?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Linux 4.16.11
[linux/fpc-iii.git] / drivers / scsi / lpfc / lpfc_bsg.c
blobd89816222b23058ab4b74ccbb4b8602a49a04a84
1 /*******************************************************************
2 * This file is part of the Emulex Linux Device Driver for *
3 * Fibre Channel Host Bus Adapters. *
4 * Copyright (C) 2017 Broadcom. All Rights Reserved. The term *
5 * “Broadcom” refers to Broadcom Limited and/or its subsidiaries. *
6 * Copyright (C) 2009-2015 Emulex. All rights reserved. *
7 * EMULEX and SLI are trademarks of Emulex. *
8 * www.broadcom.com *
9 * *
10 * This program is free software; you can redistribute it and/or *
11 * modify it under the terms of version 2 of the GNU General *
12 * Public License as published by the Free Software Foundation. *
13 * This program is distributed in the hope that it will be useful. *
14 * ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND *
15 * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, *
16 * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE *
17 * DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD *
18 * TO BE LEGALLY INVALID. See the GNU General Public License for *
19 * more details, a copy of which can be found in the file COPYING *
20 * included with this package. *
21 *******************************************************************/
22
23 #include <linux/interrupt.h>
24 #include <linux/mempool.h>
25 #include <linux/pci.h>
26 #include <linux/slab.h>
27 #include <linux/delay.h>
28 #include <linux/list.h>
29 #include <linux/bsg-lib.h>
30
31 #include <scsi/scsi.h>
32 #include <scsi/scsi_host.h>
33 #include <scsi/scsi_transport_fc.h>
34 #include <scsi/scsi_bsg_fc.h>
35 #include <scsi/fc/fc_fs.h>
36
37 #include "lpfc_hw4.h"
38 #include "lpfc_hw.h"
39 #include "lpfc_sli.h"
40 #include "lpfc_sli4.h"
41 #include "lpfc_nl.h"
42 #include "lpfc_bsg.h"
43 #include "lpfc_disc.h"
44 #include "lpfc_scsi.h"
45 #include "lpfc.h"
46 #include "lpfc_logmsg.h"
47 #include "lpfc_crtn.h"
48 #include "lpfc_debugfs.h"
49 #include "lpfc_vport.h"
50 #include "lpfc_version.h"
51
52 struct lpfc_bsg_event {
53 struct list_head node;
54 struct kref kref;
55 wait_queue_head_t wq;
56
57 /* Event type and waiter identifiers */
58 uint32_t type_mask;
59 uint32_t req_id;
60 uint32_t reg_id;
61
62 /* next two flags are here for the auto-delete logic */
63 unsigned long wait_time_stamp;
64 int waiting;
65
66 /* seen and not seen events */
67 struct list_head events_to_get;
68 struct list_head events_to_see;
69
70 /* driver data associated with the job */
71 void *dd_data;
72 };
73
74 struct lpfc_bsg_iocb {
75 struct lpfc_iocbq *cmdiocbq;
76 struct lpfc_dmabuf *rmp;
77 struct lpfc_nodelist *ndlp;
78 };
79
80 struct lpfc_bsg_mbox {
81 LPFC_MBOXQ_t *pmboxq;
82 MAILBOX_t *mb;
83 struct lpfc_dmabuf *dmabuffers; /* for BIU diags */
84 uint8_t *ext; /* extended mailbox data */
85 uint32_t mbOffset; /* from app */
86 uint32_t inExtWLen; /* from app */
87 uint32_t outExtWLen; /* from app */
88 };
89
90 #define MENLO_DID 0x0000FC0E
91
92 struct lpfc_bsg_menlo {
93 struct lpfc_iocbq *cmdiocbq;
94 struct lpfc_dmabuf *rmp;
95 };
96
97 #define TYPE_EVT 1
98 #define TYPE_IOCB 2
99 #define TYPE_MBOX 3
100 #define TYPE_MENLO 4
101 struct bsg_job_data {
102 uint32_t type;
103 struct bsg_job *set_job; /* job waiting for this iocb to finish */
104 union {
105 struct lpfc_bsg_event *evt;
106 struct lpfc_bsg_iocb iocb;
107 struct lpfc_bsg_mbox mbox;
108 struct lpfc_bsg_menlo menlo;
109 } context_un;
110 };
111
112 struct event_data {
113 struct list_head node;
114 uint32_t type;
115 uint32_t immed_dat;
116 void *data;
117 uint32_t len;
118 };
119
120 #define BUF_SZ_4K 4096
121 #define SLI_CT_ELX_LOOPBACK 0x10
122
123 enum ELX_LOOPBACK_CMD {
124 ELX_LOOPBACK_XRI_SETUP,
125 ELX_LOOPBACK_DATA,
126 };
127
128 #define ELX_LOOPBACK_HEADER_SZ \
129 (size_t)(&((struct lpfc_sli_ct_request *)NULL)->un)
130
131 struct lpfc_dmabufext {
132 struct lpfc_dmabuf dma;
133 uint32_t size;
134 uint32_t flag;
135 };
136
137 static void
138 lpfc_free_bsg_buffers(struct lpfc_hba *phba, struct lpfc_dmabuf *mlist)
139 {
140 struct lpfc_dmabuf *mlast, *next_mlast;
141
142 if (mlist) {
143 list_for_each_entry_safe(mlast, next_mlast, &mlist->list,
144 list) {
145 lpfc_mbuf_free(phba, mlast->virt, mlast->phys);
146 list_del(&mlast->list);
147 kfree(mlast);
148 }
149 lpfc_mbuf_free(phba, mlist->virt, mlist->phys);
150 kfree(mlist);
151 }
152 return;
153 }
154
155 static struct lpfc_dmabuf *
156 lpfc_alloc_bsg_buffers(struct lpfc_hba *phba, unsigned int size,
157 int outbound_buffers, struct ulp_bde64 *bpl,
158 int *bpl_entries)
159 {
160 struct lpfc_dmabuf *mlist = NULL;
161 struct lpfc_dmabuf *mp;
162 unsigned int bytes_left = size;
163
164 /* Verify we can support the size specified */
165 if (!size || (size > (*bpl_entries * LPFC_BPL_SIZE)))
166 return NULL;
167
168 /* Determine the number of dma buffers to allocate */
169 *bpl_entries = (size % LPFC_BPL_SIZE ? size/LPFC_BPL_SIZE + 1 :
170 size/LPFC_BPL_SIZE);
171
172 /* Allocate dma buffer and place in BPL passed */
173 while (bytes_left) {
174 /* Allocate dma buffer */
175 mp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
176 if (!mp) {
177 if (mlist)
178 lpfc_free_bsg_buffers(phba, mlist);
179 return NULL;
180 }
181
182 INIT_LIST_HEAD(&mp->list);
183 mp->virt = lpfc_mbuf_alloc(phba, MEM_PRI, &(mp->phys));
184
185 if (!mp->virt) {
186 kfree(mp);
187 if (mlist)
188 lpfc_free_bsg_buffers(phba, mlist);
189 return NULL;
190 }
191
192 /* Queue it to a linked list */
193 if (!mlist)
194 mlist = mp;
195 else
196 list_add_tail(&mp->list, &mlist->list);
197
198 /* Add buffer to buffer pointer list */
199 if (outbound_buffers)
200 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
201 else
202 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
203 bpl->addrLow = le32_to_cpu(putPaddrLow(mp->phys));
204 bpl->addrHigh = le32_to_cpu(putPaddrHigh(mp->phys));
205 bpl->tus.f.bdeSize = (uint16_t)
206 (bytes_left >= LPFC_BPL_SIZE ? LPFC_BPL_SIZE :
207 bytes_left);
208 bytes_left -= bpl->tus.f.bdeSize;
209 bpl->tus.w = le32_to_cpu(bpl->tus.w);
210 bpl++;
211 }
212 return mlist;
213 }
214
215 static unsigned int
216 lpfc_bsg_copy_data(struct lpfc_dmabuf *dma_buffers,
217 struct bsg_buffer *bsg_buffers,
218 unsigned int bytes_to_transfer, int to_buffers)
219 {
220
221 struct lpfc_dmabuf *mp;
222 unsigned int transfer_bytes, bytes_copied = 0;
223 unsigned int sg_offset, dma_offset;
224 unsigned char *dma_address, *sg_address;
225 LIST_HEAD(temp_list);
226 struct sg_mapping_iter miter;
227 unsigned long flags;
228 unsigned int sg_flags = SG_MITER_ATOMIC;
229 bool sg_valid;
230
231 list_splice_init(&dma_buffers->list, &temp_list);
232 list_add(&dma_buffers->list, &temp_list);
233 sg_offset = 0;
234 if (to_buffers)
235 sg_flags |= SG_MITER_FROM_SG;
236 else
237 sg_flags |= SG_MITER_TO_SG;
238 sg_miter_start(&miter, bsg_buffers->sg_list, bsg_buffers->sg_cnt,
239 sg_flags);
240 local_irq_save(flags);
241 sg_valid = sg_miter_next(&miter);
242 list_for_each_entry(mp, &temp_list, list) {
243 dma_offset = 0;
244 while (bytes_to_transfer && sg_valid &&
245 (dma_offset < LPFC_BPL_SIZE)) {
246 dma_address = mp->virt + dma_offset;
247 if (sg_offset) {
248 /* Continue previous partial transfer of sg */
249 sg_address = miter.addr + sg_offset;
250 transfer_bytes = miter.length - sg_offset;
251 } else {
252 sg_address = miter.addr;
253 transfer_bytes = miter.length;
254 }
255 if (bytes_to_transfer < transfer_bytes)
256 transfer_bytes = bytes_to_transfer;
257 if (transfer_bytes > (LPFC_BPL_SIZE - dma_offset))
258 transfer_bytes = LPFC_BPL_SIZE - dma_offset;
259 if (to_buffers)
260 memcpy(dma_address, sg_address, transfer_bytes);
261 else
262 memcpy(sg_address, dma_address, transfer_bytes);
263 dma_offset += transfer_bytes;
264 sg_offset += transfer_bytes;
265 bytes_to_transfer -= transfer_bytes;
266 bytes_copied += transfer_bytes;
267 if (sg_offset >= miter.length) {
268 sg_offset = 0;
269 sg_valid = sg_miter_next(&miter);
270 }
271 }
272 }
273 sg_miter_stop(&miter);
274 local_irq_restore(flags);
275 list_del_init(&dma_buffers->list);
276 list_splice(&temp_list, &dma_buffers->list);
277 return bytes_copied;
278 }
279
280 /**
281 * lpfc_bsg_send_mgmt_cmd_cmp - lpfc_bsg_send_mgmt_cmd's completion handler
282 * @phba: Pointer to HBA context object.
283 * @cmdiocbq: Pointer to command iocb.
284 * @rspiocbq: Pointer to response iocb.
285 *
286 * This function is the completion handler for iocbs issued using
287 * lpfc_bsg_send_mgmt_cmd function. This function is called by the
288 * ring event handler function without any lock held. This function
289 * can be called from both worker thread context and interrupt
290 * context. This function also can be called from another thread which
291 * cleans up the SLI layer objects.
292 * This function copies the contents of the response iocb to the
293 * response iocb memory object provided by the caller of
294 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
295 * sleeps for the iocb completion.
296 **/
297 static void
298 lpfc_bsg_send_mgmt_cmd_cmp(struct lpfc_hba *phba,
299 struct lpfc_iocbq *cmdiocbq,
300 struct lpfc_iocbq *rspiocbq)
301 {
302 struct bsg_job_data *dd_data;
303 struct bsg_job *job;
304 struct fc_bsg_reply *bsg_reply;
305 IOCB_t *rsp;
306 struct lpfc_dmabuf *bmp, *cmp, *rmp;
307 struct lpfc_nodelist *ndlp;
308 struct lpfc_bsg_iocb *iocb;
309 unsigned long flags;
310 unsigned int rsp_size;
311 int rc = 0;
312
313 dd_data = cmdiocbq->context1;
314
315 /* Determine if job has been aborted */
316 spin_lock_irqsave(&phba->ct_ev_lock, flags);
317 job = dd_data->set_job;
318 if (job) {
319 bsg_reply = job->reply;
320 /* Prevent timeout handling from trying to abort job */
321 job->dd_data = NULL;
322 }
323 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
324
325 /* Close the timeout handler abort window */
326 spin_lock_irqsave(&phba->hbalock, flags);
327 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
328 spin_unlock_irqrestore(&phba->hbalock, flags);
329
330 iocb = &dd_data->context_un.iocb;
331 ndlp = iocb->ndlp;
332 rmp = iocb->rmp;
333 cmp = cmdiocbq->context2;
334 bmp = cmdiocbq->context3;
335 rsp = &rspiocbq->iocb;
336
337 /* Copy the completed data or set the error status */
338
339 if (job) {
340 if (rsp->ulpStatus) {
341 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
342 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
343 case IOERR_SEQUENCE_TIMEOUT:
344 rc = -ETIMEDOUT;
345 break;
346 case IOERR_INVALID_RPI:
347 rc = -EFAULT;
348 break;
349 default:
350 rc = -EACCES;
351 break;
352 }
353 } else {
354 rc = -EACCES;
355 }
356 } else {
357 rsp_size = rsp->un.genreq64.bdl.bdeSize;
358 bsg_reply->reply_payload_rcv_len =
359 lpfc_bsg_copy_data(rmp, &job->reply_payload,
360 rsp_size, 0);
361 }
362 }
363
364 lpfc_free_bsg_buffers(phba, cmp);
365 lpfc_free_bsg_buffers(phba, rmp);
366 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
367 kfree(bmp);
368 lpfc_sli_release_iocbq(phba, cmdiocbq);
369 lpfc_nlp_put(ndlp);
370 kfree(dd_data);
371
372 /* Complete the job if the job is still active */
373
374 if (job) {
375 bsg_reply->result = rc;
376 bsg_job_done(job, bsg_reply->result,
377 bsg_reply->reply_payload_rcv_len);
378 }
379 return;
380 }
381
382 /**
383 * lpfc_bsg_send_mgmt_cmd - send a CT command from a bsg request
384 * @job: fc_bsg_job to handle
385 **/
386 static int
387 lpfc_bsg_send_mgmt_cmd(struct bsg_job *job)
388 {
389 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
390 struct lpfc_hba *phba = vport->phba;
391 struct lpfc_rport_data *rdata = fc_bsg_to_rport(job)->dd_data;
392 struct lpfc_nodelist *ndlp = rdata->pnode;
393 struct fc_bsg_reply *bsg_reply = job->reply;
394 struct ulp_bde64 *bpl = NULL;
395 uint32_t timeout;
396 struct lpfc_iocbq *cmdiocbq = NULL;
397 IOCB_t *cmd;
398 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL, *rmp = NULL;
399 int request_nseg;
400 int reply_nseg;
401 struct bsg_job_data *dd_data;
402 unsigned long flags;
403 uint32_t creg_val;
404 int rc = 0;
405 int iocb_stat;
406
407 /* in case no data is transferred */
408 bsg_reply->reply_payload_rcv_len = 0;
409
410 /* allocate our bsg tracking structure */
411 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
412 if (!dd_data) {
413 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
414 "2733 Failed allocation of dd_data\n");
415 rc = -ENOMEM;
416 goto no_dd_data;
417 }
418
419 if (!lpfc_nlp_get(ndlp)) {
420 rc = -ENODEV;
421 goto no_ndlp;
422 }
423
424 if (ndlp->nlp_flag & NLP_ELS_SND_MASK) {
425 rc = -ENODEV;
426 goto free_ndlp;
427 }
428
429 cmdiocbq = lpfc_sli_get_iocbq(phba);
430 if (!cmdiocbq) {
431 rc = -ENOMEM;
432 goto free_ndlp;
433 }
434
435 cmd = &cmdiocbq->iocb;
436
437 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
438 if (!bmp) {
439 rc = -ENOMEM;
440 goto free_cmdiocbq;
441 }
442 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
443 if (!bmp->virt) {
444 rc = -ENOMEM;
445 goto free_bmp;
446 }
447
448 INIT_LIST_HEAD(&bmp->list);
449
450 bpl = (struct ulp_bde64 *) bmp->virt;
451 request_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64);
452 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
453 1, bpl, &request_nseg);
454 if (!cmp) {
455 rc = -ENOMEM;
456 goto free_bmp;
457 }
458 lpfc_bsg_copy_data(cmp, &job->request_payload,
459 job->request_payload.payload_len, 1);
460
461 bpl += request_nseg;
462 reply_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64) - request_nseg;
463 rmp = lpfc_alloc_bsg_buffers(phba, job->reply_payload.payload_len, 0,
464 bpl, &reply_nseg);
465 if (!rmp) {
466 rc = -ENOMEM;
467 goto free_cmp;
468 }
469
470 cmd->un.genreq64.bdl.ulpIoTag32 = 0;
471 cmd->un.genreq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
472 cmd->un.genreq64.bdl.addrLow = putPaddrLow(bmp->phys);
473 cmd->un.genreq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
474 cmd->un.genreq64.bdl.bdeSize =
475 (request_nseg + reply_nseg) * sizeof(struct ulp_bde64);
476 cmd->ulpCommand = CMD_GEN_REQUEST64_CR;
477 cmd->un.genreq64.w5.hcsw.Fctl = (SI | LA);
478 cmd->un.genreq64.w5.hcsw.Dfctl = 0;
479 cmd->un.genreq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
480 cmd->un.genreq64.w5.hcsw.Type = FC_TYPE_CT;
481 cmd->ulpBdeCount = 1;
482 cmd->ulpLe = 1;
483 cmd->ulpClass = CLASS3;
484 cmd->ulpContext = ndlp->nlp_rpi;
485 if (phba->sli_rev == LPFC_SLI_REV4)
486 cmd->ulpContext = phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
487 cmd->ulpOwner = OWN_CHIP;
488 cmdiocbq->vport = phba->pport;
489 cmdiocbq->context3 = bmp;
490 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
491 timeout = phba->fc_ratov * 2;
492 cmd->ulpTimeout = timeout;
493
494 cmdiocbq->iocb_cmpl = lpfc_bsg_send_mgmt_cmd_cmp;
495 cmdiocbq->context1 = dd_data;
496 cmdiocbq->context2 = cmp;
497 cmdiocbq->context3 = bmp;
498 cmdiocbq->context_un.ndlp = ndlp;
499 dd_data->type = TYPE_IOCB;
500 dd_data->set_job = job;
501 dd_data->context_un.iocb.cmdiocbq = cmdiocbq;
502 dd_data->context_un.iocb.ndlp = ndlp;
503 dd_data->context_un.iocb.rmp = rmp;
504 job->dd_data = dd_data;
505
506 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
507 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
508 rc = -EIO ;
509 goto free_rmp;
510 }
511 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
512 writel(creg_val, phba->HCregaddr);
513 readl(phba->HCregaddr); /* flush */
514 }
515
516 iocb_stat = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq, 0);
517
518 if (iocb_stat == IOCB_SUCCESS) {
519 spin_lock_irqsave(&phba->hbalock, flags);
520 /* make sure the I/O had not been completed yet */
521 if (cmdiocbq->iocb_flag & LPFC_IO_LIBDFC) {
522 /* open up abort window to timeout handler */
523 cmdiocbq->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
524 }
525 spin_unlock_irqrestore(&phba->hbalock, flags);
526 return 0; /* done for now */
527 } else if (iocb_stat == IOCB_BUSY) {
528 rc = -EAGAIN;
529 } else {
530 rc = -EIO;
531 }
532
533 /* iocb failed so cleanup */
534 job->dd_data = NULL;
535
536 free_rmp:
537 lpfc_free_bsg_buffers(phba, rmp);
538 free_cmp:
539 lpfc_free_bsg_buffers(phba, cmp);
540 free_bmp:
541 if (bmp->virt)
542 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
543 kfree(bmp);
544 free_cmdiocbq:
545 lpfc_sli_release_iocbq(phba, cmdiocbq);
546 free_ndlp:
547 lpfc_nlp_put(ndlp);
548 no_ndlp:
549 kfree(dd_data);
550 no_dd_data:
551 /* make error code available to userspace */
552 bsg_reply->result = rc;
553 job->dd_data = NULL;
554 return rc;
555 }
556
557 /**
558 * lpfc_bsg_rport_els_cmp - lpfc_bsg_rport_els's completion handler
559 * @phba: Pointer to HBA context object.
560 * @cmdiocbq: Pointer to command iocb.
561 * @rspiocbq: Pointer to response iocb.
562 *
563 * This function is the completion handler for iocbs issued using
564 * lpfc_bsg_rport_els_cmp function. This function is called by the
565 * ring event handler function without any lock held. This function
566 * can be called from both worker thread context and interrupt
567 * context. This function also can be called from other thread which
568 * cleans up the SLI layer objects.
569 * This function copies the contents of the response iocb to the
570 * response iocb memory object provided by the caller of
571 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
572 * sleeps for the iocb completion.
573 **/
574 static void
575 lpfc_bsg_rport_els_cmp(struct lpfc_hba *phba,
576 struct lpfc_iocbq *cmdiocbq,
577 struct lpfc_iocbq *rspiocbq)
578 {
579 struct bsg_job_data *dd_data;
580 struct bsg_job *job;
581 struct fc_bsg_reply *bsg_reply;
582 IOCB_t *rsp;
583 struct lpfc_nodelist *ndlp;
584 struct lpfc_dmabuf *pcmd = NULL, *prsp = NULL;
585 struct fc_bsg_ctels_reply *els_reply;
586 uint8_t *rjt_data;
587 unsigned long flags;
588 unsigned int rsp_size;
589 int rc = 0;
590
591 dd_data = cmdiocbq->context1;
592 ndlp = dd_data->context_un.iocb.ndlp;
593 cmdiocbq->context1 = ndlp;
594
595 /* Determine if job has been aborted */
596 spin_lock_irqsave(&phba->ct_ev_lock, flags);
597 job = dd_data->set_job;
598 if (job) {
599 bsg_reply = job->reply;
600 /* Prevent timeout handling from trying to abort job */
601 job->dd_data = NULL;
602 }
603 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
604
605 /* Close the timeout handler abort window */
606 spin_lock_irqsave(&phba->hbalock, flags);
607 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
608 spin_unlock_irqrestore(&phba->hbalock, flags);
609
610 rsp = &rspiocbq->iocb;
611 pcmd = (struct lpfc_dmabuf *)cmdiocbq->context2;
612 prsp = (struct lpfc_dmabuf *)pcmd->list.next;
613
614 /* Copy the completed job data or determine the job status if job is
615 * still active
616 */
617
618 if (job) {
619 if (rsp->ulpStatus == IOSTAT_SUCCESS) {
620 rsp_size = rsp->un.elsreq64.bdl.bdeSize;
621 bsg_reply->reply_payload_rcv_len =
622 sg_copy_from_buffer(job->reply_payload.sg_list,
623 job->reply_payload.sg_cnt,
624 prsp->virt,
625 rsp_size);
626 } else if (rsp->ulpStatus == IOSTAT_LS_RJT) {
627 bsg_reply->reply_payload_rcv_len =
628 sizeof(struct fc_bsg_ctels_reply);
629 /* LS_RJT data returned in word 4 */
630 rjt_data = (uint8_t *)&rsp->un.ulpWord[4];
631 els_reply = &bsg_reply->reply_data.ctels_reply;
632 els_reply->status = FC_CTELS_STATUS_REJECT;
633 els_reply->rjt_data.action = rjt_data[3];
634 els_reply->rjt_data.reason_code = rjt_data[2];
635 els_reply->rjt_data.reason_explanation = rjt_data[1];
636 els_reply->rjt_data.vendor_unique = rjt_data[0];
637 } else {
638 rc = -EIO;
639 }
640 }
641
642 lpfc_nlp_put(ndlp);
643 lpfc_els_free_iocb(phba, cmdiocbq);
644 kfree(dd_data);
645
646 /* Complete the job if the job is still active */
647
648 if (job) {
649 bsg_reply->result = rc;
650 bsg_job_done(job, bsg_reply->result,
651 bsg_reply->reply_payload_rcv_len);
652 }
653 return;
654 }
655
656 /**
657 * lpfc_bsg_rport_els - send an ELS command from a bsg request
658 * @job: fc_bsg_job to handle
659 **/
660 static int
661 lpfc_bsg_rport_els(struct bsg_job *job)
662 {
663 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
664 struct lpfc_hba *phba = vport->phba;
665 struct lpfc_rport_data *rdata = fc_bsg_to_rport(job)->dd_data;
666 struct lpfc_nodelist *ndlp = rdata->pnode;
667 struct fc_bsg_request *bsg_request = job->request;
668 struct fc_bsg_reply *bsg_reply = job->reply;
669 uint32_t elscmd;
670 uint32_t cmdsize;
671 struct lpfc_iocbq *cmdiocbq;
672 uint16_t rpi = 0;
673 struct bsg_job_data *dd_data;
674 unsigned long flags;
675 uint32_t creg_val;
676 int rc = 0;
677
678 /* in case no data is transferred */
679 bsg_reply->reply_payload_rcv_len = 0;
680
681 /* verify the els command is not greater than the
682 * maximum ELS transfer size.
683 */
684
685 if (job->request_payload.payload_len > FCELSSIZE) {
686 rc = -EINVAL;
687 goto no_dd_data;
688 }
689
690 /* allocate our bsg tracking structure */
691 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
692 if (!dd_data) {
693 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
694 "2735 Failed allocation of dd_data\n");
695 rc = -ENOMEM;
696 goto no_dd_data;
697 }
698
699 elscmd = bsg_request->rqst_data.r_els.els_code;
700 cmdsize = job->request_payload.payload_len;
701
702 if (!lpfc_nlp_get(ndlp)) {
703 rc = -ENODEV;
704 goto free_dd_data;
705 }
706
707 /* We will use the allocated dma buffers by prep els iocb for command
708 * and response to ensure if the job times out and the request is freed,
709 * we won't be dma into memory that is no longer allocated to for the
710 * request.
711 */
712
713 cmdiocbq = lpfc_prep_els_iocb(vport, 1, cmdsize, 0, ndlp,
714 ndlp->nlp_DID, elscmd);
715 if (!cmdiocbq) {
716 rc = -EIO;
717 goto release_ndlp;
718 }
719
720 rpi = ndlp->nlp_rpi;
721
722 /* Transfer the request payload to allocated command dma buffer */
723
724 sg_copy_to_buffer(job->request_payload.sg_list,
725 job->request_payload.sg_cnt,
726 ((struct lpfc_dmabuf *)cmdiocbq->context2)->virt,
727 cmdsize);
728
729 if (phba->sli_rev == LPFC_SLI_REV4)
730 cmdiocbq->iocb.ulpContext = phba->sli4_hba.rpi_ids[rpi];
731 else
732 cmdiocbq->iocb.ulpContext = rpi;
733 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
734 cmdiocbq->context1 = dd_data;
735 cmdiocbq->context_un.ndlp = ndlp;
736 cmdiocbq->iocb_cmpl = lpfc_bsg_rport_els_cmp;
737 dd_data->type = TYPE_IOCB;
738 dd_data->set_job = job;
739 dd_data->context_un.iocb.cmdiocbq = cmdiocbq;
740 dd_data->context_un.iocb.ndlp = ndlp;
741 dd_data->context_un.iocb.rmp = NULL;
742 job->dd_data = dd_data;
743
744 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
745 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
746 rc = -EIO;
747 goto linkdown_err;
748 }
749 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
750 writel(creg_val, phba->HCregaddr);
751 readl(phba->HCregaddr); /* flush */
752 }
753
754 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq, 0);
755
756 if (rc == IOCB_SUCCESS) {
757 spin_lock_irqsave(&phba->hbalock, flags);
758 /* make sure the I/O had not been completed/released */
759 if (cmdiocbq->iocb_flag & LPFC_IO_LIBDFC) {
760 /* open up abort window to timeout handler */
761 cmdiocbq->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
762 }
763 spin_unlock_irqrestore(&phba->hbalock, flags);
764 return 0; /* done for now */
765 } else if (rc == IOCB_BUSY) {
766 rc = -EAGAIN;
767 } else {
768 rc = -EIO;
769 }
770
771 /* iocb failed so cleanup */
772 job->dd_data = NULL;
773
774 linkdown_err:
775 cmdiocbq->context1 = ndlp;
776 lpfc_els_free_iocb(phba, cmdiocbq);
777
778 release_ndlp:
779 lpfc_nlp_put(ndlp);
780
781 free_dd_data:
782 kfree(dd_data);
783
784 no_dd_data:
785 /* make error code available to userspace */
786 bsg_reply->result = rc;
787 job->dd_data = NULL;
788 return rc;
789 }
790
791 /**
792 * lpfc_bsg_event_free - frees an allocated event structure
793 * @kref: Pointer to a kref.
