xref: /netbsd-src/sys/dev/iscsi/iscsi_send.c (revision d536862b7d93d77932ef5de7eebdc48d76921b77)
1 /*	$NetBSD: iscsi_send.c,v 1.38 2021/06/06 10:39:10 mlelstv Exp $	*/
2 
3 /*-
4  * Copyright (c) 2004,2005,2006,2011 The NetBSD Foundation, Inc.
5  * All rights reserved.
6  *
7  * This code is derived from software contributed to The NetBSD Foundation
8  * by Wasabi Systems, Inc.
9  *
10  * Redistribution and use in source and binary forms, with or without
11  * modification, are permitted provided that the following conditions
12  * are met:
13  * 1. Redistributions of source code must retain the above copyright
14  *    notice, this list of conditions and the following disclaimer.
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in the
17  *    documentation and/or other materials provided with the distribution.
18  *
19  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29  * POSSIBILITY OF SUCH DAMAGE.
30  */
31 #include "iscsi_globals.h"
32 
33 #include <sys/file.h>
34 #include <sys/filedesc.h>
35 #include <sys/socket.h>
36 #include <sys/socketvar.h>
37 #include <sys/atomic.h>
38 
39 /*#define LUN_1  1 */
40 
41 /*****************************************************************************/
42 
43 /*
44  * my_soo_write:
45  *    Replacement for soo_write with flag handling.
46  *
47  *    Parameter:
48  *          conn     The connection
49  *          u        The uio descriptor
50  *
51  *    Returns:    0 on success, else EIO.
52  */
53 
54 STATIC int
55 my_soo_write(connection_t *conn, struct uio *u)
56 {
57 	struct socket *so = conn->c_sock->f_socket;
58 	int ret;
59 #ifdef ISCSI_DEBUG
60 	size_t resid = u->uio_resid;
61 #endif
62 
63 	KASSERT(u->uio_resid != 0);
64 
65 	ret = (*so->so_send)(so, NULL, u, NULL, NULL, 0, conn->c_threadobj);
66 
67 	DEB(99, ("soo_write done: len = %zu\n", u->uio_resid));
68 
69 	if (ret != 0 || u->uio_resid) {
70 		DEBC(conn, 0, ("Write failed sock %p (ret: %d, req: %zu, resid: %zu)\n",
71 			conn->c_sock, ret, resid, u->uio_resid));
72 		handle_connection_error(conn, ISCSI_STATUS_SOCKET_ERROR, NO_LOGOUT);
73 		return EIO;
74 	}
75 	return 0;
76 }
77 
78 /*****************************************************************************/
79 
80 /*
81  * assign_connection:
82  *    This function returns the connection to use for the next transaction.
83  *
84  *    Parameter:  The session
85  *
86  *    Returns:    The connection
87  */
88 
89 connection_t *
90 assign_connection(session_t *sess, bool waitok)
91 {
92 	connection_t *conn, *next;
93 
94 	mutex_enter(&sess->s_lock);
95 	do {
96 		if (sess->s_terminating ||
97 		    (conn = sess->s_mru_connection) == NULL) {
98 			mutex_exit(&sess->s_lock);
99 			return NULL;
100 		}
101 		next = conn;
102 		do {
103 			next = TAILQ_NEXT(next, c_connections);
104 			if (next == NULL) {
105 				next = TAILQ_FIRST(&sess->s_conn_list);
106 			}
107 		} while (next != NULL && next != conn &&
108 				 next->c_state != ST_FULL_FEATURE);
109 
110 		if (next->c_state != ST_FULL_FEATURE) {
111 			if (waitok) {
112 				cv_wait(&sess->s_sess_cv, &sess->s_lock);
113 				next = TAILQ_FIRST(&sess->s_conn_list);
114 			} else {
115 				mutex_exit(&sess->s_lock);
116 				return NULL;
117 			}
118 		} else {
119 			sess->s_mru_connection = next;
120 		}
121 	} while (next != NULL && next->c_state != ST_FULL_FEATURE);
122 	mutex_exit(&sess->s_lock);
123 
124 	return next;
125 }
126 
127 
128 /*
129  * reassign_tasks:
130  *    Reassign pending commands to one of the still existing connections
131  *    of a session.
132  *
133  *    Parameter:
134  *          oldconn		The terminating connection
135  */
136 
137 STATIC void
138 reassign_tasks(connection_t *oldconn)
139 {
140 	session_t *sess = oldconn->c_session;
141 	connection_t *conn;
142 	ccb_t *ccb;
143 	pdu_t *pdu = NULL;
144 	pdu_t *opdu;
145 	int no_tm = 1;
146 	int rc = 1;
147 	uint32_t sn;
148 
149 	if ((conn = assign_connection(sess, FALSE)) == NULL) {
150 		DEB(1, ("Reassign_tasks of Session %d, connection %d failed, "
151 			    "no active connection\n",
152 			    sess->s_id, oldconn->c_id));
153 		/* XXX here we need to abort the waiting CCBs */
154 		return;
155 	}
156 
157 	if (sess->s_ErrorRecoveryLevel >= 2) {
158 		if (oldconn->c_loggedout == NOT_LOGGED_OUT) {
159 			oldconn->c_loggedout = LOGOUT_SENT;
160 			no_tm = send_logout(conn, oldconn, RECOVER_CONNECTION, TRUE);
161 			oldconn->c_loggedout = (rc) ? LOGOUT_FAILED : LOGOUT_SUCCESS;
162 			if (!oldconn->c_Time2Retain) {
163 				DEBC(conn, 1, ("Time2Retain is zero, setting no_tm\n"));
164 				no_tm = 1;
165 			}
166 		} else if (oldconn->c_loggedout == LOGOUT_SUCCESS) {
167 			no_tm = 0;
168 		}
169 		if (!no_tm && oldconn->c_Time2Wait) {
170 			DEBC(conn, 1, ("Time2Wait=%d, hz=%d, waiting...\n",
171 						   oldconn->c_Time2Wait, hz));
172 			kpause("Time2Wait", false, oldconn->c_Time2Wait * hz, NULL);
173 		}
174 	}
175 
176 	DEBC(conn, 1, ("Reassign_tasks: Session %d, conn %d -> conn %d, no_tm=%d\n",
177 		sess->s_id, oldconn->c_id, conn->c_id, no_tm));
178 
179 
180 	/* XXX reassign waiting CCBs to new connection */
181 
182 	while ((ccb = TAILQ_FIRST(&oldconn->c_ccbs_waiting)) != NULL) {
183 		/* Copy PDU contents (PDUs are bound to connection) */
184 		if ((pdu = get_pdu(conn, TRUE)) == NULL) {
185 			break;
186 		}
187 
188 		/* adjust CCB and clone PDU for new connection */
189 		TAILQ_REMOVE(&oldconn->c_ccbs_waiting, ccb, ccb_chain);
190 
191 		opdu = ccb->ccb_pdu_waiting;
192 		KASSERT((opdu->pdu_flags & PDUF_INQUEUE) == 0);
193 
194 		*pdu = *opdu;
195 
196 		/* restore overwritten back ptr */
197 		pdu->pdu_connection = conn;
198 
199 		/* fixup saved UIO and IOVEC (regular one will be overwritten anyway) */
200 		pdu->pdu_save_uio.uio_iov = pdu->pdu_io_vec;
201 		pdu->pdu_save_iovec [0].iov_base = &pdu->pdu_hdr;
202 
203 		if (conn->c_DataDigest && pdu->pdu_save_uio.uio_iovcnt > 1) {
204 			if (pdu->pdu_save_iovec [2].iov_base == NULL) {
205 				pdu->pdu_save_iovec [2].iov_base = &pdu->pdu_data_digest;
206 				pdu->pdu_save_uio.uio_iovcnt = 3;
207 			} else {
208 				pdu->pdu_save_iovec [3].iov_base = &pdu->pdu_data_digest;
209 				pdu->pdu_save_uio.uio_iovcnt = 4;
210 			}
211 		}
212 		pdu->pdu_save_iovec [0].iov_len =
213 			(conn->c_HeaderDigest) ? BHS_SIZE + 4 : BHS_SIZE;
214 
215 		/* link new PDU into old CCB */
216 		ccb->ccb_pdu_waiting = pdu;
217 		/* link new CCB into new connection */
218 		ccb->ccb_connection = conn;
219 		/* reset timeouts */
220 		ccb->ccb_num_timeouts = 0;
221 
222 		/* fixup reference counts */
223 		oldconn->c_usecount--;
224 		atomic_inc_uint(&conn->c_usecount);
225 
226 		DEBC(conn, 1, ("CCB %p: Copied PDU %p to %p\n",
227 					   ccb, opdu, pdu));
228 
229 		/* kill temp pointer that is now referenced by the new PDU */
230 		opdu->pdu_temp_data = NULL;
231 
232 		/* and free the old PDU */
233 		free_pdu(opdu);
234 
235 		/* put ready CCB into waiting list of new connection */
236 		mutex_enter(&conn->c_lock);
237 		suspend_ccb(ccb, TRUE);
238 		mutex_exit(&conn->c_lock);
239 	}
240 
241 	if (pdu == NULL) {
242 		DEBC(conn, 1, ("Error while copying PDUs in reassign_tasks!\n"));
243 		/* give up recovering, the other connection is screwed up as well... */
244 		while ((ccb = TAILQ_FIRST(&oldconn->c_ccbs_waiting)) != NULL) {
245 			wake_ccb(ccb, oldconn->c_terminating);
246 		}
247 		/* XXX some CCBs might have been moved to new connection, but how is the
248 		 * new connection handled or killed ? */
249 		return;
250 	}
251 
252 	TAILQ_FOREACH(ccb, &conn->c_ccbs_waiting, ccb_chain) {
253 		if (!no_tm) {
254 			rc = send_task_management(conn, ccb, NULL, TASK_REASSIGN);
255 		}
256 		/* if we get an error on reassign, restart the original request */
257 		if (no_tm || rc) {
258 			mutex_enter(&sess->s_lock);
259 			if (ccb->ccb_CmdSN < sess->s_ExpCmdSN) {
260 				pdu = ccb->ccb_pdu_waiting;
261 				sn = get_sernum(sess, pdu);
262 
263 				/* update CmdSN */
264 				DEBC(conn, 1, ("Resend Updating CmdSN - old %d, new %d\n",
265 					   ccb->ccb_CmdSN, sn));
266 				ccb->ccb_CmdSN = sn;
267 				pdu->pdu_hdr.pduh_p.command.CmdSN = htonl(ccb->ccb_CmdSN);
268 			}
269 			mutex_exit(&sess->s_lock);
270 			resend_pdu(ccb);
271 		} else {
272 			ccb_timeout_start(ccb, COMMAND_TIMEOUT);
273 		}
274 		DEBC(conn, 1, ("Reassign ccb %p, no_tm=%d, rc=%d\n",
275 					   ccb, no_tm, rc));
276 	}
277 }
278 
279 
280 /*
281  * iscsi_send_thread:
282  *    This thread services the send queue, writing the PDUs to the socket.
