3 * Started: Aug 9 by Lawrence Foard (entropy@world.std.com),
4 * to allow user process control of SCSI devices.
5 * Development Sponsored by Killy Corp. NY NY
7 * Original driver (sg.c):
8 * Copyright (C) 1992 Lawrence Foard
9 * Version 2 and 3 extensions to driver:
10 * Copyright (C) 1998 - 2005 Douglas Gilbert
12 * Modified 19-JAN-1998 Richard Gooch <rgooch@atnf.csiro.au> Devfs support
14 * This program is free software; you can redistribute it and/or modify
15 * it under the terms of the GNU General Public License as published by
16 * the Free Software Foundation; either version 2, or (at your option)
21 static int sg_version_num
= 30534; /* 2 digits for each component */
22 #define SG_VERSION_STR "3.5.34"
25 * D. P. Gilbert (dgilbert@interlog.com, dougg@triode.net.au), notes:
26 * - scsi logging is available via SCSI_LOG_TIMEOUT macros. First
27 * the kernel/module needs to be built with CONFIG_SCSI_LOGGING
28 * (otherwise the macros compile to empty statements).
31 #include <linux/module.h>
34 #include <linux/kernel.h>
35 #include <linux/sched.h>
36 #include <linux/string.h>
38 #include <linux/aio.h>
39 #include <linux/errno.h>
40 #include <linux/mtio.h>
41 #include <linux/ioctl.h>
42 #include <linux/slab.h>
43 #include <linux/fcntl.h>
44 #include <linux/init.h>
45 #include <linux/poll.h>
46 #include <linux/moduleparam.h>
47 #include <linux/cdev.h>
48 #include <linux/idr.h>
49 #include <linux/seq_file.h>
50 #include <linux/blkdev.h>
51 #include <linux/delay.h>
52 #include <linux/blktrace_api.h>
53 #include <linux/mutex.h>
54 #include <linux/ratelimit.h>
57 #include <scsi/scsi_dbg.h>
58 #include <scsi/scsi_host.h>
59 #include <scsi/scsi_driver.h>
60 #include <scsi/scsi_ioctl.h>
63 #include "scsi_logging.h"
65 #ifdef CONFIG_SCSI_PROC_FS
66 #include <linux/proc_fs.h>
67 static char *sg_version_date
= "20061027";
69 static int sg_proc_init(void);
70 static void sg_proc_cleanup(void);
73 #define SG_ALLOW_DIO_DEF 0
75 #define SG_MAX_DEVS 32768
78 * Suppose you want to calculate the formula muldiv(x,m,d)=int(x * m / d)
79 * Then when using 32 bit integers x * m may overflow during the calculation.
80 * Replacing muldiv(x) by muldiv(x)=((x % d) * m) / d + int(x / d) * m
81 * calculates the same, but prevents the overflow when both m and d
82 * are "small" numbers (like HZ and USER_HZ).
83 * Of course an overflow is inavoidable if the result of muldiv doesn't fit
86 #define MULDIV(X,MUL,DIV) ((((X % DIV) * MUL) / DIV) + ((X / DIV) * MUL))
88 #define SG_DEFAULT_TIMEOUT MULDIV(SG_DEFAULT_TIMEOUT_USER, HZ, USER_HZ)
90 int sg_big_buff
= SG_DEF_RESERVED_SIZE
;
91 /* N.B. This variable is readable and writeable via
92 /proc/scsi/sg/def_reserved_size . Each time sg_open() is called a buffer
93 of this size (or less if there is not enough memory) will be reserved
94 for use by this file descriptor. [Deprecated usage: this variable is also
95 readable via /proc/sys/kernel/sg-big-buff if the sg driver is built into
96 the kernel (i.e. it is not a module).] */
97 static int def_reserved_size
= -1; /* picks up init parameter */
98 static int sg_allow_dio
= SG_ALLOW_DIO_DEF
;
100 static int scatter_elem_sz
= SG_SCATTER_SZ
;
101 static int scatter_elem_sz_prev
= SG_SCATTER_SZ
;
103 #define SG_SECTOR_SZ 512
105 static int sg_add(struct device
*, struct class_interface
*);
106 static void sg_remove(struct device
*, struct class_interface
*);
108 static DEFINE_SPINLOCK(sg_open_exclusive_lock
);
110 static DEFINE_IDR(sg_index_idr
);
111 static DEFINE_RWLOCK(sg_index_lock
); /* Also used to lock
112 file descriptor list for device */
114 static struct class_interface sg_interface
= {
116 .remove_dev
= sg_remove
,
119 typedef struct sg_scatter_hold
{ /* holding area for scsi scatter gather info */
120 unsigned short k_use_sg
; /* Count of kernel scatter-gather pieces */
121 unsigned sglist_len
; /* size of malloc'd scatter-gather list ++ */
122 unsigned bufflen
; /* Size of (aggregate) data buffer */
125 char dio_in_use
; /* 0->indirect IO (or mmap), 1->dio */
126 unsigned char cmd_opcode
; /* first byte of command */
129 struct sg_device
; /* forward declarations */
132 typedef struct sg_request
{ /* SG_MAX_QUEUE requests outstanding per file */
133 struct sg_request
*nextrp
; /* NULL -> tail request (slist) */
134 struct sg_fd
*parentfp
; /* NULL -> not in use */
135 Sg_scatter_hold data
; /* hold buffer, perhaps scatter list */
136 sg_io_hdr_t header
; /* scsi command+info, see <scsi/sg.h> */
137 unsigned char sense_b
[SCSI_SENSE_BUFFERSIZE
];
138 char res_used
; /* 1 -> using reserve buffer, 0 -> not ... */
139 char orphan
; /* 1 -> drop on sight, 0 -> normal */
140 char sg_io_owned
; /* 1 -> packet belongs to SG_IO */
141 /* done protected by rq_list_lock */
142 char done
; /* 0->before bh, 1->before read, 2->read */
145 struct execute_work ew
;
148 typedef struct sg_fd
{ /* holds the state of a file descriptor */
149 /* sfd_siblings is protected by sg_index_lock */
150 struct list_head sfd_siblings
;
151 struct sg_device
*parentdp
; /* owning device */
152 wait_queue_head_t read_wait
; /* queue read until command done */
153 rwlock_t rq_list_lock
; /* protect access to list in req_arr */
154 int timeout
; /* defaults to SG_DEFAULT_TIMEOUT */
155 int timeout_user
; /* defaults to SG_DEFAULT_TIMEOUT_USER */
156 Sg_scatter_hold reserve
; /* buffer held for this file descriptor */
157 unsigned save_scat_len
; /* original length of trunc. scat. element */
158 Sg_request
*headrp
; /* head of request slist, NULL->empty */
159 struct fasync_struct
*async_qp
; /* used by asynchronous notification */
160 Sg_request req_arr
[SG_MAX_QUEUE
]; /* used as singly-linked list */
161 char low_dma
; /* as in parent but possibly overridden to 1 */
162 char force_packid
; /* 1 -> pack_id input to read(), 0 -> ignored */
163 char cmd_q
; /* 1 -> allow command queuing, 0 -> don't */
164 char next_cmd_len
; /* 0 -> automatic (def), >0 -> use on next write() */
165 char keep_orphan
; /* 0 -> drop orphan (def), 1 -> keep for read() */
166 char mmap_called
; /* 0 -> mmap() never called on this fd */
168 struct execute_work ew
;
171 typedef struct sg_device
{ /* holds the state of each scsi generic device */
172 struct scsi_device
*device
;
173 wait_queue_head_t o_excl_wait
; /* queue open() when O_EXCL in use */
174 int sg_tablesize
; /* adapter's max scatter-gather table size */
175 u32 index
; /* device index number */
176 /* sfds is protected by sg_index_lock */
177 struct list_head sfds
;
178 volatile char detached
; /* 0->attached, 1->detached pending removal */
179 /* exclude protected by sg_open_exclusive_lock */
180 char exclude
; /* opened for exclusive access */
181 char sgdebug
; /* 0->off, 1->sense, 9->dump dev, 10-> all devs */
182 struct gendisk
*disk
;
183 struct cdev
* cdev
; /* char_dev [sysfs: /sys/cdev/major/sg<n>] */
187 /* tasklet or soft irq callback */
188 static void sg_rq_end_io(struct request
*rq
, int uptodate
);
189 static int sg_start_req(Sg_request
*srp
, unsigned char *cmd
);
190 static int sg_finish_rem_req(Sg_request
* srp
);
191 static int sg_build_indirect(Sg_scatter_hold
* schp
, Sg_fd
* sfp
, int buff_size
);
192 static ssize_t
sg_new_read(Sg_fd
* sfp
, char __user
*buf
, size_t count
,
194 static ssize_t
sg_new_write(Sg_fd
*sfp
, struct file
*file
,
195 const char __user
*buf
, size_t count
, int blocking
,
196 int read_only
, int sg_io_owned
, Sg_request
**o_srp
);
197 static int sg_common_write(Sg_fd
* sfp
, Sg_request
* srp
,
198 unsigned char *cmnd
, int timeout
, int blocking
);
199 static int sg_read_oxfer(Sg_request
* srp
, char __user
*outp
, int num_read_xfer
);
200 static void sg_remove_scat(Sg_scatter_hold
* schp
);
201 static void sg_build_reserve(Sg_fd
* sfp
, int req_size
);
202 static void sg_link_reserve(Sg_fd
* sfp
, Sg_request
* srp
, int size
);
203 static void sg_unlink_reserve(Sg_fd
* sfp
, Sg_request
* srp
);
204 static Sg_fd
*sg_add_sfp(Sg_device
* sdp
, int dev
);
205 static void sg_remove_sfp(struct kref
*);
206 static Sg_request
*sg_get_rq_mark(Sg_fd
* sfp
, int pack_id
);
207 static Sg_request
*sg_add_request(Sg_fd
* sfp
);
208 static int sg_remove_request(Sg_fd
* sfp
, Sg_request
* srp
);
209 static int sg_res_in_use(Sg_fd
* sfp
);
210 static Sg_device
*sg_get_dev(int dev
);
211 static void sg_put_dev(Sg_device
*sdp
);
213 #define SZ_SG_HEADER sizeof(struct sg_header)
214 #define SZ_SG_IO_HDR sizeof(sg_io_hdr_t)
215 #define SZ_SG_IOVEC sizeof(sg_iovec_t)
216 #define SZ_SG_REQ_INFO sizeof(sg_req_info_t)
218 static int sg_allow_access(struct file
*filp
, unsigned char *cmd
)
220 struct sg_fd