794 *
795 * Called from kref_put. Back cast the kref into an event structure address.
796 * Free any events to get, delete associated nodes, free any events to see,
797 * free any data then free the event itself.
798 **/
799 static void
800 lpfc_bsg_event_free(struct kref *kref)
801 {
802 struct lpfc_bsg_event *evt = container_of(kref, struct lpfc_bsg_event,
803 kref);
804 struct event_data *ed;
805
806 list_del(&evt->node);
807
808 while (!list_empty(&evt->events_to_get)) {
809 ed = list_entry(evt->events_to_get.next, typeof(*ed), node);
810 list_del(&ed->node);
811 kfree(ed->data);
812 kfree(ed);
813 }
814
815 while (!list_empty(&evt->events_to_see)) {
816 ed = list_entry(evt->events_to_see.next, typeof(*ed), node);
817 list_del(&ed->node);
818 kfree(ed->data);
819 kfree(ed);
820 }
821
822 kfree(evt->dd_data);
823 kfree(evt);
824 }
825
826 /**
827 * lpfc_bsg_event_ref - increments the kref for an event
828 * @evt: Pointer to an event structure.
829 **/
830 static inline void
831 lpfc_bsg_event_ref(struct lpfc_bsg_event *evt)
832 {
833 kref_get(&evt->kref);
834 }
835
836 /**
837 * lpfc_bsg_event_unref - Uses kref_put to free an event structure
838 * @evt: Pointer to an event structure.
839 **/
840 static inline void
841 lpfc_bsg_event_unref(struct lpfc_bsg_event *evt)
842 {
843 kref_put(&evt->kref, lpfc_bsg_event_free);
844 }
845
846 /**
847 * lpfc_bsg_event_new - allocate and initialize a event structure
848 * @ev_mask: Mask of events.
849 * @ev_reg_id: Event reg id.
850 * @ev_req_id: Event request id.
851 **/
852 static struct lpfc_bsg_event *
853 lpfc_bsg_event_new(uint32_t ev_mask, int ev_reg_id, uint32_t ev_req_id)
854 {
855 struct lpfc_bsg_event *evt = kzalloc(sizeof(*evt), GFP_KERNEL);
856
857 if (!evt)
858 return NULL;
859
860 INIT_LIST_HEAD(&evt->events_to_get);
861 INIT_LIST_HEAD(&evt->events_to_see);
862 evt->type_mask = ev_mask;
863 evt->req_id = ev_req_id;
864 evt->reg_id = ev_reg_id;
865 evt->wait_time_stamp = jiffies;
866 evt->dd_data = NULL;
867 init_waitqueue_head(&evt->wq);
868 kref_init(&evt->kref);
869 return evt;
870 }
871
872 /**
873 * diag_cmd_data_free - Frees an lpfc dma buffer extension
874 * @phba: Pointer to HBA context object.
875 * @mlist: Pointer to an lpfc dma buffer extension.
876 **/
877 static int
878 diag_cmd_data_free(struct lpfc_hba *phba, struct lpfc_dmabufext *mlist)
879 {
880 struct lpfc_dmabufext *mlast;
881 struct pci_dev *pcidev;
882 struct list_head head, *curr, *next;
883
884 if ((!mlist) || (!lpfc_is_link_up(phba) &&
885 (phba->link_flag & LS_LOOPBACK_MODE))) {
886 return 0;
887 }
888
889 pcidev = phba->pcidev;
890 list_add_tail(&head, &mlist->dma.list);
891
892 list_for_each_safe(curr, next, &head) {
893 mlast = list_entry(curr, struct lpfc_dmabufext , dma.list);
894 if (mlast->dma.virt)
895 dma_free_coherent(&pcidev->dev,
896 mlast->size,
897 mlast->dma.virt,
898 mlast->dma.phys);
899 kfree(mlast);
900 }
901 return 0;
902 }
903
904 /**
905 * lpfc_bsg_ct_unsol_event - process an unsolicited CT command
906 * @phba:
907 * @pring:
908 * @piocbq:
909 *
910 * This function is called when an unsolicited CT command is received. It
911 * forwards the event to any processes registered to receive CT events.
912 **/
913 int
914 lpfc_bsg_ct_unsol_event(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
915 struct lpfc_iocbq *piocbq)
916 {
917 uint32_t evt_req_id = 0;
918 uint32_t cmd;
919 struct lpfc_dmabuf *dmabuf = NULL;
920 struct lpfc_bsg_event *evt;
921 struct event_data *evt_dat = NULL;
922 struct lpfc_iocbq *iocbq;
923 size_t offset = 0;
924 struct list_head head;
925 struct ulp_bde64 *bde;
926 dma_addr_t dma_addr;
927 int i;
928 struct lpfc_dmabuf *bdeBuf1 = piocbq->context2;
929 struct lpfc_dmabuf *bdeBuf2 = piocbq->context3;
930 struct lpfc_hbq_entry *hbqe;
931 struct lpfc_sli_ct_request *ct_req;
932 struct bsg_job *job = NULL;
933 struct fc_bsg_reply *bsg_reply;
934 struct bsg_job_data *dd_data = NULL;
935 unsigned long flags;
936 int size = 0;
937
938 INIT_LIST_HEAD(&head);
939 list_add_tail(&head, &piocbq->list);
940
941 if (piocbq->iocb.ulpBdeCount == 0 ||
942 piocbq->iocb.un.cont64[0].tus.f.bdeSize == 0)
943 goto error_ct_unsol_exit;
944
945 if (phba->link_state == LPFC_HBA_ERROR ||
946 (!(phba->sli.sli_flag & LPFC_SLI_ACTIVE)))
947 goto error_ct_unsol_exit;
948
949 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED)
950 dmabuf = bdeBuf1;
951 else {
952 dma_addr = getPaddr(piocbq->iocb.un.cont64[0].addrHigh,
953 piocbq->iocb.un.cont64[0].addrLow);
954 dmabuf = lpfc_sli_ringpostbuf_get(phba, pring, dma_addr);
955 }
956 if (dmabuf == NULL)
957 goto error_ct_unsol_exit;
958 ct_req = (struct lpfc_sli_ct_request *)dmabuf->virt;
959 evt_req_id = ct_req->FsType;
960 cmd = ct_req->CommandResponse.bits.CmdRsp;
961 if (!(phba->sli3_options & LPFC_SLI3_HBQ_ENABLED))
962 lpfc_sli_ringpostbuf_put(phba, pring, dmabuf);
963
964 spin_lock_irqsave(&phba->ct_ev_lock, flags);
965 list_for_each_entry(evt, &phba->ct_ev_waiters, node) {
966 if (!(evt->type_mask & FC_REG_CT_EVENT) ||
967 evt->req_id != evt_req_id)
968 continue;
969
970 lpfc_bsg_event_ref(evt);
971 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
972 evt_dat = kzalloc(sizeof(*evt_dat), GFP_KERNEL);
973 if (evt_dat == NULL) {
974 spin_lock_irqsave(&phba->ct_ev_lock, flags);
975 lpfc_bsg_event_unref(evt);
976 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
977 "2614 Memory allocation failed for "
978 "CT event\n");
979 break;
980 }
981
982 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
983 /* take accumulated byte count from the last iocbq */
984 iocbq = list_entry(head.prev, typeof(*iocbq), list);
985 evt_dat->len = iocbq->iocb.unsli3.rcvsli3.acc_len;
986 } else {
987 list_for_each_entry(iocbq, &head, list) {
988 for (i = 0; i < iocbq->iocb.ulpBdeCount; i++)
989 evt_dat->len +=
990 iocbq->iocb.un.cont64[i].tus.f.bdeSize;
991 }
992 }
993
994 evt_dat->data = kzalloc(evt_dat->len, GFP_KERNEL);
995 if (evt_dat->data == NULL) {
996 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
997 "2615 Memory allocation failed for "
998 "CT event data, size %d\n",
999 evt_dat->len);
1000 kfree(evt_dat);
1001 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1002 lpfc_bsg_event_unref(evt);
1003 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1004 goto error_ct_unsol_exit;
1005 }
1006
1007 list_for_each_entry(iocbq, &head, list) {
1008 size = 0;
1009 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
1010 bdeBuf1 = iocbq->context2;
1011 bdeBuf2 = iocbq->context3;
1012 }
1013 for (i = 0; i < iocbq->iocb.ulpBdeCount; i++) {
1014 if (phba->sli3_options &
1015 LPFC_SLI3_HBQ_ENABLED) {
1016 if (i == 0) {
1017 hbqe = (struct lpfc_hbq_entry *)
1018 &iocbq->iocb.un.ulpWord[0];
1019 size = hbqe->bde.tus.f.bdeSize;
1020 dmabuf = bdeBuf1;
1021 } else if (i == 1) {
1022 hbqe = (struct lpfc_hbq_entry *)
1023 &iocbq->iocb.unsli3.
1024 sli3Words[4];
1025 size = hbqe->bde.tus.f.bdeSize;
1026 dmabuf = bdeBuf2;
1027 }
1028 if ((offset + size) > evt_dat->len)
1029 size = evt_dat->len - offset;
1030 } else {
1031 size = iocbq->iocb.un.cont64[i].
1032 tus.f.bdeSize;
1033 bde = &iocbq->iocb.un.cont64[i];
1034 dma_addr = getPaddr(bde->addrHigh,
1035 bde->addrLow);
1036 dmabuf = lpfc_sli_ringpostbuf_get(phba,
1037 pring, dma_addr);
1038 }
1039 if (!dmabuf) {
1040 lpfc_printf_log(phba, KERN_ERR,
1041 LOG_LIBDFC, "2616 No dmabuf "
1042 "found for iocbq 0x%p\n",
1043 iocbq);
1044 kfree(evt_dat->data);
1045 kfree(evt_dat);
1046 spin_lock_irqsave(&phba->ct_ev_lock,
1047 flags);
1048 lpfc_bsg_event_unref(evt);
1049 spin_unlock_irqrestore(
1050 &phba->ct_ev_lock, flags);
1051 goto error_ct_unsol_exit;
1052 }
1053 memcpy((char *)(evt_dat->data) + offset,
1054 dmabuf->virt, size);
1055 offset += size;
1056 if (evt_req_id != SLI_CT_ELX_LOOPBACK &&
1057 !(phba->sli3_options &
1058 LPFC_SLI3_HBQ_ENABLED)) {
1059 lpfc_sli_ringpostbuf_put(phba, pring,
1060 dmabuf);
1061 } else {
1062 switch (cmd) {
1063 case ELX_LOOPBACK_DATA:
1064 if (phba->sli_rev <
1065 LPFC_SLI_REV4)
1066 diag_cmd_data_free(phba,
1067 (struct lpfc_dmabufext
1068 *)dmabuf);
1069 break;
1070 case ELX_LOOPBACK_XRI_SETUP:
1071 if ((phba->sli_rev ==
1072 LPFC_SLI_REV2) ||
1073 (phba->sli3_options &
1074 LPFC_SLI3_HBQ_ENABLED
1075 )) {
1076 lpfc_in_buf_free(phba,
1077 dmabuf);
1078 } else {
1079 lpfc_post_buffer(phba,
1080 pring,
1081 1);
1082 }
1083 break;
1084 default:
1085 if (!(phba->sli3_options &
1086 LPFC_SLI3_HBQ_ENABLED))
1087 lpfc_post_buffer(phba,
1088 pring,
1089 1);
1090 break;
1091 }
1092 }
1093 }
1094 }
1095
1096 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1097 if (phba->sli_rev == LPFC_SLI_REV4) {
1098 evt_dat->immed_dat = phba->ctx_idx;
1099 phba->ctx_idx = (phba->ctx_idx + 1) % LPFC_CT_CTX_MAX;
1100 /* Provide warning for over-run of the ct_ctx array */
1101 if (phba->ct_ctx[evt_dat->immed_dat].valid ==
1102 UNSOL_VALID)
1103 lpfc_printf_log(phba, KERN_WARNING, LOG_ELS,
1104 "2717 CT context array entry "
1105 "[%d] over-run: oxid:x%x, "
1106 "sid:x%x\n", phba->ctx_idx,
1107 phba->ct_ctx[
1108 evt_dat->immed_dat].oxid,
1109 phba->ct_ctx[
1110 evt_dat->immed_dat].SID);
1111 phba->ct_ctx[evt_dat->immed_dat].rxid =
1112 piocbq->iocb.ulpContext;
1113 phba->ct_ctx[evt_dat->immed_dat].oxid =
1114 piocbq->iocb.unsli3.rcvsli3.ox_id;
1115 phba->ct_ctx[evt_dat->immed_dat].SID =
1116 piocbq->iocb.un.rcvels.remoteID;
1117 phba->ct_ctx[evt_dat->immed_dat].valid = UNSOL_VALID;
1118 } else
1119 evt_dat->immed_dat = piocbq->iocb.ulpContext;
1120
1121 evt_dat->type = FC_REG_CT_EVENT;
1122 list_add(&evt_dat->node, &evt->events_to_see);
1123 if (evt_req_id == SLI_CT_ELX_LOOPBACK) {
1124 wake_up_interruptible(&evt->wq);
1125 lpfc_bsg_event_unref(evt);
1126 break;
1127 }
1128
1129 list_move(evt->events_to_see.prev, &evt->events_to_get);
1130
1131 dd_data = (struct bsg_job_data *)evt->dd_data;
1132 job = dd_data->set_job;
1133 dd_data->set_job = NULL;
1134 lpfc_bsg_event_unref(evt);
1135 if (job) {
1136 bsg_reply = job->reply;
1137 bsg_reply->reply_payload_rcv_len = size;
1138 /* make error code available to userspace */
1139 bsg_reply->result = 0;
1140 job->dd_data = NULL;
1141 /* complete the job back to userspace */
1142 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1143 bsg_job_done(job, bsg_reply->result,
1144 bsg_reply->reply_payload_rcv_len);
1145 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1146 }
1147 }
1148 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1149
1150 error_ct_unsol_exit:
1151 if (!list_empty(&head))
1152 list_del(&head);
1153 if ((phba->sli_rev < LPFC_SLI_REV4) &&
1154 (evt_req_id == SLI_CT_ELX_LOOPBACK))
1155 return 0;
1156 return 1;
1157 }
1158
1159 /**
1160 * lpfc_bsg_ct_unsol_abort - handler ct abort to management plane
1161 * @phba: Pointer to HBA context object.
1162 * @dmabuf: pointer to a dmabuf that describes the FC sequence
1163 *
1164 * This function handles abort to the CT command toward management plane
1165 * for SLI4 port.
1166 *
1167 * If the pending context of a CT command to management plane present, clears
1168 * such context and returns 1 for handled; otherwise, it returns 0 indicating
1169 * no context exists.
1170 **/
1171 int
1172 lpfc_bsg_ct_unsol_abort(struct lpfc_hba *phba, struct hbq_dmabuf *dmabuf)
1173 {
1174 struct fc_frame_header fc_hdr;
1175 struct fc_frame_header *fc_hdr_ptr = &fc_hdr;
1176 int ctx_idx, handled = 0;
1177 uint16_t oxid, rxid;
1178 uint32_t sid;
1179
1180 memcpy(fc_hdr_ptr, dmabuf->hbuf.virt, sizeof(struct fc_frame_header));
1181 sid = sli4_sid_from_fc_hdr(fc_hdr_ptr);
1182 oxid = be16_to_cpu(fc_hdr_ptr->fh_ox_id);
1183 rxid = be16_to_cpu(fc_hdr_ptr->fh_rx_id);
1184
1185 for (ctx_idx = 0; ctx_idx < LPFC_CT_CTX_MAX; ctx_idx++) {
1186 if (phba->ct_ctx[ctx_idx].valid != UNSOL_VALID)
1187 continue;
1188 if (phba->ct_ctx[ctx_idx].rxid != rxid)
1189 continue;
1190 if (phba->ct_ctx[ctx_idx].oxid != oxid)
1191 continue;
1192 if (phba->ct_ctx[ctx_idx].SID != sid)
1193 continue;
1194 phba->ct_ctx[ctx_idx].valid = UNSOL_INVALID;
1195 handled = 1;
1196 }
1197 return handled;
1198 }
1199
1200 /**
1201 * lpfc_bsg_hba_set_event - process a SET_EVENT bsg vendor command
1202 * @job: SET_EVENT fc_bsg_job
1203 **/
1204 static int
1205 lpfc_bsg_hba_set_event(struct bsg_job *job)
1206 {
1207 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
1208 struct lpfc_hba *phba = vport->phba;
1209 struct fc_bsg_request *bsg_request = job->request;
1210 struct set_ct_event *event_req;
1211 struct lpfc_bsg_event *evt;
1212 int rc = 0;
1213 struct bsg_job_data *dd_data = NULL;
1214 uint32_t ev_mask;
1215 unsigned long flags;
1216
1217 if (job->request_len <
1218 sizeof(struct fc_bsg_request) + sizeof(struct set_ct_event)) {
1219 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1220 "2612 Received SET_CT_EVENT below minimum "
1221 "size\n");
1222 rc = -EINVAL;
1223 goto job_error;
1224 }
1225
1226 event_req = (struct set_ct_event *)
1227 bsg_request->rqst_data.h_vendor.vendor_cmd;
1228 ev_mask = ((uint32_t)(unsigned long)event_req->type_mask &
1229 FC_REG_EVENT_MASK);
1230 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1231 list_for_each_entry(evt, &phba->ct_ev_waiters, node) {
1232 if (evt->reg_id == event_req->ev_reg_id) {
1233 lpfc_bsg_event_ref(evt);
1234 evt->wait_time_stamp = jiffies;
1235 dd_data = (struct bsg_job_data *)evt->dd_data;
1236 break;
1237 }
1238 }
1239 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1240
1241 if (&evt->node == &phba->ct_ev_waiters) {
1242 /* no event waiting struct yet - first call */
1243 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
1244 if (dd_data == NULL) {
1245 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1246 "2734 Failed allocation of dd_data\n");
1247 rc = -ENOMEM;
1248 goto job_error;
1249 }
1250 evt = lpfc_bsg_event_new(ev_mask, event_req->ev_reg_id,
1251 event_req->ev_req_id);
1252 if (!evt) {
1253 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1254 "2617 Failed allocation of event "
1255 "waiter\n");
1256 rc = -ENOMEM;
1257 goto job_error;
1258 }
1259 dd_data->type = TYPE_EVT;
1260 dd_data->set_job = NULL;
1261 dd_data->context_un.evt = evt;
1262 evt->dd_data = (void *)dd_data;
1263 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1264 list_add(&evt->node, &phba->ct_ev_waiters);
1265 lpfc_bsg_event_ref(evt);
1266 evt->wait_time_stamp = jiffies;
1267 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1268 }
1269
1270 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1271 evt->waiting = 1;
1272 dd_data->set_job = job; /* for unsolicited command */
1273 job->dd_data = dd_data; /* for fc transport timeout callback*/
1274 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1275 return 0; /* call job done later */
1276
1277 job_error:
1278 if (dd_data != NULL)
1279 kfree(dd_data);
1280
1281 job->dd_data = NULL;
1282 return rc;
1283 }
1284
1285 /**
1286 * lpfc_bsg_hba_get_event - process a GET_EVENT bsg vendor command
1287 * @job: GET_EVENT fc_bsg_job
1288 **/
1289 static int
1290 lpfc_bsg_hba_get_event(struct bsg_job *job)
1291 {
1292 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
1293 struct lpfc_hba *phba = vport->phba;
1294 struct fc_bsg_request *bsg_request = job->request;
1295 struct fc_bsg_reply *bsg_reply = job->reply;
1296 struct get_ct_event *event_req;
1297 struct get_ct_event_reply *event_reply;
1298 struct lpfc_bsg_event *evt, *evt_next;
1299 struct event_data *evt_dat = NULL;
1300 unsigned long flags;
1301 uint32_t rc = 0;
1302
1303 if (job->request_len <
1304 sizeof(struct fc_bsg_request) + sizeof(struct get_ct_event)) {
1305 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1306 "2613 Received GET_CT_EVENT request below "
1307 "minimum size\n");
1308 rc = -EINVAL;
1309 goto job_error;
1310 }
1311
1312 event_req = (struct get_ct_event *)
1313 bsg_request->rqst_data.h_vendor.vendor_cmd;
1314
1315 event_reply = (struct get_ct_event_reply *)
1316 bsg_reply->reply_data.vendor_reply.vendor_rsp;
1317 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1318 list_for_each_entry_safe(evt, evt_next, &phba->ct_ev_waiters, node) {
1319 if (evt->reg_id == event_req->ev_reg_id) {
1320 if (list_empty(&evt->events_to_get))
1321 break;
1322 lpfc_bsg_event_ref(evt);
1323 evt->wait_time_stamp = jiffies;
1324 evt_dat = list_entry(evt->events_to_get.prev,
1325 struct event_data, node);
1326 list_del(&evt_dat->node);
1327 break;
1328 }
1329 }
1330 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1331
1332 /* The app may continue to ask for event data until it gets
1333 * an error indicating that there isn't anymore
1334 */
1335 if (evt_dat == NULL) {
1336 bsg_reply->reply_payload_rcv_len = 0;
1337 rc = -ENOENT;
1338 goto job_error;
1339 }
1340
1341 if (evt_dat->len > job->request_payload.payload_len) {
1342 evt_dat->len = job->request_payload.payload_len;
1343 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1344 "2618 Truncated event data at %d "
1345 "bytes\n",
1346 job->request_payload.payload_len);
1347 }
1348
1349 event_reply->type = evt_dat->type;
1350 event_reply->immed_data = evt_dat->immed_dat;
1351 if (evt_dat->len > 0)
1352 bsg_reply->reply_payload_rcv_len =
1353 sg_copy_from_buffer(job->request_payload.sg_list,
1354 job->request_payload.sg_cnt,
1355 evt_dat->data, evt_dat->len);
1356 else
1357 bsg_reply->reply_payload_rcv_len = 0;
1358
1359 if (evt_dat) {
1360 kfree(evt_dat->data);
1361 kfree(evt_dat);
1362 }
1363
1364 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1365 lpfc_bsg_event_unref(evt);
1366 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1367 job->dd_data = NULL;
1368 bsg_reply->result = 0;
1369 bsg_job_done(job, bsg_reply->result,
1370 bsg_reply->reply_payload_rcv_len);
1371 return 0;
1372
1373 job_error:
1374 job->dd_data = NULL;
1375 bsg_reply->result = rc;
1376 return rc;
1377 }
1378
1379 /**
1380 * lpfc_issue_ct_rsp_cmp - lpfc_issue_ct_rsp's completion handler
1381 * @phba: Pointer to HBA context object.
1382 * @cmdiocbq: Pointer to command iocb.
1383 * @rspiocbq: Pointer to response iocb.
1384 *
1385 * This function is the completion handler for iocbs issued using
1386 * lpfc_issue_ct_rsp_cmp function. This function is called by the
1387 * ring event handler function without any lock held. This function
1388 * can be called from both worker thread context and interrupt
1389 * context. This function also can be called from other thread which
1390 * cleans up the SLI layer objects.
1391 * This function copy the contents of the response iocb to the
1392 * response iocb memory object provided by the caller of
1393 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
1394 * sleeps for the iocb completion.
1395 **/
1396 static void
1397 lpfc_issue_ct_rsp_cmp(struct lpfc_hba *phba,
1398 struct lpfc_iocbq *cmdiocbq,
1399 struct lpfc_iocbq *rspiocbq)
1400 {
1401 struct bsg_job_data *dd_data;
1402 struct bsg_job *job;
1403 struct fc_bsg_reply *bsg_reply;
1404 IOCB_t *rsp;
1405 struct lpfc_dmabuf *bmp, *cmp;
1406 struct lpfc_nodelist *ndlp;
1407 unsigned long flags;
1408 int rc = 0;
1409
1410 dd_data = cmdiocbq->context1;
1411
1412 /* Determine if job has been aborted */
1413 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1414 job = dd_data->set_job;
1415 if (job) {
1416 /* Prevent timeout handling from trying to abort job */
1417 job->dd_data = NULL;
1418 }
1419 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1420
1421 /* Close the timeout handler abort window */
1422 spin_lock_irqsave(&phba->hbalock, flags);
1423 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
1424 spin_unlock_irqrestore(&phba->hbalock, flags);
1425
1426 ndlp = dd_data->context_un.iocb.ndlp;
1427 cmp = cmdiocbq->context2;
1428 bmp = cmdiocbq->context3;
1429 rsp = &rspiocbq->iocb;
1430
1431 /* Copy the completed job data or set the error status */
1432
1433 if (job) {
1434 bsg_reply = job->reply;
1435 if (rsp->ulpStatus) {
1436 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
1437 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
1438 case IOERR_SEQUENCE_TIMEOUT:
1439 rc = -ETIMEDOUT;
1440 break;
1441 case IOERR_INVALID_RPI:
1442 rc = -EFAULT;
1443 break;
1444 default:
1445 rc = -EACCES;
1446 break;
1447 }
1448 } else {
1449 rc = -EACCES;
1450 }
1451 } else {
1452 bsg_reply->reply_payload_rcv_len = 0;
1453 }
1454 }
1455
1456 lpfc_free_bsg_buffers(phba, cmp);
1457 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
1458 kfree(bmp);
1459 lpfc_sli_release_iocbq(phba, cmdiocbq);
1460 lpfc_nlp_put(ndlp);
1461 kfree(dd_data);
1462
1463 /* Complete the job if the job is still active */
1464
1465 if (job) {
1466 bsg_reply->result = rc;
1467 bsg_job_done(job, bsg_reply->result,
1468 bsg_reply->reply_payload_rcv_len);
1469 }
1470 return;
1471 }
1472
1473 /**
1474 * lpfc_issue_ct_rsp - issue a ct response
1475 * @phba: Pointer to HBA context object.
1476 * @job: Pointer to the job object.
1477 * @tag: tag index value into the ports context exchange array.
1478 * @bmp: Pointer to a dma buffer descriptor.
1479 * @num_entry: Number of enties in the bde.
