xref: /titanic_52/usr/src/uts/common/io/e1000g/e1000g_tx.c (revision c90a5fbe436d54a1d69dbcf41c7f1cc7b2834a18)
1 /*
2  * This file is provided under a CDDLv1 license.  When using or
3  * redistributing this file, you may do so under this license.
4  * In redistributing this file this license must be included
5  * and no other modification of this header file is permitted.
6  *
7  * CDDL LICENSE SUMMARY
8  *
9  * Copyright(c) 1999 - 2009 Intel Corporation. All rights reserved.
10  *
11  * The contents of this file are subject to the terms of Version
12  * 1.0 of the Common Development and Distribution License (the "License").
13  *
14  * You should have received a copy of the License with this software.
15  * You can obtain a copy of the License at
16  *	http://www.opensolaris.org/os/licensing.
17  * See the License for the specific language governing permissions
18  * and limitations under the License.
19  */
20 
21 /*
22  * Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 /*
27  * **********************************************************************
28  *									*
29  * Module Name:								*
30  *   e1000g_tx.c							*
31  *									*
32  * Abstract:								*
33  *   This file contains some routines that take care of Transmit,	*
34  *   make the hardware to send the data pointed by the packet out	*
35  *   on to the physical medium.						*
36  *									*
37  * **********************************************************************
38  */
39 
40 #include "e1000g_sw.h"
41 #include "e1000g_debug.h"
42 
43 static boolean_t e1000g_send(struct e1000g *, mblk_t *);
44 static int e1000g_tx_copy(e1000g_tx_ring_t *,
45     p_tx_sw_packet_t, mblk_t *, boolean_t);
46 static int e1000g_tx_bind(e1000g_tx_ring_t *,
47     p_tx_sw_packet_t, mblk_t *);
48 static boolean_t e1000g_retrieve_context(mblk_t *, context_data_t *, size_t);
49 static boolean_t e1000g_check_context(e1000g_tx_ring_t *, context_data_t *);
50 static int e1000g_fill_tx_ring(e1000g_tx_ring_t *, LIST_DESCRIBER *,
51     context_data_t *);
52 static void e1000g_fill_context_descriptor(context_data_t *,
53     struct e1000_context_desc *);
54 static int e1000g_fill_tx_desc(e1000g_tx_ring_t *,
55     p_tx_sw_packet_t, uint64_t, size_t);
56 static uint32_t e1000g_fill_82544_desc(uint64_t Address, size_t Length,
57     p_desc_array_t desc_array);
58 static int e1000g_tx_workaround_PCIX_82544(p_tx_sw_packet_t, uint64_t, size_t);
59 static int e1000g_tx_workaround_jumbo_82544(p_tx_sw_packet_t, uint64_t, size_t);
60 static void e1000g_82547_timeout(void *);
61 static void e1000g_82547_tx_move_tail(e1000g_tx_ring_t *);
62 static void e1000g_82547_tx_move_tail_work(e1000g_tx_ring_t *);
63 
64 #ifndef E1000G_DEBUG
65 #pragma inline(e1000g_tx_copy)
66 #pragma inline(e1000g_tx_bind)
67 #pragma inline(e1000g_retrieve_context)
68 #pragma inline(e1000g_check_context)
69 #pragma inline(e1000g_fill_tx_ring)
70 #pragma inline(e1000g_fill_context_descriptor)
71 #pragma inline(e1000g_fill_tx_desc)
72 #pragma inline(e1000g_fill_82544_desc)
73 #pragma inline(e1000g_tx_workaround_PCIX_82544)
74 #pragma inline(e1000g_tx_workaround_jumbo_82544)
75 #pragma inline(e1000g_free_tx_swpkt)
76 #endif
77 
78 /*
79  * e1000g_free_tx_swpkt	- free up the tx sw packet
80  *
81  * Unbind the previously bound DMA handle for a given
82  * transmit sw packet. And reset the sw packet data.
83  */
84 void
85 e1000g_free_tx_swpkt(register p_tx_sw_packet_t packet)
86 {
87 	switch (packet->data_transfer_type) {
88 	case USE_BCOPY:
89 		packet->tx_buf->len = 0;
90 		break;
91 #ifdef __sparc
92 	case USE_DVMA:
93 		dvma_unload(packet->tx_dma_handle, 0, -1);
94 		break;
95 #endif
96 	case USE_DMA:
97 		(void) ddi_dma_unbind_handle(packet->tx_dma_handle);
98 		break;
99 	default:
100 		break;
101 	}
102 
103 	/*
104 	 * The mblk has been stripped off the sw packet
105 	 * and will be freed in a triggered soft intr.
106 	 */
107 	ASSERT(packet->mp == NULL);
108 
109 	packet->data_transfer_type = USE_NONE;
110 	packet->num_mblk_frag = 0;
111 	packet->num_desc = 0;
112 }
113 
114 mblk_t *
115 e1000g_m_tx(void *arg, mblk_t *mp)
116 {
117 	struct e1000g *Adapter = (struct e1000g *)arg;
118 	mblk_t *next;
119 
120 	rw_enter(&Adapter->chip_lock, RW_READER);
121 
122 	if ((Adapter->e1000g_state & E1000G_SUSPENDED) ||
123 	    !(Adapter->e1000g_state & E1000G_STARTED) ||
124 	    (Adapter->link_state != LINK_STATE_UP)) {
125 		freemsgchain(mp);
126 		mp = NULL;
127 	}
128 
129 	while (mp != NULL) {
130 		next = mp->b_next;
131 		mp->b_next = NULL;
132 
133 		if (!e1000g_send(Adapter, mp)) {
134 			mp->b_next = next;
135 			break;
136 		}
137 
138 		mp = next;
139 	}
140 
141 	rw_exit(&Adapter->chip_lock);
142 	return (mp);
143 }
144 
145 /*
146  * e1000g_send -  send packets onto the wire
147  *
148  * Called from e1000g_m_tx with an mblk ready to send. this
149  * routine sets up the transmit descriptors and sends data to
150  * the wire. It also pushes the just transmitted packet to
151  * the used tx sw packet list.
152  */
153 static boolean_t
154 e1000g_send(struct e1000g *Adapter, mblk_t *mp)
155 {
156 	p_tx_sw_packet_t packet;
157 	LIST_DESCRIBER pending_list;
158 	size_t len;
159 	size_t msg_size;
160 	uint32_t frag_count;
161 	int desc_count;
162 	uint32_t desc_total;
163 	uint32_t bcopy_thresh;
164 	uint32_t hdr_frag_len;
165 	boolean_t tx_undersize_flag;
166 	mblk_t *nmp;
167 	mblk_t *tmp;
168 	mblk_t *new_mp;
169 	mblk_t *pre_mp;
170 	e1000g_tx_ring_t *tx_ring;
171 	context_data_t cur_context;
172 
173 	tx_ring = Adapter->tx_ring;
174 	bcopy_thresh = Adapter->tx_bcopy_thresh;
175 
176 	/* Get the total size and frags number of the message */
177 	tx_undersize_flag = B_FALSE;
178 	frag_count = 0;
179 	msg_size = 0;
180 	for (nmp = mp; nmp; nmp = nmp->b_cont) {
181 		frag_count++;
182 		msg_size += MBLKL(nmp);
183 	}
184 
185 	/* retrieve and compute information for context descriptor */
186 	if (!e1000g_retrieve_context(mp, &cur_context, msg_size)) {
187 		freemsg(mp);
188 		return (B_TRUE);
189 	}
190 
191 	/*
192 	 * Make sure the packet is less than the allowed size
193 	 */
194 	if (!cur_context.lso_flag &&
195 	    (msg_size > Adapter->max_frame_size - ETHERFCSL)) {
196 		/*
197 		 * For the over size packet, we'll just drop it.
198 		 * So we return B_TRUE here.
199 		 */
200 		E1000G_DEBUGLOG_1(Adapter, E1000G_WARN_LEVEL,
201 		    "Tx packet out of bound. length = %d \n", msg_size);
202 		E1000G_STAT(tx_ring->stat_over_size);
203 		freemsg(mp);
204 		return (B_TRUE);
205 	}
206 
207 	/*
208 	 * Check and reclaim tx descriptors.
209 	 * This low water mark check should be done all the time as
210 	 * Transmit interrupt delay can produce Transmit interrupts little
211 	 * late and that may cause few problems related to reaping Tx
212 	 * Descriptors... As you may run short of them before getting any
213 	 * transmit interrupt...
