sys/dev/aha/aha.c

   1 /*
   2  * Generic register and struct definitions for the Adaptech 154x/164x
   3  * SCSI host adapters. Product specific probe and attach routines can
   4  * be found in:
   5  *      aha 1540/1542B/1542C/1542CF/1542CP      aha_isa.c
   6  *
   7  * Copyright (c) 1998 M. Warner Losh.
   8  * All Rights Reserved.
   9  *
  10  *
  11  * Redistribution and use in source and binary forms, with or without
  12  * modification, are permitted provided that the following conditions
  13  * are met:
  14  * 1. Redistributions of source code must retain the above copyright
  15  *    notice, this list of conditions, and the following disclaimer,
  16  *    without modification, immediately at the beginning of the file.
  17  * 2. The name of the author may not be used to endorse or promote products
  18  *    derived from this software without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  23  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
  24  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  30  * SUCH DAMAGE.
  31  *
  32  * Derived from bt.c written by:
  33  *
  34  * Copyright (c) 1998 Justin T. Gibbs.
  35  * All rights reserved.
  36  *
  37  * Redistribution and use in source and binary forms, with or without
  38  * modification, are permitted provided that the following conditions
  39  * are met:
  40  * 1. Redistributions of source code must retain the above copyright
  41  *    notice, this list of conditions, and the following disclaimer,
  42  *    without modification, immediately at the beginning of the file.
  43  * 2. The name of the author may not be used to endorse or promote products
  44  *    derived from this software without specific prior written permission.
  45  *
  46  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  47  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  48  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  49  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
  50  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  51  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  52  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  53  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  54  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  55  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  56  * SUCH DAMAGE.
  57  */
  58
  59 #include <sys/cdefs.h>
  60 __FBSDID("$FreeBSD$");
  61
  62 #include <sys/param.h>
  63 #include <sys/systm.h>
  64 #include <sys/malloc.h>
  65 #include <sys/kernel.h>
  66 #include <sys/lock.h>
  67 #include <sys/mutex.h>
  68
  69 #include <machine/bus_pio.h>
  70 #include <machine/bus.h>
  71
  72 #include <cam/cam.h>
  73 #include <cam/cam_ccb.h>
  74 #include <cam/cam_sim.h>
  75 #include <cam/cam_xpt_sim.h>
  76 #include <cam/cam_debug.h>
  77
  78 #include <cam/scsi/scsi_message.h>
  79
  80 #include <dev/aha/ahareg.h>
  81
  82 #define PRVERB(x) if (bootverbose) printf x
  83
  84 /* Macro to determine that a rev is potentially a new valid one
  85  * so that the driver doesn't keep breaking on new revs as it
  86  * did for the CF and CP.
  87  */
  88 #define PROBABLY_NEW_BOARD(REV) (REV > 0x43 && REV < 0x56)
  89
  90 /* MailBox Management functions */
  91 static __inline void    ahanextinbox(struct aha_softc *aha);
  92 static __inline void    ahanextoutbox(struct aha_softc *aha);
  93
  94 static __inline void
  95 ahanextinbox(struct aha_softc *aha)
  96 {
  97         if (aha->cur_inbox == aha->last_inbox)
  98                 aha->cur_inbox = aha->in_boxes;
  99         else
 100                 aha->cur_inbox++;
 101 }
 102
 103 static __inline void
 104 ahanextoutbox(struct aha_softc *aha)
 105 {
 106         if (aha->cur_outbox == aha->last_outbox)
 107                 aha->cur_outbox = aha->out_boxes;
 108         else
 109                 aha->cur_outbox++;
 110 }
 111
 112 #define ahautoa24(u,s3)                 \
 113         (s3)[0] = ((u) >> 16) & 0xff;   \
 114         (s3)[1] = ((u) >> 8) & 0xff;    \
 115         (s3)[2] = (u) & 0xff;
 116
 117 #define aha_a24tou(s3) \
 118         (((s3)[0] << 16) | ((s3)[1] << 8) | (s3)[2])
 119
 120 /* CCB Mangement functions */
 121 static __inline u_int32_t               ahaccbvtop(struct aha_softc *aha,
 122                                                   struct aha_ccb *accb);
 123 static __inline struct aha_ccb*         ahaccbptov(struct aha_softc *aha,
 124                                                   u_int32_t ccb_addr);
 125
 126 static __inline u_int32_t
 127 ahaccbvtop(struct aha_softc *aha, struct aha_ccb *accb)
 128 {
 129         return (aha->aha_ccb_physbase
 130               + (u_int32_t)((caddr_t)accb - (caddr_t)aha->aha_ccb_array));
 131 }
 132 static __inline struct aha_ccb *
 133 ahaccbptov(struct aha_softc *aha, u_int32_t ccb_addr)
 134 {
 135         return (aha->aha_ccb_array +
 136               + ((struct aha_ccb*)(uintptr_t)ccb_addr -
 137                  (struct aha_ccb*)(uintptr_t)aha->aha_ccb_physbase));
 138 }
 139
 140 static struct aha_ccb*  ahagetccb(struct aha_softc *aha);
 141 static __inline void    ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb);
 142 static void             ahaallocccbs(struct aha_softc *aha);
 143 static bus_dmamap_callback_t ahaexecuteccb;
 144 static void             ahadone(struct aha_softc *aha, struct aha_ccb *accb,
 145                                aha_mbi_comp_code_t comp_code);
 146
 147 /* Host adapter command functions */
 148 static int      ahareset(struct aha_softc* aha, int hard_reset);
 149
 150 /* Initialization functions */
 151 static int                      ahainitmboxes(struct aha_softc *aha);
 152 static bus_dmamap_callback_t    ahamapmboxes;
 153 static bus_dmamap_callback_t    ahamapccbs;
 154 static bus_dmamap_callback_t    ahamapsgs;
 155
 156 /* Transfer Negotiation Functions */
 157 static void ahafetchtransinfo(struct aha_softc *aha,
 158                              struct ccb_trans_settings *cts);
 159
 160 /* CAM SIM entry points */
 161 #define ccb_accb_ptr spriv_ptr0
 162 #define ccb_aha_ptr spriv_ptr1
 163 static void     ahaaction(struct cam_sim *sim, union ccb *ccb);
 164 static void     ahapoll(struct cam_sim *sim);
 165
 166 /* Our timeout handler */
 167 static timeout_t ahatimeout;
 168
 169 u_long aha_unit = 0;
 170
 171 /*
 172  * Do our own re-probe protection until a configuration
 173  * manager can do it for us.  This ensures that we don't
 174  * reprobe a card already found by the EISA or PCI probes.
 175  */
 176 static struct aha_isa_port aha_isa_ports[] =
 177 {
 178         { 0x130, 4 },
 179         { 0x134, 5 },
 180         { 0x230, 2 },
 181         { 0x234, 3 },
 182         { 0x330, 0 },
 183         { 0x334, 1 }
 184 };
 185
 186 /*
 187  * I/O ports listed in the order enumerated by the
 188  * card for certain op codes.
 189  */
 190 static u_int16_t aha_board_ports[] =
 191 {
 192         0x330,
 193         0x334,
 194         0x230,
 195         0x234,
 196         0x130,
 197         0x134
 198 };
 199
 200 /* Exported functions */
 201 struct aha_softc *
 202 aha_alloc(int unit, bus_space_tag_t tag, bus_space_handle_t bsh)
 203 {
 204         struct  aha_softc *aha;
 205
 206         aha = malloc(sizeof(struct aha_softc), M_DEVBUF, M_NOWAIT | M_ZERO);
 207         if (!aha) {
 208                 printf("aha%d: cannot malloc!\n", unit);
 209                 return NULL;
 210         }
 211         SLIST_INIT(&aha->free_aha_ccbs);
 212         LIST_INIT(&aha->pending_ccbs);
 213         SLIST_INIT(&aha->sg_maps);
 214         aha->unit = unit;
 215         aha->tag = tag;
 216         aha->bsh = bsh;
 217         aha->ccb_sg_opcode = INITIATOR_SG_CCB_WRESID;
 218         aha->ccb_ccb_opcode = INITIATOR_CCB_WRESID;
 219         return (aha);
 220 }
 221
 222 void
 223 aha_free(struct aha_softc *aha)
 224 {
 225         switch (aha->init_level) {
 226         default:
 227         case 8:
 228         {
 229                 struct sg_map_node *sg_map;
 230
 231                 while ((sg_map = SLIST_FIRST(&aha->sg_maps))!= NULL) {
 232                         SLIST_REMOVE_HEAD(&aha->sg_maps, links);
 233                         bus_dmamap_unload(aha->sg_dmat,
 234                                           sg_map->sg_dmamap);
 235                         bus_dmamem_free(aha->sg_dmat, sg_map->sg_vaddr,
 236                                         sg_map->sg_dmamap);
 237                         free(sg_map, M_DEVBUF);
 238                 }
 239                 bus_dma_tag_destroy(aha->sg_dmat);
 240         }
 241         case 7:
 242                 bus_dmamap_unload(aha->ccb_dmat, aha->ccb_dmamap);
 243         case 6:
 244                 bus_dmamap_destroy(aha->ccb_dmat, aha->ccb_dmamap);
 245                 bus_dmamem_free(aha->ccb_dmat, aha->aha_ccb_array,
 246                                 aha->ccb_dmamap);
 247         case 5:
 248                 bus_dma_tag_destroy(aha->ccb_dmat);
 249         case 4:
 250                 bus_dmamap_unload(aha->mailbox_dmat, aha->mailbox_dmamap);
 251         case 3:
 252                 bus_dmamem_free(aha->mailbox_dmat, aha->in_boxes,
 253                                 aha->mailbox_dmamap);
 254                 bus_dmamap_destroy(aha->mailbox_dmat, aha->mailbox_dmamap);
 255         case 2:
 256                 bus_dma_tag_destroy(aha->buffer_dmat);
 257         case 1:
 258                 bus_dma_tag_destroy(aha->mailbox_dmat);
 259         case 0:
 260                 break;
 261         }
 262         free(aha, M_DEVBUF);
 263 }
 264
 265 /*
 266  * Probe the adapter and verify that the card is an Adaptec.
