[SCSI] dpt_i2o: several use after free issues
[linux-2.6-block.git] / drivers / scsi / be2iscsi / be_mgmt.c
CommitLineData
6733b39a 1/**
d2eeb1ac 2 * Copyright (C) 2005 - 2010 ServerEngines
6733b39a
JK
3 * All rights reserved.
4 *
5 * This program is free software; you can redistribute it and/or
6 * modify it under the terms of the GNU General Public License version 2
7 * as published by the Free Software Foundation. The full GNU General
8 * Public License is included in this distribution in the file called COPYING.
9 *
10 * Written by: Jayamohan Kallickal (jayamohank@serverengines.com)
11 *
12 * Contact Information:
13 * linux-drivers@serverengines.com
14 *
15 * ServerEngines
16 * 209 N. Fair Oaks Ave
17 * Sunnyvale, CA 94085
18 *
19 */
20
21#include "be_mgmt.h"
22#include "be_iscsi.h"
23
24unsigned char mgmt_get_fw_config(struct be_ctrl_info *ctrl,
25 struct beiscsi_hba *phba)
26{
27 struct be_mcc_wrb *wrb = wrb_from_mbox(&ctrl->mbox_mem);
28 struct be_fw_cfg *req = embedded_payload(wrb);
29 int status = 0;
30
31 spin_lock(&ctrl->mbox_lock);
32 memset(wrb, 0, sizeof(*wrb));
33
34 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
35
36 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_COMMON,
37 OPCODE_COMMON_QUERY_FIRMWARE_CONFIG, sizeof(*req));
6733b39a
JK
38 status = be_mbox_notify(ctrl);
39 if (!status) {
40 struct be_fw_cfg *pfw_cfg;
41 pfw_cfg = req;
42 phba->fw_config.phys_port = pfw_cfg->phys_port;
43 phba->fw_config.iscsi_icd_start =
44 pfw_cfg->ulp[0].icd_base;
45 phba->fw_config.iscsi_icd_count =
46 pfw_cfg->ulp[0].icd_count;
47 phba->fw_config.iscsi_cid_start =
48 pfw_cfg->ulp[0].sq_base;
49 phba->fw_config.iscsi_cid_count =
50 pfw_cfg->ulp[0].sq_count;
7da50879 51 if (phba->fw_config.iscsi_cid_count > (BE2_MAX_SESSIONS / 2)) {
a3babda5
JK
52 SE_DEBUG(DBG_LVL_8,
53 "FW reported MAX CXNS as %d \t"
54 "Max Supported = %d.\n",
55 phba->fw_config.iscsi_cid_count,
56 BE2_MAX_SESSIONS);
57 phba->fw_config.iscsi_cid_count = BE2_MAX_SESSIONS / 2;
7da50879 58 }
6733b39a
JK
59 } else {
60 shost_printk(KERN_WARNING, phba->shost,
61 "Failed in mgmt_get_fw_config \n");
62 }
63
64 spin_unlock(&ctrl->mbox_lock);
65 return status;
66}
67
bfead3b2
JK
68unsigned char mgmt_check_supported_fw(struct be_ctrl_info *ctrl,
69 struct beiscsi_hba *phba)
6733b39a
JK
70{
71 struct be_dma_mem nonemb_cmd;
72 struct be_mcc_wrb *wrb = wrb_from_mbox(&ctrl->mbox_mem);
73 struct be_mgmt_controller_attributes *req;
74 struct be_sge *sge = nonembedded_sgl(wrb);
75 int status = 0;
76
77 nonemb_cmd.va = pci_alloc_consistent(ctrl->pdev,
78 sizeof(struct be_mgmt_controller_attributes),
79 &nonemb_cmd.dma);
80 if (nonemb_cmd.va == NULL) {
