drivers/scsi/mpt3sas/mpt3sas_ctl.c

   1 /*
   2  * Management Module Support for MPT (Message Passing Technology) based
   3  * controllers
   4  *
   5  * This code is based on drivers/scsi/mpt3sas/mpt3sas_ctl.c
   6  * Copyright (C) 2012-2014  LSI Corporation
   7  *  (mailto:DL-MPTFusionLinux@lsi.com)
   8  *
   9  * This program is free software; you can redistribute it and/or
  10  * modify it under the terms of the GNU General Public License
  11  * as published by the Free Software Foundation; either version 2
  12  * of the License, or (at your option) any later version.
  13  *
  14  * This program is distributed in the hope that it will be useful,
  15  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  16  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17  * GNU General Public License for more details.
  18  *
  19  * NO WARRANTY
  20  * THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR
  21  * CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT
  22  * LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT,
  23  * MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is
  24  * solely responsible for determining the appropriateness of using and
  25  * distributing the Program and assumes all risks associated with its
  26  * exercise of rights under this Agreement, including but not limited to
  27  * the risks and costs of program errors, damage to or loss of data,
  28  * programs or equipment, and unavailability or interruption of operations.
  29
  30  * DISCLAIMER OF LIABILITY
  31  * NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY
  32  * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  33  * DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND
  34  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
  35  * TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
  36  * USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED
  37  * HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES
  38
  39  * You should have received a copy of the GNU General Public License
  40  * along with this program; if not, write to the Free Software
  41  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301,
  42  * USA.
  43  */
  44
  45 #include <linux/kernel.h>
  46 #include <linux/module.h>
  47 #include <linux/errno.h>
  48 #include <linux/init.h>
  49 #include <linux/slab.h>
  50 #include <linux/types.h>
  51 #include <linux/pci.h>
  52 #include <linux/delay.h>
  53 #include <linux/compat.h>
  54 #include <linux/poll.h>
  55
  56 #include <linux/io.h>
  57 #include <linux/uaccess.h>
  58
  59 #include "mpt3sas_base.h"
  60 #include "mpt3sas_ctl.h"
  61
  62
  63 static struct fasync_struct *async_queue;
  64 static DECLARE_WAIT_QUEUE_HEAD(ctl_poll_wait);
  65
  66
  67 /**
  68  * enum block_state - blocking state
  69  * @NON_BLOCKING: non blocking
  70  * @BLOCKING: blocking
  71  *
  72  * These states are for ioctls that need to wait for a response
  73  * from firmware, so they probably require sleep.
  74  */
  75 enum block_state {
  76         NON_BLOCKING,
  77         BLOCKING,
  78 };
  79
  80 #ifdef CONFIG_SCSI_MPT3SAS_LOGGING
  81 /**
  82  * _ctl_sas_device_find_by_handle - sas device search
  83  * @ioc: per adapter object
  84  * @handle: sas device handle (assigned by firmware)
  85  * Context: Calling function should acquire ioc->sas_device_lock
  86  *
  87  * This searches for sas_device based on sas_address, then return sas_device
  88  * object.
  89  */
  90 static struct _sas_device *
  91 _ctl_sas_device_find_by_handle(struct MPT3SAS_ADAPTER *ioc, u16 handle)
  92 {
  93         struct _sas_device *sas_device, *r;
  94
  95         r = NULL;
  96         list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
  97                 if (sas_device->handle != handle)
  98                         continue;
  99                 r = sas_device;
 100                 goto out;
 101         }
 102
 103  out:
 104         return r;
 105 }
 106
 107 /**
 108  * _ctl_display_some_debug - debug routine
 109  * @ioc: per adapter object
 110  * @smid: system request message index
 111  * @calling_function_name: string pass from calling function
 112  * @mpi_reply: reply message frame
 113  * Context: none.
 114  *
 115  * Function for displaying debug info helpful when debugging issues
 116  * in this module.
 117  */
 118 static void
 119 _ctl_display_some_debug(struct MPT3SAS_ADAPTER *ioc, u16 smid,
 120         char *calling_function_name, MPI2DefaultReply_t *mpi_reply)
 121 {
 122         Mpi2ConfigRequest_t *mpi_request;
 123         char *desc = NULL;
 124
 125         if (!(ioc->logging_level & MPT_DEBUG_IOCTL))
 126                 return;
 127
 128         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
 129         switch (mpi_request->Function) {
 130         case MPI2_FUNCTION_SCSI_IO_REQUEST:
 131         {
 132                 Mpi2SCSIIORequest_t *scsi_request =
 133                     (Mpi2SCSIIORequest_t *)mpi_request;
 134
 135                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
 136                     "scsi_io, cmd(0x%02x), cdb_len(%d)",
 137                     scsi_request->CDB.CDB32[0],
 138                     le16_to_cpu(scsi_request->IoFlags) & 0xF);
 139                 desc = ioc->tmp_string;
 140                 break;
 141         }
 142         case MPI2_FUNCTION_SCSI_TASK_MGMT:
 143                 desc = "task_mgmt";
 144                 break;
 145         case MPI2_FUNCTION_IOC_INIT:
 146                 desc = "ioc_init";
 147                 break;
 148         case MPI2_FUNCTION_IOC_FACTS:
 149                 desc = "ioc_facts";
 150                 break;
 151         case MPI2_FUNCTION_CONFIG:
 152         {
 153                 Mpi2ConfigRequest_t *config_request =
 154                     (Mpi2ConfigRequest_t *)mpi_request;
 155
 156                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
 157                     "config, type(0x%02x), ext_type(0x%02x), number(%d)",
 158                     (config_request->Header.PageType &
 159                      MPI2_CONFIG_PAGETYPE_MASK), config_request->ExtPageType,
 160                     config_request->Header.PageNumber);
 161                 desc = ioc->tmp_string;
 162                 break;
 163         }
 164         case MPI2_FUNCTION_PORT_FACTS:
 165                 desc = "port_facts";
 166                 break;
 167         case MPI2_FUNCTION_PORT_ENABLE:
 168                 desc = "port_enable";
 169                 break;
 170         case MPI2_FUNCTION_EVENT_NOTIFICATION:
 171                 desc = "event_notification";
 172                 break;
 173         case MPI2_FUNCTION_FW_DOWNLOAD:
 174                 desc = "fw_download";
 175                 break;
 176         case MPI2_FUNCTION_FW_UPLOAD:
 177                 desc = "fw_upload";
 178                 break;
 179         case MPI2_FUNCTION_RAID_ACTION:
 180                 desc = "raid_action";
 181                 break;
 182         case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
 183         {
 184                 Mpi2SCSIIORequest_t *scsi_request =
 185                     (Mpi2SCSIIORequest_t *)mpi_request;
 186
 187                 snprintf(ioc->tmp_string, MPT_STRING_LENGTH,
 188                     "raid_pass, cmd(0x%02x), cdb_len(%d)",
 189                     scsi_request->CDB.CDB32[0],
 190                     le16_to_cpu(scsi_request->IoFlags) & 0xF);
 191                 desc = ioc->tmp_string;
 192                 break;
 193         }
 194         case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
 195                 desc = "sas_iounit_cntl";
 196                 break;
 197         case MPI2_FUNCTION_SATA_PASSTHROUGH:
 198                 desc = "sata_pass";
 199                 break;
 200         case MPI2_FUNCTION_DIAG_BUFFER_POST:
 201                 desc = "diag_buffer_post";
 202                 break;
 203         case MPI2_FUNCTION_DIAG_RELEASE:
 204                 desc = "diag_release";
 205                 break;
 206         case MPI2_FUNCTION_SMP_PASSTHROUGH:
 207                 desc = "smp_passthrough";
 208                 break;
 209         }
 210
 211         if (!desc)
 212                 return;
 213
 214         pr_info(MPT3SAS_FMT "%s: %s, smid(%d)\n",
 215             ioc->name, calling_function_name, desc, smid);
 216
 217         if (!mpi_reply)
 218                 return;
 219
 220         if (mpi_reply->IOCStatus || mpi_reply->IOCLogInfo)
 221                 pr_info(MPT3SAS_FMT
 222                     "\tiocstatus(0x%04x), loginfo(0x%08x)\n",
 223                     ioc->name, le16_to_cpu(mpi_reply->IOCStatus),
 224                     le32_to_cpu(mpi_reply->IOCLogInfo));
 225
 226         if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
 227             mpi_request->Function ==
 228             MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
 229                 Mpi2SCSIIOReply_t *scsi_reply =
 230                     (Mpi2SCSIIOReply_t *)mpi_reply;
 231                 struct _sas_device *sas_device = NULL;
 232                 unsigned long flags;
 233
 234                 spin_lock_irqsave(&ioc->sas_device_lock, flags);
 235                 sas_device = _ctl_sas_device_find_by_handle(ioc,
 236                     le16_to_cpu(scsi_reply->DevHandle));
 237                 if (sas_device) {
 238                         pr_warn(MPT3SAS_FMT "\tsas_address(0x%016llx), phy(%d)\n",
 239                                 ioc->name, (unsigned long long)
 240                             sas_device->sas_address, sas_device->phy);
 241                         pr_warn(MPT3SAS_FMT
 242                             "\tenclosure_logical_id(0x%016llx), slot(%d)\n",
 243                             ioc->name, (unsigned long long)
 244                             sas_device->enclosure_logical_id, sas_device->slot);
 245                 }
 246                 spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
 247                 if (scsi_reply->SCSIState || scsi_reply->SCSIStatus)
 248                         pr_info(MPT3SAS_FMT
 249                             "\tscsi_state(0x%02x), scsi_status"
 250                             "(0x%02x)\n", ioc->name,
 251                             scsi_reply->SCSIState,
 252                             scsi_reply->SCSIStatus);
 253         }
 254 }
 255
 256 #endif
 257
 258 /**
 259  * mpt3sas_ctl_done - ctl module completion routine
 260  * @ioc: per adapter object
 261  * @smid: system request message index
 262  * @msix_index: MSIX table index supplied by the OS
 263  * @reply: reply message frame(lower 32bit addr)
 264  * Context: none.
 265  *
 266  * The callback handler when using ioc->ctl_cb_idx.
 267  *
 268  * Return 1 meaning mf should be freed from _base_interrupt
 269  *        0 means the mf is freed from this function.
 270  */
 271 u8
 272 mpt3sas_ctl_done(struct MPT3SAS_ADAPTER *ioc, u16 smid, u8 msix_index,
 273         u32 reply)
 274 {
 275         MPI2DefaultReply_t *mpi_reply;
 276         Mpi2SCSIIOReply_t *scsiio_reply;
 277         const void *sense_data;
 278         u32 sz;
 279
 280         if (ioc->ctl_cmds.status == MPT3_CMD_NOT_USED)
 281                 return 1;
 282         if (ioc->ctl_cmds.smid != smid)
 283                 return 1;
 284         ioc->ctl_cmds.status |= MPT3_CMD_COMPLETE;
 285         mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
 286         if (mpi_reply) {
 287                 memcpy(ioc->ctl_cmds.reply, mpi_reply, mpi_reply->MsgLength*4);
 288                 ioc->ctl_cmds.status |= MPT3_CMD_REPLY_VALID;
 289                 /* get sense data */
 290                 if (mpi_reply->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
 291                     mpi_reply->Function ==
 292                     MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
 293                         scsiio_reply = (Mpi2SCSIIOReply_t *)mpi_reply;
 294                         if (scsiio_reply->SCSIState &
 295                             MPI2_SCSI_STATE_AUTOSENSE_VALID) {
 296                                 sz = min_t(u32, SCSI_SENSE_BUFFERSIZE,
 297                                     le32_to_cpu(scsiio_reply->SenseCount));
 298                                 sense_data = mpt3sas_base_get_sense_buffer(ioc,
 299                                     smid);
 300                                 memcpy(ioc->ctl_cmds.sense, sense_data, sz);
 301                         }
 302                 }
 303         }
 304 #ifdef CONFIG_SCSI_MPT3SAS_LOGGING
 305         _ctl_display_some_debug(ioc, smid, "ctl_done", mpi_reply);
 306 #endif
 307         ioc->ctl_cmds.status &= ~MPT3_CMD_PENDING;
 308         complete(&ioc->ctl_cmds.done);
 309         return 1;
 310 }
 311
 312 /**
 313  * _ctl_check_event_type - determines when an event needs logging
 314  * @ioc: per adapter object
 315  * @event: firmware event
 316  *
 317  * The bitmask in ioc->event_type[] indicates which events should be
 318  * be saved in the driver event_log.  This bitmask is set by application.
 319  *
 320  * Returns 1 when event should be captured, or zero means no match.
 321  */
 322 static int
 323 _ctl_check_event_type(struct MPT3SAS_ADAPTER *ioc, u16 event)
 324 {
 325         u16 i;
 326         u32 desired_event;
 327
 328         if (event >= 128 || !event || !ioc->event_log)
 329                 return 0;
 330
 331         desired_event = (1 << (event % 32));
 332         if (!desired_event)
 333                 desired_event = 1;
 334         i = event / 32;
 335         return desired_event & ioc->event_type[i];
 336 }
 337
 338 /**
 339  * mpt3sas_ctl_add_to_event_log - add event
 340  * @ioc: per adapter object
 341  * @mpi_reply: reply message frame
 342  *
 343  * Return nothing.
 344  */
 345 void
 346 mpt3sas_ctl_add_to_event_log(struct MPT3SAS_ADAPTER *ioc,
 347         Mpi2EventNotificationReply_t *mpi_reply)
 348 {
 349         struct MPT3_IOCTL_EVENTS *event_log;
 350         u16 event;
 351         int i;
 352         u32 sz, event_data_sz;
 353         u8 send_aen = 0;
 354
 355         if (!ioc->event_log)
 356                 return;
 357
 358         event = le16_to_cpu(mpi_reply->Event);
 359
 360         if (_ctl_check_event_type(ioc, event)) {
 361
 362                 /* insert entry into circular event_log */
 363                 i = ioc->event_context % MPT3SAS_CTL_EVENT_LOG_SIZE;
 364                 event_log = ioc->event_log;
 365                 event_log[i].event = event;
 366                 event_log[i].context = ioc->event_context++;
 367
 368                 event_data_sz = le16_to_cpu(mpi_reply->EventDataLength)*4;
 369                 sz = min_t(u32, event_data_sz, MPT3_EVENT_DATA_SIZE);
 370                 memset(event_log[i].data, 0, MPT3_EVENT_DATA_SIZE);
 371                 memcpy(event_log[i].data, mpi_reply->EventData, sz);
 372                 send_aen = 1;
 373         }
 374
 375         /* This aen_event_read_flag flag is set until the
 376          * application has read the event log.
 377          * For MPI2_EVENT_LOG_ENTRY_ADDED, we always notify.
 378          */
 379         if (event == MPI2_EVENT_LOG_ENTRY_ADDED ||
 380             (send_aen && !ioc->aen_event_read_flag)) {
 381                 ioc->aen_event_read_flag = 1;
 382                 wake_up_interruptible(&ctl_poll_wait);
 383                 if (async_queue)
 384                         kill_fasync(&async_queue, SIGIO, POLL_IN);
 385         }
 386 }
 387
 388 /**
 389  * mpt3sas_ctl_event_callback - firmware event handler (called at ISR time)
 390  * @ioc: per adapter object
 391  * @msix_index: MSIX table index supplied by the OS
 392  * @reply: reply message frame(lower 32bit addr)
 393  * Context: interrupt.
 394  *
 395  * This function merely adds a new work task into ioc->firmware_event_thread.
 396  * The tasks are worked from _firmware_event_work in user context.
 397  *
 398  * Return 1 meaning mf should be freed from _base_interrupt
 399  *        0 means the mf is freed from this function.
 400  */
 401 u8
 402 mpt3sas_ctl_event_callback(struct MPT3SAS_ADAPTER *ioc, u8 msix_index,
 403         u32 reply)
 404 {
 405         Mpi2EventNotificationReply_t *mpi_reply;
 406
 407         mpi_reply = mpt3sas_base_get_reply_virt_addr(ioc, reply);
 408         mpt3sas_ctl_add_to_event_log(ioc, mpi_reply);
 409         return 1;
 410 }
 411
 412 /**
 413  * _ctl_verify_adapter - validates ioc_number passed from application
 414  * @ioc: per adapter object
 415  * @iocpp: The ioc pointer is returned in this.