 267  */
 268 int
 269 aha_probe(struct aha_softc* aha)
 270 {
 271         u_int    status;
 272         u_int    intstat;
 273         int      error;
 274         board_id_data_t board_id;
 275
 276         /*
 277          * See if the three I/O ports look reasonable.
 278          * Touch the minimal number of registers in the
 279          * failure case.
 280          */
 281         status = aha_inb(aha, STATUS_REG);
 282         if ((status == 0)
 283          || (status & (DIAG_ACTIVE|CMD_REG_BUSY|
 284                        STATUS_REG_RSVD)) != 0) {
 285                 PRVERB(("%s: status reg test failed %x\n", aha_name(aha),
 286                         status));
 287                 return (ENXIO);
 288         }
 289
 290         intstat = aha_inb(aha, INTSTAT_REG);
 291         if ((intstat & INTSTAT_REG_RSVD) != 0) {
 292                 PRVERB(("%s: Failed Intstat Reg Test\n", aha_name(aha)));
 293                 return (ENXIO);
 294         }
 295
 296         /*
 297          * Looking good so far.  Final test is to reset the
 298          * adapter and fetch the board ID and ensure we aren't
 299          * looking at a BusLogic.
 300          */
 301         if ((error = ahareset(aha, /*hard_reset*/TRUE)) != 0) {
 302                 PRVERB(("%s: Failed Reset\n", aha_name(aha)));
 303                 return (ENXIO);
 304         }
 305
 306         /*
 307          * Get the board ID.  We use this to see if we're dealing with
 308          * a buslogic card or an aha card (or clone).
 309          */
 310         error = aha_cmd(aha, AOP_INQUIRE_BOARD_ID, NULL, /*parmlen*/0,
 311                        (u_int8_t*)&board_id, sizeof(board_id),
 312                        DEFAULT_CMD_TIMEOUT);
 313         if (error != 0) {
 314                 PRVERB(("%s: INQUIRE failed %x\n", aha_name(aha), error));
 315                 return (ENXIO);
 316         }
 317         aha->fw_major = board_id.firmware_rev_major;
 318         aha->fw_minor = board_id.firmware_rev_minor;
 319         aha->boardid = board_id.board_type;
 320
 321         /*
 322          * The Buslogic cards have an id of either 0x41 or 0x42.  So
 323          * if those come up in the probe, we test the geometry register
 324          * of the board.  Adaptec boards that are this old will not have
 325          * this register, and return 0xff, while buslogic cards will return
 326          * something different.
 327          *
 328          * It appears that for reasons unknow, for the for the
 329          * aha-1542B cards, we need to wait a little bit before trying
 330          * to read the geometry register.  I picked 10ms since we have
 331          * reports that a for loop to 1000 did the trick, and this
 332          * errs on the side of conservatism.  Besides, no one will
 333          * notice a 10mS delay here, even the 1542B card users :-)
 334          *
 335          * Some compatible cards return 0 here.  Some cards also
 336          * seem to return 0x7f.
 337          *
 338          * XXX I'm not sure how this will impact other cloned cards
 339          *
 340          * This really should be replaced with the esetup command, since
 341          * that appears to be more reliable.  This becomes more and more
 342          * true over time as we discover more cards that don't read the
 343          * geometry register consistantly.
 344          */
 345         if (aha->boardid <= 0x42) {
 346                 /* Wait 10ms before reading */
 347                 DELAY(10000);
 348                 status = aha_inb(aha, GEOMETRY_REG);
 349                 if (status != 0xff && status != 0x00 && status != 0x7f) {
 350                         PRVERB(("%s: Geometry Register test failed 0x%x\n",
 351                                 aha_name(aha), status));
 352                         return (ENXIO);
 353                 }
 354         }
 355
 356         return (0);
 357 }
 358
 359 /*
 360  * Pull the boards setup information and record it in our softc.
 361  */
 362 int
 363 aha_fetch_adapter_info(struct aha_softc *aha)
 364 {
 365         setup_data_t    setup_info;
 366         config_data_t config_data;
 367         u_int8_t length_param;
 368         int      error;
 369         struct  aha_extbios extbios;
 370
 371         switch (aha->boardid) {
 372         case BOARD_1540_16HEAD_BIOS:
 373                 snprintf(aha->model, sizeof(aha->model), "1540 16 head BIOS");
 374                 break;
 375         case BOARD_1540_64HEAD_BIOS:
 376                 snprintf(aha->model, sizeof(aha->model), "1540 64 head BIOS");
 377                 break;
 378         case BOARD_1542:
 379                 snprintf(aha->model, sizeof(aha->model), "1540/1542 64 head BIOS");
 380                 break;
 381         case BOARD_1640:
 382                 snprintf(aha->model, sizeof(aha->model), "1640");
 383                 break;
 384         case BOARD_1740:
 385                 snprintf(aha->model, sizeof(aha->model), "1740A/1742A/1744");
 386                 break;
 387         case BOARD_1542C:
 388                 snprintf(aha->model, sizeof(aha->model), "1542C");
 389                 break;
 390         case BOARD_1542CF:
 391                 snprintf(aha->model, sizeof(aha->model), "1542CF");
 392                 break;
 393         case BOARD_1542CP:
 394                 snprintf(aha->model, sizeof(aha->model), "1542CP");
 395                 break;
 396         default:
 397                 snprintf(aha->model, sizeof(aha->model), "Unknown");
 398                 break;
 399         }
 400         /*
 401          * If we are a new type of 1542 board (anything newer than a 1542C)
 402          * then disable the extended bios so that the
 403          * mailbox interface is unlocked.
 404          * This is also true for the 1542B Version 3.20. First Adaptec
 405          * board that supports >1Gb drives.
 406          * No need to check the extended bios flags as some of the
 407          * extensions that cause us problems are not flagged in that byte.
 408          */
 409         if (PROBABLY_NEW_BOARD(aha->boardid) ||
 410                 (aha->boardid == 0x41
 411                 && aha->fw_major == 0x31 &&
 412                 aha->fw_minor >= 0x34)) {
 413                 error = aha_cmd(aha, AOP_RETURN_EXT_BIOS_INFO, NULL,
 414                         /*paramlen*/0, (u_char *)&extbios, sizeof(extbios),
 415                         DEFAULT_CMD_TIMEOUT);
 416                 error = aha_cmd(aha, AOP_MBOX_IF_ENABLE, (u_int8_t *)&extbios,
 417                         /*paramlen*/2, NULL, 0, DEFAULT_CMD_TIMEOUT);
 418         }
 419         if (aha->boardid < 0x41)
 420                 printf("%s: Warning: aha-1542A won't likely work.\n",
 421                         aha_name(aha));
 422
 423         aha->max_sg = 17;               /* Need >= 17 to do 64k I/O */
 424         aha->diff_bus = 0;
 425         aha->extended_lun = 0;
 426         aha->extended_trans = 0;
 427         aha->max_ccbs = 16;
 428         /* Determine Sync/Wide/Disc settings */
 429         length_param = sizeof(setup_info);
 430         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &length_param,
 431                        /*paramlen*/1, (u_int8_t*)&setup_info,
 432                        sizeof(setup_info), DEFAULT_CMD_TIMEOUT);
 433         if (error != 0) {
 434                 printf("%s: aha_fetch_adapter_info - Failed "
 435                        "Get Setup Info\n", aha_name(aha));
 436                 return (error);
 437         }
 438         if (setup_info.initiate_sync != 0) {
 439                 aha->sync_permitted = ALL_TARGETS;
 440         }
 441         aha->disc_permitted = ALL_TARGETS;
 442
 443         /* We need as many mailboxes as we can have ccbs */
 444         aha->num_boxes = aha->max_ccbs;
 445
 446         /* Determine our SCSI ID */
 447
 448         error = aha_cmd(aha, AOP_INQUIRE_CONFIG, NULL, /*parmlen*/0,
 449                        (u_int8_t*)&config_data, sizeof(config_data),
 450                        DEFAULT_CMD_TIMEOUT);
 451         if (error != 0) {
 452                 printf("%s: aha_fetch_adapter_info - Failed Get Config\n",
 453                        aha_name(aha));
 454                 return (error);
 455         }
 456         aha->scsi_id = config_data.scsi_id;
 457         return (0);
 458 }
 459
 460 /*
 461  * Start the board, ready for normal operation
 462  */
 463 int
 464 aha_init(struct aha_softc* aha)
 465 {
 466         /* Announce the Adapter */
 467         printf("%s: AHA-%s FW Rev. %c.%c (ID=%x) ", aha_name(aha),
 468                aha->model, aha->fw_major, aha->fw_minor, aha->boardid);
 469
 470         if (aha->diff_bus != 0)
 471                 printf("Diff ");
 472
 473         printf("SCSI Host Adapter, SCSI ID %d, %d CCBs\n", aha->scsi_id,
 474                aha->max_ccbs);
 475
 476         /*
 477          * Create our DMA tags.  These tags define the kinds of device
 478          * accessible memory allocations and memory mappings we will
 479          * need to perform during normal operation.
 480          *
 481          * Unless we need to further restrict the allocation, we rely
 482          * on the restrictions of the parent dmat, hence the common
 483          * use of MAXADDR and MAXSIZE.