214 	 */
215 	if (tx_ring->tbd_avail < DEFAULT_TX_NO_RESOURCE) {
216 		(void) e1000g_recycle(tx_ring);
217 		E1000G_DEBUG_STAT(tx_ring->stat_recycle);
218 
219 		if (tx_ring->tbd_avail < DEFAULT_TX_NO_RESOURCE) {
220 			E1000G_DEBUG_STAT(tx_ring->stat_lack_desc);
221 			goto tx_no_resource;
222 		}
223 	}
224 
225 	/*
226 	 * If the message size is less than the minimum ethernet packet size,
227 	 * we'll use bcopy to send it, and padd it to 60 bytes later.
228 	 */
229 	if (msg_size < ETHERMIN) {
230 		E1000G_DEBUG_STAT(tx_ring->stat_under_size);
231 		tx_undersize_flag = B_TRUE;
232 	}
233 
234 	/* Initialize variables */
235 	desc_count = 1;	/* The initial value should be greater than 0 */
236 	desc_total = 0;
237 	QUEUE_INIT_LIST(&pending_list);
238 
239 	/* Process each mblk fragment and fill tx descriptors */
240 	/*
241 	 * The software should guarantee LSO packet header(MAC+IP+TCP)
242 	 * to be within one descriptor. Here we reallocate and refill the
243 	 * the header if it's physical memory non-contiguous.
244 	 */
245 	if (cur_context.lso_flag) {
246 		/* find the last fragment of the header */
247 		len = MBLKL(mp);
248 		ASSERT(len > 0);
249 		nmp = mp;
250 		pre_mp = NULL;
251 		while (len < cur_context.hdr_len) {
252 			pre_mp = nmp;
253 			nmp = nmp->b_cont;
254 			len += MBLKL(nmp);
255 		}
256 		/*
257 		 * If the header and the payload are in different mblks,
258 		 * we simply force the header to be copied into pre-allocated
259 		 * page-aligned buffer.
260 		 */
261 		if (len == cur_context.hdr_len)
262 			goto adjust_threshold;
263 
264 		hdr_frag_len = cur_context.hdr_len - (len - MBLKL(nmp));
265 		/*
266 		 * There are two cases we need to reallocate a mblk for the
267 		 * last header fragment:
268 		 * 1. the header is in multiple mblks and the last fragment
269 		 * share the same mblk with the payload
270 		 * 2. the header is in a single mblk shared with the payload
271 		 * and the header is physical memory non-contiguous
272 		 */
273 		if ((nmp != mp) ||
274 		    (P2NPHASE((uintptr_t)nmp->b_rptr, Adapter->sys_page_sz)
275 		    < cur_context.hdr_len)) {
276 			E1000G_DEBUG_STAT(tx_ring->stat_lso_header_fail);
277 			/*
278 			 * reallocate the mblk for the last header fragment,
279 			 * expect to bcopy into pre-allocated page-aligned
280 			 * buffer
281 			 */
282 			new_mp = allocb(hdr_frag_len, NULL);
283 			if (!new_mp)
284 				return (B_FALSE);
285 			bcopy(nmp->b_rptr, new_mp->b_rptr, hdr_frag_len);
286 			/* link the new header fragment with the other parts */
287 			new_mp->b_wptr = new_mp->b_rptr + hdr_frag_len;
288 			new_mp->b_cont = nmp;
289 			if (pre_mp)
290 				pre_mp->b_cont = new_mp;
291 			else
292 				mp = new_mp;
293 			nmp->b_rptr += hdr_frag_len;
294 			frag_count ++;
295 		}
296 adjust_threshold:
297 		/*
298 		 * adjust the bcopy threshhold to guarantee
299 		 * the header to use bcopy way
300 		 */
301 		if (bcopy_thresh < cur_context.hdr_len)
302 			bcopy_thresh = cur_context.hdr_len;
303 	}
304 
305 	packet = NULL;
306 	nmp = mp;
307 	while (nmp) {
308 		tmp = nmp->b_cont;
309 
310 		len = MBLKL(nmp);
311 		/* Check zero length mblks */
312 		if (len == 0) {
313 			E1000G_DEBUG_STAT(tx_ring->stat_empty_frags);
314 			/*
315 			 * If there're no packet buffers have been used,
316 			 * or we just completed processing a buffer, then
317 			 * skip the empty mblk fragment.
318 			 * Otherwise, there's still a pending buffer that
319 			 * needs to be processed (tx_copy).
320 			 */
321 			if (desc_count > 0) {
322 				nmp = tmp;
323 				continue;
324 			}
325 		}
326 
327 		/*
328 		 * Get a new TxSwPacket to process mblk buffers.
329 		 */
330 		if (desc_count > 0) {
331 			mutex_enter(&tx_ring->freelist_lock);
332 			packet = (p_tx_sw_packet_t)
333 			    QUEUE_POP_HEAD(&tx_ring->free_list);
334 			mutex_exit(&tx_ring->freelist_lock);
335 
336 			if (packet == NULL) {
337 				E1000G_DEBUGLOG_0(Adapter, E1000G_INFO_LEVEL,
338 				    "No Tx SwPacket available\n");
339 				E1000G_STAT(tx_ring->stat_no_swpkt);
340 				goto tx_send_failed;
341 			}
342 			QUEUE_PUSH_TAIL(&pending_list, &packet->Link);
343 		}
344 
345 		ASSERT(packet);
346 		/*
347 		 * If the size of the fragment is less than the tx_bcopy_thresh
348 		 * we'll use bcopy; Otherwise, we'll use DMA binding.
349 		 */
350 		if ((len <= bcopy_thresh) || tx_undersize_flag) {
351 			desc_count =
352 			    e1000g_tx_copy(tx_ring, packet, nmp,
353 			    tx_undersize_flag);
354 			E1000G_DEBUG_STAT(tx_ring->stat_copy);
355 		} else {
356 			desc_count =
357 			    e1000g_tx_bind(tx_ring, packet, nmp);
358 			E1000G_DEBUG_STAT(tx_ring->stat_bind);
359 		}
360 
361 		if (desc_count > 0)
362 			desc_total += desc_count;
363 		else if (desc_count < 0)
364 			goto tx_send_failed;
365 
366 		nmp = tmp;
367 	}
368 
369 	/* Assign the message to the last sw packet */
370 	ASSERT(packet);
371 	ASSERT(packet->mp == NULL);
372 	packet->mp = mp;
373 
374 	/* Try to recycle the tx descriptors again */
375 	if (tx_ring->tbd_avail < (desc_total + 2)) {
376 		E1000G_DEBUG_STAT(tx_ring->stat_recycle_retry);
377 		(void) e1000g_recycle(tx_ring);
378 	}
379 
380 	mutex_enter(&tx_ring->tx_lock);
381 
382 	/*
383 	 * If the number of available tx descriptors is not enough for transmit
384 	 * (one redundant descriptor and one hw checksum context descriptor are
385 	 * included), then return failure.
386 	 */
387 	if (tx_ring->tbd_avail < (desc_total + 2)) {
388 		E1000G_DEBUGLOG_0(Adapter, E1000G_INFO_LEVEL,
389 		    "No Enough Tx descriptors\n");
390 		E1000G_STAT(tx_ring->stat_no_desc);
391 		mutex_exit(&tx_ring->tx_lock);
392 		goto tx_send_failed;
393 	}
394 
395 	desc_count = e1000g_fill_tx_ring(tx_ring, &pending_list, &cur_context);
396 
397 	mutex_exit(&tx_ring->tx_lock);
398 
399 	ASSERT(desc_count > 0);
400 
401 	/* Send successful */
402 	return (B_TRUE);
403 
404 tx_send_failed:
405 	/*
406 	 * Enable Transmit interrupts, so that the interrupt routine can
407 	 * call mac_tx_update() when transmit descriptors become available.
408 	 */
409 	tx_ring->resched_timestamp = ddi_get_lbolt();
410 	tx_ring->resched_needed = B_TRUE;
411 	if (!Adapter->tx_intr_enable)
412 		e1000g_mask_tx_interrupt(Adapter);
413 
414 	/* Free pending TxSwPackets */
415 	packet = (p_tx_sw_packet_t)QUEUE_GET_HEAD(&pending_list);
416 	while (packet) {
417 		packet->mp = NULL;
418 		e1000g_free_tx_swpkt(packet);
419 		packet = (p_tx_sw_packet_t)
420 		    QUEUE_GET_NEXT(&pending_list, &packet->Link);
421 	}
422 
423 	/* Return pending TxSwPackets to the "Free" list */
424 	mutex_enter(&tx_ring->freelist_lock);
425 	QUEUE_APPEND(&tx_ring->free_list, &pending_list);
426 	mutex_exit(&tx_ring->freelist_lock);
427 
428 	E1000G_STAT(tx_ring->stat_send_fail);
429 
430 	/* Message will be scheduled for re-transmit */
431 	return (B_FALSE);
432 
433 tx_no_resource:
434 	/*
435 	 * Enable Transmit interrupts, so that the interrupt routine can
436 	 * call mac_tx_update() when transmit descriptors become available.
