xref: /freebsd/sys/cam/scsi/scsi_ch.c (revision 1f4bcc459a76b7aa664f3fd557684cd0ba6da352)
1 /*-
2  * Copyright (c) 1997 Justin T. Gibbs.
3  * Copyright (c) 1997, 1998, 1999 Kenneth D. Merry.
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions, and the following disclaimer,
11  *    without modification, immediately at the beginning of the file.
12  * 2. The name of the author may not be used to endorse or promote products
13  *    derived from this software without specific prior written permission.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
19  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25  * SUCH DAMAGE.
26  */
27 
28 /*
29  * Derived from the NetBSD SCSI changer driver.
30  *
31  *	$NetBSD: ch.c,v 1.32 1998/01/12 09:49:12 thorpej Exp $
32  *
33  */
34 /*-
35  * Copyright (c) 1996, 1997 Jason R. Thorpe <thorpej@and.com>
36  * All rights reserved.
37  *
38  * Partially based on an autochanger driver written by Stefan Grefen
39  * and on an autochanger driver written by the Systems Programming Group
40  * at the University of Utah Computer Science Department.
41  *
42  * Redistribution and use in source and binary forms, with or without
43  * modification, are permitted provided that the following conditions
44  * are met:
45  * 1. Redistributions of source code must retain the above copyright
46  *    notice, this list of conditions and the following disclaimer.
47  * 2. Redistributions in binary form must reproduce the above copyright
48  *    notice, this list of conditions and the following disclaimer in the
49  *    documentation and/or other materials provided with the distribution.
50  * 3. All advertising materials mentioning features or use of this software
51  *    must display the following acknowledgements:
52  *	This product includes software developed by Jason R. Thorpe
53  *	for And Communications, http://www.and.com/
54  * 4. The name of the author may not be used to endorse or promote products
55  *    derived from this software without specific prior written permission.
56  *
57  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
58  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
59  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
60  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
61  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
62  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
63  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
64  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
65  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
66  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
67  * SUCH DAMAGE.
68  */
69 
70 #include <sys/cdefs.h>
71 __FBSDID("$FreeBSD$");
72 
73 #include <sys/param.h>
74 #include <sys/queue.h>
75 #include <sys/systm.h>
76 #include <sys/kernel.h>
77 #include <sys/types.h>
78 #include <sys/malloc.h>
79 #include <sys/fcntl.h>
80 #include <sys/conf.h>
81 #include <sys/chio.h>
82 #include <sys/errno.h>
83 #include <sys/devicestat.h>
84 
85 #include <cam/cam.h>
86 #include <cam/cam_ccb.h>
87 #include <cam/cam_periph.h>
88 #include <cam/cam_xpt_periph.h>
89 #include <cam/cam_debug.h>
90 
91 #include <cam/scsi/scsi_all.h>
92 #include <cam/scsi/scsi_message.h>
93 #include <cam/scsi/scsi_ch.h>
94 
95 /*
96  * Timeout definitions for various changer related commands.  They may
97  * be too short for some devices (especially the timeout for INITIALIZE
98  * ELEMENT STATUS).
99  */
100 
101 static const u_int32_t	CH_TIMEOUT_MODE_SENSE                = 6000;
102 static const u_int32_t	CH_TIMEOUT_MOVE_MEDIUM               = 15 * 60 * 1000;
103 static const u_int32_t	CH_TIMEOUT_EXCHANGE_MEDIUM           = 15 * 60 * 1000;
104 static const u_int32_t	CH_TIMEOUT_POSITION_TO_ELEMENT       = 15 * 60 * 1000;
105 static const u_int32_t	CH_TIMEOUT_READ_ELEMENT_STATUS       = 5 * 60 * 1000;
106 static const u_int32_t	CH_TIMEOUT_SEND_VOLTAG		     = 10000;
107 static const u_int32_t	CH_TIMEOUT_INITIALIZE_ELEMENT_STATUS = 500000;
108 
109 typedef enum {
110 	CH_FLAG_INVALID		= 0x001
111 } ch_flags;
112 
113 typedef enum {
114 	CH_STATE_PROBE,
115 	CH_STATE_NORMAL
116 } ch_state;
117 
118 typedef enum {
119 	CH_CCB_PROBE
120 } ch_ccb_types;
121 
122 typedef enum {
123 	CH_Q_NONE	= 0x00,
124 	CH_Q_NO_DBD	= 0x01,
125 	CH_Q_NO_DVCID	= 0x02
126 } ch_quirks;
127 
128 #define CH_Q_BIT_STRING	\
129 	"\020"		\
130 	"\001NO_DBD"	\
131 	"\002NO_DVCID"
132 
133 #define ccb_state	ppriv_field0
134 #define ccb_bp		ppriv_ptr1
135 
136 struct scsi_mode_sense_data {
137 	struct scsi_mode_header_6 header;
138 	struct scsi_mode_blk_desc blk_desc;
139 	union {
140 		struct page_element_address_assignment ea;
141 		struct page_transport_geometry_parameters tg;
142 		struct page_device_capabilities cap;
143 	} pages;
144 };
145 
146 struct ch_softc {
147 	ch_flags	flags;
148 	ch_state	state;
149 	ch_quirks	quirks;
150 	union ccb	saved_ccb;
151 	struct devstat	*device_stats;
152 	struct cdev     *dev;
153 	int		open_count;
154 
155 	int		sc_picker;	/* current picker */
156 
157 	/*
158 	 * The following information is obtained from the
159 	 * element address assignment page.
160 	 */
161 	int		sc_firsts[CHET_MAX + 1];	/* firsts */
162 	int		sc_counts[CHET_MAX + 1];	/* counts */
163 
164 	/*
165 	 * The following mask defines the legal combinations
166 	 * of elements for the MOVE MEDIUM command.
167 	 */
168 	u_int8_t	sc_movemask[CHET_MAX + 1];
169 
170 	/*
171 	 * As above, but for EXCHANGE MEDIUM.
172 	 */
173 	u_int8_t	sc_exchangemask[CHET_MAX + 1];
174 
175 	/*
176 	 * Quirks; see below.  XXX KDM not implemented yet
177 	 */
178 	int		sc_settledelay;	/* delay for settle */
179 };
180 
181 static	d_open_t	chopen;
182 static	d_close_t	chclose;
183 static	d_ioctl_t	chioctl;
184 static	periph_init_t	chinit;
185 static  periph_ctor_t	chregister;
186 static	periph_oninv_t	choninvalidate;
187 static  periph_dtor_t   chcleanup;
188 static  periph_start_t  chstart;
189 static	void		chasync(void *callback_arg, u_int32_t code,
190 				struct cam_path *path, void *arg);
191 static	void		chdone(struct cam_periph *periph,
192 			       union ccb *done_ccb);
193 static	int		cherror(union ccb *ccb, u_int32_t cam_flags,
194 				u_int32_t sense_flags);
195 static	int		chmove(struct cam_periph *periph,
196 			       struct changer_move *cm);
197 static	int		chexchange(struct cam_periph *periph,
198 				   struct changer_exchange *ce);
199 static	int		chposition(struct cam_periph *periph,
200 				   struct changer_position *cp);
201 static	int		chgetelemstatus(struct cam_periph *periph,
202 				int scsi_version, u_long cmd,
203 				struct changer_element_status_request *csr);
204 static	int		chsetvoltag(struct cam_periph *periph,
205 				    struct changer_set_voltag_request *csvr);
206 static	int		chielem(struct cam_periph *periph,
207 				unsigned int timeout);
208 static	int		chgetparams(struct cam_periph *periph);
209 static	int		chscsiversion(struct cam_periph *periph);
210 
211 static struct periph_driver chdriver =
212 {
213 	chinit, "ch",
214 	TAILQ_HEAD_INITIALIZER(chdriver.units), /* generation */ 0
215 };
216 
217 PERIPHDRIVER_DECLARE(ch, chdriver);
218 
219 static struct cdevsw ch_cdevsw = {
220 	.d_version =	D_VERSION,
221 	.d_flags =	D_TRACKCLOSE,
222 	.d_open =	chopen,
223 	.d_close =	chclose,
224 	.d_ioctl =	chioctl,
225 	.d_name =	"ch",
226 };
227 
228 static MALLOC_DEFINE(M_SCSICH, "scsi_ch", "scsi_ch buffers");
229 
230 static void
231 chinit(void)
232 {
233 	cam_status status;
234 
235 	/*
236 	 * Install a global async callback.  This callback will
237 	 * receive async callbacks like "new device found".
238 	 */
239 	status = xpt_register_async(AC_FOUND_DEVICE, chasync, NULL, NULL);
240 
241 	if (status != CAM_REQ_CMP) {
242 		printf("ch: Failed to attach master async callback "
243 		       "due to status 0x%x!\n", status);
244 	}
245 }
246 
247 static void
248 chdevgonecb(void *arg)
249 {
250 	struct ch_softc   *softc;
251 	struct cam_periph *periph;
252 	struct mtx *mtx;
253 	int i;
254 
255 	periph = (struct cam_periph *)arg;
256 	mtx = cam_periph_mtx(periph);
257 	mtx_lock(mtx);
258 
259 	softc = (struct ch_softc *)periph->softc;
260 	KASSERT(softc->open_count >= 0, ("Negative open count %d",
261 		softc->open_count));
262 
263 	/*
264 	 * When we get this callback, we will get no more close calls from
265 	 * devfs.  So if we have any dangling opens, we need to release the
266 	 * reference held for that particular context.