 416  *
 417  * Return (-1) means error, else ioc_number.
 418  */
 419 static int
 420 _ctl_verify_adapter(int ioc_number, struct MPT3SAS_ADAPTER **iocpp)
 421 {
 422         struct MPT3SAS_ADAPTER *ioc;
 423
 424         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
 425                 if (ioc->id != ioc_number)
 426                         continue;
 427                 *iocpp = ioc;
 428                 return ioc_number;
 429         }
 430         *iocpp = NULL;
 431         return -1;
 432 }
 433
 434 /**
 435  * mpt3sas_ctl_reset_handler - reset callback handler (for ctl)
 436  * @ioc: per adapter object
 437  * @reset_phase: phase
 438  *
 439  * The handler for doing any required cleanup or initialization.
 440  *
 441  * The reset phase can be MPT3_IOC_PRE_RESET, MPT3_IOC_AFTER_RESET,
 442  * MPT3_IOC_DONE_RESET
 443  */
 444 void
 445 mpt3sas_ctl_reset_handler(struct MPT3SAS_ADAPTER *ioc, int reset_phase)
 446 {
 447         int i;
 448         u8 issue_reset;
 449
 450         switch (reset_phase) {
 451         case MPT3_IOC_PRE_RESET:
 452                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
 453                         "%s: MPT3_IOC_PRE_RESET\n", ioc->name, __func__));
 454                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
 455                         if (!(ioc->diag_buffer_status[i] &
 456                             MPT3_DIAG_BUFFER_IS_REGISTERED))
 457                                 continue;
 458                         if ((ioc->diag_buffer_status[i] &
 459                             MPT3_DIAG_BUFFER_IS_RELEASED))
 460                                 continue;
 461                         mpt3sas_send_diag_release(ioc, i, &issue_reset);
 462                 }
 463                 break;
 464         case MPT3_IOC_AFTER_RESET:
 465                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
 466                         "%s: MPT3_IOC_AFTER_RESET\n", ioc->name, __func__));
 467                 if (ioc->ctl_cmds.status & MPT3_CMD_PENDING) {
 468                         ioc->ctl_cmds.status |= MPT3_CMD_RESET;
 469                         mpt3sas_base_free_smid(ioc, ioc->ctl_cmds.smid);
 470                         complete(&ioc->ctl_cmds.done);
 471                 }
 472                 break;
 473         case MPT3_IOC_DONE_RESET:
 474                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
 475                         "%s: MPT3_IOC_DONE_RESET\n", ioc->name, __func__));
 476
 477                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
 478                         if (!(ioc->diag_buffer_status[i] &
 479                             MPT3_DIAG_BUFFER_IS_REGISTERED))
 480                                 continue;
 481                         if ((ioc->diag_buffer_status[i] &
 482                             MPT3_DIAG_BUFFER_IS_RELEASED))
 483                                 continue;
 484                         ioc->diag_buffer_status[i] |=
 485                             MPT3_DIAG_BUFFER_IS_DIAG_RESET;
 486                 }
 487                 break;
 488         }
 489 }
 490
 491 /**
 492  * _ctl_fasync -
 493  * @fd -
 494  * @filep -
 495  * @mode -
 496  *
 497  * Called when application request fasyn callback handler.
 498  */
 499 static int
 500 _ctl_fasync(int fd, struct file *filep, int mode)
 501 {
 502         return fasync_helper(fd, filep, mode, &async_queue);
 503 }
 504
 505 /**
 506  * _ctl_poll -
 507  * @file -
 508  * @wait -
 509  *
 510  */
 511 static unsigned int
 512 _ctl_poll(struct file *filep, poll_table *wait)
 513 {
 514         struct MPT3SAS_ADAPTER *ioc;
 515
 516         poll_wait(filep, &ctl_poll_wait, wait);
 517
 518         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
 519                 if (ioc->aen_event_read_flag)
 520                         return POLLIN | POLLRDNORM;
 521         }
 522         return 0;
 523 }
 524
 525 /**
 526  * _ctl_set_task_mid - assign an active smid to tm request
 527  * @ioc: per adapter object
 528  * @karg - (struct mpt3_ioctl_command)
 529  * @tm_request - pointer to mf from user space
 530  *
 531  * Returns 0 when an smid if found, else fail.
 532  * during failure, the reply frame is filled.
 533  */
 534 static int
 535 _ctl_set_task_mid(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command *karg,
 536         Mpi2SCSITaskManagementRequest_t *tm_request)
 537 {
 538         u8 found = 0;
 539         u16 i;
 540         u16 handle;
 541         struct scsi_cmnd *scmd;
 542         struct MPT3SAS_DEVICE *priv_data;
 543         unsigned long flags;
 544         Mpi2SCSITaskManagementReply_t *tm_reply;
 545         u32 sz;
 546         u32 lun;
 547         char *desc = NULL;
 548
 549         if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK)
 550                 desc = "abort_task";
 551         else if (tm_request->TaskType == MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK)
 552                 desc = "query_task";
 553         else
 554                 return 0;
 555
 556         lun = scsilun_to_int((struct scsi_lun *)tm_request->LUN);
 557
 558         handle = le16_to_cpu(tm_request->DevHandle);
 559         spin_lock_irqsave(&ioc->scsi_lookup_lock, flags);
 560         for (i = ioc->scsiio_depth; i && !found; i--) {
 561                 scmd = ioc->scsi_lookup[i - 1].scmd;
 562                 if (scmd == NULL || scmd->device == NULL ||
 563                     scmd->device->hostdata == NULL)
 564                         continue;
 565                 if (lun != scmd->device->lun)
 566                         continue;
 567                 priv_data = scmd->device->hostdata;
 568                 if (priv_data->sas_target == NULL)
 569                         continue;
 570                 if (priv_data->sas_target->handle != handle)
 571                         continue;
 572                 tm_request->TaskMID = cpu_to_le16(ioc->scsi_lookup[i - 1].smid);
 573                 found = 1;
 574         }
 575         spin_unlock_irqrestore(&ioc->scsi_lookup_lock, flags);
 576
 577         if (!found) {
 578                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
 579                         "%s: handle(0x%04x), lun(%d), no active mid!!\n",
 580                         ioc->name,
 581                     desc, le16_to_cpu(tm_request->DevHandle), lun));
 582                 tm_reply = ioc->ctl_cmds.reply;
 583                 tm_reply->DevHandle = tm_request->DevHandle;
 584                 tm_reply->Function = MPI2_FUNCTION_SCSI_TASK_MGMT;
 585                 tm_reply->TaskType = tm_request->TaskType;
 586                 tm_reply->MsgLength = sizeof(Mpi2SCSITaskManagementReply_t)/4;
 587                 tm_reply->VP_ID = tm_request->VP_ID;
 588                 tm_reply->VF_ID = tm_request->VF_ID;
 589                 sz = min_t(u32, karg->max_reply_bytes, ioc->reply_sz);
 590                 if (copy_to_user(karg->reply_frame_buf_ptr, ioc->ctl_cmds.reply,
 591                     sz))
 592                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 593                             __LINE__, __func__);
 594                 return 1;
 595         }
 596
 597         dctlprintk(ioc, pr_info(MPT3SAS_FMT
 598                 "%s: handle(0x%04x), lun(%d), task_mid(%d)\n", ioc->name,
 599             desc, le16_to_cpu(tm_request->DevHandle), lun,
 600              le16_to_cpu(tm_request->TaskMID)));
 601         return 0;
 602 }
 603
 604 /**
 605  * _ctl_do_mpt_command - main handler for MPT3COMMAND opcode
 606  * @ioc: per adapter object
 607  * @karg - (struct mpt3_ioctl_command)
 608  * @mf - pointer to mf in user space
 609  */
 610 static long
 611 _ctl_do_mpt_command(struct MPT3SAS_ADAPTER *ioc, struct mpt3_ioctl_command karg,
 612         void __user *mf)
 613 {
 614         MPI2RequestHeader_t *mpi_request = NULL, *request;
 615         MPI2DefaultReply_t *mpi_reply;
 616         u32 ioc_state;
 617         u16 ioc_status;
 618         u16 smid;
 619         unsigned long timeout, timeleft;
 620         u8 issue_reset;
 621         u32 sz;
 622         void *psge;
 623         void *data_out = NULL;
 624         dma_addr_t data_out_dma = 0;
 625         size_t data_out_sz = 0;
 626         void *data_in = NULL;
 627         dma_addr_t data_in_dma = 0;
 628         size_t data_in_sz = 0;
 629         long ret;
 630         u16 wait_state_count;
 631
 632         issue_reset = 0;
 633
 634         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
 635                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
 636                     ioc->name, __func__);
 637                 ret = -EAGAIN;
 638                 goto out;
 639         }
 640
 641         wait_state_count = 0;
 642         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
 643         while (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
 644                 if (wait_state_count++ == 10) {
 645                         pr_err(MPT3SAS_FMT
 646                             "%s: failed due to ioc not operational\n",
 647                             ioc->name, __func__);
 648                         ret = -EFAULT;
 649                         goto out;
 650                 }
 651                 ssleep(1);
 652                 ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
 653                 pr_info(MPT3SAS_FMT
 654                         "%s: waiting for operational state(count=%d)\n",
 655                         ioc->name,
 656                     __func__, wait_state_count);
 657         }
 658         if (wait_state_count)
 659                 pr_info(MPT3SAS_FMT "%s: ioc is operational\n",
 660                     ioc->name, __func__);
 661
 662         mpi_request = kzalloc(ioc->request_sz, GFP_KERNEL);
 663         if (!mpi_request) {
 664                 pr_err(MPT3SAS_FMT
 665                         "%s: failed obtaining a memory for mpi_request\n",
 666                         ioc->name, __func__);
 667                 ret = -ENOMEM;
 668                 goto out;
 669         }
 670
 671         /* Check for overflow and wraparound */
 672         if (karg.data_sge_offset * 4 > ioc->request_sz ||
 673             karg.data_sge_offset > (UINT_MAX / 4)) {
 674                 ret = -EINVAL;
 675                 goto out;
 676         }
 677
 678         /* copy in request message frame from user */
 679         if (copy_from_user(mpi_request, mf, karg.data_sge_offset*4)) {
 680                 pr_err("failure at %s:%d/%s()!\n", __FILE__, __LINE__,
 681                     __func__);
 682                 ret = -EFAULT;
 683                 goto out;
 684         }
 685
 686         if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
 687                 smid = mpt3sas_base_get_smid_hpr(ioc, ioc->ctl_cb_idx);
 688                 if (!smid) {
 689                         pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
 690                             ioc->name, __func__);
 691                         ret = -EAGAIN;
 692                         goto out;
 693                 }
 694         } else {
 695
 696                 smid = mpt3sas_base_get_smid_scsiio(ioc, ioc->ctl_cb_idx, NULL);
 697                 if (!smid) {
 698                         pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
 699                             ioc->name, __func__);
 700                         ret = -EAGAIN;
 701                         goto out;
 702                 }
 703         }
 704
 705         ret = 0;
 706         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
 707         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
 708         request = mpt3sas_base_get_msg_frame(ioc, smid);
 709         memcpy(request, mpi_request, karg.data_sge_offset*4);
 710         ioc->ctl_cmds.smid = smid;
 711         data_out_sz = karg.data_out_size;
 712         data_in_sz = karg.data_in_size;
 713
 714         if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
 715             mpi_request->Function == MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH) {
 716                 if (!le16_to_cpu(mpi_request->FunctionDependent1) ||
 717                     le16_to_cpu(mpi_request->FunctionDependent1) >
 718                     ioc->facts.MaxDevHandle) {
 719                         ret = -EINVAL;
 720                         mpt3sas_base_free_smid(ioc, smid);
 721                         goto out;
 722                 }
 723         }
 724
 725         /* obtain dma-able memory for data transfer */
 726         if (data_out_sz) /* WRITE */ {
 727                 data_out = pci_alloc_consistent(ioc->pdev, data_out_sz,
 728                     &data_out_dma);
 729                 if (!data_out) {
 730                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 731                             __LINE__, __func__);
 732                         ret = -ENOMEM;
 733                         mpt3sas_base_free_smid(ioc, smid);
 734                         goto out;
 735                 }
 736                 if (copy_from_user(data_out, karg.data_out_buf_ptr,
 737                         data_out_sz)) {
 738                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 739                             __LINE__, __func__);
 740                         ret =  -EFAULT;
 741                         mpt3sas_base_free_smid(ioc, smid);
 742                         goto out;
 743                 }
 744         }
 745
 746         if (data_in_sz) /* READ */ {
 747                 data_in = pci_alloc_consistent(ioc->pdev, data_in_sz,
 748                     &data_in_dma);
 749                 if (!data_in) {
 750                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 751                             __LINE__, __func__);
 752                         ret = -ENOMEM;
 753                         mpt3sas_base_free_smid(ioc, smid);
 754                         goto out;
 755                 }
 756         }
 757
 758         psge = (void *)request + (karg.data_sge_offset*4);
 759
 760         /* send command to firmware */
 761 #ifdef CONFIG_SCSI_MPT3SAS_LOGGING
 762         _ctl_display_some_debug(ioc, smid, "ctl_request", NULL);
 763 #endif
 764
 765         init_completion(&ioc->ctl_cmds.done);
 766         switch (mpi_request->Function) {
 767         case MPI2_FUNCTION_SCSI_IO_REQUEST:
 768         case MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
 769         {
 770                 Mpi2SCSIIORequest_t *scsiio_request =
 771                     (Mpi2SCSIIORequest_t *)request;
 772                 scsiio_request->SenseBufferLength = SCSI_SENSE_BUFFERSIZE;
 773                 scsiio_request->SenseBufferLowAddress =
 774                     mpt3sas_base_get_sense_buffer_dma(ioc, smid);
 775                 memset(ioc->ctl_cmds.sense, 0, SCSI_SENSE_BUFFERSIZE);
 776                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
 777                     data_in_dma, data_in_sz);
 778
 779                 if (mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST)
 780                         mpt3sas_base_put_smid_scsi_io(ioc, smid,
 781                             le16_to_cpu(mpi_request->FunctionDependent1));
 782                 else
 783                         mpt3sas_base_put_smid_default(ioc, smid);
 784                 break;
 785         }
 786         case MPI2_FUNCTION_SCSI_TASK_MGMT:
 787         {
 788                 Mpi2SCSITaskManagementRequest_t *tm_request =
 789                     (Mpi2SCSITaskManagementRequest_t *)request;
 790
 791                 dtmprintk(ioc, pr_info(MPT3SAS_FMT
 792                         "TASK_MGMT: handle(0x%04x), task_type(0x%02x)\n",
