      route to target, create a iscsi connection context, handshaking with
1639  *      CNIC module to create/initialize the socket struct and finally
1640  *      sending down option-2 request to complete TCP 3-way handshake
1641  */
1642 static struct iscsi_endpoint *bnx2i_ep_connect(struct Scsi_Host *shost,
1643                                                struct sockaddr *dst_addr,
1644                                                int non_blocking)
1645 {
1646         u32 iscsi_cid = BNX2I_CID_RESERVED;
1647         struct sockaddr_in *desti = (struct sockaddr_in *) dst_addr;
1648         struct sockaddr_in6 *desti6;
1649         struct bnx2i_endpoint *bnx2i_ep;
1650         struct bnx2i_hba *hba;
1651         struct cnic_dev *cnic;
1652         struct cnic_sockaddr saddr;
1653         struct iscsi_endpoint *ep;
1654         int rc = 0;
1655
1656         if (shost)
1657                 /* driver is given scsi host to work with */
1658                 hba = iscsi_host_priv(shost);
1659         else
1660                 /*
1661                  * check if the given destination can be reached through
1662                  * a iscsi capable NetXtreme2 device
1663                  */
1664                 hba = bnx2i_check_route(dst_addr);
1665         if (!hba) {
1666                 rc = -ENOMEM;
1667                 goto check_busy;
1668         }
1669
1670         cnic = hba->cnic;
1671         ep = bnx2i_alloc_ep(hba);
1672         if (!ep) {
1673                 rc = -ENOMEM;
1674                 goto check_busy;
1675         }
1676         bnx2i_ep = ep->dd_data;
1677
1678         mutex_lock(&hba->net_dev_lock);
1679         if (bnx2i_adapter_ready(hba)) {
1680                 rc = -EPERM;
1681                 goto net_if_down;
1682         }
1683
1684         bnx2i_ep->state = EP_STATE_IDLE;
1685         bnx2i_ep->ep_iscsi_cid = (u16) -1;
1686         bnx2i_ep->num_active_cmds = 0;
1687         iscsi_cid = bnx2i_alloc_iscsi_cid(hba);
1688         if (iscsi_cid == -1) {
1689                 printk(KERN_ALERT "alloc_ep: unable to allocate iscsi cid\n");
1690                 rc = -ENOMEM;
1691                 goto iscsi_cid_err;
1692         }
1693         bnx2i_ep->hba_age = hba->age;
1694
1695         rc = bnx2i_alloc_qp_resc(hba, bnx2i_ep);
1696         if (rc != 0) {
1697                 printk(KERN_ALERT "bnx2i: ep_conn, alloc QP resc error\n");
1698                 rc = -ENOMEM;
1699                 goto qp_resc_err;
1700         }
1701
1702         bnx2i_ep->ep_iscsi_cid = (u16)iscsi_cid;
1703         bnx2i_ep->state = EP_STATE_OFLD_START;
1704         bnx2i_ep_ofld_list_add(hba, bnx2i_ep);
1705
1706         init_timer(&bnx2i_ep->ofld_timer);
1707         bnx2i_ep->ofld_timer.expires = 2 * HZ + jiffies;
1708         bnx2i_ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1709         bnx2i_ep->ofld_timer.data = (unsigned long) bnx2i_ep;
1710         add_timer(&bnx2i_ep->ofld_timer);
1711
1712         bnx2i_send_conn_ofld_req(hba, bnx2i_ep);
1713
1714         /* Wait for CNIC hardware to setup conn context and return 'cid' */
1715         wait_event_interruptible(bnx2i_ep->ofld_wait,
1716                                  bnx2i_ep->state != EP_STATE_OFLD_START);
1717
1718         if (signal_pending(current))
1719                 flush_signals(current);