267 	 */
268 	for (i = 0; i < softc->open_count; i++)
269 		cam_periph_release_locked(periph);
270 
271 	softc->open_count = 0;
272 
273 	/*
274 	 * Release the reference held for the device node, it is gone now.
275 	 */
276 	cam_periph_release_locked(periph);
277 
278 	/*
279 	 * We reference the lock directly here, instead of using
280 	 * cam_periph_unlock().  The reason is that the final call to
281 	 * cam_periph_release_locked() above could result in the periph
282 	 * getting freed.  If that is the case, dereferencing the periph
283 	 * with a cam_periph_unlock() call would cause a page fault.
284 	 */
285 	mtx_unlock(mtx);
286 }
287 
288 static void
289 choninvalidate(struct cam_periph *periph)
290 {
291 	struct ch_softc *softc;
292 
293 	softc = (struct ch_softc *)periph->softc;
294 
295 	/*
296 	 * De-register any async callbacks.
297 	 */
298 	xpt_register_async(0, chasync, periph, periph->path);
299 
300 	softc->flags |= CH_FLAG_INVALID;
301 
302 	/*
303 	 * Tell devfs this device has gone away, and ask for a callback
304 	 * when it has cleaned up its state.
305 	 */
306 	destroy_dev_sched_cb(softc->dev, chdevgonecb, periph);
307 }
308 
309 static void
310 chcleanup(struct cam_periph *periph)
311 {
312 	struct ch_softc *softc;
313 
314 	softc = (struct ch_softc *)periph->softc;
315 
316 	devstat_remove_entry(softc->device_stats);
317 
318 	free(softc, M_DEVBUF);
319 }
320 
321 static void
322 chasync(void *callback_arg, u_int32_t code, struct cam_path *path, void *arg)
323 {
324 	struct cam_periph *periph;
325 
326 	periph = (struct cam_periph *)callback_arg;
327 
328 	switch(code) {
329 	case AC_FOUND_DEVICE:
330 	{
331 		struct ccb_getdev *cgd;
332 		cam_status status;
333 
334 		cgd = (struct ccb_getdev *)arg;
335 		if (cgd == NULL)
336 			break;
337 
338 		if (cgd->protocol != PROTO_SCSI)
339 			break;
340 		if (SID_QUAL(&cgd->inq_data) != SID_QUAL_LU_CONNECTED)
341 			break;
342 		if (SID_TYPE(&cgd->inq_data)!= T_CHANGER)
343 			break;
344 
345 		/*
346 		 * Allocate a peripheral instance for
347 		 * this device and start the probe
348 		 * process.
349 		 */
350 		status = cam_periph_alloc(chregister, choninvalidate,
351 					  chcleanup, chstart, "ch",
352 					  CAM_PERIPH_BIO, path,
353 					  chasync, AC_FOUND_DEVICE, cgd);
354 
355 		if (status != CAM_REQ_CMP
356 		 && status != CAM_REQ_INPROG)
357 			printf("chasync: Unable to probe new device "
358 			       "due to status 0x%x\n", status);
359 
360 		break;
361 
362 	}
363 	default:
364 		cam_periph_async(periph, code, path, arg);
365 		break;
366 	}
367 }
368 
369 static cam_status
370 chregister(struct cam_periph *periph, void *arg)
371 {
372 	struct ch_softc *softc;
373 	struct ccb_getdev *cgd;
374 	struct ccb_pathinq cpi;
375 	struct make_dev_args args;
376 	int error;
377 
378 	cgd = (struct ccb_getdev *)arg;
379 	if (cgd == NULL) {
380 		printf("chregister: no getdev CCB, can't register device\n");
381 		return(CAM_REQ_CMP_ERR);
382 	}
383 
384 	softc = (struct ch_softc *)malloc(sizeof(*softc),M_DEVBUF,M_NOWAIT);
385 
386 	if (softc == NULL) {
387 		printf("chregister: Unable to probe new device. "
388 		       "Unable to allocate softc\n");
389 		return(CAM_REQ_CMP_ERR);
390 	}
391 
392 	bzero(softc, sizeof(*softc));
393 	softc->state = CH_STATE_PROBE;
394 	periph->softc = softc;
395 	softc->quirks = CH_Q_NONE;
396 
397 	/*
398 	 * The DVCID and CURDATA bits were not introduced until the SMC
399 	 * spec.  If this device claims SCSI-2 or earlier support, then it
400 	 * very likely does not support these bits.
401 	 */
402 	if (cgd->inq_data.version <= SCSI_REV_2)
403 		softc->quirks |= CH_Q_NO_DVCID;
404 
405 	bzero(&cpi, sizeof(cpi));
406 	xpt_setup_ccb(&cpi.ccb_h, periph->path, CAM_PRIORITY_NORMAL);
407 	cpi.ccb_h.func_code = XPT_PATH_INQ;
408 	xpt_action((union ccb *)&cpi);
409 
410 	/*
411 	 * Changers don't have a blocksize, and obviously don't support
412 	 * tagged queueing.
413 	 */
414 	cam_periph_unlock(periph);
415 	softc->device_stats = devstat_new_entry("ch",
416 			  periph->unit_number, 0,
417 			  DEVSTAT_NO_BLOCKSIZE | DEVSTAT_NO_ORDERED_TAGS,
418 			  SID_TYPE(&cgd->inq_data) |
419 			  XPORT_DEVSTAT_TYPE(cpi.transport),
420 			  DEVSTAT_PRIORITY_OTHER);
421 
422 	/*
423 	 * Acquire a reference to the periph before we create the devfs
424 	 * instance for it.  We'll release this reference once the devfs
425 	 * instance has been freed.
426 	 */
427 	if (cam_periph_acquire(periph) != CAM_REQ_CMP) {
428 		xpt_print(periph->path, "%s: lost periph during "
429 			  "registration!\n", __func__);
430 		cam_periph_lock(periph);
431 		return (CAM_REQ_CMP_ERR);
432 	}
433 
434 
435 	/* Register the device */
436 	make_dev_args_init(&args);
437 	args.mda_devsw = &ch_cdevsw;
438 	args.mda_unit = periph->unit_number;
439 	args.mda_uid = UID_ROOT;
440 	args.mda_gid = GID_OPERATOR;
441 	args.mda_mode = 0600;
442 	args.mda_si_drv1 = periph;
443 	error = make_dev_s(&args, &softc->dev, "%s%d", periph->periph_name,
444 	    periph->unit_number);
445 	cam_periph_lock(periph);
446 	if (error != 0) {
447 		cam_periph_release_locked(periph);
448 		return (CAM_REQ_CMP_ERR);
449 	}
450 
451 	/*
452 	 * Add an async callback so that we get
453 	 * notified if this device goes away.
454 	 */
455 	xpt_register_async(AC_LOST_DEVICE, chasync, periph, periph->path);
456 
457 	/*
458 	 * Lock this periph until we are setup.
459 	 * This first call can't block
460 	 */
461 	(void)cam_periph_hold(periph, PRIBIO);
462 	xpt_schedule(periph, CAM_PRIORITY_DEV);
463 
464 	return(CAM_REQ_CMP);
465 }
466 
467 static int
468 chopen(struct cdev *dev, int flags, int fmt, struct thread *td)
469 {
470 	struct cam_periph *periph;
471 	struct ch_softc *softc;
472 	int error;
473 
474 	periph = (struct cam_periph *)dev->si_drv1;
475 	if (cam_periph_acquire(periph) != CAM_REQ_CMP)
476 		return (ENXIO);
477 
478 	softc = (struct ch_softc *)periph->softc;
479 
480 	cam_periph_lock(periph);
481 
482 	if (softc->flags & CH_FLAG_INVALID) {
483 		cam_periph_release_locked(periph);
484 		cam_periph_unlock(periph);
485 		return(ENXIO);
486 	}
487 
488 	if ((error = cam_periph_hold(periph, PRIBIO | PCATCH)) != 0) {
489 		cam_periph_unlock(periph);
490 		cam_periph_release(periph);
491 		return (error);
492 	}
493 
494 	/*
495 	 * Load information about this changer device into the softc.
496 	 */
497 	if ((error = chgetparams(periph)) != 0) {
498 		cam_periph_unhold(periph);
499 		cam_periph_release_locked(periph);
500 		cam_periph_unlock(periph);
501 		return(error);
502 	}
503 
504 	cam_periph_unhold(periph);
505 
506 	softc->open_count++;
507 
508 	cam_periph_unlock(periph);
509 
510 	return(error);
511 }
512 
513 static int
514 chclose(struct cdev *dev, int flag, int fmt, struct thread *td)
515 {
516 	struct	cam_periph *periph;
517 	struct  ch_softc *softc;
518 	struct mtx *mtx;
519 
520 	periph = (struct cam_periph *)dev->si_drv1;
521 	mtx = cam_periph_mtx(periph);
522 	mtx_lock(mtx);
523 
524 	softc = (struct ch_softc *)periph->softc;
525 	softc->open_count--;
526 
527 	cam_periph_release_locked(periph);
528 
529 	/*
530 	 * We reference the lock directly here, instead of using
531 	 * cam_periph_unlock().  The reason is that the call to
532 	 * cam_periph_release_locked() above could result in the periph
533 	 * getting freed.  If that is the case, dereferencing the periph
534 	 * with a cam_periph_unlock() call would cause a page fault.
535 	 *
536 	 * cam_periph_release() avoids this problem using the same method,
537 	 * but we're manually acquiring and dropping the lock here to
538 	 * protect the open count and avoid another lock acquisition and
539 	 * release.
