xref: /openbsd-src/sys/dev/ic/ciss.c (revision 99fd087599a8791921855f21bd7e36130f39aadc)
1 /*	$OpenBSD: ciss.c,v 1.81 2020/02/13 15:11:32 krw Exp $	*/
2 
3 /*
4  * Copyright (c) 2005,2006 Michael Shalayeff
5  * All rights reserved.
6  *
7  * Permission to use, copy, modify, and distribute this software for any
8  * purpose with or without fee is hereby granted, provided that the above
9  * copyright notice and this permission notice appear in all copies.
10  *
11  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15  * WHATSOEVER RESULTING FROM LOSS OF MIND, USE, DATA OR PROFITS, WHETHER IN
16  * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
17  * OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18  */
19 
20 #include "bio.h"
21 
22 /* #define CISS_DEBUG */
23 
24 #include <sys/param.h>
25 #include <sys/systm.h>
26 #include <sys/buf.h>
27 #include <sys/ioctl.h>
28 #include <sys/device.h>
29 #include <sys/kernel.h>
30 #include <sys/malloc.h>
31 
32 #include <machine/bus.h>
33 
34 #include <scsi/scsi_all.h>
35 #include <scsi/scsiconf.h>
36 
37 #include <dev/ic/cissreg.h>
38 #include <dev/ic/cissvar.h>
39 
40 #if NBIO > 0
41 #include <dev/biovar.h>
42 #endif
43 #include <sys/sensors.h>
44 
45 #ifdef CISS_DEBUG
46 #define	CISS_DPRINTF(m,a)	if (ciss_debug & (m)) printf a
47 #define	CISS_D_CMD	0x0001
48 #define	CISS_D_INTR	0x0002
49 #define	CISS_D_MISC	0x0004
50 #define	CISS_D_DMA	0x0008
51 #define	CISS_D_IOCTL	0x0010
52 #define	CISS_D_ERR	0x0020
53 int ciss_debug = 0
54 /*	| CISS_D_CMD */
55 /*	| CISS_D_INTR */
56 /*	| CISS_D_MISC */
57 /*	| CISS_D_DMA */
58 /*	| CISS_D_IOCTL */
59 /*	| CISS_D_ERR */
60 	;
61 #else
62 #define	CISS_DPRINTF(m,a)	/* m, a */
63 #endif
64 
65 struct cfdriver ciss_cd = {
66 	NULL, "ciss", DV_DULL
67 };
68 
69 void	ciss_scsi_cmd(struct scsi_xfer *xs);
70 int	ciss_scsi_ioctl(struct scsi_link *, u_long, caddr_t, int);
71 
72 struct scsi_adapter ciss_switch = {
73 	ciss_scsi_cmd, NULL, NULL, NULL, ciss_scsi_ioctl
74 };
75 
76 #if NBIO > 0
77 int	ciss_ioctl(struct device *, u_long, caddr_t);
78 #endif
79 int	ciss_sync(struct ciss_softc *sc);
80 void	ciss_heartbeat(void *v);
81 #ifndef SMALL_KERNEL
82 void	ciss_sensors(void *);
83 #endif
84 
85 void *	ciss_get_ccb(void *);
86 void	ciss_put_ccb(void *, void *);
87 int	ciss_cmd(struct ciss_ccb *ccb, int flags, int wait);
88 int	ciss_done(struct ciss_ccb *ccb);
89 int	ciss_error(struct ciss_ccb *ccb);
90 
91 struct ciss_ld *ciss_pdscan(struct ciss_softc *sc, int ld);
92 int	ciss_inq(struct ciss_softc *sc, struct ciss_inquiry *inq);
93 int	ciss_ldmap(struct ciss_softc *sc);
94 int	ciss_ldid(struct ciss_softc *, int, struct ciss_ldid *);
95 int	ciss_ldstat(struct ciss_softc *, int, struct ciss_ldstat *);
96 int	ciss_pdid(struct ciss_softc *, u_int8_t, struct ciss_pdid *, int);
97 int	ciss_blink(struct ciss_softc *, int, int, int, struct ciss_blink *);
98 
99 void *
100 ciss_get_ccb(void *xsc)
101 {
102 	struct ciss_softc *sc = xsc;
103 	struct ciss_ccb *ccb;
104 
105 	mtx_enter(&sc->sc_free_ccb_mtx);
106 	ccb = SLIST_FIRST(&sc->sc_free_ccb);
107 	if (ccb != NULL) {
108 		SLIST_REMOVE_HEAD(&sc->sc_free_ccb, ccb_link);
109 		ccb->ccb_state = CISS_CCB_READY;
110 		ccb->ccb_xs = NULL;
111 	}
112 	mtx_leave(&sc->sc_free_ccb_mtx);
113 
114 	return (ccb);
115 }
116 
117 void
118 ciss_put_ccb(void *xsc, void *xccb)
119 {
120 	struct ciss_softc *sc = xsc;
121 	struct ciss_ccb *ccb = xccb;
122 
123 	ccb->ccb_state = CISS_CCB_FREE;
124 	ccb->ccb_xs = NULL;
125 	ccb->ccb_data = NULL;
126 
127 	mtx_enter(&sc->sc_free_ccb_mtx);
128 	SLIST_INSERT_HEAD(&sc->sc_free_ccb, ccb, ccb_link);
129 	mtx_leave(&sc->sc_free_ccb_mtx);
130 }
131 
132 int
133 ciss_attach(struct ciss_softc *sc)
134 {
135 	struct scsibus_attach_args saa;
136 	struct scsibus_softc *scsibus;
137 	struct ciss_ccb *ccb;
138 	struct ciss_cmd *cmd;
139 	struct ciss_inquiry *inq;
140 	bus_dma_segment_t seg[1];
141 	int error, i, total, rseg, maxfer;
142 	ciss_lock_t lock;
143 	paddr_t pa;
144 
145 	bus_space_read_region_4(sc->iot, sc->cfg_ioh, sc->cfgoff,
146 	    (u_int32_t *)&sc->cfg, sizeof(sc->cfg) / 4);
147 
148 	if (sc->cfg.signature != CISS_SIGNATURE) {
149 		printf(": bad sign 0x%08x\n", sc->cfg.signature);
150 		return -1;
151 	}
152 
153 	if (!(sc->cfg.methods & CISS_METH_SIMPL)) {
154 		printf(": not simple 0x%08x\n", sc->cfg.methods);
155 		return -1;
156 	}
157 
158 	sc->cfg.rmethod = CISS_METH_SIMPL;
159 	sc->cfg.paddr_lim = 0;			/* 32bit addrs */
160 	sc->cfg.int_delay = 0;			/* disable coalescing */
161 	sc->cfg.int_count = 0;
162 	strlcpy(sc->cfg.hostname, "HUMPPA", sizeof(sc->cfg.hostname));
163 	sc->cfg.driverf |= CISS_DRV_PRF;	/* enable prefetch */
164 	if (!sc->cfg.maxsg)
165 		sc->cfg.maxsg = MAXPHYS / PAGE_SIZE;
166 
167 	bus_space_write_region_4(sc->iot, sc->cfg_ioh, sc->cfgoff,
168 	    (u_int32_t *)&sc->cfg, sizeof(sc->cfg) / 4);
169 	bus_space_barrier(sc->iot, sc->cfg_ioh, sc->cfgoff, sizeof(sc->cfg),
170 	    BUS_SPACE_BARRIER_READ|BUS_SPACE_BARRIER_WRITE);
171 
172 	bus_space_write_4(sc->iot, sc->ioh, CISS_IDB, CISS_IDB_CFG);
173 	bus_space_barrier(sc->iot, sc->ioh, CISS_IDB, 4,
174 	    BUS_SPACE_BARRIER_WRITE);
175 	for (i = 1000; i--; DELAY(1000)) {
176 		/* XXX maybe IDB is really 64bit? - hp dl380 needs this */
177 		(void)bus_space_read_4(sc->iot, sc->ioh, CISS_IDB + 4);
178 		if (!(bus_space_read_4(sc->iot, sc->ioh, CISS_IDB) & CISS_IDB_CFG))
