1 /*- 2 * Copyright (c) 2014 Alexander Motin <mav@FreeBSD.org> 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer, 10 * without modification, immediately at the beginning of the file. 11 * 2. Redistributions in binary form must reproduce the above copyright 12 * notice, this list of conditions and the following disclaimer in the 13 * documentation and/or other materials provided with the distribution. 14 * 15 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 16 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 17 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 18 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 19 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 20 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 21 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 22 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 24 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 25 */ 26 27 #include <sys/cdefs.h> 28 __FBSDID("$FreeBSD$"); 29 30 #include <sys/param.h> 31 #include <sys/systm.h> 32 #include <sys/kernel.h> 33 #include <sys/types.h> 34 #include <sys/lock.h> 35 #include <sys/module.h> 36 #include <sys/mutex.h> 37 #include <sys/condvar.h> 38 #include <sys/malloc.h> 39 #include <sys/conf.h> 40 #include <sys/queue.h> 41 #include <sys/sysctl.h> 42 #include <machine/atomic.h> 43 44 #include <cam/cam.h> 45 #include <cam/scsi/scsi_all.h> 46 #include <cam/scsi/scsi_da.h> 47 #include <cam/ctl/ctl_io.h> 48 #include <cam/ctl/ctl.h> 49 #include <cam/ctl/ctl_frontend.h> 50 #include <cam/ctl/ctl_util.h> 51 #include <cam/ctl/ctl_backend.h> 52 #include <cam/ctl/ctl_ioctl.h> 53 #include <cam/ctl/ctl_ha.h> 54 #include <cam/ctl/ctl_private.h> 55 #include <cam/ctl/ctl_debug.h> 56 #include <cam/ctl/ctl_scsi_all.h> 57 #include <cam/ctl/ctl_tpc.h> 58 #include <cam/ctl/ctl_error.h> 59 60 #define TPC_MAX_CSCDS 64 61 #define TPC_MAX_SEGS 64 62 #define TPC_MAX_SEG 0 63 #define TPC_MAX_LIST 8192 64 #define TPC_MAX_INLINE 0 65 #define TPC_MAX_LISTS 255 66 #define TPC_MAX_IO_SIZE (1024 * 1024) 67 #define TPC_MAX_IOCHUNK_SIZE (TPC_MAX_IO_SIZE * 16) 68 #define TPC_MIN_TOKEN_TIMEOUT 1 69 #define TPC_DFL_TOKEN_TIMEOUT 60 70 #define TPC_MAX_TOKEN_TIMEOUT 600 71 72 MALLOC_DEFINE(M_CTL_TPC, "ctltpc", "CTL TPC"); 73 74 typedef enum { 75 TPC_ERR_RETRY = 0x000, 76 TPC_ERR_FAIL = 0x001, 77 TPC_ERR_MASK = 0x0ff, 78 TPC_ERR_NO_DECREMENT = 0x100 79 } tpc_error_action; 80 81 struct tpc_list; 82 TAILQ_HEAD(runl, tpc_io); 83 struct tpc_io { 84 union ctl_io *io; 85 uint8_t target; 86 uint32_t cscd; 87 uint64_t lun; 88 struct tpc_list *list; 89 struct runl run; 90 TAILQ_ENTRY(tpc_io) rlinks; 91 TAILQ_ENTRY(tpc_io) links; 92 }; 93 94 struct tpc_token { 95 uint8_t token[512]; 96 uint64_t lun; 97 uint32_t blocksize; 98 uint8_t *params; 99 struct scsi_range_desc *range; 100 int nrange; 101 int active; 102 time_t last_active; 103 uint32_t timeout; 104 TAILQ_ENTRY(tpc_token) links; 105 }; 106 107 struct tpc_list { 108 uint8_t service_action; 109 int init_port; 110 uint32_t init_idx; 111 uint32_t list_id; 112 uint8_t flags; 113 uint8_t *params; 114 struct scsi_ec_cscd *cscd; 115 struct scsi_ec_segment *seg[TPC_MAX_SEGS]; 116 uint8_t *inl; 117 int ncscd; 118 int nseg; 119 int leninl; 120 struct tpc_token *token; 121 struct scsi_range_desc *range; 122 int nrange; 123 off_t offset_into_rod; 124 125 int curseg; 126 off_t cursectors; 127 off_t curbytes; 128 int curops; 129 int stage; 130 uint8_t *buf; 131 off_t segsectors; 132 off_t segbytes; 133 int tbdio; 134 int error; 135 int abort; 136 int completed; 137 time_t last_active; 138 TAILQ_HEAD(, tpc_io) allio; 139 struct scsi_sense_data fwd_sense_data; 140 uint8_t fwd_sense_len; 141 uint8_t fwd_scsi_status; 142 uint8_t fwd_target; 143 uint16_t fwd_cscd; 144 struct scsi_sense_data sense_data; 145 uint8_t sense_len; 146 uint8_t scsi_status; 147 struct ctl_scsiio *ctsio; 148 struct ctl_lun *lun; 149 int res_token_valid; 150 uint8_t res_token[512]; 151 TAILQ_ENTRY(tpc_list) links; 152 }; 153 154 static void 155 tpc_timeout(void *arg) 156 { 157 struct ctl_softc *softc = arg; 158 struct ctl_lun *lun; 159 struct tpc_token *token, *ttoken; 160 struct tpc_list *list, *tlist; 161 162 /* Free completed lists with expired timeout. */ 163 STAILQ_FOREACH(lun, &softc->lun_list, links) { 164 mtx_lock(&lun->lun_lock); 165 TAILQ_FOREACH_SAFE(list, &lun->tpc_lists, links, tlist) { 166 if (!list->completed || time_uptime < list->last_active + 167 TPC_DFL_TOKEN_TIMEOUT) 168 continue; 169 TAILQ_REMOVE(&lun->tpc_lists, list, links); 170 free(list, M_CTL); 171 } 172 mtx_unlock(&lun->lun_lock); 173 } 174 175 /* Free inactive ROD tokens with expired timeout. */ 176 mtx_lock(&softc->tpc_lock); 177 TAILQ_FOREACH_SAFE(token, &softc->tpc_tokens, links, ttoken) { 178 if (token->active || 179 time_uptime < token->last_active + token->timeout + 1) 180 continue; 181 TAILQ_REMOVE(&softc->tpc_tokens, token, links); 182 free(token->params, M_CTL); 183 free(token, M_CTL); 184 } 185 mtx_unlock(&softc->tpc_lock); 186 callout_schedule(&softc->tpc_timeout, hz); 187 } 188 189 void 190 ctl_tpc_init(struct ctl_softc *softc) 191 { 192 193 mtx_init(&softc->tpc_lock, "CTL TPC mutex", NULL, MTX_DEF); 194 TAILQ_INIT(&softc->tpc_tokens); 195 callout_init_mtx(&softc->tpc_timeout, &softc->ctl_lock, 0); 196 callout_reset(&softc->tpc_timeout, hz, tpc_timeout, softc); 197 } 198 199 void 200 ctl_tpc_shutdown(struct ctl_softc *softc) 201 { 202 struct tpc_token *token; 203 204 callout_drain(&softc->tpc_timeout); 205 206 /* Free ROD tokens. */ 207 mtx_lock(&softc->tpc_lock); 208 while ((token = TAILQ_FIRST(&softc->tpc_tokens)) != NULL) { 209 TAILQ_REMOVE(&softc->tpc_tokens, token, links); 210 free(token->params, M_CTL); 211 free(token, M_CTL); 212 } 213 mtx_unlock(&softc->tpc_lock); 214 mtx_destroy(&softc->tpc_lock); 215 } 216 217 void 218 ctl_tpc_lun_init(struct ctl_lun *lun) 219 { 220 221 TAILQ_INIT(&lun->tpc_lists); 222 } 223 224 void 225 ctl_tpc_lun_shutdown(struct ctl_lun *lun) 226 { 227 struct ctl_softc *softc = lun->ctl_softc; 228 struct tpc_list *list; 229 struct tpc_token *token, *ttoken; 230 231 /* Free lists for this LUN. */ 232 while ((list = TAILQ_FIRST(&lun->tpc_lists)) != NULL) { 233 TAILQ_REMOVE(&lun->tpc_lists, list, links); 234 KASSERT(list->completed, 235 ("Not completed TPC (%p) on shutdown", list)); 236 free(list, M_CTL); 237 } 238 239 /* Free ROD tokens for this LUN. */ 240 mtx_lock(&softc->tpc_lock); 241 TAILQ_FOREACH_SAFE(token, &softc->tpc_tokens, links, ttoken) { 242 if (token->lun != lun->lun || token->active) 243 continue; 244 TAILQ_REMOVE(&softc->tpc_tokens, token, links); 245 free(token->params, M_CTL); 246 free(token, M_CTL); 247 } 248 mtx_unlock(&softc->tpc_lock); 249 } 250 251 int 252 ctl_inquiry_evpd_tpc(struct ctl_scsiio *ctsio, int alloc_len) 253 { 254 struct scsi_vpd_tpc *tpc_ptr; 255 struct scsi_vpd_tpc_descriptor *d_ptr; 256 struct scsi_vpd_tpc_descriptor_bdrl *bdrl_ptr; 257 struct scsi_vpd_tpc_descriptor_sc *sc_ptr; 258 struct scsi_vpd_tpc_descriptor_sc_descr *scd_ptr; 259 struct scsi_vpd_tpc_descriptor_pd *pd_ptr; 260 struct scsi_vpd_tpc_descriptor_sd *sd_ptr; 261 struct scsi_vpd_tpc_descriptor_sdid *sdid_ptr; 262 struct scsi_vpd_tpc_descriptor_rtf *rtf_ptr; 263 struct scsi_vpd_tpc_descriptor_rtf_block *rtfb_ptr; 264 struct scsi_vpd_tpc_descriptor_srt *srt_ptr; 265 struct scsi_vpd_tpc_descriptor_srtd *srtd_ptr; 266 struct scsi_vpd_tpc_descriptor_gco *gco_ptr; 267 struct ctl_lun *lun; 268 int data_len; 269 270 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 271 272 data_len = sizeof(struct scsi_vpd_tpc) + 273 sizeof(struct scsi_vpd_tpc_descriptor_bdrl) + 274 roundup2(sizeof(struct scsi_vpd_tpc_descriptor_sc) + 275 2 * sizeof(struct scsi_vpd_tpc_descriptor_sc_descr) + 11, 4) + 276 sizeof(struct scsi_vpd_tpc_descriptor_pd) + 277 roundup2(sizeof(struct scsi_vpd_tpc_descriptor_sd) + 4, 4) + 278 roundup2(sizeof(struct scsi_vpd_tpc_descriptor_sdid) + 2, 4) + 279 sizeof(struct scsi_vpd_tpc_descriptor_rtf) + 280 sizeof(struct scsi_vpd_tpc_descriptor_rtf_block) + 281 sizeof(struct scsi_vpd_tpc_descriptor_srt) + 282 2*sizeof(struct scsi_vpd_tpc_descriptor_srtd) + 283 sizeof(struct scsi_vpd_tpc_descriptor_gco); 284 285 ctsio->kern_data_ptr = malloc(data_len, M_CTL, M_WAITOK | M_ZERO); 286 tpc_ptr = (struct scsi_vpd_tpc *)ctsio->kern_data_ptr; 287 ctsio->kern_sg_entries = 0; 288 289 if (data_len < alloc_len) { 290 ctsio->residual = alloc_len - data_len; 291 ctsio->kern_data_len = data_len; 292 ctsio->kern_total_len = data_len; 293 } else { 294 ctsio->residual = 0; 295 ctsio->kern_data_len = alloc_len; 296 ctsio->kern_total_len = alloc_len; 297 } 298 ctsio->kern_data_resid = 0; 299 ctsio->kern_rel_offset = 0; 300 ctsio->kern_sg_entries = 0; 301 302 /* 303 * The control device is always connected. The disk device, on the 304 * other hand, may not be online all the time. 305 */ 306 if (lun != NULL) 307 tpc_ptr->device = (SID_QUAL_LU_CONNECTED << 5) | 308 lun->be_lun->lun_type; 309 else 310 tpc_ptr->device = (SID_QUAL_LU_OFFLINE << 5) | T_DIRECT; 311 tpc_ptr->page_code = SVPD_SCSI_TPC; 312 scsi_ulto2b(data_len - 4, tpc_ptr->page_length); 313 314 /* Block Device ROD Limits */ 315 d_ptr = (struct scsi_vpd_tpc_descriptor *)&tpc_ptr->descr[0]; 316 bdrl_ptr = (struct scsi_vpd_tpc_descriptor_bdrl *)d_ptr; 317 scsi_ulto2b(SVPD_TPC_BDRL, bdrl_ptr->desc_type); 318 scsi_ulto2b(sizeof(*bdrl_ptr) - 4, bdrl_ptr->desc_length); 319 scsi_ulto2b(TPC_MAX_SEGS, bdrl_ptr->maximum_ranges); 320 scsi_ulto4b(TPC_MAX_TOKEN_TIMEOUT, 321 bdrl_ptr->maximum_inactivity_timeout); 322 scsi_ulto4b(TPC_DFL_TOKEN_TIMEOUT, 323 bdrl_ptr->default_inactivity_timeout); 324 scsi_u64to8b(0, bdrl_ptr->maximum_token_transfer_size); 325 scsi_u64to8b(0, bdrl_ptr->optimal_transfer_count); 326 327 /* Supported commands */ 328 d_ptr = (struct scsi_vpd_tpc_descriptor *) 329 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 330 sc_ptr = (struct scsi_vpd_tpc_descriptor_sc *)d_ptr; 331 scsi_ulto2b(SVPD_TPC_SC, sc_ptr->desc_type); 332 sc_ptr->list_length = 2 * sizeof(*scd_ptr) + 11; 333 scsi_ulto2b(roundup2(1 + sc_ptr->list_length, 4), sc_ptr->desc_length); 334 scd_ptr = &sc_ptr->descr[0]; 335 scd_ptr->opcode = EXTENDED_COPY; 336 scd_ptr->sa_length = 5; 337 scd_ptr->supported_service_actions[0] = EC_EC_LID1; 338 scd_ptr->supported_service_actions[1] = EC_EC_LID4; 339 scd_ptr->supported_service_actions[2] = EC_PT; 340 scd_ptr->supported_service_actions[3] = EC_WUT; 341 scd_ptr->supported_service_actions[4] = EC_COA; 342 scd_ptr = (struct scsi_vpd_tpc_descriptor_sc_descr *) 343 &scd_ptr->supported_service_actions[scd_ptr->sa_length]; 344 scd_ptr->opcode = RECEIVE_COPY_STATUS; 345 scd_ptr->sa_length = 6; 346 scd_ptr->supported_service_actions[0] = RCS_RCS_LID1; 347 scd_ptr->supported_service_actions[1] = RCS_RCFD; 348 scd_ptr->supported_service_actions[2] = RCS_RCS_LID4; 349 scd_ptr->supported_service_actions[3] = RCS_RCOP; 350 scd_ptr->supported_service_actions[4] = RCS_RRTI; 351 scd_ptr->supported_service_actions[5] = RCS_RART; 352 353 /* Parameter data. */ 354 d_ptr = (struct scsi_vpd_tpc_descriptor *) 355 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 356 pd_ptr = (struct scsi_vpd_tpc_descriptor_pd *)d_ptr; 357 scsi_ulto2b(SVPD_TPC_PD, pd_ptr->desc_type); 358 scsi_ulto2b(sizeof(*pd_ptr) - 4, pd_ptr->desc_length); 359 scsi_ulto2b(TPC_MAX_CSCDS, pd_ptr->maximum_cscd_descriptor_count); 360 scsi_ulto2b(TPC_MAX_SEGS, pd_ptr->maximum_segment_descriptor_count); 361 scsi_ulto4b(TPC_MAX_LIST, pd_ptr->maximum_descriptor_list_length); 362 scsi_ulto4b(TPC_MAX_INLINE, pd_ptr->maximum_inline_data_length); 363 364 /* Supported Descriptors */ 365 d_ptr = (struct scsi_vpd_tpc_descriptor *) 366 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 367 sd_ptr = (struct scsi_vpd_tpc_descriptor_sd *)d_ptr; 368 scsi_ulto2b(SVPD_TPC_SD, sd_ptr->desc_type); 369 scsi_ulto2b(roundup2(sizeof(*sd_ptr) - 4 + 4, 4), sd_ptr->desc_length); 370 sd_ptr->list_length = 4; 371 sd_ptr->supported_descriptor_codes[0] = EC_SEG_B2B; 372 sd_ptr->supported_descriptor_codes[1] = EC_SEG_VERIFY; 373 sd_ptr->supported_descriptor_codes[2] = EC_SEG_REGISTER_KEY; 374 sd_ptr->supported_descriptor_codes[3] = EC_CSCD_ID; 375 376 /* Supported CSCD Descriptor IDs */ 377 d_ptr = (struct scsi_vpd_tpc_descriptor *) 378 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 379 sdid_ptr = (struct scsi_vpd_tpc_descriptor_sdid *)d_ptr; 380 scsi_ulto2b(SVPD_TPC_SDID, sdid_ptr->desc_type); 381 scsi_ulto2b(roundup2(sizeof(*sdid_ptr) - 4 + 2, 4), sdid_ptr->desc_length); 382 scsi_ulto2b(2, sdid_ptr->list_length); 383 scsi_ulto2b(0xffff, &sdid_ptr->supported_descriptor_ids[0]); 384 385 /* ROD Token Features */ 386 d_ptr = (struct scsi_vpd_tpc_descriptor *) 387 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 388 rtf_ptr = (struct scsi_vpd_tpc_descriptor_rtf *)d_ptr; 389 scsi_ulto2b(SVPD_TPC_RTF, rtf_ptr->desc_type); 390 scsi_ulto2b(sizeof(*rtf_ptr) - 4 + sizeof(*rtfb_ptr), rtf_ptr->desc_length); 391 rtf_ptr->remote_tokens = 0; 392 scsi_ulto4b(TPC_MIN_TOKEN_TIMEOUT, rtf_ptr->minimum_token_lifetime); 393 scsi_ulto4b(UINT32_MAX, rtf_ptr->maximum_token_lifetime); 394 scsi_ulto4b(TPC_MAX_TOKEN_TIMEOUT, 395 rtf_ptr->maximum_token_inactivity_timeout); 396 scsi_ulto2b(sizeof(*rtfb_ptr), rtf_ptr->type_specific_features_length); 397 rtfb_ptr = (struct scsi_vpd_tpc_descriptor_rtf_block *) 398 &rtf_ptr->type_specific_features; 399 rtfb_ptr->type_format = SVPD_TPC_RTF_BLOCK; 400 scsi_ulto2b(sizeof(*rtfb_ptr) - 4, rtfb_ptr->desc_length); 401 scsi_ulto2b(0, rtfb_ptr->optimal_length_granularity); 402 scsi_u64to8b(0, rtfb_ptr->maximum_bytes); 403 scsi_u64to8b(0, rtfb_ptr->optimal_bytes); 404 scsi_u64to8b(UINT64_MAX, rtfb_ptr->optimal_bytes_to_token_per_segment); 405 scsi_u64to8b(TPC_MAX_IOCHUNK_SIZE, 406 rtfb_ptr->optimal_bytes_from_token_per_segment); 407 408 /* Supported ROD Tokens */ 409 d_ptr = (struct scsi_vpd_tpc_descriptor *) 410 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 411 srt_ptr = (struct scsi_vpd_tpc_descriptor_srt *)d_ptr; 412 scsi_ulto2b(SVPD_TPC_SRT, srt_ptr->desc_type); 413 scsi_ulto2b(sizeof(*srt_ptr) - 4 + 2*sizeof(*srtd_ptr), srt_ptr->desc_length); 414 scsi_ulto2b(2*sizeof(*srtd_ptr), srt_ptr->rod_type_descriptors_length); 415 srtd_ptr = (struct scsi_vpd_tpc_descriptor_srtd *) 416 &srt_ptr->rod_type_descriptors; 417 scsi_ulto4b(ROD_TYPE_AUR, srtd_ptr->rod_type); 418 srtd_ptr->flags = SVPD_TPC_SRTD_TIN | SVPD_TPC_SRTD_TOUT; 419 scsi_ulto2b(0, srtd_ptr->preference_indicator); 420 srtd_ptr++; 421 scsi_ulto4b(ROD_TYPE_BLOCK_ZERO, srtd_ptr->rod_type); 422 srtd_ptr->flags = SVPD_TPC_SRTD_TIN; 423 scsi_ulto2b(0, srtd_ptr->preference_indicator); 424 425 /* General Copy Operations */ 426 d_ptr = (struct scsi_vpd_tpc_descriptor *) 427 (&d_ptr->parameters[0] + scsi_2btoul(d_ptr->desc_length)); 428 gco_ptr = (struct scsi_vpd_tpc_descriptor_gco *)d_ptr; 429 scsi_ulto2b(SVPD_TPC_GCO, gco_ptr->desc_type); 430 scsi_ulto2b(sizeof(*gco_ptr) - 4, gco_ptr->desc_length); 431 scsi_ulto4b(TPC_MAX_LISTS, gco_ptr->total_concurrent_copies); 432 scsi_ulto4b(TPC_MAX_LISTS, gco_ptr->maximum_identified_concurrent_copies); 433 scsi_ulto4b(TPC_MAX_SEG, gco_ptr->maximum_segment_length); 434 gco_ptr->data_segment_granularity = 0; 435 gco_ptr->inline_data_granularity = 0; 436 437 ctl_set_success(ctsio); 438 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 439 ctsio->be_move_done = ctl_config_move_done; 440 ctl_datamove((union ctl_io *)ctsio); 441 442 return (CTL_RETVAL_COMPLETE); 443 } 444 445 int 446 ctl_receive_copy_operating_parameters(struct ctl_scsiio *ctsio) 447 { 448 struct scsi_receive_copy_operating_parameters *cdb; 449 struct scsi_receive_copy_operating_parameters_data *data; 450 int retval; 451 int alloc_len, total_len; 452 453 CTL_DEBUG_PRINT(("ctl_report_supported_tmf\n")); 454 455 cdb = (struct scsi_receive_copy_operating_parameters *)ctsio->cdb; 456 457 retval = CTL_RETVAL_COMPLETE; 458 459 total_len = sizeof(*data) + 4; 460 alloc_len = scsi_4btoul(cdb->length); 461 462 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 463 464 ctsio->kern_sg_entries = 0; 465 466 if (total_len < alloc_len) { 467 ctsio->residual = alloc_len - total_len; 468 ctsio->kern_data_len = total_len; 469 ctsio->kern_total_len = total_len; 470 } else { 471 ctsio->residual = 0; 472 ctsio->kern_data_len = alloc_len; 473 ctsio->kern_total_len = alloc_len; 474 } 475 ctsio->kern_data_resid = 0; 476 ctsio->kern_rel_offset = 0; 477 478 data = (struct scsi_receive_copy_operating_parameters_data *)ctsio->kern_data_ptr; 479 scsi_ulto4b(sizeof(*data) - 4 + 4, data->length); 480 data->snlid = RCOP_SNLID; 481 scsi_ulto2b(TPC_MAX_CSCDS, data->maximum_cscd_descriptor_count); 482 scsi_ulto2b(TPC_MAX_SEGS, data->maximum_segment_descriptor_count); 483 scsi_ulto4b(TPC_MAX_LIST, data->maximum_descriptor_list_length); 484 scsi_ulto4b(TPC_MAX_SEG, data->maximum_segment_length); 485 scsi_ulto4b(TPC_MAX_INLINE, data->maximum_inline_data_length); 486 scsi_ulto4b(0, data->held_data_limit); 487 scsi_ulto4b(0, data->maximum_stream_device_transfer_size); 488 scsi_ulto2b(TPC_MAX_LISTS, data->total_concurrent_copies); 489 data->maximum_concurrent_copies = TPC_MAX_LISTS; 490 data->data_segment_granularity = 0; 491 data->inline_data_granularity = 0; 492 data->held_data_granularity = 0; 493 data->implemented_descriptor_list_length = 4; 494 data->list_of_implemented_descriptor_type_codes[0] = EC_SEG_B2B; 495 data->list_of_implemented_descriptor_type_codes[1] = EC_SEG_VERIFY; 496 data->list_of_implemented_descriptor_type_codes[2] = EC_SEG_REGISTER_KEY; 497 data->list_of_implemented_descriptor_type_codes[3] = EC_CSCD_ID; 498 499 ctl_set_success(ctsio); 500 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 501 ctsio->be_move_done = ctl_config_move_done; 502 ctl_datamove((union ctl_io *)ctsio); 503 return (retval); 504 } 505 506 static struct tpc_list * 507 tpc_find_list(struct ctl_lun *lun, uint32_t list_id, uint32_t init_idx) 508 { 509 struct tpc_list *list; 510 511 mtx_assert(&lun->lun_lock, MA_OWNED); 512 TAILQ_FOREACH(list, &lun->tpc_lists, links) { 513 if ((list->flags & EC_LIST_ID_USAGE_MASK) != 514 EC_LIST_ID_USAGE_NONE && list->list_id == list_id && 515 list->init_idx == init_idx) 516 break; 517 } 518 return (list); 519 } 520 521 int 522 ctl_receive_copy_status_lid1(struct ctl_scsiio *ctsio) 523 { 524 struct ctl_lun *lun; 525 struct scsi_receive_copy_status_lid1 *cdb; 526 struct scsi_receive_copy_status_lid1_data *data; 527 struct tpc_list *list; 528 struct tpc_list list_copy; 529 int retval; 530 int alloc_len, total_len; 531 uint32_t list_id; 532 533 CTL_DEBUG_PRINT(("ctl_receive_copy_status_lid1\n")); 534 535 cdb = (struct scsi_receive_copy_status_lid1 *)ctsio->cdb; 536 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 537 538 retval = CTL_RETVAL_COMPLETE; 539 540 list_id = cdb->list_identifier; 541 mtx_lock(&lun->lun_lock); 542 list = tpc_find_list(lun, list_id, 543 ctl_get_initindex(&ctsio->io_hdr.nexus)); 544 if (list == NULL) { 545 mtx_unlock(&lun->lun_lock); 546 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 547 /*command*/ 1, /*field*/ 2, /*bit_valid*/ 0, 548 /*bit*/ 0); 549 ctl_done((union ctl_io *)ctsio); 550 return (retval); 551 } 552 list_copy = *list; 553 if (list->completed) { 554 TAILQ_REMOVE(&lun->tpc_lists, list, links); 555 free(list, M_CTL); 556 } 557 mtx_unlock(&lun->lun_lock); 558 559 total_len = sizeof(*data); 560 alloc_len = scsi_4btoul(cdb->length); 561 562 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 563 564 ctsio->kern_sg_entries = 0; 565 566 if (total_len < alloc_len) { 567 ctsio->residual = alloc_len - total_len; 568 ctsio->kern_data_len = total_len; 569 ctsio->kern_total_len = total_len; 570 } else { 571 ctsio->residual = 0; 572 ctsio->kern_data_len = alloc_len; 573 ctsio->kern_total_len = alloc_len; 574 } 575 ctsio->kern_data_resid = 0; 576 ctsio->kern_rel_offset = 0; 577 578 data = (struct scsi_receive_copy_status_lid1_data *)ctsio->kern_data_ptr; 579 scsi_ulto4b(sizeof(*data) - 4, data->available_data); 580 if (list_copy.completed) { 581 if (list_copy.error || list_copy.abort) 582 data->copy_command_status = RCS_CCS_ERROR; 583 else 584 data->copy_command_status = RCS_CCS_COMPLETED; 585 } else 586 data->copy_command_status = RCS_CCS_INPROG; 587 scsi_ulto2b(list_copy.curseg, data->segments_processed); 588 if (list_copy.curbytes <= UINT32_MAX) { 589 data->transfer_count_units = RCS_TC_BYTES; 590 scsi_ulto4b(list_copy.curbytes, data->transfer_count); 591 } else { 592 data->transfer_count_units = RCS_TC_MBYTES; 593 scsi_ulto4b(list_copy.curbytes >> 20, data->transfer_count); 594 } 595 596 ctl_set_success(ctsio); 597 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 598 ctsio->be_move_done = ctl_config_move_done; 599 ctl_datamove((union ctl_io *)ctsio); 600 return (retval); 601 } 602 603 int 604 ctl_receive_copy_failure_details(struct ctl_scsiio *ctsio) 605 { 606 struct ctl_lun *lun; 607 struct scsi_receive_copy_failure_details *cdb; 608 struct scsi_receive_copy_failure_details_data *data; 609 struct tpc_list *list; 610 struct tpc_list list_copy; 611 int retval; 612 