283  *    It also handles the cleanup when the connection is terminated.
284  *
285  *    Parameter:
286  *          par		The connection this thread services
287  */
288 
289 void
290 iscsi_send_thread(void *par)
291 {
292 	connection_t *conn = (connection_t *) par;
293 	session_t *sess;
294 	ccb_t *ccb, *nccb;
295 	pdu_t *pdu;
296 	struct file *fp;
297 	pdu_disp_t pdisp;
298 
299 	sess = conn->c_session;
300 	/* so cleanup thread knows there's someone left */
301 	iscsi_num_send_threads++;
302 
303 	do {
304 		mutex_enter(&conn->c_lock);
305 		while (!conn->c_terminating) {
306 			while (!conn->c_terminating &&
307 				(pdu = TAILQ_FIRST(&conn->c_pdus_to_send)) != NULL) {
308 				TAILQ_REMOVE(&conn->c_pdus_to_send, pdu, pdu_send_chain);
309 				pdu->pdu_flags &= ~PDUF_INQUEUE;
310 				mutex_exit(&conn->c_lock);
311 
312 				/* update ExpStatSN here to avoid discontinuities */
313 				/* and delays in updating target */
314 				pdu->pdu_hdr.pduh_p.command.ExpStatSN = htonl(conn->c_StatSN_buf.ExpSN);
315 
316 				if (conn->c_HeaderDigest)
317 					pdu->pdu_hdr.pduh_HeaderDigest = gen_digest(&pdu->pdu_hdr, BHS_SIZE);
318 
319 				DEBC(conn, 99, ("Transmitting PDU CmdSN = %u, ExpStatSN = %u\n",
320 				                ntohl(pdu->pdu_hdr.pduh_p.command.CmdSN),
321 				                ntohl(pdu->pdu_hdr.pduh_p.command.ExpStatSN)));
322 				my_soo_write(conn, &pdu->pdu_uio);
323 
324 				mutex_enter(&conn->c_lock);
325 				pdisp = pdu->pdu_disp;
326 				if (pdisp > PDUDISP_FREE)
327 					pdu->pdu_flags &= ~PDUF_BUSY;
328 				mutex_exit(&conn->c_lock);
329 				if (pdisp <= PDUDISP_FREE)
330 					free_pdu(pdu);
331 
332 				mutex_enter(&conn->c_lock);
333 			}
334 
335 			if (!conn->c_terminating)
336 				cv_wait(&conn->c_conn_cv, &conn->c_lock);
337 		}
338 		mutex_exit(&conn->c_lock);
339 
340 		/* ------------------------------------------------------------------------
341 		 *    Here this thread takes over cleanup of the terminating connection.
342 		 * ------------------------------------------------------------------------
343 		 */
344 		connection_timeout_stop(conn);
345 		conn->c_idle_timeout_val = CONNECTION_IDLE_TIMEOUT;
346 
347 		fp = conn->c_sock;
348 
349 		/*
350 		 * We shutdown the socket here to force the receive
351 		 * thread to wake up
352 		 */
353 		DEBC(conn, 1, ("Closing Socket %p\n", conn->c_sock));
354 		solock(fp->f_socket);
355 		soshutdown(fp->f_socket, SHUT_RDWR);
356 		sounlock(fp->f_socket);
357 
358 		/* wake up any non-reassignable waiting CCBs */
359 		TAILQ_FOREACH_SAFE(ccb, &conn->c_ccbs_waiting, ccb_chain, nccb) {
360 			if (!(ccb->ccb_flags & CCBF_REASSIGN) || ccb->ccb_pdu_waiting == NULL) {
361 				DEBC(conn, 1, ("Terminating CCB %p (t=%p)\n",
362 					ccb,&ccb->ccb_timeout));
363 				wake_ccb(ccb, conn->c_terminating);
364 			} else {
365 				ccb_timeout_stop(ccb);
366 				ccb->ccb_num_timeouts = 0;
367 			}
368 		}
369 
370 		/* clean out anything left in send queue */
371 		mutex_enter(&conn->c_lock);
372 		while ((pdu = TAILQ_FIRST(&conn->c_pdus_to_send)) != NULL) {
373 			TAILQ_REMOVE(&conn->c_pdus_to_send, pdu, pdu_send_chain);
374 			pdu->pdu_flags &= ~(PDUF_INQUEUE | PDUF_BUSY);
375 			mutex_exit(&conn->c_lock);
376 			/* if it's not attached to a waiting CCB, free it */
377 			if (pdu->pdu_owner == NULL ||
378 			    pdu->pdu_owner->ccb_pdu_waiting != pdu) {
379 				free_pdu(pdu);
380 			}
381 			mutex_enter(&conn->c_lock);
382 		}
383 		mutex_exit(&conn->c_lock);
384 
385 		/* If there's another connection available, transfer pending tasks */
386 		if (sess->s_active_connections &&
387 			TAILQ_FIRST(&conn->c_ccbs_waiting) != NULL) {
388 
389 			reassign_tasks(conn);
390 		} else if (!conn->c_destroy && conn->c_Time2Wait) {
391 			DEBC(conn, 1, ("Time2Wait\n"));
392 			kpause("Time2Wait", false, conn->c_Time2Wait * hz, NULL);
393 			DEBC(conn, 1, ("Time2Wait\n"));
394 		}
395 		/* notify event handlers of connection shutdown */
396 		DEBC(conn, 1, ("%s\n", conn->c_destroy ? "TERMINATED" : "RECOVER"));
397 		add_event(conn->c_destroy ? ISCSI_CONNECTION_TERMINATED
398 					  : ISCSI_RECOVER_CONNECTION,
399 				  sess->s_id, conn->c_id, conn->c_terminating);
400 
401 		DEBC(conn, 1, ("Waiting for conn_idle\n"));
402 		mutex_enter(&conn->c_lock);
403 		if (!conn->c_destroy)
404 			cv_timedwait(&conn->c_idle_cv, &conn->c_lock, CONNECTION_IDLE_TIMEOUT);
405 		mutex_exit(&conn->c_lock);
406 		DEBC(conn, 1, ("Waited for conn_idle, destroy = %d\n", conn->c_destroy));
407 
408 	} while (!conn->c_destroy);
409 
410 	/* wake up anyone waiting for a PDU */
411 	mutex_enter(&conn->c_lock);
412 	cv_broadcast(&conn->c_conn_cv);
413 	mutex_exit(&conn->c_lock);
414 
415 	/* wake up any waiting CCBs */
416 	while ((ccb = TAILQ_FIRST(&conn->c_ccbs_waiting)) != NULL) {
417 		KASSERT(ccb->ccb_disp >= CCBDISP_NOWAIT);
418 		wake_ccb(ccb, conn->c_terminating);
419 		/* NOTE: wake_ccb will remove the CCB from the queue */
420 	}
421 
422 	add_connection_cleanup(conn);
423 
424 	conn->c_sendproc = NULL;
425 	DEBC(conn, 1, ("Send thread exits\n"));
426 	iscsi_num_send_threads--;
427 	kthread_exit(0);
428 }
429 
430 
431 /*
432  * send_pdu:
433  *    Enqueue a PDU to be sent, and handle its disposition as well as
434  *    the disposition of its associated CCB.