1480 **/
1481 static int
1482 lpfc_issue_ct_rsp(struct lpfc_hba *phba, struct bsg_job *job, uint32_t tag,
1483 struct lpfc_dmabuf *cmp, struct lpfc_dmabuf *bmp,
1484 int num_entry)
1485 {
1486 IOCB_t *icmd;
1487 struct lpfc_iocbq *ctiocb = NULL;
1488 int rc = 0;
1489 struct lpfc_nodelist *ndlp = NULL;
1490 struct bsg_job_data *dd_data;
1491 unsigned long flags;
1492 uint32_t creg_val;
1493
1494 /* allocate our bsg tracking structure */
1495 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
1496 if (!dd_data) {
1497 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1498 "2736 Failed allocation of dd_data\n");
1499 rc = -ENOMEM;
1500 goto no_dd_data;
1501 }
1502
1503 /* Allocate buffer for command iocb */
1504 ctiocb = lpfc_sli_get_iocbq(phba);
1505 if (!ctiocb) {
1506 rc = -ENOMEM;
1507 goto no_ctiocb;
1508 }
1509
1510 icmd = &ctiocb->iocb;
1511 icmd->un.xseq64.bdl.ulpIoTag32 = 0;
1512 icmd->un.xseq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
1513 icmd->un.xseq64.bdl.addrLow = putPaddrLow(bmp->phys);
1514 icmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
1515 icmd->un.xseq64.bdl.bdeSize = (num_entry * sizeof(struct ulp_bde64));
1516 icmd->un.xseq64.w5.hcsw.Fctl = (LS | LA);
1517 icmd->un.xseq64.w5.hcsw.Dfctl = 0;
1518 icmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_SOL_CTL;
1519 icmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
1520
1521 /* Fill in rest of iocb */
1522 icmd->ulpCommand = CMD_XMIT_SEQUENCE64_CX;
1523 icmd->ulpBdeCount = 1;
1524 icmd->ulpLe = 1;
1525 icmd->ulpClass = CLASS3;
1526 if (phba->sli_rev == LPFC_SLI_REV4) {
1527 /* Do not issue unsol response if oxid not marked as valid */
1528 if (phba->ct_ctx[tag].valid != UNSOL_VALID) {
1529 rc = IOCB_ERROR;
1530 goto issue_ct_rsp_exit;
1531 }
1532 icmd->ulpContext = phba->ct_ctx[tag].rxid;
1533 icmd->unsli3.rcvsli3.ox_id = phba->ct_ctx[tag].oxid;
1534 ndlp = lpfc_findnode_did(phba->pport, phba->ct_ctx[tag].SID);
1535 if (!ndlp) {
1536 lpfc_printf_log(phba, KERN_WARNING, LOG_ELS,
1537 "2721 ndlp null for oxid %x SID %x\n",
1538 icmd->ulpContext,
1539 phba->ct_ctx[tag].SID);
1540 rc = IOCB_ERROR;
1541 goto issue_ct_rsp_exit;
1542 }
1543
1544 /* Check if the ndlp is active */
1545 if (!ndlp || !NLP_CHK_NODE_ACT(ndlp)) {
1546 rc = IOCB_ERROR;
1547 goto issue_ct_rsp_exit;
1548 }
1549
1550 /* get a refernece count so the ndlp doesn't go away while
1551 * we respond
1552 */
1553 if (!lpfc_nlp_get(ndlp)) {
1554 rc = IOCB_ERROR;
1555 goto issue_ct_rsp_exit;
1556 }
1557
1558 icmd->un.ulpWord[3] =
1559 phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
1560
1561 /* The exchange is done, mark the entry as invalid */
1562 phba->ct_ctx[tag].valid = UNSOL_INVALID;
1563 } else
1564 icmd->ulpContext = (ushort) tag;
1565
1566 icmd->ulpTimeout = phba->fc_ratov * 2;
1567
1568 /* Xmit CT response on exchange <xid> */
1569 lpfc_printf_log(phba, KERN_INFO, LOG_ELS,
1570 "2722 Xmit CT response on exchange x%x Data: x%x x%x x%x\n",
1571 icmd->ulpContext, icmd->ulpIoTag, tag, phba->link_state);
1572
1573 ctiocb->iocb_cmpl = NULL;
1574 ctiocb->iocb_flag |= LPFC_IO_LIBDFC;
1575 ctiocb->vport = phba->pport;
1576 ctiocb->context1 = dd_data;
1577 ctiocb->context2 = cmp;
1578 ctiocb->context3 = bmp;
1579 ctiocb->context_un.ndlp = ndlp;
1580 ctiocb->iocb_cmpl = lpfc_issue_ct_rsp_cmp;
1581
1582 dd_data->type = TYPE_IOCB;
1583 dd_data->set_job = job;
1584 dd_data->context_un.iocb.cmdiocbq = ctiocb;
1585 dd_data->context_un.iocb.ndlp = ndlp;
1586 dd_data->context_un.iocb.rmp = NULL;
1587 job->dd_data = dd_data;
1588
1589 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
1590 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
1591 rc = -IOCB_ERROR;
1592 goto issue_ct_rsp_exit;
1593 }
1594 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
1595 writel(creg_val, phba->HCregaddr);
1596 readl(phba->HCregaddr); /* flush */
1597 }
1598
1599 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, ctiocb, 0);
1600
1601 if (rc == IOCB_SUCCESS) {
1602 spin_lock_irqsave(&phba->hbalock, flags);
1603 /* make sure the I/O had not been completed/released */
1604 if (ctiocb->iocb_flag & LPFC_IO_LIBDFC) {
1605 /* open up abort window to timeout handler */
1606 ctiocb->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
1607 }
1608 spin_unlock_irqrestore(&phba->hbalock, flags);
1609 return 0; /* done for now */
1610 }
1611
1612 /* iocb failed so cleanup */
1613 job->dd_data = NULL;
1614
1615 issue_ct_rsp_exit:
1616 lpfc_sli_release_iocbq(phba, ctiocb);
1617 no_ctiocb:
1618 kfree(dd_data);
1619 no_dd_data:
1620 return rc;
1621 }
1622
1623 /**
1624 * lpfc_bsg_send_mgmt_rsp - process a SEND_MGMT_RESP bsg vendor command
1625 * @job: SEND_MGMT_RESP fc_bsg_job
1626 **/
1627 static int
1628 lpfc_bsg_send_mgmt_rsp(struct bsg_job *job)
1629 {
1630 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
1631 struct lpfc_hba *phba = vport->phba;
1632 struct fc_bsg_request *bsg_request = job->request;
1633 struct fc_bsg_reply *bsg_reply = job->reply;
1634 struct send_mgmt_resp *mgmt_resp = (struct send_mgmt_resp *)
1635 bsg_request->rqst_data.h_vendor.vendor_cmd;
1636 struct ulp_bde64 *bpl;
1637 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL;
1638 int bpl_entries;
1639 uint32_t tag = mgmt_resp->tag;
1640 unsigned long reqbfrcnt =
1641 (unsigned long)job->request_payload.payload_len;
1642 int rc = 0;
1643
1644 /* in case no data is transferred */
1645 bsg_reply->reply_payload_rcv_len = 0;
1646
1647 if (!reqbfrcnt || (reqbfrcnt > (80 * BUF_SZ_4K))) {
1648 rc = -ERANGE;
1649 goto send_mgmt_rsp_exit;
1650 }
1651
1652 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
1653 if (!bmp) {
1654 rc = -ENOMEM;
1655 goto send_mgmt_rsp_exit;
1656 }
1657
1658 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
1659 if (!bmp->virt) {
1660 rc = -ENOMEM;
1661 goto send_mgmt_rsp_free_bmp;
1662 }
1663
1664 INIT_LIST_HEAD(&bmp->list);
1665 bpl = (struct ulp_bde64 *) bmp->virt;
1666 bpl_entries = (LPFC_BPL_SIZE/sizeof(struct ulp_bde64));
1667 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
1668 1, bpl, &bpl_entries);
1669 if (!cmp) {
1670 rc = -ENOMEM;
1671 goto send_mgmt_rsp_free_bmp;
1672 }
1673 lpfc_bsg_copy_data(cmp, &job->request_payload,
1674 job->request_payload.payload_len, 1);
1675
1676 rc = lpfc_issue_ct_rsp(phba, job, tag, cmp, bmp, bpl_entries);
1677
1678 if (rc == IOCB_SUCCESS)
1679 return 0; /* done for now */
1680
1681 rc = -EACCES;
1682
1683 lpfc_free_bsg_buffers(phba, cmp);
1684
1685 send_mgmt_rsp_free_bmp:
1686 if (bmp->virt)
1687 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
1688 kfree(bmp);
1689 send_mgmt_rsp_exit:
1690 /* make error code available to userspace */
1691 bsg_reply->result = rc;
1692 job->dd_data = NULL;
1693 return rc;
1694 }
1695
1696 /**
1697 * lpfc_bsg_diag_mode_enter - process preparing into device diag loopback mode
1698 * @phba: Pointer to HBA context object.
1699 *
1700 * This function is responsible for preparing driver for diag loopback
1701 * on device.
1702 */
1703 static int
1704 lpfc_bsg_diag_mode_enter(struct lpfc_hba *phba)
1705 {
1706 struct lpfc_vport **vports;
1707 struct Scsi_Host *shost;
1708 struct lpfc_sli *psli;
1709 struct lpfc_queue *qp = NULL;
1710 struct lpfc_sli_ring *pring;
1711 int i = 0;
1712
1713 psli = &phba->sli;
1714 if (!psli)
1715 return -ENODEV;
1716
1717
1718 if ((phba->link_state == LPFC_HBA_ERROR) ||
1719 (psli->sli_flag & LPFC_BLOCK_MGMT_IO) ||
1720 (!(psli->sli_flag & LPFC_SLI_ACTIVE)))
1721 return -EACCES;
1722
1723 vports = lpfc_create_vport_work_array(phba);
1724 if (vports) {
1725 for (i = 0; i <= phba->max_vpi && vports[i] != NULL; i++) {
1726 shost = lpfc_shost_from_vport(vports[i]);
1727 scsi_block_requests(shost);
1728 }
1729 lpfc_destroy_vport_work_array(phba, vports);
1730 } else {
1731 shost = lpfc_shost_from_vport(phba->pport);
1732 scsi_block_requests(shost);
1733 }
1734
1735 if (phba->sli_rev != LPFC_SLI_REV4) {
1736 pring = &psli->sli3_ring[LPFC_FCP_RING];
1737 lpfc_emptyq_wait(phba, &pring->txcmplq, &phba->hbalock);
1738 return 0;
1739 }
1740 list_for_each_entry(qp, &phba->sli4_hba.lpfc_wq_list, wq_list) {
1741 pring = qp->pring;
1742 if (!pring || (pring->ringno != LPFC_FCP_RING))
1743 continue;
1744 if (!lpfc_emptyq_wait(phba, &pring->txcmplq,
1745 &pring->ring_lock))
1746 break;
1747 }
1748 return 0;
1749 }
1750
1751 /**
1752 * lpfc_bsg_diag_mode_exit - exit process from device diag loopback mode
1753 * @phba: Pointer to HBA context object.
1754 *
1755 * This function is responsible for driver exit processing of setting up
1756 * diag loopback mode on device.
1757 */
1758 static void
1759 lpfc_bsg_diag_mode_exit(struct lpfc_hba *phba)
1760 {
1761 struct Scsi_Host *shost;
1762 struct lpfc_vport **vports;
1763 int i;
1764
1765 vports = lpfc_create_vport_work_array(phba);
1766 if (vports) {
1767 for (i = 0; i <= phba->max_vpi && vports[i] != NULL; i++) {
1768 shost = lpfc_shost_from_vport(vports[i]);
1769 scsi_unblock_requests(shost);
1770 }
1771 lpfc_destroy_vport_work_array(phba, vports);
1772 } else {
1773 shost = lpfc_shost_from_vport(phba->pport);
1774 scsi_unblock_requests(shost);
1775 }
1776 return;
1777 }
1778
1779 /**
1780 * lpfc_sli3_bsg_diag_loopback_mode - process an sli3 bsg vendor command
1781 * @phba: Pointer to HBA context object.
1782 * @job: LPFC_BSG_VENDOR_DIAG_MODE
1783 *
1784 * This function is responsible for placing an sli3 port into diagnostic
1785 * loopback mode in order to perform a diagnostic loopback test.
1786 * All new scsi requests are blocked, a small delay is used to allow the
1787 * scsi requests to complete then the link is brought down. If the link is
1788 * is placed in loopback mode then scsi requests are again allowed
1789 * so the scsi mid-layer doesn't give up on the port.
1790 * All of this is done in-line.
1791 */
1792 static int
1793 lpfc_sli3_bsg_diag_loopback_mode(struct lpfc_hba *phba, struct bsg_job *job)
1794 {
1795 struct fc_bsg_request *bsg_request = job->request;
1796 struct fc_bsg_reply *bsg_reply = job->reply;
1797 struct diag_mode_set *loopback_mode;
1798 uint32_t link_flags;
1799 uint32_t timeout;
1800 LPFC_MBOXQ_t *pmboxq = NULL;
1801 int mbxstatus = MBX_SUCCESS;
1802 int i = 0;
1803 int rc = 0;
1804
1805 /* no data to return just the return code */
1806 bsg_reply->reply_payload_rcv_len = 0;
1807
1808 if (job->request_len < sizeof(struct fc_bsg_request) +
1809 sizeof(struct diag_mode_set)) {
1810 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1811 "2738 Received DIAG MODE request size:%d "
1812 "below the minimum size:%d\n",
1813 job->request_len,
1814 (int)(sizeof(struct fc_bsg_request) +
1815 sizeof(struct diag_mode_set)));
1816 rc = -EINVAL;
1817 goto job_error;
1818 }
1819
1820 rc = lpfc_bsg_diag_mode_enter(phba);
1821 if (rc)
1822 goto job_error;
1823
1824 /* bring the link to diagnostic mode */
1825 loopback_mode = (struct diag_mode_set *)
1826 bsg_request->rqst_data.h_vendor.vendor_cmd;
1827 link_flags = loopback_mode->type;
1828 timeout = loopback_mode->timeout * 100;
1829
1830 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1831 if (!pmboxq) {
1832 rc = -ENOMEM;
1833 goto loopback_mode_exit;
1834 }
1835 memset((void *)pmboxq, 0, sizeof(LPFC_MBOXQ_t));
1836 pmboxq->u.mb.mbxCommand = MBX_DOWN_LINK;
1837 pmboxq->u.mb.mbxOwner = OWN_HOST;
1838
1839 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
1840
1841 if ((mbxstatus == MBX_SUCCESS) && (pmboxq->u.mb.mbxStatus == 0)) {
1842 /* wait for link down before proceeding */
1843 i = 0;
1844 while (phba->link_state != LPFC_LINK_DOWN) {
1845 if (i++ > timeout) {
1846 rc = -ETIMEDOUT;
1847 goto loopback_mode_exit;
1848 }
1849 msleep(10);
1850 }
1851
1852 memset((void *)pmboxq, 0, sizeof(LPFC_MBOXQ_t));
1853 if (link_flags == INTERNAL_LOOP_BACK)
1854 pmboxq->u.mb.un.varInitLnk.link_flags = FLAGS_LOCAL_LB;
1855 else
1856 pmboxq->u.mb.un.varInitLnk.link_flags =
1857 FLAGS_TOPOLOGY_MODE_LOOP;
1858
1859 pmboxq->u.mb.mbxCommand = MBX_INIT_LINK;
1860 pmboxq->u.mb.mbxOwner = OWN_HOST;
1861
1862 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq,
1863 LPFC_MBOX_TMO);
1864
1865 if ((mbxstatus != MBX_SUCCESS) || (pmboxq->u.mb.mbxStatus))
1866 rc = -ENODEV;
1867 else {
1868 spin_lock_irq(&phba->hbalock);
1869 phba->link_flag |= LS_LOOPBACK_MODE;
1870 spin_unlock_irq(&phba->hbalock);
1871 /* wait for the link attention interrupt */
1872 msleep(100);
1873
1874 i = 0;
1875 while (phba->link_state != LPFC_HBA_READY) {
1876 if (i++ > timeout) {
1877 rc = -ETIMEDOUT;
1878 break;
1879 }
1880
1881 msleep(10);
1882 }
1883 }
1884
1885 } else
1886 rc = -ENODEV;
1887
1888 loopback_mode_exit:
1889 lpfc_bsg_diag_mode_exit(phba);
1890
1891 /*
1892 * Let SLI layer release mboxq if mbox command completed after timeout.
1893 */
1894 if (pmboxq && mbxstatus != MBX_TIMEOUT)
1895 mempool_free(pmboxq, phba->mbox_mem_pool);
1896
1897 job_error:
1898 /* make error code available to userspace */
1899 bsg_reply->result = rc;
1900 /* complete the job back to userspace if no error */
1901 if (rc == 0)
1902 bsg_job_done(job, bsg_reply->result,
1903 bsg_reply->reply_payload_rcv_len);
1904 return rc;
1905 }
1906
1907 /**
1908 * lpfc_sli4_bsg_set_link_diag_state - set sli4 link diag state
1909 * @phba: Pointer to HBA context object.
1910 * @diag: Flag for set link to diag or nomral operation state.
1911 *
1912 * This function is responsible for issuing a sli4 mailbox command for setting
1913 * link to either diag state or normal operation state.
1914 */
1915 static int
1916 lpfc_sli4_bsg_set_link_diag_state(struct lpfc_hba *phba, uint32_t diag)
1917 {
1918 LPFC_MBOXQ_t *pmboxq;
1919 struct lpfc_mbx_set_link_diag_state *link_diag_state;
1920 uint32_t req_len, alloc_len;
1921 int mbxstatus = MBX_SUCCESS, rc;
1922
1923 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1924 if (!pmboxq)
1925 return -ENOMEM;
1926
1927 req_len = (sizeof(struct lpfc_mbx_set_link_diag_state) -
1928 sizeof(struct lpfc_sli4_cfg_mhdr));
1929 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
1930 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE,
1931 req_len, LPFC_SLI4_MBX_EMBED);
1932 if (alloc_len != req_len) {
1933 rc = -ENOMEM;
1934 goto link_diag_state_set_out;
1935 }
1936 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
1937 "3128 Set link to diagnostic state:x%x (x%x/x%x)\n",
1938 diag, phba->sli4_hba.lnk_info.lnk_tp,
1939 phba->sli4_hba.lnk_info.lnk_no);
1940
1941 link_diag_state = &pmboxq->u.mqe.un.link_diag_state;
1942 bf_set(lpfc_mbx_set_diag_state_diag_bit_valid, &link_diag_state->u.req,
1943 LPFC_DIAG_STATE_DIAG_BIT_VALID_CHANGE);
1944 bf_set(lpfc_mbx_set_diag_state_link_num, &link_diag_state->u.req,
1945 phba->sli4_hba.lnk_info.lnk_no);
1946 bf_set(lpfc_mbx_set_diag_state_link_type, &link_diag_state->u.req,
1947 phba->sli4_hba.lnk_info.lnk_tp);
1948 if (diag)
1949 bf_set(lpfc_mbx_set_diag_state_diag,
1950 &link_diag_state->u.req, 1);
1951 else
1952 bf_set(lpfc_mbx_set_diag_state_diag,
1953 &link_diag_state->u.req, 0);
1954
1955 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
1956
1957 if ((mbxstatus == MBX_SUCCESS) && (pmboxq->u.mb.mbxStatus == 0))
1958 rc = 0;
1959 else
1960 rc = -ENODEV;
1961
1962 link_diag_state_set_out:
1963 if (pmboxq && (mbxstatus != MBX_TIMEOUT))
1964 mempool_free(pmboxq, phba->mbox_mem_pool);
1965
1966 return rc;
1967 }
1968
1969 /**
1970 * lpfc_sli4_bsg_set_internal_loopback - set sli4 internal loopback diagnostic
1971 * @phba: Pointer to HBA context object.
1972 *
1973 * This function is responsible for issuing a sli4 mailbox command for setting
1974 * up internal loopback diagnostic.
1975 */
1976 static int
1977 lpfc_sli4_bsg_set_internal_loopback(struct lpfc_hba *phba)
1978 {
1979 LPFC_MBOXQ_t *pmboxq;
1980 uint32_t req_len, alloc_len;
1981 struct lpfc_mbx_set_link_diag_loopback *link_diag_loopback;
1982 int mbxstatus = MBX_SUCCESS, rc = 0;
1983
1984 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1985 if (!pmboxq)
1986 return -ENOMEM;
1987 req_len = (sizeof(struct lpfc_mbx_set_link_diag_loopback) -
1988 sizeof(struct lpfc_sli4_cfg_mhdr));
1989 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
1990 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_LOOPBACK,
1991 req_len, LPFC_SLI4_MBX_EMBED);
1992 if (alloc_len != req_len) {
1993 mempool_free(pmboxq, phba->mbox_mem_pool);
1994 return -ENOMEM;
1995 }
1996 link_diag_loopback = &pmboxq->u.mqe.un.link_diag_loopback;
1997 bf_set(lpfc_mbx_set_diag_state_link_num,
1998 &link_diag_loopback->u.req, phba->sli4_hba.lnk_info.lnk_no);
1999 bf_set(lpfc_mbx_set_diag_state_link_type,
2000 &link_diag_loopback->u.req, phba->sli4_hba.lnk_info.lnk_tp);
2001 bf_set(lpfc_mbx_set_diag_lpbk_type, &link_diag_loopback->u.req,
2002 LPFC_DIAG_LOOPBACK_TYPE_INTERNAL);
2003
2004 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
2005 if ((mbxstatus != MBX_SUCCESS) || (pmboxq->u.mb.mbxStatus)) {
2006 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2007 "3127 Failed setup loopback mode mailbox "
2008 "command, rc:x%x, status:x%x\n", mbxstatus,
2009 pmboxq->u.mb.mbxStatus);
2010 rc = -ENODEV;
2011 }
2012 if (pmboxq && (mbxstatus != MBX_TIMEOUT))
2013 mempool_free(pmboxq, phba->mbox_mem_pool);
2014 return rc;
2015 }
2016
2017 /**
2018 * lpfc_sli4_diag_fcport_reg_setup - setup port registrations for diagnostic
2019 * @phba: Pointer to HBA context object.
2020 *
2021 * This function set up SLI4 FC port registrations for diagnostic run, which
2022 * includes all the rpis, vfi, and also vpi.
2023 */
2024 static int
2025 lpfc_sli4_diag_fcport_reg_setup(struct lpfc_hba *phba)
2026 {
2027 int rc;
2028
2029 if (phba->pport->fc_flag & FC_VFI_REGISTERED) {
2030 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2031 "3136 Port still had vfi registered: "
2032 "mydid:x%x, fcfi:%d, vfi:%d, vpi:%d\n",
2033 phba->pport->fc_myDID, phba->fcf.fcfi,
2034 phba->sli4_hba.vfi_ids[phba->pport->vfi],
2035 phba->vpi_ids[phba->pport->vpi]);
2036 return -EINVAL;
2037 }
2038 rc = lpfc_issue_reg_vfi(phba->pport);
2039 return rc;
2040 }
2041
2042 /**
2043 * lpfc_sli4_bsg_diag_loopback_mode - process an sli4 bsg vendor command
2044 * @phba: Pointer to HBA context object.
2045 * @job: LPFC_BSG_VENDOR_DIAG_MODE
2046 *
2047 * This function is responsible for placing an sli4 port into diagnostic
2048 * loopback mode in order to perform a diagnostic loopback test.
2049 */
2050 static int
2051 lpfc_sli4_bsg_diag_loopback_mode(struct lpfc_hba *phba, struct bsg_job *job)
2052 {
2053 struct fc_bsg_request *bsg_request = job->request;
2054 struct fc_bsg_reply *bsg_reply = job->reply;
2055 struct diag_mode_set *loopback_mode;
2056 uint32_t link_flags, timeout;
2057 int i, rc = 0;
2058
2059 /* no data to return just the return code */
2060 bsg_reply->reply_payload_rcv_len = 0;
2061
2062 if (job->request_len < sizeof(struct fc_bsg_request) +
2063 sizeof(struct diag_mode_set)) {
2064 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2065 "3011 Received DIAG MODE request size:%d "
2066 "below the minimum size:%d\n",
2067 job->request_len,
2068 (int)(sizeof(struct fc_bsg_request) +
2069 sizeof(struct diag_mode_set)));
2070 rc = -EINVAL;
2071 goto job_error;
2072 }
2073
2074 rc = lpfc_bsg_diag_mode_enter(phba);
2075 if (rc)
2076 goto job_error;
2077
2078 /* indicate we are in loobpack diagnostic mode */
2079 spin_lock_irq(&phba->hbalock);
2080 phba->link_flag |= LS_LOOPBACK_MODE;
2081 spin_unlock_irq(&phba->hbalock);
2082
2083 /* reset port to start frome scratch */
2084 rc = lpfc_selective_reset(phba);
2085 if (rc)
2086 goto job_error;
2087
2088 /* bring the link to diagnostic mode */
2089 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2090 "3129 Bring link to diagnostic state.\n");
2091 loopback_mode = (struct diag_mode_set *)
2092 bsg_request->rqst_data.h_vendor.vendor_cmd;
2093 link_flags = loopback_mode->type;
2094 timeout = loopback_mode->timeout * 100;
2095
2096 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 1);
2097 if (rc) {
2098 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2099 "3130 Failed to bring link to diagnostic "
2100 "state, rc:x%x\n", rc);
2101 goto loopback_mode_exit;
2102 }
2103
2104 /* wait for link down before proceeding */
2105 i = 0;
2106 while (phba->link_state != LPFC_LINK_DOWN) {
2107 if (i++ > timeout) {
2108 rc = -ETIMEDOUT;
2109 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2110 "3131 Timeout waiting for link to "
2111 "diagnostic mode, timeout:%d ms\n",
2112 timeout * 10);
2113 goto loopback_mode_exit;
2114 }
2115 msleep(10);
2116 }
2117
2118 /* set up loopback mode */
2119 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2120 "3132 Set up loopback mode:x%x\n", link_flags);
2121
2122 if (link_flags == INTERNAL_LOOP_BACK)
2123 rc = lpfc_sli4_bsg_set_internal_loopback(phba);
2124 else if (link_flags == EXTERNAL_LOOP_BACK)
2125 rc = lpfc_hba_init_link_fc_topology(phba,
2126 FLAGS_TOPOLOGY_MODE_PT_PT,
2127 MBX_NOWAIT);
2128 else {
2129 rc = -EINVAL;
2130 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
2131 "3141 Loopback mode:x%x not supported\n",
2132 link_flags);
2133 goto loopback_mode_exit;
2134 }
2135
2136 if (!rc) {
2137 /* wait for the link attention interrupt */
2138 msleep(100);
2139 i = 0;
2140 while (phba->link_state < LPFC_LINK_UP) {
2141 if (i++ > timeout) {
2142 rc = -ETIMEDOUT;
2143 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2144 "3137 Timeout waiting for link up "
2145 "in loopback mode, timeout:%d ms\n",
2146 timeout * 10);
2147 break;
2148 }
2149 msleep(10);
2150 }
2151 }
2152
2153 /* port resource registration setup for loopback diagnostic */
2154 if (!rc) {
2155 /* set up a none zero myDID for loopback test */
2156 phba->pport->fc_myDID = 1;
2157 rc = lpfc_sli4_diag_fcport_reg_setup(phba);
2158 } else
2159 goto loopback_mode_exit;
2160
2161 if (!rc) {
2162 /* wait for the port ready */
2163 msleep(100);
2164 i = 0;
2165 while (phba->link_state != LPFC_HBA_READY) {
2166 if (i++ > timeout) {
2167 rc = -ETIMEDOUT;
2168 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2169 "3133 Timeout waiting for port "
2170 "loopback mode ready, timeout:%d ms\n",
2171 timeout * 10);
2172 break;
2173 }
2174 msleep(10);
2175 }
2176 }
2177
2178 loopback_mode_exit:
2179 /* clear loopback diagnostic mode */
2180 if (rc) {
2181 spin_lock_irq(&phba->hbalock);
2182 phba->link_flag &= ~LS_LOOPBACK_MODE;
2183 spin_unlock_irq(&phba->hbalock);
2184 }
2185 lpfc_bsg_diag_mode_exit(phba);
2186
2187 job_error:
2188 /* make error code available to userspace */
2189 bsg_reply->result = rc;
2190 /* complete the job back to userspace if no error */
2191 if (rc == 0)
2192 bsg_job_done(job, bsg_reply->result,
2193 bsg_reply->reply_payload_rcv_len);
2194 return rc;
2195 }
2196
2197 /**
2198 * lpfc_bsg_diag_loopback_mode - bsg vendor command for diag loopback mode
2199 * @job: LPFC_BSG_VENDOR_DIAG_MODE
2200 *
2201 * This function is responsible for responding to check and dispatch bsg diag
2202 * command from the user to proper driver action routines.