179 			break;
180 		bus_space_barrier(sc->iot, sc->ioh, CISS_IDB, 4,
181 		    BUS_SPACE_BARRIER_READ);
182 	}
183 
184 	if (bus_space_read_4(sc->iot, sc->ioh, CISS_IDB) & CISS_IDB_CFG) {
185 		printf(": cannot set config\n");
186 		return -1;
187 	}
188 
189 	bus_space_read_region_4(sc->iot, sc->cfg_ioh, sc->cfgoff,
190 	    (u_int32_t *)&sc->cfg, sizeof(sc->cfg) / 4);
191 
192 	if (!(sc->cfg.amethod & CISS_METH_SIMPL)) {
193 		printf(": cannot simplify 0x%08x\n", sc->cfg.amethod);
194 		return -1;
195 	}
196 
197 	/* i'm ready for you and i hope you're ready for me */
198 	for (i = 30000; i--; DELAY(1000)) {
199 		if (bus_space_read_4(sc->iot, sc->cfg_ioh, sc->cfgoff +
200 		    offsetof(struct ciss_config, amethod)) & CISS_METH_READY)
201 			break;
202 		bus_space_barrier(sc->iot, sc->cfg_ioh, sc->cfgoff +
203 		    offsetof(struct ciss_config, amethod), 4,
204 		    BUS_SPACE_BARRIER_READ);
205 	}
206 
207 	if (!(bus_space_read_4(sc->iot, sc->cfg_ioh, sc->cfgoff +
208 	    offsetof(struct ciss_config, amethod)) & CISS_METH_READY)) {
209 		printf(": she never came ready for me 0x%08x\n",
210 		    sc->cfg.amethod);
211 		return -1;
212 	}
213 
214 	sc->maxcmd = sc->cfg.maxcmd;
215 	sc->maxsg = sc->cfg.maxsg;
216 	if (sc->maxsg > MAXPHYS / PAGE_SIZE)
217 		sc->maxsg = MAXPHYS / PAGE_SIZE;
218 	i = sizeof(struct ciss_ccb) +
219 	    sizeof(ccb->ccb_cmd.sgl[0]) * (sc->maxsg - 1);
220 	for (sc->ccblen = 0x10; sc->ccblen < i; sc->ccblen <<= 1);
221 
222 	total = sc->ccblen * sc->maxcmd;
223 	if ((error = bus_dmamem_alloc(sc->dmat, total, PAGE_SIZE, 0,
224 	    sc->cmdseg, 1, &rseg, BUS_DMA_NOWAIT | BUS_DMA_ZERO))) {
225 		printf(": cannot allocate CCBs (%d)\n", error);
226 		return -1;
227 	}
228 
229 	if ((error = bus_dmamem_map(sc->dmat, sc->cmdseg, rseg, total,
230 	    (caddr_t *)&sc->ccbs, BUS_DMA_NOWAIT))) {
231 		printf(": cannot map CCBs (%d)\n", error);
232 		return -1;
233 	}
234 
235 	if ((error = bus_dmamap_create(sc->dmat, total, 1,
236 	    total, 0, BUS_DMA_NOWAIT | BUS_DMA_ALLOCNOW, &sc->cmdmap))) {
237 		printf(": cannot create CCBs dmamap (%d)\n", error);
238 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
239 		return -1;
240 	}
241 
242 	if ((error = bus_dmamap_load(sc->dmat, sc->cmdmap, sc->ccbs, total,
243 	    NULL, BUS_DMA_NOWAIT))) {
244 		printf(": cannot load CCBs dmamap (%d)\n", error);
245 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
246 		bus_dmamap_destroy(sc->dmat, sc->cmdmap);
247 		return -1;
248 	}
249 
250 	SLIST_INIT(&sc->sc_free_ccb);
251 	mtx_init(&sc->sc_free_ccb_mtx, IPL_BIO);
252 
253 	maxfer = sc->maxsg * PAGE_SIZE;
254 	for (i = 0; total; i++, total -= sc->ccblen) {
255 		ccb = sc->ccbs + i * sc->ccblen;
256 		cmd = &ccb->ccb_cmd;
257 		pa = sc->cmdseg[0].ds_addr + i * sc->ccblen;
258 
259 		ccb->ccb_sc = sc;
260 		ccb->ccb_cmdpa = pa + offsetof(struct ciss_ccb, ccb_cmd);
261 		ccb->ccb_state = CISS_CCB_FREE;
262 
263 		cmd->id = htole32(i << 2);
264 		cmd->id_hi = htole32(0);
265 		cmd->sgin = sc->maxsg;
266 		cmd->sglen = htole16((u_int16_t)cmd->sgin);
267 		cmd->err_len = htole32(sizeof(ccb->ccb_err));
268 		pa += offsetof(struct ciss_ccb, ccb_err);
269 		cmd->err_pa = htole64((u_int64_t)pa);
270 
271 		if ((error = bus_dmamap_create(sc->dmat, maxfer, sc->maxsg,
272 		    maxfer, 0, BUS_DMA_NOWAIT | BUS_DMA_ALLOCNOW,
273 		    &ccb->ccb_dmamap)))
274 			break;
275 
276 		SLIST_INSERT_HEAD(&sc->sc_free_ccb, ccb, ccb_link);
277 	}
278 
279 	scsi_iopool_init(&sc->sc_iopool, sc, ciss_get_ccb, ciss_put_ccb);
280 
281 	if (i < sc->maxcmd) {
282 		printf(": cannot create ccb#%d dmamap (%d)\n", i, error);
283 		if (i == 0) {
284 			/* TODO leaking cmd's dmamaps and shitz */
285 			bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
286 			bus_dmamap_destroy(sc->dmat, sc->cmdmap);
287 			return -1;
288 		}
289 	}
290 
291 	if ((error = bus_dmamem_alloc(sc->dmat, PAGE_SIZE, PAGE_SIZE, 0,
292 	    seg, 1, &rseg, BUS_DMA_NOWAIT | BUS_DMA_ZERO))) {
293 		printf(": cannot allocate scratch buffer (%d)\n", error);
294 		return -1;
295 	}
296 
297 	if ((error = bus_dmamem_map(sc->dmat, seg, rseg, PAGE_SIZE,
298 	    (caddr_t *)&sc->scratch, BUS_DMA_NOWAIT))) {
299 		printf(": cannot map scratch buffer (%d)\n", error);
300 		return -1;
301 	}
302 
303 	lock = CISS_LOCK_SCRATCH(sc);
304 	inq = sc->scratch;
305 	if (ciss_inq(sc, inq)) {
306 		printf(": adapter inquiry failed\n");
307 		CISS_UNLOCK_SCRATCH(sc, lock);
308 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
309 		bus_dmamap_destroy(sc->dmat, sc->cmdmap);
310 		return -1;
311 	}
312 
313 	if (!(inq->flags & CISS_INQ_BIGMAP)) {
314 		printf(": big map is not supported, flags=%b\n",
315 		    inq->flags, CISS_INQ_BITS);
316 		CISS_UNLOCK_SCRATCH(sc, lock);
317 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
318 		bus_dmamap_destroy(sc->dmat, sc->cmdmap);
319 		return -1;
320 	}
321 
322 	sc->maxunits = inq->numld;
323 	sc->nbus = inq->nscsi_bus;
324 	sc->ndrives = inq->buswidth? inq->buswidth : 256;
325 	printf(": %d LD%s, HW rev %d, FW %4.4s/%4.4s",
326 	    inq->numld, inq->numld == 1? "" : "s",
327 	    inq->hw_rev, inq->fw_running, inq->fw_stored);
328 	if (sc->cfg.methods & CISS_METH_FIFO64)
329 		printf(", 64bit fifo");
330 	else if (sc->cfg.methods & CISS_METH_FIFO64_RRO)
331 		printf(", 64bit fifo rro");
332 	printf("\n");
333 
334 	CISS_UNLOCK_SCRATCH(sc, lock);
