upload tizen1.0 source
[kernel/linux-2.6.36.git] / drivers / scsi / bnx2i / bnx2i_iscsi.c
1 /*
2  * bnx2i_iscsi.c: Broadcom NetXtreme II iSCSI driver.
3  *
4  * Copyright (c) 2006 - 2009 Broadcom Corporation
5  * Copyright (c) 2007, 2008 Red Hat, Inc.  All rights reserved.
6  * Copyright (c) 2007, 2008 Mike Christie
7  *
8  * This program is free software; you can redistribute it and/or modify
9  * it under the terms of the GNU General Public License as published by
10  * the Free Software Foundation.
11  *
12  * Written by: Anil Veerabhadrappa (anilgv@broadcom.com)
13  */
14
15 #include <linux/slab.h>
16 #include <scsi/scsi_tcq.h>
17 #include <scsi/libiscsi.h>
18 #include "bnx2i.h"
19
20 struct scsi_transport_template *bnx2i_scsi_xport_template;
21 struct iscsi_transport bnx2i_iscsi_transport;
22 static struct scsi_host_template bnx2i_host_template;
23
24 /*
25  * Global endpoint resource info
26  */
27 static DEFINE_SPINLOCK(bnx2i_resc_lock); /* protects global resources */
28
29
30 static int bnx2i_adapter_ready(struct bnx2i_hba *hba)
31 {
32         int retval = 0;
33
34         if (!hba || !test_bit(ADAPTER_STATE_UP, &hba->adapter_state) ||
35             test_bit(ADAPTER_STATE_GOING_DOWN, &hba->adapter_state) ||
36             test_bit(ADAPTER_STATE_LINK_DOWN, &hba->adapter_state))
37                 retval = -EPERM;
38         return retval;
39 }
40
41 /**
42  * bnx2i_get_write_cmd_bd_idx - identifies various BD bookmarks
43  * @cmd:                iscsi cmd struct pointer
44  * @buf_off:            absolute buffer offset
45  * @start_bd_off:       u32 pointer to return the offset within the BD
46  *                      indicated by 'start_bd_idx' on which 'buf_off' falls
47  * @start_bd_idx:       index of the BD on which 'buf_off' falls
48  *
49  * identifies & marks various bd info for scsi command's imm data,
50  * unsolicited data and the first solicited data seq.
51  */
52 static void bnx2i_get_write_cmd_bd_idx(struct bnx2i_cmd *cmd, u32 buf_off,
53                                        u32 *start_bd_off, u32 *start_bd_idx)
54 {
55         struct iscsi_bd *bd_tbl = cmd->io_tbl.bd_tbl;
56         u32 cur_offset = 0;
57         u32 cur_bd_idx = 0;
58
59         if (buf_off) {
60                 while (buf_off >= (cur_offset + bd_tbl->buffer_length)) {
61                         cur_offset += bd_tbl->buffer_length;
62                         cur_bd_idx++;
63                         bd_tbl++;
64                 }
65         }
66
67         *start_bd_off = buf_off - cur_offset;
68         *start_bd_idx = cur_bd_idx;
69 }
70
71 /**
72  * bnx2i_setup_write_cmd_bd_info - sets up BD various information
73  * @task:       transport layer's cmd struct pointer
74  *
75  * identifies & marks various bd info for scsi command's immediate data,
76  * unsolicited data and first solicited data seq which includes BD start
77  * index & BD buf off. his function takes into account iscsi parameter such
78  * as immediate data and unsolicited data is support on this connection.
79  */
80 static void bnx2i_setup_write_cmd_bd_info(struct iscsi_task *task)
81 {
82         struct bnx2i_cmd *cmd = task->dd_data;
83         u32 start_bd_offset;
84         u32 start_bd_idx;
85         u32 buffer_offset = 0;
86         u32 cmd_len = cmd->req.total_data_transfer_length;
87
88         /* if ImmediateData is turned off & IntialR2T is turned on,
89          * there will be no immediate or unsolicited data, just return.
90          */
91         if (!iscsi_task_has_unsol_data(task) && !task->imm_count)
92                 return;
93
94         /* Immediate data */
95         buffer_offset += task->imm_count;
96         if (task->imm_count == cmd_len)
97                 return;
98
99         if (iscsi_task_has_unsol_data(task)) {
100                 bnx2i_get_write_cmd_bd_idx(cmd, buffer_offset,
101                                            &start_bd_offset, &start_bd_idx);
102                 cmd->req.ud_buffer_offset = start_bd_offset;
103                 cmd->req.ud_start_bd_index = start_bd_idx;
104                 buffer_offset += task->unsol_r2t.data_length;
105         }
106
107         if (buffer_offset != cmd_len) {
108                 bnx2i_get_write_cmd_bd_idx(cmd, buffer_offset,
109                                            &start_bd_offset, &start_bd_idx);
110                 if ((start_bd_offset > task->conn->session->first_burst) ||
111                     (start_bd_idx > scsi_sg_count(cmd->scsi_cmd))) {
112                         int i = 0;
113
114                         iscsi_conn_printk(KERN_ALERT, task->conn,
115                                           "bnx2i- error, buf offset 0x%x "
116                                           "bd_valid %d use_sg %d\n",
117                                           buffer_offset, cmd->io_tbl.bd_valid,
118                                           scsi_sg_count(cmd->scsi_cmd));
119                         for (i = 0; i < cmd->io_tbl.bd_valid; i++)
120                                 iscsi_conn_printk(KERN_ALERT, task->conn,
121                                                   "bnx2i err, bd[%d]: len %x\n",
122                                                   i, cmd->io_tbl.bd_tbl[i].\
123                                                   buffer_length);
124                 }
125                 cmd->req.sd_buffer_offset = start_bd_offset;
126                 cmd->req.sd_start_bd_index = start_bd_idx;
127         }
128 }
129
130
131
132 /**
133  * bnx2i_map_scsi_sg - maps IO buffer and prepares the BD table
134  * @hba:        adapter instance
135  * @cmd:        iscsi cmd struct pointer
136  *
137  * map SG list
138  */
139 static int bnx2i_map_scsi_sg(struct bnx2i_hba *hba, struct bnx2i_cmd *cmd)
140 {
141         struct scsi_cmnd *sc = cmd->scsi_cmd;
142         struct iscsi_bd *bd = cmd->io_tbl.bd_tbl;
143         struct scatterlist *sg;
144         int byte_count = 0;
145         int bd_count = 0;
146         int sg_count;
147         int sg_len;
148         u64 addr;
149         int i;
150
151         BUG_ON(scsi_sg_count(sc) > ISCSI_MAX_BDS_PER_CMD);
152
153         sg_count = scsi_dma_map(sc);
154
155         scsi_for_each_sg(sc, sg, sg_count, i) {
156                 sg_len = sg_dma_len(sg);
157                 addr = (u64) sg_dma_address(sg);
158                 bd[bd_count].buffer_addr_lo = addr & 0xffffffff;
159                 bd[bd_count].buffer_addr_hi = addr >> 32;
160                 bd[bd_count].buffer_length = sg_len;
161                 bd[bd_count].flags = 0;
162                 if (bd_count == 0)
163                         bd[bd_count].flags = ISCSI_BD_FIRST_IN_BD_CHAIN;
164
165                 byte_count += sg_len;
166                 bd_count++;
167         }
168
169         if (bd_count)
170                 bd[bd_count - 1].flags |= ISCSI_BD_LAST_IN_BD_CHAIN;
171
172         BUG_ON(byte_count != scsi_bufflen(sc));
173         return bd_count;
174 }
175
176 /**
177  * bnx2i_iscsi_map_sg_list - maps SG list
178  * @cmd:        iscsi cmd struct pointer
179  *
180  * creates BD list table for the command
181  */
182 static void bnx2i_iscsi_map_sg_list(struct bnx2i_cmd *cmd)
183 {
184         int bd_count;
185
186         bd_count  = bnx2i_map_scsi_sg(cmd->conn->hba, cmd);
187         if (!bd_count) {
188                 struct iscsi_bd *bd = cmd->io_tbl.bd_tbl;
189
190                 bd[0].buffer_addr_lo = bd[0].buffer_addr_hi = 0;
191                 bd[0].buffer_length = bd[0].flags = 0;
192         }
193         cmd->io_tbl.bd_valid = bd_count;
194 }
195
196
197 /**
198  * bnx2i_iscsi_unmap_sg_list - unmaps SG list
199  * @cmd:        iscsi cmd struct pointer
200  *
201  * unmap IO buffers and invalidate the BD table
202  */
203 void bnx2i_iscsi_unmap_sg_list(struct bnx2i_cmd *cmd)
204 {
205         struct scsi_cmnd *sc = cmd->scsi_cmd;
206
207         if (cmd->io_tbl.bd_valid && sc) {
208                 scsi_dma_unmap(sc);
209                 cmd->io_tbl.bd_valid = 0;
210         }
211 }
212
213 static void bnx2i_setup_cmd_wqe_template(struct bnx2i_cmd *cmd)
214 {
215         memset(&cmd->req, 0x00, sizeof(cmd->req));
216         cmd->req.op_code = 0xFF;
217         cmd->req.bd_list_addr_lo = (u32) cmd->io_tbl.bd_tbl_dma;
218         cmd->req.bd_list_addr_hi =
219                 (u32) ((u64) cmd->io_tbl.bd_tbl_dma >> 32);
220
221 }
222
223
224 /**
225  * bnx2i_bind_conn_to_iscsi_cid - bind conn structure to 'iscsi_cid'
226  * @hba:        pointer to adapter instance
227  * @conn:       pointer to iscsi connection
228  * @iscsi_cid:  iscsi context ID, range 0 - (MAX_CONN - 1)
229  *
230  * update iscsi cid table entry with connection pointer. This enables
231  *      driver to quickly get hold of connection structure pointer in
232  *      completion/interrupt thread using iscsi context ID
233  */
234 static int bnx2i_bind_conn_to_iscsi_cid(struct bnx2i_hba *hba,
235                                         struct bnx2i_conn *bnx2i_conn,
236                                         u32 iscsi_cid)
237 {
238         if (hba && hba->cid_que.conn_cid_tbl[iscsi_cid]) {
239                 iscsi_conn_printk(KERN_ALERT, bnx2i_conn->cls_conn->dd_data,
240                                  "conn bind - entry #%d not free\n", iscsi_cid);
241                 return -EBUSY;
242         }
243
244         hba->cid_que.conn_cid_tbl[iscsi_cid] = bnx2i_conn;
245         return 0;
246 }
247
248
249 /**
250  * bnx2i_get_conn_from_id - maps an iscsi cid to corresponding conn ptr
251  * @hba:        pointer to adapter instance
252  * @iscsi_cid:  iscsi context ID, range 0 - (MAX_CONN - 1)
253  */
254 struct bnx2i_conn *bnx2i_get_conn_from_id(struct bnx2i_hba *hba,
255                                           u16 iscsi_cid)
256 {
257         if (!hba->cid_que.conn_cid_tbl) {
258                 printk(KERN_ERR "bnx2i: ERROR - missing conn<->cid table\n");
259                 return NULL;
260
261         } else if (iscsi_cid >= hba->max_active_conns) {
262                 printk(KERN_ERR "bnx2i: wrong cid #%d\n", iscsi_cid);
263                 return NULL;
264         }
265         return hba->cid_que.conn_cid_tbl[iscsi_cid];
266 }
267
268
269 /**
270  * bnx2i_alloc_iscsi_cid - allocates a iscsi_cid from free pool
271  * @hba:        pointer to adapter instance
272  */
273 static u32 bnx2i_alloc_iscsi_cid(struct bnx2i_hba *hba)
274 {
275         int idx;
276
277         if (!hba->cid_que.cid_free_cnt)
278                 return -1;
279
280         idx = hba->cid_que.cid_q_cons_idx;
281         hba->cid_que.cid_q_cons_idx++;