540 	 */
541 	mtx_unlock(mtx);
542 
543 	return(0);
544 }
545 
546 static void
547 chstart(struct cam_periph *periph, union ccb *start_ccb)
548 {
549 	struct ch_softc *softc;
550 
551 	softc = (struct ch_softc *)periph->softc;
552 
553 	switch (softc->state) {
554 	case CH_STATE_NORMAL:
555 	{
556 		xpt_release_ccb(start_ccb);
557 		break;
558 	}
559 	case CH_STATE_PROBE:
560 	{
561 		int mode_buffer_len;
562 		void *mode_buffer;
563 
564 		/*
565 		 * Include the block descriptor when calculating the mode
566 		 * buffer length,
567 		 */
568 		mode_buffer_len = sizeof(struct scsi_mode_header_6) +
569 				  sizeof(struct scsi_mode_blk_desc) +
570 				 sizeof(struct page_element_address_assignment);
571 
572 		mode_buffer = malloc(mode_buffer_len, M_SCSICH, M_NOWAIT);
573 
574 		if (mode_buffer == NULL) {
575 			printf("chstart: couldn't malloc mode sense data\n");
576 			break;
577 		}
578 		bzero(mode_buffer, mode_buffer_len);
579 
580 		/*
581 		 * Get the element address assignment page.
582 		 */
583 		scsi_mode_sense(&start_ccb->csio,
584 				/* retries */ 1,
585 				/* cbfcnp */ chdone,
586 				/* tag_action */ MSG_SIMPLE_Q_TAG,
587 				/* dbd */ (softc->quirks & CH_Q_NO_DBD) ?
588 					FALSE : TRUE,
589 				/* page_code */ SMS_PAGE_CTRL_CURRENT,
590 				/* page */ CH_ELEMENT_ADDR_ASSIGN_PAGE,
591 				/* param_buf */ (u_int8_t *)mode_buffer,
592 				/* param_len */ mode_buffer_len,
593 				/* sense_len */ SSD_FULL_SIZE,
594 				/* timeout */ CH_TIMEOUT_MODE_SENSE);
595 
596 		start_ccb->ccb_h.ccb_bp = NULL;
597 		start_ccb->ccb_h.ccb_state = CH_CCB_PROBE;
598 		xpt_action(start_ccb);
599 		break;
600 	}
601 	}
602 }
603 
604 static void
605 chdone(struct cam_periph *periph, union ccb *done_ccb)
606 {
607 	struct ch_softc *softc;
608 	struct ccb_scsiio *csio;
609 
610 	softc = (struct ch_softc *)periph->softc;
611 	csio = &done_ccb->csio;
612 
613 	switch(done_ccb->ccb_h.ccb_state) {
614 	case CH_CCB_PROBE:
615 	{
616 		struct scsi_mode_header_6 *mode_header;
617 		struct page_element_address_assignment *ea;
618 		char announce_buf[80];
619 
620 
621 		mode_header = (struct scsi_mode_header_6 *)csio->data_ptr;
622 
623 		ea = (struct page_element_address_assignment *)
624 			find_mode_page_6(mode_header);
625 
626 		if ((done_ccb->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_CMP){
627 
628 			softc->sc_firsts[CHET_MT] = scsi_2btoul(ea->mtea);
629 			softc->sc_counts[CHET_MT] = scsi_2btoul(ea->nmte);
630 			softc->sc_firsts[CHET_ST] = scsi_2btoul(ea->fsea);
631 			softc->sc_counts[CHET_ST] = scsi_2btoul(ea->nse);
632 			softc->sc_firsts[CHET_IE] = scsi_2btoul(ea->fieea);
633 			softc->sc_counts[CHET_IE] = scsi_2btoul(ea->niee);
634 			softc->sc_firsts[CHET_DT] = scsi_2btoul(ea->fdtea);
635 			softc->sc_counts[CHET_DT] = scsi_2btoul(ea->ndte);
636 			softc->sc_picker = softc->sc_firsts[CHET_MT];
637 
638 #define PLURAL(c)	(c) == 1 ? "" : "s"
639 			snprintf(announce_buf, sizeof(announce_buf),
640 				"%d slot%s, %d drive%s, "
641 				"%d picker%s, %d portal%s",
642 		    		softc->sc_counts[CHET_ST],
643 				PLURAL(softc->sc_counts[CHET_ST]),
644 		    		softc->sc_counts[CHET_DT],
645 				PLURAL(softc->sc_counts[CHET_DT]),
646 		    		softc->sc_counts[CHET_MT],
647 				PLURAL(softc->sc_counts[CHET_MT]),
648 		    		softc->sc_counts[CHET_IE],
649 				PLURAL(softc->sc_counts[CHET_IE]));
650 #undef PLURAL
651 		} else {
652 			int error;
653 
654 			error = cherror(done_ccb, CAM_RETRY_SELTO,
655 					SF_RETRY_UA | SF_NO_PRINT);
656 			/*
657 			 * Retry any UNIT ATTENTION type errors.  They
658 			 * are expected at boot.
659 			 */
660 			if (error == ERESTART) {
661 				/*
662 				 * A retry was scheuled, so
663 				 * just return.
664 				 */
665 				return;
666 			} else if (error != 0) {
667 				struct scsi_mode_sense_6 *sms;
668 				int frozen, retry_scheduled;
669 
670 				sms = (struct scsi_mode_sense_6 *)
671 					done_ccb->csio.cdb_io.cdb_bytes;
672 				frozen = (done_ccb->ccb_h.status &
673 				    CAM_DEV_QFRZN) != 0;
674 
675 				/*
676 				 * Check to see if block descriptors were
677 				 * disabled.  Some devices don't like that.
678 				 * We're taking advantage of the fact that
679 				 * the first few bytes of the 6 and 10 byte
680 				 * mode sense commands are the same.  If
681 				 * block descriptors were disabled, enable
682 				 * them and re-send the command.
683 				 */
684 				if ((sms->byte2 & SMS_DBD) != 0 &&
685 				    (periph->flags & CAM_PERIPH_INVALID) == 0) {
686 					sms->byte2 &= ~SMS_DBD;
687 					xpt_action(done_ccb);
688 					softc->quirks |= CH_Q_NO_DBD;
689 					retry_scheduled = 1;
690 				} else
691 					retry_scheduled = 0;
692 
693 				/* Don't wedge this device's queue */
694 				if (frozen)
695 					cam_release_devq(done_ccb->ccb_h.path,
696 						 /*relsim_flags*/0,
697 						 /*reduction*/0,
698 						 /*timeout*/0,
699 						 /*getcount_only*/0);
700 
701 				if (retry_scheduled)
702 					return;
703 
704 				if ((done_ccb->ccb_h.status & CAM_STATUS_MASK)
705 				    == CAM_SCSI_STATUS_ERROR)
706 					scsi_sense_print(&done_ccb->csio);
707 				else {
708 					xpt_print(periph->path,
709 					    "got CAM status %#x\n",
710 					    done_ccb->ccb_h.status);
711 				}
712 				xpt_print(periph->path, "fatal error, failed "
713 				    "to attach to device\n");
714 
715 				cam_periph_invalidate(periph);
716 
717 				announce_buf[0] = '\0';
718 			}
719 		}
720 		if (announce_buf[0] != '\0') {
721 			xpt_announce_periph(periph, announce_buf);
722 			xpt_announce_quirks(periph, softc->quirks,
723 			    CH_Q_BIT_STRING);
724 		}
725 		softc->state = CH_STATE_NORMAL;
726 		free(mode_header, M_SCSICH);
727 		/*
728 		 * Since our peripheral may be invalidated by an error
729 		 * above or an external event, we must release our CCB
730 		 * before releasing the probe lock on the peripheral.
731 		 * The peripheral will only go away once the last lock
732 		 * is removed, and we need it around for the CCB release
733 		 * operation.
734 		 */
735 		xpt_release_ccb(done_ccb);
736 		cam_periph_unhold(periph);
737 		return;
738 	}
739 	default:
740 		break;
741 	}
742 	xpt_release_ccb(done_ccb);
743 }
744 
745 static int
746 cherror(union ccb *ccb, u_int32_t cam_flags, u_int32_t sense_flags)
747 {
748 	struct ch_softc *softc;
749 	struct cam_periph *periph;
750 
751 	periph = xpt_path_periph(ccb->ccb_h.path);
752 	softc = (struct ch_softc *)periph->softc;
753 
754 	return (cam_periph_error(ccb, cam_flags, sense_flags,
755 				 &softc->saved_ccb));
756 }
757 
758 static int
759 chioctl(struct cdev *dev, u_long cmd, caddr_t addr, int flag, struct thread *td)
760 {
761 	struct cam_periph *periph;
762 	struct ch_softc *softc;
763 	int error;
764 
765 	periph = (struct cam_periph *)dev->si_drv1;
766 	cam_periph_lock(periph);
767 	CAM_DEBUG(periph->path, CAM_DEBUG_TRACE, ("entering chioctl\n"));
768 
769 	softc = (struct ch_softc *)periph->softc;
770 
771 	error = 0;
772 
773 	CAM_DEBUG(periph->path, CAM_DEBUG_TRACE,
774 		  ("trying to do ioctl %#lx\n", cmd));
775 
776 	/*
777 	 * If this command can change the device's state, we must
778 	 * have the device open for writing.