335 
336 	timeout_set(&sc->sc_hb, ciss_heartbeat, sc);
337 	timeout_add_sec(&sc->sc_hb, 3);
338 
339 	/* map LDs */
340 	if (ciss_ldmap(sc)) {
341 		printf("%s: adapter LD map failed\n", sc->sc_dev.dv_xname);
342 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
343 		bus_dmamap_destroy(sc->dmat, sc->cmdmap);
344 		return -1;
345 	}
346 
347 	if (!(sc->sc_lds = mallocarray(sc->maxunits, sizeof(*sc->sc_lds),
348 	    M_DEVBUF, M_NOWAIT | M_ZERO))) {
349 		bus_dmamem_free(sc->dmat, sc->cmdseg, 1);
350 		bus_dmamap_destroy(sc->dmat, sc->cmdmap);
351 		return -1;
352 	}
353 
354 	sc->sc_flush = CISS_FLUSH_ENABLE;
355 
356 	sc->sc_link.adapter_softc = sc;
357 	sc->sc_link.openings = sc->maxcmd;
358 	sc->sc_link.adapter = &ciss_switch;
359 	sc->sc_link.luns = 1;
360 	sc->sc_link.adapter_target = sc->maxunits;
361 	sc->sc_link.adapter_buswidth = sc->maxunits;
362 	sc->sc_link.pool = &sc->sc_iopool;
363 	bzero(&saa, sizeof(saa));
364 	saa.saa_sc_link = &sc->sc_link;
365 	scsibus = (struct scsibus_softc *)config_found_sm(&sc->sc_dev,
366 	    &saa, scsiprint, NULL);
367 
368 #if NBIO > 0
369 	/* XXX for now we can only deal w/ one volume. */
370 	if (!scsibus || sc->maxunits > 1)
371 		return 0;
372 
373 	/* now map all the physdevs into their lds */
374 	/* XXX currently we assign all pf 'em into ld#0 */
375 	for (i = 0; i < sc->maxunits; i++)
376 		if (!(sc->sc_lds[i] = ciss_pdscan(sc, i)))
377 			return 0;
378 
379 	if (bio_register(&sc->sc_dev, ciss_ioctl) != 0)
380 		printf("%s: controller registration failed",
381 		    sc->sc_dev.dv_xname);
382 
383 	sc->sc_flags |= CISS_BIO;
384 #ifndef SMALL_KERNEL
385 	sc->sensors = mallocarray(sc->maxunits, sizeof(struct ksensor),
386 	    M_DEVBUF, M_NOWAIT | M_ZERO);
387 	if (sc->sensors) {
388 		struct device *dev;
389 
390 		strlcpy(sc->sensordev.xname, sc->sc_dev.dv_xname,
391 		    sizeof(sc->sensordev.xname));
392 		for (i = 0; i < sc->maxunits; i++) {
393 			sc->sensors[i].type = SENSOR_DRIVE;
394 			sc->sensors[i].status = SENSOR_S_UNKNOWN;
395 			dev = scsi_get_link(scsibus, i, 0)->device_softc;
396 			strlcpy(sc->sensors[i].desc, dev->dv_xname,
397 			    sizeof(sc->sensors[i].desc));
398 			strlcpy(sc->sc_lds[i]->xname, dev->dv_xname,
399 			    sizeof(sc->sc_lds[i]->xname));
400 			sensor_attach(&sc->sensordev, &sc->sensors[i]);
401 		}
402 		if (sensor_task_register(sc, ciss_sensors, 10) == NULL)
403 			free(sc->sensors, M_DEVBUF,
404 			    sc->maxunits * sizeof(struct ksensor));
405 		else
406 			sensordev_install(&sc->sensordev);
407 	}
408 #endif /* SMALL_KERNEL */
409 #endif /* BIO > 0 */
410 
411 	return 0;
412 }
413 
414 void
415 ciss_shutdown(void *v)
416 {
417 	struct ciss_softc *sc = v;
418 
419 	sc->sc_flush = CISS_FLUSH_DISABLE;
420 	timeout_del(&sc->sc_hb);
421 	ciss_sync(sc);
422 }
423 
424 /*
425  * submit a command and optionally wait for completition.
426  * wait arg abuses SCSI_POLL|SCSI_NOSLEEP flags to request
427  * to wait (SCSI_POLL) and to allow tsleep() (!SCSI_NOSLEEP)
428  * instead of busy loop waiting
429  */
430 int
431 ciss_cmd(struct ciss_ccb *ccb, int flags, int wait)
432 {
433 	struct timespec end, now, ts;
434 	struct ciss_softc *sc = ccb->ccb_sc;
435 	struct ciss_cmd *cmd = &ccb->ccb_cmd;
436 	struct ciss_ccb *ccb1;
437 	bus_dmamap_t dmap = ccb->ccb_dmamap;
438 	u_int64_t addr;
439 	uint64_t nsecs;
440 	u_int32_t id;
441 	int i, error = 0, ret;
442 
443 	splassert(IPL_BIO);
444 
445 	if (ccb->ccb_state != CISS_CCB_READY) {
446 		printf("%s: ccb %d not ready state=%b\n", sc->sc_dev.dv_xname,
447 		    cmd->id, ccb->ccb_state, CISS_CCB_BITS);
448 		return (EINVAL);
449 	}
450 
451 	if (ccb->ccb_data) {
452 		bus_dma_segment_t *sgd;
453 
454 		if ((error = bus_dmamap_load(sc->dmat, dmap, ccb->ccb_data,
455 		    ccb->ccb_len, NULL, flags))) {
456 			if (error == EFBIG)
457 				printf("more than %d dma segs\n", sc->maxsg);
458 			else
459 				printf("error %d loading dma map\n", error);
460 			if (ccb->ccb_xs) {
461 				ccb->ccb_xs->error = XS_DRIVER_STUFFUP;
462 				scsi_done(ccb->ccb_xs);
463 				ccb->ccb_xs = NULL;
464 			}
465 			return (error);
466 		}
467 		cmd->sgin = dmap->dm_nsegs;
468 
469 		sgd = dmap->dm_segs;
470 		CISS_DPRINTF(CISS_D_DMA, ("data=%p/%u<0x%lx/%u",
471 		    ccb->ccb_data, ccb->ccb_len, sgd->ds_addr, sgd->ds_len));
472 
473 		for (i = 0; i < dmap->dm_nsegs; sgd++, i++) {
474 			cmd->sgl[i].addr_lo = htole32(sgd->ds_addr);
475 			cmd->sgl[i].addr_hi =
476 			    htole32((u_int64_t)sgd->ds_addr >> 32);
477 			cmd->sgl[i].len = htole32(sgd->ds_len);
478 			cmd->sgl[i].flags = htole32(0);
479 			if (i)
480 				CISS_DPRINTF(CISS_D_DMA,
481 				    (",0x%lx/%u", sgd->ds_addr, sgd->ds_len));
482 		}
483 
484 		CISS_DPRINTF(CISS_D_DMA, ("> "));
485 
486 		bus_dmamap_sync(sc->dmat, dmap, 0, dmap->dm_mapsize,
487 		    BUS_DMASYNC_PREREAD|BUS_DMASYNC_PREWRITE);
488 	} else
489 		cmd->sgin = 0;
490 	cmd->sglen = htole16((u_int16_t)cmd->sgin);
491 	bzero(&ccb->ccb_err, sizeof(ccb->ccb_err));
492 
493 	bus_dmamap_sync(sc->dmat, sc->cmdmap, 0, sc->cmdmap->dm_mapsize,
494 	    BUS_DMASYNC_PREWRITE);
495 
496 	ccb->ccb_state = CISS_CCB_ONQ;
497 	CISS_DPRINTF(CISS_D_CMD, ("submit=0x%x ", cmd->id));
498 	if (sc->cfg.methods & (CISS_METH_FIFO64|CISS_METH_FIFO64_RRO)) {
499 		/*
500 		 * Write the upper 32bits immediately before the lower
501 		 * 32bits and set bit 63 to indicate 64bit FIFO mode.