437 	 */
438 	tx_ring->resched_timestamp = ddi_get_lbolt();
439 	tx_ring->resched_needed = B_TRUE;
440 	if (!Adapter->tx_intr_enable)
441 		e1000g_mask_tx_interrupt(Adapter);
442 
443 	/* Message will be scheduled for re-transmit */
444 	return (B_FALSE);
445 }
446 
447 static boolean_t
448 e1000g_retrieve_context(mblk_t *mp, context_data_t *cur_context,
449     size_t msg_size)
450 {
451 	uintptr_t ip_start;
452 	uintptr_t tcp_start;
453 	mblk_t *nmp;
454 	uint32_t lsoflags;
455 	uint32_t mss;
456 
457 	bzero(cur_context, sizeof (context_data_t));
458 
459 	/* first check lso information */
460 	lso_info_get(mp, &mss, &lsoflags);
461 
462 	/* retrieve checksum info */
463 	hcksum_retrieve(mp, NULL, NULL, &cur_context->cksum_start,
464 	    &cur_context->cksum_stuff, NULL, NULL, &cur_context->cksum_flags);
465 	/* retrieve ethernet header size */
466 	if (((struct ether_vlan_header *)(uintptr_t)mp->b_rptr)->ether_tpid ==
467 	    htons(ETHERTYPE_VLAN))
468 		cur_context->ether_header_size =
469 		    sizeof (struct ether_vlan_header);
470 	else
471 		cur_context->ether_header_size =
472 		    sizeof (struct ether_header);
473 
474 	if (lsoflags & HW_LSO) {
475 		ASSERT(mss != 0);
476 
477 		/* free the invalid packet */
478 		if (mss == 0 ||
479 		    !((cur_context->cksum_flags & HCK_PARTIALCKSUM) &&
480 		    (cur_context->cksum_flags & HCK_IPV4_HDRCKSUM))) {
481 			return (B_FALSE);
482 		}
483 		cur_context->mss = (uint16_t)mss;
484 		cur_context->lso_flag = B_TRUE;
485 
486 		/*
487 		 * Some fields are cleared for the hardware to fill
488 		 * in. We don't assume Ethernet header, IP header and
489 		 * TCP header are always in the same mblk fragment,
490 		 * while we assume each header is always within one
491 		 * mblk fragment and Ethernet header is always in the
492 		 * first mblk fragment.
493 		 */
494 		nmp = mp;
495 		ip_start = (uintptr_t)(nmp->b_rptr)
496 		    + cur_context->ether_header_size;
497 		if (ip_start >= (uintptr_t)(nmp->b_wptr)) {
498 			ip_start = (uintptr_t)nmp->b_cont->b_rptr
499 			    + (ip_start - (uintptr_t)(nmp->b_wptr));
500 			nmp = nmp->b_cont;
501 		}
502 		tcp_start = ip_start +
503 		    IPH_HDR_LENGTH((ipha_t *)ip_start);
504 		if (tcp_start >= (uintptr_t)(nmp->b_wptr)) {
505 			tcp_start = (uintptr_t)nmp->b_cont->b_rptr
506 			    + (tcp_start - (uintptr_t)(nmp->b_wptr));
507 			nmp = nmp->b_cont;
508 		}
509 		cur_context->hdr_len = cur_context->ether_header_size
510 		    + IPH_HDR_LENGTH((ipha_t *)ip_start)
511 		    + TCP_HDR_LENGTH((tcph_t *)tcp_start);
512 		((ipha_t *)ip_start)->ipha_length = 0;
513 		((ipha_t *)ip_start)->ipha_hdr_checksum = 0;
514 		/* calculate the TCP packet payload length */
515 		cur_context->pay_len = msg_size - cur_context->hdr_len;
516 	}
517 	return (B_TRUE);
518 }
519 
520 static boolean_t
521 e1000g_check_context(e1000g_tx_ring_t *tx_ring, context_data_t *cur_context)
522 {
523 	boolean_t context_reload;
524 	context_data_t *pre_context;
525 	struct e1000g *Adapter;
526 
527 	context_reload = B_FALSE;
528 	pre_context = &tx_ring->pre_context;
529 	Adapter = tx_ring->adapter;
530 
531 	/*
532 	 * The following code determine if the context descriptor is
533 	 * needed to be reloaded. The sequence of the conditions is
534 	 * made by their possibilities of changing.
535 	 */
536 	/*
537 	 * workaround for 82546EB, context descriptor must be reloaded
538 	 * per LSO/hw_cksum packet if LSO is enabled.
539 	 */
540 	if (Adapter->lso_premature_issue &&
541 	    Adapter->lso_enable &&
542 	    (cur_context->cksum_flags != 0)) {
543 
544 		context_reload = B_TRUE;
545 	} else if (cur_context->lso_flag) {
546 		if ((cur_context->lso_flag != pre_context->lso_flag) ||
547 		    (cur_context->cksum_flags != pre_context->cksum_flags) ||
548 		    (cur_context->pay_len != pre_context->pay_len) ||
549 		    (cur_context->mss != pre_context->mss) ||
550 		    (cur_context->hdr_len != pre_context->hdr_len) ||
551 		    (cur_context->cksum_stuff != pre_context->cksum_stuff) ||
552 		    (cur_context->cksum_start != pre_context->cksum_start) ||
553 		    (cur_context->ether_header_size !=
554 		    pre_context->ether_header_size)) {
555 
556 			context_reload = B_TRUE;
557 		}
558 	} else if (cur_context->cksum_flags != 0) {
559 		if ((cur_context->lso_flag != pre_context->lso_flag) ||
560 		    (cur_context->cksum_flags != pre_context->cksum_flags) ||
561 		    (cur_context->cksum_stuff != pre_context->cksum_stuff) ||
562 		    (cur_context->cksum_start != pre_context->cksum_start) ||
563 		    (cur_context->ether_header_size !=
564 		    pre_context->ether_header_size)) {
565 
566 			context_reload = B_TRUE;
567 		}
568 	}
569 
570 	return (context_reload);
571 }
572 
573 static int
574 e1000g_fill_tx_ring(e1000g_tx_ring_t *tx_ring, LIST_DESCRIBER *pending_list,
575     context_data_t *cur_context)
576 {
577 	struct e1000g *Adapter;
578 	struct e1000_hw *hw;
579 	p_tx_sw_packet_t first_packet;
580 	p_tx_sw_packet_t packet;
581 	p_tx_sw_packet_t previous_packet;
582 	boolean_t context_reload;
583 	struct e1000_tx_desc *first_data_desc;
584 	struct e1000_tx_desc *next_desc;
585 	struct e1000_tx_desc *descriptor;
586 	int desc_count;
587 	boolean_t buff_overrun_flag;
588 	int i;
589 
590 	Adapter = tx_ring->adapter;
591 	hw = &Adapter->shared;
592 
593 	desc_count = 0;
594 	first_packet = NULL;
595 	first_data_desc = NULL;
596 	descriptor = NULL;
597 	first_packet = NULL;
598 	packet = NULL;
599 	buff_overrun_flag = B_FALSE;
600 
601 	next_desc = tx_ring->tbd_next;
602 
603 	/* Context descriptor reload check */
604 	context_reload = e1000g_check_context(tx_ring, cur_context);
605 
606 	if (context_reload) {
607 		first_packet = (p_tx_sw_packet_t)QUEUE_GET_HEAD(pending_list);
608 
609 		descriptor = next_desc;
610 
611 		e1000g_fill_context_descriptor(cur_context,
612 		    (struct e1000_context_desc *)descriptor);
613 
614 		/* Check the wrap-around case */
615 		if (descriptor == tx_ring->tbd_last)
616 			next_desc = tx_ring->tbd_first;
617 		else
618 			next_desc++;
619 
620 		desc_count++;
621 	}
622 
623 	first_data_desc = next_desc;
624 
625 	packet = (p_tx_sw_packet_t)QUEUE_GET_HEAD(pending_list);
626 	while (packet) {
627 		ASSERT(packet->num_desc);
628 
629 		for (i = 0; i < packet->num_desc; i++) {
630 			ASSERT(tx_ring->tbd_avail > 0);
631 
632 			descriptor = next_desc;
633 			descriptor->buffer_addr =
634 			    packet->desc[i].address;
635 			descriptor->lower.data =
636 			    packet->desc[i].length;
637 
638 			/* Zero out status */
639 			descriptor->upper.data = 0;
640 
641 			descriptor->lower.data |=
642 			    E1000_TXD_CMD_DEXT | E1000_TXD_DTYP_D;
643 			/* must set RS on every outgoing descriptor */
644 			descriptor->lower.data |=
645 			    E1000_TXD_CMD_RS;
646 
647 			if (cur_context->lso_flag)
648 				descriptor->lower.data |= E1000_TXD_CMD_TSE;
649 
650 			/* Check the wrap-around case */
651 			if (descriptor == tx_ring->tbd_last)
652 				next_desc = tx_ring->tbd_first;
653 			else
654 				next_desc++;
655 
656 			desc_count++;
657 
658 			/*
659 			 * workaround for 82546EB errata 33, hang in PCI-X
660 			 * systems due to 2k Buffer Overrun during Transmit
661 			 * Operation. The workaround applies to all the Intel
662 			 * PCI-X chips.
