xref: /linux/drivers/message/fusion/mptctl.c (revision 60b2737de1b1ddfdb90f3ba622634eb49d6f3603)
1 /*
2  *  linux/drivers/message/fusion/mptctl.c
3  *      mpt Ioctl driver.
4  *      For use with LSI Logic PCI chip/adapters
5  *      running LSI Logic Fusion MPT (Message Passing Technology) firmware.
6  *
7  *  Copyright (c) 1999-2005 LSI Logic Corporation
8  *  (mailto:mpt_linux_developer@lsil.com)
9  *
10  */
11 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
12 /*
13     This program is free software; you can redistribute it and/or modify
14     it under the terms of the GNU General Public License as published by
15     the Free Software Foundation; version 2 of the License.
16 
17     This program is distributed in the hope that it will be useful,
18     but WITHOUT ANY WARRANTY; without even the implied warranty of
19     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
20     GNU General Public License for more details.
21 
22     NO WARRANTY
23     THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR
24     CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT
25     LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT,
26     MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is
27     solely responsible for determining the appropriateness of using and
28     distributing the Program and assumes all risks associated with its
29     exercise of rights under this Agreement, including but not limited to
30     the risks and costs of program errors, damage to or loss of data,
31     programs or equipment, and unavailability or interruption of operations.
32 
33     DISCLAIMER OF LIABILITY
34     NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY
35     DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
36     DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND
37     ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
38     TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
39     USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED
40     HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES
41 
42     You should have received a copy of the GNU General Public License
43     along with this program; if not, write to the Free Software
44     Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
45 */
46 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
47 
48 #include <linux/version.h>
49 #include <linux/kernel.h>
50 #include <linux/module.h>
51 #include <linux/errno.h>
52 #include <linux/init.h>
53 #include <linux/slab.h>
54 #include <linux/types.h>
55 #include <linux/pci.h>
56 #include <linux/delay.h>	/* for mdelay */
57 #include <linux/miscdevice.h>
58 #include <linux/smp_lock.h>
59 #include <linux/compat.h>
60 
61 #include <asm/io.h>
62 #include <asm/uaccess.h>
63 
64 #include <scsi/scsi.h>
65 #include <scsi/scsi_cmnd.h>
66 #include <scsi/scsi_device.h>
67 #include <scsi/scsi_host.h>
68 #include <scsi/scsi_tcq.h>
69 
70 #define COPYRIGHT	"Copyright (c) 1999-2005 LSI Logic Corporation"
71 #define MODULEAUTHOR	"LSI Logic Corporation"
72 #include "mptbase.h"
73 #include "mptctl.h"
74 
75 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
76 #define my_NAME		"Fusion MPT misc device (ioctl) driver"
77 #define my_VERSION	MPT_LINUX_VERSION_COMMON
78 #define MYNAM		"mptctl"
79 
80 MODULE_AUTHOR(MODULEAUTHOR);
81 MODULE_DESCRIPTION(my_NAME);
82 MODULE_LICENSE("GPL");
83 
84 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
85 
86 static int mptctl_id = -1;
87 
88 static DECLARE_WAIT_QUEUE_HEAD ( mptctl_wait );
89 
90 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
91 
92 struct buflist {
93 	u8	*kptr;
94 	int	 len;
95 };
96 
97 /*
98  * Function prototypes. Called from OS entry point mptctl_ioctl.
99  * arg contents specific to function.
100  */
101 static int mptctl_fw_download(unsigned long arg);
102 static int mptctl_getiocinfo(unsigned long arg, unsigned int cmd);
103 static int mptctl_gettargetinfo(unsigned long arg);
104 static int mptctl_readtest(unsigned long arg);
105 static int mptctl_mpt_command(unsigned long arg);
106 static int mptctl_eventquery(unsigned long arg);
107 static int mptctl_eventenable(unsigned long arg);
108 static int mptctl_eventreport(unsigned long arg);
109 static int mptctl_replace_fw(unsigned long arg);
110 
111 static int mptctl_do_reset(unsigned long arg);
112 static int mptctl_hp_hostinfo(unsigned long arg, unsigned int cmd);
113 static int mptctl_hp_targetinfo(unsigned long arg);
114 
115 static int  mptctl_probe(struct pci_dev *, const struct pci_device_id *);
116 static void mptctl_remove(struct pci_dev *);
117 
118 #ifdef CONFIG_COMPAT
119 static long compat_mpctl_ioctl(struct file *f, unsigned cmd, unsigned long arg);
120 #endif
121 /*
122  * Private function calls.
123  */
124 static int mptctl_do_mpt_command(struct mpt_ioctl_command karg, void __user *mfPtr);
125 static int mptctl_do_fw_download(int ioc, char __user *ufwbuf, size_t fwlen);
126 static MptSge_t *kbuf_alloc_2_sgl(int bytes, u32 dir, int sge_offset, int *frags,
127 		struct buflist **blp, dma_addr_t *sglbuf_dma, MPT_ADAPTER *ioc);
128 static void kfree_sgl(MptSge_t *sgl, dma_addr_t sgl_dma,
129 		struct buflist *buflist, MPT_ADAPTER *ioc);
130 static void mptctl_timeout_expired (MPT_IOCTL *ioctl);
131 static int  mptctl_bus_reset(MPT_IOCTL *ioctl);
132 static int mptctl_set_tm_flags(MPT_SCSI_HOST *hd);
133 static void mptctl_free_tm_flags(MPT_ADAPTER *ioc);
134 
135 /*
136  * Reset Handler cleanup function
137  */
138 static int  mptctl_ioc_reset(MPT_ADAPTER *ioc, int reset_phase);
139 
140 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
141 /*
142  * Scatter gather list (SGL) sizes and limits...
143  */
144 //#define MAX_SCSI_FRAGS	9
145 #define MAX_FRAGS_SPILL1	9
146 #define MAX_FRAGS_SPILL2	15
147 #define FRAGS_PER_BUCKET	(MAX_FRAGS_SPILL2 + 1)
148 
149 //#define MAX_CHAIN_FRAGS	64
150 //#define MAX_CHAIN_FRAGS	(15+15+15+16)
151 #define MAX_CHAIN_FRAGS		(4 * MAX_FRAGS_SPILL2 + 1)
152 
153 //  Define max sg LIST bytes ( == (#frags + #chains) * 8 bytes each)
154 //  Works out to: 592d bytes!     (9+1)*8 + 4*(15+1)*8
155 //                  ^----------------- 80 + 512
156 #define MAX_SGL_BYTES		((MAX_FRAGS_SPILL1 + 1 + (4 * FRAGS_PER_BUCKET)) * 8)
157 
158 /* linux only seems to ever give 128kB MAX contiguous (GFP_USER) mem bytes */
159 #define MAX_KMALLOC_SZ		(128*1024)
160 
161 #define MPT_IOCTL_DEFAULT_TIMEOUT 10	/* Default timeout value (seconds) */
162 
163 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
164 /**
165  *	mptctl_syscall_down - Down the MPT adapter syscall semaphore.
166  *	@ioc: Pointer to MPT adapter
167  *	@nonblock: boolean, non-zero if O_NONBLOCK is set
168  *
169  *	All of the ioctl commands can potentially sleep, which is illegal
170  *	with a spinlock held, thus we perform mutual exclusion here.
171  *
172  *	Returns negative errno on error, or zero for success.
173  */
174 static inline int
175 mptctl_syscall_down(MPT_ADAPTER *ioc, int nonblock)
176 {
177 	int rc = 0;
178 	dctlprintk((KERN_INFO MYNAM "::mptctl_syscall_down(%p,%d) called\n", ioc, nonblock));
179 
180 	if (nonblock) {
181 		if (down_trylock(&ioc->ioctl->sem_ioc))
182 			rc = -EAGAIN;
183 	} else {
184 		if (down_interruptible(&ioc->ioctl->sem_ioc))
185 			rc = -ERESTARTSYS;
186 	}
187 	dctlprintk((KERN_INFO MYNAM "::mptctl_syscall_down return %d\n", rc));
188 	return rc;
189 }
190 
191 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
192 /*
193  *  This is the callback for any message we have posted. The message itself
194  *  will be returned to the message pool when we return from the IRQ
195  *
196  *  This runs in irq context so be short and sweet.
197  */
198 static int
199 mptctl_reply(MPT_ADAPTER *ioc, MPT_FRAME_HDR *req, MPT_FRAME_HDR *reply)
200 {
201 	char *sense_data;
202 	int sz, req_index;
203 	u16 iocStatus;
204 	u8 cmd;
205 
206 	dctlprintk(("mptctl_reply()!\n"));
207 	if (req)
208 		 cmd = req->u.hdr.Function;
209 	else
210 		return 1;
211 
212 	if (ioc->ioctl) {
213 
214 		if (reply==NULL) {
215 
216 			dctlprintk(("mptctl_reply() NULL Reply "
217 				"Function=%x!\n", cmd));
218 
219 			ioc->ioctl->status |= MPT_IOCTL_STATUS_COMMAND_GOOD;
220 			ioc->ioctl->reset &= ~MPTCTL_RESET_OK;
221 
222 			/* We are done, issue wake up
223 	 		*/
224 			ioc->ioctl->wait_done = 1;
225 			wake_up (&mptctl_wait);
226 			return 1;
227 
228 		}
229 
230 		dctlprintk(("mptctl_reply() with req=%p "
231 			"reply=%p Function=%x!\n", req, reply, cmd));
232 
233 		/* Copy the reply frame (which much exist
234 		 * for non-SCSI I/O) to the IOC structure.
235 		 */
236 		dctlprintk(("Copying Reply Frame @%p to ioc%d!\n",
237 			reply, ioc->id));
238 		memcpy(ioc->ioctl->ReplyFrame, reply,
239 			min(ioc->reply_sz, 4*reply->u.reply.MsgLength));
240 		ioc->ioctl->status |= MPT_IOCTL_STATUS_RF_VALID;
241 
242 		/* Set the command status to GOOD if IOC Status is GOOD
243 		 * OR if SCSI I/O cmd and data underrun or recovered error.
244 		 */
245 		iocStatus = reply->u.reply.IOCStatus & MPI_IOCSTATUS_MASK;
246 		if (iocStatus  == MPI_IOCSTATUS_SUCCESS)
247 			ioc->ioctl->status |= MPT_IOCTL_STATUS_COMMAND_GOOD;
248 
249 		if ((cmd == MPI_FUNCTION_SCSI_IO_REQUEST) ||
250 			(cmd == MPI_FUNCTION_RAID_SCSI_IO_PASSTHROUGH)) {
251 			ioc->ioctl->reset &= ~MPTCTL_RESET_OK;
252 
253 			if ((iocStatus == MPI_IOCSTATUS_SCSI_DATA_UNDERRUN) ||
254 			(iocStatus == MPI_IOCSTATUS_SCSI_RECOVERED_ERROR)) {
255 			ioc->ioctl->status |= MPT_IOCTL_STATUS_COMMAND_GOOD;
256 			}
257 		}
258 
259 		/* Copy the sense data - if present
260 		 */
261 		if ((cmd == MPI_FUNCTION_SCSI_IO_REQUEST) &&
262 			(reply->u.sreply.SCSIState &
263 			 MPI_SCSI_STATE_AUTOSENSE_VALID)){
264 			sz = req->u.scsireq.SenseBufferLength;
265 			req_index =
266 			    le16_to_cpu(req->u.frame.hwhdr.msgctxu.fld.req_idx);
267 			sense_data =
268 			    ((u8 *)ioc->sense_buf_pool +
269 			     (req_index * MPT_SENSE_BUFFER_ALLOC));
270 			memcpy(ioc->ioctl->sense, sense_data, sz);
271 			ioc->ioctl->status |= MPT_IOCTL_STATUS_SENSE_VALID;
272 		}
273 
274 		if (cmd == MPI_FUNCTION_SCSI_TASK_MGMT)
275 			mptctl_free_tm_flags(ioc);
276 
277 		/* We are done, issue wake up
278 		 */
279 		ioc->ioctl->wait_done = 1;
280 		wake_up (&mptctl_wait);
281 	}
282 	return 1;
283 }
284 
285 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
286 /* mptctl_timeout_expired
287  *
288  * Expecting an interrupt, however timed out.
289  *
290  */
291 static void mptctl_timeout_expired (MPT_IOCTL *ioctl)
292 {
293 	int rc = 1;
294 
295 	dctlprintk((KERN_NOTICE MYNAM ": Timeout Expired! Host %d\n",
296 				ioctl->ioc->id));
297 	if (ioctl == NULL)
298 		return;
299 
300 	ioctl->wait_done = 0;
301 	if (ioctl->reset & MPTCTL_RESET_OK)
302 		rc = mptctl_bus_reset(ioctl);
303 
304 	if (rc) {
305 		/* Issue a reset for this device.
306 		 * The IOC is not responding.
307 		 */
308 		dctlprintk((MYIOC_s_INFO_FMT "Calling HardReset! \n",
309 			 ioctl->ioc->name));
310 		mpt_HardResetHandler(ioctl->ioc, NO_SLEEP);
311 	}
312 	return;
313 
314 }
315 
316 /* mptctl_bus_reset
317  *
318  * Bus reset code.
319  *
320  */
321 static int mptctl_bus_reset(MPT_IOCTL *ioctl)
322 {
323 	MPT_FRAME_HDR	*mf;
324 	SCSITaskMgmt_t	*pScsiTm;
325 	MPT_SCSI_HOST	*hd;
326 	int		 ii;
327 	int		 retval;
328 
329 
330 	ioctl->reset &= ~MPTCTL_RESET_OK;
331 
332 	if (ioctl->ioc->sh == NULL)
333 		return -EPERM;
334 
335 	hd = (MPT_SCSI_HOST *) ioctl->ioc->sh->hostdata;
336 	if (hd == NULL)
337 		return -EPERM;
338 
339 	/* Single threading ....
340 	 */
341 	if (mptctl_set_tm_flags(hd) != 0)
342 		return -EPERM;
343 
344 	/* Send request
345 	 */
346 	if ((mf = mpt_get_msg_frame(mptctl_id, ioctl->ioc)) == NULL) {
347 		dctlprintk((MYIOC_s_WARN_FMT "IssueTaskMgmt, no msg frames!!\n",
348 				ioctl->ioc->name));
349 
350 		mptctl_free_tm_flags(ioctl->ioc);
351 		return -ENOMEM;
352 	}
353 
354 	dtmprintk((MYIOC_s_INFO_FMT "IssueTaskMgmt request @ %p\n",
355 			ioctl->ioc->name, mf));
356 
357 	pScsiTm = (SCSITaskMgmt_t *) mf;
358 	pScsiTm->TargetID = ioctl->target;
359 	pScsiTm->Bus = hd->port;	/* 0 */
360 	pScsiTm->ChainOffset = 0;
361 	pScsiTm->Function = MPI_FUNCTION_SCSI_TASK_MGMT;
362 	pScsiTm->Reserved = 0;
363 	pScsiTm->TaskType = MPI_SCSITASKMGMT_TASKTYPE_RESET_BUS;
364 	pScsiTm->Reserved1 = 0;
365 	pScsiTm->MsgFlags = MPI_SCSITASKMGMT_MSGFLAGS_LIPRESET_RESET_OPTION;
366 
367 	for (ii= 0; ii < 8; ii++)
368 		pScsiTm->LUN[ii] = 0;
369 
370 	for (ii=0; ii < 7; ii++)
371 		pScsiTm->Reserved2[ii] = 0;
372 
373 	pScsiTm->TaskMsgContext = 0;
374 	dtmprintk((MYIOC_s_INFO_FMT
375 		"mptctl_bus_reset: issued.\n", ioctl->ioc->name));
376 
377 	DBG_DUMP_TM_REQUEST_FRAME((u32 *)mf);
378 
379 	ioctl->wait_done=0;
380 	if ((retval = mpt_send_handshake_request(mptctl_id, ioctl->ioc,
381 	     sizeof(SCSITaskMgmt_t), (u32*)pScsiTm, CAN_SLEEP)) != 0) {
382 		dfailprintk((MYIOC_s_ERR_FMT "_send_handshake FAILED!"