435  *
436  *    Parameter:
437  *          ccb      The associated CCB. May be NULL if cdisp is CCBDISP_NOWAIT
438  *                   and pdisp is not PDUDISP_WAIT
439  *          cdisp    The CCB's disposition
440  *          pdu      The PDU
441  *          pdisp    The PDU's disposition
442  */
443 
444 STATIC void
445 send_pdu(ccb_t *ccb, pdu_t *pdu, ccb_disp_t cdisp, pdu_disp_t pdisp)
446 {
447 	connection_t *conn = pdu->pdu_connection;
448 	ccb_disp_t prev_cdisp = 0;
449 
450 	if (ccb != NULL) {
451 		prev_cdisp = ccb->ccb_disp;
452 		pdu->pdu_hdr.pduh_InitiatorTaskTag = ccb->ccb_ITT;
453 		pdu->pdu_owner = ccb;
454 		if (cdisp != CCBDISP_NOWAIT)
455 			ccb->ccb_disp = cdisp;
456 	}
457 
458 	pdu->pdu_disp = pdisp;
459 
460 	DEBC(conn, 10, ("Send_pdu: CmdSN=%u ExpStatSN~%u ccb=%p, pdu=%p\n",
461 	                ntohl(pdu->pdu_hdr.pduh_p.command.CmdSN),
462 			conn->c_StatSN_buf.ExpSN,
463 			ccb, pdu));
464 
465 	mutex_enter(&conn->c_lock);
466 	if (pdisp == PDUDISP_WAIT) {
467 		KASSERT(ccb != NULL);
468 
469 		ccb->ccb_pdu_waiting = pdu;
470 
471 		/* save UIO and IOVEC for retransmit */
472 		pdu->pdu_save_uio = pdu->pdu_uio;
473 		memcpy(pdu->pdu_save_iovec, pdu->pdu_io_vec, sizeof(pdu->pdu_save_iovec));
474 
475 		pdu->pdu_flags |= PDUF_BUSY;
476 	}
477 	/* Enqueue for sending */
478 	pdu->pdu_flags |= PDUF_INQUEUE;
479 
480 	if (pdu->pdu_flags & PDUF_PRIORITY)
481 		TAILQ_INSERT_HEAD(&conn->c_pdus_to_send, pdu, pdu_send_chain);
482 	else
483 		TAILQ_INSERT_TAIL(&conn->c_pdus_to_send, pdu, pdu_send_chain);
484 
485 	cv_broadcast(&conn->c_conn_cv);
486 
487 	if (cdisp != CCBDISP_NOWAIT) {
488 		KASSERT(ccb != NULL);
489 		KASSERTMSG(ccb->ccb_connection == conn, "conn mismatch %p != %p\n", ccb->ccb_connection, conn);
490 
491 		if (prev_cdisp <= CCBDISP_NOWAIT)
492 			suspend_ccb(ccb, TRUE);
493 
494 		mutex_exit(&conn->c_lock);
495 		ccb_timeout_start(ccb, COMMAND_TIMEOUT);
496 		mutex_enter(&conn->c_lock);
497 
498 		while (ccb->ccb_disp == CCBDISP_WAIT) {
499 			DEBC(conn, 15, ("Send_pdu: ccb=%p cdisp=%d waiting\n",
500 				ccb, ccb->ccb_disp));
501 			cv_wait(&conn->c_ccb_cv, &conn->c_lock);
502 			DEBC(conn, 15, ("Send_pdu: ccb=%p cdisp=%d returned\n",
503 				ccb, ccb->ccb_disp));
504 		}
505 	}
506 
507 	mutex_exit(&conn->c_lock);
508 }
509 
510 
511 /*
512  * resend_pdu:
513  *    Re-Enqueue a PDU that has apparently gotten lost.
514  *
515  *    Parameter:
516  *          ccb      The associated CCB.
517  */
518 
519 void
520 resend_pdu(ccb_t *ccb)
521 {
522 	connection_t *conn = ccb->ccb_connection;
523 	pdu_t *pdu = ccb->ccb_pdu_waiting;
524 
525 	mutex_enter(&conn->c_lock);
526 	if (pdu == NULL || (pdu->pdu_flags & PDUF_BUSY)) {
527 		mutex_exit(&conn->c_lock);
528 		return;
529 	}
530 	pdu->pdu_flags |= PDUF_BUSY;
531 	mutex_exit(&conn->c_lock);
532 
533 	/* restore UIO and IOVEC */
534 	pdu->pdu_uio = pdu->pdu_save_uio;
535 	memcpy(pdu->pdu_io_vec, pdu->pdu_save_iovec, sizeof(pdu->pdu_io_vec));
536 
537 	DEBC(conn, 8, ("ReSend_pdu: CmdSN=%u ExpStatSN~%u ccb=%p, pdu=%p\n",
538 	                ntohl(pdu->pdu_hdr.pduh_p.command.CmdSN),
539 			conn->c_StatSN_buf.ExpSN,
540 			ccb, pdu));
541 
542 	mutex_enter(&conn->c_lock);
543 	/* Enqueue for sending */
544 	pdu->pdu_flags |= PDUF_INQUEUE;
545 
546 	if (pdu->pdu_flags & PDUF_PRIORITY) {
547 		TAILQ_INSERT_HEAD(&conn->c_pdus_to_send, pdu, pdu_send_chain);
548 	} else {
549 		TAILQ_INSERT_TAIL(&conn->c_pdus_to_send, pdu, pdu_send_chain);
550 	}
551 	cv_broadcast(&conn->c_conn_cv);
552 	mutex_exit(&conn->c_lock);
553 
554 	ccb_timeout_start(ccb, COMMAND_TIMEOUT);
555 }
556 
557 
558 /*
559  * setup_tx_uio:
560  *    Initialize the uio structure for sending, including header,
561  *    data (if present), padding, and Data Digest.
562  *    Header Digest is generated in send thread.
563  *
564  *    Parameter:
565  *          pdu      The PDU
566  *          dsl      The Data Segment Length
567  *          data     The data pointer
568  *          read     TRUE if this is a read operation
569  */
570 
571 STATIC void
572 setup_tx_uio(pdu_t *pdu, uint32_t dsl, void *data, bool read)
573 {
574 	static uint8_t pad_bytes[4] = { 0 };
575 	struct uio *uio;
576 	int i, pad, hlen;
577 	connection_t *conn = pdu->pdu_connection;
578 
579 	DEB(99, ("SetupTxUio: dlen = %d, dptr: %p, read: %d\n",
580 			 dsl, data, read));
581 
582 	if (!read && dsl) {
583 		hton3(dsl, pdu->pdu_hdr.pduh_DataSegmentLength);
584 	}
585 	hlen = (conn->c_HeaderDigest) ? BHS_SIZE + 4 : BHS_SIZE;
586 
587 	pdu->pdu_io_vec[0].iov_base = &pdu->pdu_hdr;
588 	pdu->pdu_io_vec[0].iov_len = hlen;
589 
590 	uio = &pdu->pdu_uio;
591 
592 	uio->uio_iov = pdu->pdu_io_vec;
593 	uio->uio_iovcnt = 1;
594 	uio->uio_rw = UIO_WRITE;
595 	uio->uio_resid = hlen;
596 	UIO_SETUP_SYSSPACE(uio);
597 
598 	if (!read && dsl) {
599 		uio->uio_iovcnt++;
600 		pdu->pdu_io_vec[1].iov_base = data;
601 		pdu->pdu_io_vec[1].iov_len = dsl;
602 		uio->uio_resid += dsl;
603 
604 		/* Pad to next multiple of 4 */
605 		pad = uio->uio_resid & 0x03;
606 		if (pad) {
607 			i = uio->uio_iovcnt++;
608 			pad = 4 - pad;
609 			pdu->pdu_io_vec[i].iov_base = pad_bytes;
610 			pdu->pdu_io_vec[i].iov_len = pad;
611 			uio->uio_resid += pad;
612 		}
613 
614 		if (conn->c_DataDigest) {
615 			pdu->pdu_data_digest = gen_digest_2(data, dsl, pad_bytes, pad);
616 			i = uio->uio_iovcnt++;
617 			pdu->pdu_io_vec[i].iov_base = &pdu->pdu_data_digest;
618 			pdu->pdu_io_vec[i].iov_len = 4;
619 			uio->uio_resid += 4;
620 		}
621 	}
622 }
623 
624 /*
625  * init_login_pdu:
626  *    Initialize the login PDU.