 484          */
 485
 486         /* DMA tag for mapping buffers into device visible space. */
 487         if (bus_dma_tag_create( /* parent       */ aha->parent_dmat,
 488                                 /* alignment    */ 1,
 489                                 /* boundary     */ 0,
 490                                 /* lowaddr      */ BUS_SPACE_MAXADDR,
 491                                 /* highaddr     */ BUS_SPACE_MAXADDR,
 492                                 /* filter       */ NULL,
 493                                 /* filterarg    */ NULL,
 494                                 /* maxsize      */ MAXBSIZE,
 495                                 /* nsegments    */ AHA_NSEG,
 496                                 /* maxsegsz     */ BUS_SPACE_MAXSIZE_24BIT,
 497                                 /* flags        */ BUS_DMA_ALLOCNOW,
 498                                 /* lockfunc     */ busdma_lock_mutex,
 499                                 /* lockarg      */ &Giant,
 500                                 &aha->buffer_dmat) != 0) {
 501                 goto error_exit;
 502         }
 503
 504         aha->init_level++;
 505         /* DMA tag for our mailboxes */
 506         if (bus_dma_tag_create( /* parent       */ aha->parent_dmat,
 507                                 /* alignment    */ 1,
 508                                 /* boundary     */ 0,
 509                                 /* lowaddr      */ BUS_SPACE_MAXADDR,
 510                                 /* highaddr     */ BUS_SPACE_MAXADDR,
 511                                 /* filter       */ NULL,
 512                                 /* filterarg    */ NULL,
 513                                 /* maxsize      */ aha->num_boxes *
 514                                                    (sizeof(aha_mbox_in_t) +
 515                                                     sizeof(aha_mbox_out_t)),
 516                                 /* nsegments    */ 1,
 517                                 /* maxsegsz     */ BUS_SPACE_MAXSIZE_24BIT,
 518                                 /* flags        */ 0,
 519                                 /* lockfunc     */ busdma_lock_mutex,
 520                                 /* lockarg      */ &Giant,
 521                                 &aha->mailbox_dmat) != 0) {
 522                 goto error_exit;
 523         }
 524
 525         aha->init_level++;
 526
 527         /* Allocation for our mailboxes */
 528         if (bus_dmamem_alloc(aha->mailbox_dmat, (void **)&aha->out_boxes,
 529                              BUS_DMA_NOWAIT, &aha->mailbox_dmamap) != 0) {
 530                 goto error_exit;
 531         }
 532
 533         aha->init_level++;
 534
 535         /* And permanently map them */
 536         bus_dmamap_load(aha->mailbox_dmat, aha->mailbox_dmamap,
 537                         aha->out_boxes,
 538                         aha->num_boxes * (sizeof(aha_mbox_in_t)
 539                                        + sizeof(aha_mbox_out_t)),
 540                         ahamapmboxes, aha, /*flags*/0);
 541
 542         aha->init_level++;
 543
 544         aha->in_boxes = (aha_mbox_in_t *)&aha->out_boxes[aha->num_boxes];
 545
 546         ahainitmboxes(aha);
 547
 548         /* DMA tag for our ccb structures */
 549         if (bus_dma_tag_create( /* parent       */ aha->parent_dmat,
 550                                 /* alignment    */ 1,
 551                                 /* boundary     */ 0,
 552                                 /* lowaddr      */ BUS_SPACE_MAXADDR,
 553                                 /* highaddr     */ BUS_SPACE_MAXADDR,
 554                                 /* filter       */ NULL,
 555                                 /* filterarg    */ NULL,
 556                                 /* maxsize      */ aha->max_ccbs *
 557                                                    sizeof(struct aha_ccb),
 558                                 /* nsegments    */ 1,
 559                                 /* maxsegsz     */ BUS_SPACE_MAXSIZE_24BIT,
 560                                 /* flags        */ 0,
 561                                 /* lockfunc     */ busdma_lock_mutex,
 562                                 /* lockarg      */ &Giant,
 563                                 &aha->ccb_dmat) != 0) {
 564                 goto error_exit;
 565         }
 566
 567         aha->init_level++;
 568
 569         /* Allocation for our ccbs */
 570         if (bus_dmamem_alloc(aha->ccb_dmat, (void **)&aha->aha_ccb_array,
 571                              BUS_DMA_NOWAIT, &aha->ccb_dmamap) != 0) {
 572                 goto error_exit;
 573         }
 574
 575         aha->init_level++;
 576
 577         /* And permanently map them */
 578         bus_dmamap_load(aha->ccb_dmat, aha->ccb_dmamap,
 579                         aha->aha_ccb_array,
 580                         aha->max_ccbs * sizeof(struct aha_ccb),
 581                         ahamapccbs, aha, /*flags*/0);
 582
 583         aha->init_level++;
 584
 585         /* DMA tag for our S/G structures.  We allocate in page sized chunks */
 586         if (bus_dma_tag_create( /* parent       */ aha->parent_dmat,
 587                                 /* alignment    */ 1,
 588                                 /* boundary     */ 0,
 589                                 /* lowaddr      */ BUS_SPACE_MAXADDR,
 590                                 /* highaddr     */ BUS_SPACE_MAXADDR,
 591                                 /* filter       */ NULL,
 592                                 /* filterarg    */ NULL,
 593                                 /* maxsize      */ PAGE_SIZE,
 594                                 /* nsegments    */ 1,
 595                                 /* maxsegsz     */ BUS_SPACE_MAXSIZE_24BIT,
 596                                 /* flags        */ 0,
 597                                 /* lockfunc     */ busdma_lock_mutex,
 598                                 /* lockarg      */ &Giant,
 599                                 &aha->sg_dmat) != 0) {
 600                 goto error_exit;
 601         }
 602
 603         aha->init_level++;
 604
 605         /* Perform initial CCB allocation */
 606         bzero(aha->aha_ccb_array, aha->max_ccbs * sizeof(struct aha_ccb));
 607         ahaallocccbs(aha);
 608
 609         if (aha->num_ccbs == 0) {
 610                 printf("%s: aha_init - Unable to allocate initial ccbs\n",
 611                        aha_name(aha));
 612                 goto error_exit;
 613         }
 614
 615         /*
 616          * Note that we are going and return (to probe)
 617          */
 618         return 0;
 619
 620 error_exit:
 621
 622         return (ENXIO);
 623 }
 624
 625 int
 626 aha_attach(struct aha_softc *aha)
 627 {
 628         int tagged_dev_openings;
 629         struct cam_devq *devq;
 630
 631         /*
 632          * We don't do tagged queueing, since the aha cards don't
 633          * support it.
 634          */
 635         tagged_dev_openings = 0;
 636
 637         /*
 638          * Create the device queue for our SIM.
 639          */
 640         devq = cam_simq_alloc(aha->max_ccbs - 1);
 641         if (devq == NULL)
 642                 return (ENOMEM);
 643
 644         /*
 645          * Construct our SIM entry
 646          */
 647         aha->sim = cam_sim_alloc(ahaaction, ahapoll, "aha", aha, aha->unit,
 648                                 2, tagged_dev_openings, devq);
 649         if (aha->sim == NULL) {
 650                 cam_simq_free(devq);
 651                 return (ENOMEM);
 652         }
 653
 654         if (xpt_bus_register(aha->sim, 0) != CAM_SUCCESS) {
 655                 cam_sim_free(aha->sim, /*free_devq*/TRUE);
 656                 return (ENXIO);
 657         }
 658
 659         if (xpt_create_path(&aha->path, /*periph*/NULL,
 660                             cam_sim_path(aha->sim), CAM_TARGET_WILDCARD,
 661                             CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
 662                 xpt_bus_deregister(cam_sim_path(aha->sim));
 663                 cam_sim_free(aha->sim, /*free_devq*/TRUE);
 664                 return (ENXIO);
 665         }
 666
 667         return (0);
 668 }
 669
 670 char *
 671 aha_name(struct aha_softc *aha)
 672 {
 673         static char name[10];
 674
 675         snprintf(name, sizeof(name), "aha%d", aha->unit);
 676         return (name);
 677 }
 678
 679 void
 680 aha_find_probe_range(int ioport, int *port_index, int *max_port_index)
 681 {
 682         if (ioport > 0) {
 683                 int i;
 684
 685                 for (i = 0;i < AHA_NUM_ISAPORTS; i++)
 686                         if (ioport <= aha_isa_ports[i].addr)
 687                                 break;
 688                 if ((i >= AHA_NUM_ISAPORTS)
 689                  || (ioport != aha_isa_ports[i].addr)) {
 690                         printf("\n"
 691 "aha_isa_probe: Invalid baseport of 0x%x specified.\n"
 692 "aha_isa_probe: Nearest valid baseport is 0x%x.\n"
 693 "aha_isa_probe: Failing probe.\n",
 694                                ioport,
 695                                (i < AHA_NUM_ISAPORTS)
 696                                     ? aha_isa_ports[i].addr
 697                                     : aha_isa_ports[AHA_NUM_ISAPORTS - 1].addr);
 698                         *port_index = *max_port_index = -1;
 699                         return;
 700                 }
 701                 *port_index = *max_port_index = aha_isa_ports[i].bio;
 702         } else {
 703                 *port_index = 0;
 704                 *max_port_index = AHA_NUM_ISAPORTS - 1;
 705         }
 706 }
 707
 708 int
 709 aha_iop_from_bio(isa_compat_io_t bio_index)
 710 {
 711         if (bio_index >= 0 && bio_index < AHA_NUM_ISAPORTS)