383 			" (hd %p, ioc %p, mf %p) \n", hd->ioc->name, hd,
384 			hd->ioc, mf));
385 		goto mptctl_bus_reset_done;
386 	}
387 
388 	/* Now wait for the command to complete */
389 	ii = wait_event_interruptible_timeout(mptctl_wait,
390 	     ioctl->wait_done == 1,
391 	     HZ*5 /* 5 second timeout */);
392 
393 	if(ii <=0 && (ioctl->wait_done != 1 ))  {
394 		ioctl->wait_done = 0;
395 		retval = -1; /* return failure */
396 	}
397 
398 mptctl_bus_reset_done:
399 
400 	mpt_free_msg_frame(hd->ioc, mf);
401 	mptctl_free_tm_flags(ioctl->ioc);
402 	return retval;
403 }
404 
405 static int
406 mptctl_set_tm_flags(MPT_SCSI_HOST *hd) {
407 	unsigned long flags;
408 
409 	spin_lock_irqsave(&hd->ioc->FreeQlock, flags);
410 
411 	if (hd->tmState == TM_STATE_NONE) {
412 		hd->tmState = TM_STATE_IN_PROGRESS;
413 		hd->tmPending = 1;
414 		spin_unlock_irqrestore(&hd->ioc->FreeQlock, flags);
415 	} else {
416 		spin_unlock_irqrestore(&hd->ioc->FreeQlock, flags);
417 		return -EBUSY;
418 	}
419 
420 	return 0;
421 }
422 
423 static void
424 mptctl_free_tm_flags(MPT_ADAPTER *ioc)
425 {
426 	MPT_SCSI_HOST * hd;
427 	unsigned long flags;
428 
429 	hd = (MPT_SCSI_HOST *) ioc->sh->hostdata;
430 	if (hd == NULL)
431 		return;
432 
433 	spin_lock_irqsave(&ioc->FreeQlock, flags);
434 
435 	hd->tmState = TM_STATE_NONE;
436 	hd->tmPending = 0;
437 	spin_unlock_irqrestore(&ioc->FreeQlock, flags);
438 
439 	return;
440 }
441 
442 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
443 /* mptctl_ioc_reset
444  *
445  * Clean-up functionality. Used only if there has been a
446  * reload of the FW due.
447  *
448  */
449 static int
450 mptctl_ioc_reset(MPT_ADAPTER *ioc, int reset_phase)
451 {
452 	MPT_IOCTL *ioctl = ioc->ioctl;
453 	dctlprintk((KERN_INFO MYNAM ": IOC %s_reset routed to IOCTL driver!\n",
454 		reset_phase==MPT_IOC_SETUP_RESET ? "setup" : (
455 		reset_phase==MPT_IOC_PRE_RESET ? "pre" : "post")));
456 
457 	if(ioctl == NULL)
458 		return 1;
459 
460 	switch(reset_phase) {
461 	case MPT_IOC_SETUP_RESET:
462 		ioctl->status |= MPT_IOCTL_STATUS_DID_IOCRESET;
463 		break;
464 	case MPT_IOC_POST_RESET:
465 		ioctl->status &= ~MPT_IOCTL_STATUS_DID_IOCRESET;
466 		break;
467 	case MPT_IOC_PRE_RESET:
468 	default:
469 		break;
470 	}
471 
472 	return 1;
473 }
474 
475 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
476 /*
477  *  MPT ioctl handler
478  *  cmd - specify the particular IOCTL command to be issued
479  *  arg - data specific to the command. Must not be null.
480  */
481 static long
482 __mptctl_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
483 {
484 	mpt_ioctl_header __user *uhdr = (void __user *) arg;
485 	mpt_ioctl_header	 khdr;
486 	int iocnum;
487 	unsigned iocnumX;
488 	int nonblock = (file->f_flags & O_NONBLOCK);
489 	int ret;
490 	MPT_ADAPTER *iocp = NULL;
491 
492 	dctlprintk(("mptctl_ioctl() called\n"));
493 
494 	if (copy_from_user(&khdr, uhdr, sizeof(khdr))) {
495 		printk(KERN_ERR "%s::mptctl_ioctl() @%d - "
496 				"Unable to copy mpt_ioctl_header data @ %p\n",
497 				__FILE__, __LINE__, uhdr);
498 		return -EFAULT;
499 	}
500 	ret = -ENXIO;				/* (-6) No such device or address */
501 
502 	/* Verify intended MPT adapter - set iocnum and the adapter
503 	 * pointer (iocp)
504 	 */
505 	iocnumX = khdr.iocnum & 0xFF;
506 	if (((iocnum = mpt_verify_adapter(iocnumX, &iocp)) < 0) ||
507 	    (iocp == NULL)) {
508 		dctlprintk((KERN_ERR "%s::mptctl_ioctl() @%d - ioc%d not found!\n",
509 				__FILE__, __LINE__, iocnumX));
510 		return -ENODEV;
511 	}
512 
513 	if (!iocp->active) {
514 		printk(KERN_ERR "%s::mptctl_ioctl() @%d - Controller disabled.\n",
515 				__FILE__, __LINE__);
516 		return -EFAULT;
517 	}
518 
519 	/* Handle those commands that are just returning
520 	 * information stored in the driver.
521 	 * These commands should never time out and are unaffected
522 	 * by TM and FW reloads.
523 	 */
524 	if ((cmd & ~IOCSIZE_MASK) == (MPTIOCINFO & ~IOCSIZE_MASK)) {
525 		return mptctl_getiocinfo(arg, _IOC_SIZE(cmd));
526 	} else if (cmd == MPTTARGETINFO) {
527 		return mptctl_gettargetinfo(arg);
528 	} else if (cmd == MPTTEST) {
529 		return mptctl_readtest(arg);
530 	} else if (cmd == MPTEVENTQUERY) {
531 		return mptctl_eventquery(arg);
532 	} else if (cmd == MPTEVENTENABLE) {
533 		return mptctl_eventenable(arg);
534 	} else if (cmd == MPTEVENTREPORT) {
535 		return mptctl_eventreport(arg);
536 	} else if (cmd == MPTFWREPLACE) {
537 		return mptctl_replace_fw(arg);
538 	}
539 
540 	/* All of these commands require an interrupt or
541 	 * are unknown/illegal.
542 	 */
543 	if ((ret = mptctl_syscall_down(iocp, nonblock)) != 0)
544 		return ret;
545 
546 	dctlprintk((MYIOC_s_INFO_FMT ": mptctl_ioctl()\n", iocp->name));
547 
548 	if (cmd == MPTFWDOWNLOAD)
549 		ret = mptctl_fw_download(arg);
550 	else if (cmd == MPTCOMMAND)
551 		ret = mptctl_mpt_command(arg);
552 	else if (cmd == MPTHARDRESET)
553 		ret = mptctl_do_reset(arg);
554 	else if ((cmd & ~IOCSIZE_MASK) == (HP_GETHOSTINFO & ~IOCSIZE_MASK))
555 		ret = mptctl_hp_hostinfo(arg, _IOC_SIZE(cmd));
556 	else if (cmd == HP_GETTARGETINFO)
557 		ret = mptctl_hp_targetinfo(arg);
558 	else
559 		ret = -EINVAL;
560 
561 	up(&iocp->ioctl->sem_ioc);
562 
563 	return ret;
564 }
565 
566 static long
567 mptctl_ioctl(struct file *file, unsigned int cmd, unsigned long arg)
568 {
569 	long ret;
570 	lock_kernel();
571 	ret = __mptctl_ioctl(file, cmd, arg);
572 	unlock_kernel();
573 	return ret;
574 }
575 
576 static int mptctl_do_reset(unsigned long arg)
577 {
578 	struct mpt_ioctl_diag_reset __user *urinfo = (void __user *) arg;
579 	struct mpt_ioctl_diag_reset krinfo;
580 	MPT_ADAPTER		*iocp;
581 
582 	dctlprintk((KERN_INFO "mptctl_do_reset called.\n"));
583 
584 	if (copy_from_user(&krinfo, urinfo, sizeof(struct mpt_ioctl_diag_reset))) {
585 		printk(KERN_ERR "%s@%d::mptctl_do_reset - "
586 				"Unable to copy mpt_ioctl_diag_reset struct @ %p\n",
587 				__FILE__, __LINE__, urinfo);
588 		return -EFAULT;
589 	}
590 
591 	if (mpt_verify_adapter(krinfo.hdr.iocnum, &iocp) < 0) {
592 		dctlprintk((KERN_ERR "%s@%d::mptctl_do_reset - ioc%d not found!\n",
593 				__FILE__, __LINE__, krinfo.hdr.iocnum));
594 		return -ENODEV; /* (-6) No such device or address */
595 	}
596 
597 	if (mpt_HardResetHandler(iocp, CAN_SLEEP) != 0) {
598 		printk (KERN_ERR "%s@%d::mptctl_do_reset - reset failed.\n",
599 			__FILE__, __LINE__);
600 		return -1;
601 	}
602 
603 	return 0;
604 }
605 
606 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
607 /*
608  * MPT FW download function.  Cast the arg into the mpt_fw_xfer structure.
609  * This structure contains: iocnum, firmware length (bytes),
610  *      pointer to user space memory where the fw image is stored.
611  *
612  * Outputs:	None.
613  * Return:	0 if successful
614  *		-EFAULT if data unavailable
615  *		-ENXIO  if no such device
616  *		-EAGAIN if resource problem
617  *		-ENOMEM if no memory for SGE
618  *		-EMLINK if too many chain buffers required
619  *		-EBADRQC if adapter does not support FW download
620  *		-EBUSY if adapter is busy
621  *		-ENOMSG if FW upload returned bad status
622  */
623 static int
624 mptctl_fw_download(unsigned long arg)
625 {
626 	struct mpt_fw_xfer __user *ufwdl = (void __user *) arg;
627 	struct mpt_fw_xfer	 kfwdl;
628 
629 	dctlprintk((KERN_INFO "mptctl_fwdl called. mptctl_id = %xh\n", mptctl_id)); //tc
630 	if (copy_from_user(&kfwdl, ufwdl, sizeof(struct mpt_fw_xfer))) {
631 		printk(KERN_ERR "%s@%d::_ioctl_fwdl - "
632 				"Unable to copy mpt_fw_xfer struct @ %p\n",
633 				__FILE__, __LINE__, ufwdl);
634 		return -EFAULT;
635 	}
636 
637 	return mptctl_do_fw_download(kfwdl.iocnum, kfwdl.bufp, kfwdl.fwlen);
638 }
639 
640 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
641 /*
642  * FW Download engine.
643  * Outputs:	None.
644  * Return:	0 if successful
645  *		-EFAULT if data unavailable
646  *		-ENXIO  if no such device
647  *		-EAGAIN if resource problem
648  *		-ENOMEM if no memory for SGE
649  *		-EMLINK if too many chain buffers required
650  *		-EBADRQC if adapter does not support FW download
651  *		-EBUSY if adapter is busy
652  *		-ENOMSG if FW upload returned bad status
653  */
654 static int
655 mptctl_do_fw_download(int ioc, char __user *ufwbuf, size_t fwlen)
656 {
657 	FWDownload_t		*dlmsg;
658 	MPT_FRAME_HDR		*mf;
659 	MPT_ADAPTER		*iocp;
660 	FWDownloadTCSGE_t	*ptsge;
661 	MptSge_t		*sgl, *sgIn;
662 	char			*sgOut;
663 	struct buflist		*buflist;
664 	struct buflist		*bl;
665 	dma_addr_t		 sgl_dma;
666 	int			 ret;
667 	int			 numfrags = 0;
668 	int			 maxfrags;
669 	int			 n = 0;
670 	u32			 sgdir;
671 	u32			 nib;
672 	int			 fw_bytes_copied = 0;
673 	int			 i;
674 	int			 sge_offset = 0;
675 	u16			 iocstat;
676 	pFWDownloadReply_t	 ReplyMsg = NULL;
677 
678 	dctlprintk((KERN_INFO "mptctl_do_fwdl called. mptctl_id = %xh.\n", mptctl_id));
679 
680 	dctlprintk((KERN_INFO "DbG: kfwdl.bufp  = %p\n", ufwbuf));
681 	dctlprintk((KERN_INFO "DbG: kfwdl.fwlen = %d\n", (int)fwlen));
682 	dctlprintk((KERN_INFO "DbG: kfwdl.ioc   = %04xh\n", ioc));
683 
684 	if ((ioc = mpt_verify_adapter(ioc, &iocp)) < 0) {
685 		dctlprintk(("%s@%d::_ioctl_fwdl - ioc%d not found!\n",
686 				__FILE__, __LINE__, ioc));
687 		return -ENODEV; /* (-6) No such device or address */
688 	}
689 
690 	/*  Valid device. Get a message frame and construct the FW download message.
691 	 */
692 	if ((mf = mpt_get_msg_frame(mptctl_id, iocp)) == NULL)
693 		return -EAGAIN;
694 	dlmsg = (FWDownload_t*) mf;
695 	ptsge = (FWDownloadTCSGE_t *) &dlmsg->SGL;
696 	sgOut = (char *) (ptsge + 1);
697 
698 	/*
699 	 * Construct f/w download request
700 	 */
701 	dlmsg->ImageType = MPI_FW_DOWNLOAD_ITYPE_FW;
702 	dlmsg->Reserved = 0;
703 	dlmsg->ChainOffset = 0;
704 	dlmsg->Function = MPI_FUNCTION_FW_DOWNLOAD;
705 	dlmsg->Reserved1[0] = dlmsg->Reserved1[1] = dlmsg->Reserved1[2] = 0;
706 	dlmsg->MsgFlags = 0;
707 
708 	/* Set up the Transaction SGE.
709 	 */
710 	ptsge->Reserved = 0;
711 	ptsge->ContextSize = 0;
712 	ptsge->DetailsLength = 12;
713 	ptsge->Flags = MPI_SGE_FLAGS_TRANSACTION_ELEMENT;
714 	ptsge->Reserved_0100_Checksum = 0;
715 	ptsge->ImageOffset = 0;
716 	ptsge->ImageSize = cpu_to_le32(fwlen);
717 
718 	/* Add the SGL
719 	 */
720 
721 	/*
722 	 * Need to kmalloc area(s) for holding firmware image bytes.
723 	 * But we need to do it piece meal, using a proper
724 	 * scatter gather list (with 128kB MAX hunks).
725 	 *
726 	 * A practical limit here might be # of sg hunks that fit into
727 	 * a single IOC request frame; 12 or 8 (see below), so:
728 	 * For FC9xx: 12 x 128kB == 1.5 mB (max)
729 	 * For C1030:  8 x 128kB == 1   mB (max)
730 	 * We could support chaining, but things get ugly(ier:)
731 	 *
732 	 * Set the sge_offset to the start of the sgl (bytes).