282         if (hba->cid_que.cid_q_cons_idx == hba->cid_que.cid_q_max_idx)
283                 hba->cid_que.cid_q_cons_idx = 0;
284
285         hba->cid_que.cid_free_cnt--;
286         return hba->cid_que.cid_que[idx];
287 }
288
289
290 /**
291  * bnx2i_free_iscsi_cid - returns tcp port to free list
292  * @hba:                pointer to adapter instance
293  * @iscsi_cid:          iscsi context ID to free
294  */
295 static void bnx2i_free_iscsi_cid(struct bnx2i_hba *hba, u16 iscsi_cid)
296 {
297         int idx;
298
299         if (iscsi_cid == (u16) -1)
300                 return;
301
302         hba->cid_que.cid_free_cnt++;
303
304         idx = hba->cid_que.cid_q_prod_idx;
305         hba->cid_que.cid_que[idx] = iscsi_cid;
306         hba->cid_que.conn_cid_tbl[iscsi_cid] = NULL;
307         hba->cid_que.cid_q_prod_idx++;
308         if (hba->cid_que.cid_q_prod_idx == hba->cid_que.cid_q_max_idx)
309                 hba->cid_que.cid_q_prod_idx = 0;
310 }
311
312
313 /**
314  * bnx2i_setup_free_cid_que - sets up free iscsi cid queue
315  * @hba:        pointer to adapter instance
316  *
317  * allocates memory for iscsi cid queue & 'cid - conn ptr' mapping table,
318  *      and initialize table attributes
319  */
320 static int bnx2i_setup_free_cid_que(struct bnx2i_hba *hba)
321 {
322         int mem_size;
323         int i;
324
325         mem_size = hba->max_active_conns * sizeof(u32);
326         mem_size = (mem_size + (PAGE_SIZE - 1)) & PAGE_MASK;
327
328         hba->cid_que.cid_que_base = kmalloc(mem_size, GFP_KERNEL);
329         if (!hba->cid_que.cid_que_base)
330                 return -ENOMEM;
331
332         mem_size = hba->max_active_conns * sizeof(struct bnx2i_conn *);
333         mem_size = (mem_size + (PAGE_SIZE - 1)) & PAGE_MASK;
334         hba->cid_que.conn_cid_tbl = kmalloc(mem_size, GFP_KERNEL);
335         if (!hba->cid_que.conn_cid_tbl) {
336                 kfree(hba->cid_que.cid_que_base);
337                 hba->cid_que.cid_que_base = NULL;
338                 return -ENOMEM;
339         }
340
341         hba->cid_que.cid_que = (u32 *)hba->cid_que.cid_que_base;
342         hba->cid_que.cid_q_prod_idx = 0;
343         hba->cid_que.cid_q_cons_idx = 0;
344         hba->cid_que.cid_q_max_idx = hba->max_active_conns;
345         hba->cid_que.cid_free_cnt = hba->max_active_conns;
346
347         for (i = 0; i < hba->max_active_conns; i++) {
348                 hba->cid_que.cid_que[i] = i;
349                 hba->cid_que.conn_cid_tbl[i] = NULL;
350         }
351         return 0;
352 }
353
354
355 /**
356  * bnx2i_release_free_cid_que - releases 'iscsi_cid' queue resources
357  * @hba:        pointer to adapter instance
358  */
359 static void bnx2i_release_free_cid_que(struct bnx2i_hba *hba)
360 {
361         kfree(hba->cid_que.cid_que_base);
362         hba->cid_que.cid_que_base = NULL;
363
364         kfree(hba->cid_que.conn_cid_tbl);
365         hba->cid_que.conn_cid_tbl = NULL;
366 }
367
368
369 /**
370  * bnx2i_alloc_ep - allocates ep structure from global pool
371  * @hba:        pointer to adapter instance
372  *
373  * routine allocates a free endpoint structure from global pool and
374  *      a tcp port to be used for this connection.  Global resource lock,
375  *      'bnx2i_resc_lock' is held while accessing shared global data structures
376  */
377 static struct iscsi_endpoint *bnx2i_alloc_ep(struct bnx2i_hba *hba)
378 {
379         struct iscsi_endpoint *ep;
380         struct bnx2i_endpoint *bnx2i_ep;
381
382         ep = iscsi_create_endpoint(sizeof(*bnx2i_ep));
383         if (!ep) {
384                 printk(KERN_ERR "bnx2i: Could not allocate ep\n");
385                 return NULL;
386         }
387
388         bnx2i_ep = ep->dd_data;
389         bnx2i_ep->cls_ep = ep;
390         INIT_LIST_HEAD(&bnx2i_ep->link);
391         bnx2i_ep->state = EP_STATE_IDLE;
392         bnx2i_ep->ep_iscsi_cid = (u16) -1;
393         bnx2i_ep->hba = hba;
394         bnx2i_ep->hba_age = hba->age;
395         hba->ofld_conns_active++;
396         init_waitqueue_head(&bnx2i_ep->ofld_wait);
397         return ep;
398 }
399
400
401 /**
402  * bnx2i_free_ep - free endpoint
403  * @ep:         pointer to iscsi endpoint structure
404  */
405 static void bnx2i_free_ep(struct iscsi_endpoint *ep)
406 {
407         struct bnx2i_endpoint *bnx2i_ep = ep->dd_data;
408         unsigned long flags;
409
410         spin_lock_irqsave(&bnx2i_resc_lock, flags);
411         bnx2i_ep->state = EP_STATE_IDLE;
412         bnx2i_ep->hba->ofld_conns_active--;
413
414         bnx2i_free_iscsi_cid(bnx2i_ep->hba, bnx2i_ep->ep_iscsi_cid);
415         if (bnx2i_ep->conn) {
416                 bnx2i_ep->conn->ep = NULL;
417                 bnx2i_ep->conn = NULL;
418         }
419
420         bnx2i_ep->hba = NULL;
421         spin_unlock_irqrestore(&bnx2i_resc_lock, flags);
422         iscsi_destroy_endpoint(ep);
423 }
424
425
426 /**
427  * bnx2i_alloc_bdt - allocates buffer descriptor (BD) table for the command
428  * @hba:        adapter instance pointer
429  * @session:    iscsi session pointer
430  * @cmd:        iscsi command structure
431  */
432 static int bnx2i_alloc_bdt(struct bnx2i_hba *hba, struct iscsi_session *session,
433                            struct bnx2i_cmd *cmd)
434 {
435         struct io_bdt *io = &cmd->io_tbl;
436         struct iscsi_bd *bd;
437
438         io->bd_tbl = dma_alloc_coherent(&hba->pcidev->dev,
439                                         ISCSI_MAX_BDS_PER_CMD * sizeof(*bd),
440                                         &io->bd_tbl_dma, GFP_KERNEL);
441         if (!io->bd_tbl) {
442                 iscsi_session_printk(KERN_ERR, session, "Could not "
443                                      "allocate bdt.\n");
444                 return -ENOMEM;
445         }
446         io->bd_valid = 0;
447         return 0;
448 }
449
450 /**
451  * bnx2i_destroy_cmd_pool - destroys iscsi command pool and release BD table
452  * @hba:        adapter instance pointer
453  * @session:    iscsi session pointer
454  * @cmd:        iscsi command structure
455  */
456 static void bnx2i_destroy_cmd_pool(struct bnx2i_hba *hba,
457                                    struct iscsi_session *session)
458 {
459         int i;
460
461         for (i = 0; i < session->cmds_max; i++) {
462                 struct iscsi_task *task = session->cmds[i];
463                 struct bnx2i_cmd *cmd = task->dd_data;
464
465                 if (cmd->io_tbl.bd_tbl)
466                         dma_free_coherent(&hba->pcidev->dev,
467                                           ISCSI_MAX_BDS_PER_CMD *
468                                           sizeof(struct iscsi_bd),
469                                           cmd->io_tbl.bd_tbl,
470                                           cmd->io_tbl.bd_tbl_dma);
471         }
472
473 }
474
475
476 /**
477  * bnx2i_setup_cmd_pool - sets up iscsi command pool for the session
478  * @hba:        adapter instance pointer
479  * @session:    iscsi session pointer
480  */
481 static int bnx2i_setup_cmd_pool(struct bnx2i_hba *hba,
482                                 struct iscsi_session *session)
483 {
484         int i;
485
486         for (i = 0; i < session->cmds_max; i++) {
487                 struct iscsi_task *task = session->cmds[i];
488                 struct bnx2i_cmd *cmd = task->dd_data;
489
490                 task->hdr = &cmd->hdr;
491                 task->hdr_max = sizeof(struct iscsi_hdr);
492
493                 if (bnx2i_alloc_bdt(hba, session, cmd))
494                         goto free_bdts;
495         }
496
497         return 0;
498
499 free_bdts:
500         bnx2i_destroy_cmd_pool(hba, session);
501         return -ENOMEM;
502 }
503
504
505 /**
506  * bnx2i_setup_mp_bdt - allocate BD table resources
507  * @hba:        pointer to adapter structure
508  *
509  * Allocate memory for dummy buffer and associated BD
510  * table to be used by middle path (MP) requests
511  */
512 static int bnx2i_setup_mp_bdt(struct bnx2i_hba *hba)
513 {
514         int rc = 0;
515         struct iscsi_bd *mp_bdt;
516         u64 addr;
517
518         hba->mp_bd_tbl = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
519                                             &hba->mp_bd_dma, GFP_KERNEL);
520         if (!hba->mp_bd_tbl) {
521                 printk(KERN_ERR "unable to allocate Middle Path BDT\n");
522                 rc = -1;
523                 goto out;
524         }
525
526         hba->dummy_buffer = dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
527                                                &hba->dummy_buf_dma, GFP_KERNEL);
528         if (!hba->dummy_buffer) {
529                 printk(KERN_ERR "unable to alloc Middle Path Dummy Buffer\n");
530                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
531                                   hba->mp_bd_tbl, hba->mp_bd_dma);
532                 hba->mp_bd_tbl = NULL;
533                 rc = -1;
534                 goto out;
535         }
536
537         mp_bdt = (struct iscsi_bd *) hba->mp_bd_tbl;
538         addr = (unsigned long) hba->dummy_buf_dma;
539         mp_bdt->buffer_addr_lo = addr & 0xffffffff;
540         mp_bdt->buffer_addr_hi = addr >> 32;
541         mp_bdt->buffer_length = PAGE_SIZE;
542         mp_bdt->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
543                         ISCSI_BD_FIRST_IN_BD_CHAIN;
544 out:
545         return rc;
546 }
547
548
549 /**
550  * bnx2i_free_mp_bdt - releases ITT back to free pool
551  * @hba:        pointer to adapter instance
552  *
553  * free MP dummy buffer and associated BD table
554  */
555 static void bnx2i_free_mp_bdt(struct bnx2i_hba *hba)
556 {
557         if (hba->mp_bd_tbl) {
558                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
559                                   hba->mp_bd_tbl, hba->mp_bd_dma);
560                 hba->mp_bd_tbl = NULL;
561         }
562         if (hba->dummy_buffer) {
563                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
564                                   hba->dummy_buffer, hba->dummy_buf_dma);
565                 hba->dummy_buffer = NULL;
566         }
567                 return;
568 }
569
570 /**
571  * bnx2i_drop_session - notifies iscsid of connection error.
572  * @hba:        adapter instance pointer
573  * @session:    iscsi session pointer
574  *
575  * This notifies iscsid that there is a error, so it can initiate
576  * recovery.
577  *
578  * This relies on caller using the iscsi class iterator so the object
579  * is refcounted and does not disapper from under us.
