?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
udf: improve error management in udf_CS0toUTF8()
[linux/fpc-iii.git] / drivers / scsi / lpfc / lpfc_bsg.c
blobb705068079c0aec0e2a632c1fba36a52e8d39523
1 /*******************************************************************
2 * This file is part of the Emulex Linux Device Driver for *
3 * Fibre Channel Host Bus Adapters. *
4 * Copyright (C) 2009-2015 Emulex. All rights reserved. *
5 * EMULEX and SLI are trademarks of Emulex. *
6 * www.emulex.com *
7 * *
8 * This program is free software; you can redistribute it and/or *
9 * modify it under the terms of version 2 of the GNU General *
10 * Public License as published by the Free Software Foundation. *
11 * This program is distributed in the hope that it will be useful. *
12 * ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND *
13 * WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, *
14 * FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT, ARE *
15 * DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD *
16 * TO BE LEGALLY INVALID. See the GNU General Public License for *
17 * more details, a copy of which can be found in the file COPYING *
18 * included with this package. *
19 *******************************************************************/
20
21 #include <linux/interrupt.h>
22 #include <linux/mempool.h>
23 #include <linux/pci.h>
24 #include <linux/slab.h>
25 #include <linux/delay.h>
26 #include <linux/list.h>
27
28 #include <scsi/scsi.h>
29 #include <scsi/scsi_host.h>
30 #include <scsi/scsi_transport_fc.h>
31 #include <scsi/scsi_bsg_fc.h>
32 #include <scsi/fc/fc_fs.h>
33
34 #include "lpfc_hw4.h"
35 #include "lpfc_hw.h"
36 #include "lpfc_sli.h"
37 #include "lpfc_sli4.h"
38 #include "lpfc_nl.h"
39 #include "lpfc_bsg.h"
40 #include "lpfc_disc.h"
41 #include "lpfc_scsi.h"
42 #include "lpfc.h"
43 #include "lpfc_logmsg.h"
44 #include "lpfc_crtn.h"
45 #include "lpfc_debugfs.h"
46 #include "lpfc_vport.h"
47 #include "lpfc_version.h"
48
49 struct lpfc_bsg_event {
50 struct list_head node;
51 struct kref kref;
52 wait_queue_head_t wq;
53
54 /* Event type and waiter identifiers */
55 uint32_t type_mask;
56 uint32_t req_id;
57 uint32_t reg_id;
58
59 /* next two flags are here for the auto-delete logic */
60 unsigned long wait_time_stamp;
61 int waiting;
62
63 /* seen and not seen events */
64 struct list_head events_to_get;
65 struct list_head events_to_see;
66
67 /* driver data associated with the job */
68 void *dd_data;
69 };
70
71 struct lpfc_bsg_iocb {
72 struct lpfc_iocbq *cmdiocbq;
73 struct lpfc_dmabuf *rmp;
74 struct lpfc_nodelist *ndlp;
75 };
76
77 struct lpfc_bsg_mbox {
78 LPFC_MBOXQ_t *pmboxq;
79 MAILBOX_t *mb;
80 struct lpfc_dmabuf *dmabuffers; /* for BIU diags */
81 uint8_t *ext; /* extended mailbox data */
82 uint32_t mbOffset; /* from app */
83 uint32_t inExtWLen; /* from app */
84 uint32_t outExtWLen; /* from app */
85 };
86
87 #define MENLO_DID 0x0000FC0E
88
89 struct lpfc_bsg_menlo {
90 struct lpfc_iocbq *cmdiocbq;
91 struct lpfc_dmabuf *rmp;
92 };
93
94 #define TYPE_EVT 1
95 #define TYPE_IOCB 2
96 #define TYPE_MBOX 3
97 #define TYPE_MENLO 4
98 struct bsg_job_data {
99 uint32_t type;
100 struct fc_bsg_job *set_job; /* job waiting for this iocb to finish */
101 union {
102 struct lpfc_bsg_event *evt;
103 struct lpfc_bsg_iocb iocb;
104 struct lpfc_bsg_mbox mbox;
105 struct lpfc_bsg_menlo menlo;
106 } context_un;
107 };
108
109 struct event_data {
110 struct list_head node;
111 uint32_t type;
112 uint32_t immed_dat;
113 void *data;
114 uint32_t len;
115 };
116
117 #define BUF_SZ_4K 4096
118 #define SLI_CT_ELX_LOOPBACK 0x10
119
120 enum ELX_LOOPBACK_CMD {
121 ELX_LOOPBACK_XRI_SETUP,
122 ELX_LOOPBACK_DATA,
123 };
124
125 #define ELX_LOOPBACK_HEADER_SZ \
126 (size_t)(&((struct lpfc_sli_ct_request *)NULL)->un)
127
128 struct lpfc_dmabufext {
129 struct lpfc_dmabuf dma;
130 uint32_t size;
131 uint32_t flag;
132 };
133
134 static void
135 lpfc_free_bsg_buffers(struct lpfc_hba *phba, struct lpfc_dmabuf *mlist)
136 {
137 struct lpfc_dmabuf *mlast, *next_mlast;
138
139 if (mlist) {
140 list_for_each_entry_safe(mlast, next_mlast, &mlist->list,
141 list) {
142 lpfc_mbuf_free(phba, mlast->virt, mlast->phys);
143 list_del(&mlast->list);
144 kfree(mlast);
145 }
146 lpfc_mbuf_free(phba, mlist->virt, mlist->phys);
147 kfree(mlist);
148 }
149 return;
150 }
151
152 static struct lpfc_dmabuf *
153 lpfc_alloc_bsg_buffers(struct lpfc_hba *phba, unsigned int size,
154 int outbound_buffers, struct ulp_bde64 *bpl,
155 int *bpl_entries)
156 {
157 struct lpfc_dmabuf *mlist = NULL;
158 struct lpfc_dmabuf *mp;
159 unsigned int bytes_left = size;
160
161 /* Verify we can support the size specified */
162 if (!size || (size > (*bpl_entries * LPFC_BPL_SIZE)))
163 return NULL;
164
165 /* Determine the number of dma buffers to allocate */
166 *bpl_entries = (size % LPFC_BPL_SIZE ? size/LPFC_BPL_SIZE + 1 :
167 size/LPFC_BPL_SIZE);
168
169 /* Allocate dma buffer and place in BPL passed */
170 while (bytes_left) {
171 /* Allocate dma buffer */
172 mp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
173 if (!mp) {
174 if (mlist)
175 lpfc_free_bsg_buffers(phba, mlist);
176 return NULL;
177 }
178
179 INIT_LIST_HEAD(&mp->list);
180 mp->virt = lpfc_mbuf_alloc(phba, MEM_PRI, &(mp->phys));
181
182 if (!mp->virt) {
183 kfree(mp);
184 if (mlist)
185 lpfc_free_bsg_buffers(phba, mlist);
186 return NULL;
187 }
188
189 /* Queue it to a linked list */
190 if (!mlist)
191 mlist = mp;
192 else
193 list_add_tail(&mp->list, &mlist->list);
194
195 /* Add buffer to buffer pointer list */
196 if (outbound_buffers)
197 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64;
198 else
199 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
200 bpl->addrLow = le32_to_cpu(putPaddrLow(mp->phys));
201 bpl->addrHigh = le32_to_cpu(putPaddrHigh(mp->phys));
202 bpl->tus.f.bdeSize = (uint16_t)
203 (bytes_left >= LPFC_BPL_SIZE ? LPFC_BPL_SIZE :
204 bytes_left);
205 bytes_left -= bpl->tus.f.bdeSize;
206 bpl->tus.w = le32_to_cpu(bpl->tus.w);
207 bpl++;
208 }
209 return mlist;
210 }
211
212 static unsigned int
213 lpfc_bsg_copy_data(struct lpfc_dmabuf *dma_buffers,
214 struct fc_bsg_buffer *bsg_buffers,
215 unsigned int bytes_to_transfer, int to_buffers)
216 {
217
218 struct lpfc_dmabuf *mp;
219 unsigned int transfer_bytes, bytes_copied = 0;
220 unsigned int sg_offset, dma_offset;
221 unsigned char *dma_address, *sg_address;
222 LIST_HEAD(temp_list);
223 struct sg_mapping_iter miter;
224 unsigned long flags;
225 unsigned int sg_flags = SG_MITER_ATOMIC;
226 bool sg_valid;
227
228 list_splice_init(&dma_buffers->list, &temp_list);
229 list_add(&dma_buffers->list, &temp_list);
230 sg_offset = 0;
231 if (to_buffers)
232 sg_flags |= SG_MITER_FROM_SG;
233 else
234 sg_flags |= SG_MITER_TO_SG;
235 sg_miter_start(&miter, bsg_buffers->sg_list, bsg_buffers->sg_cnt,
236 sg_flags);
237 local_irq_save(flags);
238 sg_valid = sg_miter_next(&miter);
239 list_for_each_entry(mp, &temp_list, list) {
240 dma_offset = 0;
241 while (bytes_to_transfer && sg_valid &&
242 (dma_offset < LPFC_BPL_SIZE)) {
243 dma_address = mp->virt + dma_offset;
244 if (sg_offset) {
245 /* Continue previous partial transfer of sg */
246 sg_address = miter.addr + sg_offset;
247 transfer_bytes = miter.length - sg_offset;
248 } else {
249 sg_address = miter.addr;
250 transfer_bytes = miter.length;
251 }
252 if (bytes_to_transfer < transfer_bytes)
253 transfer_bytes = bytes_to_transfer;
254 if (transfer_bytes > (LPFC_BPL_SIZE - dma_offset))
255 transfer_bytes = LPFC_BPL_SIZE - dma_offset;
256 if (to_buffers)
257 memcpy(dma_address, sg_address, transfer_bytes);
258 else
259 memcpy(sg_address, dma_address, transfer_bytes);
260 dma_offset += transfer_bytes;
261 sg_offset += transfer_bytes;
262 bytes_to_transfer -= transfer_bytes;
263 bytes_copied += transfer_bytes;
264 if (sg_offset >= miter.length) {
265 sg_offset = 0;
266 sg_valid = sg_miter_next(&miter);
267 }
268 }
269 }
270 sg_miter_stop(&miter);
271 local_irq_restore(flags);
272 list_del_init(&dma_buffers->list);
273 list_splice(&temp_list, &dma_buffers->list);
274 return bytes_copied;
275 }
276
277 /**
278 * lpfc_bsg_send_mgmt_cmd_cmp - lpfc_bsg_send_mgmt_cmd's completion handler
279 * @phba: Pointer to HBA context object.
280 * @cmdiocbq: Pointer to command iocb.
281 * @rspiocbq: Pointer to response iocb.
282 *
283 * This function is the completion handler for iocbs issued using
284 * lpfc_bsg_send_mgmt_cmd function. This function is called by the
285 * ring event handler function without any lock held. This function
286 * can be called from both worker thread context and interrupt
287 * context. This function also can be called from another thread which
288 * cleans up the SLI layer objects.
289 * This function copies the contents of the response iocb to the
290 * response iocb memory object provided by the caller of
291 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
292 * sleeps for the iocb completion.
293 **/
294 static void
295 lpfc_bsg_send_mgmt_cmd_cmp(struct lpfc_hba *phba,
296 struct lpfc_iocbq *cmdiocbq,
297 struct lpfc_iocbq *rspiocbq)
298 {
299 struct bsg_job_data *dd_data;
300 struct fc_bsg_job *job;
301 IOCB_t *rsp;
302 struct lpfc_dmabuf *bmp, *cmp, *rmp;
303 struct lpfc_nodelist *ndlp;
304 struct lpfc_bsg_iocb *iocb;
305 unsigned long flags;
306 unsigned int rsp_size;
307 int rc = 0;
308
309 dd_data = cmdiocbq->context1;
310
311 /* Determine if job has been aborted */
312 spin_lock_irqsave(&phba->ct_ev_lock, flags);
313 job = dd_data->set_job;
314 if (job) {
315 /* Prevent timeout handling from trying to abort job */
316 job->dd_data = NULL;
317 }
318 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
319
320 /* Close the timeout handler abort window */
321 spin_lock_irqsave(&phba->hbalock, flags);
322 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
323 spin_unlock_irqrestore(&phba->hbalock, flags);
324
325 iocb = &dd_data->context_un.iocb;
326 ndlp = iocb->ndlp;
327 rmp = iocb->rmp;
328 cmp = cmdiocbq->context2;
329 bmp = cmdiocbq->context3;
330 rsp = &rspiocbq->iocb;
331
332 /* Copy the completed data or set the error status */
333
334 if (job) {
335 if (rsp->ulpStatus) {
336 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
337 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
338 case IOERR_SEQUENCE_TIMEOUT:
339 rc = -ETIMEDOUT;
340 break;
341 case IOERR_INVALID_RPI:
342 rc = -EFAULT;
343 break;
344 default:
345 rc = -EACCES;
346 break;
347 }
348 } else {
349 rc = -EACCES;
350 }
351 } else {
352 rsp_size = rsp->un.genreq64.bdl.bdeSize;
353 job->reply->reply_payload_rcv_len =
354 lpfc_bsg_copy_data(rmp, &job->reply_payload,
355 rsp_size, 0);
356 }
357 }
358
359 lpfc_free_bsg_buffers(phba, cmp);
360 lpfc_free_bsg_buffers(phba, rmp);
361 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
362 kfree(bmp);
363 lpfc_sli_release_iocbq(phba, cmdiocbq);
364 lpfc_nlp_put(ndlp);
365 kfree(dd_data);
366
367 /* Complete the job if the job is still active */
368
369 if (job) {
370 job->reply->result = rc;
371 job->job_done(job);
372 }
373 return;
374 }
375
376 /**
377 * lpfc_bsg_send_mgmt_cmd - send a CT command from a bsg request
378 * @job: fc_bsg_job to handle
379 **/
380 static int
381 lpfc_bsg_send_mgmt_cmd(struct fc_bsg_job *job)
382 {
383 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
384 struct lpfc_hba *phba = vport->phba;
385 struct lpfc_rport_data *rdata = job->rport->dd_data;
386 struct lpfc_nodelist *ndlp = rdata->pnode;
387 struct ulp_bde64 *bpl = NULL;
388 uint32_t timeout;
389 struct lpfc_iocbq *cmdiocbq = NULL;
390 IOCB_t *cmd;
391 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL, *rmp = NULL;
392 int request_nseg;
393 int reply_nseg;
394 struct bsg_job_data *dd_data;
395 unsigned long flags;
396 uint32_t creg_val;
397 int rc = 0;
398 int iocb_stat;
399
400 /* in case no data is transferred */
401 job->reply->reply_payload_rcv_len = 0;
402
403 /* allocate our bsg tracking structure */
404 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
405 if (!dd_data) {
406 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
407 "2733 Failed allocation of dd_data\n");
408 rc = -ENOMEM;
409 goto no_dd_data;
410 }
411
412 if (!lpfc_nlp_get(ndlp)) {
413 rc = -ENODEV;
414 goto no_ndlp;
415 }
416
417 if (ndlp->nlp_flag & NLP_ELS_SND_MASK) {
418 rc = -ENODEV;
419 goto free_ndlp;
420 }
421
422 cmdiocbq = lpfc_sli_get_iocbq(phba);
423 if (!cmdiocbq) {
424 rc = -ENOMEM;
425 goto free_ndlp;
426 }
427
428 cmd = &cmdiocbq->iocb;
429
430 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
431 if (!bmp) {
432 rc = -ENOMEM;
433 goto free_cmdiocbq;
434 }
435 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
436 if (!bmp->virt) {
437 rc = -ENOMEM;
438 goto free_bmp;
439 }
440
441 INIT_LIST_HEAD(&bmp->list);
442
443 bpl = (struct ulp_bde64 *) bmp->virt;
444 request_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64);
445 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
446 1, bpl, &request_nseg);
447 if (!cmp) {
448 rc = -ENOMEM;
449 goto free_bmp;
450 }
451 lpfc_bsg_copy_data(cmp, &job->request_payload,
452 job->request_payload.payload_len, 1);
453
454 bpl += request_nseg;
455 reply_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64) - request_nseg;
456 rmp = lpfc_alloc_bsg_buffers(phba, job->reply_payload.payload_len, 0,
457 bpl, &reply_nseg);
458 if (!rmp) {
459 rc = -ENOMEM;
460 goto free_cmp;
461 }
462
463 cmd->un.genreq64.bdl.ulpIoTag32 = 0;
464 cmd->un.genreq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
465 cmd->un.genreq64.bdl.addrLow = putPaddrLow(bmp->phys);
466 cmd->un.genreq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
467 cmd->un.genreq64.bdl.bdeSize =
468 (request_nseg + reply_nseg) * sizeof(struct ulp_bde64);
469 cmd->ulpCommand = CMD_GEN_REQUEST64_CR;
470 cmd->un.genreq64.w5.hcsw.Fctl = (SI | LA);
471 cmd->un.genreq64.w5.hcsw.Dfctl = 0;
472 cmd->un.genreq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
473 cmd->un.genreq64.w5.hcsw.Type = FC_TYPE_CT;
474 cmd->ulpBdeCount = 1;
475 cmd->ulpLe = 1;
476 cmd->ulpClass = CLASS3;
477 cmd->ulpContext = ndlp->nlp_rpi;
478 if (phba->sli_rev == LPFC_SLI_REV4)
479 cmd->ulpContext = phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
480 cmd->ulpOwner = OWN_CHIP;
481 cmdiocbq->vport = phba->pport;
482 cmdiocbq->context3 = bmp;
483 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
484 timeout = phba->fc_ratov * 2;
485 cmd->ulpTimeout = timeout;
486
487 cmdiocbq->iocb_cmpl = lpfc_bsg_send_mgmt_cmd_cmp;
488 cmdiocbq->context1 = dd_data;
489 cmdiocbq->context2 = cmp;
490 cmdiocbq->context3 = bmp;
491 cmdiocbq->context_un.ndlp = ndlp;
492 dd_data->type = TYPE_IOCB;
493 dd_data->set_job = job;
494 dd_data->context_un.iocb.cmdiocbq = cmdiocbq;
495 dd_data->context_un.iocb.ndlp = ndlp;
496 dd_data->context_un.iocb.rmp = rmp;
497 job->dd_data = dd_data;
498
499 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
500 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
501 rc = -EIO ;
502 goto free_rmp;
503 }
504 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
505 writel(creg_val, phba->HCregaddr);
506 readl(phba->HCregaddr); /* flush */
507 }
508
509 iocb_stat = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq, 0);
510
511 if (iocb_stat == IOCB_SUCCESS) {
512 spin_lock_irqsave(&phba->hbalock, flags);
513 /* make sure the I/O had not been completed yet */
514 if (cmdiocbq->iocb_flag & LPFC_IO_LIBDFC) {
515 /* open up abort window to timeout handler */
516 cmdiocbq->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
517 }
518 spin_unlock_irqrestore(&phba->hbalock, flags);
519 return 0; /* done for now */
520 } else if (iocb_stat == IOCB_BUSY) {
521 rc = -EAGAIN;
522 } else {
523 rc = -EIO;
524 }
525
526 /* iocb failed so cleanup */
527 job->dd_data = NULL;
528
529 free_rmp:
530 lpfc_free_bsg_buffers(phba, rmp);
531 free_cmp:
532 lpfc_free_bsg_buffers(phba, cmp);
533 free_bmp:
534 if (bmp->virt)
535 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
536 kfree(bmp);
537 free_cmdiocbq:
538 lpfc_sli_release_iocbq(phba, cmdiocbq);
539 free_ndlp:
540 lpfc_nlp_put(ndlp);
541 no_ndlp:
542 kfree(dd_data);
543 no_dd_data:
544 /* make error code available to userspace */
545 job->reply->result = rc;
546 job->dd_data = NULL;
547 return rc;
548 }
549
550 /**
551 * lpfc_bsg_rport_els_cmp - lpfc_bsg_rport_els's completion handler
552 * @phba: Pointer to HBA context object.
553 * @cmdiocbq: Pointer to command iocb.
554 * @rspiocbq: Pointer to response iocb.
555 *
556 * This function is the completion handler for iocbs issued using
557 * lpfc_bsg_rport_els_cmp function. This function is called by the
558 * ring event handler function without any lock held. This function
559 * can be called from both worker thread context and interrupt
560 * context. This function also can be called from other thread which
561 * cleans up the SLI layer objects.
562 * This function copies the contents of the response iocb to the
563 * response iocb memory object provided by the caller of
564 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
565 * sleeps for the iocb completion.
566 **/
567 static void
568 lpfc_bsg_rport_els_cmp(struct lpfc_hba *phba,
569 struct lpfc_iocbq *cmdiocbq,
570 struct lpfc_iocbq *rspiocbq)
571 {
572 struct bsg_job_data *dd_data;
573 struct fc_bsg_job *job;
574 IOCB_t *rsp;
575 struct lpfc_nodelist *ndlp;
576 struct lpfc_dmabuf *pcmd = NULL, *prsp = NULL;
577 struct fc_bsg_ctels_reply *els_reply;
578 uint8_t *rjt_data;
579 unsigned long flags;
580 unsigned int rsp_size;
581 int rc = 0;
582
583 dd_data = cmdiocbq->context1;
584 ndlp = dd_data->context_un.iocb.ndlp;
585 cmdiocbq->context1 = ndlp;
586
587 /* Determine if job has been aborted */
588 spin_lock_irqsave(&phba->ct_ev_lock, flags);
589 job = dd_data->set_job;
590 if (job) {
591 /* Prevent timeout handling from trying to abort job */
592 job->dd_data = NULL;
593 }
594 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
595
596 /* Close the timeout handler abort window */
597 spin_lock_irqsave(&phba->hbalock, flags);
598 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
599 spin_unlock_irqrestore(&phba->hbalock, flags);
600
601 rsp = &rspiocbq->iocb;
602 pcmd = (struct lpfc_dmabuf *)cmdiocbq->context2;
603 prsp = (struct lpfc_dmabuf *)pcmd->list.next;
604
605 /* Copy the completed job data or determine the job status if job is
606 * still active
607 */
608
609 if (job) {
610 if (rsp->ulpStatus == IOSTAT_SUCCESS) {
611 rsp_size = rsp->un.elsreq64.bdl.bdeSize;
612 job->reply->reply_payload_rcv_len =
613 sg_copy_from_buffer(job->reply_payload.sg_list,
614 job->reply_payload.sg_cnt,
615 prsp->virt,
616 rsp_size);
617 } else if (rsp->ulpStatus == IOSTAT_LS_RJT) {
618 job->reply->reply_payload_rcv_len =
619 sizeof(struct fc_bsg_ctels_reply);
620 /* LS_RJT data returned in word 4 */
621 rjt_data = (uint8_t *)&rsp->un.ulpWord[4];
622 els_reply = &job->reply->reply_data.ctels_reply;
623 els_reply->status = FC_CTELS_STATUS_REJECT;
624 els_reply->rjt_data.action = rjt_data[3];
625 els_reply->rjt_data.reason_code = rjt_data[2];
626 els_reply->rjt_data.reason_explanation = rjt_data[1];
627 els_reply->rjt_data.vendor_unique = rjt_data[0];
628 } else {
629 rc = -EIO;
630 }
631 }
632
633 lpfc_nlp_put(ndlp);
634 lpfc_els_free_iocb(phba, cmdiocbq);
635 kfree(dd_data);
636
637 /* Complete the job if the job is still active */
638
639 if (job) {
640 job->reply->result = rc;
641 job->job_done(job);
642 }
643 return;
644 }
645
646 /**
647 * lpfc_bsg_rport_els - send an ELS command from a bsg request
648 * @job: fc_bsg_job to handle
649 **/
650 static int
651 lpfc_bsg_rport_els(struct fc_bsg_job *job)
652 {
653 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
654 struct lpfc_hba *phba = vport->phba;
655 struct lpfc_rport_data *rdata = job->rport->dd_data;
656 struct lpfc_nodelist *ndlp = rdata->pnode;
657 uint32_t elscmd;
658 uint32_t cmdsize;
659 struct lpfc_iocbq *cmdiocbq;
660 uint16_t rpi = 0;
661 struct bsg_job_data *dd_data;
662 unsigned long flags;
663 uint32_t creg_val;
664 int rc = 0;
665
666 /* in case no data is transferred */
667 job->reply->reply_payload_rcv_len = 0;
668
669 /* verify the els command is not greater than the
670 * maximum ELS transfer size.
671 */
672
673 if (job->request_payload.payload_len > FCELSSIZE) {
674 rc = -EINVAL;
675 goto no_dd_data;
676 }
677
678 /* allocate our bsg tracking structure */
679 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
680 if (!dd_data) {
681 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
682 "2735 Failed allocation of dd_data\n");
683 rc = -ENOMEM;
684 goto no_dd_data;
685 }
686
687 elscmd = job->request->rqst_data.r_els.els_code;
688 cmdsize = job->request_payload.payload_len;
689
690 if (!lpfc_nlp_get(ndlp)) {
691 rc = -ENODEV;
692 goto free_dd_data;
693 }
694
695 /* We will use the allocated dma buffers by prep els iocb for command
696 * and response to ensure if the job times out and the request is freed,
697 * we won't be dma into memory that is no longer allocated to for the
698 * request.
699 */
700
701 cmdiocbq = lpfc_prep_els_iocb(vport, 1, cmdsize, 0, ndlp,
702 ndlp->nlp_DID, elscmd);
703 if (!cmdiocbq) {
704 rc = -EIO;
705 goto release_ndlp;
706 }
707
708 rpi = ndlp->nlp_rpi;
709
710 /* Transfer the request payload to allocated command dma buffer */
711
712 sg_copy_to_buffer(job->request_payload.sg_list,
713 job->request_payload.sg_cnt,
714 ((struct lpfc_dmabuf *)cmdiocbq->context2)->virt,
715 cmdsize);
716
717 if (phba->sli_rev == LPFC_SLI_REV4)
718 cmdiocbq->iocb.ulpContext = phba->sli4_hba.rpi_ids[rpi];
719 else
720 cmdiocbq->iocb.ulpContext = rpi;
721 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
722 cmdiocbq->context1 = dd_data;
723 cmdiocbq->context_un.ndlp = ndlp;
724 cmdiocbq->iocb_cmpl = lpfc_bsg_rport_els_cmp;
725 dd_data->type = TYPE_IOCB;
726 dd_data->set_job = job;
727 dd_data->context_un.iocb.cmdiocbq = cmdiocbq;
728 dd_data->context_un.iocb.ndlp = ndlp;
729 dd_data->context_un.iocb.rmp = NULL;
730 job->dd_data = dd_data;
731
732 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
733 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
734 rc = -EIO;
735 goto linkdown_err;
736 }
737 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
738 writel(creg_val, phba->HCregaddr);
739 readl(phba->HCregaddr); /* flush */
740 }
741
742 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq, 0);
743
744 if (rc == IOCB_SUCCESS) {
745 spin_lock_irqsave(&phba->hbalock, flags);
746 /* make sure the I/O had not been completed/released */
747 if (cmdiocbq->iocb_flag & LPFC_IO_LIBDFC) {
748 /* open up abort window to timeout handler */
749 cmdiocbq->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
750 }
751 spin_unlock_irqrestore(&phba->hbalock, flags);
752 return 0; /* done for now */
753 } else if (rc == IOCB_BUSY) {
754 rc = -EAGAIN;
755 } else {
756 rc = -EIO;
757 }
758
759 /* iocb failed so cleanup */
760 job->dd_data = NULL;
761
762 linkdown_err:
763 cmdiocbq->context1 = ndlp;
764 lpfc_els_free_iocb(phba, cmdiocbq);
765
766 release_ndlp:
767 lpfc_nlp_put(ndlp);
768
769 free_dd_data:
770 kfree(dd_data);
771
772 no_dd_data:
773 /* make error code available to userspace */
774 job->reply->result = rc;
775 job->dd_data = NULL;
776 return rc;
777 }
778
779 /**
780 * lpfc_bsg_event_free - frees an allocated event structure
781 * @kref: Pointer to a kref.