2203 */
2204 static int
2205 lpfc_bsg_diag_loopback_mode(struct bsg_job *job)
2206 {
2207 struct Scsi_Host *shost;
2208 struct lpfc_vport *vport;
2209 struct lpfc_hba *phba;
2210 int rc;
2211
2212 shost = fc_bsg_to_shost(job);
2213 if (!shost)
2214 return -ENODEV;
2215 vport = shost_priv(shost);
2216 if (!vport)
2217 return -ENODEV;
2218 phba = vport->phba;
2219 if (!phba)
2220 return -ENODEV;
2221
2222 if (phba->sli_rev < LPFC_SLI_REV4)
2223 rc = lpfc_sli3_bsg_diag_loopback_mode(phba, job);
2224 else if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) ==
2225 LPFC_SLI_INTF_IF_TYPE_2)
2226 rc = lpfc_sli4_bsg_diag_loopback_mode(phba, job);
2227 else
2228 rc = -ENODEV;
2229
2230 return rc;
2231 }
2232
2233 /**
2234 * lpfc_sli4_bsg_diag_mode_end - sli4 bsg vendor command for ending diag mode
2235 * @job: LPFC_BSG_VENDOR_DIAG_MODE_END
2236 *
2237 * This function is responsible for responding to check and dispatch bsg diag
2238 * command from the user to proper driver action routines.
2239 */
2240 static int
2241 lpfc_sli4_bsg_diag_mode_end(struct bsg_job *job)
2242 {
2243 struct fc_bsg_request *bsg_request = job->request;
2244 struct fc_bsg_reply *bsg_reply = job->reply;
2245 struct Scsi_Host *shost;
2246 struct lpfc_vport *vport;
2247 struct lpfc_hba *phba;
2248 struct diag_mode_set *loopback_mode_end_cmd;
2249 uint32_t timeout;
2250 int rc, i;
2251
2252 shost = fc_bsg_to_shost(job);
2253 if (!shost)
2254 return -ENODEV;
2255 vport = shost_priv(shost);
2256 if (!vport)
2257 return -ENODEV;
2258 phba = vport->phba;
2259 if (!phba)
2260 return -ENODEV;
2261
2262 if (phba->sli_rev < LPFC_SLI_REV4)
2263 return -ENODEV;
2264 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
2265 LPFC_SLI_INTF_IF_TYPE_2)
2266 return -ENODEV;
2267
2268 /* clear loopback diagnostic mode */
2269 spin_lock_irq(&phba->hbalock);
2270 phba->link_flag &= ~LS_LOOPBACK_MODE;
2271 spin_unlock_irq(&phba->hbalock);
2272 loopback_mode_end_cmd = (struct diag_mode_set *)
2273 bsg_request->rqst_data.h_vendor.vendor_cmd;
2274 timeout = loopback_mode_end_cmd->timeout * 100;
2275
2276 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 0);
2277 if (rc) {
2278 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2279 "3139 Failed to bring link to diagnostic "
2280 "state, rc:x%x\n", rc);
2281 goto loopback_mode_end_exit;
2282 }
2283
2284 /* wait for link down before proceeding */
2285 i = 0;
2286 while (phba->link_state != LPFC_LINK_DOWN) {
2287 if (i++ > timeout) {
2288 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2289 "3140 Timeout waiting for link to "
2290 "diagnostic mode_end, timeout:%d ms\n",
2291 timeout * 10);
2292 /* there is nothing much we can do here */
2293 break;
2294 }
2295 msleep(10);
2296 }
2297
2298 /* reset port resource registrations */
2299 rc = lpfc_selective_reset(phba);
2300 phba->pport->fc_myDID = 0;
2301
2302 loopback_mode_end_exit:
2303 /* make return code available to userspace */
2304 bsg_reply->result = rc;
2305 /* complete the job back to userspace if no error */
2306 if (rc == 0)
2307 bsg_job_done(job, bsg_reply->result,
2308 bsg_reply->reply_payload_rcv_len);
2309 return rc;
2310 }
2311
2312 /**
2313 * lpfc_sli4_bsg_link_diag_test - sli4 bsg vendor command for diag link test
2314 * @job: LPFC_BSG_VENDOR_DIAG_LINK_TEST
2315 *
2316 * This function is to perform SLI4 diag link test request from the user
2317 * applicaiton.
2318 */
2319 static int
2320 lpfc_sli4_bsg_link_diag_test(struct bsg_job *job)
2321 {
2322 struct fc_bsg_request *bsg_request = job->request;
2323 struct fc_bsg_reply *bsg_reply = job->reply;
2324 struct Scsi_Host *shost;
2325 struct lpfc_vport *vport;
2326 struct lpfc_hba *phba;
2327 LPFC_MBOXQ_t *pmboxq;
2328 struct sli4_link_diag *link_diag_test_cmd;
2329 uint32_t req_len, alloc_len;
2330 struct lpfc_mbx_run_link_diag_test *run_link_diag_test;
2331 union lpfc_sli4_cfg_shdr *shdr;
2332 uint32_t shdr_status, shdr_add_status;
2333 struct diag_status *diag_status_reply;
2334 int mbxstatus, rc = 0;
2335
2336 shost = fc_bsg_to_shost(job);
2337 if (!shost) {
2338 rc = -ENODEV;
2339 goto job_error;
2340 }
2341 vport = shost_priv(shost);
2342 if (!vport) {
2343 rc = -ENODEV;
2344 goto job_error;
2345 }
2346 phba = vport->phba;
2347 if (!phba) {
2348 rc = -ENODEV;
2349 goto job_error;
2350 }
2351
2352 if (phba->sli_rev < LPFC_SLI_REV4) {
2353 rc = -ENODEV;
2354 goto job_error;
2355 }
2356 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
2357 LPFC_SLI_INTF_IF_TYPE_2) {
2358 rc = -ENODEV;
2359 goto job_error;
2360 }
2361
2362 if (job->request_len < sizeof(struct fc_bsg_request) +
2363 sizeof(struct sli4_link_diag)) {
2364 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2365 "3013 Received LINK DIAG TEST request "
2366 " size:%d below the minimum size:%d\n",
2367 job->request_len,
2368 (int)(sizeof(struct fc_bsg_request) +
2369 sizeof(struct sli4_link_diag)));
2370 rc = -EINVAL;
2371 goto job_error;
2372 }
2373
2374 rc = lpfc_bsg_diag_mode_enter(phba);
2375 if (rc)
2376 goto job_error;
2377
2378 link_diag_test_cmd = (struct sli4_link_diag *)
2379 bsg_request->rqst_data.h_vendor.vendor_cmd;
2380
2381 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 1);
2382
2383 if (rc)
2384 goto job_error;
2385
2386 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2387 if (!pmboxq)
2388 goto link_diag_test_exit;
2389
2390 req_len = (sizeof(struct lpfc_mbx_set_link_diag_state) -
2391 sizeof(struct lpfc_sli4_cfg_mhdr));
2392 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
2393 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE,
2394 req_len, LPFC_SLI4_MBX_EMBED);
2395 if (alloc_len != req_len)
2396 goto link_diag_test_exit;
2397
2398 run_link_diag_test = &pmboxq->u.mqe.un.link_diag_test;
2399 bf_set(lpfc_mbx_run_diag_test_link_num, &run_link_diag_test->u.req,
2400 phba->sli4_hba.lnk_info.lnk_no);
2401 bf_set(lpfc_mbx_run_diag_test_link_type, &run_link_diag_test->u.req,
2402 phba->sli4_hba.lnk_info.lnk_tp);
2403 bf_set(lpfc_mbx_run_diag_test_test_id, &run_link_diag_test->u.req,
2404 link_diag_test_cmd->test_id);
2405 bf_set(lpfc_mbx_run_diag_test_loops, &run_link_diag_test->u.req,
2406 link_diag_test_cmd->loops);
2407 bf_set(lpfc_mbx_run_diag_test_test_ver, &run_link_diag_test->u.req,
2408 link_diag_test_cmd->test_version);
2409 bf_set(lpfc_mbx_run_diag_test_err_act, &run_link_diag_test->u.req,
2410 link_diag_test_cmd->error_action);
2411
2412 mbxstatus = lpfc_sli_issue_mbox(phba, pmboxq, MBX_POLL);
2413
2414 shdr = (union lpfc_sli4_cfg_shdr *)
2415 &pmboxq->u.mqe.un.sli4_config.header.cfg_shdr;
2416 shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
2417 shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
2418 if (shdr_status || shdr_add_status || mbxstatus) {
2419 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
2420 "3010 Run link diag test mailbox failed with "
2421 "mbx_status x%x status x%x, add_status x%x\n",
2422 mbxstatus, shdr_status, shdr_add_status);
2423 }
2424
2425 diag_status_reply = (struct diag_status *)
2426 bsg_reply->reply_data.vendor_reply.vendor_rsp;
2427
2428 if (job->reply_len <
2429 sizeof(struct fc_bsg_request) + sizeof(struct diag_status)) {
2430 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2431 "3012 Received Run link diag test reply "
2432 "below minimum size (%d): reply_len:%d\n",
2433 (int)(sizeof(struct fc_bsg_request) +
2434 sizeof(struct diag_status)),
2435 job->reply_len);
2436 rc = -EINVAL;
2437 goto job_error;
2438 }
2439
2440 diag_status_reply->mbox_status = mbxstatus;
2441 diag_status_reply->shdr_status = shdr_status;
2442 diag_status_reply->shdr_add_status = shdr_add_status;
2443
2444 link_diag_test_exit:
2445 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 0);
2446
2447 if (pmboxq)
2448 mempool_free(pmboxq, phba->mbox_mem_pool);
2449
2450 lpfc_bsg_diag_mode_exit(phba);
2451
2452 job_error:
2453 /* make error code available to userspace */
2454 bsg_reply->result = rc;
2455 /* complete the job back to userspace if no error */
2456 if (rc == 0)
2457 bsg_job_done(job, bsg_reply->result,
2458 bsg_reply->reply_payload_rcv_len);
2459 return rc;
2460 }
2461
2462 /**
2463 * lpfcdiag_loop_self_reg - obtains a remote port login id
2464 * @phba: Pointer to HBA context object
2465 * @rpi: Pointer to a remote port login id
2466 *
2467 * This function obtains a remote port login id so the diag loopback test
2468 * can send and receive its own unsolicited CT command.
2469 **/
2470 static int lpfcdiag_loop_self_reg(struct lpfc_hba *phba, uint16_t *rpi)
2471 {
2472 LPFC_MBOXQ_t *mbox;
2473 struct lpfc_dmabuf *dmabuff;
2474 int status;
2475
2476 mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2477 if (!mbox)
2478 return -ENOMEM;
2479
2480 if (phba->sli_rev < LPFC_SLI_REV4)
2481 status = lpfc_reg_rpi(phba, 0, phba->pport->fc_myDID,
2482 (uint8_t *)&phba->pport->fc_sparam,
2483 mbox, *rpi);
2484 else {
2485 *rpi = lpfc_sli4_alloc_rpi(phba);
2486 if (*rpi == LPFC_RPI_ALLOC_ERROR) {
2487 mempool_free(mbox, phba->mbox_mem_pool);
2488 return -EBUSY;
2489 }
2490 status = lpfc_reg_rpi(phba, phba->pport->vpi,
2491 phba->pport->fc_myDID,
2492 (uint8_t *)&phba->pport->fc_sparam,
2493 mbox, *rpi);
2494 }
2495
2496 if (status) {
2497 mempool_free(mbox, phba->mbox_mem_pool);
2498 if (phba->sli_rev == LPFC_SLI_REV4)
2499 lpfc_sli4_free_rpi(phba, *rpi);
2500 return -ENOMEM;
2501 }
2502
2503 dmabuff = (struct lpfc_dmabuf *) mbox->context1;
2504 mbox->context1 = NULL;
2505 mbox->context2 = NULL;
2506 status = lpfc_sli_issue_mbox_wait(phba, mbox, LPFC_MBOX_TMO);
2507
2508 if ((status != MBX_SUCCESS) || (mbox->u.mb.mbxStatus)) {
2509 lpfc_mbuf_free(phba, dmabuff->virt, dmabuff->phys);
2510 kfree(dmabuff);
2511 if (status != MBX_TIMEOUT)
2512 mempool_free(mbox, phba->mbox_mem_pool);
2513 if (phba->sli_rev == LPFC_SLI_REV4)
2514 lpfc_sli4_free_rpi(phba, *rpi);
2515 return -ENODEV;
2516 }
2517
2518 if (phba->sli_rev < LPFC_SLI_REV4)
2519 *rpi = mbox->u.mb.un.varWords[0];
2520
2521 lpfc_mbuf_free(phba, dmabuff->virt, dmabuff->phys);
2522 kfree(dmabuff);
2523 mempool_free(mbox, phba->mbox_mem_pool);
2524 return 0;
2525 }
2526
2527 /**
2528 * lpfcdiag_loop_self_unreg - unregs from the rpi
2529 * @phba: Pointer to HBA context object
2530 * @rpi: Remote port login id
2531 *
2532 * This function unregisters the rpi obtained in lpfcdiag_loop_self_reg
2533 **/
2534 static int lpfcdiag_loop_self_unreg(struct lpfc_hba *phba, uint16_t rpi)
2535 {
2536 LPFC_MBOXQ_t *mbox;
2537 int status;
2538
2539 /* Allocate mboxq structure */
2540 mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2541 if (mbox == NULL)
2542 return -ENOMEM;
2543
2544 if (phba->sli_rev < LPFC_SLI_REV4)
2545 lpfc_unreg_login(phba, 0, rpi, mbox);
2546 else
2547 lpfc_unreg_login(phba, phba->pport->vpi,
2548 phba->sli4_hba.rpi_ids[rpi], mbox);
2549
2550 status = lpfc_sli_issue_mbox_wait(phba, mbox, LPFC_MBOX_TMO);
2551
2552 if ((status != MBX_SUCCESS) || (mbox->u.mb.mbxStatus)) {
2553 if (status != MBX_TIMEOUT)
2554 mempool_free(mbox, phba->mbox_mem_pool);
2555 return -EIO;
2556 }
2557 mempool_free(mbox, phba->mbox_mem_pool);
2558 if (phba->sli_rev == LPFC_SLI_REV4)
2559 lpfc_sli4_free_rpi(phba, rpi);
2560 return 0;
2561 }
2562
2563 /**
2564 * lpfcdiag_loop_get_xri - obtains the transmit and receive ids
2565 * @phba: Pointer to HBA context object
2566 * @rpi: Remote port login id
2567 * @txxri: Pointer to transmit exchange id
2568 * @rxxri: Pointer to response exchabge id
2569 *
2570 * This function obtains the transmit and receive ids required to send
2571 * an unsolicited ct command with a payload. A special lpfc FsType and CmdRsp
2572 * flags are used to the unsolicted response handler is able to process
2573 * the ct command sent on the same port.
2574 **/
2575 static int lpfcdiag_loop_get_xri(struct lpfc_hba *phba, uint16_t rpi,
2576 uint16_t *txxri, uint16_t * rxxri)
2577 {
2578 struct lpfc_bsg_event *evt;
2579 struct lpfc_iocbq *cmdiocbq, *rspiocbq;
2580 IOCB_t *cmd, *rsp;
2581 struct lpfc_dmabuf *dmabuf;
2582 struct ulp_bde64 *bpl = NULL;
2583 struct lpfc_sli_ct_request *ctreq = NULL;
2584 int ret_val = 0;
2585 int time_left;
2586 int iocb_stat = IOCB_SUCCESS;
2587 unsigned long flags;
2588
2589 *txxri = 0;
2590 *rxxri = 0;
2591 evt = lpfc_bsg_event_new(FC_REG_CT_EVENT, current->pid,
2592 SLI_CT_ELX_LOOPBACK);
2593 if (!evt)
2594 return -ENOMEM;
2595
2596 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2597 list_add(&evt->node, &phba->ct_ev_waiters);
2598 lpfc_bsg_event_ref(evt);
2599 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2600
2601 cmdiocbq = lpfc_sli_get_iocbq(phba);
2602 rspiocbq = lpfc_sli_get_iocbq(phba);
2603
2604 dmabuf = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2605 if (dmabuf) {
2606 dmabuf->virt = lpfc_mbuf_alloc(phba, 0, &dmabuf->phys);
2607 if (dmabuf->virt) {
2608 INIT_LIST_HEAD(&dmabuf->list);
2609 bpl = (struct ulp_bde64 *) dmabuf->virt;
2610 memset(bpl, 0, sizeof(*bpl));
2611 ctreq = (struct lpfc_sli_ct_request *)(bpl + 1);
2612 bpl->addrHigh =
2613 le32_to_cpu(putPaddrHigh(dmabuf->phys +
2614 sizeof(*bpl)));
2615 bpl->addrLow =
2616 le32_to_cpu(putPaddrLow(dmabuf->phys +
2617 sizeof(*bpl)));
2618 bpl->tus.f.bdeFlags = 0;
2619 bpl->tus.f.bdeSize = ELX_LOOPBACK_HEADER_SZ;
2620 bpl->tus.w = le32_to_cpu(bpl->tus.w);
2621 }
2622 }
2623
2624 if (cmdiocbq == NULL || rspiocbq == NULL ||
2625 dmabuf == NULL || bpl == NULL || ctreq == NULL ||
2626 dmabuf->virt == NULL) {
2627 ret_val = -ENOMEM;
2628 goto err_get_xri_exit;
2629 }
2630
2631 cmd = &cmdiocbq->iocb;
2632 rsp = &rspiocbq->iocb;
2633
2634 memset(ctreq, 0, ELX_LOOPBACK_HEADER_SZ);
2635
2636 ctreq->RevisionId.bits.Revision = SLI_CT_REVISION;
2637 ctreq->RevisionId.bits.InId = 0;
2638 ctreq->FsType = SLI_CT_ELX_LOOPBACK;
2639 ctreq->FsSubType = 0;
2640 ctreq->CommandResponse.bits.CmdRsp = ELX_LOOPBACK_XRI_SETUP;
2641 ctreq->CommandResponse.bits.Size = 0;
2642
2643
2644 cmd->un.xseq64.bdl.addrHigh = putPaddrHigh(dmabuf->phys);
2645 cmd->un.xseq64.bdl.addrLow = putPaddrLow(dmabuf->phys);
2646 cmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
2647 cmd->un.xseq64.bdl.bdeSize = sizeof(*bpl);
2648
2649 cmd->un.xseq64.w5.hcsw.Fctl = LA;
2650 cmd->un.xseq64.w5.hcsw.Dfctl = 0;
2651 cmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
2652 cmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
2653
2654 cmd->ulpCommand = CMD_XMIT_SEQUENCE64_CR;
2655 cmd->ulpBdeCount = 1;
2656 cmd->ulpLe = 1;
2657 cmd->ulpClass = CLASS3;
2658 cmd->ulpContext = rpi;
2659
2660 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
2661 cmdiocbq->vport = phba->pport;
2662 cmdiocbq->iocb_cmpl = NULL;
2663
2664 iocb_stat = lpfc_sli_issue_iocb_wait(phba, LPFC_ELS_RING, cmdiocbq,
2665 rspiocbq,
2666 (phba->fc_ratov * 2)
2667 + LPFC_DRVR_TIMEOUT);
2668 if ((iocb_stat != IOCB_SUCCESS) || (rsp->ulpStatus != IOSTAT_SUCCESS)) {
2669 ret_val = -EIO;
2670 goto err_get_xri_exit;
2671 }
2672 *txxri = rsp->ulpContext;
2673
2674 evt->waiting = 1;
2675 evt->wait_time_stamp = jiffies;
2676 time_left = wait_event_interruptible_timeout(
2677 evt->wq, !list_empty(&evt->events_to_see),
2678 msecs_to_jiffies(1000 *
2679 ((phba->fc_ratov * 2) + LPFC_DRVR_TIMEOUT)));
2680 if (list_empty(&evt->events_to_see))
2681 ret_val = (time_left) ? -EINTR : -ETIMEDOUT;
2682 else {
2683 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2684 list_move(evt->events_to_see.prev, &evt->events_to_get);
2685 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2686 *rxxri = (list_entry(evt->events_to_get.prev,
2687 typeof(struct event_data),
2688 node))->immed_dat;
2689 }
2690 evt->waiting = 0;
2691
2692 err_get_xri_exit:
2693 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2694 lpfc_bsg_event_unref(evt); /* release ref */
2695 lpfc_bsg_event_unref(evt); /* delete */
2696 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2697
2698 if (dmabuf) {
2699 if (dmabuf->virt)
2700 lpfc_mbuf_free(phba, dmabuf->virt, dmabuf->phys);
2701 kfree(dmabuf);
2702 }
2703
2704 if (cmdiocbq && (iocb_stat != IOCB_TIMEDOUT))
2705 lpfc_sli_release_iocbq(phba, cmdiocbq);
2706 if (rspiocbq)
2707 lpfc_sli_release_iocbq(phba, rspiocbq);
2708 return ret_val;
2709 }
2710
2711 /**
2712 * lpfc_bsg_dma_page_alloc - allocate a bsg mbox page sized dma buffers
2713 * @phba: Pointer to HBA context object
2714 *
2715 * This function allocates BSG_MBOX_SIZE (4KB) page size dma buffer and
2716 * returns the pointer to the buffer.
2717 **/
2718 static struct lpfc_dmabuf *
2719 lpfc_bsg_dma_page_alloc(struct lpfc_hba *phba)
2720 {
2721 struct lpfc_dmabuf *dmabuf;
2722 struct pci_dev *pcidev = phba->pcidev;
2723
2724 /* allocate dma buffer struct */
2725 dmabuf = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2726 if (!dmabuf)
2727 return NULL;
2728
2729 INIT_LIST_HEAD(&dmabuf->list);
2730
2731 /* now, allocate dma buffer */
2732 dmabuf->virt = dma_zalloc_coherent(&pcidev->dev, BSG_MBOX_SIZE,
2733 &(dmabuf->phys), GFP_KERNEL);
2734
2735 if (!dmabuf->virt) {
2736 kfree(dmabuf);
2737 return NULL;
2738 }
2739
2740 return dmabuf;
2741 }
2742
2743 /**
2744 * lpfc_bsg_dma_page_free - free a bsg mbox page sized dma buffer
2745 * @phba: Pointer to HBA context object.
2746 * @dmabuf: Pointer to the bsg mbox page sized dma buffer descriptor.
2747 *
2748 * This routine just simply frees a dma buffer and its associated buffer
2749 * descriptor referred by @dmabuf.
2750 **/
2751 static void
2752 lpfc_bsg_dma_page_free(struct lpfc_hba *phba, struct lpfc_dmabuf *dmabuf)
2753 {
2754 struct pci_dev *pcidev = phba->pcidev;
2755
2756 if (!dmabuf)
2757 return;
2758
2759 if (dmabuf->virt)
2760 dma_free_coherent(&pcidev->dev, BSG_MBOX_SIZE,
2761 dmabuf->virt, dmabuf->phys);
2762 kfree(dmabuf);
2763 return;
2764 }
2765
2766 /**
2767 * lpfc_bsg_dma_page_list_free - free a list of bsg mbox page sized dma buffers
2768 * @phba: Pointer to HBA context object.
2769 * @dmabuf_list: Pointer to a list of bsg mbox page sized dma buffer descs.
2770 *
2771 * This routine just simply frees all dma buffers and their associated buffer
2772 * descriptors referred by @dmabuf_list.
2773 **/
2774 static void
2775 lpfc_bsg_dma_page_list_free(struct lpfc_hba *phba,
2776 struct list_head *dmabuf_list)
2777 {
2778 struct lpfc_dmabuf *dmabuf, *next_dmabuf;
2779
2780 if (list_empty(dmabuf_list))
2781 return;
2782
2783 list_for_each_entry_safe(dmabuf, next_dmabuf, dmabuf_list, list) {
2784 list_del_init(&dmabuf->list);
2785 lpfc_bsg_dma_page_free(phba, dmabuf);
2786 }
2787 return;
2788 }
2789
2790 /**
2791 * diag_cmd_data_alloc - fills in a bde struct with dma buffers
2792 * @phba: Pointer to HBA context object
2793 * @bpl: Pointer to 64 bit bde structure
2794 * @size: Number of bytes to process
2795 * @nocopydata: Flag to copy user data into the allocated buffer
2796 *
2797 * This function allocates page size buffers and populates an lpfc_dmabufext.
2798 * If allowed the user data pointed to with indataptr is copied into the kernel
2799 * memory. The chained list of page size buffers is returned.
2800 **/
2801 static struct lpfc_dmabufext *
2802 diag_cmd_data_alloc(struct lpfc_hba *phba,
2803 struct ulp_bde64 *bpl, uint32_t size,
2804 int nocopydata)
2805 {
2806 struct lpfc_dmabufext *mlist = NULL;
2807 struct lpfc_dmabufext *dmp;
2808 int cnt, offset = 0, i = 0;
2809 struct pci_dev *pcidev;
2810
2811 pcidev = phba->pcidev;
2812
2813 while (size) {
2814 /* We get chunks of 4K */
2815 if (size > BUF_SZ_4K)
2816 cnt = BUF_SZ_4K;
2817 else
2818 cnt = size;
2819
2820 /* allocate struct lpfc_dmabufext buffer header */
2821 dmp = kmalloc(sizeof(struct lpfc_dmabufext), GFP_KERNEL);
2822 if (!dmp)
2823 goto out;
2824
2825 INIT_LIST_HEAD(&dmp->dma.list);
2826
2827 /* Queue it to a linked list */
2828 if (mlist)
2829 list_add_tail(&dmp->dma.list, &mlist->dma.list);
2830 else
2831 mlist = dmp;
2832
2833 /* allocate buffer */
2834 dmp->dma.virt = dma_alloc_coherent(&pcidev->dev,
2835 cnt,
2836 &(dmp->dma.phys),
2837 GFP_KERNEL);
2838
2839 if (!dmp->dma.virt)
2840 goto out;
2841
2842 dmp->size = cnt;
2843
2844 if (nocopydata) {
2845 bpl->tus.f.bdeFlags = 0;
2846 pci_dma_sync_single_for_device(phba->pcidev,
2847 dmp->dma.phys, LPFC_BPL_SIZE, PCI_DMA_TODEVICE);
2848
2849 } else {
2850 memset((uint8_t *)dmp->dma.virt, 0, cnt);
2851 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
2852 }
2853
2854 /* build buffer ptr list for IOCB */
2855 bpl->addrLow = le32_to_cpu(putPaddrLow(dmp->dma.phys));
2856 bpl->addrHigh = le32_to_cpu(putPaddrHigh(dmp->dma.phys));
2857 bpl->tus.f.bdeSize = (ushort) cnt;
2858 bpl->tus.w = le32_to_cpu(bpl->tus.w);
2859 bpl++;
2860
2861 i++;
2862 offset += cnt;
2863 size -= cnt;
2864 }
2865
2866 if (mlist) {
2867 mlist->flag = i;
2868 return mlist;
2869 }
2870 out:
2871 diag_cmd_data_free(phba, mlist);
2872 return NULL;
2873 }
2874
2875 /**
2876 * lpfcdiag_loop_post_rxbufs - post the receive buffers for an unsol CT cmd
2877 * @phba: Pointer to HBA context object
2878 * @rxxri: Receive exchange id
2879 * @len: Number of data bytes
2880 *
2881 * This function allocates and posts a data buffer of sufficient size to receive
2882 * an unsolicted CT command.