580  */
581 void bnx2i_drop_session(struct iscsi_cls_session *cls_session)
582 {
583         iscsi_session_failure(cls_session->dd_data, ISCSI_ERR_CONN_FAILED);
584 }
585
586 /**
587  * bnx2i_ep_destroy_list_add - add an entry to EP destroy list
588  * @hba:        pointer to adapter instance
589  * @ep:         pointer to endpoint (transport indentifier) structure
590  *
591  * EP destroy queue manager
592  */
593 static int bnx2i_ep_destroy_list_add(struct bnx2i_hba *hba,
594                                      struct bnx2i_endpoint *ep)
595 {
596         write_lock_bh(&hba->ep_rdwr_lock);
597         list_add_tail(&ep->link, &hba->ep_destroy_list);
598         write_unlock_bh(&hba->ep_rdwr_lock);
599         return 0;
600 }
601
602 /**
603  * bnx2i_ep_destroy_list_del - add an entry to EP destroy list
604  *
605  * @hba:                pointer to adapter instance
606  * @ep:                 pointer to endpoint (transport indentifier) structure
607  *
608  * EP destroy queue manager
609  */
610 static int bnx2i_ep_destroy_list_del(struct bnx2i_hba *hba,
611                                      struct bnx2i_endpoint *ep)
612 {
613         write_lock_bh(&hba->ep_rdwr_lock);
614         list_del_init(&ep->link);
615         write_unlock_bh(&hba->ep_rdwr_lock);
616
617         return 0;
618 }
619
620 /**
621  * bnx2i_ep_ofld_list_add - add an entry to ep offload pending list
622  * @hba:        pointer to adapter instance
623  * @ep:         pointer to endpoint (transport indentifier) structure
624  *
625  * pending conn offload completion queue manager
626  */
627 static int bnx2i_ep_ofld_list_add(struct bnx2i_hba *hba,
628                                   struct bnx2i_endpoint *ep)
629 {
630         write_lock_bh(&hba->ep_rdwr_lock);
631         list_add_tail(&ep->link, &hba->ep_ofld_list);
632         write_unlock_bh(&hba->ep_rdwr_lock);
633         return 0;
634 }
635
636 /**
637  * bnx2i_ep_ofld_list_del - add an entry to ep offload pending list
638  * @hba:                pointer to adapter instance
639  * @ep:                 pointer to endpoint (transport indentifier) structure
640  *
641  * pending conn offload completion queue manager
642  */
643 static int bnx2i_ep_ofld_list_del(struct bnx2i_hba *hba,
644                                   struct bnx2i_endpoint *ep)
645 {
646         write_lock_bh(&hba->ep_rdwr_lock);
647         list_del_init(&ep->link);
648         write_unlock_bh(&hba->ep_rdwr_lock);
649         return 0;
650 }
651
652
653 /**
654  * bnx2i_find_ep_in_ofld_list - find iscsi_cid in pending list of endpoints
655  *
656  * @hba:                pointer to adapter instance
657  * @iscsi_cid:          iscsi context ID to find
658  *
659  */
660 struct bnx2i_endpoint *
661 bnx2i_find_ep_in_ofld_list(struct bnx2i_hba *hba, u32 iscsi_cid)
662 {
663         struct list_head *list;
664         struct list_head *tmp;
665         struct bnx2i_endpoint *ep;
666
667         read_lock_bh(&hba->ep_rdwr_lock);
668         list_for_each_safe(list, tmp, &hba->ep_ofld_list) {
669                 ep = (struct bnx2i_endpoint *)list;
670
671                 if (ep->ep_iscsi_cid == iscsi_cid)
672                         break;
673                 ep = NULL;
674         }
675         read_unlock_bh(&hba->ep_rdwr_lock);
676
677         if (!ep)
678                 printk(KERN_ERR "l5 cid %d not found\n", iscsi_cid);
679         return ep;
680 }
681
682 /**
683  * bnx2i_find_ep_in_destroy_list - find iscsi_cid in destroy list
684  * @hba:                pointer to adapter instance
685  * @iscsi_cid:          iscsi context ID to find
686  *
687  */
688 struct bnx2i_endpoint *
689 bnx2i_find_ep_in_destroy_list(struct bnx2i_hba *hba, u32 iscsi_cid)
690 {
691         struct list_head *list;
692         struct list_head *tmp;
693         struct bnx2i_endpoint *ep;
694
695         read_lock_bh(&hba->ep_rdwr_lock);
696         list_for_each_safe(list, tmp, &hba->ep_destroy_list) {
697                 ep = (struct bnx2i_endpoint *)list;
698
699                 if (ep->ep_iscsi_cid == iscsi_cid)
700                         break;
701                 ep = NULL;
702         }
703         read_unlock_bh(&hba->ep_rdwr_lock);
704
705         if (!ep)
706                 printk(KERN_ERR "l5 cid %d not found\n", iscsi_cid);
707
708         return ep;
709 }
710
711 /**
712  * bnx2i_ep_active_list_add - add an entry to ep active list
713  * @hba:        pointer to adapter instance
714  * @ep:         pointer to endpoint (transport indentifier) structure
715  *
716  * current active conn queue manager
717  */
718 static void bnx2i_ep_active_list_add(struct bnx2i_hba *hba,
719                                      struct bnx2i_endpoint *ep)
720 {
721         write_lock_bh(&hba->ep_rdwr_lock);
722         list_add_tail(&ep->link, &hba->ep_active_list);
723         write_unlock_bh(&hba->ep_rdwr_lock);
724 }
725
726
727 /**
728  * bnx2i_ep_active_list_del - deletes an entry to ep active list
729  * @hba:        pointer to adapter instance
730  * @ep:         pointer to endpoint (transport indentifier) structure
731  *
732  * current active conn queue manager
733  */
734 static void bnx2i_ep_active_list_del(struct bnx2i_hba *hba,
735                                      struct bnx2i_endpoint *ep)
736 {
737         write_lock_bh(&hba->ep_rdwr_lock);
738         list_del_init(&ep->link);
739         write_unlock_bh(&hba->ep_rdwr_lock);
740 }
741
742
743 /**
744  * bnx2i_setup_host_queue_size - assigns shost->can_queue param
745  * @hba:        pointer to adapter instance
746  * @shost:      scsi host pointer
747  *
748  * Initializes 'can_queue' parameter based on how many outstanding commands
749  *      the device can handle. Each device 5708/5709/57710 has different
750  *      capabilities
751  */
752 static void bnx2i_setup_host_queue_size(struct bnx2i_hba *hba,
753                                         struct Scsi_Host *shost)
754 {
755         if (test_bit(BNX2I_NX2_DEV_5708, &hba->cnic_dev_type))
756                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5708;
757         else if (test_bit(BNX2I_NX2_DEV_5709, &hba->cnic_dev_type))
758                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5709;
759         else if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type))
760                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_57710;
761         else
762                 shost->can_queue = ISCSI_MAX_CMDS_PER_HBA_5708;
763 }
764
765
766 /**
767  * bnx2i_alloc_hba - allocate and init adapter instance
768  * @cnic:       cnic device pointer
769  *
770  * allocate & initialize adapter structure and call other
771  *      support routines to do per adapter initialization
772  */
773 struct bnx2i_hba *bnx2i_alloc_hba(struct cnic_dev *cnic)
774 {
775         struct Scsi_Host *shost;
776         struct bnx2i_hba *hba;
777
778         shost = iscsi_host_alloc(&bnx2i_host_template, sizeof(*hba), 0);
779         if (!shost)
780                 return NULL;
781         shost->dma_boundary = cnic->pcidev->dma_mask;
782         shost->transportt = bnx2i_scsi_xport_template;
783         shost->max_id = ISCSI_MAX_CONNS_PER_HBA;
784         shost->max_channel = 0;
785         shost->max_lun = 512;
786         shost->max_cmd_len = 16;
787
788         hba = iscsi_host_priv(shost);
789         hba->shost = shost;
790         hba->netdev = cnic->netdev;
791         /* Get PCI related information and update hba struct members */
792         hba->pcidev = cnic->pcidev;
793         pci_dev_get(hba->pcidev);
794         hba->pci_did = hba->pcidev->device;
795         hba->pci_vid = hba->pcidev->vendor;
796         hba->pci_sdid = hba->pcidev->subsystem_device;
797         hba->pci_svid = hba->pcidev->subsystem_vendor;
798         hba->pci_func = PCI_FUNC(hba->pcidev->devfn);
799         hba->pci_devno = PCI_SLOT(hba->pcidev->devfn);
800
801         bnx2i_identify_device(hba);
802         bnx2i_setup_host_queue_size(hba, shost);
803
804         if (test_bit(BNX2I_NX2_DEV_5709, &hba->cnic_dev_type)) {
805                 hba->regview = ioremap_nocache(hba->netdev->base_addr,
806                                                BNX2_MQ_CONFIG2);
807                 if (!hba->regview)
808                         goto ioreg_map_err;
809         } else if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
810                 hba->regview = ioremap_nocache(hba->netdev->base_addr, 4096);
811                 if (!hba->regview)
812                         goto ioreg_map_err;
813         }
814
815         if (bnx2i_setup_mp_bdt(hba))
816                 goto mp_bdt_mem_err;
817
818         INIT_LIST_HEAD(&hba->ep_ofld_list);
819         INIT_LIST_HEAD(&hba->ep_active_list);
820         INIT_LIST_HEAD(&hba->ep_destroy_list);
821         rwlock_init(&hba->ep_rdwr_lock);
822
823         hba->mtu_supported = BNX2I_MAX_MTU_SUPPORTED;
824
825         /* different values for 5708/5709/57710 */
826         hba->max_active_conns = ISCSI_MAX_CONNS_PER_HBA;
827
828         if (bnx2i_setup_free_cid_que(hba))
829                 goto cid_que_err;
830
831         /* SQ/RQ/CQ size can be changed via sysfx interface */
832         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
833                 if (sq_size && sq_size <= BNX2I_5770X_SQ_WQES_MAX)
834                         hba->max_sqes = sq_size;
835                 else
836                         hba->max_sqes = BNX2I_5770X_SQ_WQES_DEFAULT;
837         } else {        /* 5706/5708/5709 */
838                 if (sq_size && sq_size <= BNX2I_570X_SQ_WQES_MAX)
839                         hba->max_sqes = sq_size;
840                 else
841                         hba->max_sqes = BNX2I_570X_SQ_WQES_DEFAULT;
842         }
843
844         hba->max_rqes = rq_size;
845         hba->max_cqes = hba->max_sqes + rq_size;
846         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
847                 if (hba->max_cqes > BNX2I_5770X_CQ_WQES_MAX)
848                         hba->max_cqes = BNX2I_5770X_CQ_WQES_MAX;
849         } else if (hba->max_cqes > BNX2I_570X_CQ_WQES_MAX)
850                 hba->max_cqes = BNX2I_570X_CQ_WQES_MAX;
851
852         hba->num_ccell = hba->max_sqes / 2;
853
854         spin_lock_init(&hba->lock);
855         mutex_init(&hba->net_dev_lock);
856         init_waitqueue_head(&hba->eh_wait);
857         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type)) {
858                 hba->hba_shutdown_tmo = 20 * HZ;
859                 hba->conn_teardown_tmo = 20 * HZ;
860                 hba->conn_ctx_destroy_tmo = 6 * HZ;
861         } else {        /* 5706/5708/5709 */
862                 hba->hba_shutdown_tmo = 20 * HZ;
863                 hba->conn_teardown_tmo = 10 * HZ;
864                 hba->conn_ctx_destroy_tmo = 2 * HZ;
865         }
866
867         if (iscsi_host_add(shost, &hba->pcidev->dev))
868                 goto free_dump_mem;
869         return hba;
870
871 free_dump_mem:
872         bnx2i_release_free_cid_que(hba);
873 cid_que_err:
874         bnx2i_free_mp_bdt(hba);
875 mp_bdt_mem_err:
876         if (hba->regview) {
877                 iounmap(hba->regview);
878                 hba->regview = NULL;
879         }
880 ioreg_map_err:
881         pci_dev_put(hba->pcidev);
882         scsi_host_put(shost);
883         return NULL;
884 }
885
886 /**
887  * bnx2i_free_hba- releases hba structure and resources held by the adapter
888  * @hba:        pointer to adapter instance
889  *
890  * free adapter structure and call various cleanup routines.