1720         del_timer_sync(&bnx2i_ep->ofld_timer);
1721
1722         bnx2i_ep_ofld_list_del(hba, bnx2i_ep);
1723
1724         if (bnx2i_ep->state != EP_STATE_OFLD_COMPL) {
1725                 rc = -ENOSPC;
1726                 goto conn_failed;
1727         }
1728
1729         rc = cnic->cm_create(cnic, CNIC_ULP_ISCSI, bnx2i_ep->ep_cid,
1730                              iscsi_cid, &bnx2i_ep->cm_sk, bnx2i_ep);
1731         if (rc) {
1732                 rc = -EINVAL;
1733                 goto conn_failed;
1734         }
1735
1736         bnx2i_ep->cm_sk->rcv_buf = 256 * 1024;
1737         bnx2i_ep->cm_sk->snd_buf = 256 * 1024;
1738         clear_bit(SK_TCP_TIMESTAMP, &bnx2i_ep->cm_sk->tcp_flags);
1739
1740         memset(&saddr, 0, sizeof(saddr));
1741         if (dst_addr->sa_family == AF_INET) {
1742                 desti = (struct sockaddr_in *) dst_addr;
1743                 saddr.remote.v4 = *desti;
1744                 saddr.local.v4.sin_family = desti->sin_family;
1745         } else if (dst_addr->sa_family == AF_INET6) {
1746                 desti6 = (struct sockaddr_in6 *) dst_addr;
1747                 saddr.remote.v6 = *desti6;
1748                 saddr.local.v6.sin6_family = desti6->sin6_family;
1749         }
1750
1751         bnx2i_ep->timestamp = jiffies;
1752         bnx2i_ep->state = EP_STATE_CONNECT_START;
1753         if (!test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic)) {
1754                 rc = -EINVAL;
1755                 goto conn_failed;
1756         } else
1757                 rc = cnic->cm_connect(bnx2i_ep->cm_sk, &saddr);
1758
1759         if (rc)
1760                 goto release_ep;
1761
1762         if (bnx2i_map_ep_dbell_regs(bnx2i_ep))
1763                 goto release_ep;
1764         mutex_unlock(&hba->net_dev_lock);
1765         return ep;
1766
1767 release_ep:
1768         if (bnx2i_tear_down_conn(hba, bnx2i_ep)) {
1769                 mutex_unlock(&hba->net_dev_lock);
1770                 return ERR_PTR(rc);
1771         }
1772 conn_failed:
1773 net_if_down:
1774 iscsi_cid_err:
1775         bnx2i_free_qp_resc(hba, bnx2i_ep);
1776 qp_resc_err:
1777         bnx2i_free_ep(ep);
1778         mutex_unlock(&hba->net_dev_lock);
1779 check_busy:
1780         bnx2i_unreg_dev_all();
1781         return ERR_PTR(rc);
1782 }
1783
1784
1785 /**
1786  * bnx2i_ep_poll - polls for TCP connection establishement
1787  * @ep:                 TCP connection (endpoint) handle
1788  * @timeout_ms:         timeout value in milli secs
1789  *
1790  * polls for TCP connect request to complete
1791  */
1792 static int bnx2i_ep_poll(struct iscsi_endpoint *ep, int timeout_ms)
1793 {
1794         struct bnx2i_endpoint *bnx2i_ep;
1795         int rc = 0;
1796
1797         bnx2i_ep = ep->dd_data;
1798         if ((bnx2i_ep->state == EP_STATE_IDLE) ||
1799             (bnx2i_ep->state == EP_STATE_CONNECT_FAILED) ||
1800             (bnx2i_ep->state == EP_STATE_OFLD_FAILED))
1801                 return -1;
1802         if (bnx2i_ep->state == EP_STATE_CONNECT_COMPL)
1803                 return 1;
1804
1805         rc = wait_event_interruptible_timeout(bnx2i_ep->ofld_wait,
1806                                               ((bnx2i_ep->state ==
1807                                                 EP_STATE_OFLD_FAILED) ||