782 *
783 * Called from kref_put. Back cast the kref into an event structure address.
784 * Free any events to get, delete associated nodes, free any events to see,
785 * free any data then free the event itself.
786 **/
787 static void
788 lpfc_bsg_event_free(struct kref *kref)
789 {
790 struct lpfc_bsg_event *evt = container_of(kref, struct lpfc_bsg_event,
791 kref);
792 struct event_data *ed;
793
794 list_del(&evt->node);
795
796 while (!list_empty(&evt->events_to_get)) {
797 ed = list_entry(evt->events_to_get.next, typeof(*ed), node);
798 list_del(&ed->node);
799 kfree(ed->data);
800 kfree(ed);
801 }
802
803 while (!list_empty(&evt->events_to_see)) {
804 ed = list_entry(evt->events_to_see.next, typeof(*ed), node);
805 list_del(&ed->node);
806 kfree(ed->data);
807 kfree(ed);
808 }
809
810 kfree(evt->dd_data);
811 kfree(evt);
812 }
813
814 /**
815 * lpfc_bsg_event_ref - increments the kref for an event
816 * @evt: Pointer to an event structure.
817 **/
818 static inline void
819 lpfc_bsg_event_ref(struct lpfc_bsg_event *evt)
820 {
821 kref_get(&evt->kref);
822 }
823
824 /**
825 * lpfc_bsg_event_unref - Uses kref_put to free an event structure
826 * @evt: Pointer to an event structure.
827 **/
828 static inline void
829 lpfc_bsg_event_unref(struct lpfc_bsg_event *evt)
830 {
831 kref_put(&evt->kref, lpfc_bsg_event_free);
832 }
833
834 /**
835 * lpfc_bsg_event_new - allocate and initialize a event structure
836 * @ev_mask: Mask of events.
837 * @ev_reg_id: Event reg id.
838 * @ev_req_id: Event request id.
839 **/
840 static struct lpfc_bsg_event *
841 lpfc_bsg_event_new(uint32_t ev_mask, int ev_reg_id, uint32_t ev_req_id)
842 {
843 struct lpfc_bsg_event *evt = kzalloc(sizeof(*evt), GFP_KERNEL);
844
845 if (!evt)
846 return NULL;
847
848 INIT_LIST_HEAD(&evt->events_to_get);
849 INIT_LIST_HEAD(&evt->events_to_see);
850 evt->type_mask = ev_mask;
851 evt->req_id = ev_req_id;
852 evt->reg_id = ev_reg_id;
853 evt->wait_time_stamp = jiffies;
854 evt->dd_data = NULL;
855 init_waitqueue_head(&evt->wq);
856 kref_init(&evt->kref);
857 return evt;
858 }
859
860 /**
861 * diag_cmd_data_free - Frees an lpfc dma buffer extension
862 * @phba: Pointer to HBA context object.
863 * @mlist: Pointer to an lpfc dma buffer extension.
864 **/
865 static int
866 diag_cmd_data_free(struct lpfc_hba *phba, struct lpfc_dmabufext *mlist)
867 {
868 struct lpfc_dmabufext *mlast;
869 struct pci_dev *pcidev;
870 struct list_head head, *curr, *next;
871
872 if ((!mlist) || (!lpfc_is_link_up(phba) &&
873 (phba->link_flag & LS_LOOPBACK_MODE))) {
874 return 0;
875 }
876
877 pcidev = phba->pcidev;
878 list_add_tail(&head, &mlist->dma.list);
879
880 list_for_each_safe(curr, next, &head) {
881 mlast = list_entry(curr, struct lpfc_dmabufext , dma.list);
882 if (mlast->dma.virt)
883 dma_free_coherent(&pcidev->dev,
884 mlast->size,
885 mlast->dma.virt,
886 mlast->dma.phys);
887 kfree(mlast);
888 }
889 return 0;
890 }
891
892 /**
893 * lpfc_bsg_ct_unsol_event - process an unsolicited CT command
894 * @phba:
895 * @pring:
896 * @piocbq:
897 *
898 * This function is called when an unsolicited CT command is received. It
899 * forwards the event to any processes registered to receive CT events.
900 **/
901 int
902 lpfc_bsg_ct_unsol_event(struct lpfc_hba *phba, struct lpfc_sli_ring *pring,
903 struct lpfc_iocbq *piocbq)
904 {
905 uint32_t evt_req_id = 0;
906 uint32_t cmd;
907 uint32_t len;
908 struct lpfc_dmabuf *dmabuf = NULL;
909 struct lpfc_bsg_event *evt;
910 struct event_data *evt_dat = NULL;
911 struct lpfc_iocbq *iocbq;
912 size_t offset = 0;
913 struct list_head head;
914 struct ulp_bde64 *bde;
915 dma_addr_t dma_addr;
916 int i;
917 struct lpfc_dmabuf *bdeBuf1 = piocbq->context2;
918 struct lpfc_dmabuf *bdeBuf2 = piocbq->context3;
919 struct lpfc_hbq_entry *hbqe;
920 struct lpfc_sli_ct_request *ct_req;
921 struct fc_bsg_job *job = NULL;
922 struct bsg_job_data *dd_data = NULL;
923 unsigned long flags;
924 int size = 0;
925
926 INIT_LIST_HEAD(&head);
927 list_add_tail(&head, &piocbq->list);
928
929 if (piocbq->iocb.ulpBdeCount == 0 ||
930 piocbq->iocb.un.cont64[0].tus.f.bdeSize == 0)
931 goto error_ct_unsol_exit;
932
933 if (phba->link_state == LPFC_HBA_ERROR ||
934 (!(phba->sli.sli_flag & LPFC_SLI_ACTIVE)))
935 goto error_ct_unsol_exit;
936
937 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED)
938 dmabuf = bdeBuf1;
939 else {
940 dma_addr = getPaddr(piocbq->iocb.un.cont64[0].addrHigh,
941 piocbq->iocb.un.cont64[0].addrLow);
942 dmabuf = lpfc_sli_ringpostbuf_get(phba, pring, dma_addr);
943 }
944 if (dmabuf == NULL)
945 goto error_ct_unsol_exit;
946 ct_req = (struct lpfc_sli_ct_request *)dmabuf->virt;
947 evt_req_id = ct_req->FsType;
948 cmd = ct_req->CommandResponse.bits.CmdRsp;
949 len = ct_req->CommandResponse.bits.Size;
950 if (!(phba->sli3_options & LPFC_SLI3_HBQ_ENABLED))
951 lpfc_sli_ringpostbuf_put(phba, pring, dmabuf);
952
953 spin_lock_irqsave(&phba->ct_ev_lock, flags);
954 list_for_each_entry(evt, &phba->ct_ev_waiters, node) {
955 if (!(evt->type_mask & FC_REG_CT_EVENT) ||
956 evt->req_id != evt_req_id)
957 continue;
958
959 lpfc_bsg_event_ref(evt);
960 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
961 evt_dat = kzalloc(sizeof(*evt_dat), GFP_KERNEL);
962 if (evt_dat == NULL) {
963 spin_lock_irqsave(&phba->ct_ev_lock, flags);
964 lpfc_bsg_event_unref(evt);
965 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
966 "2614 Memory allocation failed for "
967 "CT event\n");
968 break;
969 }
970
971 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
972 /* take accumulated byte count from the last iocbq */
973 iocbq = list_entry(head.prev, typeof(*iocbq), list);
974 evt_dat->len = iocbq->iocb.unsli3.rcvsli3.acc_len;
975 } else {
976 list_for_each_entry(iocbq, &head, list) {
977 for (i = 0; i < iocbq->iocb.ulpBdeCount; i++)
978 evt_dat->len +=
979 iocbq->iocb.un.cont64[i].tus.f.bdeSize;
980 }
981 }
982
983 evt_dat->data = kzalloc(evt_dat->len, GFP_KERNEL);
984 if (evt_dat->data == NULL) {
985 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
986 "2615 Memory allocation failed for "
987 "CT event data, size %d\n",
988 evt_dat->len);
989 kfree(evt_dat);
990 spin_lock_irqsave(&phba->ct_ev_lock, flags);
991 lpfc_bsg_event_unref(evt);
992 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
993 goto error_ct_unsol_exit;
994 }
995
996 list_for_each_entry(iocbq, &head, list) {
997 size = 0;
998 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
999 bdeBuf1 = iocbq->context2;
1000 bdeBuf2 = iocbq->context3;
1001 }
1002 for (i = 0; i < iocbq->iocb.ulpBdeCount; i++) {
1003 if (phba->sli3_options &
1004 LPFC_SLI3_HBQ_ENABLED) {
1005 if (i == 0) {
1006 hbqe = (struct lpfc_hbq_entry *)
1007 &iocbq->iocb.un.ulpWord[0];
1008 size = hbqe->bde.tus.f.bdeSize;
1009 dmabuf = bdeBuf1;
1010 } else if (i == 1) {
1011 hbqe = (struct lpfc_hbq_entry *)
1012 &iocbq->iocb.unsli3.
1013 sli3Words[4];
1014 size = hbqe->bde.tus.f.bdeSize;
1015 dmabuf = bdeBuf2;
1016 }
1017 if ((offset + size) > evt_dat->len)
1018 size = evt_dat->len - offset;
1019 } else {
1020 size = iocbq->iocb.un.cont64[i].
1021 tus.f.bdeSize;
1022 bde = &iocbq->iocb.un.cont64[i];
1023 dma_addr = getPaddr(bde->addrHigh,
1024 bde->addrLow);
1025 dmabuf = lpfc_sli_ringpostbuf_get(phba,
1026 pring, dma_addr);
1027 }
1028 if (!dmabuf) {
1029 lpfc_printf_log(phba, KERN_ERR,
1030 LOG_LIBDFC, "2616 No dmabuf "
1031 "found for iocbq 0x%p\n",
1032 iocbq);
1033 kfree(evt_dat->data);
1034 kfree(evt_dat);
1035 spin_lock_irqsave(&phba->ct_ev_lock,
1036 flags);
1037 lpfc_bsg_event_unref(evt);
1038 spin_unlock_irqrestore(
1039 &phba->ct_ev_lock, flags);
1040 goto error_ct_unsol_exit;
1041 }
1042 memcpy((char *)(evt_dat->data) + offset,
1043 dmabuf->virt, size);
1044 offset += size;
1045 if (evt_req_id != SLI_CT_ELX_LOOPBACK &&
1046 !(phba->sli3_options &
1047 LPFC_SLI3_HBQ_ENABLED)) {
1048 lpfc_sli_ringpostbuf_put(phba, pring,
1049 dmabuf);
1050 } else {
1051 switch (cmd) {
1052 case ELX_LOOPBACK_DATA:
1053 if (phba->sli_rev <
1054 LPFC_SLI_REV4)
1055 diag_cmd_data_free(phba,
1056 (struct lpfc_dmabufext
1057 *)dmabuf);
1058 break;
1059 case ELX_LOOPBACK_XRI_SETUP:
1060 if ((phba->sli_rev ==
1061 LPFC_SLI_REV2) ||
1062 (phba->sli3_options &
1063 LPFC_SLI3_HBQ_ENABLED
1064 )) {
1065 lpfc_in_buf_free(phba,
1066 dmabuf);
1067 } else {
1068 lpfc_post_buffer(phba,
1069 pring,
1070 1);
1071 }
1072 break;
1073 default:
1074 if (!(phba->sli3_options &
1075 LPFC_SLI3_HBQ_ENABLED))
1076 lpfc_post_buffer(phba,
1077 pring,
1078 1);
1079 break;
1080 }
1081 }
1082 }
1083 }
1084
1085 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1086 if (phba->sli_rev == LPFC_SLI_REV4) {
1087 evt_dat->immed_dat = phba->ctx_idx;
1088 phba->ctx_idx = (phba->ctx_idx + 1) % LPFC_CT_CTX_MAX;
1089 /* Provide warning for over-run of the ct_ctx array */
1090 if (phba->ct_ctx[evt_dat->immed_dat].valid ==
1091 UNSOL_VALID)
1092 lpfc_printf_log(phba, KERN_WARNING, LOG_ELS,
1093 "2717 CT context array entry "
1094 "[%d] over-run: oxid:x%x, "
1095 "sid:x%x\n", phba->ctx_idx,
1096 phba->ct_ctx[
1097 evt_dat->immed_dat].oxid,
1098 phba->ct_ctx[
1099 evt_dat->immed_dat].SID);
1100 phba->ct_ctx[evt_dat->immed_dat].rxid =
1101 piocbq->iocb.ulpContext;
1102 phba->ct_ctx[evt_dat->immed_dat].oxid =
1103 piocbq->iocb.unsli3.rcvsli3.ox_id;
1104 phba->ct_ctx[evt_dat->immed_dat].SID =
1105 piocbq->iocb.un.rcvels.remoteID;
1106 phba->ct_ctx[evt_dat->immed_dat].valid = UNSOL_VALID;
1107 } else
1108 evt_dat->immed_dat = piocbq->iocb.ulpContext;
1109
1110 evt_dat->type = FC_REG_CT_EVENT;
1111 list_add(&evt_dat->node, &evt->events_to_see);
1112 if (evt_req_id == SLI_CT_ELX_LOOPBACK) {
1113 wake_up_interruptible(&evt->wq);
1114 lpfc_bsg_event_unref(evt);
1115 break;
1116 }
1117
1118 list_move(evt->events_to_see.prev, &evt->events_to_get);
1119
1120 dd_data = (struct bsg_job_data *)evt->dd_data;
1121 job = dd_data->set_job;
1122 dd_data->set_job = NULL;
1123 lpfc_bsg_event_unref(evt);
1124 if (job) {
1125 job->reply->reply_payload_rcv_len = size;
1126 /* make error code available to userspace */
1127 job->reply->result = 0;
1128 job->dd_data = NULL;
1129 /* complete the job back to userspace */
1130 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1131 job->job_done(job);
1132 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1133 }
1134 }
1135 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1136
1137 error_ct_unsol_exit:
1138 if (!list_empty(&head))
1139 list_del(&head);
1140 if ((phba->sli_rev < LPFC_SLI_REV4) &&
1141 (evt_req_id == SLI_CT_ELX_LOOPBACK))
1142 return 0;
1143 return 1;
1144 }
1145
1146 /**
1147 * lpfc_bsg_ct_unsol_abort - handler ct abort to management plane
1148 * @phba: Pointer to HBA context object.
1149 * @dmabuf: pointer to a dmabuf that describes the FC sequence
1150 *
1151 * This function handles abort to the CT command toward management plane
1152 * for SLI4 port.
1153 *
1154 * If the pending context of a CT command to management plane present, clears
1155 * such context and returns 1 for handled; otherwise, it returns 0 indicating
1156 * no context exists.
1157 **/
1158 int
1159 lpfc_bsg_ct_unsol_abort(struct lpfc_hba *phba, struct hbq_dmabuf *dmabuf)
1160 {
1161 struct fc_frame_header fc_hdr;
1162 struct fc_frame_header *fc_hdr_ptr = &fc_hdr;
1163 int ctx_idx, handled = 0;
1164 uint16_t oxid, rxid;
1165 uint32_t sid;
1166
1167 memcpy(fc_hdr_ptr, dmabuf->hbuf.virt, sizeof(struct fc_frame_header));
1168 sid = sli4_sid_from_fc_hdr(fc_hdr_ptr);
1169 oxid = be16_to_cpu(fc_hdr_ptr->fh_ox_id);
1170 rxid = be16_to_cpu(fc_hdr_ptr->fh_rx_id);
1171
1172 for (ctx_idx = 0; ctx_idx < LPFC_CT_CTX_MAX; ctx_idx++) {
1173 if (phba->ct_ctx[ctx_idx].valid != UNSOL_VALID)
1174 continue;
1175 if (phba->ct_ctx[ctx_idx].rxid != rxid)
1176 continue;
1177 if (phba->ct_ctx[ctx_idx].oxid != oxid)
1178 continue;
1179 if (phba->ct_ctx[ctx_idx].SID != sid)
1180 continue;
1181 phba->ct_ctx[ctx_idx].valid = UNSOL_INVALID;
1182 handled = 1;
1183 }
1184 return handled;
1185 }
1186
1187 /**
1188 * lpfc_bsg_hba_set_event - process a SET_EVENT bsg vendor command
1189 * @job: SET_EVENT fc_bsg_job
1190 **/
1191 static int
1192 lpfc_bsg_hba_set_event(struct fc_bsg_job *job)
1193 {
1194 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
1195 struct lpfc_hba *phba = vport->phba;
1196 struct set_ct_event *event_req;
1197 struct lpfc_bsg_event *evt;
1198 int rc = 0;
1199 struct bsg_job_data *dd_data = NULL;
1200 uint32_t ev_mask;
1201 unsigned long flags;
1202
1203 if (job->request_len <
1204 sizeof(struct fc_bsg_request) + sizeof(struct set_ct_event)) {
1205 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1206 "2612 Received SET_CT_EVENT below minimum "
1207 "size\n");
1208 rc = -EINVAL;
1209 goto job_error;
1210 }
1211
1212 event_req = (struct set_ct_event *)
1213 job->request->rqst_data.h_vendor.vendor_cmd;
1214 ev_mask = ((uint32_t)(unsigned long)event_req->type_mask &
1215 FC_REG_EVENT_MASK);
1216 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1217 list_for_each_entry(evt, &phba->ct_ev_waiters, node) {
1218 if (evt->reg_id == event_req->ev_reg_id) {
1219 lpfc_bsg_event_ref(evt);
1220 evt->wait_time_stamp = jiffies;
1221 dd_data = (struct bsg_job_data *)evt->dd_data;
1222 break;
1223 }
1224 }
1225 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1226
1227 if (&evt->node == &phba->ct_ev_waiters) {
1228 /* no event waiting struct yet - first call */
1229 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
1230 if (dd_data == NULL) {
1231 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1232 "2734 Failed allocation of dd_data\n");
1233 rc = -ENOMEM;
1234 goto job_error;
1235 }
1236 evt = lpfc_bsg_event_new(ev_mask, event_req->ev_reg_id,
1237 event_req->ev_req_id);
1238 if (!evt) {
1239 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1240 "2617 Failed allocation of event "
1241 "waiter\n");
1242 rc = -ENOMEM;
1243 goto job_error;
1244 }
1245 dd_data->type = TYPE_EVT;
1246 dd_data->set_job = NULL;
1247 dd_data->context_un.evt = evt;
1248 evt->dd_data = (void *)dd_data;
1249 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1250 list_add(&evt->node, &phba->ct_ev_waiters);
1251 lpfc_bsg_event_ref(evt);
1252 evt->wait_time_stamp = jiffies;
1253 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1254 }
1255
1256 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1257 evt->waiting = 1;
1258 dd_data->set_job = job; /* for unsolicited command */
1259 job->dd_data = dd_data; /* for fc transport timeout callback*/
1260 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1261 return 0; /* call job done later */
1262
1263 job_error:
1264 if (dd_data != NULL)
1265 kfree(dd_data);
1266
1267 job->dd_data = NULL;
1268 return rc;
1269 }
1270
1271 /**
1272 * lpfc_bsg_hba_get_event - process a GET_EVENT bsg vendor command
1273 * @job: GET_EVENT fc_bsg_job
1274 **/
1275 static int
1276 lpfc_bsg_hba_get_event(struct fc_bsg_job *job)
1277 {
1278 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
1279 struct lpfc_hba *phba = vport->phba;
1280 struct get_ct_event *event_req;
1281 struct get_ct_event_reply *event_reply;
1282 struct lpfc_bsg_event *evt, *evt_next;
1283 struct event_data *evt_dat = NULL;
1284 unsigned long flags;
1285 uint32_t rc = 0;
1286
1287 if (job->request_len <
1288 sizeof(struct fc_bsg_request) + sizeof(struct get_ct_event)) {
1289 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1290 "2613 Received GET_CT_EVENT request below "
1291 "minimum size\n");
1292 rc = -EINVAL;
1293 goto job_error;
1294 }
1295
1296 event_req = (struct get_ct_event *)
1297 job->request->rqst_data.h_vendor.vendor_cmd;
1298
1299 event_reply = (struct get_ct_event_reply *)
1300 job->reply->reply_data.vendor_reply.vendor_rsp;
1301 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1302 list_for_each_entry_safe(evt, evt_next, &phba->ct_ev_waiters, node) {
1303 if (evt->reg_id == event_req->ev_reg_id) {
1304 if (list_empty(&evt->events_to_get))
1305 break;
1306 lpfc_bsg_event_ref(evt);
1307 evt->wait_time_stamp = jiffies;
1308 evt_dat = list_entry(evt->events_to_get.prev,
1309 struct event_data, node);
1310 list_del(&evt_dat->node);
1311 break;
1312 }
1313 }
1314 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1315
1316 /* The app may continue to ask for event data until it gets
1317 * an error indicating that there isn't anymore
1318 */
1319 if (evt_dat == NULL) {
1320 job->reply->reply_payload_rcv_len = 0;
1321 rc = -ENOENT;
1322 goto job_error;
1323 }
1324
1325 if (evt_dat->len > job->request_payload.payload_len) {
1326 evt_dat->len = job->request_payload.payload_len;
1327 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1328 "2618 Truncated event data at %d "
1329 "bytes\n",
1330 job->request_payload.payload_len);
1331 }
1332
1333 event_reply->type = evt_dat->type;
1334 event_reply->immed_data = evt_dat->immed_dat;
1335 if (evt_dat->len > 0)
1336 job->reply->reply_payload_rcv_len =
1337 sg_copy_from_buffer(job->request_payload.sg_list,
1338 job->request_payload.sg_cnt,
1339 evt_dat->data, evt_dat->len);
1340 else
1341 job->reply->reply_payload_rcv_len = 0;
1342
1343 if (evt_dat) {
1344 kfree(evt_dat->data);
1345 kfree(evt_dat);
1346 }
1347
1348 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1349 lpfc_bsg_event_unref(evt);
1350 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1351 job->dd_data = NULL;
1352 job->reply->result = 0;
1353 job->job_done(job);
1354 return 0;
1355
1356 job_error:
1357 job->dd_data = NULL;
1358 job->reply->result = rc;
1359 return rc;
1360 }
1361
1362 /**
1363 * lpfc_issue_ct_rsp_cmp - lpfc_issue_ct_rsp's completion handler
1364 * @phba: Pointer to HBA context object.
1365 * @cmdiocbq: Pointer to command iocb.
1366 * @rspiocbq: Pointer to response iocb.
1367 *
1368 * This function is the completion handler for iocbs issued using
1369 * lpfc_issue_ct_rsp_cmp function. This function is called by the
1370 * ring event handler function without any lock held. This function
1371 * can be called from both worker thread context and interrupt
1372 * context. This function also can be called from other thread which
1373 * cleans up the SLI layer objects.
1374 * This function copy the contents of the response iocb to the
1375 * response iocb memory object provided by the caller of
1376 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
1377 * sleeps for the iocb completion.
1378 **/
1379 static void
1380 lpfc_issue_ct_rsp_cmp(struct lpfc_hba *phba,
1381 struct lpfc_iocbq *cmdiocbq,
1382 struct lpfc_iocbq *rspiocbq)
1383 {
1384 struct bsg_job_data *dd_data;
1385 struct fc_bsg_job *job;
1386 IOCB_t *rsp;
1387 struct lpfc_dmabuf *bmp, *cmp;
1388 struct lpfc_nodelist *ndlp;
1389 unsigned long flags;
1390 int rc = 0;
1391
1392 dd_data = cmdiocbq->context1;
1393
1394 /* Determine if job has been aborted */
1395 spin_lock_irqsave(&phba->ct_ev_lock, flags);
1396 job = dd_data->set_job;
1397 if (job) {
1398 /* Prevent timeout handling from trying to abort job */
1399 job->dd_data = NULL;
1400 }
1401 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
1402
1403 /* Close the timeout handler abort window */
1404 spin_lock_irqsave(&phba->hbalock, flags);
1405 cmdiocbq->iocb_flag &= ~LPFC_IO_CMD_OUTSTANDING;
1406 spin_unlock_irqrestore(&phba->hbalock, flags);
1407
1408 ndlp = dd_data->context_un.iocb.ndlp;
1409 cmp = cmdiocbq->context2;
1410 bmp = cmdiocbq->context3;
1411 rsp = &rspiocbq->iocb;
1412
1413 /* Copy the completed job data or set the error status */
1414
1415 if (job) {
1416 if (rsp->ulpStatus) {
1417 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
1418 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
1419 case IOERR_SEQUENCE_TIMEOUT:
1420 rc = -ETIMEDOUT;
1421 break;
1422 case IOERR_INVALID_RPI:
1423 rc = -EFAULT;
1424 break;
1425 default:
1426 rc = -EACCES;
1427 break;
1428 }
1429 } else {
1430 rc = -EACCES;
1431 }
1432 } else {
1433 job->reply->reply_payload_rcv_len = 0;
1434 }
1435 }
1436
1437 lpfc_free_bsg_buffers(phba, cmp);
1438 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
1439 kfree(bmp);
1440 lpfc_sli_release_iocbq(phba, cmdiocbq);
1441 lpfc_nlp_put(ndlp);
1442 kfree(dd_data);
1443
1444 /* Complete the job if the job is still active */
1445
1446 if (job) {
1447 job->reply->result = rc;
1448 job->job_done(job);
1449 }
1450 return;
1451 }
1452
1453 /**
1454 * lpfc_issue_ct_rsp - issue a ct response
1455 * @phba: Pointer to HBA context object.
1456 * @job: Pointer to the job object.
1457 * @tag: tag index value into the ports context exchange array.
1458 * @bmp: Pointer to a dma buffer descriptor.
1459 * @num_entry: Number of enties in the bde.