891  */
892 void bnx2i_free_hba(struct bnx2i_hba *hba)
893 {
894         struct Scsi_Host *shost = hba->shost;
895
896         iscsi_host_remove(shost);
897         INIT_LIST_HEAD(&hba->ep_ofld_list);
898         INIT_LIST_HEAD(&hba->ep_active_list);
899         INIT_LIST_HEAD(&hba->ep_destroy_list);
900         pci_dev_put(hba->pcidev);
901
902         if (hba->regview) {
903                 iounmap(hba->regview);
904                 hba->regview = NULL;
905         }
906         bnx2i_free_mp_bdt(hba);
907         bnx2i_release_free_cid_que(hba);
908         iscsi_host_free(shost);
909 }
910
911 /**
912  * bnx2i_conn_free_login_resources - free DMA resources used for login process
913  * @hba:                pointer to adapter instance
914  * @bnx2i_conn:         iscsi connection pointer
915  *
916  * Login related resources, mostly BDT & payload DMA memory is freed
917  */
918 static void bnx2i_conn_free_login_resources(struct bnx2i_hba *hba,
919                                             struct bnx2i_conn *bnx2i_conn)
920 {
921         if (bnx2i_conn->gen_pdu.resp_bd_tbl) {
922                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
923                                   bnx2i_conn->gen_pdu.resp_bd_tbl,
924                                   bnx2i_conn->gen_pdu.resp_bd_dma);
925                 bnx2i_conn->gen_pdu.resp_bd_tbl = NULL;
926         }
927
928         if (bnx2i_conn->gen_pdu.req_bd_tbl) {
929                 dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
930                                   bnx2i_conn->gen_pdu.req_bd_tbl,
931                                   bnx2i_conn->gen_pdu.req_bd_dma);
932                 bnx2i_conn->gen_pdu.req_bd_tbl = NULL;
933         }
934
935         if (bnx2i_conn->gen_pdu.resp_buf) {
936                 dma_free_coherent(&hba->pcidev->dev,
937                                   ISCSI_DEF_MAX_RECV_SEG_LEN,
938                                   bnx2i_conn->gen_pdu.resp_buf,
939                                   bnx2i_conn->gen_pdu.resp_dma_addr);
940                 bnx2i_conn->gen_pdu.resp_buf = NULL;
941         }
942
943         if (bnx2i_conn->gen_pdu.req_buf) {
944                 dma_free_coherent(&hba->pcidev->dev,
945                                   ISCSI_DEF_MAX_RECV_SEG_LEN,
946                                   bnx2i_conn->gen_pdu.req_buf,
947                                   bnx2i_conn->gen_pdu.req_dma_addr);
948                 bnx2i_conn->gen_pdu.req_buf = NULL;
949         }
950 }
951
952 /**
953  * bnx2i_conn_alloc_login_resources - alloc DMA resources for login/nop.
954  * @hba:                pointer to adapter instance
955  * @bnx2i_conn:         iscsi connection pointer
956  *
957  * Mgmt task DNA resources are allocated in this routine.
958  */
959 static int bnx2i_conn_alloc_login_resources(struct bnx2i_hba *hba,
960                                             struct bnx2i_conn *bnx2i_conn)
961 {
962         /* Allocate memory for login request/response buffers */
963         bnx2i_conn->gen_pdu.req_buf =
964                 dma_alloc_coherent(&hba->pcidev->dev,
965                                    ISCSI_DEF_MAX_RECV_SEG_LEN,
966                                    &bnx2i_conn->gen_pdu.req_dma_addr,
967                                    GFP_KERNEL);
968         if (bnx2i_conn->gen_pdu.req_buf == NULL)
969                 goto login_req_buf_failure;
970
971         bnx2i_conn->gen_pdu.req_buf_size = 0;
972         bnx2i_conn->gen_pdu.req_wr_ptr = bnx2i_conn->gen_pdu.req_buf;
973
974         bnx2i_conn->gen_pdu.resp_buf =
975                 dma_alloc_coherent(&hba->pcidev->dev,
976                                    ISCSI_DEF_MAX_RECV_SEG_LEN,
977                                    &bnx2i_conn->gen_pdu.resp_dma_addr,
978                                    GFP_KERNEL);
979         if (bnx2i_conn->gen_pdu.resp_buf == NULL)
980                 goto login_resp_buf_failure;
981
982         bnx2i_conn->gen_pdu.resp_buf_size = ISCSI_DEF_MAX_RECV_SEG_LEN;
983         bnx2i_conn->gen_pdu.resp_wr_ptr = bnx2i_conn->gen_pdu.resp_buf;
984
985         bnx2i_conn->gen_pdu.req_bd_tbl =
986                 dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
987                                    &bnx2i_conn->gen_pdu.req_bd_dma, GFP_KERNEL);
988         if (bnx2i_conn->gen_pdu.req_bd_tbl == NULL)
989                 goto login_req_bd_tbl_failure;
990
991         bnx2i_conn->gen_pdu.resp_bd_tbl =
992                 dma_alloc_coherent(&hba->pcidev->dev, PAGE_SIZE,
993                                    &bnx2i_conn->gen_pdu.resp_bd_dma,
994                                    GFP_KERNEL);
995         if (bnx2i_conn->gen_pdu.resp_bd_tbl == NULL)
996                 goto login_resp_bd_tbl_failure;
997
998         return 0;
999
1000 login_resp_bd_tbl_failure:
1001         dma_free_coherent(&hba->pcidev->dev, PAGE_SIZE,
1002                           bnx2i_conn->gen_pdu.req_bd_tbl,
1003                           bnx2i_conn->gen_pdu.req_bd_dma);
1004         bnx2i_conn->gen_pdu.req_bd_tbl = NULL;
1005
1006 login_req_bd_tbl_failure:
1007         dma_free_coherent(&hba->pcidev->dev, ISCSI_DEF_MAX_RECV_SEG_LEN,
1008                           bnx2i_conn->gen_pdu.resp_buf,
1009                           bnx2i_conn->gen_pdu.resp_dma_addr);
1010         bnx2i_conn->gen_pdu.resp_buf = NULL;
1011 login_resp_buf_failure:
1012         dma_free_coherent(&hba->pcidev->dev, ISCSI_DEF_MAX_RECV_SEG_LEN,
1013                           bnx2i_conn->gen_pdu.req_buf,
1014                           bnx2i_conn->gen_pdu.req_dma_addr);
1015         bnx2i_conn->gen_pdu.req_buf = NULL;
1016 login_req_buf_failure:
1017         iscsi_conn_printk(KERN_ERR, bnx2i_conn->cls_conn->dd_data,
1018                           "login resource alloc failed!!\n");
1019         return -ENOMEM;
1020
1021 }
1022
1023
1024 /**
1025  * bnx2i_iscsi_prep_generic_pdu_bd - prepares BD table.
1026  * @bnx2i_conn:         iscsi connection pointer
1027  *
1028  * Allocates buffers and BD tables before shipping requests to cnic
1029  *      for PDUs prepared by 'iscsid' daemon
1030  */
1031 static void bnx2i_iscsi_prep_generic_pdu_bd(struct bnx2i_conn *bnx2i_conn)
1032 {
1033         struct iscsi_bd *bd_tbl;
1034
1035         bd_tbl = (struct iscsi_bd *) bnx2i_conn->gen_pdu.req_bd_tbl;
1036
1037         bd_tbl->buffer_addr_hi =
1038                 (u32) ((u64) bnx2i_conn->gen_pdu.req_dma_addr >> 32);
1039         bd_tbl->buffer_addr_lo = (u32) bnx2i_conn->gen_pdu.req_dma_addr;
1040         bd_tbl->buffer_length = bnx2i_conn->gen_pdu.req_wr_ptr -
1041                                 bnx2i_conn->gen_pdu.req_buf;
1042         bd_tbl->reserved0 = 0;
1043         bd_tbl->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
1044                         ISCSI_BD_FIRST_IN_BD_CHAIN;
1045
1046         bd_tbl = (struct iscsi_bd  *) bnx2i_conn->gen_pdu.resp_bd_tbl;
1047         bd_tbl->buffer_addr_hi = (u64) bnx2i_conn->gen_pdu.resp_dma_addr >> 32;
1048         bd_tbl->buffer_addr_lo = (u32) bnx2i_conn->gen_pdu.resp_dma_addr;
1049         bd_tbl->buffer_length = ISCSI_DEF_MAX_RECV_SEG_LEN;
1050         bd_tbl->reserved0 = 0;
1051         bd_tbl->flags = ISCSI_BD_LAST_IN_BD_CHAIN |
1052                         ISCSI_BD_FIRST_IN_BD_CHAIN;
1053 }
1054
1055
1056 /**
1057  * bnx2i_iscsi_send_generic_request - called to send mgmt tasks.
1058  * @task:       transport layer task pointer
1059  *
1060  * called to transmit PDUs prepared by the 'iscsid' daemon. iSCSI login,
1061  *      Nop-out and Logout requests flow through this path.
1062  */
1063 static int bnx2i_iscsi_send_generic_request(struct iscsi_task *task)
1064 {
1065         struct bnx2i_cmd *cmd = task->dd_data;
1066         struct bnx2i_conn *bnx2i_conn = cmd->conn;
1067         int rc = 0;
1068         char *buf;
1069         int data_len;
1070
1071         bnx2i_iscsi_prep_generic_pdu_bd(bnx2i_conn);
1072         switch (task->hdr->opcode & ISCSI_OPCODE_MASK) {
1073         case ISCSI_OP_LOGIN:
1074                 bnx2i_send_iscsi_login(bnx2i_conn, task);
1075                 break;
1076         case ISCSI_OP_NOOP_OUT:
1077                 data_len = bnx2i_conn->gen_pdu.req_buf_size;
1078                 buf = bnx2i_conn->gen_pdu.req_buf;
1079                 if (data_len)
1080                         rc = bnx2i_send_iscsi_nopout(bnx2i_conn, task,
1081                                                      RESERVED_ITT,
1082                                                      buf, data_len, 1);
1083                 else
1084                         rc = bnx2i_send_iscsi_nopout(bnx2i_conn, task,
1085                                                      RESERVED_ITT,
1086                                                      NULL, 0, 1);
1087                 break;
1088         case ISCSI_OP_LOGOUT:
1089                 rc = bnx2i_send_iscsi_logout(bnx2i_conn, task);
1090                 break;
1091         case ISCSI_OP_SCSI_TMFUNC:
1092                 rc = bnx2i_send_iscsi_tmf(bnx2i_conn, task);
1093                 break;
1094         default:
1095                 iscsi_conn_printk(KERN_ALERT, bnx2i_conn->cls_conn->dd_data,
1096                                   "send_gen: unsupported op 0x%x\n",
1097                                   task->hdr->opcode);
1098         }
1099         return rc;
1100 }
1101
1102
1103 /**********************************************************************
1104  *              SCSI-ML Interface
1105  **********************************************************************/
1106
1107 /**
1108  * bnx2i_cpy_scsi_cdb - copies LUN & CDB fields in required format to sq wqe
1109  * @sc:         SCSI-ML command pointer
1110  * @cmd:        iscsi cmd pointer
1111  */
1112 static void bnx2i_cpy_scsi_cdb(struct scsi_cmnd *sc, struct bnx2i_cmd *cmd)
1113 {
1114         u32 dword;
1115         int lpcnt;
1116         u8 *srcp;
1117         u32 *dstp;
1118         u32 scsi_lun[2];
1119
1120         int_to_scsilun(sc->device->lun, (struct scsi_lun *) scsi_lun);
1121         cmd->req.lun[0] = be32_to_cpu(scsi_lun[0]);
1122         cmd->req.lun[1] = be32_to_cpu(scsi_lun[1]);
1123
1124         lpcnt = cmd->scsi_cmd->cmd_len / sizeof(dword);
1125         srcp = (u8 *) sc->cmnd;
1126         dstp = (u32 *) cmd->req.cdb;
1127         while (lpcnt--) {
1128                 memcpy(&dword, (const void *) srcp, 4);
1129                 *dstp = cpu_to_be32(dword);
1130                 srcp += 4;
1131                 dstp++;
1132         }
1133         if (sc->cmd_len & 0x3) {
1134                 dword = (u32) srcp[0] | ((u32) srcp[1] << 8);
1135                 *dstp = cpu_to_be32(dword);
1136         }
1137 }
1138
1139 static void bnx2i_cleanup_task(struct iscsi_task *task)
1140 {
1141         struct iscsi_conn *conn = task->conn;
1142         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1143         struct bnx2i_hba *hba = bnx2i_conn->hba;
1144
1145         /*
1146          * mgmt task or cmd was never sent to us to transmit.
