ide-tape: move historical changelog to Documentation/ide/ChangeLog.ide-tape.1995...
[linux-2.6] / drivers / ieee1394 / sbp2.c
1 /*
2  * sbp2.c - SBP-2 protocol driver for IEEE-1394
3  *
4  * Copyright (C) 2000 James Goodwin, Filanet Corporation (www.filanet.com)
5  * jamesg@filanet.com (JSG)
6  *
7  * Copyright (C) 2003 Ben Collins <bcollins@debian.org>
8  *
9  * This program is free software; you can redistribute it and/or modify
10  * it under the terms of the GNU General Public License as published by
11  * the Free Software Foundation; either version 2 of the License, or
12  * (at your option) any later version.
13  *
14  * This program is distributed in the hope that it will be useful,
15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17  * GNU General Public License for more details.
18  *
19  * You should have received a copy of the GNU General Public License
20  * along with this program; if not, write to the Free Software Foundation,
21  * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
22  */
23
24 /*
25  * Brief Description:
26  *
27  * This driver implements the Serial Bus Protocol 2 (SBP-2) over IEEE-1394
28  * under Linux. The SBP-2 driver is implemented as an IEEE-1394 high-level
29  * driver. It also registers as a SCSI lower-level driver in order to accept
30  * SCSI commands for transport using SBP-2.
31  *
32  * You may access any attached SBP-2 (usually storage devices) as regular
33  * SCSI devices. E.g. mount /dev/sda1, fdisk, mkfs, etc..
34  *
35  * See http://www.t10.org/drafts.htm#sbp2 for the final draft of the SBP-2
36  * specification and for where to purchase the official standard.
37  *
38  * TODO:
39  *   - look into possible improvements of the SCSI error handlers
40  *   - handle Unit_Characteristics.mgt_ORB_timeout and .ORB_size
41  *   - handle Logical_Unit_Number.ordered
42  *   - handle src == 1 in status blocks
43  *   - reimplement the DMA mapping in absence of physical DMA so that
44  *     bus_to_virt is no longer required
45  *   - debug the handling of absent physical DMA
46  *   - replace CONFIG_IEEE1394_SBP2_PHYS_DMA by automatic detection
47  *     (this is easy but depends on the previous two TODO items)
48  *   - make the parameter serialize_io configurable per device
49  *   - move all requests to fetch agent registers into non-atomic context,
50  *     replace all usages of sbp2util_node_write_no_wait by true transactions
51  * Grep for inline FIXME comments below.
52  */
53
54 #include <linux/blkdev.h>
55 #include <linux/compiler.h>
56 #include <linux/delay.h>
57 #include <linux/device.h>
58 #include <linux/dma-mapping.h>
59 #include <linux/gfp.h>
60 #include <linux/init.h>
61 #include <linux/kernel.h>
62 #include <linux/list.h>
63 #include <linux/mm.h>
64 #include <linux/module.h>
65 #include <linux/moduleparam.h>
66 #include <linux/sched.h>
67 #include <linux/slab.h>
68 #include <linux/spinlock.h>
69 #include <linux/stat.h>
70 #include <linux/string.h>
71 #include <linux/stringify.h>
72 #include <linux/types.h>
73 #include <linux/wait.h>
74 #include <linux/workqueue.h>
75 #include <linux/scatterlist.h>
76
77 #include <asm/byteorder.h>
78 #include <asm/errno.h>
79 #include <asm/param.h>
80 #include <asm/system.h>
81 #include <asm/types.h>
82
83 #ifdef CONFIG_IEEE1394_SBP2_PHYS_DMA
84 #include <asm/io.h> /* for bus_to_virt */
85 #endif
86
87 #include <scsi/scsi.h>
88 #include <scsi/scsi_cmnd.h>
89 #include <scsi/scsi_dbg.h>
90 #include <scsi/scsi_device.h>
91 #include <scsi/scsi_host.h>
92
93 #include "csr1212.h"
94 #include "highlevel.h"
95 #include "hosts.h"
96 #include "ieee1394.h"
97 #include "ieee1394_core.h"
98 #include "ieee1394_hotplug.h"
99 #include "ieee1394_transactions.h"
100 #include "ieee1394_types.h"
101 #include "nodemgr.h"
102 #include "sbp2.h"
103
104 /*
105  * Module load parameter definitions
106  */
107
108 /*
109  * Change max_speed on module load if you have a bad IEEE-1394
110  * controller that has trouble running 2KB packets at 400mb.
111  *
112  * NOTE: On certain OHCI parts I have seen short packets on async transmit
113  * (probably due to PCI latency/throughput issues with the part). You can
114  * bump down the speed if you are running into problems.
115  */
116 static int sbp2_max_speed = IEEE1394_SPEED_MAX;
117 module_param_named(max_speed, sbp2_max_speed, int, 0644);
118 MODULE_PARM_DESC(max_speed, "Force max speed "
119                  "(3 = 800Mb/s, 2 = 400Mb/s, 1 = 200Mb/s, 0 = 100Mb/s)");
120
121 /*
122  * Set serialize_io to 0 or N to use dynamically appended lists of command ORBs.
123  * This is and always has been buggy in multiple subtle ways. See above TODOs.
124  */
125 static int sbp2_serialize_io = 1;
126 module_param_named(serialize_io, sbp2_serialize_io, bool, 0444);
127 MODULE_PARM_DESC(serialize_io, "Serialize requests coming from SCSI drivers "
128                  "(default = Y, faster but buggy = N)");
129
130 /*
131  * Adjust max_sectors if you'd like to influence how many sectors each SCSI
132  * command can transfer at most. Please note that some older SBP-2 bridge
133  * chips are broken for transfers greater or equal to 128KB, therefore
134  * max_sectors used to be a safe 255 sectors for many years. We now have a
135  * default of 0 here which means that we let the SCSI stack choose a limit.
136  *
137  * The SBP2_WORKAROUND_128K_MAX_TRANS flag, if set either in the workarounds
138  * module parameter or in the sbp2_workarounds_table[], will override the
139  * value of max_sectors. We should use sbp2_workarounds_table[] to cover any
140  * bridge chip which becomes known to need the 255 sectors limit.
141  */
142 static int sbp2_max_sectors;
143 module_param_named(max_sectors, sbp2_max_sectors, int, 0444);
144 MODULE_PARM_DESC(max_sectors, "Change max sectors per I/O supported "
145                  "(default = 0 = use SCSI stack's default)");
146
147 /*
148  * Exclusive login to sbp2 device? In most cases, the sbp2 driver should
149  * do an exclusive login, as it's generally unsafe to have two hosts
150  * talking to a single sbp2 device at the same time (filesystem coherency,
151  * etc.). If you're running an sbp2 device that supports multiple logins,
152  * and you're either running read-only filesystems or some sort of special
153  * filesystem supporting multiple hosts, e.g. OpenGFS, Oracle Cluster
154  * File System, or Lustre, then set exclusive_login to zero.
155  *
156  * So far only bridges from Oxford Semiconductor are known to support
157  * concurrent logins. Depending on firmware, four or two concurrent logins
158  * are possible on OXFW911 and newer Oxsemi bridges.
159  */
160 static int sbp2_exclusive_login = 1;
161 module_param_named(exclusive_login, sbp2_exclusive_login, bool, 0644);
162 MODULE_PARM_DESC(exclusive_login, "Exclusive login to sbp2 device "
163                  "(default = Y, use N for concurrent initiators)");
164
165 /*
166  * If any of the following workarounds is required for your device to work,
167  * please submit the kernel messages logged by sbp2 to the linux1394-devel
168  * mailing list.
169  *
170  * - 128kB max transfer
171  *   Limit transfer size. Necessary for some old bridges.
172  *
173  * - 36 byte inquiry
174  *   When scsi_mod probes the device, let the inquiry command look like that
175  *   from MS Windows.
176  *
177  * - skip mode page 8
178  *   Suppress sending of mode_sense for mode page 8 if the device pretends to
179  *   support the SCSI Primary Block commands instead of Reduced Block Commands.
180  *
181  * - fix capacity
182  *   Tell sd_mod to correct the last sector number reported by read_capacity.
183  *   Avoids access beyond actual disk limits on devices with an off-by-one bug.
184  *   Don't use this with devices which don't have this bug.
185  *
186  * - override internal blacklist
187  *   Instead of adding to the built-in blacklist, use only the workarounds
188  *   specified in the module load parameter.
189  *   Useful if a blacklist entry interfered with a non-broken device.
190  */
191 static int sbp2_default_workarounds;
192 module_param_named(workarounds, sbp2_default_workarounds, int, 0644);
193 MODULE_PARM_DESC(workarounds, "Work around device bugs (default = 0"
194         ", 128kB max transfer = " __stringify(SBP2_WORKAROUND_128K_MAX_TRANS)
195         ", 36 byte inquiry = "    __stringify(SBP2_WORKAROUND_INQUIRY_36)
196         ", skip mode page 8 = "   __stringify(SBP2_WORKAROUND_MODE_SENSE_8)
197         ", fix capacity = "       __stringify(SBP2_WORKAROUND_FIX_CAPACITY)
198         ", override internal blacklist = " __stringify(SBP2_WORKAROUND_OVERRIDE)
199         ", or a combination)");
200
201 /*
202  * This influences the format of the sysfs attribute
203  * /sys/bus/scsi/devices/.../ieee1394_id.
204  *
205  * The default format is like in older kernels:  %016Lx:%d:%d
206  * It contains the target's EUI-64, a number given to the logical unit by
207  * the ieee1394 driver's nodemgr (starting at 0), and the LUN.
208  *
209  * The long format is:  %016Lx:%06x:%04x
210  * It contains the target's EUI-64, the unit directory's directory_ID as per
211  * IEEE 1212 clause 7.7.19, and the LUN.  This format comes closest to the
212  * format of SBP(-3) target port and logical unit identifier as per SAM (SCSI
213  * Architecture Model) rev.2 to 4 annex A.  Therefore and because it is
214  * independent of the implementation of the ieee1394 nodemgr, the longer format
215  * is recommended for future use.
