1 /* $NetBSD: dpti.c,v 1.36 2008/04/06 20:26:20 cegger Exp $ */ 2 3 /*- 4 * Copyright (c) 2001, 2007 The NetBSD Foundation, Inc. 5 * All rights reserved. 6 * 7 * This code is derived from software contributed to The NetBSD Foundation 8 * by Andrew Doran. 9 * 10 * Redistribution and use in source and binary forms, with or without 11 * modification, are permitted provided that the following conditions 12 * are met: 13 * 1. Redistributions of source code must retain the above copyright 14 * notice, this list of conditions and the following disclaimer. 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in the 17 * documentation and/or other materials provided with the distribution. 18 * 3. All advertising materials mentioning features or use of this software 19 * must display the following acknowledgement: 20 * This product includes software developed by the NetBSD 21 * Foundation, Inc. and its contributors. 22 * 4. Neither the name of The NetBSD Foundation nor the names of its 23 * contributors may be used to endorse or promote products derived 24 * from this software without specific prior written permission. 25 * 26 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 27 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 28 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 29 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 30 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 31 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 32 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 33 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 34 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 35 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 36 * POSSIBILITY OF SUCH DAMAGE. 37 */ 38 39 /* 40 * Copyright (c) 1996-2000 Distributed Processing Technology Corporation 41 * Copyright (c) 2000 Adaptec Corporation 42 * All rights reserved. 43 * 44 * TERMS AND CONDITIONS OF USE 45 * 46 * Redistribution and use in source form, with or without modification, are 47 * permitted provided that redistributions of source code must retain the 48 * above copyright notice, this list of conditions and the following disclaimer. 49 * 50 * This software is provided `as is' by Adaptec and any express or implied 51 * warranties, including, but not limited to, the implied warranties of 52 * merchantability and fitness for a particular purpose, are disclaimed. In no 53 * event shall Adaptec be liable for any direct, indirect, incidental, special, 54 * exemplary or consequential damages (including, but not limited to, 55 * procurement of substitute goods or services; loss of use, data, or profits; 56 * or business interruptions) however caused and on any theory of liability, 57 * whether in contract, strict liability, or tort (including negligence or 58 * otherwise) arising in any way out of the use of this driver software, even 59 * if advised of the possibility of such damage. 60 */ 61 62 /* 63 * Adaptec/DPT I2O control interface. 