 793                         ioc->name,
 794                     le16_to_cpu(tm_request->DevHandle), tm_request->TaskType));
 795
 796                 if (tm_request->TaskType ==
 797                     MPI2_SCSITASKMGMT_TASKTYPE_ABORT_TASK ||
 798                     tm_request->TaskType ==
 799                     MPI2_SCSITASKMGMT_TASKTYPE_QUERY_TASK) {
 800                         if (_ctl_set_task_mid(ioc, &karg, tm_request)) {
 801                                 mpt3sas_base_free_smid(ioc, smid);
 802                                 goto out;
 803                         }
 804                 }
 805
 806                 mpt3sas_scsih_set_tm_flag(ioc, le16_to_cpu(
 807                     tm_request->DevHandle));
 808                 ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
 809                     data_in_dma, data_in_sz);
 810                 mpt3sas_base_put_smid_hi_priority(ioc, smid);
 811                 break;
 812         }
 813         case MPI2_FUNCTION_SMP_PASSTHROUGH:
 814         {
 815                 Mpi2SmpPassthroughRequest_t *smp_request =
 816                     (Mpi2SmpPassthroughRequest_t *)mpi_request;
 817                 u8 *data;
 818
 819                 /* ioc determines which port to use */
 820                 smp_request->PhysicalPort = 0xFF;
 821                 if (smp_request->PassthroughFlags &
 822                     MPI2_SMP_PT_REQ_PT_FLAGS_IMMEDIATE)
 823                         data = (u8 *)&smp_request->SGL;
 824                 else {
 825                         if (unlikely(data_out == NULL)) {
 826                                 pr_err("failure at %s:%d/%s()!\n",
 827                                     __FILE__, __LINE__, __func__);
 828                                 mpt3sas_base_free_smid(ioc, smid);
 829                                 ret = -EINVAL;
 830                                 goto out;
 831                         }
 832                         data = data_out;
 833                 }
 834
 835                 if (data[1] == 0x91 && (data[10] == 1 || data[10] == 2)) {
 836                         ioc->ioc_link_reset_in_progress = 1;
 837                         ioc->ignore_loginfos = 1;
 838                 }
 839                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
 840                     data_in_sz);
 841                 mpt3sas_base_put_smid_default(ioc, smid);
 842                 break;
 843         }
 844         case MPI2_FUNCTION_SATA_PASSTHROUGH:
 845         case MPI2_FUNCTION_FW_DOWNLOAD:
 846         case MPI2_FUNCTION_FW_UPLOAD:
 847         {
 848                 ioc->build_sg(ioc, psge, data_out_dma, data_out_sz, data_in_dma,
 849                     data_in_sz);
 850                 mpt3sas_base_put_smid_default(ioc, smid);
 851                 break;
 852         }
 853         case MPI2_FUNCTION_TOOLBOX:
 854         {
 855                 Mpi2ToolboxCleanRequest_t *toolbox_request =
 856                         (Mpi2ToolboxCleanRequest_t *)mpi_request;
 857
 858                 if (toolbox_request->Tool == MPI2_TOOLBOX_DIAGNOSTIC_CLI_TOOL) {
 859                         ioc->build_sg(ioc, psge, data_out_dma, data_out_sz,
 860                                 data_in_dma, data_in_sz);
 861                 } else {
 862                         ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
 863                                 data_in_dma, data_in_sz);
 864                 }
 865                 mpt3sas_base_put_smid_default(ioc, smid);
 866                 break;
 867         }
 868         case MPI2_FUNCTION_SAS_IO_UNIT_CONTROL:
 869         {
 870                 Mpi2SasIoUnitControlRequest_t *sasiounit_request =
 871                     (Mpi2SasIoUnitControlRequest_t *)mpi_request;
 872
 873                 if (sasiounit_request->Operation == MPI2_SAS_OP_PHY_HARD_RESET
 874                     || sasiounit_request->Operation ==
 875                     MPI2_SAS_OP_PHY_LINK_RESET) {
 876                         ioc->ioc_link_reset_in_progress = 1;
 877                         ioc->ignore_loginfos = 1;
 878                 }
 879                 /* drop to default case for posting the request */
 880         }
 881         default:
 882                 ioc->build_sg_mpi(ioc, psge, data_out_dma, data_out_sz,
 883                     data_in_dma, data_in_sz);
 884                 mpt3sas_base_put_smid_default(ioc, smid);
 885                 break;
 886         }
 887
 888         if (karg.timeout < MPT3_IOCTL_DEFAULT_TIMEOUT)
 889                 timeout = MPT3_IOCTL_DEFAULT_TIMEOUT;
 890         else
 891                 timeout = karg.timeout;
 892         timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
 893             timeout*HZ);
 894         if (mpi_request->Function == MPI2_FUNCTION_SCSI_TASK_MGMT) {
 895                 Mpi2SCSITaskManagementRequest_t *tm_request =
 896                     (Mpi2SCSITaskManagementRequest_t *)mpi_request;
 897                 mpt3sas_scsih_clear_tm_flag(ioc, le16_to_cpu(
 898                     tm_request->DevHandle));
 899                 mpt3sas_trigger_master(ioc, MASTER_TRIGGER_TASK_MANAGMENT);
 900         } else if ((mpi_request->Function == MPI2_FUNCTION_SMP_PASSTHROUGH ||
 901             mpi_request->Function == MPI2_FUNCTION_SAS_IO_UNIT_CONTROL) &&
 902                 ioc->ioc_link_reset_in_progress) {
 903                 ioc->ioc_link_reset_in_progress = 0;
 904                 ioc->ignore_loginfos = 0;
 905         }
 906         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
 907                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
 908                     __func__);
 909                 _debug_dump_mf(mpi_request, karg.data_sge_offset);
 910                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
 911                         issue_reset = 1;
 912                 goto issue_host_reset;
 913         }
 914
 915         mpi_reply = ioc->ctl_cmds.reply;
 916         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
 917
 918 #ifdef CONFIG_SCSI_MPT3SAS_LOGGING
 919         if (mpi_reply->Function == MPI2_FUNCTION_SCSI_TASK_MGMT &&
 920             (ioc->logging_level & MPT_DEBUG_TM)) {
 921                 Mpi2SCSITaskManagementReply_t *tm_reply =
 922                     (Mpi2SCSITaskManagementReply_t *)mpi_reply;
 923
 924                 pr_info(MPT3SAS_FMT "TASK_MGMT: " \
 925                     "IOCStatus(0x%04x), IOCLogInfo(0x%08x), "
 926                     "TerminationCount(0x%08x)\n", ioc->name,
 927                     le16_to_cpu(tm_reply->IOCStatus),
 928                     le32_to_cpu(tm_reply->IOCLogInfo),
 929                     le32_to_cpu(tm_reply->TerminationCount));
 930         }
 931 #endif
 932         /* copy out xdata to user */
 933         if (data_in_sz) {
 934                 if (copy_to_user(karg.data_in_buf_ptr, data_in,
 935                     data_in_sz)) {
 936                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 937                             __LINE__, __func__);
 938                         ret = -ENODATA;
 939                         goto out;
 940                 }
 941         }
 942
 943         /* copy out reply message frame to user */
 944         if (karg.max_reply_bytes) {
 945                 sz = min_t(u32, karg.max_reply_bytes, ioc->reply_sz);
 946                 if (copy_to_user(karg.reply_frame_buf_ptr, ioc->ctl_cmds.reply,
 947                     sz)) {
 948                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 949                             __LINE__, __func__);
 950                         ret = -ENODATA;
 951                         goto out;
 952                 }
 953         }
 954
 955         /* copy out sense to user */
 956         if (karg.max_sense_bytes && (mpi_request->Function ==
 957             MPI2_FUNCTION_SCSI_IO_REQUEST || mpi_request->Function ==
 958             MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH)) {
 959                 sz = min_t(u32, karg.max_sense_bytes, SCSI_SENSE_BUFFERSIZE);
 960                 if (copy_to_user(karg.sense_data_ptr, ioc->ctl_cmds.sense,
 961                     sz)) {
 962                         pr_err("failure at %s:%d/%s()!\n", __FILE__,
 963                             __LINE__, __func__);
 964                         ret = -ENODATA;
 965                         goto out;
 966                 }
 967         }
 968
 969  issue_host_reset:
 970         if (issue_reset) {
 971                 ret = -ENODATA;
 972                 if ((mpi_request->Function == MPI2_FUNCTION_SCSI_IO_REQUEST ||
 973                     mpi_request->Function ==
 974                     MPI2_FUNCTION_RAID_SCSI_IO_PASSTHROUGH ||
 975                     mpi_request->Function == MPI2_FUNCTION_SATA_PASSTHROUGH)) {
 976                         pr_info(MPT3SAS_FMT "issue target reset: handle = (0x%04x)\n",
 977                                 ioc->name,
 978                                 le16_to_cpu(mpi_request->FunctionDependent1));
 979                         mpt3sas_halt_firmware(ioc);
 980                         mpt3sas_scsih_issue_tm(ioc,
 981                             le16_to_cpu(mpi_request->FunctionDependent1), 0, 0,
 982                             0, MPI2_SCSITASKMGMT_TASKTYPE_TARGET_RESET, 0, 30,
 983                             TM_MUTEX_ON);
 984                 } else
 985                         mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
 986                             FORCE_BIG_HAMMER);
 987         }
 988
 989  out:
 990
 991         /* free memory associated with sg buffers */
 992         if (data_in)
 993                 pci_free_consistent(ioc->pdev, data_in_sz, data_in,
 994                     data_in_dma);
 995
 996         if (data_out)
 997                 pci_free_consistent(ioc->pdev, data_out_sz, data_out,
 998                     data_out_dma);
 999
1000         kfree(mpi_request);
1001         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1002         return ret;
1003 }
1004
1005 /**
1006  * _ctl_getiocinfo - main handler for MPT3IOCINFO opcode
1007  * @ioc: per adapter object
1008  * @arg - user space buffer containing ioctl content
1009  */
1010 static long
1011 _ctl_getiocinfo(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1012 {
1013         struct mpt3_ioctl_iocinfo karg;
1014
1015         if (copy_from_user(&karg, arg, sizeof(karg))) {
1016                 pr_err("failure at %s:%d/%s()!\n",
1017                     __FILE__, __LINE__, __func__);
1018                 return -EFAULT;
1019         }
1020
1021         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1022             __func__));
1023
1024         memset(&karg, 0 , sizeof(karg));
1025         karg.adapter_type = MPT3_IOCTL_INTERFACE_SAS3;
1026         if (ioc->pfacts)
1027                 karg.port_number = ioc->pfacts[0].PortNumber;
1028         karg.hw_rev = ioc->pdev->revision;
1029         karg.pci_id = ioc->pdev->device;
1030         karg.subsystem_device = ioc->pdev->subsystem_device;
1031         karg.subsystem_vendor = ioc->pdev->subsystem_vendor;
1032         karg.pci_information.u.bits.bus = ioc->pdev->bus->number;
1033         karg.pci_information.u.bits.device = PCI_SLOT(ioc->pdev->devfn);
1034         karg.pci_information.u.bits.function = PCI_FUNC(ioc->pdev->devfn);
1035         karg.pci_information.segment_id = pci_domain_nr(ioc->pdev->bus);
1036         karg.firmware_version = ioc->facts.FWVersion.Word;
1037         strcpy(karg.driver_version, MPT3SAS_DRIVER_NAME);
1038         strcat(karg.driver_version, "-");
1039         strcat(karg.driver_version, MPT3SAS_DRIVER_VERSION);
1040         karg.bios_version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
1041
1042         if (copy_to_user(arg, &karg, sizeof(karg))) {
1043                 pr_err("failure at %s:%d/%s()!\n",
1044                     __FILE__, __LINE__, __func__);
1045                 return -EFAULT;
1046         }
1047         return 0;
1048 }
1049
1050 /**
1051  * _ctl_eventquery - main handler for MPT3EVENTQUERY opcode
1052  * @ioc: per adapter object
1053  * @arg - user space buffer containing ioctl content
1054  */
1055 static long
1056 _ctl_eventquery(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1057 {
1058         struct mpt3_ioctl_eventquery karg;
1059
1060         if (copy_from_user(&karg, arg, sizeof(karg))) {
1061                 pr_err("failure at %s:%d/%s()!\n",
1062                     __FILE__, __LINE__, __func__);
1063                 return -EFAULT;
1064         }
1065
1066         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1067             __func__));
1068
1069         karg.event_entries = MPT3SAS_CTL_EVENT_LOG_SIZE;
1070         memcpy(karg.event_types, ioc->event_type,
1071             MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1072
1073         if (copy_to_user(arg, &karg, sizeof(karg))) {
1074                 pr_err("failure at %s:%d/%s()!\n",
1075                     __FILE__, __LINE__, __func__);
1076                 return -EFAULT;
1077         }
1078         return 0;
1079 }
1080
1081 /**
1082  * _ctl_eventenable - main handler for MPT3EVENTENABLE opcode
1083  * @ioc: per adapter object
1084  * @arg - user space buffer containing ioctl content
1085  */
1086 static long
1087 _ctl_eventenable(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1088 {
1089         struct mpt3_ioctl_eventenable karg;
1090
1091         if (copy_from_user(&karg, arg, sizeof(karg))) {
1092                 pr_err("failure at %s:%d/%s()!\n",
1093                     __FILE__, __LINE__, __func__);
1094                 return -EFAULT;
1095         }
1096
1097         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1098             __func__));
1099
1100         memcpy(ioc->event_type, karg.event_types,
1101             MPI2_EVENT_NOTIFY_EVENTMASK_WORDS * sizeof(u32));
1102         mpt3sas_base_validate_event_type(ioc, ioc->event_type);
1103
1104         if (ioc->event_log)
1105                 return 0;
1106         /* initialize event_log */
1107         ioc->event_context = 0;
1108         ioc->aen_event_read_flag = 0;
1109         ioc->event_log = kcalloc(MPT3SAS_CTL_EVENT_LOG_SIZE,
1110             sizeof(struct MPT3_IOCTL_EVENTS), GFP_KERNEL);
1111         if (!ioc->event_log) {
1112                 pr_err("failure at %s:%d/%s()!\n",
1113                     __FILE__, __LINE__, __func__);
1114                 return -ENOMEM;
1115         }
1116         return 0;
1117 }
1118
1119 /**
1120  * _ctl_eventreport - main handler for MPT3EVENTREPORT opcode
1121  * @ioc: per adapter object
1122  * @arg - user space buffer containing ioctl content
1123  */
1124 static long
1125 _ctl_eventreport(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1126 {
1127         struct mpt3_ioctl_eventreport karg;
1128         u32 number_bytes, max_events, max;
1129         struct mpt3_ioctl_eventreport __user *uarg = arg;
1130
1131         if (copy_from_user(&karg, arg, sizeof(karg))) {
1132                 pr_err("failure at %s:%d/%s()!\n",
1133                     __FILE__, __LINE__, __func__);
1134                 return -EFAULT;
1135         }
1136
1137         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1138             __func__));
1139
1140         number_bytes = karg.hdr.max_data_size -
1141             sizeof(struct mpt3_ioctl_header);
1142         max_events = number_bytes/sizeof(struct MPT3_IOCTL_EVENTS);
1143         max = min_t(u32, MPT3SAS_CTL_EVENT_LOG_SIZE, max_events);
1144
1145         /* If fewer than 1 event is requested, there must have
1146          * been some type of error.