216  */
217 static int sbp2_long_sysfs_ieee1394_id;
218 module_param_named(long_ieee1394_id, sbp2_long_sysfs_ieee1394_id, bool, 0644);
219 MODULE_PARM_DESC(long_ieee1394_id, "8+3+2 bytes format of ieee1394_id in sysfs "
220                  "(default = backwards-compatible = N, SAM-conforming = Y)");
221
222
223 #define SBP2_INFO(fmt, args...) HPSB_INFO("sbp2: "fmt, ## args)
224 #define SBP2_ERR(fmt, args...)  HPSB_ERR("sbp2: "fmt, ## args)
225
226 /*
227  * Globals
228  */
229 static void sbp2scsi_complete_all_commands(struct sbp2_lu *, u32);
230 static void sbp2scsi_complete_command(struct sbp2_lu *, u32, struct scsi_cmnd *,
231                                       void (*)(struct scsi_cmnd *));
232 static struct sbp2_lu *sbp2_alloc_device(struct unit_directory *);
233 static int sbp2_start_device(struct sbp2_lu *);
234 static void sbp2_remove_device(struct sbp2_lu *);
235 static int sbp2_login_device(struct sbp2_lu *);
236 static int sbp2_reconnect_device(struct sbp2_lu *);
237 static int sbp2_logout_device(struct sbp2_lu *);
238 static void sbp2_host_reset(struct hpsb_host *);
239 static int sbp2_handle_status_write(struct hpsb_host *, int, int, quadlet_t *,
240                                     u64, size_t, u16);
241 static int sbp2_agent_reset(struct sbp2_lu *, int);
242 static void sbp2_parse_unit_directory(struct sbp2_lu *,
243                                       struct unit_directory *);
244 static int sbp2_set_busy_timeout(struct sbp2_lu *);
245 static int sbp2_max_speed_and_size(struct sbp2_lu *);
246
247
248 static const u8 sbp2_speedto_max_payload[] = { 0x7, 0x8, 0x9, 0xA, 0xB, 0xC };
249
250 static DEFINE_RWLOCK(sbp2_hi_logical_units_lock);
251
252 static struct hpsb_highlevel sbp2_highlevel = {
253         .name           = SBP2_DEVICE_NAME,
254         .host_reset     = sbp2_host_reset,
255 };
256
257 static struct hpsb_address_ops sbp2_ops = {
258         .write          = sbp2_handle_status_write
259 };
260
261 #ifdef CONFIG_IEEE1394_SBP2_PHYS_DMA
262 static int sbp2_handle_physdma_write(struct hpsb_host *, int, int, quadlet_t *,
263                                      u64, size_t, u16);
264 static int sbp2_handle_physdma_read(struct hpsb_host *, int, quadlet_t *, u64,
265                                     size_t, u16);
266
267 static struct hpsb_address_ops sbp2_physdma_ops = {
268         .read           = sbp2_handle_physdma_read,
269         .write          = sbp2_handle_physdma_write,
270 };
271 #endif
272
273
274 /*
275  * Interface to driver core and IEEE 1394 core
276  */
277 static struct ieee1394_device_id sbp2_id_table[] = {
278         {
279          .match_flags   = IEEE1394_MATCH_SPECIFIER_ID | IEEE1394_MATCH_VERSION,
280          .specifier_id  = SBP2_UNIT_SPEC_ID_ENTRY & 0xffffff,
281          .version       = SBP2_SW_VERSION_ENTRY & 0xffffff},
282         {}
283 };
284 MODULE_DEVICE_TABLE(ieee1394, sbp2_id_table);
285
286 static int sbp2_probe(struct device *);
287 static int sbp2_remove(struct device *);
288 static int sbp2_update(struct unit_directory *);
289
290 static struct hpsb_protocol_driver sbp2_driver = {
291         .name           = SBP2_DEVICE_NAME,
292         .id_table       = sbp2_id_table,
293         .update         = sbp2_update,
294         .driver         = {
295                 .probe          = sbp2_probe,
296                 .remove         = sbp2_remove,
297         },
298 };
299
300
301 /*
302  * Interface to SCSI core
303  */
304 static int sbp2scsi_queuecommand(struct scsi_cmnd *,
305                                  void (*)(struct scsi_cmnd *));
306 static int sbp2scsi_abort(struct scsi_cmnd *);
307 static int sbp2scsi_reset(struct scsi_cmnd *);
308 static int sbp2scsi_slave_alloc(struct scsi_device *);
309 static int sbp2scsi_slave_configure(struct scsi_device *);
310 static void sbp2scsi_slave_destroy(struct scsi_device *);
311 static ssize_t sbp2_sysfs_ieee1394_id_show(struct device *,
312                                            struct device_attribute *, char *);
313
314 static DEVICE_ATTR(ieee1394_id, S_IRUGO, sbp2_sysfs_ieee1394_id_show, NULL);
315
316 static struct device_attribute *sbp2_sysfs_sdev_attrs[] = {
317         &dev_attr_ieee1394_id,
318         NULL
319 };
320
321 static struct scsi_host_template sbp2_shost_template = {
322         .module                  = THIS_MODULE,
323         .name                    = "SBP-2 IEEE-1394",
324         .proc_name               = SBP2_DEVICE_NAME,
325         .queuecommand            = sbp2scsi_queuecommand,
326         .eh_abort_handler        = sbp2scsi_abort,
327         .eh_device_reset_handler = sbp2scsi_reset,
328         .slave_alloc             = sbp2scsi_slave_alloc,
329         .slave_configure         = sbp2scsi_slave_configure,
330         .slave_destroy           = sbp2scsi_slave_destroy,
331         .this_id                 = -1,
332         .sg_tablesize            = SG_ALL,
333         .use_clustering          = ENABLE_CLUSTERING,
334         .cmd_per_lun             = SBP2_MAX_CMDS,
335         .can_queue               = SBP2_MAX_CMDS,
336         .sdev_attrs              = sbp2_sysfs_sdev_attrs,
337 };
338
339 /* for match-all entries in sbp2_workarounds_table */
340 #define SBP2_ROM_VALUE_WILDCARD 0x1000000
341
342 /*
343  * List of devices with known bugs.
344  *
345  * The firmware_revision field, masked with 0xffff00, is the best indicator
346  * for the type of bridge chip of a device.  It yields a few false positives
347  * but this did not break correctly behaving devices so far.
348  */
349 static const struct {
350         u32 firmware_revision;
351         u32 model_id;
352         unsigned workarounds;
353 } sbp2_workarounds_table[] = {
354         /* DViCO Momobay CX-1 with TSB42AA9 bridge */ {
355                 .firmware_revision      = 0x002800,
356                 .model_id               = 0x001010,
357                 .workarounds            = SBP2_WORKAROUND_INQUIRY_36 |
358                                           SBP2_WORKAROUND_MODE_SENSE_8,
359         },
360         /* Initio bridges, actually only needed for some older ones */ {
361                 .firmware_revision      = 0x000200,
362                 .model_id               = SBP2_ROM_VALUE_WILDCARD,
363                 .workarounds            = SBP2_WORKAROUND_INQUIRY_36,
364         },
365         /* Symbios bridge */ {
366                 .firmware_revision      = 0xa0b800,
367                 .model_id               = SBP2_ROM_VALUE_WILDCARD,
368                 .workarounds            = SBP2_WORKAROUND_128K_MAX_TRANS,
369         },
370         /* iPod 4th generation */ {
371                 .firmware_revision      = 0x0a2700,
372                 .model_id               = 0x000021,
373                 .workarounds            = SBP2_WORKAROUND_FIX_CAPACITY,
374         },
375         /* iPod mini */ {
376                 .firmware_revision      = 0x0a2700,
377                 .model_id               = 0x000023,
378                 .workarounds            = SBP2_WORKAROUND_FIX_CAPACITY,
379         },
380         /* iPod Photo */ {
381                 .firmware_revision      = 0x0a2700,
382                 .model_id               = 0x00007e,
383                 .workarounds            = SBP2_WORKAROUND_FIX_CAPACITY,
384         }
385 };
386
387 /**************************************
388  * General utility functions
389  **************************************/
390
391 #ifndef __BIG_ENDIAN
392 /*
393  * Converts a buffer from be32 to cpu byte ordering. Length is in bytes.
394  */
395 static inline void sbp2util_be32_to_cpu_buffer(void *buffer, int length)
396 {
397         u32 *temp = buffer;
398
399         for (length = (length >> 2); length--; )
400                 temp[length] = be32_to_cpu(temp[length]);
401 }
402
403 /*
404  * Converts a buffer from cpu to be32 byte ordering. Length is in bytes.
405  */
406 static inline void sbp2util_cpu_to_be32_buffer(void *buffer, int length)
407 {
408         u32 *temp = buffer;
409
410         for (length = (length >> 2); length--; )
411                 temp[length] = cpu_to_be32(temp[length]);
412 }
413 #else /* BIG_ENDIAN */
414 /* Why waste the cpu cycles? */
415 #define sbp2util_be32_to_cpu_buffer(x,y) do {} while (0)
416 #define sbp2util_cpu_to_be32_buffer(x,y) do {} while (0)
417 #endif
418
419 static DECLARE_WAIT_QUEUE_HEAD(sbp2_access_wq);
420
421 /*
422  * Waits for completion of an SBP-2 access request.
423  * Returns nonzero if timed out or prematurely interrupted.
424  */
425 static int sbp2util_access_timeout(struct sbp2_lu *lu, int timeout)
426 {
427         long leftover;
428
429         leftover = wait_event_interruptible_timeout(
430                         sbp2_access_wq, lu->access_complete, timeout);
431         lu->access_complete = 0;
432         return leftover <= 0;
433 }
434
435 static void sbp2_free_packet(void *packet)
436 {
437         hpsb_free_tlabel(packet);
438         hpsb_free_packet(packet);
439 }
440
441 /*
442  * This is much like hpsb_node_write(), except it ignores the response
443  * subaction and returns immediately. Can be used from atomic context.
444  */
445 static int sbp2util_node_write_no_wait(struct node_entry *ne, u64 addr,
446                                        quadlet_t *buf, size_t len)
447 {
448         struct hpsb_packet *packet;
449
450         packet = hpsb_make_writepacket(ne->host, ne->nodeid, addr, buf, len);
451         if (!packet)
452                 return -ENOMEM;
453
454         hpsb_set_packet_complete_task(packet, sbp2_free_packet, packet);
455         hpsb_node_fill_packet(ne, packet);
456         if (hpsb_send_packet(packet) < 0) {
457                 sbp2_free_packet(packet);
458                 return -EIO;
459         }
460         return 0;
461 }
462
463 static void sbp2util_notify_fetch_agent(struct sbp2_lu *lu, u64 offset,
464                                         quadlet_t *data, size_t len)
465 {
466         /* There is a small window after a bus reset within which the node
467          * entry's generation is current but the reconnect wasn't completed. */
468         if (unlikely(atomic_read(&lu->state) == SBP2LU_STATE_IN_RESET))
469                 return;
470
471         if (hpsb_node_write(lu->ne, lu->command_block_agent_addr + offset,
472                             data, len))
473                 SBP2_ERR("sbp2util_notify_fetch_agent failed.");
474
475         /* Now accept new SCSI commands, unless a bus reset happended during
476          * hpsb_node_write. */
477         if (likely(atomic_read(&lu->state) != SBP2LU_STATE_IN_RESET))
478                 scsi_unblock_requests(lu->shost);
479 }
480
481 static void sbp2util_write_orb_pointer(struct work_struct *work)
482 {
483         struct sbp2_lu *lu = container_of(work, struct sbp2_lu, protocol_work);
484         quadlet_t data[2];
485
486         data[0] = ORB_SET_NODE_ID(lu->hi->host->node_id);
487         data[1] = lu->last_orb_dma;
488         sbp2util_cpu_to_be32_buffer(data, 8);
489         sbp2util_notify_fetch_agent(lu, SBP2_ORB_POINTER_OFFSET, data, 8);
490 }
491
492 static void sbp2util_write_doorbell(struct work_struct *work)
493 {
494         struct sbp2_lu *lu = container_of(work, struct sbp2_lu, protocol_work);
495
496         sbp2util_notify_fetch_agent(lu, SBP2_DOORBELL_OFFSET, NULL, 4);
497 }
498
499 static int sbp2util_create_command_orb_pool(struct sbp2_lu *lu)
500 {
501         struct sbp2_fwhost_info *hi = lu->hi;
502         struct sbp2_command_info *cmd;
503         int i, orbs = sbp2_serialize_io ? 2 : SBP2_MAX_CMDS;
504
505         for (i = 0; i < orbs; i++) {
506                 cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
507                 if (!cmd)
508                         return -ENOMEM;
509                 cmd->command_orb_dma = dma_map_single(hi->host->device.parent,
510                                                 &cmd->command_orb,
511                                                 sizeof(struct sbp2_command_orb),
512                                                 DMA_TO_DEVICE);
513                 cmd->sge_dma = dma_map_single(hi->host->device.parent,
514                                         &cmd->scatter_gather_element,
515                                         sizeof(cmd->scatter_gather_element),
516                                         DMA_TO_DEVICE);
517                 INIT_LIST_HEAD(&cmd->list);
518                 list_add_tail(&cmd->list, &lu->cmd_orb_completed);
519         }
520         return 0;
521 }
522
523 static void sbp2util_remove_command_orb_pool(struct sbp2_lu *lu,
524                                              struct hpsb_host *host)
525 {
526         struct list_head *lh, *next;
527         struct sbp2_command_info *cmd;
528         unsigned long flags;
529
530         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
531         if (!list_empty(&lu->cmd_orb_completed))
532                 list_for_each_safe(lh, next, &lu->cmd_orb_completed) {
533                         cmd = list_entry(lh, struct sbp2_command_info, list);
534                         dma_unmap_single(host->device.parent,
535                                          cmd->command_orb_dma,
536                                          sizeof(struct sbp2_command_orb),
537                                          DMA_TO_DEVICE);
538                         dma_unmap_single(host->device.parent, cmd->sge_dma,
539                                          sizeof(cmd->scatter_gather_element),
540                                          DMA_TO_DEVICE);
541                         kfree(cmd);
542                 }
543         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
544         return;
545 }
546
547 /*
548  * Finds the sbp2_command for a given outstanding command ORB.