*sfp
= filp
->private_data
;
222 if (sfp
->parentdp
->device
->type
== TYPE_SCANNER
)
225 return blk_verify_command(cmd
, filp
->f_mode
& FMODE_WRITE
);
228 static int get_exclude(Sg_device
*sdp
)
233 spin_lock_irqsave(&sg_open_exclusive_lock
, flags
);
235 spin_unlock_irqrestore(&sg_open_exclusive_lock
, flags
);
239 static int set_exclude(Sg_device
*sdp
, char val
)
243 spin_lock_irqsave(&sg_open_exclusive_lock
, flags
);
245 spin_unlock_irqrestore(&sg_open_exclusive_lock
, flags
);
249 static int sfds_list_empty(Sg_device
*sdp
)
254 read_lock_irqsave(&sg_index_lock
, flags
);
255 ret
= list_empty(&sdp
->sfds
);
256 read_unlock_irqrestore(&sg_index_lock
, flags
);
261 sg_open(struct inode
*inode
, struct file
*filp
)
263 int dev
= iminor(inode
);
264 int flags
= filp
->f_flags
;
265 struct request_queue
*q
;
271 nonseekable_open(inode
, filp
);
272 SCSI_LOG_TIMEOUT(3, printk("sg_open: dev=%d, flags=0x%x\n", dev
, flags
));
273 sdp
= sg_get_dev(dev
);
275 retval
= PTR_ERR(sdp
);
280 /* This driver's module count bumped by fops_get in <linux/fs.h> */
281 /* Prevent the device driver from vanishing while we sleep */
282 retval
= scsi_device_get(sdp
->device
);
286 retval
= scsi_autopm_get_device(sdp
->device
);
290 if (!((flags
& O_NONBLOCK
) ||
291 scsi_block_when_processing_errors(sdp
->device
))) {
293 /* we are in error recovery for this device */
297 if (flags
& O_EXCL
) {
298 if (O_RDONLY
== (flags
& O_ACCMODE
)) {
299 retval
= -EPERM
; /* Can't lock it with read only access */
302 if (!sfds_list_empty(sdp
) && (flags
& O_NONBLOCK
)) {
306 res
= wait_event_interruptible(sdp
->o_excl_wait
,
307 ((!sfds_list_empty(sdp
) || get_exclude(sdp
)) ? 0 : set_exclude(sdp
, 1)));
309 retval
= res
; /* -ERESTARTSYS because signal hit process */
312 } else if (get_exclude(sdp
)) { /* some other fd has an exclusive lock on dev */
313 if (flags
& O_NONBLOCK
) {
317 res
= wait_event_interruptible(sdp
->o_excl_wait
, !get_exclude(sdp
));
319 retval
= res
; /* -ERESTARTSYS because signal hit process */
327 if (sfds_list_empty(sdp
)) { /* no existing opens on this device */
329 q
= sdp
->device
->request_queue
;
330 sdp
->sg_tablesize
= queue_max_segments(q
);
332 if ((sfp
= sg_add_sfp(sdp
, dev
)))
333 filp
->private_data
= sfp
;
335 if (flags
& O_EXCL
) {
336 set_exclude(sdp
, 0); /* undo if error */
337 wake_up_interruptible(&sdp
->o_excl_wait
);
345 scsi_autopm_put_device(sdp
->device
);
347 scsi_device_put(sdp
->device
);
355 /* Following function was formerly called 'sg_close' */
357 sg_release(struct inode
*inode
, struct file
*filp
)
362 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
364 SCSI_LOG_TIMEOUT(3, printk("sg_release: %s\n", sdp
->disk
->disk_name
));
367 wake_up_interruptible(&sdp
->o_excl_wait
);
369 scsi_autopm_put_device(sdp
->device
);
370 kref_put(&sfp
->f_ref
, sg_remove_sfp
);
375 sg_read(struct file
*filp
, char __user
*buf
, size_t count
, loff_t
* ppos
)
380 int req_pack_id
= -1;
382 struct sg_header
*old_hdr
= NULL
;
385 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
387 SCSI_LOG_TIMEOUT(3, printk("sg_read: %s, count=%d\n",
388 sdp
->disk
->disk_name
, (int) count
));
390 if (!access_ok(VERIFY_WRITE
, buf
, count
))
392 if (sfp
->force_packid
&& (count
>= SZ_SG_HEADER
)) {
393 old_hdr
= kmalloc(SZ_SG_HEADER
, GFP_KERNEL
);
396 if (__copy_from_user(old_hdr
, buf
, SZ_SG_HEADER
)) {
400 if (old_hdr
->reply_len
< 0) {
401 if (count
>= SZ_SG_IO_HDR
) {
402 sg_io_hdr_t
*new_hdr
;
403 new_hdr
= kmalloc(SZ_SG_IO_HDR
, GFP_KERNEL
);
408 retval
=__copy_from_user
409 (new_hdr
, buf
, SZ_SG_IO_HDR
);
410 req_pack_id
= new_hdr
->pack_id
;
418 req_pack_id
= old_hdr
->pack_id
;
420 srp
= sg_get_rq_mark(sfp
, req_pack_id
);
421 if (!srp
) { /* now wait on packet to arrive */
426 if (filp
->f_flags
& O_NONBLOCK
) {
430 retval
= wait_event_interruptible(sfp
->read_wait
,
432 (srp
= sg_get_rq_mark(sfp
, req_pack_id
))));
438 /* -ERESTARTSYS as signal hit process */
442 if (srp
->header
.interface_id
!= '\0') {
443 retval
= sg_new_read(sfp
, buf
, count
, srp
);
448 if (old_hdr
== NULL
) {
449 old_hdr
= kmalloc(SZ_SG_HEADER
, GFP_KERNEL
);
455 memset(old_hdr
, 0, SZ_SG_HEADER
);
456 old_hdr
->reply_len
= (int) hp
->timeout
;
457 old_hdr
->pack_len
= old_hdr
->reply_len
; /* old, strange behaviour */
458 old_hdr
->pack_id
= hp
->pack_id
;
459 old_hdr
->twelve_byte
=
460 ((srp
->data
.cmd_opcode
>= 0xc0) && (12 == hp
->cmd_len
)) ? 1 : 0;
461 old_hdr
->target_status
= hp
->masked_status
;
462 old_hdr
->host_status
= hp
->host_status
;
463 old_hdr
->driver_status
= hp
->driver_status
;
464 if ((CHECK_CONDITION
& hp
->masked_status
) ||
465 (DRIVER_SENSE
& hp
->driver_status
))
466 memcpy(old_hdr
->sense_buffer
, srp
->sense_b
,
467 sizeof (old_hdr
->sense_buffer
));
468 switch (hp
->host_status
) {
469 /* This setup of 'result' is for backward compatibility and is best
470 ignored by the user who should use target, host + driver status */
472 case DID_PASSTHROUGH
:
479 old_hdr
->result
= EBUSY
;
486 old_hdr
->result
= EIO
;
489 old_hdr
->result
= (srp
->sense_b
[0] == 0 &&
490 hp
->masked_status
== GOOD
) ? 0 : EIO
;
493 old_hdr
->result
= EIO
;
497 /* Now copy the result back to the user buffer. */
498 if (count
>= SZ_SG_HEADER
) {
499 if (__copy_to_user(buf
, old_hdr
, SZ_SG_HEADER
)) {
504 if (count
> old_hdr
->reply_len
)
505 count
= old_hdr
->reply_len
;
506 if (count
> SZ_SG_HEADER
) {
507 if (sg_read_oxfer(srp
, buf
, count
- SZ_SG_HEADER
)) {
513 count
= (old_hdr
->result
== 0) ? 0 : -EIO
;
514 sg_finish_rem_req(srp
);
522 sg_new_read(Sg_fd
* sfp
, char __user
*buf
, size_t count
, Sg_request
* srp
)
524 sg_io_hdr_t
*hp
= &srp
->header
;
528 if (count
< SZ_SG_IO_HDR
) {
533 if ((hp
->mx_sb_len
> 0) && hp
->sbp
) {
534 if ((CHECK_CONDITION
& hp
->masked_status
) ||
535 (DRIVER_SENSE
& hp
->driver_status
)) {
536 int sb_len
= SCSI_SENSE_BUFFERSIZE
;
537 sb_len
= (hp
->mx_sb_len
> sb_len
) ? sb_len
: hp
->mx_sb_len
;
538 len
= 8 + (int) srp
->sense_b
[7]; /* Additional sense length field */
539 len
= (len
> sb_len
) ? sb_len
: len
;
540 if (copy_to_user(hp
->sbp
, srp
->sense_b
, len
)) {
547 if (hp
->masked_status
|| hp
->host_status
|| hp
->driver_status
)
548 hp
->info
|= SG_INFO_CHECK
;
549 if (copy_to_user(buf
, hp
, SZ_SG_IO_HDR
)) {
554 err2
= sg_finish_rem_req(srp
);
555 return err
? : err2
? : count
;
559 sg_write(struct file
*filp
, const char __user
*buf
, size_t count
, loff_t
* ppos
)
561 int mxsize
, cmd_size
, k
;
562 int input_size
, blocking
;
563 unsigned char opcode
;
567 struct sg_header old_hdr
;
569 unsigned char cmnd
[MAX_COMMAND_SIZE
];
571 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
573 SCSI_LOG_TIMEOUT(3, printk("sg_write: %s, count=%d\n",
574 sdp
->disk
->disk_name
, (int) count
));
577 if (!((filp
->f_flags
& O_NONBLOCK
) ||
578 scsi_block_when_processing_errors(sdp
->device
)))
581 if (!access_ok(VERIFY_READ
, buf
, count
))
582 return -EFAULT
; /* protects following copy_from_user()s + get_user()s */
583 if (count
< SZ_SG_HEADER
)
585 if (__copy_from_user(&old_hdr
, buf
, SZ_SG_HEADER
))
587 blocking
= !(filp
->f_flags
& O_NONBLOCK
);
588 if (old_hdr
.reply_len
< 0)
589 return sg_new_write(sfp
, filp
, buf
, count
,
590 blocking
, 0, 0, NULL
);
591 if (count
< (SZ_SG_HEADER
+ 6))
592 return -EIO
; /* The minimum scsi command length is 6 bytes. */
594 if (!(srp
= sg_add_request(sfp
))) {
595 SCSI_LOG_TIMEOUT(1, printk("sg_write: queue full\n"));
599 __get_user(opcode
, buf
);
600 if (sfp
->next_cmd_len
> 0) {
601 if (sfp
->next_cmd_len
> MAX_COMMAND_SIZE
) {
602 SCSI_LOG_TIMEOUT(1, printk("sg_write: command length too long\n"));
603 sfp
->next_cmd_len
= 0;
604 sg_remove_request(sfp
, srp
);
607 cmd_size
= sfp
->next_cmd_len
;
608 sfp
->next_cmd_len
= 0; /* reset so only this write() effected */
610 cmd_size
= COMMAND_SIZE(opcode
); /* based on SCSI command group */
611 if ((opcode
>= 0xc0) && old_hdr
.twelve_byte
)
614 SCSI_LOG_TIMEOUT(4, printk(
615 "sg_write: scsi opcode=0x%02x, cmd_size=%d\n", (int) opcode
, cmd_size
));
616 /* Determine buffer size. */
617 input_size
= count
- cmd_size
;
618 mxsize
= (input_size
> old_hdr
.reply_len
) ? input_size
: old_hdr
.reply_len
;
619 mxsize
-= SZ_SG_HEADER
;
620 input_size
-= SZ_SG_HEADER
;
621 if (input_size
< 0) {
622 sg_remove_request(sfp
, srp
);
623 return -EIO
; /* User did not pass enough bytes for this command. */
626 hp
->interface_id
= '\0'; /* indicator of old interface tunnelled */
627 hp
->cmd_len
= (unsigned char) cmd_size
;
631 hp
->dxfer_direction
= (old_hdr
.reply_len
> SZ_SG_HEADER
) ?