81 SE_DEBUG(DBG_LVL_1,
82 "Failed to allocate memory for mgmt_check_supported_fw"
83 "\n");
84 return -1;
85 }
86 nonemb_cmd.size = sizeof(struct be_mgmt_controller_attributes);
87 req = nonemb_cmd.va;
f98c96b0 88 memset(req, 0, sizeof(*req));
6733b39a
JK
89 spin_lock(&ctrl->mbox_lock);
90 memset(wrb, 0, sizeof(*wrb));
91 be_wrb_hdr_prepare(wrb, sizeof(*req), false, 1);
92 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_COMMON,
93 OPCODE_COMMON_GET_CNTL_ATTRIBUTES, sizeof(*req));
94 sge->pa_hi = cpu_to_le32(upper_32_bits(nonemb_cmd.dma));
95 sge->pa_lo = cpu_to_le32(nonemb_cmd.dma & 0xFFFFFFFF);
96 sge->len = cpu_to_le32(nonemb_cmd.size);
6733b39a
JK
97 status = be_mbox_notify(ctrl);
98 if (!status) {
99 struct be_mgmt_controller_attributes_resp *resp = nonemb_cmd.va;
100 SE_DEBUG(DBG_LVL_8, "Firmware version of CMD: %s\n",
101 resp->params.hba_attribs.flashrom_version_string);
102 SE_DEBUG(DBG_LVL_8, "Firmware version is : %s\n",
103 resp->params.hba_attribs.firmware_version_string);
104 SE_DEBUG(DBG_LVL_8,
105 "Developer Build, not performing version check...\n");
bfead3b2
JK
106 phba->fw_config.iscsi_features =
107 resp->params.hba_attribs.iscsi_features;
108 SE_DEBUG(DBG_LVL_8, " phba->fw_config.iscsi_features = %d\n",
109 phba->fw_config.iscsi_features);
6733b39a
JK
110 } else
111 SE_DEBUG(DBG_LVL_1, " Failed in mgmt_check_supported_fw\n");
bfead3b2 112 spin_unlock(&ctrl->mbox_lock);
6733b39a
JK
113 if (nonemb_cmd.va)
114 pci_free_consistent(ctrl->pdev, nonemb_cmd.size,
115 nonemb_cmd.va, nonemb_cmd.dma);
116
6733b39a
JK
117 return status;
118}
119
bfead3b2 120
6733b39a
JK
121unsigned char mgmt_epfw_cleanup(struct beiscsi_hba *phba, unsigned short chute)
122{
123 struct be_ctrl_info *ctrl = &phba->ctrl;
bfead3b2 124 struct be_mcc_wrb *wrb = wrb_from_mccq(phba);
6733b39a
JK
125 struct iscsi_cleanup_req *req = embedded_payload(wrb);
126 int status = 0;
127
128 spin_lock(&ctrl->mbox_lock);
129 memset(wrb, 0, sizeof(*wrb));
130
131 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
132 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_ISCSI,
133 OPCODE_COMMON_ISCSI_CLEANUP, sizeof(*req));
134
135 req->chute = chute;
136 req->hdr_ring_id = 0;
137 req->data_ring_id = 0;
138
bfead3b2 139 status = be_mcc_notify_wait(phba);
6733b39a
JK
140 if (status)
141 shost_printk(KERN_WARNING, phba->shost,
142 " mgmt_epfw_cleanup , FAILED\n");
143 spin_unlock(&ctrl->mbox_lock);
144 return status;
145}
146
147unsigned char mgmt_invalidate_icds(struct beiscsi_hba *phba,
4183122d
JK
148 struct invalidate_command_table *inv_tbl,
149 unsigned int num_invalidate, unsigned int cid)
6733b39a
JK
150{
151 struct be_dma_mem nonemb_cmd;