1147          */
1148         if (!task->sc || task->state == ISCSI_TASK_PENDING)
1149                 return;
1150         /*
1151          * need to clean-up task context to claim dma buffers
1152          */
1153         if (task->state == ISCSI_TASK_ABRT_TMF) {
1154                 bnx2i_send_cmd_cleanup_req(hba, task->dd_data);
1155
1156                 spin_unlock_bh(&conn->session->lock);
1157                 wait_for_completion_timeout(&bnx2i_conn->cmd_cleanup_cmpl,
1158                                 msecs_to_jiffies(ISCSI_CMD_CLEANUP_TIMEOUT));
1159                 spin_lock_bh(&conn->session->lock);
1160         }
1161         bnx2i_iscsi_unmap_sg_list(task->dd_data);
1162 }
1163
1164 /**
1165  * bnx2i_mtask_xmit - transmit mtask to chip for further processing
1166  * @conn:       transport layer conn structure pointer
1167  * @task:       transport layer command structure pointer
1168  */
1169 static int
1170 bnx2i_mtask_xmit(struct iscsi_conn *conn, struct iscsi_task *task)
1171 {
1172         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1173         struct bnx2i_cmd *cmd = task->dd_data;
1174
1175         memset(bnx2i_conn->gen_pdu.req_buf, 0, ISCSI_DEF_MAX_RECV_SEG_LEN);
1176
1177         bnx2i_setup_cmd_wqe_template(cmd);
1178         bnx2i_conn->gen_pdu.req_buf_size = task->data_count;
1179         if (task->data_count) {
1180                 memcpy(bnx2i_conn->gen_pdu.req_buf, task->data,
1181                        task->data_count);
1182                 bnx2i_conn->gen_pdu.req_wr_ptr =
1183                         bnx2i_conn->gen_pdu.req_buf + task->data_count;
1184         }
1185         cmd->conn = conn->dd_data;
1186         cmd->scsi_cmd = NULL;
1187         return bnx2i_iscsi_send_generic_request(task);
1188 }
1189
1190 /**
1191  * bnx2i_task_xmit - transmit iscsi command to chip for further processing
1192  * @task:       transport layer command structure pointer
1193  *
1194  * maps SG buffers and send request to chip/firmware in the form of SQ WQE
1195  */
1196 static int bnx2i_task_xmit(struct iscsi_task *task)
1197 {
1198         struct iscsi_conn *conn = task->conn;
1199         struct iscsi_session *session = conn->session;
1200         struct Scsi_Host *shost = iscsi_session_to_shost(session->cls_session);
1201         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1202         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1203         struct scsi_cmnd *sc = task->sc;
1204         struct bnx2i_cmd *cmd = task->dd_data;
1205         struct iscsi_cmd *hdr = (struct iscsi_cmd *) task->hdr;
1206
1207         /*
1208          * If there is no scsi_cmnd this must be a mgmt task
1209          */
1210         if (!sc)
1211                 return bnx2i_mtask_xmit(conn, task);
1212
1213         bnx2i_setup_cmd_wqe_template(cmd);
1214         cmd->req.op_code = ISCSI_OP_SCSI_CMD;
1215         cmd->conn = bnx2i_conn;
1216         cmd->scsi_cmd = sc;
1217         cmd->req.total_data_transfer_length = scsi_bufflen(sc);
1218         cmd->req.cmd_sn = be32_to_cpu(hdr->cmdsn);
1219
1220         bnx2i_iscsi_map_sg_list(cmd);
1221         bnx2i_cpy_scsi_cdb(sc, cmd);
1222
1223         cmd->req.op_attr = ISCSI_ATTR_SIMPLE;
1224         if (sc->sc_data_direction == DMA_TO_DEVICE) {
1225                 cmd->req.op_attr |= ISCSI_CMD_REQUEST_WRITE;
1226                 cmd->req.itt = task->itt |
1227                         (ISCSI_TASK_TYPE_WRITE << ISCSI_CMD_REQUEST_TYPE_SHIFT);
1228                 bnx2i_setup_write_cmd_bd_info(task);
1229         } else {
1230                 if (scsi_bufflen(sc))
1231                         cmd->req.op_attr |= ISCSI_CMD_REQUEST_READ;
1232                 cmd->req.itt = task->itt |
1233                         (ISCSI_TASK_TYPE_READ << ISCSI_CMD_REQUEST_TYPE_SHIFT);
1234         }
1235
1236         cmd->req.num_bds = cmd->io_tbl.bd_valid;
1237         if (!cmd->io_tbl.bd_valid) {
1238                 cmd->req.bd_list_addr_lo = (u32) hba->mp_bd_dma;
1239                 cmd->req.bd_list_addr_hi = (u32) ((u64) hba->mp_bd_dma >> 32);
1240                 cmd->req.num_bds = 1;
1241         }
1242
1243         bnx2i_send_iscsi_scsicmd(bnx2i_conn, cmd);
1244         return 0;
1245 }
1246
1247 /**
1248  * bnx2i_session_create - create a new iscsi session
1249  * @cmds_max:           max commands supported
1250  * @qdepth:             scsi queue depth to support
1251  * @initial_cmdsn:      initial iscsi CMDSN to be used for this session
1252  *
1253  * Creates a new iSCSI session instance on given device.
1254  */
1255 static struct iscsi_cls_session *
1256 bnx2i_session_create(struct iscsi_endpoint *ep,
1257                      uint16_t cmds_max, uint16_t qdepth,
1258                      uint32_t initial_cmdsn)
1259 {
1260         struct Scsi_Host *shost;
1261         struct iscsi_cls_session *cls_session;
1262         struct bnx2i_hba *hba;
1263         struct bnx2i_endpoint *bnx2i_ep;
1264
1265         if (!ep) {
1266                 printk(KERN_ERR "bnx2i: missing ep.\n");
1267                 return NULL;
1268         }
1269
1270         bnx2i_ep = ep->dd_data;
1271         shost = bnx2i_ep->hba->shost;
1272         hba = iscsi_host_priv(shost);
1273         if (bnx2i_adapter_ready(hba))
1274                 return NULL;
1275
1276         /*
1277          * user can override hw limit as long as it is within
1278          * the min/max.
1279          */
1280         if (cmds_max > hba->max_sqes)
1281                 cmds_max = hba->max_sqes;
1282         else if (cmds_max < BNX2I_SQ_WQES_MIN)
1283                 cmds_max = BNX2I_SQ_WQES_MIN;
1284
1285         cls_session = iscsi_session_setup(&bnx2i_iscsi_transport, shost,
1286                                           cmds_max, 0, sizeof(struct bnx2i_cmd),
1287                                           initial_cmdsn, ISCSI_MAX_TARGET);
1288         if (!cls_session)
1289                 return NULL;
1290
1291         if (bnx2i_setup_cmd_pool(hba, cls_session->dd_data))
1292                 goto session_teardown;
1293         return cls_session;
1294
1295 session_teardown:
1296         iscsi_session_teardown(cls_session);
1297         return NULL;
1298 }
1299
1300
1301 /**
1302  * bnx2i_session_destroy - destroys iscsi session
1303  * @cls_session:        pointer to iscsi cls session
1304  *
1305  * Destroys previously created iSCSI session instance and releases
1306  *      all resources held by it
1307  */
1308 static void bnx2i_session_destroy(struct iscsi_cls_session *cls_session)
1309 {
1310         struct iscsi_session *session = cls_session->dd_data;
1311         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1312         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1313
1314         bnx2i_destroy_cmd_pool(hba, session);
1315         iscsi_session_teardown(cls_session);
1316 }
1317
1318
1319 /**
1320  * bnx2i_conn_create - create iscsi connection instance
1321  * @cls_session:        pointer to iscsi cls session
1322  * @cid:                iscsi cid as per rfc (not NX2's CID terminology)
1323  *
1324  * Creates a new iSCSI connection instance for a given session
1325  */
1326 static struct iscsi_cls_conn *
1327 bnx2i_conn_create(struct iscsi_cls_session *cls_session, uint32_t cid)
1328 {
1329         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1330         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1331         struct bnx2i_conn *bnx2i_conn;
1332         struct iscsi_cls_conn *cls_conn;
1333         struct iscsi_conn *conn;
1334
1335         cls_conn = iscsi_conn_setup(cls_session, sizeof(*bnx2i_conn),
1336                                     cid);
1337         if (!cls_conn)
1338                 return NULL;
1339         conn = cls_conn->dd_data;
1340
1341         bnx2i_conn = conn->dd_data;
1342         bnx2i_conn->cls_conn = cls_conn;
1343         bnx2i_conn->hba = hba;
1344         /* 'ep' ptr will be assigned in bind() call */
1345         bnx2i_conn->ep = NULL;
1346         init_completion(&bnx2i_conn->cmd_cleanup_cmpl);
1347
1348         if (bnx2i_conn_alloc_login_resources(hba, bnx2i_conn)) {
1349                 iscsi_conn_printk(KERN_ALERT, conn,
1350                                   "conn_new: login resc alloc failed!!\n");
1351                 goto free_conn;
1352         }
1353
1354         return cls_conn;
1355
1356 free_conn:
1357         iscsi_conn_teardown(cls_conn);
1358         return NULL;
1359 }
1360
1361 /**
1362  * bnx2i_conn_bind - binds iscsi sess, conn and ep objects together
1363  * @cls_session:        pointer to iscsi cls session
1364  * @cls_conn:           pointer to iscsi cls conn
1365  * @transport_fd:       64-bit EP handle
1366  * @is_leading:         leading connection on this session?
