1 /* 2 * Copyright (c) 2004-2007 Voltaire, Inc. All rights reserved. 3 * Copyright (c) 2005 Intel Corporation. All rights reserved. 4 * Copyright (c) 2005 Mellanox Technologies Ltd. All rights reserved. 5 * Copyright (c) 2009 HNR Consulting. All rights reserved. 6 * Copyright (c) 2014 Intel Corporation. All rights reserved. 7 * 8 * This software is available to you under a choice of one of two 9 * licenses. You may choose to be licensed under the terms of the GNU 10 * General Public License (GPL) Version 2, available from the file 11 * COPYING in the main directory of this source tree, or the 12 * OpenIB.org BSD license below: 13 * 14 * Redistribution and use in source and binary forms, with or 15 * without modification, are permitted provided that the following 16 * conditions are met: 17 * 18 * - Redistributions of source code must retain the above 19 * copyright notice, this list of conditions and the following 20 * disclaimer. 21 * 22 * - Redistributions in binary form must reproduce the above 23 * copyright notice, this list of conditions and the following 24 * disclaimer in the documentation and/or other materials 25 * provided with the distribution. 26 * 27 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 28 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 29 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 30 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS 31 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 32 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN 33 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 34 * SOFTWARE. 35 * 36 */ 37 38 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt 39 40 #include <linux/dma-mapping.h> 41 #include <linux/slab.h> 42 #include <linux/module.h> 43 #include <rdma/ib_cache.h> 44 45 #include "mad_priv.h" 46 #include "mad_rmpp.h" 47 #include "smi.h" 48 #include "opa_smi.h" 49 #include "agent.h" 50 51 MODULE_LICENSE("Dual BSD/GPL"); 52 MODULE_DESCRIPTION("kernel IB MAD API"); 53 MODULE_AUTHOR("Hal Rosenstock"); 54 MODULE_AUTHOR("Sean Hefty"); 55 56 static int mad_sendq_size = IB_MAD_QP_SEND_SIZE; 57 static int mad_recvq_size = IB_MAD_QP_RECV_SIZE; 58 59 module_param_named(send_queue_size, mad_sendq_size, int, 0444); 60 MODULE_PARM_DESC(send_queue_size, "Size of send queue in number of work requests"); 61 module_param_named(recv_queue_size, mad_recvq_size, int, 0444); 62 MODULE_PARM_DESC(recv_queue_size, "Size of receive queue in number of work requests"); 63 64 static struct list_head ib_mad_port_list; 65 static u32 ib_mad_client_id = 0; 66 67 /* Port list lock */ 68 static DEFINE_SPINLOCK(ib_mad_port_list_lock); 69 70 /* Forward declarations */ 71 static int method_in_use(struct ib_mad_mgmt_method_table **method, 72 struct ib_mad_reg_req *mad_reg_req); 73 static void remove_mad_reg_req(struct ib_mad_agent_private *priv); 74 static struct ib_mad_agent_private *find_mad_agent( 75 struct ib_mad_port_private *port_priv, 76 const struct ib_mad_hdr *mad); 77 static int ib_mad_post_receive_mads(struct ib_mad_qp_info *qp_info, 78 struct ib_mad_private *mad); 79 static void cancel_mads(struct ib_mad_agent_private *mad_agent_priv); 80 static void timeout_sends(struct work_struct *work); 81 static void local_completions(struct work_struct *work); 82 static int add_nonoui_reg_req(struct ib_mad_reg_req *mad_reg_req, 83 struct ib_mad_agent_private *agent_priv, 84 u8 mgmt_class); 85 static int add_oui_reg_req(struct ib_mad_reg_req *mad_reg_req, 86 struct ib_mad_agent_private *agent_priv); 87 88 /* 89 * Returns a ib_mad_port_private structure or NULL for a device/port 90 * Assumes ib_mad_port_list_lock is being held 91 */ 92 static inline struct ib_mad_port_private * 93 __ib_get_mad_port(struct ib_device *device, int port_num) 94 { 95 struct ib_mad_port_private *entry; 96 97 list_for_each_entry(entry, &ib_mad_port_list, port_list) { 98 if (entry->device == device && entry->port_num == port_num) 99 return entry; 100 } 101 return NULL; 102 } 103 104 /* 105 * Wrapper function to return a ib_mad_port_private structure or NULL 106 * for a device/port 107 */ 108 static inline struct ib_mad_port_private * 109 ib_get_mad_port(struct ib_device *device, int port_num) 110 { 111 struct ib_mad_port_private *entry; 112 unsigned long flags; 113 114 spin_lock_irqsave(&ib_mad_port_list_lock, flags); 115 entry = __ib_get_mad_port(device, port_num); 116 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 117 118 return entry; 119 } 120 121 static inline u8 convert_mgmt_class(u8 mgmt_class) 122 { 123 /* Alias IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE to 0 */ 124 return mgmt_class == IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE ? 125 0 : mgmt_class; 126 } 127 128 static int get_spl_qp_index(enum ib_qp_type qp_type) 129 { 130 switch (qp_type) 131 { 132 case IB_QPT_SMI: 133 return 0; 134 case IB_QPT_GSI: 135 return 1; 136 default: 137 return -1; 138 } 139 } 140 141 static int vendor_class_index(u8 mgmt_class) 142 { 143 return mgmt_class - IB_MGMT_CLASS_VENDOR_RANGE2_START; 144 } 145 146 static int is_vendor_class(u8 mgmt_class) 147 { 148 if ((mgmt_class < IB_MGMT_CLASS_VENDOR_RANGE2_START) || 149 (mgmt_class > IB_MGMT_CLASS_VENDOR_RANGE2_END)) 150 return 0; 151 return 1; 152 } 153 154 static int is_vendor_oui(char *oui) 155 { 156 if (oui[0] || oui[1] || oui[2]) 157 return 1; 158 return 0; 159 } 160 161 static int is_vendor_method_in_use( 162 struct ib_mad_mgmt_vendor_class *vendor_class, 163 struct ib_mad_reg_req *mad_reg_req) 164 { 165 struct ib_mad_mgmt_method_table *method; 166 int i; 167 168 for (i = 0; i < MAX_MGMT_OUI; i++) { 169 if (!memcmp(vendor_class->oui[i], mad_reg_req->oui, 3)) { 170 method = vendor_class->method_table[i]; 171 if (method) { 172 if (method_in_use(&method, mad_reg_req)) 173 return 1; 174 else 175 break; 176 } 177 } 178 } 179 return 0; 180 } 181 182 int ib_response_mad(const struct ib_mad_hdr *hdr) 183 { 184 return ((hdr->method & IB_MGMT_METHOD_RESP) || 185 (hdr->method == IB_MGMT_METHOD_TRAP_REPRESS) || 186 ((hdr->mgmt_class == IB_MGMT_CLASS_BM) && 187 (hdr->attr_mod & IB_BM_ATTR_MOD_RESP))); 188 } 189 EXPORT_SYMBOL(ib_response_mad); 190 191 /* 192 * ib_register_mad_agent - Register to send/receive MADs 193 */ 194 struct ib_mad_agent *ib_register_mad_agent(struct ib_device *device, 195 u8 port_num, 196 enum ib_qp_type qp_type, 197 struct ib_mad_reg_req *mad_reg_req, 198 u8 rmpp_version, 199 ib_mad_send_handler send_handler, 200 ib_mad_recv_handler recv_handler, 201 void *context, 202 u32 registration_flags) 203 { 204 struct ib_mad_port_private *port_priv; 205 struct ib_mad_agent *ret = ERR_PTR(-EINVAL); 206 struct ib_mad_agent_private *mad_agent_priv; 207 struct ib_mad_reg_req *reg_req = NULL; 208 struct ib_mad_mgmt_class_table *class; 209 struct ib_mad_mgmt_vendor_class_table *vendor; 210 struct ib_mad_mgmt_vendor_class *vendor_class; 211 struct ib_mad_mgmt_method_table *method; 212 int ret2, qpn; 213 unsigned long flags; 214 u8 mgmt_class, vclass; 215 216 /* Validate parameters */ 217 qpn = get_spl_qp_index(qp_type); 218 if (qpn == -1) { 219 dev_notice(&device->dev, 220 "ib_register_mad_agent: invalid QP Type %d\n", 221 qp_type); 222 goto error1; 223 } 224 225 if (rmpp_version && rmpp_version != IB_MGMT_RMPP_VERSION) { 226 dev_notice(&device->dev, 227 "ib_register_mad_agent: invalid RMPP Version %u\n", 228 rmpp_version); 229 goto error1; 230 } 231 232 /* Validate MAD registration request if supplied */ 233 if (mad_reg_req) { 234 if (mad_reg_req->mgmt_class_version >= MAX_MGMT_VERSION) { 235 dev_notice(&device->dev, 236 "ib_register_mad_agent: invalid Class Version %u\n", 237 mad_reg_req->mgmt_class_version); 238 goto error1; 239 } 240 if (!recv_handler) { 241 dev_notice(&device->dev, 242 "ib_register_mad_agent: no recv_handler\n"); 243 goto error1; 244 } 245 if (mad_reg_req->mgmt_class >= MAX_MGMT_CLASS) { 246 /* 247 * IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE is the only 248 * one in this range currently allowed 249 */ 250 if (mad_reg_req->mgmt_class != 251 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) { 252 dev_notice(&device->dev, 253 "ib_register_mad_agent: Invalid Mgmt Class 0x%x\n", 254 mad_reg_req->mgmt_class); 255 goto error1; 256 } 257 } else if (mad_reg_req->mgmt_class == 0) { 258 /* 259 * Class 0 is reserved in IBA and is used for 260 * aliasing of IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE 261 */ 262 dev_notice(&device->dev, 263 "ib_register_mad_agent: Invalid Mgmt Class 0\n"); 264 goto error1; 265 } else if (is_vendor_class(mad_reg_req->mgmt_class)) { 266 /* 267 * If class is in "new" vendor range, 268 * ensure supplied OUI is not zero 269 */ 270 if (!is_vendor_oui(mad_reg_req->oui)) { 271 dev_notice(&device->dev, 272 "ib_register_mad_agent: No OUI specified for class 0x%x\n", 273 mad_reg_req->mgmt_class); 274 goto error1; 275 } 276 } 277 /* Make sure class supplied is consistent with RMPP */ 278 if (!ib_is_mad_class_rmpp(mad_reg_req->mgmt_class)) { 279 if (rmpp_version) { 280 dev_notice(&device->dev, 281 "ib_register_mad_agent: RMPP version for non-RMPP class 0x%x\n", 282 mad_reg_req->mgmt_class); 283 goto error1; 284 } 285 } 286 287 /* Make sure class supplied is consistent with QP type */ 288 if (qp_type == IB_QPT_SMI) { 289 if ((mad_reg_req->mgmt_class != 290 IB_MGMT_CLASS_SUBN_LID_ROUTED) && 291 (mad_reg_req->mgmt_class != 292 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE)) { 293 dev_notice(&device->dev, 294 "ib_register_mad_agent: Invalid SM QP type: class 0x%x\n", 295 mad_reg_req->mgmt_class); 296 goto error1; 297 } 298 } else { 299 if ((mad_reg_req->mgmt_class == 300 IB_MGMT_CLASS_SUBN_LID_ROUTED) || 301 (mad_reg_req->mgmt_class == 302 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE)) { 303 dev_notice(&device->dev, 304 "ib_register_mad_agent: Invalid GS QP type: class 0x%x\n", 305 mad_reg_req->mgmt_class); 306 goto error1; 307 } 308 } 309 } else { 310 /* No registration request supplied */ 311 if (!send_handler) 312 goto error1; 313 if (registration_flags & IB_MAD_USER_RMPP) 314 goto error1; 315 } 316 317 /* Validate device and port */ 318 port_priv = ib_get_mad_port(device, port_num); 319 if (!port_priv) { 320 dev_notice(&device->dev, "ib_register_mad_agent: Invalid port\n"); 321 ret = ERR_PTR(-ENODEV); 322 goto error1; 323 } 324 325 /* Verify the QP requested is supported. For example, Ethernet devices 326 * will not have QP0 */ 327 if (!port_priv->qp_info[qpn].qp) { 328 dev_notice(&device->dev, 329 "ib_register_mad_agent: QP %d not supported\n", qpn); 330 ret = ERR_PTR(-EPROTONOSUPPORT); 331 goto error1; 332 } 333 334 /* Allocate structures */ 335 mad_agent_priv = kzalloc(sizeof *mad_agent_priv, GFP_KERNEL); 336 if (!mad_agent_priv) { 337 ret = ERR_PTR(-ENOMEM); 338 goto error1; 339 } 340 341 if (mad_reg_req) { 342 reg_req = kmemdup(mad_reg_req, sizeof *reg_req, GFP_KERNEL); 343 if (!reg_req) { 344 ret = ERR_PTR(-ENOMEM); 345 goto error3; 346 } 347 } 348 349 /* Now, fill in the various structures */ 350 mad_agent_priv->qp_info = &port_priv->qp_info[qpn]; 351 mad_agent_priv->reg_req = reg_req; 352 mad_agent_priv->agent.rmpp_version = rmpp_version; 353 mad_agent_priv->agent.device = device; 354 mad_agent_priv->agent.recv_handler = recv_handler; 355 mad_agent_priv->agent.send_handler = send_handler; 356 mad_agent_priv->agent.context = context; 357 mad_agent_priv->agent.qp = port_priv->qp_info[qpn].qp; 358 mad_agent_priv->agent.port_num = port_num; 359 mad_agent_priv->agent.flags = registration_flags; 360 spin_lock_init(&mad_agent_priv->lock); 361 INIT_LIST_HEAD(&mad_agent_priv->send_list); 362 INIT_LIST_HEAD(&mad_agent_priv->wait_list); 363 INIT_LIST_HEAD(&mad_agent_priv->done_list); 364 INIT_LIST_HEAD(&mad_agent_priv->rmpp_list); 365 INIT_DELAYED_WORK(&mad_agent_priv->timed_work, timeout_sends); 366 INIT_LIST_HEAD(&mad_agent_priv->local_list); 367 INIT_WORK(&mad_agent_priv->local_work, local_completions); 368 atomic_set(&mad_agent_priv->refcount, 1); 369 init_completion(&mad_agent_priv->comp); 370 371 spin_lock_irqsave(&port_priv->reg_lock, flags); 372 mad_agent_priv->agent.hi_tid = ++ib_mad_client_id; 373 374 /* 375 * Make sure MAD registration (if supplied) 376 * is non overlapping with any existing ones 377 */ 378 if (mad_reg_req) { 379 mgmt_class = convert_mgmt_class(mad_reg_req->mgmt_class); 380 if (!is_vendor_class(mgmt_class)) { 381 class = port_priv->version[mad_reg_req-> 382 mgmt_class_version].class; 383 if (class) { 384 method = class->method_table[mgmt_class]; 385 if (method) { 386 if (method_in_use(&method, 387 mad_reg_req)) 388 goto error4; 389 } 390 } 391 ret2 = add_nonoui_reg_req(mad_reg_req, mad_agent_priv, 392 mgmt_class); 393 } else { 394 /* "New" vendor class range */ 395 vendor = port_priv->version[mad_reg_req-> 396 mgmt_class_version].vendor; 397 if (vendor) { 398 vclass = vendor_class_index(mgmt_class); 399 vendor_class = vendor->vendor_class[vclass]; 400 if (vendor_class) { 401 if (is_vendor_method_in_use( 402 vendor_class, 403 mad_reg_req)) 404 goto error4; 405 } 406 } 407 ret2 = add_oui_reg_req(mad_reg_req, mad_agent_priv); 408 } 409 if (ret2) { 410 ret = ERR_PTR(ret2); 411 goto error4; 412 } 413 } 414 415 /* Add mad agent into port's