152 struct be_ctrl_info *ctrl = &phba->ctrl;
756d29c8
JK
153 struct be_mcc_wrb *wrb;
154 struct be_sge *sge;
6733b39a 155 struct invalidate_commands_params_in *req;
4183122d 156 unsigned int i, tag = 0;
756d29c8
JK
157
158 spin_lock(&ctrl->mbox_lock);
159 tag = alloc_mcc_tag(phba);
160 if (!tag) {
161 spin_unlock(&ctrl->mbox_lock);
162 return tag;
163 }
6733b39a
JK
164
165 nonemb_cmd.va = pci_alloc_consistent(ctrl->pdev,
166 sizeof(struct invalidate_commands_params_in),
167 &nonemb_cmd.dma);
168 if (nonemb_cmd.va == NULL) {
169 SE_DEBUG(DBG_LVL_1,
170 "Failed to allocate memory for"
171 "mgmt_invalidate_icds \n");
172 return -1;
173 }
174 nonemb_cmd.size = sizeof(struct invalidate_commands_params_in);
175 req = nonemb_cmd.va;
f98c96b0 176 memset(req, 0, sizeof(*req));
756d29c8
JK
177 wrb = wrb_from_mccq(phba);
178 sge = nonembedded_sgl(wrb);
179 wrb->tag0 |= tag;
6733b39a
JK
180
181 be_wrb_hdr_prepare(wrb, sizeof(*req), false, 1);
182 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_ISCSI,
183 OPCODE_COMMON_ISCSI_ERROR_RECOVERY_INVALIDATE_COMMANDS,
184 sizeof(*req));
185 req->ref_handle = 0;
186 req->cleanup_type = CMD_ISCSI_COMMAND_INVALIDATE;
4183122d
JK
187 for (i = 0; i < num_invalidate; i++) {
188 req->table[i].icd = inv_tbl->icd;
189 req->table[i].cid = inv_tbl->cid;
190 req->icd_count++;
191 inv_tbl++;
192 }
6733b39a
JK
193 sge->pa_hi = cpu_to_le32(upper_32_bits(nonemb_cmd.dma));
194 sge->pa_lo = cpu_to_le32(nonemb_cmd.dma & 0xFFFFFFFF);
195 sge->len = cpu_to_le32(nonemb_cmd.size);
196
756d29c8 197 be_mcc_notify(phba);
6733b39a
JK
198 spin_unlock(&ctrl->mbox_lock);
199 if (nonemb_cmd.va)
200 pci_free_consistent(ctrl->pdev, nonemb_cmd.size,
201 nonemb_cmd.va, nonemb_cmd.dma);
756d29c8 202 return tag;
6733b39a
JK
203}
204
205unsigned char mgmt_invalidate_connection(struct beiscsi_hba *phba,
206 struct beiscsi_endpoint *beiscsi_ep,
207 unsigned short cid,
208 unsigned short issue_reset,
209 unsigned short savecfg_flag)
210{
211 struct be_ctrl_info *ctrl = &phba->ctrl;
756d29c8
JK
212 struct be_mcc_wrb *wrb;
213 struct iscsi_invalidate_connection_params_in *req;
214 unsigned int tag = 0;
6733b39a
JK
215
216 spin_lock(&ctrl->mbox_lock);
756d29c8
JK
217 tag = alloc_mcc_tag(phba);
218 if (!tag) {
219 spin_unlock(&ctrl->mbox_lock);
220 return tag;
221 }
222 wrb = wrb_from_mccq(phba);
223 wrb->tag0 |= tag;
224 req = embedded_payload(wrb);
6733b39a
JK
225
226 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
227 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_ISCSI_INI,
228 OPCODE_ISCSI_INI_DRIVER_INVALIDATE_CONNECTION,
229 sizeof(*req));
230 req->session_handle = beiscsi_ep->fw_handle;
231 req->cid = cid;