549  * Only looks at the in-use list.
550  */
551 static struct sbp2_command_info *sbp2util_find_command_for_orb(
552                                 struct sbp2_lu *lu, dma_addr_t orb)
553 {
554         struct sbp2_command_info *cmd;
555         unsigned long flags;
556
557         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
558         if (!list_empty(&lu->cmd_orb_inuse))
559                 list_for_each_entry(cmd, &lu->cmd_orb_inuse, list)
560                         if (cmd->command_orb_dma == orb) {
561                                 spin_unlock_irqrestore(
562                                                 &lu->cmd_orb_lock, flags);
563                                 return cmd;
564                         }
565         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
566         return NULL;
567 }
568
569 /*
570  * Finds the sbp2_command for a given outstanding SCpnt.
571  * Only looks at the in-use list.
572  * Must be called with lu->cmd_orb_lock held.
573  */
574 static struct sbp2_command_info *sbp2util_find_command_for_SCpnt(
575                                 struct sbp2_lu *lu, void *SCpnt)
576 {
577         struct sbp2_command_info *cmd;
578
579         if (!list_empty(&lu->cmd_orb_inuse))
580                 list_for_each_entry(cmd, &lu->cmd_orb_inuse, list)
581                         if (cmd->Current_SCpnt == SCpnt)
582                                 return cmd;
583         return NULL;
584 }
585
586 static struct sbp2_command_info *sbp2util_allocate_command_orb(
587                                 struct sbp2_lu *lu,
588                                 struct scsi_cmnd *Current_SCpnt,
589                                 void (*Current_done)(struct scsi_cmnd *))
590 {
591         struct list_head *lh;
592         struct sbp2_command_info *cmd = NULL;
593         unsigned long flags;
594
595         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
596         if (!list_empty(&lu->cmd_orb_completed)) {
597                 lh = lu->cmd_orb_completed.next;
598                 list_del(lh);
599                 cmd = list_entry(lh, struct sbp2_command_info, list);
600                 cmd->Current_done = Current_done;
601                 cmd->Current_SCpnt = Current_SCpnt;
602                 list_add_tail(&cmd->list, &lu->cmd_orb_inuse);
603         } else
604                 SBP2_ERR("%s: no orbs available", __FUNCTION__);
605         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
606         return cmd;
607 }
608
609 /*
610  * Unmaps the DMAs of a command and moves the command to the completed ORB list.
611  * Must be called with lu->cmd_orb_lock held.
612  */
613 static void sbp2util_mark_command_completed(struct sbp2_lu *lu,
614                                             struct sbp2_command_info *cmd)
615 {
616         struct hpsb_host *host = lu->ud->ne->host;
617
618         if (cmd->cmd_dma) {
619                 if (cmd->dma_type == CMD_DMA_SINGLE)
620                         dma_unmap_single(host->device.parent, cmd->cmd_dma,
621                                          cmd->dma_size, cmd->dma_dir);
622                 else if (cmd->dma_type == CMD_DMA_PAGE)
623                         dma_unmap_page(host->device.parent, cmd->cmd_dma,
624                                        cmd->dma_size, cmd->dma_dir);
625                 /* XXX: Check for CMD_DMA_NONE bug */
626                 cmd->dma_type = CMD_DMA_NONE;
627                 cmd->cmd_dma = 0;
628         }
629         if (cmd->sge_buffer) {
630                 dma_unmap_sg(host->device.parent, cmd->sge_buffer,
631                              cmd->dma_size, cmd->dma_dir);
632                 cmd->sge_buffer = NULL;
633         }
634         list_move_tail(&cmd->list, &lu->cmd_orb_completed);
635 }
636
637 /*
638  * Is lu valid? Is the 1394 node still present?
639  */
640 static inline int sbp2util_node_is_available(struct sbp2_lu *lu)
641 {
642         return lu && lu->ne && !lu->ne->in_limbo;
643 }
644
645 /*********************************************
646  * IEEE-1394 core driver stack related section
647  *********************************************/
648
649 static int sbp2_probe(struct device *dev)
650 {
651         struct unit_directory *ud;
652         struct sbp2_lu *lu;
653
654         ud = container_of(dev, struct unit_directory, device);
655
656         /* Don't probe UD's that have the LUN flag. We'll probe the LUN(s)
657          * instead. */
658         if (ud->flags & UNIT_DIRECTORY_HAS_LUN_DIRECTORY)
659                 return -ENODEV;
660
661         lu = sbp2_alloc_device(ud);
662         if (!lu)
663                 return -ENOMEM;
664
665         sbp2_parse_unit_directory(lu, ud);
666         return sbp2_start_device(lu);
667 }
668
669 static int sbp2_remove(struct device *dev)
670 {
671         struct unit_directory *ud;
672         struct sbp2_lu *lu;
673         struct scsi_device *sdev;
674
675         ud = container_of(dev, struct unit_directory, device);
676         lu = ud->device.driver_data;
677         if (!lu)
678                 return 0;
679
680         if (lu->shost) {
681                 /* Get rid of enqueued commands if there is no chance to
682                  * send them. */
683                 if (!sbp2util_node_is_available(lu))
684                         sbp2scsi_complete_all_commands(lu, DID_NO_CONNECT);
685                 /* scsi_remove_device() may trigger shutdown functions of SCSI
686                  * highlevel drivers which would deadlock if blocked. */
687                 atomic_set(&lu->state, SBP2LU_STATE_IN_SHUTDOWN);
688                 scsi_unblock_requests(lu->shost);
689         }
690         sdev = lu->sdev;
691         if (sdev) {
692                 lu->sdev = NULL;
693                 scsi_remove_device(sdev);
694         }
695
696         sbp2_logout_device(lu);
697         sbp2_remove_device(lu);
698
699         return 0;
700 }
701
702 static int sbp2_update(struct unit_directory *ud)
703 {
704         struct sbp2_lu *lu = ud->device.driver_data;
705
706         if (sbp2_reconnect_device(lu)) {
707                 /* Reconnect has failed. Perhaps we didn't reconnect fast
708                  * enough. Try a regular login, but first log out just in
709                  * case of any weirdness. */
710                 sbp2_logout_device(lu);
711
712                 if (sbp2_login_device(lu)) {
713                         /* Login failed too, just fail, and the backend
714                          * will call our sbp2_remove for us */
715                         SBP2_ERR("Failed to reconnect to sbp2 device!");
716                         return -EBUSY;
717                 }
718         }
719
720         sbp2_set_busy_timeout(lu);
721         sbp2_agent_reset(lu, 1);
722         sbp2_max_speed_and_size(lu);
723
724         /* Complete any pending commands with busy (so they get retried)
725          * and remove them from our queue. */
726         sbp2scsi_complete_all_commands(lu, DID_BUS_BUSY);
727
728         /* Accept new commands unless there was another bus reset in the
729          * meantime. */
730         if (hpsb_node_entry_valid(lu->ne)) {
731                 atomic_set(&lu->state, SBP2LU_STATE_RUNNING);
732                 scsi_unblock_requests(lu->shost);
733         }
734         return 0;
735 }
736
737 static struct sbp2_lu *sbp2_alloc_device(struct unit_directory *ud)
738 {
739         struct sbp2_fwhost_info *hi;
740         struct Scsi_Host *shost = NULL;
741         struct sbp2_lu *lu = NULL;
742         unsigned long flags;
743
744         lu = kzalloc(sizeof(*lu), GFP_KERNEL);
745         if (!lu) {
746                 SBP2_ERR("failed to create lu");
747                 goto failed_alloc;
748         }
749
750         lu->ne = ud->ne;
751         lu->ud = ud;
752         lu->speed_code = IEEE1394_SPEED_100;
753         lu->max_payload_size = sbp2_speedto_max_payload[IEEE1394_SPEED_100];
754         lu->status_fifo_addr = CSR1212_INVALID_ADDR_SPACE;
755         INIT_LIST_HEAD(&lu->cmd_orb_inuse);
756         INIT_LIST_HEAD(&lu->cmd_orb_completed);
757         INIT_LIST_HEAD(&lu->lu_list);
758         spin_lock_init(&lu->cmd_orb_lock);
759         atomic_set(&lu->state, SBP2LU_STATE_RUNNING);
760         INIT_WORK(&lu->protocol_work, NULL);
761
762         ud->device.driver_data = lu;
763
764         hi = hpsb_get_hostinfo(&sbp2_highlevel, ud->ne->host);
765         if (!hi) {
766                 hi = hpsb_create_hostinfo(&sbp2_highlevel, ud->ne->host,
767                                           sizeof(*hi));
768                 if (!hi) {
769                         SBP2_ERR("failed to allocate hostinfo");
770                         goto failed_alloc;
771                 }
772                 hi->host = ud->ne->host;
773                 INIT_LIST_HEAD(&hi->logical_units);
774
775 #ifdef CONFIG_IEEE1394_SBP2_PHYS_DMA
776                 /* Handle data movement if physical dma is not
777                  * enabled or not supported on host controller */
778                 if (!hpsb_register_addrspace(&sbp2_highlevel, ud->ne->host,
779                                              &sbp2_physdma_ops,
780                                              0x0ULL, 0xfffffffcULL)) {
781                         SBP2_ERR("failed to register lower 4GB address range");
782                         goto failed_alloc;
783                 }
784 #endif
785         }
786
787         /* Prevent unloading of the 1394 host */
788         if (!try_module_get(hi->host->driver->owner)) {
789                 SBP2_ERR("failed to get a reference on 1394 host driver");
790                 goto failed_alloc;
791         }
792
793         lu->hi = hi;
794
795         write_lock_irqsave(&sbp2_hi_logical_units_lock, flags);
796         list_add_tail(&lu->lu_list, &hi->logical_units);
797         write_unlock_irqrestore(&sbp2_hi_logical_units_lock, flags);
798
799         /* Register the status FIFO address range. We could use the same FIFO
800          * for targets at different nodes. However we need different FIFOs per
801          * target in order to support multi-unit devices.
802          * The FIFO is located out of the local host controller's physical range
803          * but, if possible, within the posted write area. Status writes will
804          * then be performed as unified transactions. This slightly reduces
805          * bandwidth usage, and some Prolific based devices seem to require it.