agent list */ 416 list_add_tail(&mad_agent_priv->agent_list, &port_priv->agent_list); 417 spin_unlock_irqrestore(&port_priv->reg_lock, flags); 418 419 return &mad_agent_priv->agent; 420 421 error4: 422 spin_unlock_irqrestore(&port_priv->reg_lock, flags); 423 kfree(reg_req); 424 error3: 425 kfree(mad_agent_priv); 426 error1: 427 return ret; 428 } 429 EXPORT_SYMBOL(ib_register_mad_agent); 430 431 static inline int is_snooping_sends(int mad_snoop_flags) 432 { 433 return (mad_snoop_flags & 434 (/*IB_MAD_SNOOP_POSTED_SENDS | 435 IB_MAD_SNOOP_RMPP_SENDS |*/ 436 IB_MAD_SNOOP_SEND_COMPLETIONS /*| 437 IB_MAD_SNOOP_RMPP_SEND_COMPLETIONS*/)); 438 } 439 440 static inline int is_snooping_recvs(int mad_snoop_flags) 441 { 442 return (mad_snoop_flags & 443 (IB_MAD_SNOOP_RECVS /*| 444 IB_MAD_SNOOP_RMPP_RECVS*/)); 445 } 446 447 static int register_snoop_agent(struct ib_mad_qp_info *qp_info, 448 struct ib_mad_snoop_private *mad_snoop_priv) 449 { 450 struct ib_mad_snoop_private **new_snoop_table; 451 unsigned long flags; 452 int i; 453 454 spin_lock_irqsave(&qp_info->snoop_lock, flags); 455 /* Check for empty slot in array. */ 456 for (i = 0; i < qp_info->snoop_table_size; i++) 457 if (!qp_info->snoop_table[i]) 458 break; 459 460 if (i == qp_info->snoop_table_size) { 461 /* Grow table. */ 462 new_snoop_table = krealloc(qp_info->snoop_table, 463 sizeof mad_snoop_priv * 464 (qp_info->snoop_table_size + 1), 465 GFP_ATOMIC); 466 if (!new_snoop_table) { 467 i = -ENOMEM; 468 goto out; 469 } 470 471 qp_info->snoop_table = new_snoop_table; 472 qp_info->snoop_table_size++; 473 } 474 qp_info->snoop_table[i] = mad_snoop_priv; 475 atomic_inc(&qp_info->snoop_count); 476 out: 477 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 478 return i; 479 } 480 481 struct ib_mad_agent *ib_register_mad_snoop(struct ib_device *device, 482 u8 port_num, 483 enum ib_qp_type qp_type, 484 int mad_snoop_flags, 485 ib_mad_snoop_handler snoop_handler, 486 ib_mad_recv_handler recv_handler, 487 void *context) 488 { 489 struct ib_mad_port_private *port_priv; 490 struct ib_mad_agent *ret; 491 struct ib_mad_snoop_private *mad_snoop_priv; 492 int qpn; 493 494 /* Validate parameters */ 495 if ((is_snooping_sends(mad_snoop_flags) && !snoop_handler) || 496 (is_snooping_recvs(mad_snoop_flags) && !recv_handler)) { 497 ret = ERR_PTR(-EINVAL); 498 goto error1; 499 } 500 qpn = get_spl_qp_index(qp_type); 501 if (qpn == -1) { 502 ret = ERR_PTR(-EINVAL); 503 goto error1; 504 } 505 port_priv = ib_get_mad_port(device, port_num); 506 if (!port_priv) { 507 ret = ERR_PTR(-ENODEV); 508 goto error1; 509 } 510 /* Allocate structures */ 511 mad_snoop_priv = kzalloc(sizeof *mad_snoop_priv, GFP_KERNEL); 512 if (!mad_snoop_priv) { 513 ret = ERR_PTR(-ENOMEM); 514 goto error1; 515 } 516 517 /* Now, fill in the various structures */ 518 mad_snoop_priv->qp_info = &port_priv->qp_info[qpn]; 519 mad_snoop_priv->agent.device = device; 520 mad_snoop_priv->agent.recv_handler = recv_handler; 521 mad_snoop_priv->agent.snoop_handler = snoop_handler; 522 mad_snoop_priv->agent.context = context; 523 mad_snoop_priv->agent.qp = port_priv->qp_info[qpn].qp; 524 mad_snoop_priv->agent.port_num = port_num; 525 mad_snoop_priv->mad_snoop_flags = mad_snoop_flags; 526 init_completion(&mad_snoop_priv->comp); 527 mad_snoop_priv->snoop_index = register_snoop_agent( 528 &port_priv->qp_info[qpn], 529 mad_snoop_priv); 530 if (mad_snoop_priv->snoop_index < 0) { 531 ret = ERR_PTR(mad_snoop_priv->snoop_index); 532 goto error2; 533 } 534 535 atomic_set(&mad_snoop_priv->refcount, 1); 536 return &mad_snoop_priv->agent; 537 538 error2: 539 kfree(mad_snoop_priv); 540 error1: 541 return ret; 542 } 543 EXPORT_SYMBOL(ib_register_mad_snoop); 544 545 static inline void deref_mad_agent(struct ib_mad_agent_private *mad_agent_priv) 546 { 547 if (atomic_dec_and_test(&mad_agent_priv->refcount)) 548 complete(&mad_agent_priv->comp); 549 } 550 551 static inline void deref_snoop_agent(struct ib_mad_snoop_private *mad_snoop_priv) 552 { 553 if (atomic_dec_and_test(&mad_snoop_priv->refcount)) 554 complete(&mad_snoop_priv->comp); 555 } 556 557 static void unregister_mad_agent(struct ib_mad_agent_private *mad_agent_priv) 558 { 559 struct ib_mad_port_private *port_priv; 560 unsigned long flags; 561 562 /* Note that we could still be handling received MADs */ 563 564 /* 565 * Canceling all sends results in dropping received response 566 * MADs, preventing us from queuing additional work 567 */ 568 cancel_mads(mad_agent_priv); 569 port_priv = mad_agent_priv->qp_info->port_priv; 570 cancel_delayed_work(&mad_agent_priv->timed_work); 571 572 spin_lock_irqsave(&port_priv->reg_lock, flags); 573 remove_mad_reg_req(mad_agent_priv); 574 list_del(&mad_agent_priv->agent_list); 575 spin_unlock_irqrestore(&port_priv->reg_lock, flags); 576 577 flush_workqueue(port_priv->wq); 578 ib_cancel_rmpp_recvs(mad_agent_priv); 579 580 deref_mad_agent(mad_agent_priv); 581 wait_for_completion(&mad_agent_priv->comp); 582 583 kfree(mad_agent_priv->reg_req); 584 kfree(mad_agent_priv); 585 } 586 587 static void unregister_mad_snoop(struct ib_mad_snoop_private *mad_snoop_priv) 588 { 589 struct ib_mad_qp_info *qp_info; 590 unsigned long flags; 591 592 qp_info = mad_snoop_priv->qp_info; 593 spin_lock_irqsave(&qp_info->snoop_lock, flags); 594 qp_info->snoop_table[mad_snoop_priv->snoop_index] = NULL; 595 atomic_dec(&qp_info->snoop_count); 596 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 597 598 deref_snoop_agent(mad_snoop_priv); 599 wait_for_completion(&mad_snoop_priv->comp); 600 601 kfree(mad_snoop_priv); 602 } 603 604 /* 605 * ib_unregister_mad_agent - Unregisters a client from using MAD services 606 */ 607 int ib_unregister_mad_agent(struct ib_mad_agent *mad_agent) 608 { 609 struct ib_mad_agent_private *mad_agent_priv; 610 struct ib_mad_snoop_private *mad_snoop_priv; 611 612 /* If the TID is zero, the agent can only snoop. */ 613 if (mad_agent->hi_tid) { 614 mad_agent_priv = container_of(mad_agent, 615 struct ib_mad_agent_private, 616 agent); 617 unregister_mad_agent(mad_agent_priv); 618 } else { 619 mad_snoop_priv = container_of(mad_agent, 620 struct ib_mad_snoop_private, 621 agent); 622 unregister_mad_snoop(mad_snoop_priv); 623 } 624 return 0; 625 } 626 EXPORT_SYMBOL(ib_unregister_mad_agent); 627 628 static void dequeue_mad(struct ib_mad_list_head *mad_list) 629 { 630 struct ib_mad_queue *mad_queue; 631 unsigned long flags; 632 633 BUG_ON(!mad_list->mad_queue); 634 mad_queue = mad_list->mad_queue; 635 spin_lock_irqsave(&mad_queue->lock, flags); 636 list_del(&mad_list->list); 637 mad_queue->count--; 638 spin_unlock_irqrestore(&mad_queue->lock, flags); 639 } 640 641 static void snoop_send(struct ib_mad_qp_info *qp_info, 642 struct ib_mad_send_buf *send_buf, 643 struct ib_mad_send_wc *mad_send_wc, 644 int mad_snoop_flags) 645 { 646 struct ib_mad_snoop_private *mad_snoop_priv; 647 unsigned long flags; 648 int i; 649 650 spin_lock_irqsave(&qp_info->snoop_lock, flags); 651 for (i = 0; i < qp_info->snoop_table_size; i++) { 652 mad_snoop_priv = qp_info->snoop_table[i]; 653 if (!mad_snoop_priv || 654 !(mad_snoop_priv->mad_snoop_flags & mad_snoop_flags)) 655 continue; 656 657 atomic_inc(&mad_snoop_priv->refcount); 658 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 659 mad_snoop_priv->agent.snoop_handler(&mad_snoop_priv->agent, 660 send_buf, mad_send_wc); 661 deref_snoop_agent(mad_snoop_priv); 662 spin_lock_irqsave(&qp_info->snoop_lock, flags); 663 } 664 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 665 } 666 667 static void snoop_recv(struct ib_mad_qp_info *qp_info, 668 struct ib_mad_recv_wc *mad_recv_wc, 669 int mad_snoop_flags) 670 { 671 struct ib_mad_snoop_private *mad_snoop_priv; 672 unsigned long flags; 673 int i; 674 675 spin_lock_irqsave(&qp_info->snoop_lock, flags); 676 for (i = 0; i < qp_info->snoop_table_size; i++) { 677 mad_snoop_priv = qp_info->snoop_table[i]; 678 if (!mad_snoop_priv || 679 !(mad_snoop_priv->mad_snoop_flags & mad_snoop_flags)) 680 continue; 681 682 atomic_inc(&mad_snoop_priv->refcount); 683 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 684 mad_snoop_priv->agent.recv_handler(&mad_snoop_priv->agent, 685 mad_recv_wc); 686 deref_snoop_agent(mad_snoop_priv); 687 spin_lock_irqsave(&qp_info->snoop_lock, flags); 688 } 689 spin_unlock_irqrestore(&qp_info->snoop_lock, flags); 690 } 691 692 static void build_smp_wc(struct ib_qp *qp, 693 u64 wr_id, u16 slid, u16 pkey_index, u8 port_num, 694 struct ib_wc *wc) 695 { 696 memset(wc, 0, sizeof *wc); 697 wc->wr_id = wr_id; 698 wc->status = IB_WC_SUCCESS; 699 wc->opcode = IB_WC_RECV; 700 wc->pkey_index = pkey_index; 701 wc->byte_len = sizeof(struct ib_mad) + sizeof(struct ib_grh); 702 wc->src_qp = IB_QP0; 703 wc->qp = qp; 704 wc->slid = slid; 705 wc->sl = 0; 706 wc->dlid_path_bits = 0; 707 wc->port_num = port_num; 708 } 709 710 static size_t mad_priv_size(const struct ib_mad_private *mp) 711 { 712 return sizeof(struct ib_mad_private) + mp->mad_size; 713 } 714 715 static struct ib_mad_private *alloc_mad_private(size_t mad_size, gfp_t flags) 716 { 717 size_t size = sizeof(struct ib_mad_private) + mad_size; 718 struct ib_mad_private *ret = kzalloc(size, flags); 719 720 if (ret) 721 ret->mad_size = mad_size; 722 723 return ret; 724 } 725 726 static size_t port_mad_size(const struct ib_mad_port_private *port_priv) 727 { 728 return rdma_max_mad_size(port_priv->device, port_priv->port_num); 729 } 730 731 static size_t mad_priv_dma_size(const struct ib_mad_private *mp) 732 { 733 return sizeof(struct ib_grh) + mp->mad_size; 734 } 735 736 /* 737 * Return 0 if SMP is to be sent 738 * Return 1 if SMP was consumed locally (whether or not solicited) 739 * Return < 0 if error 740 */ 741 static int handle_outgoing_dr_smp(struct ib_mad_agent_private *mad_agent_priv, 742 struct ib_mad_send_wr_private *mad_send_wr) 743 { 744 int ret = 0; 745 struct ib_smp *smp = mad_send_wr->send_buf.mad; 746 struct opa_smp *opa_smp = (struct opa_smp *)smp; 747 unsigned long flags; 748 struct ib_mad_local_private *local; 749 struct ib_mad_private *mad_priv; 750 struct ib_mad_port_private *port_priv; 751 struct ib_mad_agent_private *recv_mad_agent = NULL; 752 struct ib_device *device = mad_agent_priv->agent.device; 753 u8 port_num; 754 struct ib_wc mad_wc; 755 struct ib_send_wr *send_wr = &mad_send_wr->send_wr; 756 size_t mad_size = port_mad_size(mad_agent_priv->qp_info->port_priv); 757 u16 out_mad_pkey_index = 0; 758 u16 drslid; 759 bool opa = rdma_cap_opa_mad(mad_agent_priv->qp_info->port_priv->device, 760 mad_agent_priv->qp_info->port_priv->port_num); 761 762 if (rdma_cap_ib_switch(device) && 763 smp->mgmt_class == IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) 764 port_num = send_wr->wr.ud.port_num; 765 else 766 port_num = mad_agent_priv->agent.port_num; 767 768 /* 769 * Directed route handling starts if the initial LID routed part of 770 * a request or the ending LID routed part of a response is empty. 771 * If we are at the start of the LID routed part, don't update the 772 * hop_ptr or hop_cnt. See section 14.2.2, Vol 1 IB spec. 773 */ 774 if (opa && smp->class_version == OPA_SMP_CLASS_VERSION) { 775 u32 opa_drslid; 776 777 if ((opa_get_smp_direction(opa_smp) 778 ? opa_smp->route.dr.dr_dlid : opa_smp->route.dr.dr_slid) == 779 OPA_LID_PERMISSIVE && 780 opa_smi_handle_dr_smp_send(opa_smp, 781 rdma_cap_ib_switch(device), 782 port_num) == IB_SMI_DISCARD) { 783 ret = -EINVAL; 784 dev_err(&device->dev, "OPA Invalid directed route\n"); 785 goto out; 786 } 787 opa_drslid = be32_to_cpu(opa_smp->route.dr.dr_slid); 788 if (opa_drslid != be32_to_cpu(OPA_LID_PERMISSIVE) && 789 opa_drslid & 0xffff0000) { 790 ret = -EINVAL; 791 dev_err(&device->dev, "OPA Invalid dr_slid 0x%x\n", 792 opa_drslid); 793 goto out; 794 } 795 drslid = (u16)(opa_drslid & 0x0000ffff); 796 797 /* Check to post send on QP or process locally */ 798 if (opa_smi_check_local_smp(opa_smp, device) == IB_SMI_DISCARD && 799 opa_smi_check_local_returning_smp(opa_smp, device) == IB_SMI_DISCARD) 800 goto out; 801 } else { 802 if ((ib_get_smp_direction(smp) ? smp->dr_dlid : smp->dr_slid) == 803 IB_LID_PERMISSIVE && 804 smi_handle_dr_smp_send(smp, rdma_cap_ib_switch(device), port_num) == 805 IB_SMI_DISCARD) { 806 ret = -EINVAL; 807 dev_err(&device->dev, "Invalid directed route\n"); 808 goto out; 809 } 810 drslid = be16_to_cpu(smp->dr_slid); 811 812 /* Check to post send on QP or process locally */ 813 if (smi_check_local_smp(smp, device) == IB_SMI_DISCARD && 814 smi_check_local_returning_smp(smp, device) == IB_SMI_DISCARD) 815 goto out; 816 } 817 818 local = kmalloc(sizeof *local, GFP_ATOMIC); 819 if (!local) { 820 ret = -ENOMEM; 821 dev_err(&device->dev, "No memory for ib_mad_local_private\n"); 822 goto out; 823 } 824 local->mad_priv = NULL; 825 local->recv_mad_agent = NULL; 826 mad_priv = alloc_mad_private(mad_size, GFP_ATOMIC); 827 if (!mad_priv) { 828 ret = -ENOMEM; 829 dev_err(&device->dev, "No memory for local response MAD\n"); 830 kfree(local); 831 goto out; 832 } 833 834 build_smp_wc(mad_agent_priv->agent.qp, 835 send_wr->wr_id, drslid, 836 send_wr->wr.ud.pkey_index, 837 send_wr->wr.ud.port_num, &mad_wc); 838 839 if (opa && smp->base_version == OPA_MGMT_BASE_VERSION) { 840 mad_wc.byte_len = mad_send_wr->send_buf.hdr_len 841 + mad_send_wr->send_buf.data_len 842 + sizeof(struct ib_grh); 843 } 844 845 /* No GRH for DR SMP */ 846 ret = device->process_mad(device, 0, port_num, &mad_wc, NULL, 847 (const struct ib_mad_hdr *)smp, mad_size, 848 (struct ib_mad_hdr *)mad_priv->mad, 849 &mad_size, &out_mad_pkey_index); 850 switch (ret) 851 { 852 case IB_MAD_RESULT_SUCCESS | IB_MAD_RESULT_REPLY: 853 if (ib_response_mad((const struct ib_mad_hdr *)mad_priv->mad) && 854 mad_agent_priv->agent.recv_handler) { 855 local->mad_priv = mad_priv; 856 local->recv_mad_agent = mad_agent_priv; 857 /* 858 * Reference MAD agent until receive 859 * side of local completion handled 860 */ 861 atomic_inc(&mad_agent_priv->refcount); 862 } else 863 kfree(mad_priv); 864 break; 865 case IB_MAD_RESULT_SUCCESS | IB_MAD_RESULT_CONSUMED: 866 kfree(mad_priv); 867 break; 868 case IB_MAD_RESULT_SUCCESS: 869 /* Treat like an incoming receive MAD */ 870 port_priv = ib_get_mad_port(mad_agent_priv->agent.device, 871 mad_agent_priv->agent.port_num); 872 if (port_priv) { 873 memcpy(mad_priv->mad, smp, mad_priv->mad_size); 874 recv_mad_agent = find_mad_agent(port_priv, 875 (const struct ib_mad_hdr *)mad_priv->mad); 876 } 877 if (!port_priv || !recv_mad_agent) { 878 /* 879 * No receiving agent so drop packet and 880 * generate send completion. 