1808                                                (bnx2i_ep->state ==
1809                                                 EP_STATE_CONNECT_FAILED) ||
1810                                                (bnx2i_ep->state ==
1811                                                 EP_STATE_CONNECT_COMPL)),
1812                                               msecs_to_jiffies(timeout_ms));
1813         if (!rc || (bnx2i_ep->state == EP_STATE_OFLD_FAILED))
1814                 rc = -1;
1815
1816         if (rc > 0)
1817                 return 1;
1818         else if (!rc)
1819                 return 0;       /* timeout */
1820         else
1821                 return rc;
1822 }
1823
1824
1825 /**
1826  * bnx2i_ep_tcp_conn_active - check EP state transition
1827  * @ep:         endpoint pointer
1828  *
1829  * check if underlying TCP connection is active
1830  */
1831 static int bnx2i_ep_tcp_conn_active(struct bnx2i_endpoint *bnx2i_ep)
1832 {
1833         int ret;
1834         int cnic_dev_10g = 0;
1835
1836         if (test_bit(BNX2I_NX2_DEV_57710, &bnx2i_ep->hba->cnic_dev_type))
1837                 cnic_dev_10g = 1;
1838
1839         switch (bnx2i_ep->state) {
1840         case EP_STATE_CONNECT_START:
1841         case EP_STATE_CLEANUP_FAILED:
1842         case EP_STATE_OFLD_FAILED:
1843         case EP_STATE_DISCONN_TIMEDOUT:
1844                 ret = 0;
1845                 break;
1846         case EP_STATE_CONNECT_COMPL:
1847         case EP_STATE_ULP_UPDATE_START:
1848         case EP_STATE_ULP_UPDATE_COMPL:
1849         case EP_STATE_TCP_FIN_RCVD:
1850         case EP_STATE_ULP_UPDATE_FAILED:
1851                 ret = 1;
1852                 break;
1853         case EP_STATE_TCP_RST_RCVD:
1854                 ret = 0;
1855                 break;
1856         case EP_STATE_CONNECT_FAILED:
1857                 if (cnic_dev_10g)
1858                         ret = 1;
1859                 else
1860                         ret = 0;
1861                 break;
1862         default:
1863                 ret = 0;
1864         }
1865
1866         return ret;
1867 }
1868
1869
1870 /**
1871  * bnx2i_ep_disconnect - executes TCP connection teardown process
1872  * @ep:         TCP connection (endpoint) handle
1873  *
1874  * executes  TCP connection teardown process
1875  */
1876 static void bnx2i_ep_disconnect(struct iscsi_endpoint *ep)
1877 {
1878         struct bnx2i_endpoint *bnx2i_ep;
1879         struct bnx2i_conn *bnx2i_conn = NULL;
1880         struct iscsi_session *session = NULL;
1881         struct iscsi_conn *conn;
1882         struct cnic_dev *cnic;
1883         struct bnx2i_hba *hba;
1884
1885         bnx2i_ep = ep->dd_data;
1886
1887         /* driver should not attempt connection cleanup untill TCP_CONNECT
1888          * completes either successfully or fails. Timeout is 9-secs, so
1889          * wait for it to complete
1890          */
1891         while ((bnx2i_ep->state == EP_STATE_CONNECT_START) &&
1892                 !time_after(jiffies, bnx2i_ep->timestamp + (12 * HZ)))
1893                 msleep(250);
1894
1895         if (bnx2i_ep->conn) {
1896                 bnx2i_conn = bnx2i_ep->conn;
1897                 conn = bnx2i_conn->cls_conn->dd_data;
1898                 session = conn->session;
1899
1900                 spin_lock_bh(&session->lock);