806          */
807         lu->status_fifo_addr = hpsb_allocate_and_register_addrspace(
808                         &sbp2_highlevel, ud->ne->host, &sbp2_ops,
809                         sizeof(struct sbp2_status_block), sizeof(quadlet_t),
810                         ud->ne->host->low_addr_space, CSR1212_ALL_SPACE_END);
811         if (lu->status_fifo_addr == CSR1212_INVALID_ADDR_SPACE) {
812                 SBP2_ERR("failed to allocate status FIFO address range");
813                 goto failed_alloc;
814         }
815
816         shost = scsi_host_alloc(&sbp2_shost_template, sizeof(unsigned long));
817         if (!shost) {
818                 SBP2_ERR("failed to register scsi host");
819                 goto failed_alloc;
820         }
821
822         shost->hostdata[0] = (unsigned long)lu;
823
824         if (!scsi_add_host(shost, &ud->device)) {
825                 lu->shost = shost;
826                 return lu;
827         }
828
829         SBP2_ERR("failed to add scsi host");
830         scsi_host_put(shost);
831
832 failed_alloc:
833         sbp2_remove_device(lu);
834         return NULL;
835 }
836
837 static void sbp2_host_reset(struct hpsb_host *host)
838 {
839         struct sbp2_fwhost_info *hi;
840         struct sbp2_lu *lu;
841         unsigned long flags;
842
843         hi = hpsb_get_hostinfo(&sbp2_highlevel, host);
844         if (!hi)
845                 return;
846
847         read_lock_irqsave(&sbp2_hi_logical_units_lock, flags);
848         list_for_each_entry(lu, &hi->logical_units, lu_list)
849                 if (likely(atomic_read(&lu->state) !=
850                            SBP2LU_STATE_IN_SHUTDOWN)) {
851                         atomic_set(&lu->state, SBP2LU_STATE_IN_RESET);
852                         scsi_block_requests(lu->shost);
853                 }
854         read_unlock_irqrestore(&sbp2_hi_logical_units_lock, flags);
855 }
856
857 static int sbp2_start_device(struct sbp2_lu *lu)
858 {
859         struct sbp2_fwhost_info *hi = lu->hi;
860         int error;
861
862         lu->login_response = dma_alloc_coherent(hi->host->device.parent,
863                                      sizeof(struct sbp2_login_response),
864                                      &lu->login_response_dma, GFP_KERNEL);
865         if (!lu->login_response)
866                 goto alloc_fail;
867
868         lu->query_logins_orb = dma_alloc_coherent(hi->host->device.parent,
869                                      sizeof(struct sbp2_query_logins_orb),
870                                      &lu->query_logins_orb_dma, GFP_KERNEL);
871         if (!lu->query_logins_orb)
872                 goto alloc_fail;
873
874         lu->query_logins_response = dma_alloc_coherent(hi->host->device.parent,
875                                      sizeof(struct sbp2_query_logins_response),
876                                      &lu->query_logins_response_dma, GFP_KERNEL);
877         if (!lu->query_logins_response)
878                 goto alloc_fail;
879
880         lu->reconnect_orb = dma_alloc_coherent(hi->host->device.parent,
881                                      sizeof(struct sbp2_reconnect_orb),
882                                      &lu->reconnect_orb_dma, GFP_KERNEL);
883         if (!lu->reconnect_orb)
884                 goto alloc_fail;
885
886         lu->logout_orb = dma_alloc_coherent(hi->host->device.parent,
887                                      sizeof(struct sbp2_logout_orb),
888                                      &lu->logout_orb_dma, GFP_KERNEL);
889         if (!lu->logout_orb)
890                 goto alloc_fail;
891
892         lu->login_orb = dma_alloc_coherent(hi->host->device.parent,
893                                      sizeof(struct sbp2_login_orb),
894                                      &lu->login_orb_dma, GFP_KERNEL);
895         if (!lu->login_orb)
896                 goto alloc_fail;
897
898         if (sbp2util_create_command_orb_pool(lu))
899                 goto alloc_fail;
900
901         /* Wait a second before trying to log in. Previously logged in
902          * initiators need a chance to reconnect. */
903         if (msleep_interruptible(1000)) {
904                 sbp2_remove_device(lu);
905                 return -EINTR;
906         }
907
908         if (sbp2_login_device(lu)) {
909                 sbp2_remove_device(lu);
910                 return -EBUSY;
911         }
912
913         sbp2_set_busy_timeout(lu);
914         sbp2_agent_reset(lu, 1);
915         sbp2_max_speed_and_size(lu);
916
917         error = scsi_add_device(lu->shost, 0, lu->ud->id, 0);
918         if (error) {
919                 SBP2_ERR("scsi_add_device failed");
920                 sbp2_logout_device(lu);
921                 sbp2_remove_device(lu);
922                 return error;
923         }
924
925         return 0;
926
927 alloc_fail:
928         SBP2_ERR("Could not allocate memory for lu");
929         sbp2_remove_device(lu);
930         return -ENOMEM;
931 }
932
933 static void sbp2_remove_device(struct sbp2_lu *lu)
934 {
935         struct sbp2_fwhost_info *hi;
936         unsigned long flags;
937
938         if (!lu)
939                 return;
940         hi = lu->hi;
941         if (!hi)
942                 goto no_hi;
943
944         if (lu->shost) {
945                 scsi_remove_host(lu->shost);
946                 scsi_host_put(lu->shost);
947         }
948         flush_scheduled_work();
949         sbp2util_remove_command_orb_pool(lu, hi->host);
950
951         write_lock_irqsave(&sbp2_hi_logical_units_lock, flags);
952         list_del(&lu->lu_list);
953         write_unlock_irqrestore(&sbp2_hi_logical_units_lock, flags);
954
955         if (lu->login_response)
956                 dma_free_coherent(hi->host->device.parent,
957                                     sizeof(struct sbp2_login_response),
958                                     lu->login_response,
959                                     lu->login_response_dma);
960         if (lu->login_orb)
961                 dma_free_coherent(hi->host->device.parent,
962                                     sizeof(struct sbp2_login_orb),
963                                     lu->login_orb,
964                                     lu->login_orb_dma);
965         if (lu->reconnect_orb)
966                 dma_free_coherent(hi->host->device.parent,
967                                     sizeof(struct sbp2_reconnect_orb),
968                                     lu->reconnect_orb,
969                                     lu->reconnect_orb_dma);
970         if (lu->logout_orb)
971                 dma_free_coherent(hi->host->device.parent,
972                                     sizeof(struct sbp2_logout_orb),
973                                     lu->logout_orb,
974                                     lu->logout_orb_dma);
975         if (lu->query_logins_orb)
976                 dma_free_coherent(hi->host->device.parent,
977                                     sizeof(struct sbp2_query_logins_orb),
978                                     lu->query_logins_orb,
979                                     lu->query_logins_orb_dma);
980         if (lu->query_logins_response)
981                 dma_free_coherent(hi->host->device.parent,
982                                     sizeof(struct sbp2_query_logins_response),
983                                     lu->query_logins_response,
984                                     lu->query_logins_response_dma);
985
986         if (lu->status_fifo_addr != CSR1212_INVALID_ADDR_SPACE)
987                 hpsb_unregister_addrspace(&sbp2_highlevel, hi->host,
988                                           lu->status_fifo_addr);
989
990         lu->ud->device.driver_data = NULL;
991
992         module_put(hi->host->driver->owner);
993 no_hi:
994         kfree(lu);
995 }
996
997 #ifdef CONFIG_IEEE1394_SBP2_PHYS_DMA
998 /*
999  * Deal with write requests on adapters which do not support physical DMA or
1000  * have it switched off.
1001  */
1002 static int sbp2_handle_physdma_write(struct hpsb_host *host, int nodeid,
1003                                      int destid, quadlet_t *data, u64 addr,
1004                                      size_t length, u16 flags)
1005 {
1006         memcpy(bus_to_virt((u32) addr), data, length);
1007         return RCODE_COMPLETE;
1008 }
1009
1010 /*
1011  * Deal with read requests on adapters which do not support physical DMA or
1012  * have it switched off.
1013  */
1014 static int sbp2_handle_physdma_read(struct hpsb_host *host, int nodeid,
1015                                     quadlet_t *data, u64 addr, size_t length,
1016                                     u16 flags)
1017 {
1018         memcpy(data, bus_to_virt((u32) addr), length);
1019         return RCODE_COMPLETE;
1020 }
1021 #endif
1022
1023 /**************************************
1024  * SBP-2 protocol related section
1025  **************************************/
1026
1027 static int sbp2_query_logins(struct sbp2_lu *lu)
1028 {
1029         struct sbp2_fwhost_info *hi = lu->hi;
1030         quadlet_t data[2];
1031         int max_logins;
1032         int active_logins;
1033
1034         lu->query_logins_orb->reserved1 = 0x0;
1035         lu->query_logins_orb->reserved2 = 0x0;
1036
1037         lu->query_logins_orb->query_response_lo = lu->query_logins_response_dma;
1038         lu->query_logins_orb->query_response_hi =
1039                         ORB_SET_NODE_ID(hi->host->node_id);
1040         lu->query_logins_orb->lun_misc =
1041                         ORB_SET_FUNCTION(SBP2_QUERY_LOGINS_REQUEST);
1042         lu->query_logins_orb->lun_misc |= ORB_SET_NOTIFY(1);
1043         lu->query_logins_orb->lun_misc |= ORB_SET_LUN(lu->lun);
1044
1045         lu->query_logins_orb->reserved_resp_length =
1046                 ORB_SET_QUERY_LOGINS_RESP_LENGTH(
1047                         sizeof(struct sbp2_query_logins_response));
1048
1049         lu->query_logins_orb->status_fifo_hi =
1050                 ORB_SET_STATUS_FIFO_HI(lu->status_fifo_addr, hi->host->node_id);
1051         lu->query_logins_orb->status_fifo_lo =
1052                 ORB_SET_STATUS_FIFO_LO(lu->status_fifo_addr);
1053
1054         sbp2util_cpu_to_be32_buffer(lu->query_logins_orb,
1055                                     sizeof(struct sbp2_query_logins_orb));
1056
1057         memset(lu->query_logins_response, 0,
1058                sizeof(struct sbp2_query_logins_response));
1059
1060         data[0] = ORB_SET_NODE_ID(hi->host->node_id);
1061         data[1] = lu->query_logins_orb_dma;
1062         sbp2util_cpu_to_be32_buffer(data, 8);
1063
1064         hpsb_node_write(lu->ne, lu->management_agent_addr, data, 8);
1065