733 	 */
734 	sgdir = 0x04000000;		/* IOC will READ from sys mem */
735 	sge_offset = sizeof(MPIHeader_t) + sizeof(FWDownloadTCSGE_t);
736 	if ((sgl = kbuf_alloc_2_sgl(fwlen, sgdir, sge_offset,
737 				    &numfrags, &buflist, &sgl_dma, iocp)) == NULL)
738 		return -ENOMEM;
739 
740 	/*
741 	 * We should only need SGL with 2 simple_32bit entries (up to 256 kB)
742 	 * for FC9xx f/w image, but calculate max number of sge hunks
743 	 * we can fit into a request frame, and limit ourselves to that.
744 	 * (currently no chain support)
745 	 * maxfrags = (Request Size - FWdownload Size ) / Size of 32 bit SGE
746 	 *	Request		maxfrags
747 	 *	128		12
748 	 *	96		8
749 	 *	64		4
750 	 */
751 	maxfrags = (iocp->req_sz - sizeof(MPIHeader_t) - sizeof(FWDownloadTCSGE_t))
752 			/ (sizeof(dma_addr_t) + sizeof(u32));
753 	if (numfrags > maxfrags) {
754 		ret = -EMLINK;
755 		goto fwdl_out;
756 	}
757 
758 	dctlprintk((KERN_INFO "DbG: sgl buffer  = %p, sgfrags = %d\n", sgl, numfrags));
759 
760 	/*
761 	 * Parse SG list, copying sgl itself,
762 	 * plus f/w image hunks from user space as we go...
763 	 */
764 	ret = -EFAULT;
765 	sgIn = sgl;
766 	bl = buflist;
767 	for (i=0; i < numfrags; i++) {
768 
769 		/* Get the SGE type: 0 - TCSGE, 3 - Chain, 1 - Simple SGE
770 		 * Skip everything but Simple. If simple, copy from
771 		 *	user space into kernel space.
772 		 * Note: we should not have anything but Simple as
773 		 *	Chain SGE are illegal.
774 		 */
775 		nib = (sgIn->FlagsLength & 0x30000000) >> 28;
776 		if (nib == 0 || nib == 3) {
777 			;
778 		} else if (sgIn->Address) {
779 			mpt_add_sge(sgOut, sgIn->FlagsLength, sgIn->Address);
780 			n++;
781 			if (copy_from_user(bl->kptr, ufwbuf+fw_bytes_copied, bl->len)) {
782 				printk(KERN_ERR "%s@%d::_ioctl_fwdl - "
783 						"Unable to copy f/w buffer hunk#%d @ %p\n",
784 						__FILE__, __LINE__, n, ufwbuf);
785 				goto fwdl_out;
786 			}
787 			fw_bytes_copied += bl->len;
788 		}
789 		sgIn++;
790 		bl++;
791 		sgOut += (sizeof(dma_addr_t) + sizeof(u32));
792 	}
793 
794 #ifdef MPT_DEBUG
795 	{
796 		u32 *m = (u32 *)mf;
797 		printk(KERN_INFO MYNAM ": F/W download request:\n" KERN_INFO " ");
798 		for (i=0; i < 7+numfrags*2; i++)
799 			printk(" %08x", le32_to_cpu(m[i]));
800 		printk("\n");
801 	}
802 #endif
803 
804 	/*
805 	 * Finally, perform firmware download.
806 	 */
807 	iocp->ioctl->wait_done = 0;
808 	mpt_put_msg_frame(mptctl_id, iocp, mf);
809 
810 	/* Now wait for the command to complete */
811 	ret = wait_event_interruptible_timeout(mptctl_wait,
812 	     iocp->ioctl->wait_done == 1,
813 	     HZ*60);
814 
815 	if(ret <=0 && (iocp->ioctl->wait_done != 1 )) {
816 	/* Now we need to reset the board */
817 		mptctl_timeout_expired(iocp->ioctl);
818 		ret = -ENODATA;
819 		goto fwdl_out;
820 	}
821 
822 	if (sgl)
823 		kfree_sgl(sgl, sgl_dma, buflist, iocp);
824 
825 	ReplyMsg = (pFWDownloadReply_t)iocp->ioctl->ReplyFrame;
826 	iocstat = le16_to_cpu(ReplyMsg->IOCStatus) & MPI_IOCSTATUS_MASK;
827 	if (iocstat == MPI_IOCSTATUS_SUCCESS) {
828 		printk(KERN_INFO MYNAM ": F/W update successfully sent to %s!\n", iocp->name);
829 		return 0;
830 	} else if (iocstat == MPI_IOCSTATUS_INVALID_FUNCTION) {
831 		printk(KERN_WARNING MYNAM ": ?Hmmm...  %s says it doesn't support F/W download!?!\n",
832 				iocp->name);
833 		printk(KERN_WARNING MYNAM ": (time to go bang on somebodies door)\n");
834 		return -EBADRQC;
835 	} else if (iocstat == MPI_IOCSTATUS_BUSY) {
836 		printk(KERN_WARNING MYNAM ": Warning!  %s says: IOC_BUSY!\n", iocp->name);
837 		printk(KERN_WARNING MYNAM ": (try again later?)\n");
838 		return -EBUSY;
839 	} else {
840 		printk(KERN_WARNING MYNAM "::ioctl_fwdl() ERROR!  %s returned [bad] status = %04xh\n",
841 				    iocp->name, iocstat);
842 		printk(KERN_WARNING MYNAM ": (bad VooDoo)\n");
843 		return -ENOMSG;
844 	}
845 	return 0;
846 
847 fwdl_out:
848         kfree_sgl(sgl, sgl_dma, buflist, iocp);
849 	return ret;
850 }
851 
852 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
853 /*
854  * SGE Allocation routine
855  *
856  * Inputs:	bytes - number of bytes to be transferred
857  *		sgdir - data direction
858  *		sge_offset - offset (in bytes) from the start of the request
859  *			frame to the first SGE
860  *		ioc - pointer to the mptadapter
861  * Outputs:	frags - number of scatter gather elements
862  *		blp - point to the buflist pointer
863  *		sglbuf_dma - pointer to the (dma) sgl
864  * Returns:	Null if failes
865  *		pointer to the (virtual) sgl if successful.
866  */
867 static MptSge_t *
868 kbuf_alloc_2_sgl(int bytes, u32 sgdir, int sge_offset, int *frags,
869 		 struct buflist **blp, dma_addr_t *sglbuf_dma, MPT_ADAPTER *ioc)
870 {
871 	MptSge_t	*sglbuf = NULL;		/* pointer to array of SGE */
872 						/* and chain buffers */
873 	struct buflist	*buflist = NULL;	/* kernel routine */
874 	MptSge_t	*sgl;
875 	int		 numfrags = 0;
876 	int		 fragcnt = 0;
877 	int		 alloc_sz = min(bytes,MAX_KMALLOC_SZ);	// avoid kernel warning msg!
878 	int		 bytes_allocd = 0;
879 	int		 this_alloc;
880 	dma_addr_t	 pa;					// phys addr
881 	int		 i, buflist_ent;
882 	int		 sg_spill = MAX_FRAGS_SPILL1;
883 	int		 dir;
884 	/* initialization */
885 	*frags = 0;
886 	*blp = NULL;
887 
888 	/* Allocate and initialize an array of kernel
889 	 * structures for the SG elements.
890 	 */
891 	i = MAX_SGL_BYTES / 8;
892 	buflist = kmalloc(i, GFP_USER);
893 	if (buflist == NULL)
894 		return NULL;
895 	memset(buflist, 0, i);
896 	buflist_ent = 0;
897 
898 	/* Allocate a single block of memory to store the sg elements and
899 	 * the chain buffers.  The calling routine is responsible for
900 	 * copying the data in this array into the correct place in the
901 	 * request and chain buffers.
902 	 */
903 	sglbuf = pci_alloc_consistent(ioc->pcidev, MAX_SGL_BYTES, sglbuf_dma);
904 	if (sglbuf == NULL)
905 		goto free_and_fail;
906 
907 	if (sgdir & 0x04000000)
908 		dir = PCI_DMA_TODEVICE;
909 	else
910 		dir = PCI_DMA_FROMDEVICE;
911 
912 	/* At start:
913 	 *	sgl = sglbuf = point to beginning of sg buffer
914 	 *	buflist_ent = 0 = first kernel structure
915 	 *	sg_spill = number of SGE that can be written before the first
916 	 *		chain element.
917 	 *
918 	 */
919 	sgl = sglbuf;
920 	sg_spill = ((ioc->req_sz - sge_offset)/(sizeof(dma_addr_t) + sizeof(u32))) - 1;
921 	while (bytes_allocd < bytes) {
922 		this_alloc = min(alloc_sz, bytes-bytes_allocd);
923 		buflist[buflist_ent].len = this_alloc;
924 		buflist[buflist_ent].kptr = pci_alloc_consistent(ioc->pcidev,
925 								 this_alloc,
926 								 &pa);
927 		if (buflist[buflist_ent].kptr == NULL) {
928 			alloc_sz = alloc_sz / 2;
929 			if (alloc_sz == 0) {
930 				printk(KERN_WARNING MYNAM "-SG: No can do - "
931 						    "not enough memory!   :-(\n");
932 				printk(KERN_WARNING MYNAM "-SG: (freeing %d frags)\n",
933 						    numfrags);
934 				goto free_and_fail;
935 			}
936 			continue;
937 		} else {
938 			dma_addr_t dma_addr;
939 
940 			bytes_allocd += this_alloc;
941 			sgl->FlagsLength = (0x10000000|MPT_SGE_FLAGS_ADDRESSING|sgdir|this_alloc);
942 			dma_addr = pci_map_single(ioc->pcidev, buflist[buflist_ent].kptr, this_alloc, dir);
943 			sgl->Address = dma_addr;
944 
945 			fragcnt++;
946 			numfrags++;
947 			sgl++;
948 			buflist_ent++;
949 		}
950 
951 		if (bytes_allocd >= bytes)
952 			break;
953 
954 		/* Need to chain? */
955 		if (fragcnt == sg_spill) {
956 			printk(KERN_WARNING MYNAM "-SG: No can do - " "Chain required!   :-(\n");
957 			printk(KERN_WARNING MYNAM "(freeing %d frags)\n", numfrags);
958 			goto free_and_fail;
959 		}
960 
961 		/* overflow check... */
962 		if (numfrags*8 > MAX_SGL_BYTES){
963 			/* GRRRRR... */
964 			printk(KERN_WARNING MYNAM "-SG: No can do - "
965 					    "too many SG frags!   :-(\n");
966 			printk(KERN_WARNING MYNAM "-SG: (freeing %d frags)\n",
967 					    numfrags);
968 			goto free_and_fail;
969 		}
970 	}
971 
972 	/* Last sge fixup: set LE+eol+eob bits */
973 	sgl[-1].FlagsLength |= 0xC1000000;
974 
975 	*frags = numfrags;
976 	*blp = buflist;
977 
978 	dctlprintk((KERN_INFO MYNAM "-SG: kbuf_alloc_2_sgl() - "
979 			   "%d SG frags generated!\n",
980 			   numfrags));
981 
982 	dctlprintk((KERN_INFO MYNAM "-SG: kbuf_alloc_2_sgl() - "
983 			   "last (big) alloc_sz=%d\n",
984 			   alloc_sz));
985 
986 	return sglbuf;
987 
988 free_and_fail:
989 	if (sglbuf != NULL) {
990 		int i;
991 
992 		for (i = 0; i < numfrags; i++) {
993 			dma_addr_t dma_addr;
994 			u8 *kptr;
995 			int len;
996 
997 			if ((sglbuf[i].FlagsLength >> 24) == 0x30)
998 				continue;
999 
1000 			dma_addr = sglbuf[i].Address;
1001 			kptr = buflist[i].kptr;
1002 			len = buflist[i].len;
1003 
1004 			pci_free_consistent(ioc->pcidev, len, kptr, dma_addr);
1005 		}
1006 		pci_free_consistent(ioc->pcidev, MAX_SGL_BYTES, sglbuf, *sglbuf_dma);
1007 	}
1008 	kfree(buflist);
1009 	return NULL;
1010 }
1011 
1012 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1013 /*
1014  * Routine to free the SGL elements.
1015  */
1016 static void
1017 kfree_sgl(MptSge_t *sgl, dma_addr_t sgl_dma, struct buflist *buflist, MPT_ADAPTER *ioc)
1018 {
1019 	MptSge_t	*sg = sgl;
1020 	struct buflist	*bl = buflist;
1021 	u32		 nib;
1022 	int		 dir;
1023 	int		 n = 0;
1024 
1025 	if (sg->FlagsLength & 0x04000000)
1026 		dir = PCI_DMA_TODEVICE;
1027 	else
1028 		dir = PCI_DMA_FROMDEVICE;
1029 
1030 	nib = (sg->FlagsLength & 0xF0000000) >> 28;
1031 	while (! (nib & 0x4)) { /* eob */
1032 		/* skip ignore/chain. */
1033 		if (nib == 0 || nib == 3) {
1034 			;
1035 		} else if (sg->Address) {
1036 			dma_addr_t dma_addr;
1037 			void *kptr;
1038 			int len;
1039 
1040 			dma_addr = sg->Address;
1041 			kptr = bl->kptr;
1042 			len = bl->len;
1043 			pci_unmap_single(ioc->pcidev, dma_addr, len, dir);
1044 			pci_free_consistent(ioc->pcidev, len, kptr, dma_addr);
1045 			n++;
1046 		}
1047 		sg++;
1048 		bl++;
1049 		nib = (le32_to_cpu(sg->FlagsLength) & 0xF0000000) >> 28;
1050 	}
1051 
1052 	/* we're at eob! */
1053 	if (sg->Address) {
1054 		dma_addr_t dma_addr;
1055 		void *kptr;
1056 		int len;
1057 
1058 		dma_addr = sg->Address;
1059 		kptr = bl->kptr;
1060 		len = bl->len;
1061 		pci_unmap_single(ioc->pcidev, dma_addr, len, dir);
1062 		pci_free_consistent(ioc->pcidev, len, kptr, dma_addr);
1063 		n++;
1064 	}
1065 
1066 	pci_free_consistent(ioc->pcidev, MAX_SGL_BYTES, sgl, sgl_dma);
1067 	kfree(buflist);
1068 	dctlprintk((KERN_INFO MYNAM "-SG: Free'd 1 SGL buf + %d kbufs!\n", n));
1069 }
1070 
1071 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1072 /*
1073  *	mptctl_getiocinfo - Query the host adapter for IOC information.
1074  *	@arg: User space argument
1075  *
1076  * Outputs:	None.
1077  * Return:	0 if successful
1078  *		-EFAULT if data unavailable
1079  *		-ENODEV  if no such device/adapter
1080  */
1081 static int
1082 mptctl_getiocinfo (unsigned long arg, unsigned int data_size)
1083 {
1084 	struct mpt_ioctl_iocinfo __user *uarg = (void __user *) arg;
1085 	struct mpt_ioctl_iocinfo *karg;
1086 	MPT_ADAPTER		*ioc;
1087 	struct pci_dev		*pdev;
1088 	struct Scsi_Host	*sh;
1089 	MPT_SCSI_HOST		*hd;
1090 	int			iocnum;
1091 	int			numDevices = 0;
1092 	unsigned int		max_id;
1093 	int			ii;
1094 	unsigned int		port;
1095 	int			cim_rev;
1096 	u8			revision;
1097 
1098 	dctlprintk((": mptctl_getiocinfo called.\n"));
1099 	/* Add of PCI INFO results in unaligned access for
1100 	 * IA64 and Sparc. Reset long to int. Return no PCI
1101 	 * data for obsolete format.