779 	 */
780 	switch (cmd) {
781 	case CHIOGPICKER:
782 	case CHIOGPARAMS:
783 	case OCHIOGSTATUS:
784 	case CHIOGSTATUS:
785 		break;
786 
787 	default:
788 		if ((flag & FWRITE) == 0) {
789 			cam_periph_unlock(periph);
790 			return (EBADF);
791 		}
792 	}
793 
794 	switch (cmd) {
795 	case CHIOMOVE:
796 		error = chmove(periph, (struct changer_move *)addr);
797 		break;
798 
799 	case CHIOEXCHANGE:
800 		error = chexchange(periph, (struct changer_exchange *)addr);
801 		break;
802 
803 	case CHIOPOSITION:
804 		error = chposition(periph, (struct changer_position *)addr);
805 		break;
806 
807 	case CHIOGPICKER:
808 		*(int *)addr = softc->sc_picker - softc->sc_firsts[CHET_MT];
809 		break;
810 
811 	case CHIOSPICKER:
812 	{
813 		int new_picker = *(int *)addr;
814 
815 		if (new_picker > (softc->sc_counts[CHET_MT] - 1)) {
816 			error = EINVAL;
817 			break;
818 		}
819 		softc->sc_picker = softc->sc_firsts[CHET_MT] + new_picker;
820 		break;
821 	}
822 	case CHIOGPARAMS:
823 	{
824 		struct changer_params *cp = (struct changer_params *)addr;
825 
826 		cp->cp_npickers = softc->sc_counts[CHET_MT];
827 		cp->cp_nslots = softc->sc_counts[CHET_ST];
828 		cp->cp_nportals = softc->sc_counts[CHET_IE];
829 		cp->cp_ndrives = softc->sc_counts[CHET_DT];
830 		break;
831 	}
832 	case CHIOIELEM:
833 		error = chielem(periph, *(unsigned int *)addr);
834 		break;
835 
836 	case OCHIOGSTATUS:
837 	{
838 		error = chgetelemstatus(periph, SCSI_REV_2, cmd,
839 		    (struct changer_element_status_request *)addr);
840 		break;
841 	}
842 
843 	case CHIOGSTATUS:
844 	{
845 		int scsi_version;
846 
847 		scsi_version = chscsiversion(periph);
848 		if (scsi_version >= SCSI_REV_0) {
849 			error = chgetelemstatus(periph, scsi_version, cmd,
850 			    (struct changer_element_status_request *)addr);
851 	  	}
852 		else { /* unable to determine the SCSI version */
853 			cam_periph_unlock(periph);
854 			return (ENXIO);
855 		}
856 		break;
857 	}
858 
859 	case CHIOSETVOLTAG:
860 	{
861 		error = chsetvoltag(periph,
862 				    (struct changer_set_voltag_request *) addr);
863 		break;
864 	}
865 
866 	/* Implement prevent/allow? */
867 
868 	default:
869 		error = cam_periph_ioctl(periph, cmd, addr, cherror);
870 		break;
871 	}
872 
873 	cam_periph_unlock(periph);
874 	return (error);
875 }
876 
877 static int
878 chmove(struct cam_periph *periph, struct changer_move *cm)
879 {
880 	struct ch_softc *softc;
881 	u_int16_t fromelem, toelem;
882 	union ccb *ccb;
883 	int error;
884 
885 	error = 0;
886 	softc = (struct ch_softc *)periph->softc;
887 
888 	/*
889 	 * Check arguments.
890 	 */
891 	if ((cm->cm_fromtype > CHET_DT) || (cm->cm_totype > CHET_DT))
892 		return (EINVAL);
893 	if ((cm->cm_fromunit > (softc->sc_counts[cm->cm_fromtype] - 1)) ||
894 	    (cm->cm_tounit > (softc->sc_counts[cm->cm_totype] - 1)))
895 		return (ENODEV);
896 
897 	/*
898 	 * Check the request against the changer's capabilities.
899 	 */
900 	if ((softc->sc_movemask[cm->cm_fromtype] & (1 << cm->cm_totype)) == 0)
901 		return (ENODEV);
902 
903 	/*
904 	 * Calculate the source and destination elements.
905 	 */
906 	fromelem = softc->sc_firsts[cm->cm_fromtype] + cm->cm_fromunit;
907 	toelem = softc->sc_firsts[cm->cm_totype] + cm->cm_tounit;
908 
909 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
910 
911 	scsi_move_medium(&ccb->csio,
912 			 /* retries */ 1,
913 			 /* cbfcnp */ chdone,
914 			 /* tag_action */ MSG_SIMPLE_Q_TAG,
915 			 /* tea */ softc->sc_picker,
916 			 /* src */ fromelem,
917 			 /* dst */ toelem,
918 			 /* invert */ (cm->cm_flags & CM_INVERT) ? TRUE : FALSE,
919 			 /* sense_len */ SSD_FULL_SIZE,
920 			 /* timeout */ CH_TIMEOUT_MOVE_MEDIUM);
921 
922 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/CAM_RETRY_SELTO,
923 				  /*sense_flags*/ SF_RETRY_UA,
924 				  softc->device_stats);
925 
926 	xpt_release_ccb(ccb);
927 
928 	return(error);
929 }
930 
931 static int
932 chexchange(struct cam_periph *periph, struct changer_exchange *ce)
933 {
934 	struct ch_softc *softc;
935 	u_int16_t src, dst1, dst2;
936 	union ccb *ccb;
937 	int error;
938 
939 	error = 0;
940 	softc = (struct ch_softc *)periph->softc;
941 	/*
942 	 * Check arguments.
943 	 */
944 	if ((ce->ce_srctype > CHET_DT) || (ce->ce_fdsttype > CHET_DT) ||
945 	    (ce->ce_sdsttype > CHET_DT))
946 		return (EINVAL);
947 	if ((ce->ce_srcunit > (softc->sc_counts[ce->ce_srctype] - 1)) ||
948 	    (ce->ce_fdstunit > (softc->sc_counts[ce->ce_fdsttype] - 1)) ||
949 	    (ce->ce_sdstunit > (softc->sc_counts[ce->ce_sdsttype] - 1)))
950 		return (ENODEV);
951 
952 	/*
953 	 * Check the request against the changer's capabilities.
954 	 */
955 	if (((softc->sc_exchangemask[ce->ce_srctype] &
956 	     (1 << ce->ce_fdsttype)) == 0) ||
957 	    ((softc->sc_exchangemask[ce->ce_fdsttype] &
958 	     (1 << ce->ce_sdsttype)) == 0))
959 		return (ENODEV);
960 
961 	/*
962 	 * Calculate the source and destination elements.
963 	 */
964 	src = softc->sc_firsts[ce->ce_srctype] + ce->ce_srcunit;
965 	dst1 = softc->sc_firsts[ce->ce_fdsttype] + ce->ce_fdstunit;
966 	dst2 = softc->sc_firsts[ce->ce_sdsttype] + ce->ce_sdstunit;
967 
968 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
969 
970 	scsi_exchange_medium(&ccb->csio,
971 			     /* retries */ 1,
972 			     /* cbfcnp */ chdone,
973 			     /* tag_action */ MSG_SIMPLE_Q_TAG,
974 			     /* tea */ softc->sc_picker,
975 			     /* src */ src,
976 			     /* dst1 */ dst1,
977 			     /* dst2 */ dst2,
978 			     /* invert1 */ (ce->ce_flags & CE_INVERT1) ?
979 			                   TRUE : FALSE,
980 			     /* invert2 */ (ce->ce_flags & CE_INVERT2) ?
981 			                   TRUE : FALSE,
982 			     /* sense_len */ SSD_FULL_SIZE,
983 			     /* timeout */ CH_TIMEOUT_EXCHANGE_MEDIUM);
984 
985 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/CAM_RETRY_SELTO,
986 				  /*sense_flags*/ SF_RETRY_UA,
987 				  softc->device_stats);
988 
989 	xpt_release_ccb(ccb);
990 
991 	return(error);
992 }
993 
994 static int
995 chposition(struct cam_periph *periph, struct changer_position *cp)
996 {
997 	struct ch_softc *softc;
998 	u_int16_t dst;
999 	union ccb *ccb;
1000 	int error;
1001 
1002 	error = 0;
1003 	softc = (struct ch_softc *)periph->softc;
1004 
1005 	/*
1006 	 * Check arguments.
1007 	 */
1008 	if (cp->cp_type > CHET_DT)
1009 		return (EINVAL);
1010 	if (cp->cp_unit > (softc->sc_counts[cp->cp_type] - 1))
1011 		return (ENODEV);
1012 
1013 	/*
1014 	 * Calculate the destination element.
1015 	 */
1016 	dst = softc->sc_firsts[cp->cp_type] + cp->cp_unit;
1017 
1018 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
1019 
1020 	scsi_position_to_element(&ccb->csio,
1021 				 /* retries */ 1,
1022 				 /* cbfcnp */ chdone,
1023 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
1024 				 /* tea */ softc->sc_picker,
1025 				 /* dst */ dst,
1026 				 /* invert */ (cp->cp_flags & CP_INVERT) ?
1027 					      TRUE : FALSE,
1028 				 /* sense_len */ SSD_FULL_SIZE,
1029 				 /* timeout */ CH_TIMEOUT_POSITION_TO_ELEMENT);
1030 
1031 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1032 				  /*sense_flags*/ SF_RETRY_UA,
1033 				  softc->device_stats);
1034 
1035 	xpt_release_ccb(ccb);
1036 
1037 	return(error);
1038 }
1039 
1040 /*
1041  * Copy a volume tag to a volume_tag struct, converting SCSI byte order
1042  * to host native byte order in the volume serial number.  The volume
1043  * label as returned by the changer is transferred to user mode as
1044  * nul-terminated string.  Volume labels are truncated at the first
1045  * space, as suggested by SCSI-2.