1460 **/
1461 static int
1462 lpfc_issue_ct_rsp(struct lpfc_hba *phba, struct fc_bsg_job *job, uint32_t tag,
1463 struct lpfc_dmabuf *cmp, struct lpfc_dmabuf *bmp,
1464 int num_entry)
1465 {
1466 IOCB_t *icmd;
1467 struct lpfc_iocbq *ctiocb = NULL;
1468 int rc = 0;
1469 struct lpfc_nodelist *ndlp = NULL;
1470 struct bsg_job_data *dd_data;
1471 unsigned long flags;
1472 uint32_t creg_val;
1473
1474 /* allocate our bsg tracking structure */
1475 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
1476 if (!dd_data) {
1477 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1478 "2736 Failed allocation of dd_data\n");
1479 rc = -ENOMEM;
1480 goto no_dd_data;
1481 }
1482
1483 /* Allocate buffer for command iocb */
1484 ctiocb = lpfc_sli_get_iocbq(phba);
1485 if (!ctiocb) {
1486 rc = -ENOMEM;
1487 goto no_ctiocb;
1488 }
1489
1490 icmd = &ctiocb->iocb;
1491 icmd->un.xseq64.bdl.ulpIoTag32 = 0;
1492 icmd->un.xseq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
1493 icmd->un.xseq64.bdl.addrLow = putPaddrLow(bmp->phys);
1494 icmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
1495 icmd->un.xseq64.bdl.bdeSize = (num_entry * sizeof(struct ulp_bde64));
1496 icmd->un.xseq64.w5.hcsw.Fctl = (LS | LA);
1497 icmd->un.xseq64.w5.hcsw.Dfctl = 0;
1498 icmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_SOL_CTL;
1499 icmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
1500
1501 /* Fill in rest of iocb */
1502 icmd->ulpCommand = CMD_XMIT_SEQUENCE64_CX;
1503 icmd->ulpBdeCount = 1;
1504 icmd->ulpLe = 1;
1505 icmd->ulpClass = CLASS3;
1506 if (phba->sli_rev == LPFC_SLI_REV4) {
1507 /* Do not issue unsol response if oxid not marked as valid */
1508 if (phba->ct_ctx[tag].valid != UNSOL_VALID) {
1509 rc = IOCB_ERROR;
1510 goto issue_ct_rsp_exit;
1511 }
1512 icmd->ulpContext = phba->ct_ctx[tag].rxid;
1513 icmd->unsli3.rcvsli3.ox_id = phba->ct_ctx[tag].oxid;
1514 ndlp = lpfc_findnode_did(phba->pport, phba->ct_ctx[tag].SID);
1515 if (!ndlp) {
1516 lpfc_printf_log(phba, KERN_WARNING, LOG_ELS,
1517 "2721 ndlp null for oxid %x SID %x\n",
1518 icmd->ulpContext,
1519 phba->ct_ctx[tag].SID);
1520 rc = IOCB_ERROR;
1521 goto issue_ct_rsp_exit;
1522 }
1523
1524 /* Check if the ndlp is active */
1525 if (!ndlp || !NLP_CHK_NODE_ACT(ndlp)) {
1526 rc = IOCB_ERROR;
1527 goto issue_ct_rsp_exit;
1528 }
1529
1530 /* get a refernece count so the ndlp doesn't go away while
1531 * we respond
1532 */
1533 if (!lpfc_nlp_get(ndlp)) {
1534 rc = IOCB_ERROR;
1535 goto issue_ct_rsp_exit;
1536 }
1537
1538 icmd->un.ulpWord[3] =
1539 phba->sli4_hba.rpi_ids[ndlp->nlp_rpi];
1540
1541 /* The exchange is done, mark the entry as invalid */
1542 phba->ct_ctx[tag].valid = UNSOL_INVALID;
1543 } else
1544 icmd->ulpContext = (ushort) tag;
1545
1546 icmd->ulpTimeout = phba->fc_ratov * 2;
1547
1548 /* Xmit CT response on exchange <xid> */
1549 lpfc_printf_log(phba, KERN_INFO, LOG_ELS,
1550 "2722 Xmit CT response on exchange x%x Data: x%x x%x x%x\n",
1551 icmd->ulpContext, icmd->ulpIoTag, tag, phba->link_state);
1552
1553 ctiocb->iocb_cmpl = NULL;
1554 ctiocb->iocb_flag |= LPFC_IO_LIBDFC;
1555 ctiocb->vport = phba->pport;
1556 ctiocb->context1 = dd_data;
1557 ctiocb->context2 = cmp;
1558 ctiocb->context3 = bmp;
1559 ctiocb->context_un.ndlp = ndlp;
1560 ctiocb->iocb_cmpl = lpfc_issue_ct_rsp_cmp;
1561
1562 dd_data->type = TYPE_IOCB;
1563 dd_data->set_job = job;
1564 dd_data->context_un.iocb.cmdiocbq = ctiocb;
1565 dd_data->context_un.iocb.ndlp = ndlp;
1566 dd_data->context_un.iocb.rmp = NULL;
1567 job->dd_data = dd_data;
1568
1569 if (phba->cfg_poll & DISABLE_FCP_RING_INT) {
1570 if (lpfc_readl(phba->HCregaddr, &creg_val)) {
1571 rc = -IOCB_ERROR;
1572 goto issue_ct_rsp_exit;
1573 }
1574 creg_val |= (HC_R0INT_ENA << LPFC_FCP_RING);
1575 writel(creg_val, phba->HCregaddr);
1576 readl(phba->HCregaddr); /* flush */
1577 }
1578
1579 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, ctiocb, 0);
1580
1581 if (rc == IOCB_SUCCESS) {
1582 spin_lock_irqsave(&phba->hbalock, flags);
1583 /* make sure the I/O had not been completed/released */
1584 if (ctiocb->iocb_flag & LPFC_IO_LIBDFC) {
1585 /* open up abort window to timeout handler */
1586 ctiocb->iocb_flag |= LPFC_IO_CMD_OUTSTANDING;
1587 }
1588 spin_unlock_irqrestore(&phba->hbalock, flags);
1589 return 0; /* done for now */
1590 }
1591
1592 /* iocb failed so cleanup */
1593 job->dd_data = NULL;
1594
1595 issue_ct_rsp_exit:
1596 lpfc_sli_release_iocbq(phba, ctiocb);
1597 no_ctiocb:
1598 kfree(dd_data);
1599 no_dd_data:
1600 return rc;
1601 }
1602
1603 /**
1604 * lpfc_bsg_send_mgmt_rsp - process a SEND_MGMT_RESP bsg vendor command
1605 * @job: SEND_MGMT_RESP fc_bsg_job
1606 **/
1607 static int
1608 lpfc_bsg_send_mgmt_rsp(struct fc_bsg_job *job)
1609 {
1610 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
1611 struct lpfc_hba *phba = vport->phba;
1612 struct send_mgmt_resp *mgmt_resp = (struct send_mgmt_resp *)
1613 job->request->rqst_data.h_vendor.vendor_cmd;
1614 struct ulp_bde64 *bpl;
1615 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL;
1616 int bpl_entries;
1617 uint32_t tag = mgmt_resp->tag;
1618 unsigned long reqbfrcnt =
1619 (unsigned long)job->request_payload.payload_len;
1620 int rc = 0;
1621
1622 /* in case no data is transferred */
1623 job->reply->reply_payload_rcv_len = 0;
1624
1625 if (!reqbfrcnt || (reqbfrcnt > (80 * BUF_SZ_4K))) {
1626 rc = -ERANGE;
1627 goto send_mgmt_rsp_exit;
1628 }
1629
1630 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
1631 if (!bmp) {
1632 rc = -ENOMEM;
1633 goto send_mgmt_rsp_exit;
1634 }
1635
1636 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
1637 if (!bmp->virt) {
1638 rc = -ENOMEM;
1639 goto send_mgmt_rsp_free_bmp;
1640 }
1641
1642 INIT_LIST_HEAD(&bmp->list);
1643 bpl = (struct ulp_bde64 *) bmp->virt;
1644 bpl_entries = (LPFC_BPL_SIZE/sizeof(struct ulp_bde64));
1645 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
1646 1, bpl, &bpl_entries);
1647 if (!cmp) {
1648 rc = -ENOMEM;
1649 goto send_mgmt_rsp_free_bmp;
1650 }
1651 lpfc_bsg_copy_data(cmp, &job->request_payload,
1652 job->request_payload.payload_len, 1);
1653
1654 rc = lpfc_issue_ct_rsp(phba, job, tag, cmp, bmp, bpl_entries);
1655
1656 if (rc == IOCB_SUCCESS)
1657 return 0; /* done for now */
1658
1659 rc = -EACCES;
1660
1661 lpfc_free_bsg_buffers(phba, cmp);
1662
1663 send_mgmt_rsp_free_bmp:
1664 if (bmp->virt)
1665 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
1666 kfree(bmp);
1667 send_mgmt_rsp_exit:
1668 /* make error code available to userspace */
1669 job->reply->result = rc;
1670 job->dd_data = NULL;
1671 return rc;
1672 }
1673
1674 /**
1675 * lpfc_bsg_diag_mode_enter - process preparing into device diag loopback mode
1676 * @phba: Pointer to HBA context object.
1677 *
1678 * This function is responsible for preparing driver for diag loopback
1679 * on device.
1680 */
1681 static int
1682 lpfc_bsg_diag_mode_enter(struct lpfc_hba *phba)
1683 {
1684 struct lpfc_vport **vports;
1685 struct Scsi_Host *shost;
1686 struct lpfc_sli *psli;
1687 struct lpfc_sli_ring *pring;
1688 int i = 0;
1689
1690 psli = &phba->sli;
1691 if (!psli)
1692 return -ENODEV;
1693
1694 pring = &psli->ring[LPFC_FCP_RING];
1695 if (!pring)
1696 return -ENODEV;
1697
1698 if ((phba->link_state == LPFC_HBA_ERROR) ||
1699 (psli->sli_flag & LPFC_BLOCK_MGMT_IO) ||
1700 (!(psli->sli_flag & LPFC_SLI_ACTIVE)))
1701 return -EACCES;
1702
1703 vports = lpfc_create_vport_work_array(phba);
1704 if (vports) {
1705 for (i = 0; i <= phba->max_vpi && vports[i] != NULL; i++) {
1706 shost = lpfc_shost_from_vport(vports[i]);
1707 scsi_block_requests(shost);
1708 }
1709 lpfc_destroy_vport_work_array(phba, vports);
1710 } else {
1711 shost = lpfc_shost_from_vport(phba->pport);
1712 scsi_block_requests(shost);
1713 }
1714
1715 while (!list_empty(&pring->txcmplq)) {
1716 if (i++ > 500) /* wait up to 5 seconds */
1717 break;
1718 msleep(10);
1719 }
1720 return 0;
1721 }
1722
1723 /**
1724 * lpfc_bsg_diag_mode_exit - exit process from device diag loopback mode
1725 * @phba: Pointer to HBA context object.
1726 *
1727 * This function is responsible for driver exit processing of setting up
1728 * diag loopback mode on device.
1729 */
1730 static void
1731 lpfc_bsg_diag_mode_exit(struct lpfc_hba *phba)
1732 {
1733 struct Scsi_Host *shost;
1734 struct lpfc_vport **vports;
1735 int i;
1736
1737 vports = lpfc_create_vport_work_array(phba);
1738 if (vports) {
1739 for (i = 0; i <= phba->max_vpi && vports[i] != NULL; i++) {
1740 shost = lpfc_shost_from_vport(vports[i]);
1741 scsi_unblock_requests(shost);
1742 }
1743 lpfc_destroy_vport_work_array(phba, vports);
1744 } else {
1745 shost = lpfc_shost_from_vport(phba->pport);
1746 scsi_unblock_requests(shost);
1747 }
1748 return;
1749 }
1750
1751 /**
1752 * lpfc_sli3_bsg_diag_loopback_mode - process an sli3 bsg vendor command
1753 * @phba: Pointer to HBA context object.
1754 * @job: LPFC_BSG_VENDOR_DIAG_MODE
1755 *
1756 * This function is responsible for placing an sli3 port into diagnostic
1757 * loopback mode in order to perform a diagnostic loopback test.
1758 * All new scsi requests are blocked, a small delay is used to allow the
1759 * scsi requests to complete then the link is brought down. If the link is
1760 * is placed in loopback mode then scsi requests are again allowed
1761 * so the scsi mid-layer doesn't give up on the port.
1762 * All of this is done in-line.
1763 */
1764 static int
1765 lpfc_sli3_bsg_diag_loopback_mode(struct lpfc_hba *phba, struct fc_bsg_job *job)
1766 {
1767 struct diag_mode_set *loopback_mode;
1768 uint32_t link_flags;
1769 uint32_t timeout;
1770 LPFC_MBOXQ_t *pmboxq = NULL;
1771 int mbxstatus = MBX_SUCCESS;
1772 int i = 0;
1773 int rc = 0;
1774
1775 /* no data to return just the return code */
1776 job->reply->reply_payload_rcv_len = 0;
1777
1778 if (job->request_len < sizeof(struct fc_bsg_request) +
1779 sizeof(struct diag_mode_set)) {
1780 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1781 "2738 Received DIAG MODE request size:%d "
1782 "below the minimum size:%d\n",
1783 job->request_len,
1784 (int)(sizeof(struct fc_bsg_request) +
1785 sizeof(struct diag_mode_set)));
1786 rc = -EINVAL;
1787 goto job_error;
1788 }
1789
1790 rc = lpfc_bsg_diag_mode_enter(phba);
1791 if (rc)
1792 goto job_error;
1793
1794 /* bring the link to diagnostic mode */
1795 loopback_mode = (struct diag_mode_set *)
1796 job->request->rqst_data.h_vendor.vendor_cmd;
1797 link_flags = loopback_mode->type;
1798 timeout = loopback_mode->timeout * 100;
1799
1800 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1801 if (!pmboxq) {
1802 rc = -ENOMEM;
1803 goto loopback_mode_exit;
1804 }
1805 memset((void *)pmboxq, 0, sizeof(LPFC_MBOXQ_t));
1806 pmboxq->u.mb.mbxCommand = MBX_DOWN_LINK;
1807 pmboxq->u.mb.mbxOwner = OWN_HOST;
1808
1809 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
1810
1811 if ((mbxstatus == MBX_SUCCESS) && (pmboxq->u.mb.mbxStatus == 0)) {
1812 /* wait for link down before proceeding */
1813 i = 0;
1814 while (phba->link_state != LPFC_LINK_DOWN) {
1815 if (i++ > timeout) {
1816 rc = -ETIMEDOUT;
1817 goto loopback_mode_exit;
1818 }
1819 msleep(10);
1820 }
1821
1822 memset((void *)pmboxq, 0, sizeof(LPFC_MBOXQ_t));
1823 if (link_flags == INTERNAL_LOOP_BACK)
1824 pmboxq->u.mb.un.varInitLnk.link_flags = FLAGS_LOCAL_LB;
1825 else
1826 pmboxq->u.mb.un.varInitLnk.link_flags =
1827 FLAGS_TOPOLOGY_MODE_LOOP;
1828
1829 pmboxq->u.mb.mbxCommand = MBX_INIT_LINK;
1830 pmboxq->u.mb.mbxOwner = OWN_HOST;
1831
1832 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq,
1833 LPFC_MBOX_TMO);
1834
1835 if ((mbxstatus != MBX_SUCCESS) || (pmboxq->u.mb.mbxStatus))
1836 rc = -ENODEV;
1837 else {
1838 spin_lock_irq(&phba->hbalock);
1839 phba->link_flag |= LS_LOOPBACK_MODE;
1840 spin_unlock_irq(&phba->hbalock);
1841 /* wait for the link attention interrupt */
1842 msleep(100);
1843
1844 i = 0;
1845 while (phba->link_state != LPFC_HBA_READY) {
1846 if (i++ > timeout) {
1847 rc = -ETIMEDOUT;
1848 break;
1849 }
1850
1851 msleep(10);
1852 }
1853 }
1854
1855 } else
1856 rc = -ENODEV;
1857
1858 loopback_mode_exit:
1859 lpfc_bsg_diag_mode_exit(phba);
1860
1861 /*
1862 * Let SLI layer release mboxq if mbox command completed after timeout.
1863 */
1864 if (pmboxq && mbxstatus != MBX_TIMEOUT)
1865 mempool_free(pmboxq, phba->mbox_mem_pool);
1866
1867 job_error:
1868 /* make error code available to userspace */
1869 job->reply->result = rc;
1870 /* complete the job back to userspace if no error */
1871 if (rc == 0)
1872 job->job_done(job);
1873 return rc;
1874 }
1875
1876 /**
1877 * lpfc_sli4_bsg_set_link_diag_state - set sli4 link diag state
1878 * @phba: Pointer to HBA context object.
1879 * @diag: Flag for set link to diag or nomral operation state.
1880 *
1881 * This function is responsible for issuing a sli4 mailbox command for setting
1882 * link to either diag state or normal operation state.
1883 */
1884 static int
1885 lpfc_sli4_bsg_set_link_diag_state(struct lpfc_hba *phba, uint32_t diag)
1886 {
1887 LPFC_MBOXQ_t *pmboxq;
1888 struct lpfc_mbx_set_link_diag_state *link_diag_state;
1889 uint32_t req_len, alloc_len;
1890 int mbxstatus = MBX_SUCCESS, rc;
1891
1892 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1893 if (!pmboxq)
1894 return -ENOMEM;
1895
1896 req_len = (sizeof(struct lpfc_mbx_set_link_diag_state) -
1897 sizeof(struct lpfc_sli4_cfg_mhdr));
1898 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
1899 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE,
1900 req_len, LPFC_SLI4_MBX_EMBED);
1901 if (alloc_len != req_len) {
1902 rc = -ENOMEM;
1903 goto link_diag_state_set_out;
1904 }
1905 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
1906 "3128 Set link to diagnostic state:x%x (x%x/x%x)\n",
1907 diag, phba->sli4_hba.lnk_info.lnk_tp,
1908 phba->sli4_hba.lnk_info.lnk_no);
1909
1910 link_diag_state = &pmboxq->u.mqe.un.link_diag_state;
1911 bf_set(lpfc_mbx_set_diag_state_diag_bit_valid, &link_diag_state->u.req,
1912 LPFC_DIAG_STATE_DIAG_BIT_VALID_CHANGE);
1913 bf_set(lpfc_mbx_set_diag_state_link_num, &link_diag_state->u.req,
1914 phba->sli4_hba.lnk_info.lnk_no);
1915 bf_set(lpfc_mbx_set_diag_state_link_type, &link_diag_state->u.req,
1916 phba->sli4_hba.lnk_info.lnk_tp);
1917 if (diag)
1918 bf_set(lpfc_mbx_set_diag_state_diag,
1919 &link_diag_state->u.req, 1);
1920 else
1921 bf_set(lpfc_mbx_set_diag_state_diag,
1922 &link_diag_state->u.req, 0);
1923
1924 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
1925
1926 if ((mbxstatus == MBX_SUCCESS) && (pmboxq->u.mb.mbxStatus == 0))
1927 rc = 0;
1928 else
1929 rc = -ENODEV;
1930
1931 link_diag_state_set_out:
1932 if (pmboxq && (mbxstatus != MBX_TIMEOUT))
1933 mempool_free(pmboxq, phba->mbox_mem_pool);
1934
1935 return rc;
1936 }
1937
1938 /**
1939 * lpfc_sli4_bsg_set_internal_loopback - set sli4 internal loopback diagnostic
1940 * @phba: Pointer to HBA context object.
1941 *
1942 * This function is responsible for issuing a sli4 mailbox command for setting
1943 * up internal loopback diagnostic.
1944 */
1945 static int
1946 lpfc_sli4_bsg_set_internal_loopback(struct lpfc_hba *phba)
1947 {
1948 LPFC_MBOXQ_t *pmboxq;
1949 uint32_t req_len, alloc_len;
1950 struct lpfc_mbx_set_link_diag_loopback *link_diag_loopback;
1951 int mbxstatus = MBX_SUCCESS, rc = 0;
1952
1953 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
1954 if (!pmboxq)
1955 return -ENOMEM;
1956 req_len = (sizeof(struct lpfc_mbx_set_link_diag_loopback) -
1957 sizeof(struct lpfc_sli4_cfg_mhdr));
1958 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
1959 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_LOOPBACK,
1960 req_len, LPFC_SLI4_MBX_EMBED);
1961 if (alloc_len != req_len) {
1962 mempool_free(pmboxq, phba->mbox_mem_pool);
1963 return -ENOMEM;
1964 }
1965 link_diag_loopback = &pmboxq->u.mqe.un.link_diag_loopback;
1966 bf_set(lpfc_mbx_set_diag_state_link_num,
1967 &link_diag_loopback->u.req, phba->sli4_hba.lnk_info.lnk_no);
1968 bf_set(lpfc_mbx_set_diag_state_link_type,
1969 &link_diag_loopback->u.req, phba->sli4_hba.lnk_info.lnk_tp);
1970 bf_set(lpfc_mbx_set_diag_lpbk_type, &link_diag_loopback->u.req,
1971 LPFC_DIAG_LOOPBACK_TYPE_INTERNAL);
1972
1973 mbxstatus = lpfc_sli_issue_mbox_wait(phba, pmboxq, LPFC_MBOX_TMO);
1974 if ((mbxstatus != MBX_SUCCESS) || (pmboxq->u.mb.mbxStatus)) {
1975 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
1976 "3127 Failed setup loopback mode mailbox "
1977 "command, rc:x%x, status:x%x\n", mbxstatus,
1978 pmboxq->u.mb.mbxStatus);
1979 rc = -ENODEV;
1980 }
1981 if (pmboxq && (mbxstatus != MBX_TIMEOUT))
1982 mempool_free(pmboxq, phba->mbox_mem_pool);
1983 return rc;
1984 }
1985
1986 /**
1987 * lpfc_sli4_diag_fcport_reg_setup - setup port registrations for diagnostic
1988 * @phba: Pointer to HBA context object.
1989 *
1990 * This function set up SLI4 FC port registrations for diagnostic run, which
1991 * includes all the rpis, vfi, and also vpi.
1992 */
1993 static int
1994 lpfc_sli4_diag_fcport_reg_setup(struct lpfc_hba *phba)
1995 {
1996 int rc;
1997
1998 if (phba->pport->fc_flag & FC_VFI_REGISTERED) {
1999 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2000 "3136 Port still had vfi registered: "
2001 "mydid:x%x, fcfi:%d, vfi:%d, vpi:%d\n",
2002 phba->pport->fc_myDID, phba->fcf.fcfi,
2003 phba->sli4_hba.vfi_ids[phba->pport->vfi],
2004 phba->vpi_ids[phba->pport->vpi]);
2005 return -EINVAL;
2006 }
2007 rc = lpfc_issue_reg_vfi(phba->pport);
2008 return rc;
2009 }
2010
2011 /**
2012 * lpfc_sli4_bsg_diag_loopback_mode - process an sli4 bsg vendor command
2013 * @phba: Pointer to HBA context object.
2014 * @job: LPFC_BSG_VENDOR_DIAG_MODE
2015 *
2016 * This function is responsible for placing an sli4 port into diagnostic
2017 * loopback mode in order to perform a diagnostic loopback test.
2018 */
2019 static int
2020 lpfc_sli4_bsg_diag_loopback_mode(struct lpfc_hba *phba, struct fc_bsg_job *job)
2021 {
2022 struct diag_mode_set *loopback_mode;
2023 uint32_t link_flags, timeout;
2024 int i, rc = 0;
2025
2026 /* no data to return just the return code */
2027 job->reply->reply_payload_rcv_len = 0;
2028
2029 if (job->request_len < sizeof(struct fc_bsg_request) +
2030 sizeof(struct diag_mode_set)) {
2031 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2032 "3011 Received DIAG MODE request size:%d "
2033 "below the minimum size:%d\n",
2034 job->request_len,
2035 (int)(sizeof(struct fc_bsg_request) +
2036 sizeof(struct diag_mode_set)));
2037 rc = -EINVAL;
2038 goto job_error;
2039 }
2040
2041 rc = lpfc_bsg_diag_mode_enter(phba);
2042 if (rc)
2043 goto job_error;
2044
2045 /* indicate we are in loobpack diagnostic mode */
2046 spin_lock_irq(&phba->hbalock);
2047 phba->link_flag |= LS_LOOPBACK_MODE;
2048 spin_unlock_irq(&phba->hbalock);
2049
2050 /* reset port to start frome scratch */
2051 rc = lpfc_selective_reset(phba);
2052 if (rc)
2053 goto job_error;
2054
2055 /* bring the link to diagnostic mode */
2056 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2057 "3129 Bring link to diagnostic state.\n");
2058 loopback_mode = (struct diag_mode_set *)
2059 job->request->rqst_data.h_vendor.vendor_cmd;
2060 link_flags = loopback_mode->type;
2061 timeout = loopback_mode->timeout * 100;
2062
2063 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 1);
2064 if (rc) {
2065 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2066 "3130 Failed to bring link to diagnostic "
2067 "state, rc:x%x\n", rc);
2068 goto loopback_mode_exit;
2069 }
2070
2071 /* wait for link down before proceeding */
2072 i = 0;
2073 while (phba->link_state != LPFC_LINK_DOWN) {
2074 if (i++ > timeout) {
2075 rc = -ETIMEDOUT;
2076 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2077 "3131 Timeout waiting for link to "
2078 "diagnostic mode, timeout:%d ms\n",
2079 timeout * 10);
2080 goto loopback_mode_exit;
2081 }
2082 msleep(10);
2083 }
2084
2085 /* set up loopback mode */
2086 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2087 "3132 Set up loopback mode:x%x\n", link_flags);
2088
2089 if (link_flags == INTERNAL_LOOP_BACK)
2090 rc = lpfc_sli4_bsg_set_internal_loopback(phba);
2091 else if (link_flags == EXTERNAL_LOOP_BACK)
2092 rc = lpfc_hba_init_link_fc_topology(phba,
2093 FLAGS_TOPOLOGY_MODE_PT_PT,
2094 MBX_NOWAIT);
2095 else {
2096 rc = -EINVAL;
2097 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
2098 "3141 Loopback mode:x%x not supported\n",
2099 link_flags);
2100 goto loopback_mode_exit;
2101 }
2102
2103 if (!rc) {
2104 /* wait for the link attention interrupt */
2105 msleep(100);
2106 i = 0;
2107 while (phba->link_state < LPFC_LINK_UP) {
2108 if (i++ > timeout) {
2109 rc = -ETIMEDOUT;
2110 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2111 "3137 Timeout waiting for link up "
2112 "in loopback mode, timeout:%d ms\n",
2113 timeout * 10);
2114 break;
2115 }
2116 msleep(10);
2117 }
2118 }
2119
2120 /* port resource registration setup for loopback diagnostic */
2121 if (!rc) {
2122 /* set up a none zero myDID for loopback test */
2123 phba->pport->fc_myDID = 1;
2124 rc = lpfc_sli4_diag_fcport_reg_setup(phba);
2125 } else
2126 goto loopback_mode_exit;
2127
2128 if (!rc) {
2129 /* wait for the port ready */
2130 msleep(100);
2131 i = 0;
2132 while (phba->link_state != LPFC_HBA_READY) {
2133 if (i++ > timeout) {
2134 rc = -ETIMEDOUT;
2135 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2136 "3133 Timeout waiting for port "
2137 "loopback mode ready, timeout:%d ms\n",
2138 timeout * 10);
2139 break;
2140 }
2141 msleep(10);
2142 }
2143 }
2144
2145 loopback_mode_exit:
2146 /* clear loopback diagnostic mode */
2147 if (rc) {
2148 spin_lock_irq(&phba->hbalock);
2149 phba->link_flag &= ~LS_LOOPBACK_MODE;
2150 spin_unlock_irq(&phba->hbalock);
2151 }
2152 lpfc_bsg_diag_mode_exit(phba);
2153
2154 job_error:
2155 /* make error code available to userspace */
2156 job->reply->result = rc;
2157 /* complete the job back to userspace if no error */
2158 if (rc == 0)
2159 job->job_done(job);
2160 return rc;
2161 }
2162
2163 /**
2164 * lpfc_bsg_diag_loopback_mode - bsg vendor command for diag loopback mode
2165 * @job: LPFC_BSG_VENDOR_DIAG_MODE
2166 *
2167 * This function is responsible for responding to check and dispatch bsg diag
2168 * command from the user to proper driver action routines.