881 */ 882 kfree(mad_priv); 883 break; 884 } 885 local->mad_priv = mad_priv; 886 local->recv_mad_agent = recv_mad_agent; 887 break; 888 default: 889 kfree(mad_priv); 890 kfree(local); 891 ret = -EINVAL; 892 goto out; 893 } 894 895 local->mad_send_wr = mad_send_wr; 896 if (opa) { 897 local->mad_send_wr->send_wr.wr.ud.pkey_index = out_mad_pkey_index; 898 local->return_wc_byte_len = mad_size; 899 } 900 /* Reference MAD agent until send side of local completion handled */ 901 atomic_inc(&mad_agent_priv->refcount); 902 /* Queue local completion to local list */ 903 spin_lock_irqsave(&mad_agent_priv->lock, flags); 904 list_add_tail(&local->completion_list, &mad_agent_priv->local_list); 905 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 906 queue_work(mad_agent_priv->qp_info->port_priv->wq, 907 &mad_agent_priv->local_work); 908 ret = 1; 909 out: 910 return ret; 911 } 912 913 static int get_pad_size(int hdr_len, int data_len, size_t mad_size) 914 { 915 int seg_size, pad; 916 917 seg_size = mad_size - hdr_len; 918 if (data_len && seg_size) { 919 pad = seg_size - data_len % seg_size; 920 return pad == seg_size ? 0 : pad; 921 } else 922 return seg_size; 923 } 924 925 static void free_send_rmpp_list(struct ib_mad_send_wr_private *mad_send_wr) 926 { 927 struct ib_rmpp_segment *s, *t; 928 929 list_for_each_entry_safe(s, t, &mad_send_wr->rmpp_list, list) { 930 list_del(&s->list); 931 kfree(s); 932 } 933 } 934 935 static int alloc_send_rmpp_list(struct ib_mad_send_wr_private *send_wr, 936 size_t mad_size, gfp_t gfp_mask) 937 { 938 struct ib_mad_send_buf *send_buf = &send_wr->send_buf; 939 struct ib_rmpp_mad *rmpp_mad = send_buf->mad; 940 struct ib_rmpp_segment *seg = NULL; 941 int left, seg_size, pad; 942 943 send_buf->seg_size = mad_size - send_buf->hdr_len; 944 send_buf->seg_rmpp_size = mad_size - IB_MGMT_RMPP_HDR; 945 seg_size = send_buf->seg_size; 946 pad = send_wr->pad; 947 948 /* Allocate data segments. */ 949 for (left = send_buf->data_len + pad; left > 0; left -= seg_size) { 950 seg = kmalloc(sizeof (*seg) + seg_size, gfp_mask); 951 if (!seg) { 952 dev_err(&send_buf->mad_agent->device->dev, 953 "alloc_send_rmpp_segs: RMPP mem alloc failed for len %zd, gfp %#x\n", 954 sizeof (*seg) + seg_size, gfp_mask); 955 free_send_rmpp_list(send_wr); 956 return -ENOMEM; 957 } 958 seg->num = ++send_buf->seg_count; 959 list_add_tail(&seg->list, &send_wr->rmpp_list); 960 } 961 962 /* Zero any padding */ 963 if (pad) 964 memset(seg->data + seg_size - pad, 0, pad); 965 966 rmpp_mad->rmpp_hdr.rmpp_version = send_wr->mad_agent_priv-> 967 agent.rmpp_version; 968 rmpp_mad->rmpp_hdr.rmpp_type = IB_MGMT_RMPP_TYPE_DATA; 969 ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE); 970 971 send_wr->cur_seg = container_of(send_wr->rmpp_list.next, 972 struct ib_rmpp_segment, list); 973 send_wr->last_ack_seg = send_wr->cur_seg; 974 return 0; 975 } 976 977 int ib_mad_kernel_rmpp_agent(const struct ib_mad_agent *agent) 978 { 979 return agent->rmpp_version && !(agent->flags & IB_MAD_USER_RMPP); 980 } 981 EXPORT_SYMBOL(ib_mad_kernel_rmpp_agent); 982 983 struct ib_mad_send_buf * ib_create_send_mad(struct ib_mad_agent *mad_agent, 984 u32 remote_qpn, u16 pkey_index, 985 int rmpp_active, 986 int hdr_len, int data_len, 987 gfp_t gfp_mask, 988 u8 base_version) 989 { 990 struct ib_mad_agent_private *mad_agent_priv; 991 struct ib_mad_send_wr_private *mad_send_wr; 992 int pad, message_size, ret, size; 993 void *buf; 994 size_t mad_size; 995 bool opa; 996 997 mad_agent_priv = container_of(mad_agent, struct ib_mad_agent_private, 998 agent); 999 1000 opa = rdma_cap_opa_mad(mad_agent->device, mad_agent->port_num); 1001 1002 if (opa && base_version == OPA_MGMT_BASE_VERSION) 1003 mad_size = sizeof(struct opa_mad); 1004 else 1005 mad_size = sizeof(struct ib_mad); 1006 1007 pad = get_pad_size(hdr_len, data_len, mad_size); 1008 message_size = hdr_len + data_len + pad; 1009 1010 if (ib_mad_kernel_rmpp_agent(mad_agent)) { 1011 if (!rmpp_active && message_size > mad_size) 1012 return ERR_PTR(-EINVAL); 1013 } else 1014 if (rmpp_active || message_size > mad_size) 1015 return ERR_PTR(-EINVAL); 1016 1017 size = rmpp_active ? hdr_len : mad_size; 1018 buf = kzalloc(sizeof *mad_send_wr + size, gfp_mask); 1019 if (!buf) 1020 return ERR_PTR(-ENOMEM); 1021 1022 mad_send_wr = buf + size; 1023 INIT_LIST_HEAD(&mad_send_wr->rmpp_list); 1024 mad_send_wr->send_buf.mad = buf; 1025 mad_send_wr->send_buf.hdr_len = hdr_len; 1026 mad_send_wr->send_buf.data_len = data_len; 1027 mad_send_wr->pad = pad; 1028 1029 mad_send_wr->mad_agent_priv = mad_agent_priv; 1030 mad_send_wr->sg_list[0].length = hdr_len; 1031 mad_send_wr->sg_list[0].lkey = mad_agent->qp->pd->local_dma_lkey; 1032 1033 /* OPA MADs don't have to be the full 2048 bytes */ 1034 if (opa && base_version == OPA_MGMT_BASE_VERSION && 1035 data_len < mad_size - hdr_len) 1036 mad_send_wr->sg_list[1].length = data_len; 1037 else 1038 mad_send_wr->sg_list[1].length = mad_size - hdr_len; 1039 1040 mad_send_wr->sg_list[1].lkey = mad_agent->qp->pd->local_dma_lkey; 1041 1042 mad_send_wr->send_wr.wr_id = (unsigned long) mad_send_wr; 1043 mad_send_wr->send_wr.sg_list = mad_send_wr->sg_list; 1044 mad_send_wr->send_wr.num_sge = 2; 1045 mad_send_wr->send_wr.opcode = IB_WR_SEND; 1046 mad_send_wr->send_wr.send_flags = IB_SEND_SIGNALED; 1047 mad_send_wr->send_wr.wr.ud.remote_qpn = remote_qpn; 1048 mad_send_wr->send_wr.wr.ud.remote_qkey = IB_QP_SET_QKEY; 1049 mad_send_wr->send_wr.wr.ud.pkey_index = pkey_index; 1050 1051 if (rmpp_active) { 1052 ret = alloc_send_rmpp_list(mad_send_wr, mad_size, gfp_mask); 1053 if (ret) { 1054 kfree(buf); 1055 return ERR_PTR(ret); 1056 } 1057 } 1058 1059 mad_send_wr->send_buf.mad_agent = mad_agent; 1060 atomic_inc(&mad_agent_priv->refcount); 1061 return &mad_send_wr->send_buf; 1062 } 1063 EXPORT_SYMBOL(ib_create_send_mad); 1064 1065 int ib_get_mad_data_offset(u8 mgmt_class) 1066 { 1067 if (mgmt_class == IB_MGMT_CLASS_SUBN_ADM) 1068 return IB_MGMT_SA_HDR; 1069 else if ((mgmt_class == IB_MGMT_CLASS_DEVICE_MGMT) || 1070 (mgmt_class == IB_MGMT_CLASS_DEVICE_ADM) || 1071 (mgmt_class == IB_MGMT_CLASS_BIS)) 1072 return IB_MGMT_DEVICE_HDR; 1073 else if ((mgmt_class >= IB_MGMT_CLASS_VENDOR_RANGE2_START) && 1074 (mgmt_class <= IB_MGMT_CLASS_VENDOR_RANGE2_END)) 1075 return IB_MGMT_VENDOR_HDR; 1076 else 1077 return IB_MGMT_MAD_HDR; 1078 } 1079 EXPORT_SYMBOL(ib_get_mad_data_offset); 1080 1081 int ib_is_mad_class_rmpp(u8 mgmt_class) 1082 { 1083 if ((mgmt_class == IB_MGMT_CLASS_SUBN_ADM) || 1084 (mgmt_class == IB_MGMT_CLASS_DEVICE_MGMT) || 1085 (mgmt_class == IB_MGMT_CLASS_DEVICE_ADM) || 1086 (mgmt_class == IB_MGMT_CLASS_BIS) || 1087 ((mgmt_class >= IB_MGMT_CLASS_VENDOR_RANGE2_START) && 1088 (mgmt_class <= IB_MGMT_CLASS_VENDOR_RANGE2_END))) 1089 return 1; 1090 return 0; 1091 } 1092 EXPORT_SYMBOL(ib_is_mad_class_rmpp); 1093 1094 void *ib_get_rmpp_segment(struct ib_mad_send_buf *send_buf, int seg_num) 1095 { 1096 struct ib_mad_send_wr_private *mad_send_wr; 1097 struct list_head *list; 1098 1099 mad_send_wr = container_of(send_buf, struct ib_mad_send_wr_private, 1100 send_buf); 1101 list = &mad_send_wr->cur_seg->list; 1102 1103 if (mad_send_wr->cur_seg->num < seg_num) { 1104 list_for_each_entry(mad_send_wr->cur_seg, list, list) 1105 if (mad_send_wr->cur_seg->num == seg_num) 1106 break; 1107 } else if (mad_send_wr->cur_seg->num > seg_num) { 1108 list_for_each_entry_reverse(mad_send_wr->cur_seg, list, list) 1109 if (mad_send_wr->cur_seg->num == seg_num) 1110 break; 1111 } 1112 return mad_send_wr->cur_seg->data; 1113 } 1114 EXPORT_SYMBOL(ib_get_rmpp_segment); 1115 1116 static inline void *ib_get_payload(struct ib_mad_send_wr_private *mad_send_wr) 1117 { 1118 if (mad_send_wr->send_buf.seg_count) 1119 return ib_get_rmpp_segment(&mad_send_wr->send_buf, 1120 mad_send_wr->seg_num); 1121 else 1122 return mad_send_wr->send_buf.mad + 1123 mad_send_wr->send_buf.hdr_len; 1124 } 1125 1126 void ib_free_send_mad(struct ib_mad_send_buf *send_buf) 1127 { 1128 struct ib_mad_agent_private *mad_agent_priv; 1129 struct ib_mad_send_wr_private *mad_send_wr; 1130 1131 mad_agent_priv = container_of(send_buf->mad_agent, 1132 struct ib_mad_agent_private, agent); 1133 mad_send_wr = container_of(send_buf, struct ib_mad_send_wr_private, 1134 send_buf); 1135 1136 free_send_rmpp_list(mad_send_wr); 1137 kfree(send_buf->mad); 1138 deref_mad_agent(mad_agent_priv); 1139 } 1140 EXPORT_SYMBOL(ib_free_send_mad); 1141 1142 int ib_send_mad(struct ib_mad_send_wr_private *mad_send_wr) 1143 { 1144 struct ib_mad_qp_info *qp_info; 1145 struct list_head *list; 1146 struct ib_send_wr *bad_send_wr; 1147 struct ib_mad_agent *mad_agent; 1148 struct ib_sge *sge; 1149 unsigned long flags; 1150 int ret; 1151 1152 /* Set WR ID to find mad_send_wr upon completion */ 1153 qp_info = mad_send_wr->mad_agent_priv->qp_info; 1154 mad_send_wr->send_wr.wr_id = (unsigned long)&mad_send_wr->mad_list; 1155 mad_send_wr->mad_list.mad_queue = &qp_info->send_queue; 1156 1157 mad_agent = mad_send_wr->send_buf.mad_agent; 1158 sge = mad_send_wr->sg_list; 1159 sge[0].addr = ib_dma_map_single(mad_agent->device, 1160 mad_send_wr->send_buf.mad, 1161 sge[0].length, 1162 DMA_TO_DEVICE); 1163 if (unlikely(ib_dma_mapping_error(mad_agent->device, sge[0].addr))) 1164 return -ENOMEM; 1165 1166 mad_send_wr->header_mapping = sge[0].addr; 1167 1168 sge[1].addr = ib_dma_map_single(mad_agent->device, 1169 ib_get_payload(mad_send_wr), 1170 sge[1].length, 1171 DMA_TO_DEVICE); 1172 if (unlikely(ib_dma_mapping_error(mad_agent->device, sge[1].addr))) { 1173 ib_dma_unmap_single(mad_agent->device, 1174 mad_send_wr->header_mapping, 1175 sge[0].length, DMA_TO_DEVICE); 1176 return -ENOMEM; 1177 } 1178 mad_send_wr->payload_mapping = sge[1].addr; 1179 1180 spin_lock_irqsave(&qp_info->send_queue.lock, flags); 1181 if (qp_info->send_queue.count < qp_info->send_queue.max_active) { 1182 ret = ib_post_send(mad_agent->qp, &mad_send_wr->send_wr, 1183 &bad_send_wr); 1184 list = &qp_info->send_queue.list; 1185 } else { 1186 ret = 0; 1187 list = &qp_info->overflow_list; 1188 } 1189 1190 if (!ret) { 1191 qp_info->send_queue.count++; 1192 list_add_tail(&mad_send_wr->mad_list.list, list); 1193 } 1194 spin_unlock_irqrestore(&qp_info->send_queue.lock, flags); 1195 if (ret) { 1196 ib_dma_unmap_single(mad_agent->device, 1197 mad_send_wr->header_mapping, 1198 sge[0].length, DMA_TO_DEVICE); 1199 ib_dma_unmap_single(mad_agent->device, 1200 mad_send_wr->payload_mapping, 1201 sge[1].length, DMA_TO_DEVICE); 1202 } 1203 return ret; 1204 } 1205 1206 /* 1207 * ib_post_send_mad - Posts MAD(s) to the send queue of the QP associated 1208 * with the registered client 1209 */ 1210 int ib_post_send_mad(struct ib_mad_send_buf *send_buf, 1211 struct ib_mad_send_buf **bad_send_buf) 1212 { 1213 struct ib_mad_agent_private *mad_agent_priv; 1214 struct ib_mad_send_buf *next_send_buf; 1215 struct ib_mad_send_wr_private *mad_send_wr; 1216 unsigned long flags; 1217 int ret = -EINVAL; 1218 1219 /* Walk list of send WRs and post each on send list */ 1220 for (; send_buf; send_buf = next_send_buf) { 1221 1222 mad_send_wr = container_of(send_buf, 1223 struct ib_mad_send_wr_private, 1224 send_buf); 1225 mad_agent_priv = mad_send_wr->mad_agent_priv; 1226 1227 if (!send_buf->mad_agent->send_handler || 1228 (send_buf->timeout_ms && 1229 !send_buf->mad_agent->recv_handler)) { 1230 ret = -EINVAL; 1231 goto error; 1232 } 1233 1234 if (!ib_is_mad_class_rmpp(((struct ib_mad_hdr *) send_buf->mad)->mgmt_class)) { 1235 if (mad_agent_priv->agent.rmpp_version) { 1236 ret = -EINVAL; 1237 goto error; 1238 } 1239 } 1240 1241 /* 1242 * Save pointer to next work request to post in case the 1243 * current one completes, and the user modifies the work 1244 * request associated with the completion 1245 */ 1246 next_send_buf = send_buf->next; 1247 mad_send_wr->send_wr.wr.ud.ah = send_buf->ah; 1248 1249 if (((struct