1147          */
1148         if (!max || !ioc->event_log)
1149                 return -ENODATA;
1150
1151         number_bytes = max * sizeof(struct MPT3_IOCTL_EVENTS);
1152         if (copy_to_user(uarg->event_data, ioc->event_log, number_bytes)) {
1153                 pr_err("failure at %s:%d/%s()!\n",
1154                     __FILE__, __LINE__, __func__);
1155                 return -EFAULT;
1156         }
1157
1158         /* reset flag so SIGIO can restart */
1159         ioc->aen_event_read_flag = 0;
1160         return 0;
1161 }
1162
1163 /**
1164  * _ctl_do_reset - main handler for MPT3HARDRESET opcode
1165  * @ioc: per adapter object
1166  * @arg - user space buffer containing ioctl content
1167  */
1168 static long
1169 _ctl_do_reset(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1170 {
1171         struct mpt3_ioctl_diag_reset karg;
1172         int retval;
1173
1174         if (copy_from_user(&karg, arg, sizeof(karg))) {
1175                 pr_err("failure at %s:%d/%s()!\n",
1176                     __FILE__, __LINE__, __func__);
1177                 return -EFAULT;
1178         }
1179
1180         if (ioc->shost_recovery || ioc->pci_error_recovery ||
1181             ioc->is_driver_loading)
1182                 return -EAGAIN;
1183
1184         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: enter\n", ioc->name,
1185             __func__));
1186
1187         retval = mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1188             FORCE_BIG_HAMMER);
1189         pr_info(MPT3SAS_FMT "host reset: %s\n",
1190             ioc->name, ((!retval) ? "SUCCESS" : "FAILED"));
1191         return 0;
1192 }
1193
1194 /**
1195  * _ctl_btdh_search_sas_device - searching for sas device
1196  * @ioc: per adapter object
1197  * @btdh: btdh ioctl payload
1198  */
1199 static int
1200 _ctl_btdh_search_sas_device(struct MPT3SAS_ADAPTER *ioc,
1201         struct mpt3_ioctl_btdh_mapping *btdh)
1202 {
1203         struct _sas_device *sas_device;
1204         unsigned long flags;
1205         int rc = 0;
1206
1207         if (list_empty(&ioc->sas_device_list))
1208                 return rc;
1209
1210         spin_lock_irqsave(&ioc->sas_device_lock, flags);
1211         list_for_each_entry(sas_device, &ioc->sas_device_list, list) {
1212                 if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1213                     btdh->handle == sas_device->handle) {
1214                         btdh->bus = sas_device->channel;
1215                         btdh->id = sas_device->id;
1216                         rc = 1;
1217                         goto out;
1218                 } else if (btdh->bus == sas_device->channel && btdh->id ==
1219                     sas_device->id && btdh->handle == 0xFFFF) {
1220                         btdh->handle = sas_device->handle;
1221                         rc = 1;
1222                         goto out;
1223                 }
1224         }
1225  out:
1226         spin_unlock_irqrestore(&ioc->sas_device_lock, flags);
1227         return rc;
1228 }
1229
1230 /**
1231  * _ctl_btdh_search_raid_device - searching for raid device
1232  * @ioc: per adapter object
1233  * @btdh: btdh ioctl payload
1234  */
1235 static int
1236 _ctl_btdh_search_raid_device(struct MPT3SAS_ADAPTER *ioc,
1237         struct mpt3_ioctl_btdh_mapping *btdh)
1238 {
1239         struct _raid_device *raid_device;
1240         unsigned long flags;
1241         int rc = 0;
1242
1243         if (list_empty(&ioc->raid_device_list))
1244                 return rc;
1245
1246         spin_lock_irqsave(&ioc->raid_device_lock, flags);
1247         list_for_each_entry(raid_device, &ioc->raid_device_list, list) {
1248                 if (btdh->bus == 0xFFFFFFFF && btdh->id == 0xFFFFFFFF &&
1249                     btdh->handle == raid_device->handle) {
1250                         btdh->bus = raid_device->channel;
1251                         btdh->id = raid_device->id;
1252                         rc = 1;
1253                         goto out;
1254                 } else if (btdh->bus == raid_device->channel && btdh->id ==
1255                     raid_device->id && btdh->handle == 0xFFFF) {
1256                         btdh->handle = raid_device->handle;
1257                         rc = 1;
1258                         goto out;
1259                 }
1260         }
1261  out:
1262         spin_unlock_irqrestore(&ioc->raid_device_lock, flags);
1263         return rc;
1264 }
1265
1266 /**
1267  * _ctl_btdh_mapping - main handler for MPT3BTDHMAPPING opcode
1268  * @ioc: per adapter object
1269  * @arg - user space buffer containing ioctl content
1270  */
1271 static long
1272 _ctl_btdh_mapping(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1273 {
1274         struct mpt3_ioctl_btdh_mapping karg;
1275         int rc;
1276
1277         if (copy_from_user(&karg, arg, sizeof(karg))) {
1278                 pr_err("failure at %s:%d/%s()!\n",
1279                     __FILE__, __LINE__, __func__);
1280                 return -EFAULT;
1281         }
1282
1283         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1284             __func__));
1285
1286         rc = _ctl_btdh_search_sas_device(ioc, &karg);
1287         if (!rc)
1288                 _ctl_btdh_search_raid_device(ioc, &karg);
1289
1290         if (copy_to_user(arg, &karg, sizeof(karg))) {
1291                 pr_err("failure at %s:%d/%s()!\n",
1292                     __FILE__, __LINE__, __func__);
1293                 return -EFAULT;
1294         }
1295         return 0;
1296 }
1297
1298 /**
1299  * _ctl_diag_capability - return diag buffer capability
1300  * @ioc: per adapter object
1301  * @buffer_type: specifies either TRACE, SNAPSHOT, or EXTENDED
1302  *
1303  * returns 1 when diag buffer support is enabled in firmware
1304  */
1305 static u8
1306 _ctl_diag_capability(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type)
1307 {
1308         u8 rc = 0;
1309
1310         switch (buffer_type) {
1311         case MPI2_DIAG_BUF_TYPE_TRACE:
1312                 if (ioc->facts.IOCCapabilities &
1313                     MPI2_IOCFACTS_CAPABILITY_DIAG_TRACE_BUFFER)
1314                         rc = 1;
1315                 break;
1316         case MPI2_DIAG_BUF_TYPE_SNAPSHOT:
1317                 if (ioc->facts.IOCCapabilities &
1318                     MPI2_IOCFACTS_CAPABILITY_SNAPSHOT_BUFFER)
1319                         rc = 1;
1320                 break;
1321         case MPI2_DIAG_BUF_TYPE_EXTENDED:
1322                 if (ioc->facts.IOCCapabilities &
1323                     MPI2_IOCFACTS_CAPABILITY_EXTENDED_BUFFER)
1324                         rc = 1;
1325         }
1326
1327         return rc;
1328 }
1329
1330
1331 /**
1332  * _ctl_diag_register_2 - wrapper for registering diag buffer support
1333  * @ioc: per adapter object
1334  * @diag_register: the diag_register struct passed in from user space
1335  *
1336  */
1337 static long
1338 _ctl_diag_register_2(struct MPT3SAS_ADAPTER *ioc,
1339         struct mpt3_diag_register *diag_register)
1340 {
1341         int rc, i;
1342         void *request_data = NULL;
1343         dma_addr_t request_data_dma;
1344         u32 request_data_sz = 0;
1345         Mpi2DiagBufferPostRequest_t *mpi_request;
1346         Mpi2DiagBufferPostReply_t *mpi_reply;
1347         u8 buffer_type;
1348         unsigned long timeleft;
1349         u16 smid;
1350         u16 ioc_status;
1351         u32 ioc_state;
1352         u8 issue_reset = 0;
1353
1354         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1355             __func__));
1356
1357         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1358         if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1359                 pr_err(MPT3SAS_FMT
1360                     "%s: failed due to ioc not operational\n",
1361                     ioc->name, __func__);
1362                 rc = -EAGAIN;
1363                 goto out;
1364         }
1365
1366         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1367                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1368                     ioc->name, __func__);
1369                 rc = -EAGAIN;
1370                 goto out;
1371         }
1372
1373         buffer_type = diag_register->buffer_type;
1374         if (!_ctl_diag_capability(ioc, buffer_type)) {
1375                 pr_err(MPT3SAS_FMT
1376                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1377                         ioc->name, __func__, buffer_type);
1378                 return -EPERM;
1379         }
1380
1381         if (ioc->diag_buffer_status[buffer_type] &
1382             MPT3_DIAG_BUFFER_IS_REGISTERED) {
1383                 pr_err(MPT3SAS_FMT
1384                         "%s: already has a registered buffer for buffer_type(0x%02x)\n",
1385                         ioc->name, __func__,
1386                     buffer_type);
1387                 return -EINVAL;
1388         }
1389
1390         if (diag_register->requested_buffer_size % 4)  {
1391                 pr_err(MPT3SAS_FMT
1392                         "%s: the requested_buffer_size is not 4 byte aligned\n",
1393                         ioc->name, __func__);
1394                 return -EINVAL;
1395         }
1396
1397         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1398         if (!smid) {
1399                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1400                     ioc->name, __func__);
1401                 rc = -EAGAIN;
1402                 goto out;
1403         }
1404
1405         rc = 0;
1406         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1407         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1408         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1409         ioc->ctl_cmds.smid = smid;
1410
1411         request_data = ioc->diag_buffer[buffer_type];
1412         request_data_sz = diag_register->requested_buffer_size;
1413         ioc->unique_id[buffer_type] = diag_register->unique_id;
1414         ioc->diag_buffer_status[buffer_type] = 0;
1415         memcpy(ioc->product_specific[buffer_type],
1416             diag_register->product_specific, MPT3_PRODUCT_SPECIFIC_DWORDS);
1417         ioc->diagnostic_flags[buffer_type] = diag_register->diagnostic_flags;
1418
1419         if (request_data) {
1420                 request_data_dma = ioc->diag_buffer_dma[buffer_type];
1421                 if (request_data_sz != ioc->diag_buffer_sz[buffer_type]) {
1422                         pci_free_consistent(ioc->pdev,
1423                             ioc->diag_buffer_sz[buffer_type],
1424                             request_data, request_data_dma);
1425                         request_data = NULL;
1426                 }
1427         }
1428
1429         if (request_data == NULL) {
1430                 ioc->diag_buffer_sz[buffer_type] = 0;
1431                 ioc->diag_buffer_dma[buffer_type] = 0;
1432                 request_data = pci_alloc_consistent(
1433                         ioc->pdev, request_data_sz, &request_data_dma);
1434                 if (request_data == NULL) {
1435                         pr_err(MPT3SAS_FMT "%s: failed allocating memory" \
1436                             " for diag buffers, requested size(%d)\n",
1437                             ioc->name, __func__, request_data_sz);
1438                         mpt3sas_base_free_smid(ioc, smid);
1439                         return -ENOMEM;
1440                 }
1441                 ioc->diag_buffer[buffer_type] = request_data;
1442                 ioc->diag_buffer_sz[buffer_type] = request_data_sz;
1443                 ioc->diag_buffer_dma[buffer_type] = request_data_dma;
1444         }
1445
1446         mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
1447         mpi_request->BufferType = diag_register->buffer_type;
1448         mpi_request->Flags = cpu_to_le32(diag_register->diagnostic_flags);
1449         mpi_request->BufferAddress = cpu_to_le64(request_data_dma);
1450         mpi_request->BufferLength = cpu_to_le32(request_data_sz);
1451         mpi_request->VF_ID = 0; /* TODO */
1452         mpi_request->VP_ID = 0;
1453
1454         dctlprintk(ioc, pr_info(MPT3SAS_FMT
1455                 "%s: diag_buffer(0x%p), dma(0x%llx), sz(%d)\n",
1456                 ioc->name, __func__, request_data,
1457             (unsigned long long)request_data_dma,
1458             le32_to_cpu(mpi_request->BufferLength)));
1459
1460         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1461                 mpi_request->ProductSpecific[i] =
1462                         cpu_to_le32(ioc->product_specific[buffer_type][i]);
1463
1464         init_completion(&ioc->ctl_cmds.done);
1465         mpt3sas_base_put_smid_default(ioc, smid);
1466         timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
1467             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1468
1469         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1470                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1471                     __func__);
1472                 _debug_dump_mf(mpi_request,
1473                     sizeof(Mpi2DiagBufferPostRequest_t)/4);
1474                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1475                         issue_reset = 1;
1476                 goto issue_host_reset;
1477         }
1478
1479         /* process the completed Reply Message Frame */
1480         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1481                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
1482                     ioc->name, __func__);
1483                 rc = -EFAULT;
1484                 goto out;
1485         }
1486
1487         mpi_reply = ioc->ctl_cmds.reply;
1488         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1489
1490         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1491                 ioc->diag_buffer_status[buffer_type] |=
1492                         MPT3_DIAG_BUFFER_IS_REGISTERED;
1493                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1494                     ioc->name, __func__));
1495         } else {
1496                 pr_info(MPT3SAS_FMT
1497                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1498                         ioc->name, __func__,
1499                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1500                 rc = -EFAULT;
1501         }
1502
1503  issue_host_reset:
1504         if (issue_reset)
1505                 mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1506                     FORCE_BIG_HAMMER);
1507
1508  out:
1509
1510         if (rc && request_data)
1511                 pci_free_consistent(ioc->pdev, request_data_sz,
1512                     request_data, request_data_dma);
1513
1514         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1515         return rc;
1516 }
1517
1518 /**
1519  * mpt3sas_enable_diag_buffer - enabling diag_buffers support driver load time
1520  * @ioc: per adapter object
1521  * @bits_to_register: bitwise field where trace is bit 0, and snapshot is bit 1
1522  *
1523  * This is called when command line option diag_buffer_enable is enabled
1524  * at driver load time.
1525  */
1526 void
1527 mpt3sas_enable_diag_buffer(struct MPT3SAS_ADAPTER *ioc, u8 bits_to_register)
1528 {
1529         struct mpt3_diag_register diag_register;
1530
1531         memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
1532
1533         if (bits_to_register & 1) {
1534                 pr_info(MPT3SAS_FMT "registering trace buffer support\n",
1535                     ioc->name);
1536                 ioc->diag_trigger_master.MasterData =
1537                     (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
1538                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
1539                 /* register for 2MB buffers  */
1540                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1541                 diag_register.unique_id = 0x7075900;
1542                 _ctl_diag_register_2(ioc,  &diag_register);
1543         }
1544
1545         if (bits_to_register & 2) {
1546                 pr_info(MPT3SAS_FMT "registering snapshot buffer support\n",
1547                     ioc->name);
1548                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_SNAPSHOT;
1549                 /* register for 2MB buffers  */
1550                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1551                 diag_register.unique_id = 0x7075901;
1552                 _ctl_diag_register_2(ioc,  &diag_register);
1553         }
1554
1555         if (bits_to_register & 4) {
1556                 pr_info(MPT3SAS_FMT "registering extended buffer support\n",
1557                     ioc->name);
1558                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_EXTENDED;
1559                 /* register for 2MB buffers  */
1560                 diag_register.requested_buffer_size = 2 * (1024 * 1024);
1561                 diag_register.unique_id = 0x7075901;
1562                 _ctl_diag_register_2(ioc,  &diag_register);
1563         }
1564 }
1565
1566 /**
1567  * _ctl_diag_register - application register with driver
1568  * @ioc: per adapter object
1569  * @arg - user space buffer containing ioctl content
1570  *
1571  * This will allow the driver to setup any required buffers that will be
1572  * needed by firmware to communicate with the driver.
1573  */
1574 static long
1575 _ctl_diag_register(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1576 {
1577         struct mpt3_diag_register karg;
1578         long rc;
1579
1580         if (copy_from_user(&karg, arg, sizeof(karg))) {
1581                 pr_err("failure at %s:%d/%s()!\n",
1582                     __FILE__, __LINE__, __func__);
1583                 return -EFAULT;
1584         }
1585
1586         rc = _ctl_diag_register_2(ioc, &karg);
1587         return rc;
1588 }
1589
1590 /**
1591  * _ctl_diag_unregister - application unregister with driver
1592  * @ioc: per adapter object
1593  * @arg - user space buffer containing ioctl content
1594  *
1595  * This will allow the driver to cleanup any memory allocated for diag
1596  * messages and to free up any resources.
1597  */
1598 static long
1599 _ctl_diag_unregister(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1600 {
1601         struct mpt3_diag_unregister karg;
1602         void *request_data;
1603         dma_addr_t request_data_dma;
1604         u32 request_data_sz;
1605         u8 buffer_type;
1606
1607         if (copy_from_user(&karg, arg, sizeof(karg))) {
1608                 pr_err("failure at %s:%d/%s()!\n",
1609                     __FILE__, __LINE__, __func__);
1610                 return -EFAULT;
1611         }
1612
1613         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1614             __func__));
1615
1616         buffer_type = karg.unique_id & 0x000000ff;
1617         if (!_ctl_diag_capability(ioc, buffer_type)) {
1618                 pr_err(MPT3SAS_FMT
1619                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1620                         ioc->name, __func__, buffer_type);
1621                 return -EPERM;
1622         }
1623
1624         if ((ioc->diag_buffer_status[buffer_type] &
1625             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1626                 pr_err(MPT3SAS_FMT
1627                         "%s: buffer_type(0x%02x) is not registered\n",
1628                         ioc->name, __func__, buffer_type);
1629                 return -EINVAL;
1630         }
1631         if ((ioc->diag_buffer_status[buffer_type] &
1632             MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
1633                 pr_err(MPT3SAS_FMT
1634                         "%s: buffer_type(0x%02x) has not been released\n",
1635                         ioc->name, __func__, buffer_type);
1636                 return -EINVAL;
1637         }
1638
1639         if (karg.unique_id != ioc->unique_id[buffer_type]) {
1640                 pr_err(MPT3SAS_FMT
1641                         "%s: unique_id(0x%08x) is not registered\n",
1642                         ioc->name, __func__, karg.unique_id);
1643                 return -EINVAL;
1644         }
1645
1646         request_data = ioc->diag_buffer[buffer_type];
1647         if (!request_data) {
1648                 pr_err(MPT3SAS_FMT
1649                         "%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1650                         ioc->name, __func__, buffer_type);
1651                 return -ENOMEM;
1652         }
1653
1654         request_data_sz = ioc->diag_buffer_sz[buffer_type];
1655         request_data_dma = ioc->diag_buffer_dma[buffer_type];
1656         pci_free_consistent(ioc->pdev, request_data_sz,
1657             request_data, request_data_dma);
1658         ioc->diag_buffer[buffer_type] = NULL;
1659         ioc->diag_buffer_status[buffer_type] = 0;
1660         return 0;
1661 }
1662
1663 /**
1664  * _ctl_diag_query - query relevant info associated with diag buffers
1665  * @ioc: per adapter object
1666  * @arg - user space buffer containing ioctl content
1667  *
1668  * The application will send only buffer_type and unique_id.  Driver will
1669  * inspect unique_id first, if valid, fill in all the info.  If unique_id is
1670  * 0x00, the driver will return info specified by Buffer Type.