632 SG_DXFER_TO_FROM_DEV
: SG_DXFER_TO_DEV
;
634 hp
->dxfer_direction
= (mxsize
> 0) ? SG_DXFER_FROM_DEV
: SG_DXFER_NONE
;
635 hp
->dxfer_len
= mxsize
;
636 if ((hp
->dxfer_direction
== SG_DXFER_TO_DEV
) ||
637 (hp
->dxfer_direction
== SG_DXFER_TO_FROM_DEV
))
638 hp
->dxferp
= (char __user
*)buf
+ cmd_size
;
642 hp
->timeout
= old_hdr
.reply_len
; /* structure abuse ... */
643 hp
->flags
= input_size
; /* structure abuse ... */
644 hp
->pack_id
= old_hdr
.pack_id
;
646 if (__copy_from_user(cmnd
, buf
, cmd_size
))
649 * SG_DXFER_TO_FROM_DEV is functionally equivalent to SG_DXFER_FROM_DEV,
650 * but is is possible that the app intended SG_DXFER_TO_DEV, because there
651 * is a non-zero input_size, so emit a warning.
653 if (hp
->dxfer_direction
== SG_DXFER_TO_FROM_DEV
) {
654 static char cmd
[TASK_COMM_LEN
];
655 if (strcmp(current
->comm
, cmd
)) {
656 printk_ratelimited(KERN_WARNING
657 "sg_write: data in/out %d/%d bytes "
658 "for SCSI command 0x%x-- guessing "
659 "data in;\n program %s not setting "
660 "count and/or reply_len properly\n",
661 old_hdr
.reply_len
- (int)SZ_SG_HEADER
,
662 input_size
, (unsigned int) cmnd
[0],
664 strcpy(cmd
, current
->comm
);
667 k
= sg_common_write(sfp
, srp
, cmnd
, sfp
->timeout
, blocking
);
668 return (k
< 0) ? k
: count
;
672 sg_new_write(Sg_fd
*sfp
, struct file
*file
, const char __user
*buf
,
673 size_t count
, int blocking
, int read_only
, int sg_io_owned
,
679 unsigned char cmnd
[MAX_COMMAND_SIZE
];
681 unsigned long ul_timeout
;
683 if (count
< SZ_SG_IO_HDR
)
685 if (!access_ok(VERIFY_READ
, buf
, count
))
686 return -EFAULT
; /* protects following copy_from_user()s + get_user()s */
688 sfp
->cmd_q
= 1; /* when sg_io_hdr seen, set command queuing on */
689 if (!(srp
= sg_add_request(sfp
))) {
690 SCSI_LOG_TIMEOUT(1, printk("sg_new_write: queue full\n"));
693 srp
->sg_io_owned
= sg_io_owned
;
695 if (__copy_from_user(hp
, buf
, SZ_SG_IO_HDR
)) {
696 sg_remove_request(sfp
, srp
);
699 if (hp
->interface_id
!= 'S') {
700 sg_remove_request(sfp
, srp
);
703 if (hp
->flags
& SG_FLAG_MMAP_IO
) {
704 if (hp
->dxfer_len
> sfp
->reserve
.bufflen
) {
705 sg_remove_request(sfp
, srp
);
706 return -ENOMEM
; /* MMAP_IO size must fit in reserve buffer */
708 if (hp
->flags
& SG_FLAG_DIRECT_IO
) {
709 sg_remove_request(sfp
, srp
);
710 return -EINVAL
; /* either MMAP_IO or DIRECT_IO (not both) */
712 if (sg_res_in_use(sfp
)) {
713 sg_remove_request(sfp
, srp
);
714 return -EBUSY
; /* reserve buffer already being used */
717 ul_timeout
= msecs_to_jiffies(srp
->header
.timeout
);
718 timeout
= (ul_timeout
< INT_MAX
) ? ul_timeout
: INT_MAX
;
719 if ((!hp
->cmdp
) || (hp
->cmd_len
< 6) || (hp
->cmd_len
> sizeof (cmnd
))) {
720 sg_remove_request(sfp
, srp
);
723 if (!access_ok(VERIFY_READ
, hp
->cmdp
, hp
->cmd_len
)) {
724 sg_remove_request(sfp
, srp
);
725 return -EFAULT
; /* protects following copy_from_user()s + get_user()s */
727 if (__copy_from_user(cmnd
, hp
->cmdp
, hp
->cmd_len
)) {
728 sg_remove_request(sfp
, srp
);
731 if (read_only
&& sg_allow_access(file
, cmnd
)) {
732 sg_remove_request(sfp
, srp
);
735 k
= sg_common_write(sfp
, srp
, cmnd
, timeout
, blocking
);
744 sg_common_write(Sg_fd
* sfp
, Sg_request
* srp
,
745 unsigned char *cmnd
, int timeout
, int blocking
)
748 Sg_device
*sdp
= sfp
->parentdp
;
749 sg_io_hdr_t
*hp
= &srp
->header
;
751 srp
->data
.cmd_opcode
= cmnd
[0]; /* hold opcode of command */
753 hp
->masked_status
= 0;
757 hp
->driver_status
= 0;
759 SCSI_LOG_TIMEOUT(4, printk("sg_common_write: scsi opcode=0x%02x, cmd_size=%d\n",
760 (int) cmnd
[0], (int) hp
->cmd_len
));
762 k
= sg_start_req(srp
, cmnd
);
764 SCSI_LOG_TIMEOUT(1, printk("sg_common_write: start_req err=%d\n", k
));
765 sg_finish_rem_req(srp
);
766 return k
; /* probably out of space --> ENOMEM */
770 blk_end_request_all(srp
->rq
, -EIO
);
771 sg_finish_rem_req(srp
);
775 switch (hp
->dxfer_direction
) {
776 case SG_DXFER_TO_FROM_DEV
:
777 case SG_DXFER_FROM_DEV
:
778 data_dir
= DMA_FROM_DEVICE
;
780 case SG_DXFER_TO_DEV
:
781 data_dir
= DMA_TO_DEVICE
;
783 case SG_DXFER_UNKNOWN
:
784 data_dir
= DMA_BIDIRECTIONAL
;
790 hp
->duration
= jiffies_to_msecs(jiffies
);
792 srp
->rq
->timeout
= timeout
;
793 kref_get(&sfp
->f_ref
); /* sg_rq_end_io() does kref_put(). */
794 blk_execute_rq_nowait(sdp
->device
->request_queue
, sdp
->disk
,
795 srp
->rq
, 1, sg_rq_end_io
);
799 static int srp_done(Sg_fd
*sfp
, Sg_request
*srp
)
804 read_lock_irqsave(&sfp
->rq_list_lock
, flags
);
806 read_unlock_irqrestore(&sfp
->rq_list_lock
, flags
);
811 sg_ioctl(struct file
*filp
, unsigned int cmd_in
, unsigned long arg
)
813 void __user
*p
= (void __user
*)arg
;
815 int result
, val
, read_only
;
819 unsigned long iflags
;
821 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
824 SCSI_LOG_TIMEOUT(3, printk("sg_ioctl: %s, cmd=0x%x\n",
825 sdp
->disk
->disk_name
, (int) cmd_in
));
826 read_only
= (O_RDWR
!= (filp
->f_flags
& O_ACCMODE
));
832 if (!scsi_block_when_processing_errors(sdp
->device
))
834 if (!access_ok(VERIFY_WRITE
, p
, SZ_SG_IO_HDR
))
836 result
= sg_new_write(sfp
, filp
, p
, SZ_SG_IO_HDR
,
837 1, read_only
, 1, &srp
);
840 result
= wait_event_interruptible(sfp
->read_wait
,
841 (srp_done(sfp
, srp
) || sdp
->detached
));
844 write_lock_irq(&sfp
->rq_list_lock
);
847 write_unlock_irq(&sfp
->rq_list_lock
);
848 result
= sg_new_read(sfp
, p
, SZ_SG_IO_HDR
, srp
);
849 return (result
< 0) ? result
: 0;
852 write_unlock_irq(&sfp
->rq_list_lock
);
853 return result
; /* -ERESTARTSYS because signal hit process */
855 result
= get_user(val
, ip
);
860 if (val
>= MULDIV (INT_MAX
, USER_HZ
, HZ
))
861 val
= MULDIV (INT_MAX
, USER_HZ
, HZ
);
862 sfp
->timeout_user
= val
;
863 sfp
->timeout
= MULDIV (val
, HZ
, USER_HZ
);
866 case SG_GET_TIMEOUT
: /* N.B. User receives timeout as return value */
867 /* strange ..., for backward compatibility */
868 return sfp
->timeout_user
;
869 case SG_SET_FORCE_LOW_DMA
:
870 result
= get_user(val
, ip
);
875 if ((0 == sfp
->low_dma
) && (0 == sg_res_in_use(sfp
))) {
876 val
= (int) sfp
->reserve
.bufflen
;
877 sg_remove_scat(&sfp
->reserve
);
878 sg_build_reserve(sfp
, val
);
883 sfp
->low_dma
= sdp
->device
->host
->unchecked_isa_dma
;
887 return put_user((int) sfp
->low_dma
, ip
);
889 if (!access_ok(VERIFY_WRITE
, p
, sizeof (sg_scsi_id_t
)))
892 sg_scsi_id_t __user
*sg_idp
= p
;
896 __put_user((int) sdp
->device
->host
->host_no
,
898 __put_user((int) sdp
->device
->channel
,
900 __put_user((int) sdp
->device
->id
, &sg_idp
->scsi_id
);
901 __put_user((int) sdp
->device
->lun
, &sg_idp
->lun
);
902 __put_user((int) sdp
->device
->type
, &sg_idp
->scsi_type
);
903 __put_user((short) sdp
->device
->host
->cmd_per_lun
,
904 &sg_idp
->h_cmd_per_lun
);
905 __put_user((short) sdp
->device
->queue_depth
,
906 &sg_idp
->d_queue_depth
);
907 __put_user(0, &sg_idp
->unused
[0]);
908 __put_user(0, &sg_idp
->unused
[1]);
911 case SG_SET_FORCE_PACK_ID
:
912 result
= get_user(val
, ip
);
915 sfp
->force_packid
= val
? 1 : 0;
918 if (!access_ok(VERIFY_WRITE
, ip
, sizeof (int)))
920 read_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
921 for (srp
= sfp
->headrp
; srp
; srp
= srp
->nextrp
) {
922 if ((1 == srp
->done
) && (!srp
->sg_io_owned
)) {
923 read_unlock_irqrestore(&sfp
->rq_list_lock
,
925 __put_user(srp
->header
.pack_id
, ip
);
929 read_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
932 case SG_GET_NUM_WAITING
:
933 read_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
934 for (val
= 0, srp
= sfp
->headrp
; srp
; srp
= srp
->nextrp
) {
935 if ((1 == srp
->done
) && (!srp
->sg_io_owned
))
938 read_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
939 return put_user(val
, ip
);
940 case SG_GET_SG_TABLESIZE
:
941 return put_user(sdp
->sg_tablesize
, ip
);
942 case SG_SET_RESERVED_SIZE
:
943 result
= get_user(val
, ip
);
948 val
= min_t(int, val
,
949 queue_max_sectors(sdp
->device
->request_queue
) * 512);
950 if (val
!= sfp
->reserve
.bufflen
) {
951 if (sg_res_in_use(sfp
) || sfp
->mmap_called
)
953 sg_remove_scat(&sfp
->reserve
);
954 sg_build_reserve(sfp
, val
);
957 case SG_GET_RESERVED_SIZE
:
958 val
= min_t(int, sfp
->reserve
.bufflen
,
959 queue_max_sectors(sdp
->device
->request_queue
) * 512);
960 return put_user(val
, ip
);
961 case SG_SET_COMMAND_Q
:
962 result
= get_user(val
, ip
);
965 sfp
->cmd_q
= val
? 1 : 0;
967 case SG_GET_COMMAND_Q
:
968 return put_user((int) sfp
->cmd_q
, ip
);
969 case SG_SET_KEEP_ORPHAN
:
970 result
= get_user(val
, ip
);
973 sfp
->keep_orphan
= val
;
975 case SG_GET_KEEP_ORPHAN
:
976 return put_user((int) sfp
->keep_orphan
, ip
);
977 case SG_NEXT_CMD_LEN
:
978 result
= get_user(val
, ip
);
981 sfp
->next_cmd_len
= (val
> 0) ? val
: 0;
983 case SG_GET_VERSION_NUM
:
984 return put_user(sg_version_num
, ip
);
985 case SG_GET_ACCESS_COUNT
:
986 /* faked - we don't have a real access count anymore */
987 val
= (sdp
->device
? 1 : 0);
988 return put_user(val
, ip
);
989 case SG_GET_REQUEST_TABLE
:
990 if (!access_ok(VERIFY_WRITE
, p
, SZ_SG_REQ_INFO
* SG_MAX_QUEUE
))
993 sg_req_info_t
*rinfo
;
996 rinfo
= kmalloc(SZ_SG_REQ_INFO
* SG_MAX_QUEUE
,
1000 read_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
1001 for (srp
= sfp
->headrp
, val
= 0; val
< SG_MAX_QUEUE
;
1002 ++val
, srp
= srp
? srp
->nextrp
: srp
) {
1003 memset(&rinfo
[val
], 0, SZ_SG_REQ_INFO
);
1005 rinfo
[val
].req_state
= srp
->done
+ 1;
1006 rinfo
[val
].problem
=
1007 srp
->header
.masked_status
&
1008 srp
->header
.host_status
&
1009 srp
->header
.driver_status
;
1011 rinfo
[val
].duration
=
1012 srp
->header
.duration
;
1014 ms
= jiffies_to_msecs(jiffies
);
1015 rinfo
[val
].duration
=
1016 (ms
> srp
->header
.duration
) ?