int alloc_len, total_len; 613 uint32_t list_id; 614 615 CTL_DEBUG_PRINT(("ctl_receive_copy_failure_details\n")); 616 617 cdb = (struct scsi_receive_copy_failure_details *)ctsio->cdb; 618 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 619 620 retval = CTL_RETVAL_COMPLETE; 621 622 list_id = cdb->list_identifier; 623 mtx_lock(&lun->lun_lock); 624 list = tpc_find_list(lun, list_id, 625 ctl_get_initindex(&ctsio->io_hdr.nexus)); 626 if (list == NULL || !list->completed) { 627 mtx_unlock(&lun->lun_lock); 628 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 629 /*command*/ 1, /*field*/ 2, /*bit_valid*/ 0, 630 /*bit*/ 0); 631 ctl_done((union ctl_io *)ctsio); 632 return (retval); 633 } 634 list_copy = *list; 635 TAILQ_REMOVE(&lun->tpc_lists, list, links); 636 free(list, M_CTL); 637 mtx_unlock(&lun->lun_lock); 638 639 total_len = sizeof(*data) + list_copy.sense_len; 640 alloc_len = scsi_4btoul(cdb->length); 641 642 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 643 644 ctsio->kern_sg_entries = 0; 645 646 if (total_len < alloc_len) { 647 ctsio->residual = alloc_len - total_len; 648 ctsio->kern_data_len = total_len; 649 ctsio->kern_total_len = total_len; 650 } else { 651 ctsio->residual = 0; 652 ctsio->kern_data_len = alloc_len; 653 ctsio->kern_total_len = alloc_len; 654 } 655 ctsio->kern_data_resid = 0; 656 ctsio->kern_rel_offset = 0; 657 658 data = (struct scsi_receive_copy_failure_details_data *)ctsio->kern_data_ptr; 659 if (list_copy.completed && (list_copy.error || list_copy.abort)) { 660 scsi_ulto4b(sizeof(*data) - 4 + list_copy.sense_len, 661 data->available_data); 662 data->copy_command_status = RCS_CCS_ERROR; 663 } else 664 scsi_ulto4b(0, data->available_data); 665 scsi_ulto2b(list_copy.sense_len, data->sense_data_length); 666 memcpy(data->sense_data, &list_copy.sense_data, list_copy.sense_len); 667 668 ctl_set_success(ctsio); 669 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 670 ctsio->be_move_done = ctl_config_move_done; 671 ctl_datamove((union ctl_io *)ctsio); 672 return (retval); 673 } 674 675 int 676 ctl_receive_copy_status_lid4(struct ctl_scsiio *ctsio) 677 { 678 struct ctl_lun *lun; 679 struct scsi_receive_copy_status_lid4 *cdb; 680 struct scsi_receive_copy_status_lid4_data *data; 681 struct tpc_list *list; 682 struct tpc_list list_copy; 683 int retval; 684 int alloc_len, total_len; 685 uint32_t list_id; 686 687 CTL_DEBUG_PRINT(("ctl_receive_copy_status_lid4\n")); 688 689 cdb = (struct scsi_receive_copy_status_lid4 *)ctsio->cdb; 690 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 691 692 retval = CTL_RETVAL_COMPLETE; 693 694 list_id = scsi_4btoul(cdb->list_identifier); 695 mtx_lock(&lun->lun_lock); 696 list = tpc_find_list(lun, list_id, 697 ctl_get_initindex(&ctsio->io_hdr.nexus)); 698 if (list == NULL) { 699 mtx_unlock(&lun->lun_lock); 700 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 701 /*command*/ 1, /*field*/ 2, /*bit_valid*/ 0, 702 /*bit*/ 0); 703 ctl_done((union ctl_io *)ctsio); 704 return (retval); 705 } 706 list_copy = *list; 707 if (list->completed) { 708 TAILQ_REMOVE(&lun->tpc_lists, list, links); 709 free(list, M_CTL); 710 } 711 mtx_unlock(&lun->lun_lock); 712 713 total_len = sizeof(*data) + list_copy.sense_len; 714 alloc_len = scsi_4btoul(cdb->length); 715 716 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 717 718 ctsio->kern_sg_entries = 0; 719 720 if (total_len < alloc_len) { 721 ctsio->residual = alloc_len - total_len; 722 ctsio->kern_data_len = total_len; 723 ctsio->kern_total_len = total_len; 724 } else { 725 ctsio->residual = 0; 726 ctsio->kern_data_len = alloc_len; 727 ctsio->kern_total_len = alloc_len; 728 } 729 ctsio->kern_data_resid = 0; 730 ctsio->kern_rel_offset = 0; 731 732 data = (struct scsi_receive_copy_status_lid4_data *)ctsio->kern_data_ptr; 733 scsi_ulto4b(sizeof(*data) - 4 + list_copy.sense_len, 734 data->available_data); 735 data->response_to_service_action = list_copy.service_action; 736 if (list_copy.completed) { 737 if (list_copy.error) 738 data->copy_command_status = RCS_CCS_ERROR; 739 else if (list_copy.abort) 740 data->copy_command_status = RCS_CCS_ABORTED; 741 else 742 data->copy_command_status = RCS_CCS_COMPLETED; 743 } else 744 data->copy_command_status = RCS_CCS_INPROG_FG; 745 scsi_ulto2b(list_copy.curops, data->operation_counter); 746 scsi_ulto4b(UINT32_MAX, data->estimated_status_update_delay); 747 data->transfer_count_units = RCS_TC_BYTES; 748 scsi_u64to8b(list_copy.curbytes, data->transfer_count); 749 scsi_ulto2b(list_copy.curseg, data->segments_processed); 750 data->length_of_the_sense_data_field = list_copy.sense_len; 751 data->sense_data_length = list_copy.sense_len; 752 memcpy(data->sense_data, &list_copy.sense_data, list_copy.sense_len); 753 754 ctl_set_success(ctsio); 755 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 756 ctsio->be_move_done = ctl_config_move_done; 757 ctl_datamove((union ctl_io *)ctsio); 758 return (retval); 759 } 760 761 int 762 ctl_copy_operation_abort(struct ctl_scsiio *ctsio) 763 { 764 struct ctl_lun *lun; 765 struct scsi_copy_operation_abort *cdb; 766 struct tpc_list *list; 767 int retval; 768 uint32_t list_id; 769 770 CTL_DEBUG_PRINT(("ctl_copy_operation_abort\n")); 771 772 cdb = (struct scsi_copy_operation_abort *)ctsio->cdb; 773 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 774 775 retval = CTL_RETVAL_COMPLETE; 776 777 list_id = scsi_4btoul(cdb->list_identifier); 778 mtx_lock(&lun->lun_lock); 779 list = tpc_find_list(lun, list_id, 780 ctl_get_initindex(&ctsio->io_hdr.nexus)); 781 if (list == NULL) { 782 mtx_unlock(&lun->lun_lock); 783 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 784 /*command*/ 1, /*field*/ 2, /*bit_valid*/ 0, 785 /*bit*/ 0); 786 ctl_done((union ctl_io *)ctsio); 787 return (retval); 788 } 789 list->abort = 1; 790 mtx_unlock(&lun->lun_lock); 791 792 ctl_set_success(ctsio); 793 ctl_done((union ctl_io *)ctsio); 794 return (retval); 795 } 796 797 static uint64_t 798 tpc_resolve(struct tpc_list *list, uint16_t idx, uint32_t *ss, 799 uint32_t *pb, uint32_t *pbo) 800 { 801 802 if (idx == 0xffff) { 803 if (ss && list->lun->be_lun) 804 *ss = list->lun->be_lun->blocksize; 805 if (pb && list->lun->be_lun) 806 *pb = list->lun->be_lun->blocksize << 807 list->lun->be_lun->pblockexp; 808 if (pbo && list->lun->be_lun) 809 *pbo = list->lun->be_lun->blocksize * 810 list->lun->be_lun->pblockoff; 811 return (list->lun->lun); 812 } 813 if (idx >= list->ncscd) 814 return (UINT64_MAX); 815 return (tpcl_resolve(list->lun->ctl_softc, 816 list->init_port, &list->cscd[idx], ss, pb, pbo)); 817 } 818 819 static void 820 tpc_set_io_error_sense(struct tpc_list *list) 821 { 822 int flen; 823 uint8_t csi[4]; 824 uint8_t sks[3]; 825 uint8_t fbuf[4 + 64]; 826 827 scsi_ulto4b(list->curseg, csi); 828 if (list->fwd_cscd <= 0x07ff) { 829 sks[0] = SSD_SKS_SEGMENT_VALID; 830 scsi_ulto2b((uint8_t *)&list->cscd[list->fwd_cscd] - 831 list->params, &sks[1]); 832 } else 833 sks[0] = 0; 834 if (list->fwd_scsi_status) { 835 fbuf[0] = 0x0c; 836 fbuf[2] = list->fwd_target; 837 flen = list->fwd_sense_len; 838 if (flen > 64) { 839 flen = 64; 840 fbuf[2] |= SSD_FORWARDED_FSDT; 841 } 842 fbuf[1] = 2 + flen; 843 fbuf[3] = list->fwd_scsi_status; 844 bcopy(&list->fwd_sense_data, &fbuf[4], flen); 845 flen += 4; 846 } else 847 flen = 0; 848 ctl_set_sense(list->ctsio, /*current_error*/ 1, 849 /*sense_key*/ SSD_KEY_COPY_ABORTED, 850 /*asc*/ 0x0d, /*ascq*/ 0x01, 851 SSD_ELEM_COMMAND, sizeof(csi), csi, 852 sks[0] ? SSD_ELEM_SKS : SSD_ELEM_SKIP, sizeof(sks), sks, 853 flen ? SSD_ELEM_DESC : SSD_ELEM_SKIP, flen, fbuf, 854 SSD_ELEM_NONE); 855 } 856 857 static int 858 tpc_process_b2b(struct tpc_list *list) 859 { 860 struct scsi_ec_segment_b2b *seg; 861 struct scsi_ec_cscd_dtsp *sdstp, *ddstp; 862 struct tpc_io *tior, *tiow; 863 struct runl run; 864 uint64_t sl, dl; 865 off_t srclba, dstlba, numbytes, donebytes, roundbytes; 866 int numlba; 867 uint32_t srcblock, dstblock, pb, pbo, adj; 868 uint16_t scscd, dcscd; 869 uint8_t csi[4]; 870 871 scsi_ulto4b(list->curseg, csi); 872 if (list->stage == 1) { 873 while ((tior = TAILQ_FIRST(&list->allio)) != NULL) { 874 TAILQ_REMOVE(&list->allio, tior, links); 875 ctl_free_io(tior->io); 876 free(tior, M_CTL); 877 } 878 free(list->buf, M_CTL); 879 if (list->abort) { 880 ctl_set_task_aborted(list->ctsio); 881 return (CTL_RETVAL_ERROR); 882 } else if (list->error) { 883 tpc_set_io_error_sense(list); 884 return (CTL_RETVAL_ERROR); 885 } 886 list->cursectors += list->segsectors; 887 list->curbytes += list->segbytes; 888 return (CTL_RETVAL_COMPLETE); 889 } 890 891 TAILQ_INIT(&list->allio); 892 seg = (struct scsi_ec_segment_b2b *)list->seg[list->curseg]; 893 scscd = scsi_2btoul(seg->src_cscd); 894 dcscd = scsi_2btoul(seg->dst_cscd); 895 sl = tpc_resolve(list, scscd, &srcblock, NULL, NULL); 896 dl = tpc_resolve(list, dcscd, &dstblock, &pb, &pbo); 897 if (sl == UINT64_MAX || dl == UINT64_MAX) { 898 ctl_set_sense(list->ctsio, /*current_error*/ 1, 899 /*sense_key*/ SSD_KEY_COPY_ABORTED, 900 /*asc*/ 0x08, /*ascq*/ 0x04, 901 SSD_ELEM_COMMAND, sizeof(csi), csi, 902 SSD_ELEM_NONE); 903 return (CTL_RETVAL_ERROR); 904 } 905 if (pbo > 0) 906 pbo = pb - pbo; 907 sdstp = &list->cscd[scscd].dtsp; 908 if (scsi_3btoul(sdstp->block_length) != 0) 909 srcblock = scsi_3btoul(sdstp->block_length); 910 ddstp = &list->cscd[dcscd].dtsp; 911 if (scsi_3btoul(ddstp->block_length) != 0) 912 dstblock = scsi_3btoul(ddstp->block_length); 913 numlba = scsi_2btoul(seg->number_of_blocks); 914 if (seg->flags & EC_SEG_DC) 915 numbytes = (off_t)numlba * dstblock; 916 else 917 numbytes = (off_t)numlba * srcblock; 918 srclba = scsi_8btou64(seg->src_lba); 919 dstlba = scsi_8btou64(seg->dst_lba); 920 921 // printf("Copy %ju bytes from %ju @ %ju to %ju @ %ju\n", 922 // (uintmax_t)numbytes, sl, scsi_8btou64(seg->src_lba), 923 // dl, scsi_8btou64(seg->dst_lba)); 924 925 if (numbytes == 0) 926 return (CTL_RETVAL_COMPLETE); 927 928 if (numbytes % srcblock != 0 || numbytes % dstblock != 0) { 929 ctl_set_sense(list->ctsio, /*current_error*/ 1, 930 /*sense_key*/ SSD_KEY_COPY_ABORTED, 931 /*asc*/ 0x26, /*ascq*/ 0x0A, 932 SSD_ELEM_COMMAND, sizeof(csi), csi, 933 SSD_ELEM_NONE); 934 return (CTL_RETVAL_ERROR); 935 } 936 937 list->buf = malloc(numbytes, M_CTL, M_WAITOK); 938 list->segbytes = numbytes; 939 list->segsectors = numbytes / dstblock; 940 donebytes = 0; 941 TAILQ_INIT(&run); 942 list->tbdio = 0; 943 while (donebytes < numbytes) { 944 roundbytes = numbytes - donebytes; 945 if (roundbytes > TPC_MAX_IO_SIZE) { 946 roundbytes = TPC_MAX_IO_SIZE; 947 