502 		 */
503 		addr = (u_int64_t)ccb->ccb_cmdpa;
504 		bus_space_write_4(sc->iot, sc->ioh, CISS_INQ64_HI,
505 		    (addr >> 32) | 0x80000000);
506 		bus_space_write_4(sc->iot, sc->ioh, CISS_INQ64_LO,
507 		    addr & 0x00000000ffffffffULL);
508 	} else
509 		bus_space_write_4(sc->iot, sc->ioh, CISS_INQ, ccb->ccb_cmdpa);
510 
511 	/* If we're not waiting for completion we're done. */
512 	if (!(wait & SCSI_POLL))
513 		return (error);
514 
515 	CISS_DPRINTF(CISS_D_CMD, ("waiting "));
516 
517 	i = ccb->ccb_xs? ccb->ccb_xs->timeout : 60000;
518 
519 	if (!(wait & SCSI_NOSLEEP)) {
520 		NSEC_TO_TIMESPEC(MSEC_TO_NSEC(i), &ts);
521 		nanouptime(&now);
522 		timespecadd(&now, &ts, &end);
523 
524 		for (;;) {
525 			ccb->ccb_state = CISS_CCB_POLL;
526 			nsecs = TIMESPEC_TO_NSEC(&ts);
527 			CISS_DPRINTF(CISS_D_CMD, ("tsleep_nsec(%llu) ", nsecs));
528 			ret = tsleep_nsec(ccb, PRIBIO + 1, "ciss_cmd", nsecs);
529 			if (ret == EWOULDBLOCK)
530 				break;
531 			if (ccb->ccb_state != CISS_CCB_ONQ) {
532 				nanouptime(&now);
533 				if (timespeccmp(&end, &now, <=))
534 					break;
535 				timespecsub(&end, &now, &ts);
536 				CISS_DPRINTF(CISS_D_CMD, ("T"));
537 				continue;
538 			}
539 			ccb1 = ccb;
540 
541 			error = ciss_done(ccb1);
542 			if (ccb1 == ccb)
543 				return (error);
544 		}
545 	} else {
546 		for (i *= 100; i--;) {
547 			DELAY(10);
548 
549 			if (!(bus_space_read_4(sc->iot, sc->ioh,
550 			    CISS_ISR) & sc->iem)) {
551 				CISS_DPRINTF(CISS_D_CMD, ("N"));
552 				continue;
553 			}
554 
555 			if (sc->cfg.methods & CISS_METH_FIFO64) {
556 				if (bus_space_read_4(sc->iot, sc->ioh,
557 				    CISS_OUTQ64_HI) == 0xffffffff) {
558 					CISS_DPRINTF(CISS_D_CMD, ("Q"));
559 					continue;
560 				}
561 				id = bus_space_read_4(sc->iot, sc->ioh,
562 				    CISS_OUTQ64_LO);
563 			} else if (sc->cfg.methods &
564 			    CISS_METH_FIFO64_RRO) {
565 				id = bus_space_read_4(sc->iot, sc->ioh,
566 				    CISS_OUTQ64_LO);
567 				if (id == 0xffffffff) {
568 					CISS_DPRINTF(CISS_D_CMD, ("Q"));
569 					continue;
570 				}
571 				(void)bus_space_read_4(sc->iot,
572 				    sc->ioh, CISS_OUTQ64_HI);
573 			} else {
574 				id = bus_space_read_4(sc->iot, sc->ioh,
575 				    CISS_OUTQ);
576 				if (id == 0xffffffff) {
577 					CISS_DPRINTF(CISS_D_CMD, ("Q"));
578 					continue;
579 				}
580 			}
581 
582 			CISS_DPRINTF(CISS_D_CMD, ("got=0x%x ", id));
583 			ccb1 = sc->ccbs + (id >> 2) * sc->ccblen;
584 			ccb1->ccb_cmd.id = htole32(id);
585 			ccb1->ccb_cmd.id_hi = htole32(0);
586 
587 			error = ciss_done(ccb1);
588 			if (ccb1 == ccb)
589 				return (error);
590 		}
591 	}
592 
593 	/* if never got a chance to be done above... */
594 	ccb->ccb_err.cmd_stat = CISS_ERR_TMO;
595 	error = ciss_done(ccb);
596 
597 	CISS_DPRINTF(CISS_D_CMD, ("done %d:%d",
598 	    ccb->ccb_err.cmd_stat, ccb->ccb_err.scsi_stat));
599 
600 	return (error);
601 }
602 
603 int
604 ciss_done(struct ciss_ccb *ccb)
605 {
606 	struct ciss_softc *sc = ccb->ccb_sc;
607 	struct scsi_xfer *xs = ccb->ccb_xs;
608 	struct ciss_cmd *cmd = &ccb->ccb_cmd;
609 	ciss_lock_t lock;
610 	int error = 0;
611 
612 	CISS_DPRINTF(CISS_D_CMD, ("ciss_done(%p) ", ccb));
613 
614 	if (ccb->ccb_state != CISS_CCB_ONQ) {
615 		printf("%s: unqueued ccb %p ready, state=%b\n",
616 		    sc->sc_dev.dv_xname, ccb, ccb->ccb_state, CISS_CCB_BITS);
617 		return 1;
618 	}
619 	lock = CISS_LOCK(sc);
620 	ccb->ccb_state = CISS_CCB_READY;
621 
622 	if (ccb->ccb_cmd.id & CISS_CMD_ERR)
623 		error = ciss_error(ccb);
624 
625 	if (ccb->ccb_data) {
626 		bus_dmamap_sync(sc->dmat, ccb->ccb_dmamap, 0,
627 		    ccb->ccb_dmamap->dm_mapsize, (cmd->flags & CISS_CDB_IN) ?