 712                 return (aha_board_ports[bio_index]);
 713         return (-1);
 714 }
 715
 716 static void
 717 ahaallocccbs(struct aha_softc *aha)
 718 {
 719         struct aha_ccb *next_ccb;
 720         struct sg_map_node *sg_map;
 721         bus_addr_t physaddr;
 722         aha_sg_t *segs;
 723         int newcount;
 724         int i;
 725
 726         next_ccb = &aha->aha_ccb_array[aha->num_ccbs];
 727
 728         sg_map = malloc(sizeof(*sg_map), M_DEVBUF, M_NOWAIT);
 729
 730         if (sg_map == NULL)
 731                 return;
 732
 733         /* Allocate S/G space for the next batch of CCBS */
 734         if (bus_dmamem_alloc(aha->sg_dmat, (void **)&sg_map->sg_vaddr,
 735                              BUS_DMA_NOWAIT, &sg_map->sg_dmamap) != 0) {
 736                 free(sg_map, M_DEVBUF);
 737                 return;
 738         }
 739
 740         SLIST_INSERT_HEAD(&aha->sg_maps, sg_map, links);
 741
 742         bus_dmamap_load(aha->sg_dmat, sg_map->sg_dmamap, sg_map->sg_vaddr,
 743                         PAGE_SIZE, ahamapsgs, aha, /*flags*/0);
 744
 745         segs = sg_map->sg_vaddr;
 746         physaddr = sg_map->sg_physaddr;
 747
 748         newcount = (PAGE_SIZE / (AHA_NSEG * sizeof(aha_sg_t)));
 749         for (i = 0; aha->num_ccbs < aha->max_ccbs && i < newcount; i++) {
 750                 int error;
 751
 752                 next_ccb->sg_list = segs;
 753                 next_ccb->sg_list_phys = physaddr;
 754                 next_ccb->flags = ACCB_FREE;
 755                 error = bus_dmamap_create(aha->buffer_dmat, /*flags*/0,
 756                                           &next_ccb->dmamap);
 757                 if (error != 0)
 758                         break;
 759                 SLIST_INSERT_HEAD(&aha->free_aha_ccbs, next_ccb, links);
 760                 segs += AHA_NSEG;
 761                 physaddr += (AHA_NSEG * sizeof(aha_sg_t));
 762                 next_ccb++;
 763                 aha->num_ccbs++;
 764         }
 765
 766         /* Reserve a CCB for error recovery */
 767         if (aha->recovery_accb == NULL) {
 768                 aha->recovery_accb = SLIST_FIRST(&aha->free_aha_ccbs);
 769                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
 770         }
 771 }
 772
 773 static __inline void
 774 ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb)
 775 {
 776         int s;
 777
 778         s = splcam();
 779         if ((accb->flags & ACCB_ACTIVE) != 0)
 780                 LIST_REMOVE(&accb->ccb->ccb_h, sim_links.le);
 781         if (aha->resource_shortage != 0
 782          && (accb->ccb->ccb_h.status & CAM_RELEASE_SIMQ) == 0) {
 783                 accb->ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
 784                 aha->resource_shortage = FALSE;
 785         }
 786         accb->flags = ACCB_FREE;
 787         SLIST_INSERT_HEAD(&aha->free_aha_ccbs, accb, links);
 788         aha->active_ccbs--;
 789         splx(s);
 790 }
 791
 792 static struct aha_ccb*
 793 ahagetccb(struct aha_softc *aha)
 794 {
 795         struct  aha_ccb* accb;
 796         int     s;
 797
 798         s = splcam();
 799         if ((accb = SLIST_FIRST(&aha->free_aha_ccbs)) != NULL) {
 800                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
 801                 aha->active_ccbs++;
 802         } else if (aha->num_ccbs < aha->max_ccbs) {
 803                 ahaallocccbs(aha);
 804                 accb = SLIST_FIRST(&aha->free_aha_ccbs);
 805                 if (accb == NULL)
 806                         printf("%s: Can't malloc ACCB\n", aha_name(aha));
 807                 else {
 808                         SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
 809                         aha->active_ccbs++;
 810                 }
 811         }
 812         splx(s);
 813
 814         return (accb);
 815 }
 816
 817 static void
 818 ahaaction(struct cam_sim *sim, union ccb *ccb)
 819 {
 820         struct  aha_softc *aha;
 821
 822         CAM_DEBUG(ccb->ccb_h.path, CAM_DEBUG_TRACE, ("ahaaction\n"));
 823
 824         aha = (struct aha_softc *)cam_sim_softc(sim);
 825
 826         switch (ccb->ccb_h.func_code) {
 827         /* Common cases first */
 828         case XPT_SCSI_IO:       /* Execute the requested I/O operation */
 829         case XPT_RESET_DEV:     /* Bus Device Reset the specified SCSI device */
 830         {
 831                 struct  aha_ccb *accb;
 832                 struct  aha_hccb *hccb;
 833
 834                 /*
 835                  * Get an accb to use.
 836                  */
 837                 if ((accb = ahagetccb(aha)) == NULL) {
 838                         int s;
 839
 840                         s = splcam();
 841                         aha->resource_shortage = TRUE;
 842                         splx(s);
 843                         xpt_freeze_simq(aha->sim, /*count*/1);
 844                         ccb->ccb_h.status = CAM_REQUEUE_REQ;
 845                         xpt_done(ccb);
 846                         return;
 847                 }
 848
 849                 hccb = &accb->hccb;
 850
 851                 /*
 852                  * So we can find the ACCB when an abort is requested
 853                  */
 854                 accb->ccb = ccb;
 855                 ccb->ccb_h.ccb_accb_ptr = accb;
 856                 ccb->ccb_h.ccb_aha_ptr = aha;
 857
 858                 /*
 859                  * Put all the arguments for the xfer in the accb
 860                  */
 861                 hccb->target = ccb->ccb_h.target_id;
 862                 hccb->lun = ccb->ccb_h.target_lun;
 863                 hccb->ahastat = 0;
 864                 hccb->sdstat = 0;
 865
 866                 if (ccb->ccb_h.func_code == XPT_SCSI_IO) {
 867                         struct ccb_scsiio *csio;
 868                         struct ccb_hdr *ccbh;
 869
 870                         csio = &ccb->csio;
 871                         ccbh = &csio->ccb_h;
 872                         hccb->opcode = aha->ccb_ccb_opcode;
 873                         hccb->datain = (ccb->ccb_h.flags & CAM_DIR_IN) != 0;
 874                         hccb->dataout = (ccb->ccb_h.flags & CAM_DIR_OUT) != 0;
 875                         hccb->cmd_len = csio->cdb_len;
 876                         if (hccb->cmd_len > sizeof(hccb->scsi_cdb)) {
 877                                 ccb->ccb_h.status = CAM_REQ_INVALID;
 878                                 ahafreeccb(aha, accb);
 879                                 xpt_done(ccb);
 880                                 return;
 881                         }
 882                         hccb->sense_len = csio->sense_len;
 883                         if ((ccbh->flags & CAM_CDB_POINTER) != 0) {
 884                                 if ((ccbh->flags & CAM_CDB_PHYS) == 0) {
 885                                         bcopy(csio->cdb_io.cdb_ptr,
 886                                               hccb->scsi_cdb, hccb->cmd_len);
 887                                 } else {
 888                                         /* I guess I could map it in... */
 889                                         ccbh->status = CAM_REQ_INVALID;
 890                                         ahafreeccb(aha, accb);
 891                                         xpt_done(ccb);
 892                                         return;
 893                                 }
 894                         } else {
 895                                 bcopy(csio->cdb_io.cdb_bytes,
 896                                       hccb->scsi_cdb, hccb->cmd_len);
 897                         }
 898                         /*
 899                          * If we have any data to send with this command,
 900                          * map it into bus space.
 901                          */
 902                         /* Only use S/G if there is a transfer */
 903                         if ((ccbh->flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
 904                                 if ((ccbh->flags & CAM_SCATTER_VALID) == 0) {
 905                                         /*
 906                                          * We've been given a pointer
 907                                          * to a single buffer.
 908                                          */
 909                                         if ((ccbh->flags & CAM_DATA_PHYS)==0) {
 910                                                 int s;
 911                                                 int error;
 912
 913                                                 s = splsoftvm();
 914                                                 error = bus_dmamap_load(
 915                                                     aha->buffer_dmat,
 916                                                     accb->dmamap,
 917                                                     csio->data_ptr,
 918                                                     csio->dxfer_len,
 919                                                     ahaexecuteccb,
 920                                                     accb,
 921                                                     /*flags*/0);
 922                                                 if (error == EINPROGRESS) {
 923                                                         /*
 924                                                          * So as to maintain
 925                                                          * ordering, freeze the
 926                                                          * controller queue
 927                                                          * until our mapping is
 928                                                          * returned.