1066         if (sbp2util_access_timeout(lu, 2*HZ)) {
1067                 SBP2_INFO("Error querying logins to SBP-2 device - timed out");
1068                 return -EIO;
1069         }
1070
1071         if (lu->status_block.ORB_offset_lo != lu->query_logins_orb_dma) {
1072                 SBP2_INFO("Error querying logins to SBP-2 device - timed out");
1073                 return -EIO;
1074         }
1075
1076         if (STATUS_TEST_RDS(lu->status_block.ORB_offset_hi_misc)) {
1077                 SBP2_INFO("Error querying logins to SBP-2 device - failed");
1078                 return -EIO;
1079         }
1080
1081         sbp2util_cpu_to_be32_buffer(lu->query_logins_response,
1082                                     sizeof(struct sbp2_query_logins_response));
1083
1084         max_logins = RESPONSE_GET_MAX_LOGINS(
1085                         lu->query_logins_response->length_max_logins);
1086         SBP2_INFO("Maximum concurrent logins supported: %d", max_logins);
1087
1088         active_logins = RESPONSE_GET_ACTIVE_LOGINS(
1089                         lu->query_logins_response->length_max_logins);
1090         SBP2_INFO("Number of active logins: %d", active_logins);
1091
1092         if (active_logins >= max_logins) {
1093                 return -EIO;
1094         }
1095
1096         return 0;
1097 }
1098
1099 static int sbp2_login_device(struct sbp2_lu *lu)
1100 {
1101         struct sbp2_fwhost_info *hi = lu->hi;
1102         quadlet_t data[2];
1103
1104         if (!lu->login_orb)
1105                 return -EIO;
1106
1107         if (!sbp2_exclusive_login && sbp2_query_logins(lu)) {
1108                 SBP2_INFO("Device does not support any more concurrent logins");
1109                 return -EIO;
1110         }
1111
1112         /* assume no password */
1113         lu->login_orb->password_hi = 0;
1114         lu->login_orb->password_lo = 0;
1115
1116         lu->login_orb->login_response_lo = lu->login_response_dma;
1117         lu->login_orb->login_response_hi = ORB_SET_NODE_ID(hi->host->node_id);
1118         lu->login_orb->lun_misc = ORB_SET_FUNCTION(SBP2_LOGIN_REQUEST);
1119
1120         /* one second reconnect time */
1121         lu->login_orb->lun_misc |= ORB_SET_RECONNECT(0);
1122         lu->login_orb->lun_misc |= ORB_SET_EXCLUSIVE(sbp2_exclusive_login);
1123         lu->login_orb->lun_misc |= ORB_SET_NOTIFY(1);
1124         lu->login_orb->lun_misc |= ORB_SET_LUN(lu->lun);
1125
1126         lu->login_orb->passwd_resp_lengths =
1127                 ORB_SET_LOGIN_RESP_LENGTH(sizeof(struct sbp2_login_response));
1128
1129         lu->login_orb->status_fifo_hi =
1130                 ORB_SET_STATUS_FIFO_HI(lu->status_fifo_addr, hi->host->node_id);
1131         lu->login_orb->status_fifo_lo =
1132                 ORB_SET_STATUS_FIFO_LO(lu->status_fifo_addr);
1133
1134         sbp2util_cpu_to_be32_buffer(lu->login_orb,
1135                                     sizeof(struct sbp2_login_orb));
1136
1137         memset(lu->login_response, 0, sizeof(struct sbp2_login_response));
1138
1139         data[0] = ORB_SET_NODE_ID(hi->host->node_id);
1140         data[1] = lu->login_orb_dma;
1141         sbp2util_cpu_to_be32_buffer(data, 8);
1142
1143         hpsb_node_write(lu->ne, lu->management_agent_addr, data, 8);
1144
1145         /* wait up to 20 seconds for login status */
1146         if (sbp2util_access_timeout(lu, 20*HZ)) {
1147                 SBP2_ERR("Error logging into SBP-2 device - timed out");
1148                 return -EIO;
1149         }
1150
1151         /* make sure that the returned status matches the login ORB */
1152         if (lu->status_block.ORB_offset_lo != lu->login_orb_dma) {
1153                 SBP2_ERR("Error logging into SBP-2 device - timed out");
1154                 return -EIO;
1155         }
1156
1157         if (STATUS_TEST_RDS(lu->status_block.ORB_offset_hi_misc)) {
1158                 SBP2_ERR("Error logging into SBP-2 device - failed");
1159                 return -EIO;
1160         }
1161
1162         sbp2util_cpu_to_be32_buffer(lu->login_response,
1163                                     sizeof(struct sbp2_login_response));
1164         lu->command_block_agent_addr =
1165                         ((u64)lu->login_response->command_block_agent_hi) << 32;
1166         lu->command_block_agent_addr |=
1167                         ((u64)lu->login_response->command_block_agent_lo);
1168         lu->command_block_agent_addr &= 0x0000ffffffffffffULL;
1169
1170         SBP2_INFO("Logged into SBP-2 device");
1171         return 0;
1172 }
1173
1174 static int sbp2_logout_device(struct sbp2_lu *lu)
1175 {
1176         struct sbp2_fwhost_info *hi = lu->hi;
1177         quadlet_t data[2];
1178         int error;
1179
1180         lu->logout_orb->reserved1 = 0x0;
1181         lu->logout_orb->reserved2 = 0x0;
1182         lu->logout_orb->reserved3 = 0x0;
1183         lu->logout_orb->reserved4 = 0x0;
1184
1185         lu->logout_orb->login_ID_misc = ORB_SET_FUNCTION(SBP2_LOGOUT_REQUEST);
1186         lu->logout_orb->login_ID_misc |=
1187                         ORB_SET_LOGIN_ID(lu->login_response->length_login_ID);
1188         lu->logout_orb->login_ID_misc |= ORB_SET_NOTIFY(1);
1189
1190         lu->logout_orb->reserved5 = 0x0;
1191         lu->logout_orb->status_fifo_hi =
1192                 ORB_SET_STATUS_FIFO_HI(lu->status_fifo_addr, hi->host->node_id);
1193         lu->logout_orb->status_fifo_lo =
1194                 ORB_SET_STATUS_FIFO_LO(lu->status_fifo_addr);
1195
1196         sbp2util_cpu_to_be32_buffer(lu->logout_orb,
1197                                     sizeof(struct sbp2_logout_orb));
1198
1199         data[0] = ORB_SET_NODE_ID(hi->host->node_id);
1200         data[1] = lu->logout_orb_dma;
1201         sbp2util_cpu_to_be32_buffer(data, 8);
1202
1203         error = hpsb_node_write(lu->ne, lu->management_agent_addr, data, 8);
1204         if (error)
1205                 return error;
1206
1207         /* wait up to 1 second for the device to complete logout */
1208         if (sbp2util_access_timeout(lu, HZ))
1209                 return -EIO;
1210
1211         SBP2_INFO("Logged out of SBP-2 device");
1212         return 0;
1213 }
1214
1215 static int sbp2_reconnect_device(struct sbp2_lu *lu)
1216 {
1217         struct sbp2_fwhost_info *hi = lu->hi;
1218         quadlet_t data[2];
1219         int error;
1220
1221         lu->reconnect_orb->reserved1 = 0x0;
1222         lu->reconnect_orb->reserved2 = 0x0;
1223         lu->reconnect_orb->reserved3 = 0x0;
1224         lu->reconnect_orb->reserved4 = 0x0;
1225
1226         lu->reconnect_orb->login_ID_misc =
1227                         ORB_SET_FUNCTION(SBP2_RECONNECT_REQUEST);
1228         lu->reconnect_orb->login_ID_misc |=
1229                         ORB_SET_LOGIN_ID(lu->login_response->length_login_ID);
1230         lu->reconnect_orb->login_ID_misc |= ORB_SET_NOTIFY(1);
1231
1232         lu->reconnect_orb->reserved5 = 0x0;
1233         lu->reconnect_orb->status_fifo_hi =
1234                 ORB_SET_STATUS_FIFO_HI(lu->status_fifo_addr, hi->host->node_id);
1235         lu->reconnect_orb->status_fifo_lo =
1236                 ORB_SET_STATUS_FIFO_LO(lu->status_fifo_addr);
1237
1238         sbp2util_cpu_to_be32_buffer(lu->reconnect_orb,
1239                                     sizeof(struct sbp2_reconnect_orb));
1240
1241         data[0] = ORB_SET_NODE_ID(hi->host->node_id);
1242         data[1] = lu->reconnect_orb_dma;
1243         sbp2util_cpu_to_be32_buffer(data, 8);
1244
1245         error = hpsb_node_write(lu->ne, lu->management_agent_addr, data, 8);
1246         if (error)
1247                 return error;
1248
1249         /* wait up to 1 second for reconnect status */
1250         if (sbp2util_access_timeout(lu, HZ)) {
1251                 SBP2_ERR("Error reconnecting to SBP-2 device - timed out");
1252                 return -EIO;
1253         }
1254
1255         /* make sure that the returned status matches the reconnect ORB */
1256         if (lu->status_block.ORB_offset_lo != lu->reconnect_orb_dma) {
1257                 SBP2_ERR("Error reconnecting to SBP-2 device - timed out");
1258                 return -EIO;
1259         }
1260
1261         if (STATUS_TEST_RDS(lu->status_block.ORB_offset_hi_misc)) {
1262                 SBP2_ERR("Error reconnecting to SBP-2 device - failed");
1263                 return -EIO;
1264         }
1265
1266         SBP2_INFO("Reconnected to SBP-2 device");
1267         return 0;
1268 }
1269
1270 /*
1271  * Set the target node's Single Phase Retry limit. Affects the target's retry
1272  * behaviour if our node is too busy to accept requests.
1273  */
1274 static int sbp2_set_busy_timeout(struct sbp2_lu *lu)
1275 {
1276         quadlet_t data;
1277
1278         data = cpu_to_be32(SBP2_BUSY_TIMEOUT_VALUE);
1279         if (hpsb_node_write(lu->ne, SBP2_BUSY_TIMEOUT_ADDRESS, &data, 4))
1280                 SBP2_ERR("%s error", __FUNCTION__);
1281         return 0;
1282 }
1283
1284 static void sbp2_parse_unit_directory(struct sbp2_lu *lu,
1285                                       struct unit_directory *ud)
1286 {
1287         struct csr1212_keyval *kv;
1288         struct csr1212_dentry *dentry;
1289         u64 management_agent_addr;
1290         u32 unit_characteristics, firmware_revision;
1291         unsigned workarounds;
1292         int i;
1293
1294         management_agent_addr = 0;
1295         unit_characteristics = 0;
1296         firmware_revision = 0;
1297
1298         csr1212_for_each_dir_entry(ud->ne->csr, kv, ud->ud_kv, dentry) {
1299                 switch (kv->key.id) {
1300                 case CSR1212_KV_ID_DEPENDENT_INFO:
1301                         if (kv->key.type == CSR1212_KV_TYPE_CSR_OFFSET)
1302                                 management_agent_addr =
1303                                     CSR1212_REGISTER_SPACE_BASE +
1304                                     (kv->value.csr_offset << 2);
1305
1306                         else if (kv->key.type == CSR1212_KV_TYPE_IMMEDIATE)
1307                                 lu->lun = ORB_SET_LUN(kv->value.immediate);
1308                         break;
1309
1310                 case SBP2_UNIT_CHARACTERISTICS_KEY:
1311                         /* FIXME: This is ignored so far.
1312                          * See SBP-2 clause 7.4.8. */
1313                         unit_characteristics = kv->value.immediate;
1314                         break;
1315
1316                 case SBP2_FIRMWARE_REVISION_KEY:
1317                         firmware_revision = kv->value.immediate;
1318                         break;
1319
1320                 default:
1321                         /* FIXME: Check for SBP2_DEVICE_TYPE_AND_LUN_KEY.