ib_mad_hdr *) send_buf->mad)->mgmt_class == 1250 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) { 1251 ret = handle_outgoing_dr_smp(mad_agent_priv, 1252 mad_send_wr); 1253 if (ret < 0) /* error */ 1254 goto error; 1255 else if (ret == 1) /* locally consumed */ 1256 continue; 1257 } 1258 1259 mad_send_wr->tid = ((struct ib_mad_hdr *) send_buf->mad)->tid; 1260 /* Timeout will be updated after send completes */ 1261 mad_send_wr->timeout = msecs_to_jiffies(send_buf->timeout_ms); 1262 mad_send_wr->max_retries = send_buf->retries; 1263 mad_send_wr->retries_left = send_buf->retries; 1264 send_buf->retries = 0; 1265 /* Reference for work request to QP + response */ 1266 mad_send_wr->refcount = 1 + (mad_send_wr->timeout > 0); 1267 mad_send_wr->status = IB_WC_SUCCESS; 1268 1269 /* Reference MAD agent until send completes */ 1270 atomic_inc(&mad_agent_priv->refcount); 1271 spin_lock_irqsave(&mad_agent_priv->lock, flags); 1272 list_add_tail(&mad_send_wr->agent_list, 1273 &mad_agent_priv->send_list); 1274 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 1275 1276 if (ib_mad_kernel_rmpp_agent(&mad_agent_priv->agent)) { 1277 ret = ib_send_rmpp_mad(mad_send_wr); 1278 if (ret >= 0 && ret != IB_RMPP_RESULT_CONSUMED) 1279 ret = ib_send_mad(mad_send_wr); 1280 } else 1281 ret = ib_send_mad(mad_send_wr); 1282 if (ret < 0) { 1283 /* Fail send request */ 1284 spin_lock_irqsave(&mad_agent_priv->lock, flags); 1285 list_del(&mad_send_wr->agent_list); 1286 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 1287 atomic_dec(&mad_agent_priv->refcount); 1288 goto error; 1289 } 1290 } 1291 return 0; 1292 error: 1293 if (bad_send_buf) 1294 *bad_send_buf = send_buf; 1295 return ret; 1296 } 1297 EXPORT_SYMBOL(ib_post_send_mad); 1298 1299 /* 1300 * ib_free_recv_mad - Returns data buffers used to receive 1301 * a MAD to the access layer 1302 */ 1303 void ib_free_recv_mad(struct ib_mad_recv_wc *mad_recv_wc) 1304 { 1305 struct ib_mad_recv_buf *mad_recv_buf, *temp_recv_buf; 1306 struct ib_mad_private_header *mad_priv_hdr; 1307 struct ib_mad_private *priv; 1308 struct list_head free_list; 1309 1310 INIT_LIST_HEAD(&free_list); 1311 list_splice_init(&mad_recv_wc->rmpp_list, &free_list); 1312 1313 list_for_each_entry_safe(mad_recv_buf, temp_recv_buf, 1314 &free_list, list) { 1315 mad_recv_wc = container_of(mad_recv_buf, struct ib_mad_recv_wc, 1316 recv_buf); 1317 mad_priv_hdr = container_of(mad_recv_wc, 1318 struct ib_mad_private_header, 1319 recv_wc); 1320 priv = container_of(mad_priv_hdr, struct ib_mad_private, 1321 header); 1322 kfree(priv); 1323 } 1324 } 1325 EXPORT_SYMBOL(ib_free_recv_mad); 1326 1327 struct ib_mad_agent *ib_redirect_mad_qp(struct ib_qp *qp, 1328 u8 rmpp_version, 1329 ib_mad_send_handler send_handler, 1330 ib_mad_recv_handler recv_handler, 1331 void *context) 1332 { 1333 return ERR_PTR(-EINVAL); /* XXX: for now */ 1334 } 1335 EXPORT_SYMBOL(ib_redirect_mad_qp); 1336 1337 int ib_process_mad_wc(struct ib_mad_agent *mad_agent, 1338 struct ib_wc *wc) 1339 { 1340 dev_err(&mad_agent->device->dev, 1341 "ib_process_mad_wc() not implemented yet\n"); 1342 return 0; 1343 } 1344 EXPORT_SYMBOL(ib_process_mad_wc); 1345 1346 static int method_in_use(struct ib_mad_mgmt_method_table **method, 1347 struct ib_mad_reg_req *mad_reg_req) 1348 { 1349 int i; 1350 1351 for_each_set_bit(i, mad_reg_req->method_mask, IB_MGMT_MAX_METHODS) { 1352 if ((*method)->agent[i]) { 1353 pr_err("Method %d already in use\n", i); 1354 return -EINVAL; 1355 } 1356 } 1357 return 0; 1358 } 1359 1360 static int allocate_method_table(struct ib_mad_mgmt_method_table **method) 1361 { 1362 /* Allocate management method table */ 1363 *method = kzalloc(sizeof **method, GFP_ATOMIC); 1364 if (!*method) { 1365 pr_err("No memory for ib_mad_mgmt_method_table\n"); 1366 return -ENOMEM; 1367 } 1368 1369 return 0; 1370 } 1371 1372 /* 1373 * Check to see if there are any methods still in use 1374 */ 1375 static int check_method_table(struct ib_mad_mgmt_method_table *method) 1376 { 1377 int i; 1378 1379 for (i = 0; i < IB_MGMT_MAX_METHODS; i++) 1380 if (method->agent[i]) 1381 return 1; 1382 return 0; 1383 } 1384 1385 /* 1386 * Check to see if there are any method tables for this class still in use 1387 */ 1388 static int check_class_table(struct ib_mad_mgmt_class_table *class) 1389 { 1390 int i; 1391 1392 for (i = 0; i < MAX_MGMT_CLASS; i++) 1393 if (class->method_table[i]) 1394 return 1; 1395 return 0; 1396 } 1397 1398 static int check_vendor_class(struct ib_mad_mgmt_vendor_class *vendor_class) 1399 { 1400 int i; 1401 1402 for (i = 0; i < MAX_MGMT_OUI; i++) 1403 if (vendor_class->method_table[i]) 1404 return 1; 1405 return 0; 1406 } 1407 1408 static int find_vendor_oui(struct ib_mad_mgmt_vendor_class *vendor_class, 1409 const char *oui) 1410 { 1411 int i; 1412 1413 for (i = 0; i < MAX_MGMT_OUI; i++) 1414 /* Is there matching OUI for this vendor class ? */ 1415 if (!memcmp(vendor_class->oui[i], oui, 3)) 1416 return i; 1417 1418 return -1; 1419 } 1420 1421 static int check_vendor_table(struct ib_mad_mgmt_vendor_class_table *vendor) 1422 { 1423 int i; 1424 1425 for (i = 0; i < MAX_MGMT_VENDOR_RANGE2; i++) 1426 if (vendor->vendor_class[i]) 1427 return 1; 1428 1429 return 0; 1430 } 1431 1432 static void remove_methods_mad_agent(struct ib_mad_mgmt_method_table *method, 1433 struct ib_mad_agent_private *agent) 1434 { 1435 int i; 1436 1437 /* Remove any methods for this mad agent */ 1438 for (i = 0; i < IB_MGMT_MAX_METHODS; i++) { 1439 if (method->agent[i] == agent) { 1440 method->agent[i] = NULL; 1441 } 1442 } 1443 } 1444 1445 static int add_nonoui_reg_req(struct ib_mad_reg_req *mad_reg_req, 1446 struct ib_mad_agent_private *agent_priv, 1447 u8 mgmt_class) 1448 { 1449 struct ib_mad_port_private *port_priv; 1450 struct ib_mad_mgmt_class_table **class; 1451 struct ib_mad_mgmt_method_table **method; 1452 int i, ret; 1453 1454 port_priv = agent_priv->qp_info->port_priv; 1455 class = &port_priv->version[mad_reg_req->mgmt_class_version].class; 1456 if (!*class) { 1457 /* Allocate management class table for "new" class version */ 1458 *class = kzalloc(sizeof **class, GFP_ATOMIC); 1459 if (!*class) { 1460 dev_err(&agent_priv->agent.device->dev, 1461 "No memory for ib_mad_mgmt_class_table\n"); 1462 ret = -ENOMEM; 1463 goto error1; 1464 } 1465 1466 /* Allocate method table for this management class */ 1467 method = &(*class)->method_table[mgmt_class]; 1468 if ((ret = allocate_method_table(method))) 1469 goto error2; 1470 } else { 1471 method = &(*class)->method_table[mgmt_class]; 1472 if (!*method) { 1473 /* Allocate method table for this management class */ 1474 if ((ret = allocate_method_table(method))) 1475 goto error1; 1476 } 1477 } 1478 1479 /* Now, make sure methods are not already in use */ 1480 if (method_in_use(method, mad_reg_req)) 1481 goto error3; 1482 1483 /* Finally, add in methods being registered */ 1484 for_each_set_bit(i, mad_reg_req->method_mask, IB_MGMT_MAX_METHODS) 1485 (*method)->agent[i] = agent_priv; 1486 1487 return 0; 1488 1489 error3: 1490 /* Remove any methods for this mad agent */ 1491 remove_methods_mad_agent(*method, agent_priv); 1492 /* Now, check to see if there are any methods in use */ 1493 if (!check_method_table(*method)) { 1494 /* If not, release management method table */ 1495 kfree(*method); 1496 *method = NULL; 1497 } 1498 ret = -EINVAL; 1499 goto error1; 1500 error2: 1501 kfree(*class); 1502 *class = NULL; 1503 error1: 1504 return ret; 1505 } 1506 1507 static int add_oui_reg_req(struct ib_mad_reg_req *mad_reg_req, 1508 struct ib_mad_agent_private *agent_priv) 1509 { 1510 struct ib_mad_port_private *port_priv; 1511 struct ib_mad_mgmt_vendor_class_table **vendor_table; 1512 struct ib_mad_mgmt_vendor_class_table *vendor = NULL; 1513 struct ib_mad_mgmt_vendor_class *vendor_class = NULL; 1514 struct ib_mad_mgmt_method_table **method; 1515 int i, ret = -ENOMEM; 1516 u8 vclass; 1517 1518 /* "New" vendor (with OUI) class */ 1519 vclass = vendor_class_index(mad_reg_req->mgmt_class); 1520 port_priv = agent_priv->qp_info->port_priv; 1521 vendor_table = &port_priv->version[ 1522 mad_reg_req->mgmt_class_version].vendor; 1523 if (!*vendor_table) { 1524 /* Allocate mgmt vendor class table for "new" class version */ 1525 vendor = kzalloc(sizeof *vendor, GFP_ATOMIC); 1526 if (!vendor) { 1527 dev_err(&agent_priv->agent.device->dev, 1528 "No memory for ib_mad_mgmt_vendor_class_table\n"); 1529 goto error1; 1530 } 1531 1532 *vendor_table = vendor; 1533 } 1534 if (!(*vendor_table)->vendor_class[vclass]) { 1535 /* Allocate table for this management vendor class */ 1536 vendor_class = kzalloc(sizeof *vendor_class, GFP_ATOMIC); 1537 if (!vendor_class) { 1538 dev_err(&agent_priv->agent.device->dev, 1539 "No memory for ib_mad_mgmt_vendor_class\n"); 1540 goto error2; 1541 } 1542 1543 (*vendor_table)->vendor_class[vclass] = vendor_class; 1544 } 1545 for (i = 0; i < MAX_MGMT_OUI; i++) { 1546 /* Is there matching OUI for this vendor class ? */ 1547 if (!memcmp((*vendor_table)->vendor_class[vclass]->oui[i], 1548 mad_reg_req->oui, 3)) { 1549 method = &(*vendor_table)->vendor_class[ 1550 vclass]->method_table[i]; 1551 BUG_ON(!*method); 1552 goto check_in_use; 1553 } 1554 } 1555 for (i = 0; i < MAX_MGMT_OUI; i++) { 1556 /* OUI slot available ? */ 1557 if (!is_vendor_oui((*vendor_table)->vendor_class[ 1558 vclass]->oui[i])) { 1559 method = &(*vendor_table)->vendor_class[ 1560 vclass]->method_table[i]; 1561 BUG_ON(*method); 1562 /* Allocate method table for this OUI */ 1563 if ((ret = allocate_method_table(method))) 1564 goto error3; 1565 memcpy((*vendor_table)->vendor_class[vclass]->oui[i], 1566 mad_reg_req->oui, 3); 1567 goto check_in_use; 1568 } 1569 } 1570 dev_err(&agent_priv->agent.device->dev, "All OUI slots in use\n"); 1571 goto error3; 1572 1573 check_in_use: 1574 /* Now, make sure methods are not already in use */ 1575 if (method_in_use(method, mad_reg_req)) 1576 goto error4; 1577 1578 /* Finally, add in methods being registered */ 1579 for_each_set_bit(i, mad_reg_req->method_mask, IB_MGMT_MAX_METHODS) 1580 (*method)->agent[i] = agent_priv; 1581 1582 return 0; 1583 1584 error4: 1585 /* Remove any methods for this mad agent */ 1586 remove_methods_mad_agent(*method, agent_priv); 1587 /* Now, check to see if there are any methods in use */ 1588 if (!check_method_table(*method)) { 1589 /* If not, release management method table */ 1590 kfree(*method); 1591 *method = NULL; 1592 } 1593 ret = -EINVAL; 1594 error3: 1595 if (vendor_class) { 1596 (*vendor_table)->vendor_class[vclass] = NULL; 1597 kfree(vendor_class); 1598 } 1599 error2: 1600 if (vendor) { 1601 *vendor_table = NULL; 1602 kfree(vendor); 1603 } 1604 error1: 1605 return ret; 1606 } 1607 1608 static void remove_mad_reg_req(struct ib_mad_agent_private *agent_priv) 1609 { 1610 struct ib_mad_port_private *port_priv; 1611 struct ib_mad_mgmt_class_table *class; 1612 struct ib_mad_mgmt_method_table *method; 1613 struct ib_mad_mgmt_vendor_class_table *vendor; 1614 struct ib_mad_mgmt_vendor_class *vendor_class; 1615 int index; 1616 u8 mgmt_class; 1617 1618 /* 1619 * Was MAD registration request supplied 1620 * with original registration ? 1621 */ 1622 if (!agent_priv->reg_req) { 1623 goto out; 1624 } 1625 1626 port_priv = agent_priv->qp_info->port_priv; 1627 mgmt_class = convert_mgmt_class(agent_priv->reg_req->mgmt_class); 1628 class = port_priv->version[ 1629 agent_priv->reg_req->mgmt_class_version].class; 1630 if (!class) 1631 goto vendor_check; 1632 1633 method = class->method_table[mgmt_class]; 1634 if (method) { 1635 /* Remove any methods for this mad agent */ 1636 remove_methods_mad_agent(method, agent_priv); 1637 /* Now, check to see if there are any methods still in use */ 1638 if (!check_method_table(method)) { 1639 /* If not, release management method table */ 1640 kfree(method); 1641 class->method_table[mgmt_class] = NULL; 1642 /* Any management classes left ? */ 1643 if (!check_class_table(class)) { 1644 /* If not, release management class table */ 1645 kfree(class); 1646 port_priv->version[ 1647 agent_priv->reg_req-> 1648 mgmt_class_version].class = NULL; 1649 } 1650 } 1651 } 1652 1653 vendor_check: 1654 if (!is_vendor_class(mgmt_class)) 1655 goto out; 1656 1657 /* normalize mgmt_class to vendor range 2 */ 1658 mgmt_class = vendor_class_index(agent_priv->reg_req->mgmt_class); 1659 vendor = port_priv->version[ 1660 agent_priv->reg_req->mgmt_class_version].vendor; 1661 1662 if (!vendor) 1663 goto out; 1664 1665 vendor_class = vendor->vendor_class[mgmt_class]; 1666 if (vendor_class) { 1667 index = find_vendor_oui(vendor_class, agent_priv->reg_req->oui); 1668 if (index < 0) 1669 goto out; 1670 method = vendor_class->method_table[index]; 1671 if (method) { 1672 /* Remove any methods for this mad agent */ 1673 remove_methods_mad_agent(method, agent_priv); 1674 /* 1675 * Now, check to see if there are 1676 * any methods still in use 1677 */ 1678 if (!check_method_table(method)) { 1679 /* If not, release management method table */ 1680 kfree(method); 1681 vendor_class->method_table[index] = NULL; 1682 memset(vendor_class->oui[index], 0, 3); 1683 /* Any OUIs left ? */ 1684 if (!check_vendor_class(vendor_class)) { 1685 /* If not, release vendor class table */ 1686 kfree(vendor_class); 1687 vendor->vendor_class[mgmt_class] = NULL; 1688 /* Any other vendor classes left ? */ 1689 if (!check_vendor_table(vendor)) { 1690 kfree(vendor); 1691 port_priv->version[ 1692 agent_priv->reg_req-> 1693 mgmt_class_version]. 