 929                                                          */
 930                                                         xpt_freeze_simq(aha->sim,
 931                                                                         1);
 932                                                         csio->ccb_h.status |=
 933                                                             CAM_RELEASE_SIMQ;
 934                                                 }
 935                                                 splx(s);
 936                                         } else {
 937                                                 struct bus_dma_segment seg;
 938
 939                                                 /* Pointer to physical buffer */
 940                                                 seg.ds_addr =
 941                                                     (bus_addr_t)csio->data_ptr;
 942                                                 seg.ds_len = csio->dxfer_len;
 943                                                 ahaexecuteccb(accb, &seg, 1, 0);
 944                                         }
 945                                 } else {
 946                                         struct bus_dma_segment *segs;
 947
 948                                         if ((ccbh->flags & CAM_DATA_PHYS) != 0)
 949                                                 panic("ahaaction - Physical "
 950                                                       "segment pointers "
 951                                                       "unsupported");
 952
 953                                         if ((ccbh->flags&CAM_SG_LIST_PHYS)==0)
 954                                                 panic("ahaaction - Virtual "
 955                                                       "segment addresses "
 956                                                       "unsupported");
 957
 958                                         /* Just use the segments provided */
 959                                         segs = (struct bus_dma_segment *)
 960                                             csio->data_ptr;
 961                                         ahaexecuteccb(accb, segs,
 962                                                      csio->sglist_cnt, 0);
 963                                 }
 964                         } else {
 965                                 ahaexecuteccb(accb, NULL, 0, 0);
 966                         }
 967                 } else {
 968                         hccb->opcode = INITIATOR_BUS_DEV_RESET;
 969                         /* No data transfer */
 970                         hccb->datain = TRUE;
 971                         hccb->dataout = TRUE;
 972                         hccb->cmd_len = 0;
 973                         hccb->sense_len = 0;
 974                         ahaexecuteccb(accb, NULL, 0, 0);
 975                 }
 976                 break;
 977         }
 978         case XPT_EN_LUN:                /* Enable LUN as a target */
 979         case XPT_TARGET_IO:             /* Execute target I/O request */
 980         case XPT_ACCEPT_TARGET_IO:      /* Accept Host Target Mode CDB */
 981         case XPT_CONT_TARGET_IO:        /* Continue Host Target I/O Connection*/
 982         case XPT_ABORT:                 /* Abort the specified CCB */
 983                 /* XXX Implement */
 984                 ccb->ccb_h.status = CAM_REQ_INVALID;
 985                 xpt_done(ccb);
 986                 break;
 987         case XPT_SET_TRAN_SETTINGS:
 988         {
 989                 /* XXX Implement */
 990                 ccb->ccb_h.status = CAM_PROVIDE_FAIL;
 991                 xpt_done(ccb);
 992                 break;
 993         }
 994         case XPT_GET_TRAN_SETTINGS:
 995         /* Get default/user set transfer settings for the target */
 996         {
 997                 struct  ccb_trans_settings *cts;
 998                 u_int   target_mask;
 999
1000                 cts = &ccb->cts;
1001                 target_mask = 0x01 << ccb->ccb_h.target_id;
1002                 if ((cts->flags & CCB_TRANS_USER_SETTINGS) != 0) {
1003                         cts->flags = 0;
1004                         if ((aha->disc_permitted & target_mask) != 0)
1005                                 cts->flags |= CCB_TRANS_DISC_ENB;
1006                         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1007                         if ((aha->sync_permitted & target_mask) != 0) {
1008                                 if (aha->boardid >= BOARD_1542CF)
1009                                         cts->sync_period = 25;
1010                                 else
1011                                         cts->sync_period = 50;
1012                         } else
1013                                 cts->sync_period = 0;
1014
1015                         if (cts->sync_period != 0)
1016                                 cts->sync_offset = 15;
1017
1018                         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1019                                    | CCB_TRANS_SYNC_OFFSET_VALID
1020                                    | CCB_TRANS_BUS_WIDTH_VALID
1021                                    | CCB_TRANS_DISC_VALID
1022                                    | CCB_TRANS_TQ_VALID;
1023                 } else {
1024                         ahafetchtransinfo(aha, cts);
1025                 }
1026
1027                 ccb->ccb_h.status = CAM_REQ_CMP;
1028                 xpt_done(ccb);
1029                 break;
1030         }
1031         case XPT_CALC_GEOMETRY:
1032         {
1033                 struct    ccb_calc_geometry *ccg;
1034                 u_int32_t size_mb;
1035                 u_int32_t secs_per_cylinder;
1036
1037                 ccg = &ccb->ccg;
1038                 size_mb = ccg->volume_size
1039                         / ((1024L * 1024L) / ccg->block_size);
1040
1041                 if (size_mb >= 1024 && (aha->extended_trans != 0)) {
1042                         if (size_mb >= 2048) {
1043                                 ccg->heads = 255;
1044                                 ccg->secs_per_track = 63;
1045                         } else {
1046                                 ccg->heads = 128;
1047                                 ccg->secs_per_track = 32;
1048                         }
1049                 } else {
1050                         ccg->heads = 64;
1051                         ccg->secs_per_track = 32;
1052                 }
1053                 secs_per_cylinder = ccg->heads * ccg->secs_per_track;
1054                 ccg->cylinders = ccg->volume_size / secs_per_cylinder;
1055                 ccb->ccb_h.status = CAM_REQ_CMP;
1056                 xpt_done(ccb);
1057                 break;
1058         }
1059         case XPT_RESET_BUS:             /* Reset the specified SCSI bus */
1060         {
1061                 ahareset(aha, /*hardreset*/TRUE);
1062                 ccb->ccb_h.status = CAM_REQ_CMP;
1063                 xpt_done(ccb);
1064                 break;
1065         }
1066         case XPT_TERM_IO:               /* Terminate the I/O process */
1067                 /* XXX Implement */
1068                 ccb->ccb_h.status = CAM_REQ_INVALID;
1069                 xpt_done(ccb);
1070                 break;
1071         case XPT_PATH_INQ:              /* Path routing inquiry */
1072         {
1073                 struct ccb_pathinq *cpi = &ccb->cpi;
1074
1075                 cpi->version_num = 1; /* XXX??? */
1076                 cpi->hba_inquiry = PI_SDTR_ABLE;
1077                 cpi->target_sprt = 0;
1078                 cpi->hba_misc = 0;
1079                 cpi->hba_eng_cnt = 0;
1080                 cpi->max_target = 7;
1081                 cpi->max_lun = 7;
1082                 cpi->initiator_id = aha->scsi_id;
1083                 cpi->bus_id = cam_sim_bus(sim);
1084                 cpi->base_transfer_speed = 3300;
1085                 strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1086                 strncpy(cpi->hba_vid, "Adaptec", HBA_IDLEN);
1087                 strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1088                 cpi->unit_number = cam_sim_unit(sim);
1089                 cpi->ccb_h.status = CAM_REQ_CMP;
1090                 xpt_done(ccb);
1091                 break;
1092         }
1093         default:
1094                 ccb->ccb_h.status = CAM_REQ_INVALID;
1095                 xpt_done(ccb);
1096                 break;
1097         }
1098 }
1099
1100 static void
1101 ahaexecuteccb(void *arg, bus_dma_segment_t *dm_segs, int nseg, int error)
1102 {
1103         struct   aha_ccb *accb;
1104         union    ccb *ccb;
1105         struct   aha_softc *aha;
1106         int      s;
1107         u_int32_t paddr;
1108
1109         accb = (struct aha_ccb *)arg;
1110         ccb = accb->ccb;
1111         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1112
1113         if (error != 0) {
1114                 if (error != EFBIG)
1115                         printf("%s: Unexepected error 0x%x returned from "
1116                                "bus_dmamap_load\n", aha_name(aha), error);
1117                 if (ccb->ccb_h.status == CAM_REQ_INPROG) {
1118                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1119                         ccb->ccb_h.status = CAM_REQ_TOO_BIG|CAM_DEV_QFRZN;
1120                 }
1121                 ahafreeccb(aha, accb);
1122                 xpt_done(ccb);
1123                 return;
1124         }
1125
1126         if (nseg != 0) {
1127                 aha_sg_t *sg;
1128                 bus_dma_segment_t *end_seg;
1129                 bus_dmasync_op_t op;
1130
1131                 end_seg = dm_segs + nseg;
1132
1133                 /* Copy the segments into our SG list */
1134                 sg = accb->sg_list;
1135                 while (dm_segs < end_seg) {
1136                         ahautoa24(dm_segs->ds_len, sg->len);
1137                         ahautoa24(dm_segs->ds_addr, sg->addr);
1138                         sg++;
1139                         dm_segs++;
1140                 }
1141
1142                 if (nseg > 1) {
1143                         accb->hccb.opcode = aha->ccb_sg_opcode;
1144                         ahautoa24((sizeof(aha_sg_t) * nseg),
1145                                   accb->hccb.data_len);
1146                         ahautoa24(accb->sg_list_phys, accb->hccb.data_addr);
1147                 } else {
1148                         bcopy(accb->sg_list->len, accb->hccb.data_len, 3);
1149                         bcopy(accb->sg_list->addr, accb->hccb.data_addr, 3);
1150                 }
1151
1152                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1153                         op = BUS_DMASYNC_PREREAD;
1154                 else
1155                         op = BUS_DMASYNC_PREWRITE;
1156
1157                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1158
1159         } else {
1160                 accb->hccb.opcode = INITIATOR_CCB;
1161                 ahautoa24(0, accb->hccb.data_len);
1162                 ahautoa24(0, accb->hccb.data_addr);
1163         }
1164
1165         s = splcam();
1166
1167         /*
1168          * Last time we need to check if this CCB needs to
1169          * be aborted.
1170          */
1171         if (ccb->ccb_h.status != CAM_REQ_INPROG) {
1172                 if (nseg != 0)
1173                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1174                 ahafreeccb(aha, accb);
1175                 xpt_done(ccb);
1176                 splx(s);
1177                 return;
1178         }
1179
1180         accb->flags = ACCB_ACTIVE;
1181         ccb->ccb_h.status |= CAM_SIM_QUEUED;
1182         LIST_INSERT_HEAD(&aha->pending_ccbs, &ccb->ccb_h, sim_links.le);
1183
1184         ccb->ccb_h.timeout_ch =
1185             timeout(ahatimeout, (caddr_t)accb,
1186                     (ccb->ccb_h.timeout * hz) / 1000);
1187
1188         /* Tell the adapter about this command */
1189         if (aha->cur_outbox->action_code != AMBO_FREE) {
1190                 /*
1191                  * We should never encounter a busy mailbox.
1192                  * If we do, warn the user, and treat it as
1193                  * a resource shortage.  If the controller is
1194                  * hung, one of the pending transactions will
1195                  * timeout causing us to start recovery operations.