1046  */
1047 static	void
1048 copy_voltag(struct changer_voltag *uvoltag, struct volume_tag *voltag)
1049 {
1050 	int i;
1051 	for (i=0; i<CH_VOLTAG_MAXLEN; i++) {
1052 		char c = voltag->vif[i];
1053 		if (c && c != ' ')
1054 			uvoltag->cv_volid[i] = c;
1055 	        else
1056 			break;
1057 	}
1058 	uvoltag->cv_serial = scsi_2btoul(voltag->vsn);
1059 }
1060 
1061 /*
1062  * Copy an element status descriptor to a user-mode
1063  * changer_element_status structure.
1064  */
1065 static void
1066 copy_element_status(struct ch_softc *softc,
1067 		    u_int16_t flags,
1068 		    struct read_element_status_descriptor *desc,
1069 		    struct changer_element_status *ces,
1070 		    int scsi_version)
1071 {
1072 	u_int16_t eaddr = scsi_2btoul(desc->eaddr);
1073 	u_int16_t et;
1074 	struct volume_tag *pvol_tag = NULL, *avol_tag = NULL;
1075 	struct read_element_status_device_id *devid = NULL;
1076 
1077 	ces->ces_int_addr = eaddr;
1078 	/* set up logical address in element status */
1079 	for (et = CHET_MT; et <= CHET_DT; et++) {
1080 		if ((softc->sc_firsts[et] <= eaddr)
1081 		    && ((softc->sc_firsts[et] + softc->sc_counts[et])
1082 			> eaddr)) {
1083 			ces->ces_addr = eaddr - softc->sc_firsts[et];
1084 			ces->ces_type = et;
1085 			break;
1086 		}
1087 	}
1088 
1089 	ces->ces_flags = desc->flags1;
1090 
1091 	ces->ces_sensecode = desc->sense_code;
1092 	ces->ces_sensequal = desc->sense_qual;
1093 
1094 	if (desc->flags2 & READ_ELEMENT_STATUS_INVERT)
1095 		ces->ces_flags |= CES_INVERT;
1096 
1097 	if (desc->flags2 & READ_ELEMENT_STATUS_SVALID) {
1098 
1099 		eaddr = scsi_2btoul(desc->ssea);
1100 
1101 		/* convert source address to logical format */
1102 		for (et = CHET_MT; et <= CHET_DT; et++) {
1103 			if ((softc->sc_firsts[et] <= eaddr)
1104 			    && ((softc->sc_firsts[et] + softc->sc_counts[et])
1105 				> eaddr)) {
1106 				ces->ces_source_addr =
1107 					eaddr - softc->sc_firsts[et];
1108 				ces->ces_source_type = et;
1109 				ces->ces_flags |= CES_SOURCE_VALID;
1110 				break;
1111 			}
1112 		}
1113 
1114 		if (!(ces->ces_flags & CES_SOURCE_VALID))
1115 			printf("ch: warning: could not map element source "
1116 			       "address %ud to a valid element type\n",
1117 			       eaddr);
1118 	}
1119 
1120 	/*
1121 	 * pvoltag and avoltag are common between SCSI-2 and later versions
1122 	 */
1123 	if (flags & READ_ELEMENT_STATUS_PVOLTAG)
1124 		pvol_tag = &desc->voltag_devid.pvoltag;
1125 	if (flags & READ_ELEMENT_STATUS_AVOLTAG)
1126 		avol_tag = (flags & READ_ELEMENT_STATUS_PVOLTAG) ?
1127 		    &desc->voltag_devid.voltag[1] :&desc->voltag_devid.pvoltag;
1128 	/*
1129 	 * For SCSI-3 and later, element status can carry designator and
1130 	 * other information.
1131 	 */
1132 	if (scsi_version >= SCSI_REV_SPC) {
1133 		if ((flags & READ_ELEMENT_STATUS_PVOLTAG) ^
1134 		    (flags & READ_ELEMENT_STATUS_AVOLTAG))
1135 			devid = &desc->voltag_devid.pvol_and_devid.devid;
1136 		else if (!(flags & READ_ELEMENT_STATUS_PVOLTAG) &&
1137 			 !(flags & READ_ELEMENT_STATUS_AVOLTAG))
1138 			devid = &desc->voltag_devid.devid;
1139 		else /* Have both PVOLTAG and AVOLTAG */
1140 			devid = &desc->voltag_devid.vol_tags_and_devid.devid;
1141 	}
1142 
1143 	if (pvol_tag)
1144 		copy_voltag(&(ces->ces_pvoltag), pvol_tag);
1145 	if (avol_tag)
1146 		copy_voltag(&(ces->ces_pvoltag), avol_tag);
1147 	if (devid != NULL) {
1148 		if (devid->designator_length > 0) {
1149 			bcopy((void *)devid->designator,
1150 			      (void *)ces->ces_designator,
1151 			      devid->designator_length);
1152 			ces->ces_designator_length = devid->designator_length;
1153 			/*
1154 			 * Make sure we are always NUL terminated.  The
1155 			 * This won't matter for the binary code set,
1156 			 * since the user will only pay attention to the
1157 			 * length field.
1158 			 */
1159 			ces->ces_designator[devid->designator_length]= '\0';
1160 		}
1161 		if (devid->piv_assoc_designator_type &
1162 		    READ_ELEMENT_STATUS_PIV_SET) {
1163 			ces->ces_flags |= CES_PIV;
1164 			ces->ces_protocol_id =
1165 			    READ_ELEMENT_STATUS_PROTOCOL_ID(
1166 			    devid->prot_code_set);
1167 		}
1168 		ces->ces_code_set =
1169 		    READ_ELEMENT_STATUS_CODE_SET(devid->prot_code_set);
1170 		ces->ces_assoc = READ_ELEMENT_STATUS_ASSOCIATION(
1171 		    devid->piv_assoc_designator_type);
1172 		ces->ces_designator_type = READ_ELEMENT_STATUS_DESIGNATOR_TYPE(
1173 		    devid->piv_assoc_designator_type);
1174 	} else if (scsi_version > SCSI_REV_2) {
1175 		/* SCSI-SPC and No devid, no designator */
1176 		ces->ces_designator_length = 0;
1177 		ces->ces_designator[0] = '\0';
1178 		ces->ces_protocol_id = CES_PROTOCOL_ID_FCP_4;
1179 	}
1180 
1181 	if (scsi_version <= SCSI_REV_2) {
1182 		if (desc->dt_or_obsolete.scsi_2.dt_scsi_flags &
1183 		    READ_ELEMENT_STATUS_DT_IDVALID) {
1184 			ces->ces_flags |= CES_SCSIID_VALID;
1185 			ces->ces_scsi_id =
1186 			    desc->dt_or_obsolete.scsi_2.dt_scsi_addr;
1187 		}
1188 
1189 		if (desc->dt_or_obsolete.scsi_2.dt_scsi_addr &
1190 		    READ_ELEMENT_STATUS_DT_LUVALID) {
1191 			ces->ces_flags |= CES_LUN_VALID;
1192 			ces->ces_scsi_lun =
1193 			    desc->dt_or_obsolete.scsi_2.dt_scsi_flags &
1194 			    READ_ELEMENT_STATUS_DT_LUNMASK;
1195 		}
1196 	}
1197 }
1198 
1199 static int
1200 chgetelemstatus(struct cam_periph *periph, int scsi_version, u_long cmd,
1201 		struct changer_element_status_request *cesr)
1202 {
1203 	struct read_element_status_header *st_hdr;
1204 	struct read_element_status_page_header *pg_hdr;
1205 	struct read_element_status_descriptor *desc;
1206 	caddr_t data = NULL;
1207 	size_t size, desclen;
1208 	int avail, i, error = 0;
1209 	int curdata, dvcid, sense_flags;
1210 	int try_no_dvcid = 0;
1211 	struct changer_element_status *user_data = NULL;
1212 	struct ch_softc *softc;
1213 	union ccb *ccb;
1214 	int chet = cesr->cesr_element_type;
1215 	int want_voltags = (cesr->cesr_flags & CESR_VOLTAGS) ? 1 : 0;
1216 
1217 	softc = (struct ch_softc *)periph->softc;
1218 
1219 	/* perform argument checking */
1220 
1221 	/*
1222 	 * Perform a range check on the cesr_element_{base,count}
1223 	 * request argument fields.
1224 	 */
1225 	if ((softc->sc_counts[chet] - cesr->cesr_element_base) <= 0
1226 	    || (cesr->cesr_element_base + cesr->cesr_element_count)
1227 	        > softc->sc_counts[chet])
1228 		return (EINVAL);
1229 
1230 	/*
1231 	 * Request one descriptor for the given element type.  This
1232 	 * is used to determine the size of the descriptor so that
1233 	 * we can allocate enough storage for all of them.  We assume
1234 	 * that the first one can fit into 1k.
1235 	 */
1236 	cam_periph_unlock(periph);
1237 	data = (caddr_t)malloc(1024, M_DEVBUF, M_WAITOK);
1238 
1239 	cam_periph_lock(periph);
1240 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
1241 
1242 	sense_flags = SF_RETRY_UA;
1243 	if (softc->quirks & CH_Q_NO_DVCID) {
1244 		dvcid = 0;
1245 		curdata = 0;
1246 	} else {
1247 		dvcid = 1;
1248 		curdata = 1;
1249 		/*
1250 		 * Don't print anything for an Illegal Request, because
1251 		 * these flags can cause some changers to complain.  We'll
1252 		 * retry without them if we get an error.