2169 */
2170 static int
2171 lpfc_bsg_diag_loopback_mode(struct fc_bsg_job *job)
2172 {
2173 struct Scsi_Host *shost;
2174 struct lpfc_vport *vport;
2175 struct lpfc_hba *phba;
2176 int rc;
2177
2178 shost = job->shost;
2179 if (!shost)
2180 return -ENODEV;
2181 vport = (struct lpfc_vport *)job->shost->hostdata;
2182 if (!vport)
2183 return -ENODEV;
2184 phba = vport->phba;
2185 if (!phba)
2186 return -ENODEV;
2187
2188 if (phba->sli_rev < LPFC_SLI_REV4)
2189 rc = lpfc_sli3_bsg_diag_loopback_mode(phba, job);
2190 else if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) ==
2191 LPFC_SLI_INTF_IF_TYPE_2)
2192 rc = lpfc_sli4_bsg_diag_loopback_mode(phba, job);
2193 else
2194 rc = -ENODEV;
2195
2196 return rc;
2197 }
2198
2199 /**
2200 * lpfc_sli4_bsg_diag_mode_end - sli4 bsg vendor command for ending diag mode
2201 * @job: LPFC_BSG_VENDOR_DIAG_MODE_END
2202 *
2203 * This function is responsible for responding to check and dispatch bsg diag
2204 * command from the user to proper driver action routines.
2205 */
2206 static int
2207 lpfc_sli4_bsg_diag_mode_end(struct fc_bsg_job *job)
2208 {
2209 struct Scsi_Host *shost;
2210 struct lpfc_vport *vport;
2211 struct lpfc_hba *phba;
2212 struct diag_mode_set *loopback_mode_end_cmd;
2213 uint32_t timeout;
2214 int rc, i;
2215
2216 shost = job->shost;
2217 if (!shost)
2218 return -ENODEV;
2219 vport = (struct lpfc_vport *)job->shost->hostdata;
2220 if (!vport)
2221 return -ENODEV;
2222 phba = vport->phba;
2223 if (!phba)
2224 return -ENODEV;
2225
2226 if (phba->sli_rev < LPFC_SLI_REV4)
2227 return -ENODEV;
2228 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
2229 LPFC_SLI_INTF_IF_TYPE_2)
2230 return -ENODEV;
2231
2232 /* clear loopback diagnostic mode */
2233 spin_lock_irq(&phba->hbalock);
2234 phba->link_flag &= ~LS_LOOPBACK_MODE;
2235 spin_unlock_irq(&phba->hbalock);
2236 loopback_mode_end_cmd = (struct diag_mode_set *)
2237 job->request->rqst_data.h_vendor.vendor_cmd;
2238 timeout = loopback_mode_end_cmd->timeout * 100;
2239
2240 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 0);
2241 if (rc) {
2242 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2243 "3139 Failed to bring link to diagnostic "
2244 "state, rc:x%x\n", rc);
2245 goto loopback_mode_end_exit;
2246 }
2247
2248 /* wait for link down before proceeding */
2249 i = 0;
2250 while (phba->link_state != LPFC_LINK_DOWN) {
2251 if (i++ > timeout) {
2252 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
2253 "3140 Timeout waiting for link to "
2254 "diagnostic mode_end, timeout:%d ms\n",
2255 timeout * 10);
2256 /* there is nothing much we can do here */
2257 break;
2258 }
2259 msleep(10);
2260 }
2261
2262 /* reset port resource registrations */
2263 rc = lpfc_selective_reset(phba);
2264 phba->pport->fc_myDID = 0;
2265
2266 loopback_mode_end_exit:
2267 /* make return code available to userspace */
2268 job->reply->result = rc;
2269 /* complete the job back to userspace if no error */
2270 if (rc == 0)
2271 job->job_done(job);
2272 return rc;
2273 }
2274
2275 /**
2276 * lpfc_sli4_bsg_link_diag_test - sli4 bsg vendor command for diag link test
2277 * @job: LPFC_BSG_VENDOR_DIAG_LINK_TEST
2278 *
2279 * This function is to perform SLI4 diag link test request from the user
2280 * applicaiton.
2281 */
2282 static int
2283 lpfc_sli4_bsg_link_diag_test(struct fc_bsg_job *job)
2284 {
2285 struct Scsi_Host *shost;
2286 struct lpfc_vport *vport;
2287 struct lpfc_hba *phba;
2288 LPFC_MBOXQ_t *pmboxq;
2289 struct sli4_link_diag *link_diag_test_cmd;
2290 uint32_t req_len, alloc_len;
2291 struct lpfc_mbx_run_link_diag_test *run_link_diag_test;
2292 union lpfc_sli4_cfg_shdr *shdr;
2293 uint32_t shdr_status, shdr_add_status;
2294 struct diag_status *diag_status_reply;
2295 int mbxstatus, rc = 0;
2296
2297 shost = job->shost;
2298 if (!shost) {
2299 rc = -ENODEV;
2300 goto job_error;
2301 }
2302 vport = (struct lpfc_vport *)job->shost->hostdata;
2303 if (!vport) {
2304 rc = -ENODEV;
2305 goto job_error;
2306 }
2307 phba = vport->phba;
2308 if (!phba) {
2309 rc = -ENODEV;
2310 goto job_error;
2311 }
2312
2313 if (phba->sli_rev < LPFC_SLI_REV4) {
2314 rc = -ENODEV;
2315 goto job_error;
2316 }
2317 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
2318 LPFC_SLI_INTF_IF_TYPE_2) {
2319 rc = -ENODEV;
2320 goto job_error;
2321 }
2322
2323 if (job->request_len < sizeof(struct fc_bsg_request) +
2324 sizeof(struct sli4_link_diag)) {
2325 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2326 "3013 Received LINK DIAG TEST request "
2327 " size:%d below the minimum size:%d\n",
2328 job->request_len,
2329 (int)(sizeof(struct fc_bsg_request) +
2330 sizeof(struct sli4_link_diag)));
2331 rc = -EINVAL;
2332 goto job_error;
2333 }
2334
2335 rc = lpfc_bsg_diag_mode_enter(phba);
2336 if (rc)
2337 goto job_error;
2338
2339 link_diag_test_cmd = (struct sli4_link_diag *)
2340 job->request->rqst_data.h_vendor.vendor_cmd;
2341
2342 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 1);
2343
2344 if (rc)
2345 goto job_error;
2346
2347 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2348 if (!pmboxq) {
2349 rc = -ENOMEM;
2350 goto link_diag_test_exit;
2351 }
2352
2353 req_len = (sizeof(struct lpfc_mbx_set_link_diag_state) -
2354 sizeof(struct lpfc_sli4_cfg_mhdr));
2355 alloc_len = lpfc_sli4_config(phba, pmboxq, LPFC_MBOX_SUBSYSTEM_FCOE,
2356 LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE,
2357 req_len, LPFC_SLI4_MBX_EMBED);
2358 if (alloc_len != req_len) {
2359 rc = -ENOMEM;
2360 goto link_diag_test_exit;
2361 }
2362 run_link_diag_test = &pmboxq->u.mqe.un.link_diag_test;
2363 bf_set(lpfc_mbx_run_diag_test_link_num, &run_link_diag_test->u.req,
2364 phba->sli4_hba.lnk_info.lnk_no);
2365 bf_set(lpfc_mbx_run_diag_test_link_type, &run_link_diag_test->u.req,
2366 phba->sli4_hba.lnk_info.lnk_tp);
2367 bf_set(lpfc_mbx_run_diag_test_test_id, &run_link_diag_test->u.req,
2368 link_diag_test_cmd->test_id);
2369 bf_set(lpfc_mbx_run_diag_test_loops, &run_link_diag_test->u.req,
2370 link_diag_test_cmd->loops);
2371 bf_set(lpfc_mbx_run_diag_test_test_ver, &run_link_diag_test->u.req,
2372 link_diag_test_cmd->test_version);
2373 bf_set(lpfc_mbx_run_diag_test_err_act, &run_link_diag_test->u.req,
2374 link_diag_test_cmd->error_action);
2375
2376 mbxstatus = lpfc_sli_issue_mbox(phba, pmboxq, MBX_POLL);
2377
2378 shdr = (union lpfc_sli4_cfg_shdr *)
2379 &pmboxq->u.mqe.un.sli4_config.header.cfg_shdr;
2380 shdr_status = bf_get(lpfc_mbox_hdr_status, &shdr->response);
2381 shdr_add_status = bf_get(lpfc_mbox_hdr_add_status, &shdr->response);
2382 if (shdr_status || shdr_add_status || mbxstatus) {
2383 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
2384 "3010 Run link diag test mailbox failed with "
2385 "mbx_status x%x status x%x, add_status x%x\n",
2386 mbxstatus, shdr_status, shdr_add_status);
2387 }
2388
2389 diag_status_reply = (struct diag_status *)
2390 job->reply->reply_data.vendor_reply.vendor_rsp;
2391
2392 if (job->reply_len <
2393 sizeof(struct fc_bsg_request) + sizeof(struct diag_status)) {
2394 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
2395 "3012 Received Run link diag test reply "
2396 "below minimum size (%d): reply_len:%d\n",
2397 (int)(sizeof(struct fc_bsg_request) +
2398 sizeof(struct diag_status)),
2399 job->reply_len);
2400 rc = -EINVAL;
2401 goto job_error;
2402 }
2403
2404 diag_status_reply->mbox_status = mbxstatus;
2405 diag_status_reply->shdr_status = shdr_status;
2406 diag_status_reply->shdr_add_status = shdr_add_status;
2407
2408 link_diag_test_exit:
2409 rc = lpfc_sli4_bsg_set_link_diag_state(phba, 0);
2410
2411 if (pmboxq)
2412 mempool_free(pmboxq, phba->mbox_mem_pool);
2413
2414 lpfc_bsg_diag_mode_exit(phba);
2415
2416 job_error:
2417 /* make error code available to userspace */
2418 job->reply->result = rc;
2419 /* complete the job back to userspace if no error */
2420 if (rc == 0)
2421 job->job_done(job);
2422 return rc;
2423 }
2424
2425 /**
2426 * lpfcdiag_loop_self_reg - obtains a remote port login id
2427 * @phba: Pointer to HBA context object
2428 * @rpi: Pointer to a remote port login id
2429 *
2430 * This function obtains a remote port login id so the diag loopback test
2431 * can send and receive its own unsolicited CT command.
2432 **/
2433 static int lpfcdiag_loop_self_reg(struct lpfc_hba *phba, uint16_t *rpi)
2434 {
2435 LPFC_MBOXQ_t *mbox;
2436 struct lpfc_dmabuf *dmabuff;
2437 int status;
2438
2439 mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2440 if (!mbox)
2441 return -ENOMEM;
2442
2443 if (phba->sli_rev < LPFC_SLI_REV4)
2444 status = lpfc_reg_rpi(phba, 0, phba->pport->fc_myDID,
2445 (uint8_t *)&phba->pport->fc_sparam,
2446 mbox, *rpi);
2447 else {
2448 *rpi = lpfc_sli4_alloc_rpi(phba);
2449 status = lpfc_reg_rpi(phba, phba->pport->vpi,
2450 phba->pport->fc_myDID,
2451 (uint8_t *)&phba->pport->fc_sparam,
2452 mbox, *rpi);
2453 }
2454
2455 if (status) {
2456 mempool_free(mbox, phba->mbox_mem_pool);
2457 if (phba->sli_rev == LPFC_SLI_REV4)
2458 lpfc_sli4_free_rpi(phba, *rpi);
2459 return -ENOMEM;
2460 }
2461
2462 dmabuff = (struct lpfc_dmabuf *) mbox->context1;
2463 mbox->context1 = NULL;
2464 mbox->context2 = NULL;
2465 status = lpfc_sli_issue_mbox_wait(phba, mbox, LPFC_MBOX_TMO);
2466
2467 if ((status != MBX_SUCCESS) || (mbox->u.mb.mbxStatus)) {
2468 lpfc_mbuf_free(phba, dmabuff->virt, dmabuff->phys);
2469 kfree(dmabuff);
2470 if (status != MBX_TIMEOUT)
2471 mempool_free(mbox, phba->mbox_mem_pool);
2472 if (phba->sli_rev == LPFC_SLI_REV4)
2473 lpfc_sli4_free_rpi(phba, *rpi);
2474 return -ENODEV;
2475 }
2476
2477 if (phba->sli_rev < LPFC_SLI_REV4)
2478 *rpi = mbox->u.mb.un.varWords[0];
2479
2480 lpfc_mbuf_free(phba, dmabuff->virt, dmabuff->phys);
2481 kfree(dmabuff);
2482 mempool_free(mbox, phba->mbox_mem_pool);
2483 return 0;
2484 }
2485
2486 /**
2487 * lpfcdiag_loop_self_unreg - unregs from the rpi
2488 * @phba: Pointer to HBA context object
2489 * @rpi: Remote port login id
2490 *
2491 * This function unregisters the rpi obtained in lpfcdiag_loop_self_reg
2492 **/
2493 static int lpfcdiag_loop_self_unreg(struct lpfc_hba *phba, uint16_t rpi)
2494 {
2495 LPFC_MBOXQ_t *mbox;
2496 int status;
2497
2498 /* Allocate mboxq structure */
2499 mbox = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
2500 if (mbox == NULL)
2501 return -ENOMEM;
2502
2503 if (phba->sli_rev < LPFC_SLI_REV4)
2504 lpfc_unreg_login(phba, 0, rpi, mbox);
2505 else
2506 lpfc_unreg_login(phba, phba->pport->vpi,
2507 phba->sli4_hba.rpi_ids[rpi], mbox);
2508
2509 status = lpfc_sli_issue_mbox_wait(phba, mbox, LPFC_MBOX_TMO);
2510
2511 if ((status != MBX_SUCCESS) || (mbox->u.mb.mbxStatus)) {
2512 if (status != MBX_TIMEOUT)
2513 mempool_free(mbox, phba->mbox_mem_pool);
2514 return -EIO;
2515 }
2516 mempool_free(mbox, phba->mbox_mem_pool);
2517 if (phba->sli_rev == LPFC_SLI_REV4)
2518 lpfc_sli4_free_rpi(phba, rpi);
2519 return 0;
2520 }
2521
2522 /**
2523 * lpfcdiag_loop_get_xri - obtains the transmit and receive ids
2524 * @phba: Pointer to HBA context object
2525 * @rpi: Remote port login id
2526 * @txxri: Pointer to transmit exchange id
2527 * @rxxri: Pointer to response exchabge id
2528 *
2529 * This function obtains the transmit and receive ids required to send
2530 * an unsolicited ct command with a payload. A special lpfc FsType and CmdRsp
2531 * flags are used to the unsolicted response handler is able to process
2532 * the ct command sent on the same port.
2533 **/
2534 static int lpfcdiag_loop_get_xri(struct lpfc_hba *phba, uint16_t rpi,
2535 uint16_t *txxri, uint16_t * rxxri)
2536 {
2537 struct lpfc_bsg_event *evt;
2538 struct lpfc_iocbq *cmdiocbq, *rspiocbq;
2539 IOCB_t *cmd, *rsp;
2540 struct lpfc_dmabuf *dmabuf;
2541 struct ulp_bde64 *bpl = NULL;
2542 struct lpfc_sli_ct_request *ctreq = NULL;
2543 int ret_val = 0;
2544 int time_left;
2545 int iocb_stat = IOCB_SUCCESS;
2546 unsigned long flags;
2547
2548 *txxri = 0;
2549 *rxxri = 0;
2550 evt = lpfc_bsg_event_new(FC_REG_CT_EVENT, current->pid,
2551 SLI_CT_ELX_LOOPBACK);
2552 if (!evt)
2553 return -ENOMEM;
2554
2555 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2556 list_add(&evt->node, &phba->ct_ev_waiters);
2557 lpfc_bsg_event_ref(evt);
2558 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2559
2560 cmdiocbq = lpfc_sli_get_iocbq(phba);
2561 rspiocbq = lpfc_sli_get_iocbq(phba);
2562
2563 dmabuf = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2564 if (dmabuf) {
2565 dmabuf->virt = lpfc_mbuf_alloc(phba, 0, &dmabuf->phys);
2566 if (dmabuf->virt) {
2567 INIT_LIST_HEAD(&dmabuf->list);
2568 bpl = (struct ulp_bde64 *) dmabuf->virt;
2569 memset(bpl, 0, sizeof(*bpl));
2570 ctreq = (struct lpfc_sli_ct_request *)(bpl + 1);
2571 bpl->addrHigh =
2572 le32_to_cpu(putPaddrHigh(dmabuf->phys +
2573 sizeof(*bpl)));
2574 bpl->addrLow =
2575 le32_to_cpu(putPaddrLow(dmabuf->phys +
2576 sizeof(*bpl)));
2577 bpl->tus.f.bdeFlags = 0;
2578 bpl->tus.f.bdeSize = ELX_LOOPBACK_HEADER_SZ;
2579 bpl->tus.w = le32_to_cpu(bpl->tus.w);
2580 }
2581 }
2582
2583 if (cmdiocbq == NULL || rspiocbq == NULL ||
2584 dmabuf == NULL || bpl == NULL || ctreq == NULL ||
2585 dmabuf->virt == NULL) {
2586 ret_val = -ENOMEM;
2587 goto err_get_xri_exit;
2588 }
2589
2590 cmd = &cmdiocbq->iocb;
2591 rsp = &rspiocbq->iocb;
2592
2593 memset(ctreq, 0, ELX_LOOPBACK_HEADER_SZ);
2594
2595 ctreq->RevisionId.bits.Revision = SLI_CT_REVISION;
2596 ctreq->RevisionId.bits.InId = 0;
2597 ctreq->FsType = SLI_CT_ELX_LOOPBACK;
2598 ctreq->FsSubType = 0;
2599 ctreq->CommandResponse.bits.CmdRsp = ELX_LOOPBACK_XRI_SETUP;
2600 ctreq->CommandResponse.bits.Size = 0;
2601
2602
2603 cmd->un.xseq64.bdl.addrHigh = putPaddrHigh(dmabuf->phys);
2604 cmd->un.xseq64.bdl.addrLow = putPaddrLow(dmabuf->phys);
2605 cmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
2606 cmd->un.xseq64.bdl.bdeSize = sizeof(*bpl);
2607
2608 cmd->un.xseq64.w5.hcsw.Fctl = LA;
2609 cmd->un.xseq64.w5.hcsw.Dfctl = 0;
2610 cmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
2611 cmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
2612
2613 cmd->ulpCommand = CMD_XMIT_SEQUENCE64_CR;
2614 cmd->ulpBdeCount = 1;
2615 cmd->ulpLe = 1;
2616 cmd->ulpClass = CLASS3;
2617 cmd->ulpContext = rpi;
2618
2619 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
2620 cmdiocbq->vport = phba->pport;
2621 cmdiocbq->iocb_cmpl = NULL;
2622
2623 iocb_stat = lpfc_sli_issue_iocb_wait(phba, LPFC_ELS_RING, cmdiocbq,
2624 rspiocbq,
2625 (phba->fc_ratov * 2)
2626 + LPFC_DRVR_TIMEOUT);
2627 if ((iocb_stat != IOCB_SUCCESS) || (rsp->ulpStatus != IOSTAT_SUCCESS)) {
2628 ret_val = -EIO;
2629 goto err_get_xri_exit;
2630 }
2631 *txxri = rsp->ulpContext;
2632
2633 evt->waiting = 1;
2634 evt->wait_time_stamp = jiffies;
2635 time_left = wait_event_interruptible_timeout(
2636 evt->wq, !list_empty(&evt->events_to_see),
2637 msecs_to_jiffies(1000 *
2638 ((phba->fc_ratov * 2) + LPFC_DRVR_TIMEOUT)));
2639 if (list_empty(&evt->events_to_see))
2640 ret_val = (time_left) ? -EINTR : -ETIMEDOUT;
2641 else {
2642 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2643 list_move(evt->events_to_see.prev, &evt->events_to_get);
2644 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2645 *rxxri = (list_entry(evt->events_to_get.prev,
2646 typeof(struct event_data),
2647 node))->immed_dat;
2648 }
2649 evt->waiting = 0;
2650
2651 err_get_xri_exit:
2652 spin_lock_irqsave(&phba->ct_ev_lock, flags);
2653 lpfc_bsg_event_unref(evt); /* release ref */
2654 lpfc_bsg_event_unref(evt); /* delete */
2655 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
2656
2657 if (dmabuf) {
2658 if (dmabuf->virt)
2659 lpfc_mbuf_free(phba, dmabuf->virt, dmabuf->phys);
2660 kfree(dmabuf);
2661 }
2662
2663 if (cmdiocbq && (iocb_stat != IOCB_TIMEDOUT))
2664 lpfc_sli_release_iocbq(phba, cmdiocbq);
2665 if (rspiocbq)
2666 lpfc_sli_release_iocbq(phba, rspiocbq);
2667 return ret_val;
2668 }
2669
2670 /**
2671 * lpfc_bsg_dma_page_alloc - allocate a bsg mbox page sized dma buffers
2672 * @phba: Pointer to HBA context object
2673 *
2674 * This function allocates BSG_MBOX_SIZE (4KB) page size dma buffer and.
2675 * returns the pointer to the buffer.
2676 **/
2677 static struct lpfc_dmabuf *
2678 lpfc_bsg_dma_page_alloc(struct lpfc_hba *phba)
2679 {
2680 struct lpfc_dmabuf *dmabuf;
2681 struct pci_dev *pcidev = phba->pcidev;
2682
2683 /* allocate dma buffer struct */
2684 dmabuf = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2685 if (!dmabuf)
2686 return NULL;
2687
2688 INIT_LIST_HEAD(&dmabuf->list);
2689
2690 /* now, allocate dma buffer */
2691 dmabuf->virt = dma_zalloc_coherent(&pcidev->dev, BSG_MBOX_SIZE,
2692 &(dmabuf->phys), GFP_KERNEL);
2693
2694 if (!dmabuf->virt) {
2695 kfree(dmabuf);
2696 return NULL;
2697 }
2698
2699 return dmabuf;
2700 }
2701
2702 /**
2703 * lpfc_bsg_dma_page_free - free a bsg mbox page sized dma buffer
2704 * @phba: Pointer to HBA context object.
2705 * @dmabuf: Pointer to the bsg mbox page sized dma buffer descriptor.
2706 *
2707 * This routine just simply frees a dma buffer and its associated buffer
2708 * descriptor referred by @dmabuf.
2709 **/
2710 static void
2711 lpfc_bsg_dma_page_free(struct lpfc_hba *phba, struct lpfc_dmabuf *dmabuf)
2712 {
2713 struct pci_dev *pcidev = phba->pcidev;
2714
2715 if (!dmabuf)
2716 return;
2717
2718 if (dmabuf->virt)
2719 dma_free_coherent(&pcidev->dev, BSG_MBOX_SIZE,
2720 dmabuf->virt, dmabuf->phys);
2721 kfree(dmabuf);
2722 return;
2723 }
2724
2725 /**
2726 * lpfc_bsg_dma_page_list_free - free a list of bsg mbox page sized dma buffers
2727 * @phba: Pointer to HBA context object.
2728 * @dmabuf_list: Pointer to a list of bsg mbox page sized dma buffer descs.
2729 *
2730 * This routine just simply frees all dma buffers and their associated buffer
2731 * descriptors referred by @dmabuf_list.
2732 **/
2733 static void
2734 lpfc_bsg_dma_page_list_free(struct lpfc_hba *phba,
2735 struct list_head *dmabuf_list)
2736 {
2737 struct lpfc_dmabuf *dmabuf, *next_dmabuf;
2738
2739 if (list_empty(dmabuf_list))
2740 return;
2741
2742 list_for_each_entry_safe(dmabuf, next_dmabuf, dmabuf_list, list) {
2743 list_del_init(&dmabuf->list);
2744 lpfc_bsg_dma_page_free(phba, dmabuf);
2745 }
2746 return;
2747 }
2748
2749 /**
2750 * diag_cmd_data_alloc - fills in a bde struct with dma buffers
2751 * @phba: Pointer to HBA context object
2752 * @bpl: Pointer to 64 bit bde structure
2753 * @size: Number of bytes to process
2754 * @nocopydata: Flag to copy user data into the allocated buffer
2755 *
2756 * This function allocates page size buffers and populates an lpfc_dmabufext.
2757 * If allowed the user data pointed to with indataptr is copied into the kernel
2758 * memory. The chained list of page size buffers is returned.
2759 **/
2760 static struct lpfc_dmabufext *
2761 diag_cmd_data_alloc(struct lpfc_hba *phba,
2762 struct ulp_bde64 *bpl, uint32_t size,
2763 int nocopydata)
2764 {
2765 struct lpfc_dmabufext *mlist = NULL;
2766 struct lpfc_dmabufext *dmp;
2767 int cnt, offset = 0, i = 0;
2768 struct pci_dev *pcidev;
2769
2770 pcidev = phba->pcidev;
2771
2772 while (size) {
2773 /* We get chunks of 4K */
2774 if (size > BUF_SZ_4K)
2775 cnt = BUF_SZ_4K;
2776 else
2777 cnt = size;
2778
2779 /* allocate struct lpfc_dmabufext buffer header */
2780 dmp = kmalloc(sizeof(struct lpfc_dmabufext), GFP_KERNEL);
2781 if (!dmp)
2782 goto out;
2783
2784 INIT_LIST_HEAD(&dmp->dma.list);
2785
2786 /* Queue it to a linked list */
2787 if (mlist)
2788 list_add_tail(&dmp->dma.list, &mlist->dma.list);
2789 else
2790 mlist = dmp;
2791
2792 /* allocate buffer */
2793 dmp->dma.virt = dma_alloc_coherent(&pcidev->dev,
2794 cnt,
2795 &(dmp->dma.phys),
2796 GFP_KERNEL);
2797
2798 if (!dmp->dma.virt)
2799 goto out;
2800
2801 dmp->size = cnt;
2802
2803 if (nocopydata) {
2804 bpl->tus.f.bdeFlags = 0;
2805 pci_dma_sync_single_for_device(phba->pcidev,
2806 dmp->dma.phys, LPFC_BPL_SIZE, PCI_DMA_TODEVICE);
2807
2808 } else {
2809 memset((uint8_t *)dmp->dma.virt, 0, cnt);
2810 bpl->tus.f.bdeFlags = BUFF_TYPE_BDE_64I;
2811 }
2812
2813 /* build buffer ptr list for IOCB */
2814 bpl->addrLow = le32_to_cpu(putPaddrLow(dmp->dma.phys));
2815 bpl->addrHigh = le32_to_cpu(putPaddrHigh(dmp->dma.phys));
2816 bpl->tus.f.bdeSize = (ushort) cnt;
2817 bpl->tus.w = le32_to_cpu(bpl->tus.w);
2818 bpl++;
2819
2820 i++;
2821 offset += cnt;
2822 size -= cnt;
2823 }
2824
2825 if (mlist) {
2826 mlist->flag = i;
2827 return mlist;
2828 }
2829 out:
2830 diag_cmd_data_free(phba, mlist);
2831 return NULL;
2832 }
2833
2834 /**
2835 * lpfcdiag_loop_post_rxbufs - post the receive buffers for an unsol CT cmd
2836 * @phba: Pointer to HBA context object
2837 * @rxxri: Receive exchange id
2838 * @len: Number of data bytes
2839 *
2840 * This function allocates and posts a data buffer of sufficient size to receive
2841 * an unsolicted CT command.