1196                  */
1197                 printf("%s: Encountered busy mailbox with %d out of %d "
1198                        "commands active!!!", aha_name(aha), aha->active_ccbs,
1199                        aha->max_ccbs);
1200                 untimeout(ahatimeout, accb, ccb->ccb_h.timeout_ch);
1201                 if (nseg != 0)
1202                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1203                 ahafreeccb(aha, accb);
1204                 aha->resource_shortage = TRUE;
1205                 xpt_freeze_simq(aha->sim, /*count*/1);
1206                 ccb->ccb_h.status = CAM_REQUEUE_REQ;
1207                 xpt_done(ccb);
1208                 return;
1209         }
1210         paddr = ahaccbvtop(aha, accb);
1211         ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1212         aha->cur_outbox->action_code = AMBO_START;
1213         aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1214
1215         ahanextoutbox(aha);
1216         splx(s);
1217 }
1218
1219 void
1220 aha_intr(void *arg)
1221 {
1222         struct  aha_softc *aha;
1223         u_int   intstat;
1224
1225         aha = (struct aha_softc *)arg;
1226         while (((intstat = aha_inb(aha, INTSTAT_REG)) & INTR_PENDING) != 0) {
1227                 if ((intstat & CMD_COMPLETE) != 0) {
1228                         aha->latched_status = aha_inb(aha, STATUS_REG);
1229                         aha->command_cmp = TRUE;
1230                 }
1231
1232                 aha_outb(aha, CONTROL_REG, RESET_INTR);
1233
1234                 if ((intstat & IMB_LOADED) != 0) {
1235                         while (aha->cur_inbox->comp_code != AMBI_FREE) {
1236                                 u_int32_t       paddr;
1237                                 paddr = aha_a24tou(aha->cur_inbox->ccb_addr);
1238                                 ahadone(aha,
1239                                        ahaccbptov(aha, paddr),
1240                                        aha->cur_inbox->comp_code);
1241                                 aha->cur_inbox->comp_code = AMBI_FREE;
1242                                 ahanextinbox(aha);
1243                         }
1244                 }
1245
1246                 if ((intstat & SCSI_BUS_RESET) != 0) {
1247                         ahareset(aha, /*hardreset*/FALSE);
1248                 }
1249         }
1250 }
1251
1252 static void
1253 ahadone(struct aha_softc *aha, struct aha_ccb *accb, aha_mbi_comp_code_t comp_code)
1254 {
1255         union  ccb        *ccb;
1256         struct ccb_scsiio *csio;
1257
1258         ccb = accb->ccb;
1259         csio = &accb->ccb->csio;
1260
1261         if ((accb->flags & ACCB_ACTIVE) == 0) {
1262                 printf("%s: ahadone - Attempt to free non-active ACCB %p\n",
1263                        aha_name(aha), (void *)accb);
1264                 return;
1265         }
1266
1267         if ((ccb->ccb_h.flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
1268                 bus_dmasync_op_t op;
1269
1270                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1271                         op = BUS_DMASYNC_POSTREAD;
1272                 else
1273                         op = BUS_DMASYNC_POSTWRITE;
1274                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1275                 bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1276         }
1277
1278         if (accb == aha->recovery_accb) {
1279                 /*
1280                  * The recovery ACCB does not have a CCB associated
1281                  * with it, so short circuit the normal error handling.
1282                  * We now traverse our list of pending CCBs and process
1283                  * any that were terminated by the recovery CCBs action.
1284                  * We also reinstate timeouts for all remaining, pending,
1285                  * CCBs.
1286                  */
1287                 struct cam_path *path;
1288                 struct ccb_hdr *ccb_h;
1289                 cam_status error;
1290
1291                 /* Notify all clients that a BDR occured */
1292                 error = xpt_create_path(&path, /*periph*/NULL,
1293                                         cam_sim_path(aha->sim),
1294                                         accb->hccb.target,
1295                                         CAM_LUN_WILDCARD);
1296
1297                 if (error == CAM_REQ_CMP)
1298                         xpt_async(AC_SENT_BDR, path, NULL);
1299
1300                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1301                 while (ccb_h != NULL) {
1302                         struct aha_ccb *pending_accb;
1303
1304                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1305                         if (pending_accb->hccb.target == accb->hccb.target) {
1306                                 pending_accb->hccb.ahastat = AHASTAT_HA_BDR;
1307                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1308                                 ahadone(aha, pending_accb, AMBI_ERROR);
1309                         } else {
1310                                 ccb_h->timeout_ch =
1311                                     timeout(ahatimeout, (caddr_t)pending_accb,
1312                                             (ccb_h->timeout * hz) / 1000);
1313                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1314                         }
1315                 }
1316                 printf("%s: No longer in timeout\n", aha_name(aha));
1317                 return;
1318         }
1319
1320         untimeout(ahatimeout, accb, ccb->ccb_h.timeout_ch);
1321
1322         switch (comp_code) {
1323         case AMBI_FREE:
1324                 printf("%s: ahadone - CCB completed with free status!\n",
1325                        aha_name(aha));
1326                 break;
1327         case AMBI_NOT_FOUND:
1328                 printf("%s: ahadone - CCB Abort failed to find CCB\n",
1329                        aha_name(aha));
1330                 break;
1331         case AMBI_ABORT:
1332         case AMBI_ERROR:
1333                 /* An error occured */
1334                 if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1335                         csio->resid = 0;
1336                 else
1337                         csio->resid = aha_a24tou(accb->hccb.data_len);
1338                 switch(accb->hccb.ahastat) {
1339                 case AHASTAT_DATARUN_ERROR:
1340                 {
1341                         if (csio->resid <= 0) {
1342                                 csio->ccb_h.status = CAM_DATA_RUN_ERR;
1343                                 break;
1344                         }
1345                         /* FALLTHROUGH */
1346                 }
1347                 case AHASTAT_NOERROR:
1348                         csio->scsi_status = accb->hccb.sdstat;
1349                         csio->ccb_h.status |= CAM_SCSI_STATUS_ERROR;
1350                         switch(csio->scsi_status) {
1351                         case SCSI_STATUS_CHECK_COND:
1352                         case SCSI_STATUS_CMD_TERMINATED:
1353                                 csio->ccb_h.status |= CAM_AUTOSNS_VALID;
1354                                 /*
1355                                  * The aha writes the sense data at different
1356                                  * offsets based on the scsi cmd len
1357                                  */
1358                                 bcopy((caddr_t) &accb->hccb.scsi_cdb +
1359                                         accb->hccb.cmd_len,
1360                                         (caddr_t) &csio->sense_data,
1361                                         accb->hccb.sense_len);
1362                                 break;
1363                         default:
1364                                 break;
1365                         case SCSI_STATUS_OK:
1366                                 csio->ccb_h.status = CAM_REQ_CMP;
1367                                 break;
1368                         }
1369                         break;
1370                 case AHASTAT_SELTIMEOUT:
1371                         csio->ccb_h.status = CAM_SEL_TIMEOUT;
1372                         break;
1373                 case AHASTAT_UNEXPECTED_BUSFREE:
1374                         csio->ccb_h.status = CAM_UNEXP_BUSFREE;
1375                         break;
1376                 case AHASTAT_INVALID_PHASE:
1377                         csio->ccb_h.status = CAM_SEQUENCE_FAIL;
1378                         break;
1379                 case AHASTAT_INVALID_ACTION_CODE:
1380                         panic("%s: Inavlid Action code", aha_name(aha));
1381                         break;
1382                 case AHASTAT_INVALID_OPCODE:
1383                         if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1384                                 panic("%s: Invalid CCB Opcode %x hccb = %p",
1385                                         aha_name(aha), accb->hccb.opcode,
1386                                         &accb->hccb);
1387                         printf("%s: AHA-1540A detected, compensating\n",
1388                                 aha_name(aha));
1389                         aha->ccb_sg_opcode = INITIATOR_SG_CCB;
1390                         aha->ccb_ccb_opcode = INITIATOR_CCB;
1391                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1392                         csio->ccb_h.status = CAM_REQUEUE_REQ;
1393                         break;
1394                 case AHASTAT_LINKED_CCB_LUN_MISMATCH:
1395                         /* We don't even support linked commands... */
1396                         panic("%s: Linked CCB Lun Mismatch", aha_name(aha));
1397                         break;
1398                 case AHASTAT_INVALID_CCB_OR_SG_PARAM:
1399                         panic("%s: Invalid CCB or SG list", aha_name(aha));
1400                         break;
1401                 case AHASTAT_HA_SCSI_BUS_RESET:
1402                         if ((csio->ccb_h.status & CAM_STATUS_MASK)
1403                             != CAM_CMD_TIMEOUT)
1404                                 csio->ccb_h.status = CAM_SCSI_BUS_RESET;
1405                         break;
1406                 case AHASTAT_HA_BDR:
1407                         if ((accb->flags & ACCB_DEVICE_RESET) == 0)
1408                                 csio->ccb_h.status = CAM_BDR_SENT;
1409                         else
1410                                 csio->ccb_h.status = CAM_CMD_TIMEOUT;
1411                         break;
1412                 }
1413                 if (csio->ccb_h.status != CAM_REQ_CMP) {
1414                         xpt_freeze_devq(csio->ccb_h.path, /*count*/1);
1415                         csio->ccb_h.status |= CAM_DEV_QFRZN;
1416                 }
1417                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1418                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1419                 ahafreeccb(aha, accb);
1420                 xpt_done(ccb);
1421                 break;
1422         case AMBI_OK:
1423                 /* All completed without incident */
1424                 /* XXX DO WE NEED TO COPY SENSE BYTES HERE???? XXX */
1425                 /* I don't think so since it works???? */
1426                 ccb->ccb_h.status |= CAM_REQ_CMP;
1427                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1428                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1429                 ahafreeccb(aha, accb);
1430                 xpt_done(ccb);
1431                 break;
1432         }
1433 }
1434
1435 static int
1436 ahareset(struct aha_softc* aha, int hard_reset)
1437 {
1438         struct   ccb_hdr *ccb_h;
1439         u_int    status;
1440         u_int    timeout;
1441         u_int8_t reset_type;
1442
1443         if (hard_reset != 0)
1444                 reset_type = HARD_RESET;
1445         else
1446                 reset_type = SOFT_RESET;
1447         aha_outb(aha, CONTROL_REG, reset_type);
1448
1449         /* Wait 5sec. for Diagnostic start */
1450         timeout = 5 * 10000;
1451         while (--timeout) {
1452                 status = aha_inb(aha, STATUS_REG);
1453                 if ((status & DIAG_ACTIVE) != 0)
1454                         break;
1455                 DELAY(100);
1456         }
1457         if (timeout == 0) {
1458                 PRVERB(("%s: ahareset - Diagnostic Active failed to "
1459                         "assert. status = 0x%x\n", aha_name(aha),
1460                         status));
1461                 return (ETIMEDOUT);
1462         }
1463
1464         /* Wait 10sec. for Diagnostic end */
1465         timeout = 10 * 10000;
1466         while (--timeout) {
1467                 status = aha_inb(aha, STATUS_REG);
1468                 if ((status & DIAG_ACTIVE) == 0)
1469                         break;
1470                 DELAY(100);
1471         }
1472         if (timeout == 0) {
1473                 panic("%s: ahareset - Diagnostic Active failed to drop. "
1474                        "status = 0x%x\n", aha_name(aha), status);
1475                 return (ETIMEDOUT);
1476         }
1477
1478         /* Wait for the host adapter to become ready or report a failure */
1479         timeout = 10000;
1480         while (--timeout) {
1481                 status = aha_inb(aha, STATUS_REG);
1482                 if ((status & (DIAG_FAIL|HA_READY|DATAIN_REG_READY)) != 0)
1483                         break;
1484                 DELAY(100);
1485         }
1486         if (timeout == 0) {
1487                 printf("%s: ahareset - Host adapter failed to come ready. "
1488                        "status = 0x%x\n", aha_name(aha), status);
1489                 return (ETIMEDOUT);
1490         }
1491
1492         /* If the diagnostics failed, tell the user */
1493         if ((status & DIAG_FAIL) != 0
1494          || (status & HA_READY) == 0) {
1495                 printf("%s: ahareset - Adapter failed diagnostics\n",
1496                        aha_name(aha));
1497
1498                 if ((status & DATAIN_REG_READY) != 0)
1499                         printf("%s: ahareset - Host Adapter Error "
1500                                "code = 0x%x\n", aha_name(aha),
1501                                aha_inb(aha, DATAIN_REG));
1502                 return (ENXIO);
1503         }
1504
1505         /* If we've allocated mailboxes, initialize them */
1506         if (aha->init_level > 4)
1507                 ahainitmboxes(aha);
1508
1509         /* If we've attached to the XPT, tell it about the event */
1510         if (aha->path != NULL)
1511                 xpt_async(AC_BUS_RESET, aha->path, NULL);
1512
1513         /*
1514          * Perform completion processing for all outstanding CCBs.