1694 vendor = NULL; 1695 } 1696 } 1697 } 1698 } 1699 } 1700 1701 out: 1702 return; 1703 } 1704 1705 static struct ib_mad_agent_private * 1706 find_mad_agent(struct ib_mad_port_private *port_priv, 1707 const struct ib_mad_hdr *mad_hdr) 1708 { 1709 struct ib_mad_agent_private *mad_agent = NULL; 1710 unsigned long flags; 1711 1712 spin_lock_irqsave(&port_priv->reg_lock, flags); 1713 if (ib_response_mad(mad_hdr)) { 1714 u32 hi_tid; 1715 struct ib_mad_agent_private *entry; 1716 1717 /* 1718 * Routing is based on high 32 bits of transaction ID 1719 * of MAD. 1720 */ 1721 hi_tid = be64_to_cpu(mad_hdr->tid) >> 32; 1722 list_for_each_entry(entry, &port_priv->agent_list, agent_list) { 1723 if (entry->agent.hi_tid == hi_tid) { 1724 mad_agent = entry; 1725 break; 1726 } 1727 } 1728 } else { 1729 struct ib_mad_mgmt_class_table *class; 1730 struct ib_mad_mgmt_method_table *method; 1731 struct ib_mad_mgmt_vendor_class_table *vendor; 1732 struct ib_mad_mgmt_vendor_class *vendor_class; 1733 const struct ib_vendor_mad *vendor_mad; 1734 int index; 1735 1736 /* 1737 * Routing is based on version, class, and method 1738 * For "newer" vendor MADs, also based on OUI 1739 */ 1740 if (mad_hdr->class_version >= MAX_MGMT_VERSION) 1741 goto out; 1742 if (!is_vendor_class(mad_hdr->mgmt_class)) { 1743 class = port_priv->version[ 1744 mad_hdr->class_version].class; 1745 if (!class) 1746 goto out; 1747 if (convert_mgmt_class(mad_hdr->mgmt_class) >= 1748 IB_MGMT_MAX_METHODS) 1749 goto out; 1750 method = class->method_table[convert_mgmt_class( 1751 mad_hdr->mgmt_class)]; 1752 if (method) 1753 mad_agent = method->agent[mad_hdr->method & 1754 ~IB_MGMT_METHOD_RESP]; 1755 } else { 1756 vendor = port_priv->version[ 1757 mad_hdr->class_version].vendor; 1758 if (!vendor) 1759 goto out; 1760 vendor_class = vendor->vendor_class[vendor_class_index( 1761 mad_hdr->mgmt_class)]; 1762 if (!vendor_class) 1763 goto out; 1764 /* Find matching OUI */ 1765 vendor_mad = (const struct ib_vendor_mad *)mad_hdr; 1766 index = find_vendor_oui(vendor_class, vendor_mad->oui); 1767 if (index == -1) 1768 goto out; 1769 method = vendor_class->method_table[index]; 1770 if (method) { 1771 mad_agent = method->agent[mad_hdr->method & 1772 ~IB_MGMT_METHOD_RESP]; 1773 } 1774 } 1775 } 1776 1777 if (mad_agent) { 1778 if (mad_agent->agent.recv_handler) 1779 atomic_inc(&mad_agent->refcount); 1780 else { 1781 dev_notice(&port_priv->device->dev, 1782 "No receive handler for client %p on port %d\n", 1783 &mad_agent->agent, port_priv->port_num); 1784 mad_agent = NULL; 1785 } 1786 } 1787 out: 1788 spin_unlock_irqrestore(&port_priv->reg_lock, flags); 1789 1790 return mad_agent; 1791 } 1792 1793 static int validate_mad(const struct ib_mad_hdr *mad_hdr, 1794 const struct ib_mad_qp_info *qp_info, 1795 bool opa) 1796 { 1797 int valid = 0; 1798 u32 qp_num = qp_info->qp->qp_num; 1799 1800 /* Make sure MAD base version is understood */ 1801 if (mad_hdr->base_version != IB_MGMT_BASE_VERSION && 1802 (!opa || mad_hdr->base_version != OPA_MGMT_BASE_VERSION)) { 1803 pr_err("MAD received with unsupported base version %d %s\n", 1804 mad_hdr->base_version, opa ? "(opa)" : ""); 1805 goto out; 1806 } 1807 1808 /* Filter SMI packets sent to other than QP0 */ 1809 if ((mad_hdr->mgmt_class == IB_MGMT_CLASS_SUBN_LID_ROUTED) || 1810 (mad_hdr->mgmt_class == IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE)) { 1811 if (qp_num == 0) 1812 valid = 1; 1813 } else { 1814 /* Filter GSI packets sent to QP0 */ 1815 if (qp_num != 0) 1816 valid = 1; 1817 } 1818 1819 out: 1820 return valid; 1821 } 1822 1823 static int is_rmpp_data_mad(const struct ib_mad_agent_private *mad_agent_priv, 1824 const struct ib_mad_hdr *mad_hdr) 1825 { 1826 struct ib_rmpp_mad *rmpp_mad; 1827 1828 rmpp_mad = (struct ib_rmpp_mad *)mad_hdr; 1829 return !mad_agent_priv->agent.rmpp_version || 1830 !ib_mad_kernel_rmpp_agent(&mad_agent_priv->agent) || 1831 !(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) & 1832 IB_MGMT_RMPP_FLAG_ACTIVE) || 1833 (rmpp_mad->rmpp_hdr.rmpp_type == IB_MGMT_RMPP_TYPE_DATA); 1834 } 1835 1836 static inline int rcv_has_same_class(const struct ib_mad_send_wr_private *wr, 1837 const struct ib_mad_recv_wc *rwc) 1838 { 1839 return ((struct ib_mad_hdr *)(wr->send_buf.mad))->mgmt_class == 1840 rwc->recv_buf.mad->mad_hdr.mgmt_class; 1841 } 1842 1843 static inline int rcv_has_same_gid(const struct ib_mad_agent_private *mad_agent_priv, 1844 const struct ib_mad_send_wr_private *wr, 1845 const struct ib_mad_recv_wc *rwc ) 1846 { 1847 struct ib_ah_attr attr; 1848 u8 send_resp, rcv_resp; 1849 union ib_gid sgid; 1850 struct ib_device *device = mad_agent_priv->agent.device; 1851 u8 port_num = mad_agent_priv->agent.port_num; 1852 u8 lmc; 1853 1854 send_resp = ib_response_mad((struct ib_mad_hdr *)wr->send_buf.mad); 1855 rcv_resp = ib_response_mad(&rwc->recv_buf.mad->mad_hdr); 1856 1857 if (send_resp == rcv_resp) 1858 /* both requests, or both responses. GIDs different */ 1859 return 0; 1860 1861 if (ib_query_ah(wr->send_buf.ah, &attr)) 1862 /* Assume not equal, to avoid false positives. */ 1863 return 0; 1864 1865 if (!!(attr.ah_flags & IB_AH_GRH) != 1866 !!(rwc->wc->wc_flags & IB_WC_GRH)) 1867 /* one has GID, other does not. Assume different */ 1868 return 0; 1869 1870 if (!send_resp && rcv_resp) { 1871 /* is request/response. */ 1872 if (!(attr.ah_flags & IB_AH_GRH)) { 1873 if (ib_get_cached_lmc(device, port_num, &lmc)) 1874 return 0; 1875 return (!lmc || !((attr.src_path_bits ^ 1876 rwc->wc->dlid_path_bits) & 1877 ((1 << lmc) - 1))); 1878 } else { 1879 if (ib_get_cached_gid(device, port_num, 1880 attr.grh.sgid_index, &sgid)) 1881 return 0; 1882 return !memcmp(sgid.raw, rwc->recv_buf.grh->dgid.raw, 1883 16); 1884 } 1885 } 1886 1887 if (!(attr.ah_flags & IB_AH_GRH)) 1888 return attr.dlid == rwc->wc->slid; 1889 else 1890 return !memcmp(attr.grh.dgid.raw, rwc->recv_buf.grh->sgid.raw, 1891 16); 1892 } 1893 1894 static inline int is_direct(u8 class) 1895 { 1896 return (class == IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE); 1897 } 1898 1899 struct ib_mad_send_wr_private* 1900 ib_find_send_mad(const struct ib_mad_agent_private *mad_agent_priv, 1901 const struct ib_mad_recv_wc *wc) 1902 { 1903 struct ib_mad_send_wr_private *wr; 1904 const struct ib_mad_hdr *mad_hdr; 1905 1906 mad_hdr = &wc->recv_buf.mad->mad_hdr; 1907 1908 list_for_each_entry(wr, &mad_agent_priv->wait_list, agent_list) { 1909 if ((wr->tid == mad_hdr->tid) && 1910 rcv_has_same_class(wr, wc) && 1911 /* 1912 * Don't check GID for direct routed MADs. 1913 * These might have permissive LIDs. 1914 */ 1915 (is_direct(mad_hdr->mgmt_class) || 1916 rcv_has_same_gid(mad_agent_priv, wr, wc))) 1917 return (wr->status == IB_WC_SUCCESS) ? wr : NULL; 1918 } 1919 1920 /* 1921 * It's possible to receive the response before we've 1922 * been notified that the send has completed 1923 */ 1924 list_for_each_entry(wr, &mad_agent_priv->send_list, agent_list) { 1925 if (is_rmpp_data_mad(mad_agent_priv, wr->send_buf.mad) && 1926 wr->tid == mad_hdr->tid && 1927 wr->timeout && 1928 rcv_has_same_class(wr, wc) && 1929 /* 1930 * Don't check GID for direct routed MADs. 1931 * These might have permissive LIDs. 1932 */ 1933 (is_direct(mad_hdr->mgmt_class) || 1934 rcv_has_same_gid(mad_agent_priv, wr, wc))) 1935 /* Verify request has not been canceled */ 1936 return (wr->status == IB_WC_SUCCESS) ? wr : NULL; 1937 } 1938 return NULL; 1939 } 1940 1941 void ib_mark_mad_done(struct ib_mad_send_wr_private *mad_send_wr) 1942 { 1943 mad_send_wr->timeout = 0; 1944 if (mad_send_wr->refcount == 1) 1945 list_move_tail(&mad_send_wr->agent_list, 1946 &mad_send_wr->mad_agent_priv->done_list); 1947 } 1948 1949 static void ib_mad_complete_recv(struct ib_mad_agent_private *mad_agent_priv, 1950 struct ib_mad_recv_wc *mad_recv_wc) 1951 { 1952 struct ib_mad_send_wr_private *mad_send_wr; 1953 struct ib_mad_send_wc mad_send_wc; 1954 unsigned long flags; 1955 1956 INIT_LIST_HEAD(&mad_recv_wc->rmpp_list); 1957 list_add(&mad_recv_wc->recv_buf.list, &mad_recv_wc->rmpp_list); 1958 if (ib_mad_kernel_rmpp_agent(&mad_agent_priv->agent)) { 1959 mad_recv_wc = ib_process_rmpp_recv_wc(mad_agent_priv, 1960 mad_recv_wc); 1961 if (!mad_recv_wc) { 1962 deref_mad_agent(mad_agent_priv); 1963 return; 1964 } 1965 } 1966 1967 /* Complete corresponding request */ 1968 if (ib_response_mad(&mad_recv_wc->recv_buf.mad->mad_hdr)) { 1969 spin_lock_irqsave(&mad_agent_priv->lock, flags); 1970 mad_send_wr = ib_find_send_mad(mad_agent_priv, mad_recv_wc); 1971 if (!mad_send_wr) { 1972 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 1973 if (!ib_mad_kernel_rmpp_agent(&mad_agent_priv->agent) 1974 && ib_is_mad_class_rmpp(mad_recv_wc->recv_buf.mad->mad_hdr.mgmt_class) 1975 && (ib_get_rmpp_flags(&((struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad)->rmpp_hdr) 1976 & IB_MGMT_RMPP_FLAG_ACTIVE)) { 1977 /* user rmpp is in effect 1978 * and this is an active RMPP MAD 1979 */ 1980 mad_recv_wc->wc->wr_id = 0; 1981 mad_agent_priv->agent.recv_handler(&mad_agent_priv->agent, 1982 mad_recv_wc); 1983 atomic_dec(&mad_agent_priv->refcount); 1984 } else { 1985 /* not user rmpp, revert to normal behavior and 1986 * drop the mad */ 1987 ib_free_recv_mad(mad_recv_wc); 1988 deref_mad_agent(mad_agent_priv); 1989 return; 1990 } 1991 } else { 1992 ib_mark_mad_done(mad_send_wr); 1993 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 1994 1995 /* Defined behavior is to complete response before request */ 1996 mad_recv_wc->wc->wr_id = (unsigned long) &mad_send_wr->send_buf; 1997 mad_agent_priv->agent.recv_handler(&mad_agent_priv->agent, 1998 mad_recv_wc); 1999 atomic_dec(&mad_agent_priv->refcount); 2000 2001 mad_send_wc.status = IB_WC_SUCCESS; 2002 mad_send_wc.vendor_err = 0; 2003 mad_send_wc.send_buf = &mad_send_wr->send_buf; 2004 ib_mad_complete_send_wr(mad_send_wr, &mad_send_wc); 2005 } 2006 } else { 2007 mad_agent_priv->agent.recv_handler(&mad_agent_priv->agent, 2008 mad_recv_wc); 2009 deref_mad_agent(mad_agent_priv); 2010 } 2011 } 2012 2013 static enum smi_action handle_ib_smi(const struct ib_mad_port_private *port_priv, 2014 const struct ib_mad_qp_info *qp_info, 2015 const struct ib_wc *wc, 2016 int port_num, 2017 struct ib_mad_private *recv, 2018 struct ib_mad_private *response) 2019 { 2020 enum smi_forward_action retsmi; 2021 struct ib_smp *smp = (struct ib_smp *)recv->mad; 2022 2023 if (smi_handle_dr_smp_recv(smp, 2024 rdma_cap_ib_switch(port_priv->device), 2025 port_num, 2026 port_priv->device->phys_port_cnt) == 2027 IB_SMI_DISCARD) 2028 return IB_SMI_DISCARD; 2029 2030 retsmi = smi_check_forward_dr_smp(smp); 2031 if (retsmi == IB_SMI_LOCAL) 2032 return IB_SMI_HANDLE; 2033 2034 if (retsmi == IB_SMI_SEND) { /* don't forward */ 2035 if (smi_handle_dr_smp_send(smp, 2036 rdma_cap_ib_switch(port_priv->device), 2037 port_num) == IB_SMI_DISCARD) 2038 return IB_SMI_DISCARD; 2039 2040 if (smi_check_local_smp(smp, port_priv->device) == IB_SMI_DISCARD) 2041 return IB_SMI_DISCARD; 2042 } else if (rdma_cap_ib_switch(port_priv->device)) { 2043 /* forward case for switches */ 2044 memcpy(response, recv, mad_priv_size(response)); 2045 response->header.recv_wc.wc = &response->header.wc; 2046 response->header.recv_wc.recv_buf.mad = (struct ib_mad *)response->mad; 2047 response->header.recv_wc.recv_buf.grh = &response->grh; 2048 2049 agent_send_response((const struct ib_mad_hdr *)response->mad, 2050 &response->grh, wc, 2051 port_priv->device, 2052 smi_get_fwd_port(smp), 2053 qp_info->qp->qp_num, 2054 response->mad_size, 2055 false); 2056 2057 return IB_SMI_DISCARD; 2058 } 2059 return IB_SMI_HANDLE; 2060 } 2061 2062 static bool generate_unmatched_resp(const struct ib_mad_private *recv, 2063 struct ib_mad_private *response, 2064 size_t *resp_len, bool opa) 2065 { 2066 const struct ib_mad_hdr *recv_hdr = (const struct ib_mad_hdr *)recv->mad; 2067 struct ib_mad_hdr *resp_hdr = (struct ib_mad_hdr *)response->mad; 2068 2069 if (recv_hdr->method == IB_MGMT_METHOD_GET || 2070 recv_hdr->method == IB_MGMT_METHOD_SET) { 2071 memcpy(response, recv, mad_priv_size(response)); 2072 response->header.recv_wc.wc = &response->header.wc; 2073 response->header.recv_wc.recv_buf.mad = (struct ib_mad *)response->mad; 2074 response->header.recv_wc.recv_buf.grh = &response->grh; 2075 resp_hdr->method = IB_MGMT_METHOD_GET_RESP; 2076 resp_hdr->status = cpu_to_be16(IB_MGMT_MAD_STATUS_UNSUPPORTED_METHOD_ATTRIB); 2077 if (recv_hdr->mgmt_class == IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) 2078 resp_hdr->status |= IB_SMP_DIRECTION; 2079 2080 if (opa && recv_hdr->base_version == OPA_MGMT_BASE_VERSION) { 2081 if (recv_hdr->mgmt_class == 2082 IB_MGMT_CLASS_SUBN_LID_ROUTED || 2083 recv_hdr->mgmt_class == 2084 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) 2085 *resp_len = opa_get_smp_header_size( 2086 (struct opa_smp *)recv->mad); 2087 else 2088 *resp_len = sizeof(struct ib_mad_hdr); 2089 } 2090 2091 return true; 2092 } else { 2093 return false; 2094 } 2095 } 