1017 (ms
- srp
->header
.duration
) : 0;
1019 rinfo
[val
].orphan
= srp
->orphan
;
1020 rinfo
[val
].sg_io_owned
=
1022 rinfo
[val
].pack_id
=
1023 srp
->header
.pack_id
;
1024 rinfo
[val
].usr_ptr
=
1025 srp
->header
.usr_ptr
;
1028 read_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
1029 result
= __copy_to_user(p
, rinfo
,
1030 SZ_SG_REQ_INFO
* SG_MAX_QUEUE
);
1031 result
= result
? -EFAULT
: 0;
1035 case SG_EMULATED_HOST
:
1038 return put_user(sdp
->device
->host
->hostt
->emulated
, ip
);
1042 if (filp
->f_flags
& O_NONBLOCK
) {
1043 if (scsi_host_in_recovery(sdp
->device
->host
))
1045 } else if (!scsi_block_when_processing_errors(sdp
->device
))
1047 result
= get_user(val
, ip
);
1050 if (SG_SCSI_RESET_NOTHING
== val
)
1053 case SG_SCSI_RESET_DEVICE
:
1054 val
= SCSI_TRY_RESET_DEVICE
;
1056 case SG_SCSI_RESET_TARGET
:
1057 val
= SCSI_TRY_RESET_TARGET
;
1059 case SG_SCSI_RESET_BUS
:
1060 val
= SCSI_TRY_RESET_BUS
;
1062 case SG_SCSI_RESET_HOST
:
1063 val
= SCSI_TRY_RESET_HOST
;
1068 if (!capable(CAP_SYS_ADMIN
) || !capable(CAP_SYS_RAWIO
))
1070 return (scsi_reset_provider(sdp
->device
, val
) ==
1071 SUCCESS
) ? 0 : -EIO
;
1072 case SCSI_IOCTL_SEND_COMMAND
:
1076 unsigned char opcode
= WRITE_6
;
1077 Scsi_Ioctl_Command __user
*siocp
= p
;
1079 if (copy_from_user(&opcode
, siocp
->data
, 1))
1081 if (sg_allow_access(filp
, &opcode
))
1084 return sg_scsi_ioctl(sdp
->device
->request_queue
, NULL
, filp
->f_mode
, p
);
1086 result
= get_user(val
, ip
);
1089 sdp
->sgdebug
= (char) val
;
1091 case SCSI_IOCTL_GET_IDLUN
:
1092 case SCSI_IOCTL_GET_BUS_NUMBER
:
1093 case SCSI_IOCTL_PROBE_HOST
:
1094 case SG_GET_TRANSFORM
:
1097 return scsi_ioctl(sdp
->device
, cmd_in
, p
);
1099 return put_user(queue_max_sectors(sdp
->device
->request_queue
) * 512,
1102 return blk_trace_setup(sdp
->device
->request_queue
,
1103 sdp
->disk
->disk_name
,
1104 MKDEV(SCSI_GENERIC_MAJOR
, sdp
->index
),
1108 return blk_trace_startstop(sdp
->device
->request_queue
, 1);
1110 return blk_trace_startstop(sdp
->device
->request_queue
, 0);
1111 case BLKTRACETEARDOWN
:
1112 return blk_trace_remove(sdp
->device
->request_queue
);
1115 return -EPERM
; /* don't know so take safe approach */
1116 return scsi_ioctl(sdp
->device
, cmd_in
, p
);
1120 #ifdef CONFIG_COMPAT
1121 static long sg_compat_ioctl(struct file
*filp
, unsigned int cmd_in
, unsigned long arg
)
1125 struct scsi_device
*sdev
;
1127 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
1131 if (sdev
->host
->hostt
->compat_ioctl
) {
1134 ret
= sdev
->host
->hostt
->compat_ioctl(sdev
, cmd_in
, (void __user
*)arg
);
1139 return -ENOIOCTLCMD
;
1144 sg_poll(struct file
*filp
, poll_table
* wait
)
1146 unsigned int res
= 0;
1151 unsigned long iflags
;
1153 sfp
= filp
->private_data
;
1156 sdp
= sfp
->parentdp
;
1159 poll_wait(filp
, &sfp
->read_wait
, wait
);
1160 read_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
1161 for (srp
= sfp
->headrp
; srp
; srp
= srp
->nextrp
) {
1162 /* if any read waiting, flag it */
1163 if ((0 == res
) && (1 == srp
->done
) && (!srp
->sg_io_owned
))
1164 res
= POLLIN
| POLLRDNORM
;
1167 read_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
1171 else if (!sfp
->cmd_q
) {
1173 res
|= POLLOUT
| POLLWRNORM
;
1174 } else if (count
< SG_MAX_QUEUE
)
1175 res
|= POLLOUT
| POLLWRNORM
;
1176 SCSI_LOG_TIMEOUT(3, printk("sg_poll: %s, res=0x%x\n",
1177 sdp
->disk
->disk_name
, (int) res
));
1182 sg_fasync(int fd
, struct file
*filp
, int mode
)
1187 if ((!(sfp
= (Sg_fd
*) filp
->private_data
)) || (!(sdp
= sfp
->parentdp
)))
1189 SCSI_LOG_TIMEOUT(3, printk("sg_fasync: %s, mode=%d\n",
1190 sdp
->disk
->disk_name
, mode
));
1192 return fasync_helper(fd
, filp
, mode
, &sfp
->async_qp
);
1196 sg_vma_fault(struct vm_area_struct
*vma
, struct vm_fault
*vmf
)
1199 unsigned long offset
, len
, sa
;
1200 Sg_scatter_hold
*rsv_schp
;
1203 if ((NULL
== vma
) || (!(sfp
= (Sg_fd
*) vma
->vm_private_data
)))
1204 return VM_FAULT_SIGBUS
;
1205 rsv_schp
= &sfp
->reserve
;
1206 offset
= vmf
->pgoff
<< PAGE_SHIFT
;
1207 if (offset
>= rsv_schp
->bufflen
)
1208 return VM_FAULT_SIGBUS
;
1209 SCSI_LOG_TIMEOUT(3, printk("sg_vma_fault: offset=%lu, scatg=%d\n",
1210 offset
, rsv_schp
->k_use_sg
));
1212 length
= 1 << (PAGE_SHIFT
+ rsv_schp
->page_order
);
1213 for (k
= 0; k
< rsv_schp
->k_use_sg
&& sa
< vma
->vm_end
; k
++) {
1214 len
= vma
->vm_end
- sa
;
1215 len
= (len
< length
) ? len
: length
;
1217 struct page
*page
= nth_page(rsv_schp
->pages
[k
],
1218 offset
>> PAGE_SHIFT
);
1219 get_page(page
); /* increment page count */
1221 return 0; /* success */
1227 return VM_FAULT_SIGBUS
;
1230 static const struct vm_operations_struct sg_mmap_vm_ops
= {
1231 .fault
= sg_vma_fault
,
1235 sg_mmap(struct file
*filp
, struct vm_area_struct
*vma
)
1238 unsigned long req_sz
, len
, sa
;
1239 Sg_scatter_hold
*rsv_schp
;
1242 if ((!filp
) || (!vma
) || (!(sfp
= (Sg_fd
*) filp
->private_data
)))
1244 req_sz
= vma
->vm_end
- vma
->vm_start
;
1245 SCSI_LOG_TIMEOUT(3, printk("sg_mmap starting, vm_start=%p, len=%d\n",
1246 (void *) vma
->vm_start
, (int) req_sz
));
1248 return -EINVAL
; /* want no offset */
1249 rsv_schp
= &sfp
->reserve
;
1250 if (req_sz
> rsv_schp
->bufflen
)
1251 return -ENOMEM
; /* cannot map more than reserved buffer */
1254 length
= 1 << (PAGE_SHIFT
+ rsv_schp
->page_order
);
1255 for (k
= 0; k
< rsv_schp
->k_use_sg
&& sa
< vma
->vm_end
; k
++) {
1256 len
= vma
->vm_end
- sa
;
1257 len
= (len
< length
) ? len
: length
;
1261 sfp
->mmap_called
= 1;
1262 vma
->vm_flags
|= VM_IO
| VM_DONTEXPAND
| VM_DONTDUMP
;
1263 vma
->vm_private_data
= sfp
;
1264 vma
->vm_ops
= &sg_mmap_vm_ops
;
1268 static void sg_rq_end_io_usercontext(struct work_struct
*work
)
1270 struct sg_request
*srp
= container_of(work
, struct sg_request
, ew
.work
);
1271 struct sg_fd
*sfp
= srp
->parentfp
;
1273 sg_finish_rem_req(srp
);
1274 kref_put(&sfp
->f_ref
, sg_remove_sfp
);
1278 * This function is a "bottom half" handler that is called by the mid
1279 * level when a command is completed (or has failed).
1281 static void sg_rq_end_io(struct request
*rq
, int uptodate
)
1283 struct sg_request
*srp
= rq
->end_io_data
;
1286 unsigned long iflags
;
1289 int result
, resid
, done
= 1;
1291 if (WARN_ON(srp
->done
!= 0))
1294 sfp
= srp
->parentfp
;
1295 if (WARN_ON(sfp
== NULL
))
1298 sdp
= sfp
->parentdp
;
1299 if (unlikely(sdp
->detached
))
1300 printk(KERN_INFO
"sg_rq_end_io: device detached\n");
1303 result
= rq
->errors
;
1304 resid
= rq
->resid_len
;
1306 SCSI_LOG_TIMEOUT(4, printk("sg_cmd_done: %s, pack_id=%d, res=0x%x\n",
1307 sdp
->disk
->disk_name
, srp
->header
.pack_id
, result
));
1308 srp
->header
.resid
= resid
;
1309 ms
= jiffies_to_msecs(jiffies
);
1310 srp
->header
.duration
= (ms
> srp
->header
.duration
) ?