1671  */
1672 static long
1673 _ctl_diag_query(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1674 {
1675         struct mpt3_diag_query karg;
1676         void *request_data;
1677         int i;
1678         u8 buffer_type;
1679
1680         if (copy_from_user(&karg, arg, sizeof(karg))) {
1681                 pr_err("failure at %s:%d/%s()!\n",
1682                     __FILE__, __LINE__, __func__);
1683                 return -EFAULT;
1684         }
1685
1686         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1687             __func__));
1688
1689         karg.application_flags = 0;
1690         buffer_type = karg.buffer_type;
1691
1692         if (!_ctl_diag_capability(ioc, buffer_type)) {
1693                 pr_err(MPT3SAS_FMT
1694                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1695                         ioc->name, __func__, buffer_type);
1696                 return -EPERM;
1697         }
1698
1699         if ((ioc->diag_buffer_status[buffer_type] &
1700             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1701                 pr_err(MPT3SAS_FMT
1702                         "%s: buffer_type(0x%02x) is not registered\n",
1703                         ioc->name, __func__, buffer_type);
1704                 return -EINVAL;
1705         }
1706
1707         if (karg.unique_id & 0xffffff00) {
1708                 if (karg.unique_id != ioc->unique_id[buffer_type]) {
1709                         pr_err(MPT3SAS_FMT
1710                                 "%s: unique_id(0x%08x) is not registered\n",
1711                                 ioc->name, __func__, karg.unique_id);
1712                         return -EINVAL;
1713                 }
1714         }
1715
1716         request_data = ioc->diag_buffer[buffer_type];
1717         if (!request_data) {
1718                 pr_err(MPT3SAS_FMT
1719                         "%s: doesn't have buffer for buffer_type(0x%02x)\n",
1720                         ioc->name, __func__, buffer_type);
1721                 return -ENOMEM;
1722         }
1723
1724         if (ioc->diag_buffer_status[buffer_type] & MPT3_DIAG_BUFFER_IS_RELEASED)
1725                 karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1726                     MPT3_APP_FLAGS_BUFFER_VALID);
1727         else
1728                 karg.application_flags = (MPT3_APP_FLAGS_APP_OWNED |
1729                     MPT3_APP_FLAGS_BUFFER_VALID |
1730                     MPT3_APP_FLAGS_FW_BUFFER_ACCESS);
1731
1732         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
1733                 karg.product_specific[i] =
1734                     ioc->product_specific[buffer_type][i];
1735
1736         karg.total_buffer_size = ioc->diag_buffer_sz[buffer_type];
1737         karg.driver_added_buffer_size = 0;
1738         karg.unique_id = ioc->unique_id[buffer_type];
1739         karg.diagnostic_flags = ioc->diagnostic_flags[buffer_type];
1740
1741         if (copy_to_user(arg, &karg, sizeof(struct mpt3_diag_query))) {
1742                 pr_err(MPT3SAS_FMT
1743                         "%s: unable to write mpt3_diag_query data @ %p\n",
1744                         ioc->name, __func__, arg);
1745                 return -EFAULT;
1746         }
1747         return 0;
1748 }
1749
1750 /**
1751  * mpt3sas_send_diag_release - Diag Release Message
1752  * @ioc: per adapter object
1753  * @buffer_type - specifies either TRACE, SNAPSHOT, or EXTENDED
1754  * @issue_reset - specifies whether host reset is required.
1755  *
1756  */
1757 int
1758 mpt3sas_send_diag_release(struct MPT3SAS_ADAPTER *ioc, u8 buffer_type,
1759         u8 *issue_reset)
1760 {
1761         Mpi2DiagReleaseRequest_t *mpi_request;
1762         Mpi2DiagReleaseReply_t *mpi_reply;
1763         u16 smid;
1764         u16 ioc_status;
1765         u32 ioc_state;
1766         int rc;
1767         unsigned long timeleft;
1768
1769         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1770             __func__));
1771
1772         rc = 0;
1773         *issue_reset = 0;
1774
1775         ioc_state = mpt3sas_base_get_iocstate(ioc, 1);
1776         if (ioc_state != MPI2_IOC_STATE_OPERATIONAL) {
1777                 if (ioc->diag_buffer_status[buffer_type] &
1778                     MPT3_DIAG_BUFFER_IS_REGISTERED)
1779                         ioc->diag_buffer_status[buffer_type] |=
1780                             MPT3_DIAG_BUFFER_IS_RELEASED;
1781                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
1782                         "%s: skipping due to FAULT state\n", ioc->name,
1783                     __func__));
1784                 rc = -EAGAIN;
1785                 goto out;
1786         }
1787
1788         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
1789                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
1790                     ioc->name, __func__);
1791                 rc = -EAGAIN;
1792                 goto out;
1793         }
1794
1795         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
1796         if (!smid) {
1797                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
1798                     ioc->name, __func__);
1799                 rc = -EAGAIN;
1800                 goto out;
1801         }
1802
1803         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
1804         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
1805         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
1806         ioc->ctl_cmds.smid = smid;
1807
1808         mpi_request->Function = MPI2_FUNCTION_DIAG_RELEASE;
1809         mpi_request->BufferType = buffer_type;
1810         mpi_request->VF_ID = 0; /* TODO */
1811         mpi_request->VP_ID = 0;
1812
1813         init_completion(&ioc->ctl_cmds.done);
1814         mpt3sas_base_put_smid_default(ioc, smid);
1815         timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
1816             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
1817
1818         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
1819                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
1820                     __func__);
1821                 _debug_dump_mf(mpi_request,
1822                     sizeof(Mpi2DiagReleaseRequest_t)/4);
1823                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
1824                         *issue_reset = 1;
1825                 rc = -EFAULT;
1826                 goto out;
1827         }
1828
1829         /* process the completed Reply Message Frame */
1830         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
1831                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
1832                     ioc->name, __func__);
1833                 rc = -EFAULT;
1834                 goto out;
1835         }
1836
1837         mpi_reply = ioc->ctl_cmds.reply;
1838         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
1839
1840         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
1841                 ioc->diag_buffer_status[buffer_type] |=
1842                     MPT3_DIAG_BUFFER_IS_RELEASED;
1843                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
1844                     ioc->name, __func__));
1845         } else {
1846                 pr_info(MPT3SAS_FMT
1847                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
1848                         ioc->name, __func__,
1849                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
1850                 rc = -EFAULT;
1851         }
1852
1853  out:
1854         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
1855         return rc;
1856 }
1857
1858 /**
1859  * _ctl_diag_release - request to send Diag Release Message to firmware
1860  * @arg - user space buffer containing ioctl content
1861  *
1862  * This allows ownership of the specified buffer to returned to the driver,
1863  * allowing an application to read the buffer without fear that firmware is
1864  * overwritting information in the buffer.
1865  */
1866 static long
1867 _ctl_diag_release(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1868 {
1869         struct mpt3_diag_release karg;
1870         void *request_data;
1871         int rc;
1872         u8 buffer_type;
1873         u8 issue_reset = 0;
1874
1875         if (copy_from_user(&karg, arg, sizeof(karg))) {
1876                 pr_err("failure at %s:%d/%s()!\n",
1877                     __FILE__, __LINE__, __func__);
1878                 return -EFAULT;
1879         }
1880
1881         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1882             __func__));
1883
1884         buffer_type = karg.unique_id & 0x000000ff;
1885         if (!_ctl_diag_capability(ioc, buffer_type)) {
1886                 pr_err(MPT3SAS_FMT
1887                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1888                         ioc->name, __func__, buffer_type);
1889                 return -EPERM;
1890         }
1891
1892         if ((ioc->diag_buffer_status[buffer_type] &
1893             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
1894                 pr_err(MPT3SAS_FMT
1895                         "%s: buffer_type(0x%02x) is not registered\n",
1896                         ioc->name, __func__, buffer_type);
1897                 return -EINVAL;
1898         }
1899
1900         if (karg.unique_id != ioc->unique_id[buffer_type]) {
1901                 pr_err(MPT3SAS_FMT
1902                         "%s: unique_id(0x%08x) is not registered\n",
1903                         ioc->name, __func__, karg.unique_id);
1904                 return -EINVAL;
1905         }
1906
1907         if (ioc->diag_buffer_status[buffer_type] &
1908             MPT3_DIAG_BUFFER_IS_RELEASED) {
1909                 pr_err(MPT3SAS_FMT
1910                         "%s: buffer_type(0x%02x) is already released\n",
1911                         ioc->name, __func__,
1912                     buffer_type);
1913                 return 0;
1914         }
1915
1916         request_data = ioc->diag_buffer[buffer_type];
1917
1918         if (!request_data) {
1919                 pr_err(MPT3SAS_FMT
1920                         "%s: doesn't have memory allocated for buffer_type(0x%02x)\n",
1921                         ioc->name, __func__, buffer_type);
1922                 return -ENOMEM;
1923         }
1924
1925         /* buffers were released by due to host reset */
1926         if ((ioc->diag_buffer_status[buffer_type] &
1927             MPT3_DIAG_BUFFER_IS_DIAG_RESET)) {
1928                 ioc->diag_buffer_status[buffer_type] |=
1929                     MPT3_DIAG_BUFFER_IS_RELEASED;
1930                 ioc->diag_buffer_status[buffer_type] &=
1931                     ~MPT3_DIAG_BUFFER_IS_DIAG_RESET;
1932                 pr_err(MPT3SAS_FMT
1933                         "%s: buffer_type(0x%02x) was released due to host reset\n",
1934                         ioc->name, __func__, buffer_type);
1935                 return 0;
1936         }
1937
1938         rc = mpt3sas_send_diag_release(ioc, buffer_type, &issue_reset);
1939
1940         if (issue_reset)
1941                 mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
1942                     FORCE_BIG_HAMMER);
1943
1944         return rc;
1945 }
1946
1947 /**
1948  * _ctl_diag_read_buffer - request for copy of the diag buffer
1949  * @ioc: per adapter object
1950  * @arg - user space buffer containing ioctl content
1951  */
1952 static long
1953 _ctl_diag_read_buffer(struct MPT3SAS_ADAPTER *ioc, void __user *arg)
1954 {
1955         struct mpt3_diag_read_buffer karg;
1956         struct mpt3_diag_read_buffer __user *uarg = arg;
1957         void *request_data, *diag_data;
1958         Mpi2DiagBufferPostRequest_t *mpi_request;
1959         Mpi2DiagBufferPostReply_t *mpi_reply;
1960         int rc, i;
1961         u8 buffer_type;
1962         unsigned long timeleft, request_size, copy_size;
1963         u16 smid;
1964         u16 ioc_status;
1965         u8 issue_reset = 0;
1966
1967         if (copy_from_user(&karg, arg, sizeof(karg))) {
1968                 pr_err("failure at %s:%d/%s()!\n",
1969                     __FILE__, __LINE__, __func__);
1970                 return -EFAULT;
1971         }
1972
1973         dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s\n", ioc->name,
1974             __func__));
1975
1976         buffer_type = karg.unique_id & 0x000000ff;
1977         if (!_ctl_diag_capability(ioc, buffer_type)) {
1978                 pr_err(MPT3SAS_FMT
1979                         "%s: doesn't have capability for buffer_type(0x%02x)\n",
1980                         ioc->name, __func__, buffer_type);
1981                 return -EPERM;
1982         }
1983
1984         if (karg.unique_id != ioc->unique_id[buffer_type]) {
1985                 pr_err(MPT3SAS_FMT
1986                         "%s: unique_id(0x%08x) is not registered\n",
1987                         ioc->name, __func__, karg.unique_id);
1988                 return -EINVAL;
1989         }
1990
1991         request_data = ioc->diag_buffer[buffer_type];
1992         if (!request_data) {
1993                 pr_err(MPT3SAS_FMT
1994                         "%s: doesn't have buffer for buffer_type(0x%02x)\n",
1995                         ioc->name, __func__, buffer_type);
1996                 return -ENOMEM;
1997         }
1998
1999         request_size = ioc->diag_buffer_sz[buffer_type];
2000
2001         if ((karg.starting_offset % 4) || (karg.bytes_to_read % 4)) {
2002                 pr_err(MPT3SAS_FMT "%s: either the starting_offset " \
2003                     "or bytes_to_read are not 4 byte aligned\n", ioc->name,
2004                     __func__);
2005                 return -EINVAL;
2006         }
2007
2008         if (karg.starting_offset > request_size)
2009                 return -EINVAL;
2010
2011         diag_data = (void *)(request_data + karg.starting_offset);
2012         dctlprintk(ioc, pr_info(MPT3SAS_FMT
2013                 "%s: diag_buffer(%p), offset(%d), sz(%d)\n",
2014                 ioc->name, __func__,
2015             diag_data, karg.starting_offset, karg.bytes_to_read));
2016
2017         /* Truncate data on requests that are too large */
2018         if ((diag_data + karg.bytes_to_read < diag_data) ||
2019             (diag_data + karg.bytes_to_read > request_data + request_size))
2020                 copy_size = request_size - karg.starting_offset;
2021         else
2022                 copy_size = karg.bytes_to_read;
2023
2024         if (copy_to_user((void __user *)uarg->diagnostic_data,
2025             diag_data, copy_size)) {
2026                 pr_err(MPT3SAS_FMT
2027                         "%s: Unable to write mpt_diag_read_buffer_t data @ %p\n",
2028                         ioc->name, __func__, diag_data);
2029                 return -EFAULT;
2030         }
2031
2032         if ((karg.flags & MPT3_FLAGS_REREGISTER) == 0)
2033                 return 0;
2034
2035         dctlprintk(ioc, pr_info(MPT3SAS_FMT
2036                 "%s: Reregister buffer_type(0x%02x)\n",
2037                 ioc->name, __func__, buffer_type));
2038         if ((ioc->diag_buffer_status[buffer_type] &
2039             MPT3_DIAG_BUFFER_IS_RELEASED) == 0) {
2040                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
2041                         "%s: buffer_type(0x%02x) is still registered\n",
2042                         ioc->name, __func__, buffer_type));
2043                 return 0;
2044         }
2045         /* Get a free request frame and save the message context.