1102 	 */
1103 	if (data_size == sizeof(struct mpt_ioctl_iocinfo_rev0))
1104 		cim_rev = 0;
1105 	else if (data_size == sizeof(struct mpt_ioctl_iocinfo_rev1))
1106 		cim_rev = 1;
1107 	else if (data_size == sizeof(struct mpt_ioctl_iocinfo))
1108 		cim_rev = 2;
1109 	else if (data_size == (sizeof(struct mpt_ioctl_iocinfo_rev0)+12))
1110 		cim_rev = 0;	/* obsolete */
1111 	else
1112 		return -EFAULT;
1113 
1114 	karg = kmalloc(data_size, GFP_KERNEL);
1115 	if (karg == NULL) {
1116 		printk(KERN_ERR "%s::mpt_ioctl_iocinfo() @%d - no memory available!\n",
1117 				__FILE__, __LINE__);
1118 		return -ENOMEM;
1119 	}
1120 
1121 	if (copy_from_user(karg, uarg, data_size)) {
1122 		printk(KERN_ERR "%s@%d::mptctl_getiocinfo - "
1123 			"Unable to read in mpt_ioctl_iocinfo struct @ %p\n",
1124 				__FILE__, __LINE__, uarg);
1125 		kfree(karg);
1126 		return -EFAULT;
1127 	}
1128 
1129 	if (((iocnum = mpt_verify_adapter(karg->hdr.iocnum, &ioc)) < 0) ||
1130 	    (ioc == NULL)) {
1131 		dctlprintk((KERN_ERR "%s::mptctl_getiocinfo() @%d - ioc%d not found!\n",
1132 				__FILE__, __LINE__, iocnum));
1133 		kfree(karg);
1134 		return -ENODEV;
1135 	}
1136 
1137 	/* Verify the data transfer size is correct. */
1138 	if (karg->hdr.maxDataSize != data_size) {
1139 		printk(KERN_ERR "%s@%d::mptctl_getiocinfo - "
1140 			"Structure size mismatch. Command not completed.\n",
1141 				__FILE__, __LINE__);
1142 		kfree(karg);
1143 		return -EFAULT;
1144 	}
1145 
1146 	/* Fill in the data and return the structure to the calling
1147 	 * program
1148 	 */
1149 	if (ioc->bus_type == FC)
1150 		karg->adapterType = MPT_IOCTL_INTERFACE_FC;
1151 	else
1152 		karg->adapterType = MPT_IOCTL_INTERFACE_SCSI;
1153 
1154 	if (karg->hdr.port > 1)
1155 		return -EINVAL;
1156 	port = karg->hdr.port;
1157 
1158 	karg->port = port;
1159 	pdev = (struct pci_dev *) ioc->pcidev;
1160 
1161 	karg->pciId = pdev->device;
1162 	pci_read_config_byte(pdev, PCI_CLASS_REVISION, &revision);
1163 	karg->hwRev = revision;
1164 	karg->subSystemDevice = pdev->subsystem_device;
1165 	karg->subSystemVendor = pdev->subsystem_vendor;
1166 
1167 	if (cim_rev == 1) {
1168 		/* Get the PCI bus, device, and function numbers for the IOC
1169 		 */
1170 		karg->pciInfo.u.bits.busNumber = pdev->bus->number;
1171 		karg->pciInfo.u.bits.deviceNumber = PCI_SLOT( pdev->devfn );
1172 		karg->pciInfo.u.bits.functionNumber = PCI_FUNC( pdev->devfn );
1173 	} else if (cim_rev == 2) {
1174 		/* Get the PCI bus, device, function and segment ID numbers
1175 		   for the IOC */
1176 		karg->pciInfo.u.bits.busNumber = pdev->bus->number;
1177 		karg->pciInfo.u.bits.deviceNumber = PCI_SLOT( pdev->devfn );
1178 		karg->pciInfo.u.bits.functionNumber = PCI_FUNC( pdev->devfn );
1179 		karg->pciInfo.u.bits.functionNumber = PCI_FUNC( pdev->devfn );
1180 		karg->pciInfo.segmentID = pci_domain_nr(pdev->bus);
1181 	}
1182 
1183 	/* Get number of devices
1184          */
1185 	if ((sh = ioc->sh) != NULL) {
1186 		 /* sh->max_id = maximum target ID + 1
1187 		 */
1188 		max_id = sh->max_id - 1;
1189 		hd = (MPT_SCSI_HOST *) sh->hostdata;
1190 
1191 		/* Check all of the target structures and
1192 		 * keep a counter.
1193 		 */
1194 		if (hd && hd->Targets) {
1195 			for (ii = 0; ii <= max_id; ii++) {
1196 				if (hd->Targets[ii])
1197 					numDevices++;
1198 			}
1199 		}
1200 	}
1201 	karg->numDevices = numDevices;
1202 
1203 	/* Set the BIOS and FW Version
1204 	 */
1205 	karg->FWVersion = ioc->facts.FWVersion.Word;
1206 	karg->BIOSVersion = ioc->biosVersion;
1207 
1208 	/* Set the Version Strings.
1209 	 */
1210 	strncpy (karg->driverVersion, MPT_LINUX_PACKAGE_NAME, MPT_IOCTL_VERSION_LENGTH);
1211 	karg->driverVersion[MPT_IOCTL_VERSION_LENGTH-1]='\0';
1212 
1213 	karg->busChangeEvent = 0;
1214 	karg->hostId = ioc->pfacts[port].PortSCSIID;
1215 	karg->rsvd[0] = karg->rsvd[1] = 0;
1216 
1217 	/* Copy the data from kernel memory to user memory
1218 	 */
1219 	if (copy_to_user((char __user *)arg, karg, data_size)) {
1220 		printk(KERN_ERR "%s@%d::mptctl_getiocinfo - "
1221 			"Unable to write out mpt_ioctl_iocinfo struct @ %p\n",
1222 				__FILE__, __LINE__, uarg);
1223 		kfree(karg);
1224 		return -EFAULT;
1225 	}
1226 
1227 	kfree(karg);
1228 	return 0;
1229 }
1230 
1231 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1232 /*
1233  *	mptctl_gettargetinfo - Query the host adapter for target information.
1234  *	@arg: User space argument
1235  *
1236  * Outputs:	None.
1237  * Return:	0 if successful
1238  *		-EFAULT if data unavailable
1239  *		-ENODEV  if no such device/adapter
1240  */
1241 static int
1242 mptctl_gettargetinfo (unsigned long arg)
1243 {
1244 	struct mpt_ioctl_targetinfo __user *uarg = (void __user *) arg;
1245 	struct mpt_ioctl_targetinfo karg;
1246 	MPT_ADAPTER		*ioc;
1247 	struct Scsi_Host	*sh;
1248 	MPT_SCSI_HOST		*hd;
1249 	VirtDevice		*vdev;
1250 	char			*pmem;
1251 	int			*pdata;
1252 	IOCPage2_t		*pIoc2;
1253 	IOCPage3_t		*pIoc3;
1254 	int			iocnum;
1255 	int			numDevices = 0;
1256 	unsigned int		max_id;
1257 	int			id, jj, indexed_lun, lun_index;
1258 	u32			lun;
1259 	int			maxWordsLeft;
1260 	int			numBytes;
1261 	u8			port, devType, bus_id;
1262 
1263 	dctlprintk(("mptctl_gettargetinfo called.\n"));
1264 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_targetinfo))) {
1265 		printk(KERN_ERR "%s@%d::mptctl_gettargetinfo - "
1266 			"Unable to read in mpt_ioctl_targetinfo struct @ %p\n",
1267 				__FILE__, __LINE__, uarg);
1268 		return -EFAULT;
1269 	}
1270 
1271 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1272 	    (ioc == NULL)) {
1273 		dctlprintk((KERN_ERR "%s::mptctl_gettargetinfo() @%d - ioc%d not found!\n",
1274 				__FILE__, __LINE__, iocnum));
1275 		return -ENODEV;
1276 	}
1277 
1278 	/* Get the port number and set the maximum number of bytes
1279 	 * in the returned structure.
1280 	 * Ignore the port setting.
1281 	 */
1282 	numBytes = karg.hdr.maxDataSize - sizeof(mpt_ioctl_header);
1283 	maxWordsLeft = numBytes/sizeof(int);
1284 	port = karg.hdr.port;
1285 
1286 	if (maxWordsLeft <= 0) {
1287 		printk(KERN_ERR "%s::mptctl_gettargetinfo() @%d - no memory available!\n",
1288 				__FILE__, __LINE__);
1289 		return -ENOMEM;
1290 	}
1291 
1292 	/* Fill in the data and return the structure to the calling
1293 	 * program
1294 	 */
1295 
1296 	/* struct mpt_ioctl_targetinfo does not contain sufficient space
1297 	 * for the target structures so when the IOCTL is called, there is
1298 	 * not sufficient stack space for the structure. Allocate memory,
1299 	 * populate the memory, copy back to the user, then free memory.
1300 	 * targetInfo format:
1301 	 * bits 31-24: reserved
1302 	 *      23-16: LUN
1303 	 *      15- 8: Bus Number
1304 	 *       7- 0: Target ID
1305 	 */
1306 	pmem = kmalloc(numBytes, GFP_KERNEL);
1307 	if (pmem == NULL) {
1308 		printk(KERN_ERR "%s::mptctl_gettargetinfo() @%d - no memory available!\n",
1309 				__FILE__, __LINE__);
1310 		return -ENOMEM;
1311 	}
1312 	memset(pmem, 0, numBytes);
1313 	pdata =  (int *) pmem;
1314 
1315 	/* Get number of devices
1316          */
1317 	if ((sh = ioc->sh) != NULL) {
1318 
1319 		max_id = sh->max_id - 1;
1320 		hd = (MPT_SCSI_HOST *) sh->hostdata;
1321 
1322 		/* Check all of the target structures.
1323 		 * Save the Id and increment the counter,
1324 		 * if ptr non-null.
1325 		 * sh->max_id = maximum target ID + 1
1326 		 */
1327 		if (hd && hd->Targets) {
1328 			mpt_findImVolumes(ioc);
1329 			pIoc2 = ioc->spi_data.pIocPg2;
1330 			for ( id = 0; id <= max_id; ) {
1331 				if ( pIoc2 && pIoc2->NumActiveVolumes ) {
1332 					if ( id == pIoc2->RaidVolume[0].VolumeID ) {
1333 						if (maxWordsLeft <= 0) {
1334 							printk(KERN_ERR "mptctl_gettargetinfo - "
1335 			"buffer is full but volume is available on ioc %d\n, numDevices=%d", iocnum, numDevices);
1336 							goto data_space_full;
1337 						}
1338 						if ( ( pIoc2->RaidVolume[0].Flags & MPI_IOCPAGE2_FLAG_VOLUME_INACTIVE ) == 0 )
1339                         				devType = 0x80;
1340                     				else
1341                         				devType = 0xC0;
1342 						bus_id = pIoc2->RaidVolume[0].VolumeBus;
1343 	            				numDevices++;
1344                     				*pdata = ( (devType << 24) | (bus_id << 8) | id );
1345 						dctlprintk((KERN_ERR "mptctl_gettargetinfo - "
1346 		"volume ioc=%d target=%x numDevices=%d pdata=%p\n", iocnum, *pdata, numDevices, pdata));
1347                     				pdata++;
1348 						--maxWordsLeft;
1349 						goto next_id;
1350 					} else {
1351 						pIoc3 = ioc->spi_data.pIocPg3;
1352             					for ( jj = 0; jj < pIoc3->NumPhysDisks; jj++ ) {
1353                     					if ( pIoc3->PhysDisk[jj].PhysDiskID == id )
1354 								goto next_id;
1355 						}
1356 					}
1357 				}
1358 				if ( (vdev = hd->Targets[id]) ) {
1359 					for (jj = 0; jj <= MPT_LAST_LUN; jj++) {
1360 						lun_index = (jj >> 5);
1361 						indexed_lun = (jj % 32);
1362 						lun = (1 << indexed_lun);
1363 						if (vdev->luns[lun_index] & lun) {
1364 							if (maxWordsLeft <= 0) {
1365 								printk(KERN_ERR "mptctl_gettargetinfo - "
1366 			"buffer is full but more targets are available on ioc %d numDevices=%d\n", iocnum, numDevices);
1367 								goto data_space_full;
1368 							}
1369 							bus_id = vdev->bus_id;
1370 							numDevices++;
1371                             				*pdata = ( (jj << 16) | (bus_id << 8) | id );
1372 							dctlprintk((KERN_ERR "mptctl_gettargetinfo - "
1373 		"target ioc=%d target=%x numDevices=%d pdata=%p\n", iocnum, *pdata, numDevices, pdata));
1374 							pdata++;
1375 							--maxWordsLeft;
1376 						}
1377 					}
1378 				}
1379 next_id:
1380 				id++;
1381 			}
1382 		}
1383 	}
1384 data_space_full:
1385 	karg.numDevices = numDevices;
1386 
1387 	/* Copy part of the data from kernel memory to user memory
1388 	 */
1389 	if (copy_to_user((char __user *)arg, &karg,
1390 				sizeof(struct mpt_ioctl_targetinfo))) {
1391 		printk(KERN_ERR "%s@%d::mptctl_gettargetinfo - "
1392 			"Unable to write out mpt_ioctl_targetinfo struct @ %p\n",
1393 				__FILE__, __LINE__, uarg);
1394 		kfree(pmem);
1395 		return -EFAULT;
1396 	}
1397 
1398 	/* Copy the remaining data from kernel memory to user memory
1399 	 */
1400 	if (copy_to_user(uarg->targetInfo, pmem, numBytes)) {
1401 		printk(KERN_ERR "%s@%d::mptctl_gettargetinfo - "
1402 			"Unable to write out mpt_ioctl_targetinfo struct @ %p\n",
1403 				__FILE__, __LINE__, pdata);
1404 		kfree(pmem);
1405 		return -EFAULT;
1406 	}
1407 
1408 	kfree(pmem);
1409 
1410 	return 0;
1411 }
1412 
1413 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1414 /* MPT IOCTL Test function.
1415  *
1416  * Outputs:	None.