2842 **/
2843 static int lpfcdiag_loop_post_rxbufs(struct lpfc_hba *phba, uint16_t rxxri,
2844 size_t len)
2845 {
2846 struct lpfc_sli *psli = &phba->sli;
2847 struct lpfc_sli_ring *pring = &psli->ring[LPFC_ELS_RING];
2848 struct lpfc_iocbq *cmdiocbq;
2849 IOCB_t *cmd = NULL;
2850 struct list_head head, *curr, *next;
2851 struct lpfc_dmabuf *rxbmp;
2852 struct lpfc_dmabuf *dmp;
2853 struct lpfc_dmabuf *mp[2] = {NULL, NULL};
2854 struct ulp_bde64 *rxbpl = NULL;
2855 uint32_t num_bde;
2856 struct lpfc_dmabufext *rxbuffer = NULL;
2857 int ret_val = 0;
2858 int iocb_stat;
2859 int i = 0;
2860
2861 cmdiocbq = lpfc_sli_get_iocbq(phba);
2862 rxbmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
2863 if (rxbmp != NULL) {
2864 rxbmp->virt = lpfc_mbuf_alloc(phba, 0, &rxbmp->phys);
2865 if (rxbmp->virt) {
2866 INIT_LIST_HEAD(&rxbmp->list);
2867 rxbpl = (struct ulp_bde64 *) rxbmp->virt;
2868 rxbuffer = diag_cmd_data_alloc(phba, rxbpl, len, 0);
2869 }
2870 }
2871
2872 if (!cmdiocbq || !rxbmp || !rxbpl || !rxbuffer) {
2873 ret_val = -ENOMEM;
2874 goto err_post_rxbufs_exit;
2875 }
2876
2877 /* Queue buffers for the receive exchange */
2878 num_bde = (uint32_t)rxbuffer->flag;
2879 dmp = &rxbuffer->dma;
2880
2881 cmd = &cmdiocbq->iocb;
2882 i = 0;
2883
2884 INIT_LIST_HEAD(&head);
2885 list_add_tail(&head, &dmp->list);
2886 list_for_each_safe(curr, next, &head) {
2887 mp[i] = list_entry(curr, struct lpfc_dmabuf, list);
2888 list_del(curr);
2889
2890 if (phba->sli3_options & LPFC_SLI3_HBQ_ENABLED) {
2891 mp[i]->buffer_tag = lpfc_sli_get_buffer_tag(phba);
2892 cmd->un.quexri64cx.buff.bde.addrHigh =
2893 putPaddrHigh(mp[i]->phys);
2894 cmd->un.quexri64cx.buff.bde.addrLow =
2895 putPaddrLow(mp[i]->phys);
2896 cmd->un.quexri64cx.buff.bde.tus.f.bdeSize =
2897 ((struct lpfc_dmabufext *)mp[i])->size;
2898 cmd->un.quexri64cx.buff.buffer_tag = mp[i]->buffer_tag;
2899 cmd->ulpCommand = CMD_QUE_XRI64_CX;
2900 cmd->ulpPU = 0;
2901 cmd->ulpLe = 1;
2902 cmd->ulpBdeCount = 1;
2903 cmd->unsli3.que_xri64cx_ext_words.ebde_count = 0;
2904
2905 } else {
2906 cmd->un.cont64[i].addrHigh = putPaddrHigh(mp[i]->phys);
2907 cmd->un.cont64[i].addrLow = putPaddrLow(mp[i]->phys);
2908 cmd->un.cont64[i].tus.f.bdeSize =
2909 ((struct lpfc_dmabufext *)mp[i])->size;
2910 cmd->ulpBdeCount = ++i;
2911
2912 if ((--num_bde > 0) && (i < 2))
2913 continue;
2914
2915 cmd->ulpCommand = CMD_QUE_XRI_BUF64_CX;
2916 cmd->ulpLe = 1;
2917 }
2918
2919 cmd->ulpClass = CLASS3;
2920 cmd->ulpContext = rxxri;
2921
2922 iocb_stat = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq,
2923 0);
2924 if (iocb_stat == IOCB_ERROR) {
2925 diag_cmd_data_free(phba,
2926 (struct lpfc_dmabufext *)mp[0]);
2927 if (mp[1])
2928 diag_cmd_data_free(phba,
2929 (struct lpfc_dmabufext *)mp[1]);
2930 dmp = list_entry(next, struct lpfc_dmabuf, list);
2931 ret_val = -EIO;
2932 goto err_post_rxbufs_exit;
2933 }
2934
2935 lpfc_sli_ringpostbuf_put(phba, pring, mp[0]);
2936 if (mp[1]) {
2937 lpfc_sli_ringpostbuf_put(phba, pring, mp[1]);
2938 mp[1] = NULL;
2939 }
2940
2941 /* The iocb was freed by lpfc_sli_issue_iocb */
2942 cmdiocbq = lpfc_sli_get_iocbq(phba);
2943 if (!cmdiocbq) {
2944 dmp = list_entry(next, struct lpfc_dmabuf, list);
2945 ret_val = -EIO;
2946 goto err_post_rxbufs_exit;
2947 }
2948
2949 cmd = &cmdiocbq->iocb;
2950 i = 0;
2951 }
2952 list_del(&head);
2953
2954 err_post_rxbufs_exit:
2955
2956 if (rxbmp) {
2957 if (rxbmp->virt)
2958 lpfc_mbuf_free(phba, rxbmp->virt, rxbmp->phys);
2959 kfree(rxbmp);
2960 }
2961
2962 if (cmdiocbq)
2963 lpfc_sli_release_iocbq(phba, cmdiocbq);
2964 return ret_val;
2965 }
2966
2967 /**
2968 * lpfc_bsg_diag_loopback_run - run loopback on a port by issue ct cmd to itself
2969 * @job: LPFC_BSG_VENDOR_DIAG_TEST fc_bsg_job
2970 *
2971 * This function receives a user data buffer to be transmitted and received on
2972 * the same port, the link must be up and in loopback mode prior
2973 * to being called.
2974 * 1. A kernel buffer is allocated to copy the user data into.
2975 * 2. The port registers with "itself".
2976 * 3. The transmit and receive exchange ids are obtained.
2977 * 4. The receive exchange id is posted.
2978 * 5. A new els loopback event is created.
2979 * 6. The command and response iocbs are allocated.
2980 * 7. The cmd iocb FsType is set to elx loopback and the CmdRsp to looppback.
2981 *
2982 * This function is meant to be called n times while the port is in loopback
2983 * so it is the apps responsibility to issue a reset to take the port out
2984 * of loopback mode.
2985 **/
2986 static int
2987 lpfc_bsg_diag_loopback_run(struct fc_bsg_job *job)
2988 {
2989 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
2990 struct lpfc_hba *phba = vport->phba;
2991 struct diag_mode_test *diag_mode;
2992 struct lpfc_bsg_event *evt;
2993 struct event_data *evdat;
2994 struct lpfc_sli *psli = &phba->sli;
2995 uint32_t size;
2996 uint32_t full_size;
2997 size_t segment_len = 0, segment_offset = 0, current_offset = 0;
2998 uint16_t rpi = 0;
2999 struct lpfc_iocbq *cmdiocbq, *rspiocbq = NULL;
3000 IOCB_t *cmd, *rsp = NULL;
3001 struct lpfc_sli_ct_request *ctreq;
3002 struct lpfc_dmabuf *txbmp;
3003 struct ulp_bde64 *txbpl = NULL;
3004 struct lpfc_dmabufext *txbuffer = NULL;
3005 struct list_head head;
3006 struct lpfc_dmabuf *curr;
3007 uint16_t txxri = 0, rxxri;
3008 uint32_t num_bde;
3009 uint8_t *ptr = NULL, *rx_databuf = NULL;
3010 int rc = 0;
3011 int time_left;
3012 int iocb_stat = IOCB_SUCCESS;
3013 unsigned long flags;
3014 void *dataout = NULL;
3015 uint32_t total_mem;
3016
3017 /* in case no data is returned return just the return code */
3018 job->reply->reply_payload_rcv_len = 0;
3019
3020 if (job->request_len <
3021 sizeof(struct fc_bsg_request) + sizeof(struct diag_mode_test)) {
3022 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3023 "2739 Received DIAG TEST request below minimum "
3024 "size\n");
3025 rc = -EINVAL;
3026 goto loopback_test_exit;
3027 }
3028
3029 if (job->request_payload.payload_len !=
3030 job->reply_payload.payload_len) {
3031 rc = -EINVAL;
3032 goto loopback_test_exit;
3033 }
3034 diag_mode = (struct diag_mode_test *)
3035 job->request->rqst_data.h_vendor.vendor_cmd;
3036
3037 if ((phba->link_state == LPFC_HBA_ERROR) ||
3038 (psli->sli_flag & LPFC_BLOCK_MGMT_IO) ||
3039 (!(psli->sli_flag & LPFC_SLI_ACTIVE))) {
3040 rc = -EACCES;
3041 goto loopback_test_exit;
3042 }
3043
3044 if (!lpfc_is_link_up(phba) || !(phba->link_flag & LS_LOOPBACK_MODE)) {
3045 rc = -EACCES;
3046 goto loopback_test_exit;
3047 }
3048
3049 size = job->request_payload.payload_len;
3050 full_size = size + ELX_LOOPBACK_HEADER_SZ; /* plus the header */
3051
3052 if ((size == 0) || (size > 80 * BUF_SZ_4K)) {
3053 rc = -ERANGE;
3054 goto loopback_test_exit;
3055 }
3056
3057 if (full_size >= BUF_SZ_4K) {
3058 /*
3059 * Allocate memory for ioctl data. If buffer is bigger than 64k,
3060 * then we allocate 64k and re-use that buffer over and over to
3061 * xfer the whole block. This is because Linux kernel has a
3062 * problem allocating more than 120k of kernel space memory. Saw
3063 * problem with GET_FCPTARGETMAPPING...
3064 */
3065 if (size <= (64 * 1024))
3066 total_mem = full_size;
3067 else
3068 total_mem = 64 * 1024;
3069 } else
3070 /* Allocate memory for ioctl data */
3071 total_mem = BUF_SZ_4K;
3072
3073 dataout = kmalloc(total_mem, GFP_KERNEL);
3074 if (dataout == NULL) {
3075 rc = -ENOMEM;
3076 goto loopback_test_exit;
3077 }
3078
3079 ptr = dataout;
3080 ptr += ELX_LOOPBACK_HEADER_SZ;
3081 sg_copy_to_buffer(job->request_payload.sg_list,
3082 job->request_payload.sg_cnt,
3083 ptr, size);
3084 rc = lpfcdiag_loop_self_reg(phba, &rpi);
3085 if (rc)
3086 goto loopback_test_exit;
3087
3088 if (phba->sli_rev < LPFC_SLI_REV4) {
3089 rc = lpfcdiag_loop_get_xri(phba, rpi, &txxri, &rxxri);
3090 if (rc) {
3091 lpfcdiag_loop_self_unreg(phba, rpi);
3092 goto loopback_test_exit;
3093 }
3094
3095 rc = lpfcdiag_loop_post_rxbufs(phba, rxxri, full_size);
3096 if (rc) {
3097 lpfcdiag_loop_self_unreg(phba, rpi);
3098 goto loopback_test_exit;
3099 }
3100 }
3101 evt = lpfc_bsg_event_new(FC_REG_CT_EVENT, current->pid,
3102 SLI_CT_ELX_LOOPBACK);
3103 if (!evt) {
3104 lpfcdiag_loop_self_unreg(phba, rpi);
3105 rc = -ENOMEM;
3106 goto loopback_test_exit;
3107 }
3108
3109 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3110 list_add(&evt->node, &phba->ct_ev_waiters);
3111 lpfc_bsg_event_ref(evt);
3112 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3113
3114 cmdiocbq = lpfc_sli_get_iocbq(phba);
3115 if (phba->sli_rev < LPFC_SLI_REV4)
3116 rspiocbq = lpfc_sli_get_iocbq(phba);
3117 txbmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
3118
3119 if (txbmp) {
3120 txbmp->virt = lpfc_mbuf_alloc(phba, 0, &txbmp->phys);
3121 if (txbmp->virt) {
3122 INIT_LIST_HEAD(&txbmp->list);
3123 txbpl = (struct ulp_bde64 *) txbmp->virt;
3124 txbuffer = diag_cmd_data_alloc(phba,
3125 txbpl, full_size, 0);
3126 }
3127 }
3128
3129 if (!cmdiocbq || !txbmp || !txbpl || !txbuffer || !txbmp->virt) {
3130 rc = -ENOMEM;
3131 goto err_loopback_test_exit;
3132 }
3133 if ((phba->sli_rev < LPFC_SLI_REV4) && !rspiocbq) {
3134 rc = -ENOMEM;
3135 goto err_loopback_test_exit;
3136 }
3137
3138 cmd = &cmdiocbq->iocb;
3139 if (phba->sli_rev < LPFC_SLI_REV4)
3140 rsp = &rspiocbq->iocb;
3141
3142 INIT_LIST_HEAD(&head);
3143 list_add_tail(&head, &txbuffer->dma.list);
3144 list_for_each_entry(curr, &head, list) {
3145 segment_len = ((struct lpfc_dmabufext *)curr)->size;
3146 if (current_offset == 0) {
3147 ctreq = curr->virt;
3148 memset(ctreq, 0, ELX_LOOPBACK_HEADER_SZ);
3149 ctreq->RevisionId.bits.Revision = SLI_CT_REVISION;
3150 ctreq->RevisionId.bits.InId = 0;
3151 ctreq->FsType = SLI_CT_ELX_LOOPBACK;
3152 ctreq->FsSubType = 0;
3153 ctreq->CommandResponse.bits.CmdRsp = ELX_LOOPBACK_DATA;
3154 ctreq->CommandResponse.bits.Size = size;
3155 segment_offset = ELX_LOOPBACK_HEADER_SZ;
3156 } else
3157 segment_offset = 0;
3158
3159 BUG_ON(segment_offset >= segment_len);
3160 memcpy(curr->virt + segment_offset,
3161 ptr + current_offset,
3162 segment_len - segment_offset);
3163
3164 current_offset += segment_len - segment_offset;
3165 BUG_ON(current_offset > size);
3166 }
3167 list_del(&head);
3168
3169 /* Build the XMIT_SEQUENCE iocb */
3170 num_bde = (uint32_t)txbuffer->flag;
3171
3172 cmd->un.xseq64.bdl.addrHigh = putPaddrHigh(txbmp->phys);
3173 cmd->un.xseq64.bdl.addrLow = putPaddrLow(txbmp->phys);
3174 cmd->un.xseq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
3175 cmd->un.xseq64.bdl.bdeSize = (num_bde * sizeof(struct ulp_bde64));
3176
3177 cmd->un.xseq64.w5.hcsw.Fctl = (LS | LA);
3178 cmd->un.xseq64.w5.hcsw.Dfctl = 0;
3179 cmd->un.xseq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CTL;
3180 cmd->un.xseq64.w5.hcsw.Type = FC_TYPE_CT;
3181
3182 cmd->ulpCommand = CMD_XMIT_SEQUENCE64_CX;
3183 cmd->ulpBdeCount = 1;
3184 cmd->ulpLe = 1;
3185 cmd->ulpClass = CLASS3;
3186
3187 if (phba->sli_rev < LPFC_SLI_REV4) {
3188 cmd->ulpContext = txxri;
3189 } else {
3190 cmd->un.xseq64.bdl.ulpIoTag32 = 0;
3191 cmd->un.ulpWord[3] = phba->sli4_hba.rpi_ids[rpi];
3192 cmdiocbq->context3 = txbmp;
3193 cmdiocbq->sli4_xritag = NO_XRI;
3194 cmd->unsli3.rcvsli3.ox_id = 0xffff;
3195 }
3196 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
3197 cmdiocbq->iocb_flag |= LPFC_IO_LOOPBACK;
3198 cmdiocbq->vport = phba->pport;
3199 cmdiocbq->iocb_cmpl = NULL;
3200 iocb_stat = lpfc_sli_issue_iocb_wait(phba, LPFC_ELS_RING, cmdiocbq,
3201 rspiocbq, (phba->fc_ratov * 2) +
3202 LPFC_DRVR_TIMEOUT);
3203
3204 if ((iocb_stat != IOCB_SUCCESS) ||
3205 ((phba->sli_rev < LPFC_SLI_REV4) &&
3206 (rsp->ulpStatus != IOSTAT_SUCCESS))) {
3207 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3208 "3126 Failed loopback test issue iocb: "
3209 "iocb_stat:x%x\n", iocb_stat);
3210 rc = -EIO;
3211 goto err_loopback_test_exit;
3212 }
3213
3214 evt->waiting = 1;
3215 time_left = wait_event_interruptible_timeout(
3216 evt->wq, !list_empty(&evt->events_to_see),
3217 msecs_to_jiffies(1000 *
3218 ((phba->fc_ratov * 2) + LPFC_DRVR_TIMEOUT)));
3219 evt->waiting = 0;
3220 if (list_empty(&evt->events_to_see)) {
3221 rc = (time_left) ? -EINTR : -ETIMEDOUT;
3222 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3223 "3125 Not receiving unsolicited event, "
3224 "rc:x%x\n", rc);
3225 } else {
3226 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3227 list_move(evt->events_to_see.prev, &evt->events_to_get);
3228 evdat = list_entry(evt->events_to_get.prev,
3229 typeof(*evdat), node);
3230 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3231 rx_databuf = evdat->data;
3232 if (evdat->len != full_size) {
3233 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3234 "1603 Loopback test did not receive expected "
3235 "data length. actual length 0x%x expected "
3236 "length 0x%x\n",
3237 evdat->len, full_size);
3238 rc = -EIO;
3239 } else if (rx_databuf == NULL)
3240 rc = -EIO;
3241 else {
3242 rc = IOCB_SUCCESS;
3243 /* skip over elx loopback header */
3244 rx_databuf += ELX_LOOPBACK_HEADER_SZ;
3245 job->reply->reply_payload_rcv_len =
3246 sg_copy_from_buffer(job->reply_payload.sg_list,
3247 job->reply_payload.sg_cnt,
3248 rx_databuf, size);
3249 job->reply->reply_payload_rcv_len = size;
3250 }
3251 }
3252
3253 err_loopback_test_exit:
3254 lpfcdiag_loop_self_unreg(phba, rpi);
3255
3256 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3257 lpfc_bsg_event_unref(evt); /* release ref */
3258 lpfc_bsg_event_unref(evt); /* delete */
3259 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3260
3261 if ((cmdiocbq != NULL) && (iocb_stat != IOCB_TIMEDOUT))
3262 lpfc_sli_release_iocbq(phba, cmdiocbq);
3263
3264 if (rspiocbq != NULL)
3265 lpfc_sli_release_iocbq(phba, rspiocbq);
3266
3267 if (txbmp != NULL) {
3268 if (txbpl != NULL) {
3269 if (txbuffer != NULL)
3270 diag_cmd_data_free(phba, txbuffer);
3271 lpfc_mbuf_free(phba, txbmp->virt, txbmp->phys);
3272 }
3273 kfree(txbmp);
3274 }
3275
3276 loopback_test_exit:
3277 kfree(dataout);
3278 /* make error code available to userspace */
3279 job->reply->result = rc;
3280 job->dd_data = NULL;
3281 /* complete the job back to userspace if no error */
3282 if (rc == IOCB_SUCCESS)
3283 job->job_done(job);
3284 return rc;
3285 }
3286
3287 /**
3288 * lpfc_bsg_get_dfc_rev - process a GET_DFC_REV bsg vendor command
3289 * @job: GET_DFC_REV fc_bsg_job
3290 **/
3291 static int
3292 lpfc_bsg_get_dfc_rev(struct fc_bsg_job *job)
3293 {
3294 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
3295 struct lpfc_hba *phba = vport->phba;
3296 struct get_mgmt_rev *event_req;
3297 struct get_mgmt_rev_reply *event_reply;
3298 int rc = 0;
3299
3300 if (job->request_len <
3301 sizeof(struct fc_bsg_request) + sizeof(struct get_mgmt_rev)) {
3302 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3303 "2740 Received GET_DFC_REV request below "
3304 "minimum size\n");
3305 rc = -EINVAL;
3306 goto job_error;
3307 }
3308
3309 event_req = (struct get_mgmt_rev *)
3310 job->request->rqst_data.h_vendor.vendor_cmd;
3311
3312 event_reply = (struct get_mgmt_rev_reply *)
3313 job->reply->reply_data.vendor_reply.vendor_rsp;
3314
3315 if (job->reply_len <
3316 sizeof(struct fc_bsg_request) + sizeof(struct get_mgmt_rev_reply)) {
3317 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3318 "2741 Received GET_DFC_REV reply below "
3319 "minimum size\n");
3320 rc = -EINVAL;
3321 goto job_error;
3322 }
3323
3324 event_reply->info.a_Major = MANAGEMENT_MAJOR_REV;
3325 event_reply->info.a_Minor = MANAGEMENT_MINOR_REV;
3326 job_error:
3327 job->reply->result = rc;
3328 if (rc == 0)
3329 job->job_done(job);
3330 return rc;
3331 }
3332
3333 /**
3334 * lpfc_bsg_issue_mbox_cmpl - lpfc_bsg_issue_mbox mbox completion handler
3335 * @phba: Pointer to HBA context object.
3336 * @pmboxq: Pointer to mailbox command.
3337 *
3338 * This is completion handler function for mailbox commands issued from
3339 * lpfc_bsg_issue_mbox function. This function is called by the
3340 * mailbox event handler function with no lock held. This function
3341 * will wake up thread waiting on the wait queue pointed by context1
3342 * of the mailbox.
3343 **/
3344 static void
3345 lpfc_bsg_issue_mbox_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3346 {
3347 struct bsg_job_data *dd_data;
3348 struct fc_bsg_job *job;
3349 uint32_t size;
3350 unsigned long flags;
3351 uint8_t *pmb, *pmb_buf;
3352
3353 dd_data = pmboxq->context1;
3354
3355 /*
3356 * The outgoing buffer is readily referred from the dma buffer,
3357 * just need to get header part from mailboxq structure.
3358 */
3359 pmb = (uint8_t *)&pmboxq->u.mb;
3360 pmb_buf = (uint8_t *)dd_data->context_un.mbox.mb;
3361 memcpy(pmb_buf, pmb, sizeof(MAILBOX_t));
3362
3363 /* Determine if job has been aborted */
3364
3365 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3366 job = dd_data->set_job;
3367 if (job) {
3368 /* Prevent timeout handling from trying to abort job */
3369 job->dd_data = NULL;
3370 }
3371 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3372
3373 /* Copy the mailbox data to the job if it is still active */
3374
3375 if (job) {
3376 size = job->reply_payload.payload_len;
3377 job->reply->reply_payload_rcv_len =
3378 sg_copy_from_buffer(job->reply_payload.sg_list,
3379 job->reply_payload.sg_cnt,
3380 pmb_buf, size);
3381 }
3382
3383 dd_data->set_job = NULL;
3384 mempool_free(dd_data->context_un.mbox.pmboxq, phba->mbox_mem_pool);
3385 lpfc_bsg_dma_page_free(phba, dd_data->context_un.mbox.dmabuffers);
3386 kfree(dd_data);
3387
3388 /* Complete the job if the job is still active */
3389
3390 if (job) {
3391 job->reply->result = 0;
3392 job->job_done(job);
3393 }
3394 return;
3395 }
3396
3397 /**
3398 * lpfc_bsg_check_cmd_access - test for a supported mailbox command
3399 * @phba: Pointer to HBA context object.
3400 * @mb: Pointer to a mailbox object.
3401 * @vport: Pointer to a vport object.
3402 *
3403 * Some commands require the port to be offline, some may not be called from
3404 * the application.
3405 **/
3406 static int lpfc_bsg_check_cmd_access(struct lpfc_hba *phba,
3407 MAILBOX_t *mb, struct lpfc_vport *vport)
3408 {
3409 /* return negative error values for bsg job */
3410 switch (mb->mbxCommand) {
3411 /* Offline only */
3412 case MBX_INIT_LINK:
3413 case MBX_DOWN_LINK:
3414 case MBX_CONFIG_LINK:
3415 case MBX_CONFIG_RING:
3416 case MBX_RESET_RING:
3417 case MBX_UNREG_LOGIN:
3418 case MBX_CLEAR_LA:
3419 case MBX_DUMP_CONTEXT:
3420 case MBX_RUN_DIAGS:
3421 case MBX_RESTART:
3422 case MBX_SET_MASK:
3423 if (!(vport->fc_flag & FC_OFFLINE_MODE)) {
3424 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3425 "2743 Command 0x%x is illegal in on-line "
3426 "state\n",
3427 mb->mbxCommand);
3428 return -EPERM;
3429 }
3430 case MBX_WRITE_NV:
3431 case MBX_WRITE_VPARMS:
3432 case MBX_LOAD_SM:
3433 case MBX_READ_NV:
3434 case MBX_READ_CONFIG:
3435 case MBX_READ_RCONFIG:
3436 case MBX_READ_STATUS:
3437 case MBX_READ_XRI:
3438 case MBX_READ_REV:
3439 case MBX_READ_LNK_STAT:
3440 case MBX_DUMP_MEMORY:
3441 case MBX_DOWN_LOAD:
3442 case MBX_UPDATE_CFG:
3443 case MBX_KILL_BOARD:
3444 case MBX_READ_TOPOLOGY:
3445 case MBX_LOAD_AREA:
3446 case MBX_LOAD_EXP_ROM:
3447 case MBX_BEACON:
3448 case MBX_DEL_LD_ENTRY:
3449 case MBX_SET_DEBUG:
3450 case MBX_WRITE_WWN:
3451 case MBX_SLI4_CONFIG:
3452 case MBX_READ_EVENT_LOG:
3453 case MBX_READ_EVENT_LOG_STATUS:
3454 case MBX_WRITE_EVENT_LOG:
3455 case MBX_PORT_CAPABILITIES:
3456 case MBX_PORT_IOV_CONTROL:
3457 case MBX_RUN_BIU_DIAG64:
3458 break;
3459 case MBX_SET_VARIABLE:
3460 lpfc_printf_log(phba, KERN_INFO, LOG_INIT,
3461 "1226 mbox: set_variable 0x%x, 0x%x\n",
3462 mb->un.varWords[0],
3463 mb->un.varWords[1]);
3464 if ((mb->un.varWords[0] == SETVAR_MLOMNT)
3465 && (mb->un.varWords[1] == 1)) {
3466 phba->wait_4_mlo_maint_flg = 1;
3467 } else if (mb->un.varWords[0] == SETVAR_MLORST) {
3468 spin_lock_irq(&phba->hbalock);
3469 phba->link_flag &= ~LS_LOOPBACK_MODE;
3470 spin_unlock_irq(&phba->hbalock);
3471 phba->fc_topology = LPFC_TOPOLOGY_PT_PT;
3472 }
3473 break;
3474 case MBX_READ_SPARM64:
3475 case MBX_REG_LOGIN:
3476 case MBX_REG_LOGIN64:
3477 case MBX_CONFIG_PORT:
3478 case MBX_RUN_BIU_DIAG:
3479 default:
3480 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
3481 "2742 Unknown Command 0x%x\n",
3482 mb->mbxCommand);
3483 return -EPERM;
3484 }
3485
3486 return 0; /* ok */
3487 }
3488
3489 /**
3490 * lpfc_bsg_mbox_ext_cleanup - clean up context of multi-buffer mbox session
3491 * @phba: Pointer to HBA context object.