roundbytes -= roundbytes % dstblock; 948 if (pb > dstblock) { 949 adj = (dstlba * dstblock + roundbytes - pbo) % pb; 950 if (roundbytes > adj) 951 roundbytes -= adj; 952 } 953 } 954 955 tior = malloc(sizeof(*tior), M_CTL, M_WAITOK | M_ZERO); 956 TAILQ_INIT(&tior->run); 957 tior->list = list; 958 TAILQ_INSERT_TAIL(&list->allio, tior, links); 959 tior->io = tpcl_alloc_io(); 960 ctl_scsi_read_write(tior->io, 961 /*data_ptr*/ &list->buf[donebytes], 962 /*data_len*/ roundbytes, 963 /*read_op*/ 1, 964 /*byte2*/ 0, 965 /*minimum_cdb_size*/ 0, 966 /*lba*/ srclba, 967 /*num_blocks*/ roundbytes / srcblock, 968 /*tag_type*/ CTL_TAG_SIMPLE, 969 /*control*/ 0); 970 tior->io->io_hdr.retries = 3; 971 tior->target = SSD_FORWARDED_SDS_EXSRC; 972 tior->cscd = scscd; 973 tior->lun = sl; 974 tior->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tior; 975 976 tiow = malloc(sizeof(*tior), M_CTL, M_WAITOK | M_ZERO); 977 TAILQ_INIT(&tiow->run); 978 tiow->list = list; 979 TAILQ_INSERT_TAIL(&list->allio, tiow, links); 980 tiow->io = tpcl_alloc_io(); 981 ctl_scsi_read_write(tiow->io, 982 /*data_ptr*/ &list->buf[donebytes], 983 /*data_len*/ roundbytes, 984 /*read_op*/ 0, 985 /*byte2*/ 0, 986 /*minimum_cdb_size*/ 0, 987 /*lba*/ dstlba, 988 /*num_blocks*/ roundbytes / dstblock, 989 /*tag_type*/ CTL_TAG_SIMPLE, 990 /*control*/ 0); 991 tiow->io->io_hdr.retries = 3; 992 tiow->target = SSD_FORWARDED_SDS_EXDST; 993 tiow->cscd = dcscd; 994 tiow->lun = dl; 995 tiow->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tiow; 996 997 TAILQ_INSERT_TAIL(&tior->run, tiow, rlinks); 998 TAILQ_INSERT_TAIL(&run, tior, rlinks); 999 list->tbdio++; 1000 donebytes += roundbytes; 1001 srclba += roundbytes / srcblock; 1002 dstlba += roundbytes / dstblock; 1003 } 1004 1005 while ((tior = TAILQ_FIRST(&run)) != NULL) { 1006 TAILQ_REMOVE(&run, tior, rlinks); 1007 if (tpcl_queue(tior->io, tior->lun) != CTL_RETVAL_COMPLETE) 1008 panic("tpcl_queue() error"); 1009 } 1010 1011 list->stage++; 1012 return (CTL_RETVAL_QUEUED); 1013 } 1014 1015 static int 1016 tpc_process_verify(struct tpc_list *list) 1017 { 1018 struct scsi_ec_segment_verify *seg; 1019 struct tpc_io *tio; 1020 uint64_t sl; 1021 uint16_t cscd; 1022 uint8_t csi[4]; 1023 1024 scsi_ulto4b(list->curseg, csi); 1025 if (list->stage == 1) { 1026 while ((tio = TAILQ_FIRST(&list->allio)) != NULL) { 1027 TAILQ_REMOVE(&list->allio, tio, links); 1028 ctl_free_io(tio->io); 1029 free(tio, M_CTL); 1030 } 1031 if (list->abort) { 1032 ctl_set_task_aborted(list->ctsio); 1033 return (CTL_RETVAL_ERROR); 1034 } else if (list->error) { 1035 tpc_set_io_error_sense(list); 1036 return (CTL_RETVAL_ERROR); 1037 } else 1038 return (CTL_RETVAL_COMPLETE); 1039 } 1040 1041 TAILQ_INIT(&list->allio); 1042 seg = (struct scsi_ec_segment_verify *)list->seg[list->curseg]; 1043 cscd = scsi_2btoul(seg->src_cscd); 1044 sl = tpc_resolve(list, cscd, NULL, NULL, NULL); 1045 if (sl == UINT64_MAX) { 1046 ctl_set_sense(list->ctsio, /*current_error*/ 1, 1047 /*sense_key*/ SSD_KEY_COPY_ABORTED, 1048 /*asc*/ 0x08, /*ascq*/ 0x04, 1049 SSD_ELEM_COMMAND, sizeof(csi), csi, 1050 SSD_ELEM_NONE); 1051 return (CTL_RETVAL_ERROR); 1052 } 1053 1054 // printf("Verify %ju\n", sl); 1055 1056 if ((seg->tur & 0x01) == 0) 1057 return (CTL_RETVAL_COMPLETE); 1058 1059 list->tbdio = 1; 1060 tio = malloc(sizeof(*tio), M_CTL, M_WAITOK | M_ZERO); 1061 TAILQ_INIT(&tio->run); 1062 tio->list = list; 1063 TAILQ_INSERT_TAIL(&list->allio, tio, links); 1064 tio->io = tpcl_alloc_io(); 1065 ctl_scsi_tur(tio->io, /*tag_type*/ CTL_TAG_SIMPLE, /*control*/ 0); 1066 tio->io->io_hdr.retries = 3; 1067 tio->target = SSD_FORWARDED_SDS_EXSRC; 1068 tio->cscd = cscd; 1069 tio->lun = sl; 1070 tio->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tio; 1071 list->stage++; 1072 if (tpcl_queue(tio->io, tio->lun) != CTL_RETVAL_COMPLETE) 1073 panic("tpcl_queue() error"); 1074 return (CTL_RETVAL_QUEUED); 1075 } 1076 1077 static int 1078 tpc_process_register_key(struct tpc_list *list) 1079 { 1080 struct scsi_ec_segment_register_key *seg; 1081 struct tpc_io *tio; 1082 uint64_t dl; 1083 int datalen; 1084 uint16_t cscd; 1085 uint8_t csi[4]; 1086 1087 scsi_ulto4b(list->curseg, csi); 1088 if (list->stage == 1) { 1089 while ((tio = TAILQ_FIRST(&list->allio)) != NULL) { 1090 TAILQ_REMOVE(&list->allio, tio, links); 1091 ctl_free_io(tio->io); 1092 free(tio, M_CTL); 1093 } 1094 free(list->buf, M_CTL); 1095 if (list->abort) { 1096 ctl_set_task_aborted(list->ctsio); 1097 return (CTL_RETVAL_ERROR); 1098 } else if (list->error) { 1099 tpc_set_io_error_sense(list); 1100 return (CTL_RETVAL_ERROR); 1101 } else 1102 return (CTL_RETVAL_COMPLETE); 1103 } 1104 1105 TAILQ_INIT(&list->allio); 1106 seg = (struct scsi_ec_segment_register_key *)list->seg[list->curseg]; 1107 cscd = scsi_2btoul(seg->dst_cscd); 1108 dl = tpc_resolve(list, cscd, NULL, NULL, NULL); 1109 if (dl == UINT64_MAX) { 1110 ctl_set_sense(list->ctsio, /*current_error*/ 1, 1111 /*sense_key*/ SSD_KEY_COPY_ABORTED, 1112 /*asc*/ 0x08, /*ascq*/ 0x04, 1113 SSD_ELEM_COMMAND, sizeof(csi), csi, 1114 SSD_ELEM_NONE); 1115 return (CTL_RETVAL_ERROR); 1116 } 1117 1118 // printf("Register Key %ju\n", dl); 1119 1120 list->tbdio = 1; 1121 tio = malloc(sizeof(*tio), M_CTL, M_WAITOK | M_ZERO); 1122 TAILQ_INIT(&tio->run); 1123 tio->list = list; 1124 TAILQ_INSERT_TAIL(&list->allio, tio, links); 1125 tio->io = tpcl_alloc_io(); 1126 datalen = sizeof(struct scsi_per_res_out_parms); 1127 list->buf = malloc(datalen, M_CTL, M_WAITOK); 1128 ctl_scsi_persistent_res_out(tio->io, 1129 list->buf, datalen, SPRO_REGISTER, -1, 1130 scsi_8btou64(seg->res_key), scsi_8btou64(seg->sa_res_key), 1131 /*tag_type*/ CTL_TAG_SIMPLE, /*control*/ 0); 1132 tio->io->io_hdr.retries = 3; 1133 tio->target = SSD_FORWARDED_SDS_EXDST; 1134 tio->cscd = cscd; 1135 tio->lun = dl; 1136 tio->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tio; 1137 list->stage++; 1138 if (tpcl_queue(tio->io, tio->lun) != CTL_RETVAL_COMPLETE) 1139 panic("tpcl_queue() error"); 1140 return (CTL_RETVAL_QUEUED); 1141 } 1142 1143 static off_t 1144 tpc_ranges_length(struct scsi_range_desc *range, int nrange) 1145 { 1146 off_t length = 0; 1147 int r; 1148 1149 for (r = 0; r < nrange; r++) 1150 length += scsi_4btoul(range[r].length); 1151 return (length); 1152 } 1153 1154 static int 1155 tpc_check_ranges_l(struct scsi_range_desc *range, int nrange, uint64_t maxlba, 1156 uint64_t *lba) 1157 { 1158 uint64_t b1; 1159 uint32_t l1; 1160 int i; 1161 1162 for (i = 0; i < nrange; i++) { 1163 b1 = scsi_8btou64(range[i].lba); 1164 l1 = scsi_4btoul(range[i].length); 1165 if (b1 + l1 < b1 || b1 + l1 > maxlba + 1) { 1166 *lba = MAX(b1, maxlba + 1); 1167 return (-1); 1168 } 1169 } 1170 return (0); 1171 } 1172 1173 static int 1174 tpc_check_ranges_x(struct scsi_range_desc *range, int nrange) 1175 { 1176 uint64_t b1, b2; 1177 uint32_t l1, l2; 1178 int i, j; 1179 1180 for (i = 0; i < nrange - 1; i++) { 1181 b1 = scsi_8btou64(range[i].lba); 1182 l1 = scsi_4btoul(range[i].length); 1183 for (j = i + 1; j < nrange; j++) { 1184 b2 = scsi_8btou64(range[j].lba); 1185 l2 = scsi_4btoul(range[j].length); 1186 if (b1 + l1 > b2 && b2 + l2 > b1) 1187 return (-1); 1188 } 1189 } 1190 return (0); 1191 } 1192 1193 static int 1194 tpc_skip_ranges(struct scsi_range_desc *range, int nrange, off_t skip, 1195 int *srange, off_t *soffset) 1196 { 1197 off_t off; 1198 int r; 1199 1200 r = 0; 1201 off = 0; 1202 while (r < nrange) { 1203 if (skip - off < scsi_4btoul(range[r].length)) { 1204 *srange = r; 1205 *soffset = skip - off; 1206 return (0); 1207 } 1208 off += scsi_4btoul(range[r].length); 1209 r++; 1210 } 1211 return (-1); 1212 } 1213 1214 static int 1215 tpc_process_wut(struct tpc_list *list) 1216 { 1217 struct tpc_io *tio, *tior, *tiow; 1218 struct runl run; 1219 int drange, srange; 1220 off_t doffset, soffset; 1221 off_t srclba, dstlba, numbytes, donebytes, roundbytes; 1222 uint32_t srcblock, dstblock, pb, pbo, adj; 1223 1224 if (list->stage > 0) { 1225 /* Cleanup after previous rounds. */ 1226 while ((tio = TAILQ_FIRST(&list->allio)) != NULL) { 1227 TAILQ_REMOVE(&list->allio, tio, links); 1228 ctl_free_io(tio->io); 1229 free(tio, M_CTL); 1230 } 1231 free(list->buf, M_CTL); 1232 if (list->abort) { 1233 ctl_set_task_aborted(list->ctsio); 1234 return (CTL_RETVAL_ERROR); 1235 } else if (list->error) { 1236 if (list->fwd_scsi_status) { 1237 list->ctsio->io_hdr.status = 1238 CTL_SCSI_ERROR | CTL_AUTOSENSE; 1239 list->ctsio->scsi_status = list->fwd_scsi_status; 1240 list->ctsio->sense_data = list->fwd_sense_data; 1241 list->ctsio->sense_len = list->fwd_sense_len; 1242 } else { 1243 ctl_set_invalid_field(list->ctsio, 1244 /*sks_valid*/ 0, /*command*/ 0, 1245 /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 1246 } 1247 return (CTL_RETVAL_ERROR); 1248 } 1249 list->cursectors += list->segsectors; 1250 list->curbytes += list->segbytes; 1251 } 1252 1253 /* Check where we are on destination ranges list. */ 1254 if (tpc_skip_ranges(list->range, list->nrange, list->cursectors, 1255 &drange, &doffset) != 0) 1256 return (CTL_RETVAL_COMPLETE); 1257 dstblock = list->lun->be_lun->blocksize; 1258 pb = dstblock << list->lun->be_lun->pblockexp; 1259 if (list->lun->be_lun->pblockoff > 0) 1260 pbo = pb - dstblock * list->lun->be_lun->pblockoff; 1261 else 1262 pbo = 0; 1263 1264 /* Check where we are on source ranges list. */ 1265 srcblock = list->token->blocksize; 1266 if (tpc_skip_ranges(list->token->range, list->token->nrange, 1267 list->offset_into_rod + list->cursectors * dstblock / srcblock, 1268 &srange, &soffset) != 0) { 1269 ctl_set_invalid_field(list->ctsio, /*sks_valid*/ 0, 1270 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 1271 return (CTL_RETVAL_ERROR); 1272 } 1273 1274 srclba = scsi_8btou64(list->token->range[srange].lba) + soffset; 1275 dstlba = scsi_8btou64(list->range[drange].lba) + doffset; 1276 numbytes = srcblock * 1277 (scsi_4btoul(list->token->range[srange].length) - soffset); 1278 numbytes = omin(numbytes, dstblock * 1279 (scsi_4btoul(list->range[drange].length) - doffset)); 1280 if (numbytes > TPC_MAX_IOCHUNK_SIZE) { 1281 numbytes = TPC_MAX_IOCHUNK_SIZE; 1282 numbytes -= numbytes % dstblock; 1283 if (pb > dstblock) { 1284 adj = (dstlba * dstblock + numbytes - pbo) % pb; 1285 if (numbytes > adj) 1286 numbytes -= adj; 1287 } 1288 } 1289 1290 if (numbytes % srcblock != 0 || numbytes % dstblock != 0) { 1291 ctl_set_invalid_field(list->ctsio, /*sks_valid*/ 0, 1292 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 1293 return (CTL_RETVAL_ERROR); 1294 } 1295 1296 list->buf = malloc(numbytes, M_CTL, M_WAITOK | 1297 (list->token == NULL ? M_ZERO : 0)); 1298 list->segbytes = numbytes; 1299 list->segsectors = numbytes / dstblock; 1300 //printf("Copy chunk of %ju sectors from %ju to %ju\n", list->segsectors, 1301 // srclba, dstlba); 1302 donebytes = 0; 1303 TAILQ_INIT(&run); 1304 list->tbdio = 0; 1305 TAILQ_INIT(&list->allio); 1306 while (donebytes < numbytes) { 1307 roundbytes = numbytes - donebytes; 1308 if (roundbytes > TPC_MAX_IO_SIZE) { 1309 roundbytes = TPC_MAX_IO_SIZE; 1310 roundbytes -= roundbytes % dstblock; 1311 if (pb > dstblock) { 1312 adj = (dstlba * dstblock + roundbytes - pbo) % pb; 1313 if (roundbytes > adj) 1314 roundbytes -= adj; 1315 } 1316 } 1317 1318 tior = malloc(sizeof(*tior), M_CTL, M_WAITOK | M_ZERO); 1319 TAILQ_INIT(&tior->run); 1320 tior->list = list; 1321 TAILQ_INSERT_TAIL(&list->allio, tior, links); 1322 tior->io = tpcl_alloc_io(); 1323 ctl_scsi_read_write(tior->io, 1324 /*data_ptr*/ &list->buf[donebytes], 1325 /*data_len*/ roundbytes, 1326 /*read_op*/ 1, 1327 /*byte2*/ 0, 1328 /*minimum_cdb_size*/ 0, 1329 /*lba*/ srclba, 1330 /*num_blocks*/ roundbytes / srcblock, 1331 /*tag_type*/ CTL_TAG_SIMPLE, 1332 /*control*/ 0); 1333 tior->io->io_hdr.retries = 3; 1334 tior->lun = list->token->lun; 1335 tior->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tior; 1336 1337 tiow = malloc(sizeof(*tiow), M_CTL, M_WAITOK | M_ZERO); 1338 TAILQ_INIT(&tiow->run); 1339 tiow->list = list; 1340 TAILQ_INSERT_TAIL(&list->allio, tiow, links); 1341 tiow->io = tpcl_alloc_io(); 1342 ctl_scsi_read_write(tiow->io, 1343 /*data_ptr*/ &list->buf[donebytes], 1344 /*data_len*/ roundbytes, 1345 /*read_op*/ 0, 1346 /*byte2*/ 0, 1347 /*minimum_cdb_size*/ 0, 1348 /*lba*/ dstlba, 1349 /*num_blocks*/ roundbytes / dstblock, 1350 /*tag_type*/ CTL_TAG_SIMPLE, 1351 /*control*/ 0); 1352 tiow->io->io_hdr.retries = 3; 1353 tiow->lun = list->lun->lun; 1354 tiow->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tiow; 1355 1356 TAILQ_INSERT_TAIL(&tior->run, tiow, rlinks); 1357 TAILQ_INSERT_TAIL(&run, tior, rlinks); 1358 list->tbdio++; 1359 donebytes += roundbytes; 1360 srclba += roundbytes / srcblock; 1361 dstlba += roundbytes / dstblock; 1362 } 1363 1364 while ((tior = TAILQ_FIRST(&run)) != NULL) { 1365 TAILQ_REMOVE(&run, tior, rlinks); 1366 if (tpcl_queue(tior->io, tior->lun) != CTL_RETVAL_COMPLETE) 1367 panic("tpcl_queue() error"); 1368 } 1369 1370 list->stage++; 1371 return (CTL_RETVAL_QUEUED); 1372 } 1373 1374 static int 1375 tpc_process_zero_wut(struct tpc_list *list) 1376 { 1377 struct tpc_io *tio, *tiow; 1378 struct runl run, *prun; 1379 int r; 1380 uint32_t dstblock, len; 1381 1382 if (list->stage > 0) { 1383 complete: 1384 /* Cleanup after previous rounds. */ 1385 while ((tio = TAILQ_FIRST(&list->allio)) != NULL) { 1386 TAILQ_REMOVE(&list->allio, tio, links); 1387 ctl_free_io(tio->io); 1388 free(tio, M_CTL); 1389 } 1390 if (list->abort) { 1391 ctl_set_task_aborted(list->ctsio); 1392 return (CTL_RETVAL_ERROR); 1393 } else if (list->error) { 1394 if (list->fwd_scsi_status) { 1395 list->ctsio->io_hdr.status = 1396 CTL_SCSI_ERROR | CTL_AUTOSENSE; 1397 list->ctsio->scsi_status = list->fwd_scsi_status; 1398 list->ctsio->sense_data = list->fwd_sense_data; 1399 list->ctsio->sense_len = list->fwd_sense_len; 1400 } else { 1401 ctl_set_invalid_field(list->ctsio, 1402 /*sks_valid*/ 0, /*command*/ 0, 1403 /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 1404 } 1405 return (CTL_RETVAL_ERROR); 1406 } 1407 list->cursectors += list->segsectors; 1408 list->curbytes += list->segbytes; 1409 return (CTL_RETVAL_COMPLETE); 1410 } 1411 1412 dstblock = list->lun->be_lun->blocksize; 1413 TAILQ_INIT(&run); 1414 prun = &run; 1415 list->tbdio = 1; 1416 TAILQ_INIT(&list->allio); 1417 list->segsectors = 0; 1418 for (r = 0; r < list->nrange; r++) { 1419 len = scsi_4btoul(list->range[r].length); 1420 if (len == 0) 1421 continue; 1422 1423 tiow = malloc(sizeof(*tiow), M_CTL, M_WAITOK | M_ZERO); 1424 TAILQ_INIT(&tiow->run); 1425 tiow->list = list; 1426 TAILQ_INSERT_TAIL(&list->allio, tiow, links); 1427 tiow->io = tpcl_alloc_io(); 1428 ctl_scsi_write_same(tiow->io, 1429 /*data_ptr*/ NULL, 1430 /*data_len*/ 0, 1431 /*byte2*/ SWS_NDOB, 1432 /*lba*/ scsi_8btou64(list->range[r].lba), 1433 /*num_blocks*/ len, 1434 /*tag_type*/ CTL_TAG_SIMPLE, 1435 /*control*/ 0); 1436 tiow->io->io_hdr.retries = 3; 1437 tiow->lun = list->lun->lun; 1438 tiow->io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr = tiow; 1439 1440 TAILQ_INSERT_TAIL(prun, tiow, rlinks); 1441 prun = &tiow->run; 1442 list->segsectors += len; 1443 } 1444 list->segbytes = list->segsectors * dstblock; 1445 1446 if (TAILQ_EMPTY(&run)) 1447 goto complete; 1448 1449 while ((tiow = TAILQ_FIRST(&run)) != NULL) { 1450 TAILQ_REMOVE(&run, tiow, rlinks); 1451 if (tpcl_queue(tiow->io, tiow->lun) != CTL_RETVAL_COMPLETE) 1452 panic("tpcl_queue() error"); 1453 } 1454 1455 list->stage++; 1456 return (CTL_RETVAL_QUEUED); 1457 } 1458 1459 static void 1460 tpc_process(struct tpc_list *list) 1461 { 1462 struct ctl_lun *lun = list->lun; 1463 struct ctl_softc *softc = lun->ctl_softc; 1464 struct scsi_ec_segment *seg; 1465 struct ctl_scsiio *ctsio = list->ctsio; 1466 int retval = CTL_RETVAL_COMPLETE; 1467 uint8_t csi[4]; 1468 1469 if (list->service_action == EC_WUT) { 1470 if (list->token != NULL) 1471 retval = tpc_process_wut(list); 1472 else 1473 retval = tpc_process_zero_wut(list); 1474 if (retval == CTL_RETVAL_QUEUED) 1475 return; 1476 if (retval == CTL_RETVAL_ERROR) { 1477 list->error = 1; 1478 goto done; 1479 } 1480 } else { 1481 //printf("ZZZ %d cscd, %d segs\n", list->ncscd, list->nseg); 1482 while (list->curseg < list->nseg) { 1483 seg = list->seg[list->curseg]; 1484 switch (seg->type_code) { 1485 case EC_SEG_B2B: 1486 retval = tpc_process_b2b(list); 1487 break; 1488 case EC_SEG_VERIFY: 1489 retval = tpc_process_verify(list); 1490 break; 1491 case EC_SEG_REGISTER_KEY: 1492 retval = tpc_process_register_key(list); 1493 break; 1494 default: 1495 scsi_ulto4b(list->curseg, csi); 1496 ctl_set_sense(ctsio, /*current_error*/ 1, 1497 /*sense_key*/ SSD_KEY_COPY_ABORTED, 1498 /*asc*/ 0x26, /*ascq*/ 0x09, 1499 SSD_ELEM_COMMAND, sizeof(csi), csi, 1500 SSD_ELEM_NONE); 1501 goto done; 1502 } 1503 if (retval == CTL_RETVAL_QUEUED) 1504 return; 1505 if (retval == CTL_RETVAL_ERROR) { 1506 list->error = 1; 1507 goto done; 1508 } 1509 list->curseg++; 1510 list->stage = 0; 1511 } 1512 } 1513 1514 ctl_set_success(ctsio); 1515 1516 done: 1517 //printf("ZZZ done\n"); 1518 free(list->params, M_CTL); 1519 list->params = NULL; 1520 if (list->token) { 1521 mtx_lock(&softc->tpc_lock); 1522 if (--list->token->active == 0) 1523 list->token->last_active = time_uptime; 1524 mtx_unlock(&softc->tpc_lock); 1525 list->token = NULL; 1526 } 1527 mtx_lock(&lun->lun_lock); 1528 if ((list->flags & EC_LIST_ID_USAGE_MASK) == EC_LIST_ID_USAGE_NONE) { 1529 TAILQ_REMOVE(&lun->tpc_lists, list, links); 1530 free(list, M_CTL); 1531 } else { 1532 list->completed = 1; 1533 list->last_active = time_uptime; 1534 list->sense_data = ctsio->sense_data; 1535 list->sense_len = ctsio->sense_len; 1536 list->scsi_status = ctsio->scsi_status; 1537 } 1538 mtx_unlock(&lun->lun_lock); 1539 1540 ctl_done((union ctl_io *)ctsio); 1541 } 1542 1543 /* 1544 * For any sort of check condition, busy, etc., we just retry. We do not 1545 * decrement the retry count for unit attention type errors. These are 1546 * normal, and we want to save the retry count for "real" errors. Otherwise, 1547 * we could end up with situations where a command will succeed in some 1548 * situations and fail in others, depending on whether a unit attention is 1549 * pending. Also, some of our error recovery actions, most notably the 1550 * LUN reset action, will cause a unit attention. 1551 * 1552 * We can add more detail here later if necessary. 1553 */ 1554 static tpc_error_action 1555 tpc_checkcond_parse(union ctl_io *io) 1556 { 1557 tpc_error_action error_action; 1558 int error_code, sense_key, asc, ascq; 1559 1560 /* 1561 * Default to retrying the command. 1562 */ 1563 error_action = TPC_ERR_RETRY; 1564 1565 scsi_extract_sense_len(&io->scsiio.sense_data, 1566 io->scsiio.sense_len, 1567 &error_code, 1568 &sense_key, 1569 &asc, 1570 &ascq, 1571 /*show_errors*/ 1); 1572 1573 switch (error_code) { 1574 case SSD_DEFERRED_ERROR: 1575 case SSD_DESC_DEFERRED_ERROR: 1576 error_action |= TPC_ERR_NO_DECREMENT; 1577 break; 1578 case SSD_CURRENT_ERROR: 1579 case SSD_DESC_CURRENT_ERROR: 1580 default: 1581 switch (sense_key) { 1582 case SSD_KEY_UNIT_ATTENTION: 1583 error_action |= TPC_ERR_NO_DECREMENT; 1584 break; 1585 case SSD_KEY_HARDWARE_ERROR: 1586 /* 1587 * This is our generic "something bad happened" 1588 * error code. It often isn't recoverable. 1589 */ 1590 if ((asc == 0x44) && (ascq == 0x00)) 1591 error_action = TPC_ERR_FAIL; 1592 break; 1593 case SSD_KEY_NOT_READY: 1594 /* 1595 * If the LUN is powered down, there likely isn't 1596 * much point in retrying right now. 1597 */ 1598 if ((asc == 0x04) && (ascq == 0x02)) 1599 error_action = TPC_ERR_FAIL; 1600 /* 1601 * If the LUN is offline, there probably isn't much 1602 * point in retrying, either. 1603 */ 1604 if ((asc == 0x04) && (ascq == 0x03)) 1605 error_action = TPC_ERR_FAIL; 1606 break; 1607 } 1608 } 1609 return (error_action); 1610 } 1611 1612 static tpc_error_action 1613 tpc_error_parse(union ctl_io *io) 1614 { 1615 tpc_error_action error_action = TPC_ERR_RETRY; 1616 1617 switch (io->io_hdr.io_type) { 1618 case CTL_IO_SCSI: 1619 switch (io->io_hdr.status & CTL_STATUS_MASK) { 1620 case CTL_SCSI_ERROR: 1621 switch (io->scsiio.scsi_status) { 1622 case SCSI_STATUS_CHECK_COND: 1623 error_action = tpc_checkcond_parse(io); 1624 break; 1625 default: 1626 break; 1627 } 1628 break; 1629 default: 1630 break; 1631 } 1632 break; 1633 case CTL_IO_TASK: 1634 break; 1635 default: 1636 panic("%s: invalid ctl_io type %d\n", __func__, 1637 io->io_hdr.io_type); 1638 break; 1639 } 1640 return (error_action); 1641 } 1642 1643 void 1644 tpc_done(union ctl_io *io) 1645 { 1646 struct tpc_io *tio, *tior; 1647 1648 /* 1649 * Very minimal retry logic. We basically retry if we got an error 1650 * back, and the retry count is greater than 0. If we ever want 1651 * more sophisticated initiator type behavior, the CAM error 1652 * recovery code in ../common might be helpful. 