1417  * Return:	0 if successful
1418  *		-EFAULT if data unavailable
1419  *		-ENODEV  if no such device/adapter
1420  */
1421 static int
1422 mptctl_readtest (unsigned long arg)
1423 {
1424 	struct mpt_ioctl_test __user *uarg = (void __user *) arg;
1425 	struct mpt_ioctl_test	 karg;
1426 	MPT_ADAPTER *ioc;
1427 	int iocnum;
1428 
1429 	dctlprintk(("mptctl_readtest called.\n"));
1430 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_test))) {
1431 		printk(KERN_ERR "%s@%d::mptctl_readtest - "
1432 			"Unable to read in mpt_ioctl_test struct @ %p\n",
1433 				__FILE__, __LINE__, uarg);
1434 		return -EFAULT;
1435 	}
1436 
1437 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1438 	    (ioc == NULL)) {
1439 		dctlprintk((KERN_ERR "%s::mptctl_readtest() @%d - ioc%d not found!\n",
1440 				__FILE__, __LINE__, iocnum));
1441 		return -ENODEV;
1442 	}
1443 
1444 	/* Fill in the data and return the structure to the calling
1445 	 * program
1446 	 */
1447 
1448 #ifdef MFCNT
1449 	karg.chip_type = ioc->mfcnt;
1450 #else
1451 	karg.chip_type = ioc->pcidev->device;
1452 #endif
1453 	strncpy (karg.name, ioc->name, MPT_MAX_NAME);
1454 	karg.name[MPT_MAX_NAME-1]='\0';
1455 	strncpy (karg.product, ioc->prod_name, MPT_PRODUCT_LENGTH);
1456 	karg.product[MPT_PRODUCT_LENGTH-1]='\0';
1457 
1458 	/* Copy the data from kernel memory to user memory
1459 	 */
1460 	if (copy_to_user((char __user *)arg, &karg, sizeof(struct mpt_ioctl_test))) {
1461 		printk(KERN_ERR "%s@%d::mptctl_readtest - "
1462 			"Unable to write out mpt_ioctl_test struct @ %p\n",
1463 				__FILE__, __LINE__, uarg);
1464 		return -EFAULT;
1465 	}
1466 
1467 	return 0;
1468 }
1469 
1470 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1471 /*
1472  *	mptctl_eventquery - Query the host adapter for the event types
1473  *	that are being logged.
1474  *	@arg: User space argument
1475  *
1476  * Outputs:	None.
1477  * Return:	0 if successful
1478  *		-EFAULT if data unavailable
1479  *		-ENODEV  if no such device/adapter
1480  */
1481 static int
1482 mptctl_eventquery (unsigned long arg)
1483 {
1484 	struct mpt_ioctl_eventquery __user *uarg = (void __user *) arg;
1485 	struct mpt_ioctl_eventquery	 karg;
1486 	MPT_ADAPTER *ioc;
1487 	int iocnum;
1488 
1489 	dctlprintk(("mptctl_eventquery called.\n"));
1490 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventquery))) {
1491 		printk(KERN_ERR "%s@%d::mptctl_eventquery - "
1492 			"Unable to read in mpt_ioctl_eventquery struct @ %p\n",
1493 				__FILE__, __LINE__, uarg);
1494 		return -EFAULT;
1495 	}
1496 
1497 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1498 	    (ioc == NULL)) {
1499 		dctlprintk((KERN_ERR "%s::mptctl_eventquery() @%d - ioc%d not found!\n",
1500 				__FILE__, __LINE__, iocnum));
1501 		return -ENODEV;
1502 	}
1503 
1504 	karg.eventEntries = ioc->eventLogSize;
1505 	karg.eventTypes = ioc->eventTypes;
1506 
1507 	/* Copy the data from kernel memory to user memory
1508 	 */
1509 	if (copy_to_user((char __user *)arg, &karg, sizeof(struct mpt_ioctl_eventquery))) {
1510 		printk(KERN_ERR "%s@%d::mptctl_eventquery - "
1511 			"Unable to write out mpt_ioctl_eventquery struct @ %p\n",
1512 				__FILE__, __LINE__, uarg);
1513 		return -EFAULT;
1514 	}
1515 	return 0;
1516 }
1517 
1518 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1519 static int
1520 mptctl_eventenable (unsigned long arg)
1521 {
1522 	struct mpt_ioctl_eventenable __user *uarg = (void __user *) arg;
1523 	struct mpt_ioctl_eventenable	 karg;
1524 	MPT_ADAPTER *ioc;
1525 	int iocnum;
1526 
1527 	dctlprintk(("mptctl_eventenable called.\n"));
1528 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventenable))) {
1529 		printk(KERN_ERR "%s@%d::mptctl_eventenable - "
1530 			"Unable to read in mpt_ioctl_eventenable struct @ %p\n",
1531 				__FILE__, __LINE__, uarg);
1532 		return -EFAULT;
1533 	}
1534 
1535 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1536 	    (ioc == NULL)) {
1537 		dctlprintk((KERN_ERR "%s::mptctl_eventenable() @%d - ioc%d not found!\n",
1538 				__FILE__, __LINE__, iocnum));
1539 		return -ENODEV;
1540 	}
1541 
1542 	if (ioc->events == NULL) {
1543 		/* Have not yet allocated memory - do so now.
1544 		 */
1545 		int sz = MPTCTL_EVENT_LOG_SIZE * sizeof(MPT_IOCTL_EVENTS);
1546 		ioc->events = kmalloc(sz, GFP_KERNEL);
1547 		if (ioc->events == NULL) {
1548 			printk(KERN_ERR MYNAM ": ERROR - Insufficient memory to add adapter!\n");
1549 			return -ENOMEM;
1550 		}
1551 		memset(ioc->events, 0, sz);
1552 		ioc->alloc_total += sz;
1553 
1554 		ioc->eventLogSize = MPTCTL_EVENT_LOG_SIZE;
1555 		ioc->eventContext = 0;
1556         }
1557 
1558 	/* Update the IOC event logging flag.
1559 	 */
1560 	ioc->eventTypes = karg.eventTypes;
1561 
1562 	return 0;
1563 }
1564 
1565 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1566 static int
1567 mptctl_eventreport (unsigned long arg)
1568 {
1569 	struct mpt_ioctl_eventreport __user *uarg = (void __user *) arg;
1570 	struct mpt_ioctl_eventreport	 karg;
1571 	MPT_ADAPTER		 *ioc;
1572 	int			 iocnum;
1573 	int			 numBytes, maxEvents, max;
1574 
1575 	dctlprintk(("mptctl_eventreport called.\n"));
1576 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_eventreport))) {
1577 		printk(KERN_ERR "%s@%d::mptctl_eventreport - "
1578 			"Unable to read in mpt_ioctl_eventreport struct @ %p\n",
1579 				__FILE__, __LINE__, uarg);
1580 		return -EFAULT;
1581 	}
1582 
1583 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1584 	    (ioc == NULL)) {
1585 		dctlprintk((KERN_ERR "%s::mptctl_eventreport() @%d - ioc%d not found!\n",
1586 				__FILE__, __LINE__, iocnum));
1587 		return -ENODEV;
1588 	}
1589 
1590 	numBytes = karg.hdr.maxDataSize - sizeof(mpt_ioctl_header);
1591 	maxEvents = numBytes/sizeof(MPT_IOCTL_EVENTS);
1592 
1593 
1594 	max = ioc->eventLogSize < maxEvents ? ioc->eventLogSize : maxEvents;
1595 
1596 	/* If fewer than 1 event is requested, there must have
1597 	 * been some type of error.
1598 	 */
1599 	if ((max < 1) || !ioc->events)
1600 		return -ENODATA;
1601 
1602 	/* Copy the data from kernel memory to user memory
1603 	 */
1604 	numBytes = max * sizeof(MPT_IOCTL_EVENTS);
1605 	if (copy_to_user(uarg->eventData, ioc->events, numBytes)) {
1606 		printk(KERN_ERR "%s@%d::mptctl_eventreport - "
1607 			"Unable to write out mpt_ioctl_eventreport struct @ %p\n",
1608 				__FILE__, __LINE__, ioc->events);
1609 		return -EFAULT;
1610 	}
1611 
1612 	return 0;
1613 }
1614 
1615 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1616 static int
1617 mptctl_replace_fw (unsigned long arg)
1618 {
1619 	struct mpt_ioctl_replace_fw __user *uarg = (void __user *) arg;
1620 	struct mpt_ioctl_replace_fw	 karg;
1621 	MPT_ADAPTER		 *ioc;
1622 	int			 iocnum;
1623 	int			 newFwSize;
1624 
1625 	dctlprintk(("mptctl_replace_fw called.\n"));
1626 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_replace_fw))) {
1627 		printk(KERN_ERR "%s@%d::mptctl_replace_fw - "
1628 			"Unable to read in mpt_ioctl_replace_fw struct @ %p\n",
1629 				__FILE__, __LINE__, uarg);
1630 		return -EFAULT;
1631 	}
1632 
1633 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1634 	    (ioc == NULL)) {
1635 		dctlprintk((KERN_ERR "%s::mptctl_replace_fw() @%d - ioc%d not found!\n",
1636 				__FILE__, __LINE__, iocnum));
1637 		return -ENODEV;
1638 	}
1639 
1640 	/* If caching FW, Free the old FW image
1641 	 */
1642 	if (ioc->cached_fw == NULL)
1643 		return 0;
1644 
1645 	mpt_free_fw_memory(ioc);
1646 
1647 	/* Allocate memory for the new FW image
1648 	 */
1649 	newFwSize = karg.newImageSize;
1650 
1651 	if (newFwSize & 0x01)
1652 		newFwSize += 1;
1653 	if (newFwSize & 0x02)
1654 		newFwSize += 2;
1655 
1656 	mpt_alloc_fw_memory(ioc, newFwSize);
1657 	if (ioc->cached_fw == NULL)
1658 		return -ENOMEM;
1659 
1660 	/* Copy the data from user memory to kernel space
1661 	 */
1662 	if (copy_from_user(ioc->cached_fw, uarg->newImage, newFwSize)) {
1663 		printk(KERN_ERR "%s@%d::mptctl_replace_fw - "
1664 				"Unable to read in mpt_ioctl_replace_fw image "
1665 				"@ %p\n", __FILE__, __LINE__, uarg);
1666 		mpt_free_fw_memory(ioc);
1667 		return -EFAULT;
1668 	}
1669 
1670 	/* Update IOCFactsReply
1671 	 */
1672 	ioc->facts.FWImageSize = newFwSize;
1673 	return 0;
1674 }
1675 
1676 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1677 /* MPT IOCTL MPTCOMMAND function.
1678  * Cast the arg into the mpt_ioctl_mpt_command structure.
1679  *
1680  * Outputs:	None.
1681  * Return:	0 if successful
1682  *		-EBUSY  if previous command timout and IOC reset is not complete.
1683  *		-EFAULT if data unavailable
1684  *		-ENODEV if no such device/adapter
1685  *		-ETIME	if timer expires
1686  *		-ENOMEM if memory allocation error
1687  */
1688 static int
1689 mptctl_mpt_command (unsigned long arg)
1690 {
1691 	struct mpt_ioctl_command __user *uarg = (void __user *) arg;
1692 	struct mpt_ioctl_command  karg;
1693 	MPT_ADAPTER	*ioc;
1694 	int		iocnum;
1695 	int		rc;
1696 
1697 	dctlprintk(("mptctl_command called.\n"));
1698 
1699 	if (copy_from_user(&karg, uarg, sizeof(struct mpt_ioctl_command))) {
1700 		printk(KERN_ERR "%s@%d::mptctl_mpt_command - "
1701 			"Unable to read in mpt_ioctl_command struct @ %p\n",
1702 				__FILE__, __LINE__, uarg);
1703 		return -EFAULT;
1704 	}
1705 
1706 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1707 	    (ioc == NULL)) {
1708 		dctlprintk((KERN_ERR "%s::mptctl_mpt_command() @%d - ioc%d not found!\n",
1709 				__FILE__, __LINE__, iocnum));
1710 		return -ENODEV;
1711 	}
1712 
1713 	rc = mptctl_do_mpt_command (karg, &uarg->MF);
1714 
1715 	return rc;
1716 }
1717 
1718 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
1719 /* Worker routine for the IOCTL MPTCOMMAND and MPTCOMMAND32 (sparc) commands.
1720  *
1721  * Outputs:	None.
1722  * Return:	0 if successful
1723  *		-EBUSY  if previous command timout and IOC reset is not complete.
1724  *		-EFAULT if data unavailable
1725  *		-ENODEV if no such device/adapter
1726  *		-ETIME	if timer expires
1727  *		-ENOMEM if memory allocation error
1728  *		-EPERM if SCSI I/O and target is untagged
1729  */
1730 static int
1731 mptctl_do_mpt_command (struct mpt_ioctl_command karg, void __user *mfPtr)
1732 {
1733 	MPT_ADAPTER	*ioc;
1734 	MPT_FRAME_HDR	*mf = NULL;
1735 	MPIHeader_t	*hdr;
1736 	char		*psge;
1737 	struct buflist	bufIn;	/* data In buffer */
1738 	struct buflist	bufOut; /* data Out buffer */
1739 	dma_addr_t	dma_addr_in;
1740 	dma_addr_t	dma_addr_out;
1741 	int		sgSize = 0;	/* Num SG elements */
1742 	int		iocnum, flagsLength;
1743 	int		sz, rc = 0;
1744 	int		msgContext;
1745 	u16		req_idx;
1746 	ulong 		timeout;
1747 
1748 	dctlprintk(("mptctl_do_mpt_command called.\n"));
1749 	bufIn.kptr = bufOut.kptr = NULL;
1750 
1751 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
1752 	    (ioc == NULL)) {
1753 		dctlprintk((KERN_ERR "%s::mptctl_do_mpt_command() @%d - ioc%d not found!\n",
1754 				__FILE__, __LINE__, iocnum));
1755 		return -ENODEV;
1756 	}
1757 	if (!ioc->ioctl) {
1758 		printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1759 			"No memory available during driver init.\n",
1760 				__FILE__, __LINE__);
1761 		return -ENOMEM;
1762 	} else if (ioc->ioctl->status & MPT_IOCTL_STATUS_DID_IOCRESET) {
1763 		printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1764 			"Busy with IOC Reset \n", __FILE__, __LINE__);
1765 		return -EBUSY;
1766 	}
1767 
1768 	/* Verify that the final request frame will not be too large.
1769 	 */
1770 	sz = karg.dataSgeOffset * 4;
1771 	if (karg.dataInSize > 0)
1772 		sz += sizeof(dma_addr_t) + sizeof(u32);
1773 	if (karg.dataOutSize > 0)
1774 		sz += sizeof(dma_addr_t) + sizeof(u32);
1775 
1776 	if (sz > ioc->req_sz) {
1777 		printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1778 			"Request frame too large (%d) maximum (%d)\n",
1779 				__FILE__, __LINE__, sz, ioc->req_sz);
1780 		return -EFAULT;
1781 	}
1782 
1783 	/* Get a free request frame and save the message context.
1784 	 */
1785         if ((mf = mpt_get_msg_frame(mptctl_id, ioc)) == NULL)
1786                 return -EAGAIN;
1787 
1788 	hdr = (MPIHeader_t *) mf;
1789 	msgContext = le32_to_cpu(hdr->MsgContext);
1790 	req_idx = le16_to_cpu(mf->u.frame.hwhdr.msgctxu.fld.req_idx);
1791 
1792 	/* Copy the request frame
1793 	 * Reset the saved message context.
1794 	 * Request frame in user space
1795 	 */
1796 	if (copy_from_user(mf, mfPtr, karg.dataSgeOffset * 4)) {
1797 		printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1798 			"Unable to read MF from mpt_ioctl_command struct @ %p\n",
1799 			__FILE__, __LINE__, mfPtr);
1800 		rc = -EFAULT;
1801 		goto done_free_mem;
1802 	}
1803 	hdr->MsgContext = cpu_to_le32(msgContext);
1804 
1805 
1806 	/* Verify that this request is allowed.