64 */ 65 66 #include <sys/cdefs.h> 67 __KERNEL_RCSID(0, "$NetBSD: dpti.c,v 1.36 2008/04/06 20:26:20 cegger Exp $"); 68 69 #include <sys/param.h> 70 #include <sys/systm.h> 71 #include <sys/kernel.h> 72 #include <sys/device.h> 73 #include <sys/queue.h> 74 #include <sys/proc.h> 75 #include <sys/endian.h> 76 #include <sys/malloc.h> 77 #include <sys/conf.h> 78 #include <sys/ioctl.h> 79 #include <sys/kauth.h> 80 81 #include <uvm/uvm_extern.h> 82 83 #include <sys/bus.h> 84 #ifdef __i386__ 85 #include <machine/pio.h> 86 #endif 87 88 #include <dev/i2o/i2o.h> 89 #include <dev/i2o/i2odpt.h> 90 #include <dev/i2o/iopio.h> 91 #include <dev/i2o/iopvar.h> 92 #include <dev/i2o/dptivar.h> 93 94 #ifdef I2ODEBUG 95 #define DPRINTF(x) printf x 96 #else 97 #define DPRINTF(x) 98 #endif 99 100 static struct dpt_sig dpti_sig = { 101 { 'd', 'P', 't', 'S', 'i', 'G'}, 102 SIG_VERSION, 103 #if defined(__i386__) 104 PROC_INTEL, 105 #elif defined(__powerpc__) 106 PROC_POWERPC, 107 #elif defined(__alpha__) 108 PROC_ALPHA, 109 #elif defined(__mips__) 110 PROC_MIPS, 111 #elif defined(__sparc64__) 112 PROC_ULTRASPARC, 113 #endif 114 #if defined(__i386__) 115 PROC_386 | PROC_486 | PROC_PENTIUM | PROC_SEXIUM, 116 #else 117 0, 118 #endif 119 FT_HBADRVR, 120 0, 121 OEM_DPT, 122 OS_FREE_BSD, /* XXX */ 123 CAP_ABOVE16MB, 124 DEV_ALL, 125 ADF_ALL_SC5, 126 0, 127 0, 128 DPTI_VERSION, 129 DPTI_REVISION, 130 DPTI_SUBREVISION, 131 DPTI_MONTH, 132 DPTI_DAY, 133 DPTI_YEAR, 134 "" /* Will be filled later */ 135 }; 136 137 void dpti_attach(struct device *, struct device *, void *); 138 int dpti_blinkled(struct dpti_softc *); 139 int dpti_ctlrinfo(struct dpti_softc *, int, void *); 140 int dpti_match(struct device *, struct cfdata *, void *); 141 int dpti_passthrough(struct dpti_softc *, void *, struct proc *); 142 int dpti_sysinfo(struct dpti_softc *, int, void *); 143 144 dev_type_open(dptiopen); 145 dev_type_ioctl(dptiioctl); 146 147 const struct cdevsw dpti_cdevsw = { 148 dptiopen, nullclose, noread, nowrite, dptiioctl, 149 nostop, notty, nopoll, nommap, nokqfilter, D_OTHER, 150 }; 151 152 extern struct cfdriver dpti_cd; 153 154 CFATTACH_DECL(dpti, sizeof(struct dpti_softc), 155 dpti_match, dpti_attach, NULL, NULL); 156 157 int 158 dpti_match(struct device *parent, struct cfdata *match, void *aux) 159 { 160 struct iop_attach_args *ia; 161 struct iop_softc *iop; 162 163 ia = aux; 164 iop = (struct iop_softc *)parent; 165 166 if (ia->ia_class != I2O_CLASS_ANY || ia->ia_tid != I2O_TID_IOP) 167 return (0); 168 169 if (le16toh(iop->sc_status.orgid) != I2O_ORG_DPT) 170 return (0); 171 172 return (1); 173 } 174 175 void 176 dpti_attach(struct device *parent, struct device *self, void *aux) 177 { 178 struct iop_softc *iop; 179 struct dpti_softc *sc; 180 struct { 181 struct i2o_param_op_results pr; 182 struct i2o_param_read_results prr; 183 struct i2o_dpt_param_exec_iop_buffers dib; 184 } __attribute__ ((__packed__)) param; 185 int rv; 186 187 sc = device_private(self); 188 iop = device_private(parent); 189 190 /* 191 * Tell the world what we are. The description in the signature 192 * must be no more than 46 bytes long (see dptivar.h). 