3492 *
3493 * This is routine clean up and reset BSG handling of multi-buffer mbox
3494 * command session.
3495 **/
3496 static void
3497 lpfc_bsg_mbox_ext_session_reset(struct lpfc_hba *phba)
3498 {
3499 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_IDLE)
3500 return;
3501
3502 /* free all memory, including dma buffers */
3503 lpfc_bsg_dma_page_list_free(phba,
3504 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3505 lpfc_bsg_dma_page_free(phba, phba->mbox_ext_buf_ctx.mbx_dmabuf);
3506 /* multi-buffer write mailbox command pass-through complete */
3507 memset((char *)&phba->mbox_ext_buf_ctx, 0,
3508 sizeof(struct lpfc_mbox_ext_buf_ctx));
3509 INIT_LIST_HEAD(&phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3510
3511 return;
3512 }
3513
3514 /**
3515 * lpfc_bsg_issue_mbox_ext_handle_job - job handler for multi-buffer mbox cmpl
3516 * @phba: Pointer to HBA context object.
3517 * @pmboxq: Pointer to mailbox command.
3518 *
3519 * This is routine handles BSG job for mailbox commands completions with
3520 * multiple external buffers.
3521 **/
3522 static struct fc_bsg_job *
3523 lpfc_bsg_issue_mbox_ext_handle_job(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3524 {
3525 struct bsg_job_data *dd_data;
3526 struct fc_bsg_job *job;
3527 uint8_t *pmb, *pmb_buf;
3528 unsigned long flags;
3529 uint32_t size;
3530 int rc = 0;
3531 struct lpfc_dmabuf *dmabuf;
3532 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3533 uint8_t *pmbx;
3534
3535 dd_data = pmboxq->context1;
3536
3537 /* Determine if job has been aborted */
3538 spin_lock_irqsave(&phba->ct_ev_lock, flags);
3539 job = dd_data->set_job;
3540 if (job) {
3541 /* Prevent timeout handling from trying to abort job */
3542 job->dd_data = NULL;
3543 }
3544 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
3545
3546 /*
3547 * The outgoing buffer is readily referred from the dma buffer,
3548 * just need to get header part from mailboxq structure.
3549 */
3550
3551 pmb = (uint8_t *)&pmboxq->u.mb;
3552 pmb_buf = (uint8_t *)dd_data->context_un.mbox.mb;
3553 /* Copy the byte swapped response mailbox back to the user */
3554 memcpy(pmb_buf, pmb, sizeof(MAILBOX_t));
3555 /* if there is any non-embedded extended data copy that too */
3556 dmabuf = phba->mbox_ext_buf_ctx.mbx_dmabuf;
3557 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
3558 if (!bsg_bf_get(lpfc_mbox_hdr_emb,
3559 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) {
3560 pmbx = (uint8_t *)dmabuf->virt;
3561 /* byte swap the extended data following the mailbox command */
3562 lpfc_sli_pcimem_bcopy(&pmbx[sizeof(MAILBOX_t)],
3563 &pmbx[sizeof(MAILBOX_t)],
3564 sli_cfg_mbx->un.sli_config_emb0_subsys.mse[0].buf_len);
3565 }
3566
3567 /* Complete the job if the job is still active */
3568
3569 if (job) {
3570 size = job->reply_payload.payload_len;
3571 job->reply->reply_payload_rcv_len =
3572 sg_copy_from_buffer(job->reply_payload.sg_list,
3573 job->reply_payload.sg_cnt,
3574 pmb_buf, size);
3575
3576 /* result for successful */
3577 job->reply->result = 0;
3578
3579 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3580 "2937 SLI_CONFIG ext-buffer maibox command "
3581 "(x%x/x%x) complete bsg job done, bsize:%d\n",
3582 phba->mbox_ext_buf_ctx.nembType,
3583 phba->mbox_ext_buf_ctx.mboxType, size);
3584 lpfc_idiag_mbxacc_dump_bsg_mbox(phba,
3585 phba->mbox_ext_buf_ctx.nembType,
3586 phba->mbox_ext_buf_ctx.mboxType,
3587 dma_ebuf, sta_pos_addr,
3588 phba->mbox_ext_buf_ctx.mbx_dmabuf, 0);
3589 } else {
3590 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3591 "2938 SLI_CONFIG ext-buffer maibox "
3592 "command (x%x/x%x) failure, rc:x%x\n",
3593 phba->mbox_ext_buf_ctx.nembType,
3594 phba->mbox_ext_buf_ctx.mboxType, rc);
3595 }
3596
3597
3598 /* state change */
3599 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_DONE;
3600 kfree(dd_data);
3601 return job;
3602 }
3603
3604 /**
3605 * lpfc_bsg_issue_read_mbox_ext_cmpl - compl handler for multi-buffer read mbox
3606 * @phba: Pointer to HBA context object.
3607 * @pmboxq: Pointer to mailbox command.
3608 *
3609 * This is completion handler function for mailbox read commands with multiple
3610 * external buffers.
3611 **/
3612 static void
3613 lpfc_bsg_issue_read_mbox_ext_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3614 {
3615 struct fc_bsg_job *job;
3616
3617 job = lpfc_bsg_issue_mbox_ext_handle_job(phba, pmboxq);
3618
3619 /* handle the BSG job with mailbox command */
3620 if (!job)
3621 pmboxq->u.mb.mbxStatus = MBXERR_ERROR;
3622
3623 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3624 "2939 SLI_CONFIG ext-buffer rd maibox command "
3625 "complete, ctxState:x%x, mbxStatus:x%x\n",
3626 phba->mbox_ext_buf_ctx.state, pmboxq->u.mb.mbxStatus);
3627
3628 if (pmboxq->u.mb.mbxStatus || phba->mbox_ext_buf_ctx.numBuf == 1)
3629 lpfc_bsg_mbox_ext_session_reset(phba);
3630
3631 /* free base driver mailbox structure memory */
3632 mempool_free(pmboxq, phba->mbox_mem_pool);
3633
3634 /* if the job is still active, call job done */
3635 if (job)
3636 job->job_done(job);
3637
3638 return;
3639 }
3640
3641 /**
3642 * lpfc_bsg_issue_write_mbox_ext_cmpl - cmpl handler for multi-buffer write mbox
3643 * @phba: Pointer to HBA context object.
3644 * @pmboxq: Pointer to mailbox command.
3645 *
3646 * This is completion handler function for mailbox write commands with multiple
3647 * external buffers.
3648 **/
3649 static void
3650 lpfc_bsg_issue_write_mbox_ext_cmpl(struct lpfc_hba *phba, LPFC_MBOXQ_t *pmboxq)
3651 {
3652 struct fc_bsg_job *job;
3653
3654 job = lpfc_bsg_issue_mbox_ext_handle_job(phba, pmboxq);
3655
3656 /* handle the BSG job with the mailbox command */
3657 if (!job)
3658 pmboxq->u.mb.mbxStatus = MBXERR_ERROR;
3659
3660 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3661 "2940 SLI_CONFIG ext-buffer wr maibox command "
3662 "complete, ctxState:x%x, mbxStatus:x%x\n",
3663 phba->mbox_ext_buf_ctx.state, pmboxq->u.mb.mbxStatus);
3664
3665 /* free all memory, including dma buffers */
3666 mempool_free(pmboxq, phba->mbox_mem_pool);
3667 lpfc_bsg_mbox_ext_session_reset(phba);
3668
3669 /* if the job is still active, call job done */
3670 if (job)
3671 job->job_done(job);
3672
3673 return;
3674 }
3675
3676 static void
3677 lpfc_bsg_sli_cfg_dma_desc_setup(struct lpfc_hba *phba, enum nemb_type nemb_tp,
3678 uint32_t index, struct lpfc_dmabuf *mbx_dmabuf,
3679 struct lpfc_dmabuf *ext_dmabuf)
3680 {
3681 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3682
3683 /* pointer to the start of mailbox command */
3684 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)mbx_dmabuf->virt;
3685
3686 if (nemb_tp == nemb_mse) {
3687 if (index == 0) {
3688 sli_cfg_mbx->un.sli_config_emb0_subsys.
3689 mse[index].pa_hi =
3690 putPaddrHigh(mbx_dmabuf->phys +
3691 sizeof(MAILBOX_t));
3692 sli_cfg_mbx->un.sli_config_emb0_subsys.
3693 mse[index].pa_lo =
3694 putPaddrLow(mbx_dmabuf->phys +
3695 sizeof(MAILBOX_t));
3696 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3697 "2943 SLI_CONFIG(mse)[%d], "
3698 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3699 index,
3700 sli_cfg_mbx->un.sli_config_emb0_subsys.
3701 mse[index].buf_len,
3702 sli_cfg_mbx->un.sli_config_emb0_subsys.
3703 mse[index].pa_hi,
3704 sli_cfg_mbx->un.sli_config_emb0_subsys.
3705 mse[index].pa_lo);
3706 } else {
3707 sli_cfg_mbx->un.sli_config_emb0_subsys.
3708 mse[index].pa_hi =
3709 putPaddrHigh(ext_dmabuf->phys);
3710 sli_cfg_mbx->un.sli_config_emb0_subsys.
3711 mse[index].pa_lo =
3712 putPaddrLow(ext_dmabuf->phys);
3713 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3714 "2944 SLI_CONFIG(mse)[%d], "
3715 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3716 index,
3717 sli_cfg_mbx->un.sli_config_emb0_subsys.
3718 mse[index].buf_len,
3719 sli_cfg_mbx->un.sli_config_emb0_subsys.
3720 mse[index].pa_hi,
3721 sli_cfg_mbx->un.sli_config_emb0_subsys.
3722 mse[index].pa_lo);
3723 }
3724 } else {
3725 if (index == 0) {
3726 sli_cfg_mbx->un.sli_config_emb1_subsys.
3727 hbd[index].pa_hi =
3728 putPaddrHigh(mbx_dmabuf->phys +
3729 sizeof(MAILBOX_t));
3730 sli_cfg_mbx->un.sli_config_emb1_subsys.
3731 hbd[index].pa_lo =
3732 putPaddrLow(mbx_dmabuf->phys +
3733 sizeof(MAILBOX_t));
3734 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3735 "3007 SLI_CONFIG(hbd)[%d], "
3736 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3737 index,
3738 bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
3739 &sli_cfg_mbx->un.
3740 sli_config_emb1_subsys.hbd[index]),
3741 sli_cfg_mbx->un.sli_config_emb1_subsys.
3742 hbd[index].pa_hi,
3743 sli_cfg_mbx->un.sli_config_emb1_subsys.
3744 hbd[index].pa_lo);
3745
3746 } else {
3747 sli_cfg_mbx->un.sli_config_emb1_subsys.
3748 hbd[index].pa_hi =
3749 putPaddrHigh(ext_dmabuf->phys);
3750 sli_cfg_mbx->un.sli_config_emb1_subsys.
3751 hbd[index].pa_lo =
3752 putPaddrLow(ext_dmabuf->phys);
3753 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3754 "3008 SLI_CONFIG(hbd)[%d], "
3755 "bufLen:%d, addrHi:x%x, addrLo:x%x\n",
3756 index,
3757 bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
3758 &sli_cfg_mbx->un.
3759 sli_config_emb1_subsys.hbd[index]),
3760 sli_cfg_mbx->un.sli_config_emb1_subsys.
3761 hbd[index].pa_hi,
3762 sli_cfg_mbx->un.sli_config_emb1_subsys.
3763 hbd[index].pa_lo);
3764 }
3765 }
3766 return;
3767 }
3768
3769 /**
3770 * lpfc_bsg_sli_cfg_mse_read_cmd_ext - sli_config non-embedded mailbox cmd read
3771 * @phba: Pointer to HBA context object.
3772 * @mb: Pointer to a BSG mailbox object.
3773 * @nemb_tp: Enumerate of non-embedded mailbox command type.
3774 * @dmabuff: Pointer to a DMA buffer descriptor.
3775 *
3776 * This routine performs SLI_CONFIG (0x9B) read mailbox command operation with
3777 * non-embedded external bufffers.
3778 **/
3779 static int
3780 lpfc_bsg_sli_cfg_read_cmd_ext(struct lpfc_hba *phba, struct fc_bsg_job *job,
3781 enum nemb_type nemb_tp,
3782 struct lpfc_dmabuf *dmabuf)
3783 {
3784 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3785 struct dfc_mbox_req *mbox_req;
3786 struct lpfc_dmabuf *curr_dmabuf, *next_dmabuf;
3787 uint32_t ext_buf_cnt, ext_buf_index;
3788 struct lpfc_dmabuf *ext_dmabuf = NULL;
3789 struct bsg_job_data *dd_data = NULL;
3790 LPFC_MBOXQ_t *pmboxq = NULL;
3791 MAILBOX_t *pmb;
3792 uint8_t *pmbx;
3793 int rc, i;
3794
3795 mbox_req =
3796 (struct dfc_mbox_req *)job->request->rqst_data.h_vendor.vendor_cmd;
3797
3798 /* pointer to the start of mailbox command */
3799 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
3800
3801 if (nemb_tp == nemb_mse) {
3802 ext_buf_cnt = bsg_bf_get(lpfc_mbox_hdr_mse_cnt,
3803 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr);
3804 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_MSE) {
3805 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3806 "2945 Handled SLI_CONFIG(mse) rd, "
3807 "ext_buf_cnt(%d) out of range(%d)\n",
3808 ext_buf_cnt,
3809 LPFC_MBX_SLI_CONFIG_MAX_MSE);
3810 rc = -ERANGE;
3811 goto job_error;
3812 }
3813 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3814 "2941 Handled SLI_CONFIG(mse) rd, "
3815 "ext_buf_cnt:%d\n", ext_buf_cnt);
3816 } else {
3817 /* sanity check on interface type for support */
3818 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
3819 LPFC_SLI_INTF_IF_TYPE_2) {
3820 rc = -ENODEV;
3821 goto job_error;
3822 }
3823 /* nemb_tp == nemb_hbd */
3824 ext_buf_cnt = sli_cfg_mbx->un.sli_config_emb1_subsys.hbd_count;
3825 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_HBD) {
3826 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3827 "2946 Handled SLI_CONFIG(hbd) rd, "
3828 "ext_buf_cnt(%d) out of range(%d)\n",
3829 ext_buf_cnt,
3830 LPFC_MBX_SLI_CONFIG_MAX_HBD);
3831 rc = -ERANGE;
3832 goto job_error;
3833 }
3834 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3835 "2942 Handled SLI_CONFIG(hbd) rd, "
3836 "ext_buf_cnt:%d\n", ext_buf_cnt);
3837 }
3838
3839 /* before dma descriptor setup */
3840 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_rd, dma_mbox,
3841 sta_pre_addr, dmabuf, ext_buf_cnt);
3842
3843 /* reject non-embedded mailbox command with none external buffer */
3844 if (ext_buf_cnt == 0) {
3845 rc = -EPERM;
3846 goto job_error;
3847 } else if (ext_buf_cnt > 1) {
3848 /* additional external read buffers */
3849 for (i = 1; i < ext_buf_cnt; i++) {
3850 ext_dmabuf = lpfc_bsg_dma_page_alloc(phba);
3851 if (!ext_dmabuf) {
3852 rc = -ENOMEM;
3853 goto job_error;
3854 }
3855 list_add_tail(&ext_dmabuf->list,
3856 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3857 }
3858 }
3859
3860 /* bsg tracking structure */
3861 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
3862 if (!dd_data) {
3863 rc = -ENOMEM;
3864 goto job_error;
3865 }
3866
3867 /* mailbox command structure for base driver */
3868 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
3869 if (!pmboxq) {
3870 rc = -ENOMEM;
3871 goto job_error;
3872 }
3873 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
3874
3875 /* for the first external buffer */
3876 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, 0, dmabuf, dmabuf);
3877
3878 /* for the rest of external buffer descriptors if any */
3879 if (ext_buf_cnt > 1) {
3880 ext_buf_index = 1;
3881 list_for_each_entry_safe(curr_dmabuf, next_dmabuf,
3882 &phba->mbox_ext_buf_ctx.ext_dmabuf_list, list) {
3883 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp,
3884 ext_buf_index, dmabuf,
3885 curr_dmabuf);
3886 ext_buf_index++;
3887 }
3888 }
3889
3890 /* after dma descriptor setup */
3891 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_rd, dma_mbox,
3892 sta_pos_addr, dmabuf, ext_buf_cnt);
3893
3894 /* construct base driver mbox command */
3895 pmb = &pmboxq->u.mb;
3896 pmbx = (uint8_t *)dmabuf->virt;
3897 memcpy(pmb, pmbx, sizeof(*pmb));
3898 pmb->mbxOwner = OWN_HOST;
3899 pmboxq->vport = phba->pport;
3900
3901 /* multi-buffer handling context */
3902 phba->mbox_ext_buf_ctx.nembType = nemb_tp;
3903 phba->mbox_ext_buf_ctx.mboxType = mbox_rd;
3904 phba->mbox_ext_buf_ctx.numBuf = ext_buf_cnt;
3905 phba->mbox_ext_buf_ctx.mbxTag = mbox_req->extMboxTag;
3906 phba->mbox_ext_buf_ctx.seqNum = mbox_req->extSeqNum;
3907 phba->mbox_ext_buf_ctx.mbx_dmabuf = dmabuf;
3908
3909 /* callback for multi-buffer read mailbox command */
3910 pmboxq->mbox_cmpl = lpfc_bsg_issue_read_mbox_ext_cmpl;
3911
3912 /* context fields to callback function */
3913 pmboxq->context1 = dd_data;
3914 dd_data->type = TYPE_MBOX;
3915 dd_data->set_job = job;
3916 dd_data->context_un.mbox.pmboxq = pmboxq;
3917 dd_data->context_un.mbox.mb = (MAILBOX_t *)pmbx;
3918 job->dd_data = dd_data;
3919
3920 /* state change */
3921 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
3922
3923 /*
3924 * Non-embedded mailbox subcommand data gets byte swapped here because
3925 * the lower level driver code only does the first 64 mailbox words.
3926 */
3927 if ((!bsg_bf_get(lpfc_mbox_hdr_emb,
3928 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) &&
3929 (nemb_tp == nemb_mse))
3930 lpfc_sli_pcimem_bcopy(&pmbx[sizeof(MAILBOX_t)],
3931 &pmbx[sizeof(MAILBOX_t)],
3932 sli_cfg_mbx->un.sli_config_emb0_subsys.
3933 mse[0].buf_len);
3934
3935 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
3936 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
3937 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3938 "2947 Issued SLI_CONFIG ext-buffer "
3939 "maibox command, rc:x%x\n", rc);
3940 return SLI_CONFIG_HANDLED;
3941 }
3942 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3943 "2948 Failed to issue SLI_CONFIG ext-buffer "
3944 "maibox command, rc:x%x\n", rc);
3945 rc = -EPIPE;
3946
3947 job_error:
3948 if (pmboxq)
3949 mempool_free(pmboxq, phba->mbox_mem_pool);
3950 lpfc_bsg_dma_page_list_free(phba,
3951 &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
3952 kfree(dd_data);
3953 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_IDLE;
3954 return rc;
3955 }
3956
3957 /**
3958 * lpfc_bsg_sli_cfg_write_cmd_ext - sli_config non-embedded mailbox cmd write
3959 * @phba: Pointer to HBA context object.
3960 * @mb: Pointer to a BSG mailbox object.
3961 * @dmabuff: Pointer to a DMA buffer descriptor.
3962 *
3963 * This routine performs SLI_CONFIG (0x9B) write mailbox command operation with
3964 * non-embedded external bufffers.
3965 **/
3966 static int
3967 lpfc_bsg_sli_cfg_write_cmd_ext(struct lpfc_hba *phba, struct fc_bsg_job *job,
3968 enum nemb_type nemb_tp,
3969 struct lpfc_dmabuf *dmabuf)
3970 {
3971 struct dfc_mbox_req *mbox_req;
3972 struct lpfc_sli_config_mbox *sli_cfg_mbx;
3973 uint32_t ext_buf_cnt;
3974 struct bsg_job_data *dd_data = NULL;
3975 LPFC_MBOXQ_t *pmboxq = NULL;
3976 MAILBOX_t *pmb;
3977 uint8_t *mbx;
3978 int rc = SLI_CONFIG_NOT_HANDLED, i;
3979
3980 mbox_req =
3981 (struct dfc_mbox_req *)job->request->rqst_data.h_vendor.vendor_cmd;
3982
3983 /* pointer to the start of mailbox command */
3984 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
3985
3986 if (nemb_tp == nemb_mse) {
3987 ext_buf_cnt = bsg_bf_get(lpfc_mbox_hdr_mse_cnt,
3988 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr);
3989 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_MSE) {
3990 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
3991 "2953 Failed SLI_CONFIG(mse) wr, "
3992 "ext_buf_cnt(%d) out of range(%d)\n",
3993 ext_buf_cnt,
3994 LPFC_MBX_SLI_CONFIG_MAX_MSE);
3995 return -ERANGE;
3996 }
3997 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
3998 "2949 Handled SLI_CONFIG(mse) wr, "
3999 "ext_buf_cnt:%d\n", ext_buf_cnt);
4000 } else {
4001 /* sanity check on interface type for support */
4002 if (bf_get(lpfc_sli_intf_if_type, &phba->sli4_hba.sli_intf) !=
4003 LPFC_SLI_INTF_IF_TYPE_2)
4004 return -ENODEV;
4005 /* nemb_tp == nemb_hbd */
4006 ext_buf_cnt = sli_cfg_mbx->un.sli_config_emb1_subsys.hbd_count;
4007 if (ext_buf_cnt > LPFC_MBX_SLI_CONFIG_MAX_HBD) {
4008 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4009 "2954 Failed SLI_CONFIG(hbd) wr, "
4010 "ext_buf_cnt(%d) out of range(%d)\n",
4011 ext_buf_cnt,
4012 LPFC_MBX_SLI_CONFIG_MAX_HBD);
4013 return -ERANGE;
4014 }
4015 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4016 "2950 Handled SLI_CONFIG(hbd) wr, "
4017 "ext_buf_cnt:%d\n", ext_buf_cnt);
4018 }
4019
4020 /* before dma buffer descriptor setup */
4021 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_wr, dma_mbox,
4022 sta_pre_addr, dmabuf, ext_buf_cnt);
4023
4024 if (ext_buf_cnt == 0)
4025 return -EPERM;
4026
4027 /* for the first external buffer */
4028 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, 0, dmabuf, dmabuf);
4029
4030 /* after dma descriptor setup */
4031 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, nemb_tp, mbox_wr, dma_mbox,
4032 sta_pos_addr, dmabuf, ext_buf_cnt);
4033
4034 /* log for looking forward */
4035 for (i = 1; i < ext_buf_cnt; i++) {
4036 if (nemb_tp == nemb_mse)
4037 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4038 "2951 SLI_CONFIG(mse), buf[%d]-length:%d\n",
4039 i, sli_cfg_mbx->un.sli_config_emb0_subsys.
4040 mse[i].buf_len);
4041 else
4042 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4043 "2952 SLI_CONFIG(hbd), buf[%d]-length:%d\n",
4044 i, bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
4045 &sli_cfg_mbx->un.sli_config_emb1_subsys.
4046 hbd[i]));
4047 }
4048
4049 /* multi-buffer handling context */
4050 phba->mbox_ext_buf_ctx.nembType = nemb_tp;
4051 phba->mbox_ext_buf_ctx.mboxType = mbox_wr;
4052 phba->mbox_ext_buf_ctx.numBuf = ext_buf_cnt;
4053 phba->mbox_ext_buf_ctx.mbxTag = mbox_req->extMboxTag;
4054 phba->mbox_ext_buf_ctx.seqNum = mbox_req->extSeqNum;
4055 phba->mbox_ext_buf_ctx.mbx_dmabuf = dmabuf;
4056
4057 if (ext_buf_cnt == 1) {
4058 /* bsg tracking structure */
4059 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4060 if (!dd_data) {
4061 rc = -ENOMEM;
4062 goto job_error;
4063 }
4064
4065 /* mailbox command structure for base driver */
4066 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4067 if (!pmboxq) {
4068 rc = -ENOMEM;
4069 goto job_error;
4070 }
4071 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4072 pmb = &pmboxq->u.mb;
4073 mbx = (uint8_t *)dmabuf->virt;
4074 memcpy(pmb, mbx, sizeof(*pmb));
4075 pmb->mbxOwner = OWN_HOST;
4076 pmboxq->vport = phba->pport;
4077
4078 /* callback for multi-buffer read mailbox command */
4079 pmboxq->mbox_cmpl = lpfc_bsg_issue_write_mbox_ext_cmpl;
4080
4081 /* context fields to callback function */
4082 pmboxq->context1 = dd_data;
4083 dd_data->type = TYPE_MBOX;
4084 dd_data->set_job = job;
4085 dd_data->context_un.mbox.pmboxq = pmboxq;
4086 dd_data->context_un.mbox.mb = (MAILBOX_t *)mbx;
4087 job->dd_data = dd_data;
4088
4089 /* state change */
4090
4091 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
4092 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4093 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
4094 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4095 "2955 Issued SLI_CONFIG ext-buffer "
4096 "maibox command, rc:x%x\n", rc);
4097 return SLI_CONFIG_HANDLED;
4098 }
4099 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4100 "2956 Failed to issue SLI_CONFIG ext-buffer "
4101 "maibox command, rc:x%x\n", rc);
4102 rc = -EPIPE;
4103 goto job_error;
4104 }
4105
4106 /* wait for additoinal external buffers */
4107
4108 job->reply->result = 0;
4109 job->job_done(job);
4110 return SLI_CONFIG_HANDLED;
4111
4112 job_error:
4113 if (pmboxq)
4114 mempool_free(pmboxq, phba->mbox_mem_pool);
4115 kfree(dd_data);
4116
4117 return rc;
4118 }
4119
4120 /**
4121 * lpfc_bsg_handle_sli_cfg_mbox - handle sli-cfg mailbox cmd with ext buffer
4122 * @phba: Pointer to HBA context object.
4123 * @mb: Pointer to a BSG mailbox object.
4124 * @dmabuff: Pointer to a DMA buffer descriptor.
4125 *
4126 * This routine handles SLI_CONFIG (0x9B) mailbox command with non-embedded
4127 * external bufffers, including both 0x9B with non-embedded MSEs and 0x9B
4128 * with embedded sussystem 0x1 and opcodes with external HBDs.