1653 */ 1654 tio = io->io_hdr.ctl_private[CTL_PRIV_FRONTEND].ptr; 1655 if (((io->io_hdr.status & CTL_STATUS_MASK) != CTL_SUCCESS) 1656 && (io->io_hdr.retries > 0)) { 1657 ctl_io_status old_status; 1658 tpc_error_action error_action; 1659 1660 error_action = tpc_error_parse(io); 1661 switch (error_action & TPC_ERR_MASK) { 1662 case TPC_ERR_FAIL: 1663 break; 1664 case TPC_ERR_RETRY: 1665 default: 1666 if ((error_action & TPC_ERR_NO_DECREMENT) == 0) 1667 io->io_hdr.retries--; 1668 old_status = io->io_hdr.status; 1669 io->io_hdr.status = CTL_STATUS_NONE; 1670 io->io_hdr.flags &= ~CTL_FLAG_ABORT; 1671 io->io_hdr.flags &= ~CTL_FLAG_SENT_2OTHER_SC; 1672 if (tpcl_queue(io, tio->lun) != CTL_RETVAL_COMPLETE) { 1673 printf("%s: error returned from ctl_queue()!\n", 1674 __func__); 1675 io->io_hdr.status = old_status; 1676 } else 1677 return; 1678 } 1679 } 1680 1681 if ((io->io_hdr.status & CTL_STATUS_MASK) != CTL_SUCCESS) { 1682 tio->list->error = 1; 1683 if (io->io_hdr.io_type == CTL_IO_SCSI && 1684 (io->io_hdr.status & CTL_STATUS_MASK) == CTL_SCSI_ERROR) { 1685 tio->list->fwd_scsi_status = io->scsiio.scsi_status; 1686 tio->list->fwd_sense_data = io->scsiio.sense_data; 1687 tio->list->fwd_sense_len = io->scsiio.sense_len; 1688 tio->list->fwd_target = tio->target; 1689 tio->list->fwd_cscd = tio->cscd; 1690 } 1691 } else 1692 atomic_add_int(&tio->list->curops, 1); 1693 if (!tio->list->error && !tio->list->abort) { 1694 while ((tior = TAILQ_FIRST(&tio->run)) != NULL) { 1695 TAILQ_REMOVE(&tio->run, tior, rlinks); 1696 atomic_add_int(&tio->list->tbdio, 1); 1697 if (tpcl_queue(tior->io, tior->lun) != CTL_RETVAL_COMPLETE) 1698 panic("tpcl_queue() error"); 1699 } 1700 } 1701 if (atomic_fetchadd_int(&tio->list->tbdio, -1) == 1) 1702 tpc_process(tio->list); 1703 } 1704 1705 int 1706 ctl_extended_copy_lid1(struct ctl_scsiio *ctsio) 1707 { 1708 struct scsi_extended_copy *cdb; 1709 struct scsi_extended_copy_lid1_data *data; 1710 struct scsi_ec_cscd *cscd; 1711 struct scsi_ec_segment *seg; 1712 struct ctl_lun *lun; 1713 struct tpc_list *list, *tlist; 1714 uint8_t *ptr; 1715 char *value; 1716 int len, off, lencscd, lenseg, leninl, nseg; 1717 1718 CTL_DEBUG_PRINT(("ctl_extended_copy_lid1\n")); 1719 1720 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 1721 cdb = (struct scsi_extended_copy *)ctsio->cdb; 1722 len = scsi_4btoul(cdb->length); 1723 1724 if (len == 0) { 1725 ctl_set_success(ctsio); 1726 goto done; 1727 } 1728 if (len < sizeof(struct scsi_extended_copy_lid1_data) || 1729 len > sizeof(struct scsi_extended_copy_lid1_data) + 1730 TPC_MAX_LIST + TPC_MAX_INLINE) { 1731 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 1, 1732 /*field*/ 9, /*bit_valid*/ 0, /*bit*/ 0); 1733 goto done; 1734 } 1735 1736 /* 1737 * If we've got a kernel request that hasn't been malloced yet, 1738 * malloc it and tell the caller the data buffer is here. 1739 */ 1740 if ((ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) == 0) { 1741 ctsio->kern_data_ptr = malloc(len, M_CTL, M_WAITOK); 1742 ctsio->kern_data_len = len; 1743 ctsio->kern_total_len = len; 1744 ctsio->kern_data_resid = 0; 1745 ctsio->kern_rel_offset = 0; 1746 ctsio->kern_sg_entries = 0; 1747 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 1748 ctsio->be_move_done = ctl_config_move_done; 1749 ctl_datamove((union ctl_io *)ctsio); 1750 1751 return (CTL_RETVAL_COMPLETE); 1752 } 1753 1754 data = (struct scsi_extended_copy_lid1_data *)ctsio->kern_data_ptr; 1755 lencscd = scsi_2btoul(data->cscd_list_length); 1756 lenseg = scsi_4btoul(data->segment_list_length); 1757 leninl = scsi_4btoul(data->inline_data_length); 1758 if (lencscd > TPC_MAX_CSCDS * sizeof(struct scsi_ec_cscd)) { 1759 ctl_set_sense(ctsio, /*current_error*/ 1, 1760 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1761 /*asc*/ 0x26, /*ascq*/ 0x06, SSD_ELEM_NONE); 1762 goto done; 1763 } 1764 if (lenseg > TPC_MAX_SEGS * sizeof(struct scsi_ec_segment)) { 1765 ctl_set_sense(ctsio, /*current_error*/ 1, 1766 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1767 /*asc*/ 0x26, /*ascq*/ 0x08, SSD_ELEM_NONE); 1768 goto done; 1769 } 1770 if (lencscd + lenseg > TPC_MAX_LIST || 1771 leninl > TPC_MAX_INLINE || 1772 len < sizeof(struct scsi_extended_copy_lid1_data) + 1773 lencscd + lenseg + leninl) { 1774 ctl_set_param_len_error(ctsio); 1775 goto done; 1776 } 1777 1778 list = malloc(sizeof(struct tpc_list), M_CTL, M_WAITOK | M_ZERO); 1779 list->service_action = cdb->service_action; 1780 value = ctl_get_opt(&lun->be_lun->options, "insecure_tpc"); 1781 if (value != NULL && strcmp(value, "on") == 0) 1782 list->init_port = -1; 1783 else 1784 list->init_port = ctsio->io_hdr.nexus.targ_port; 1785 list->init_idx = ctl_get_initindex(&ctsio->io_hdr.nexus); 1786 list->list_id = data->list_identifier; 1787 list->flags = data->flags; 1788 list->params = ctsio->kern_data_ptr; 1789 list->cscd = (struct scsi_ec_cscd *)&data->data[0]; 1790 ptr = &data->data[0]; 1791 for (off = 0; off < lencscd; off += sizeof(struct scsi_ec_cscd)) { 1792 cscd = (struct scsi_ec_cscd *)(ptr + off); 1793 if (cscd->type_code != EC_CSCD_ID) { 1794 free(list, M_CTL); 1795 ctl_set_sense(ctsio, /*current_error*/ 1, 1796 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1797 /*asc*/ 0x26, /*ascq*/ 0x07, SSD_ELEM_NONE); 1798 goto done; 1799 } 1800 } 1801 ptr = &data->data[lencscd]; 1802 for (nseg = 0, off = 0; off < lenseg; nseg++) { 1803 if (nseg >= TPC_MAX_SEGS) { 1804 free(list, M_CTL); 1805 ctl_set_sense(ctsio, /*current_error*/ 1, 1806 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1807 /*asc*/ 0x26, /*ascq*/ 0x08, SSD_ELEM_NONE); 1808 goto done; 1809 } 1810 seg = (struct scsi_ec_segment *)(ptr + off); 1811 if (seg->type_code != EC_SEG_B2B && 1812 seg->type_code != EC_SEG_VERIFY && 1813 seg->type_code != EC_SEG_REGISTER_KEY) { 1814 free(list, M_CTL); 1815 ctl_set_sense(ctsio, /*current_error*/ 1, 1816 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1817 /*asc*/ 0x26, /*ascq*/ 0x09, SSD_ELEM_NONE); 1818 goto done; 1819 } 1820 list->seg[nseg] = seg; 1821 off += sizeof(struct scsi_ec_segment) + 1822 scsi_2btoul(seg->descr_length); 1823 } 1824 list->inl = &data->data[lencscd + lenseg]; 1825 list->ncscd = lencscd / sizeof(struct scsi_ec_cscd); 1826 list->nseg = nseg; 1827 list->leninl = leninl; 1828 list->ctsio = ctsio; 1829 list->lun = lun; 1830 mtx_lock(&lun->lun_lock); 1831 if ((list->flags & EC_LIST_ID_USAGE_MASK) != EC_LIST_ID_USAGE_NONE) { 1832 tlist = tpc_find_list(lun, list->list_id, list->init_idx); 1833 if (tlist != NULL && !tlist->completed) { 1834 mtx_unlock(&lun->lun_lock); 1835 free(list, M_CTL); 1836 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 1837 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 1838 /*bit*/ 0); 1839 goto done; 1840 } 1841 if (tlist != NULL) { 1842 TAILQ_REMOVE(&lun->tpc_lists, tlist, links); 1843 free(tlist, M_CTL); 1844 } 1845 } 1846 TAILQ_INSERT_TAIL(&lun->tpc_lists, list, links); 1847 mtx_unlock(&lun->lun_lock); 1848 1849 tpc_process(list); 1850 return (CTL_RETVAL_COMPLETE); 1851 1852 done: 1853 if (ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) { 1854 free(ctsio->kern_data_ptr, M_CTL); 1855 ctsio->io_hdr.flags &= ~CTL_FLAG_ALLOCATED; 1856 } 1857 ctl_done((union ctl_io *)ctsio); 1858 return (CTL_RETVAL_COMPLETE); 1859 } 1860 1861 int 1862 ctl_extended_copy_lid4(struct ctl_scsiio *ctsio) 1863 { 1864 struct scsi_extended_copy *cdb; 1865 struct scsi_extended_copy_lid4_data *data; 1866 struct scsi_ec_cscd *cscd; 1867 struct scsi_ec_segment *seg; 1868 struct ctl_lun *lun; 1869 struct tpc_list *list, *tlist; 1870 uint8_t *ptr; 1871 char *value; 1872 int len, off, lencscd, lenseg, leninl, nseg; 1873 1874 CTL_DEBUG_PRINT(("ctl_extended_copy_lid4\n")); 1875 1876 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 1877 cdb = (struct scsi_extended_copy *)ctsio->cdb; 1878 len = scsi_4btoul(cdb->length); 1879 1880 if (len == 0) { 1881 ctl_set_success(ctsio); 1882 goto done; 1883 } 1884 if (len < sizeof(struct scsi_extended_copy_lid4_data) || 1885 len > sizeof(struct scsi_extended_copy_lid4_data) + 1886 TPC_MAX_LIST + TPC_MAX_INLINE) { 1887 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 1, 1888 /*field*/ 9, /*bit_valid*/ 0, /*bit*/ 0); 1889 goto done; 1890 } 1891 1892 /* 1893 * If we've got a kernel request that hasn't been malloced yet, 1894 * malloc it and tell the caller the data buffer is here. 1895 */ 1896 if ((ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) == 0) { 1897 ctsio->kern_data_ptr = malloc(len, M_CTL, M_WAITOK); 1898 ctsio->kern_data_len = len; 1899 ctsio->kern_total_len = len; 1900 ctsio->kern_data_resid = 0; 1901 ctsio->kern_rel_offset = 0; 1902 ctsio->kern_sg_entries = 0; 1903 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 1904 ctsio->be_move_done = ctl_config_move_done; 1905 ctl_datamove((union ctl_io *)ctsio); 1906 1907 return (CTL_RETVAL_COMPLETE); 1908 } 1909 1910 data = (struct scsi_extended_copy_lid4_data *)ctsio->kern_data_ptr; 1911 lencscd = scsi_2btoul(data->cscd_list_length); 1912 lenseg = scsi_2btoul(data->segment_list_length); 1913 leninl = scsi_2btoul(data->inline_data_length); 1914 if (lencscd > TPC_MAX_CSCDS * sizeof(struct scsi_ec_cscd)) { 1915 ctl_set_sense(ctsio, /*current_error*/ 1, 1916 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1917 /*asc*/ 0x26, /*ascq*/ 0x06, SSD_ELEM_NONE); 1918 goto done; 1919 } 1920 if (lenseg > TPC_MAX_SEGS * sizeof(struct scsi_ec_segment)) { 1921 ctl_set_sense(ctsio, /*current_error*/ 1, 1922 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1923 /*asc*/ 0x26, /*ascq*/ 0x08, SSD_ELEM_NONE); 1924 goto done; 1925 } 1926 if (lencscd + lenseg > TPC_MAX_LIST || 1927 leninl > TPC_MAX_INLINE || 1928 len < sizeof(struct scsi_extended_copy_lid1_data) + 1929 lencscd + lenseg + leninl) { 1930 ctl_set_param_len_error(ctsio); 1931 goto done; 1932 } 1933 1934 list = malloc(sizeof(struct tpc_list), M_CTL, M_WAITOK | M_ZERO); 1935 list->service_action = cdb->service_action; 1936 value = ctl_get_opt(&lun->be_lun->options, "insecure_tpc"); 1937 if (value != NULL && strcmp(value, "on") == 0) 1938 list->init_port = -1; 1939 else 1940 list->init_port = ctsio->io_hdr.nexus.targ_port; 1941 list->init_idx = ctl_get_initindex(&ctsio->io_hdr.nexus); 1942 list->list_id = scsi_4btoul(data->list_identifier); 1943 list->flags = data->flags; 1944 list->params = ctsio->kern_data_ptr; 1945 list->cscd = (struct scsi_ec_cscd *)&data->data[0]; 1946 ptr = &data->data[0]; 1947 for (off = 0; off < lencscd; off += sizeof(struct scsi_ec_cscd)) { 1948 cscd = (struct scsi_ec_cscd *)(ptr + off); 1949 if (cscd->type_code != EC_CSCD_ID) { 1950 free(list, M_CTL); 1951 ctl_set_sense(ctsio, /*current_error*/ 1, 1952 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1953 /*asc*/ 0x26, /*ascq*/ 