1515          */
1516         while ((ccb_h = LIST_FIRST(&aha->pending_ccbs)) != NULL) {
1517                 struct aha_ccb *pending_accb;
1518
1519                 pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1520                 pending_accb->hccb.ahastat = AHASTAT_HA_SCSI_BUS_RESET;
1521                 ahadone(aha, pending_accb, AMBI_ERROR);
1522         }
1523
1524         return (0);
1525 }
1526
1527 /*
1528  * Send a command to the adapter.
1529  */
1530 int
1531 aha_cmd(struct aha_softc *aha, aha_op_t opcode, u_int8_t *params,
1532         u_int param_len, u_int8_t *reply_data, u_int reply_len,
1533         u_int cmd_timeout)
1534 {
1535         u_int   timeout;
1536         u_int   status;
1537         u_int   saved_status;
1538         u_int   intstat;
1539         u_int   reply_buf_size;
1540         int     s;
1541         int     cmd_complete;
1542         int     error;
1543
1544         /* No data returned to start */
1545         reply_buf_size = reply_len;
1546         reply_len = 0;
1547         intstat = 0;
1548         cmd_complete = 0;
1549         saved_status = 0;
1550         error = 0;
1551
1552         /*
1553          * All commands except for the "start mailbox" and the "enable
1554          * outgoing mailbox read interrupt" commands cannot be issued
1555          * while there are pending transactions.  Freeze our SIMQ
1556          * and wait for all completions to occur if necessary.
1557          */
1558         timeout = 100000;
1559         s = splcam();
1560         while (LIST_FIRST(&aha->pending_ccbs) != NULL && --timeout) {
1561                 /* Fire the interrupt handler in case interrupts are blocked */
1562                 aha_intr(aha);
1563                 splx(s);
1564                 DELAY(100);
1565                 s = splcam();
1566         }
1567         splx(s);
1568
1569         if (timeout == 0) {
1570                 printf("%s: aha_cmd: Timeout waiting for adapter idle\n",
1571                        aha_name(aha));
1572                 return (ETIMEDOUT);
1573         }
1574         aha->command_cmp = 0;
1575         /*
1576          * Wait up to 10 sec. for the adapter to become
1577          * ready to accept commands.
1578          */
1579         timeout = 100000;
1580         while (--timeout) {
1581
1582                 status = aha_inb(aha, STATUS_REG);
1583                 if ((status & HA_READY) != 0
1584                  && (status & CMD_REG_BUSY) == 0)
1585                         break;
1586                 /*
1587                  * Throw away any pending data which may be
1588                  * left over from earlier commands that we
1589                  * timedout on.
1590                  */
1591                 if ((status & DATAIN_REG_READY) != 0)
1592                         (void)aha_inb(aha, DATAIN_REG);
1593                 DELAY(100);
1594         }
1595         if (timeout == 0) {
1596                 printf("%s: aha_cmd: Timeout waiting for adapter ready, "
1597                        "status = 0x%x\n", aha_name(aha), status);
1598                 return (ETIMEDOUT);
1599         }
1600
1601         /*
1602          * Send the opcode followed by any necessary parameter bytes.
1603          */
1604         aha_outb(aha, COMMAND_REG, opcode);
1605
1606         /*
1607          * Wait for up to 1sec to get the parameter list sent
1608          */
1609         timeout = 10000;
1610         while (param_len && --timeout) {
1611                 DELAY(100);
1612                 s = splcam();
1613                 status = aha_inb(aha, STATUS_REG);
1614                 intstat = aha_inb(aha, INTSTAT_REG);
1615                 splx(s);
1616
1617                 if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1618                  == (INTR_PENDING|CMD_COMPLETE)) {
1619                         saved_status = status;
1620                         cmd_complete = 1;
1621                         break;
1622                 }
1623
1624                 if (aha->command_cmp != 0) {
1625                         saved_status = aha->latched_status;
1626                         cmd_complete = 1;
1627                         break;
1628                 }
1629                 if ((status & DATAIN_REG_READY) != 0)
1630                         break;
1631                 if ((status & CMD_REG_BUSY) == 0) {
1632                         aha_outb(aha, COMMAND_REG, *params++);
1633                         param_len--;
1634                         timeout = 10000;
1635                 }
1636         }
1637         if (timeout == 0) {
1638                 printf("%s: aha_cmd: Timeout sending parameters, "
1639                        "status = 0x%x\n", aha_name(aha), status);
1640                 error = ETIMEDOUT;
1641         }
1642
1643         /*
1644          * For all other commands, we wait for any output data
1645          * and the final comand completion interrupt.
1646          */
1647         while (cmd_complete == 0 && --cmd_timeout) {
1648
1649                 s = splcam();
1650                 status = aha_inb(aha, STATUS_REG);
1651                 intstat = aha_inb(aha, INTSTAT_REG);
1652                 splx(s);
1653
1654                 if (aha->command_cmp != 0) {
1655                         cmd_complete = 1;
1656                         saved_status = aha->latched_status;
1657                 } else if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1658                         == (INTR_PENDING|CMD_COMPLETE)) {
1659                         /*
1660                          * Our poll (in case interrupts are blocked)
1661                          * saw the CMD_COMPLETE interrupt.
1662                          */
1663                         cmd_complete = 1;
1664                         saved_status = status;
1665                 }
1666                 if ((status & DATAIN_REG_READY) != 0) {
1667                         u_int8_t data;
1668
1669                         data = aha_inb(aha, DATAIN_REG);
1670                         if (reply_len < reply_buf_size) {
1671                                 *reply_data++ = data;
1672                         } else {
1673                                 printf("%s: aha_cmd - Discarded reply data "
1674                                        "byte for opcode 0x%x\n", aha_name(aha),
1675                                        opcode);
1676                         }
1677                         /*
1678                          * Reset timeout to ensure at least a second
1679                          * between response bytes.
1680                          */
1681                         cmd_timeout = MAX(cmd_timeout, 10000);
1682                         reply_len++;
1683                 }
1684                 DELAY(100);
1685         }
1686         if (cmd_timeout == 0) {
1687                 printf("%s: aha_cmd: Timeout waiting for reply data and "
1688                        "command complete.\n%s: status = 0x%x, intstat = 0x%x, "
1689                        "reply_len = %d\n", aha_name(aha), aha_name(aha), status,
1690                        intstat, reply_len);
1691                 return (ETIMEDOUT);
1692         }
1693
1694         /*
1695          * Clear any pending interrupts.  Block interrupts so our
1696          * interrupt handler is not re-entered.
1697          */
1698         s = splcam();
1699         aha_intr(aha);
1700         splx(s);
1701
1702         if (error != 0)
1703                 return (error);
1704
1705         /*
1706          * If the command was rejected by the controller, tell the caller.
1707          */
1708         if ((saved_status & CMD_INVALID) != 0) {
1709                 PRVERB(("%s: Invalid Command 0x%x\n", aha_name(aha), opcode));
1710                 /*
1711                  * Some early adapters may not recover properly from
1712                  * an invalid command.  If it appears that the controller
1713                  * has wedged (i.e. status was not cleared by our interrupt
1714                  * reset above), perform a soft reset.