193 */ 194 printf(": DPT/Adaptec RAID management interface\n"); 195 snprintf(dpti_sig.dsDescription, sizeof(dpti_sig.dsDescription), 196 "NetBSD %s I2O OSM", osrelease); 197 198 rv = iop_field_get_all(iop, I2O_TID_IOP, 199 I2O_DPT_PARAM_EXEC_IOP_BUFFERS, ¶m, 200 sizeof(param), NULL); 201 if (rv != 0) 202 return; 203 204 sc->sc_blinkled = le32toh(param.dib.serialoutputoff) + 8; 205 } 206 207 int 208 dptiopen(dev_t dev, int flag, int mode, 209 struct lwp *l) 210 { 211 212 if (device_lookup(&dpti_cd, minor(dev)) == NULL) 213 return (ENXIO); 214 215 return (0); 216 } 217 218 int 219 dptiioctl(dev_t dev, u_long cmd, void *data, int flag, struct lwp *l) 220 { 221 struct iop_softc *iop; 222 struct dpti_softc *sc; 223 struct ioctl_pt *pt; 224 int i, size, rv, linux; 225 226 sc = device_lookup(&dpti_cd, minor(dev)); 227 iop = (struct iop_softc *)device_parent(&sc->sc_dv); 228 rv = 0; 229 230 if (cmd == PTIOCLINUX) { 231 pt = (struct ioctl_pt *)data; 232 size = IOCPARM_LEN(pt->com); 233 cmd = pt->com & 0xffff; 234 data = pt->data; 235 linux = 1; 236 } else { 237 size = IOCPARM_LEN(cmd); 238 cmd = cmd & 0xffff; 239 linux = 0; 240 } 241 242 switch (cmd) { 243 case DPT_SIGNATURE: 244 if (size > sizeof(dpti_sig)) 245 size = sizeof(dpti_sig); 246 memcpy(data, &dpti_sig, size); 247 break; 248 249 case DPT_CTRLINFO: 250 rv = dpti_ctlrinfo(sc, size, data); 251 break; 252 253 case DPT_SYSINFO: 254 rv = dpti_sysinfo(sc, size, data); 255 break; 256 257 case DPT_BLINKLED: 258 if ((i = dpti_blinkled(sc)) == -1) 259 i = 0; 260 261 if (size == 0) { 262 rv = copyout(&i, *(void **)data, sizeof(i)); 263 break; 264 } 265 266 *(int *)data = i; 267 break; 268 269 case DPT_TARGET_BUSY: 270 /* 271 * XXX This is here to stop linux_machdepioctl() from 272 * whining about an unknown ioctl. 273 */ 274 rv = EIO; 275 break; 276 277 case DPT_I2OUSRCMD: 278 rv = kauth_authorize_device_passthru(l->l_cred, dev, 279 KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_ALL, data); 280 if (rv) 281 break; 282 283 if (sc->sc_nactive++ >= 2) 284 tsleep(&sc->sc_nactive, PRIBIO, "dptislp", 0); 285 286 if (linux) 287 rv = dpti_passthrough(sc, data, l->l_proc); 288 else 289 rv = dpti_passthrough(sc, *(void **)data, l->l_proc); 290 291 sc->sc_nactive--; 292 wakeup_one(&sc->sc_nactive); 293 break; 294 295 case DPT_I2ORESETCMD: 296 printf("%s: I2ORESETCMD not implemented\n", 297 device_xname(&sc->sc_dv)); 298 rv = EOPNOTSUPP; 299 break; 300 301 case DPT_I2ORESCANCMD: 302 mutex_enter(&iop->sc_conflock); 303 rv = iop_reconfigure(iop, 0); 304 mutex_exit(&iop->sc_conflock); 305 break; 306 307 default: 308 rv = ENOTTY; 309 break; 310 } 311 312 return (rv); 313 } 314 315 int 316 dpti_blinkled(struct dpti_softc *sc) 317 { 318 struct iop_softc *iop; 319 u_int v; 320 321 iop = (struct iop_softc *)device_parent(&sc->sc_dv); 322 323 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh, sc->sc_blinkled + 0); 324 if (v == 0xbc) { 325 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh, 326 sc->sc_blinkled + 1); 327 return (v); 328 } 329 330 return (-1); 331 } 332 333 int 334 dpti_ctlrinfo(struct dpti_softc *sc, int size, void *data) 335 { 336 struct dpt_ctlrinfo info; 337 struct iop_softc *iop; 338 int rv, i; 339 340 iop = (struct iop_softc *)device_parent(&sc->sc_dv); 341 342 memset(&info, 0, sizeof(info)); 343 344 info.length = sizeof(info) - sizeof(u_int16_t); 345 info.drvrHBAnum = device_unit(&sc->sc_dv); 346 info.baseAddr = iop->sc_memaddr; 347 if ((i = dpti_blinkled(sc)) == -1) 348 i = 0; 349 info.blinkState = i; 350 info.pciBusNum = iop->sc_pcibus; 351 