1311 (ms
- srp
->header
.duration
) : 0;
1313 struct scsi_sense_hdr sshdr
;
1315 srp
->header
.status
= 0xff & result
;
1316 srp
->header
.masked_status
= status_byte(result
);
1317 srp
->header
.msg_status
= msg_byte(result
);
1318 srp
->header
.host_status
= host_byte(result
);
1319 srp
->header
.driver_status
= driver_byte(result
);
1320 if ((sdp
->sgdebug
> 0) &&
1321 ((CHECK_CONDITION
== srp
->header
.masked_status
) ||
1322 (COMMAND_TERMINATED
== srp
->header
.masked_status
)))
1323 __scsi_print_sense("sg_cmd_done", sense
,
1324 SCSI_SENSE_BUFFERSIZE
);
1326 /* Following if statement is a patch supplied by Eric Youngdale */
1327 if (driver_byte(result
) != 0
1328 && scsi_normalize_sense(sense
, SCSI_SENSE_BUFFERSIZE
, &sshdr
)
1329 && !scsi_sense_is_deferred(&sshdr
)
1330 && sshdr
.sense_key
== UNIT_ATTENTION
1331 && sdp
->device
->removable
) {
1332 /* Detected possible disc change. Set the bit - this */
1333 /* may be used if there are filesystems using this device */
1334 sdp
->device
->changed
= 1;
1337 /* Rely on write phase to clean out srp status values, so no "else" */
1339 write_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
1340 if (unlikely(srp
->orphan
)) {
1341 if (sfp
->keep_orphan
)
1342 srp
->sg_io_owned
= 0;
1347 write_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
1350 /* Now wake up any sg_read() that is waiting for this
1353 wake_up_interruptible(&sfp
->read_wait
);
1354 kill_fasync(&sfp
->async_qp
, SIGPOLL
, POLL_IN
);
1355 kref_put(&sfp
->f_ref
, sg_remove_sfp
);
1357 INIT_WORK(&srp
->ew
.work
, sg_rq_end_io_usercontext
);
1358 schedule_work(&srp
->ew
.work
);
1362 static const struct file_operations sg_fops
= {
1363 .owner
= THIS_MODULE
,
1367 .unlocked_ioctl
= sg_ioctl
,
1368 #ifdef CONFIG_COMPAT
1369 .compat_ioctl
= sg_compat_ioctl
,
1373 .release
= sg_release
,
1374 .fasync
= sg_fasync
,
1375 .llseek
= no_llseek
,
1378 static struct class *sg_sysfs_class
;
1380 static int sg_sysfs_valid
= 0;
1382 static Sg_device
*sg_alloc(struct gendisk
*disk
, struct scsi_device
*scsidp
)
1384 struct request_queue
*q
= scsidp
->request_queue
;
1386 unsigned long iflags
;
1390 sdp
= kzalloc(sizeof(Sg_device
), GFP_KERNEL
);
1392 printk(KERN_WARNING
"kmalloc Sg_device failure\n");
1393 return ERR_PTR(-ENOMEM
);
1396 idr_preload(GFP_KERNEL
);
1397 write_lock_irqsave(&sg_index_lock
, iflags
);
1399 error
= idr_alloc(&sg_index_idr
, sdp
, 0, SG_MAX_DEVS
, GFP_NOWAIT
);
1401 if (error
== -ENOSPC
) {
1402 sdev_printk(KERN_WARNING
, scsidp
,
1403 "Unable to attach sg device type=%d, minor number exceeds %d\n",
1404 scsidp
->type
, SG_MAX_DEVS
- 1);
1408 "idr allocation Sg_device failure: %d\n", error
);
1414 SCSI_LOG_TIMEOUT(3, printk("sg_alloc: dev=%d \n", k
));
1415 sprintf(disk
->disk_name
, "sg%d", k
);
1416 disk
->first_minor
= k
;
1418 sdp
->device
= scsidp
;
1419 INIT_LIST_HEAD(&sdp
->sfds
);
1420 init_waitqueue_head(&sdp
->o_excl_wait
);
1421 sdp
->sg_tablesize
= queue_max_segments(q
);
1423 kref_init(&sdp
->d_ref
);
1427 write_unlock_irqrestore(&sg_index_lock
, iflags
);
1432 return ERR_PTR(error
);
1438 sg_add(struct device
*cl_dev
, struct class_interface
*cl_intf
)
1440 struct scsi_device
*scsidp
= to_scsi_device(cl_dev
->parent
);
1441 struct gendisk
*disk
;
1442 Sg_device
*sdp
= NULL
;
1443 struct cdev
* cdev
= NULL
;
1445 unsigned long iflags
;
1447 disk
= alloc_disk(1);
1449 printk(KERN_WARNING
"alloc_disk failed\n");
1452 disk
->major
= SCSI_GENERIC_MAJOR
;
1455 cdev
= cdev_alloc();
1457 printk(KERN_WARNING
"cdev_alloc failed\n");
1460 cdev
->owner
= THIS_MODULE
;
1461 cdev
->ops
= &sg_fops
;
1463 sdp
= sg_alloc(disk
, scsidp
);
1465 printk(KERN_WARNING
"sg_alloc failed\n");
1466 error
= PTR_ERR(sdp
);
1470 error
= cdev_add(cdev
, MKDEV(SCSI_GENERIC_MAJOR
, sdp
->index
), 1);
1475 if (sg_sysfs_valid
) {
1476 struct device
*sg_class_member
;
1478 sg_class_member
= device_create(sg_sysfs_class
, cl_dev
->parent
,
1479 MKDEV(SCSI_GENERIC_MAJOR
,
1481 sdp
, "%s", disk
->disk_name
);
1482 if (IS_ERR(sg_class_member
)) {
1483 printk(KERN_ERR
"sg_add: "
1484 "device_create failed\n");
1485 error
= PTR_ERR(sg_class_member
);
1488 error
= sysfs_create_link(&scsidp
->sdev_gendev
.kobj
,
1489 &sg_class_member
->kobj
, "generic");
1491 printk(KERN_ERR
"sg_add: unable to make symlink "
1492 "'generic' back to sg%d\n", sdp
->index
);
1494 printk(KERN_WARNING
"sg_add: sg_sys Invalid\n");
1496 sdev_printk(KERN_NOTICE
, scsidp
,
1497 "Attached scsi generic sg%d type %d\n", sdp
->index
,
1500 dev_set_drvdata(cl_dev
, sdp
);
1505 write_lock_irqsave(&sg_index_lock
, iflags
);
1506 idr_remove(&sg_index_idr
, sdp
->index
);
1507 write_unlock_irqrestore(&sg_index_lock
, iflags
);
1517 static void sg_device_destroy(struct kref
*kref
)
1519 struct sg_device
*sdp
= container_of(kref
, struct sg_device
, d_ref
);
1520 unsigned long flags
;
1522 /* CAUTION! Note that the device can still be found via idr_find()
1523 * even though the refcount is 0. Therefore, do idr_remove() BEFORE
1524 * any other cleanup.
1527 write_lock_irqsave(&sg_index_lock
, flags
);
1528 idr_remove(&sg_index_idr
, sdp
->index
);
1529 write_unlock_irqrestore(&sg_index_lock
, flags
);
1532 printk("sg_device_destroy: %s\n",
1533 sdp
->disk
->disk_name
));
1535 put_disk(sdp
->disk
);
1539 static void sg_remove(struct device
*cl_dev
, struct class_interface
*cl_intf
)
1541 struct scsi_device
*scsidp
= to_scsi_device(cl_dev
->parent
);
1542 Sg_device
*sdp
= dev_get_drvdata(cl_dev
);
1543 unsigned long iflags
;
1546 if (!sdp
|| sdp
->detached
)
1549 SCSI_LOG_TIMEOUT(3, printk("sg_remove: %s\n", sdp
->disk
->disk_name
));
1551 /* Need a write lock to set sdp->detached. */
1552 write_lock_irqsave(&sg_index_lock
, iflags
);
1554 list_for_each_entry(sfp
, &sdp
->sfds
, sfd_siblings
) {
1555 wake_up_interruptible(&sfp
->read_wait
);
1556 kill_fasync(&sfp
->async_qp
, SIGPOLL
, POLL_HUP
);
1558 write_unlock_irqrestore(&sg_index_lock
, iflags
);
1560 sysfs_remove_link(&scsidp
->sdev_gendev
.kobj
, "generic");
1561 device_destroy(sg_sysfs_class
, MKDEV(SCSI_GENERIC_MAJOR
, sdp
->index
));
1562 cdev_del(sdp
->cdev
);
1568 module_param_named(scatter_elem_sz
, scatter_elem_sz
, int, S_IRUGO
| S_IWUSR
);
1569 module_param_named(def_reserved_size
, def_reserved_size
, int,
1571 module_param_named(allow_dio
, sg_allow_dio
, int, S_IRUGO
| S_IWUSR
);
1573 MODULE_AUTHOR("Douglas Gilbert");
1574 MODULE_DESCRIPTION("SCSI generic (sg) driver");
1575 MODULE_LICENSE("GPL");
1576 MODULE_VERSION(SG_VERSION_STR
);
1577 MODULE_ALIAS_CHARDEV_MAJOR(SCSI_GENERIC_MAJOR
);
1579 MODULE_PARM_DESC(scatter_elem_sz
, "scatter gather element "
1580 "size (default: max(SG_SCATTER_SZ, PAGE_SIZE))");
1581 MODULE_PARM_DESC(def_reserved_size
, "size of buffer reserved for each fd");
1582 MODULE_PARM_DESC(allow_dio
, "allow direct I/O (default: 0 (disallow))");
1589 if (scatter_elem_sz
< PAGE_SIZE
) {
1590 scatter_elem_sz
= PAGE_SIZE
;
1591 scatter_elem_sz_prev
= scatter_elem_sz
;
1593 if (def_reserved_size
>= 0)
1594 sg_big_buff
= def_reserved_size
;
1596 def_reserved_size
= sg_big_buff
;
1598 rc
= register_chrdev_region(MKDEV(SCSI_GENERIC_MAJOR
, 0),
1602 sg_sysfs_class
= class_create(THIS_MODULE
, "scsi_generic");
1603 if ( IS_ERR(sg_sysfs_class
) ) {
1604 rc
= PTR_ERR(sg_sysfs_class
);
1608 rc
= scsi_register_interface(&sg_interface
);
1610 #ifdef CONFIG_SCSI_PROC_FS
1612 #endif /* CONFIG_SCSI_PROC_FS */
1615 class_destroy(sg_sysfs_class
);
1617 unregister_chrdev_region(MKDEV(SCSI_GENERIC_MAJOR
, 0), SG_MAX_DEVS
);
1624 #ifdef CONFIG_SCSI_PROC_FS
1626 #endif /* CONFIG_SCSI_PROC_FS */
1627 scsi_unregister_interface(&sg_interface
);
1628 class_destroy(sg_sysfs_class
);
1630 unregister_chrdev_region(MKDEV(SCSI_GENERIC_MAJOR
, 0),
1632 idr_destroy(&sg_index_idr
);
1635 static int sg_start_req(Sg_request
*srp
, unsigned char *cmd
)
1639 Sg_fd
*sfp
= srp
->parentfp
;
1640 sg_io_hdr_t
*hp
= &srp
->header
;
1641 int dxfer_len
= (int) hp
->dxfer_len
;
1642 int dxfer_dir
= hp
->dxfer_direction
;
1643 unsigned int iov_count
= hp
->iovec_count
;
1644 Sg_scatter_hold
*req_schp
= &srp
->data
;
1645 Sg_scatter_hold
*rsv_schp
= &sfp
->reserve
;
1646 struct request_queue
*q
= sfp
->parentdp
->device
->request_queue
;
1647 struct rq_map_data
*md
, map_data
;
1648 int rw
= hp
->dxfer_direction
== SG_DXFER_TO_DEV
? WRITE
: READ
;
1650 SCSI_LOG_TIMEOUT(4, printk(KERN_INFO
"sg_start_req: dxfer_len=%d\n",
1653 rq
= blk_get_request(q
, rw
, GFP_ATOMIC
);
1657 memcpy(rq
->cmd
, cmd
, hp
->cmd_len
);
1659 rq
->cmd_len
= hp
->cmd_len
;
1660 rq
->cmd_type
= REQ_TYPE_BLOCK_PC
;
1663 rq
->end_io_data
= srp
;
1664 rq
->sense
= srp
->sense_b
;
1665 rq
->retries
= SG_DEFAULT_RETRIES
;
1667 if ((dxfer_len
<= 0) || (dxfer_dir