1367  *
1368  * Binds together iSCSI session instance, iSCSI connection instance
1369  *      and the TCP connection. This routine returns error code if
1370  *      TCP connection does not belong on the device iSCSI sess/conn
1371  *      is bound
1372  */
1373 static int bnx2i_conn_bind(struct iscsi_cls_session *cls_session,
1374                            struct iscsi_cls_conn *cls_conn,
1375                            uint64_t transport_fd, int is_leading)
1376 {
1377         struct iscsi_conn *conn = cls_conn->dd_data;
1378         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1379         struct Scsi_Host *shost = iscsi_session_to_shost(cls_session);
1380         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1381         struct bnx2i_endpoint *bnx2i_ep;
1382         struct iscsi_endpoint *ep;
1383         int ret_code;
1384
1385         ep = iscsi_lookup_endpoint(transport_fd);
1386         if (!ep)
1387                 return -EINVAL;
1388
1389         bnx2i_ep = ep->dd_data;
1390         if ((bnx2i_ep->state == EP_STATE_TCP_FIN_RCVD) ||
1391             (bnx2i_ep->state == EP_STATE_TCP_RST_RCVD))
1392                 /* Peer disconnect via' FIN or RST */
1393                 return -EINVAL;
1394
1395         if (iscsi_conn_bind(cls_session, cls_conn, is_leading))
1396                 return -EINVAL;
1397
1398         if (bnx2i_ep->hba != hba) {
1399                 /* Error - TCP connection does not belong to this device
1400                  */
1401                 iscsi_conn_printk(KERN_ALERT, cls_conn->dd_data,
1402                                   "conn bind, ep=0x%p (%s) does not",
1403                                   bnx2i_ep, bnx2i_ep->hba->netdev->name);
1404                 iscsi_conn_printk(KERN_ALERT, cls_conn->dd_data,
1405                                   "belong to hba (%s)\n",
1406                                   hba->netdev->name);
1407                 return -EEXIST;
1408         }
1409
1410         bnx2i_ep->conn = bnx2i_conn;
1411         bnx2i_conn->ep = bnx2i_ep;
1412         bnx2i_conn->iscsi_conn_cid = bnx2i_ep->ep_iscsi_cid;
1413         bnx2i_conn->fw_cid = bnx2i_ep->ep_cid;
1414
1415         ret_code = bnx2i_bind_conn_to_iscsi_cid(hba, bnx2i_conn,
1416                                                 bnx2i_ep->ep_iscsi_cid);
1417
1418         /* 5706/5708/5709 FW takes RQ as full when initiated, but for 57710
1419          * driver needs to explicitly replenish RQ index during setup.
1420          */
1421         if (test_bit(BNX2I_NX2_DEV_57710, &bnx2i_ep->hba->cnic_dev_type))
1422                 bnx2i_put_rq_buf(bnx2i_conn, 0);
1423
1424         bnx2i_arm_cq_event_coalescing(bnx2i_conn->ep, CNIC_ARM_CQE);
1425         return ret_code;
1426 }
1427
1428
1429 /**
1430  * bnx2i_conn_destroy - destroy iscsi connection instance & release resources
1431  * @cls_conn:   pointer to iscsi cls conn
1432  *
1433  * Destroy an iSCSI connection instance and release memory resources held by
1434  *      this connection
1435  */
1436 static void bnx2i_conn_destroy(struct iscsi_cls_conn *cls_conn)
1437 {
1438         struct iscsi_conn *conn = cls_conn->dd_data;
1439         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1440         struct Scsi_Host *shost;
1441         struct bnx2i_hba *hba;
1442
1443         shost = iscsi_session_to_shost(iscsi_conn_to_session(cls_conn));
1444         hba = iscsi_host_priv(shost);
1445
1446         bnx2i_conn_free_login_resources(hba, bnx2i_conn);
1447         iscsi_conn_teardown(cls_conn);
1448 }
1449
1450
1451 /**
1452  * bnx2i_conn_get_param - return iscsi connection parameter to caller
1453  * @cls_conn:   pointer to iscsi cls conn
1454  * @param:      parameter type identifier
1455  * @buf:        buffer pointer
1456  *
1457  * returns iSCSI connection parameters
1458  */
1459 static int bnx2i_conn_get_param(struct iscsi_cls_conn *cls_conn,
1460                                 enum iscsi_param param, char *buf)
1461 {
1462         struct iscsi_conn *conn = cls_conn->dd_data;
1463         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1464         int len = 0;
1465
1466         switch (param) {
1467         case ISCSI_PARAM_CONN_PORT:
1468                 if (bnx2i_conn->ep)
1469                         len = sprintf(buf, "%hu\n",
1470                                       bnx2i_conn->ep->cm_sk->dst_port);
1471                 break;
1472         case ISCSI_PARAM_CONN_ADDRESS:
1473                 if (bnx2i_conn->ep)
1474                         len = sprintf(buf, "%pI4\n",
1475                                       &bnx2i_conn->ep->cm_sk->dst_ip);
1476                 break;
1477         default:
1478                 return iscsi_conn_get_param(cls_conn, param, buf);
1479         }
1480
1481         return len;
1482 }
1483
1484 /**
1485  * bnx2i_host_get_param - returns host (adapter) related parameters
1486  * @shost:      scsi host pointer
1487  * @param:      parameter type identifier
1488  * @buf:        buffer pointer
1489  */
1490 static int bnx2i_host_get_param(struct Scsi_Host *shost,
1491                                 enum iscsi_host_param param, char *buf)
1492 {
1493         struct bnx2i_hba *hba = iscsi_host_priv(shost);
1494         int len = 0;
1495
1496         switch (param) {
1497         case ISCSI_HOST_PARAM_HWADDRESS:
1498                 len = sysfs_format_mac(buf, hba->cnic->mac_addr, 6);
1499                 break;
1500         case ISCSI_HOST_PARAM_NETDEV_NAME:
1501                 len = sprintf(buf, "%s\n", hba->netdev->name);
1502                 break;
1503         case ISCSI_HOST_PARAM_IPADDRESS: {
1504                 struct list_head *active_list = &hba->ep_active_list;
1505
1506                 read_lock_bh(&hba->ep_rdwr_lock);
1507                 if (!list_empty(&hba->ep_active_list)) {
1508                         struct bnx2i_endpoint *bnx2i_ep;
1509                         struct cnic_sock *csk;
1510
1511                         bnx2i_ep = list_first_entry(active_list,
1512                                                     struct bnx2i_endpoint,
1513                                                     link);
1514                         csk = bnx2i_ep->cm_sk;
1515                         if (test_bit(SK_F_IPV6, &csk->flags))
1516                                 len = sprintf(buf, "%pI6\n", csk->src_ip);
1517                         else
1518                                 len = sprintf(buf, "%pI4\n", csk->src_ip);
1519                 }
1520                 read_unlock_bh(&hba->ep_rdwr_lock);
1521                 break;
1522         }
1523         default:
1524                 return iscsi_host_get_param(shost, param, buf);
1525         }
1526         return len;
1527 }
1528
1529 /**
1530  * bnx2i_conn_start - completes iscsi connection migration to FFP
1531  * @cls_conn:   pointer to iscsi cls conn
1532  *
1533  * last call in FFP migration to handover iscsi conn to the driver
1534  */
1535 static int bnx2i_conn_start(struct iscsi_cls_conn *cls_conn)
1536 {
1537         struct iscsi_conn *conn = cls_conn->dd_data;
1538         struct bnx2i_conn *bnx2i_conn = conn->dd_data;
1539
1540         bnx2i_conn->ep->state = EP_STATE_ULP_UPDATE_START;
1541         bnx2i_update_iscsi_conn(conn);
1542
1543         /*
1544          * this should normally not sleep for a long time so it should
1545          * not disrupt the caller.
1546          */
1547         bnx2i_conn->ep->ofld_timer.expires = 1 * HZ + jiffies;
1548         bnx2i_conn->ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1549         bnx2i_conn->ep->ofld_timer.data = (unsigned long) bnx2i_conn->ep;
1550         add_timer(&bnx2i_conn->ep->ofld_timer);
1551         /* update iSCSI context for this conn, wait for CNIC to complete */
1552         wait_event_interruptible(bnx2i_conn->ep->ofld_wait,
1553                         bnx2i_conn->ep->state != EP_STATE_ULP_UPDATE_START);
1554
1555         if (signal_pending(current))
1556                 flush_signals(current);
1557         del_timer_sync(&bnx2i_conn->ep->ofld_timer);
1558
1559         iscsi_conn_start(cls_conn);
1560         return 0;
1561 }
1562
1563
1564 /**
1565  * bnx2i_conn_get_stats - returns iSCSI stats
1566  * @cls_conn:   pointer to iscsi cls conn
1567  * @stats:      pointer to iscsi statistic struct
1568  */
1569 static void bnx2i_conn_get_stats(struct iscsi_cls_conn *cls_conn,
1570                                  struct iscsi_stats *stats)
1571 {
1572         struct iscsi_conn *conn = cls_conn->dd_data;
1573
1574         stats->txdata_octets = conn->txdata_octets;
1575         stats->rxdata_octets = conn->rxdata_octets;
1576         stats->scsicmd_pdus = conn->scsicmd_pdus_cnt;
1577         stats->dataout_pdus = conn->dataout_pdus_cnt;
1578         stats->scsirsp_pdus = conn->scsirsp_pdus_cnt;
1579         stats->datain_pdus = conn->datain_pdus_cnt;
1580         stats->r2t_pdus = conn->r2t_pdus_cnt;
1581         stats->tmfcmd_pdus = conn->tmfcmd_pdus_cnt;
1582         stats->tmfrsp_pdus = conn->tmfrsp_pdus_cnt;
1583         stats->custom_length = 3;
1584         strcpy(stats->custom[2].desc, "eh_abort_cnt");
1585         stats->custom[2].value = conn->eh_abort_cnt;
1586         stats->digest_err = 0;
1587         stats->timeout_err = 0;
1588         stats->custom_length = 0;
1589 }
1590
1591
1592 /**
1593  * bnx2i_check_route - checks if target IP route belongs to one of NX2 devices
1594  * @dst_addr:   target IP address
1595  *
1596  * check if route resolves to BNX2 device
1597  */
1598 static struct bnx2i_hba *bnx2i_check_route(struct sockaddr *dst_addr)
1599 {
1600         struct sockaddr_in *desti = (struct sockaddr_in *) dst_addr;
1601         struct bnx2i_hba *hba;
1602         struct cnic_dev *cnic = NULL;
1603
1604         bnx2i_reg_dev_all();
1605
1606         hba = get_adapter_list_head();
1607         if (hba && hba->cnic)
1608                 cnic = hba->cnic->cm_select_dev(desti, CNIC_ULP_ISCSI);
1609         if (!cnic) {
1610                 printk(KERN_ALERT "bnx2i: no route,"
1611                        "can't connect using cnic\n");
1612                 goto no_nx2_route;
1613         }
1614         hba = bnx2i_find_hba_for_cnic(cnic);
1615         if (!hba)
1616                 goto no_nx2_route;
1617
1618         if (bnx2i_adapter_ready(hba)) {
1619                 printk(KERN_ALERT "bnx2i: check route, hba not found\n");
1620                 goto no_nx2_route;
1621         }
1622         if (hba->netdev->mtu > hba->mtu_supported) {
1623                 printk(KERN_ALERT "bnx2i: %s network i/f mtu is set to %d\n",
1624                                   hba->netdev->name, hba->netdev->mtu);
1625                 printk(KERN_ALERT "bnx2i: iSCSI HBA can support mtu of %d\n",
1626                                   hba->mtu_supported);
1627                 goto no_nx2_route;
1628         }
1629         return hba;
1630 no_nx2_route:
1631         return NULL;
1632 }
1633
1634
1635 /**
1636  * bnx2i_tear_down_conn - tear down iscsi/tcp connection and free resources