1253 		 */
1254 		sense_flags |= SF_QUIET_IR;
1255 	}
1256 
1257 retry_einval:
1258 
1259 	scsi_read_element_status(&ccb->csio,
1260 				 /* retries */ 1,
1261 				 /* cbfcnp */ chdone,
1262 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
1263 				 /* voltag */ want_voltags,
1264 				 /* sea */ softc->sc_firsts[chet],
1265 				 /* curdata */ curdata,
1266 				 /* dvcid */ dvcid,
1267 				 /* count */ 1,
1268 				 /* data_ptr */ data,
1269 				 /* dxfer_len */ 1024,
1270 				 /* sense_len */ SSD_FULL_SIZE,
1271 				 /* timeout */ CH_TIMEOUT_READ_ELEMENT_STATUS);
1272 
1273 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1274 				  /*sense_flags*/ sense_flags,
1275 				  softc->device_stats);
1276 
1277 	/*
1278 	 * An Illegal Request sense key (only used if there is no asc/ascq)
1279 	 * or 0x24,0x00 for an ASC/ASCQ both map to EINVAL.  If dvcid or
1280 	 * curdata are set (we set both or neither), try turning them off
1281 	 * and see if the command is successful.
1282 	 */
1283 	if ((error == EINVAL)
1284 	 && (dvcid || curdata))  {
1285 		dvcid = 0;
1286 		curdata = 0;
1287 		error = 0;
1288 		/* At this point we want to report any Illegal Request */
1289 		sense_flags &= ~SF_QUIET_IR;
1290 		try_no_dvcid = 1;
1291 		goto retry_einval;
1292 	}
1293 
1294 	/*
1295 	 * In this case, we tried a read element status with dvcid and
1296 	 * curdata set, and it failed.  We retried without those bits, and
1297 	 * it succeeded.  Suggest to the user that he set a quirk, so we
1298 	 * don't go through the retry process the first time in the future.
1299 	 * This should only happen on changers that claim SCSI-3 or higher,
1300 	 * but don't support these bits.
1301 	 */
1302 	if ((try_no_dvcid != 0)
1303 	 && (error == 0))
1304 		softc->quirks |= CH_Q_NO_DVCID;
1305 
1306 	if (error)
1307 		goto done;
1308 	cam_periph_unlock(periph);
1309 
1310 	st_hdr = (struct read_element_status_header *)data;
1311 	pg_hdr = (struct read_element_status_page_header *)((uintptr_t)st_hdr +
1312 		  sizeof(struct read_element_status_header));
1313 	desclen = scsi_2btoul(pg_hdr->edl);
1314 
1315 	size = sizeof(struct read_element_status_header) +
1316 	       sizeof(struct read_element_status_page_header) +
1317 	       (desclen * cesr->cesr_element_count);
1318 	/*
1319 	 * Reallocate storage for descriptors and get them from the
1320 	 * device.
1321 	 */
1322 	free(data, M_DEVBUF);
1323 	data = (caddr_t)malloc(size, M_DEVBUF, M_WAITOK);
1324 
1325 	cam_periph_lock(periph);
1326 	scsi_read_element_status(&ccb->csio,
1327 				 /* retries */ 1,
1328 				 /* cbfcnp */ chdone,
1329 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
1330 				 /* voltag */ want_voltags,
1331 				 /* sea */ softc->sc_firsts[chet]
1332 				 + cesr->cesr_element_base,
1333 				 /* curdata */ curdata,
1334 				 /* dvcid */ dvcid,
1335 				 /* count */ cesr->cesr_element_count,
1336 				 /* data_ptr */ data,
1337 				 /* dxfer_len */ size,
1338 				 /* sense_len */ SSD_FULL_SIZE,
1339 				 /* timeout */ CH_TIMEOUT_READ_ELEMENT_STATUS);
1340 
1341 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1342 				  /*sense_flags*/ SF_RETRY_UA,
1343 				  softc->device_stats);
1344 
1345 	if (error)
1346 		goto done;
1347 	cam_periph_unlock(periph);
1348 
1349 	/*
1350 	 * Fill in the user status array.
1351 	 */
1352 	st_hdr = (struct read_element_status_header *)data;
1353 	pg_hdr = (struct read_element_status_page_header *)((uintptr_t)st_hdr +
1354 		  sizeof(struct read_element_status_header));
1355 	avail = scsi_2btoul(st_hdr->count);
1356 
1357 	if (avail != cesr->cesr_element_count) {
1358 		xpt_print(periph->path,
1359 		    "warning, READ ELEMENT STATUS avail != count\n");
1360 	}
1361 
1362 	user_data = (struct changer_element_status *)
1363 		malloc(avail * sizeof(struct changer_element_status),
1364 		       M_DEVBUF, M_WAITOK | M_ZERO);
1365 
1366 	desc = (struct read_element_status_descriptor *)((uintptr_t)data +
1367 		sizeof(struct read_element_status_header) +
1368 		sizeof(struct read_element_status_page_header));
1369 	/*
1370 	 * Set up the individual element status structures
1371 	 */
1372 	for (i = 0; i < avail; ++i) {
1373 		struct changer_element_status *ces;
1374 
1375 		/*
1376 		 * In the changer_element_status structure, fields from
1377 		 * the beginning to the field of ces_scsi_lun are common
1378 		 * between SCSI-2 and SCSI-3, while all the rest are new
1379 		 * from SCSI-3. In order to maintain backward compatibility
1380 		 * of the chio command, the ces pointer, below, is computed
1381 		 * such that it lines up with the structure boundary
1382 		 * corresponding to the SCSI version.
1383 		 */
1384 		ces = cmd == OCHIOGSTATUS ?
1385 		    (struct changer_element_status *)
1386 		    ((unsigned char *)user_data + i *
1387 		     (offsetof(struct changer_element_status,ces_scsi_lun)+1)):
1388 		    &user_data[i];
1389 
1390 		copy_element_status(softc, pg_hdr->flags, desc,
1391 				    ces, scsi_version);
1392 
1393 		desc = (struct read_element_status_descriptor *)
1394 		       ((unsigned char *)desc + desclen);
1395 	}
1396 
1397 	/* Copy element status structures out to userspace. */
1398 	if (cmd == OCHIOGSTATUS)
1399 		error = copyout(user_data,
1400 				cesr->cesr_element_status,
1401 				avail* (offsetof(struct changer_element_status,
1402 				ces_scsi_lun) + 1));
1403 	else
1404 		error = copyout(user_data,
1405 				cesr->cesr_element_status,
1406 				avail * sizeof(struct changer_element_status));
1407 
1408 	cam_periph_lock(periph);
1409 
1410  done:
1411 	xpt_release_ccb(ccb);
1412 
1413 	if (data != NULL)
1414 		free(data, M_DEVBUF);
1415 	if (user_data != NULL)
1416 		free(user_data, M_DEVBUF);
1417 
1418 	return (error);
1419 }
1420 
1421 static int
1422 chielem(struct cam_periph *periph,
1423 	unsigned int timeout)
1424 {
1425 	union ccb *ccb;
1426 	struct ch_softc *softc;
1427 	int error;
1428 
1429 	if (!timeout) {
1430 		timeout = CH_TIMEOUT_INITIALIZE_ELEMENT_STATUS;
1431 	} else {
1432 		timeout *= 1000;
1433 	}
1434 
1435 	error = 0;
1436 	softc = (struct ch_softc *)periph->softc;
1437 
1438 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
1439 
1440 	scsi_initialize_element_status(&ccb->csio,
1441 				      /* retries */ 1,
1442 				      /* cbfcnp */ chdone,
1443 				      /* tag_action */ MSG_SIMPLE_Q_TAG,
1444 				      /* sense_len */ SSD_FULL_SIZE,
1445 				      /* timeout */ timeout);
1446 
1447 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1448 				  /*sense_flags*/ SF_RETRY_UA,
1449 				  softc->device_stats);
1450 
1451 	xpt_release_ccb(ccb);
1452 
1453 	return(error);
1454 }
1455 
1456 static int
1457 chsetvoltag(struct cam_periph *periph,
1458 	    struct changer_set_voltag_request *csvr)
1459 {
1460 	union ccb *ccb;
1461 	struct ch_softc *softc;
1462 	u_int16_t ea;
1463 	u_int8_t sac;
1464 	struct scsi_send_volume_tag_parameters ssvtp;
1465 	int error;
1466 	int i;
1467 
1468 	error = 0;
1469 	softc = (struct ch_softc *)periph->softc;
1470 
1471 	bzero(&ssvtp, sizeof(ssvtp));
1472 	for (i=0; i<sizeof(ssvtp.vitf); i++) {
1473 		ssvtp.vitf[i] = ' ';
1474 	}
1475 
1476 	/*
1477 	 * Check arguments.