info.pciDeviceNum = iop->sc_pcidev; 352 info.hbaFlags = FLG_OSD_PCI_VALID | FLG_OSD_DMA | FLG_OSD_I2O; 353 info.Interrupt = 10; /* XXX */ 354 355 if (size > sizeof(char)) { 356 memcpy(data, &info, min(sizeof(info), size)); 357 rv = 0; 358 } else 359 rv = copyout(&info, *(void **)data, sizeof(info)); 360 361 return (rv); 362 } 363 364 int 365 dpti_sysinfo(struct dpti_softc *sc, int size, void *data) 366 { 367 struct dpt_sysinfo info; 368 int rv; 369 #ifdef __i386__ 370 int i, j; 371 #endif 372 373 memset(&info, 0, sizeof(info)); 374 375 #ifdef __i386__ 376 outb (0x70, 0x12); 377 i = inb(0x71); 378 j = i >> 4; 379 if (i == 0x0f) { 380 outb (0x70, 0x19); 381 j = inb (0x71); 382 } 383 info.drive0CMOS = j; 384 385 j = i & 0x0f; 386 if (i == 0x0f) { 387 outb (0x70, 0x1a); 388 j = inb (0x71); 389 } 390 info.drive1CMOS = j; 391 info.processorFamily = dpti_sig.dsProcessorFamily; 392 393 /* 394 * Get the conventional memory size from CMOS. 395 */ 396 outb(0x70, 0x16); 397 j = inb(0x71); 398 j <<= 8; 399 outb(0x70, 0x15); 400 j |= inb(0x71); 401 info.conventionalMemSize = j; 402 403 /* 404 * Get the extended memory size from CMOS. 405 */ 406 outb(0x70, 0x31); 407 j = inb(0x71); 408 j <<= 8; 409 outb(0x70, 0x30); 410 j |= inb(0x71); 411 info.extendedMemSize = j; 412 413 switch (cpu_class) { 414 case CPUCLASS_386: 415 info.processorType = PROC_386; 416 break; 417 case CPUCLASS_486: 418 info.processorType = PROC_486; 419 break; 420 case CPUCLASS_586: 421 info.processorType = PROC_PENTIUM; 422 break; 423 case CPUCLASS_686: 424 default: 425 info.processorType = PROC_SEXIUM; 426 break; 427 } 428 429 info.flags = SI_CMOS_Valid | SI_BusTypeValid | 430 SI_MemorySizeValid | SI_NO_SmartROM; 431 #else 432 info.flags = SI_BusTypeValid | SI_NO_SmartROM; 433 #endif 434 435 info.busType = SI_PCI_BUS; 436 437 /* 438 * Copy out the info structure to the user. 439 */ 440 if (size > sizeof(char)) { 441 memcpy(data, &info, min(sizeof(info), size)); 442 rv = 0; 443 } else 444 rv = copyout(&info, *(void **)data, sizeof(info)); 445 446 return (rv); 447 } 448 449 int 450 dpti_passthrough(struct dpti_softc *sc, void *data, struct proc *proc) 451 { 452 struct iop_softc *iop; 453 struct i2o_msg mh, *mf; 454 struct i2o_reply rh; 455 struct iop_msg *im; 456 struct dpti_ptbuf bufs[IOP_MAX_MSG_XFERS]; 457 u_int32_t mbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)]; 458 u_int32_t rbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)]; 459 int rv, msgsize, repsize, sgoff, i, mapped, nbuf, nfrag, j, sz; 460 u_int32_t *p, *pmax; 461 462 iop = (struct iop_softc *)device_parent(&sc->sc_dv); 463 im = NULL; 464 465 if ((rv = dpti_blinkled(sc)) != -1) { 466 if (rv != 0) { 467 aprint_error_dev(&sc->sc_dv, "adapter blinkled = 0x%02x\n", rv); 468 return (EIO); 469 } 470 } 471 472 /* 473 * Copy in the message frame header and determine the size of the 474 * full message frame. 475 */ 476 if ((rv = copyin(data, &mh, sizeof(mh))) != 0) { 477 DPRINTF(("%s: message copyin failed\n", 478 device_xname(&sc->sc_dv))); 479 return (rv); 480 } 481 482 msgsize = (mh.msgflags >> 14) & ~3; 483 if (msgsize < sizeof(mh) || msgsize >= IOP_MAX_MSG_SIZE) { 484 DPRINTF(("%s: bad message frame size\n", 485 device_xname(&sc->sc_dv))); 486 return (EINVAL); 487 } 488 489 /* 490 * Handle special commands. 