627  *
628  *    Parameter:
629  *          conn     The connection
630  *          ccb      The CCB
631  *          pdu      The PDU
632  */
633 
634 STATIC void
635 init_login_pdu(connection_t *conn, ccb_t *ccb, pdu_t *ppdu, bool next)
636 {
637 	pdu_header_t *hpdu = &ppdu->pdu_hdr;
638 	login_isid_t *isid = (login_isid_t *) & hpdu->pduh_LUN;
639 	uint8_t c_phase;
640 
641 	hpdu->pduh_Opcode = IOP_Login_Request | OP_IMMEDIATE;
642 
643 	mutex_enter(&conn->c_session->s_lock);
644 	ccb->ccb_CmdSN = get_sernum(conn->c_session, ppdu);
645 	mutex_exit(&conn->c_session->s_lock);
646 
647 	if (next) {
648 		c_phase = (hpdu->pduh_Flags >> CSG_SHIFT) & SG_MASK;
649 		hpdu->pduh_Flags = FLAG_TRANSIT | (c_phase << CSG_SHIFT) |
650 					 NEXT_PHASE(c_phase);
651 	}
652 
653 	memcpy(isid, &iscsi_InitiatorISID, 6);
654 	isid->TSIH = conn->c_session->s_TSIH;
655 
656 	hpdu->pduh_p.login_req.CID = htons(conn->c_id);
657 	hpdu->pduh_p.login_req.CmdSN = htonl(ccb->ccb_CmdSN);
658 }
659 
660 
661 /*
662  * negotiate_login:
663  *    Control login negotiation.
664  *
665  *    Parameter:
666  *          conn     The connection
667  *          rx_pdu   The received login response PDU
668  *          tx_ccb   The originally sent login CCB
669  */
670 
671 void
672 negotiate_login(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
673 {
674 	int rc;
675 	bool next = TRUE;
676 	pdu_t *tx_pdu;
677 	uint8_t c_phase;
678 
679 	if (rx_pdu->pdu_hdr.pduh_Flags & FLAG_TRANSIT)
680 		c_phase = rx_pdu->pdu_hdr.pduh_Flags & SG_MASK;
681 	else
682 		c_phase = (rx_pdu->pdu_hdr.pduh_Flags >> CSG_SHIFT) & SG_MASK;
683 
684 	DEB(99, ("NegotiateLogin: Flags=%x Phase=%x\n",
685 			 rx_pdu->pdu_hdr.pduh_Flags, c_phase));
686 
687 	if (c_phase == SG_FULL_FEATURE_PHASE) {
688 		session_t *sess = conn->c_session;
689 
690 		if (!sess->s_TSIH)
691 			sess->s_TSIH = ((login_isid_t *) &rx_pdu->pdu_hdr.pduh_LUN)->TSIH;
692 
693 		if (rx_pdu->pdu_temp_data != NULL)
694 			assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, NULL);
695 
696 		/* negotiated values are now valid */
697 		set_negotiated_parameters(tx_ccb);
698 
699 		DEBC(conn, 5, ("Login Successful!\n"));
700 		wake_ccb(tx_ccb, ISCSI_STATUS_SUCCESS);
701 		return;
702 	}
703 
704 	tx_pdu = get_pdu(conn, TRUE);
705 	if (tx_pdu == NULL)
706 		return;
707 
708 	tx_pdu->pdu_hdr.pduh_Flags = c_phase << CSG_SHIFT;
709 
710 	switch (c_phase) {
711 	case SG_SECURITY_NEGOTIATION:
712 		rc = assemble_security_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
713 		if (rc < 0)
714 			next = FALSE;
715 		break;
716 
717 	case SG_LOGIN_OPERATIONAL_NEGOTIATION:
718 		rc = assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
719 		break;
720 
721 	default:
722 		DEBOUT(("Invalid phase %x in negotiate_login\n", c_phase));
723 		rc = ISCSI_STATUS_TARGET_ERROR;
724 		break;
725 	}
726 
727 	if (rc > 0) {
728 		wake_ccb(tx_ccb, rc);
729 		free_pdu(tx_pdu);
730 	} else {
731 		init_login_pdu(conn, tx_ccb, tx_pdu, next);
732 		setup_tx_uio(tx_pdu, tx_pdu->pdu_temp_data_len, tx_pdu->pdu_temp_data, FALSE);
733 		send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
734 	}
735 }
736 
737 
738 /*
739  * init_text_pdu:
740  *    Initialize the text PDU.
741  *
742  *    Parameter:
743  *          conn     The connection
744  *          ccb      The transmit CCB
745  *          ppdu     The transmit PDU
746  *          rx_pdu   The received PDU if this is an unsolicited negotiation
747  */
748 
749 STATIC void
750 init_text_pdu(connection_t *conn, ccb_t *ccb, pdu_t *ppdu, pdu_t *rx_pdu)
751 {
752 	pdu_header_t *hpdu = &ppdu->pdu_hdr;
753 
754 	hpdu->pduh_Opcode = IOP_Text_Request | OP_IMMEDIATE;
755 	hpdu->pduh_Flags = FLAG_FINAL;
756 
757 	mutex_enter(&conn->c_session->s_lock);
758 	ccb->ccb_CmdSN = get_sernum(conn->c_session, ppdu);
759 	mutex_exit(&conn->c_session->s_lock);
760 
761 	if (rx_pdu != NULL) {
762 		hpdu->pduh_p.text_req.TargetTransferTag =
763 			rx_pdu->pdu_hdr.pduh_p.text_rsp.TargetTransferTag;
764 		hpdu->pduh_LUN = rx_pdu->pdu_hdr.pduh_LUN;
765 	} else
766 		hpdu->pduh_p.text_req.TargetTransferTag = 0xffffffff;
767 
768 	hpdu->pduh_p.text_req.CmdSN = htonl(ccb->ccb_CmdSN);
769 }
770 
771 
772 /*
773  * acknowledge_text:
774  *    Acknowledge a continued login or text response.
775  *
776  *    Parameter:
777  *          conn     The connection
778  *          rx_pdu   The received login/text response PDU
779  *          tx_ccb   The originally sent login/text request CCB
780  */
781 
782 void
783 acknowledge_text(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
784 {
785 	pdu_t *tx_pdu;
786 
787 	tx_pdu = get_pdu(conn, TRUE);
788 	if (tx_pdu == NULL)
789 		return;
790 
791 	if (rx_pdu != NULL &&
792 		(rx_pdu->pdu_hdr.pduh_Opcode & OPCODE_MASK) == IOP_Login_Request)
793 		init_login_pdu(conn, tx_ccb, tx_pdu, FALSE);
794 	else
795 		init_text_pdu(conn, tx_ccb, tx_pdu, rx_pdu);
796 
797 	setup_tx_uio(tx_pdu, 0, NULL, FALSE);
798 	send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
799 }
800 
801 
802 /*
803  * start_text_negotiation:
804  *    Handle target request to negotiate (via asynch event)
805  *
806  *    Parameter:
807  *          conn     The connection
808  */
809 
810 void
811 start_text_negotiation(connection_t *conn)
812 {
813 	pdu_t *pdu;
814 	ccb_t *ccb;
815 
816 	ccb = get_ccb(conn, TRUE);
817 	if (ccb == NULL)
818 		return;
819 	pdu = get_pdu(conn, TRUE);
820 	if (pdu == NULL) {
821 		free_ccb(ccb);
822 		return;
823 	}
824 
825 	if (init_text_parameters(conn, ccb)) {
826 		free_ccb(ccb);
827 		free_pdu(pdu);
828 		return;
829 	}
830 
831 	init_text_pdu(conn, ccb, pdu, NULL);
832 	setup_tx_uio(pdu, 0, NULL, FALSE);
833 	send_pdu(ccb, pdu, CCBDISP_FREE, PDUDISP_WAIT);
834 }
835 
836 
837 /*
838  * negotiate_text:
839  *    Handle received text negotiation.