1715                  */
1716                 DELAY(1000);
1717                 status = aha_inb(aha, STATUS_REG);
1718                 if ((status & (CMD_INVALID|STATUS_REG_RSVD|DATAIN_REG_READY|
1719                               CMD_REG_BUSY|DIAG_FAIL|DIAG_ACTIVE)) != 0
1720                  || (status & (HA_READY|INIT_REQUIRED))
1721                   != (HA_READY|INIT_REQUIRED)) {
1722                         ahareset(aha, /*hard_reset*/FALSE);
1723                 }
1724                 return (EINVAL);
1725         }
1726
1727         if (param_len > 0) {
1728                 /* The controller did not accept the full argument list */
1729                 PRVERB(("%s: Controller did not accept full argument list "
1730                         "(%d > 0)\n",
1731                         aha_name(aha), param_len));
1732                 return (E2BIG);
1733         }
1734
1735         if (reply_len != reply_buf_size) {
1736                 /* Too much or too little data received */
1737                 PRVERB(("%s: Too much or too little data received (%d != %d)\n",
1738                         aha_name(aha), reply_len, reply_buf_size));
1739                 return (EMSGSIZE);
1740         }
1741
1742         /* We were successful */
1743         return (0);
1744 }
1745
1746 static int
1747 ahainitmboxes(struct aha_softc *aha)
1748 {
1749         int error;
1750         init_24b_mbox_params_t init_mbox;
1751
1752         bzero(aha->in_boxes, sizeof(aha_mbox_in_t) * aha->num_boxes);
1753         bzero(aha->out_boxes, sizeof(aha_mbox_out_t) * aha->num_boxes);
1754         aha->cur_inbox = aha->in_boxes;
1755         aha->last_inbox = aha->in_boxes + aha->num_boxes - 1;
1756         aha->cur_outbox = aha->out_boxes;
1757         aha->last_outbox = aha->out_boxes + aha->num_boxes - 1;
1758
1759         /* Tell the adapter about them */
1760         init_mbox.num_mboxes = aha->num_boxes;
1761         ahautoa24(aha->mailbox_physbase, init_mbox.base_addr);
1762         error = aha_cmd(aha, AOP_INITIALIZE_MBOX, (u_int8_t *)&init_mbox,
1763                        /*parmlen*/sizeof(init_mbox), /*reply_buf*/NULL,
1764                        /*reply_len*/0, DEFAULT_CMD_TIMEOUT);
1765
1766         if (error != 0)
1767                 printf("ahainitmboxes: Initialization command failed\n");
1768         return (error);
1769 }
1770
1771 /*
1772  * Update the XPT's idea of the negotiated transfer
1773  * parameters for a particular target.
1774  */
1775 static void
1776 ahafetchtransinfo(struct aha_softc *aha, struct ccb_trans_settings* cts)
1777 {
1778         setup_data_t    setup_info;
1779         u_int           target;
1780         u_int           targ_offset;
1781         u_int           sync_period;
1782         int             error;
1783         u_int8_t        param;
1784         targ_syncinfo_t sync_info;
1785
1786         target = cts->ccb_h.target_id;
1787         targ_offset = (target & 0x7);
1788
1789         /*
1790          * Inquire Setup Information.  This command retreives
1791          * the sync info for older models.
1792          */
1793         param = sizeof(setup_info);
1794         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &param, /*paramlen*/1,
1795                        (u_int8_t*)&setup_info, sizeof(setup_info),
1796                        DEFAULT_CMD_TIMEOUT);
1797
1798         if (error != 0) {
1799                 printf("%s: ahafetchtransinfo - Inquire Setup Info Failed %d\n",
1800                        aha_name(aha), error);
1801                 return;
1802         }
1803
1804         sync_info = setup_info.syncinfo[targ_offset];
1805
1806         if (sync_info.sync == 0)
1807                 cts->sync_offset = 0;
1808         else
1809                 cts->sync_offset = sync_info.offset;
1810
1811         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1812
1813         if (aha->boardid >= BOARD_1542CF)
1814                 sync_period = 1000;
1815         else
1816                 sync_period = 2000;
1817         sync_period += 500 * sync_info.period;
1818
1819         /* Convert ns value to standard SCSI sync rate */
1820         if (cts->sync_offset != 0)
1821                 cts->sync_period = scsi_calc_syncparam(sync_period);
1822         else
1823                 cts->sync_period = 0;
1824
1825         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1826                    | CCB_TRANS_SYNC_OFFSET_VALID
1827                    | CCB_TRANS_BUS_WIDTH_VALID;
1828         xpt_async(AC_TRANSFER_NEG, cts->ccb_h.path, cts);
1829 }
1830
1831 static void
1832 ahamapmboxes(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1833 {
1834         struct aha_softc* aha;
1835
1836         aha = (struct aha_softc*)arg;
1837         aha->mailbox_physbase = segs->ds_addr;
1838 }
1839
1840 static void
1841 ahamapccbs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1842 {
1843         struct aha_softc* aha;
1844
1845         aha = (struct aha_softc*)arg;
1846         aha->aha_ccb_physbase = segs->ds_addr;
1847 }
1848
1849 static void
1850 ahamapsgs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1851 {
1852
1853         struct aha_softc* aha;
1854
1855         aha = (struct aha_softc*)arg;
1856         SLIST_FIRST(&aha->sg_maps)->sg_physaddr = segs->ds_addr;
1857 }
1858
1859 static void
1860 ahapoll(struct cam_sim *sim)
1861 {
1862         aha_intr(cam_sim_softc(sim));
1863 }
1864
1865 static void
1866 ahatimeout(void *arg)
1867 {
1868         struct aha_ccb  *accb;
1869         union  ccb      *ccb;
1870         struct aha_softc *aha;
1871         int              s;
1872         u_int32_t       paddr;
1873
1874         accb = (struct aha_ccb *)arg;
1875         ccb = accb->ccb;
1876         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1877         xpt_print_path(ccb->ccb_h.path);
1878         printf("CCB %p - timed out\n", (void *)accb);
1879
1880         s = splcam();
1881
1882         if ((accb->flags & ACCB_ACTIVE) == 0) {
1883                 xpt_print_path(ccb->ccb_h.path);
1884                 printf("CCB %p - timed out CCB already completed\n",
1885                        (void *)accb);
1886                 splx(s);
1887                 return;
1888         }
1889
1890         /*
1891          * In order to simplify the recovery process, we ask the XPT
1892          * layer to halt the queue of new transactions and we traverse
1893          * the list of pending CCBs and remove their timeouts. This
1894          * means that the driver attempts to clear only one error
1895          * condition at a time.  In general, timeouts that occur
1896          * close together are related anyway, so there is no benefit
1897          * in attempting to handle errors in parrallel.  Timeouts will
1898          * be reinstated when the recovery process ends.
1899          */
1900         if ((accb->flags & ACCB_DEVICE_RESET) == 0) {
1901                 struct ccb_hdr *ccb_h;
1902
1903                 if ((accb->flags & ACCB_RELEASE_SIMQ) == 0) {
1904                         xpt_freeze_simq(aha->sim, /*count*/1);
1905                         accb->flags |= ACCB_RELEASE_SIMQ;
1906                 }
1907
1908                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1909                 while (ccb_h != NULL) {
1910                         struct aha_ccb *pending_accb;
1911
1912                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1913                         untimeout(ahatimeout, pending_accb, ccb_h->timeout_ch);
1914                         ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1915                 }
1916         }
1917
1918         if ((accb->flags & ACCB_DEVICE_RESET) != 0
1919          || aha->cur_outbox->action_code != AMBO_FREE) {
1920                 /*
1921                  * Try a full host adapter/SCSI bus reset.
1922                  * We do this only if we have already attempted
1923                  * to clear the condition with a BDR, or we cannot
1924                  * attempt a BDR for lack of mailbox resources.
1925                  */
1926                 ccb->ccb_h.status = CAM_CMD_TIMEOUT;
1927                 ahareset(aha, /*hardreset*/TRUE);
1928                 printf("%s: No longer in timeout\n", aha_name(aha));
1929         } else {
1930                 /*
1931                  * Send a Bus Device Reset message:
1932                  * The target that is holding up the bus may not
1933                  * be the same as the one that triggered this timeout
1934                  * (different commands have different timeout lengths),
1935                  * but we have no way of determining this from our
1936                  * timeout handler.  Our strategy here is to queue a
1937                  * BDR message to the target of the timed out command.
1938                  * If this fails, we'll get another timeout 2 seconds
1939                  * later which will attempt a bus reset.
1940                  */
1941                 accb->flags |= ACCB_DEVICE_RESET;
1942                 ccb->ccb_h.timeout_ch = timeout(ahatimeout, (caddr_t)accb, 2 * hz);
1943                 aha->recovery_accb->hccb.opcode = INITIATOR_BUS_DEV_RESET;
1944
1945                 /* No Data Transfer */
1946                 aha->recovery_accb->hccb.datain = TRUE;
1947                 aha->recovery_accb->hccb.dataout = TRUE;
1948                 aha->recovery_accb->hccb.ahastat = 0;
1949                 aha->recovery_accb->hccb.sdstat = 0;
1950                 aha->recovery_accb->hccb.target = ccb->ccb_h.target_id;
1951
1952                 /* Tell the adapter about this command */
1953                 paddr = ahaccbvtop(aha, aha->recovery_accb);
1954                 ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1955                 aha->cur_outbox->action_code = AMBO_START;
1956                 aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1957                 ahanextoutbox(aha);
1958         }
1959
1960         splx(s);
1961 }
1962
1963 int
1964 aha_detach(struct aha_softc *aha)
1965 {
1966         xpt_async(AC_LOST_DEVICE, aha->path, NULL);
1967         xpt_free_path(aha->path);
1968         xpt_bus_deregister(cam_sim_path(aha->sim));
1969         cam_sim_free(aha->sim, /*free_devq*/TRUE);
1970         return (0);
1971 }