2883 **/
2884 static int lpfcdiag_loop_post_rxbufs(struct lpfc_hba *phba, uint16_t rxxri,
2885 size_t len)
2886 {
2887 struct lpfc_sli_ring *pring;
2888 struct lpfc_iocbq *cmdiocbq;
2889 IOCB_t *cmd = NULL;
2890 struct list_head head, *curr, *next;
2891 struct lpfc_dmabuf *rxbmp;
2892 struct lpfc_dmabuf *dmp;
2893 struct lpfc_dmabuf *mp[2] = {NULL, NULL};
2894 struct ulp_bde64 *rxbpl = NULL;
2895 uint32_t num_bde;
2896 struct lpfc_dmabufext *rxbuffer = NULL;
2897 int ret_val = 0;
2898 int iocb_stat;
2899 int i = 0;
2900
2901 pring = lpfc_phba_elsring(phba);
2902
2903 cmdiocbq = lpfc_sli_get_iocbq(phba);
2904 rxbmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2905 if (rxbmp != NULL) {
2906 rxbmp->virt = lpfc_mbuf_alloc(phba, 0, &rxbmp->phys);
2907 if (rxbmp->virt) {
2908 INIT_LIST_HEAD(&rxbmp->list);
2909 rxbpl = (struct ulp_bde64 *) rxbmp->virt;
2910 rxbuffer = diag_cmd_data_alloc(phba, rxbpl, len, 0);
2911 }
2912 }
2913
2914 if (!cmdiocbq || !rxbmp || !rxbpl || !rxbuffer || !pring) {
2915 ret_val = -ENOMEM;
2916 goto err_post_rxbufs_exit;
2917 }
2918
2919 /* Queue buffers for the receive exchange */
2920 num_bde = (uint32_t)rxbuffer->flag;
2921 dmp = &rxbuffer->dma;
2922
2923 cmd = &cmdiocbq->iocb;
2924 i = 0;
2925
2926 INIT_LIST_HEAD(&head);
2927 list_add_tail(&head, &dmp->list);
2928 list_for_each_safe(curr, next, &head) {
2929 mp[i] = list_entry(curr, struct lpfc_dmabuf, list);
2930 list_del(curr);
2931
2932 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
2933 mp[i]->buffer_tag = lpfc_sli_get_buffer_tag(phba);
2934 cmd->un.quexri64cx.buff.bde.addrHigh =
2935 putPaddrHigh(mp[i]->phys);
2936 cmd->un.quexri64cx.buff.bde.addrLow =
2937 putPaddrLow(mp[i]->phys);
2938 cmd->un.quexri64cx.buff.bde.tus.f.bdeSize =
2939 ((struct lpfc_dmabufext *)mp[i])->size;
2940 cmd->un.quexri64cx.buff.buffer_tag = mp[i]->buffer_tag;
2941 cmd->ulpCommand = CMD_QUE_XRI64_CX;
2942 cmd->ulpPU = 0;
2943 cmd->ulpLe = 1;
2944 cmd->ulpBdeCount = 1;
2945 cmd->unsli3.que_xri64cx_ext_words.ebde_count = 0;
2946
2947 } else {
2948 cmd->un.cont64[i].addrHigh = putPaddrHigh(mp[i]->phys);
2949 cmd->un.cont64[i].addrLow = putPaddrLow(mp[i]->phys);
2950 cmd->un.cont64[i].tus.f.bdeSize =
2951 ((struct lpfc_dmabufext *)mp[i])->size;
2952 cmd->ulpBdeCount = ++i;
2953
2954 if ((--num_bde > 0) && (i < 2))
2955 continue;
2956
2957 cmd->ulpCommand = CMD_QUE_XRI_BUF64_CX;
2958 cmd->ulpLe = 1;
2959 }
2960
2961 cmd->ulpClass = CLASS3;
2962 cmd->ulpContext = rxxri;
2963
2964 iocb_stat = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq,
2965 0);
2966 if (iocb_stat == IOCB_ERROR) {
2967 diag_cmd_data_free(phba,
2968 (struct lpfc_dmabufext *)mp[0]);
2969 if (mp[1])
2970 diag_cmd_data_free(phba,
2971 (struct lpfc_dmabufext *)mp[1]);
2972 dmp = list_entry(next, struct lpfc_dmabuf, list);
2973 ret_val = -EIO;
2974 goto err_post_rxbufs_exit;
2975 }
2976
2977 lpfc_sli_ringpostbuf_put(phba, pring, mp[0]);
2978 if (mp[1]) {
2979 lpfc_sli_ringpostbuf_put(phba, pring, mp[1]);
2980 mp[1] = NULL;
2981 }
2982
2983 /* The iocb was freed by lpfc_sli_issue_iocb */
2984 cmdiocbq = lpfc_sli_get_iocbq(phba);
2985 if (!cmdiocbq) {
2986 dmp = list_entry(next, struct lpfc_dmabuf, list);
2987 ret_val = -EIO;
2988 goto err_post_rxbufs_exit;
2989 }
2990
2991 cmd = &cmdiocbq->iocb;
2992 i = 0;
2993 }
2994 list_del(&head);
2995
2996 err_post_rxbufs_exit:
2997
2998 if (rxbmp) {
2999 if (rxbmp->virt)
3000 lpfc_mbuf_free(phba, rxbmp->virt, rxbmp->phys);
3001 kfree(rxbmp);
3002 }
3003
3004 if (cmdiocbq)
3005 lpfc_sli_release_iocbq(phba, cmdiocbq);
3006 return ret_val;
3007 }
3008
3009 /**
3010 * lpfc_bsg_diag_loopback_run - run loopback on a port by issue ct cmd to itself
3011 * @job: LPFC_BSG_VENDOR_DIAG_TEST fc_bsg_job
3012 *
3013 * This function receives a user data buffer to be transmitted and received on
3014 * the same port, the link must be up and in loopback mode prior
3015 * to being called.
3016 * 1. A kernel buffer is allocated to copy the user data into.
3017 * 2. The port registers with "itself".
3018 * 3. The transmit and receive exchange ids are obtained.
3019 * 4. The receive exchange id is posted.
3020 * 5. A new els loopback event is created.
3021 * 6. The command and response iocbs are allocated.
3022 * 7. The cmd iocb FsType is set to elx loopback and the CmdRsp to looppback.
3023 *
3024 * This function is meant to be called n times while the port is in loopback
3025 * so it is the apps responsibility to issue a reset to take the port out
3026 * of loopback mode.
3027 **/
3028 static int
3029 lpfc_bsg_diag_loopback_run(struct bsg_job *job)
3030 {
3031 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
3032 struct fc_bsg_reply *bsg_reply = job->reply;
3033 struct lpfc_hba *phba = vport->phba;
3034 struct lpfc_bsg_event *evt;
3035 struct event_data *evdat;
3036 struct lpfc_sli *psli = &phba->sli;
3037 uint32_t size;
3038 uint32_t full_size;
3039 size_t segment_len = 0, segment_offset = 0, current_offset = 0;
3040 uint16_t rpi = 0;
3041 struct lpfc_iocbq *cmdiocbq, *rspiocbq = NULL;
3042 IOCB_t *cmd, *rsp = NULL;
3043 struct lpfc_sli_ct_request *ctreq;
3044 struct lpfc_dmabuf *txbmp;
3045 struct ulp_bde64 *txbpl = NULL;
3046 struct lpfc_dmabufext *txbuffer = NULL;
3047 struct list_head head;
3048 struct lpfc_dmabuf *curr;
3049 uint16_t txxri = 0, rxxri;
3050 uint32_t num_bde;
3051 uint8_t *ptr = NULL, *rx_databuf = NULL;
3052 int rc = 0;
3053 int time_left;
3054 int iocb_stat = IOCB_SUCCESS;
3055 unsigned long flags;
3056 void *dataout = NULL;
3057 uint32_t total_mem;
3058
3059 /* in case no data is returned return just the return code */
3060 bsg_reply->reply_payload_rcv_len = 0;
3061
3062 if (job->request_len <
3063 sizeof(struct fc_bsg_request) + sizeof(struct diag_mode_test)) {
3064 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3065 "2739 Received DIAG TEST request below minimum "
3066 "size\n");
3067 rc = -EINVAL;
3068 goto loopback_test_exit;
3069 }
3070
3071 if (job->request_payload.payload_len !=
3072 job->reply_payload.payload_len) {
3073 rc = -EINVAL;
3074 goto loopback_test_exit;
3075 }
3076
3077 if ((phba->link_state == LPFC_HBA_ERROR) ||
3078 (psli->sli_flag & LPFC_BLOCK_MGMT_IO) ||
3079 (!(psli->sli_flag & LPFC_SLI_ACTIVE))) {
3080 rc = -EACCES;
3081 goto loopback_test_exit;
3082 }
3083
3084 if (!lpfc_is_link_up(phba) || !(phba->link_flag & LS_LOOPBACK_MODE)) {
3085 rc = -EACCES;
3086 goto loopback_test_exit;
3087 }
3088
3089 size = job->request_payload.payload_len;
3090 full_size = size + ELX_LOOPBACK_HEADER_SZ; /* plus the header */
3091
3092 if ((size == 0) || (size > 80 * BUF_SZ_4K)) {
3093 rc = -ERANGE;
3094 goto loopback_test_exit;
3095 }
3096
3097 if (full_size >= BUF_SZ_4K) {
3098 /*
3099 * Allocate memory for ioctl data. If buffer is bigger than 64k,
3100 * then we allocate 64k and re-use that buffer over and over to
3101 * xfer the whole block. This is because Linux kernel has a
3102 * problem allocating more than 120k of kernel space memory. Saw
3103 * problem with GET_FCPTARGETMAPPING...
3104 */
3105 if (size <= (64 * 1024))
3106 total_mem = full_size;
3107 else
3108 total_mem = 64 * 1024;
3109 } else
3110 /* Allocate memory for ioctl data */
3111 total_mem = BUF_SZ_4K;
3112
3113 dataout = kmalloc(total_mem, GFP_KERNEL);
3114 if (dataout == NULL) {
3115 rc = -ENOMEM;
3116 goto loopback_test_exit;
3117 }
3118
3119 ptr = dataout;
3120 ptr += ELX_LOOPBACK_HEADER_SZ;
3121 sg_copy_to_buffer(job->request_payload.sg_list,
3122 job->request_payload.sg_cnt,
3123 ptr, size);
3124 rc = lpfcdiag_loop_self_reg(phba, &rpi);
3125 if (rc)
3126 goto loopback_test_exit;
3127
3128 if (phba->sli_rev < LPFC_SLI_REV4) {
3129 rc = lpfcdiag_loop_get_xri(phba, rpi, &txxri, &rxxri);
3130 if (rc) {
3131 lpfcdiag_loop_self_unreg(phba, rpi);
3132 goto loopback_test_exit;
3133 }
3134
3135 rc = lpfcdiag_loop_post_rxbufs(phba, rxxri, full_size);
3136 if (rc) {
3137 lpfcdiag_loop_self_unreg(phba, rpi);
3138 goto loopback_test_exit;
3139 }
3140 }
3141 evt = lpfc_bsg_event_new(FC_REG_CT_EVENT, current->pid,
3142 SLI_CT_ELX_LOOPBACK);
3143 if (!evt) {
3144 lpfcdiag_loop_self_unreg(phba, rpi);
3145 rc = -ENOMEM;
3146 goto loopback_test_exit;
3147 }
3148
3149 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3150 list_add(&evt->node, &phba->ct_ev_waiters);
3151 lpfc_bsg_event_ref(evt);
3152 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3153
3154 cmdiocbq = lpfc_sli_get_iocbq(phba);
3155 if (phba->sli_rev < LPFC_SLI_REV4)
3156 rspiocbq = lpfc_sli_get_iocbq(phba);
3157 txbmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
3158
3159 if (txbmp) {
3160 txbmp->virt = lpfc_mbuf_alloc(phba, 0, &txbmp->phys);
3161 if (txbmp->virt) {
3162 INIT_LIST_HEAD(&txbmp->list);
3163 txbpl = (struct ulp_bde64 *) txbmp->virt;
3164 txbuffer = diag_cmd_data_alloc(phba,
3165 txbpl, full_size, 0);
3166 }
3167 }
3168
3169 if (!cmdiocbq || !txbmp || !txbpl || !txbuffer || !txbmp->virt) {
3170 rc = -ENOMEM;
3171 goto err_loopback_test_exit;
3172 }
3173 if ((phba->sli_rev < LPFC_SLI_REV4) && !rspiocbq) {
3174 rc = -ENOMEM;
3175 goto err_loopback_test_exit;
3176 }
3177
3178 cmd = &cmdiocbq->iocb;
3179 if (phba->sli_rev < LPFC_SLI_REV4)
3180 rsp = &rspiocbq->iocb;
3181
3182 INIT_LIST_HEAD(&head);
3183 list_add_tail(&head, &txbuffer->dma.list);
3184 list_for_each_entry(curr, &head, list) {
3185 segment_len = ((struct lpfc_dmabufext *)curr)->size;
3186 if (current_offset == 0) {
3187 ctreq = curr->virt;
3188 memset(ctreq, 0, ELX_LOOPBACK_HEADER_SZ);
3189 ctreq->RevisionId.bits.Revision = SLI_CT_REVISION;
3190 ctreq->RevisionId.bits.InId = 0;
3191 ctreq->FsType = SLI_CT_ELX_LOOPBACK;
3192 ctreq->FsSubType = 0;
3193 ctreq->CommandResponse.bits.CmdRsp = ELX_LOOPBACK_DATA;
3194 ctreq->CommandResponse.bits.Size = size;
3195 segment_offset = ELX_LOOPBACK_HEADER_SZ;
3196 } else
3197 segment_offset = 0;
3198
3199 BUG_ON(segment_offset >= segment_len);
3200 memcpy(curr->virt + segment_offset,
3201 ptr + current_offset,
3202 segment_len - segment_offset);
3203
3204 current_offset += segment_len - segment_offset;
3205 BUG_ON(current_offset > size);
3206 }
3207 list_del(&head);
3208
3209 /* Build the XMIT_SEQUENCE iocb */
3210 num_bde = (uint32_t)txbuffer->flag;
3211
3212 cmd->un.xseq64.bdl.addrHigh = putPaddrHigh(txbmp->phys);
3213 cmd->un.xseq64.bdl.addrLow = putPaddrLow(txbmp->phys);
3214 cmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
3215 cmd->un.xseq64.bdl.bdeSize = (num_bde * sizeof(struct ulp_bde64));
3216
3217 cmd->un.xseq64.w5.hcsw.Fctl = (LS | LA);
3218 cmd->un.xseq64.w5.hcsw.Dfctl = 0;
3219 cmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
3220 cmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
3221
3222 cmd->ulpCommand = CMD_XMIT_SEQUENCE64_CX;
3223 cmd->ulpBdeCount = 1;
3224 cmd->ulpLe = 1;
3225 cmd->ulpClass = CLASS3;
3226
3227 if (phba->sli_rev < LPFC_SLI_REV4) {
3228 cmd->ulpContext = txxri;
3229 } else {
3230 cmd->un.xseq64.bdl.ulpIoTag32 = 0;
3231 cmd->un.ulpWord[3] = phba->sli4_hba.rpi_ids[rpi];
3232 cmdiocbq->context3 = txbmp;
3233 cmdiocbq->sli4_xritag = NO_XRI;
3234 cmd->unsli3.rcvsli3.ox_id = 0xffff;
3235 }
3236 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
3237 cmdiocbq->iocb_flag |= LPFC_IO_LOOPBACK;
3238 cmdiocbq->vport = phba->pport;
3239 cmdiocbq->iocb_cmpl = NULL;
3240 iocb_stat = lpfc_sli_issue_iocb_wait(phba, LPFC_ELS_RING, cmdiocbq,
3241 rspiocbq, (phba->fc_ratov * 2) +
3242 LPFC_DRVR_TIMEOUT);
3243
3244 if ((iocb_stat != IOCB_SUCCESS) ||
3245 ((phba->sli_rev < LPFC_SLI_REV4) &&
3246 (rsp->ulpStatus != IOSTAT_SUCCESS))) {
3247 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3248 "3126 Failed loopback test issue iocb: "
3249 "iocb_stat:x%x\n", iocb_stat);
3250 rc = -EIO;
3251 goto err_loopback_test_exit;
3252 }
3253
3254 evt->waiting = 1;
3255 time_left = wait_event_interruptible_timeout(
3256 evt->wq, !list_empty(&evt->events_to_see),
3257 msecs_to_jiffies(1000 *
3258 ((phba->fc_ratov * 2) + LPFC_DRVR_TIMEOUT)));
3259 evt->waiting = 0;
3260 if (list_empty(&evt->events_to_see)) {
3261 rc = (time_left) ? -EINTR : -ETIMEDOUT;
3262 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3263 "3125 Not receiving unsolicited event, "
3264 "rc:x%x\n", rc);
3265 } else {
3266 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3267 list_move(evt->events_to_see.prev, &evt->events_to_get);
3268 evdat = list_entry(evt->events_to_get.prev,
3269 typeof(*evdat), node);
3270 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3271 rx_databuf = evdat->data;
3272 if (evdat->len != full_size) {
3273 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3274 "1603 Loopback test did not receive expected "
3275 "data length. actual length 0x%x expected "
3276 "length 0x%x\n",
3277 evdat->len, full_size);
3278 rc = -EIO;
3279 } else if (rx_databuf == NULL)
3280 rc = -EIO;
3281 else {
3282 rc = IOCB_SUCCESS;
3283 /* skip over elx loopback header */
3284 rx_databuf += ELX_LOOPBACK_HEADER_SZ;
3285 bsg_reply->reply_payload_rcv_len =
3286 sg_copy_from_buffer(job->reply_payload.sg_list,
3287 job->reply_payload.sg_cnt,
3288 rx_databuf, size);
3289 bsg_reply->reply_payload_rcv_len = size;
3290 }
3291 }
3292
3293 err_loopback_test_exit:
3294 lpfcdiag_loop_self_unreg(phba, rpi);
3295
3296 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3297 lpfc_bsg_event_unref(evt); /* release ref */
3298 lpfc_bsg_event_unref(evt); /* delete */
3299 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3300
3301 if ((cmdiocbq != NULL) && (iocb_stat != IOCB_TIMEDOUT))
3302 lpfc_sli_release_iocbq(phba, cmdiocbq);
3303
3304 if (rspiocbq != NULL)
3305 lpfc_sli_release_iocbq(phba, rspiocbq);
3306
3307 if (txbmp != NULL) {
3308 if (txbpl != NULL) {
3309 if (txbuffer != NULL)
3310 diag_cmd_data_free(phba, txbuffer);
3311 lpfc_mbuf_free(phba, txbmp->virt, txbmp->phys);
3312 }
3313 kfree(txbmp);
3314 }
3315
3316 loopback_test_exit:
3317 kfree(dataout);
3318 /* make error code available to userspace */
3319 bsg_reply->result = rc;
3320 job->dd_data = NULL;
3321 /* complete the job back to userspace if no error */
3322 if (rc == IOCB_SUCCESS)
3323 bsg_job_done(job, bsg_reply->result,
3324 bsg_reply->reply_payload_rcv_len);
3325 return rc;
3326 }
3327
3328 /**
3329 * lpfc_bsg_get_dfc_rev - process a GET_DFC_REV bsg vendor command
3330 * @job: GET_DFC_REV fc_bsg_job
3331 **/
3332 static int
3333 lpfc_bsg_get_dfc_rev(struct bsg_job *job)
3334 {
3335 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
3336 struct fc_bsg_reply *bsg_reply = job->reply;
3337 struct lpfc_hba *phba = vport->phba;
3338 struct get_mgmt_rev_reply *event_reply;
3339 int rc = 0;
3340
3341 if (job->request_len <
3342 sizeof(struct fc_bsg_request) + sizeof(struct get_mgmt_rev)) {
3343 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3344 "2740 Received GET_DFC_REV request below "
3345 "minimum size\n");
3346 rc = -EINVAL;
3347 goto job_error;
3348 }
3349
3350 event_reply = (struct get_mgmt_rev_reply *)
3351 bsg_reply->reply_data.vendor_reply.vendor_rsp;
3352
3353 if (job->reply_len <
3354 sizeof(struct fc_bsg_request) + sizeof(struct get_mgmt_rev_reply)) {
3355 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3356 "2741 Received GET_DFC_REV reply below "
3357 "minimum size\n");
3358 rc = -EINVAL;
3359 goto job_error;
3360 }
3361
3362 event_reply->info.a_Major = MANAGEMENT_MAJOR_REV;
3363 event_reply->info.a_Minor = MANAGEMENT_MINOR_REV;
3364 job_error:
3365 bsg_reply->result = rc;
3366 if (rc == 0)
3367 bsg_job_done(job, bsg_reply->result,
3368 bsg_reply->reply_payload_rcv_len);
3369 return rc;
3370 }
3371
3372 /**
3373 * lpfc_bsg_issue_mbox_cmpl - lpfc_bsg_issue_mbox mbox completion handler
3374 * @phba: Pointer to HBA context object.
3375 * @pmboxq: Pointer to mailbox command.
3376 *
3377 * This is completion handler function for mailbox commands issued from
3378 * lpfc_bsg_issue_mbox function. This function is called by the
3379 * mailbox event handler function with no lock held. This function
3380 * will wake up thread waiting on the wait queue pointed by context1
3381 * of the mailbox.
3382 **/
3383 static void
3384 lpfc_bsg_issue_mbox_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3385 {
3386 struct bsg_job_data *dd_data;
3387 struct fc_bsg_reply *bsg_reply;
3388 struct bsg_job *job;
3389 uint32_t size;
3390 unsigned long flags;
3391 uint8_t *pmb, *pmb_buf;
3392
3393 dd_data = pmboxq->context1;
3394
3395 /*
3396 * The outgoing buffer is readily referred from the dma buffer,
3397 * just need to get header part from mailboxq structure.
3398 */
3399 pmb = (uint8_t *)&pmboxq->u.mb;
3400 pmb_buf = (uint8_t *)dd_data->context_un.mbox.mb;
3401 memcpy(pmb_buf, pmb, sizeof(MAILBOX_t));
3402
3403 /* Determine if job has been aborted */
3404
3405 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3406 job = dd_data->set_job;
3407 if (job) {
3408 /* Prevent timeout handling from trying to abort job */
3409 job->dd_data = NULL;
3410 }
3411 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3412
3413 /* Copy the mailbox data to the job if it is still active */
3414
3415 if (job) {
3416 bsg_reply = job->reply;
3417 size = job->reply_payload.payload_len;
3418 bsg_reply->reply_payload_rcv_len =
3419 sg_copy_from_buffer(job->reply_payload.sg_list,
3420 job->reply_payload.sg_cnt,
3421 pmb_buf, size);
3422 }
3423
3424 dd_data->set_job = NULL;
3425 mempool_free(dd_data->context_un.mbox.pmboxq, phba->mbox_mem_pool);
3426 lpfc_bsg_dma_page_free(phba, dd_data->context_un.mbox.dmabuffers);
3427 kfree(dd_data);
3428
3429 /* Complete the job if the job is still active */
3430
3431 if (job) {
3432 bsg_reply->result = 0;
3433 bsg_job_done(job, bsg_reply->result,
3434 bsg_reply->reply_payload_rcv_len);
3435 }
3436 return;
3437 }
3438
3439 /**
3440 * lpfc_bsg_check_cmd_access - test for a supported mailbox command
3441 * @phba: Pointer to HBA context object.
3442 * @mb: Pointer to a mailbox object.
3443 * @vport: Pointer to a vport object.
3444 *
3445 * Some commands require the port to be offline, some may not be called from
3446 * the application.
3447 **/
3448 static int lpfc_bsg_check_cmd_access(struct lpfc_hba *phba,
3449 MAILBOX_t *mb, struct lpfc_vport *vport)
3450 {
3451 /* return negative error values for bsg job */
3452 switch (mb->mbxCommand) {
3453 /* Offline only */
3454 case MBX_INIT_LINK:
3455 case MBX_DOWN_LINK:
3456 case MBX_CONFIG_LINK:
3457 case MBX_CONFIG_RING:
3458 case MBX_RESET_RING:
3459 case MBX_UNREG_LOGIN:
3460 case MBX_CLEAR_LA:
3461 case MBX_DUMP_CONTEXT:
3462 case MBX_RUN_DIAGS:
3463 case MBX_RESTART:
3464 case MBX_SET_MASK:
3465 if (!(vport->fc_flag & FC_OFFLINE_MODE)) {
3466 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3467 "2743 Command 0x%x is illegal in on-line "
3468 "state\n",
3469 mb->mbxCommand);
3470 return -EPERM;
3471 }
3472 case MBX_WRITE_NV:
3473 case MBX_WRITE_VPARMS:
3474 case MBX_LOAD_SM:
3475 case MBX_READ_NV:
3476 case MBX_READ_CONFIG:
3477 case MBX_READ_RCONFIG:
3478 case MBX_READ_STATUS:
3479 case MBX_READ_XRI:
3480 case MBX_READ_REV:
3481 case MBX_READ_LNK_STAT:
3482 case MBX_DUMP_MEMORY:
3483 case MBX_DOWN_LOAD:
3484 case MBX_UPDATE_CFG:
3485 case MBX_KILL_BOARD:
3486 case MBX_READ_TOPOLOGY:
3487 case MBX_LOAD_AREA:
3488 case MBX_LOAD_EXP_ROM:
3489 case MBX_BEACON:
3490 case MBX_DEL_LD_ENTRY:
3491 case MBX_SET_DEBUG:
3492 case MBX_WRITE_WWN:
3493 case MBX_SLI4_CONFIG:
3494 case MBX_READ_EVENT_LOG:
3495 case MBX_READ_EVENT_LOG_STATUS:
3496 case MBX_WRITE_EVENT_LOG:
3497 case MBX_PORT_CAPABILITIES:
3498 case MBX_PORT_IOV_CONTROL:
3499 case MBX_RUN_BIU_DIAG64:
3500 break;
3501 case MBX_SET_VARIABLE:
3502 lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
3503 "1226 mbox: set_variable 0x%x, 0x%x\n",
3504 mb->un.varWords[0],
3505 mb->un.varWords[1]);
3506 if ((mb->un.varWords[0] == SETVAR_MLOMNT)
3507 && (mb->un.varWords[1] == 1)) {
3508 phba->wait_4_mlo_maint_flg = 1;
3509 } else if (mb->un.varWords[0] == SETVAR_MLORST) {
3510 spin_lock_irq(&phba->hbalock);
3511 phba->link_flag &= ~LS_LOOPBACK_MODE;
3512 spin_unlock_irq(&phba->hbalock);
3513 phba->fc_topology = LPFC_TOPOLOGY_PT_PT;
3514 }
3515 break;
3516 case MBX_READ_SPARM64:
3517 case MBX_REG_LOGIN:
3518 case MBX_REG_LOGIN64:
3519 case MBX_CONFIG_PORT:
3520 case MBX_RUN_BIU_DIAG:
3521 default:
3522 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3523 "2742 Unknown Command 0x%x\n",
3524 mb->mbxCommand);
3525 return -EPERM;
3526 }
3527
3528 return 0; /* ok */
3529 }
3530
3531 /**
3532 * lpfc_bsg_mbox_ext_cleanup - clean up context of multi-buffer mbox session
3533 * @phba: Pointer to HBA context object.