0x07, SSD_ELEM_NONE); 1954 goto done; 1955 } 1956 } 1957 ptr = &data->data[lencscd]; 1958 for (nseg = 0, off = 0; off < lenseg; nseg++) { 1959 if (nseg >= TPC_MAX_SEGS) { 1960 free(list, M_CTL); 1961 ctl_set_sense(ctsio, /*current_error*/ 1, 1962 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1963 /*asc*/ 0x26, /*ascq*/ 0x08, SSD_ELEM_NONE); 1964 goto done; 1965 } 1966 seg = (struct scsi_ec_segment *)(ptr + off); 1967 if (seg->type_code != EC_SEG_B2B && 1968 seg->type_code != EC_SEG_VERIFY && 1969 seg->type_code != EC_SEG_REGISTER_KEY) { 1970 free(list, M_CTL); 1971 ctl_set_sense(ctsio, /*current_error*/ 1, 1972 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 1973 /*asc*/ 0x26, /*ascq*/ 0x09, SSD_ELEM_NONE); 1974 goto done; 1975 } 1976 list->seg[nseg] = seg; 1977 off += sizeof(struct scsi_ec_segment) + 1978 scsi_2btoul(seg->descr_length); 1979 } 1980 list->inl = &data->data[lencscd + lenseg]; 1981 list->ncscd = lencscd / sizeof(struct scsi_ec_cscd); 1982 list->nseg = nseg; 1983 list->leninl = leninl; 1984 list->ctsio = ctsio; 1985 list->lun = lun; 1986 mtx_lock(&lun->lun_lock); 1987 if ((list->flags & EC_LIST_ID_USAGE_MASK) != EC_LIST_ID_USAGE_NONE) { 1988 tlist = tpc_find_list(lun, list->list_id, list->init_idx); 1989 if (tlist != NULL && !tlist->completed) { 1990 mtx_unlock(&lun->lun_lock); 1991 free(list, M_CTL); 1992 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 1993 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 1994 /*bit*/ 0); 1995 goto done; 1996 } 1997 if (tlist != NULL) { 1998 TAILQ_REMOVE(&lun->tpc_lists, tlist, links); 1999 free(tlist, M_CTL); 2000 } 2001 } 2002 TAILQ_INSERT_TAIL(&lun->tpc_lists, list, links); 2003 mtx_unlock(&lun->lun_lock); 2004 2005 tpc_process(list); 2006 return (CTL_RETVAL_COMPLETE); 2007 2008 done: 2009 if (ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) { 2010 free(ctsio->kern_data_ptr, M_CTL); 2011 ctsio->io_hdr.flags &= ~CTL_FLAG_ALLOCATED; 2012 } 2013 ctl_done((union ctl_io *)ctsio); 2014 return (CTL_RETVAL_COMPLETE); 2015 } 2016 2017 static void 2018 tpc_create_token(struct ctl_lun *lun, struct ctl_port *port, off_t len, 2019 struct scsi_token *token) 2020 { 2021 static int id = 0; 2022 struct scsi_vpd_id_descriptor *idd = NULL; 2023 struct scsi_ec_cscd_id *cscd; 2024 struct scsi_read_capacity_data_long *dtsd; 2025 int targid_len; 2026 2027 scsi_ulto4b(ROD_TYPE_AUR, token->type); 2028 scsi_ulto2b(0x01f8, token->length); 2029 scsi_u64to8b(atomic_fetchadd_int(&id, 1), &token->body[0]); 2030 if (lun->lun_devid) 2031 idd = scsi_get_devid_desc((struct scsi_vpd_id_descriptor *) 2032 lun->lun_devid->data, lun->lun_devid->len, 2033 scsi_devid_is_lun_naa); 2034 if (idd == NULL && lun->lun_devid) 2035 idd = scsi_get_devid_desc((struct scsi_vpd_id_descriptor *) 2036 lun->lun_devid->data, lun->lun_devid->len, 2037 scsi_devid_is_lun_eui64); 2038 if (idd != NULL) { 2039 cscd = (struct scsi_ec_cscd_id *)&token->body[8]; 2040 cscd->type_code = EC_CSCD_ID; 2041 cscd->luidt_pdt = T_DIRECT; 2042 memcpy(&cscd->codeset, idd, 4 + idd->length); 2043 scsi_ulto3b(lun->be_lun->blocksize, cscd->dtsp.block_length); 2044 } 2045 scsi_u64to8b(0, &token->body[40]); /* XXX: Should be 128bit value. */ 2046 scsi_u64to8b(len, &token->body[48]); 2047 2048 /* ROD token device type specific data (RC16 without first field) */ 2049 dtsd = (struct scsi_read_capacity_data_long *)&token->body[88 - 8]; 2050 scsi_ulto4b(lun->be_lun->blocksize, dtsd->length); 2051 dtsd->prot_lbppbe = lun->be_lun->pblockexp & SRC16_LBPPBE; 2052 scsi_ulto2b(lun->be_lun->pblockoff & SRC16_LALBA_A, dtsd->lalba_lbp); 2053 if (lun->be_lun->flags & CTL_LUN_FLAG_UNMAP) 2054 dtsd->lalba_lbp[0] |= SRC16_LBPME | SRC16_LBPRZ; 2055 2056 if (port->target_devid) { 2057 targid_len = port->target_devid->len; 2058 memcpy(&token->body[120], port->target_devid->data, targid_len); 2059 } else 2060 targid_len = 32; 2061 arc4rand(&token->body[120 + targid_len], 384 - targid_len, 0); 2062 }; 2063 2064 int 2065 ctl_populate_token(struct ctl_scsiio *ctsio) 2066 { 2067 struct scsi_populate_token *cdb; 2068 struct scsi_populate_token_data *data; 2069 struct ctl_softc *softc; 2070 struct ctl_lun *lun; 2071 struct ctl_port *port; 2072 struct tpc_list *list, *tlist; 2073 struct tpc_token *token; 2074 uint64_t lba; 2075 int len, lendata, lendesc; 2076 2077 CTL_DEBUG_PRINT(("ctl_populate_token\n")); 2078 2079 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 2080 softc = lun->ctl_softc; 2081 port = softc->ctl_ports[ctsio->io_hdr.nexus.targ_port]; 2082 cdb = (struct scsi_populate_token *)ctsio->cdb; 2083 len = scsi_4btoul(cdb->length); 2084 2085 if (len < sizeof(struct scsi_populate_token_data) || 2086 len > sizeof(struct scsi_populate_token_data) + 2087 TPC_MAX_SEGS * sizeof(struct scsi_range_desc)) { 2088 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 1, 2089 /*field*/ 9, /*bit_valid*/ 0, /*bit*/ 0); 2090 goto done; 2091 } 2092 2093 /* 2094 * If we've got a kernel request that hasn't been malloced yet, 2095 * malloc it and tell the caller the data buffer is here. 2096 */ 2097 if ((ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) == 0) { 2098 ctsio->kern_data_ptr = malloc(len, M_CTL, M_WAITOK); 2099 ctsio->kern_data_len = len; 2100 ctsio->kern_total_len = len; 2101 ctsio->kern_data_resid = 0; 2102 ctsio->kern_rel_offset = 0; 2103 ctsio->kern_sg_entries = 0; 2104 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 2105 ctsio->be_move_done = ctl_config_move_done; 2106 ctl_datamove((union ctl_io *)ctsio); 2107 2108 return (CTL_RETVAL_COMPLETE); 2109 } 2110 2111 data = (struct scsi_populate_token_data *)ctsio->kern_data_ptr; 2112 lendata = scsi_2btoul(data->length); 2113 if (lendata < sizeof(struct scsi_populate_token_data) - 2 + 2114 sizeof(struct scsi_range_desc)) { 2115 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 0, 2116 /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 2117 goto done; 2118 } 2119 lendesc = scsi_2btoul(data->range_descriptor_length); 2120 if (lendesc < sizeof(struct scsi_range_desc) || 2121 len < sizeof(struct scsi_populate_token_data) + lendesc || 2122 lendata < sizeof(struct scsi_populate_token_data) - 2 + lendesc) { 2123 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 0, 2124 /*field*/ 14, /*bit_valid*/ 0, /*bit*/ 0); 2125 goto done; 2126 } 2127 /* 2128 printf("PT(list=%u) flags=%x to=%d rt=%x len=%x\n", 2129 scsi_4btoul(cdb->list_identifier), 2130 data->flags, scsi_4btoul(data->inactivity_timeout), 2131 scsi_4btoul(data->rod_type), 2132 scsi_2btoul(data->range_descriptor_length)); 2133 */ 2134 2135 /* Validate INACTIVITY TIMEOUT field */ 2136 if (scsi_4btoul(data->inactivity_timeout) > TPC_MAX_TOKEN_TIMEOUT) { 2137 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 2138 /*command*/ 0, /*field*/ 4, /*bit_valid*/ 0, 2139 /*bit*/ 0); 2140 goto done; 2141 } 2142 2143 /* Validate ROD TYPE field */ 2144 if ((data->flags & EC_PT_RTV) && 2145 scsi_4btoul(data->rod_type) != ROD_TYPE_AUR) { 2146 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 0, 2147 /*field*/ 8, /*bit_valid*/ 0, /*bit*/ 0); 2148 goto done; 2149 } 2150 2151 /* Validate list of ranges */ 2152 if (tpc_check_ranges_l(&data->desc[0], 2153 scsi_2btoul(data->range_descriptor_length) / 2154 sizeof(struct scsi_range_desc), 2155 lun->be_lun->maxlba, &lba) != 0) { 2156 ctl_set_lba_out_of_range(ctsio, lba); 2157 goto done; 2158 } 2159 if (tpc_check_ranges_x(&data->desc[0], 2160 scsi_2btoul(data->range_descriptor_length) / 2161 sizeof(struct scsi_range_desc)) != 0) { 2162 ctl_set_invalid_field(ctsio, /*sks_valid*/ 0, 2163 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 2164 /*bit*/ 0); 2165 goto done; 2166 } 2167 2168 list = malloc(sizeof(struct tpc_list), M_CTL, M_WAITOK | M_ZERO); 2169 list->service_action = cdb->service_action; 2170 list->init_port = ctsio->io_hdr.nexus.targ_port; 2171 list->init_idx = ctl_get_initindex(&ctsio->io_hdr.nexus); 2172 list->list_id = scsi_4btoul(cdb->list_identifier); 2173 list->flags = data->flags; 2174 list->ctsio = ctsio; 2175 list->lun = lun; 2176 mtx_lock(&lun->lun_lock); 2177 tlist = tpc_find_list(lun, list->list_id, list->init_idx); 2178 if (tlist != NULL && !tlist->completed) { 2179 mtx_unlock(&lun->lun_lock); 2180 free(list, M_CTL); 2181 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 2182 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 2183 /*bit*/ 0); 2184 goto done; 2185 } 2186 if (tlist != NULL) { 2187 TAILQ_REMOVE(&lun->tpc_lists, tlist, links); 2188 free(tlist, M_CTL); 2189 } 2190 TAILQ_INSERT_TAIL(&lun->tpc_lists, list, links); 2191 mtx_unlock(&lun->lun_lock); 2192 2193 token = malloc(sizeof(*token), M_CTL, M_WAITOK | M_ZERO); 2194 token->lun = lun->lun; 2195 token->blocksize = lun->be_lun->blocksize; 2196 token->params = ctsio->kern_data_ptr; 2197 token->range = &data->desc[0]; 2198 token->nrange = scsi_2btoul(data->range_descriptor_length) / 2199 sizeof(struct scsi_range_desc); 2200 list->cursectors = tpc_ranges_length(token->range, token->nrange); 2201 list->curbytes = (off_t)list->cursectors * lun->be_lun->blocksize; 2202 tpc_create_token(lun, port, list->curbytes, 2203 (struct scsi_token *)token->token); 2204 token->active = 0; 2205 token->last_active = time_uptime; 2206 token->timeout = scsi_4btoul(data->inactivity_timeout); 2207 if (token->timeout == 0) 2208 token->timeout = TPC_DFL_TOKEN_TIMEOUT; 2209 else if (token->timeout < TPC_MIN_TOKEN_TIMEOUT) 2210 token->timeout = TPC_MIN_TOKEN_TIMEOUT; 2211 memcpy(list->res_token, token->token, sizeof(list->res_token)); 2212 list->res_token_valid = 1; 2213 list->curseg = 0; 2214 list->completed = 1; 2215 list->last_active = time_uptime; 2216 mtx_lock(&softc->tpc_lock); 2217 TAILQ_INSERT_TAIL(&softc->tpc_tokens, token, links); 2218 mtx_unlock(&softc->tpc_lock); 2219 ctl_set_success(ctsio); 2220 ctl_done((union ctl_io *)ctsio); 2221 return (CTL_RETVAL_COMPLETE); 2222 2223 done: 2224 if (ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) { 2225 free(ctsio->kern_data_ptr, M_CTL); 2226 ctsio->io_hdr.flags &= ~CTL_FLAG_ALLOCATED; 2227 } 2228 ctl_done((union ctl_io *)ctsio); 2229 return (CTL_RETVAL_COMPLETE); 2230 } 2231 2232 int 2233 ctl_write_using_token(struct ctl_scsiio *ctsio) 2234 { 2235 struct scsi_write_using_token *cdb; 2236 struct scsi_write_using_token_data *data; 2237 struct ctl_softc *softc; 2238 struct ctl_lun *lun; 2239 struct tpc_list *list, *tlist; 2240 struct tpc_token *token; 2241 uint64_t lba; 2242 int len, lendata, lendesc; 2243 2244 CTL_DEBUG_PRINT(("ctl_write_using_token\n")); 2245 2246 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 