1322                          * Its "ordered" bit has consequences for command ORB
1323                          * list handling. See SBP-2 clauses 4.6, 7.4.11, 10.2 */
1324                         break;
1325                 }
1326         }
1327
1328         workarounds = sbp2_default_workarounds;
1329
1330         if (!(workarounds & SBP2_WORKAROUND_OVERRIDE))
1331                 for (i = 0; i < ARRAY_SIZE(sbp2_workarounds_table); i++) {
1332                         if (sbp2_workarounds_table[i].firmware_revision !=
1333                             SBP2_ROM_VALUE_WILDCARD &&
1334                             sbp2_workarounds_table[i].firmware_revision !=
1335                             (firmware_revision & 0xffff00))
1336                                 continue;
1337                         if (sbp2_workarounds_table[i].model_id !=
1338                             SBP2_ROM_VALUE_WILDCARD &&
1339                             sbp2_workarounds_table[i].model_id != ud->model_id)
1340                                 continue;
1341                         workarounds |= sbp2_workarounds_table[i].workarounds;
1342                         break;
1343                 }
1344
1345         if (workarounds)
1346                 SBP2_INFO("Workarounds for node " NODE_BUS_FMT ": 0x%x "
1347                           "(firmware_revision 0x%06x, vendor_id 0x%06x,"
1348                           " model_id 0x%06x)",
1349                           NODE_BUS_ARGS(ud->ne->host, ud->ne->nodeid),
1350                           workarounds, firmware_revision,
1351                           ud->vendor_id ? ud->vendor_id : ud->ne->vendor_id,
1352                           ud->model_id);
1353
1354         /* We would need one SCSI host template for each target to adjust
1355          * max_sectors on the fly, therefore warn only. */
1356         if (workarounds & SBP2_WORKAROUND_128K_MAX_TRANS &&
1357             (sbp2_max_sectors * 512) > (128 * 1024))
1358                 SBP2_INFO("Node " NODE_BUS_FMT ": Bridge only supports 128KB "
1359                           "max transfer size. WARNING: Current max_sectors "
1360                           "setting is larger than 128KB (%d sectors)",
1361                           NODE_BUS_ARGS(ud->ne->host, ud->ne->nodeid),
1362                           sbp2_max_sectors);
1363
1364         /* If this is a logical unit directory entry, process the parent
1365          * to get the values. */
1366         if (ud->flags & UNIT_DIRECTORY_LUN_DIRECTORY) {
1367                 struct unit_directory *parent_ud = container_of(
1368                         ud->device.parent, struct unit_directory, device);
1369                 sbp2_parse_unit_directory(lu, parent_ud);
1370         } else {
1371                 lu->management_agent_addr = management_agent_addr;
1372                 lu->workarounds = workarounds;
1373                 if (ud->flags & UNIT_DIRECTORY_HAS_LUN)
1374                         lu->lun = ORB_SET_LUN(ud->lun);
1375         }
1376 }
1377
1378 #define SBP2_PAYLOAD_TO_BYTES(p) (1 << ((p) + 2))
1379
1380 /*
1381  * This function is called in order to determine the max speed and packet
1382  * size we can use in our ORBs. Note, that we (the driver and host) only
1383  * initiate the transaction. The SBP-2 device actually transfers the data
1384  * (by reading from the DMA area we tell it). This means that the SBP-2
1385  * device decides the actual maximum data it can transfer. We just tell it
1386  * the speed that it needs to use, and the max_rec the host supports, and
1387  * it takes care of the rest.
1388  */
1389 static int sbp2_max_speed_and_size(struct sbp2_lu *lu)
1390 {
1391         struct sbp2_fwhost_info *hi = lu->hi;
1392         u8 payload;
1393
1394         lu->speed_code = hi->host->speed[NODEID_TO_NODE(lu->ne->nodeid)];
1395
1396         if (lu->speed_code > sbp2_max_speed) {
1397                 lu->speed_code = sbp2_max_speed;
1398                 SBP2_INFO("Reducing speed to %s",
1399                           hpsb_speedto_str[sbp2_max_speed]);
1400         }
1401
1402         /* Payload size is the lesser of what our speed supports and what
1403          * our host supports.  */
1404         payload = min(sbp2_speedto_max_payload[lu->speed_code],
1405                       (u8) (hi->host->csr.max_rec - 1));
1406
1407         /* If physical DMA is off, work around limitation in ohci1394:
1408          * packet size must not exceed PAGE_SIZE */
1409         if (lu->ne->host->low_addr_space < (1ULL << 32))
1410                 while (SBP2_PAYLOAD_TO_BYTES(payload) + 24 > PAGE_SIZE &&
1411                        payload)
1412                         payload--;
1413
1414         SBP2_INFO("Node " NODE_BUS_FMT ": Max speed [%s] - Max payload [%u]",
1415                   NODE_BUS_ARGS(hi->host, lu->ne->nodeid),
1416                   hpsb_speedto_str[lu->speed_code],
1417                   SBP2_PAYLOAD_TO_BYTES(payload));
1418
1419         lu->max_payload_size = payload;
1420         return 0;
1421 }
1422
1423 static int sbp2_agent_reset(struct sbp2_lu *lu, int wait)
1424 {
1425         quadlet_t data;
1426         u64 addr;
1427         int retval;
1428         unsigned long flags;
1429
1430         /* flush lu->protocol_work */
1431         if (wait)
1432                 flush_scheduled_work();
1433
1434         data = ntohl(SBP2_AGENT_RESET_DATA);
1435         addr = lu->command_block_agent_addr + SBP2_AGENT_RESET_OFFSET;
1436
1437         if (wait)
1438                 retval = hpsb_node_write(lu->ne, addr, &data, 4);
1439         else
1440                 retval = sbp2util_node_write_no_wait(lu->ne, addr, &data, 4);
1441
1442         if (retval < 0) {
1443                 SBP2_ERR("hpsb_node_write failed.\n");
1444                 return -EIO;
1445         }
1446
1447         /* make sure that the ORB_POINTER is written on next command */
1448         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
1449         lu->last_orb = NULL;
1450         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
1451
1452         return 0;
1453 }
1454
1455 static void sbp2_prep_command_orb_sg(struct sbp2_command_orb *orb,
1456                                      struct sbp2_fwhost_info *hi,
1457                                      struct sbp2_command_info *cmd,
1458                                      unsigned int scsi_use_sg,
1459                                      struct scatterlist *sg,
1460                                      u32 orb_direction,
1461                                      enum dma_data_direction dma_dir)
1462 {
1463         cmd->dma_dir = dma_dir;
1464         orb->data_descriptor_hi = ORB_SET_NODE_ID(hi->host->node_id);
1465         orb->misc |= ORB_SET_DIRECTION(orb_direction);
1466
1467         /* special case if only one element (and less than 64KB in size) */
1468         if ((scsi_use_sg == 1) &&
1469             (sg_dma_len(sg) <= SBP2_MAX_SG_ELEMENT_LENGTH)) {
1470
1471                 cmd->dma_size = sg_dma_len(sg);
1472                 cmd->dma_type = CMD_DMA_PAGE;
1473                 cmd->cmd_dma = dma_map_page(hi->host->device.parent,
1474                                             sg_page(sg), sg->offset,
1475                                             cmd->dma_size, cmd->dma_dir);
1476
1477                 orb->data_descriptor_lo = cmd->cmd_dma;
1478                 orb->misc |= ORB_SET_DATA_SIZE(cmd->dma_size);
1479
1480         } else {
1481                 struct sbp2_unrestricted_page_table *sg_element =
1482                                                 &cmd->scatter_gather_element[0];
1483                 u32 sg_count, sg_len;
1484                 dma_addr_t sg_addr;
1485                 int i, count = dma_map_sg(hi->host->device.parent, sg,
1486                                           scsi_use_sg, dma_dir);
1487
1488                 cmd->dma_size = scsi_use_sg;
1489                 cmd->sge_buffer = sg;
1490
1491                 /* use page tables (s/g) */
1492                 orb->misc |= ORB_SET_PAGE_TABLE_PRESENT(0x1);
1493                 orb->data_descriptor_lo = cmd->sge_dma;
1494
1495                 /* loop through and fill out our SBP-2 page tables
1496                  * (and split up anything too large) */
1497                 for (i = 0, sg_count = 0; i < count; i++, sg = sg_next(sg)) {
1498                         sg_len = sg_dma_len(sg);
1499                         sg_addr = sg_dma_address(sg);
1500                         while (sg_len) {
1501                                 sg_element[sg_count].segment_base_lo = sg_addr;
1502                                 if (sg_len > SBP2_MAX_SG_ELEMENT_LENGTH) {
1503                                         sg_element[sg_count].length_segment_base_hi =
1504                                                 PAGE_TABLE_SET_SEGMENT_LENGTH(SBP2_MAX_SG_ELEMENT_LENGTH);
1505                                         sg_addr += SBP2_MAX_SG_ELEMENT_LENGTH;
1506                                         sg_len -= SBP2_MAX_SG_ELEMENT_LENGTH;
1507                                 } else {
1508                                         sg_element[sg_count].length_segment_base_hi =
1509                                                 PAGE_TABLE_SET_SEGMENT_LENGTH(sg_len);
1510                                         sg_len = 0;
1511                                 }
1512                                 sg_count++;
1513                         }
1514                 }
1515
1516                 orb->misc |= ORB_SET_DATA_SIZE(sg_count);
1517
1518                 sbp2util_cpu_to_be32_buffer(sg_element,
1519                                 (sizeof(struct sbp2_unrestricted_page_table)) *
1520                                 sg_count);
1521         }
1522 }
1523
1524 static void sbp2_create_command_orb(struct sbp2_lu *lu,
1525                                     struct sbp2_command_info *cmd,
1526                                     unchar *scsi_cmd,
1527                                     unsigned int scsi_use_sg,
1528                                     unsigned int scsi_request_bufflen,
1529                                     struct scatterlist *sg,
1530                                     enum dma_data_direction dma_dir)
1531 {
1532         struct sbp2_fwhost_info *hi = lu->hi;
1533         struct sbp2_command_orb *orb = &cmd->command_orb;
1534         u32 orb_direction;
1535
1536         /*
1537          * Set-up our command ORB.
1538          *
1539          * NOTE: We're doing unrestricted page tables (s/g), as this is
1540          * best performance (at least with the devices I have). This means
1541          * that data_size becomes the number of s/g elements, and
1542          * page_size should be zero (for unrestricted).
1543          */
1544         orb->next_ORB_hi = ORB_SET_NULL_PTR(1);
1545         orb->next_ORB_lo = 0x0;
1546         orb->misc = ORB_SET_MAX_PAYLOAD(lu->max_payload_size);
1547         orb->misc |= ORB_SET_SPEED(lu->speed_code);
1548         orb->misc |= ORB_SET_NOTIFY(1);
1549
1550         if (dma_dir == DMA_NONE)
1551                 orb_direction = ORB_DIRECTION_NO_DATA_TRANSFER;
1552         else if (dma_dir == DMA_TO_DEVICE && scsi_request_bufflen)
1553                 orb_direction = ORB_DIRECTION_WRITE_TO_MEDIA;
1554         else if (dma_dir == DMA_FROM_DEVICE && scsi_request_bufflen)
1555                 orb_direction = ORB_DIRECTION_READ_FROM_MEDIA;
1556         else {
1557                 SBP2_INFO("Falling back to DMA_NONE");
1558                 orb_direction = ORB_DIRECTION_NO_DATA_TRANSFER;
1559         }
1560
1561         /* set up our page table stuff */
1562         if (orb_direction == ORB_DIRECTION_NO_DATA_TRANSFER) {
1563                 orb->data_descriptor_hi = 0x0;
1564                 orb->data_descriptor_lo = 0x0;
1565                 orb->misc |= ORB_SET_DIRECTION(1);
1566         } else
1567                 sbp2_prep_command_orb_sg(orb, hi, cmd, scsi_use_sg, sg,
1568                                          orb_direction, dma_dir);
1569
1570         sbp2util_cpu_to_be32_buffer(orb, sizeof(*orb));
1571
1572         memset(orb->cdb, 0, 12);
1573         memcpy(orb->cdb, scsi_cmd, COMMAND_SIZE(*scsi_cmd));
1574 }
1575
1576 static void sbp2_link_orb_command(struct sbp2_lu *lu,
1577                                   struct sbp2_command_info *cmd)
1578 {
1579         struct sbp2_fwhost_info *hi = lu->hi;
1580         struct sbp2_command_orb *last_orb;
1581         dma_addr_t last_orb_dma;
1582         u64 addr = lu->command_block_agent_addr;
1583         quadlet_t data[2];
1584         size_t length;
1585         unsigned long flags;
1586
1587         dma_sync_single_for_device(hi->host->device.parent,
1588                                    cmd->command_orb_dma,
1589                                    sizeof(struct sbp2_command_orb),
1590                                    DMA_TO_DEVICE);
1591         dma_sync_single_for_device(hi->host->device.parent, cmd->sge_dma,
1592                                    sizeof(cmd->scatter_gather_element),
1593                                    DMA_TO_DEVICE);
1594
1595         /* check to see if there are any previous orbs to use */
1596         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
1597         last_orb = lu->last_orb;
1598         last_orb_dma = lu->last_orb_dma;
1599         if (!last_orb) {
1600                 /*
1601                  * last_orb == NULL means: We know that the target's fetch agent
1602                  * is not active right now.