628 		    BUS_DMASYNC_POSTREAD : BUS_DMASYNC_POSTWRITE);
629 		bus_dmamap_unload(sc->dmat, ccb->ccb_dmamap);
630 	}
631 
632 	if (xs) {
633 		xs->resid = 0;
634 		scsi_done(xs);
635 	}
636 
637 	CISS_UNLOCK(sc, lock);
638 
639 	return error;
640 }
641 
642 int
643 ciss_error(struct ciss_ccb *ccb)
644 {
645 	struct ciss_softc *sc = ccb->ccb_sc;
646 	struct ciss_error *err = &ccb->ccb_err;
647 	struct scsi_xfer *xs = ccb->ccb_xs;
648 	int rv;
649 
650 	switch ((rv = letoh16(err->cmd_stat))) {
651 	case CISS_ERR_OK:
652 		rv = 0;
653 		break;
654 
655 	case CISS_ERR_INVCMD:
656 		printf("%s: invalid cmd 0x%x: 0x%x is not valid @ 0x%x[%d]\n",
657 		    sc->sc_dev.dv_xname, ccb->ccb_cmd.id,
658 		    err->err_info, err->err_type[3], err->err_type[2]);
659 		if (xs) {
660 			bzero(&xs->sense, sizeof(xs->sense));
661 			xs->sense.error_code = SSD_ERRCODE_VALID |
662 			    SSD_ERRCODE_CURRENT;
663 			xs->sense.flags = SKEY_ILLEGAL_REQUEST;
664 			xs->sense.add_sense_code = 0x24; /* ill field */
665 			xs->error = XS_SENSE;
666 		}
667 		rv = EIO;
668 		break;
669 
670 	case CISS_ERR_TMO:
671 		xs->error = XS_TIMEOUT;
672 		rv = ETIMEDOUT;
673 		break;
674 
675 	default:
676 		if (xs) {
677 			switch (err->scsi_stat) {
678 			case SCSI_CHECK:
679 				xs->error = XS_SENSE;
680 				bcopy(&err->sense[0], &xs->sense,
681 				    sizeof(xs->sense));
682 				rv = EIO;
683 				break;
684 
685 			case SCSI_BUSY:
686 				xs->error = XS_BUSY;
687 				rv = EBUSY;
688 				break;
689 
690 			default:
691 				CISS_DPRINTF(CISS_D_ERR, ("%s: "
692 				    "cmd_stat %x scsi_stat 0x%x\n",
693 				    sc->sc_dev.dv_xname, rv, err->scsi_stat));
694 				xs->error = XS_DRIVER_STUFFUP;
695 				rv = EIO;
696 				break;
697 			}
698 			xs->resid = letoh32(err->resid);
699 		} else
700 			rv = EIO;
701 	}
702 	ccb->ccb_cmd.id &= htole32(~3);
703 
704 	return rv;
705 }
706 
707 int
708 ciss_inq(struct ciss_softc *sc, struct ciss_inquiry *inq)
709 {
710 	struct ciss_ccb *ccb;
711 	struct ciss_cmd *cmd;
712 	int rv;
713 	int s;
714 
715 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL|SCSI_NOSLEEP);
716 	if (ccb == NULL)
717 		return ENOMEM;
718 
719 	ccb->ccb_len = sizeof(*inq);
720 	ccb->ccb_data = inq;
721 	cmd = &ccb->ccb_cmd;
722 	cmd->tgt = htole32(CISS_CMD_MODE_PERIPH);
723 	cmd->tgt2 = 0;
724 	cmd->cdblen = 10;
725 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_IN;
726 	cmd->tmo = htole16(0);
727 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
728 	cmd->cdb[0] = CISS_CMD_CTRL_GET;
729 	cmd->cdb[6] = CISS_CMS_CTRL_CTRL;
730 	cmd->cdb[7] = sizeof(*inq) >> 8;	/* biiiig endian */
731 	cmd->cdb[8] = sizeof(*inq) & 0xff;
732 
733 	s = splbio();
734 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL|SCSI_NOSLEEP);
735 	splx(s);
736 
737 	scsi_io_put(&sc->sc_iopool, ccb);
738 
739 	return (rv);
740 }
741 
742 int
743 ciss_ldmap(struct ciss_softc *sc)
744 {
745 	struct ciss_ccb *ccb;
746 	struct ciss_cmd *cmd;
747 	struct ciss_ldmap *lmap;
748 	ciss_lock_t lock;
749 	int total, rv;
750 
751 	lock = CISS_LOCK_SCRATCH(sc);
752 	lmap = sc->scratch;
753 	lmap->size = htobe32(sc->maxunits * sizeof(lmap->map));
754 	total = sizeof(*lmap) + (sc->maxunits - 1) * sizeof(lmap->map);
755 
756 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL|SCSI_NOSLEEP);
757 	if (ccb == NULL) {
758 		CISS_UNLOCK_SCRATCH(sc, lock);
759 		return ENOMEM;
760 	}
761 
762 	ccb->ccb_len = total;
763 	ccb->ccb_data = lmap;
764 	cmd = &ccb->ccb_cmd;
765 	cmd->tgt = CISS_CMD_MODE_PERIPH;
766 	cmd->tgt2 = 0;
767 	cmd->cdblen = 12;
768 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_IN;
769 	cmd->tmo = htole16(30);
770 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
771 	cmd->cdb[0] = CISS_CMD_LDMAP;
772 	cmd->cdb[8] = total >> 8;	/* biiiig endian */
773 	cmd->cdb[9] = total & 0xff;
774 
775 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL|SCSI_NOSLEEP);
776 	scsi_io_put(&sc->sc_iopool, ccb);
777 	CISS_UNLOCK_SCRATCH(sc, lock);
778 
779 	if (rv)
780 		return rv;
781 
782 	CISS_DPRINTF(CISS_D_MISC, ("lmap %x:%x\n",
783 	    lmap->map[0].tgt, lmap->map[0].tgt2));
784 
785 	return 0;
786 }
787 
788 int
789 ciss_sync(struct ciss_softc *sc)
790 {
791 	struct ciss_ccb *ccb;
792 	struct ciss_cmd *cmd;
793 	struct ciss_flush *flush;
794 	ciss_lock_t lock;
795 	int rv;
796 
797 	lock = CISS_LOCK_SCRATCH(sc);
798 	flush = sc->scratch;
799 	bzero(flush, sizeof(*flush));
800 	flush->flush = sc->sc_flush;
801 
802 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL|SCSI_NOSLEEP);
803 	if (ccb == NULL) {
804 		CISS_UNLOCK_SCRATCH(sc, lock);
805 		return ENOMEM;
806 	}
807 
808 	ccb->ccb_len = sizeof(*flush);
809 	ccb->ccb_data = flush;
810 	cmd = &ccb->ccb_cmd;
811 	cmd->tgt = CISS_CMD_MODE_PERIPH;
812 	cmd->tgt2 = 0;
813 	cmd->cdblen = 10;
814 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_OUT;
815 	cmd->tmo = htole16(0);
816 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
817 	cmd->cdb[0] = CISS_CMD_CTRL_SET;
818 	cmd->cdb[6] = CISS_CMS_CTRL_FLUSH;
819 	cmd->cdb[7] = sizeof(*flush) >> 8;	/* biiiig endian */
820 	cmd->cdb[8] = sizeof(*flush) & 0xff;
821 
822 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL|SCSI_NOSLEEP);
823 	scsi_io_put(&sc->sc_iopool, ccb);
824 	CISS_UNLOCK_SCRATCH(sc, lock);
825 