2096 2097 static enum smi_action 2098 handle_opa_smi(struct ib_mad_port_private *port_priv, 2099 struct ib_mad_qp_info *qp_info, 2100 struct ib_wc *wc, 2101 int port_num, 2102 struct ib_mad_private *recv, 2103 struct ib_mad_private *response) 2104 { 2105 enum smi_forward_action retsmi; 2106 struct opa_smp *smp = (struct opa_smp *)recv->mad; 2107 2108 if (opa_smi_handle_dr_smp_recv(smp, 2109 rdma_cap_ib_switch(port_priv->device), 2110 port_num, 2111 port_priv->device->phys_port_cnt) == 2112 IB_SMI_DISCARD) 2113 return IB_SMI_DISCARD; 2114 2115 retsmi = opa_smi_check_forward_dr_smp(smp); 2116 if (retsmi == IB_SMI_LOCAL) 2117 return IB_SMI_HANDLE; 2118 2119 if (retsmi == IB_SMI_SEND) { /* don't forward */ 2120 if (opa_smi_handle_dr_smp_send(smp, 2121 rdma_cap_ib_switch(port_priv->device), 2122 port_num) == IB_SMI_DISCARD) 2123 return IB_SMI_DISCARD; 2124 2125 if (opa_smi_check_local_smp(smp, port_priv->device) == 2126 IB_SMI_DISCARD) 2127 return IB_SMI_DISCARD; 2128 2129 } else if (rdma_cap_ib_switch(port_priv->device)) { 2130 /* forward case for switches */ 2131 memcpy(response, recv, mad_priv_size(response)); 2132 response->header.recv_wc.wc = &response->header.wc; 2133 response->header.recv_wc.recv_buf.opa_mad = 2134 (struct opa_mad *)response->mad; 2135 response->header.recv_wc.recv_buf.grh = &response->grh; 2136 2137 agent_send_response((const struct ib_mad_hdr *)response->mad, 2138 &response->grh, wc, 2139 port_priv->device, 2140 opa_smi_get_fwd_port(smp), 2141 qp_info->qp->qp_num, 2142 recv->header.wc.byte_len, 2143 true); 2144 2145 return IB_SMI_DISCARD; 2146 } 2147 2148 return IB_SMI_HANDLE; 2149 } 2150 2151 static enum smi_action 2152 handle_smi(struct ib_mad_port_private *port_priv, 2153 struct ib_mad_qp_info *qp_info, 2154 struct ib_wc *wc, 2155 int port_num, 2156 struct ib_mad_private *recv, 2157 struct ib_mad_private *response, 2158 bool opa) 2159 { 2160 struct ib_mad_hdr *mad_hdr = (struct ib_mad_hdr *)recv->mad; 2161 2162 if (opa && mad_hdr->base_version == OPA_MGMT_BASE_VERSION && 2163 mad_hdr->class_version == OPA_SMI_CLASS_VERSION) 2164 return handle_opa_smi(port_priv, qp_info, wc, port_num, recv, 2165 response); 2166 2167 return handle_ib_smi(port_priv, qp_info, wc, port_num, recv, response); 2168 } 2169 2170 static void ib_mad_recv_done_handler(struct ib_mad_port_private *port_priv, 2171 struct ib_wc *wc) 2172 { 2173 struct ib_mad_qp_info *qp_info; 2174 struct ib_mad_private_header *mad_priv_hdr; 2175 struct ib_mad_private *recv, *response = NULL; 2176 struct ib_mad_list_head *mad_list; 2177 struct ib_mad_agent_private *mad_agent; 2178 int port_num; 2179 int ret = IB_MAD_RESULT_SUCCESS; 2180 size_t mad_size; 2181 u16 resp_mad_pkey_index = 0; 2182 bool opa; 2183 2184 mad_list = (struct ib_mad_list_head *)(unsigned long)wc->wr_id; 2185 qp_info = mad_list->mad_queue->qp_info; 2186 dequeue_mad(mad_list); 2187 2188 opa = rdma_cap_opa_mad(qp_info->port_priv->device, 2189 qp_info->port_priv->port_num); 2190 2191 mad_priv_hdr = container_of(mad_list, struct ib_mad_private_header, 2192 mad_list); 2193 recv = container_of(mad_priv_hdr, struct ib_mad_private, header); 2194 ib_dma_unmap_single(port_priv->device, 2195 recv->header.mapping, 2196 mad_priv_dma_size(recv), 2197 DMA_FROM_DEVICE); 2198 2199 /* Setup MAD receive work completion from "normal" work completion */ 2200 recv->header.wc = *wc; 2201 recv->header.recv_wc.wc = &recv->header.wc; 2202 2203 if (opa && ((struct ib_mad_hdr *)(recv->mad))->base_version == OPA_MGMT_BASE_VERSION) { 2204 recv->header.recv_wc.mad_len = wc->byte_len - sizeof(struct ib_grh); 2205 recv->header.recv_wc.mad_seg_size = sizeof(struct opa_mad); 2206 } else { 2207 recv->header.recv_wc.mad_len = sizeof(struct ib_mad); 2208 recv->header.recv_wc.mad_seg_size = sizeof(struct ib_mad); 2209 } 2210 2211 recv->header.recv_wc.recv_buf.mad = (struct ib_mad *)recv->mad; 2212 recv->header.recv_wc.recv_buf.grh = &recv->grh; 2213 2214 if (atomic_read(&qp_info->snoop_count)) 2215 snoop_recv(qp_info, &recv->header.recv_wc, IB_MAD_SNOOP_RECVS); 2216 2217 /* Validate MAD */ 2218 if (!validate_mad((const struct ib_mad_hdr *)recv->mad, qp_info, opa)) 2219 goto out; 2220 2221 mad_size = recv->mad_size; 2222 response = alloc_mad_private(mad_size, GFP_KERNEL); 2223 if (!response) { 2224 dev_err(&port_priv->device->dev, 2225 "ib_mad_recv_done_handler no memory for response buffer\n"); 2226 goto out; 2227 } 2228 2229 if (rdma_cap_ib_switch(port_priv->device)) 2230 port_num = wc->port_num; 2231 else 2232 port_num = port_priv->port_num; 2233 2234 if (((struct ib_mad_hdr *)recv->mad)->mgmt_class == 2235 IB_MGMT_CLASS_SUBN_DIRECTED_ROUTE) { 2236 if (handle_smi(port_priv, qp_info, wc, port_num, recv, 2237 response, opa) 2238 == IB_SMI_DISCARD) 2239 goto out; 2240 } 2241 2242 /* Give driver "right of first refusal" on incoming MAD */ 2243 if (port_priv->device->process_mad) { 2244 ret = port_priv->device->process_mad(port_priv->device, 0, 2245 port_priv->port_num, 2246 wc, &recv->grh, 2247 (const struct ib_mad_hdr *)recv->mad, 2248 recv->mad_size, 2249 (struct ib_mad_hdr *)response->mad, 2250 &mad_size, &resp_mad_pkey_index); 2251 2252 if (opa) 2253 wc->pkey_index = resp_mad_pkey_index; 2254 2255 if (ret & IB_MAD_RESULT_SUCCESS) { 2256 if (ret & IB_MAD_RESULT_CONSUMED) 2257 goto out; 2258 if (ret & IB_MAD_RESULT_REPLY) { 2259 agent_send_response((const struct ib_mad_hdr *)response->mad, 2260 &recv->grh, wc, 2261 port_priv->device, 2262 port_num, 2263 qp_info->qp->qp_num, 2264 mad_size, opa); 2265 goto out; 2266 } 2267 } 2268 } 2269 2270 mad_agent = find_mad_agent(port_priv, (const struct ib_mad_hdr *)recv->mad); 2271 if (mad_agent) { 2272 ib_mad_complete_recv(mad_agent, &recv->header.recv_wc); 2273 /* 2274 * recv is freed up in error cases in ib_mad_complete_recv 2275 * or via recv_handler in ib_mad_complete_recv() 2276 */ 2277 recv = NULL; 2278 } else if ((ret & IB_MAD_RESULT_SUCCESS) && 2279 generate_unmatched_resp(recv, response, &mad_size, opa)) { 2280 agent_send_response((const struct ib_mad_hdr *)response->mad, &recv->grh, wc, 2281 port_priv->device, port_num, 2282 qp_info->qp->qp_num, mad_size, opa); 2283 } 2284 2285 out: 2286 /* Post another receive request for this QP */ 2287 if (response) { 2288 ib_mad_post_receive_mads(qp_info, response); 2289 kfree(recv); 2290 } else 2291 ib_mad_post_receive_mads(qp_info, recv); 2292 } 2293 2294 static void adjust_timeout(struct ib_mad_agent_private *mad_agent_priv) 2295 { 2296 struct ib_mad_send_wr_private *mad_send_wr; 2297 unsigned long delay; 2298 2299 if (list_empty(&mad_agent_priv->wait_list)) { 2300 cancel_delayed_work(&mad_agent_priv->timed_work); 2301 } else { 2302 mad_send_wr = list_entry(mad_agent_priv->wait_list.next, 2303 struct ib_mad_send_wr_private, 2304 agent_list); 2305 2306 if (time_after(mad_agent_priv->timeout, 2307 mad_send_wr->timeout)) { 2308 mad_agent_priv->timeout = mad_send_wr->timeout; 2309 delay = mad_send_wr->timeout - jiffies; 2310 if ((long)delay <= 0) 2311 delay = 1; 2312 mod_delayed_work(mad_agent_priv->qp_info->port_priv->wq, 2313 &mad_agent_priv->timed_work, delay); 2314 } 2315 } 2316 } 2317 2318 static void wait_for_response(struct ib_mad_send_wr_private *mad_send_wr) 2319 { 2320 struct ib_mad_agent_private *mad_agent_priv; 2321 struct ib_mad_send_wr_private *temp_mad_send_wr; 2322 struct list_head *list_item; 2323 unsigned long delay; 2324 2325 mad_agent_priv = mad_send_wr->mad_agent_priv; 2326 list_del(&mad_send_wr->agent_list); 2327 2328 delay = mad_send_wr->timeout; 2329 mad_send_wr->timeout += jiffies; 2330 2331 if (delay) { 2332 list_for_each_prev(list_item, &mad_agent_priv->wait_list) { 2333 temp_mad_send_wr = list_entry(list_item, 2334 struct ib_mad_send_wr_private, 2335 agent_list); 2336 if (time_after(mad_send_wr->timeout, 2337 temp_mad_send_wr->timeout)) 2338 break; 2339 } 2340 } 2341 else 2342 list_item = &mad_agent_priv->wait_list; 2343 list_add(&mad_send_wr->agent_list, list_item); 2344 2345 /* Reschedule a work item if we have a shorter timeout */ 2346 if (mad_agent_priv->wait_list.next == &mad_send_wr->agent_list) 2347 mod_delayed_work(mad_agent_priv->qp_info->port_priv->wq, 2348 &mad_agent_priv->timed_work, delay); 2349 } 2350 2351 void ib_reset_mad_timeout(struct ib_mad_send_wr_private *mad_send_wr, 2352 int timeout_ms) 2353 { 2354 mad_send_wr->timeout = msecs_to_jiffies(timeout_ms); 2355 wait_for_response(mad_send_wr); 2356 } 2357 2358 /* 2359 * Process a send work completion 2360 */ 2361 void ib_mad_complete_send_wr(struct ib_mad_send_wr_private *mad_send_wr, 2362 struct ib_mad_send_wc *mad_send_wc) 2363 { 2364 struct ib_mad_agent_private *mad_agent_priv; 2365 unsigned long flags; 2366 int ret; 2367 2368 mad_agent_priv = mad_send_wr->mad_agent_priv; 2369 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2370 if (ib_mad_kernel_rmpp_agent(&mad_agent_priv->agent)) { 2371 ret = ib_process_rmpp_send_wc(mad_send_wr, mad_send_wc); 2372 if (ret == IB_RMPP_RESULT_CONSUMED) 2373 goto done; 2374 } else 2375 ret = IB_RMPP_RESULT_UNHANDLED; 2376 2377 if (mad_send_wc->status != IB_WC_SUCCESS && 2378 mad_send_wr->status == IB_WC_SUCCESS) { 2379 mad_send_wr->status = mad_send_wc->status; 2380 mad_send_wr->refcount -= (mad_send_wr->timeout > 0); 2381 } 2382 2383 if (--mad_send_wr->refcount > 0) { 2384 if (mad_send_wr->refcount == 1 && mad_send_wr->timeout && 2385 mad_send_wr->status == IB_WC_SUCCESS) { 2386 wait_for_response(mad_send_wr); 2387 } 2388 goto done; 2389 } 2390 2391 /* Remove send from MAD agent and notify client of completion */ 2392 list_del(&mad_send_wr->agent_list); 2393 adjust_timeout(mad_agent_priv); 2394 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2395 2396 if (mad_send_wr->status != IB_WC_SUCCESS ) 2397 mad_send_wc->status = mad_send_wr->status; 2398 if (ret == IB_RMPP_RESULT_INTERNAL) 2399 ib_rmpp_send_handler(mad_send_wc); 2400 else 2401 mad_agent_priv->agent.send_handler(&mad_agent_priv->agent, 2402 mad_send_wc); 2403 2404 /* Release reference on agent taken when sending */ 2405 deref_mad_agent(mad_agent_priv); 2406 return; 2407 done: 2408 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2409 } 2410 2411 static void ib_mad_send_done_handler(struct ib_mad_port_private *port_priv, 2412 struct ib_wc *wc) 2413 { 2414 struct ib_mad_send_wr_private *mad_send_wr, *queued_send_wr; 2415 struct ib_mad_list_head *mad_list; 2416 struct ib_mad_qp_info *qp_info; 2417 struct ib_mad_queue *send_queue; 2418 struct ib_send_wr *bad_send_wr; 2419 struct ib_mad_send_wc mad_send_wc; 2420 unsigned long flags; 2421 int ret; 2422 2423 mad_list = (struct ib_mad_list_head *)(unsigned long)wc->wr_id; 2424 mad_send_wr = container_of(mad_list, struct ib_mad_send_wr_private, 2425 mad_list); 2426 send_queue = mad_list->mad_queue; 2427 qp_info = send_queue->qp_info; 2428 2429 retry: 2430 ib_dma_unmap_single(mad_send_wr->send_buf.mad_agent->device, 2431 mad_send_wr->header_mapping, 2432 mad_send_wr->sg_list[0].length, DMA_TO_DEVICE); 2433 ib_dma_unmap_single(mad_send_wr->send_buf.mad_agent->device, 2434 mad_send_wr->payload_mapping, 2435 mad_send_wr->sg_list[1].length, DMA_TO_DEVICE); 2436 queued_send_wr = NULL; 2437 spin_lock_irqsave(&send_queue->lock, flags); 2438 list_del(&mad_list->list); 2439 2440 /* Move queued send to the send queue */ 2441 if (send_queue->count-- > send_queue->max_active) { 2442 mad_list = container_of(qp_info->overflow_list.next, 2443 struct ib_mad_list_head, list); 2444 queued_send_wr = container_of(mad_list, 2445 struct ib_mad_send_wr_private, 2446 mad_list); 2447 list_move_tail(&mad_list->list, &send_queue->list); 2448 } 2449 spin_unlock_irqrestore(&send_queue->lock, flags); 2450 2451 mad_send_wc.send_buf = &mad_send_wr->send_buf; 2452 mad_send_wc.status = wc->status; 2453 mad_send_wc.vendor_err = wc->vendor_err; 2454 if (atomic_read(&qp_info->snoop_count)) 2455 snoop_send(qp_info, &mad_send_wr->send_buf, &mad_send_wc, 2456 IB_MAD_SNOOP_SEND_COMPLETIONS); 2457 ib_mad_complete_send_wr(mad_send_wr, &mad_send_wc); 2458 2459 if (queued_send_wr) { 2460 ret = ib_post_send(qp_info->qp, &queued_send_wr->send_wr, 2461 &bad_send_wr); 2462 if (ret) { 2463 dev_err(&port_priv->device->dev, 2464 "ib_post_send failed: %d\n", ret); 2465 mad_send_wr = queued_send_wr; 2466 wc->status = IB_WC_LOC_QP_OP_ERR; 2467 goto retry; 2468 } 2469 } 2470 } 2471 2472 static void mark_sends_for_retry(struct ib_mad_qp_info *qp_info) 2473 { 2474 struct ib_mad_send_wr_private *mad_send_wr; 2475 struct ib_mad_list_head *mad_list; 2476 unsigned long flags; 2477 2478 spin_lock_irqsave(&qp_info->send_queue.lock, flags); 2479 list_for_each_entry(mad_list, &qp_info->send_queue.list, list) { 2480 mad_send_wr = container_of(mad_list, 2481 struct ib_mad_send_wr_private, 2482 mad_list); 2483 mad_send_wr->retry = 1; 2484 } 2485 spin_unlock_irqrestore(&qp_info->send_queue.lock, flags); 2486 } 2487 2488 static void mad_error_handler(struct ib_mad_port_private *port_priv, 2489 struct ib_wc *wc) 2490 { 2491 struct ib_mad_list_head *mad_list; 2492 struct ib_mad_qp_info *qp_info; 2493 struct ib_mad_send_wr_private *mad_send_wr; 2494 int ret; 2495 2496 /* Determine if failure was a send or receive */ 2497 mad_list = (struct ib_mad_list_head *)(unsigned long)wc->wr_id; 