840  *
841  *    Parameter:
842  *          conn     The connection
843  *          rx_pdu   The received text response PDU
844  *          tx_ccb   The original CCB
845  */
846 
847 void
848 negotiate_text(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
849 {
850 	int rc;
851 	pdu_t *tx_pdu;
852 
853 	if (tx_ccb->ccb_flags & CCBF_SENDTARGET) {
854 		if (!(rx_pdu->pdu_hdr.pduh_Flags & FLAG_FINAL)) {
855 			handle_connection_error(conn, ISCSI_STATUS_PROTOCOL_ERROR,
856 									LOGOUT_CONNECTION);
857 			return;
858 		}
859 		/* transfer ownership of text to CCB */
860 		tx_ccb->ccb_text_data = rx_pdu->pdu_temp_data;
861 		tx_ccb->ccb_text_len = rx_pdu->pdu_temp_data_len;
862 		rx_pdu->pdu_temp_data = NULL;
863 		wake_ccb(tx_ccb, ISCSI_STATUS_SUCCESS);
864 	} else {
865 		if (!(rx_pdu->pdu_hdr.pduh_Flags & FLAG_FINAL))
866 			tx_pdu = get_pdu(conn, TRUE);
867 		else
868 			tx_pdu = NULL;
869 
870 		rc = assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
871 		if (rc) {
872 			if (tx_pdu != NULL)
873 				free_pdu(tx_pdu);
874 
875 			handle_connection_error(conn, rc, LOGOUT_CONNECTION);
876 		} else if (tx_pdu != NULL) {
877 			init_text_pdu(conn, tx_ccb, tx_pdu, rx_pdu);
878 			setup_tx_uio(tx_pdu, tx_pdu->pdu_temp_data_len,
879 			     tx_pdu->pdu_temp_data, FALSE);
880 			send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
881 		} else {
882 			set_negotiated_parameters(tx_ccb);
883 			wake_ccb(tx_ccb, ISCSI_STATUS_SUCCESS);
884 		}
885 	}
886 }
887 
888 
889 /*
890  * send_send_targets:
891  *    Send out a SendTargets text request.
892  *    The result is stored in the fields in the session structure.
893  *
894  *    Parameter:
895  *          session  The session
896  *          key      The text key to use
897  *
898  *    Returns:    0 on success, else an error code.
899  */
900 
901 int
902 send_send_targets(session_t *sess, uint8_t *key)
903 {
904 	ccb_t *ccb;
905 	pdu_t *pdu;
906 	int rc = 0;
907 	connection_t *conn;
908 
909 	DEB(9, ("Send_send_targets\n"));
910 
911 	conn = assign_connection(sess, TRUE);
912 	if (conn == NULL || conn->c_terminating || conn->c_state != ST_FULL_FEATURE)
913 		return (conn != NULL && conn->c_terminating) ? conn->c_terminating
914 			: ISCSI_STATUS_CONNECTION_FAILED;
915 
916 	ccb = get_ccb(conn, TRUE);
917 	if (ccb == NULL)
918 		return conn->c_terminating;
919 	pdu = get_pdu(conn, TRUE);
920 	if (pdu == NULL) {
921 		free_ccb(ccb);
922 		return conn->c_terminating;
923 	}
924 
925 	ccb->ccb_flags |= CCBF_SENDTARGET;
926 
927 	if ((rc = assemble_send_targets(pdu, key)) != 0) {
928 		free_ccb(ccb);
929 		free_pdu(pdu);
930 		return rc;
931 	}
932 
933 	init_text_pdu(conn, ccb, pdu, NULL);
934 
935 	setup_tx_uio(pdu, pdu->pdu_temp_data_len, pdu->pdu_temp_data, FALSE);
936 	send_pdu(ccb, pdu, CCBDISP_WAIT, PDUDISP_WAIT);
937 
938 	rc = ccb->ccb_status;
939 	if (!rc) {
940 		/* transfer ownership of data */
941 		sess->s_target_list = ccb->ccb_text_data;
942 		sess->s_target_list_len = ccb->ccb_text_len;
943 		ccb->ccb_text_data = NULL;
944 	}
945 	free_ccb(ccb);
946 	return rc;
947 }
948 
949 
950 /*
951  * send_nop_out:
952  *    Send nop out request.
953  *
954  *    Parameter:
955  *          conn     The connection
956  *          rx_pdu   The received Nop-In PDU
957  *
958  *    Returns:    0 on success, else an error code.
959  */
960 
961 int
962 send_nop_out(connection_t *conn, pdu_t *rx_pdu)
963 {
964 	session_t *sess;
965 	ccb_t *ccb;
966 	pdu_t *ppdu;
967 	pdu_header_t *hpdu;
968 	uint32_t sn;
969 
970 	if (rx_pdu != NULL) {
971 		ccb = NULL;
972 		ppdu = get_pdu(conn, TRUE);
973 		if (ppdu == NULL)
974 			return 1;
975 	} else {
976 		ccb = get_ccb(conn, FALSE);
977 		if (ccb == NULL) {
978 			DEBOUT(("Can't get CCB in send_nop_out\n"));
979 			return 1;
980 		}
981 		ppdu = get_pdu(conn, FALSE);
982 		if (ppdu == NULL) {
983 			free_ccb(ccb);
984 			DEBOUT(("Can't get PDU in send_nop_out\n"));
985 			return 1;
986 		}
987 	}
988 
989 	hpdu = &ppdu->pdu_hdr;
990 	hpdu->pduh_Flags = FLAG_FINAL;
991 	hpdu->pduh_Opcode = IOP_NOP_Out | OP_IMMEDIATE;
992 
993 	sess = conn->c_session;
994 
995 	mutex_enter(&sess->s_lock);
996 	sn = get_sernum(sess, ppdu);
997 	mutex_exit(&sess->s_lock);
998 
999 	if (rx_pdu != NULL) {
1000 		hpdu->pduh_p.nop_out.TargetTransferTag =
1001 			rx_pdu->pdu_hdr.pduh_p.nop_in.TargetTransferTag;
1002 		hpdu->pduh_InitiatorTaskTag = rx_pdu->pdu_hdr.pduh_InitiatorTaskTag;
1003 		hpdu->pduh_p.nop_out.CmdSN = htonl(sn);
1004 		hpdu->pduh_LUN = rx_pdu->pdu_hdr.pduh_LUN;
1005 	} else {
1006 		hpdu->pduh_p.nop_out.TargetTransferTag = 0xffffffff;
1007 		hpdu->pduh_InitiatorTaskTag = 0xffffffff;
1008 		ccb->ccb_CmdSN = sn;
1009 		hpdu->pduh_p.nop_out.CmdSN = htonl(sn);
1010 	}
1011 
1012 	DEBC(conn, 10, ("Send NOP_Out CmdSN=%d, rx_pdu=%p\n", sn, rx_pdu));
1013 
1014 	setup_tx_uio(ppdu, 0, NULL, FALSE);
1015 	send_pdu(ccb, ppdu, (rx_pdu != NULL) ? CCBDISP_NOWAIT : CCBDISP_FREE,
1016 			 PDUDISP_FREE);
1017 	return 0;
1018 }
1019 
1020 
1021 /*
1022  * snack_missing:
1023  *    Send SNACK request for missing data.
1024  *
1025  *    Parameter:
1026  *          conn     The connection
1027  *          ccb      The task's CCB (for Data NAK only)
1028  *          type     The SNACK type
1029  *          BegRun   The BegRun field
1030  *          RunLength   The RunLength field
1031  */
1032 
1033 void
1034 snack_missing(connection_t *conn, ccb_t *ccb, uint8_t type,
1035 			  uint32_t BegRun, uint32_t RunLength)
1036 {
1037 	pdu_t *ppdu;
1038 	pdu_header_t *hpdu;
1039 
1040 	ppdu = get_pdu(conn, TRUE);
1041 	if (ppdu == NULL)
1042 		return;
1043 	hpdu = &ppdu->pdu_hdr;
1044 	hpdu->pduh_Opcode = IOP_SNACK_Request;
1045 	hpdu->pduh_Flags = FLAG_FINAL | type;
1046 
1047 	hpdu->pduh_InitiatorTaskTag = (type == SNACK_DATA_NAK) ? ccb->ccb_ITT : 0xffffffff;
1048 	hpdu->pduh_p.snack.TargetTransferTag = 0xffffffff;
1049 	hpdu->pduh_p.snack.BegRun = htonl(BegRun);
1050 	hpdu->pduh_p.snack.RunLength = htonl(RunLength);
1051 
1052 	ppdu->pdu_flags = PDUF_PRIORITY;
1053 
1054 	setup_tx_uio(ppdu, 0, NULL, FALSE);
1055 	send_pdu(NULL, ppdu, CCBDISP_NOWAIT, PDUDISP_FREE);
1056 }
1057 
1058 
1059 /*
1060  * send_snack:
1061  *    Send SNACK request.
1062  *
1063  *    Parameter:
1064  *          conn     The connection
1065  *          rx_pdu   The received data in PDU
1066  *          tx_ccb   The original command CCB (required for Data ACK only)
1067  *          type     The SNACK type
1068  *
1069  *    Returns:    0 on success, else an error code.