491 */ 492 switch (mh.msgfunc >> 24) { 493 case I2O_EXEC_IOP_RESET: 494 printf("%s: I2O_EXEC_IOP_RESET not implemented\n", 495 device_xname(&sc->sc_dv)); 496 return (EOPNOTSUPP); 497 498 case I2O_EXEC_OUTBOUND_INIT: 499 printf("%s: I2O_EXEC_OUTBOUND_INIT not implemented\n", 500 device_xname(&sc->sc_dv)); 501 return (EOPNOTSUPP); 502 503 case I2O_EXEC_SYS_TAB_SET: 504 printf("%s: I2O_EXEC_SYS_TAB_SET not implemented\n", 505 device_xname(&sc->sc_dv)); 506 return (EOPNOTSUPP); 507 508 case I2O_EXEC_STATUS_GET: 509 if ((rv = iop_status_get(iop, 0)) == 0) 510 rv = copyout(&iop->sc_status, (char *)data + msgsize, 511 sizeof(iop->sc_status)); 512 return (rv); 513 } 514 515 /* 516 * Copy in the full message frame. 517 */ 518 if ((rv = copyin(data, mbtmp, msgsize)) != 0) { 519 DPRINTF(("%s: full message copyin failed\n", 520 device_xname(&sc->sc_dv))); 521 return (rv); 522 } 523 524 /* 525 * Determine the size of the reply frame, and copy it in. 526 */ 527 if ((rv = copyin((char *)data + msgsize, &rh, sizeof(rh))) != 0) { 528 DPRINTF(("%s: reply copyin failed\n", 529 device_xname(&sc->sc_dv))); 530 return (rv); 531 } 532 533 repsize = (rh.msgflags >> 14) & ~3; 534 if (repsize < sizeof(rh) || repsize >= IOP_MAX_MSG_SIZE) { 535 DPRINTF(("%s: bad reply header size\n", 536 device_xname(&sc->sc_dv))); 537 return (EINVAL); 538 } 539 540 if ((rv = copyin((char *)data + msgsize, rbtmp, repsize)) != 0) { 541 DPRINTF(("%s: reply too large\n", device_xname(&sc->sc_dv))); 542 return (rv); 543 } 544 545 /* 546 * If the message has a scatter gather list, it must be comprised of 547 * simple elements. If any one transfer contains multiple segments, 548 * we allocate a temporary buffer for it; otherwise, the buffer will 549 * be mapped directly. 550 */ 551 mapped = 0; 552 if ((sgoff = ((mh.msgflags >> 4) & 15)) != 0) { 553 if ((sgoff + 2) > (msgsize >> 2)) { 554 DPRINTF(("%s: invalid message size fields\n", 555 device_xname(&sc->sc_dv))); 556 return (EINVAL); 557 } 558 559 memset(bufs, 0, sizeof(bufs)); 560 561 p = mbtmp + sgoff; 562 pmax = mbtmp + (msgsize >> 2) - 2; 563 564 for (nbuf = 0; nbuf < IOP_MAX_MSG_XFERS; nbuf++, p += 2) { 565 if (p > pmax) { 566 DPRINTF(("%s: invalid SGL (1)\n", 567 device_xname(&sc->sc_dv))); 568 goto bad; 569 } 570 571 if ((p[0] & 0x30000000) != I2O_SGL_SIMPLE) { 572 DPRINTF(("%s: invalid SGL (2)\n", 573 device_xname(&sc->sc_dv))); 574 goto bad; 575 } 576 577 bufs[nbuf].db_out = (p[0] & I2O_SGL_DATA_OUT) != 0; 578 bufs[nbuf].db_ptr = NULL; 579 580 if ((p[0] & I2O_SGL_END_BUFFER) != 0) { 581 if ((p[0] & 0x00ffffff) > IOP_MAX_XFER) { 582 DPRINTF(("%s: buffer too large\n", 583 device_xname(&sc->sc_dv))); 584 goto bad; 585 } 586 587 bufs[nbuf].db_ptr = (void *)p[1]; 588 bufs[nbuf].db_proc = proc; 589 bufs[nbuf].db_size = p[0] & 0x00ffffff; 590 591 if ((p[0] & I2O_SGL_END) != 0) 592 break; 593 594 continue; 595 } 596 597 /* 598 * The buffer has multiple segments. Determine the 599 * total size. 600 */ 601 nfrag = 0; 602 sz = 0; 603 for (; p <= pmax; p += 2) { 604 if (nfrag == DPTI_MAX_SEGS) { 605 DPRINTF(("%s: too many segments\n", 606 device_xname(&sc->sc_dv))); 607 goto bad; 608 } 609 610 