2498 qp_info = mad_list->mad_queue->qp_info; 2499 if (mad_list->mad_queue == &qp_info->recv_queue) 2500 /* 2501 * Receive errors indicate that the QP has entered the error 2502 * state - error handling/shutdown code will cleanup 2503 */ 2504 return; 2505 2506 /* 2507 * Send errors will transition the QP to SQE - move 2508 * QP to RTS and repost flushed work requests 2509 */ 2510 mad_send_wr = container_of(mad_list, struct ib_mad_send_wr_private, 2511 mad_list); 2512 if (wc->status == IB_WC_WR_FLUSH_ERR) { 2513 if (mad_send_wr->retry) { 2514 /* Repost send */ 2515 struct ib_send_wr *bad_send_wr; 2516 2517 mad_send_wr->retry = 0; 2518 ret = ib_post_send(qp_info->qp, &mad_send_wr->send_wr, 2519 &bad_send_wr); 2520 if (ret) 2521 ib_mad_send_done_handler(port_priv, wc); 2522 } else 2523 ib_mad_send_done_handler(port_priv, wc); 2524 } else { 2525 struct ib_qp_attr *attr; 2526 2527 /* Transition QP to RTS and fail offending send */ 2528 attr = kmalloc(sizeof *attr, GFP_KERNEL); 2529 if (attr) { 2530 attr->qp_state = IB_QPS_RTS; 2531 attr->cur_qp_state = IB_QPS_SQE; 2532 ret = ib_modify_qp(qp_info->qp, attr, 2533 IB_QP_STATE | IB_QP_CUR_STATE); 2534 kfree(attr); 2535 if (ret) 2536 dev_err(&port_priv->device->dev, 2537 "mad_error_handler - ib_modify_qp to RTS : %d\n", 2538 ret); 2539 else 2540 mark_sends_for_retry(qp_info); 2541 } 2542 ib_mad_send_done_handler(port_priv, wc); 2543 } 2544 } 2545 2546 /* 2547 * IB MAD completion callback 2548 */ 2549 static void ib_mad_completion_handler(struct work_struct *work) 2550 { 2551 struct ib_mad_port_private *port_priv; 2552 struct ib_wc wc; 2553 2554 port_priv = container_of(work, struct ib_mad_port_private, work); 2555 ib_req_notify_cq(port_priv->cq, IB_CQ_NEXT_COMP); 2556 2557 while (ib_poll_cq(port_priv->cq, 1, &wc) == 1) { 2558 if (wc.status == IB_WC_SUCCESS) { 2559 switch (wc.opcode) { 2560 case IB_WC_SEND: 2561 ib_mad_send_done_handler(port_priv, &wc); 2562 break; 2563 case IB_WC_RECV: 2564 ib_mad_recv_done_handler(port_priv, &wc); 2565 break; 2566 default: 2567 BUG_ON(1); 2568 break; 2569 } 2570 } else 2571 mad_error_handler(port_priv, &wc); 2572 } 2573 } 2574 2575 static void cancel_mads(struct ib_mad_agent_private *mad_agent_priv) 2576 { 2577 unsigned long flags; 2578 struct ib_mad_send_wr_private *mad_send_wr, *temp_mad_send_wr; 2579 struct ib_mad_send_wc mad_send_wc; 2580 struct list_head cancel_list; 2581 2582 INIT_LIST_HEAD(&cancel_list); 2583 2584 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2585 list_for_each_entry_safe(mad_send_wr, temp_mad_send_wr, 2586 &mad_agent_priv->send_list, agent_list) { 2587 if (mad_send_wr->status == IB_WC_SUCCESS) { 2588 mad_send_wr->status = IB_WC_WR_FLUSH_ERR; 2589 mad_send_wr->refcount -= (mad_send_wr->timeout > 0); 2590 } 2591 } 2592 2593 /* Empty wait list to prevent receives from finding a request */ 2594 list_splice_init(&mad_agent_priv->wait_list, &cancel_list); 2595 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2596 2597 /* Report all cancelled requests */ 2598 mad_send_wc.status = IB_WC_WR_FLUSH_ERR; 2599 mad_send_wc.vendor_err = 0; 2600 2601 list_for_each_entry_safe(mad_send_wr, temp_mad_send_wr, 2602 &cancel_list, agent_list) { 2603 mad_send_wc.send_buf = &mad_send_wr->send_buf; 2604 list_del(&mad_send_wr->agent_list); 2605 mad_agent_priv->agent.send_handler(&mad_agent_priv->agent, 2606 &mad_send_wc); 2607 atomic_dec(&mad_agent_priv->refcount); 2608 } 2609 } 2610 2611 static struct ib_mad_send_wr_private* 2612 find_send_wr(struct ib_mad_agent_private *mad_agent_priv, 2613 struct ib_mad_send_buf *send_buf) 2614 { 2615 struct ib_mad_send_wr_private *mad_send_wr; 2616 2617 list_for_each_entry(mad_send_wr, &mad_agent_priv->wait_list, 2618 agent_list) { 2619 if (&mad_send_wr->send_buf == send_buf) 2620 return mad_send_wr; 2621 } 2622 2623 list_for_each_entry(mad_send_wr, &mad_agent_priv->send_list, 2624 agent_list) { 2625 if (is_rmpp_data_mad(mad_agent_priv, 2626 mad_send_wr->send_buf.mad) && 2627 &mad_send_wr->send_buf == send_buf) 2628 return mad_send_wr; 2629 } 2630 return NULL; 2631 } 2632 2633 int ib_modify_mad(struct ib_mad_agent *mad_agent, 2634 struct ib_mad_send_buf *send_buf, u32 timeout_ms) 2635 { 2636 struct ib_mad_agent_private *mad_agent_priv; 2637 struct ib_mad_send_wr_private *mad_send_wr; 2638 unsigned long flags; 2639 int active; 2640 2641 mad_agent_priv = container_of(mad_agent, struct ib_mad_agent_private, 2642 agent); 2643 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2644 mad_send_wr = find_send_wr(mad_agent_priv, send_buf); 2645 if (!mad_send_wr || mad_send_wr->status != IB_WC_SUCCESS) { 2646 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2647 return -EINVAL; 2648 } 2649 2650 active = (!mad_send_wr->timeout || mad_send_wr->refcount > 1); 2651 if (!timeout_ms) { 2652 mad_send_wr->status = IB_WC_WR_FLUSH_ERR; 2653 mad_send_wr->refcount -= (mad_send_wr->timeout > 0); 2654 } 2655 2656 mad_send_wr->send_buf.timeout_ms = timeout_ms; 2657 if (active) 2658 mad_send_wr->timeout = msecs_to_jiffies(timeout_ms); 2659 else 2660 ib_reset_mad_timeout(mad_send_wr, timeout_ms); 2661 2662 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2663 return 0; 2664 } 2665 EXPORT_SYMBOL(ib_modify_mad); 2666 2667 void ib_cancel_mad(struct ib_mad_agent *mad_agent, 2668 struct ib_mad_send_buf *send_buf) 2669 { 2670 ib_modify_mad(mad_agent, send_buf, 0); 2671 } 2672 EXPORT_SYMBOL(ib_cancel_mad); 2673 2674 static void local_completions(struct work_struct *work) 2675 { 2676 struct ib_mad_agent_private *mad_agent_priv; 2677 struct ib_mad_local_private *local; 2678 struct ib_mad_agent_private *recv_mad_agent; 2679 unsigned long flags; 2680 int free_mad; 2681 struct ib_wc wc; 2682 struct ib_mad_send_wc mad_send_wc; 2683 bool opa; 2684 2685 mad_agent_priv = 2686 container_of(work, struct ib_mad_agent_private, local_work); 2687 2688 opa = rdma_cap_opa_mad(mad_agent_priv->qp_info->port_priv->device, 2689 mad_agent_priv->qp_info->port_priv->port_num); 2690 2691 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2692 while (!list_empty(&mad_agent_priv->local_list)) { 2693 local = list_entry(mad_agent_priv->local_list.next, 2694 struct ib_mad_local_private, 2695 completion_list); 2696 list_del(&local->completion_list); 2697 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2698 free_mad = 0; 2699 if (local->mad_priv) { 2700 u8 base_version; 2701 recv_mad_agent = local->recv_mad_agent; 2702 if (!recv_mad_agent) { 2703 dev_err(&mad_agent_priv->agent.device->dev, 2704 "No receive MAD agent for local completion\n"); 2705 free_mad = 1; 2706 goto local_send_completion; 2707 } 2708 2709 /* 2710 * Defined behavior is to complete response 2711 * before request 2712 */ 2713 build_smp_wc(recv_mad_agent->agent.qp, 2714 (unsigned long) local->mad_send_wr, 2715 be16_to_cpu(IB_LID_PERMISSIVE), 2716 local->mad_send_wr->send_wr.wr.ud.pkey_index, 2717 recv_mad_agent->agent.port_num, &wc); 2718 2719 local->mad_priv->header.recv_wc.wc = &wc; 2720 2721 base_version = ((struct ib_mad_hdr *)(local->mad_priv->mad))->base_version; 2722 if (opa && base_version == OPA_MGMT_BASE_VERSION) { 2723 local->mad_priv->header.recv_wc.mad_len = local->return_wc_byte_len; 2724 local->mad_priv->header.recv_wc.mad_seg_size = sizeof(struct opa_mad); 2725 } else { 2726 local->mad_priv->header.recv_wc.mad_len = sizeof(struct ib_mad); 2727 local->mad_priv->header.recv_wc.mad_seg_size = sizeof(struct ib_mad); 2728 } 2729 2730 INIT_LIST_HEAD(&local->mad_priv->header.recv_wc.rmpp_list); 2731 list_add(&local->mad_priv->header.recv_wc.recv_buf.list, 2732 &local->mad_priv->header.recv_wc.rmpp_list); 2733 local->mad_priv->header.recv_wc.recv_buf.grh = NULL; 2734 local->mad_priv->header.recv_wc.recv_buf.mad = 2735 (struct ib_mad *)local->mad_priv->mad; 2736 if (atomic_read(&recv_mad_agent->qp_info->snoop_count)) 2737 snoop_recv(recv_mad_agent->qp_info, 2738 &local->mad_priv->header.recv_wc, 2739 IB_MAD_SNOOP_RECVS); 2740 recv_mad_agent->agent.recv_handler( 2741 &recv_mad_agent->agent, 2742 &local->mad_priv->header.recv_wc); 2743 spin_lock_irqsave(&recv_mad_agent->lock, flags); 2744 atomic_dec(&recv_mad_agent->refcount); 2745 spin_unlock_irqrestore(&recv_mad_agent->lock, flags); 2746 } 2747 2748 local_send_completion: 2749 /* Complete send */ 2750 mad_send_wc.status = IB_WC_SUCCESS; 2751 mad_send_wc.vendor_err = 0; 2752 mad_send_wc.send_buf = &local->mad_send_wr->send_buf; 2753 if (atomic_read(&mad_agent_priv->qp_info->snoop_count)) 2754 snoop_send(mad_agent_priv->qp_info, 2755 &local->mad_send_wr->send_buf, 2756 &mad_send_wc, IB_MAD_SNOOP_SEND_COMPLETIONS); 2757 mad_agent_priv->agent.send_handler(&mad_agent_priv->agent, 2758 &mad_send_wc); 2759 2760 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2761 atomic_dec(&mad_agent_priv->refcount); 2762 if (free_mad) 2763 kfree(local->mad_priv); 2764 kfree(local); 2765 } 2766 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2767 } 2768 2769 static int retry_send(struct ib_mad_send_wr_private *mad_send_wr) 2770 { 2771 int ret; 2772 2773 if (!mad_send_wr->retries_left) 2774 return -ETIMEDOUT; 2775 2776 mad_send_wr->retries_left--; 2777 mad_send_wr->send_buf.retries++; 2778 2779 mad_send_wr->timeout = msecs_to_jiffies(mad_send_wr->send_buf.timeout_ms); 2780 2781 if (ib_mad_kernel_rmpp_agent(&mad_send_wr->mad_agent_priv->agent)) { 2782 ret = ib_retry_rmpp(mad_send_wr); 2783 switch (ret) { 2784 case IB_RMPP_RESULT_UNHANDLED: 2785 ret = ib_send_mad(mad_send_wr); 2786 break; 2787 case IB_RMPP_RESULT_CONSUMED: 2788 ret = 0; 2789 break; 2790 default: 2791 ret = -ECOMM; 2792 break; 2793 } 2794 } else 2795 ret = ib_send_mad(mad_send_wr); 2796 2797 if (!ret) { 2798 mad_send_wr->refcount++; 2799 list_add_tail(&mad_send_wr->agent_list, 2800 &mad_send_wr->mad_agent_priv->send_list); 2801 } 2802 return ret; 2803 } 2804 2805 static void timeout_sends(struct work_struct *work) 2806 { 2807 struct ib_mad_agent_private *mad_agent_priv; 2808 struct ib_mad_send_wr_private *mad_send_wr; 2809 struct ib_mad_send_wc mad_send_wc; 2810 unsigned long flags, delay; 2811 2812 mad_agent_priv = container_of(work, struct ib_mad_agent_private, 2813 timed_work.work); 2814 mad_send_wc.vendor_err = 0; 2815 2816 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2817 while (!list_empty(&mad_agent_priv->wait_list)) { 2818 mad_send_wr = list_entry(mad_agent_priv->wait_list.next, 2819 struct ib_mad_send_wr_private, 2820 agent_list); 2821 2822 if (time_after(mad_send_wr->timeout, jiffies)) { 2823 delay = mad_send_wr->timeout - jiffies; 2824 if ((long)delay <= 0) 2825 delay = 1; 2826 queue_delayed_work(mad_agent_priv->qp_info-> 2827 port_priv->wq, 2828 &mad_agent_priv->timed_work, delay); 2829 break; 2830 } 2831 2832 list_del(&mad_send_wr->agent_list); 2833 if (mad_send_wr->status == IB_WC_SUCCESS && 2834 !retry_send(mad_send_wr)) 2835 continue; 2836 2837 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2838 2839 if (mad_send_wr->status == IB_WC_SUCCESS) 2840 mad_send_wc.status = IB_WC_RESP_TIMEOUT_ERR; 2841 else 2842 mad_send_wc.status = mad_send_wr->status; 2843 mad_send_wc.send_buf = &mad_send_wr->send_buf; 2844 mad_agent_priv->agent.send_handler(&mad_agent_priv->agent, 2845 &mad_send_wc); 2846 2847 atomic_dec(&mad_agent_priv->refcount); 2848 spin_lock_irqsave(&mad_agent_priv->lock, flags); 2849 } 2850 spin_unlock_irqrestore(&mad_agent_priv->lock, flags); 2851 } 2852 2853 static void ib_mad_thread_completion_handler(struct ib_cq *cq, void *arg) 2854 { 2855 struct ib_mad_port_private *port_priv = cq->cq_context; 2856 unsigned long flags; 2857 2858 spin_lock_irqsave(&ib_mad_port_list_lock, flags); 2859 if (!list_empty(&port_priv->port_list)) 2860 queue_work(port_priv->wq, &port_priv->work); 2861 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 2862 } 2863 2864 /* 2865 * Allocate receive MADs and post receive WRs for them 2866 */ 2867 static int ib_mad_post_receive_mads(struct ib_mad_qp_info *qp_info, 2868 struct ib_mad_private *mad) 2869 { 2870 unsigned long flags; 2871 int post, ret; 2872 struct ib_mad_private *mad_priv; 2873 struct ib_sge sg_list; 2874 struct ib_recv_wr recv_wr, *bad_recv_wr; 2875 struct ib_mad_queue *recv_queue = &qp_info->recv_queue; 2876 2877 /* Initialize common scatter list fields */ 2878 sg_list.lkey = qp_info->port_priv->pd->local_dma_lkey; 2879 2880 /* Initialize common receive WR fields */ 2881 recv_wr.next = NULL; 2882 recv_wr.sg_list = &sg_list; 2883 recv_wr.num_sge = 1; 2884 2885 do { 2886 /* Allocate and map receive buffer */ 2887 if (mad) { 2888 mad_priv = mad; 2889 mad = NULL; 2890 } else { 2891 mad_priv = alloc_mad_private(port_mad_size(qp_info->port_priv), 2892 GFP_ATOMIC); 2893 if (!mad_priv) { 2894 dev_err(&qp_info->port_priv->device->dev, 2895 "No memory for receive buffer\n"); 2896 ret = -ENOMEM; 2897 break; 2898 } 2899 } 2900 sg_list.length = mad_priv_dma_size(mad_priv); 2901 sg_list.addr = ib_dma_map_single(qp_info->port_priv->device, 2902 &mad_priv->grh, 2903 mad_priv_dma_size(mad_priv), 2904 DMA_FROM_DEVICE); 2905 if (unlikely(ib_dma_mapping_error(qp_info->port_priv->device, 2906 sg_list.addr))) { 2907 ret = -ENOMEM; 2908 break; 2909 } 2910 mad_priv->header.mapping = sg_list.addr; 2911 recv_wr.wr_id = (unsigned