663 			 */
664 			if (hw->bus.type == e1000_bus_type_pcix &&
665 			    descriptor == first_data_desc &&
666 			    ((descriptor->lower.data & E1000G_TBD_LENGTH_MASK)
667 			    > E1000_TX_BUFFER_OEVRRUN_THRESHOLD)) {
668 				/* modified the first descriptor */
669 				descriptor->lower.data &=
670 				    ~E1000G_TBD_LENGTH_MASK;
671 				descriptor->lower.flags.length =
672 				    E1000_TX_BUFFER_OEVRRUN_THRESHOLD;
673 
674 				/* insert a new descriptor */
675 				ASSERT(tx_ring->tbd_avail > 0);
676 				next_desc->buffer_addr =
677 				    packet->desc[0].address +
678 				    E1000_TX_BUFFER_OEVRRUN_THRESHOLD;
679 				next_desc->lower.data =
680 				    packet->desc[0].length -
681 				    E1000_TX_BUFFER_OEVRRUN_THRESHOLD;
682 
683 				/* Zero out status */
684 				next_desc->upper.data = 0;
685 
686 				next_desc->lower.data |=
687 				    E1000_TXD_CMD_DEXT | E1000_TXD_DTYP_D;
688 				/* must set RS on every outgoing descriptor */
689 				next_desc->lower.data |=
690 				    E1000_TXD_CMD_RS;
691 
692 				if (cur_context->lso_flag)
693 					next_desc->lower.data |=
694 					    E1000_TXD_CMD_TSE;
695 
696 				descriptor = next_desc;
697 
698 				/* Check the wrap-around case */
699 				if (next_desc == tx_ring->tbd_last)
700 					next_desc = tx_ring->tbd_first;
701 				else
702 					next_desc++;
703 
704 				desc_count++;
705 				buff_overrun_flag = B_TRUE;
706 			}
707 		}
708 
709 		if (buff_overrun_flag) {
710 			packet->num_desc++;
711 			buff_overrun_flag = B_FALSE;
712 		}
713 
714 		if (first_packet != NULL) {
715 			/*
716 			 * Count the checksum context descriptor for
717 			 * the first SwPacket.
718 			 */
719 			first_packet->num_desc++;
720 			first_packet = NULL;
721 		}
722 
723 		packet->tickstamp = lbolt64;
724 
725 		previous_packet = packet;
726 		packet = (p_tx_sw_packet_t)
727 		    QUEUE_GET_NEXT(pending_list, &packet->Link);
728 	}
729 
730 	/*
731 	 * workaround for 82546EB errata 21, LSO Premature Descriptor Write Back
732 	 */
733 	if (Adapter->lso_premature_issue && cur_context->lso_flag &&
734 	    ((descriptor->lower.data & E1000G_TBD_LENGTH_MASK) > 8)) {
735 		/* modified the previous descriptor */
736 		descriptor->lower.data -= 4;
737 
738 		/* insert a new descriptor */
739 		ASSERT(tx_ring->tbd_avail > 0);
740 		/* the lower 20 bits of lower.data is the length field */
741 		next_desc->buffer_addr =
742 		    descriptor->buffer_addr +
743 		    (descriptor->lower.data & E1000G_TBD_LENGTH_MASK);
744 		next_desc->lower.data = 4;
745 
746 		/* Zero out status */
747 		next_desc->upper.data = 0;
748 		/* It must be part of a LSO packet */
749 		next_desc->lower.data |=
750 		    E1000_TXD_CMD_DEXT | E1000_TXD_DTYP_D |
751 		    E1000_TXD_CMD_RS | E1000_TXD_CMD_TSE;
752 
753 		descriptor = next_desc;
754 
755 		/* Check the wrap-around case */
756 		if (descriptor == tx_ring->tbd_last)
757 			next_desc = tx_ring->tbd_first;
758 		else
759 			next_desc++;
760 
761 		desc_count++;
762 		/* update the number of descriptors */
763 		previous_packet->num_desc++;
764 	}
765 
766 	ASSERT(descriptor);
767 
768 	if (cur_context->cksum_flags) {
769 		if (cur_context->cksum_flags & HCK_IPV4_HDRCKSUM)
770 			((struct e1000_data_desc *)first_data_desc)->
771 			    upper.fields.popts |= E1000_TXD_POPTS_IXSM;
772 		if (cur_context->cksum_flags & HCK_PARTIALCKSUM)
773 			((struct e1000_data_desc *)first_data_desc)->
774 			    upper.fields.popts |= E1000_TXD_POPTS_TXSM;
775 	}
776 
777 	/*
778 	 * Last Descriptor of Packet needs End Of Packet (EOP), Report
779 	 * Status (RS) set.
780 	 */
781 	if (Adapter->tx_intr_delay) {
782 		descriptor->lower.data |= E1000_TXD_CMD_IDE |
783 		    E1000_TXD_CMD_EOP;
784 	} else {
785 		descriptor->lower.data |= E1000_TXD_CMD_EOP;
786 	}
787 
788 	/* Set append Ethernet CRC (IFCS) bits */
789 	if (cur_context->lso_flag) {
790 		first_data_desc->lower.data |= E1000_TXD_CMD_IFCS;
791 	} else {
792 		descriptor->lower.data |= E1000_TXD_CMD_IFCS;
793 	}
794 
795 	/*
796 	 * Sync the Tx descriptors DMA buffer
797 	 */
798 	(void) ddi_dma_sync(tx_ring->tbd_dma_handle,
799 	    0, 0, DDI_DMA_SYNC_FORDEV);
800 
801 	tx_ring->tbd_next = next_desc;
802 
803 	/*
804 	 * Advance the Transmit Descriptor Tail (Tdt), this tells the
805 	 * FX1000 that this frame is available to transmit.
806 	 */
807 	if (hw->mac.type == e1000_82547)
808 		e1000g_82547_tx_move_tail(tx_ring);
809 	else
810 		E1000_WRITE_REG(hw, E1000_TDT(0),
811 		    (uint32_t)(next_desc - tx_ring->tbd_first));
812 
813 	if (e1000g_check_acc_handle(Adapter->osdep.reg_handle) != DDI_FM_OK) {
814 		ddi_fm_service_impact(Adapter->dip, DDI_SERVICE_DEGRADED);
815 		Adapter->e1000g_state |= E1000G_ERROR;
816 	}
817 
818 	/* Put the pending SwPackets to the "Used" list */
819 	mutex_enter(&tx_ring->usedlist_lock);
820 	QUEUE_APPEND(&tx_ring->used_list, pending_list);
821 	tx_ring->tbd_avail -= desc_count;
822 	mutex_exit(&tx_ring->usedlist_lock);
823 
824 	/* update LSO related data */
825 	if (context_reload)
826 		tx_ring->pre_context = *cur_context;
827 
828 	return (desc_count);
829 }
830 
831 /*
832  * e1000g_tx_setup - setup tx data structures
833  *
834  * This routine initializes all of the transmit related
835  * structures. This includes the Transmit descriptors,
836  * and the tx_sw_packet structures.
837  */
838 void
839 e1000g_tx_setup(struct e1000g *Adapter)
840 {
841 	struct e1000_hw *hw;
842 	p_tx_sw_packet_t packet;
843 	uint32_t i;
844 	uint32_t buf_high;
845 	uint32_t buf_low;
846 	uint32_t reg_tipg;
847 	uint32_t reg_tctl;
848 	int size;
849 	e1000g_tx_ring_t *tx_ring;
850 
851 	hw = &Adapter->shared;
852 	tx_ring = Adapter->tx_ring;
853 
854 	/* init the lists */
855 	/*
856 	 * Here we don't need to protect the lists using the
857 	 * usedlist_lock and freelist_lock, for they have
858 	 * been protected by the chip_lock.