2046         */
2047
2048         if (ioc->ctl_cmds.status != MPT3_CMD_NOT_USED) {
2049                 pr_err(MPT3SAS_FMT "%s: ctl_cmd in use\n",
2050                     ioc->name, __func__);
2051                 rc = -EAGAIN;
2052                 goto out;
2053         }
2054
2055         smid = mpt3sas_base_get_smid(ioc, ioc->ctl_cb_idx);
2056         if (!smid) {
2057                 pr_err(MPT3SAS_FMT "%s: failed obtaining a smid\n",
2058                     ioc->name, __func__);
2059                 rc = -EAGAIN;
2060                 goto out;
2061         }
2062
2063         rc = 0;
2064         ioc->ctl_cmds.status = MPT3_CMD_PENDING;
2065         memset(ioc->ctl_cmds.reply, 0, ioc->reply_sz);
2066         mpi_request = mpt3sas_base_get_msg_frame(ioc, smid);
2067         ioc->ctl_cmds.smid = smid;
2068
2069         mpi_request->Function = MPI2_FUNCTION_DIAG_BUFFER_POST;
2070         mpi_request->BufferType = buffer_type;
2071         mpi_request->BufferLength =
2072             cpu_to_le32(ioc->diag_buffer_sz[buffer_type]);
2073         mpi_request->BufferAddress =
2074             cpu_to_le64(ioc->diag_buffer_dma[buffer_type]);
2075         for (i = 0; i < MPT3_PRODUCT_SPECIFIC_DWORDS; i++)
2076                 mpi_request->ProductSpecific[i] =
2077                         cpu_to_le32(ioc->product_specific[buffer_type][i]);
2078         mpi_request->VF_ID = 0; /* TODO */
2079         mpi_request->VP_ID = 0;
2080
2081         init_completion(&ioc->ctl_cmds.done);
2082         mpt3sas_base_put_smid_default(ioc, smid);
2083         timeleft = wait_for_completion_timeout(&ioc->ctl_cmds.done,
2084             MPT3_IOCTL_DEFAULT_TIMEOUT*HZ);
2085
2086         if (!(ioc->ctl_cmds.status & MPT3_CMD_COMPLETE)) {
2087                 pr_err(MPT3SAS_FMT "%s: timeout\n", ioc->name,
2088                     __func__);
2089                 _debug_dump_mf(mpi_request,
2090                     sizeof(Mpi2DiagBufferPostRequest_t)/4);
2091                 if (!(ioc->ctl_cmds.status & MPT3_CMD_RESET))
2092                         issue_reset = 1;
2093                 goto issue_host_reset;
2094         }
2095
2096         /* process the completed Reply Message Frame */
2097         if ((ioc->ctl_cmds.status & MPT3_CMD_REPLY_VALID) == 0) {
2098                 pr_err(MPT3SAS_FMT "%s: no reply message\n",
2099                     ioc->name, __func__);
2100                 rc = -EFAULT;
2101                 goto out;
2102         }
2103
2104         mpi_reply = ioc->ctl_cmds.reply;
2105         ioc_status = le16_to_cpu(mpi_reply->IOCStatus) & MPI2_IOCSTATUS_MASK;
2106
2107         if (ioc_status == MPI2_IOCSTATUS_SUCCESS) {
2108                 ioc->diag_buffer_status[buffer_type] |=
2109                     MPT3_DIAG_BUFFER_IS_REGISTERED;
2110                 dctlprintk(ioc, pr_info(MPT3SAS_FMT "%s: success\n",
2111                     ioc->name, __func__));
2112         } else {
2113                 pr_info(MPT3SAS_FMT
2114                         "%s: ioc_status(0x%04x) log_info(0x%08x)\n",
2115                         ioc->name, __func__,
2116                     ioc_status, le32_to_cpu(mpi_reply->IOCLogInfo));
2117                 rc = -EFAULT;
2118         }
2119
2120  issue_host_reset:
2121         if (issue_reset)
2122                 mpt3sas_base_hard_reset_handler(ioc, CAN_SLEEP,
2123                     FORCE_BIG_HAMMER);
2124
2125  out:
2126
2127         ioc->ctl_cmds.status = MPT3_CMD_NOT_USED;
2128         return rc;
2129 }
2130
2131
2132
2133 #ifdef CONFIG_COMPAT
2134 /**
2135  * _ctl_compat_mpt_command - convert 32bit pointers to 64bit.
2136  * @ioc: per adapter object
2137  * @cmd - ioctl opcode
2138  * @arg - (struct mpt3_ioctl_command32)
2139  *
2140  * MPT3COMMAND32 - Handle 32bit applications running on 64bit os.
2141  */
2142 static long
2143 _ctl_compat_mpt_command(struct MPT3SAS_ADAPTER *ioc, unsigned cmd,
2144         void __user *arg)
2145 {
2146         struct mpt3_ioctl_command32 karg32;
2147         struct mpt3_ioctl_command32 __user *uarg;
2148         struct mpt3_ioctl_command karg;
2149
2150         if (_IOC_SIZE(cmd) != sizeof(struct mpt3_ioctl_command32))
2151                 return -EINVAL;
2152
2153         uarg = (struct mpt3_ioctl_command32 __user *) arg;
2154
2155         if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32))) {
2156                 pr_err("failure at %s:%d/%s()!\n",
2157                     __FILE__, __LINE__, __func__);
2158                 return -EFAULT;
2159         }
2160
2161         memset(&karg, 0, sizeof(struct mpt3_ioctl_command));
2162         karg.hdr.ioc_number = karg32.hdr.ioc_number;
2163         karg.hdr.port_number = karg32.hdr.port_number;
2164         karg.hdr.max_data_size = karg32.hdr.max_data_size;
2165         karg.timeout = karg32.timeout;
2166         karg.max_reply_bytes = karg32.max_reply_bytes;
2167         karg.data_in_size = karg32.data_in_size;
2168         karg.data_out_size = karg32.data_out_size;
2169         karg.max_sense_bytes = karg32.max_sense_bytes;
2170         karg.data_sge_offset = karg32.data_sge_offset;
2171         karg.reply_frame_buf_ptr = compat_ptr(karg32.reply_frame_buf_ptr);
2172         karg.data_in_buf_ptr = compat_ptr(karg32.data_in_buf_ptr);
2173         karg.data_out_buf_ptr = compat_ptr(karg32.data_out_buf_ptr);
2174         karg.sense_data_ptr = compat_ptr(karg32.sense_data_ptr);
2175         return _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2176 }
2177 #endif
2178
2179 /**
2180  * _ctl_ioctl_main - main ioctl entry point
2181  * @file - (struct file)
2182  * @cmd - ioctl opcode
2183  * @arg -
2184  * compat - handles 32 bit applications in 64bit os
2185  */
2186 static long
2187 _ctl_ioctl_main(struct file *file, unsigned int cmd, void __user *arg,
2188         u8 compat)
2189 {
2190         struct MPT3SAS_ADAPTER *ioc;
2191         struct mpt3_ioctl_header ioctl_header;
2192         enum block_state state;
2193         long ret = -EINVAL;
2194
2195         /* get IOCTL header */
2196         if (copy_from_user(&ioctl_header, (char __user *)arg,
2197             sizeof(struct mpt3_ioctl_header))) {
2198                 pr_err("failure at %s:%d/%s()!\n",
2199                     __FILE__, __LINE__, __func__);
2200                 return -EFAULT;
2201         }
2202
2203         if (_ctl_verify_adapter(ioctl_header.ioc_number, &ioc) == -1 || !ioc)
2204                 return -ENODEV;
2205
2206         if (ioc->shost_recovery || ioc->pci_error_recovery ||
2207             ioc->is_driver_loading)
2208                 return -EAGAIN;
2209
2210         state = (file->f_flags & O_NONBLOCK) ? NON_BLOCKING : BLOCKING;
2211         if (state == NON_BLOCKING) {
2212                 if (!mutex_trylock(&ioc->ctl_cmds.mutex))
2213                         return -EAGAIN;
2214         } else if (mutex_lock_interruptible(&ioc->ctl_cmds.mutex))
2215                 return -ERESTARTSYS;
2216
2217
2218         switch (cmd) {
2219         case MPT3IOCINFO:
2220                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_iocinfo))
2221                         ret = _ctl_getiocinfo(ioc, arg);
2222                 break;
2223 #ifdef CONFIG_COMPAT
2224         case MPT3COMMAND32:
2225 #endif
2226         case MPT3COMMAND:
2227         {
2228                 struct mpt3_ioctl_command __user *uarg;
2229                 struct mpt3_ioctl_command karg;
2230
2231 #ifdef CONFIG_COMPAT
2232                 if (compat) {
2233                         ret = _ctl_compat_mpt_command(ioc, cmd, arg);
2234                         break;
2235                 }
2236 #endif
2237                 if (copy_from_user(&karg, arg, sizeof(karg))) {
2238                         pr_err("failure at %s:%d/%s()!\n",
2239                             __FILE__, __LINE__, __func__);
2240                         ret = -EFAULT;
2241                         break;
2242                 }
2243
2244                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_command)) {
2245                         uarg = arg;
2246                         ret = _ctl_do_mpt_command(ioc, karg, &uarg->mf);
2247                 }
2248                 break;
2249         }
2250         case MPT3EVENTQUERY:
2251                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventquery))
2252                         ret = _ctl_eventquery(ioc, arg);
2253                 break;
2254         case MPT3EVENTENABLE:
2255                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_eventenable))
2256                         ret = _ctl_eventenable(ioc, arg);
2257                 break;
2258         case MPT3EVENTREPORT:
2259                 ret = _ctl_eventreport(ioc, arg);
2260                 break;
2261         case MPT3HARDRESET:
2262                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_diag_reset))
2263                         ret = _ctl_do_reset(ioc, arg);
2264                 break;
2265         case MPT3BTDHMAPPING:
2266                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_ioctl_btdh_mapping))
2267                         ret = _ctl_btdh_mapping(ioc, arg);
2268                 break;
2269         case MPT3DIAGREGISTER:
2270                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_register))
2271                         ret = _ctl_diag_register(ioc, arg);
2272                 break;
2273         case MPT3DIAGUNREGISTER:
2274                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_unregister))
2275                         ret = _ctl_diag_unregister(ioc, arg);
2276                 break;
2277         case MPT3DIAGQUERY:
2278                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_query))
2279                         ret = _ctl_diag_query(ioc, arg);
2280                 break;
2281         case MPT3DIAGRELEASE:
2282                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_release))
2283                         ret = _ctl_diag_release(ioc, arg);
2284                 break;
2285         case MPT3DIAGREADBUFFER:
2286                 if (_IOC_SIZE(cmd) == sizeof(struct mpt3_diag_read_buffer))
2287                         ret = _ctl_diag_read_buffer(ioc, arg);
2288                 break;
2289         default:
2290                 dctlprintk(ioc, pr_info(MPT3SAS_FMT
2291                     "unsupported ioctl opcode(0x%08x)\n", ioc->name, cmd));
2292                 break;
2293         }
2294
2295         mutex_unlock(&ioc->ctl_cmds.mutex);
2296         return ret;
2297 }
2298
2299 /**
2300  * _ctl_ioctl - main ioctl entry point (unlocked)
2301  * @file - (struct file)
2302  * @cmd - ioctl opcode
2303  * @arg -
2304  */
2305 static long
2306 _ctl_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
2307 {
2308         long ret;
2309
2310         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 0);
2311         return ret;
2312 }
2313
2314 #ifdef CONFIG_COMPAT
2315 /**
2316  * _ctl_ioctl_compat - main ioctl entry point (compat)
2317  * @file -
2318  * @cmd -
2319  * @arg -
2320  *
2321  * This routine handles 32 bit applications in 64bit os.
2322  */
2323 static long
2324 _ctl_ioctl_compat(struct file *file, unsigned cmd, unsigned long arg)
2325 {
2326         long ret;
2327
2328         ret = _ctl_ioctl_main(file, cmd, (void __user *)arg, 1);
2329         return ret;
2330 }
2331 #endif
2332
2333 /* scsi host attributes */
2334 /**
2335  * _ctl_version_fw_show - firmware version
2336  * @cdev - pointer to embedded class device
2337  * @buf - the buffer returned
2338  *
2339  * A sysfs 'read-only' shost attribute.
2340  */
2341 static ssize_t
2342 _ctl_version_fw_show(struct device *cdev, struct device_attribute *attr,
2343         char *buf)
2344 {
2345         struct Scsi_Host *shost = class_to_shost(cdev);
2346         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2347
2348         return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2349             (ioc->facts.FWVersion.Word & 0xFF000000) >> 24,
2350             (ioc->facts.FWVersion.Word & 0x00FF0000) >> 16,
2351             (ioc->facts.FWVersion.Word & 0x0000FF00) >> 8,
2352             ioc->facts.FWVersion.Word & 0x000000FF);
2353 }
2354 static DEVICE_ATTR(version_fw, S_IRUGO, _ctl_version_fw_show, NULL);
2355
2356 /**
2357  * _ctl_version_bios_show - bios version
2358  * @cdev - pointer to embedded class device
2359  * @buf - the buffer returned
2360  *
2361  * A sysfs 'read-only' shost attribute.
2362  */
2363 static ssize_t
2364 _ctl_version_bios_show(struct device *cdev, struct device_attribute *attr,
2365         char *buf)
2366 {
2367         struct Scsi_Host *shost = class_to_shost(cdev);
2368         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2369
2370         u32 version = le32_to_cpu(ioc->bios_pg3.BiosVersion);
2371
2372         return snprintf(buf, PAGE_SIZE, "%02d.%02d.%02d.%02d\n",
2373             (version & 0xFF000000) >> 24,
2374             (version & 0x00FF0000) >> 16,
2375             (version & 0x0000FF00) >> 8,
2376             version & 0x000000FF);
2377 }
2378 static DEVICE_ATTR(version_bios, S_IRUGO, _ctl_version_bios_show, NULL);
2379
2380 /**
2381  * _ctl_version_mpi_show - MPI (message passing interface) version
2382  * @cdev - pointer to embedded class device
2383  * @buf - the buffer returned
2384  *
2385  * A sysfs 'read-only' shost attribute.
2386  */
2387 static ssize_t
2388 _ctl_version_mpi_show(struct device *cdev, struct device_attribute *attr,
2389         char *buf)
2390 {
2391         struct Scsi_Host *shost = class_to_shost(cdev);
2392         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2393
2394         return snprintf(buf, PAGE_SIZE, "%03x.%02x\n",
2395             ioc->facts.MsgVersion, ioc->facts.HeaderVersion >> 8);
2396 }
2397 static DEVICE_ATTR(version_mpi, S_IRUGO, _ctl_version_mpi_show, NULL);
2398
2399 /**
2400  * _ctl_version_product_show - product name
2401  * @cdev - pointer to embedded class device
2402  * @buf - the buffer returned
2403  *
2404  * A sysfs 'read-only' shost attribute.
2405  */
2406 static ssize_t
2407 _ctl_version_product_show(struct device *cdev, struct device_attribute *attr,
2408         char *buf)
2409 {
2410         struct Scsi_Host *shost = class_to_shost(cdev);
2411         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2412
2413         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.ChipName);
2414 }
2415 static DEVICE_ATTR(version_product, S_IRUGO, _ctl_version_product_show, NULL);
2416
2417 /**
2418  * _ctl_version_nvdata_persistent_show - ndvata persistent version
2419  * @cdev - pointer to embedded class device
2420  * @buf - the buffer returned
2421  *
2422  * A sysfs 'read-only' shost attribute.
2423  */
2424 static ssize_t
2425 _ctl_version_nvdata_persistent_show(struct device *cdev,
2426         struct device_attribute *attr, char *buf)
2427 {
2428         struct Scsi_Host *shost = class_to_shost(cdev);
2429         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2430
2431         return snprintf(buf, PAGE_SIZE, "%08xh\n",
2432             le32_to_cpu(ioc->iounit_pg0.NvdataVersionPersistent.Word));
2433 }
2434 static DEVICE_ATTR(version_nvdata_persistent, S_IRUGO,
2435         _ctl_version_nvdata_persistent_show, NULL);
2436
2437 /**
2438  * _ctl_version_nvdata_default_show - nvdata default version
2439  * @cdev - pointer to embedded class device
2440  * @buf - the buffer returned
2441  *
2442  * A sysfs 'read-only' shost attribute.
2443  */
2444 static ssize_t
2445 _ctl_version_nvdata_default_show(struct device *cdev, struct device_attribute
2446         *attr, char *buf)
2447 {
2448         struct Scsi_Host *shost = class_to_shost(cdev);
2449         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2450
2451         return snprintf(buf, PAGE_SIZE, "%08xh\n",
2452             le32_to_cpu(ioc->iounit_pg0.NvdataVersionDefault.Word));
2453 }
2454 static DEVICE_ATTR(version_nvdata_default, S_IRUGO,
2455         _ctl_version_nvdata_default_show, NULL);
2456
2457 /**
2458  * _ctl_board_name_show - board name
2459  * @cdev - pointer to embedded class device
2460  * @buf - the buffer returned
2461  *
2462  * A sysfs 'read-only' shost attribute.