1478 	 */
1479 	if (csvr->csvr_type > CHET_DT)
1480 		return EINVAL;
1481 	if (csvr->csvr_addr > (softc->sc_counts[csvr->csvr_type] - 1))
1482 		return ENODEV;
1483 
1484 	ea = softc->sc_firsts[csvr->csvr_type] + csvr->csvr_addr;
1485 
1486 	if (csvr->csvr_flags & CSVR_ALTERNATE) {
1487 		switch (csvr->csvr_flags & CSVR_MODE_MASK) {
1488 		case CSVR_MODE_SET:
1489 			sac = SEND_VOLUME_TAG_ASSERT_ALTERNATE;
1490 			break;
1491 		case CSVR_MODE_REPLACE:
1492 			sac = SEND_VOLUME_TAG_REPLACE_ALTERNATE;
1493 			break;
1494 		case CSVR_MODE_CLEAR:
1495 			sac = SEND_VOLUME_TAG_UNDEFINED_ALTERNATE;
1496 			break;
1497 		default:
1498 			error = EINVAL;
1499 			goto out;
1500 		}
1501 	} else {
1502 		switch (csvr->csvr_flags & CSVR_MODE_MASK) {
1503 		case CSVR_MODE_SET:
1504 			sac = SEND_VOLUME_TAG_ASSERT_PRIMARY;
1505 			break;
1506 		case CSVR_MODE_REPLACE:
1507 			sac = SEND_VOLUME_TAG_REPLACE_PRIMARY;
1508 			break;
1509 		case CSVR_MODE_CLEAR:
1510 			sac = SEND_VOLUME_TAG_UNDEFINED_PRIMARY;
1511 			break;
1512 		default:
1513 			error = EINVAL;
1514 			goto out;
1515 		}
1516 	}
1517 
1518 	memcpy(ssvtp.vitf, csvr->csvr_voltag.cv_volid,
1519 	       min(strlen(csvr->csvr_voltag.cv_volid), sizeof(ssvtp.vitf)));
1520 	scsi_ulto2b(csvr->csvr_voltag.cv_serial, ssvtp.minvsn);
1521 
1522 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
1523 
1524 	scsi_send_volume_tag(&ccb->csio,
1525 			     /* retries */ 1,
1526 			     /* cbfcnp */ chdone,
1527 			     /* tag_action */ MSG_SIMPLE_Q_TAG,
1528 			     /* element_address */ ea,
1529 			     /* send_action_code */ sac,
1530 			     /* parameters */ &ssvtp,
1531 			     /* sense_len */ SSD_FULL_SIZE,
1532 			     /* timeout */ CH_TIMEOUT_SEND_VOLTAG);
1533 
1534 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1535 				  /*sense_flags*/ SF_RETRY_UA,
1536 				  softc->device_stats);
1537 
1538 	xpt_release_ccb(ccb);
1539 
1540  out:
1541 	return error;
1542 }
1543 
1544 static int
1545 chgetparams(struct cam_periph *periph)
1546 {
1547 	union ccb *ccb;
1548 	struct ch_softc *softc;
1549 	void *mode_buffer;
1550 	int mode_buffer_len;
1551 	struct page_element_address_assignment *ea;
1552 	struct page_device_capabilities *cap;
1553 	int error, from, dbd;
1554 	u_int8_t *moves, *exchanges;
1555 
1556 	error = 0;
1557 
1558 	softc = (struct ch_softc *)periph->softc;
1559 
1560 	ccb = cam_periph_getccb(periph, CAM_PRIORITY_NORMAL);
1561 
1562 	/*
1563 	 * The scsi_mode_sense_data structure is just a convenience
1564 	 * structure that allows us to easily calculate the worst-case
1565 	 * storage size of the mode sense buffer.
1566 	 */
1567 	mode_buffer_len = sizeof(struct scsi_mode_sense_data);
1568 
1569 	mode_buffer = malloc(mode_buffer_len, M_SCSICH, M_NOWAIT);
1570 
1571 	if (mode_buffer == NULL) {
1572 		printf("chgetparams: couldn't malloc mode sense data\n");
1573 		return(ENOSPC);
1574 	}
1575 
1576 	bzero(mode_buffer, mode_buffer_len);
1577 
1578 	if (softc->quirks & CH_Q_NO_DBD)
1579 		dbd = FALSE;
1580 	else
1581 		dbd = TRUE;
1582 
1583 	/*
1584 	 * Get the element address assignment page.
1585 	 */
1586 	scsi_mode_sense(&ccb->csio,
1587 			/* retries */ 1,
1588 			/* cbfcnp */ chdone,
1589 			/* tag_action */ MSG_SIMPLE_Q_TAG,
1590 			/* dbd */ dbd,
1591 			/* page_code */ SMS_PAGE_CTRL_CURRENT,
1592 			/* page */ CH_ELEMENT_ADDR_ASSIGN_PAGE,
1593 			/* param_buf */ (u_int8_t *)mode_buffer,
1594 			/* param_len */ mode_buffer_len,
1595 			/* sense_len */ SSD_FULL_SIZE,
1596 			/* timeout */ CH_TIMEOUT_MODE_SENSE);
1597 
1598 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1599 				  /* sense_flags */ SF_RETRY_UA|SF_NO_PRINT,
1600 				  softc->device_stats);
1601 
1602 	if (error) {
1603 		if (dbd) {
1604 			struct scsi_mode_sense_6 *sms;
1605 
1606 			sms = (struct scsi_mode_sense_6 *)
1607 				ccb->csio.cdb_io.cdb_bytes;
1608 
1609 			sms->byte2 &= ~SMS_DBD;
1610 			error = cam_periph_runccb(ccb, cherror,
1611 						  /*cam_flags*/ CAM_RETRY_SELTO,
1612 				  		  /*sense_flags*/ SF_RETRY_UA,
1613 						  softc->device_stats);
1614 		} else {
1615 			/*
1616 			 * Since we disabled sense printing above, print
1617 			 * out the sense here since we got an error.
1618 			 */
1619 			scsi_sense_print(&ccb->csio);
1620 		}
1621 
1622 		if (error) {
1623 			xpt_print(periph->path,
1624 			    "chgetparams: error getting element "
1625 			    "address page\n");
1626 			xpt_release_ccb(ccb);
1627 			free(mode_buffer, M_SCSICH);
1628 			return(error);
1629 		}
1630 	}
1631 
1632 	ea = (struct page_element_address_assignment *)
1633 		find_mode_page_6((struct scsi_mode_header_6 *)mode_buffer);
1634 
1635 	softc->sc_firsts[CHET_MT] = scsi_2btoul(ea->mtea);
1636 	softc->sc_counts[CHET_MT] = scsi_2btoul(ea->nmte);
1637 	softc->sc_firsts[CHET_ST] = scsi_2btoul(ea->fsea);
1638 	softc->sc_counts[CHET_ST] = scsi_2btoul(ea->nse);
1639 	softc->sc_firsts[CHET_IE] = scsi_2btoul(ea->fieea);
1640 	softc->sc_counts[CHET_IE] = scsi_2btoul(ea->niee);
1641 	softc->sc_firsts[CHET_DT] = scsi_2btoul(ea->fdtea);
1642 	softc->sc_counts[CHET_DT] = scsi_2btoul(ea->ndte);
1643 
1644 	bzero(mode_buffer, mode_buffer_len);
1645 
1646 	/*
1647 	 * Now get the device capabilities page.
1648 	 */
1649 	scsi_mode_sense(&ccb->csio,
1650 			/* retries */ 1,
1651 			/* cbfcnp */ chdone,
1652 			/* tag_action */ MSG_SIMPLE_Q_TAG,
1653 			/* dbd */ dbd,
1654 			/* page_code */ SMS_PAGE_CTRL_CURRENT,
1655 			/* page */ CH_DEVICE_CAP_PAGE,
1656 			/* param_buf */ (u_int8_t *)mode_buffer,
1657 			/* param_len */ mode_buffer_len,
1658 			/* sense_len */ SSD_FULL_SIZE,
1659 			/* timeout */ CH_TIMEOUT_MODE_SENSE);
1660 
1661 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1662 				  /* sense_flags */ SF_RETRY_UA | SF_NO_PRINT,
1663 				  softc->device_stats);
1664 
1665 	if (error) {
1666 		if (dbd) {
1667 			struct scsi_mode_sense_6 *sms;
1668 
1669 			sms = (struct scsi_mode_sense_6 *)
1670 				ccb->csio.cdb_io.cdb_bytes;
1671 
1672 			sms->byte2 &= ~SMS_DBD;
1673 			error = cam_periph_runccb(ccb, cherror,
1674 						  /*cam_flags*/ CAM_RETRY_SELTO,
1675 				  		  /*sense_flags*/ SF_RETRY_UA,
1676 						  softc->device_stats);
1677 		} else {
1678 			/*
1679 			 * Since we disabled sense printing above, print
1680 			 * out the sense here since we got an error.
1681 			 */
1682 			scsi_sense_print(&ccb->csio);
1683 		}
1684 
1685 		if (error) {
1686 			xpt_print(periph->path,
1687 			    "chgetparams: error getting device "
1688 			    "capabilities page\n");
1689 			xpt_release_ccb(ccb);
1690 			free(mode_buffer, M_SCSICH);
1691 			return(error);
1692 		}
1693 	}
1694 
1695 	xpt_release_ccb(ccb);
1696 
1697 	cap = (struct page_device_capabilities *)
1698 		find_mode_page_6((struct scsi_mode_header_6 *)mode_buffer);
1699 
1700 	bzero(softc->sc_movemask, sizeof(softc->sc_movemask));
1701 	bzero(softc->sc_exchangemask, sizeof(softc->sc_exchangemask));
1702 	moves = cap->move_from;
1703 	exchanges = cap->exchange_with;
1704 	for (from = CHET_MT; from <= CHET_MAX; ++from) {
1705 		softc->sc_movemask[from] = moves[from];
1706 		softc->sc_exchangemask[from] = exchanges[from];
1707 	}
1708 
1709 	free(mode_buffer, M_SCSICH);
1710 
1711 	return(error);
1712 }
1713 
1714 static int
1715 chscsiversion(struct cam_periph *periph)
1716 {
1717 	struct scsi_inquiry_data *inq_data;
1718 	struct ccb_getdev *cgd;
1719 	int dev_scsi_version;
1720 
1721 	cam_periph_assert(periph, MA_OWNED);
1722 	if ((cgd = (struct ccb_getdev *)xpt_alloc_ccb_nowait()) == NULL)
1723 		return (-1);
1724 	/*
1725 	 * Get the device information.