== SG_DXFER_NONE
))
1670 if (sg_allow_dio
&& hp
->flags
& SG_FLAG_DIRECT_IO
&&
1671 dxfer_dir
!= SG_DXFER_UNKNOWN
&& !iov_count
&&
1672 !sfp
->parentdp
->device
->host
->unchecked_isa_dma
&&
1673 blk_rq_aligned(q
, (unsigned long)hp
->dxferp
, dxfer_len
))
1679 if (!sg_res_in_use(sfp
) && dxfer_len
<= rsv_schp
->bufflen
)
1680 sg_link_reserve(sfp
, srp
, dxfer_len
);
1682 res
= sg_build_indirect(req_schp
, sfp
, dxfer_len
);
1687 md
->pages
= req_schp
->pages
;
1688 md
->page_order
= req_schp
->page_order
;
1689 md
->nr_entries
= req_schp
->k_use_sg
;
1691 md
->null_mapped
= hp
->dxferp
? 0 : 1;
1692 if (dxfer_dir
== SG_DXFER_TO_FROM_DEV
)
1698 if (unlikely(iov_count
> UIO_MAXIOV
))
1702 int len
, size
= sizeof(struct sg_iovec
) * iov_count
;
1705 iov
= memdup_user(hp
->dxferp
, size
);
1707 return PTR_ERR(iov
);
1709 len
= iov_length(iov
, iov_count
);
1710 if (hp
->dxfer_len
< len
) {
1711 iov_count
= iov_shorten(iov
, iov_count
, hp
->dxfer_len
);
1712 len
= hp
->dxfer_len
;
1715 res
= blk_rq_map_user_iov(q
, rq
, md
, (struct sg_iovec
*)iov
,
1720 res
= blk_rq_map_user(q
, rq
, md
, hp
->dxferp
,
1721 hp
->dxfer_len
, GFP_ATOMIC
);
1727 req_schp
->dio_in_use
= 1;
1728 hp
->info
|= SG_INFO_DIRECT_IO
;
1734 static int sg_finish_rem_req(Sg_request
* srp
)
1738 Sg_fd
*sfp
= srp
->parentfp
;
1739 Sg_scatter_hold
*req_schp
= &srp
->data
;
1741 SCSI_LOG_TIMEOUT(4, printk("sg_finish_rem_req: res_used=%d\n", (int) srp
->res_used
));
1744 ret
= blk_rq_unmap_user(srp
->bio
);
1746 blk_put_request(srp
->rq
);
1750 sg_unlink_reserve(sfp
, srp
);
1752 sg_remove_scat(req_schp
);
1754 sg_remove_request(sfp
, srp
);
1760 sg_build_sgat(Sg_scatter_hold
* schp
, const Sg_fd
* sfp
, int tablesize
)
1762 int sg_bufflen
= tablesize
* sizeof(struct page
*);
1763 gfp_t gfp_flags
= GFP_ATOMIC
| __GFP_NOWARN
;
1765 schp
->pages
= kzalloc(sg_bufflen
, gfp_flags
);
1768 schp
->sglist_len
= sg_bufflen
;
1769 return tablesize
; /* number of scat_gath elements allocated */
1773 sg_build_indirect(Sg_scatter_hold
* schp
, Sg_fd
* sfp
, int buff_size
)
1775 int ret_sz
= 0, i
, k
, rem_sz
, num
, mx_sc_elems
;
1776 int sg_tablesize
= sfp
->parentdp
->sg_tablesize
;
1777 int blk_size
= buff_size
, order
;
1778 gfp_t gfp_mask
= GFP_ATOMIC
| __GFP_COMP
| __GFP_NOWARN
;
1783 ++blk_size
; /* don't know why */
1784 /* round request up to next highest SG_SECTOR_SZ byte boundary */
1785 blk_size
= ALIGN(blk_size
, SG_SECTOR_SZ
);
1786 SCSI_LOG_TIMEOUT(4, printk("sg_build_indirect: buff_size=%d, blk_size=%d\n",
1787 buff_size
, blk_size
));
1789 /* N.B. ret_sz carried into this block ... */
1790 mx_sc_elems
= sg_build_sgat(schp
, sfp
, sg_tablesize
);
1791 if (mx_sc_elems
< 0)
1792 return mx_sc_elems
; /* most likely -ENOMEM */
1794 num
= scatter_elem_sz
;
1795 if (unlikely(num
!= scatter_elem_sz_prev
)) {
1796 if (num
< PAGE_SIZE
) {
1797 scatter_elem_sz
= PAGE_SIZE
;
1798 scatter_elem_sz_prev
= PAGE_SIZE
;
1800 scatter_elem_sz_prev
= num
;
1804 gfp_mask
|= GFP_DMA
;
1806 if (!capable(CAP_SYS_ADMIN
) || !capable(CAP_SYS_RAWIO
))
1807 gfp_mask
|= __GFP_ZERO
;
1809 order
= get_order(num
);
1811 ret_sz
= 1 << (PAGE_SHIFT
+ order
);
1813 for (k
= 0, rem_sz
= blk_size
; rem_sz
> 0 && k
< mx_sc_elems
;
1814 k
++, rem_sz
-= ret_sz
) {
1816 num
= (rem_sz
> scatter_elem_sz_prev
) ?
1817 scatter_elem_sz_prev
: rem_sz
;
1819 schp
->pages
[k
] = alloc_pages(gfp_mask
, order
);
1820 if (!schp
->pages
[k
])
1823 if (num
== scatter_elem_sz_prev
) {
1824 if (unlikely(ret_sz
> scatter_elem_sz_prev
)) {
1825 scatter_elem_sz
= ret_sz
;
1826 scatter_elem_sz_prev
= ret_sz
;
1830 SCSI_LOG_TIMEOUT(5, printk("sg_build_indirect: k=%d, num=%d, "
1831 "ret_sz=%d\n", k
, num
, ret_sz
));
1832 } /* end of for loop */
1834 schp
->page_order
= order
;
1836 SCSI_LOG_TIMEOUT(5, printk("sg_build_indirect: k_use_sg=%d, "
1837 "rem_sz=%d\n", k
, rem_sz
));
1839 schp
->bufflen
= blk_size
;
1840 if (rem_sz
> 0) /* must have failed */
1844 for (i
= 0; i
< k
; i
++)
1845 __free_pages(schp
->pages
[i
], order
);
1854 sg_remove_scat(Sg_scatter_hold
* schp
)
1856 SCSI_LOG_TIMEOUT(4, printk("sg_remove_scat: k_use_sg=%d\n", schp
->k_use_sg
));
1857 if (schp
->pages
&& schp
->sglist_len
> 0) {
1858 if (!schp
->dio_in_use
) {
1861 for (k
= 0; k
< schp
->k_use_sg
&& schp
->pages
[k
]; k
++) {
1862 SCSI_LOG_TIMEOUT(5, printk(
1863 "sg_remove_scat: k=%d, pg=0x%p\n",
1864 k
, schp
->pages
[k
]));
1865 __free_pages(schp
->pages
[k
], schp
->page_order
);
1871 memset(schp
, 0, sizeof (*schp
));
1875 sg_read_oxfer(Sg_request
* srp
, char __user
*outp
, int num_read_xfer
)
1877 Sg_scatter_hold
*schp
= &srp
->data
;
1880 SCSI_LOG_TIMEOUT(4, printk("sg_read_oxfer: num_read_xfer=%d\n",
1882 if ((!outp
) || (num_read_xfer
<= 0))
1885 num
= 1 << (PAGE_SHIFT
+ schp
->page_order
);
1886 for (k
= 0; k
< schp
->k_use_sg
&& schp
->pages
[k
]; k
++) {
1887 if (num
> num_read_xfer
) {
1888 if (__copy_to_user(outp
, page_address(schp
->pages
[k
]),
1893 if (__copy_to_user(outp
, page_address(schp
->pages
[k
]),
1896 num_read_xfer
-= num
;
1897 if (num_read_xfer
<= 0)
1907 sg_build_reserve(Sg_fd
* sfp
, int req_size
)
1909 Sg_scatter_hold
*schp
= &sfp
->reserve
;
1911 SCSI_LOG_TIMEOUT(4, printk("sg_build_reserve: req_size=%d\n", req_size
));
1913 if (req_size
< PAGE_SIZE
)
1914 req_size
= PAGE_SIZE
;
1915 if (0 == sg_build_indirect(schp
, sfp
, req_size
))
1918 sg_remove_scat(schp
);
1919 req_size
>>= 1; /* divide by 2 */
1920 } while (req_size
> (PAGE_SIZE
/ 2));
1924 sg_link_reserve(Sg_fd
* sfp
, Sg_request
* srp
, int size
)
1926 Sg_scatter_hold
*req_schp
= &srp
->data
;
1927 Sg_scatter_hold
*rsv_schp
= &sfp
->reserve
;
1931 SCSI_LOG_TIMEOUT(4, printk("sg_link_reserve: size=%d\n", size
));
1934 num
= 1 << (PAGE_SHIFT
+ rsv_schp
->page_order
);
1935 for (k
= 0; k
< rsv_schp
->k_use_sg
; k
++) {
1937 req_schp
->k_use_sg
= k
+ 1;
1938 req_schp
->sglist_len
= rsv_schp
->sglist_len
;
1939 req_schp
->pages
= rsv_schp
->pages
;
1941 req_schp
->bufflen
= size
;
1942 req_schp
->page_order
= rsv_schp
->page_order
;
1948 if (k
>= rsv_schp
->k_use_sg
)
1949 SCSI_LOG_TIMEOUT(1, printk("sg_link_reserve: BAD size\n"));
1953 sg_unlink_reserve(Sg_fd
* sfp
, Sg_request
* srp
)
1955 Sg_scatter_hold
*req_schp
= &srp
->data
;
1957 SCSI_LOG_TIMEOUT(4, printk("sg_unlink_reserve: req->k_use_sg=%d\n",
1958 (int) req_schp
->k_use_sg
));
1959 req_schp
->k_use_sg
= 0;
1960 req_schp
->bufflen
= 0;
1961 req_schp
->pages
= NULL
;
1962 req_schp
->page_order
= 0;
1963 req_schp
->sglist_len
= 0;
1964 sfp
->save_scat_len
= 0;
1969 sg_get_rq_mark(Sg_fd
* sfp
, int pack_id
)
1972 unsigned long iflags
;
1974 write_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
1975 for (resp
= sfp
->headrp
; resp
; resp
= resp
->nextrp
) {
1976 /* look for requests that are ready + not SG_IO owned */
1977 if ((1 == resp
->done
) && (!resp
->sg_io_owned
) &&
1978 ((-1 == pack_id
) || (resp
->header
.pack_id
== pack_id
))) {
1979 resp
->done
= 2; /* guard against other readers */
1983 write_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
1987 /* always adds to end of list */
1989 sg_add_request(Sg_fd
* sfp
)
1992 unsigned long iflags
;
1994 Sg_request
*rp
= sfp
->req_arr
;
1996 write_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
1999 memset(rp
, 0, sizeof (Sg_request
));
2004 if (0 == sfp
->cmd_q
)
2005 resp
= NULL
; /* command queuing disallowed */
2007 for (k
= 0; k
< SG_MAX_QUEUE
; ++k
, ++rp
) {
2011 if (k
< SG_MAX_QUEUE
) {
2012 memset(rp
, 0, sizeof (Sg_request
));
2014 while (resp
->nextrp
)
2015 resp
= resp
->nextrp
;
2023 resp
->nextrp
= NULL
;
2024 resp
->header
.duration
= jiffies_to_msecs(jiffies
);
2026 write_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
2030 /* Return of 1 for found; 0 for not found */
2032 sg_remove_request(Sg_fd
* sfp
, Sg_request
* srp
)
2034 Sg_request
*prev_rp
;
2036 unsigned long iflags
;
2039 if ((!sfp
) || (!srp
) || (!sfp
->headrp
))
2041 write_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
2042 prev_rp
= sfp
->headrp
;
2043 if (srp
== prev_rp
) {
2044 sfp
->headrp
= prev_rp
->nextrp
;
2045 prev_rp
->parentfp
= NULL
;
2048 while ((rp
= prev_rp
->nextrp
)) {
2050 prev_rp
->nextrp
= rp
->nextrp
;
2051 rp
->parentfp
= NULL
;
2058 write_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
2063 sg_add_sfp(Sg_device
* sdp
, int dev
)
2066 unsigned long iflags
;
2069 sfp
= kzalloc(sizeof(*sfp
), GFP_ATOMIC
| __GFP_NOWARN
);
2073 init_waitqueue_head(&sfp
->read_wait
);
2074 rwlock_init(&sfp
->rq_list_lock
);
2076 kref_init(&sfp
->f_ref
);
2077 sfp
->timeout
= SG_DEFAULT_TIMEOUT
;
2078 sfp
->timeout_user
= SG_DEFAULT_TIMEOUT_USER
;
2079 sfp
->force_packid
= SG_DEF_FORCE_PACK_ID
;
2080 sfp
->low_dma
= (SG_DEF_FORCE_LOW_DMA
== 0) ?