1807 	 */
1808 	switch (hdr->Function) {
1809 	case MPI_FUNCTION_IOC_FACTS:
1810 	case MPI_FUNCTION_PORT_FACTS:
1811 		karg.dataOutSize  = karg.dataInSize = 0;
1812 		break;
1813 
1814 	case MPI_FUNCTION_CONFIG:
1815 	case MPI_FUNCTION_FC_COMMON_TRANSPORT_SEND:
1816 	case MPI_FUNCTION_FC_EX_LINK_SRVC_SEND:
1817 	case MPI_FUNCTION_FW_UPLOAD:
1818 	case MPI_FUNCTION_SCSI_ENCLOSURE_PROCESSOR:
1819 	case MPI_FUNCTION_FW_DOWNLOAD:
1820 	case MPI_FUNCTION_FC_PRIMITIVE_SEND:
1821 		break;
1822 
1823 	case MPI_FUNCTION_SCSI_IO_REQUEST:
1824 		if (ioc->sh) {
1825 			SCSIIORequest_t *pScsiReq = (SCSIIORequest_t *) mf;
1826 			VirtDevice	*pTarget = NULL;
1827 			MPT_SCSI_HOST	*hd = NULL;
1828 			int qtag = MPI_SCSIIO_CONTROL_UNTAGGED;
1829 			int scsidir = 0;
1830 			int target = (int) pScsiReq->TargetID;
1831 			int dataSize;
1832 
1833 			if ((target < 0) || (target >= ioc->sh->max_id)) {
1834 				printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1835 					"Target ID out of bounds. \n",
1836 					__FILE__, __LINE__);
1837 				rc = -ENODEV;
1838 				goto done_free_mem;
1839 			}
1840 
1841 			pScsiReq->MsgFlags = mpt_msg_flags();
1842 
1843 			/* verify that app has not requested
1844 			 *	more sense data than driver
1845 			 *	can provide, if so, reset this parameter
1846 			 * set the sense buffer pointer low address
1847 			 * update the control field to specify Q type
1848 			 */
1849 			if (karg.maxSenseBytes > MPT_SENSE_BUFFER_SIZE)
1850 				pScsiReq->SenseBufferLength = MPT_SENSE_BUFFER_SIZE;
1851 			else
1852 				pScsiReq->SenseBufferLength = karg.maxSenseBytes;
1853 
1854 			pScsiReq->SenseBufferLowAddr =
1855 				cpu_to_le32(ioc->sense_buf_low_dma
1856 				   + (req_idx * MPT_SENSE_BUFFER_ALLOC));
1857 
1858 			if ((hd = (MPT_SCSI_HOST *) ioc->sh->hostdata)) {
1859 				if (hd->Targets)
1860 					pTarget = hd->Targets[target];
1861 			}
1862 
1863 			if (pTarget &&(pTarget->tflags & MPT_TARGET_FLAGS_Q_YES))
1864 				qtag = MPI_SCSIIO_CONTROL_SIMPLEQ;
1865 
1866 			/* Have the IOCTL driver set the direction based
1867 			 * on the dataOutSize (ordering issue with Sparc).
1868 			 */
1869 			if (karg.dataOutSize > 0) {
1870 				scsidir = MPI_SCSIIO_CONTROL_WRITE;
1871 				dataSize = karg.dataOutSize;
1872 			} else {
1873 				scsidir = MPI_SCSIIO_CONTROL_READ;
1874 				dataSize = karg.dataInSize;
1875 			}
1876 
1877 			pScsiReq->Control = cpu_to_le32(scsidir | qtag);
1878 			pScsiReq->DataLength = cpu_to_le32(dataSize);
1879 
1880 			ioc->ioctl->reset = MPTCTL_RESET_OK;
1881 			ioc->ioctl->target = target;
1882 
1883 		} else {
1884 			printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1885 				"SCSI driver is not loaded. \n",
1886 					__FILE__, __LINE__);
1887 			rc = -EFAULT;
1888 			goto done_free_mem;
1889 		}
1890 		break;
1891 
1892 	case MPI_FUNCTION_RAID_ACTION:
1893 		/* Just add a SGE
1894 		 */
1895 		break;
1896 
1897 	case MPI_FUNCTION_RAID_SCSI_IO_PASSTHROUGH:
1898 		if (ioc->sh) {
1899 			SCSIIORequest_t *pScsiReq = (SCSIIORequest_t *) mf;
1900 			int qtag = MPI_SCSIIO_CONTROL_SIMPLEQ;
1901 			int scsidir = MPI_SCSIIO_CONTROL_READ;
1902 			int dataSize;
1903 
1904 			pScsiReq->MsgFlags = mpt_msg_flags();
1905 
1906 			/* verify that app has not requested
1907 			 *	more sense data than driver
1908 			 *	can provide, if so, reset this parameter
1909 			 * set the sense buffer pointer low address
1910 			 * update the control field to specify Q type
1911 			 */
1912 			if (karg.maxSenseBytes > MPT_SENSE_BUFFER_SIZE)
1913 				pScsiReq->SenseBufferLength = MPT_SENSE_BUFFER_SIZE;
1914 			else
1915 				pScsiReq->SenseBufferLength = karg.maxSenseBytes;
1916 
1917 			pScsiReq->SenseBufferLowAddr =
1918 				cpu_to_le32(ioc->sense_buf_low_dma
1919 				   + (req_idx * MPT_SENSE_BUFFER_ALLOC));
1920 
1921 			/* All commands to physical devices are tagged
1922 			 */
1923 
1924 			/* Have the IOCTL driver set the direction based
1925 			 * on the dataOutSize (ordering issue with Sparc).
1926 			 */
1927 			if (karg.dataOutSize > 0) {
1928 				scsidir = MPI_SCSIIO_CONTROL_WRITE;
1929 				dataSize = karg.dataOutSize;
1930 			} else {
1931 				scsidir = MPI_SCSIIO_CONTROL_READ;
1932 				dataSize = karg.dataInSize;
1933 			}
1934 
1935 			pScsiReq->Control = cpu_to_le32(scsidir | qtag);
1936 			pScsiReq->DataLength = cpu_to_le32(dataSize);
1937 
1938 			ioc->ioctl->reset = MPTCTL_RESET_OK;
1939 			ioc->ioctl->target = pScsiReq->TargetID;
1940 		} else {
1941 			printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1942 				"SCSI driver is not loaded. \n",
1943 					__FILE__, __LINE__);
1944 			rc = -EFAULT;
1945 			goto done_free_mem;
1946 		}
1947 		break;
1948 
1949 	case MPI_FUNCTION_SCSI_TASK_MGMT:
1950 		{
1951 			MPT_SCSI_HOST *hd = NULL;
1952 			if ((ioc->sh == NULL) || ((hd = (MPT_SCSI_HOST *)ioc->sh->hostdata) == NULL)) {
1953 				printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1954 					"SCSI driver not loaded or SCSI host not found. \n",
1955 					__FILE__, __LINE__);
1956 				rc = -EFAULT;
1957 				goto done_free_mem;
1958 			} else if (mptctl_set_tm_flags(hd) != 0) {
1959 				rc = -EPERM;
1960 				goto done_free_mem;
1961 			}
1962 		}
1963 		break;
1964 
1965 	case MPI_FUNCTION_IOC_INIT:
1966 		{
1967 			IOCInit_t	*pInit = (IOCInit_t *) mf;
1968 			u32		high_addr, sense_high;
1969 
1970 			/* Verify that all entries in the IOC INIT match
1971 			 * existing setup (and in LE format).
1972 			 */
1973 			if (sizeof(dma_addr_t) == sizeof(u64)) {
1974 				high_addr = cpu_to_le32((u32)((u64)ioc->req_frames_dma >> 32));
1975 				sense_high= cpu_to_le32((u32)((u64)ioc->sense_buf_pool_dma >> 32));
1976 			} else {
1977 				high_addr = 0;
1978 				sense_high= 0;
1979 			}
1980 
1981 			if ((pInit->Flags != 0) || (pInit->MaxDevices != ioc->facts.MaxDevices) ||
1982 				(pInit->MaxBuses != ioc->facts.MaxBuses) ||
1983 				(pInit->ReplyFrameSize != cpu_to_le16(ioc->reply_sz)) ||
1984 				(pInit->HostMfaHighAddr != high_addr) ||
1985 				(pInit->SenseBufferHighAddr != sense_high)) {
1986 				printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
1987 					"IOC_INIT issued with 1 or more incorrect parameters. Rejected.\n",
1988 					__FILE__, __LINE__);
1989 				rc = -EFAULT;
1990 				goto done_free_mem;
1991 			}
1992 		}
1993 		break;
1994 	default:
1995 		/*
1996 		 * MPI_FUNCTION_PORT_ENABLE
1997 		 * MPI_FUNCTION_TARGET_CMD_BUFFER_POST
1998 		 * MPI_FUNCTION_TARGET_ASSIST
1999 		 * MPI_FUNCTION_TARGET_STATUS_SEND
2000 		 * MPI_FUNCTION_TARGET_MODE_ABORT
2001 		 * MPI_FUNCTION_IOC_MESSAGE_UNIT_RESET
2002 		 * MPI_FUNCTION_IO_UNIT_RESET
2003 		 * MPI_FUNCTION_HANDSHAKE
2004 		 * MPI_FUNCTION_REPLY_FRAME_REMOVAL
2005 		 * MPI_FUNCTION_EVENT_NOTIFICATION
2006 		 *  (driver handles event notification)
2007 		 * MPI_FUNCTION_EVENT_ACK
2008 		 */
2009 
2010 		/*  What to do with these???  CHECK ME!!!
2011 			MPI_FUNCTION_FC_LINK_SRVC_BUF_POST
2012 			MPI_FUNCTION_FC_LINK_SRVC_RSP
2013 			MPI_FUNCTION_FC_ABORT
2014 			MPI_FUNCTION_LAN_SEND
2015 			MPI_FUNCTION_LAN_RECEIVE
2016 		 	MPI_FUNCTION_LAN_RESET
2017 		*/
2018 
2019 		printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
2020 			"Illegal request (function 0x%x) \n",
2021 			__FILE__, __LINE__, hdr->Function);
2022 		rc = -EFAULT;
2023 		goto done_free_mem;
2024 	}
2025 
2026 	/* Add the SGL ( at most one data in SGE and one data out SGE )
2027 	 * In the case of two SGE's - the data out (write) will always
2028 	 * preceede the data in (read) SGE. psgList is used to free the
2029 	 * allocated memory.
2030 	 */
2031 	psge = (char *) (((int *) mf) + karg.dataSgeOffset);
2032 	flagsLength = 0;
2033 
2034 	/* bufIn and bufOut are used for user to kernel space transfers
2035 	 */
2036 	bufIn.kptr = bufOut.kptr = NULL;
2037 	bufIn.len = bufOut.len = 0;
2038 
2039 	if (karg.dataOutSize > 0)
2040 		sgSize ++;
2041 
2042 	if (karg.dataInSize > 0)
2043 		sgSize ++;
2044 
2045 	if (sgSize > 0) {
2046 
2047 		/* Set up the dataOut memory allocation */
2048 		if (karg.dataOutSize > 0) {
2049 			if (karg.dataInSize > 0) {
2050 				flagsLength = ( MPI_SGE_FLAGS_SIMPLE_ELEMENT |
2051 						MPI_SGE_FLAGS_END_OF_BUFFER |
2052 						MPI_SGE_FLAGS_DIRECTION |
2053 						mpt_addr_size() )
2054 						<< MPI_SGE_FLAGS_SHIFT;
2055 			} else {
2056 				flagsLength = MPT_SGE_FLAGS_SSIMPLE_WRITE;
2057 			}
2058 			flagsLength |= karg.dataOutSize;
2059 			bufOut.len = karg.dataOutSize;
2060 			bufOut.kptr = pci_alloc_consistent(
2061 					ioc->pcidev, bufOut.len, &dma_addr_out);
2062 
2063 			if (bufOut.kptr == NULL) {
2064 				rc = -ENOMEM;
2065 				goto done_free_mem;
2066 			} else {
2067 				/* Set up this SGE.
2068 				 * Copy to MF and to sglbuf
2069 				 */
2070 				mpt_add_sge(psge, flagsLength, dma_addr_out);
2071 				psge += (sizeof(u32) + sizeof(dma_addr_t));
2072 
2073 				/* Copy user data to kernel space.
2074 				 */
2075 				if (copy_from_user(bufOut.kptr,
2076 						karg.dataOutBufPtr,
2077 						bufOut.len)) {
2078 					printk(KERN_ERR
2079 						"%s@%d::mptctl_do_mpt_command - Unable "
2080 						"to read user data "
2081 						"struct @ %p\n",
2082 						__FILE__, __LINE__,karg.dataOutBufPtr);
2083 					rc =  -EFAULT;
2084 					goto done_free_mem;
2085 				}
2086 			}
2087 		}
2088 
2089 		if (karg.dataInSize > 0) {
2090 			flagsLength = MPT_SGE_FLAGS_SSIMPLE_READ;
2091 			flagsLength |= karg.dataInSize;
2092 
2093 			bufIn.len = karg.dataInSize;
2094 			bufIn.kptr = pci_alloc_consistent(ioc->pcidev,
2095 					bufIn.len, &dma_addr_in);
2096 
2097 			if (bufIn.kptr == NULL) {
2098 				rc = -ENOMEM;
2099 				goto done_free_mem;
2100 			} else {
2101 				/* Set up this SGE
2102 				 * Copy to MF and to sglbuf
2103 				 */
2104 				mpt_add_sge(psge, flagsLength, dma_addr_in);
2105 			}
2106 		}
2107 	} else  {
2108 		/* Add a NULL SGE
2109 		 */
2110 		mpt_add_sge(psge, flagsLength, (dma_addr_t) -1);
2111 	}
2112 
2113 	ioc->ioctl->wait_done = 0;
2114 	if (hdr->Function == MPI_FUNCTION_SCSI_TASK_MGMT) {
2115 
2116 		DBG_DUMP_TM_REQUEST_FRAME((u32 *)mf);
2117 
2118 		if (mpt_send_handshake_request(mptctl_id, ioc,
2119 			sizeof(SCSITaskMgmt_t), (u32*)mf,
2120 			CAN_SLEEP) != 0) {
2121 			dfailprintk((MYIOC_s_ERR_FMT "_send_handshake FAILED!"
2122 				" (ioc %p, mf %p) \n", ioc->name,
2123 				ioc, mf));
2124 			mptctl_free_tm_flags(ioc);
2125 			rc = -ENODATA;
2126 			goto done_free_mem;
2127 		}
2128 
2129 	} else
2130 		mpt_put_msg_frame(mptctl_id, ioc, mf);
2131 
2132 	/* Now wait for the command to complete */
2133 	timeout = (karg.timeout > 0) ? karg.timeout : MPT_IOCTL_DEFAULT_TIMEOUT;
2134 	timeout = wait_event_interruptible_timeout(mptctl_wait,
2135 	     ioc->ioctl->wait_done == 1,
2136 	     HZ*timeout);
2137 
2138 	if(timeout <=0 && (ioc->ioctl->wait_done != 1 )) {
2139 	/* Now we need to reset the board */
2140 
2141 		if (hdr->Function == MPI_FUNCTION_SCSI_TASK_MGMT)
2142 			mptctl_free_tm_flags(ioc);
2143 
2144 		mptctl_timeout_expired(ioc->ioctl);
2145 		rc = -ENODATA;
2146 		goto done_free_mem;
2147 	}
2148 
2149 	mf = NULL;
2150 
2151 	/* If a valid reply frame, copy to the user.