859 	 */
860 	QUEUE_INIT_LIST(&tx_ring->used_list);
861 	QUEUE_INIT_LIST(&tx_ring->free_list);
862 
863 	/* Go through and set up each SW_Packet */
864 	packet = tx_ring->packet_area;
865 	for (i = 0; i < Adapter->tx_freelist_num; i++, packet++) {
866 		/* Initialize this tx_sw_apcket area */
867 		e1000g_free_tx_swpkt(packet);
868 		/* Add this tx_sw_packet to the free list */
869 		QUEUE_PUSH_TAIL(&tx_ring->free_list,
870 		    &packet->Link);
871 	}
872 
873 	/* Setup TX descriptor pointers */
874 	tx_ring->tbd_next = tx_ring->tbd_first;
875 	tx_ring->tbd_oldest = tx_ring->tbd_first;
876 
877 	/*
878 	 * Setup Hardware TX Registers
879 	 */
880 	/* Setup the Transmit Control Register (TCTL). */
881 	reg_tctl = E1000_READ_REG(hw, E1000_TCTL);
882 	reg_tctl |= E1000_TCTL_PSP | E1000_TCTL_EN |
883 	    (E1000_COLLISION_THRESHOLD << E1000_CT_SHIFT) |
884 	    (E1000_COLLISION_DISTANCE << E1000_COLD_SHIFT) |
885 	    E1000_TCTL_RTLC;
886 
887 	/* Enable the MULR bit */
888 	if (hw->bus.type == e1000_bus_type_pci_express)
889 		reg_tctl |= E1000_TCTL_MULR;
890 
891 	E1000_WRITE_REG(hw, E1000_TCTL, reg_tctl);
892 
893 	/* Setup HW Base and Length of Tx descriptor area */
894 	size = (Adapter->tx_desc_num * sizeof (struct e1000_tx_desc));
895 	E1000_WRITE_REG(hw, E1000_TDLEN(0), size);
896 	size = E1000_READ_REG(hw, E1000_TDLEN(0));
897 
898 	buf_low = (uint32_t)tx_ring->tbd_dma_addr;
899 	buf_high = (uint32_t)(tx_ring->tbd_dma_addr >> 32);
900 
901 	/*
902 	 * Write the highest location first and work backward to the lowest.
903 	 * This is necessary for some adapter types to
904 	 * prevent write combining from occurring.
905 	 */
906 	E1000_WRITE_REG(hw, E1000_TDBAH(0), buf_high);
907 	E1000_WRITE_REG(hw, E1000_TDBAL(0), buf_low);
908 
909 	/* Setup our HW Tx Head & Tail descriptor pointers */
910 	E1000_WRITE_REG(hw, E1000_TDH(0), 0);
911 	E1000_WRITE_REG(hw, E1000_TDT(0), 0);
912 
913 	/* Set the default values for the Tx Inter Packet Gap timer */
914 	if ((hw->mac.type == e1000_82542) &&
915 	    ((hw->revision_id == E1000_REVISION_2) ||
916 	    (hw->revision_id == E1000_REVISION_3))) {
917 		reg_tipg = DEFAULT_82542_TIPG_IPGT;
918 		reg_tipg |=
919 		    DEFAULT_82542_TIPG_IPGR1 << E1000_TIPG_IPGR1_SHIFT;
920 		reg_tipg |=
921 		    DEFAULT_82542_TIPG_IPGR2 << E1000_TIPG_IPGR2_SHIFT;
922 	} else if (hw->mac.type == e1000_80003es2lan) {
923 		reg_tipg = DEFAULT_82543_TIPG_IPGR1;
924 		reg_tipg |= DEFAULT_80003ES2LAN_TIPG_IPGR2 <<
925 		    E1000_TIPG_IPGR2_SHIFT;
926 	} else {
927 		if (hw->phy.media_type == e1000_media_type_fiber)
928 			reg_tipg = DEFAULT_82543_TIPG_IPGT_FIBER;
929 		else
930 			reg_tipg = DEFAULT_82543_TIPG_IPGT_COPPER;
931 		reg_tipg |=
932 		    DEFAULT_82543_TIPG_IPGR1 << E1000_TIPG_IPGR1_SHIFT;
933 		reg_tipg |=
934 		    DEFAULT_82543_TIPG_IPGR2 << E1000_TIPG_IPGR2_SHIFT;
935 	}
936 	E1000_WRITE_REG(hw, E1000_TIPG, reg_tipg);
937 
938 	/* Setup Transmit Interrupt Delay Value */
939 	E1000_WRITE_REG(hw, E1000_TIDV, Adapter->tx_intr_delay);
940 	E1000G_DEBUGLOG_1(Adapter, E1000G_INFO_LEVEL,
941 	    "E1000_TIDV: 0x%x\n", Adapter->tx_intr_delay);
942 
943 	if (hw->mac.type >= e1000_82540) {
944 		E1000_WRITE_REG(&Adapter->shared, E1000_TADV,
945 		    Adapter->tx_intr_abs_delay);
946 		E1000G_DEBUGLOG_1(Adapter, E1000G_INFO_LEVEL,
947 		    "E1000_TADV: 0x%x\n", Adapter->tx_intr_abs_delay);
948 	}
949 
950 	tx_ring->tbd_avail = Adapter->tx_desc_num;
951 
952 	/* Initialize stored context information */
953 	bzero(&(tx_ring->pre_context), sizeof (context_data_t));
954 }
955 
956 /*
957  * e1000g_recycle - recycle the tx descriptors and tx sw packets
958  */
959 int
960 e1000g_recycle(e1000g_tx_ring_t *tx_ring)
961 {
962 	struct e1000g *Adapter;
963 	LIST_DESCRIBER pending_list;
964 	p_tx_sw_packet_t packet;
965 	mblk_t *mp;
966 	mblk_t *nmp;
967 	struct e1000_tx_desc *descriptor;
968 	int desc_count;
969 	int64_t delta;
970 
971 	/*
972 	 * This function will examine each TxSwPacket in the 'used' queue
973 	 * if the e1000g is done with it then the associated resources (Tx
974 	 * Descriptors) will be "freed" and the TxSwPacket will be
975 	 * returned to the 'free' queue.
976 	 */
977 	Adapter = tx_ring->adapter;
978 	delta = 0;
979 
980 	packet = (p_tx_sw_packet_t)QUEUE_GET_HEAD(&tx_ring->used_list);
981 	if (packet == NULL) {
982 		Adapter->stall_flag = B_FALSE;
983 		return (0);
984 	}
985 
986 	desc_count = 0;
987 	QUEUE_INIT_LIST(&pending_list);
988 
989 	/* Sync the Tx descriptor DMA buffer */
990 	(void) ddi_dma_sync(tx_ring->tbd_dma_handle,
991 	    0, 0, DDI_DMA_SYNC_FORKERNEL);
992 	if (e1000g_check_dma_handle(
993 	    tx_ring->tbd_dma_handle) != DDI_FM_OK) {
994 		ddi_fm_service_impact(Adapter->dip, DDI_SERVICE_DEGRADED);
995 		Adapter->e1000g_state |= E1000G_ERROR;
996 		return (0);
997 	}
998 
999 	/*
1000 	 * While there are still TxSwPackets in the used queue check them
1001 	 */
1002 	mutex_enter(&tx_ring->usedlist_lock);
1003 	while ((packet =
1004 	    (p_tx_sw_packet_t)QUEUE_GET_HEAD(&tx_ring->used_list)) != NULL) {
1005 
1006 		/*
1007 		 * Get hold of the next descriptor that the e1000g will
1008 		 * report status back to (this will be the last descriptor
1009 		 * of a given sw packet). We only want to free the
1010 		 * sw packet (and it resources) if the e1000g is done
1011 		 * with ALL of the descriptors.  If the e1000g is done
1012 		 * with the last one then it is done with all of them.
1013 		 */
1014 		ASSERT(packet->num_desc);
1015 		descriptor = tx_ring->tbd_oldest + (packet->num_desc - 1);
1016 
1017 		/* Check for wrap case */
1018 		if (descriptor > tx_ring->tbd_last)
1019 			descriptor -= Adapter->tx_desc_num;
1020 
1021 		/*
1022 		 * If the descriptor done bit is set free TxSwPacket and
1023 		 * associated resources
1024 		 */
1025 		if (descriptor->upper.fields.status & E1000_TXD_STAT_DD) {
1026 			QUEUE_POP_HEAD(&tx_ring->used_list);
1027 			QUEUE_PUSH_TAIL(&pending_list, &packet->Link);
1028 
1029 			if (descriptor == tx_ring->tbd_last)
1030 				tx_ring->tbd_oldest =
1031 				    tx_ring->tbd_first;
1032 			else
1033 				tx_ring->tbd_oldest =
1034 				    descriptor + 1;
1035 
1036 			desc_count += packet->num_desc;
1037 		} else {
1038 			/*
1039 			 * Found a sw packet that the e1000g is not done
1040 			 * with then there is no reason to check the rest
1041 			 * of the queue.