2081 sdp
->device
->host
->unchecked_isa_dma
: 1;
2082 sfp
->cmd_q
= SG_DEF_COMMAND_Q
;
2083 sfp
->keep_orphan
= SG_DEF_KEEP_ORPHAN
;
2084 sfp
->parentdp
= sdp
;
2085 write_lock_irqsave(&sg_index_lock
, iflags
);
2086 list_add_tail(&sfp
->sfd_siblings
, &sdp
->sfds
);
2087 write_unlock_irqrestore(&sg_index_lock
, iflags
);
2088 SCSI_LOG_TIMEOUT(3, printk("sg_add_sfp: sfp=0x%p\n", sfp
));
2089 if (unlikely(sg_big_buff
!= def_reserved_size
))
2090 sg_big_buff
= def_reserved_size
;
2092 bufflen
= min_t(int, sg_big_buff
,
2093 queue_max_sectors(sdp
->device
->request_queue
) * 512);
2094 sg_build_reserve(sfp
, bufflen
);
2095 SCSI_LOG_TIMEOUT(3, printk("sg_add_sfp: bufflen=%d, k_use_sg=%d\n",
2096 sfp
->reserve
.bufflen
, sfp
->reserve
.k_use_sg
));
2098 kref_get(&sdp
->d_ref
);
2099 __module_get(THIS_MODULE
);
2103 static void sg_remove_sfp_usercontext(struct work_struct
*work
)
2105 struct sg_fd
*sfp
= container_of(work
, struct sg_fd
, ew
.work
);
2106 struct sg_device
*sdp
= sfp
->parentdp
;
2108 /* Cleanup any responses which were never read(). */
2110 sg_finish_rem_req(sfp
->headrp
);
2112 if (sfp
->reserve
.bufflen
> 0) {
2114 printk("sg_remove_sfp: bufflen=%d, k_use_sg=%d\n",
2115 (int) sfp
->reserve
.bufflen
,
2116 (int) sfp
->reserve
.k_use_sg
));
2117 sg_remove_scat(&sfp
->reserve
);
2121 printk("sg_remove_sfp: %s, sfp=0x%p\n",
2122 sdp
->disk
->disk_name
,
2126 scsi_device_put(sdp
->device
);
2128 module_put(THIS_MODULE
);
2131 static void sg_remove_sfp(struct kref
*kref
)
2133 struct sg_fd
*sfp
= container_of(kref
, struct sg_fd
, f_ref
);
2134 struct sg_device
*sdp
= sfp
->parentdp
;
2135 unsigned long iflags
;
2137 write_lock_irqsave(&sg_index_lock
, iflags
);
2138 list_del(&sfp
->sfd_siblings
);
2139 write_unlock_irqrestore(&sg_index_lock
, iflags
);
2140 wake_up_interruptible(&sdp
->o_excl_wait
);
2142 INIT_WORK(&sfp
->ew
.work
, sg_remove_sfp_usercontext
);
2143 schedule_work(&sfp
->ew
.work
);
2147 sg_res_in_use(Sg_fd
* sfp
)
2149 const Sg_request
*srp
;
2150 unsigned long iflags
;
2152 read_lock_irqsave(&sfp
->rq_list_lock
, iflags
);
2153 for (srp
= sfp
->headrp
; srp
; srp
= srp
->nextrp
)
2156 read_unlock_irqrestore(&sfp
->rq_list_lock
, iflags
);
2160 #ifdef CONFIG_SCSI_PROC_FS
2162 sg_idr_max_id(int id
, void *p
, void *data
)
2176 unsigned long iflags
;
2178 read_lock_irqsave(&sg_index_lock
, iflags
);
2179 idr_for_each(&sg_index_idr
, sg_idr_max_id
, &k
);
2180 read_unlock_irqrestore(&sg_index_lock
, iflags
);
2181 return k
+ 1; /* origin 1 */
2185 /* must be called with sg_index_lock held */
2186 static Sg_device
*sg_lookup_dev(int dev
)
2188 return idr_find(&sg_index_idr
, dev
);
2191 static Sg_device
*sg_get_dev(int dev
)
2193 struct sg_device
*sdp
;
2194 unsigned long flags
;
2196 read_lock_irqsave(&sg_index_lock
, flags
);
2197 sdp
= sg_lookup_dev(dev
);
2199 sdp
= ERR_PTR(-ENXIO
);
2200 else if (sdp
->detached
) {
2201 /* If sdp->detached, then the refcount may already be 0, in
2202 * which case it would be a bug to do kref_get().
2204 sdp
= ERR_PTR(-ENODEV
);
2206 kref_get(&sdp
->d_ref
);
2207 read_unlock_irqrestore(&sg_index_lock
, flags
);
2212 static void sg_put_dev(struct sg_device
*sdp
)
2214 kref_put(&sdp
->d_ref
, sg_device_destroy
);
2217 #ifdef CONFIG_SCSI_PROC_FS
2219 static struct proc_dir_entry
*sg_proc_sgp
= NULL
;
2221 static char sg_proc_sg_dirname
[] = "scsi/sg";
2223 static int sg_proc_seq_show_int(struct seq_file
*s
, void *v
);
2225 static int sg_proc_single_open_adio(struct inode
*inode
, struct file
*file
);
2226 static ssize_t
sg_proc_write_adio(struct file
*filp
, const char __user
*buffer
,
2227 size_t count
, loff_t
*off
);
2228 static const struct file_operations adio_fops
= {
2229 .owner
= THIS_MODULE
,
2230 .open
= sg_proc_single_open_adio
,
2232 .llseek
= seq_lseek
,
2233 .write
= sg_proc_write_adio
,
2234 .release
= single_release
,
2237 static int sg_proc_single_open_dressz(struct inode
*inode
, struct file
*file
);
2238 static ssize_t
sg_proc_write_dressz(struct file
*filp
,
2239 const char __user
*buffer
, size_t count
, loff_t
*off
);
2240 static const struct file_operations dressz_fops
= {
2241 .owner
= THIS_MODULE
,
2242 .open
= sg_proc_single_open_dressz
,
2244 .llseek
= seq_lseek
,
2245 .write
= sg_proc_write_dressz
,
2246 .release
= single_release
,
2249 static int sg_proc_seq_show_version(struct seq_file
*s
, void *v
);
2250 static int sg_proc_single_open_version(struct inode
*inode
, struct file
*file
);
2251 static const struct file_operations version_fops
= {
2252 .owner
= THIS_MODULE
,
2253 .open
= sg_proc_single_open_version
,
2255 .llseek
= seq_lseek
,
2256 .release
= single_release
,
2259 static int sg_proc_seq_show_devhdr(struct seq_file
*s
, void *v
);
2260 static int sg_proc_single_open_devhdr(struct inode
*inode
, struct file
*file
);
2261 static const struct file_operations devhdr_fops
= {
2262 .owner
= THIS_MODULE
,
2263 .open
= sg_proc_single_open_devhdr
,
2265 .llseek
= seq_lseek
,
2266 .release
= single_release
,
2269 static int sg_proc_seq_show_dev(struct seq_file
*s
, void *v
);
2270 static int sg_proc_open_dev(struct inode
*inode
, struct file
*file
);
2271 static void * dev_seq_start(struct seq_file
*s
, loff_t
*pos
);
2272 static void * dev_seq_next(struct seq_file
*s
, void *v
, loff_t
*pos
);
2273 static void dev_seq_stop(struct seq_file
*s
, void *v
);
2274 static const struct file_operations dev_fops
= {
2275 .owner
= THIS_MODULE
,
2276 .open
= sg_proc_open_dev
,
2278 .llseek
= seq_lseek
,
2279 .release
= seq_release
,
2281 static const struct seq_operations dev_seq_ops
= {
2282 .start
= dev_seq_start
,
2283 .next
= dev_seq_next
,
2284 .stop
= dev_seq_stop
,
2285 .show
= sg_proc_seq_show_dev
,
2288 static int sg_proc_seq_show_devstrs(struct seq_file
*s
, void *v
);
2289 static int sg_proc_open_devstrs(struct inode
*inode
, struct file
*file
);
2290 static const struct file_operations devstrs_fops
= {
2291 .owner
= THIS_MODULE
,
2292 .open
= sg_proc_open_devstrs
,
2294 .llseek
= seq_lseek
,
2295 .release
= seq_release
,
2297 static const struct seq_operations devstrs_seq_ops
= {
2298 .start
= dev_seq_start
,
2299 .next
= dev_seq_next
,
2300 .stop
= dev_seq_stop
,
2301 .show
= sg_proc_seq_show_devstrs
,
2304 static int sg_proc_seq_show_debug(struct seq_file
*s
, void *v
);
2305 static int sg_proc_open_debug(struct inode
*inode
, struct file
*file
);
2306 static const struct file_operations debug_fops
= {
2307 .owner
= THIS_MODULE
,
2308 .open
= sg_proc_open_debug
,
2310 .llseek
= seq_lseek
,
2311 .release
= seq_release
,
2313 static const struct seq_operations debug_seq_ops
= {
2314 .start
= dev_seq_start
,
2315 .next
= dev_seq_next
,
2316 .stop
= dev_seq_stop
,
2317 .show
= sg_proc_seq_show_debug
,
2321 struct sg_proc_leaf
{
2323 const struct file_operations
* fops
;
2326 static const struct sg_proc_leaf sg_proc_leaf_arr
[] = {
2327 {"allow_dio", &adio_fops
},
2328 {"debug", &debug_fops
},
2329 {"def_reserved_size", &dressz_fops
},
2330 {"device_hdr", &devhdr_fops
},
2331 {"devices", &dev_fops
},
2332 {"device_strs", &devstrs_fops