1901                 bnx2i_conn->is_bound = 0;
1902                 spin_unlock_bh(&session->lock);
1903         }
1904
1905         hba = bnx2i_ep->hba;
1906         if (bnx2i_ep->state == EP_STATE_IDLE)
1907                 goto return_bnx2i_ep;
1908         cnic = hba->cnic;
1909
1910         mutex_lock(&hba->net_dev_lock);
1911
1912         if (!test_bit(ADAPTER_STATE_UP, &hba->adapter_state))
1913                 goto free_resc;
1914         if (bnx2i_ep->hba_age != hba->age)
1915                 goto free_resc;
1916
1917         if (!bnx2i_ep_tcp_conn_active(bnx2i_ep))
1918                 goto destory_conn;
1919
1920         bnx2i_ep->state = EP_STATE_DISCONN_START;
1921
1922         init_timer(&bnx2i_ep->ofld_timer);
1923         bnx2i_ep->ofld_timer.expires = 10*HZ + jiffies;
1924         bnx2i_ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1925         bnx2i_ep->ofld_timer.data = (unsigned long) bnx2i_ep;
1926         add_timer(&bnx2i_ep->ofld_timer);
1927
1928         if (test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic)) {
1929                 int close = 0;
1930
1931                 if (session) {
1932                         spin_lock_bh(&session->lock);
1933                         if (session->state == ISCSI_STATE_LOGGING_OUT)
1934                                 close = 1;
1935                         spin_unlock_bh(&session->lock);
1936                 }
1937                 if (close)
1938                         cnic->cm_close(bnx2i_ep->cm_sk);
1939                 else
1940                         cnic->cm_abort(bnx2i_ep->cm_sk);
1941         } else
1942                 goto free_resc;
1943
1944         /* wait for option-2 conn teardown */
1945         wait_event_interruptible(bnx2i_ep->ofld_wait,
1946                                  bnx2i_ep->state != EP_STATE_DISCONN_START);
1947
1948         if (signal_pending(current))
1949                 flush_signals(current);
1950         del_timer_sync(&bnx2i_ep->ofld_timer);
1951
1952 destory_conn:
1953         if (bnx2i_tear_down_conn(hba, bnx2i_ep)) {
1954                 mutex_unlock(&hba->net_dev_lock);
1955                 return;
1956         }
1957 free_resc:
1958         mutex_unlock(&hba->net_dev_lock);
1959         bnx2i_free_qp_resc(hba, bnx2i_ep);
1960 return_bnx2i_ep:
1961         if (bnx2i_conn)
1962                 bnx2i_conn->ep = NULL;
1963
1964         bnx2i_free_ep(ep);
1965
1966         if (!hba->ofld_conns_active)
1967                 bnx2i_unreg_dev_all();
1968 }
1969
1970
1971 /**
1972  * bnx2i_nl_set_path - ISCSI_UEVENT_PATH_UPDATE user message handler
1973  * @buf:        pointer to buffer containing iscsi path message
1974  *
1975  */
1976 static int bnx2i_nl_set_path(struct Scsi_Host *shost, struct iscsi_path *params)
1977 {
1978         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1979         char *buf = (char *) params;
1980         u16 len = sizeof(*params);
1981
1982         /* handled by cnic driver */
1983         hba->cnic->iscsi_nl_msg_recv(hba->cnic, ISCSI_UEVENT_PATH_UPDATE, buf,
1984                                      len);
1985
1986         return 0;
1987 }
1988
1989
1990 /*
1991  * 'Scsi_Host_Template' structure and 'iscsi_tranport' structure template
1992  * used while registering with the scsi host and iSCSI transport module.