2463  */
2464 static ssize_t
2465 _ctl_board_name_show(struct device *cdev, struct device_attribute *attr,
2466         char *buf)
2467 {
2468         struct Scsi_Host *shost = class_to_shost(cdev);
2469         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2470
2471         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardName);
2472 }
2473 static DEVICE_ATTR(board_name, S_IRUGO, _ctl_board_name_show, NULL);
2474
2475 /**
2476  * _ctl_board_assembly_show - board assembly name
2477  * @cdev - pointer to embedded class device
2478  * @buf - the buffer returned
2479  *
2480  * A sysfs 'read-only' shost attribute.
2481  */
2482 static ssize_t
2483 _ctl_board_assembly_show(struct device *cdev, struct device_attribute *attr,
2484         char *buf)
2485 {
2486         struct Scsi_Host *shost = class_to_shost(cdev);
2487         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2488
2489         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardAssembly);
2490 }
2491 static DEVICE_ATTR(board_assembly, S_IRUGO, _ctl_board_assembly_show, NULL);
2492
2493 /**
2494  * _ctl_board_tracer_show - board tracer number
2495  * @cdev - pointer to embedded class device
2496  * @buf - the buffer returned
2497  *
2498  * A sysfs 'read-only' shost attribute.
2499  */
2500 static ssize_t
2501 _ctl_board_tracer_show(struct device *cdev, struct device_attribute *attr,
2502         char *buf)
2503 {
2504         struct Scsi_Host *shost = class_to_shost(cdev);
2505         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2506
2507         return snprintf(buf, 16, "%s\n", ioc->manu_pg0.BoardTracerNumber);
2508 }
2509 static DEVICE_ATTR(board_tracer, S_IRUGO, _ctl_board_tracer_show, NULL);
2510
2511 /**
2512  * _ctl_io_delay_show - io missing delay
2513  * @cdev - pointer to embedded class device
2514  * @buf - the buffer returned
2515  *
2516  * This is for firmware implemention for deboucing device
2517  * removal events.
2518  *
2519  * A sysfs 'read-only' shost attribute.
2520  */
2521 static ssize_t
2522 _ctl_io_delay_show(struct device *cdev, struct device_attribute *attr,
2523         char *buf)
2524 {
2525         struct Scsi_Host *shost = class_to_shost(cdev);
2526         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2527
2528         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->io_missing_delay);
2529 }
2530 static DEVICE_ATTR(io_delay, S_IRUGO, _ctl_io_delay_show, NULL);
2531
2532 /**
2533  * _ctl_device_delay_show - device missing delay
2534  * @cdev - pointer to embedded class device
2535  * @buf - the buffer returned
2536  *
2537  * This is for firmware implemention for deboucing device
2538  * removal events.
2539  *
2540  * A sysfs 'read-only' shost attribute.
2541  */
2542 static ssize_t
2543 _ctl_device_delay_show(struct device *cdev, struct device_attribute *attr,
2544         char *buf)
2545 {
2546         struct Scsi_Host *shost = class_to_shost(cdev);
2547         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2548
2549         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->device_missing_delay);
2550 }
2551 static DEVICE_ATTR(device_delay, S_IRUGO, _ctl_device_delay_show, NULL);
2552
2553 /**
2554  * _ctl_fw_queue_depth_show - global credits
2555  * @cdev - pointer to embedded class device
2556  * @buf - the buffer returned
2557  *
2558  * This is firmware queue depth limit
2559  *
2560  * A sysfs 'read-only' shost attribute.
2561  */
2562 static ssize_t
2563 _ctl_fw_queue_depth_show(struct device *cdev, struct device_attribute *attr,
2564         char *buf)
2565 {
2566         struct Scsi_Host *shost = class_to_shost(cdev);
2567         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2568
2569         return snprintf(buf, PAGE_SIZE, "%02d\n", ioc->facts.RequestCredit);
2570 }
2571 static DEVICE_ATTR(fw_queue_depth, S_IRUGO, _ctl_fw_queue_depth_show, NULL);
2572
2573 /**
2574  * _ctl_sas_address_show - sas address
2575  * @cdev - pointer to embedded class device
2576  * @buf - the buffer returned
2577  *
2578  * This is the controller sas address
2579  *
2580  * A sysfs 'read-only' shost attribute.
2581  */
2582 static ssize_t
2583 _ctl_host_sas_address_show(struct device *cdev, struct device_attribute *attr,
2584         char *buf)
2585
2586 {
2587         struct Scsi_Host *shost = class_to_shost(cdev);
2588         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2589
2590         return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
2591             (unsigned long long)ioc->sas_hba.sas_address);
2592 }
2593 static DEVICE_ATTR(host_sas_address, S_IRUGO,
2594         _ctl_host_sas_address_show, NULL);
2595
2596 /**
2597  * _ctl_logging_level_show - logging level
2598  * @cdev - pointer to embedded class device
2599  * @buf - the buffer returned
2600  *
2601  * A sysfs 'read/write' shost attribute.
2602  */
2603 static ssize_t
2604 _ctl_logging_level_show(struct device *cdev, struct device_attribute *attr,
2605         char *buf)
2606 {
2607         struct Scsi_Host *shost = class_to_shost(cdev);
2608         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2609
2610         return snprintf(buf, PAGE_SIZE, "%08xh\n", ioc->logging_level);
2611 }
2612 static ssize_t
2613 _ctl_logging_level_store(struct device *cdev, struct device_attribute *attr,
2614         const char *buf, size_t count)
2615 {
2616         struct Scsi_Host *shost = class_to_shost(cdev);
2617         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2618         int val = 0;
2619
2620         if (sscanf(buf, "%x", &val) != 1)
2621                 return -EINVAL;
2622
2623         ioc->logging_level = val;
2624         pr_info(MPT3SAS_FMT "logging_level=%08xh\n", ioc->name,
2625             ioc->logging_level);
2626         return strlen(buf);
2627 }
2628 static DEVICE_ATTR(logging_level, S_IRUGO | S_IWUSR, _ctl_logging_level_show,
2629         _ctl_logging_level_store);
2630
2631 /**
2632  * _ctl_fwfault_debug_show - show/store fwfault_debug
2633  * @cdev - pointer to embedded class device
2634  * @buf - the buffer returned
2635  *
2636  * mpt3sas_fwfault_debug is command line option
2637  * A sysfs 'read/write' shost attribute.
2638  */
2639 static ssize_t
2640 _ctl_fwfault_debug_show(struct device *cdev, struct device_attribute *attr,
2641         char *buf)
2642 {
2643         struct Scsi_Host *shost = class_to_shost(cdev);
2644         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2645
2646         return snprintf(buf, PAGE_SIZE, "%d\n", ioc->fwfault_debug);
2647 }
2648 static ssize_t
2649 _ctl_fwfault_debug_store(struct device *cdev, struct device_attribute *attr,
2650         const char *buf, size_t count)
2651 {
2652         struct Scsi_Host *shost = class_to_shost(cdev);
2653         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2654         int val = 0;
2655
2656         if (sscanf(buf, "%d", &val) != 1)
2657                 return -EINVAL;
2658
2659         ioc->fwfault_debug = val;
2660         pr_info(MPT3SAS_FMT "fwfault_debug=%d\n", ioc->name,
2661             ioc->fwfault_debug);
2662         return strlen(buf);
2663 }
2664 static DEVICE_ATTR(fwfault_debug, S_IRUGO | S_IWUSR,
2665         _ctl_fwfault_debug_show, _ctl_fwfault_debug_store);
2666
2667 /**
2668  * _ctl_ioc_reset_count_show - ioc reset count
2669  * @cdev - pointer to embedded class device
2670  * @buf - the buffer returned
2671  *
2672  * This is firmware queue depth limit
2673  *
2674  * A sysfs 'read-only' shost attribute.
2675  */
2676 static ssize_t
2677 _ctl_ioc_reset_count_show(struct device *cdev, struct device_attribute *attr,
2678         char *buf)
2679 {
2680         struct Scsi_Host *shost = class_to_shost(cdev);
2681         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2682
2683         return snprintf(buf, PAGE_SIZE, "%d\n", ioc->ioc_reset_count);
2684 }
2685 static DEVICE_ATTR(ioc_reset_count, S_IRUGO, _ctl_ioc_reset_count_show, NULL);
2686
2687 /**
2688  * _ctl_ioc_reply_queue_count_show - number of reply queues
2689  * @cdev - pointer to embedded class device
2690  * @buf - the buffer returned
2691  *
2692  * This is number of reply queues
2693  *
2694  * A sysfs 'read-only' shost attribute.
2695  */
2696 static ssize_t
2697 _ctl_ioc_reply_queue_count_show(struct device *cdev,
2698         struct device_attribute *attr, char *buf)
2699 {
2700         u8 reply_queue_count;
2701         struct Scsi_Host *shost = class_to_shost(cdev);
2702         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2703
2704         if ((ioc->facts.IOCCapabilities &
2705             MPI2_IOCFACTS_CAPABILITY_MSI_X_INDEX) && ioc->msix_enable)
2706                 reply_queue_count = ioc->reply_queue_count;
2707         else
2708                 reply_queue_count = 1;
2709
2710         return snprintf(buf, PAGE_SIZE, "%d\n", reply_queue_count);
2711 }
2712 static DEVICE_ATTR(reply_queue_count, S_IRUGO, _ctl_ioc_reply_queue_count_show,
2713         NULL);
2714
2715 struct DIAG_BUFFER_START {
2716         __le32  Size;
2717         __le32  DiagVersion;
2718         u8      BufferType;
2719         u8      Reserved[3];
2720         __le32  Reserved1;
2721         __le32  Reserved2;
2722         __le32  Reserved3;
2723 };
2724
2725 /**
2726  * _ctl_host_trace_buffer_size_show - host buffer size (trace only)
2727  * @cdev - pointer to embedded class device
2728  * @buf - the buffer returned
2729  *
2730  * A sysfs 'read-only' shost attribute.
2731  */
2732 static ssize_t
2733 _ctl_host_trace_buffer_size_show(struct device *cdev,
2734         struct device_attribute *attr, char *buf)
2735 {
2736         struct Scsi_Host *shost = class_to_shost(cdev);
2737         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2738         u32 size = 0;
2739         struct DIAG_BUFFER_START *request_data;
2740
2741         if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2742                 pr_err(MPT3SAS_FMT
2743                         "%s: host_trace_buffer is not registered\n",
2744                         ioc->name, __func__);
2745                 return 0;
2746         }
2747
2748         if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2749             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2750                 pr_err(MPT3SAS_FMT
2751                         "%s: host_trace_buffer is not registered\n",
2752                         ioc->name, __func__);
2753                 return 0;
2754         }
2755
2756         request_data = (struct DIAG_BUFFER_START *)
2757             ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE];
2758         if ((le32_to_cpu(request_data->DiagVersion) == 0x00000000 ||
2759             le32_to_cpu(request_data->DiagVersion) == 0x01000000 ||
2760             le32_to_cpu(request_data->DiagVersion) == 0x01010000) &&
2761             le32_to_cpu(request_data->Reserved3) == 0x4742444c)
2762                 size = le32_to_cpu(request_data->Size);
2763
2764         ioc->ring_buffer_sz = size;
2765         return snprintf(buf, PAGE_SIZE, "%d\n", size);
2766 }
2767 static DEVICE_ATTR(host_trace_buffer_size, S_IRUGO,
2768         _ctl_host_trace_buffer_size_show, NULL);
2769
2770 /**
2771  * _ctl_host_trace_buffer_show - firmware ring buffer (trace only)
2772  * @cdev - pointer to embedded class device
2773  * @buf - the buffer returned
2774  *
2775  * A sysfs 'read/write' shost attribute.
2776  *
2777  * You will only be able to read 4k bytes of ring buffer at a time.
2778  * In order to read beyond 4k bytes, you will have to write out the
2779  * offset to the same attribute, it will move the pointer.
2780  */
2781 static ssize_t
2782 _ctl_host_trace_buffer_show(struct device *cdev, struct device_attribute *attr,
2783         char *buf)
2784 {
2785         struct Scsi_Host *shost = class_to_shost(cdev);
2786         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2787         void *request_data;
2788         u32 size;
2789
2790         if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) {
2791                 pr_err(MPT3SAS_FMT
2792                         "%s: host_trace_buffer is not registered\n",
2793                         ioc->name, __func__);
2794                 return 0;
2795         }
2796
2797         if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2798             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0) {
2799                 pr_err(MPT3SAS_FMT
2800                         "%s: host_trace_buffer is not registered\n",
2801                         ioc->name, __func__);
2802                 return 0;
2803         }
2804
2805         if (ioc->ring_buffer_offset > ioc->ring_buffer_sz)
2806                 return 0;
2807
2808         size = ioc->ring_buffer_sz - ioc->ring_buffer_offset;
2809         size = (size >= PAGE_SIZE) ? (PAGE_SIZE - 1) : size;
2810         request_data = ioc->diag_buffer[0] + ioc->ring_buffer_offset;
2811         memcpy(buf, request_data, size);
2812         return size;
2813 }
2814
2815 static ssize_t
2816 _ctl_host_trace_buffer_store(struct device *cdev, struct device_attribute *attr,
2817         const char *buf, size_t count)
2818 {
2819         struct Scsi_Host *shost = class_to_shost(cdev);
2820         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2821         int val = 0;
2822
2823         if (sscanf(buf, "%d", &val) != 1)
2824                 return -EINVAL;
2825
2826         ioc->ring_buffer_offset = val;
2827         return strlen(buf);
2828 }
2829 static DEVICE_ATTR(host_trace_buffer, S_IRUGO | S_IWUSR,
2830         _ctl_host_trace_buffer_show, _ctl_host_trace_buffer_store);
2831
2832
2833 /*****************************************/
2834
2835 /**
2836  * _ctl_host_trace_buffer_enable_show - firmware ring buffer (trace only)
2837  * @cdev - pointer to embedded class device
2838  * @buf - the buffer returned
2839  *
2840  * A sysfs 'read/write' shost attribute.