3534 *
3535 * This is routine clean up and reset BSG handling of multi-buffer mbox
3536 * command session.
3537 **/
3538 static void
3539 lpfc_bsg_mbox_ext_session_reset(struct lpfc_hba *phba)
3540 {
3541 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_IDLE)
3542 return;
3543
3544 /* free all memory, including dma buffers */
3545 lpfc_bsg_dma_page_list_free(phba,
3546 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3547 lpfc_bsg_dma_page_free(phba, phba->mbox_ext_buf_ctx.mbx_dmabuf);
3548 /* multi-buffer write mailbox command pass-through complete */
3549 memset((char *)&phba->mbox_ext_buf_ctx, 0,
3550 sizeof(struct lpfc_mbox_ext_buf_ctx));
3551 INIT_LIST_HEAD(&phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3552
3553 return;
3554 }
3555
3556 /**
3557 * lpfc_bsg_issue_mbox_ext_handle_job - job handler for multi-buffer mbox cmpl
3558 * @phba: Pointer to HBA context object.
3559 * @pmboxq: Pointer to mailbox command.
3560 *
3561 * This is routine handles BSG job for mailbox commands completions with
3562 * multiple external buffers.
3563 **/
3564 static struct bsg_job *
3565 lpfc_bsg_issue_mbox_ext_handle_job(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3566 {
3567 struct bsg_job_data *dd_data;
3568 struct bsg_job *job;
3569 struct fc_bsg_reply *bsg_reply;
3570 uint8_t *pmb, *pmb_buf;
3571 unsigned long flags;
3572 uint32_t size;
3573 int rc = 0;
3574 struct lpfc_dmabuf *dmabuf;
3575 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3576 uint8_t *pmbx;
3577
3578 dd_data = pmboxq->context1;
3579
3580 /* Determine if job has been aborted */
3581 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3582 job = dd_data->set_job;
3583 if (job) {
3584 bsg_reply = job->reply;
3585 /* Prevent timeout handling from trying to abort job */
3586 job->dd_data = NULL;
3587 }
3588 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3589
3590 /*
3591 * The outgoing buffer is readily referred from the dma buffer,
3592 * just need to get header part from mailboxq structure.
3593 */
3594
3595 pmb = (uint8_t *)&pmboxq->u.mb;
3596 pmb_buf = (uint8_t *)dd_data->context_un.mbox.mb;
3597 /* Copy the byte swapped response mailbox back to the user */
3598 memcpy(pmb_buf, pmb, sizeof(MAILBOX_t));
3599 /* if there is any non-embedded extended data copy that too */
3600 dmabuf = phba->mbox_ext_buf_ctx.mbx_dmabuf;
3601 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
3602 if (!bsg_bf_get(lpfc_mbox_hdr_emb,
3603 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) {
3604 pmbx = (uint8_t *)dmabuf->virt;
3605 /* byte swap the extended data following the mailbox command */
3606 lpfc_sli_pcimem_bcopy(&pmbx[sizeof(MAILBOX_t)],
3607 &pmbx[sizeof(MAILBOX_t)],
3608 sli_cfg_mbx->un.sli_config_emb0_subsys.mse[0].buf_len);
3609 }
3610
3611 /* Complete the job if the job is still active */
3612
3613 if (job) {
3614 size = job->reply_payload.payload_len;
3615 bsg_reply->reply_payload_rcv_len =
3616 sg_copy_from_buffer(job->reply_payload.sg_list,
3617 job->reply_payload.sg_cnt,
3618 pmb_buf, size);
3619
3620 /* result for successful */
3621 bsg_reply->result = 0;
3622
3623 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3624 "2937 SLI_CONFIG ext-buffer maibox command "
3625 "(x%x/x%x) complete bsg job done, bsize:%d\n",
3626 phba->mbox_ext_buf_ctx.nembType,
3627 phba->mbox_ext_buf_ctx.mboxType, size);
3628 lpfc_idiag_mbxacc_dump_bsg_mbox(phba,
3629 phba->mbox_ext_buf_ctx.nembType,
3630 phba->mbox_ext_buf_ctx.mboxType,
3631 dma_ebuf, sta_pos_addr,
3632 phba->mbox_ext_buf_ctx.mbx_dmabuf, 0);
3633 } else {
3634 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3635 "2938 SLI_CONFIG ext-buffer maibox "
3636 "command (x%x/x%x) failure, rc:x%x\n",
3637 phba->mbox_ext_buf_ctx.nembType,
3638 phba->mbox_ext_buf_ctx.mboxType, rc);
3639 }
3640
3641
3642 /* state change */
3643 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_DONE;
3644 kfree(dd_data);
3645 return job;
3646 }
3647
3648 /**
3649 * lpfc_bsg_issue_read_mbox_ext_cmpl - compl handler for multi-buffer read mbox
3650 * @phba: Pointer to HBA context object.
3651 * @pmboxq: Pointer to mailbox command.
3652 *
3653 * This is completion handler function for mailbox read commands with multiple
3654 * external buffers.
3655 **/
3656 static void
3657 lpfc_bsg_issue_read_mbox_ext_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3658 {
3659 struct bsg_job *job;
3660 struct fc_bsg_reply *bsg_reply;
3661
3662 job = lpfc_bsg_issue_mbox_ext_handle_job(phba, pmboxq);
3663
3664 /* handle the BSG job with mailbox command */
3665 if (!job)
3666 pmboxq->u.mb.mbxStatus = MBXERR_ERROR;
3667
3668 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3669 "2939 SLI_CONFIG ext-buffer rd maibox command "
3670 "complete, ctxState:x%x, mbxStatus:x%x\n",
3671 phba->mbox_ext_buf_ctx.state, pmboxq->u.mb.mbxStatus);
3672
3673 if (pmboxq->u.mb.mbxStatus || phba->mbox_ext_buf_ctx.numBuf == 1)
3674 lpfc_bsg_mbox_ext_session_reset(phba);
3675
3676 /* free base driver mailbox structure memory */
3677 mempool_free(pmboxq, phba->mbox_mem_pool);
3678
3679 /* if the job is still active, call job done */
3680 if (job) {
3681 bsg_reply = job->reply;
3682 bsg_job_done(job, bsg_reply->result,
3683 bsg_reply->reply_payload_rcv_len);
3684 }
3685 return;
3686 }
3687
3688 /**
3689 * lpfc_bsg_issue_write_mbox_ext_cmpl - cmpl handler for multi-buffer write mbox
3690 * @phba: Pointer to HBA context object.
3691 * @pmboxq: Pointer to mailbox command.
3692 *
3693 * This is completion handler function for mailbox write commands with multiple
3694 * external buffers.
3695 **/
3696 static void
3697 lpfc_bsg_issue_write_mbox_ext_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3698 {
3699 struct bsg_job *job;
3700 struct fc_bsg_reply *bsg_reply;
3701
3702 job = lpfc_bsg_issue_mbox_ext_handle_job(phba, pmboxq);
3703
3704 /* handle the BSG job with the mailbox command */
3705 if (!job)
3706 pmboxq->u.mb.mbxStatus = MBXERR_ERROR;
3707
3708 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3709 "2940 SLI_CONFIG ext-buffer wr maibox command "
3710 "complete, ctxState:x%x, mbxStatus:x%x\n",
3711 phba->mbox_ext_buf_ctx.state, pmboxq->u.mb.mbxStatus);
3712
3713 /* free all memory, including dma buffers */
3714 mempool_free(pmboxq, phba->mbox_mem_pool);
3715 lpfc_bsg_mbox_ext_session_reset(phba);
3716
3717 /* if the job is still active, call job done */
3718 if (job) {
3719 bsg_reply = job->reply;
3720 bsg_job_done(job, bsg_reply->result,
3721 bsg_reply->reply_payload_rcv_len);
3722 }
3723
3724 return;
3725 }
3726
3727 static void
3728 lpfc_bsg_sli_cfg_dma_desc_setup(struct lpfc_hba *phba, enum nemb_type nemb_tp,
3729 uint32_t index, struct lpfc_dmabuf *mbx_dmabuf,
3730 struct lpfc_dmabuf *ext_dmabuf)
3731 {
3732 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3733
3734 /* pointer to the start of mailbox command */
3735 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)mbx_dmabuf->virt;
3736
3737 if (nemb_tp == nemb_mse) {
3738 if (index == 0) {
3739 sli_cfg_mbx->un.sli_config_emb0_subsys.
3740 mse[index].pa_hi =
3741 putPaddrHigh(mbx_dmabuf->phys +
3742 sizeof(MAILBOX_t));
3743 sli_cfg_mbx->un.sli_config_emb0_subsys.
3744 mse[index].pa_lo =
3745 putPaddrLow(mbx_dmabuf->phys +
3746 sizeof(MAILBOX_t));
3747 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3748 "2943 SLI_CONFIG(mse)[%d], "
3749 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3750 index,
3751 sli_cfg_mbx->un.sli_config_emb0_subsys.
3752 mse[index].buf_len,
3753 sli_cfg_mbx->un.sli_config_emb0_subsys.
3754 mse[index].pa_hi,
3755 sli_cfg_mbx->un.sli_config_emb0_subsys.
3756 mse[index].pa_lo);
3757 } else {
3758 sli_cfg_mbx->un.sli_config_emb0_subsys.
3759 mse[index].pa_hi =
3760 putPaddrHigh(ext_dmabuf->phys);
3761 sli_cfg_mbx->un.sli_config_emb0_subsys.
3762 mse[index].pa_lo =
3763 putPaddrLow(ext_dmabuf->phys);
3764 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3765 "2944 SLI_CONFIG(mse)[%d], "
3766 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3767 index,
3768 sli_cfg_mbx->un.sli_config_emb0_subsys.
3769 mse[index].buf_len,
3770 sli_cfg_mbx->un.sli_config_emb0_subsys.
3771 mse[index].pa_hi,
3772 sli_cfg_mbx->un.sli_config_emb0_subsys.
3773 mse[index].pa_lo);
3774 }
3775 } else {
3776 if (index == 0) {
3777 sli_cfg_mbx->un.sli_config_emb1_subsys.
3778 hbd[index].pa_hi =
3779 putPaddrHigh(mbx_dmabuf->phys +
3780 sizeof(MAILBOX_t));
3781 sli_cfg_mbx->un.sli_config_emb1_subsys.
3782 hbd[index].pa_lo =
3783 putPaddrLow(mbx_dmabuf->phys +
3784 sizeof(MAILBOX_t));
3785 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3786 "3007 SLI_CONFIG(hbd)[%d], "
3787 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3788 index,
3789 bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
3790 &sli_cfg_mbx->un.
3791 sli_config_emb1_subsys.hbd[index]),
3792 sli_cfg_mbx->un.sli_config_emb1_subsys.
3793 hbd[index].pa_hi,
3794 sli_cfg_mbx->un.sli_config_emb1_subsys.
3795 hbd[index].pa_lo);
3796
3797 } else {
3798 sli_cfg_mbx->un.sli_config_emb1_subsys.
3799 hbd[index].pa_hi =
3800 putPaddrHigh(ext_dmabuf->phys);
3801 sli_cfg_mbx->un.sli_config_emb1_subsys.
3802 hbd[index].pa_lo =
3803 putPaddrLow(ext_dmabuf->phys);
3804 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3805 "3008 SLI_CONFIG(hbd)[%d], "
3806 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3807 index,
3808 bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
3809 &sli_cfg_mbx->un.
3810 sli_config_emb1_subsys.hbd[index]),
3811 sli_cfg_mbx->un.sli_config_emb1_subsys.
3812 hbd[index].pa_hi,
3813 sli_cfg_mbx->un.sli_config_emb1_subsys.
3814 hbd[index].pa_lo);
3815 }
3816 }
3817 return;
3818 }
3819
3820 /**
3821 * lpfc_bsg_sli_cfg_mse_read_cmd_ext - sli_config non-embedded mailbox cmd read
3822 * @phba: Pointer to HBA context object.
3823 * @mb: Pointer to a BSG mailbox object.
3824 * @nemb_tp: Enumerate of non-embedded mailbox command type.
3825 * @dmabuff: Pointer to a DMA buffer descriptor.
3826 *
3827 * This routine performs SLI_CONFIG (0x9B) read mailbox command operation with
3828 * non-embedded external bufffers.
3829 **/
3830 static int
3831 lpfc_bsg_sli_cfg_read_cmd_ext(struct lpfc_hba *phba, struct bsg_job *job,
3832 enum nemb_type nemb_tp,
3833 struct lpfc_dmabuf *dmabuf)
3834 {
3835 struct fc_bsg_request *bsg_request = job->request;
3836 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3837 struct dfc_mbox_req *mbox_req;
3838 struct lpfc_dmabuf *curr_dmabuf, *next_dmabuf;
3839 uint32_t ext_buf_cnt, ext_buf_index;
3840 struct lpfc_dmabuf *ext_dmabuf = NULL;
3841 struct bsg_job_data *dd_data = NULL;
3842 LPFC_MBOXQ_t *pmboxq = NULL;
3843 MAILBOX_t *pmb;
3844 uint8_t *pmbx;
3845 int rc, i;
3846
3847 mbox_req =
3848 (struct dfc_mbox_req *)bsg_request->rqst_data.h_vendor.vendor_cmd;
3849
3850 /* pointer to the start of mailbox command */
3851 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
3852
3853 if (nemb_tp == nemb_mse) {
3854 ext_buf_cnt = bsg_bf_get(lpfc_mbox_hdr_mse_cnt,
3855 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr);
3856 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_MSE) {
3857 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3858 "2945 Handled SLI_CONFIG(mse) rd, "
3859 "ext_buf_cnt(%d) out of range(%d)\n",
3860 ext_buf_cnt,
3861 LPFC_MBX_SLI_CONFIG_MAX_MSE);
3862 rc = -ERANGE;
3863 goto job_error;
3864 }
3865 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3866 "2941 Handled SLI_CONFIG(mse) rd, "
3867 "ext_buf_cnt:%d\n", ext_buf_cnt);
3868 } else {
3869 /* sanity check on interface type for support */
3870 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
3871 LPFC_SLI_INTF_IF_TYPE_2) {
3872 rc = -ENODEV;
3873 goto job_error;
3874 }
3875 /* nemb_tp == nemb_hbd */
3876 ext_buf_cnt = sli_cfg_mbx->un.sli_config_emb1_subsys.hbd_count;
3877 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_HBD) {
3878 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3879 "2946 Handled SLI_CONFIG(hbd) rd, "
3880 "ext_buf_cnt(%d) out of range(%d)\n",
3881 ext_buf_cnt,
3882 LPFC_MBX_SLI_CONFIG_MAX_HBD);
3883 rc = -ERANGE;
3884 goto job_error;
3885 }
3886 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3887 "2942 Handled SLI_CONFIG(hbd) rd, "
3888 "ext_buf_cnt:%d\n", ext_buf_cnt);
3889 }
3890
3891 /* before dma descriptor setup */
3892 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_rd, dma_mbox,
3893 sta_pre_addr, dmabuf, ext_buf_cnt);
3894
3895 /* reject non-embedded mailbox command with none external buffer */
3896 if (ext_buf_cnt == 0) {
3897 rc = -EPERM;
3898 goto job_error;
3899 } else if (ext_buf_cnt > 1) {
3900 /* additional external read buffers */
3901 for (i = 1; i < ext_buf_cnt; i++) {
3902 ext_dmabuf = lpfc_bsg_dma_page_alloc(phba);
3903 if (!ext_dmabuf) {
3904 rc = -ENOMEM;
3905 goto job_error;
3906 }
3907 list_add_tail(&ext_dmabuf->list,
3908 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3909 }
3910 }
3911
3912 /* bsg tracking structure */
3913 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
3914 if (!dd_data) {
3915 rc = -ENOMEM;
3916 goto job_error;
3917 }
3918
3919 /* mailbox command structure for base driver */
3920 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
3921 if (!pmboxq) {
3922 rc = -ENOMEM;
3923 goto job_error;
3924 }
3925 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
3926
3927 /* for the first external buffer */
3928 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, 0, dmabuf, dmabuf);
3929
3930 /* for the rest of external buffer descriptors if any */
3931 if (ext_buf_cnt > 1) {
3932 ext_buf_index = 1;
3933 list_for_each_entry_safe(curr_dmabuf, next_dmabuf,
3934 &phba->mbox_ext_buf_ctx.ext_dmabuf_list, list) {
3935 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp,
3936 ext_buf_index, dmabuf,
3937 curr_dmabuf);
3938 ext_buf_index++;
3939 }
3940 }
3941
3942 /* after dma descriptor setup */
3943 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_rd, dma_mbox,
3944 sta_pos_addr, dmabuf, ext_buf_cnt);
3945
3946 /* construct base driver mbox command */
3947 pmb = &pmboxq->u.mb;
3948 pmbx = (uint8_t *)dmabuf->virt;
3949 memcpy(pmb, pmbx, sizeof(*pmb));
3950 pmb->mbxOwner = OWN_HOST;
3951 pmboxq->vport = phba->pport;
3952
3953 /* multi-buffer handling context */
3954 phba->mbox_ext_buf_ctx.nembType = nemb_tp;
3955 phba->mbox_ext_buf_ctx.mboxType = mbox_rd;
3956 phba->mbox_ext_buf_ctx.numBuf = ext_buf_cnt;
3957 phba->mbox_ext_buf_ctx.mbxTag = mbox_req->extMboxTag;
3958 phba->mbox_ext_buf_ctx.seqNum = mbox_req->extSeqNum;
3959 phba->mbox_ext_buf_ctx.mbx_dmabuf = dmabuf;
3960
3961 /* callback for multi-buffer read mailbox command */
3962 pmboxq->mbox_cmpl = lpfc_bsg_issue_read_mbox_ext_cmpl;
3963
3964 /* context fields to callback function */
3965 pmboxq->context1 = dd_data;
3966 dd_data->type = TYPE_MBOX;
3967 dd_data->set_job = job;
3968 dd_data->context_un.mbox.pmboxq = pmboxq;
3969 dd_data->context_un.mbox.mb = (MAILBOX_t *)pmbx;
3970 job->dd_data = dd_data;
3971
3972 /* state change */
3973 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
3974
3975 /*
3976 * Non-embedded mailbox subcommand data gets byte swapped here because
3977 * the lower level driver code only does the first 64 mailbox words.
3978 */
3979 if ((!bsg_bf_get(lpfc_mbox_hdr_emb,
3980 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) &&
3981 (nemb_tp == nemb_mse))
3982 lpfc_sli_pcimem_bcopy(&pmbx[sizeof(MAILBOX_t)],
3983 &pmbx[sizeof(MAILBOX_t)],
3984 sli_cfg_mbx->un.sli_config_emb0_subsys.
3985 mse[0].buf_len);
3986
3987 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
3988 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
3989 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3990 "2947 Issued SLI_CONFIG ext-buffer "
3991 "maibox command, rc:x%x\n", rc);
3992 return SLI_CONFIG_HANDLED;
3993 }
3994 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3995 "2948 Failed to issue SLI_CONFIG ext-buffer "
3996 "maibox command, rc:x%x\n", rc);
3997 rc = -EPIPE;
3998
3999 job_error:
4000 if (pmboxq)
4001 mempool_free(pmboxq, phba->mbox_mem_pool);
4002 lpfc_bsg_dma_page_list_free(phba,
4003 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
4004 kfree(dd_data);
4005 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_IDLE;
4006 return rc;
4007 }
4008
4009 /**
4010 * lpfc_bsg_sli_cfg_write_cmd_ext - sli_config non-embedded mailbox cmd write
4011 * @phba: Pointer to HBA context object.
4012 * @mb: Pointer to a BSG mailbox object.
4013 * @dmabuff: Pointer to a DMA buffer descriptor.
4014 *
4015 * This routine performs SLI_CONFIG (0x9B) write mailbox command operation with
4016 * non-embedded external bufffers.
4017 **/
4018 static int
4019 lpfc_bsg_sli_cfg_write_cmd_ext(struct lpfc_hba *phba, struct bsg_job *job,
4020 enum nemb_type nemb_tp,
4021 struct lpfc_dmabuf *dmabuf)
4022 {
4023 struct fc_bsg_request *bsg_request = job->request;
4024 struct fc_bsg_reply *bsg_reply = job->reply;
4025 struct dfc_mbox_req *mbox_req;
4026 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4027 uint32_t ext_buf_cnt;
4028 struct bsg_job_data *dd_data = NULL;
4029 LPFC_MBOXQ_t *pmboxq = NULL;
4030 MAILBOX_t *pmb;
4031 uint8_t *mbx;
4032 int rc = SLI_CONFIG_NOT_HANDLED, i;
4033
4034 mbox_req =
4035 (struct dfc_mbox_req *)bsg_request->rqst_data.h_vendor.vendor_cmd;
4036
4037 /* pointer to the start of mailbox command */
4038 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
4039
4040 if (nemb_tp == nemb_mse) {
4041 ext_buf_cnt = bsg_bf_get(lpfc_mbox_hdr_mse_cnt,
4042 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr);
4043 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_MSE) {
4044 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4045 "2953 Failed SLI_CONFIG(mse) wr, "
4046 "ext_buf_cnt(%d) out of range(%d)\n",
4047 ext_buf_cnt,
4048 LPFC_MBX_SLI_CONFIG_MAX_MSE);
4049 return -ERANGE;
4050 }
4051 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4052 "2949 Handled SLI_CONFIG(mse) wr, "
4053 "ext_buf_cnt:%d\n", ext_buf_cnt);
4054 } else {
4055 /* sanity check on interface type for support */
4056 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
4057 LPFC_SLI_INTF_IF_TYPE_2)
4058 return -ENODEV;
4059 /* nemb_tp == nemb_hbd */
4060 ext_buf_cnt = sli_cfg_mbx->un.sli_config_emb1_subsys.hbd_count;
4061 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_HBD) {
4062 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4063 "2954 Failed SLI_CONFIG(hbd) wr, "
4064 "ext_buf_cnt(%d) out of range(%d)\n",
4065 ext_buf_cnt,
4066 LPFC_MBX_SLI_CONFIG_MAX_HBD);
4067 return -ERANGE;
4068 }
4069 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4070 "2950 Handled SLI_CONFIG(hbd) wr, "
4071 "ext_buf_cnt:%d\n", ext_buf_cnt);
4072 }
4073
4074 /* before dma buffer descriptor setup */
4075 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_wr, dma_mbox,
4076 sta_pre_addr, dmabuf, ext_buf_cnt);
4077
4078 if (ext_buf_cnt == 0)
4079 return -EPERM;
4080
4081 /* for the first external buffer */
4082 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, 0, dmabuf, dmabuf);
4083
4084 /* after dma descriptor setup */
4085 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_wr, dma_mbox,
4086 sta_pos_addr, dmabuf, ext_buf_cnt);
4087
4088 /* log for looking forward */
4089 for (i = 1; i < ext_buf_cnt; i++) {
4090 if (nemb_tp == nemb_mse)
4091 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4092 "2951 SLI_CONFIG(mse), buf[%d]-length:%d\n",
4093 i, sli_cfg_mbx->un.sli_config_emb0_subsys.
4094 mse[i].buf_len);
4095 else
4096 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4097 "2952 SLI_CONFIG(hbd), buf[%d]-length:%d\n",
4098 i, bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
4099 &sli_cfg_mbx->un.sli_config_emb1_subsys.
4100 hbd[i]));
4101 }
4102
4103 /* multi-buffer handling context */
4104 phba->mbox_ext_buf_ctx.nembType = nemb_tp;
4105 phba->mbox_ext_buf_ctx.mboxType = mbox_wr;
4106 phba->mbox_ext_buf_ctx.numBuf = ext_buf_cnt;
4107 phba->mbox_ext_buf_ctx.mbxTag = mbox_req->extMboxTag;
4108 phba->mbox_ext_buf_ctx.seqNum = mbox_req->extSeqNum;
4109 phba->mbox_ext_buf_ctx.mbx_dmabuf = dmabuf;
4110
4111 if (ext_buf_cnt == 1) {
4112 /* bsg tracking structure */
4113 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4114 if (!dd_data) {
4115 rc = -ENOMEM;
4116 goto job_error;
4117 }
4118
4119 /* mailbox command structure for base driver */
4120 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4121 if (!pmboxq) {
4122 rc = -ENOMEM;
4123 goto job_error;
4124 }
4125 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4126 pmb = &pmboxq->u.mb;
4127 mbx = (uint8_t *)dmabuf->virt;
4128 memcpy(pmb, mbx, sizeof(*pmb));
4129 pmb->mbxOwner = OWN_HOST;
4130 pmboxq->vport = phba->pport;
4131
4132 /* callback for multi-buffer read mailbox command */
4133 pmboxq->mbox_cmpl = lpfc_bsg_issue_write_mbox_ext_cmpl;
4134
4135 /* context fields to callback function */
4136 pmboxq->context1 = dd_data;
4137 dd_data->type = TYPE_MBOX;
4138 dd_data->set_job = job;
4139 dd_data->context_un.mbox.pmboxq = pmboxq;
4140 dd_data->context_un.mbox.mb = (MAILBOX_t *)mbx;
4141 job->dd_data = dd_data;
4142
4143 /* state change */
4144
4145 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
4146 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4147 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
4148 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4149 "2955 Issued SLI_CONFIG ext-buffer "
4150 "maibox command, rc:x%x\n", rc);
4151 return SLI_CONFIG_HANDLED;
4152 }
4153 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4154 "2956 Failed to issue SLI_CONFIG ext-buffer "
4155 "maibox command, rc:x%x\n", rc);
4156 rc = -EPIPE;
4157 goto job_error;
4158 }
4159
4160 /* wait for additoinal external buffers */
4161
4162 bsg_reply->result = 0;
4163 bsg_job_done(job, bsg_reply->result,
4164 bsg_reply->reply_payload_rcv_len);
4165 return SLI_CONFIG_HANDLED;
4166
4167 job_error:
4168 if (pmboxq)
4169 mempool_free(pmboxq, phba->mbox_mem_pool);
4170 kfree(dd_data);
4171
4172 return rc;
4173 }
4174
4175 /**
4176 * lpfc_bsg_handle_sli_cfg_mbox - handle sli-cfg mailbox cmd with ext buffer
4177 * @phba: Pointer to HBA context object.
4178 * @mb: Pointer to a BSG mailbox object.
4179 * @dmabuff: Pointer to a DMA buffer descriptor.
4180 *
4181 * This routine handles SLI_CONFIG (0x9B) mailbox command with non-embedded
4182 * external bufffers, including both 0x9B with non-embedded MSEs and 0x9B
4183 * with embedded sussystem 0x1 and opcodes with external HBDs.