1042 			 */
1043 			delta = lbolt64 - packet->tickstamp;
1044 			break;
1045 		}
1046 	}
1047 
1048 	tx_ring->tbd_avail += desc_count;
1049 	Adapter->tx_pkt_cnt += desc_count;
1050 
1051 	mutex_exit(&tx_ring->usedlist_lock);
1052 
1053 	if (desc_count == 0) {
1054 		E1000G_DEBUG_STAT(tx_ring->stat_recycle_none);
1055 		/*
1056 		 * If the packet hasn't been sent out for seconds and
1057 		 * the transmitter is not under paused flowctrl condition,
1058 		 * the transmitter is considered to be stalled.
1059 		 */
1060 		if ((delta > Adapter->stall_threshold) &&
1061 		    !(E1000_READ_REG(&Adapter->shared,
1062 		    E1000_STATUS) & E1000_STATUS_TXOFF)) {
1063 			Adapter->stall_flag = B_TRUE;
1064 		}
1065 		return (0);
1066 	}
1067 
1068 	Adapter->stall_flag = B_FALSE;
1069 
1070 	mp = NULL;
1071 	nmp = NULL;
1072 	packet = (p_tx_sw_packet_t)QUEUE_GET_HEAD(&pending_list);
1073 	ASSERT(packet != NULL);
1074 	while (packet != NULL) {
1075 		if (packet->mp != NULL) {
1076 			ASSERT(packet->mp->b_next == NULL);
1077 			/* Assemble the message chain */
1078 			if (mp == NULL) {
1079 				mp = packet->mp;
1080 				nmp = packet->mp;
1081 			} else {
1082 				nmp->b_next = packet->mp;
1083 				nmp = packet->mp;
1084 			}
1085 			/* Disconnect the message from the sw packet */
1086 			packet->mp = NULL;
1087 		}
1088 
1089 		/* Free the TxSwPackets */
1090 		e1000g_free_tx_swpkt(packet);
1091 
1092 		packet = (p_tx_sw_packet_t)
1093 		    QUEUE_GET_NEXT(&pending_list, &packet->Link);
1094 	}
1095 
1096 	/* Return the TxSwPackets back to the FreeList */
1097 	mutex_enter(&tx_ring->freelist_lock);
1098 	QUEUE_APPEND(&tx_ring->free_list, &pending_list);
1099 	mutex_exit(&tx_ring->freelist_lock);
1100 
1101 	if (mp != NULL)
1102 		freemsgchain(mp);
1103 
1104 	return (desc_count);
1105 }
1106 /*
1107  * 82544 Coexistence issue workaround:
1108  *    There are 2 issues.
1109  *    1. If a 32 bit split completion happens from P64H2 and another
1110  *	agent drives a 64 bit request/split completion after ONLY
1111  *	1 idle clock (BRCM/Emulex/Adaptec fiber channel cards) then
1112  *	82544 has a problem where in to clock all the data in, it
1113  *	looks at REQ64# signal and since it has changed so fast (i.e. 1
1114  *	idle clock turn around), it will fail to clock all the data in.
1115  *	Data coming from certain ending addresses has exposure to this issue.
1116  *
1117  * To detect this issue, following equation can be used...
1118  *	SIZE[3:0] + ADDR[2:0] = SUM[3:0].
1119  *	If SUM[3:0] is in between 1 to 4, we will have this issue.
1120  *
1121  * ROOT CAUSE:
1122  *	The erratum involves the 82544 PCIX elasticity FIFO implementations as
1123  *	64-bit FIFO's and flushing of the final partial-bytes corresponding
1124  *	to the end of a requested read burst. Under a specific burst condition
1125  *	of ending-data alignment and 32-byte split-completions, the final
1126  *	byte(s) of split-completion data require an extra clock cycle to flush
1127  *	into 64-bit FIFO orientation.  An incorrect logic dependency on the
1128  *	REQ64# signal occurring during during this clock cycle may cause the
1129  *	residual byte(s) to be lost, thereby rendering the internal DMA client
1130  *	forever awaiting the final byte(s) for an outbound data-fetch.  The
1131  *	erratum is confirmed to *only* occur if certain subsequent external
1132  *	64-bit PCIX bus transactions occur immediately (minimum possible bus
1133  *	turn- around) following the odd-aligned 32-bit split-completion
1134  *	containing the final byte(s).  Intel has confirmed that this has been
1135  *	seen only with chipset/bridges which have the capability to provide
1136  *	32-bit split-completion data, and in the presence of newer PCIX bus
1137  *	agents which fully-optimize the inter-transaction turn-around (zero
1138  *	additional initiator latency when pre-granted bus ownership).
1139  *
1140  *   	This issue does not exist in PCI bus mode, when any agent is operating
1141  *	in 32 bit only mode or on chipsets that do not do 32 bit split
1142  *	completions for 64 bit read requests (Serverworks chipsets). P64H2 does
1143  *	32 bit split completions for any read request that has bit 2 set to 1
1144  *	for the requested address and read request size is more than 8 bytes.
1145  *
1146  *   2. Another issue is related to 82544 driving DACs under the similar
1147  *	scenario (32 bit split completion followed by 64 bit transaction with
1148  *	only 1 cycle turnaround). This issue is still being root caused. We
1149  *	think that both of these issues can be avoided if following workaround
1150  *	is implemented. It seems DAC issues is related to ending addresses being
1151  *	0x9, 0xA, 0xB, 0xC and hence ending up at odd boundaries in elasticity
1152  *	FIFO which does not get flushed due to REQ64# dependency. We will only
1153  *	know the full story after it has been simulated successfully by HW team.
1154  *
1155  * WORKAROUND:
1156  *	Make sure we do not have ending address as 1,2,3,4(Hang) or 9,a,b,c(DAC)
1157  */
1158 static uint32_t
1159 e1000g_fill_82544_desc(uint64_t address,
1160     size_t length, p_desc_array_t desc_array)
1161 {
1162 	/*
1163 	 * Since issue is sensitive to length and address.
1164 	 * Let us first check the address...
1165 	 */
1166 	uint32_t safe_terminator;
1167 
1168 	if (length <= 4) {
1169 		desc_array->descriptor[0].address = address;
1170 		desc_array->descriptor[0].length = (uint32_t)length;
1171 		desc_array->elements = 1;
1172 		return (desc_array->elements);
1173 	}
1174 	safe_terminator =
1175 	    (uint32_t)((((uint32_t)address & 0x7) +
1176 	    (length & 0xF)) & 0xF);
1177 	/*
1178 	 * if it does not fall between 0x1 to 0x4 and 0x9 to 0xC then
1179 	 * return
1180 	 */
1181 	if (safe_terminator == 0 ||
1182 	    (safe_terminator > 4 && safe_terminator < 9) ||
1183 	    (safe_terminator > 0xC && safe_terminator <= 0xF)) {
1184 		desc_array->descriptor[0].address = address;
1185 		desc_array->descriptor[0].length = (uint32_t)length;
1186 		desc_array->elements = 1;
1187 		return (desc_array->elements);
1188 	}
1189 
1190 	desc_array->descriptor[0].address = address;
1191 	desc_array->descriptor[0].length = length - 4;
1192 	desc_array->descriptor[1].address = address + (length - 4);
1193 	desc_array->descriptor[1].length = 4;
1194 	desc_array->elements = 2;
1195 	return (desc_array->elements);
1196 }
1197 
1198 static int
1199 e1000g_tx_copy(e1000g_tx_ring_t *tx_ring, p_tx_sw_packet_t packet,
1200     mblk_t *mp, boolean_t tx_undersize_flag)
1201 {
1202 	size_t len;
1203 	size_t len1;
1204 	dma_buffer_t *tx_buf;
1205 	mblk_t *nmp;
1206 	boolean_t finished;
1207 	int desc_count;
1208 
1209 	desc_count = 0;
1210 	tx_buf = packet->tx_buf;
1211 	len = MBLKL(mp);
1212 
1213 	ASSERT((tx_buf->len + len) <= tx_buf->size);
1214 
1215 	if (len > 0) {
1216 		bcopy(mp->b_rptr,
1217 		    tx_buf->address + tx_buf->len,
1218 		    len);
1219 		tx_buf->len += len;
1220 
1221 		packet->num_mblk_frag++;
1222 	}
1223 
1224 	nmp = mp->b_cont;
1225 	if (nmp == NULL) {
1226 		finished = B_TRUE;
1227 	} else {
1228 		len1 = MBLKL(nmp);
1229 		if ((tx_buf->len + len1) > tx_buf->size)
1230 			finished = B_TRUE;
1231 		else if (tx_undersize_flag)
1232 			finished = B_FALSE;
1233 		else if (len1 > tx_ring->adapter->tx_bcopy_thresh)
1234 			finished = B_TRUE;
1235 		else
1236 			finished = B_FALSE;
1237 	}
1238 
1239 	if (finished) {
1240 		E1000G_DEBUG_STAT_COND(tx_ring->stat_multi_copy,
1241 		    (tx_buf->len > len));
1242 
1243 		/*
1244 		 * If the packet is smaller than 64 bytes, which is the
1245 		 * minimum ethernet packet size, pad the packet to make
1246 		 * it at least 60 bytes. The hardware will add 4 bytes
1247 		 * for CRC.