1603                  */
1604                 addr += SBP2_ORB_POINTER_OFFSET;
1605                 data[0] = ORB_SET_NODE_ID(hi->host->node_id);
1606                 data[1] = cmd->command_orb_dma;
1607                 sbp2util_cpu_to_be32_buffer(data, 8);
1608                 length = 8;
1609         } else {
1610                 /*
1611                  * last_orb != NULL means: We know that the target's fetch agent
1612                  * is (very probably) not dead or in reset state right now.
1613                  * We have an ORB already sent that we can append a new one to.
1614                  * The target's fetch agent may or may not have read this
1615                  * previous ORB yet.
1616                  */
1617                 dma_sync_single_for_cpu(hi->host->device.parent, last_orb_dma,
1618                                         sizeof(struct sbp2_command_orb),
1619                                         DMA_TO_DEVICE);
1620                 last_orb->next_ORB_lo = cpu_to_be32(cmd->command_orb_dma);
1621                 wmb();
1622                 /* Tells hardware that this pointer is valid */
1623                 last_orb->next_ORB_hi = 0;
1624                 dma_sync_single_for_device(hi->host->device.parent,
1625                                            last_orb_dma,
1626                                            sizeof(struct sbp2_command_orb),
1627                                            DMA_TO_DEVICE);
1628                 addr += SBP2_DOORBELL_OFFSET;
1629                 data[0] = 0;
1630                 length = 4;
1631         }
1632         lu->last_orb = &cmd->command_orb;
1633         lu->last_orb_dma = cmd->command_orb_dma;
1634         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
1635
1636         if (sbp2util_node_write_no_wait(lu->ne, addr, data, length)) {
1637                 /*
1638                  * sbp2util_node_write_no_wait failed. We certainly ran out
1639                  * of transaction labels, perhaps just because there were no
1640                  * context switches which gave khpsbpkt a chance to collect
1641                  * free tlabels. Try again in non-atomic context. If necessary,
1642                  * the workqueue job will sleep to guaranteedly get a tlabel.
1643                  * We do not accept new commands until the job is over.
1644                  */
1645                 scsi_block_requests(lu->shost);
1646                 PREPARE_WORK(&lu->protocol_work,
1647                              last_orb ? sbp2util_write_doorbell:
1648                                         sbp2util_write_orb_pointer);
1649                 schedule_work(&lu->protocol_work);
1650         }
1651 }
1652
1653 static int sbp2_send_command(struct sbp2_lu *lu, struct scsi_cmnd *SCpnt,
1654                              void (*done)(struct scsi_cmnd *))
1655 {
1656         unchar *scsi_cmd = (unchar *)SCpnt->cmnd;
1657         struct sbp2_command_info *cmd;
1658
1659         cmd = sbp2util_allocate_command_orb(lu, SCpnt, done);
1660         if (!cmd)
1661                 return -EIO;
1662
1663         sbp2_create_command_orb(lu, cmd, scsi_cmd, scsi_sg_count(SCpnt),
1664                                 scsi_bufflen(SCpnt), scsi_sglist(SCpnt),
1665                                 SCpnt->sc_data_direction);
1666         sbp2_link_orb_command(lu, cmd);
1667
1668         return 0;
1669 }
1670
1671 /*
1672  * Translates SBP-2 status into SCSI sense data for check conditions
1673  */
1674 static unsigned int sbp2_status_to_sense_data(unchar *sbp2_status,
1675                                               unchar *sense_data)
1676 {
1677         /* OK, it's pretty ugly... ;-) */
1678         sense_data[0] = 0x70;
1679         sense_data[1] = 0x0;
1680         sense_data[2] = sbp2_status[9];
1681         sense_data[3] = sbp2_status[12];
1682         sense_data[4] = sbp2_status[13];
1683         sense_data[5] = sbp2_status[14];
1684         sense_data[6] = sbp2_status[15];
1685         sense_data[7] = 10;
1686         sense_data[8] = sbp2_status[16];
1687         sense_data[9] = sbp2_status[17];
1688         sense_data[10] = sbp2_status[18];
1689         sense_data[11] = sbp2_status[19];
1690         sense_data[12] = sbp2_status[10];
1691         sense_data[13] = sbp2_status[11];
1692         sense_data[14] = sbp2_status[20];
1693         sense_data[15] = sbp2_status[21];
1694
1695         return sbp2_status[8] & 0x3f;
1696 }
1697
1698 static int sbp2_handle_status_write(struct hpsb_host *host, int nodeid,
1699                                     int destid, quadlet_t *data, u64 addr,
1700                                     size_t length, u16 fl)
1701 {
1702         struct sbp2_fwhost_info *hi;
1703         struct sbp2_lu *lu = NULL, *lu_tmp;
1704         struct scsi_cmnd *SCpnt = NULL;
1705         struct sbp2_status_block *sb;
1706         u32 scsi_status = SBP2_SCSI_STATUS_GOOD;
1707         struct sbp2_command_info *cmd;
1708         unsigned long flags;
1709
1710         if (unlikely(length < 8 || length > sizeof(struct sbp2_status_block))) {
1711                 SBP2_ERR("Wrong size of status block");
1712                 return RCODE_ADDRESS_ERROR;
1713         }
1714         if (unlikely(!host)) {
1715                 SBP2_ERR("host is NULL - this is bad!");
1716                 return RCODE_ADDRESS_ERROR;
1717         }
1718         hi = hpsb_get_hostinfo(&sbp2_highlevel, host);
1719         if (unlikely(!hi)) {
1720                 SBP2_ERR("host info is NULL - this is bad!");
1721                 return RCODE_ADDRESS_ERROR;
1722         }
1723
1724         /* Find the unit which wrote the status. */
1725         read_lock_irqsave(&sbp2_hi_logical_units_lock, flags);
1726         list_for_each_entry(lu_tmp, &hi->logical_units, lu_list) {
1727                 if (lu_tmp->ne->nodeid == nodeid &&
1728                     lu_tmp->status_fifo_addr == addr) {
1729                         lu = lu_tmp;
1730                         break;
1731                 }
1732         }
1733         read_unlock_irqrestore(&sbp2_hi_logical_units_lock, flags);
1734
1735         if (unlikely(!lu)) {
1736                 SBP2_ERR("lu is NULL - device is gone?");
1737                 return RCODE_ADDRESS_ERROR;
1738         }
1739
1740         /* Put response into lu status fifo buffer. The first two bytes
1741          * come in big endian bit order. Often the target writes only a
1742          * truncated status block, minimally the first two quadlets. The rest
1743          * is implied to be zeros. */
1744         sb = &lu->status_block;
1745         memset(sb->command_set_dependent, 0, sizeof(sb->command_set_dependent));
1746         memcpy(sb, data, length);
1747         sbp2util_be32_to_cpu_buffer(sb, 8);
1748
1749         /* Ignore unsolicited status. Handle command ORB status. */
1750         if (unlikely(STATUS_GET_SRC(sb->ORB_offset_hi_misc) == 2))
1751                 cmd = NULL;
1752         else
1753                 cmd = sbp2util_find_command_for_orb(lu, sb->ORB_offset_lo);
1754         if (cmd) {
1755                 dma_sync_single_for_cpu(hi->host->device.parent,
1756                                         cmd->command_orb_dma,
1757                                         sizeof(struct sbp2_command_orb),
1758                                         DMA_TO_DEVICE);
1759                 dma_sync_single_for_cpu(hi->host->device.parent, cmd->sge_dma,
1760                                         sizeof(cmd->scatter_gather_element),
1761                                         DMA_TO_DEVICE);
1762                 /* Grab SCSI command pointers and check status. */
1763                 /*
1764                  * FIXME: If the src field in the status is 1, the ORB DMA must
1765                  * not be reused until status for a subsequent ORB is received.
1766                  */
1767                 SCpnt = cmd->Current_SCpnt;
1768                 spin_lock_irqsave(&lu->cmd_orb_lock, flags);
1769                 sbp2util_mark_command_completed(lu, cmd);
1770                 spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
1771
1772                 if (SCpnt) {
1773                         u32 h = sb->ORB_offset_hi_misc;
1774                         u32 r = STATUS_GET_RESP(h);
1775
1776                         if (r != RESP_STATUS_REQUEST_COMPLETE) {
1777                                 SBP2_INFO("resp 0x%x, sbp_status 0x%x",
1778                                           r, STATUS_GET_SBP_STATUS(h));
1779                                 scsi_status =
1780                                         r == RESP_STATUS_TRANSPORT_FAILURE ?
1781                                         SBP2_SCSI_STATUS_BUSY :
1782                                         SBP2_SCSI_STATUS_COMMAND_TERMINATED;
1783                         }
1784
1785                         if (STATUS_GET_LEN(h) > 1)
1786                                 scsi_status = sbp2_status_to_sense_data(
1787                                         (unchar *)sb, SCpnt->sense_buffer);
1788
1789                         if (STATUS_TEST_DEAD(h))
1790                                 sbp2_agent_reset(lu, 0);
1791                 }
1792
1793                 /* Check here to see if there are no commands in-use. If there
1794                  * are none, we know that the fetch agent left the active state
1795                  * _and_ that we did not reactivate it yet. Therefore clear
1796                  * last_orb so that next time we write directly to the
1797                  * ORB_POINTER register. That way the fetch agent does not need
1798                  * to refetch the next_ORB. */
1799                 spin_lock_irqsave(&lu->cmd_orb_lock, flags);
1800                 if (list_empty(&lu->cmd_orb_inuse))
1801                         lu->last_orb = NULL;
1802                 spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
1803
1804         } else {
1805                 /* It's probably status after a management request. */
1806                 if ((sb->ORB_offset_lo == lu->reconnect_orb_dma) ||
1807                     (sb->ORB_offset_lo == lu->login_orb_dma) ||
1808                     (sb->ORB_offset_lo == lu->query_logins_orb_dma) ||
1809                     (sb->ORB_offset_lo == lu->logout_orb_dma)) {
1810                         lu->access_complete = 1;
1811                         wake_up_interruptible(&sbp2_access_wq);
1812                 }
1813         }
1814
1815         if (SCpnt)
1816                 sbp2scsi_complete_command(lu, scsi_status, SCpnt,
1817                                           cmd->Current_done);
1818         return RCODE_COMPLETE;
1819 }
1820
1821 /**************************************
1822  * SCSI interface related section
1823  **************************************/
1824
1825 static int sbp2scsi_queuecommand(struct scsi_cmnd *SCpnt,
1826                                  void (*done)(struct scsi_cmnd *))
1827 {
1828         struct sbp2_lu *lu = (struct sbp2_lu *)SCpnt->device->host->hostdata[0];
1829         struct sbp2_fwhost_info *hi;
1830         int result = DID_NO_CONNECT << 16;
1831
1832         if (unlikely(!sbp2util_node_is_available(lu)))
1833                 goto done;
1834
1835         hi = lu->hi;
1836
1837         if (unlikely(!hi)) {
1838                 SBP2_ERR("sbp2_fwhost_info is NULL - this is bad!");
1839                 goto done;
1840         }
1841
1842         /* Multiple units are currently represented to the SCSI core as separate
1843          * targets, not as one target with multiple LUs. Therefore return
1844          * selection time-out to any IO directed at non-zero LUNs. */
1845         if (unlikely(SCpnt->device->lun))
1846                 goto done;
1847
1848         if (unlikely(!hpsb_node_entry_valid(lu->ne))) {
1849                 SBP2_ERR("Bus reset in progress - rejecting command");
1850                 result = DID_BUS_BUSY << 16;
1851                 goto done;
1852         }
1853
1854         /* Bidirectional commands are not yet implemented,
1855          * and unknown transfer direction not handled. */
1856         if (unlikely(SCpnt->sc_data_direction == DMA_BIDIRECTIONAL)) {
1857                 SBP2_ERR("Cannot handle DMA_BIDIRECTIONAL - rejecting command");
1858                 result = DID_ERROR << 16;
1859                 goto done;
1860         }
1861
1862         if (sbp2_send_command(lu, SCpnt, done)) {
1863                 SBP2_ERR("Error sending SCSI command");
1864                 sbp2scsi_complete_command(lu,
1865                                           SBP2_SCSI_STATUS_SELECTION_TIMEOUT,
1866                                           SCpnt, done);
1867         }
1868         return 0;
1869
1870 done:
1871         SCpnt->result = result;
1872         done(SCpnt);
1873         return 0;
1874 }
1875
1876 static void sbp2scsi_complete_all_commands(struct sbp2_lu *lu, u32 status)
1877 {
1878         struct sbp2_fwhost_info *hi = lu->hi;
1879         struct list_head *lh;
1880         struct sbp2_command_info *cmd;
1881         unsigned long flags;
1882
1883         spin_lock_irqsave(&lu->cmd_orb_lock, flags);
1884         while (!list_empty(&lu->cmd_orb_inuse)) {
1885                 lh = lu->cmd_orb_inuse.next;
1886                 cmd = list_entry(lh, struct sbp2_command_info, list);
1887                 dma_sync_single_for_cpu(hi->host->device.parent,
1888                                         cmd->command_orb_dma,
1889                                         sizeof(struct sbp2_command_orb),
1890                                         DMA_TO_DEVICE);
1891                 dma_sync_single_for_cpu(hi->host->device.parent, cmd->sge_dma,
1892                                         sizeof(cmd->scatter_gather_element),
1893                                         DMA_TO_DEVICE);
1894                 sbp2util_mark_command_completed(lu, cmd);
1895                 if (cmd->Current_SCpnt) {
1896                         cmd->Current_SCpnt->result = status << 16;
1897                         cmd->Current_done(cmd->Current_SCpnt);
1898                 }
1899         }
1900         spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
1901
1902         return;
1903 }
1904
1905 /*
1906  * Complete a regular SCSI command. Can be called in atomic context.