4184 **/
4185 static int
4186 lpfc_bsg_handle_sli_cfg_mbox(struct lpfc_hba *phba, struct bsg_job *job,
4187 struct lpfc_dmabuf *dmabuf)
4188 {
4189 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4190 uint32_t subsys;
4191 uint32_t opcode;
4192 int rc = SLI_CONFIG_NOT_HANDLED;
4193
4194 /* state change on new multi-buffer pass-through mailbox command */
4195 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_HOST;
4196
4197 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
4198
4199 if (!bsg_bf_get(lpfc_mbox_hdr_emb,
4200 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) {
4201 subsys = bsg_bf_get(lpfc_emb0_subcmnd_subsys,
4202 &sli_cfg_mbx->un.sli_config_emb0_subsys);
4203 opcode = bsg_bf_get(lpfc_emb0_subcmnd_opcode,
4204 &sli_cfg_mbx->un.sli_config_emb0_subsys);
4205 if (subsys == SLI_CONFIG_SUBSYS_FCOE) {
4206 switch (opcode) {
4207 case FCOE_OPCODE_READ_FCF:
4208 case FCOE_OPCODE_GET_DPORT_RESULTS:
4209 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4210 "2957 Handled SLI_CONFIG "
4211 "subsys_fcoe, opcode:x%x\n",
4212 opcode);
4213 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4214 nemb_mse, dmabuf);
4215 break;
4216 case FCOE_OPCODE_ADD_FCF:
4217 case FCOE_OPCODE_SET_DPORT_MODE:
4218 case LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE:
4219 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4220 "2958 Handled SLI_CONFIG "
4221 "subsys_fcoe, opcode:x%x\n",
4222 opcode);
4223 rc = lpfc_bsg_sli_cfg_write_cmd_ext(phba, job,
4224 nemb_mse, dmabuf);
4225 break;
4226 default:
4227 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4228 "2959 Reject SLI_CONFIG "
4229 "subsys_fcoe, opcode:x%x\n",
4230 opcode);
4231 rc = -EPERM;
4232 break;
4233 }
4234 } else if (subsys == SLI_CONFIG_SUBSYS_COMN) {
4235 switch (opcode) {
4236 case COMN_OPCODE_GET_CNTL_ADDL_ATTRIBUTES:
4237 case COMN_OPCODE_GET_CNTL_ATTRIBUTES:
4238 case COMN_OPCODE_GET_PROFILE_CONFIG:
4239 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4240 "3106 Handled SLI_CONFIG "
4241 "subsys_comn, opcode:x%x\n",
4242 opcode);
4243 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4244 nemb_mse, dmabuf);
4245 break;
4246 default:
4247 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4248 "3107 Reject SLI_CONFIG "
4249 "subsys_comn, opcode:x%x\n",
4250 opcode);
4251 rc = -EPERM;
4252 break;
4253 }
4254 } else {
4255 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4256 "2977 Reject SLI_CONFIG "
4257 "subsys:x%d, opcode:x%x\n",
4258 subsys, opcode);
4259 rc = -EPERM;
4260 }
4261 } else {
4262 subsys = bsg_bf_get(lpfc_emb1_subcmnd_subsys,
4263 &sli_cfg_mbx->un.sli_config_emb1_subsys);
4264 opcode = bsg_bf_get(lpfc_emb1_subcmnd_opcode,
4265 &sli_cfg_mbx->un.sli_config_emb1_subsys);
4266 if (subsys == SLI_CONFIG_SUBSYS_COMN) {
4267 switch (opcode) {
4268 case COMN_OPCODE_READ_OBJECT:
4269 case COMN_OPCODE_READ_OBJECT_LIST:
4270 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4271 "2960 Handled SLI_CONFIG "
4272 "subsys_comn, opcode:x%x\n",
4273 opcode);
4274 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4275 nemb_hbd, dmabuf);
4276 break;
4277 case COMN_OPCODE_WRITE_OBJECT:
4278 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4279 "2961 Handled SLI_CONFIG "
4280 "subsys_comn, opcode:x%x\n",
4281 opcode);
4282 rc = lpfc_bsg_sli_cfg_write_cmd_ext(phba, job,
4283 nemb_hbd, dmabuf);
4284 break;
4285 default:
4286 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4287 "2962 Not handled SLI_CONFIG "
4288 "subsys_comn, opcode:x%x\n",
4289 opcode);
4290 rc = SLI_CONFIG_NOT_HANDLED;
4291 break;
4292 }
4293 } else {
4294 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4295 "2978 Not handled SLI_CONFIG "
4296 "subsys:x%d, opcode:x%x\n",
4297 subsys, opcode);
4298 rc = SLI_CONFIG_NOT_HANDLED;
4299 }
4300 }
4301
4302 /* state reset on not handled new multi-buffer mailbox command */
4303 if (rc != SLI_CONFIG_HANDLED)
4304 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_IDLE;
4305
4306 return rc;
4307 }
4308
4309 /**
4310 * lpfc_bsg_mbox_ext_abort_req - request to abort mbox command with ext buffers
4311 * @phba: Pointer to HBA context object.
4312 *
4313 * This routine is for requesting to abort a pass-through mailbox command with
4314 * multiple external buffers due to error condition.
4315 **/
4316 static void
4317 lpfc_bsg_mbox_ext_abort(struct lpfc_hba *phba)
4318 {
4319 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_PORT)
4320 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_ABTS;
4321 else
4322 lpfc_bsg_mbox_ext_session_reset(phba);
4323 return;
4324 }
4325
4326 /**
4327 * lpfc_bsg_read_ebuf_get - get the next mailbox read external buffer
4328 * @phba: Pointer to HBA context object.
4329 * @dmabuf: Pointer to a DMA buffer descriptor.
4330 *
4331 * This routine extracts the next mailbox read external buffer back to
4332 * user space through BSG.
4333 **/
4334 static int
4335 lpfc_bsg_read_ebuf_get(struct lpfc_hba *phba, struct bsg_job *job)
4336 {
4337 struct fc_bsg_reply *bsg_reply = job->reply;
4338 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4339 struct lpfc_dmabuf *dmabuf;
4340 uint8_t *pbuf;
4341 uint32_t size;
4342 uint32_t index;
4343
4344 index = phba->mbox_ext_buf_ctx.seqNum;
4345 phba->mbox_ext_buf_ctx.seqNum++;
4346
4347 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)
4348 phba->mbox_ext_buf_ctx.mbx_dmabuf->virt;
4349
4350 if (phba->mbox_ext_buf_ctx.nembType == nemb_mse) {
4351 size = bsg_bf_get(lpfc_mbox_sli_config_mse_len,
4352 &sli_cfg_mbx->un.sli_config_emb0_subsys.mse[index]);
4353 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4354 "2963 SLI_CONFIG (mse) ext-buffer rd get "
4355 "buffer[%d], size:%d\n", index, size);
4356 } else {
4357 size = bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
4358 &sli_cfg_mbx->un.sli_config_emb1_subsys.hbd[index]);
4359 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4360 "2964 SLI_CONFIG (hbd) ext-buffer rd get "
4361 "buffer[%d], size:%d\n", index, size);
4362 }
4363 if (list_empty(&phba->mbox_ext_buf_ctx.ext_dmabuf_list))
4364 return -EPIPE;
4365 dmabuf = list_first_entry(&phba->mbox_ext_buf_ctx.ext_dmabuf_list,
4366 struct lpfc_dmabuf, list);
4367 list_del_init(&dmabuf->list);
4368
4369 /* after dma buffer descriptor setup */
4370 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, phba->mbox_ext_buf_ctx.nembType,
4371 mbox_rd, dma_ebuf, sta_pos_addr,
4372 dmabuf, index);
4373
4374 pbuf = (uint8_t *)dmabuf->virt;
4375 bsg_reply->reply_payload_rcv_len =
4376 sg_copy_from_buffer(job->reply_payload.sg_list,
4377 job->reply_payload.sg_cnt,
4378 pbuf, size);
4379
4380 lpfc_bsg_dma_page_free(phba, dmabuf);
4381
4382 if (phba->mbox_ext_buf_ctx.seqNum == phba->mbox_ext_buf_ctx.numBuf) {
4383 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4384 "2965 SLI_CONFIG (hbd) ext-buffer rd mbox "
4385 "command session done\n");
4386 lpfc_bsg_mbox_ext_session_reset(phba);
4387 }
4388
4389 bsg_reply->result = 0;
4390 bsg_job_done(job, bsg_reply->result,
4391 bsg_reply->reply_payload_rcv_len);
4392
4393 return SLI_CONFIG_HANDLED;
4394 }
4395
4396 /**
4397 * lpfc_bsg_write_ebuf_set - set the next mailbox write external buffer
4398 * @phba: Pointer to HBA context object.
4399 * @dmabuf: Pointer to a DMA buffer descriptor.
4400 *
4401 * This routine sets up the next mailbox read external buffer obtained
4402 * from user space through BSG.
4403 **/
4404 static int
4405 lpfc_bsg_write_ebuf_set(struct lpfc_hba *phba, struct bsg_job *job,
4406 struct lpfc_dmabuf *dmabuf)
4407 {
4408 struct fc_bsg_reply *bsg_reply = job->reply;
4409 struct bsg_job_data *dd_data = NULL;
4410 LPFC_MBOXQ_t *pmboxq = NULL;
4411 MAILBOX_t *pmb;
4412 enum nemb_type nemb_tp;
4413 uint8_t *pbuf;
4414 uint32_t size;
4415 uint32_t index;
4416 int rc;
4417
4418 index = phba->mbox_ext_buf_ctx.seqNum;
4419 phba->mbox_ext_buf_ctx.seqNum++;
4420 nemb_tp = phba->mbox_ext_buf_ctx.nembType;
4421
4422 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4423 if (!dd_data) {
4424 rc = -ENOMEM;
4425 goto job_error;
4426 }
4427
4428 pbuf = (uint8_t *)dmabuf->virt;
4429 size = job->request_payload.payload_len;
4430 sg_copy_to_buffer(job->request_payload.sg_list,
4431 job->request_payload.sg_cnt,
4432 pbuf, size);
4433
4434 if (phba->mbox_ext_buf_ctx.nembType == nemb_mse) {
4435 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4436 "2966 SLI_CONFIG (mse) ext-buffer wr set "
4437 "buffer[%d], size:%d\n",
4438 phba->mbox_ext_buf_ctx.seqNum, size);
4439
4440 } else {
4441 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4442 "2967 SLI_CONFIG (hbd) ext-buffer wr set "
4443 "buffer[%d], size:%d\n",
4444 phba->mbox_ext_buf_ctx.seqNum, size);
4445
4446 }
4447
4448 /* set up external buffer descriptor and add to external buffer list */
4449 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, index,
4450 phba->mbox_ext_buf_ctx.mbx_dmabuf,
4451 dmabuf);
4452 list_add_tail(&dmabuf->list, &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
4453
4454 /* after write dma buffer */
4455 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, phba->mbox_ext_buf_ctx.nembType,
4456 mbox_wr, dma_ebuf, sta_pos_addr,
4457 dmabuf, index);
4458
4459 if (phba->mbox_ext_buf_ctx.seqNum == phba->mbox_ext_buf_ctx.numBuf) {
4460 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4461 "2968 SLI_CONFIG ext-buffer wr all %d "
4462 "ebuffers received\n",
4463 phba->mbox_ext_buf_ctx.numBuf);
4464 /* mailbox command structure for base driver */
4465 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4466 if (!pmboxq) {
4467 rc = -ENOMEM;
4468 goto job_error;
4469 }
4470 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4471 pbuf = (uint8_t *)phba->mbox_ext_buf_ctx.mbx_dmabuf->virt;
4472 pmb = &pmboxq->u.mb;
4473 memcpy(pmb, pbuf, sizeof(*pmb));
4474 pmb->mbxOwner = OWN_HOST;
4475 pmboxq->vport = phba->pport;
4476
4477 /* callback for multi-buffer write mailbox command */
4478 pmboxq->mbox_cmpl = lpfc_bsg_issue_write_mbox_ext_cmpl;
4479
4480 /* context fields to callback function */
4481 pmboxq->context1 = dd_data;
4482 dd_data->type = TYPE_MBOX;
4483 dd_data->set_job = job;
4484 dd_data->context_un.mbox.pmboxq = pmboxq;
4485 dd_data->context_un.mbox.mb = (MAILBOX_t *)pbuf;
4486 job->dd_data = dd_data;
4487
4488 /* state change */
4489 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
4490
4491 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4492 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
4493 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4494 "2969 Issued SLI_CONFIG ext-buffer "
4495 "maibox command, rc:x%x\n", rc);
4496 return SLI_CONFIG_HANDLED;
4497 }
4498 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4499 "2970 Failed to issue SLI_CONFIG ext-buffer "
4500 "maibox command, rc:x%x\n", rc);
4501 rc = -EPIPE;
4502 goto job_error;
4503 }
4504
4505 /* wait for additoinal external buffers */
4506 bsg_reply->result = 0;
4507 bsg_job_done(job, bsg_reply->result,
4508 bsg_reply->reply_payload_rcv_len);
4509 return SLI_CONFIG_HANDLED;
4510
4511 job_error:
4512 lpfc_bsg_dma_page_free(phba, dmabuf);
4513 kfree(dd_data);
4514
4515 return rc;
4516 }
4517
4518 /**
4519 * lpfc_bsg_handle_sli_cfg_ebuf - handle ext buffer with sli-cfg mailbox cmd
4520 * @phba: Pointer to HBA context object.
4521 * @mb: Pointer to a BSG mailbox object.
4522 * @dmabuff: Pointer to a DMA buffer descriptor.
4523 *
4524 * This routine handles the external buffer with SLI_CONFIG (0x9B) mailbox
4525 * command with multiple non-embedded external buffers.
4526 **/
4527 static int
4528 lpfc_bsg_handle_sli_cfg_ebuf(struct lpfc_hba *phba, struct bsg_job *job,
4529 struct lpfc_dmabuf *dmabuf)
4530 {
4531 int rc;
4532
4533 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4534 "2971 SLI_CONFIG buffer (type:x%x)\n",
4535 phba->mbox_ext_buf_ctx.mboxType);
4536
4537 if (phba->mbox_ext_buf_ctx.mboxType == mbox_rd) {
4538 if (phba->mbox_ext_buf_ctx.state != LPFC_BSG_MBOX_DONE) {
4539 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4540 "2972 SLI_CONFIG rd buffer state "
4541 "mismatch:x%x\n",
4542 phba->mbox_ext_buf_ctx.state);
4543 lpfc_bsg_mbox_ext_abort(phba);
4544 return -EPIPE;
4545 }
4546 rc = lpfc_bsg_read_ebuf_get(phba, job);
4547 if (rc == SLI_CONFIG_HANDLED)
4548 lpfc_bsg_dma_page_free(phba, dmabuf);
4549 } else { /* phba->mbox_ext_buf_ctx.mboxType == mbox_wr */
4550 if (phba->mbox_ext_buf_ctx.state != LPFC_BSG_MBOX_HOST) {
4551 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4552 "2973 SLI_CONFIG wr buffer state "
4553 "mismatch:x%x\n",
4554 phba->mbox_ext_buf_ctx.state);
4555 lpfc_bsg_mbox_ext_abort(phba);
4556 return -EPIPE;
4557 }
4558 rc = lpfc_bsg_write_ebuf_set(phba, job, dmabuf);
4559 }
4560 return rc;
4561 }
4562
4563 /**
4564 * lpfc_bsg_handle_sli_cfg_ext - handle sli-cfg mailbox with external buffer
4565 * @phba: Pointer to HBA context object.
4566 * @mb: Pointer to a BSG mailbox object.
4567 * @dmabuff: Pointer to a DMA buffer descriptor.
4568 *
4569 * This routine checkes and handles non-embedded multi-buffer SLI_CONFIG
4570 * (0x9B) mailbox commands and external buffers.
4571 **/
4572 static int
4573 lpfc_bsg_handle_sli_cfg_ext(struct lpfc_hba *phba, struct bsg_job *job,
4574 struct lpfc_dmabuf *dmabuf)
4575 {
4576 struct fc_bsg_request *bsg_request = job->request;
4577 struct dfc_mbox_req *mbox_req;
4578 int rc = SLI_CONFIG_NOT_HANDLED;
4579
4580 mbox_req =
4581 (struct dfc_mbox_req *)bsg_request->rqst_data.h_vendor.vendor_cmd;
4582
4583 /* mbox command with/without single external buffer */
4584 if (mbox_req->extMboxTag == 0 && mbox_req->extSeqNum == 0)
4585 return rc;
4586
4587 /* mbox command and first external buffer */
4588 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_IDLE) {
4589 if (mbox_req->extSeqNum == 1) {
4590 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4591 "2974 SLI_CONFIG mailbox: tag:%d, "
4592 "seq:%d\n", mbox_req->extMboxTag,
4593 mbox_req->extSeqNum);
4594 rc = lpfc_bsg_handle_sli_cfg_mbox(phba, job, dmabuf);
4595 return rc;
4596 } else
4597 goto sli_cfg_ext_error;
4598 }
4599
4600 /*
4601 * handle additional external buffers
4602 */
4603
4604 /* check broken pipe conditions */
4605 if (mbox_req->extMboxTag != phba->mbox_ext_buf_ctx.mbxTag)
4606 goto sli_cfg_ext_error;
4607 if (mbox_req->extSeqNum > phba->mbox_ext_buf_ctx.numBuf)
4608 goto sli_cfg_ext_error;
4609 if (mbox_req->extSeqNum != phba->mbox_ext_buf_ctx.seqNum + 1)
4610 goto sli_cfg_ext_error;
4611
4612 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4613 "2975 SLI_CONFIG mailbox external buffer: "
4614 "extSta:x%x, tag:%d, seq:%d\n",
4615 phba->mbox_ext_buf_ctx.state, mbox_req->extMboxTag,
4616 mbox_req->extSeqNum);
4617 rc = lpfc_bsg_handle_sli_cfg_ebuf(phba, job, dmabuf);
4618 return rc;
4619
4620 sli_cfg_ext_error:
4621 /* all other cases, broken pipe */
4622 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4623 "2976 SLI_CONFIG mailbox broken pipe: "
4624 "ctxSta:x%x, ctxNumBuf:%d "
4625 "ctxTag:%d, ctxSeq:%d, tag:%d, seq:%d\n",
4626 phba->mbox_ext_buf_ctx.state,
4627 phba->mbox_ext_buf_ctx.numBuf,
4628 phba->mbox_ext_buf_ctx.mbxTag,
4629 phba->mbox_ext_buf_ctx.seqNum,
4630 mbox_req->extMboxTag, mbox_req->extSeqNum);
4631
4632 lpfc_bsg_mbox_ext_session_reset(phba);
4633
4634 return -EPIPE;
4635 }
4636
4637 /**
4638 * lpfc_bsg_issue_mbox - issues a mailbox command on behalf of an app
4639 * @phba: Pointer to HBA context object.
4640 * @mb: Pointer to a mailbox object.
4641 * @vport: Pointer to a vport object.
4642 *
4643 * Allocate a tracking object, mailbox command memory, get a mailbox
4644 * from the mailbox pool, copy the caller mailbox command.
4645 *
4646 * If offline and the sli is active we need to poll for the command (port is
4647 * being reset) and com-plete the job, otherwise issue the mailbox command and
4648 * let our completion handler finish the command.
4649 **/
4650 static int
4651 lpfc_bsg_issue_mbox(struct lpfc_hba *phba, struct bsg_job *job,
4652 struct lpfc_vport *vport)
4653 {
4654 struct fc_bsg_request *bsg_request = job->request;
4655 struct fc_bsg_reply *bsg_reply = job->reply;
4656 LPFC_MBOXQ_t *pmboxq = NULL; /* internal mailbox queue */
4657 MAILBOX_t *pmb; /* shortcut to the pmboxq mailbox */
4658 /* a 4k buffer to hold the mb and extended data from/to the bsg */
4659 uint8_t *pmbx = NULL;
4660 struct bsg_job_data *dd_data = NULL; /* bsg data tracking structure */
4661 struct lpfc_dmabuf *dmabuf = NULL;
4662 struct dfc_mbox_req *mbox_req;
4663 struct READ_EVENT_LOG_VAR *rdEventLog;
4664 uint32_t transmit_length, receive_length, mode;
4665 struct lpfc_mbx_sli4_config *sli4_config;
4666 struct lpfc_mbx_nembed_cmd *nembed_sge;
4667 struct ulp_bde64 *bde;
4668 uint8_t *ext = NULL;
4669 int rc = 0;
4670 uint8_t *from;
4671 uint32_t size;
4672
4673 /* in case no data is transferred */
4674 bsg_reply->reply_payload_rcv_len = 0;
4675
4676 /* sanity check to protect driver */
4677 if (job->reply_payload.payload_len > BSG_MBOX_SIZE ||
4678 job->request_payload.payload_len > BSG_MBOX_SIZE) {
4679 rc = -ERANGE;
4680 goto job_done;
4681 }
4682
4683 /*
4684 * Don't allow mailbox commands to be sent when blocked or when in
4685 * the middle of discovery
4686 */
4687 if (phba->sli.sli_flag & LPFC_BLOCK_MGMT_IO) {
4688 rc = -EAGAIN;
4689 goto job_done;
4690 }
4691
4692 mbox_req =
4693 (struct dfc_mbox_req *)bsg_request->rqst_data.h_vendor.vendor_cmd;
4694
4695 /* check if requested extended data lengths are valid */
4696 if ((mbox_req->inExtWLen > BSG_MBOX_SIZE/sizeof(uint32_t)) ||
4697 (mbox_req->outExtWLen > BSG_MBOX_SIZE/sizeof(uint32_t))) {
4698 rc = -ERANGE;
4699 goto job_done;
4700 }
4701
4702 dmabuf = lpfc_bsg_dma_page_alloc(phba);
4703 if (!dmabuf || !dmabuf->virt) {
4704 rc = -ENOMEM;
4705 goto job_done;
4706 }
4707
4708 /* Get the mailbox command or external buffer from BSG */
4709 pmbx = (uint8_t *)dmabuf->virt;
4710 size = job->request_payload.payload_len;
4711 sg_copy_to_buffer(job->request_payload.sg_list,
4712 job->request_payload.sg_cnt, pmbx, size);
4713
4714 /* Handle possible SLI_CONFIG with non-embedded payloads */
4715 if (phba->sli_rev == LPFC_SLI_REV4) {
4716 rc = lpfc_bsg_handle_sli_cfg_ext(phba, job, dmabuf);
4717 if (rc == SLI_CONFIG_HANDLED)
4718 goto job_cont;
4719 if (rc)
4720 goto job_done;
4721 /* SLI_CONFIG_NOT_HANDLED for other mailbox commands */
4722 }
4723
4724 rc = lpfc_bsg_check_cmd_access(phba, (MAILBOX_t *)pmbx, vport);
4725 if (rc != 0)
4726 goto job_done; /* must be negative */
4727
4728 /* allocate our bsg tracking structure */
4729 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4730 if (!dd_data) {
4731 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
4732 "2727 Failed allocation of dd_data\n");
4733 rc = -ENOMEM;
4734 goto job_done;
4735 }
4736
4737 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4738 if (!pmboxq) {
4739 rc = -ENOMEM;
4740 goto job_done;
4741 }
4742 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4743
4744 pmb = &pmboxq->u.mb;
4745 memcpy(pmb, pmbx, sizeof(*pmb));
4746 pmb->mbxOwner = OWN_HOST;
4747 pmboxq->vport = vport;
4748
4749 /* If HBA encountered an error attention, allow only DUMP
4750 * or RESTART mailbox commands until the HBA is restarted.