2841  *
2842  * This is a mechnism to post/release host_trace_buffers
2843  */
2844 static ssize_t
2845 _ctl_host_trace_buffer_enable_show(struct device *cdev,
2846         struct device_attribute *attr, char *buf)
2847 {
2848         struct Scsi_Host *shost = class_to_shost(cdev);
2849         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2850
2851         if ((!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) ||
2852            ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2853             MPT3_DIAG_BUFFER_IS_REGISTERED) == 0))
2854                 return snprintf(buf, PAGE_SIZE, "off\n");
2855         else if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2856             MPT3_DIAG_BUFFER_IS_RELEASED))
2857                 return snprintf(buf, PAGE_SIZE, "release\n");
2858         else
2859                 return snprintf(buf, PAGE_SIZE, "post\n");
2860 }
2861
2862 static ssize_t
2863 _ctl_host_trace_buffer_enable_store(struct device *cdev,
2864         struct device_attribute *attr, const char *buf, size_t count)
2865 {
2866         struct Scsi_Host *shost = class_to_shost(cdev);
2867         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2868         char str[10] = "";
2869         struct mpt3_diag_register diag_register;
2870         u8 issue_reset = 0;
2871
2872         /* don't allow post/release occurr while recovery is active */
2873         if (ioc->shost_recovery || ioc->remove_host ||
2874             ioc->pci_error_recovery || ioc->is_driver_loading)
2875                 return -EBUSY;
2876
2877         if (sscanf(buf, "%9s", str) != 1)
2878                 return -EINVAL;
2879
2880         if (!strcmp(str, "post")) {
2881                 /* exit out if host buffers are already posted */
2882                 if ((ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE]) &&
2883                     (ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2884                     MPT3_DIAG_BUFFER_IS_REGISTERED) &&
2885                     ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2886                     MPT3_DIAG_BUFFER_IS_RELEASED) == 0))
2887                         goto out;
2888                 memset(&diag_register, 0, sizeof(struct mpt3_diag_register));
2889                 pr_info(MPT3SAS_FMT "posting host trace buffers\n",
2890                     ioc->name);
2891                 diag_register.buffer_type = MPI2_DIAG_BUF_TYPE_TRACE;
2892                 diag_register.requested_buffer_size = (1024 * 1024);
2893                 diag_register.unique_id = 0x7075900;
2894                 ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] = 0;
2895                 _ctl_diag_register_2(ioc,  &diag_register);
2896         } else if (!strcmp(str, "release")) {
2897                 /* exit out if host buffers are already released */
2898                 if (!ioc->diag_buffer[MPI2_DIAG_BUF_TYPE_TRACE])
2899                         goto out;
2900                 if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2901                     MPT3_DIAG_BUFFER_IS_REGISTERED) == 0)
2902                         goto out;
2903                 if ((ioc->diag_buffer_status[MPI2_DIAG_BUF_TYPE_TRACE] &
2904                     MPT3_DIAG_BUFFER_IS_RELEASED))
2905                         goto out;
2906                 pr_info(MPT3SAS_FMT "releasing host trace buffer\n",
2907                     ioc->name);
2908                 mpt3sas_send_diag_release(ioc, MPI2_DIAG_BUF_TYPE_TRACE,
2909                     &issue_reset);
2910         }
2911
2912  out:
2913         return strlen(buf);
2914 }
2915 static DEVICE_ATTR(host_trace_buffer_enable, S_IRUGO | S_IWUSR,
2916         _ctl_host_trace_buffer_enable_show,
2917         _ctl_host_trace_buffer_enable_store);
2918
2919 /*********** diagnostic trigger suppport *********************************/
2920
2921 /**
2922  * _ctl_diag_trigger_master_show - show the diag_trigger_master attribute
2923  * @cdev - pointer to embedded class device
2924  * @buf - the buffer returned
2925  *
2926  * A sysfs 'read/write' shost attribute.
2927  */
2928 static ssize_t
2929 _ctl_diag_trigger_master_show(struct device *cdev,
2930         struct device_attribute *attr, char *buf)
2931
2932 {
2933         struct Scsi_Host *shost = class_to_shost(cdev);
2934         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2935         unsigned long flags;
2936         ssize_t rc;
2937
2938         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
2939         rc = sizeof(struct SL_WH_MASTER_TRIGGER_T);
2940         memcpy(buf, &ioc->diag_trigger_master, rc);
2941         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
2942         return rc;
2943 }
2944
2945 /**
2946  * _ctl_diag_trigger_master_store - store the diag_trigger_master attribute
2947  * @cdev - pointer to embedded class device
2948  * @buf - the buffer returned
2949  *
2950  * A sysfs 'read/write' shost attribute.
2951  */
2952 static ssize_t
2953 _ctl_diag_trigger_master_store(struct device *cdev,
2954         struct device_attribute *attr, const char *buf, size_t count)
2955
2956 {
2957         struct Scsi_Host *shost = class_to_shost(cdev);
2958         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2959         unsigned long flags;
2960         ssize_t rc;
2961
2962         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
2963         rc = min(sizeof(struct SL_WH_MASTER_TRIGGER_T), count);
2964         memset(&ioc->diag_trigger_master, 0,
2965             sizeof(struct SL_WH_MASTER_TRIGGER_T));
2966         memcpy(&ioc->diag_trigger_master, buf, rc);
2967         ioc->diag_trigger_master.MasterData |=
2968             (MASTER_TRIGGER_FW_FAULT + MASTER_TRIGGER_ADAPTER_RESET);
2969         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
2970         return rc;
2971 }
2972 static DEVICE_ATTR(diag_trigger_master, S_IRUGO | S_IWUSR,
2973         _ctl_diag_trigger_master_show, _ctl_diag_trigger_master_store);
2974
2975
2976 /**
2977  * _ctl_diag_trigger_event_show - show the diag_trigger_event attribute
2978  * @cdev - pointer to embedded class device
2979  * @buf - the buffer returned
2980  *
2981  * A sysfs 'read/write' shost attribute.
2982  */
2983 static ssize_t
2984 _ctl_diag_trigger_event_show(struct device *cdev,
2985         struct device_attribute *attr, char *buf)
2986 {
2987         struct Scsi_Host *shost = class_to_shost(cdev);
2988         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
2989         unsigned long flags;
2990         ssize_t rc;
2991
2992         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
2993         rc = sizeof(struct SL_WH_EVENT_TRIGGERS_T);
2994         memcpy(buf, &ioc->diag_trigger_event, rc);
2995         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
2996         return rc;
2997 }
2998
2999 /**
3000  * _ctl_diag_trigger_event_store - store the diag_trigger_event attribute
3001  * @cdev - pointer to embedded class device
3002  * @buf - the buffer returned
3003  *
3004  * A sysfs 'read/write' shost attribute.
3005  */
3006 static ssize_t
3007 _ctl_diag_trigger_event_store(struct device *cdev,
3008         struct device_attribute *attr, const char *buf, size_t count)
3009
3010 {
3011         struct Scsi_Host *shost = class_to_shost(cdev);
3012         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3013         unsigned long flags;
3014         ssize_t sz;
3015
3016         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3017         sz = min(sizeof(struct SL_WH_EVENT_TRIGGERS_T), count);
3018         memset(&ioc->diag_trigger_event, 0,
3019             sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3020         memcpy(&ioc->diag_trigger_event, buf, sz);
3021         if (ioc->diag_trigger_event.ValidEntries > NUM_VALID_ENTRIES)
3022                 ioc->diag_trigger_event.ValidEntries = NUM_VALID_ENTRIES;
3023         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3024         return sz;
3025 }
3026 static DEVICE_ATTR(diag_trigger_event, S_IRUGO | S_IWUSR,
3027         _ctl_diag_trigger_event_show, _ctl_diag_trigger_event_store);
3028
3029
3030 /**
3031  * _ctl_diag_trigger_scsi_show - show the diag_trigger_scsi attribute
3032  * @cdev - pointer to embedded class device
3033  * @buf - the buffer returned
3034  *
3035  * A sysfs 'read/write' shost attribute.
3036  */
3037 static ssize_t
3038 _ctl_diag_trigger_scsi_show(struct device *cdev,
3039         struct device_attribute *attr, char *buf)
3040 {
3041         struct Scsi_Host *shost = class_to_shost(cdev);
3042         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3043         unsigned long flags;
3044         ssize_t rc;
3045
3046         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3047         rc = sizeof(struct SL_WH_SCSI_TRIGGERS_T);
3048         memcpy(buf, &ioc->diag_trigger_scsi, rc);
3049         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3050         return rc;
3051 }
3052
3053 /**
3054  * _ctl_diag_trigger_scsi_store - store the diag_trigger_scsi attribute
3055  * @cdev - pointer to embedded class device
3056  * @buf - the buffer returned
3057  *
3058  * A sysfs 'read/write' shost attribute.
3059  */
3060 static ssize_t
3061 _ctl_diag_trigger_scsi_store(struct device *cdev,
3062         struct device_attribute *attr, const char *buf, size_t count)
3063 {
3064         struct Scsi_Host *shost = class_to_shost(cdev);
3065         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3066         unsigned long flags;
3067         ssize_t sz;
3068
3069         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3070         sz = min(sizeof(struct SL_WH_SCSI_TRIGGERS_T), count);
3071         memset(&ioc->diag_trigger_scsi, 0,
3072             sizeof(struct SL_WH_EVENT_TRIGGERS_T));
3073         memcpy(&ioc->diag_trigger_scsi, buf, sz);
3074         if (ioc->diag_trigger_scsi.ValidEntries > NUM_VALID_ENTRIES)
3075                 ioc->diag_trigger_scsi.ValidEntries = NUM_VALID_ENTRIES;
3076         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3077         return sz;
3078 }
3079 static DEVICE_ATTR(diag_trigger_scsi, S_IRUGO | S_IWUSR,
3080         _ctl_diag_trigger_scsi_show, _ctl_diag_trigger_scsi_store);
3081
3082
3083 /**
3084  * _ctl_diag_trigger_scsi_show - show the diag_trigger_mpi attribute
3085  * @cdev - pointer to embedded class device
3086  * @buf - the buffer returned
3087  *
3088  * A sysfs 'read/write' shost attribute.
3089  */
3090 static ssize_t
3091 _ctl_diag_trigger_mpi_show(struct device *cdev,
3092         struct device_attribute *attr, char *buf)
3093 {
3094         struct Scsi_Host *shost = class_to_shost(cdev);
3095         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3096         unsigned long flags;
3097         ssize_t rc;
3098
3099         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3100         rc = sizeof(struct SL_WH_MPI_TRIGGERS_T);
3101         memcpy(buf, &ioc->diag_trigger_mpi, rc);
3102         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3103         return rc;
3104 }
3105
3106 /**
3107  * _ctl_diag_trigger_mpi_store - store the diag_trigger_mpi attribute
3108  * @cdev - pointer to embedded class device
3109  * @buf - the buffer returned
3110  *
3111  * A sysfs 'read/write' shost attribute.
3112  */
3113 static ssize_t
3114 _ctl_diag_trigger_mpi_store(struct device *cdev,
3115         struct device_attribute *attr, const char *buf, size_t count)
3116 {
3117         struct Scsi_Host *shost = class_to_shost(cdev);
3118         struct MPT3SAS_ADAPTER *ioc = shost_priv(shost);
3119         unsigned long flags;
3120         ssize_t sz;
3121
3122         spin_lock_irqsave(&ioc->diag_trigger_lock, flags);
3123         sz = min(sizeof(struct SL_WH_MPI_TRIGGERS_T), count);
3124         memset(&ioc->diag_trigger_mpi, 0,
3125             sizeof(ioc->diag_trigger_mpi));
3126         memcpy(&ioc->diag_trigger_mpi, buf, sz);
3127         if (ioc->diag_trigger_mpi.ValidEntries > NUM_VALID_ENTRIES)
3128                 ioc->diag_trigger_mpi.ValidEntries = NUM_VALID_ENTRIES;
3129         spin_unlock_irqrestore(&ioc->diag_trigger_lock, flags);
3130         return sz;
3131 }
3132
3133 static DEVICE_ATTR(diag_trigger_mpi, S_IRUGO | S_IWUSR,
3134         _ctl_diag_trigger_mpi_show, _ctl_diag_trigger_mpi_store);
3135
3136 /*********** diagnostic trigger suppport *** END ****************************/
3137
3138
3139
3140 /*****************************************/
3141
3142 struct device_attribute *mpt3sas_host_attrs[] = {
3143         &dev_attr_version_fw,
3144         &dev_attr_version_bios,
3145         &dev_attr_version_mpi,
3146         &dev_attr_version_product,
3147         &dev_attr_version_nvdata_persistent,
3148         &dev_attr_version_nvdata_default,
3149         &dev_attr_board_name,
3150         &dev_attr_board_assembly,
3151         &dev_attr_board_tracer,
3152         &dev_attr_io_delay,
3153         &dev_attr_device_delay,
3154         &dev_attr_logging_level,
3155         &dev_attr_fwfault_debug,
3156         &dev_attr_fw_queue_depth,
3157         &dev_attr_host_sas_address,
3158         &dev_attr_ioc_reset_count,
3159         &dev_attr_host_trace_buffer_size,
3160         &dev_attr_host_trace_buffer,
3161         &dev_attr_host_trace_buffer_enable,
3162         &dev_attr_reply_queue_count,
3163         &dev_attr_diag_trigger_master,
3164         &dev_attr_diag_trigger_event,
3165         &dev_attr_diag_trigger_scsi,
3166         &dev_attr_diag_trigger_mpi,
3167         NULL,
3168 };
3169
3170 /* device attributes */
3171
3172 /**
3173  * _ctl_device_sas_address_show - sas address
3174  * @cdev - pointer to embedded class device
3175  * @buf - the buffer returned
3176  *
3177  * This is the sas address for the target
3178  *
3179  * A sysfs 'read-only' shost attribute.
3180  */
3181 static ssize_t
3182 _ctl_device_sas_address_show(struct device *dev, struct device_attribute *attr,
3183         char *buf)
3184 {
3185         struct scsi_device *sdev = to_scsi_device(dev);
3186         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3187
3188         return snprintf(buf, PAGE_SIZE, "0x%016llx\n",
3189             (unsigned long long)sas_device_priv_data->sas_target->sas_address);
3190 }
3191 static DEVICE_ATTR(sas_address, S_IRUGO, _ctl_device_sas_address_show, NULL);
3192
3193 /**
3194  * _ctl_device_handle_show - device handle
3195  * @cdev - pointer to embedded class device
3196  * @buf - the buffer returned
3197  *
3198  * This is the firmware assigned device handle
3199  *
3200  * A sysfs 'read-only' shost attribute.
3201  */
3202 static ssize_t
3203 _ctl_device_handle_show(struct device *dev, struct device_attribute *attr,
3204         char *buf)
3205 {
3206         struct scsi_device *sdev = to_scsi_device(dev);
3207         struct MPT3SAS_DEVICE *sas_device_priv_data = sdev->hostdata;
3208
3209         return snprintf(buf, PAGE_SIZE, "0x%04x\n",
3210             sas_device_priv_data->sas_target->handle);
3211 }
3212 static DEVICE_ATTR(sas_device_handle, S_IRUGO, _ctl_device_handle_show, NULL);
3213
3214 struct device_attribute *mpt3sas_dev_attrs[] = {
3215         &dev_attr_sas_address,
3216         &dev_attr_sas_device_handle,
3217         NULL,
3218 };
3219
3220 static const struct file_operations ctl_fops = {
3221         .owner = THIS_MODULE,
3222         .unlocked_ioctl = _ctl_ioctl,
3223         .poll = _ctl_poll,
3224         .fasync = _ctl_fasync,
3225 #ifdef CONFIG_COMPAT
3226         .compat_ioctl = _ctl_ioctl_compat,
3227 #endif
3228 };
3229
3230 static struct miscdevice ctl_dev = {
3231         .minor  = MPT3SAS_MINOR,
3232         .name   = MPT3SAS_DEV_NAME,
3233         .fops   = &ctl_fops,
3234 };
3235
3236 /**
3237  * mpt3sas_ctl_init - main entry point for ctl.
3238  *
3239  */
3240 void
3241 mpt3sas_ctl_init(void)
3242 {
3243         async_queue = NULL;
3244         if (misc_register(&ctl_dev) < 0)
3245                 pr_err("%s can't register misc device [minor=%d]\n",
3246                     MPT3SAS_DRIVER_NAME, MPT3SAS_MINOR);
3247
3248         init_waitqueue_head(&ctl_poll_wait);
3249 }
3250
3251 /**
3252  * mpt3sas_ctl_exit - exit point for ctl
3253  *
3254  */
3255 void
3256 mpt3sas_ctl_exit(void)
3257 {
3258         struct MPT3SAS_ADAPTER *ioc;
3259         int i;
3260
3261         list_for_each_entry(ioc, &mpt3sas_ioc_list, list) {
3262
3263                 /* free memory associated to diag buffers */
3264                 for (i = 0; i < MPI2_DIAG_BUF_TYPE_COUNT; i++) {
3265                         if (!ioc->diag_buffer[i])
3266                                 continue;
3267                         if (!(ioc->diag_buffer_status[i] &
3268                             MPT3_DIAG_BUFFER_IS_REGISTERED))
3269                                 continue;
3270                         if ((ioc->diag_buffer_status[i] &
3271                             MPT3_DIAG_BUFFER_IS_RELEASED))
3272                                 continue;
3273                         pci_free_consistent(ioc->pdev, ioc->diag_buffer_sz[i],
3274                         ioc->diag_buffer[i], ioc->diag_buffer_dma[i]);
3275                         ioc->diag_buffer[i] = NULL;
3276                         ioc->diag_buffer_status[i] = 0;
3277                 }
3278
3279                 kfree(ioc->event_log);
3280         }
3281         misc_deregister(&ctl_dev);
3282 }