232 if (issue_reset)
233 req->cleanup_type = CMD_ISCSI_CONNECTION_ISSUE_TCP_RST;
234 else
235 req->cleanup_type = CMD_ISCSI_CONNECTION_INVALIDATE;
236 req->save_cfg = savecfg_flag;
756d29c8 237 be_mcc_notify(phba);
6733b39a 238 spin_unlock(&ctrl->mbox_lock);
756d29c8 239 return tag;
6733b39a
JK
240}
241
242unsigned char mgmt_upload_connection(struct beiscsi_hba *phba,
243 unsigned short cid, unsigned int upload_flag)
244{
245 struct be_ctrl_info *ctrl = &phba->ctrl;
756d29c8
JK
246 struct be_mcc_wrb *wrb;
247 struct tcp_upload_params_in *req;
248 unsigned int tag = 0;
6733b39a
JK
249
250 spin_lock(&ctrl->mbox_lock);
756d29c8
JK
251 tag = alloc_mcc_tag(phba);
252 if (!tag) {
253 spin_unlock(&ctrl->mbox_lock);
254 return tag;
255 }
256 wrb = wrb_from_mccq(phba);
257 req = embedded_payload(wrb);
258 wrb->tag0 |= tag;
6733b39a
JK
259
260 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
261 be_cmd_hdr_prepare(&req->hdr, CMD_COMMON_TCP_UPLOAD,
262 OPCODE_COMMON_TCP_UPLOAD, sizeof(*req));
263 req->id = (unsigned short)cid;
264 req->upload_type = (unsigned char)upload_flag;
756d29c8 265 be_mcc_notify(phba);
6733b39a 266 spin_unlock(&ctrl->mbox_lock);
756d29c8 267 return tag;
6733b39a
JK
268}
269
270int mgmt_open_connection(struct beiscsi_hba *phba,
271 struct sockaddr *dst_addr,
272 struct beiscsi_endpoint *beiscsi_ep)
273{
274 struct hwi_controller *phwi_ctrlr;
275 struct hwi_context_memory *phwi_context;
276 struct sockaddr_in *daddr_in = (struct sockaddr_in *)dst_addr;
277 struct sockaddr_in6 *daddr_in6 = (struct sockaddr_in6 *)dst_addr;
278 struct be_ctrl_info *ctrl = &phba->ctrl;
756d29c8
JK
279 struct be_mcc_wrb *wrb;
280 struct tcp_connect_and_offload_in *req;
6733b39a
JK
281 unsigned short def_hdr_id;
282 unsigned short def_data_id;
283 struct phys_addr template_address = { 0, 0 };
284 struct phys_addr *ptemplate_address;
756d29c8 285 unsigned int tag = 0;
bfead3b2 286 unsigned int i;
6733b39a
JK
287 unsigned short cid = beiscsi_ep->ep_cid;
288
289 phwi_ctrlr = phba->phwi_ctrlr;
290 phwi_context = phwi_ctrlr->phwi_ctxt;
291 def_hdr_id = (unsigned short)HWI_GET_DEF_HDRQ_ID(phba);
292 def_data_id = (unsigned short)HWI_GET_DEF_BUFQ_ID(phba);
293
294 ptemplate_address = &template_address;
295 ISCSI_GET_PDU_TEMPLATE_ADDRESS(phba, ptemplate_address);
296 spin_lock(&ctrl->mbox_lock);
756d29c8
JK
297 tag = alloc_mcc_tag(phba);
298 if (!tag) {
299 spin_unlock(&ctrl->mbox_lock);
300 return tag;
301 }
302 wrb = wrb_from_mccq(phba);
303 req = embedded_payload(wrb);
304 wrb->tag0 |= tag;
6733b39a
JK
305
306 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
307 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_ISCSI,