1070  */
1071 
1072 void
1073 send_snack(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb, uint8_t type)
1074 {
1075 	pdu_t *ppdu;
1076 	pdu_header_t *hpdu;
1077 
1078 	ppdu = get_pdu(conn, TRUE);
1079 	if (ppdu == NULL)
1080 		return;
1081 	hpdu = &ppdu->pdu_hdr;
1082 	hpdu->pduh_Opcode = IOP_SNACK_Request;
1083 	hpdu->pduh_Flags = FLAG_FINAL | type;
1084 
1085 	switch (type) {
1086 	case SNACK_DATA_NAK:
1087 		hpdu->pduh_InitiatorTaskTag = rx_pdu->pdu_hdr.pduh_InitiatorTaskTag;
1088 		hpdu->pduh_p.snack.TargetTransferTag = 0xffffffff;
1089 		hpdu->pduh_p.snack.BegRun = rx_pdu->pdu_hdr.pduh_p.data_in.DataSN;
1090 		hpdu->pduh_p.snack.RunLength = htonl(1);
1091 		break;
1092 
1093 	case SNACK_STATUS_NAK:
1094 		hpdu->pduh_InitiatorTaskTag = 0xffffffff;
1095 		hpdu->pduh_p.snack.TargetTransferTag = 0xffffffff;
1096 		hpdu->pduh_p.snack.BegRun = rx_pdu->pdu_hdr.pduh_p.response.StatSN;
1097 		hpdu->pduh_p.snack.RunLength = htonl(1);
1098 		break;
1099 
1100 	case SNACK_DATA_ACK:
1101 		hpdu->pduh_InitiatorTaskTag = 0xffffffff;
1102 		hpdu->pduh_p.snack.TargetTransferTag =
1103 			rx_pdu->pdu_hdr.pduh_p.data_in.TargetTransferTag;
1104 		hpdu->pduh_p.snack.BegRun = tx_ccb->ccb_DataSN_buf.ExpSN;
1105 		hpdu->pduh_p.snack.RunLength = 0;
1106 		break;
1107 
1108 	default:
1109 		DEBOUT(("Invalid type %d in send_snack\n", type));
1110 		return;
1111 	}
1112 
1113 	hpdu->pduh_LUN = rx_pdu->pdu_hdr.pduh_LUN;
1114 
1115 	ppdu->pdu_flags = PDUF_PRIORITY;
1116 
1117 	setup_tx_uio(ppdu, 0, NULL, FALSE);
1118 	send_pdu(NULL, ppdu, CCBDISP_NOWAIT, PDUDISP_FREE);
1119 }
1120 
1121 
1122 /*
1123  * send_login:
1124  *    Send login request.
1125  *
1126  *    Parameter:
1127  *          conn     The connection
1128  *          par      The login parameters (for negotiation)
1129  *
1130  *    Returns:       0 on success, else an error code.
1131  */
1132 
1133 int
1134 send_login(connection_t *conn)
1135 {
1136 	ccb_t *ccb;
1137 	pdu_t *pdu;
1138 	int rc;
1139 
1140 	DEBC(conn, 9, ("Send_login\n"));
1141 	ccb = get_ccb(conn, TRUE);
1142 	/* only if terminating (which couldn't possibly happen here, but...) */
1143 	if (ccb == NULL)
1144 		return conn->c_terminating;
1145 	pdu = get_pdu(conn, TRUE);
1146 	if (pdu == NULL) {
1147 		free_ccb(ccb);
1148 		return conn->c_terminating;
1149 	}
1150 
1151 	if ((rc = assemble_login_parameters(conn, ccb, pdu)) <= 0) {
1152 		init_login_pdu(conn, ccb, pdu, !rc);
1153 		setup_tx_uio(pdu, pdu->pdu_temp_data_len, pdu->pdu_temp_data, FALSE);
1154 		send_pdu(ccb, pdu, CCBDISP_WAIT, PDUDISP_FREE);
1155 		rc = ccb->ccb_status;
1156 	} else {
1157 		free_pdu(pdu);
1158 	}
1159 	free_ccb(ccb);
1160 	return rc;
1161 }
1162 
1163 
1164 /*
1165  * send_logout:
1166  *    Send logout request.
1167  *	  NOTE: This function does not wait for the logout to complete.
1168  *
1169  *    Parameter:
1170  *          conn	The connection
1171  *			refconn	The referenced connection
1172  *			reason	The reason code
1173  *			wait	Wait for completion if TRUE
1174  *
1175  *    Returns:       0 on success (logout sent), else an error code.
1176  */
1177 
1178 int
1179 send_logout(connection_t *conn, connection_t *refconn, int reason,
1180 			bool wait)
1181 {
1182 	ccb_t *ccb;
1183 	pdu_t *ppdu;
1184 	pdu_header_t *hpdu;
1185 
1186 	DEBC(conn, 5, ("Send_logout\n"));
1187 	ccb = get_ccb(conn, TRUE);
1188 	/* can only happen if terminating... */
1189 	if (ccb == NULL)
1190 		return conn->c_terminating;
1191 	ppdu = get_pdu(conn, TRUE);
1192 	if (ppdu == NULL) {
1193 		free_ccb(ccb);
1194 		return conn->c_terminating;
1195 	}
1196 
1197 	hpdu = &ppdu->pdu_hdr;
1198 	hpdu->pduh_Opcode = IOP_Logout_Request | OP_IMMEDIATE;
1199 
1200 	hpdu->pduh_Flags = FLAG_FINAL | reason;
1201 	ccb->ccb_CmdSN = conn->c_session->s_CmdSN;
1202 	hpdu->pduh_p.logout_req.CmdSN = htonl(ccb->ccb_CmdSN);
1203 	if (reason > 0)
1204 		hpdu->pduh_p.logout_req.CID = htons(refconn->c_id);
1205 
1206 	ccb->ccb_par = refconn;
1207 	if (refconn != conn) {
1208 		ccb->ccb_flags |= CCBF_OTHERCONN;
1209 	} else {
1210 		conn->c_state = ST_LOGOUT_SENT;
1211 		conn->c_loggedout = LOGOUT_SENT;
1212 	}
1213 
1214 	setup_tx_uio(ppdu, 0, NULL, FALSE);
1215 	send_pdu(ccb, ppdu, (wait) ? CCBDISP_WAIT : CCBDISP_FREE, PDUDISP_FREE);
1216 
1217 	if (wait) {
1218 		int rc = ccb->ccb_status;
1219 		free_ccb (ccb);
1220 		return rc;
1221 	}
1222 	return 0;
1223 }
1224 
1225 
1226 /*
1227  * send_task_management:
1228  *    Send task management request.
1229  *
1230  *    Parameter:
1231  *          conn     The connection
1232  *          ref_ccb  The referenced command (NULL if none)
1233  *          xs       The scsipi command structure (NULL if not a scsipi request)
1234  *          function The function code
1235  *
1236  *    Returns:       0 on success, else an error code.
1237  */
1238 
1239 int
1240 send_task_management(connection_t *conn, ccb_t *ref_ccb, struct scsipi_xfer *xs,
1241 					 int function)
1242 {
1243 	ccb_t *ccb;
1244 	pdu_t *ppdu;
1245 	pdu_header_t *hpdu;
1246 
1247 	DEBC(conn, 5, ("Send_task_management, ref_ccb=%p, func = %d\n",
1248 			ref_ccb, function));
1249 
1250 	if (function == TASK_REASSIGN && conn->c_session->s_ErrorRecoveryLevel < 2)
1251 		return ISCSI_STATUS_CANT_REASSIGN;
1252 
1253 	ccb = get_ccb(conn, xs == NULL);
1254 	/* can only happen if terminating... */
1255 	if (ccb == NULL) {
1256 		DEBC(conn, 0, ("send_task_management, ref_ccb=%p, xs=%p, term=%d. No CCB\n",
1257 			ref_ccb, xs, conn->c_terminating));
1258 		return conn->c_terminating;
1259 	}
1260 	ppdu = get_pdu(conn, xs == NULL);
1261 	if (ppdu == NULL) {
1262 		DEBC(conn, 0, ("send_task_management, ref_ccb=%p, xs=%p, term=%d. No PDU\n",
1263 			ref_ccb, xs, conn->c_terminating));
1264 		free_ccb(ccb);
1265 		return conn->c_terminating;
1266 	}
1267 
1268 	ccb->ccb_xs = xs;
1269 
1270 	hpdu = &ppdu->pdu_hdr;
1271 	hpdu->pduh_Opcode = IOP_SCSI_Task_Management | OP_IMMEDIATE;
1272 	hpdu->pduh_Flags = FLAG_FINAL | function;
1273 
1274 	ccb->ccb_CmdSN = conn->c_session->s_CmdSN;
1275 	hpdu->pduh_p.task_req.CmdSN = htonl(ccb->ccb_CmdSN);
1276 
1277 	if (ref_ccb != NULL) {
1278 		hpdu->pduh_p.task_req.ReferencedTaskTag = ref_ccb->ccb_ITT;
1279 		hpdu->pduh_p.task_req.RefCmdSN = htonl(ref_ccb->ccb_CmdSN);
1280 		hpdu->pduh_p.task_req.ExpDataSN = htonl(ref_ccb->ccb_DataSN_buf.ExpSN);
1281 	} else
1282 		hpdu->pduh_p.task_req.ReferencedTaskTag = 0xffffffff;
1283 
1284 	ppdu->pdu_flags |= PDUF_PRIORITY;
1285 
1286 	setup_tx_uio(ppdu, 0, NULL, FALSE);
1287 	send_pdu(ccb, ppdu, (xs) ? CCBDISP_SCSIPI : CCBDISP_WAIT, PDUDISP_FREE);
1288 
1289 	if (xs == NULL) {
1290 		int rc = ccb->ccb_status;
1291 		free_ccb(ccb);
1292 		return rc;
1293 	}
1294 	return 0;
1295 }
1296 
1297 
1298 /*
1299  * send_data_out:
1300  *    Send data to target in response to an R2T or as unsolicited data.