826 	return rv;
827 }
828 
829 void
830 ciss_scsi_cmd(struct scsi_xfer *xs)
831 {
832 	struct scsi_link *link = xs->sc_link;
833 	u_int8_t target = link->target;
834 	struct ciss_ccb *ccb;
835 	struct ciss_cmd *cmd;
836 	ciss_lock_t lock;
837 
838 	CISS_DPRINTF(CISS_D_CMD, ("ciss_scsi_cmd "));
839 
840 	if (xs->cmdlen > CISS_MAX_CDB) {
841 		CISS_DPRINTF(CISS_D_CMD, ("CDB too big %p ", xs));
842 		bzero(&xs->sense, sizeof(xs->sense));
843 		xs->sense.error_code = SSD_ERRCODE_VALID | SSD_ERRCODE_CURRENT;
844 		xs->sense.flags = SKEY_ILLEGAL_REQUEST;
845 		xs->sense.add_sense_code = 0x20; /* illcmd, 0x24 illfield */
846 		xs->error = XS_SENSE;
847 		scsi_done(xs);
848 		return;
849 	}
850 
851 	xs->error = XS_NOERROR;
852 
853 	/* XXX emulate SYNCHRONIZE_CACHE ??? */
854 
855 	ccb = xs->io;
856 
857 	cmd = &ccb->ccb_cmd;
858 	ccb->ccb_len = xs->datalen;
859 	ccb->ccb_data = xs->data;
860 	ccb->ccb_xs = xs;
861 	cmd->tgt = CISS_CMD_MODE_LD | target;
862 	cmd->tgt2 = 0;
863 	cmd->cdblen = xs->cmdlen;
864 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL;
865 	if (xs->flags & SCSI_DATA_IN)
866 		cmd->flags |= CISS_CDB_IN;
867 	else if (xs->flags & SCSI_DATA_OUT)
868 		cmd->flags |= CISS_CDB_OUT;
869 	cmd->tmo = htole16(xs->timeout < 1000? 1 : xs->timeout / 1000);
870 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
871 	bcopy(xs->cmd, &cmd->cdb[0], CISS_MAX_CDB);
872 
873 	lock = CISS_LOCK(sc);
874 	ciss_cmd(ccb, BUS_DMA_WAITOK, xs->flags & (SCSI_POLL|SCSI_NOSLEEP));
875 	CISS_UNLOCK(sc, lock);
876 }
877 
878 int
879 ciss_intr(void *v)
880 {
881 	struct ciss_softc *sc = v;
882 	struct ciss_ccb *ccb;
883 	bus_size_t reg;
884 	u_int32_t id;
885 	int hit = 0;
886 
887 	CISS_DPRINTF(CISS_D_INTR, ("intr "));
888 
889 	if (!(bus_space_read_4(sc->iot, sc->ioh, CISS_ISR) & sc->iem))
890 		return 0;
891 
892 	if (sc->cfg.methods & CISS_METH_FIFO64)
893 		reg = CISS_OUTQ64_HI;
894 	else if (sc->cfg.methods & CISS_METH_FIFO64_RRO)
895 		reg = CISS_OUTQ64_LO;
896 	else
897 		reg = CISS_OUTQ;
898 	while ((id = bus_space_read_4(sc->iot, sc->ioh, reg)) != 0xffffffff) {
899 		if (reg == CISS_OUTQ64_HI)
900 			id = bus_space_read_4(sc->iot, sc->ioh,
901 			    CISS_OUTQ64_LO);
902 		else if (reg == CISS_OUTQ64_LO)
903 			(void)bus_space_read_4(sc->iot, sc->ioh,
904 			    CISS_OUTQ64_HI);
905 		ccb = sc->ccbs + (id >> 2) * sc->ccblen;
906 		ccb->ccb_cmd.id = htole32(id);
907 		ccb->ccb_cmd.id_hi = htole32(0); /* ignore the upper 32bits */
908 		if (ccb->ccb_state == CISS_CCB_POLL) {
909 			ccb->ccb_state = CISS_CCB_ONQ;
910 			wakeup(ccb);
911 		} else
912 			ciss_done(ccb);
913 
914 		hit = 1;
915 	}
916 	CISS_DPRINTF(CISS_D_INTR, ("exit "));
917 	return hit;
918 }
919 
920 void
921 ciss_heartbeat(void *v)
922 {
923 	struct ciss_softc *sc = v;
924 	u_int32_t hb;
925 
926 	hb = bus_space_read_4(sc->iot, sc->cfg_ioh,
927 	    sc->cfgoff + offsetof(struct ciss_config, heartbeat));
928 	if (hb == sc->heartbeat) {
929 		sc->fibrillation++;
930 		CISS_DPRINTF(CISS_D_ERR, ("%s: fibrillation #%d (value=%d)\n",
931 		    sc->sc_dev.dv_xname, sc->fibrillation, hb));
932 		if (sc->fibrillation >= 11) {
933 			/* No heartbeat for 33 seconds */
934 			panic("%s: dead", sc->sc_dev.dv_xname);	/* XXX reset! */
935 		}
936 	} else {
937 		sc->heartbeat = hb;
938 		if (sc->fibrillation) {
939 			CISS_DPRINTF(CISS_D_ERR, ("%s: "
940 			    "fibrillation ended (value=%d)\n",
941 			    sc->sc_dev.dv_xname, hb));
942 		}
943 		sc->fibrillation = 0;
944 	}
945 
946 	timeout_add_sec(&sc->sc_hb, 3);
947 }
948 
949 int
950 ciss_scsi_ioctl(struct scsi_link *link, u_long cmd, caddr_t addr, int flag)
951 {
952 #if NBIO > 0
953 	return ciss_ioctl(link->adapter_softc, cmd, addr);
954 #else
955 	return ENOTTY;
956 #endif
957 }
958 
959 #if NBIO > 0
960 const int ciss_level[] = { 0, 4, 1, 5, 51, 7 };
961 const int ciss_stat[] = { BIOC_SVONLINE, BIOC_SVOFFLINE, BIOC_SVOFFLINE,
962     BIOC_SVDEGRADED, BIOC_SVREBUILD, BIOC_SVREBUILD, BIOC_SVDEGRADED,
963     BIOC_SVDEGRADED, BIOC_SVINVALID, BIOC_SVINVALID, BIOC_SVBUILDING,
964     BIOC_SVOFFLINE, BIOC_SVBUILDING };
965 
966 int
967 ciss_ioctl(struct device *dev, u_long cmd, caddr_t addr)
968 {
969 	struct ciss_softc *sc = (struct ciss_softc *)dev;
970 	struct bioc_inq *bi;
971 	struct bioc_vol *bv;
972 	struct bioc_disk *bd;
973 	struct bioc_blink *bb;
974 	/* struct bioc_alarm *ba; */
975 	/* struct bioc_setstate *bss; */
976 	struct ciss_ldid *ldid;
977 	struct ciss_ldstat *ldstat;
978 	struct ciss_pdid *pdid;
979 	struct ciss_blink *blink;
980 	struct ciss_ld *ldp;
981 	ciss_lock_t lock;
982 	u_int8_t drv;
983 	int ld, pd, error = 0;
984 	u_int blks;
985 
986 	if (!(sc->sc_flags & CISS_BIO))
987 		return ENOTTY;
988 
989 	lock = CISS_LOCK(sc);
990 	switch (cmd) {
991 	case BIOCINQ:
992 		bi = (struct bioc_inq *)addr;
993 		strlcpy(bi->bi_dev, sc->sc_dev.dv_xname, sizeof(bi->bi_dev));
994 		bi->bi_novol = sc->maxunits;
995 		bi->bi_nodisk = sc->ndrives;
996 		break;
997 
998 	case BIOCVOL:
999 		bv = (struct bioc_vol *)addr;
1000 		if (bv->bv_volid > sc->maxunits) {
1001 			error = EINVAL;
1002 			break;
1003 		}
1004 		ldp = sc->sc_lds[bv->bv_volid];
1005 		if (!ldp) {
1006 			error = EINVAL;
1007 			break;
1008 		}
1009 		ldid = sc->scratch;
1010 		if ((error = ciss_ldid(sc, bv->bv_volid, ldid)))