2152 	 * Offset 2: reply length in U32's
2153 	 */
2154 	if (ioc->ioctl->status & MPT_IOCTL_STATUS_RF_VALID) {
2155 		if (karg.maxReplyBytes < ioc->reply_sz) {
2156 			 sz = min(karg.maxReplyBytes, 4*ioc->ioctl->ReplyFrame[2]);
2157 		} else {
2158 			 sz = min(ioc->reply_sz, 4*ioc->ioctl->ReplyFrame[2]);
2159 		}
2160 
2161 		if (sz > 0) {
2162 			if (copy_to_user(karg.replyFrameBufPtr,
2163 				 &ioc->ioctl->ReplyFrame, sz)){
2164 				 printk(KERN_ERR
2165 				     "%s@%d::mptctl_do_mpt_command - "
2166 				 "Unable to write out reply frame %p\n",
2167 				 __FILE__, __LINE__, karg.replyFrameBufPtr);
2168 				 rc =  -ENODATA;
2169 				 goto done_free_mem;
2170 			}
2171 		}
2172 	}
2173 
2174 	/* If valid sense data, copy to user.
2175 	 */
2176 	if (ioc->ioctl->status & MPT_IOCTL_STATUS_SENSE_VALID) {
2177 		sz = min(karg.maxSenseBytes, MPT_SENSE_BUFFER_SIZE);
2178 		if (sz > 0) {
2179 			if (copy_to_user(karg.senseDataPtr, ioc->ioctl->sense, sz)) {
2180 				printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
2181 				"Unable to write sense data to user %p\n",
2182 				__FILE__, __LINE__,
2183 				karg.senseDataPtr);
2184 				rc =  -ENODATA;
2185 				goto done_free_mem;
2186 			}
2187 		}
2188 	}
2189 
2190 	/* If the overall status is _GOOD and data in, copy data
2191 	 * to user.
2192 	 */
2193 	if ((ioc->ioctl->status & MPT_IOCTL_STATUS_COMMAND_GOOD) &&
2194 				(karg.dataInSize > 0) && (bufIn.kptr)) {
2195 
2196 		if (copy_to_user(karg.dataInBufPtr,
2197 				 bufIn.kptr, karg.dataInSize)) {
2198 			printk(KERN_ERR "%s@%d::mptctl_do_mpt_command - "
2199 				"Unable to write data to user %p\n",
2200 				__FILE__, __LINE__,
2201 				karg.dataInBufPtr);
2202 			rc =  -ENODATA;
2203 		}
2204 	}
2205 
2206 done_free_mem:
2207 
2208 	ioc->ioctl->status &= ~(MPT_IOCTL_STATUS_COMMAND_GOOD |
2209 		MPT_IOCTL_STATUS_SENSE_VALID |
2210 		MPT_IOCTL_STATUS_RF_VALID );
2211 
2212 	/* Free the allocated memory.
2213 	 */
2214 	if (bufOut.kptr != NULL) {
2215 		pci_free_consistent(ioc->pcidev,
2216 			bufOut.len, (void *) bufOut.kptr, dma_addr_out);
2217 	}
2218 
2219 	if (bufIn.kptr != NULL) {
2220 		pci_free_consistent(ioc->pcidev,
2221 			bufIn.len, (void *) bufIn.kptr, dma_addr_in);
2222 	}
2223 
2224 	/* mf is null if command issued successfully
2225 	 * otherwise, failure occured after mf acquired.
2226 	 */
2227 	if (mf)
2228 		mpt_free_msg_frame(ioc, mf);
2229 
2230 	return rc;
2231 }
2232 
2233 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2234 /* Prototype Routine for the HP HOST INFO command.
2235  *
2236  * Outputs:	None.
2237  * Return:	0 if successful
2238  *		-EFAULT if data unavailable
2239  *		-EBUSY  if previous command timout and IOC reset is not complete.
2240  *		-ENODEV if no such device/adapter
2241  *		-ETIME	if timer expires
2242  *		-ENOMEM if memory allocation error
2243  */
2244 static int
2245 mptctl_hp_hostinfo(unsigned long arg, unsigned int data_size)
2246 {
2247 	hp_host_info_t	__user *uarg = (void __user *) arg;
2248 	MPT_ADAPTER		*ioc;
2249 	struct pci_dev		*pdev;
2250 	char			*pbuf;
2251 	dma_addr_t		buf_dma;
2252 	hp_host_info_t		karg;
2253 	CONFIGPARMS		cfg;
2254 	ConfigPageHeader_t	hdr;
2255 	int			iocnum;
2256 	int			rc, cim_rev;
2257 
2258 	dctlprintk((": mptctl_hp_hostinfo called.\n"));
2259 	/* Reset long to int. Should affect IA64 and SPARC only
2260 	 */
2261 	if (data_size == sizeof(hp_host_info_t))
2262 		cim_rev = 1;
2263 	else if (data_size == sizeof(hp_host_info_rev0_t))
2264 		cim_rev = 0;	/* obsolete */
2265 	else
2266 		return -EFAULT;
2267 
2268 	if (copy_from_user(&karg, uarg, sizeof(hp_host_info_t))) {
2269 		printk(KERN_ERR "%s@%d::mptctl_hp_host_info - "
2270 			"Unable to read in hp_host_info struct @ %p\n",
2271 				__FILE__, __LINE__, uarg);
2272 		return -EFAULT;
2273 	}
2274 
2275 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
2276 	    (ioc == NULL)) {
2277 		dctlprintk((KERN_ERR "%s::mptctl_hp_hostinfo() @%d - ioc%d not found!\n",
2278 				__FILE__, __LINE__, iocnum));
2279 		return -ENODEV;
2280 	}
2281 
2282 	/* Fill in the data and return the structure to the calling
2283 	 * program
2284 	 */
2285 	pdev = (struct pci_dev *) ioc->pcidev;
2286 
2287 	karg.vendor = pdev->vendor;
2288 	karg.device = pdev->device;
2289 	karg.subsystem_id = pdev->subsystem_device;
2290 	karg.subsystem_vendor = pdev->subsystem_vendor;
2291 	karg.devfn = pdev->devfn;
2292 	karg.bus = pdev->bus->number;
2293 
2294 	/* Save the SCSI host no. if
2295 	 * SCSI driver loaded
2296 	 */
2297 	if (ioc->sh != NULL)
2298 		karg.host_no = ioc->sh->host_no;
2299 	else
2300 		karg.host_no =  -1;
2301 
2302 	/* Reformat the fw_version into a string
2303 	 */
2304 	karg.fw_version[0] = ioc->facts.FWVersion.Struct.Major >= 10 ?
2305 		((ioc->facts.FWVersion.Struct.Major / 10) + '0') : '0';
2306 	karg.fw_version[1] = (ioc->facts.FWVersion.Struct.Major % 10 ) + '0';
2307 	karg.fw_version[2] = '.';
2308 	karg.fw_version[3] = ioc->facts.FWVersion.Struct.Minor >= 10 ?
2309 		((ioc->facts.FWVersion.Struct.Minor / 10) + '0') : '0';
2310 	karg.fw_version[4] = (ioc->facts.FWVersion.Struct.Minor % 10 ) + '0';
2311 	karg.fw_version[5] = '.';
2312 	karg.fw_version[6] = ioc->facts.FWVersion.Struct.Unit >= 10 ?
2313 		((ioc->facts.FWVersion.Struct.Unit / 10) + '0') : '0';
2314 	karg.fw_version[7] = (ioc->facts.FWVersion.Struct.Unit % 10 ) + '0';
2315 	karg.fw_version[8] = '.';
2316 	karg.fw_version[9] = ioc->facts.FWVersion.Struct.Dev >= 10 ?
2317 		((ioc->facts.FWVersion.Struct.Dev / 10) + '0') : '0';
2318 	karg.fw_version[10] = (ioc->facts.FWVersion.Struct.Dev % 10 ) + '0';
2319 	karg.fw_version[11] = '\0';
2320 
2321 	/* Issue a config request to get the device serial number
2322 	 */
2323 	hdr.PageVersion = 0;
2324 	hdr.PageLength = 0;
2325 	hdr.PageNumber = 0;
2326 	hdr.PageType = MPI_CONFIG_PAGETYPE_MANUFACTURING;
2327 	cfg.hdr = &hdr;
2328 	cfg.physAddr = -1;
2329 	cfg.pageAddr = 0;
2330 	cfg.action = MPI_CONFIG_ACTION_PAGE_HEADER;
2331 	cfg.dir = 0;	/* read */
2332 	cfg.timeout = 10;
2333 
2334 	strncpy(karg.serial_number, " ", 24);
2335 	if (mpt_config(ioc, &cfg) == 0) {
2336 		if (cfg.hdr->PageLength > 0) {
2337 			/* Issue the second config page request */
2338 			cfg.action = MPI_CONFIG_ACTION_PAGE_READ_CURRENT;
2339 
2340 			pbuf = pci_alloc_consistent(ioc->pcidev, hdr.PageLength * 4, &buf_dma);
2341 			if (pbuf) {
2342 				cfg.physAddr = buf_dma;
2343 				if (mpt_config(ioc, &cfg) == 0) {
2344 					ManufacturingPage0_t *pdata = (ManufacturingPage0_t *) pbuf;
2345 					if (strlen(pdata->BoardTracerNumber) > 1) {
2346 						strncpy(karg.serial_number, 									    pdata->BoardTracerNumber, 24);
2347 						karg.serial_number[24-1]='\0';
2348 					}
2349 				}
2350 				pci_free_consistent(ioc->pcidev, hdr.PageLength * 4, pbuf, buf_dma);
2351 				pbuf = NULL;
2352 			}
2353 		}
2354 	}
2355 	rc = mpt_GetIocState(ioc, 1);
2356 	switch (rc) {
2357 	case MPI_IOC_STATE_OPERATIONAL:
2358 		karg.ioc_status =  HP_STATUS_OK;
2359 		break;
2360 
2361 	case MPI_IOC_STATE_FAULT:
2362 		karg.ioc_status =  HP_STATUS_FAILED;
2363 		break;
2364 
2365 	case MPI_IOC_STATE_RESET:
2366 	case MPI_IOC_STATE_READY:
2367 	default:
2368 		karg.ioc_status =  HP_STATUS_OTHER;
2369 		break;
2370 	}
2371 
2372 	karg.base_io_addr = pci_resource_start(pdev, 0);
2373 
2374 	if (ioc->bus_type == FC)
2375 		karg.bus_phys_width = HP_BUS_WIDTH_UNK;
2376 	else
2377 		karg.bus_phys_width = HP_BUS_WIDTH_16;
2378 
2379 	karg.hard_resets = 0;
2380 	karg.soft_resets = 0;
2381 	karg.timeouts = 0;
2382 	if (ioc->sh != NULL) {
2383 		MPT_SCSI_HOST *hd =  (MPT_SCSI_HOST *)ioc->sh->hostdata;
2384 
2385 		if (hd && (cim_rev == 1)) {
2386 			karg.hard_resets = hd->hard_resets;
2387 			karg.soft_resets = hd->soft_resets;
2388 			karg.timeouts = hd->timeouts;
2389 		}
2390 	}
2391 
2392 	cfg.pageAddr = 0;
2393 	cfg.action = MPI_TOOLBOX_ISTWI_READ_WRITE_TOOL;
2394 	cfg.dir = MPI_TB_ISTWI_FLAGS_READ;
2395 	cfg.timeout = 10;
2396 	pbuf = pci_alloc_consistent(ioc->pcidev, 4, &buf_dma);
2397 	if (pbuf) {
2398 		cfg.physAddr = buf_dma;
2399 		if ((mpt_toolbox(ioc, &cfg)) == 0) {
2400 			karg.rsvd = *(u32 *)pbuf;
2401 		}
2402 		pci_free_consistent(ioc->pcidev, 4, pbuf, buf_dma);
2403 		pbuf = NULL;
2404 	}
2405 
2406 	/* Copy the data from kernel memory to user memory
2407 	 */
2408 	if (copy_to_user((char __user *)arg, &karg, sizeof(hp_host_info_t))) {
2409 		printk(KERN_ERR "%s@%d::mptctl_hpgethostinfo - "
2410 			"Unable to write out hp_host_info @ %p\n",
2411 				__FILE__, __LINE__, uarg);
2412 		return -EFAULT;
2413 	}
2414 
2415 	return 0;
2416 
2417 }
2418 
2419 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2420 /* Prototype Routine for the HP TARGET INFO command.
2421  *
2422  * Outputs:	None.
2423  * Return:	0 if successful
2424  *		-EFAULT if data unavailable
2425  *		-EBUSY  if previous command timout and IOC reset is not complete.
2426  *		-ENODEV if no such device/adapter
2427  *		-ETIME	if timer expires
2428  *		-ENOMEM if memory allocation error
2429  */
2430 static int
2431 mptctl_hp_targetinfo(unsigned long arg)
2432 {
2433 	hp_target_info_t __user *uarg = (void __user *) arg;
2434 	SCSIDevicePage0_t	*pg0_alloc;
2435 	SCSIDevicePage3_t	*pg3_alloc;
2436 	MPT_ADAPTER		*ioc;
2437 	MPT_SCSI_HOST 		*hd = NULL;
2438 	hp_target_info_t	karg;
2439 	int			iocnum;
2440 	int			data_sz;
2441 	dma_addr_t		page_dma;
2442 	CONFIGPARMS	 	cfg;
2443 	ConfigPageHeader_t	hdr;
2444 	int			tmp, np, rc = 0;
2445 
2446 	dctlprintk((": mptctl_hp_targetinfo called.\n"));
2447 	if (copy_from_user(&karg, uarg, sizeof(hp_target_info_t))) {
2448 		printk(KERN_ERR "%s@%d::mptctl_hp_targetinfo - "
2449 			"Unable to read in hp_host_targetinfo struct @ %p\n",
2450 				__FILE__, __LINE__, uarg);
2451 		return -EFAULT;
2452 	}
2453 
2454 	if (((iocnum = mpt_verify_adapter(karg.hdr.iocnum, &ioc)) < 0) ||
2455 		(ioc == NULL)) {
2456 		dctlprintk((KERN_ERR "%s::mptctl_hp_targetinfo() @%d - ioc%d not found!\n",
2457 				__FILE__, __LINE__, iocnum));
2458 		return -ENODEV;
2459 	}
2460 
2461 	/*  There is nothing to do for FCP parts.
2462 	 */
2463 	if (ioc->bus_type == FC)
2464 		return 0;
2465 
2466 	if ((ioc->spi_data.sdp0length == 0) || (ioc->sh == NULL))
2467 		return 0;
2468 
2469 	if (ioc->sh->host_no != karg.hdr.host)
2470 		return -ENODEV;
2471 
2472        /* Get the data transfer speeds
2473         */
2474 	data_sz = ioc->spi_data.sdp0length * 4;
2475 	pg0_alloc = (SCSIDevicePage0_t *) pci_alloc_consistent(ioc->pcidev, data_sz, &page_dma);
2476 	if (pg0_alloc) {
2477 		hdr.PageVersion = ioc->spi_data.sdp0version;
2478 		hdr.PageLength = data_sz;
2479 		hdr.PageNumber = 0;
2480 		hdr.PageType = MPI_CONFIG_PAGETYPE_SCSI_DEVICE;
2481 
2482 		cfg.hdr = &hdr;
2483 		cfg.action = MPI_CONFIG_ACTION_PAGE_READ_CURRENT;
2484 		cfg.dir = 0;
2485 		cfg.timeout = 0;
2486 		cfg.physAddr = page_dma;
2487 
2488 		cfg.pageAddr = (karg.hdr.channel << 8) | karg.hdr.id;
2489 
2490 		if ((rc = mpt_config(ioc, &cfg)) == 0) {
2491 			np = le32_to_cpu(pg0_alloc->NegotiatedParameters);
2492 			karg.negotiated_width = np & MPI_SCSIDEVPAGE0_NP_WIDE ?