},
2333 {"version", &version_fops
}
2339 int num_leaves
= ARRAY_SIZE(sg_proc_leaf_arr
);
2342 sg_proc_sgp
= proc_mkdir(sg_proc_sg_dirname
, NULL
);
2345 for (k
= 0; k
< num_leaves
; ++k
) {
2346 const struct sg_proc_leaf
*leaf
= &sg_proc_leaf_arr
[k
];
2347 umode_t mask
= leaf
->fops
->write
? S_IRUGO
| S_IWUSR
: S_IRUGO
;
2348 proc_create(leaf
->name
, mask
, sg_proc_sgp
, leaf
->fops
);
2354 sg_proc_cleanup(void)
2357 int num_leaves
= ARRAY_SIZE(sg_proc_leaf_arr
);
2361 for (k
= 0; k
< num_leaves
; ++k
)
2362 remove_proc_entry(sg_proc_leaf_arr
[k
].name
, sg_proc_sgp
);
2363 remove_proc_entry(sg_proc_sg_dirname
, NULL
);
2367 static int sg_proc_seq_show_int(struct seq_file
*s
, void *v
)
2369 seq_printf(s
, "%d\n", *((int *)s
->private));
2373 static int sg_proc_single_open_adio(struct inode
*inode
, struct file
*file
)
2375 return single_open(file
, sg_proc_seq_show_int
, &sg_allow_dio
);
2379 sg_proc_write_adio(struct file
*filp
, const char __user
*buffer
,
2380 size_t count
, loff_t
*off
)
2385 if (!capable(CAP_SYS_ADMIN
) || !capable(CAP_SYS_RAWIO
))
2387 err
= kstrtoul_from_user(buffer
, count
, 0, &num
);
2390 sg_allow_dio
= num
? 1 : 0;
2394 static int sg_proc_single_open_dressz(struct inode
*inode
, struct file
*file
)
2396 return single_open(file
, sg_proc_seq_show_int
, &sg_big_buff
);
2400 sg_proc_write_dressz(struct file
*filp
, const char __user
*buffer
,
2401 size_t count
, loff_t
*off
)
2404 unsigned long k
= ULONG_MAX
;
2406 if (!capable(CAP_SYS_ADMIN
) || !capable(CAP_SYS_RAWIO
))
2409 err
= kstrtoul_from_user(buffer
, count
, 0, &k
);
2412 if (k
<= 1048576) { /* limit "big buff" to 1 MB */
2419 static int sg_proc_seq_show_version(struct seq_file
*s
, void *v
)
2421 seq_printf(s
, "%d\t%s [%s]\n", sg_version_num
, SG_VERSION_STR
,
2426 static int sg_proc_single_open_version(struct inode
*inode
, struct file
*file
)
2428 return single_open(file
, sg_proc_seq_show_version
, NULL
);
2431 static int sg_proc_seq_show_devhdr(struct seq_file
*s
, void *v
)
2433 seq_printf(s
, "host\tchan\tid\tlun\ttype\topens\tqdepth\tbusy\t"
2438 static int sg_proc_single_open_devhdr(struct inode
*inode
, struct file
*file
)
2440 return single_open(file
, sg_proc_seq_show_devhdr
, NULL
);
2443 struct sg_proc_deviter
{
2448 static void * dev_seq_start(struct seq_file
*s
, loff_t
*pos
)
2450 struct sg_proc_deviter
* it
= kmalloc(sizeof(*it
), GFP_KERNEL
);
2457 it
->max
= sg_last_dev();
2458 if (it
->index
>= it
->max
)
2463 static void * dev_seq_next(struct seq_file
*s
, void *v
, loff_t
*pos
)
2465 struct sg_proc_deviter
* it
= s
->private;
2468 return (it
->index
< it
->max
) ? it
: NULL
;
2471 static void dev_seq_stop(struct seq_file
*s
, void *v
)
2476 static int sg_proc_open_dev(struct inode
*inode
, struct file
*file
)
2478 return seq_open(file
, &dev_seq_ops
);
2481 static int sg_proc_seq_show_dev(struct seq_file
*s
, void *v
)
2483 struct sg_proc_deviter
* it
= (struct sg_proc_deviter
*) v
;
2485 struct scsi_device
*scsidp
;
2486 unsigned long iflags
;
2488 read_lock_irqsave(&sg_index_lock
, iflags
);
2489 sdp
= it
? sg_lookup_dev(it
->index
) : NULL
;
2490 if (sdp
&& (scsidp
= sdp
->device
) && (!sdp
->detached
))
2491 seq_printf(s
, "%d\t%d\t%d\t%d\t%d\t%d\t%d\t%d\t%d\n",
2492 scsidp
->host
->host_no
, scsidp
->channel
,
2493 scsidp
->id
, scsidp
->lun
, (int) scsidp
->type
,
2495 (int) scsidp
->queue_depth
,
2496 (int) scsidp
->device_busy
,
2497 (int) scsi_device_online(scsidp
));
2499 seq_printf(s
, "-1\t-1\t-1\t-1\t-1\t-1\t-1\t-1\t-1\n");
2500 read_unlock_irqrestore(&sg_index_lock
, iflags
);
2504 static int sg_proc_open_devstrs(struct inode
*inode
, struct file
*file
)
2506 return seq_open(file
, &devstrs_seq_ops
);
2509 static int sg_proc_seq_show_devstrs(struct seq_file
*s
, void *v
)
2511 struct sg_proc_deviter
* it
= (struct sg_proc_deviter
*) v
;
2513 struct scsi_device
*scsidp
;
2514 unsigned long iflags
;
2516 read_lock_irqsave(&sg_index_lock
, iflags
);
2517 sdp
= it
? sg_lookup_dev(it
->index
) : NULL
;
2518 if (sdp
&& (scsidp
= sdp
->device
) && (!sdp
->detached
))
2519 seq_printf(s
, "%8.8s\t%16.16s\t%4.4s\n",
2520 scsidp
->vendor
, scsidp
->model
, scsidp
->rev
);
2522 seq_printf(s
, "<no active device>\n");
2523 read_unlock_irqrestore(&sg_index_lock
, iflags
);
2527 /* must be called while holding sg_index_lock */
2528 static void sg_proc_debug_helper(struct seq_file
*s
, Sg_device
* sdp
)
2530 int k
, m
, new_interface
, blen
, usg
;
2533 const sg_io_hdr_t
*hp
;
2538 list_for_each_entry(fp
, &sdp
->sfds
, sfd_siblings
) {
2540 read_lock(&fp
->rq_list_lock
); /* irqs already disabled */
2541 seq_printf(s
, " FD(%d): timeout=%dms bufflen=%d "
2542 "(res)sgat=%d low_dma=%d\n", k
,
2543 jiffies_to_msecs(fp
->timeout
),
2544 fp
->reserve
.bufflen
,
2545 (int) fp
->reserve
.k_use_sg
,
2547 seq_printf(s
, " cmd_q=%d f_packid=%d k_orphan=%d closed=0\n",
2548 (int) fp
->cmd_q
, (int) fp
->force_packid
,
2549 (int) fp
->keep_orphan
);
2550 for (m
= 0, srp
= fp
->headrp
;
2552 ++m
, srp
= srp
->nextrp
) {
2554 new_interface
= (hp
->interface_id
== '\0') ? 0 : 1;
2555 if (srp
->res_used
) {
2556 if (new_interface
&&
2557 (SG_FLAG_MMAP_IO
& hp
->flags
))
2562 if (SG_INFO_DIRECT_IO_MASK
& hp
->info
)
2568 blen
= srp
->data
.bufflen
;
2569 usg
= srp
->data
.k_use_sg
;
2570 seq_printf(s
, srp
->done
?
2571 ((1 == srp
->done
) ? "rcv:" : "fin:")
2573 seq_printf(s
, " id=%d blen=%d",
2574 srp
->header
.pack_id
, blen
);
2576 seq_printf(s
, " dur=%d", hp
->duration
);
2578 ms
= jiffies_to_msecs(jiffies
);
2579 seq_printf(s
, " t_o/elap=%d/%d",
2580 (new_interface
? hp
->timeout
:
2581 jiffies_to_msecs(fp
->timeout
)),
2582 (ms
> hp
->duration
? ms
- hp
->duration
: 0));
2584 seq_printf(s
, "ms sgat=%d op=0x%02x\n", usg
,
2585 (int) srp
->data
.cmd_opcode
);
2588 seq_printf(s
, " No requests active\n");
2589 read_unlock(&fp
->rq_list_lock
);
2593 static int sg_proc_open_debug(struct inode
*inode
, struct file
*file
)
2595 return seq_open(file
, &debug_seq_ops
);
2598 static int sg_proc_seq_show_debug(struct seq_file
*s
, void *v
)
2600 struct sg_proc_deviter
* it
= (struct sg_proc_deviter
*) v
;
2602 unsigned long iflags
;
2604 if (it
&& (0 == it
->index
)) {
2605 seq_printf(s
, "max_active_device=%d(origin 1)\n",
2607 seq_printf(s
, " def_reserved_size=%d\n", sg_big_buff
);
2610 read_lock_irqsave(&sg_index_lock
, iflags
);
2611 sdp
= it
? sg_lookup_dev(it
->index
) : NULL
;
2612 if (sdp
&& !list_empty(&sdp
->sfds
)) {
2613 struct scsi_device
*scsidp
= sdp
->device
;
2615 seq_printf(s
, " >>> device=%s ", sdp
->disk
->disk_name
);
2617 seq_printf(s
, "detached pending close ");
2620 (s
, "scsi%d chan=%d id=%d lun=%d em=%d",
2621 scsidp
->host
->host_no
,
2622 scsidp
->channel
, scsidp
->id
,
2624 scsidp
->host
->hostt
->emulated
);
2625 seq_printf(s
, " sg_tablesize=%d excl=%d\n",
2626 sdp
->sg_tablesize
, get_exclude(sdp
));
2627 sg_proc_debug_helper(s
, sdp
);
2629 read_unlock_irqrestore(&sg_index_lock
, iflags
);
2633 #endif /* CONFIG_SCSI_PROC_FS */
2635 module_init(init_sg
);
2636 module_exit(exit_sg
);