1011 			break;
1012 		/* params 30:88:ff:00:00:00:00:00:00:00:00:00:00:00:20:00 */
1013 		bv->bv_status = BIOC_SVINVALID;
1014 		blks = (u_int)letoh16(ldid->nblocks[1]) << 16 |
1015 		    letoh16(ldid->nblocks[0]);
1016 		bv->bv_size = blks * (uint64_t)letoh16(ldid->blksize);
1017 		bv->bv_level = ciss_level[ldid->type];
1018 		bv->bv_nodisk = ldp->ndrives;
1019 		strlcpy(bv->bv_dev, ldp->xname, sizeof(bv->bv_dev));
1020 		strlcpy(bv->bv_vendor, "CISS", sizeof(bv->bv_vendor));
1021 		ldstat = sc->scratch;
1022 		bzero(ldstat, sizeof(*ldstat));
1023 		if ((error = ciss_ldstat(sc, bv->bv_volid, ldstat)))
1024 			break;
1025 		bv->bv_percent = -1;
1026 		bv->bv_seconds = 0;
1027 		if (ldstat->stat < nitems(ciss_stat))
1028 			bv->bv_status = ciss_stat[ldstat->stat];
1029 		if (bv->bv_status == BIOC_SVREBUILD ||
1030 		    bv->bv_status == BIOC_SVBUILDING)
1031 			bv->bv_percent = (blks -
1032 			    (((u_int)ldstat->prog[3] << 24) |
1033 			    ((u_int)ldstat->prog[2] << 16) |
1034 			    ((u_int)ldstat->prog[1] << 8) |
1035 			    (u_int)ldstat->prog[0])) * 100ULL / blks;
1036 		break;
1037 
1038 	case BIOCDISK:
1039 		bd = (struct bioc_disk *)addr;
1040 		if (bd->bd_volid > sc->maxunits) {
1041 			error = EINVAL;
1042 			break;
1043 		}
1044 		ldp = sc->sc_lds[bd->bd_volid];
1045 		if (!ldp || (pd = bd->bd_diskid) > ldp->ndrives) {
1046 			error = EINVAL;
1047 			break;
1048 		}
1049 		ldstat = sc->scratch;
1050 		if ((error = ciss_ldstat(sc, bd->bd_volid, ldstat)))
1051 			break;
1052 		bd->bd_status = -1;
1053 		if (ldstat->stat == CISS_LD_REBLD &&
1054 		    ldstat->bigrebuild == ldp->tgts[pd])
1055 			bd->bd_status = BIOC_SDREBUILD;
1056 		if (ciss_bitset(ldp->tgts[pd] & (~CISS_BIGBIT),
1057 		    ldstat->bigfailed)) {
1058 			bd->bd_status = BIOC_SDFAILED;
1059 			bd->bd_size = 0;
1060 			bd->bd_channel = (ldp->tgts[pd] & (~CISS_BIGBIT)) /
1061 			    sc->ndrives;
1062 			bd->bd_target = ldp->tgts[pd] % sc->ndrives;
1063 			bd->bd_lun = 0;
1064 			bd->bd_vendor[0] = '\0';
1065 			bd->bd_serial[0] = '\0';
1066 			bd->bd_procdev[0] = '\0';
1067 		} else {
1068 			pdid = sc->scratch;
1069 			if ((error = ciss_pdid(sc, ldp->tgts[pd], pdid,
1070 			    SCSI_POLL)))
1071 				break;
1072 			if (bd->bd_status < 0) {
1073 				if (pdid->config & CISS_PD_SPARE)
1074 					bd->bd_status = BIOC_SDHOTSPARE;
1075 				else if (pdid->present & CISS_PD_PRESENT)
1076 					bd->bd_status = BIOC_SDONLINE;
1077 				else
1078 					bd->bd_status = BIOC_SDINVALID;
1079 			}
1080 			bd->bd_size = (u_int64_t)letoh32(pdid->nblocks) *
1081 			    letoh16(pdid->blksz);
1082 			bd->bd_channel = pdid->bus;
1083 			bd->bd_target = pdid->target;
1084 			bd->bd_lun = 0;
1085 			strlcpy(bd->bd_vendor, pdid->model,
1086 			    sizeof(bd->bd_vendor));
1087 			strlcpy(bd->bd_serial, pdid->serial,
1088 			    sizeof(bd->bd_serial));
1089 			bd->bd_procdev[0] = '\0';
1090 		}
1091 		break;
1092 
1093 	case BIOCBLINK:
1094 		bb = (struct bioc_blink *)addr;
1095 		blink = sc->scratch;
1096 		error = EINVAL;
1097 		/* XXX workaround completely dumb scsi addressing */
1098 		for (ld = 0; ld < sc->maxunits; ld++) {
1099 			ldp = sc->sc_lds[ld];
1100 			if (!ldp)
1101 				continue;
1102 			if (sc->ndrives == 256)
1103 				drv = bb->bb_target;
1104 			else
1105 				drv = CISS_BIGBIT +
1106 				    bb->bb_channel * sc->ndrives +
1107 				    bb->bb_target;
1108 			for (pd = 0; pd < ldp->ndrives; pd++)
1109 				if (ldp->tgts[pd] == drv)
1110 					error = ciss_blink(sc, ld, pd,
1111 					    bb->bb_status, blink);
1112 		}
1113 		break;
1114 
1115 	case BIOCALARM:
1116 	case BIOCSETSTATE:
1117 	default:
1118 		CISS_DPRINTF(CISS_D_IOCTL, ("%s: invalid ioctl\n",
1119 		    sc->sc_dev.dv_xname));
1120 		error = ENOTTY;
1121 	}
1122 	CISS_UNLOCK(sc, lock);
1123 
1124 	return error;
1125 }
1126 
1127 #ifndef SMALL_KERNEL
1128 void
1129 ciss_sensors(void *v)
1130 {
1131 	struct ciss_softc *sc = v;
1132 	struct ciss_ldstat *ldstat;
1133 	int i, error;
1134 
1135 	for (i = 0; i < sc->maxunits; i++) {
1136 		ldstat = sc->scratch;
1137 		if ((error = ciss_ldstat(sc, i, ldstat))) {
1138 			sc->sensors[i].value = 0;
1139 			sc->sensors[i].status = SENSOR_S_UNKNOWN;
1140 			continue;
1141 		}
1142 
1143 		switch (ldstat->stat) {
1144 		case CISS_LD_OK:
1145 			sc->sensors[i].value = SENSOR_DRIVE_ONLINE;
1146 			sc->sensors[i].status = SENSOR_S_OK;
1147 			break;
1148 
1149 		case CISS_LD_DEGRAD:
1150 			sc->sensors[i].value = SENSOR_DRIVE_PFAIL;
1151 			sc->sensors[i].status = SENSOR_S_WARN;
1152 			break;
1153 
1154 		case CISS_LD_EXPND:
1155 		case CISS_LD_QEXPND:
1156 		case CISS_LD_RBLDRD:
1157 		case CISS_LD_REBLD:
1158 			sc->sensors[i].value = SENSOR_DRIVE_REBUILD;
1159 			sc->sensors[i].status = SENSOR_S_WARN;
1160 			break;
1161 
1162 		case CISS_LD_NORDY:
1163 		case CISS_LD_PDINV:
1164 		case CISS_LD_PDUNC:
1165 		case CISS_LD_FAILED:
1166 		case CISS_LD_UNCONF:
1167 			sc->sensors[i].value = SENSOR_DRIVE_FAIL;
1168 			sc->sensors[i].status = SENSOR_S_CRIT;
1169 			break;
1170 
1171 		default:
1172 			sc->sensors[i].value = 0;
1173 			sc->sensors[i].status = SENSOR_S_UNKNOWN;
1174 		}
1175 	}
1176 }
1177 #endif /* SMALL_KERNEL */
1178 
1179 int
1180 ciss_ldid(struct ciss_softc *sc, int target, struct ciss_ldid *id)
1181 {