bufs[nbuf].db_frags[nfrag].iov_len = 611 p[0] & 0x00ffffff; 612 bufs[nbuf].db_frags[nfrag].iov_base = 613 (void *)p[1]; 614 615 sz += p[0] & 0x00ffffff; 616 nfrag++; 617 618 if ((p[0] & I2O_SGL_END) != 0) { 619 if ((p[0] & I2O_SGL_END_BUFFER) == 0) { 620 DPRINTF(( 621 "%s: invalid SGL (3)\n", 622 device_xname(&sc->sc_dv))); 623 goto bad; 624 } 625 break; 626 } 627 if ((p[0] & I2O_SGL_END_BUFFER) != 0) 628 break; 629 } 630 bufs[nbuf].db_nfrag = nfrag; 631 632 if (p > pmax) { 633 DPRINTF(("%s: invalid SGL (4)\n", 634 device_xname(&sc->sc_dv))); 635 goto bad; 636 } 637 638 if (sz > IOP_MAX_XFER) { 639 DPRINTF(("%s: buffer too large\n", 640 device_xname(&sc->sc_dv))); 641 goto bad; 642 } 643 644 bufs[nbuf].db_size = sz; 645 bufs[nbuf].db_ptr = malloc(sz, M_DEVBUF, M_WAITOK); 646 if (bufs[nbuf].db_ptr == NULL) { 647 DPRINTF(("%s: allocation failure\n", 648 device_xname(&sc->sc_dv))); 649 rv = ENOMEM; 650 goto bad; 651 } 652 653 for (i = 0, sz = 0; i < bufs[nbuf].db_nfrag; i++) { 654 rv = copyin(bufs[nbuf].db_frags[i].iov_base, 655 (char *)bufs[nbuf].db_ptr + sz, 656 bufs[nbuf].db_frags[i].iov_len); 657 if (rv != 0) { 658 DPRINTF(("%s: frag copyin\n", 659 device_xname(&sc->sc_dv))); 660 goto bad; 661 } 662 sz += bufs[nbuf].db_frags[i].iov_len; 663 } 664 665 if ((p[0] & I2O_SGL_END) != 0) 666 break; 667 } 668 669 if (nbuf == IOP_MAX_MSG_XFERS) { 670 DPRINTF(("%s: too many transfers\n", 671 device_xname(&sc->sc_dv))); 672 goto bad; 673 } 674 } else 675 nbuf = -1; 676 677 /* 678 * Allocate a wrapper, and adjust the message header fields to 679 * indicate that no scatter-gather list is currently present. 680 */ 681 682 im = iop_msg_alloc(iop, IM_WAIT | IM_NOSTATUS); 683 im->im_rb = (struct i2o_reply *)rbtmp; 684 mf = (struct i2o_msg *)mbtmp; 685 mf->msgictx = IOP_ICTX; 686 mf->msgtctx = im->im_tctx; 687 688 if (sgoff != 0) 689 mf->msgflags = (mf->msgflags & 0xff0f) | (sgoff << 16); 690 691 /* 692 * Map the data transfer(s). 693 */ 694 for (i = 0; i <= nbuf; i++) { 695 rv = iop_msg_map(iop, im, mbtmp, bufs[i].db_ptr, 696 bufs[i].db_size, bufs[i].db_out, bufs[i].db_proc); 697 if (rv != 0) { 698 DPRINTF(("%s: msg_map failed, rv = %d\n", 699 device_xname(&sc->sc_dv), rv)); 700 goto bad; 701 } 702 mapped = 1; 703 } 704 705 /* 706 * Start the command and sleep until it completes. 707 */ 708 if ((rv = iop_msg_post(iop, im, mbtmp, 5*60*1000)) != 0) 709 goto bad; 710 711 /* 712 * Copy out the reply frame. 713 */ 714 if ((rv = copyout(rbtmp, (char *)data + msgsize, repsize)) != 0) { 715 DPRINTF(("%s: reply copyout() failed\n", 716 device_xname(&sc->sc_dv))); 717 } 718 719 bad: 720 /* 721 * Free resources and return to the caller. 722 */ 723 if (im != NULL) { 724 if (mapped) 725 iop_msg_unmap(iop, im); 726 iop_msg_free(iop, im); 727 } 728 729 for (i = 0; i <= nbuf; i++) { 730 if (bufs[i].db_proc != NULL) 731 continue; 732 733 if (!bufs[i].db_out && rv == 0) { 734 for (j = 0, sz = 0; j < bufs[i].db_nfrag; j++) { 735 rv = copyout((char *)bufs[i].db_ptr + sz, 736 bufs[i].db_frags[j].iov_base, 737 bufs[i].db_frags[j].iov_len); 738 if (rv != 0) 739 break; 740 sz += bufs[i].db_frags[j].iov_len; 741 } 742 } 743 744 if (bufs[i].db_ptr != NULL) 745 free(bufs[i].db_ptr, M_DEVBUF); 746 } 747 748 return (rv); 749 } 750