4129 **/
4130 static int
4131 lpfc_bsg_handle_sli_cfg_mbox(struct lpfc_hba *phba, struct fc_bsg_job *job,
4132 struct lpfc_dmabuf *dmabuf)
4133 {
4134 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4135 uint32_t subsys;
4136 uint32_t opcode;
4137 int rc = SLI_CONFIG_NOT_HANDLED;
4138
4139 /* state change on new multi-buffer pass-through mailbox command */
4140 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_HOST;
4141
4142 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)dmabuf->virt;
4143
4144 if (!bsg_bf_get(lpfc_mbox_hdr_emb,
4145 &sli_cfg_mbx->un.sli_config_emb0_subsys.sli_config_hdr)) {
4146 subsys = bsg_bf_get(lpfc_emb0_subcmnd_subsys,
4147 &sli_cfg_mbx->un.sli_config_emb0_subsys);
4148 opcode = bsg_bf_get(lpfc_emb0_subcmnd_opcode,
4149 &sli_cfg_mbx->un.sli_config_emb0_subsys);
4150 if (subsys == SLI_CONFIG_SUBSYS_FCOE) {
4151 switch (opcode) {
4152 case FCOE_OPCODE_READ_FCF:
4153 case FCOE_OPCODE_GET_DPORT_RESULTS:
4154 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4155 "2957 Handled SLI_CONFIG "
4156 "subsys_fcoe, opcode:x%x\n",
4157 opcode);
4158 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4159 nemb_mse, dmabuf);
4160 break;
4161 case FCOE_OPCODE_ADD_FCF:
4162 case FCOE_OPCODE_SET_DPORT_MODE:
4163 case LPFC_MBOX_OPCODE_FCOE_LINK_DIAG_STATE:
4164 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4165 "2958 Handled SLI_CONFIG "
4166 "subsys_fcoe, opcode:x%x\n",
4167 opcode);
4168 rc = lpfc_bsg_sli_cfg_write_cmd_ext(phba, job,
4169 nemb_mse, dmabuf);
4170 break;
4171 default:
4172 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4173 "2959 Reject SLI_CONFIG "
4174 "subsys_fcoe, opcode:x%x\n",
4175 opcode);
4176 rc = -EPERM;
4177 break;
4178 }
4179 } else if (subsys == SLI_CONFIG_SUBSYS_COMN) {
4180 switch (opcode) {
4181 case COMN_OPCODE_GET_CNTL_ADDL_ATTRIBUTES:
4182 case COMN_OPCODE_GET_CNTL_ATTRIBUTES:
4183 case COMN_OPCODE_GET_PROFILE_CONFIG:
4184 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4185 "3106 Handled SLI_CONFIG "
4186 "subsys_comn, opcode:x%x\n",
4187 opcode);
4188 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4189 nemb_mse, dmabuf);
4190 break;
4191 default:
4192 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4193 "3107 Reject SLI_CONFIG "
4194 "subsys_comn, opcode:x%x\n",
4195 opcode);
4196 rc = -EPERM;
4197 break;
4198 }
4199 } else {
4200 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4201 "2977 Reject SLI_CONFIG "
4202 "subsys:x%d, opcode:x%x\n",
4203 subsys, opcode);
4204 rc = -EPERM;
4205 }
4206 } else {
4207 subsys = bsg_bf_get(lpfc_emb1_subcmnd_subsys,
4208 &sli_cfg_mbx->un.sli_config_emb1_subsys);
4209 opcode = bsg_bf_get(lpfc_emb1_subcmnd_opcode,
4210 &sli_cfg_mbx->un.sli_config_emb1_subsys);
4211 if (subsys == SLI_CONFIG_SUBSYS_COMN) {
4212 switch (opcode) {
4213 case COMN_OPCODE_READ_OBJECT:
4214 case COMN_OPCODE_READ_OBJECT_LIST:
4215 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4216 "2960 Handled SLI_CONFIG "
4217 "subsys_comn, opcode:x%x\n",
4218 opcode);
4219 rc = lpfc_bsg_sli_cfg_read_cmd_ext(phba, job,
4220 nemb_hbd, dmabuf);
4221 break;
4222 case COMN_OPCODE_WRITE_OBJECT:
4223 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4224 "2961 Handled SLI_CONFIG "
4225 "subsys_comn, opcode:x%x\n",
4226 opcode);
4227 rc = lpfc_bsg_sli_cfg_write_cmd_ext(phba, job,
4228 nemb_hbd, dmabuf);
4229 break;
4230 default:
4231 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4232 "2962 Not handled SLI_CONFIG "
4233 "subsys_comn, opcode:x%x\n",
4234 opcode);
4235 rc = SLI_CONFIG_NOT_HANDLED;
4236 break;
4237 }
4238 } else {
4239 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4240 "2978 Not handled SLI_CONFIG "
4241 "subsys:x%d, opcode:x%x\n",
4242 subsys, opcode);
4243 rc = SLI_CONFIG_NOT_HANDLED;
4244 }
4245 }
4246
4247 /* state reset on not handled new multi-buffer mailbox command */
4248 if (rc != SLI_CONFIG_HANDLED)
4249 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_IDLE;
4250
4251 return rc;
4252 }
4253
4254 /**
4255 * lpfc_bsg_mbox_ext_abort_req - request to abort mbox command with ext buffers
4256 * @phba: Pointer to HBA context object.
4257 *
4258 * This routine is for requesting to abort a pass-through mailbox command with
4259 * multiple external buffers due to error condition.
4260 **/
4261 static void
4262 lpfc_bsg_mbox_ext_abort(struct lpfc_hba *phba)
4263 {
4264 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_PORT)
4265 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_ABTS;
4266 else
4267 lpfc_bsg_mbox_ext_session_reset(phba);
4268 return;
4269 }
4270
4271 /**
4272 * lpfc_bsg_read_ebuf_get - get the next mailbox read external buffer
4273 * @phba: Pointer to HBA context object.
4274 * @dmabuf: Pointer to a DMA buffer descriptor.
4275 *
4276 * This routine extracts the next mailbox read external buffer back to
4277 * user space through BSG.
4278 **/
4279 static int
4280 lpfc_bsg_read_ebuf_get(struct lpfc_hba *phba, struct fc_bsg_job *job)
4281 {
4282 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4283 struct lpfc_dmabuf *dmabuf;
4284 uint8_t *pbuf;
4285 uint32_t size;
4286 uint32_t index;
4287
4288 index = phba->mbox_ext_buf_ctx.seqNum;
4289 phba->mbox_ext_buf_ctx.seqNum++;
4290
4291 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)
4292 phba->mbox_ext_buf_ctx.mbx_dmabuf->virt;
4293
4294 if (phba->mbox_ext_buf_ctx.nembType == nemb_mse) {
4295 size = bsg_bf_get(lpfc_mbox_sli_config_mse_len,
4296 &sli_cfg_mbx->un.sli_config_emb0_subsys.mse[index]);
4297 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4298 "2963 SLI_CONFIG (mse) ext-buffer rd get "
4299 "buffer[%d], size:%d\n", index, size);
4300 } else {
4301 size = bsg_bf_get(lpfc_mbox_sli_config_ecmn_hbd_len,
4302 &sli_cfg_mbx->un.sli_config_emb1_subsys.hbd[index]);
4303 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4304 "2964 SLI_CONFIG (hbd) ext-buffer rd get "
4305 "buffer[%d], size:%d\n", index, size);
4306 }
4307 if (list_empty(&phba->mbox_ext_buf_ctx.ext_dmabuf_list))
4308 return -EPIPE;
4309 dmabuf = list_first_entry(&phba->mbox_ext_buf_ctx.ext_dmabuf_list,
4310 struct lpfc_dmabuf, list);
4311 list_del_init(&dmabuf->list);
4312
4313 /* after dma buffer descriptor setup */
4314 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, phba->mbox_ext_buf_ctx.nembType,
4315 mbox_rd, dma_ebuf, sta_pos_addr,
4316 dmabuf, index);
4317
4318 pbuf = (uint8_t *)dmabuf->virt;
4319 job->reply->reply_payload_rcv_len =
4320 sg_copy_from_buffer(job->reply_payload.sg_list,
4321 job->reply_payload.sg_cnt,
4322 pbuf, size);
4323
4324 lpfc_bsg_dma_page_free(phba, dmabuf);
4325
4326 if (phba->mbox_ext_buf_ctx.seqNum == phba->mbox_ext_buf_ctx.numBuf) {
4327 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4328 "2965 SLI_CONFIG (hbd) ext-buffer rd mbox "
4329 "command session done\n");
4330 lpfc_bsg_mbox_ext_session_reset(phba);
4331 }
4332
4333 job->reply->result = 0;
4334 job->job_done(job);
4335
4336 return SLI_CONFIG_HANDLED;
4337 }
4338
4339 /**
4340 * lpfc_bsg_write_ebuf_set - set the next mailbox write external buffer
4341 * @phba: Pointer to HBA context object.
4342 * @dmabuf: Pointer to a DMA buffer descriptor.
4343 *
4344 * This routine sets up the next mailbox read external buffer obtained
4345 * from user space through BSG.
4346 **/
4347 static int
4348 lpfc_bsg_write_ebuf_set(struct lpfc_hba *phba, struct fc_bsg_job *job,
4349 struct lpfc_dmabuf *dmabuf)
4350 {
4351 struct lpfc_sli_config_mbox *sli_cfg_mbx;
4352 struct bsg_job_data *dd_data = NULL;
4353 LPFC_MBOXQ_t *pmboxq = NULL;
4354 MAILBOX_t *pmb;
4355 enum nemb_type nemb_tp;
4356 uint8_t *pbuf;
4357 uint32_t size;
4358 uint32_t index;
4359 int rc;
4360
4361 index = phba->mbox_ext_buf_ctx.seqNum;
4362 phba->mbox_ext_buf_ctx.seqNum++;
4363 nemb_tp = phba->mbox_ext_buf_ctx.nembType;
4364
4365 sli_cfg_mbx = (struct lpfc_sli_config_mbox *)
4366 phba->mbox_ext_buf_ctx.mbx_dmabuf->virt;
4367
4368 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4369 if (!dd_data) {
4370 rc = -ENOMEM;
4371 goto job_error;
4372 }
4373
4374 pbuf = (uint8_t *)dmabuf->virt;
4375 size = job->request_payload.payload_len;
4376 sg_copy_to_buffer(job->request_payload.sg_list,
4377 job->request_payload.sg_cnt,
4378 pbuf, size);
4379
4380 if (phba->mbox_ext_buf_ctx.nembType == nemb_mse) {
4381 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4382 "2966 SLI_CONFIG (mse) ext-buffer wr set "
4383 "buffer[%d], size:%d\n",
4384 phba->mbox_ext_buf_ctx.seqNum, size);
4385
4386 } else {
4387 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4388 "2967 SLI_CONFIG (hbd) ext-buffer wr set "
4389 "buffer[%d], size:%d\n",
4390 phba->mbox_ext_buf_ctx.seqNum, size);
4391
4392 }
4393
4394 /* set up external buffer descriptor and add to external buffer list */
4395 lpfc_bsg_sli_cfg_dma_desc_setup(phba, nemb_tp, index,
4396 phba->mbox_ext_buf_ctx.mbx_dmabuf,
4397 dmabuf);
4398 list_add_tail(&dmabuf->list, &phba->mbox_ext_buf_ctx.ext_dmabuf_list);
4399
4400 /* after write dma buffer */
4401 lpfc_idiag_mbxacc_dump_bsg_mbox(phba, phba->mbox_ext_buf_ctx.nembType,
4402 mbox_wr, dma_ebuf, sta_pos_addr,
4403 dmabuf, index);
4404
4405 if (phba->mbox_ext_buf_ctx.seqNum == phba->mbox_ext_buf_ctx.numBuf) {
4406 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4407 "2968 SLI_CONFIG ext-buffer wr all %d "
4408 "ebuffers received\n",
4409 phba->mbox_ext_buf_ctx.numBuf);
4410 /* mailbox command structure for base driver */
4411 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4412 if (!pmboxq) {
4413 rc = -ENOMEM;
4414 goto job_error;
4415 }
4416 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4417 pbuf = (uint8_t *)phba->mbox_ext_buf_ctx.mbx_dmabuf->virt;
4418 pmb = &pmboxq->u.mb;
4419 memcpy(pmb, pbuf, sizeof(*pmb));
4420 pmb->mbxOwner = OWN_HOST;
4421 pmboxq->vport = phba->pport;
4422
4423 /* callback for multi-buffer write mailbox command */
4424 pmboxq->mbox_cmpl = lpfc_bsg_issue_write_mbox_ext_cmpl;
4425
4426 /* context fields to callback function */
4427 pmboxq->context1 = dd_data;
4428 dd_data->type = TYPE_MBOX;
4429 dd_data->set_job = job;
4430 dd_data->context_un.mbox.pmboxq = pmboxq;
4431 dd_data->context_un.mbox.mb = (MAILBOX_t *)pbuf;
4432 job->dd_data = dd_data;
4433
4434 /* state change */
4435 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_PORT;
4436
4437 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4438 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY)) {
4439 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4440 "2969 Issued SLI_CONFIG ext-buffer "
4441 "maibox command, rc:x%x\n", rc);
4442 return SLI_CONFIG_HANDLED;
4443 }
4444 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4445 "2970 Failed to issue SLI_CONFIG ext-buffer "
4446 "maibox command, rc:x%x\n", rc);
4447 rc = -EPIPE;
4448 goto job_error;
4449 }
4450
4451 /* wait for additoinal external buffers */
4452 job->reply->result = 0;
4453 job->job_done(job);
4454 return SLI_CONFIG_HANDLED;
4455
4456 job_error:
4457 lpfc_bsg_dma_page_free(phba, dmabuf);
4458 kfree(dd_data);
4459
4460 return rc;
4461 }
4462
4463 /**
4464 * lpfc_bsg_handle_sli_cfg_ebuf - handle ext buffer with sli-cfg mailbox cmd
4465 * @phba: Pointer to HBA context object.
4466 * @mb: Pointer to a BSG mailbox object.
4467 * @dmabuff: Pointer to a DMA buffer descriptor.
4468 *
4469 * This routine handles the external buffer with SLI_CONFIG (0x9B) mailbox
4470 * command with multiple non-embedded external buffers.
4471 **/
4472 static int
4473 lpfc_bsg_handle_sli_cfg_ebuf(struct lpfc_hba *phba, struct fc_bsg_job *job,
4474 struct lpfc_dmabuf *dmabuf)
4475 {
4476 int rc;
4477
4478 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4479 "2971 SLI_CONFIG buffer (type:x%x)\n",
4480 phba->mbox_ext_buf_ctx.mboxType);
4481
4482 if (phba->mbox_ext_buf_ctx.mboxType == mbox_rd) {
4483 if (phba->mbox_ext_buf_ctx.state != LPFC_BSG_MBOX_DONE) {
4484 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4485 "2972 SLI_CONFIG rd buffer state "
4486 "mismatch:x%x\n",
4487 phba->mbox_ext_buf_ctx.state);
4488 lpfc_bsg_mbox_ext_abort(phba);
4489 return -EPIPE;
4490 }
4491 rc = lpfc_bsg_read_ebuf_get(phba, job);
4492 if (rc == SLI_CONFIG_HANDLED)
4493 lpfc_bsg_dma_page_free(phba, dmabuf);
4494 } else { /* phba->mbox_ext_buf_ctx.mboxType == mbox_wr */
4495 if (phba->mbox_ext_buf_ctx.state != LPFC_BSG_MBOX_HOST) {
4496 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4497 "2973 SLI_CONFIG wr buffer state "
4498 "mismatch:x%x\n",
4499 phba->mbox_ext_buf_ctx.state);
4500 lpfc_bsg_mbox_ext_abort(phba);
4501 return -EPIPE;
4502 }
4503 rc = lpfc_bsg_write_ebuf_set(phba, job, dmabuf);
4504 }
4505 return rc;
4506 }
4507
4508 /**
4509 * lpfc_bsg_handle_sli_cfg_ext - handle sli-cfg mailbox with external buffer
4510 * @phba: Pointer to HBA context object.
4511 * @mb: Pointer to a BSG mailbox object.
4512 * @dmabuff: Pointer to a DMA buffer descriptor.
4513 *
4514 * This routine checkes and handles non-embedded multi-buffer SLI_CONFIG
4515 * (0x9B) mailbox commands and external buffers.
4516 **/
4517 static int
4518 lpfc_bsg_handle_sli_cfg_ext(struct lpfc_hba *phba, struct fc_bsg_job *job,
4519 struct lpfc_dmabuf *dmabuf)
4520 {
4521 struct dfc_mbox_req *mbox_req;
4522 int rc = SLI_CONFIG_NOT_HANDLED;
4523
4524 mbox_req =
4525 (struct dfc_mbox_req *)job->request->rqst_data.h_vendor.vendor_cmd;
4526
4527 /* mbox command with/without single external buffer */
4528 if (mbox_req->extMboxTag == 0 && mbox_req->extSeqNum == 0)
4529 return rc;
4530
4531 /* mbox command and first external buffer */
4532 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_IDLE) {
4533 if (mbox_req->extSeqNum == 1) {
4534 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4535 "2974 SLI_CONFIG mailbox: tag:%d, "
4536 "seq:%d\n", mbox_req->extMboxTag,
4537 mbox_req->extSeqNum);
4538 rc = lpfc_bsg_handle_sli_cfg_mbox(phba, job, dmabuf);
4539 return rc;
4540 } else
4541 goto sli_cfg_ext_error;
4542 }
4543
4544 /*
4545 * handle additional external buffers
4546 */
4547
4548 /* check broken pipe conditions */
4549 if (mbox_req->extMboxTag != phba->mbox_ext_buf_ctx.mbxTag)
4550 goto sli_cfg_ext_error;
4551 if (mbox_req->extSeqNum > phba->mbox_ext_buf_ctx.numBuf)
4552 goto sli_cfg_ext_error;
4553 if (mbox_req->extSeqNum != phba->mbox_ext_buf_ctx.seqNum + 1)
4554 goto sli_cfg_ext_error;
4555
4556 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4557 "2975 SLI_CONFIG mailbox external buffer: "
4558 "extSta:x%x, tag:%d, seq:%d\n",
4559 phba->mbox_ext_buf_ctx.state, mbox_req->extMboxTag,
4560 mbox_req->extSeqNum);
4561 rc = lpfc_bsg_handle_sli_cfg_ebuf(phba, job, dmabuf);
4562 return rc;
4563
4564 sli_cfg_ext_error:
4565 /* all other cases, broken pipe */
4566 lpfc_printf_log(phba, KERN_ERR, LOG_LIBDFC,
4567 "2976 SLI_CONFIG mailbox broken pipe: "
4568 "ctxSta:x%x, ctxNumBuf:%d "
4569 "ctxTag:%d, ctxSeq:%d, tag:%d, seq:%d\n",
4570 phba->mbox_ext_buf_ctx.state,
4571 phba->mbox_ext_buf_ctx.numBuf,
4572 phba->mbox_ext_buf_ctx.mbxTag,
4573 phba->mbox_ext_buf_ctx.seqNum,
4574 mbox_req->extMboxTag, mbox_req->extSeqNum);
4575
4576 lpfc_bsg_mbox_ext_session_reset(phba);
4577
4578 return -EPIPE;
4579 }
4580
4581 /**
4582 * lpfc_bsg_issue_mbox - issues a mailbox command on behalf of an app
4583 * @phba: Pointer to HBA context object.
4584 * @mb: Pointer to a mailbox object.
4585 * @vport: Pointer to a vport object.
4586 *
4587 * Allocate a tracking object, mailbox command memory, get a mailbox
4588 * from the mailbox pool, copy the caller mailbox command.
4589 *
4590 * If offline and the sli is active we need to poll for the command (port is
4591 * being reset) and com-plete the job, otherwise issue the mailbox command and
4592 * let our completion handler finish the command.
4593 **/
4594 static int
4595 lpfc_bsg_issue_mbox(struct lpfc_hba *phba, struct fc_bsg_job *job,
4596 struct lpfc_vport *vport)
4597 {
4598 LPFC_MBOXQ_t *pmboxq = NULL; /* internal mailbox queue */
4599 MAILBOX_t *pmb; /* shortcut to the pmboxq mailbox */
4600 /* a 4k buffer to hold the mb and extended data from/to the bsg */
4601 uint8_t *pmbx = NULL;
4602 struct bsg_job_data *dd_data = NULL; /* bsg data tracking structure */
4603 struct lpfc_dmabuf *dmabuf = NULL;
4604 struct dfc_mbox_req *mbox_req;
4605 struct READ_EVENT_LOG_VAR *rdEventLog;
4606 uint32_t transmit_length, receive_length, mode;
4607 struct lpfc_mbx_sli4_config *sli4_config;
4608 struct lpfc_mbx_nembed_cmd *nembed_sge;
4609 struct mbox_header *header;
4610 struct ulp_bde64 *bde;
4611 uint8_t *ext = NULL;
4612 int rc = 0;
4613 uint8_t *from;
4614 uint32_t size;
4615
4616 /* in case no data is transferred */
4617 job->reply->reply_payload_rcv_len = 0;
4618
4619 /* sanity check to protect driver */
4620 if (job->reply_payload.payload_len > BSG_MBOX_SIZE ||
4621 job->request_payload.payload_len > BSG_MBOX_SIZE) {
4622 rc = -ERANGE;
4623 goto job_done;
4624 }
4625
4626 /*
4627 * Don't allow mailbox commands to be sent when blocked or when in
4628 * the middle of discovery
4629 */
4630 if (phba->sli.sli_flag & LPFC_BLOCK_MGMT_IO) {
4631 rc = -EAGAIN;
4632 goto job_done;
4633 }
4634
4635 mbox_req =
4636 (struct dfc_mbox_req *)job->request->rqst_data.h_vendor.vendor_cmd;
4637
4638 /* check if requested extended data lengths are valid */
4639 if ((mbox_req->inExtWLen > BSG_MBOX_SIZE/sizeof(uint32_t)) ||
4640 (mbox_req->outExtWLen > BSG_MBOX_SIZE/sizeof(uint32_t))) {
4641 rc = -ERANGE;
4642 goto job_done;
4643 }
4644
4645 dmabuf = lpfc_bsg_dma_page_alloc(phba);
4646 if (!dmabuf || !dmabuf->virt) {
4647 rc = -ENOMEM;
4648 goto job_done;
4649 }
4650
4651 /* Get the mailbox command or external buffer from BSG */
4652 pmbx = (uint8_t *)dmabuf->virt;
4653 size = job->request_payload.payload_len;
4654 sg_copy_to_buffer(job->request_payload.sg_list,
4655 job->request_payload.sg_cnt, pmbx, size);
4656
4657 /* Handle possible SLI_CONFIG with non-embedded payloads */
4658 if (phba->sli_rev == LPFC_SLI_REV4) {
4659 rc = lpfc_bsg_handle_sli_cfg_ext(phba, job, dmabuf);
4660 if (rc == SLI_CONFIG_HANDLED)
4661 goto job_cont;
4662 if (rc)
4663 goto job_done;
4664 /* SLI_CONFIG_NOT_HANDLED for other mailbox commands */
4665 }
4666
4667 rc = lpfc_bsg_check_cmd_access(phba, (MAILBOX_t *)pmbx, vport);
4668 if (rc != 0)
4669 goto job_done; /* must be negative */
4670
4671 /* allocate our bsg tracking structure */
4672 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
4673 if (!dd_data) {
4674 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
4675 "2727 Failed allocation of dd_data\n");
4676 rc = -ENOMEM;
4677 goto job_done;
4678 }
4679
4680 pmboxq = mempool_alloc(phba->mbox_mem_pool, GFP_KERNEL);
4681 if (!pmboxq) {
4682 rc = -ENOMEM;
4683 goto job_done;
4684 }
4685 memset(pmboxq, 0, sizeof(LPFC_MBOXQ_t));
4686
4687 pmb = &pmboxq->u.mb;
4688 memcpy(pmb, pmbx, sizeof(*pmb));
4689 pmb->mbxOwner = OWN_HOST;
4690 pmboxq->vport = vport;
4691
4692 /* If HBA encountered an error attention, allow only DUMP
4693 * or RESTART mailbox commands until the HBA is restarted.