1248 		 */
1249 		if (tx_undersize_flag) {
1250 			ASSERT(tx_buf->len < ETHERMIN);
1251 
1252 			bzero(tx_buf->address + tx_buf->len,
1253 			    ETHERMIN - tx_buf->len);
1254 			tx_buf->len = ETHERMIN;
1255 		}
1256 
1257 #ifdef __sparc
1258 		if (packet->dma_type == USE_DVMA)
1259 			dvma_sync(tx_buf->dma_handle, 0, DDI_DMA_SYNC_FORDEV);
1260 		else
1261 			(void) ddi_dma_sync(tx_buf->dma_handle, 0,
1262 			    tx_buf->len, DDI_DMA_SYNC_FORDEV);
1263 #else
1264 		(void) ddi_dma_sync(tx_buf->dma_handle, 0,
1265 		    tx_buf->len, DDI_DMA_SYNC_FORDEV);
1266 #endif
1267 
1268 		packet->data_transfer_type = USE_BCOPY;
1269 
1270 		desc_count = e1000g_fill_tx_desc(tx_ring,
1271 		    packet,
1272 		    tx_buf->dma_address,
1273 		    tx_buf->len);
1274 
1275 		if (desc_count <= 0)
1276 			return (-1);
1277 	}
1278 
1279 	return (desc_count);
1280 }
1281 
1282 static int
1283 e1000g_tx_bind(e1000g_tx_ring_t *tx_ring, p_tx_sw_packet_t packet, mblk_t *mp)
1284 {
1285 	int j;
1286 	int mystat;
1287 	size_t len;
1288 	ddi_dma_cookie_t dma_cookie;
1289 	uint_t ncookies;
1290 	int desc_count;
1291 	uint32_t desc_total;
1292 
1293 	desc_total = 0;
1294 	len = MBLKL(mp);
1295 
1296 	/*
1297 	 * ddi_dma_addr_bind_handle() allocates  DMA  resources  for  a
1298 	 * memory  object such that a device can perform DMA to or from
1299 	 * the object.  DMA resources  are  allocated  considering  the
1300 	 * device's  DMA  attributes  as  expressed by ddi_dma_attr(9S)
1301 	 * (see ddi_dma_alloc_handle(9F)).
1302 	 *
1303 	 * ddi_dma_addr_bind_handle() fills in  the  first  DMA  cookie
1304 	 * pointed  to by cookiep with the appropriate address, length,
1305 	 * and bus type. *ccountp is set to the number of DMA  cookies
1306 	 * representing this DMA object. Subsequent DMA cookies must be
1307 	 * retrieved by calling ddi_dma_nextcookie(9F)  the  number  of
1308 	 * times specified by *countp - 1.
1309 	 */
1310 	switch (packet->dma_type) {
1311 #ifdef __sparc
1312 	case USE_DVMA:
1313 		dvma_kaddr_load(packet->tx_dma_handle,
1314 		    (caddr_t)mp->b_rptr, len, 0, &dma_cookie);
1315 
1316 		dvma_sync(packet->tx_dma_handle, 0,
1317 		    DDI_DMA_SYNC_FORDEV);
1318 
1319 		ncookies = 1;
1320 		packet->data_transfer_type = USE_DVMA;
1321 		break;
1322 #endif
1323 	case USE_DMA:
1324 		if ((mystat = ddi_dma_addr_bind_handle(
1325 		    packet->tx_dma_handle, NULL,
1326 		    (caddr_t)mp->b_rptr, len,
1327 		    DDI_DMA_WRITE | DDI_DMA_STREAMING,
1328 		    DDI_DMA_DONTWAIT, 0, &dma_cookie,
1329 		    &ncookies)) != DDI_DMA_MAPPED) {
1330 
1331 			e1000g_log(tx_ring->adapter, CE_WARN,
1332 			    "Couldn't bind mblk buffer to Tx DMA handle: "
1333 			    "return: %X, Pkt: %X\n",
1334 			    mystat, packet);
1335 			return (-1);
1336 		}
1337 
1338 		/*
1339 		 * An implicit ddi_dma_sync() is done when the
1340 		 * ddi_dma_addr_bind_handle() is called. So we
1341 		 * don't need to explicitly call ddi_dma_sync()
1342 		 * here any more.
1343 		 */
1344 		ASSERT(ncookies);
1345 		E1000G_DEBUG_STAT_COND(tx_ring->stat_multi_cookie,
1346 		    (ncookies > 1));
1347 
1348 		/*
1349 		 * The data_transfer_type value must be set after the handle
1350 		 * has been bound, for it will be used in e1000g_free_tx_swpkt()
1351 		 * to decide whether we need to unbind the handle.
1352 		 */
1353 		packet->data_transfer_type = USE_DMA;
1354 		break;
1355 	default:
1356 		ASSERT(B_FALSE);
1357 		break;
1358 	}
1359 
1360 	packet->num_mblk_frag++;
1361 
1362 	/*
1363 	 * Each address could span thru multpile cookie..
1364 	 * Each cookie will have one descriptor
1365 	 */
1366 	for (j = ncookies; j != 0; j--) {
1367 
1368 		desc_count = e1000g_fill_tx_desc(tx_ring,
1369 		    packet,
1370 		    dma_cookie.dmac_laddress,
1371 		    dma_cookie.dmac_size);
1372 
1373 		if (desc_count <= 0)
1374 			return (-1);
1375 
1376 		desc_total += desc_count;
1377 
1378 		/*
1379 		 * ddi_dma_nextcookie() retrieves subsequent DMA
1380 		 * cookies for a DMA object.
1381 		 * ddi_dma_nextcookie() fills in the
1382 		 * ddi_dma_cookie(9S) structure pointed to by
1383 		 * cookiep.  The ddi_dma_cookie(9S) structure
1384 		 * must be allocated prior to calling
1385 		 * ddi_dma_nextcookie(). The DMA cookie count
1386 		 * returned by ddi_dma_buf_bind_handle(9F),
1387 		 * ddi_dma_addr_bind_handle(9F), or
1388 		 * ddi_dma_getwin(9F) indicates the number of DMA
1389 		 * cookies a DMA object consists of.  If the
1390 		 * resulting cookie count, N, is larger than 1,
1391 		 * ddi_dma_nextcookie() must be called N-1 times
1392 		 * to retrieve all DMA cookies.