1726 	 */
1727 	xpt_setup_ccb(&cgd->ccb_h,
1728 		      periph->path,
1729 		      CAM_PRIORITY_NORMAL);
1730 	cgd->ccb_h.func_code = XPT_GDEV_TYPE;
1731 	xpt_action((union ccb *)cgd);
1732 
1733 	if (cgd->ccb_h.status != CAM_REQ_CMP) {
1734 		xpt_free_ccb((union ccb *)cgd);
1735 		return -1;
1736 	}
1737 
1738 	inq_data = &cgd->inq_data;
1739 	dev_scsi_version = inq_data->version;
1740 	xpt_free_ccb((union ccb *)cgd);
1741 
1742 	return dev_scsi_version;
1743 }
1744 
1745 void
1746 scsi_move_medium(struct ccb_scsiio *csio, u_int32_t retries,
1747 		 void (*cbfcnp)(struct cam_periph *, union ccb *),
1748 		 u_int8_t tag_action, u_int32_t tea, u_int32_t src,
1749 		 u_int32_t dst, int invert, u_int8_t sense_len,
1750 		 u_int32_t timeout)
1751 {
1752 	struct scsi_move_medium *scsi_cmd;
1753 
1754 	scsi_cmd = (struct scsi_move_medium *)&csio->cdb_io.cdb_bytes;
1755 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1756 
1757 	scsi_cmd->opcode = MOVE_MEDIUM;
1758 
1759 	scsi_ulto2b(tea, scsi_cmd->tea);
1760 	scsi_ulto2b(src, scsi_cmd->src);
1761 	scsi_ulto2b(dst, scsi_cmd->dst);
1762 
1763 	if (invert)
1764 		scsi_cmd->invert |= MOVE_MEDIUM_INVERT;
1765 
1766 	cam_fill_csio(csio,
1767 		      retries,
1768 		      cbfcnp,
1769 		      /*flags*/ CAM_DIR_NONE,
1770 		      tag_action,
1771 		      /*data_ptr*/ NULL,
1772 		      /*dxfer_len*/ 0,
1773 		      sense_len,
1774 		      sizeof(*scsi_cmd),
1775 		      timeout);
1776 }
1777 
1778 void
1779 scsi_exchange_medium(struct ccb_scsiio *csio, u_int32_t retries,
1780 		     void (*cbfcnp)(struct cam_periph *, union ccb *),
1781 		     u_int8_t tag_action, u_int32_t tea, u_int32_t src,
1782 		     u_int32_t dst1, u_int32_t dst2, int invert1,
1783 		     int invert2, u_int8_t sense_len, u_int32_t timeout)
1784 {
1785 	struct scsi_exchange_medium *scsi_cmd;
1786 
1787 	scsi_cmd = (struct scsi_exchange_medium *)&csio->cdb_io.cdb_bytes;
1788 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1789 
1790 	scsi_cmd->opcode = EXCHANGE_MEDIUM;
1791 
1792 	scsi_ulto2b(tea, scsi_cmd->tea);
1793 	scsi_ulto2b(src, scsi_cmd->src);
1794 	scsi_ulto2b(dst1, scsi_cmd->fdst);
1795 	scsi_ulto2b(dst2, scsi_cmd->sdst);
1796 
1797 	if (invert1)
1798 		scsi_cmd->invert |= EXCHANGE_MEDIUM_INV1;
1799 
1800 	if (invert2)
1801 		scsi_cmd->invert |= EXCHANGE_MEDIUM_INV2;
1802 
1803 	cam_fill_csio(csio,
1804 		      retries,
1805 		      cbfcnp,
1806 		      /*flags*/ CAM_DIR_NONE,
1807 		      tag_action,
1808 		      /*data_ptr*/ NULL,
1809 		      /*dxfer_len*/ 0,
1810 		      sense_len,
1811 		      sizeof(*scsi_cmd),
1812 		      timeout);
1813 }
1814 
1815 void
1816 scsi_position_to_element(struct ccb_scsiio *csio, u_int32_t retries,
1817 			 void (*cbfcnp)(struct cam_periph *, union ccb *),
1818 			 u_int8_t tag_action, u_int32_t tea, u_int32_t dst,
1819 			 int invert, u_int8_t sense_len, u_int32_t timeout)
1820 {
1821 	struct scsi_position_to_element *scsi_cmd;
1822 
1823 	scsi_cmd = (struct scsi_position_to_element *)&csio->cdb_io.cdb_bytes;
1824 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1825 
1826 	scsi_cmd->opcode = POSITION_TO_ELEMENT;
1827 
1828 	scsi_ulto2b(tea, scsi_cmd->tea);
1829 	scsi_ulto2b(dst, scsi_cmd->dst);
1830 
1831 	if (invert)
1832 		scsi_cmd->invert |= POSITION_TO_ELEMENT_INVERT;
1833 
1834 	cam_fill_csio(csio,
1835 		      retries,
1836 		      cbfcnp,
1837 		      /*flags*/ CAM_DIR_NONE,
1838 		      tag_action,
1839 		      /*data_ptr*/ NULL,
1840 		      /*dxfer_len*/ 0,
1841 		      sense_len,
1842 		      sizeof(*scsi_cmd),
1843 		      timeout);
1844 }
1845 
1846 void
1847 scsi_read_element_status(struct ccb_scsiio *csio, u_int32_t retries,
1848 			 void (*cbfcnp)(struct cam_periph *, union ccb *),
1849 			 u_int8_t tag_action, int voltag, u_int32_t sea,
1850 			 int curdata, int dvcid,
1851 			 u_int32_t count, u_int8_t *data_ptr,
1852 			 u_int32_t dxfer_len, u_int8_t sense_len,
1853 			 u_int32_t timeout)
1854 {
1855 	struct scsi_read_element_status *scsi_cmd;
1856 
1857 	scsi_cmd = (struct scsi_read_element_status *)&csio->cdb_io.cdb_bytes;
1858 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1859 
1860 	scsi_cmd->opcode = READ_ELEMENT_STATUS;
1861 
1862 	scsi_ulto2b(sea, scsi_cmd->sea);
1863 	scsi_ulto2b(count, scsi_cmd->count);
1864 	scsi_ulto3b(dxfer_len, scsi_cmd->len);
1865 	if (dvcid)
1866 		scsi_cmd->flags |= READ_ELEMENT_STATUS_DVCID;
1867 	if (curdata)
1868 		scsi_cmd->flags |= READ_ELEMENT_STATUS_CURDATA;
1869 
1870 	if (voltag)
1871 		scsi_cmd->byte2 |= READ_ELEMENT_STATUS_VOLTAG;
1872 
1873 	cam_fill_csio(csio,
1874 		      retries,
1875 		      cbfcnp,
1876 		      /*flags*/ CAM_DIR_IN,
1877 		      tag_action,
1878 		      data_ptr,
1879 		      dxfer_len,
1880 		      sense_len,
1881 		      sizeof(*scsi_cmd),
1882 		      timeout);
1883 }
1884 
1885 void
1886 scsi_initialize_element_status(struct ccb_scsiio *csio, u_int32_t retries,
1887 			       void (*cbfcnp)(struct cam_periph *, union ccb *),
1888 			       u_int8_t tag_action, u_int8_t sense_len,
1889 			       u_int32_t timeout)
1890 {
1891 	struct scsi_initialize_element_status *scsi_cmd;
1892 
1893 	scsi_cmd = (struct scsi_initialize_element_status *)
1894 		    &csio->cdb_io.cdb_bytes;
1895 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1896 
1897 	scsi_cmd->opcode = INITIALIZE_ELEMENT_STATUS;
1898 
1899 	cam_fill_csio(csio,
1900 		      retries,
1901 		      cbfcnp,
1902 		      /*flags*/ CAM_DIR_NONE,
1903 		      tag_action,
1904 		      /* data_ptr */ NULL,
1905 		      /* dxfer_len */ 0,
1906 		      sense_len,
1907 		      sizeof(*scsi_cmd),
1908 		      timeout);
1909 }
1910 
1911 void
1912 scsi_send_volume_tag(struct ccb_scsiio *csio, u_int32_t retries,
1913 		     void (*cbfcnp)(struct cam_periph *, union ccb *),
1914 		     u_int8_t tag_action,
1915 		     u_int16_t element_address,
1916 		     u_int8_t send_action_code,
1917 		     struct scsi_send_volume_tag_parameters *parameters,
1918 		     u_int8_t sense_len, u_int32_t timeout)
1919 {
1920 	struct scsi_send_volume_tag *scsi_cmd;
1921 
1922 	scsi_cmd = (struct scsi_send_volume_tag *) &csio->cdb_io.cdb_bytes;
1923 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1924 
1925 	scsi_cmd->opcode = SEND_VOLUME_TAG;
1926 	scsi_ulto2b(element_address, scsi_cmd->ea);
1927 	scsi_cmd->sac = send_action_code;
1928 	scsi_ulto2b(sizeof(*parameters), scsi_cmd->pll);
1929 
1930 	cam_fill_csio(csio,
1931 		      retries,
1932 		      cbfcnp,
1933 		      /*flags*/ CAM_DIR_OUT,
1934 		      tag_action,
1935 		      /* data_ptr */ (u_int8_t *) parameters,
1936 		      sizeof(*parameters),
1937 		      sense_len,
1938 		      sizeof(*scsi_cmd),
1939 		      timeout);
1940 }
1941