4694 */
4695 if (phba->pport->stopped &&
4696 pmb->mbxCommand != MBX_DUMP_MEMORY &&
4697 pmb->mbxCommand != MBX_RESTART &&
4698 pmb->mbxCommand != MBX_WRITE_VPARMS &&
4699 pmb->mbxCommand != MBX_WRITE_WWN)
4700 lpfc_printf_log(phba, KERN_WARNING, LOG_MBOX,
4701 "2797 mbox: Issued mailbox cmd "
4702 "0x%x while in stopped state.\n",
4703 pmb->mbxCommand);
4704
4705 /* extended mailbox commands will need an extended buffer */
4706 if (mbox_req->inExtWLen || mbox_req->outExtWLen) {
4707 from = pmbx;
4708 ext = from + sizeof(MAILBOX_t);
4709 pmboxq->context2 = ext;
4710 pmboxq->in_ext_byte_len =
4711 mbox_req->inExtWLen * sizeof(uint32_t);
4712 pmboxq->out_ext_byte_len =
4713 mbox_req->outExtWLen * sizeof(uint32_t);
4714 pmboxq->mbox_offset_word = mbox_req->mbOffset;
4715 }
4716
4717 /* biu diag will need a kernel buffer to transfer the data
4718 * allocate our own buffer and setup the mailbox command to
4719 * use ours
4720 */
4721 if (pmb->mbxCommand == MBX_RUN_BIU_DIAG64) {
4722 transmit_length = pmb->un.varWords[1];
4723 receive_length = pmb->un.varWords[4];
4724 /* transmit length cannot be greater than receive length or
4725 * mailbox extension size
4726 */
4727 if ((transmit_length > receive_length) ||
4728 (transmit_length > BSG_MBOX_SIZE - sizeof(MAILBOX_t))) {
4729 rc = -ERANGE;
4730 goto job_done;
4731 }
4732 pmb->un.varBIUdiag.un.s2.xmit_bde64.addrHigh =
4733 putPaddrHigh(dmabuf->phys + sizeof(MAILBOX_t));
4734 pmb->un.varBIUdiag.un.s2.xmit_bde64.addrLow =
4735 putPaddrLow(dmabuf->phys + sizeof(MAILBOX_t));
4736
4737 pmb->un.varBIUdiag.un.s2.rcv_bde64.addrHigh =
4738 putPaddrHigh(dmabuf->phys + sizeof(MAILBOX_t)
4739 + pmb->un.varBIUdiag.un.s2.xmit_bde64.tus.f.bdeSize);
4740 pmb->un.varBIUdiag.un.s2.rcv_bde64.addrLow =
4741 putPaddrLow(dmabuf->phys + sizeof(MAILBOX_t)
4742 + pmb->un.varBIUdiag.un.s2.xmit_bde64.tus.f.bdeSize);
4743 } else if (pmb->mbxCommand == MBX_READ_EVENT_LOG) {
4744 rdEventLog = &pmb->un.varRdEventLog;
4745 receive_length = rdEventLog->rcv_bde64.tus.f.bdeSize;
4746 mode = bf_get(lpfc_event_log, rdEventLog);
4747
4748 /* receive length cannot be greater than mailbox
4749 * extension size
4750 */
4751 if (receive_length > BSG_MBOX_SIZE - sizeof(MAILBOX_t)) {
4752 rc = -ERANGE;
4753 goto job_done;
4754 }
4755
4756 /* mode zero uses a bde like biu diags command */
4757 if (mode == 0) {
4758 pmb->un.varWords[3] = putPaddrLow(dmabuf->phys
4759 + sizeof(MAILBOX_t));
4760 pmb->un.varWords[4] = putPaddrHigh(dmabuf->phys
4761 + sizeof(MAILBOX_t));
4762 }
4763 } else if (phba->sli_rev == LPFC_SLI_REV4) {
4764 /* Let type 4 (well known data) through because the data is
4765 * returned in varwords[4-8]
4766 * otherwise check the recieve length and fetch the buffer addr
4767 */
4768 if ((pmb->mbxCommand == MBX_DUMP_MEMORY) &&
4769 (pmb->un.varDmp.type != DMP_WELL_KNOWN)) {
4770 /* rebuild the command for sli4 using our own buffers
4771 * like we do for biu diags
4772 */
4773 receive_length = pmb->un.varWords[2];
4774 /* receive length cannot be greater than mailbox
4775 * extension size
4776 */
4777 if (receive_length == 0) {
4778 rc = -ERANGE;
4779 goto job_done;
4780 }
4781 pmb->un.varWords[3] = putPaddrLow(dmabuf->phys
4782 + sizeof(MAILBOX_t));
4783 pmb->un.varWords[4] = putPaddrHigh(dmabuf->phys
4784 + sizeof(MAILBOX_t));
4785 } else if ((pmb->mbxCommand == MBX_UPDATE_CFG) &&
4786 pmb->un.varUpdateCfg.co) {
4787 bde = (struct ulp_bde64 *)&pmb->un.varWords[4];
4788
4789 /* bde size cannot be greater than mailbox ext size */
4790 if (bde->tus.f.bdeSize >
4791 BSG_MBOX_SIZE - sizeof(MAILBOX_t)) {
4792 rc = -ERANGE;
4793 goto job_done;
4794 }
4795 bde->addrHigh = putPaddrHigh(dmabuf->phys
4796 + sizeof(MAILBOX_t));
4797 bde->addrLow = putPaddrLow(dmabuf->phys
4798 + sizeof(MAILBOX_t));
4799 } else if (pmb->mbxCommand == MBX_SLI4_CONFIG) {
4800 /* Handling non-embedded SLI_CONFIG mailbox command */
4801 sli4_config = &pmboxq->u.mqe.un.sli4_config;
4802 if (!bf_get(lpfc_mbox_hdr_emb,
4803 &sli4_config->header.cfg_mhdr)) {
4804 /* rebuild the command for sli4 using our
4805 * own buffers like we do for biu diags
4806 */
4807 header = (struct mbox_header *)
4808 &pmb->un.varWords[0];
4809 nembed_sge = (struct lpfc_mbx_nembed_cmd *)
4810 &pmb->un.varWords[0];
4811 receive_length = nembed_sge->sge[0].length;
4812
4813 /* receive length cannot be greater than
4814 * mailbox extension size
4815 */
4816 if ((receive_length == 0) ||
4817 (receive_length >
4818 BSG_MBOX_SIZE - sizeof(MAILBOX_t))) {
4819 rc = -ERANGE;
4820 goto job_done;
4821 }
4822
4823 nembed_sge->sge[0].pa_hi =
4824 putPaddrHigh(dmabuf->phys
4825 + sizeof(MAILBOX_t));
4826 nembed_sge->sge[0].pa_lo =
4827 putPaddrLow(dmabuf->phys
4828 + sizeof(MAILBOX_t));
4829 }
4830 }
4831 }
4832
4833 dd_data->context_un.mbox.dmabuffers = dmabuf;
4834
4835 /* setup wake call as IOCB callback */
4836 pmboxq->mbox_cmpl = lpfc_bsg_issue_mbox_cmpl;
4837
4838 /* setup context field to pass wait_queue pointer to wake function */
4839 pmboxq->context1 = dd_data;
4840 dd_data->type = TYPE_MBOX;
4841 dd_data->set_job = job;
4842 dd_data->context_un.mbox.pmboxq = pmboxq;
4843 dd_data->context_un.mbox.mb = (MAILBOX_t *)pmbx;
4844 dd_data->context_un.mbox.ext = ext;
4845 dd_data->context_un.mbox.mbOffset = mbox_req->mbOffset;
4846 dd_data->context_un.mbox.inExtWLen = mbox_req->inExtWLen;
4847 dd_data->context_un.mbox.outExtWLen = mbox_req->outExtWLen;
4848 job->dd_data = dd_data;
4849
4850 if ((vport->fc_flag & FC_OFFLINE_MODE) ||
4851 (!(phba->sli.sli_flag & LPFC_SLI_ACTIVE))) {
4852 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_POLL);
4853 if (rc != MBX_SUCCESS) {
4854 rc = (rc == MBX_TIMEOUT) ? -ETIME : -ENODEV;
4855 goto job_done;
4856 }
4857
4858 /* job finished, copy the data */
4859 memcpy(pmbx, pmb, sizeof(*pmb));
4860 job->reply->reply_payload_rcv_len =
4861 sg_copy_from_buffer(job->reply_payload.sg_list,
4862 job->reply_payload.sg_cnt,
4863 pmbx, size);
4864 /* not waiting mbox already done */
4865 rc = 0;
4866 goto job_done;
4867 }
4868
4869 rc = lpfc_sli_issue_mbox(phba, pmboxq, MBX_NOWAIT);
4870 if ((rc == MBX_SUCCESS) || (rc == MBX_BUSY))
4871 return 1; /* job started */
4872
4873 job_done:
4874 /* common exit for error or job completed inline */
4875 if (pmboxq)
4876 mempool_free(pmboxq, phba->mbox_mem_pool);
4877 lpfc_bsg_dma_page_free(phba, dmabuf);
4878 kfree(dd_data);
4879
4880 job_cont:
4881 return rc;
4882 }
4883
4884 /**
4885 * lpfc_bsg_mbox_cmd - process an fc bsg LPFC_BSG_VENDOR_MBOX command
4886 * @job: MBOX fc_bsg_job for LPFC_BSG_VENDOR_MBOX.
4887 **/
4888 static int
4889 lpfc_bsg_mbox_cmd(struct fc_bsg_job *job)
4890 {
4891 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
4892 struct lpfc_hba *phba = vport->phba;
4893 struct dfc_mbox_req *mbox_req;
4894 int rc = 0;
4895
4896 /* mix-and-match backward compatibility */
4897 job->reply->reply_payload_rcv_len = 0;
4898 if (job->request_len <
4899 sizeof(struct fc_bsg_request) + sizeof(struct dfc_mbox_req)) {
4900 lpfc_printf_log(phba, KERN_INFO, LOG_LIBDFC,
4901 "2737 Mix-and-match backward compatibility "
4902 "between MBOX_REQ old size:%d and "
4903 "new request size:%d\n",
4904 (int)(job->request_len -
4905 sizeof(struct fc_bsg_request)),
4906 (int)sizeof(struct dfc_mbox_req));
4907 mbox_req = (struct dfc_mbox_req *)
4908 job->request->rqst_data.h_vendor.vendor_cmd;
4909 mbox_req->extMboxTag = 0;
4910 mbox_req->extSeqNum = 0;
4911 }
4912
4913 rc = lpfc_bsg_issue_mbox(phba, job, vport);
4914
4915 if (rc == 0) {
4916 /* job done */
4917 job->reply->result = 0;
4918 job->dd_data = NULL;
4919 job->job_done(job);
4920 } else if (rc == 1)
4921 /* job submitted, will complete later*/
4922 rc = 0; /* return zero, no error */
4923 else {
4924 /* some error occurred */
4925 job->reply->result = rc;
4926 job->dd_data = NULL;
4927 }
4928
4929 return rc;
4930 }
4931
4932 /**
4933 * lpfc_bsg_menlo_cmd_cmp - lpfc_menlo_cmd completion handler
4934 * @phba: Pointer to HBA context object.
4935 * @cmdiocbq: Pointer to command iocb.
4936 * @rspiocbq: Pointer to response iocb.
4937 *
4938 * This function is the completion handler for iocbs issued using
4939 * lpfc_menlo_cmd function. This function is called by the
4940 * ring event handler function without any lock held. This function
4941 * can be called from both worker thread context and interrupt
4942 * context. This function also can be called from another thread which
4943 * cleans up the SLI layer objects.
4944 * This function copies the contents of the response iocb to the
4945 * response iocb memory object provided by the caller of
4946 * lpfc_sli_issue_iocb_wait and then wakes up the thread which
4947 * sleeps for the iocb completion.
4948 **/
4949 static void
4950 lpfc_bsg_menlo_cmd_cmp(struct lpfc_hba *phba,
4951 struct lpfc_iocbq *cmdiocbq,
4952 struct lpfc_iocbq *rspiocbq)
4953 {
4954 struct bsg_job_data *dd_data;
4955 struct fc_bsg_job *job;
4956 IOCB_t *rsp;
4957 struct lpfc_dmabuf *bmp, *cmp, *rmp;
4958 struct lpfc_bsg_menlo *menlo;
4959 unsigned long flags;
4960 struct menlo_response *menlo_resp;
4961 unsigned int rsp_size;
4962 int rc = 0;
4963
4964 dd_data = cmdiocbq->context1;
4965 cmp = cmdiocbq->context2;
4966 bmp = cmdiocbq->context3;
4967 menlo = &dd_data->context_un.menlo;
4968 rmp = menlo->rmp;
4969 rsp = &rspiocbq->iocb;
4970
4971 /* Determine if job has been aborted */
4972 spin_lock_irqsave(&phba->ct_ev_lock, flags);
4973 job = dd_data->set_job;
4974 if (job) {
4975 /* Prevent timeout handling from trying to abort job */
4976 job->dd_data = NULL;
4977 }
4978 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
4979
4980 /* Copy the job data or set the failing status for the job */
4981
4982 if (job) {
4983 /* always return the xri, this would be used in the case
4984 * of a menlo download to allow the data to be sent as a
4985 * continuation of the exchange.
4986 */
4987
4988 menlo_resp = (struct menlo_response *)
4989 job->reply->reply_data.vendor_reply.vendor_rsp;
4990 menlo_resp->xri = rsp->ulpContext;
4991 if (rsp->ulpStatus) {
4992 if (rsp->ulpStatus == IOSTAT_LOCAL_REJECT) {
4993 switch (rsp->un.ulpWord[4] & IOERR_PARAM_MASK) {
4994 case IOERR_SEQUENCE_TIMEOUT:
4995 rc = -ETIMEDOUT;
4996 break;
4997 case IOERR_INVALID_RPI:
4998 rc = -EFAULT;
4999 break;
5000 default:
5001 rc = -EACCES;
5002 break;
5003 }
5004 } else {
5005 rc = -EACCES;
5006 }
5007 } else {
5008 rsp_size = rsp->un.genreq64.bdl.bdeSize;
5009 job->reply->reply_payload_rcv_len =
5010 lpfc_bsg_copy_data(rmp, &job->reply_payload,
5011 rsp_size, 0);
5012 }
5013
5014 }
5015
5016 lpfc_sli_release_iocbq(phba, cmdiocbq);
5017 lpfc_free_bsg_buffers(phba, cmp);
5018 lpfc_free_bsg_buffers(phba, rmp);
5019 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
5020 kfree(bmp);
5021 kfree(dd_data);
5022
5023 /* Complete the job if active */
5024
5025 if (job) {
5026 job->reply->result = rc;
5027 job->job_done(job);
5028 }
5029
5030 return;
5031 }
5032
5033 /**
5034 * lpfc_menlo_cmd - send an ioctl for menlo hardware
5035 * @job: fc_bsg_job to handle
5036 *
5037 * This function issues a gen request 64 CR ioctl for all menlo cmd requests,
5038 * all the command completions will return the xri for the command.
5039 * For menlo data requests a gen request 64 CX is used to continue the exchange
5040 * supplied in the menlo request header xri field.
5041 **/
5042 static int
5043 lpfc_menlo_cmd(struct fc_bsg_job *job)
5044 {
5045 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
5046 struct lpfc_hba *phba = vport->phba;
5047 struct lpfc_iocbq *cmdiocbq;
5048 IOCB_t *cmd;
5049 int rc = 0;
5050 struct menlo_command *menlo_cmd;
5051 struct menlo_response *menlo_resp;
5052 struct lpfc_dmabuf *bmp = NULL, *cmp = NULL, *rmp = NULL;
5053 int request_nseg;
5054 int reply_nseg;
5055 struct bsg_job_data *dd_data;
5056 struct ulp_bde64 *bpl = NULL;
5057
5058 /* in case no data is returned return just the return code */
5059 job->reply->reply_payload_rcv_len = 0;
5060
5061 if (job->request_len <
5062 sizeof(struct fc_bsg_request) +
5063 sizeof(struct menlo_command)) {
5064 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5065 "2784 Received MENLO_CMD request below "
5066 "minimum size\n");
5067 rc = -ERANGE;
5068 goto no_dd_data;
5069 }
5070
5071 if (job->reply_len <
5072 sizeof(struct fc_bsg_request) + sizeof(struct menlo_response)) {
5073 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5074 "2785 Received MENLO_CMD reply below "
5075 "minimum size\n");
5076 rc = -ERANGE;
5077 goto no_dd_data;
5078 }
5079
5080 if (!(phba->menlo_flag & HBA_MENLO_SUPPORT)) {
5081 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5082 "2786 Adapter does not support menlo "
5083 "commands\n");
5084 rc = -EPERM;
5085 goto no_dd_data;
5086 }
5087
5088 menlo_cmd = (struct menlo_command *)
5089 job->request->rqst_data.h_vendor.vendor_cmd;
5090
5091 menlo_resp = (struct menlo_response *)
5092 job->reply->reply_data.vendor_reply.vendor_rsp;
5093
5094 /* allocate our bsg tracking structure */
5095 dd_data = kmalloc(sizeof(struct bsg_job_data), GFP_KERNEL);
5096 if (!dd_data) {
5097 lpfc_printf_log(phba, KERN_WARNING, LOG_LIBDFC,
5098 "2787 Failed allocation of dd_data\n");
5099 rc = -ENOMEM;
5100 goto no_dd_data;
5101 }
5102
5103 bmp = kmalloc(sizeof(struct lpfc_dmabuf), GFP_KERNEL);
5104 if (!bmp) {
5105 rc = -ENOMEM;
5106 goto free_dd;
5107 }
5108
5109 bmp->virt = lpfc_mbuf_alloc(phba, 0, &bmp->phys);
5110 if (!bmp->virt) {
5111 rc = -ENOMEM;
5112 goto free_bmp;
5113 }
5114
5115 INIT_LIST_HEAD(&bmp->list);
5116
5117 bpl = (struct ulp_bde64 *)bmp->virt;
5118 request_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64);
5119 cmp = lpfc_alloc_bsg_buffers(phba, job->request_payload.payload_len,
5120 1, bpl, &request_nseg);
5121 if (!cmp) {
5122 rc = -ENOMEM;
5123 goto free_bmp;
5124 }
5125 lpfc_bsg_copy_data(cmp, &job->request_payload,
5126 job->request_payload.payload_len, 1);
5127
5128 bpl += request_nseg;
5129 reply_nseg = LPFC_BPL_SIZE/sizeof(struct ulp_bde64) - request_nseg;
5130 rmp = lpfc_alloc_bsg_buffers(phba, job->reply_payload.payload_len, 0,
5131 bpl, &reply_nseg);
5132 if (!rmp) {
5133 rc = -ENOMEM;
5134 goto free_cmp;
5135 }
5136
5137 cmdiocbq = lpfc_sli_get_iocbq(phba);
5138 if (!cmdiocbq) {
5139 rc = -ENOMEM;
5140 goto free_rmp;
5141 }
5142
5143 cmd = &cmdiocbq->iocb;
5144 cmd->un.genreq64.bdl.ulpIoTag32 = 0;
5145 cmd->un.genreq64.bdl.addrHigh = putPaddrHigh(bmp->phys);
5146 cmd->un.genreq64.bdl.addrLow = putPaddrLow(bmp->phys);
5147 cmd->un.genreq64.bdl.bdeFlags = BUFF_TYPE_BLP_64;
5148 cmd->un.genreq64.bdl.bdeSize =
5149 (request_nseg + reply_nseg) * sizeof(struct ulp_bde64);
5150 cmd->un.genreq64.w5.hcsw.Fctl = (SI | LA);
5151 cmd->un.genreq64.w5.hcsw.Dfctl = 0;
5152 cmd->un.genreq64.w5.hcsw.Rctl = FC_RCTL_DD_UNSOL_CMD;
5153 cmd->un.genreq64.w5.hcsw.Type = MENLO_TRANSPORT_TYPE; /* 0xfe */
5154 cmd->ulpBdeCount = 1;
5155 cmd->ulpClass = CLASS3;
5156 cmd->ulpOwner = OWN_CHIP;
5157 cmd->ulpLe = 1; /* Limited Edition */
5158 cmdiocbq->iocb_flag |= LPFC_IO_LIBDFC;
5159 cmdiocbq->vport = phba->pport;
5160 /* We want the firmware to timeout before we do */
5161 cmd->ulpTimeout = MENLO_TIMEOUT - 5;
5162 cmdiocbq->iocb_cmpl = lpfc_bsg_menlo_cmd_cmp;
5163 cmdiocbq->context1 = dd_data;
5164 cmdiocbq->context2 = cmp;
5165 cmdiocbq->context3 = bmp;
5166 if (menlo_cmd->cmd == LPFC_BSG_VENDOR_MENLO_CMD) {
5167 cmd->ulpCommand = CMD_GEN_REQUEST64_CR;
5168 cmd->ulpPU = MENLO_PU; /* 3 */
5169 cmd->un.ulpWord[4] = MENLO_DID; /* 0x0000FC0E */
5170 cmd->ulpContext = MENLO_CONTEXT; /* 0 */
5171 } else {
5172 cmd->ulpCommand = CMD_GEN_REQUEST64_CX;
5173 cmd->ulpPU = 1;
5174 cmd->un.ulpWord[4] = 0;
5175 cmd->ulpContext = menlo_cmd->xri;
5176 }
5177
5178 dd_data->type = TYPE_MENLO;
5179 dd_data->set_job = job;
5180 dd_data->context_un.menlo.cmdiocbq = cmdiocbq;
5181 dd_data->context_un.menlo.rmp = rmp;
5182 job->dd_data = dd_data;
5183
5184 rc = lpfc_sli_issue_iocb(phba, LPFC_ELS_RING, cmdiocbq,
5185 MENLO_TIMEOUT - 5);
5186 if (rc == IOCB_SUCCESS)
5187 return 0; /* done for now */
5188
5189 lpfc_sli_release_iocbq(phba, cmdiocbq);
5190
5191 free_rmp:
5192 lpfc_free_bsg_buffers(phba, rmp);
5193 free_cmp:
5194 lpfc_free_bsg_buffers(phba, cmp);
5195 free_bmp:
5196 if (bmp->virt)
5197 lpfc_mbuf_free(phba, bmp->virt, bmp->phys);
5198 kfree(bmp);
5199 free_dd:
5200 kfree(dd_data);
5201 no_dd_data:
5202 /* make error code available to userspace */
5203 job->reply->result = rc;
5204 job->dd_data = NULL;
5205 return rc;
5206 }
5207
5208 /**
5209 * lpfc_bsg_hst_vendor - process a vendor-specific fc_bsg_job
5210 * @job: fc_bsg_job to handle
5211 **/
5212 static int
5213 lpfc_bsg_hst_vendor(struct fc_bsg_job *job)
5214 {
5215 int command = job->request->rqst_data.h_vendor.vendor_cmd[0];
5216 int rc;
5217
5218 switch (command) {
5219 case LPFC_BSG_VENDOR_SET_CT_EVENT:
5220 rc = lpfc_bsg_hba_set_event(job);
5221 break;
5222 case LPFC_BSG_VENDOR_GET_CT_EVENT:
5223 rc = lpfc_bsg_hba_get_event(job);
5224 break;
5225 case LPFC_BSG_VENDOR_SEND_MGMT_RESP:
5226 rc = lpfc_bsg_send_mgmt_rsp(job);
5227 break;
5228 case LPFC_BSG_VENDOR_DIAG_MODE:
5229 rc = lpfc_bsg_diag_loopback_mode(job);
5230 break;
5231 case LPFC_BSG_VENDOR_DIAG_MODE_END:
5232 rc = lpfc_sli4_bsg_diag_mode_end(job);
5233 break;
5234 case LPFC_BSG_VENDOR_DIAG_RUN_LOOPBACK:
5235 rc = lpfc_bsg_diag_loopback_run(job);
5236 break;
5237 case LPFC_BSG_VENDOR_LINK_DIAG_TEST:
5238 rc = lpfc_sli4_bsg_link_diag_test(job);
5239 break;
5240 case LPFC_BSG_VENDOR_GET_MGMT_REV:
5241 rc = lpfc_bsg_get_dfc_rev(job);
5242 break;
5243 case LPFC_BSG_VENDOR_MBOX:
5244 rc = lpfc_bsg_mbox_cmd(job);
5245 break;
5246 case LPFC_BSG_VENDOR_MENLO_CMD:
5247 case LPFC_BSG_VENDOR_MENLO_DATA:
5248 rc = lpfc_menlo_cmd(job);
5249 break;
5250 default:
5251 rc = -EINVAL;
5252 job->reply->reply_payload_rcv_len = 0;
5253 /* make error code available to userspace */
5254 job->reply->result = rc;
5255 break;
5256 }
5257
5258 return rc;
5259 }
5260
5261 /**
5262 * lpfc_bsg_request - handle a bsg request from the FC transport
5263 * @job: fc_bsg_job to handle
5264 **/
5265 int
5266 lpfc_bsg_request(struct fc_bsg_job *job)
5267 {
5268 uint32_t msgcode;
5269 int rc;
5270
5271 msgcode = job->request->msgcode;
5272 switch (msgcode) {
5273 case FC_BSG_HST_VENDOR:
5274 rc = lpfc_bsg_hst_vendor(job);
5275 break;
5276 case FC_BSG_RPT_ELS:
5277 rc = lpfc_bsg_rport_els(job);
5278 break;
5279 case FC_BSG_RPT_CT:
5280 rc = lpfc_bsg_send_mgmt_cmd(job);
5281 break;
5282 default:
5283 rc = -EINVAL;
5284 job->reply->reply_payload_rcv_len = 0;
5285 /* make error code available to userspace */
5286 job->reply->result = rc;
5287 break;
5288 }
5289
5290 return rc;
5291 }
5292
5293 /**
5294 * lpfc_bsg_timeout - handle timeout of a bsg request from the FC transport
5295 * @job: fc_bsg_job that has timed out
5296 *
5297 * This function just aborts the job's IOCB. The aborted IOCB will return to
5298 * the waiting function which will handle passing the error back to userspace
5299 **/
5300 int
5301 lpfc_bsg_timeout(struct fc_bsg_job *job)
5302 {
5303 struct lpfc_vport *vport = (struct lpfc_vport *)job->shost->hostdata;
5304 struct lpfc_hba *phba = vport->phba;
5305 struct lpfc_iocbq *cmdiocb;
5306 struct lpfc_sli_ring *pring = &phba->sli.ring[LPFC_ELS_RING];
5307 struct bsg_job_data *dd_data;
5308 unsigned long flags;
5309 int rc = 0;
5310 LIST_HEAD(completions);
5311 struct lpfc_iocbq *check_iocb, *next_iocb;
5312
5313 /* if job's driver data is NULL, the command completed or is in the
5314 * the process of completing. In this case, return status to request
5315 * so the timeout is retried. This avoids double completion issues
5316 * and the request will be pulled off the timer queue when the
5317 * command's completion handler executes. Otherwise, prevent the
5318 * command's completion handler from executing the job done callback
5319 * and continue processing to abort the outstanding the command.
5320 */
5321
5322 spin_lock_irqsave(&phba->ct_ev_lock, flags);
5323 dd_data = (struct bsg_job_data *)job->dd_data;
5324 if (dd_data) {
5325 dd_data->set_job = NULL;
5326 job->dd_data = NULL;
5327 } else {
5328 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5329 return -EAGAIN;
5330 }
5331
5332 switch (dd_data->type) {
5333 case TYPE_IOCB:
5334 /* Check to see if IOCB was issued to the port or not. If not,
5335 * remove it from the txq queue and call cancel iocbs.
5336 * Otherwise, call abort iotag
5337 */
5338 cmdiocb = dd_data->context_un.iocb.cmdiocbq;
5339 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5340
5341 spin_lock_irqsave(&phba->hbalock, flags);
5342 /* make sure the I/O abort window is still open */
5343 if (!(cmdiocb->iocb_flag & LPFC_IO_CMD_OUTSTANDING)) {
5344 spin_unlock_irqrestore(&phba->hbalock, flags);
5345 return -EAGAIN;
5346 }
5347 list_for_each_entry_safe(check_iocb, next_iocb, &pring->txq,
5348 list) {
5349 if (check_iocb == cmdiocb) {
5350 list_move_tail(&check_iocb->list, &completions);
5351 break;
5352 }
5353 }
5354 if (list_empty(&completions))
5355 lpfc_sli_issue_abort_iotag(phba, pring, cmdiocb);
5356 spin_unlock_irqrestore(&phba->hbalock, flags);
5357 if (!list_empty(&completions)) {
5358 lpfc_sli_cancel_iocbs(phba, &completions,
5359 IOSTAT_LOCAL_REJECT,
5360 IOERR_SLI_ABORTED);
5361 }
5362 break;
5363
5364 case TYPE_EVT:
5365 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5366 break;
5367
5368 case TYPE_MBOX:
5369 /* Update the ext buf ctx state if needed */
5370
5371 if (phba->mbox_ext_buf_ctx.state == LPFC_BSG_MBOX_PORT)
5372 phba->mbox_ext_buf_ctx.state = LPFC_BSG_MBOX_ABTS;
5373 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5374 break;
5375 case TYPE_MENLO:
5376 /* Check to see if IOCB was issued to the port or not. If not,
5377 * remove it from the txq queue and call cancel iocbs.
5378 * Otherwise, call abort iotag.
5379 */
5380 cmdiocb = dd_data->context_un.menlo.cmdiocbq;
5381 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5382
5383 spin_lock_irqsave(&phba->hbalock, flags);
5384 list_for_each_entry_safe(check_iocb, next_iocb, &pring->txq,
5385 list) {
5386 if (check_iocb == cmdiocb) {
5387 list_move_tail(&check_iocb->list, &completions);
5388 break;
5389 }
5390 }
5391 if (list_empty(&completions))
5392 lpfc_sli_issue_abort_iotag(phba, pring, cmdiocb);
5393 spin_unlock_irqrestore(&phba->hbalock, flags);
5394 if (!list_empty(&completions)) {
5395 lpfc_sli_cancel_iocbs(phba, &completions,
5396 IOSTAT_LOCAL_REJECT,
5397 IOERR_SLI_ABORTED);
5398 }
5399 break;
5400 default:
5401 spin_unlock_irqrestore(&phba->ct_ev_lock, flags);
5402 break;
5403 }
5404
5405 /* scsi transport fc fc_bsg_job_timeout expects a zero return code,
5406 * otherwise an error message will be displayed on the console
5407 * so always return success (zero)
5408 */
5409 return rc;
5410 }
Linux with added FPC-III support