1182 	struct ciss_ccb *ccb;
1183 	struct ciss_cmd *cmd;
1184 	int rv;
1185 	int s;
1186 
1187 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL);
1188 	if (ccb == NULL)
1189 		return ENOMEM;
1190 
1191 	ccb->ccb_len = sizeof(*id);
1192 	ccb->ccb_data = id;
1193 	cmd = &ccb->ccb_cmd;
1194 	cmd->tgt = htole32(CISS_CMD_MODE_PERIPH);
1195 	cmd->tgt2 = 0;
1196 	cmd->cdblen = 10;
1197 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_IN;
1198 	cmd->tmo = htole16(0);
1199 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
1200 	cmd->cdb[0] = CISS_CMD_CTRL_GET;
1201 	cmd->cdb[5] = target;
1202 	cmd->cdb[6] = CISS_CMS_CTRL_LDIDEXT;
1203 	cmd->cdb[7] = sizeof(*id) >> 8;	/* biiiig endian */
1204 	cmd->cdb[8] = sizeof(*id) & 0xff;
1205 
1206 	s = splbio();
1207 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL);
1208 	splx(s);
1209 
1210 	scsi_io_put(&sc->sc_iopool, ccb);
1211 
1212 	return (rv);
1213 }
1214 
1215 int
1216 ciss_ldstat(struct ciss_softc *sc, int target, struct ciss_ldstat *stat)
1217 {
1218 	struct ciss_ccb *ccb;
1219 	struct ciss_cmd *cmd;
1220 	int rv;
1221 	int s;
1222 
1223 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL);
1224 	if (ccb == NULL)
1225 		return ENOMEM;
1226 
1227 	ccb->ccb_len = sizeof(*stat);
1228 	ccb->ccb_data = stat;
1229 	cmd = &ccb->ccb_cmd;
1230 	cmd->tgt = htole32(CISS_CMD_MODE_PERIPH);
1231 	cmd->tgt2 = 0;
1232 	cmd->cdblen = 10;
1233 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_IN;
1234 	cmd->tmo = htole16(0);
1235 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
1236 	cmd->cdb[0] = CISS_CMD_CTRL_GET;
1237 	cmd->cdb[5] = target;
1238 	cmd->cdb[6] = CISS_CMS_CTRL_LDSTAT;
1239 	cmd->cdb[7] = sizeof(*stat) >> 8;	/* biiiig endian */
1240 	cmd->cdb[8] = sizeof(*stat) & 0xff;
1241 
1242 	s = splbio();
1243 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL);
1244 	splx(s);
1245 
1246 	scsi_io_put(&sc->sc_iopool, ccb);
1247 
1248 	return (rv);
1249 }
1250 
1251 int
1252 ciss_pdid(struct ciss_softc *sc, u_int8_t drv, struct ciss_pdid *id, int wait)
1253 {
1254 	struct ciss_ccb *ccb;
1255 	struct ciss_cmd *cmd;
1256 	int rv;
1257 	int s;
1258 
1259 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL);
1260 	if (ccb == NULL)
1261 		return ENOMEM;
1262 
1263 	ccb->ccb_len = sizeof(*id);
1264 	ccb->ccb_data = id;
1265 	cmd = &ccb->ccb_cmd;
1266 	cmd->tgt = htole32(CISS_CMD_MODE_PERIPH);
1267 	cmd->tgt2 = 0;
1268 	cmd->cdblen = 10;
1269 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_IN;
1270 	cmd->tmo = htole16(0);
1271 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
1272 	cmd->cdb[0] = CISS_CMD_CTRL_GET;
1273 	cmd->cdb[2] = drv;
1274 	cmd->cdb[6] = CISS_CMS_CTRL_PDID;
1275 	cmd->cdb[7] = sizeof(*id) >> 8;	/* biiiig endian */
1276 	cmd->cdb[8] = sizeof(*id) & 0xff;
1277 
1278 	s = splbio();
1279 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, wait);
1280 	splx(s);
1281 
1282 	scsi_io_put(&sc->sc_iopool, ccb);
1283 
1284 	return (rv);
1285 }
1286 
1287 
1288 struct ciss_ld *
1289 ciss_pdscan(struct ciss_softc *sc, int ld)
1290 {
1291 	struct ciss_pdid *pdid;
1292 	struct ciss_ld *ldp;
1293 	u_int8_t drv, buf[128];
1294 	int i, j, k = 0;
1295 
1296 	pdid = sc->scratch;
1297 	if (sc->ndrives == 256) {
1298 		for (i = 0; i < CISS_BIGBIT; i++)
1299 			if (!ciss_pdid(sc, i, pdid, SCSI_NOSLEEP|SCSI_POLL) &&
1300 			    (pdid->present & CISS_PD_PRESENT))
1301 				buf[k++] = i;
1302 	} else
1303 		for (i = 0; i < sc->nbus; i++)
1304 			for (j = 0; j < sc->ndrives; j++) {
1305 				drv = CISS_BIGBIT + i * sc->ndrives + j;
1306 				if (!ciss_pdid(sc, drv, pdid,
1307 				    SCSI_NOSLEEP|SCSI_POLL))
1308 					buf[k++] = drv;
1309 			}
1310 
1311 	if (!k)
1312 		return NULL;
1313 
1314 	ldp = malloc(sizeof(*ldp) + (k-1), M_DEVBUF, M_NOWAIT);
1315 	if (!ldp)
1316 		return NULL;
1317 
1318 	bzero(&ldp->bling, sizeof(ldp->bling));
1319 	ldp->ndrives = k;
1320 	bcopy(buf, ldp->tgts, k);
1321 	return ldp;
1322 }
1323 
1324 int
1325 ciss_blink(struct ciss_softc *sc, int ld, int pd, int stat,
1326     struct ciss_blink *blink)
1327 {
1328 	struct ciss_ccb *ccb;
1329 	struct ciss_cmd *cmd;
1330 	struct ciss_ld *ldp;
1331 	int rv;
1332 	int s;
1333 
1334 	if (ld > sc->maxunits)
1335 		return EINVAL;
1336 
1337 	ldp = sc->sc_lds[ld];
1338 	if (!ldp || pd > ldp->ndrives)
1339 		return EINVAL;
1340 
1341 	ldp->bling.pdtab[ldp->tgts[pd]] = stat == BIOC_SBUNBLINK? 0 :
1342 	    CISS_BLINK_ALL;
1343 	bcopy(&ldp->bling, blink, sizeof(*blink));
1344 
1345 	ccb = scsi_io_get(&sc->sc_iopool, SCSI_POLL);
1346 	if (ccb == NULL)
1347 		return ENOMEM;
1348 
1349 	ccb->ccb_len = sizeof(*blink);
1350 	ccb->ccb_data = blink;
1351 	cmd = &ccb->ccb_cmd;
1352 	cmd->tgt = htole32(CISS_CMD_MODE_PERIPH);
1353 	cmd->tgt2 = 0;
1354 	cmd->cdblen = 10;
1355 	cmd->flags = CISS_CDB_CMD | CISS_CDB_SIMPL | CISS_CDB_OUT;
1356 	cmd->tmo = htole16(0);
1357 	bzero(&cmd->cdb[0], sizeof(cmd->cdb));
1358 	cmd->cdb[0] = CISS_CMD_CTRL_SET;
1359 	cmd->cdb[6] = CISS_CMS_CTRL_PDBLINK;
1360 	cmd->cdb[7] = sizeof(*blink) >> 8;	/* biiiig endian */
1361 	cmd->cdb[8] = sizeof(*blink) & 0xff;
1362 
1363 	s = splbio();
1364 	rv = ciss_cmd(ccb, BUS_DMA_NOWAIT, SCSI_POLL);
1365 	splx(s);
1366 
1367 	scsi_io_put(&sc->sc_iopool, ccb);
1368 
1369 	return (rv);
1370 }
1371 #endif
1372