1393 		 */
1394 		if (j > 1) {
1395 			ddi_dma_nextcookie(packet->tx_dma_handle,
1396 			    &dma_cookie);
1397 		}
1398 	}
1399 
1400 	return (desc_total);
1401 }
1402 
1403 static void
1404 e1000g_fill_context_descriptor(context_data_t *cur_context,
1405     struct e1000_context_desc *context_desc)
1406 {
1407 	if (cur_context->cksum_flags & HCK_IPV4_HDRCKSUM) {
1408 		context_desc->lower_setup.ip_fields.ipcss =
1409 		    cur_context->ether_header_size;
1410 		context_desc->lower_setup.ip_fields.ipcso =
1411 		    cur_context->ether_header_size +
1412 		    offsetof(struct ip, ip_sum);
1413 		context_desc->lower_setup.ip_fields.ipcse =
1414 		    cur_context->ether_header_size +
1415 		    cur_context->cksum_start - 1;
1416 	} else
1417 		context_desc->lower_setup.ip_config = 0;
1418 
1419 	if (cur_context->cksum_flags & HCK_PARTIALCKSUM) {
1420 		/*
1421 		 * The packet with same protocol has the following
1422 		 * stuff and start offset:
1423 		 * |  Protocol  | Stuff  | Start  | Checksum
1424 		 * |		| Offset | Offset | Enable
1425 		 * | IPv4 + TCP |  0x24  |  0x14  |  Yes
1426 		 * | IPv4 + UDP |  0x1A  |  0x14  |  Yes
1427 		 * | IPv6 + TCP |  0x20  |  0x10  |  No
1428 		 * | IPv6 + UDP |  0x14  |  0x10  |  No
1429 		 */
1430 		context_desc->upper_setup.tcp_fields.tucss =
1431 		    cur_context->cksum_start + cur_context->ether_header_size;
1432 		context_desc->upper_setup.tcp_fields.tucso =
1433 		    cur_context->cksum_stuff + cur_context->ether_header_size;
1434 		context_desc->upper_setup.tcp_fields.tucse = 0;
1435 	} else
1436 		context_desc->upper_setup.tcp_config = 0;
1437 
1438 	if (cur_context->lso_flag) {
1439 		context_desc->tcp_seg_setup.fields.mss = cur_context->mss;
1440 		context_desc->tcp_seg_setup.fields.hdr_len =
1441 		    cur_context->hdr_len;
1442 		/*
1443 		 * workaround for 82546EB errata 23, status-writeback
1444 		 * reporting (RS) should not be set on context or
1445 		 * Null descriptors
1446 		 */
1447 		context_desc->cmd_and_length = E1000_TXD_CMD_DEXT
1448 		    | E1000_TXD_CMD_TSE | E1000_TXD_CMD_IP | E1000_TXD_CMD_TCP
1449 		    | E1000_TXD_DTYP_C | cur_context->pay_len;
1450 	} else {
1451 		context_desc->cmd_and_length = E1000_TXD_CMD_DEXT
1452 		    | E1000_TXD_DTYP_C;
1453 		/*
1454 		 * Zero out the options for TCP Segmentation Offload
1455 		 */
1456 		context_desc->tcp_seg_setup.data = 0;
1457 	}
1458 }
1459 
1460 static int
1461 e1000g_fill_tx_desc(e1000g_tx_ring_t *tx_ring,
1462     p_tx_sw_packet_t packet, uint64_t address, size_t size)
1463 {
1464 	struct e1000_hw *hw = &tx_ring->adapter->shared;
1465 	p_sw_desc_t desc;
1466 
1467 	if (hw->mac.type == e1000_82544) {
1468 		if (hw->bus.type == e1000_bus_type_pcix)
1469 			return (e1000g_tx_workaround_PCIX_82544(packet,
1470 			    address, size));
1471 
1472 		if (size > JUMBO_FRAG_LENGTH)
1473 			return (e1000g_tx_workaround_jumbo_82544(packet,
1474 			    address, size));
1475 	}
1476 
1477 	ASSERT(packet->num_desc < MAX_TX_DESC_PER_PACKET);
1478 
1479 	desc = &packet->desc[packet->num_desc];
1480 	desc->address = address;
1481 	desc->length = (uint32_t)size;
1482 
1483 	packet->num_desc++;
1484 
1485 	return (1);
1486 }
1487 
1488 static int
1489 e1000g_tx_workaround_PCIX_82544(p_tx_sw_packet_t packet,
1490     uint64_t address, size_t size)
1491 {
1492 	p_sw_desc_t desc;
1493 	int desc_count;
1494 	long size_left;
1495 	size_t len;
1496 	uint32_t counter;
1497 	uint32_t array_elements;
1498 	desc_array_t desc_array;
1499 
1500 	/*
1501 	 * Coexist Workaround for cordova: RP: 07/04/03
1502 	 *
1503 	 * RP: ERRATA: Workaround ISSUE:
1504 	 * 8kb_buffer_Lockup CONTROLLER: Cordova Breakup
1505 	 * Eachbuffer in to 8kb pieces until the
1506 	 * remainder is < 8kb
1507 	 */
1508 	size_left = size;
1509 	desc_count = 0;
1510 
1511 	while (size_left > 0) {
1512 		if (size_left > MAX_TX_BUF_SIZE)
1513 			len = MAX_TX_BUF_SIZE;
1514 		else
1515 			len = size_left;
1516 
1517 		array_elements = e1000g_fill_82544_desc(address,
1518 		    len, &desc_array);
1519 
1520 		for (counter = 0; counter < array_elements; counter++) {
1521 			ASSERT(packet->num_desc < MAX_TX_DESC_PER_PACKET);
1522 			/*
1523 			 * Put in the buffer address
1524 			 */
1525 			desc = &packet->desc[packet->num_desc];
1526 
1527 			desc->address =
1528 			    desc_array.descriptor[counter].address;
1529 			desc->length =
1530 			    desc_array.descriptor[counter].length;
1531 
1532 			packet->num_desc++;
1533 			desc_count++;
1534 		} /* for */
1535 
1536 		/*
1537 		 * Update the buffer address and length
1538 		 */
1539 		address += MAX_TX_BUF_SIZE;
1540 		size_left -= MAX_TX_BUF_SIZE;
1541 	} /* while */
1542 
1543 	return (desc_count);
1544 }
1545 
1546 static int
1547 e1000g_tx_workaround_jumbo_82544(p_tx_sw_packet_t packet,
1548     uint64_t address, size_t size)
1549 {
1550 	p_sw_desc_t desc;
1551 	int desc_count;
1552 	long size_left;
1553 	uint32_t offset;
1554 
1555 	/*
1556 	 * Workaround for Jumbo Frames on Cordova
1557 	 * PSD 06/01/2001
1558 	 */
1559 	size_left = size;
1560 	desc_count = 0;
1561 	offset = 0;
1562 	while (size_left > 0) {
1563 		ASSERT(packet->num_desc < MAX_TX_DESC_PER_PACKET);
1564 
1565 		desc = &packet->desc[packet->num_desc];
1566 
1567 		desc->address = address + offset;
1568 
1569 		if (size_left > JUMBO_FRAG_LENGTH)
1570 			desc->length = JUMBO_FRAG_LENGTH;
1571 		else
1572 			desc->length = (uint32_t)size_left;
1573 
1574 		packet->num_desc++;
1575 		desc_count++;
1576 
1577 		offset += desc->length;
1578 		size_left -= JUMBO_FRAG_LENGTH;
1579 	}
1580 
1581 	return (desc_count);
1582 }
1583 
1584 #pragma inline(e1000g_82547_tx_move_tail_work)
1585 
1586 static void
1587 e1000g_82547_tx_move_tail_work(e1000g_tx_ring_t *tx_ring)
1588 {
1589 	struct e1000_hw *hw;
1590 	uint16_t hw_tdt;
1591 	uint16_t sw_tdt;
1592 	struct e1000_tx_desc *tx_desc;
1593 	uint16_t length = 0;
1594 	boolean_t eop = B_FALSE;
1595 	struct e1000g *Adapter;
1596 
1597 	Adapter = tx_ring->adapter;
1598 	hw = &Adapter->shared;
1599 
1600 	hw_tdt = E1000_READ_REG(hw, E1000_TDT(0));
1601 	sw_tdt = tx_ring->tbd_next - tx_ring->tbd_first;
1602 
1603 	while (hw_tdt != sw_tdt) {
1604 		tx_desc = &(tx_ring->tbd_first[hw_tdt]);
1605 		length += tx_desc->lower.flags.length;
1606 		eop = tx_desc->lower.data & E1000_TXD_CMD_EOP;
1607 		if (++hw_tdt == Adapter->tx_desc_num)
1608 			hw_tdt = 0;
1609 
1610 		if (eop) {
1611 			if ((Adapter->link_duplex == HALF_DUPLEX) &&
1612 			    (e1000_fifo_workaround_82547(hw, length)
1613 			    != E1000_SUCCESS)) {
1614 				if (tx_ring->timer_enable_82547) {
1615 					ASSERT(tx_ring->timer_id_82547 == 0);
1616 					tx_ring->timer_id_82547 =
1617 					    timeout(e1000g_82547_timeout,
1618 					    (void *)tx_ring,
1619 					    drv_usectohz(10000));
1620 				}
1621 				return;
1622 
1623 			} else {
1624 				E1000_WRITE_REG(hw, E1000_TDT(0), hw_tdt);
1625 				e1000_update_tx_fifo_head_82547(hw, length);
1626 				length = 0;
1627 			}
1628 		}
1629 	}
1630 }
1631 
1632 static void
1633 e1000g_82547_timeout(void *arg)
1634 {
1635 	e1000g_tx_ring_t *tx_ring;
1636 
1637 	tx_ring = (e1000g_tx_ring_t *)arg;
1638 
1639 	mutex_enter(&tx_ring->tx_lock);
1640 
1641 	tx_ring->timer_id_82547 = 0;
1642 	e1000g_82547_tx_move_tail_work(tx_ring);
1643 
1644 	mutex_exit(&tx_ring->tx_lock);
1645 }
1646 
1647 static void
1648 e1000g_82547_tx_move_tail(e1000g_tx_ring_t *tx_ring)
1649 {
1650 	timeout_id_t tid;
1651 
1652 	ASSERT(MUTEX_HELD(&tx_ring->tx_lock));
1653 
1654 	tid = tx_ring->timer_id_82547;
1655 	tx_ring->timer_id_82547 = 0;
1656 	if (tid != 0) {
1657 		tx_ring->timer_enable_82547 = B_FALSE;
1658 		mutex_exit(&tx_ring->tx_lock);
1659 
1660 		(void) untimeout(tid);
1661 
1662 		mutex_enter(&tx_ring->tx_lock);
1663 	}
1664 	tx_ring->timer_enable_82547 = B_TRUE;
1665 	e1000g_82547_tx_move_tail_work(tx_ring);
1666 }
1667