1993  */
1994 static struct scsi_host_template bnx2i_host_template = {
1995         .module                 = THIS_MODULE,
1996         .name                   = "Broadcom Offload iSCSI Initiator",
1997         .proc_name              = "bnx2i",
1998         .queuecommand           = iscsi_queuecommand,
1999         .eh_abort_handler       = iscsi_eh_abort,
2000         .eh_device_reset_handler = iscsi_eh_device_reset,
2001         .eh_target_reset_handler = iscsi_eh_target_reset,
2002         .can_queue              = 1024,
2003         .max_sectors            = 127,
2004         .cmd_per_lun            = 32,
2005         .this_id                = -1,
2006         .use_clustering         = ENABLE_CLUSTERING,
2007         .sg_tablesize           = ISCSI_MAX_BDS_PER_CMD,
2008         .shost_attrs            = bnx2i_dev_attributes,
2009 };
2010
2011 struct iscsi_transport bnx2i_iscsi_transport = {
2012         .owner                  = THIS_MODULE,
2013         .name                   = "bnx2i",
2014         .caps                   = CAP_RECOVERY_L0 | CAP_HDRDGST |
2015                                   CAP_MULTI_R2T | CAP_DATADGST |
2016                                   CAP_DATA_PATH_OFFLOAD,
2017         .param_mask             = ISCSI_MAX_RECV_DLENGTH |
2018                                   ISCSI_MAX_XMIT_DLENGTH |
2019                                   ISCSI_HDRDGST_EN |
2020                                   ISCSI_DATADGST_EN |
2021                                   ISCSI_INITIAL_R2T_EN |
2022                                   ISCSI_MAX_R2T |
2023                                   ISCSI_IMM_DATA_EN |
2024                                   ISCSI_FIRST_BURST |
2025                                   ISCSI_MAX_BURST |
2026                                   ISCSI_PDU_INORDER_EN |
2027                                   ISCSI_DATASEQ_INORDER_EN |
2028                                   ISCSI_ERL |
2029                                   ISCSI_CONN_PORT |
2030                                   ISCSI_CONN_ADDRESS |
2031                                   ISCSI_EXP_STATSN |
2032                                   ISCSI_PERSISTENT_PORT |
2033                                   ISCSI_PERSISTENT_ADDRESS |
2034                                   ISCSI_TARGET_NAME | ISCSI_TPGT |
2035                                   ISCSI_USERNAME | ISCSI_PASSWORD |
2036                                   ISCSI_USERNAME_IN | ISCSI_PASSWORD_IN |
2037                                   ISCSI_FAST_ABORT | ISCSI_ABORT_TMO |
2038                                   ISCSI_LU_RESET_TMO |
2039                                   ISCSI_PING_TMO | ISCSI_RECV_TMO |
2040                                   ISCSI_IFACE_NAME | ISCSI_INITIATOR_NAME,
2041         .host_param_mask        = ISCSI_HOST_HWADDRESS | ISCSI_HOST_NETDEV_NAME,
2042         .create_session         = bnx2i_session_create,
2043         .destroy_session        = bnx2i_session_destroy,
2044         .create_conn            = bnx2i_conn_create,
2045         .bind_conn              = bnx2i_conn_bind,
2046         .destroy_conn           = bnx2i_conn_destroy,
2047         .set_param              = iscsi_set_param,
2048         .get_conn_param         = bnx2i_conn_get_param,
2049         .get_session_param      = iscsi_session_get_param,
2050         .get_host_param         = bnx2i_host_get_param,
2051         .start_conn             = bnx2i_conn_start,
2052         .stop_conn              = iscsi_conn_stop,
2053         .send_pdu               = iscsi_conn_send_pdu,
2054         .xmit_task              = bnx2i_task_xmit,
2055         .get_stats              = bnx2i_conn_get_stats,
2056         /* TCP connect - disconnect - option-2 interface calls */
2057         .ep_connect             = bnx2i_ep_connect,
2058         .ep_poll                = bnx2i_ep_poll,
2059         .ep_disconnect          = bnx2i_ep_disconnect,
2060         .set_path               = bnx2i_nl_set_path,
2061         /* Error recovery timeout call */
2062         .session_recovery_timedout = iscsi_session_recovery_timedout,
2063         .cleanup_task           = bnx2i_cleanup_task,
2064 };