308 OPCODE_COMMON_ISCSI_TCP_CONNECT_AND_OFFLOAD,
309 sizeof(*req));
310 if (dst_addr->sa_family == PF_INET) {
311 __be32 s_addr = daddr_in->sin_addr.s_addr;
312 req->ip_address.ip_type = BE2_IPV4;
313 req->ip_address.ip_address[0] = s_addr & 0x000000ff;
314 req->ip_address.ip_address[1] = (s_addr & 0x0000ff00) >> 8;
315 req->ip_address.ip_address[2] = (s_addr & 0x00ff0000) >> 16;
316 req->ip_address.ip_address[3] = (s_addr & 0xff000000) >> 24;
317 req->tcp_port = ntohs(daddr_in->sin_port);
318 beiscsi_ep->dst_addr = daddr_in->sin_addr.s_addr;
319 beiscsi_ep->dst_tcpport = ntohs(daddr_in->sin_port);
320 beiscsi_ep->ip_type = BE2_IPV4;
321 } else if (dst_addr->sa_family == PF_INET6) {
322 req->ip_address.ip_type = BE2_IPV6;
323 memcpy(&req->ip_address.ip_address,
324 &daddr_in6->sin6_addr.in6_u.u6_addr8, 16);
325 req->tcp_port = ntohs(daddr_in6->sin6_port);
326 beiscsi_ep->dst_tcpport = ntohs(daddr_in6->sin6_port);
327 memcpy(&beiscsi_ep->dst6_addr,
328 &daddr_in6->sin6_addr.in6_u.u6_addr8, 16);
329 beiscsi_ep->ip_type = BE2_IPV6;
330 } else{
331 shost_printk(KERN_ERR, phba->shost, "unknown addr family %d\n",
332 dst_addr->sa_family);
333 spin_unlock(&ctrl->mbox_lock);
334 return -EINVAL;
335
336 }
337 req->cid = cid;
bfead3b2
JK
338 i = phba->nxt_cqid++;
339 if (phba->nxt_cqid == phba->num_cpus)
340 phba->nxt_cqid = 0;
341 req->cq_id = phwi_context->be_cq[i].id;
342 SE_DEBUG(DBG_LVL_8, "i=%d cq_id=%d \n", i, req->cq_id);
6733b39a
JK
343 req->defq_id = def_hdr_id;
344 req->hdr_ring_id = def_hdr_id;
345 req->data_ring_id = def_data_id;
346 req->do_offload = 1;
347 req->dataout_template_pa.lo = ptemplate_address->lo;
348 req->dataout_template_pa.hi = ptemplate_address->hi;
756d29c8 349 be_mcc_notify(phba);
6733b39a 350 spin_unlock(&ctrl->mbox_lock);
756d29c8 351 return tag;
6733b39a 352}
bfead3b2 353
756d29c8 354unsigned int be_cmd_get_mac_addr(struct beiscsi_hba *phba)
bfead3b2
JK
355{
356 struct be_ctrl_info *ctrl = &phba->ctrl;
756d29c8
JK
357 struct be_mcc_wrb *wrb;
358 struct be_cmd_req_get_mac_addr *req;
359 unsigned int tag = 0;
bfead3b2
JK
360
361 SE_DEBUG(DBG_LVL_8, "In be_cmd_get_mac_addr\n");
362 spin_lock(&ctrl->mbox_lock);
756d29c8
JK
363 tag = alloc_mcc_tag(phba);
364 if (!tag) {
365 spin_unlock(&ctrl->mbox_lock);
366 return tag;
367 }
368
369 wrb = wrb_from_mccq(phba);
370 req = embedded_payload(wrb);
371 wrb->tag0 |= tag;
bfead3b2
JK
372 be_wrb_hdr_prepare(wrb, sizeof(*req), true, 0);
373 be_cmd_hdr_prepare(&req->hdr, CMD_SUBSYSTEM_ISCSI,
374 OPCODE_COMMON_ISCSI_NTWK_GET_NIC_CONFIG,
375 sizeof(*req));
376
756d29c8 377 be_mcc_notify(phba);
bfead3b2 378 spin_unlock(&ctrl->mbox_lock);
756d29c8 379 return tag;
bfead3b2
JK
380}
381