long)&mad_priv->header.mad_list; 2912 mad_priv->header.mad_list.mad_queue = recv_queue; 2913 2914 /* Post receive WR */ 2915 spin_lock_irqsave(&recv_queue->lock, flags); 2916 post = (++recv_queue->count < recv_queue->max_active); 2917 list_add_tail(&mad_priv->header.mad_list.list, &recv_queue->list); 2918 spin_unlock_irqrestore(&recv_queue->lock, flags); 2919 ret = ib_post_recv(qp_info->qp, &recv_wr, &bad_recv_wr); 2920 if (ret) { 2921 spin_lock_irqsave(&recv_queue->lock, flags); 2922 list_del(&mad_priv->header.mad_list.list); 2923 recv_queue->count--; 2924 spin_unlock_irqrestore(&recv_queue->lock, flags); 2925 ib_dma_unmap_single(qp_info->port_priv->device, 2926 mad_priv->header.mapping, 2927 mad_priv_dma_size(mad_priv), 2928 DMA_FROM_DEVICE); 2929 kfree(mad_priv); 2930 dev_err(&qp_info->port_priv->device->dev, 2931 "ib_post_recv failed: %d\n", ret); 2932 break; 2933 } 2934 } while (post); 2935 2936 return ret; 2937 } 2938 2939 /* 2940 * Return all the posted receive MADs 2941 */ 2942 static void cleanup_recv_queue(struct ib_mad_qp_info *qp_info) 2943 { 2944 struct ib_mad_private_header *mad_priv_hdr; 2945 struct ib_mad_private *recv; 2946 struct ib_mad_list_head *mad_list; 2947 2948 if (!qp_info->qp) 2949 return; 2950 2951 while (!list_empty(&qp_info->recv_queue.list)) { 2952 2953 mad_list = list_entry(qp_info->recv_queue.list.next, 2954 struct ib_mad_list_head, list); 2955 mad_priv_hdr = container_of(mad_list, 2956 struct ib_mad_private_header, 2957 mad_list); 2958 recv = container_of(mad_priv_hdr, struct ib_mad_private, 2959 header); 2960 2961 /* Remove from posted receive MAD list */ 2962 list_del(&mad_list->list); 2963 2964 ib_dma_unmap_single(qp_info->port_priv->device, 2965 recv->header.mapping, 2966 mad_priv_dma_size(recv), 2967 DMA_FROM_DEVICE); 2968 kfree(recv); 2969 } 2970 2971 qp_info->recv_queue.count = 0; 2972 } 2973 2974 /* 2975 * Start the port 2976 */ 2977 static int ib_mad_port_start(struct ib_mad_port_private *port_priv) 2978 { 2979 int ret, i; 2980 struct ib_qp_attr *attr; 2981 struct ib_qp *qp; 2982 u16 pkey_index; 2983 2984 attr = kmalloc(sizeof *attr, GFP_KERNEL); 2985 if (!attr) { 2986 dev_err(&port_priv->device->dev, 2987 "Couldn't kmalloc ib_qp_attr\n"); 2988 return -ENOMEM; 2989 } 2990 2991 ret = ib_find_pkey(port_priv->device, port_priv->port_num, 2992 IB_DEFAULT_PKEY_FULL, &pkey_index); 2993 if (ret) 2994 pkey_index = 0; 2995 2996 for (i = 0; i < IB_MAD_QPS_CORE; i++) { 2997 qp = port_priv->qp_info[i].qp; 2998 if (!qp) 2999 continue; 3000 3001 /* 3002 * PKey index for QP1 is irrelevant but 3003 * one is needed for the Reset to Init transition 3004 */ 3005 attr->qp_state = IB_QPS_INIT; 3006 attr->pkey_index = pkey_index; 3007 attr->qkey = (qp->qp_num == 0) ? 0 : IB_QP1_QKEY; 3008 ret = ib_modify_qp(qp, attr, IB_QP_STATE | 3009 IB_QP_PKEY_INDEX | IB_QP_QKEY); 3010 if (ret) { 3011 dev_err(&port_priv->device->dev, 3012 "Couldn't change QP%d state to INIT: %d\n", 3013 i, ret); 3014 goto out; 3015 } 3016 3017 attr->qp_state = IB_QPS_RTR; 3018 ret = ib_modify_qp(qp, attr, IB_QP_STATE); 3019 if (ret) { 3020 dev_err(&port_priv->device->dev, 3021 "Couldn't change QP%d state to RTR: %d\n", 3022 i, ret); 3023 goto out; 3024 } 3025 3026 attr->qp_state = IB_QPS_RTS; 3027 attr->sq_psn = IB_MAD_SEND_Q_PSN; 3028 ret = ib_modify_qp(qp, attr, IB_QP_STATE | IB_QP_SQ_PSN); 3029 if (ret) { 3030 dev_err(&port_priv->device->dev, 3031 "Couldn't change QP%d state to RTS: %d\n", 3032 i, ret); 3033 goto out; 3034 } 3035 } 3036 3037 ret = ib_req_notify_cq(port_priv->cq, IB_CQ_NEXT_COMP); 3038 if (ret) { 3039 dev_err(&port_priv->device->dev, 3040 "Failed to request completion notification: %d\n", 3041 ret); 3042 goto out; 3043 } 3044 3045 for (i = 0; i < IB_MAD_QPS_CORE; i++) { 3046 if (!port_priv->qp_info[i].qp) 3047 continue; 3048 3049 ret = ib_mad_post_receive_mads(&port_priv->qp_info[i], NULL); 3050 if (ret) { 3051 dev_err(&port_priv->device->dev, 3052 "Couldn't post receive WRs\n"); 3053 goto out; 3054 } 3055 } 3056 out: 3057 kfree(attr); 3058 return ret; 3059 } 3060 3061 static void qp_event_handler(struct ib_event *event, void *qp_context) 3062 { 3063 struct ib_mad_qp_info *qp_info = qp_context; 3064 3065 /* It's worse than that! He's dead, Jim! */ 3066 dev_err(&qp_info->port_priv->device->dev, 3067 "Fatal error (%d) on MAD QP (%d)\n", 3068 event->event, qp_info->qp->qp_num); 3069 } 3070 3071 static void init_mad_queue(struct ib_mad_qp_info *qp_info, 3072 struct ib_mad_queue *mad_queue) 3073 { 3074 mad_queue->qp_info = qp_info; 3075 mad_queue->count = 0; 3076 spin_lock_init(&mad_queue->lock); 3077 INIT_LIST_HEAD(&mad_queue->list); 3078 } 3079 3080 static void init_mad_qp(struct ib_mad_port_private *port_priv, 3081 struct ib_mad_qp_info *qp_info) 3082 { 3083 qp_info->port_priv = port_priv; 3084 init_mad_queue(qp_info, &qp_info->send_queue); 3085 init_mad_queue(qp_info, &qp_info->recv_queue); 3086 INIT_LIST_HEAD(&qp_info->overflow_list); 3087 spin_lock_init(&qp_info->snoop_lock); 3088 qp_info->snoop_table = NULL; 3089 qp_info->snoop_table_size = 0; 3090 atomic_set(&qp_info->snoop_count, 0); 3091 } 3092 3093 static int create_mad_qp(struct ib_mad_qp_info *qp_info, 3094 enum ib_qp_type qp_type) 3095 { 3096 struct ib_qp_init_attr qp_init_attr; 3097 int ret; 3098 3099 memset(&qp_init_attr, 0, sizeof qp_init_attr); 3100 qp_init_attr.send_cq = qp_info->port_priv->cq; 3101 qp_init_attr.recv_cq = qp_info->port_priv->cq; 3102 qp_init_attr.sq_sig_type = IB_SIGNAL_ALL_WR; 3103 qp_init_attr.cap.max_send_wr = mad_sendq_size; 3104 qp_init_attr.cap.max_recv_wr = mad_recvq_size; 3105 qp_init_attr.cap.max_send_sge = IB_MAD_SEND_REQ_MAX_SG; 3106 qp_init_attr.cap.max_recv_sge = IB_MAD_RECV_REQ_MAX_SG; 3107 qp_init_attr.qp_type = qp_type; 3108 qp_init_attr.port_num = qp_info->port_priv->port_num; 3109 qp_init_attr.qp_context = qp_info; 3110 qp_init_attr.event_handler = qp_event_handler; 3111 qp_info->qp = ib_create_qp(qp_info->port_priv->pd, &qp_init_attr); 3112 if (IS_ERR(qp_info->qp)) { 3113 dev_err(&qp_info->port_priv->device->dev, 3114 "Couldn't create ib_mad QP%d\n", 3115 get_spl_qp_index(qp_type)); 3116 ret = PTR_ERR(qp_info->qp); 3117 goto error; 3118 } 3119 /* Use minimum queue sizes unless the CQ is resized */ 3120 qp_info->send_queue.max_active = mad_sendq_size; 3121 qp_info->recv_queue.max_active = mad_recvq_size; 3122 return 0; 3123 3124 error: 3125 return ret; 3126 } 3127 3128 static void destroy_mad_qp(struct ib_mad_qp_info *qp_info) 3129 { 3130 if (!qp_info->qp) 3131 return; 3132 3133 ib_destroy_qp(qp_info->qp); 3134 kfree(qp_info->snoop_table); 3135 } 3136 3137 /* 3138 * Open the port 3139 * Create the QP, PD, MR, and CQ if needed 3140 */ 3141 static int ib_mad_port_open(struct ib_device *device, 3142 int port_num) 3143 { 3144 int ret, cq_size; 3145 struct ib_mad_port_private *port_priv; 3146 unsigned long flags; 3147 char name[sizeof "ib_mad123"]; 3148 int has_smi; 3149 struct ib_cq_init_attr cq_attr = {}; 3150 3151 if (WARN_ON(rdma_max_mad_size(device, port_num) < IB_MGMT_MAD_SIZE)) 3152 return -EFAULT; 3153 3154 if (WARN_ON(rdma_cap_opa_mad(device, port_num) && 3155 rdma_max_mad_size(device, port_num) < OPA_MGMT_MAD_SIZE)) 3156 return -EFAULT; 3157 3158 /* Create new device info */ 3159 port_priv = kzalloc(sizeof *port_priv, GFP_KERNEL); 3160 if (!port_priv) { 3161 dev_err(&device->dev, "No memory for ib_mad_port_private\n"); 3162 return -ENOMEM; 3163 } 3164 3165 port_priv->device = device; 3166 port_priv->port_num = port_num; 3167 spin_lock_init(&port_priv->reg_lock); 3168 INIT_LIST_HEAD(&port_priv->agent_list); 3169 init_mad_qp(port_priv, &port_priv->qp_info[0]); 3170 init_mad_qp(port_priv, &port_priv->qp_info[1]); 3171 3172 cq_size = mad_sendq_size + mad_recvq_size; 3173 has_smi = rdma_cap_ib_smi(device, port_num); 3174 if (has_smi) 3175 cq_size *= 2; 3176 3177 cq_attr.cqe = cq_size; 3178 port_priv->cq = ib_create_cq(port_priv->device, 3179 ib_mad_thread_completion_handler, 3180 NULL, port_priv, &cq_attr); 3181 if (IS_ERR(port_priv->cq)) { 3182 dev_err(&device->dev, "Couldn't create ib_mad CQ\n"); 3183 ret = PTR_ERR(port_priv->cq); 3184 goto error3; 3185 } 3186 3187 port_priv->pd = ib_alloc_pd(device); 3188 if (IS_ERR(port_priv->pd)) { 3189 dev_err(&device->dev, "Couldn't create ib_mad PD\n"); 3190 ret = PTR_ERR(port_priv->pd); 3191 goto error4; 3192 } 3193 3194 if (has_smi) { 3195 ret = create_mad_qp(&port_priv->qp_info[0], IB_QPT_SMI); 3196 if (ret) 3197 goto error6; 3198 } 3199 ret = create_mad_qp(&port_priv->qp_info[1], IB_QPT_GSI); 3200 if (ret) 3201 goto error7; 3202 3203 snprintf(name, sizeof name, "ib_mad%d", port_num); 3204 port_priv->wq = create_singlethread_workqueue(name); 3205 if (!port_priv->wq) { 3206 ret = -ENOMEM; 3207 goto error8; 3208 } 3209 INIT_WORK(&port_priv->work, ib_mad_completion_handler); 3210 3211 spin_lock_irqsave(&ib_mad_port_list_lock, flags); 3212 list_add_tail(&port_priv->port_list, &ib_mad_port_list); 3213 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 3214 3215 ret = ib_mad_port_start(port_priv); 3216 if (ret) { 3217 dev_err(&device->dev, "Couldn't start port\n"); 3218 goto error9; 3219 } 3220 3221 return 0; 3222 3223 error9: 3224 spin_lock_irqsave(&ib_mad_port_list_lock, flags); 3225 list_del_init(&port_priv->port_list); 3226 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 3227 3228 destroy_workqueue(port_priv->wq); 3229 error8: 3230 destroy_mad_qp(&port_priv->qp_info[1]); 3231 error7: 3232 destroy_mad_qp(&port_priv->qp_info[0]); 3233 error6: 3234 ib_dealloc_pd(port_priv->pd); 3235 error4: 3236 ib_destroy_cq(port_priv->cq); 3237 cleanup_recv_queue(&port_priv->qp_info[1]); 3238 cleanup_recv_queue(&port_priv->qp_info[0]); 3239 error3: 3240 kfree(port_priv); 3241 3242 return ret; 3243 } 3244 3245 /* 3246 * Close the port 3247 * If there are no classes using the port, free the port 3248 * resources (CQ, MR, PD, QP) and remove the port's info structure 3249 */ 3250 static int ib_mad_port_close(struct ib_device *device, int port_num) 3251 { 3252 struct ib_mad_port_private *port_priv; 3253 unsigned long flags; 3254 3255 spin_lock_irqsave(&ib_mad_port_list_lock, flags); 3256 port_priv = __ib_get_mad_port(device, port_num); 3257 if (port_priv == NULL) { 3258 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 3259 dev_err(&device->dev, "Port %d not found\n", port_num); 3260 return -ENODEV; 3261 } 3262 list_del_init(&port_priv->port_list); 3263 spin_unlock_irqrestore(&ib_mad_port_list_lock, flags); 3264 3265 destroy_workqueue(port_priv->wq); 3266 destroy_mad_qp(&port_priv->qp_info[1]); 3267 destroy_mad_qp(&port_priv->qp_info[0]); 3268 ib_dealloc_pd(port_priv->pd); 3269 ib_destroy_cq(port_priv->cq); 3270 cleanup_recv_queue(&port_priv->qp_info[1]); 3271 cleanup_recv_queue(&port_priv->qp_info[0]); 3272 /* XXX: Handle deallocation of MAD registration tables */ 3273 3274 kfree(port_priv); 3275 3276 return 0; 3277 } 3278 3279 static void ib_mad_init_device(struct ib_device *device) 3280 { 3281 int start, i; 3282 3283 start = rdma_start_port(device); 3284 3285 for (i = start; i <= rdma_end_port(device); i++) { 3286 if (!rdma_cap_ib_mad(device, i)) 3287 continue; 3288 3289 if (ib_mad_port_open(device, i)) { 3290 dev_err(&device->dev, "Couldn't open port %d\n", i); 3291 goto error; 3292 } 3293 if (ib_agent_port_open(device, i)) { 3294 dev_err(&device->dev, 3295 "Couldn't open port %d for agents\n", i); 3296 goto error_agent; 3297 } 3298 } 3299 return; 3300 3301 error_agent: 3302 if (ib_mad_port_close(device, i)) 3303 dev_err(&device->dev, "Couldn't close port %d\n", i); 3304 3305 error: 3306 while (--i >= start) { 3307 if (!rdma_cap_ib_mad(device, i)) 3308 continue; 3309 3310 if (ib_agent_port_close(device, i)) 3311 dev_err(&device->dev, 3312 "Couldn't close port %d for agents\n", i); 3313 if (ib_mad_port_close(device, i)) 3314 dev_err(&device->dev, "Couldn't close port %d\n", i); 3315 } 3316 } 3317 3318 static void ib_mad_remove_device(struct ib_device *device, void *client_data) 3319 { 3320 int i; 3321 3322 for (i = rdma_start_port(device); i <= rdma_end_port(device); i++) { 3323 if (!rdma_cap_ib_mad(device, i)) 3324 continue; 3325 3326 if (ib_agent_port_close(device, i)) 3327 dev_err(&device->dev, 3328 "Couldn't close port %d for agents\n", i); 3329 if (ib_mad_port_close(device, i)) 3330 dev_err(&device->dev, "Couldn't close port %d\n", i); 3331 } 3332 } 3333 3334 static struct ib_client mad_client = { 3335 .name = "mad", 3336 .add = ib_mad_init_device, 3337 .remove = ib_mad_remove_device 3338 }; 3339 3340 static int __init ib_mad_init_module(void) 3341 { 3342 mad_recvq_size = min(mad_recvq_size, IB_MAD_QP_MAX_SIZE); 3343 mad_recvq_size = max(mad_recvq_size, IB_MAD_QP_MIN_SIZE); 3344 3345 mad_sendq_size = min(mad_sendq_size, IB_MAD_QP_MAX_SIZE); 3346 mad_sendq_size = max(mad_sendq_size, IB_MAD_QP_MIN_SIZE); 3347 3348 INIT_LIST_HEAD(&ib_mad_port_list); 3349 3350 if (ib_register_client(&mad_client)) { 3351 pr_err("Couldn't register ib_mad client\n"); 3352 return -EINVAL; 3353 } 3354 3355 return 0; 3356 } 3357 3358 static void __exit ib_mad_cleanup_module(void) 3359 { 3360 ib_unregister_client(&mad_client); 3361 } 3362 3363 module_init(ib_mad_init_module); 3364 module_exit(ib_mad_cleanup_module); 3365