2247 softc = lun->ctl_softc; 2248 cdb = (struct scsi_write_using_token *)ctsio->cdb; 2249 len = scsi_4btoul(cdb->length); 2250 2251 if (len < sizeof(struct scsi_write_using_token_data) || 2252 len > sizeof(struct scsi_write_using_token_data) + 2253 TPC_MAX_SEGS * sizeof(struct scsi_range_desc)) { 2254 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 1, 2255 /*field*/ 9, /*bit_valid*/ 0, /*bit*/ 0); 2256 goto done; 2257 } 2258 2259 /* 2260 * If we've got a kernel request that hasn't been malloced yet, 2261 * malloc it and tell the caller the data buffer is here. 2262 */ 2263 if ((ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) == 0) { 2264 ctsio->kern_data_ptr = malloc(len, M_CTL, M_WAITOK); 2265 ctsio->kern_data_len = len; 2266 ctsio->kern_total_len = len; 2267 ctsio->kern_data_resid = 0; 2268 ctsio->kern_rel_offset = 0; 2269 ctsio->kern_sg_entries = 0; 2270 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 2271 ctsio->be_move_done = ctl_config_move_done; 2272 ctl_datamove((union ctl_io *)ctsio); 2273 2274 return (CTL_RETVAL_COMPLETE); 2275 } 2276 2277 data = (struct scsi_write_using_token_data *)ctsio->kern_data_ptr; 2278 lendata = scsi_2btoul(data->length); 2279 if (lendata < sizeof(struct scsi_write_using_token_data) - 2 + 2280 sizeof(struct scsi_range_desc)) { 2281 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 0, 2282 /*field*/ 0, /*bit_valid*/ 0, /*bit*/ 0); 2283 goto done; 2284 } 2285 lendesc = scsi_2btoul(data->range_descriptor_length); 2286 if (lendesc < sizeof(struct scsi_range_desc) || 2287 len < sizeof(struct scsi_write_using_token_data) + lendesc || 2288 lendata < sizeof(struct scsi_write_using_token_data) - 2 + lendesc) { 2289 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, /*command*/ 0, 2290 /*field*/ 534, /*bit_valid*/ 0, /*bit*/ 0); 2291 goto done; 2292 } 2293 /* 2294 printf("WUT(list=%u) flags=%x off=%ju len=%x\n", 2295 scsi_4btoul(cdb->list_identifier), 2296 data->flags, scsi_8btou64(data->offset_into_rod), 2297 scsi_2btoul(data->range_descriptor_length)); 2298 */ 2299 2300 /* Validate list of ranges */ 2301 if (tpc_check_ranges_l(&data->desc[0], 2302 scsi_2btoul(data->range_descriptor_length) / 2303 sizeof(struct scsi_range_desc), 2304 lun->be_lun->maxlba, &lba) != 0) { 2305 ctl_set_lba_out_of_range(ctsio, lba); 2306 goto done; 2307 } 2308 if (tpc_check_ranges_x(&data->desc[0], 2309 scsi_2btoul(data->range_descriptor_length) / 2310 sizeof(struct scsi_range_desc)) != 0) { 2311 ctl_set_invalid_field(ctsio, /*sks_valid*/ 0, 2312 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 2313 /*bit*/ 0); 2314 goto done; 2315 } 2316 2317 list = malloc(sizeof(struct tpc_list), M_CTL, M_WAITOK | M_ZERO); 2318 list->service_action = cdb->service_action; 2319 list->init_port = ctsio->io_hdr.nexus.targ_port; 2320 list->init_idx = ctl_get_initindex(&ctsio->io_hdr.nexus); 2321 list->list_id = scsi_4btoul(cdb->list_identifier); 2322 list->flags = data->flags; 2323 list->params = ctsio->kern_data_ptr; 2324 list->range = &data->desc[0]; 2325 list->nrange = scsi_2btoul(data->range_descriptor_length) / 2326 sizeof(struct scsi_range_desc); 2327 list->offset_into_rod = scsi_8btou64(data->offset_into_rod); 2328 list->ctsio = ctsio; 2329 list->lun = lun; 2330 mtx_lock(&lun->lun_lock); 2331 tlist = tpc_find_list(lun, list->list_id, list->init_idx); 2332 if (tlist != NULL && !tlist->completed) { 2333 mtx_unlock(&lun->lun_lock); 2334 free(list, M_CTL); 2335 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 2336 /*command*/ 0, /*field*/ 0, /*bit_valid*/ 0, 2337 /*bit*/ 0); 2338 goto done; 2339 } 2340 if (tlist != NULL) { 2341 TAILQ_REMOVE(&lun->tpc_lists, tlist, links); 2342 free(tlist, M_CTL); 2343 } 2344 TAILQ_INSERT_TAIL(&lun->tpc_lists, list, links); 2345 mtx_unlock(&lun->lun_lock); 2346 2347 /* Block device zero ROD token -> no token. */ 2348 if (scsi_4btoul(data->rod_token) == ROD_TYPE_BLOCK_ZERO) { 2349 tpc_process(list); 2350 return (CTL_RETVAL_COMPLETE); 2351 } 2352 2353 mtx_lock(&softc->tpc_lock); 2354 TAILQ_FOREACH(token, &softc->tpc_tokens, links) { 2355 if (memcmp(token->token, data->rod_token, 2356 sizeof(data->rod_token)) == 0) 2357 break; 2358 } 2359 if (token != NULL) { 2360 token->active++; 2361 list->token = token; 2362 if (data->flags & EC_WUT_DEL_TKN) 2363 token->timeout = 0; 2364 } 2365 mtx_unlock(&softc->tpc_lock); 2366 if (token == NULL) { 2367 mtx_lock(&lun->lun_lock); 2368 TAILQ_REMOVE(&lun->tpc_lists, list, links); 2369 mtx_unlock(&lun->lun_lock); 2370 free(list, M_CTL); 2371 ctl_set_sense(ctsio, /*current_error*/ 1, 2372 /*sense_key*/ SSD_KEY_ILLEGAL_REQUEST, 2373 /*asc*/ 0x23, /*ascq*/ 0x04, SSD_ELEM_NONE); 2374 goto done; 2375 } 2376 2377 tpc_process(list); 2378 return (CTL_RETVAL_COMPLETE); 2379 2380 done: 2381 if (ctsio->io_hdr.flags & CTL_FLAG_ALLOCATED) { 2382 free(ctsio->kern_data_ptr, M_CTL); 2383 ctsio->io_hdr.flags &= ~CTL_FLAG_ALLOCATED; 2384 } 2385 ctl_done((union ctl_io *)ctsio); 2386 return (CTL_RETVAL_COMPLETE); 2387 } 2388 2389 int 2390 ctl_receive_rod_token_information(struct ctl_scsiio *ctsio) 2391 { 2392 struct ctl_lun *lun; 2393 struct scsi_receive_rod_token_information *cdb; 2394 struct scsi_receive_copy_status_lid4_data *data; 2395 struct tpc_list *list; 2396 struct tpc_list list_copy; 2397 uint8_t *ptr; 2398 int retval; 2399 int alloc_len, total_len, token_len; 2400 uint32_t list_id; 2401 2402 CTL_DEBUG_PRINT(("ctl_receive_rod_token_information\n")); 2403 2404 cdb = (struct scsi_receive_rod_token_information *)ctsio->cdb; 2405 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 2406 2407 retval = CTL_RETVAL_COMPLETE; 2408 2409 list_id = scsi_4btoul(cdb->list_identifier); 2410 mtx_lock(&lun->lun_lock); 2411 list = tpc_find_list(lun, list_id, 2412 ctl_get_initindex(&ctsio->io_hdr.nexus)); 2413 if (list == NULL) { 2414 mtx_unlock(&lun->lun_lock); 2415 ctl_set_invalid_field(ctsio, /*sks_valid*/ 1, 2416 /*command*/ 1, /*field*/ 2, /*bit_valid*/ 0, 2417 /*bit*/ 0); 2418 ctl_done((union ctl_io *)ctsio); 2419 return (retval); 2420 } 2421 list_copy = *list; 2422 if (list->completed) { 2423 TAILQ_REMOVE(&lun->tpc_lists, list, links); 2424 free(list, M_CTL); 2425 } 2426 mtx_unlock(&lun->lun_lock); 2427 2428 token_len = list_copy.res_token_valid ? 2 + sizeof(list_copy.res_token) : 0; 2429 total_len = sizeof(*data) + list_copy.sense_len + 4 + token_len; 2430 alloc_len = scsi_4btoul(cdb->length); 2431 2432 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 2433 2434 ctsio->kern_sg_entries = 0; 2435 2436 if (total_len < alloc_len) { 2437 ctsio->residual = alloc_len - total_len; 2438 ctsio->kern_data_len = total_len; 2439 ctsio->kern_total_len = total_len; 2440 } else { 2441 ctsio->residual = 0; 2442 ctsio->kern_data_len = alloc_len; 2443 ctsio->kern_total_len = alloc_len; 2444 } 2445 ctsio->kern_data_resid = 0; 2446 ctsio->kern_rel_offset = 0; 2447 2448 data = (struct scsi_receive_copy_status_lid4_data *)ctsio->kern_data_ptr; 2449 scsi_ulto4b(sizeof(*data) - 4 + list_copy.sense_len + 2450 4 + token_len, data->available_data); 2451 data->response_to_service_action = list_copy.service_action; 2452 if (list_copy.completed) { 2453 if (list_copy.error) 2454 data->copy_command_status = RCS_CCS_ERROR; 2455 else if (list_copy.abort) 2456 data->copy_command_status = RCS_CCS_ABORTED; 2457 else 2458 data->copy_command_status = RCS_CCS_COMPLETED; 2459 } else 2460 data->copy_command_status = RCS_CCS_INPROG_FG; 2461 scsi_ulto2b(list_copy.curops, data->operation_counter); 2462 scsi_ulto4b(UINT32_MAX, data->estimated_status_update_delay); 2463 data->transfer_count_units = RCS_TC_LBAS; 2464 scsi_u64to8b(list_copy.cursectors, data->transfer_count); 2465 scsi_ulto2b(list_copy.curseg, data->segments_processed); 2466 data->length_of_the_sense_data_field = list_copy.sense_len; 2467 data->sense_data_length = list_copy.sense_len; 2468 memcpy(data->sense_data, &list_copy.sense_data, list_copy.sense_len); 2469 2470 ptr = &data->sense_data[data->length_of_the_sense_data_field]; 2471 scsi_ulto4b(token_len, &ptr[0]); 2472 if (list_copy.res_token_valid) { 2473 scsi_ulto2b(0, &ptr[4]); 2474 memcpy(&ptr[6], list_copy.res_token, sizeof(list_copy.res_token)); 2475 } 2476 /* 2477 printf("RRTI(list=%u) valid=%d\n", 2478 scsi_4btoul(cdb->list_identifier), list_copy.res_token_valid); 2479 */ 2480 ctl_set_success(ctsio); 2481 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 2482 ctsio->be_move_done = ctl_config_move_done; 2483 ctl_datamove((union ctl_io *)ctsio); 2484 return (retval); 2485 } 2486 2487 int 2488 ctl_report_all_rod_tokens(struct ctl_scsiio *ctsio) 2489 { 2490 struct ctl_softc *softc; 2491 struct ctl_lun *lun; 2492 struct scsi_report_all_rod_tokens *cdb; 2493 struct scsi_report_all_rod_tokens_data *data; 2494 struct tpc_token *token; 2495 int retval; 2496 int alloc_len, total_len, tokens, i; 2497 2498 CTL_DEBUG_PRINT(("ctl_receive_rod_token_information\n")); 2499 2500 cdb = (struct scsi_report_all_rod_tokens *)ctsio->cdb; 2501 lun = (struct ctl_lun *)ctsio->io_hdr.ctl_private[CTL_PRIV_LUN].ptr; 2502 softc = lun->ctl_softc; 2503 2504 retval = CTL_RETVAL_COMPLETE; 2505 2506 tokens = 0; 2507 mtx_lock(&softc->tpc_lock); 2508 TAILQ_FOREACH(token, &softc->tpc_tokens, links) 2509 tokens++; 2510 mtx_unlock(&softc->tpc_lock); 2511 if (tokens > 512) 2512 tokens = 512; 2513 2514 total_len = sizeof(*data) + tokens * 96; 2515 alloc_len = scsi_4btoul(cdb->length); 2516 2517 ctsio->kern_data_ptr = malloc(total_len, M_CTL, M_WAITOK | M_ZERO); 2518 2519 ctsio->kern_sg_entries = 0; 2520 2521 if (total_len < alloc_len) { 2522 ctsio->residual = alloc_len - total_len; 2523 ctsio->kern_data_len = total_len; 2524 ctsio->kern_total_len = total_len; 2525 } else { 2526 ctsio->residual = 0; 2527 ctsio->kern_data_len = alloc_len; 2528 ctsio->kern_total_len = alloc_len; 2529 } 2530 ctsio->kern_data_resid = 0; 2531 ctsio->kern_rel_offset = 0; 2532 2533 data = (struct scsi_report_all_rod_tokens_data *)ctsio->kern_data_ptr; 2534 i = 0; 2535 mtx_lock(&softc->tpc_lock); 2536 TAILQ_FOREACH(token, &softc->tpc_tokens, links) { 2537 if (i >= tokens) 2538 break; 2539 memcpy(&data->rod_management_token_list[i * 96], 2540 token->token, 96); 2541 i++; 2542 } 2543 mtx_unlock(&softc->tpc_lock); 2544 scsi_ulto4b(sizeof(*data) - 4 + i * 96, data->available_data); 2545 /* 2546 printf("RART tokens=%d\n", i); 2547 */ 2548 ctl_set_success(ctsio); 2549 ctsio->io_hdr.flags |= CTL_FLAG_ALLOCATED; 2550 ctsio->be_move_done = ctl_config_move_done; 2551 ctl_datamove((union ctl_io *)ctsio); 2552 return (retval); 2553 } 2554 2555