1301  *
1302  *    Parameter:
1303  *          conn     The connection
1304  *          rx_pdu   The received R2T PDU (NULL if unsolicited)
1305  *          tx_ccb   The originally sent command CCB
1306  *          waitok   Whether it's OK to wait for an available PDU or not
1307  */
1308 
1309 int
1310 send_data_out(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb,
1311 			  ccb_disp_t disp, bool waitok)
1312 {
1313 	pdu_header_t *hpdu;
1314 	uint32_t totlen, len, offs, sn;
1315 	pdu_t *tx_pdu;
1316 
1317 	KASSERT(conn->c_max_transfer != 0);
1318 
1319 	if (rx_pdu) {
1320 		offs = ntohl(rx_pdu->pdu_hdr.pduh_p.r2t.BufferOffset);
1321 		totlen = ntohl(rx_pdu->pdu_hdr.pduh_p.r2t.DesiredDataTransferLength);
1322 	} else {
1323 		offs = conn->c_max_firstimmed;
1324 		totlen = min(conn->c_max_firstdata - offs, tx_ccb->ccb_data_len - offs);
1325 	}
1326 	sn = 0;
1327 
1328 	while (totlen) {
1329 		len = min(totlen, conn->c_max_transfer);
1330 
1331 		tx_pdu = get_pdu(conn, waitok);
1332 		if (tx_pdu == NULL) {
1333 			DEBC(conn, 5, ("No PDU in send_data_out\n"));
1334 
1335 			tx_ccb->ccb_disp = disp;
1336 			tx_ccb->ccb_status = ISCSI_STATUS_NO_RESOURCES;
1337 			handle_connection_error(conn, ISCSI_STATUS_NO_RESOURCES, NO_LOGOUT);
1338 
1339 			return ISCSI_STATUS_NO_RESOURCES;
1340 		}
1341 
1342 		totlen -= len;
1343 		hpdu = &tx_pdu->pdu_hdr;
1344 		hpdu->pduh_Opcode = IOP_SCSI_Data_out;
1345 		if (!totlen)
1346 			hpdu->pduh_Flags = FLAG_FINAL;
1347 
1348 		if (rx_pdu != NULL)
1349 			hpdu->pduh_p.data_out.TargetTransferTag =
1350 				rx_pdu->pdu_hdr.pduh_p.r2t.TargetTransferTag;
1351 		else
1352 			hpdu->pduh_p.data_out.TargetTransferTag = 0xffffffff;
1353 		hpdu->pduh_p.data_out.BufferOffset = htonl(offs);
1354 		hpdu->pduh_p.data_out.DataSN = htonl(sn);
1355 
1356 		DEBC(conn, 10, ("Send DataOut: DataSN %d, len %d offs %x totlen %d\n",
1357 				sn, len, offs, totlen));
1358 
1359 		setup_tx_uio(tx_pdu, len, tx_ccb->ccb_data_ptr + offs, FALSE);
1360 		send_pdu(tx_ccb, tx_pdu, (totlen) ? CCBDISP_NOWAIT : disp, PDUDISP_FREE);
1361 
1362 		sn++;
1363 		offs += len;
1364 	}
1365 	return 0;
1366 }
1367 
1368 
1369 /*
1370  * send_command:
1371  *    Send a SCSI command request.
1372  *
1373  *    Parameter:
1374  *          CCB      The CCB
1375  *          disp     The CCB disposition
1376  */
1377 
1378 void
1379 send_command(ccb_t *ccb, ccb_disp_t disp, bool waitok, bool immed)
1380 {
1381 	uint32_t totlen, len;
1382 	connection_t *conn = ccb->ccb_connection;
1383 	session_t *sess = ccb->ccb_session;
1384 	pdu_t *ppdu;
1385 	pdu_header_t *hpdu;
1386 
1387 	mutex_enter(&sess->s_lock);
1388 	while (!sernum_in_window(sess)) {
1389 		mutex_exit(&sess->s_lock);
1390 		ccb->ccb_disp = disp;
1391 		wake_ccb(ccb, ISCSI_STATUS_QUEUE_FULL);
1392 		return;
1393 	}
1394 	mutex_exit(&sess->s_lock);
1395 
1396 	/* Don't confuse targets during (re-)negotations */
1397 	if (conn->c_state != ST_FULL_FEATURE) {
1398 		DEBOUT(("Invalid connection for send_command, ccb = %p\n",ccb));
1399 		ccb->ccb_disp = disp;
1400 		wake_ccb(ccb, ISCSI_STATUS_TARGET_BUSY);
1401 		return;
1402 	}
1403 
1404 	ppdu = get_pdu(conn, waitok);
1405 	if (ppdu == NULL) {
1406 		DEBOUT(("No PDU for send_command, ccb = %p\n",ccb));
1407 		ccb->ccb_disp = disp;
1408 		wake_ccb(ccb, ISCSI_STATUS_NO_RESOURCES);
1409 		return;
1410 	}
1411 
1412 	totlen = len = ccb->ccb_data_len;
1413 
1414 	hpdu = &ppdu->pdu_hdr;
1415 	hpdu->pduh_LUN = htonq(ccb->ccb_lun);
1416 	memcpy(hpdu->pduh_p.command.SCSI_CDB, ccb->ccb_cmd, ccb->ccb_cmdlen);
1417 	hpdu->pduh_Opcode = IOP_SCSI_Command;
1418 	if (immed)
1419 		hpdu->pduh_Opcode |= OP_IMMEDIATE;
1420 	hpdu->pduh_p.command.ExpectedDataTransferLength = htonl(totlen);
1421 
1422 	if (totlen) {
1423 		if (ccb->ccb_data_in) {
1424 			hpdu->pduh_Flags = FLAG_READ;
1425 			totlen = 0;
1426 		} else {
1427 			hpdu->pduh_Flags = FLAG_WRITE;
1428 			/* immediate data we can send */
1429 			len = min(totlen, conn->c_max_firstimmed);
1430 
1431 			/* can we send more unsolicited data ? */
1432 			totlen = conn->c_max_firstdata ? totlen - len : 0;
1433 		}
1434 	}
1435 	if (!totlen)
1436 		hpdu->pduh_Flags |= FLAG_FINAL;
1437 	hpdu->pduh_Flags |= ccb->ccb_tag;
1438 
1439 	if (ccb->ccb_data_in)
1440 		init_sernum(&ccb->ccb_DataSN_buf);
1441 
1442 	ccb->ccb_sense_len_got = 0;
1443 	ccb->ccb_xfer_len = 0;
1444 	ccb->ccb_residual = 0;
1445 	ccb->ccb_flags |= CCBF_REASSIGN;
1446 
1447 	mutex_enter(&sess->s_lock);
1448 	ccb->ccb_CmdSN = get_sernum(sess, ppdu);
1449 	mutex_exit(&sess->s_lock);
1450 
1451 	hpdu->pduh_p.command.CmdSN = htonl(ccb->ccb_CmdSN);
1452 
1453 	DEBC(conn, 10, ("Send Command: CmdSN %d (%d), data_in %d, len %d, totlen %d\n",
1454 			ccb->ccb_CmdSN, sess->s_MaxCmdSN, ccb->ccb_data_in, len, totlen));
1455 
1456 	setup_tx_uio(ppdu, len, ccb->ccb_data_ptr, ccb->ccb_data_in);
1457 	send_pdu(ccb, ppdu, (totlen) ? CCBDISP_DEFER : disp, PDUDISP_WAIT);
1458 
1459 	if (totlen)
1460 		send_data_out(conn, NULL, ccb, disp, waitok);
1461 }
1462 
1463 
1464 /*
1465  * send_run_xfer:
1466  *    Handle a SCSI command transfer request from scsipi.