4751 */
4752 if (phba->pport->stopped &&
4753 pmb->mbxCommand != MBX_DUMP_MEMORY &&
4754 pmb->mbxCommand != MBX_RESTART &&
4755 pmb->mbxCommand != MBX_WRITE_VPARMS &&
4756 pmb->mbxCommand != MBX_WRITE_WWN)
4757 lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX,
4758 "2797 mbox: Issued mailbox cmd "
4759 "0x%x while in stopped state.\n",
4760 pmb->mbxCommand);
4761
4762 /* extended mailbox commands will need an extended buffer */
4763 if (mbox_req->inExtWLen || mbox_req->outExtWLen) {
4764 from = pmbx;
4765 ext = from + sizeof(MAILBOX_t);
4766 pmboxq->context2 = ext;
4767 pmboxq->in_ext_byte_len =
4768 mbox_req->inExtWLen * sizeof(uint32_t);
4769 pmboxq->out_ext_byte_len =
4770 mbox_req->outExtWLen * sizeof(uint32_t);
4771 pmboxq->mbox_offset_word = mbox_req->mbOffset;
4772 }
4773
4774 /* biu diag will need a kernel buffer to transfer the data
4775 * allocate our own buffer and setup the mailbox command to
4776 * use ours
4777 */
4778 if (pmb->mbxCommand == MBX_RUN_BIU_DIAG64) {
4779 transmit_length = pmb->un.varWords[1];
4780 receive_length = pmb->un.varWords[4];
4781 /* transmit length cannot be greater than receive length or
4782 * mailbox extension size
4783 */
4784 if ((transmit_length > receive_length) ||
4785 (transmit_length > BSG_MBOX_SIZE - sizeof(MAILBOX_t))) {
4786 rc = -ERANGE;
4787 goto job_done;
4788 }
4789 pmb->un.varBIUdiag.un.s2.xmit_bde64.addrHigh =
4790 putPaddrHigh(dmabuf->phys + sizeof(MAILBOX_t));
4791 pmb->un.varBIUdiag.un.s2.xmit_bde64.addrLow =
4792 putPaddrLow(dmabuf->phys + sizeof(MAILBOX_t));
4793
4794 pmb->un.varBIUdiag.un.s2.rcv_bde64.addrHigh =
4795 putPaddrHigh(dmabuf->phys + sizeof(MAILBOX_t)
4796 + pmb->un.varBIUdiag.un.s2.xmit_bde64.tus.f.bdeSize);
4797 pmb->un.varBIUdiag.un.s2.rcv_bde64.addrLow =
4798 putPaddrLow(dmabuf->phys + sizeof(MAILBOX_t)
4799 + pmb->un.varBIUdiag.un.s2.xmit_bde64.tus.f.bdeSize);
4800 } else if (pmb->mbxCommand == MBX_READ_EVENT_LOG) {
4801 rdEventLog = &pmb->un.varRdEventLog;
4802 receive_length = rdEventLog->rcv_bde64.tus.f.bdeSize;
4803 mode = bf_get(lpfc_event_log, rdEventLog);
4804
4805 /* receive length cannot be greater than mailbox
4806 * extension size
4807 */
4808 if (receive_length > BSG_MBOX_SIZE - sizeof(MAILBOX_t)) {
4809 rc = -ERANGE;
4810 goto job_done;
4811 }
4812
4813 /* mode zero uses a bde like biu diags command */
4814 if (mode == 0) {
4815 pmb->un.varWords[3] = putPaddrLow(dmabuf->phys
4816 + sizeof(MAILBOX_t));
4817 pmb->un.varWords[4] = putPaddrHigh(dmabuf->phys
4818 + sizeof(MAILBOX_t));
4819 }
4820 } else if (phba->sli_rev == LPFC_SLI_REV4) {
4821 /* Let type 4 (well known data) through because the data is
4822 * returned in varwords[4-8]
4823 * otherwise check the recieve length and fetch the buffer addr
4824 */
4825 if ((pmb->mbxCommand == MBX_DUMP_MEMORY) &&
4826 (pmb->un.varDmp.type != DMP_WELL_KNOWN)) {
4827 /* rebuild the command for sli4 using our own buffers
4828 * like we do for biu diags
4829 */
4830 receive_length = pmb->un.varWords[2];
4831 /* receive length cannot be greater than mailbox
4832 * extension size
4833 */
4834 if (receive_length == 0) {
4835 rc = -ERANGE;
4836 goto job_done;
4837 }
4838 pmb->un.varWords[3] = putPaddrLow(dmabuf->phys
4839 + sizeof(MAILBOX_t));
4840 pmb->un.varWords[4] = putPaddrHigh(dmabuf->phys
4841 + sizeof(MAILBOX_t));
4842 } else if ((pmb->mbxCommand == MBX_UPDATE_CFG) &&
4843 pmb->un.varUpdateCfg.co) {
4844 bde = (struct ulp_bde64 *)&pmb->un.varWords[4];
4845
4846 /* bde size cannot be greater than mailbox ext size */
4847 if (bde->tus.f.bdeSize >
4848 BSG_MBOX_SIZE - sizeof(MAILBOX_t)) {
4849 rc = -ERANGE;
4850 goto job_done;
4851 }
4852 bde->addrHigh = putPaddrHigh(dmabuf->phys
4853 + sizeof(MAILBOX_t));
4854 bde->addrLow = putPaddrLow(dmabuf->phys
4855 + sizeof(MAILBOX_t));
4856 } else if (pmb->mbxCommand == MBX_SLI4_CONFIG) {
4857 /* Handling non-embedded SLI_CONFIG mailbox command */
4858 sli4_config = &pmboxq->u.mqe.un.sli4_config;
4859 if (!bf_get(lpfc_mbox_hdr_emb,
4860 &sli4_config->header.cfg_mhdr)) {
4861 /* rebuild the command for sli4 using our
4862 * own buffers like we do for biu diags
4863 */
4864 nembed_sge = (struct lpfc_mbx_nembed_cmd *)
4865 &pmb->un.varWords[0];
4866 receive_length = nembed_sge->sge[0].length;
4867
4868 /* receive length cannot be greater than
4869 * mailbox extension size
4870 */
4871 if ((receive_length == 0) ||
4872 (receive_length >
4873 BSG_MBOX_SIZE - sizeof(MAILBOX_t))) {
4874 rc = -ERANGE;
4875 goto job_done;
4876 }
4877
4878 nembed_sge->sge[0].pa_hi =
4879 putPaddrHigh(dmabuf->phys
4880 + sizeof(MAILBOX_t));
4881 nembed_sge->sge[0].pa_lo =
4882 putPaddrLow(dmabuf->phys
4883 + sizeof(MAILBOX_t));
4884 }
4885 }
4886 }
4887
4888 dd_data->context_un.mbox.dmabuffers = dmabuf;
4889
4890 /* setup wake call as IOCB callback */
4891 pmboxq->mbox_cmpl = lpfc_bsg_issue_mbox_cmpl;
4892
4893 /* setup context field to pass wait_queue pointer to wake function */
4894 pmboxq->context1 = dd_data;
4895 dd_data->type = TYPE_MBOX;
4896 dd_data->set_job = job;
4897 dd_data->context_un.mbox.pmboxq = pmboxq;
4898 dd_data->context_un.mbox.mb = (MAILBOX_t *)pmbx;
4899 dd_data->context_un.mbox.ext = ext;
4900 dd_data->context_un.mbox.mbOffset = mbox_req->mbOffset;
4901 dd_data->context_un.mbox.inExtWLen = mbox_req->inExtWLen;
4902 dd_data->context_un.mbox.outExtWLen = mbox_req->outExtWLen;
4903 job->dd_data = dd_data;
4904
4905 if ((vport->fc_flag & FC_OFFLINE_MODE) ||
4906 (!(phba->sli.sli_flag & LPFC_SLI_ACTIVE))) {
4907 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_POLL);
4908 if (rc != MBX_SUCCESS) {
4909 rc = (rc == MBX_TIMEOUT) ? -ETIME : -ENODEV;
4910 goto job_done;
4911 }
4912
4913 /* job finished, copy the data */
4914 memcpy(pmbx, pmb, sizeof(*pmb));
4915 bsg_reply->reply_payload_rcv_len =
4916 sg_copy_from_buffer(job->reply_payload.sg_list,
4917 job->reply_payload.sg_cnt,
4918 pmbx, size);
4919 /* not waiting mbox already done */
4920 rc = 0;
4921 goto job_done;
4922 }
4923
4924 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4925 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY))
4926 return 1; /* job started */
4927
4928 job_done:
4929 /* common exit for error or job completed inline */
4930 if (pmboxq)
4931 mempool_free(pmboxq, phba->mbox_mem_pool);
4932 lpfc_bsg_dma_page_free(phba, dmabuf);
4933 kfree(dd_data);
4934
4935 job_cont:
4936 return rc;
4937 }
4938
4939 /**
4940 * lpfc_bsg_mbox_cmd - process an fc bsg LPFC_BSG_VENDOR_MBOX command
4941 * @job: MBOX fc_bsg_job for LPFC_BSG_VENDOR_MBOX.
4942 **/
4943 static int
4944 lpfc_bsg_mbox_cmd(struct bsg_job *job)
4945 {
4946 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
4947 struct fc_bsg_request *bsg_request = job->request;
4948 struct fc_bsg_reply *bsg_reply = job->reply;
4949 struct lpfc_hba *phba = vport->phba;
4950 struct dfc_mbox_req *mbox_req;
4951 int rc = 0;
4952
4953 /* mix-and-match backward compatibility */
4954 bsg_reply->reply_payload_rcv_len = 0;
4955 if (job->request_len <
4956 sizeof(struct fc_bsg_request) + sizeof(struct dfc_mbox_req)) {
4957 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4958 "2737 Mix-and-match backward compatibility "
4959 "between MBOX_REQ old size:%d and "
4960 "new request size:%d\n",
4961 (int)(job->request_len -
4962 sizeof(struct fc_bsg_request)),
4963 (int)sizeof(struct dfc_mbox_req));
4964 mbox_req = (struct dfc_mbox_req *)
4965 bsg_request->rqst_data.h_vendor.vendor_cmd;
4966 mbox_req->extMboxTag = 0;
4967 mbox_req->extSeqNum = 0;
4968 }
4969
4970 rc = lpfc_bsg_issue_mbox(phba, job, vport);
4971
4972 if (rc == 0) {
4973 /* job done */
4974 bsg_reply->result = 0;
4975 job->dd_data = NULL;
4976 bsg_job_done(job, bsg_reply->result,
4977 bsg_reply->reply_payload_rcv_len);
4978 } else if (rc == 1)
4979 /* job submitted, will complete later*/
4980 rc = 0; /* return zero, no error */
4981 else {
4982 /* some error occurred */
4983 bsg_reply->result = rc;
4984 job->dd_data = NULL;
4985 }
4986
4987 return rc;
4988 }
4989
4990 /**
4991 * lpfc_bsg_menlo_cmd_cmp - lpfc_menlo_cmd completion handler
4992 * @phba: Pointer to HBA context object.
4993 * @cmdiocbq: Pointer to command iocb.
4994 * @rspiocbq: Pointer to response iocb.
4995 *
4996 * This function is the completion handler for iocbs issued using
4997 * lpfc_menlo_cmd function. This function is called by the
4998 * ring event handler function without any lock held. This function
4999 * can be called from both worker thread context and interrupt
5000 * context. This function also can be called from another thread which
5001 * cleans up the SLI layer objects.
5002 * This function copies the contents of the response iocb to the
5003 * response iocb memory object provided by the caller of
5004 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
5005 * sleeps for the iocb completion.
5006 **/
5007 static void
5008 lpfc_bsg_menlo_cmd_cmp(struct lpfc_hba *phba,
5009 struct lpfc_iocbq *cmdiocbq,
5010 struct lpfc_iocbq *rspiocbq)
5011 {
5012 struct bsg_job_data *dd_data;
5013 struct bsg_job *job;
5014 struct fc_bsg_reply *bsg_reply;
5015 IOCB_t *rsp;
5016 struct lpfc_dmabuf *bmp, *cmp, *rmp;
5017 struct lpfc_bsg_menlo *menlo;
5018 unsigned long flags;
5019 struct menlo_response *menlo_resp;
5020 unsigned int rsp_size;
5021 int rc = 0;
5022
5023 dd_data = cmdiocbq->context1;
5024 cmp = cmdiocbq->context2;
5025 bmp = cmdiocbq->context3;
5026 menlo = &dd_data->context_un.menlo;
5027 rmp = menlo->rmp;
5028 rsp = &rspiocbq->iocb;
5029
5030 /* Determine if job has been aborted */
5031 spin_lock_irqsave(&phba->ct_ev_lock, flags);
5032 job = dd_data->set_job;
5033 if (job) {
5034 bsg_reply = job->reply;
5035 /* Prevent timeout handling from trying to abort job */
5036 job->dd_data = NULL;
5037 }
5038 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5039
5040 /* Copy the job data or set the failing status for the job */
5041
5042 if (job) {
5043 /* always return the xri, this would be used in the case
5044 * of a menlo download to allow the data to be sent as a
5045 * continuation of the exchange.
5046 */
5047
5048 menlo_resp = (struct menlo_response *)
5049 bsg_reply->reply_data.vendor_reply.vendor_rsp;
5050 menlo_resp->xri = rsp->ulpContext;
5051 if (rsp->ulpStatus) {
5052 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
5053 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
5054 case IOERR_SEQUENCE_TIMEOUT:
5055 rc = -ETIMEDOUT;
5056 break;
5057 case IOERR_INVALID_RPI:
5058 rc = -EFAULT;
5059 break;
5060 default:
5061 rc = -EACCES;
5062 break;
5063 }
5064 } else {
5065 rc = -EACCES;
5066 }
5067 } else {
5068 rsp_size = rsp->un.genreq64.bdl.bdeSize;
5069 bsg_reply->reply_payload_rcv_len =
5070 lpfc_bsg_copy_data(rmp, &job->reply_payload,
5071 rsp_size, 0);
5072 }
5073
5074 }
5075
5076 lpfc_sli_release_iocbq(phba, cmdiocbq);
5077 lpfc_free_bsg_buffers(phba, cmp);
5078 lpfc_free_bsg_buffers(phba, rmp);
5079 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
5080 kfree(bmp);
5081 kfree(dd_data);
5082
5083 /* Complete the job if active */
5084
5085 if (job) {
5086 bsg_reply->result = rc;
5087 bsg_job_done(job, bsg_reply->result,
5088 bsg_reply->reply_payload_rcv_len);
5089 }
5090
5091 return;
5092 }
5093
5094 /**
5095 * lpfc_menlo_cmd - send an ioctl for menlo hardware
5096 * @job: fc_bsg_job to handle
5097 *
5098 * This function issues a gen request 64 CR ioctl for all menlo cmd requests,
5099 * all the command completions will return the xri for the command.
5100 * For menlo data requests a gen request 64 CX is used to continue the exchange
5101 * supplied in the menlo request header xri field.
5102 **/
5103 static int
5104 lpfc_menlo_cmd(struct bsg_job *job)
5105 {
5106 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
5107 struct fc_bsg_request *bsg_request = job->request;
5108 struct fc_bsg_reply *bsg_reply = job->reply;
5109 struct lpfc_hba *phba = vport->phba;
5110 struct lpfc_iocbq *cmdiocbq;
5111 IOCB_t *cmd;
5112 int rc = 0;
5113 struct menlo_command *menlo_cmd;
5114 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL, *rmp = NULL;
5115 int request_nseg;
5116 int reply_nseg;
5117 struct bsg_job_data *dd_data;
5118 struct ulp_bde64 *bpl = NULL;
5119
5120 /* in case no data is returned return just the return code */
5121 bsg_reply->reply_payload_rcv_len = 0;
5122
5123 if (job->request_len <
5124 sizeof(struct fc_bsg_request) +
5125 sizeof(struct menlo_command)) {
5126 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5127 "2784 Received MENLO_CMD request below "
5128 "minimum size\n");
5129 rc = -ERANGE;
5130 goto no_dd_data;
5131 }
5132
5133 if (job->reply_len <
5134 sizeof(struct fc_bsg_request) + sizeof(struct menlo_response)) {
5135 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5136 "2785 Received MENLO_CMD reply below "
5137 "minimum size\n");
5138 rc = -ERANGE;
5139 goto no_dd_data;
5140 }
5141
5142 if (!(phba->menlo_flag & HBA_MENLO_SUPPORT)) {
5143 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5144 "2786 Adapter does not support menlo "
5145 "commands\n");
5146 rc = -EPERM;
5147 goto no_dd_data;
5148 }
5149
5150 menlo_cmd = (struct menlo_command *)
5151 bsg_request->rqst_data.h_vendor.vendor_cmd;
5152
5153 /* allocate our bsg tracking structure */
5154 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
5155 if (!dd_data) {
5156 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5157 "2787 Failed allocation of dd_data\n");
5158 rc = -ENOMEM;
5159 goto no_dd_data;
5160 }
5161
5162 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
5163 if (!bmp) {
5164 rc = -ENOMEM;
5165 goto free_dd;
5166 }
5167
5168 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
5169 if (!bmp->virt) {
5170 rc = -ENOMEM;
5171 goto free_bmp;
5172 }
5173
5174 INIT_LIST_HEAD(&bmp->list);
5175
5176 bpl = (struct ulp_bde64 *)bmp->virt;
5177 request_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64);
5178 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
5179 1, bpl, &request_nseg);
5180 if (!cmp) {
5181 rc = -ENOMEM;
5182 goto free_bmp;
5183 }
5184 lpfc_bsg_copy_data(cmp, &job->request_payload,
5185 job->request_payload.payload_len, 1);
5186
5187 bpl += request_nseg;
5188 reply_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64) - request_nseg;
5189 rmp = lpfc_alloc_bsg_buffers(phba, job->reply_payload.payload_len, 0,
5190 bpl, &reply_nseg);
5191 if (!rmp) {
5192 rc = -ENOMEM;
5193 goto free_cmp;
5194 }
5195
5196 cmdiocbq = lpfc_sli_get_iocbq(phba);
5197 if (!cmdiocbq) {
5198 rc = -ENOMEM;
5199 goto free_rmp;
5200 }
5201
5202 cmd = &cmdiocbq->iocb;
5203 cmd->un.genreq64.bdl.ulpIoTag32 = 0;
5204 cmd->un.genreq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
5205 cmd->un.genreq64.bdl.addrLow = putPaddrLow(bmp->phys);
5206 cmd->un.genreq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
5207 cmd->un.genreq64.bdl.bdeSize =
5208 (request_nseg + reply_nseg) * sizeof(struct ulp_bde64);
5209 cmd->un.genreq64.w5.hcsw.Fctl = (SI | LA);
5210 cmd->un.genreq64.w5.hcsw.Dfctl = 0;
5211 cmd->un.genreq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CMD;
5212 cmd->un.genreq64.w5.hcsw.Type = MENLO_TRANSPORT_TYPE; /* 0xfe */
5213 cmd->ulpBdeCount = 1;
5214 cmd->ulpClass = CLASS3;
5215 cmd->ulpOwner = OWN_CHIP;
5216 cmd->ulpLe = 1; /* Limited Edition */
5217 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
5218 cmdiocbq->vport = phba->pport;
5219 /* We want the firmware to timeout before we do */
5220 cmd->ulpTimeout = MENLO_TIMEOUT - 5;
5221 cmdiocbq->iocb_cmpl = lpfc_bsg_menlo_cmd_cmp;
5222 cmdiocbq->context1 = dd_data;
5223 cmdiocbq->context2 = cmp;
5224 cmdiocbq->context3 = bmp;
5225 if (menlo_cmd->cmd == LPFC_BSG_VENDOR_MENLO_CMD) {
5226 cmd->ulpCommand = CMD_GEN_REQUEST64_CR;
5227 cmd->ulpPU = MENLO_PU; /* 3 */
5228 cmd->un.ulpWord[4] = MENLO_DID; /* 0x0000FC0E */
5229 cmd->ulpContext = MENLO_CONTEXT; /* 0 */
5230 } else {
5231 cmd->ulpCommand = CMD_GEN_REQUEST64_CX;
5232 cmd->ulpPU = 1;
5233 cmd->un.ulpWord[4] = 0;
5234 cmd->ulpContext = menlo_cmd->xri;
5235 }
5236
5237 dd_data->type = TYPE_MENLO;
5238 dd_data->set_job = job;
5239 dd_data->context_un.menlo.cmdiocbq = cmdiocbq;
5240 dd_data->context_un.menlo.rmp = rmp;
5241 job->dd_data = dd_data;
5242
5243 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq,
5244 MENLO_TIMEOUT - 5);
5245 if (rc == IOCB_SUCCESS)
5246 return 0; /* done for now */
5247
5248 lpfc_sli_release_iocbq(phba, cmdiocbq);
5249
5250 free_rmp:
5251 lpfc_free_bsg_buffers(phba, rmp);
5252 free_cmp:
5253 lpfc_free_bsg_buffers(phba, cmp);
5254 free_bmp:
5255 if (bmp->virt)
5256 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
5257 kfree(bmp);
5258 free_dd:
5259 kfree(dd_data);
5260 no_dd_data:
5261 /* make error code available to userspace */
5262 bsg_reply->result = rc;
5263 job->dd_data = NULL;
5264 return rc;
5265 }
5266
5267 static int
5268 lpfc_forced_link_speed(struct bsg_job *job)
5269 {
5270 struct Scsi_Host *shost = fc_bsg_to_shost(job);
5271 struct lpfc_vport *vport = shost_priv(shost);
5272 struct lpfc_hba *phba = vport->phba;
5273 struct fc_bsg_reply *bsg_reply = job->reply;
5274 struct forced_link_speed_support_reply *forced_reply;
5275 int rc = 0;
5276
5277 if (job->request_len <
5278 sizeof(struct fc_bsg_request) +
5279 sizeof(struct get_forced_link_speed_support)) {
5280 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5281 "0048 Received FORCED_LINK_SPEED request "
5282 "below minimum size\n");
5283 rc = -EINVAL;
5284 goto job_error;
5285 }
5286
5287 forced_reply = (struct forced_link_speed_support_reply *)
5288 bsg_reply->reply_data.vendor_reply.vendor_rsp;
5289
5290 if (job->reply_len <
5291 sizeof(struct fc_bsg_request) +
5292 sizeof(struct forced_link_speed_support_reply)) {
5293 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5294 "0049 Received FORCED_LINK_SPEED reply below "
5295 "minimum size\n");
5296 rc = -EINVAL;
5297 goto job_error;
5298 }
5299
5300 forced_reply->supported = (phba->hba_flag & HBA_FORCED_LINK_SPEED)
5301 ? LPFC_FORCED_LINK_SPEED_SUPPORTED
5302 : LPFC_FORCED_LINK_SPEED_NOT_SUPPORTED;
5303 job_error:
5304 bsg_reply->result = rc;
5305 if (rc == 0)
5306 bsg_job_done(job, bsg_reply->result,
5307 bsg_reply->reply_payload_rcv_len);
5308 return rc;
5309 }
5310
5311 /**
5312 * lpfc_bsg_hst_vendor - process a vendor-specific fc_bsg_job
5313 * @job: fc_bsg_job to handle
5314 **/
5315 static int
5316 lpfc_bsg_hst_vendor(struct bsg_job *job)
5317 {
5318 struct fc_bsg_request *bsg_request = job->request;
5319 struct fc_bsg_reply *bsg_reply = job->reply;
5320 int command = bsg_request->rqst_data.h_vendor.vendor_cmd[0];
5321 int rc;
5322
5323 switch (command) {
5324 case LPFC_BSG_VENDOR_SET_CT_EVENT:
5325 rc = lpfc_bsg_hba_set_event(job);
5326 break;
5327 case LPFC_BSG_VENDOR_GET_CT_EVENT:
5328 rc = lpfc_bsg_hba_get_event(job);
5329 break;
5330 case LPFC_BSG_VENDOR_SEND_MGMT_RESP:
5331 rc = lpfc_bsg_send_mgmt_rsp(job);
5332 break;
5333 case LPFC_BSG_VENDOR_DIAG_MODE:
5334 rc = lpfc_bsg_diag_loopback_mode(job);
5335 break;
5336 case LPFC_BSG_VENDOR_DIAG_MODE_END:
5337 rc = lpfc_sli4_bsg_diag_mode_end(job);
5338 break;
5339 case LPFC_BSG_VENDOR_DIAG_RUN_LOOPBACK:
5340 rc = lpfc_bsg_diag_loopback_run(job);
5341 break;
5342 case LPFC_BSG_VENDOR_LINK_DIAG_TEST:
5343 rc = lpfc_sli4_bsg_link_diag_test(job);
5344 break;
5345 case LPFC_BSG_VENDOR_GET_MGMT_REV:
5346 rc = lpfc_bsg_get_dfc_rev(job);
5347 break;
5348 case LPFC_BSG_VENDOR_MBOX:
5349 rc = lpfc_bsg_mbox_cmd(job);
5350 break;
5351 case LPFC_BSG_VENDOR_MENLO_CMD:
5352 case LPFC_BSG_VENDOR_MENLO_DATA:
5353 rc = lpfc_menlo_cmd(job);
5354 break;
5355 case LPFC_BSG_VENDOR_FORCED_LINK_SPEED:
5356 rc = lpfc_forced_link_speed(job);
5357 break;
5358 default:
5359 rc = -EINVAL;
5360 bsg_reply->reply_payload_rcv_len = 0;
5361 /* make error code available to userspace */
5362 bsg_reply->result = rc;
5363 break;
5364 }
5365
5366 return rc;
5367 }
5368
5369 /**
5370 * lpfc_bsg_request - handle a bsg request from the FC transport
5371 * @job: fc_bsg_job to handle
5372 **/
5373 int
5374 lpfc_bsg_request(struct bsg_job *job)
5375 {
5376 struct fc_bsg_request *bsg_request = job->request;
5377 struct fc_bsg_reply *bsg_reply = job->reply;
5378 uint32_t msgcode;
5379 int rc;
5380
5381 msgcode = bsg_request->msgcode;
5382 switch (msgcode) {
5383 case FC_BSG_HST_VENDOR:
5384 rc = lpfc_bsg_hst_vendor(job);
5385 break;
5386 case FC_BSG_RPT_ELS:
5387 rc = lpfc_bsg_rport_els(job);
5388 break;
5389 case FC_BSG_RPT_CT:
5390 rc = lpfc_bsg_send_mgmt_cmd(job);
5391 break;
5392 default:
5393 rc = -EINVAL;
5394 bsg_reply->reply_payload_rcv_len = 0;
5395 /* make error code available to userspace */
5396 bsg_reply->result = rc;
5397 break;
5398 }
5399
5400 return rc;
5401 }
5402
5403 /**
5404 * lpfc_bsg_timeout - handle timeout of a bsg request from the FC transport
5405 * @job: fc_bsg_job that has timed out
5406 *
5407 * This function just aborts the job's IOCB. The aborted IOCB will return to
5408 * the waiting function which will handle passing the error back to userspace
5409 **/
5410 int
5411 lpfc_bsg_timeout(struct bsg_job *job)
5412 {
5413 struct lpfc_vport *vport = shost_priv(fc_bsg_to_shost(job));
5414 struct lpfc_hba *phba = vport->phba;
5415 struct lpfc_iocbq *cmdiocb;
5416 struct lpfc_sli_ring *pring;
5417 struct bsg_job_data *dd_data;
5418 unsigned long flags;
5419 int rc = 0;
5420 LIST_HEAD(completions);
5421 struct lpfc_iocbq *check_iocb, *next_iocb;
5422
5423 pring = lpfc_phba_elsring(phba);
5424 if (unlikely(!pring))
5425 return -EIO;
5426
5427 /* if job's driver data is NULL, the command completed or is in the
5428 * the process of completing. In this case, return status to request
5429 * so the timeout is retried. This avoids double completion issues
5430 * and the request will be pulled off the timer queue when the
5431 * command's completion handler executes. Otherwise, prevent the
5432 * command's completion handler from executing the job done callback
5433 * and continue processing to abort the outstanding the command.
5434 */
5435
5436 spin_lock_irqsave(&phba->ct_ev_lock, flags);
5437 dd_data = (struct bsg_job_data *)job->dd_data;
5438 if (dd_data) {
5439 dd_data->set_job = NULL;
5440 job->dd_data = NULL;
5441 } else {
5442 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5443 return -EAGAIN;
5444 }
5445
5446 switch (dd_data->type) {
5447 case TYPE_IOCB:
5448 /* Check to see if IOCB was issued to the port or not. If not,
5449 * remove it from the txq queue and call cancel iocbs.
5450 * Otherwise, call abort iotag
5451 */
5452 cmdiocb = dd_data->context_un.iocb.cmdiocbq;
5453 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5454
5455 spin_lock_irqsave(&phba->hbalock, flags);
5456 /* make sure the I/O abort window is still open */
5457 if (!(cmdiocb->iocb_flag & LPFC_IO_CMD_OUTSTANDING)) {
5458 spin_unlock_irqrestore(&phba->hbalock, flags);
5459 return -EAGAIN;
5460 }
5461 list_for_each_entry_safe(check_iocb, next_iocb, &pring->txq,
5462 list) {
5463 if (check_iocb == cmdiocb) {
5464 list_move_tail(&check_iocb->list, &completions);
5465 break;
5466 }
5467 }
5468 if (list_empty(&completions))
5469 lpfc_sli_issue_abort_iotag(phba, pring, cmdiocb);
5470 spin_unlock_irqrestore(&phba->hbalock, flags);
5471 if (!list_empty(&completions)) {
5472 lpfc_sli_cancel_iocbs(phba, &completions,
5473 IOSTAT_LOCAL_REJECT,
5474 IOERR_SLI_ABORTED);
5475 }
5476 break;
5477
5478 case TYPE_EVT:
5479 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5480 break;
5481
5482 case TYPE_MBOX:
5483 /* Update the ext buf ctx state if needed */
5484
5485 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_PORT)
5486 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_ABTS;
5487 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5488 break;
5489 case TYPE_MENLO:
5490 /* Check to see if IOCB was issued to the port or not. If not,
5491 * remove it from the txq queue and call cancel iocbs.
5492 * Otherwise, call abort iotag.
5493 */
5494 cmdiocb = dd_data->context_un.menlo.cmdiocbq;
5495 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5496
5497 spin_lock_irqsave(&phba->hbalock, flags);
5498 list_for_each_entry_safe(check_iocb, next_iocb, &pring->txq,
5499 list) {
5500 if (check_iocb == cmdiocb) {
5501 list_move_tail(&check_iocb->list, &completions);
5502 break;
5503 }
5504 }
5505 if (list_empty(&completions))
5506 lpfc_sli_issue_abort_iotag(phba, pring, cmdiocb);
5507 spin_unlock_irqrestore(&phba->hbalock, flags);
5508 if (!list_empty(&completions)) {
5509 lpfc_sli_cancel_iocbs(phba, &completions,
5510 IOSTAT_LOCAL_REJECT,
5511 IOERR_SLI_ABORTED);
5512 }
5513 break;
5514 default:
5515 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5516 break;
5517 }
5518
5519 /* scsi transport fc fc_bsg_job_timeout expects a zero return code,
5520 * otherwise an error message will be displayed on the console
5521 * so always return success (zero)
5522 */
5523 return rc;
5524 }
Linux with added FPC-III support