1907  */
1908 static void sbp2scsi_complete_command(struct sbp2_lu *lu, u32 scsi_status,
1909                                       struct scsi_cmnd *SCpnt,
1910                                       void (*done)(struct scsi_cmnd *))
1911 {
1912         if (!SCpnt) {
1913                 SBP2_ERR("SCpnt is NULL");
1914                 return;
1915         }
1916
1917         switch (scsi_status) {
1918         case SBP2_SCSI_STATUS_GOOD:
1919                 SCpnt->result = DID_OK << 16;
1920                 break;
1921
1922         case SBP2_SCSI_STATUS_BUSY:
1923                 SBP2_ERR("SBP2_SCSI_STATUS_BUSY");
1924                 SCpnt->result = DID_BUS_BUSY << 16;
1925                 break;
1926
1927         case SBP2_SCSI_STATUS_CHECK_CONDITION:
1928                 SCpnt->result = CHECK_CONDITION << 1 | DID_OK << 16;
1929                 break;
1930
1931         case SBP2_SCSI_STATUS_SELECTION_TIMEOUT:
1932                 SBP2_ERR("SBP2_SCSI_STATUS_SELECTION_TIMEOUT");
1933                 SCpnt->result = DID_NO_CONNECT << 16;
1934                 scsi_print_command(SCpnt);
1935                 break;
1936
1937         case SBP2_SCSI_STATUS_CONDITION_MET:
1938         case SBP2_SCSI_STATUS_RESERVATION_CONFLICT:
1939         case SBP2_SCSI_STATUS_COMMAND_TERMINATED:
1940                 SBP2_ERR("Bad SCSI status = %x", scsi_status);
1941                 SCpnt->result = DID_ERROR << 16;
1942                 scsi_print_command(SCpnt);
1943                 break;
1944
1945         default:
1946                 SBP2_ERR("Unsupported SCSI status = %x", scsi_status);
1947                 SCpnt->result = DID_ERROR << 16;
1948         }
1949
1950         /* If a bus reset is in progress and there was an error, complete
1951          * the command as busy so that it will get retried. */
1952         if (!hpsb_node_entry_valid(lu->ne)
1953             && (scsi_status != SBP2_SCSI_STATUS_GOOD)) {
1954                 SBP2_ERR("Completing command with busy (bus reset)");
1955                 SCpnt->result = DID_BUS_BUSY << 16;
1956         }
1957
1958         /* Tell the SCSI stack that we're done with this command. */
1959         done(SCpnt);
1960 }
1961
1962 static int sbp2scsi_slave_alloc(struct scsi_device *sdev)
1963 {
1964         struct sbp2_lu *lu = (struct sbp2_lu *)sdev->host->hostdata[0];
1965
1966         lu->sdev = sdev;
1967         sdev->allow_restart = 1;
1968
1969         /*
1970          * Update the dma alignment (minimum alignment requirements for
1971          * start and end of DMA transfers) to be a sector
1972          */
1973         blk_queue_update_dma_alignment(sdev->request_queue, 511);
1974
1975         if (lu->workarounds & SBP2_WORKAROUND_INQUIRY_36)
1976                 sdev->inquiry_len = 36;
1977         return 0;
1978 }
1979
1980 static int sbp2scsi_slave_configure(struct scsi_device *sdev)
1981 {
1982         struct sbp2_lu *lu = (struct sbp2_lu *)sdev->host->hostdata[0];
1983
1984         sdev->use_10_for_rw = 1;
1985
1986         if (sdev->type == TYPE_ROM)
1987                 sdev->use_10_for_ms = 1;
1988         if (sdev->type == TYPE_DISK &&
1989             lu->workarounds & SBP2_WORKAROUND_MODE_SENSE_8)
1990                 sdev->skip_ms_page_8 = 1;
1991         if (lu->workarounds & SBP2_WORKAROUND_FIX_CAPACITY)
1992                 sdev->fix_capacity = 1;
1993         if (lu->workarounds & SBP2_WORKAROUND_128K_MAX_TRANS)
1994                 blk_queue_max_sectors(sdev->request_queue, 128 * 1024 / 512);
1995         return 0;
1996 }
1997
1998 static void sbp2scsi_slave_destroy(struct scsi_device *sdev)
1999 {
2000         ((struct sbp2_lu *)sdev->host->hostdata[0])->sdev = NULL;
2001         return;
2002 }
2003
2004 /*
2005  * Called by scsi stack when something has really gone wrong.
2006  * Usually called when a command has timed-out for some reason.
2007  */
2008 static int sbp2scsi_abort(struct scsi_cmnd *SCpnt)
2009 {
2010         struct sbp2_lu *lu = (struct sbp2_lu *)SCpnt->device->host->hostdata[0];
2011         struct sbp2_fwhost_info *hi = lu->hi;
2012         struct sbp2_command_info *cmd;
2013         unsigned long flags;
2014
2015         SBP2_INFO("aborting sbp2 command");
2016         scsi_print_command(SCpnt);
2017
2018         if (sbp2util_node_is_available(lu)) {
2019                 sbp2_agent_reset(lu, 1);
2020
2021                 /* Return a matching command structure to the free pool. */
2022                 spin_lock_irqsave(&lu->cmd_orb_lock, flags);
2023                 cmd = sbp2util_find_command_for_SCpnt(lu, SCpnt);
2024                 if (cmd) {
2025                         dma_sync_single_for_cpu(hi->host->device.parent,
2026                                         cmd->command_orb_dma,
2027                                         sizeof(struct sbp2_command_orb),
2028                                         DMA_TO_DEVICE);
2029                         dma_sync_single_for_cpu(hi->host->device.parent,
2030                                         cmd->sge_dma,
2031                                         sizeof(cmd->scatter_gather_element),
2032                                         DMA_TO_DEVICE);
2033                         sbp2util_mark_command_completed(lu, cmd);
2034                         if (cmd->Current_SCpnt) {
2035                                 cmd->Current_SCpnt->result = DID_ABORT << 16;
2036                                 cmd->Current_done(cmd->Current_SCpnt);
2037                         }
2038                 }
2039                 spin_unlock_irqrestore(&lu->cmd_orb_lock, flags);
2040
2041                 sbp2scsi_complete_all_commands(lu, DID_BUS_BUSY);
2042         }
2043
2044         return SUCCESS;
2045 }
2046
2047 /*
2048  * Called by scsi stack when something has really gone wrong.
2049  */
2050 static int sbp2scsi_reset(struct scsi_cmnd *SCpnt)
2051 {
2052         struct sbp2_lu *lu = (struct sbp2_lu *)SCpnt->device->host->hostdata[0];
2053
2054         SBP2_INFO("reset requested");
2055
2056         if (sbp2util_node_is_available(lu)) {
2057                 SBP2_INFO("generating sbp2 fetch agent reset");
2058                 sbp2_agent_reset(lu, 1);
2059         }
2060
2061         return SUCCESS;
2062 }
2063
2064 static ssize_t sbp2_sysfs_ieee1394_id_show(struct device *dev,
2065                                            struct device_attribute *attr,
2066                                            char *buf)
2067 {
2068         struct scsi_device *sdev;
2069         struct sbp2_lu *lu;
2070
2071         if (!(sdev = to_scsi_device(dev)))
2072                 return 0;
2073
2074         if (!(lu = (struct sbp2_lu *)sdev->host->hostdata[0]))
2075                 return 0;
2076
2077         if (sbp2_long_sysfs_ieee1394_id)
2078                 return sprintf(buf, "%016Lx:%06x:%04x\n",
2079                                 (unsigned long long)lu->ne->guid,
2080                                 lu->ud->directory_id, ORB_SET_LUN(lu->lun));
2081         else
2082                 return sprintf(buf, "%016Lx:%d:%d\n",
2083                                 (unsigned long long)lu->ne->guid,
2084                                 lu->ud->id, ORB_SET_LUN(lu->lun));
2085 }
2086
2087 MODULE_AUTHOR("Ben Collins <bcollins@debian.org>");
2088 MODULE_DESCRIPTION("IEEE-1394 SBP-2 protocol driver");
2089 MODULE_SUPPORTED_DEVICE(SBP2_DEVICE_NAME);
2090 MODULE_LICENSE("GPL");
2091
2092 static int sbp2_module_init(void)
2093 {
2094         int ret;
2095
2096         if (sbp2_serialize_io) {
2097                 sbp2_shost_template.can_queue = 1;
2098                 sbp2_shost_template.cmd_per_lun = 1;
2099         }
2100
2101         sbp2_shost_template.max_sectors = sbp2_max_sectors;
2102
2103         hpsb_register_highlevel(&sbp2_highlevel);
2104         ret = hpsb_register_protocol(&sbp2_driver);
2105         if (ret) {
2106                 SBP2_ERR("Failed to register protocol");
2107                 hpsb_unregister_highlevel(&sbp2_highlevel);
2108                 return ret;
2109         }
2110         return 0;
2111 }
2112
2113 static void __exit sbp2_module_exit(void)
2114 {
2115         hpsb_unregister_protocol(&sbp2_driver);
2116         hpsb_unregister_highlevel(&sbp2_highlevel);
2117 }
2118
2119 module_init(sbp2_module_init);
2120 module_exit(sbp2_module_exit);