1637  * @hba:        pointer to adapter instance
1638  * @ep:         endpoint (transport indentifier) structure
1639  *
1640  * destroys cm_sock structure and on chip iscsi context
1641  */
1642 static int bnx2i_tear_down_conn(struct bnx2i_hba *hba,
1643                                  struct bnx2i_endpoint *ep)
1644 {
1645         if (test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic))
1646                 hba->cnic->cm_destroy(ep->cm_sk);
1647
1648         if (test_bit(ADAPTER_STATE_GOING_DOWN, &ep->hba->adapter_state))
1649                 ep->state = EP_STATE_DISCONN_COMPL;
1650
1651         if (test_bit(BNX2I_NX2_DEV_57710, &hba->cnic_dev_type) &&
1652             ep->state == EP_STATE_DISCONN_TIMEDOUT) {
1653                 printk(KERN_ALERT "bnx2i - ERROR - please submit GRC Dump,"
1654                                   " NW/PCIe trace, driver msgs to developers"
1655                                   " for analysis\n");
1656                 return 1;
1657         }
1658
1659         ep->state = EP_STATE_CLEANUP_START;
1660         init_timer(&ep->ofld_timer);
1661         ep->ofld_timer.expires = hba->conn_ctx_destroy_tmo + jiffies;
1662         ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1663         ep->ofld_timer.data = (unsigned long) ep;
1664         add_timer(&ep->ofld_timer);
1665
1666         bnx2i_ep_destroy_list_add(hba, ep);
1667
1668         /* destroy iSCSI context, wait for it to complete */
1669         bnx2i_send_conn_destroy(hba, ep);
1670         wait_event_interruptible(ep->ofld_wait,
1671                                  (ep->state != EP_STATE_CLEANUP_START));
1672
1673         if (signal_pending(current))
1674                 flush_signals(current);
1675         del_timer_sync(&ep->ofld_timer);
1676
1677         bnx2i_ep_destroy_list_del(hba, ep);
1678
1679         if (ep->state != EP_STATE_CLEANUP_CMPL)
1680                 /* should never happen */
1681                 printk(KERN_ALERT "bnx2i - conn destroy failed\n");
1682
1683         return 0;
1684 }
1685
1686
1687 /**
1688  * bnx2i_ep_connect - establish TCP connection to target portal
1689  * @shost:              scsi host
1690  * @dst_addr:           target IP address
1691  * @non_blocking:       blocking or non-blocking call
1692  *
1693  * this routine initiates the TCP/IP connection by invoking Option-2 i/f
1694  *      with l5_core and the CNIC. This is a multi-step process of resolving
1695  *      route to target, create a iscsi connection context, handshaking with
1696  *      CNIC module to create/initialize the socket struct and finally
1697  *      sending down option-2 request to complete TCP 3-way handshake
1698  */
1699 static struct iscsi_endpoint *bnx2i_ep_connect(struct Scsi_Host *shost,
1700                                                struct sockaddr *dst_addr,
1701                                                int non_blocking)
1702 {
1703         u32 iscsi_cid = BNX2I_CID_RESERVED;
1704         struct sockaddr_in *desti = (struct sockaddr_in *) dst_addr;
1705         struct sockaddr_in6 *desti6;
1706         struct bnx2i_endpoint *bnx2i_ep;
1707         struct bnx2i_hba *hba;
1708         struct cnic_dev *cnic;
1709         struct cnic_sockaddr saddr;
1710         struct iscsi_endpoint *ep;
1711         int rc = 0;
1712
1713         if (shost) {
1714                 /* driver is given scsi host to work with */
1715                 hba = iscsi_host_priv(shost);
1716                 /* Register the device with cnic if not already done so */
1717                 bnx2i_register_device(hba);
1718         } else
1719                 /*
1720                  * check if the given destination can be reached through
1721                  * a iscsi capable NetXtreme2 device
1722                  */
1723                 hba = bnx2i_check_route(dst_addr);
1724
1725         if (!hba || test_bit(ADAPTER_STATE_GOING_DOWN, &hba->adapter_state)) {
1726                 rc = -EINVAL;
1727                 goto nohba;
1728         }
1729
1730         cnic = hba->cnic;
1731         mutex_lock(&hba->net_dev_lock);
1732         ep = bnx2i_alloc_ep(hba);
1733         if (!ep) {
1734                 rc = -ENOMEM;
1735                 goto check_busy;
1736         }
1737         bnx2i_ep = ep->dd_data;
1738
1739         if (bnx2i_adapter_ready(hba)) {
1740                 rc = -EPERM;
1741                 goto net_if_down;
1742         }
1743
1744         bnx2i_ep->num_active_cmds = 0;
1745         iscsi_cid = bnx2i_alloc_iscsi_cid(hba);
1746         if (iscsi_cid == -1) {
1747                 printk(KERN_ALERT "alloc_ep: unable to allocate iscsi cid\n");
1748                 rc = -ENOMEM;
1749                 goto iscsi_cid_err;
1750         }
1751         bnx2i_ep->hba_age = hba->age;
1752
1753         rc = bnx2i_alloc_qp_resc(hba, bnx2i_ep);
1754         if (rc != 0) {
1755                 printk(KERN_ALERT "bnx2i: ep_conn, alloc QP resc error\n");
1756                 rc = -ENOMEM;
1757                 goto qp_resc_err;
1758         }
1759
1760         bnx2i_ep->ep_iscsi_cid = (u16)iscsi_cid;
1761         bnx2i_ep->state = EP_STATE_OFLD_START;
1762         bnx2i_ep_ofld_list_add(hba, bnx2i_ep);
1763
1764         init_timer(&bnx2i_ep->ofld_timer);
1765         bnx2i_ep->ofld_timer.expires = 2 * HZ + jiffies;
1766         bnx2i_ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1767         bnx2i_ep->ofld_timer.data = (unsigned long) bnx2i_ep;
1768         add_timer(&bnx2i_ep->ofld_timer);
1769
1770         bnx2i_send_conn_ofld_req(hba, bnx2i_ep);
1771
1772         /* Wait for CNIC hardware to setup conn context and return 'cid' */
1773         wait_event_interruptible(bnx2i_ep->ofld_wait,
1774                                  bnx2i_ep->state != EP_STATE_OFLD_START);
1775
1776         if (signal_pending(current))
1777                 flush_signals(current);
1778         del_timer_sync(&bnx2i_ep->ofld_timer);
1779
1780         bnx2i_ep_ofld_list_del(hba, bnx2i_ep);
1781
1782         if (bnx2i_ep->state != EP_STATE_OFLD_COMPL) {
1783                 rc = -ENOSPC;
1784                 goto conn_failed;
1785         }
1786
1787         rc = cnic->cm_create(cnic, CNIC_ULP_ISCSI, bnx2i_ep->ep_cid,
1788                              iscsi_cid, &bnx2i_ep->cm_sk, bnx2i_ep);
1789         if (rc) {
1790                 rc = -EINVAL;
1791                 goto conn_failed;
1792         }
1793
1794         bnx2i_ep->cm_sk->rcv_buf = 256 * 1024;
1795         bnx2i_ep->cm_sk->snd_buf = 256 * 1024;
1796         clear_bit(SK_TCP_TIMESTAMP, &bnx2i_ep->cm_sk->tcp_flags);
1797
1798         memset(&saddr, 0, sizeof(saddr));
1799         if (dst_addr->sa_family == AF_INET) {
1800                 desti = (struct sockaddr_in *) dst_addr;
1801                 saddr.remote.v4 = *desti;
1802                 saddr.local.v4.sin_family = desti->sin_family;
1803         } else if (dst_addr->sa_family == AF_INET6) {
1804                 desti6 = (struct sockaddr_in6 *) dst_addr;
1805                 saddr.remote.v6 = *desti6;
1806                 saddr.local.v6.sin6_family = desti6->sin6_family;
1807         }
1808
1809         bnx2i_ep->timestamp = jiffies;
1810         bnx2i_ep->state = EP_STATE_CONNECT_START;
1811         if (!test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic)) {
1812                 rc = -EINVAL;
1813                 goto conn_failed;
1814         } else
1815                 rc = cnic->cm_connect(bnx2i_ep->cm_sk, &saddr);
1816         if (rc)
1817                 goto release_ep;
1818
1819         bnx2i_ep_active_list_add(hba, bnx2i_ep);
1820
1821         if (bnx2i_map_ep_dbell_regs(bnx2i_ep))
1822                 goto del_active_ep;
1823
1824         mutex_unlock(&hba->net_dev_lock);
1825         return ep;
1826
1827 del_active_ep:
1828         bnx2i_ep_active_list_del(hba, bnx2i_ep);
1829 release_ep:
1830         if (bnx2i_tear_down_conn(hba, bnx2i_ep)) {
1831                 mutex_unlock(&hba->net_dev_lock);
1832                 return ERR_PTR(rc);
1833         }
1834 conn_failed:
1835 net_if_down:
1836 iscsi_cid_err:
1837         bnx2i_free_qp_resc(hba, bnx2i_ep);
1838 qp_resc_err:
1839         bnx2i_free_ep(ep);
1840 check_busy:
1841         mutex_unlock(&hba->net_dev_lock);
1842 nohba:
1843         bnx2i_unreg_dev_all();
1844         return ERR_PTR(rc);
1845 }
1846
1847
1848 /**
1849  * bnx2i_ep_poll - polls for TCP connection establishement
1850  * @ep:                 TCP connection (endpoint) handle
1851  * @timeout_ms:         timeout value in milli secs
1852  *
1853  * polls for TCP connect request to complete
1854  */
1855 static int bnx2i_ep_poll(struct iscsi_endpoint *ep, int timeout_ms)
1856 {
1857         struct bnx2i_endpoint *bnx2i_ep;
1858         int rc = 0;
1859
1860         bnx2i_ep = ep->dd_data;
1861         if ((bnx2i_ep->state == EP_STATE_IDLE) ||
1862             (bnx2i_ep->state == EP_STATE_CONNECT_FAILED) ||
1863             (bnx2i_ep->state == EP_STATE_OFLD_FAILED))
1864                 return -1;
1865         if (bnx2i_ep->state == EP_STATE_CONNECT_COMPL)
1866                 return 1;
1867
1868         rc = wait_event_interruptible_timeout(bnx2i_ep->ofld_wait,
1869                                               ((bnx2i_ep->state ==
1870                                                 EP_STATE_OFLD_FAILED) ||
1871                                                (bnx2i_ep->state ==
1872                                                 EP_STATE_CONNECT_FAILED) ||
1873                                                (bnx2i_ep->state ==
1874                                                 EP_STATE_CONNECT_COMPL)),
1875                                               msecs_to_jiffies(timeout_ms));
1876         if (bnx2i_ep->state == EP_STATE_OFLD_FAILED)
1877                 rc = -1;
1878
1879         if (rc > 0)
1880                 return 1;
1881         else if (!rc)
1882                 return 0;       /* timeout */
1883         else
1884                 return rc;
1885 }
1886
1887
1888 /**
1889  * bnx2i_ep_tcp_conn_active - check EP state transition
1890  * @ep:         endpoint pointer
1891  *
1892  * check if underlying TCP connection is active
1893  */
1894 static int bnx2i_ep_tcp_conn_active(struct bnx2i_endpoint *bnx2i_ep)
1895 {
1896         int ret;
1897         int cnic_dev_10g = 0;
1898
1899         if (test_bit(BNX2I_NX2_DEV_57710, &bnx2i_ep->hba->cnic_dev_type))
1900                 cnic_dev_10g = 1;
1901
1902         switch (bnx2i_ep->state) {
1903         case EP_STATE_CONNECT_START:
1904         case EP_STATE_CLEANUP_FAILED:
1905         case EP_STATE_OFLD_FAILED:
1906         case EP_STATE_DISCONN_TIMEDOUT:
1907                 ret = 0;
1908                 break;
1909         case EP_STATE_CONNECT_COMPL:
1910         case EP_STATE_ULP_UPDATE_START:
1911         case EP_STATE_ULP_UPDATE_COMPL:
1912         case EP_STATE_TCP_FIN_RCVD:
1913         case EP_STATE_LOGOUT_SENT:
1914         case EP_STATE_LOGOUT_RESP_RCVD:
1915         case EP_STATE_ULP_UPDATE_FAILED:
1916                 ret = 1;
1917                 break;
1918         case EP_STATE_TCP_RST_RCVD:
1919                 ret = 0;
1920                 break;
1921         case EP_STATE_CONNECT_FAILED:
1922                 if (cnic_dev_10g)
1923                         ret = 1;
1924                 else
1925                         ret = 0;
1926                 break;
1927         default:
1928                 ret = 0;
1929         }
1930
1931         return ret;
1932 }
1933
1934
1935 /*
1936  * bnx2i_hw_ep_disconnect - executes TCP connection teardown process in the hw
1937  * @ep:         TCP connection (bnx2i endpoint) handle
1938  *
1939  * executes  TCP connection teardown process
1940  */
1941 int bnx2i_hw_ep_disconnect(struct bnx2i_endpoint *bnx2i_ep)
1942 {
1943         struct bnx2i_hba *hba = bnx2i_ep->hba;
1944         struct cnic_dev *cnic;
1945         struct iscsi_session *session = NULL;
1946         struct iscsi_conn *conn = NULL;
1947         int ret = 0;
1948         int close = 0;
1949         int close_ret = 0;
1950
1951         if (!hba)
1952                 return 0;
1953
1954         cnic = hba->cnic;
1955         if (!cnic)
1956                 return 0;
1957
1958         if (!bnx2i_ep_tcp_conn_active(bnx2i_ep))
1959                 goto destroy_conn;
1960
1961         if (bnx2i_ep->conn) {
1962                 conn = bnx2i_ep->conn->cls_conn->dd_data;
1963                 session = conn->session;
1964         }
1965
1966         init_timer(&bnx2i_ep->ofld_timer);
1967         bnx2i_ep->ofld_timer.expires = hba->conn_teardown_tmo + jiffies;
1968         bnx2i_ep->ofld_timer.function = bnx2i_ep_ofld_timer;
1969         bnx2i_ep->ofld_timer.data = (unsigned long) bnx2i_ep;
1970         add_timer(&bnx2i_ep->ofld_timer);
1971
1972         if (!test_bit(BNX2I_CNIC_REGISTERED, &hba->reg_with_cnic))
1973                 goto out;
1974
1975         if (session) {
1976                 spin_lock_bh(&session->lock);
1977                 if (bnx2i_ep->state != EP_STATE_TCP_FIN_RCVD) {
1978                         if (session->state == ISCSI_STATE_LOGGING_OUT) {
1979                                 if (bnx2i_ep->state == EP_STATE_LOGOUT_SENT) {
1980                                         /* Logout sent, but no resp */
1981                                         printk(KERN_ALERT "bnx2i - WARNING "
1982                                                 "logout response was not "
1983                                                 "received!\n");
1984                                 } else if (bnx2i_ep->state ==
1985                                            EP_STATE_LOGOUT_RESP_RCVD)
1986                                         close = 1;
1987                         }
1988                 } else
1989                         close = 1;
1990
1991                 spin_unlock_bh(&session->lock);
1992         }
1993
1994         bnx2i_ep->state = EP_STATE_DISCONN_START;
1995
1996         if (close)
1997                 close_ret = cnic->cm_close(bnx2i_ep->cm_sk);
1998         else
1999                 close_ret = cnic->cm_abort(bnx2i_ep->cm_sk);
2000
2001         if (close_ret)
2002                 bnx2i_ep->state = EP_STATE_DISCONN_COMPL;
2003
2004         /* wait for option-2 conn teardown */
2005         wait_event_interruptible(bnx2i_ep->ofld_wait,
2006                                  bnx2i_ep->state != EP_STATE_DISCONN_START);
2007
2008         if (signal_pending(current))
2009                 flush_signals(current);
2010         del_timer_sync(&bnx2i_ep->ofld_timer);
2011
2012 destroy_conn:
2013         bnx2i_ep_active_list_del(hba, bnx2i_ep);
2014         if (bnx2i_tear_down_conn(hba, bnx2i_ep))
2015                 ret = -EINVAL;
2016 out:
2017         bnx2i_ep->state = EP_STATE_IDLE;
2018         return ret;
2019 }
2020
2021
2022 /**
2023  * bnx2i_ep_disconnect - executes TCP connection teardown process
2024  * @ep:         TCP connection (iscsi endpoint) handle
2025  *
2026  * executes  TCP connection teardown process
2027  */
2028 static void bnx2i_ep_disconnect(struct iscsi_endpoint *ep)
2029 {
2030         struct bnx2i_endpoint *bnx2i_ep;
2031         struct bnx2i_conn *bnx2i_conn = NULL;
2032         struct iscsi_conn *conn = NULL;
2033         struct bnx2i_hba *hba;
2034
2035         bnx2i_ep = ep->dd_data;
2036
2037         /* driver should not attempt connection cleanup until TCP_CONNECT
2038          * completes either successfully or fails. Timeout is 9-secs, so
2039          * wait for it to complete
2040          */
2041         while ((bnx2i_ep->state == EP_STATE_CONNECT_START) &&
2042                 !time_after(jiffies, bnx2i_ep->timestamp + (12 * HZ)))
2043                 msleep(250);
2044
2045         if (bnx2i_ep->conn) {
2046                 bnx2i_conn = bnx2i_ep->conn;
2047                 conn = bnx2i_conn->cls_conn->dd_data;
2048                 iscsi_suspend_queue(conn);
2049         }
2050         hba = bnx2i_ep->hba;
2051
2052         mutex_lock(&hba->net_dev_lock);
2053
2054         if (bnx2i_ep->state == EP_STATE_IDLE)
2055                 goto return_bnx2i_ep;
2056
2057         if (!test_bit(ADAPTER_STATE_UP, &hba->adapter_state))
2058                 goto free_resc;
2059
2060         if (bnx2i_ep->hba_age != hba->age)
2061                 goto free_resc;
2062
2063         /* Do all chip cleanup here */
2064         if (bnx2i_hw_ep_disconnect(bnx2i_ep)) {
2065                 mutex_unlock(&hba->net_dev_lock);
2066                 return;
2067         }
2068 free_resc:
2069         bnx2i_free_qp_resc(hba, bnx2i_ep);
2070 return_bnx2i_ep:
2071         if (bnx2i_conn)
2072                 bnx2i_conn->ep = NULL;
2073
2074         bnx2i_free_ep(ep);
2075         mutex_unlock(&hba->net_dev_lock);
2076         if (!hba->ofld_conns_active)
2077                 bnx2i_unreg_dev_all();
2078
2079         wake_up_interruptible(&hba->eh_wait);
2080 }
2081
2082
2083 /**
2084  * bnx2i_nl_set_path - ISCSI_UEVENT_PATH_UPDATE user message handler
2085  * @buf:        pointer to buffer containing iscsi path message
2086  *
2087  */
2088 static int bnx2i_nl_set_path(struct Scsi_Host *shost, struct iscsi_path *params)
2089 {
2090         struct bnx2i_hba *hba = iscsi_host_priv(shost);
2091         char *buf = (char *) params;
2092         u16 len = sizeof(*params);
2093
2094         /* handled by cnic driver */
2095         hba->cnic->iscsi_nl_msg_recv(hba->cnic, ISCSI_UEVENT_PATH_UPDATE, buf,
2096                                      len);
2097
2098         return 0;
2099 }
2100
2101
2102 /*
2103  * 'Scsi_Host_Template' structure and 'iscsi_tranport' structure template
2104  * used while registering with the scsi host and iSCSI transport module.
2105  */
2106 static struct scsi_host_template bnx2i_host_template = {
2107         .module                 = THIS_MODULE,
2108         .name                   = "Broadcom Offload iSCSI Initiator",
2109         .proc_name              = "bnx2i",
2110         .queuecommand           = iscsi_queuecommand,
2111         .eh_abort_handler       = iscsi_eh_abort,
2112         .eh_device_reset_handler = iscsi_eh_device_reset,
2113         .eh_target_reset_handler = iscsi_eh_recover_target,
2114         .change_queue_depth     = iscsi_change_queue_depth,
2115         .can_queue              = 1024,
2116         .max_sectors            = 127,
2117         .cmd_per_lun            = 32,
2118         .this_id                = -1,
2119         .use_clustering         = ENABLE_CLUSTERING,
2120         .sg_tablesize           = ISCSI_MAX_BDS_PER_CMD,
2121         .shost_attrs            = bnx2i_dev_attributes,
2122 };
2123
2124 struct iscsi_transport bnx2i_iscsi_transport = {
2125         .owner                  = THIS_MODULE,
2126         .name                   = "bnx2i",
2127         .caps                   = CAP_RECOVERY_L0 | CAP_HDRDGST |
2128                                   CAP_MULTI_R2T | CAP_DATADGST |
2129                                   CAP_DATA_PATH_OFFLOAD,
2130         .param_mask             = ISCSI_MAX_RECV_DLENGTH |
2131                                   ISCSI_MAX_XMIT_DLENGTH |
2132                                   ISCSI_HDRDGST_EN |
2133                                   ISCSI_DATADGST_EN |
2134                                   ISCSI_INITIAL_R2T_EN |
2135                                   ISCSI_MAX_R2T |
2136                                   ISCSI_IMM_DATA_EN |
2137                                   ISCSI_FIRST_BURST |
2138                                   ISCSI_MAX_BURST |
2139                                   ISCSI_PDU_INORDER_EN |
2140                                   ISCSI_DATASEQ_INORDER_EN |
2141                                   ISCSI_ERL |
2142                                   ISCSI_CONN_PORT |
2143                                   ISCSI_CONN_ADDRESS |
2144                                   ISCSI_EXP_STATSN |
2145                                   ISCSI_PERSISTENT_PORT |
2146                                   ISCSI_PERSISTENT_ADDRESS |
2147                                   ISCSI_TARGET_NAME | ISCSI_TPGT |
2148                                   ISCSI_USERNAME | ISCSI_PASSWORD |
2149                                   ISCSI_USERNAME_IN | ISCSI_PASSWORD_IN |
2150                                   ISCSI_FAST_ABORT | ISCSI_ABORT_TMO |
2151                                   ISCSI_LU_RESET_TMO | ISCSI_TGT_RESET_TMO |
2152                                   ISCSI_PING_TMO | ISCSI_RECV_TMO |
2153                                   ISCSI_IFACE_NAME | ISCSI_INITIATOR_NAME,
2154         .host_param_mask        = ISCSI_HOST_HWADDRESS | ISCSI_HOST_IPADDRESS |
2155                                   ISCSI_HOST_NETDEV_NAME,
2156         .create_session         = bnx2i_session_create,
2157         .destroy_session        = bnx2i_session_destroy,
2158         .create_conn            = bnx2i_conn_create,
2159         .bind_conn              = bnx2i_conn_bind,
2160         .destroy_conn           = bnx2i_conn_destroy,
2161         .set_param              = iscsi_set_param,
2162         .get_conn_param         = bnx2i_conn_get_param,
2163         .get_session_param      = iscsi_session_get_param,
2164         .get_host_param         = bnx2i_host_get_param,
2165         .start_conn             = bnx2i_conn_start,
2166         .stop_conn              = iscsi_conn_stop,
2167         .send_pdu               = iscsi_conn_send_pdu,
2168         .xmit_task              = bnx2i_task_xmit,
2169         .get_stats              = bnx2i_conn_get_stats,
2170         /* TCP connect - disconnect - option-2 interface calls */
2171         .ep_connect             = bnx2i_ep_connect,
2172         .ep_poll                = bnx2i_ep_poll,
2173         .ep_disconnect          = bnx2i_ep_disconnect,
2174         .set_path               = bnx2i_nl_set_path,
2175         /* Error recovery timeout call */
2176         .session_recovery_timedout = iscsi_session_recovery_timedout,
2177         .cleanup_task           = bnx2i_cleanup_task,
2178 };