2493 					HP_BUS_WIDTH_16 : HP_BUS_WIDTH_8;
2494 
2495 			if (np & MPI_SCSIDEVPAGE0_NP_NEG_SYNC_OFFSET_MASK) {
2496 				tmp = (np & MPI_SCSIDEVPAGE0_NP_NEG_SYNC_PERIOD_MASK) >> 8;
2497 				if (tmp < 0x09)
2498 					karg.negotiated_speed = HP_DEV_SPEED_ULTRA320;
2499 				else if (tmp <= 0x09)
2500 					karg.negotiated_speed = HP_DEV_SPEED_ULTRA160;
2501 				else if (tmp <= 0x0A)
2502 					karg.negotiated_speed = HP_DEV_SPEED_ULTRA2;
2503 				else if (tmp <= 0x0C)
2504 					karg.negotiated_speed = HP_DEV_SPEED_ULTRA;
2505 				else if (tmp <= 0x25)
2506 					karg.negotiated_speed = HP_DEV_SPEED_FAST;
2507 				else
2508 					karg.negotiated_speed = HP_DEV_SPEED_ASYNC;
2509 			} else
2510 				karg.negotiated_speed = HP_DEV_SPEED_ASYNC;
2511 		}
2512 
2513 		pci_free_consistent(ioc->pcidev, data_sz, (u8 *) pg0_alloc, page_dma);
2514 	}
2515 
2516 	/* Set defaults
2517 	 */
2518 	karg.message_rejects = -1;
2519 	karg.phase_errors = -1;
2520 	karg.parity_errors = -1;
2521 	karg.select_timeouts = -1;
2522 
2523 	/* Get the target error parameters
2524 	 */
2525 	hdr.PageVersion = 0;
2526 	hdr.PageLength = 0;
2527 	hdr.PageNumber = 3;
2528 	hdr.PageType = MPI_CONFIG_PAGETYPE_SCSI_DEVICE;
2529 
2530 	cfg.hdr = &hdr;
2531 	cfg.action = MPI_CONFIG_ACTION_PAGE_HEADER;
2532 	cfg.dir = 0;
2533 	cfg.timeout = 0;
2534 	cfg.physAddr = -1;
2535 	if ((mpt_config(ioc, &cfg) == 0) && (cfg.hdr->PageLength > 0)) {
2536 		/* Issue the second config page request */
2537 		cfg.action = MPI_CONFIG_ACTION_PAGE_READ_CURRENT;
2538 		data_sz = (int) cfg.hdr->PageLength * 4;
2539 		pg3_alloc = (SCSIDevicePage3_t *) pci_alloc_consistent(
2540 							ioc->pcidev, data_sz, &page_dma);
2541 		if (pg3_alloc) {
2542 			cfg.physAddr = page_dma;
2543 			cfg.pageAddr = (karg.hdr.channel << 8) | karg.hdr.id;
2544 			if ((rc = mpt_config(ioc, &cfg)) == 0) {
2545 				karg.message_rejects = (u32) le16_to_cpu(pg3_alloc->MsgRejectCount);
2546 				karg.phase_errors = (u32) le16_to_cpu(pg3_alloc->PhaseErrorCount);
2547 				karg.parity_errors = (u32) le16_to_cpu(pg3_alloc->ParityErrorCount);
2548 			}
2549 			pci_free_consistent(ioc->pcidev, data_sz, (u8 *) pg3_alloc, page_dma);
2550 		}
2551 	}
2552 	hd = (MPT_SCSI_HOST *) ioc->sh->hostdata;
2553 	if (hd != NULL)
2554 		karg.select_timeouts = hd->sel_timeout[karg.hdr.id];
2555 
2556 	/* Copy the data from kernel memory to user memory
2557 	 */
2558 	if (copy_to_user((char __user *)arg, &karg, sizeof(hp_target_info_t))) {
2559 		printk(KERN_ERR "%s@%d::mptctl_hp_target_info - "
2560 			"Unable to write out mpt_ioctl_targetinfo struct @ %p\n",
2561 				__FILE__, __LINE__, uarg);
2562 		return -EFAULT;
2563 	}
2564 
2565 	return 0;
2566 }
2567 
2568 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2569 
2570 static struct file_operations mptctl_fops = {
2571 	.owner =	THIS_MODULE,
2572 	.llseek =	no_llseek,
2573 	.unlocked_ioctl = mptctl_ioctl,
2574 #ifdef CONFIG_COMPAT
2575 	.compat_ioctl = compat_mpctl_ioctl,
2576 #endif
2577 };
2578 
2579 static struct miscdevice mptctl_miscdev = {
2580 	MPT_MINOR,
2581 	MYNAM,
2582 	&mptctl_fops
2583 };
2584 
2585 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2586 
2587 #ifdef CONFIG_COMPAT
2588 
2589 #include <linux/ioctl32.h>
2590 
2591 static int
2592 compat_mptfwxfer_ioctl(struct file *filp, unsigned int cmd,
2593 			unsigned long arg)
2594 {
2595 	struct mpt_fw_xfer32 kfw32;
2596 	struct mpt_fw_xfer kfw;
2597 	MPT_ADAPTER *iocp = NULL;
2598 	int iocnum, iocnumX;
2599 	int nonblock = (filp->f_flags & O_NONBLOCK);
2600 	int ret;
2601 
2602 	dctlprintk((KERN_INFO MYNAM "::compat_mptfwxfer_ioctl() called\n"));
2603 
2604 	if (copy_from_user(&kfw32, (char __user *)arg, sizeof(kfw32)))
2605 		return -EFAULT;
2606 
2607 	/* Verify intended MPT adapter */
2608 	iocnumX = kfw32.iocnum & 0xFF;
2609 	if (((iocnum = mpt_verify_adapter(iocnumX, &iocp)) < 0) ||
2610 	    (iocp == NULL)) {
2611 		dctlprintk((KERN_ERR MYNAM "::compat_mptfwxfer_ioctl @%d - ioc%d not found!\n",
2612 				__LINE__, iocnumX));
2613 		return -ENODEV;
2614 	}
2615 
2616 	if ((ret = mptctl_syscall_down(iocp, nonblock)) != 0)
2617 		return ret;
2618 
2619 	kfw.iocnum = iocnum;
2620 	kfw.fwlen = kfw32.fwlen;
2621 	kfw.bufp = compat_ptr(kfw32.bufp);
2622 
2623 	ret = mptctl_do_fw_download(kfw.iocnum, kfw.bufp, kfw.fwlen);
2624 
2625 	up(&iocp->ioctl->sem_ioc);
2626 
2627 	return ret;
2628 }
2629 
2630 static int
2631 compat_mpt_command(struct file *filp, unsigned int cmd,
2632 			unsigned long arg)
2633 {
2634 	struct mpt_ioctl_command32 karg32;
2635 	struct mpt_ioctl_command32 __user *uarg = (struct mpt_ioctl_command32 __user *) arg;
2636 	struct mpt_ioctl_command karg;
2637 	MPT_ADAPTER *iocp = NULL;
2638 	int iocnum, iocnumX;
2639 	int nonblock = (filp->f_flags & O_NONBLOCK);
2640 	int ret;
2641 
2642 	dctlprintk((KERN_INFO MYNAM "::compat_mpt_command() called\n"));
2643 
2644 	if (copy_from_user(&karg32, (char __user *)arg, sizeof(karg32)))
2645 		return -EFAULT;
2646 
2647 	/* Verify intended MPT adapter */
2648 	iocnumX = karg32.hdr.iocnum & 0xFF;
2649 	if (((iocnum = mpt_verify_adapter(iocnumX, &iocp)) < 0) ||
2650 	    (iocp == NULL)) {
2651 		dctlprintk((KERN_ERR MYNAM "::compat_mpt_command @%d - ioc%d not found!\n",
2652 				__LINE__, iocnumX));
2653 		return -ENODEV;
2654 	}
2655 
2656 	if ((ret = mptctl_syscall_down(iocp, nonblock)) != 0)
2657 		return ret;
2658 
2659 	/* Copy data to karg */
2660 	karg.hdr.iocnum = karg32.hdr.iocnum;
2661 	karg.hdr.port = karg32.hdr.port;
2662 	karg.timeout = karg32.timeout;
2663 	karg.maxReplyBytes = karg32.maxReplyBytes;
2664 
2665 	karg.dataInSize = karg32.dataInSize;
2666 	karg.dataOutSize = karg32.dataOutSize;
2667 	karg.maxSenseBytes = karg32.maxSenseBytes;
2668 	karg.dataSgeOffset = karg32.dataSgeOffset;
2669 
2670 	karg.replyFrameBufPtr = (char __user *)(unsigned long)karg32.replyFrameBufPtr;
2671 	karg.dataInBufPtr = (char __user *)(unsigned long)karg32.dataInBufPtr;
2672 	karg.dataOutBufPtr = (char __user *)(unsigned long)karg32.dataOutBufPtr;
2673 	karg.senseDataPtr = (char __user *)(unsigned long)karg32.senseDataPtr;
2674 
2675 	/* Pass new structure to do_mpt_command
2676 	 */
2677 	ret = mptctl_do_mpt_command (karg, &uarg->MF);
2678 
2679 	up(&iocp->ioctl->sem_ioc);
2680 
2681 	return ret;
2682 }
2683 
2684 static long compat_mpctl_ioctl(struct file *f, unsigned int cmd, unsigned long arg)
2685 {
2686 	long ret;
2687 	lock_kernel();
2688 	switch (cmd) {
2689 	case MPTIOCINFO:
2690 	case MPTIOCINFO1:
2691 	case MPTIOCINFO2:
2692 	case MPTTARGETINFO:
2693 	case MPTEVENTQUERY:
2694 	case MPTEVENTENABLE:
2695 	case MPTEVENTREPORT:
2696 	case MPTHARDRESET:
2697 	case HP_GETHOSTINFO:
2698 	case HP_GETTARGETINFO:
2699 	case MPTTEST:
2700 		ret = __mptctl_ioctl(f, cmd, arg);
2701 		break;
2702 	case MPTCOMMAND32:
2703 		ret = compat_mpt_command(f, cmd, arg);
2704 		break;
2705 	case MPTFWDOWNLOAD32:
2706 		ret = compat_mptfwxfer_ioctl(f, cmd, arg);
2707 		break;
2708 	default:
2709 		ret = -ENOIOCTLCMD;
2710 		break;
2711 	}
2712 	unlock_kernel();
2713 	return ret;
2714 }
2715 
2716 #endif
2717 
2718 
2719 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2720 /*
2721  *	mptctl_probe - Installs ioctl devices per bus.
2722  *	@pdev: Pointer to pci_dev structure
2723  *
2724  *	Returns 0 for success, non-zero for failure.
2725  *
2726  */
2727 
2728 static int
2729 mptctl_probe(struct pci_dev *pdev, const struct pci_device_id *id)
2730 {
2731 	int err;
2732 	int sz;
2733 	u8 *mem;
2734 	MPT_ADAPTER *ioc = pci_get_drvdata(pdev);
2735 
2736 	/*
2737 	 * Allocate and inite a MPT_IOCTL structure
2738 	*/
2739 	sz = sizeof (MPT_IOCTL);
2740 	mem = kmalloc(sz, GFP_KERNEL);
2741 	if (mem == NULL) {
2742 		err = -ENOMEM;
2743 		goto out_fail;
2744 	}
2745 
2746 	memset(mem, 0, sz);
2747 	ioc->ioctl = (MPT_IOCTL *) mem;
2748 	ioc->ioctl->ioc = ioc;
2749 	sema_init(&ioc->ioctl->sem_ioc, 1);
2750 	return 0;
2751 
2752 out_fail:
2753 
2754 	mptctl_remove(pdev);
2755 	return err;
2756 }
2757 
2758 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2759 /*
2760  *	mptctl_remove - Removed ioctl devices
2761  *	@pdev: Pointer to pci_dev structure
2762  *
2763  *
2764  */
2765 static void
2766 mptctl_remove(struct pci_dev *pdev)
2767 {
2768 	MPT_ADAPTER *ioc = pci_get_drvdata(pdev);
2769 
2770 	kfree ( ioc->ioctl );
2771 }
2772 
2773 static struct mpt_pci_driver mptctl_driver = {
2774   .probe		= mptctl_probe,
2775   .remove		= mptctl_remove,
2776 };
2777 
2778 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2779 static int __init mptctl_init(void)
2780 {
2781 	int err;
2782 	int where = 1;
2783 
2784 	show_mptmod_ver(my_NAME, my_VERSION);
2785 
2786 	if(mpt_device_driver_register(&mptctl_driver,
2787 	  MPTCTL_DRIVER) != 0 ) {
2788 		dprintk((KERN_INFO MYNAM
2789 		": failed to register dd callbacks\n"));
2790 	}
2791 
2792 	/* Register this device */
2793 	err = misc_register(&mptctl_miscdev);
2794 	if (err < 0) {
2795 		printk(KERN_ERR MYNAM ": Can't register misc device [minor=%d].\n", MPT_MINOR);
2796 		goto out_fail;
2797 	}
2798 	printk(KERN_INFO MYNAM ": Registered with Fusion MPT base driver\n");
2799 	printk(KERN_INFO MYNAM ": /dev/%s @ (major,minor=%d,%d)\n",
2800 			 mptctl_miscdev.name, MISC_MAJOR, mptctl_miscdev.minor);
2801 
2802 	/*
2803 	 *  Install our handler
2804 	 */
2805 	++where;
2806 	if ((mptctl_id = mpt_register(mptctl_reply, MPTCTL_DRIVER)) < 0) {
2807 		printk(KERN_ERR MYNAM ": ERROR: Failed to register with Fusion MPT base driver\n");
2808 		misc_deregister(&mptctl_miscdev);
2809 		err = -EBUSY;
2810 		goto out_fail;
2811 	}
2812 
2813 	if (mpt_reset_register(mptctl_id, mptctl_ioc_reset) == 0) {
2814 		dprintk((KERN_INFO MYNAM ": Registered for IOC reset notifications\n"));
2815 	} else {
2816 		/* FIXME! */
2817 	}
2818 
2819 	return 0;
2820 
2821 out_fail:
2822 
2823 	mpt_device_driver_deregister(MPTCTL_DRIVER);
2824 
2825 	return err;
2826 }
2827 
2828 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2829 static void mptctl_exit(void)
2830 {
2831 	misc_deregister(&mptctl_miscdev);
2832 	printk(KERN_INFO MYNAM ": Deregistered /dev/%s @ (major,minor=%d,%d)\n",
2833 			 mptctl_miscdev.name, MISC_MAJOR, mptctl_miscdev.minor);
2834 
2835 	/* De-register reset handler from base module */
2836 	mpt_reset_deregister(mptctl_id);
2837 	dprintk((KERN_INFO MYNAM ": Deregistered for IOC reset notifications\n"));
2838 
2839 	/* De-register callback handler from base module */
2840 	mpt_deregister(mptctl_id);
2841 	printk(KERN_INFO MYNAM ": Deregistered from Fusion MPT base driver\n");
2842 
2843         mpt_device_driver_deregister(MPTCTL_DRIVER);
2844 
2845 }
2846 
2847 /*=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=*/
2848 
2849 module_init(mptctl_init);
2850 module_exit(mptctl_exit);
2851