1467  *
1468  *    Parameter:
1469  *          session  The session
1470  *          xs       The transfer parameters
1471  */
1472 
1473 void
1474 send_run_xfer(session_t *session, struct scsipi_xfer *xs)
1475 {
1476 	ccb_t *ccb;
1477 	connection_t *conn;
1478 	bool waitok;
1479 
1480 	waitok = !(xs->xs_control & XS_CTL_NOSLEEP);
1481 
1482 	DEB(10, ("RunXfer: flags=%x, data=%p, datalen=%d, resid=%d, cmdlen=%d, "
1483 			"waitok=%d\n", xs->xs_control, xs->data, xs->datalen,
1484 			xs->resid, xs->cmdlen, waitok));
1485 
1486 	conn = assign_connection(session, waitok);
1487 
1488 	if (conn == NULL || conn->c_terminating || conn->c_state != ST_FULL_FEATURE) {
1489 		if (session->s_terminating)
1490 			xs->error = XS_SELTIMEOUT;
1491 		else
1492 			xs->error = XS_BUSY;
1493 		DEBC(conn, 10, ("run_xfer on dead connection\n"));
1494 		scsipi_done(xs);
1495 		unref_session(session);
1496 		return;
1497 	}
1498 
1499 	if (xs->xs_control & XS_CTL_RESET) {
1500 		if (send_task_management(conn, NULL, xs, TARGET_WARM_RESET)) {
1501 			DEBC(conn, 0, ("send_task_management TARGET_WARM_RESET failed\n"));
1502 			xs->error = XS_SELTIMEOUT;
1503 			scsipi_done(xs);
1504 			unref_session(session);
1505 		}
1506 		return;
1507 	}
1508 
1509 	ccb = get_ccb(conn, waitok);
1510 	if (ccb == NULL) {
1511 		xs->error = XS_BUSY;
1512 		DEBC(conn, 5, ("No CCB in run_xfer, %d in use.\n", conn->c_usecount));
1513 		scsipi_done(xs);
1514 		unref_session(session);
1515 		return;
1516 	}
1517 	/* copy parameters into CCB for easier access */
1518 	ccb->ccb_xs = xs;
1519 
1520 	ccb->ccb_data_in = (xs->xs_control & XS_CTL_DATA_IN) != 0;
1521 	ccb->ccb_data_len = (uint32_t) xs->datalen;
1522 	ccb->ccb_data_ptr = xs->data;
1523 
1524 	ccb->ccb_sense_len_req = sizeof(xs->sense.scsi_sense);
1525 	ccb->ccb_sense_ptr = &xs->sense;
1526 
1527 	ccb->ccb_lun = ((uint64_t) (uint8_t) xs->xs_periph->periph_lun) << 48;
1528 	ccb->ccb_cmd = (uint8_t *) xs->cmd;
1529 	ccb->ccb_cmdlen = xs->cmdlen;
1530 	DEB(10, ("RunXfer: Periph_lun = %d, cmd[1] = %x, cmdlen = %d\n",
1531 			xs->xs_periph->periph_lun, ccb->ccb_cmd[1], xs->cmdlen));
1532 
1533 	ccb->ccb_ITT |= xs->xs_tag_id << 24;
1534 	switch (xs->xs_tag_type) {
1535 	case MSG_ORDERED_Q_TAG:
1536 		ccb->ccb_tag = ATTR_ORDERED;
1537 		break;
1538 	case MSG_SIMPLE_Q_TAG:
1539 		ccb->ccb_tag = ATTR_SIMPLE;
1540 		break;
1541 	case MSG_HEAD_OF_Q_TAG:
1542 		ccb->ccb_tag = ATTR_HEAD_OF_QUEUE;
1543 		break;
1544 	default:
1545 		ccb->ccb_tag = 0;
1546 		break;
1547 	}
1548 
1549 #ifdef LUN_1
1550 	ccb->ccb_lun += 0x1000000000000LL;
1551 	ccb->ccb_cmd[1] += 0x10;
1552 #endif
1553 	send_command(ccb, CCBDISP_SCSIPI, waitok, FALSE);
1554 }
1555 
1556 
1557 #ifndef ISCSI_MINIMAL
1558 /*
1559  * send_io_command:
1560  *    Handle a SCSI io command request from user space.
1561  *
1562  *    Parameter:
1563  *          session 	The session
1564  *          lun		    The LUN to use
1565  *          req			The SCSI request block
1566  *			immed		Immediate command if TRUE
1567  *			conn_id		Assign to this connection ID if nonzero
1568  */
1569 
1570 int
1571 send_io_command(session_t *session, uint64_t lun, scsireq_t *req,
1572 				bool immed, uint32_t conn_id)
1573 {
1574 	ccb_t *ccb;
1575 	connection_t *conn;
1576 	int rc;
1577 
1578 	DEB(9, ("IoCommand: lun=%x, datalen=%d, cmdlen=%d, immed=%d, cid=%d\n",
1579 			(int) lun, (int) req->datalen, (int) req->cmdlen, immed, conn_id));
1580 
1581 	conn = (conn_id) ? find_connection(session, conn_id)
1582 					 : assign_connection(session, TRUE);
1583 
1584 	if (conn == NULL || conn->c_terminating || conn->c_state != ST_FULL_FEATURE) {
1585 		DEBOUT(("io_command on dead connection (state = %d)\n",
1586 				(conn != NULL) ? conn->c_state : -1));
1587 		return ISCSI_STATUS_INVALID_CONNECTION_ID;
1588 	}
1589 
1590 	ccb = get_ccb(conn, TRUE);
1591 	if (ccb == NULL) {
1592 		DEBOUT(("No CCB in io_command\n"));
1593 		return ISCSI_STATUS_NO_RESOURCES;
1594 	}
1595 
1596 	ccb->ccb_data_in = (req->flags & SCCMD_READ) != 0;
1597 	ccb->ccb_data_len = (uint32_t) req->datalen;
1598 	ccb->ccb_data_ptr = req->databuf;
1599 
1600 	ccb->ccb_sense_len_req = req->senselen;
1601 	ccb->ccb_sense_ptr = &req->sense;
1602 
1603 	ccb->ccb_lun = lun;
1604 	ccb->ccb_cmd = (uint8_t *) req->cmd;
1605 	ccb->ccb_cmdlen = req->cmdlen;
1606 	DEBC(conn, 10, ("IoCommand: cmd[1] = %x, cmdlen = %d\n",
1607 			 ccb->ccb_cmd[1], ccb->ccb_cmdlen));
1608 
1609 	send_command(ccb, CCBDISP_WAIT, TRUE, immed);
1610 
1611 	rc = ccb->ccb_status;
1612 
1613 	req->senselen_used = ccb->ccb_sense_len_got;
1614 	req->datalen_used = req->datalen - ccb->ccb_residual;
1615 
1616 	free_ccb(ccb);
1617 
1618 	return rc;
1619 }
1620 #endif
1621 
1622 
1623 /*****************************************************************************
1624  * Timeout handlers
1625  *****************************************************************************/
1626 /*
1627  * connection_timeout:
1628  *    Handle prolonged silence on a connection by checking whether
1629  *    it's still alive.
1630  *    This has the side effect of discovering missing status or lost commands
1631  *    before those time out.
1632  *
1633  *    Parameter:
1634  *          conn     The connection
1635  */
1636 
1637 void
1638 connection_timeout(connection_t *conn)
1639 {
1640 
1641 	if (++conn->c_num_timeouts > MAX_CONN_TIMEOUTS)
1642 		handle_connection_error(conn, ISCSI_STATUS_TIMEOUT, NO_LOGOUT);
1643 	else {
1644 		if (conn->c_state == ST_FULL_FEATURE)
1645 			send_nop_out(conn, NULL);
1646 
1647 		connection_timeout_start(conn, CONNECTION_TIMEOUT);
1648 	}
1649 }
1650 
1651 /*
1652  * ccb_timeout:
1653  *    Handle timeout of a sent command.
1654  *
1655  *    Parameter:
1656  *          ccb      The CCB
1657  */
1658 
1659 void
1660 ccb_timeout(ccb_t *ccb)
1661 {
1662 	connection_t *conn = ccb->ccb_connection;
1663 
1664 	ccb->ccb_total_tries++;
1665 
1666 	DEBC(conn, 0, ("ccb_timeout: num=%d total=%d disp=%d\n",
1667 		ccb->ccb_num_timeouts+1, ccb->ccb_total_tries, ccb->ccb_disp));
1668 
1669 	if (++ccb->ccb_num_timeouts > MAX_CCB_TIMEOUTS ||
1670 		ccb->ccb_total_tries > MAX_CCB_TRIES ||
1671 		ccb->ccb_disp <= CCBDISP_FREE ||
1672 		!ccb->ccb_session->s_ErrorRecoveryLevel) {
1673 
1674 		wake_ccb(ccb, ISCSI_STATUS_TIMEOUT);
1675 		handle_connection_error(conn, ISCSI_STATUS_TIMEOUT, RECOVER_CONNECTION);
1676 	} else {
1677 		if (ccb->ccb_data_in && ccb->ccb_xfer_len < ccb->ccb_data_len) {
1678 			/* request resend of all missing data */
1679 			snack_missing(conn, ccb, SNACK_DATA_NAK, 0, 0);
1680 		} else {
1681 			/* request resend of all missing status */
1682 			snack_missing(conn, NULL, SNACK_STATUS_NAK, 0, 0);
1683 		}
1684 		ccb_timeout_start(ccb, COMMAND_TIMEOUT);
1685 	}
1686 }
1687 
1688