Merge branch 'vendor/LIBPCAP'
[dragonfly.git] / sys / dev / raid / hptiop / hptiop.c
1 /*
2  * HighPoint RR3xxx/4xxx RAID Driver for FreeBSD
3  * Copyright (C) 2007-2008 HighPoint Technologies, Inc. All Rights Reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  *
14  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
15  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
16  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
17  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
18  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
19  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
20  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
21  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
22  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
23  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
24  * SUCH DAMAGE.
25  *
26  * $FreeBSD: src/sys/dev/hptiop/hptiop.c,v 1.10 2011/10/13 20:06:19 marius Exp $
27  */
28
29 #include <sys/param.h>
30 #include <sys/types.h>
31 #include <sys/cons.h>
32 #include <sys/time.h>
33 #include <sys/systm.h>
34
35 #include <sys/stat.h>
36 #include <sys/malloc.h>
37 #include <sys/conf.h>
38 #include <sys/libkern.h>
39 #include <sys/kernel.h>
40
41 #include <sys/kthread.h>
42 #include <sys/lock.h>
43 #include <sys/module.h>
44
45 #include <sys/eventhandler.h>
46 #include <sys/bus.h>
47 #include <sys/taskqueue.h>
48 #include <sys/ioccom.h>
49 #include <sys/device.h>
50 #include <sys/mplock2.h>
51
52 #include <machine/stdarg.h>
53 #include <sys/rman.h>
54
55 #include <vm/vm.h>
56 #include <vm/pmap.h>
57
58 #include <bus/pci/pcireg.h>
59 #include <bus/pci/pcivar.h>
60
61 #include <bus/cam/cam.h>
62 #include <bus/cam/cam_ccb.h>
63 #include <bus/cam/cam_sim.h>
64 #include <bus/cam/cam_xpt_periph.h>
65 #include <bus/cam/cam_xpt_sim.h>
66 #include <bus/cam/cam_debug.h>
67 #include <bus/cam/cam_periph.h>
68 #include <bus/cam/scsi/scsi_all.h>
69 #include <bus/cam/scsi/scsi_message.h>
70
71 #include <dev/raid/hptiop/hptiop.h>
72
73 static char driver_name[] = "hptiop";
74 static char driver_version[] = "v1.3 (010208)";
75
76 static devclass_t hptiop_devclass;
77
78 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
79                                 u_int32_t msg, u_int32_t millisec);
80 static void hptiop_request_callback_itl(struct hpt_iop_hba *hba,
81                                                         u_int32_t req);
82 static void hptiop_request_callback_mv(struct hpt_iop_hba *hba, u_int64_t req);
83 static void hptiop_os_message_callback(struct hpt_iop_hba *hba, u_int32_t msg);
84 static int  hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
85                                 struct hpt_iop_ioctl_param *pParams);
86 static int  hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
87                                 struct hpt_iop_ioctl_param *pParams);
88 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb);
89 static int  hptiop_rescan_bus(struct hpt_iop_hba *hba);
90 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba);
91 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba);
92 static int hptiop_get_config_itl(struct hpt_iop_hba *hba,
93                                 struct hpt_iop_request_get_config *config);
94 static int hptiop_get_config_mv(struct hpt_iop_hba *hba,
95                                 struct hpt_iop_request_get_config *config);
96 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
97                                 struct hpt_iop_request_set_config *config);
98 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
99                                 struct hpt_iop_request_set_config *config);
100 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba);
101 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba);
102 static int  hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
103                         u_int32_t req32, struct hpt_iop_ioctl_param *pParams);
104 static int  hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
105                                 struct hpt_iop_request_ioctl_command *req,
106                                 struct hpt_iop_ioctl_param *pParams);
107 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
108                                 struct hpt_iop_srb *srb,
109                                 bus_dma_segment_t *segs, int nsegs);
110 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
111                                 struct hpt_iop_srb *srb,
112                                 bus_dma_segment_t *segs, int nsegs);
113 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg);
114 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg);
115 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba);
116 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba);
117 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba);
118 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba);
119 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb);
120 static int  hptiop_os_query_remove_device(struct hpt_iop_hba *hba, int tid);
121 static int  hptiop_probe(device_t dev);
122 static int  hptiop_attach(device_t dev);
123 static int  hptiop_detach(device_t dev);
124 static int  hptiop_shutdown(device_t dev);
125 static void hptiop_action(struct cam_sim *sim, union ccb *ccb);
126 static void hptiop_poll(struct cam_sim *sim);
127 static void hptiop_async(void *callback_arg, u_int32_t code,
128                                         struct cam_path *path, void *arg);
129 static void hptiop_pci_intr(void *arg);
130 static void hptiop_release_resource(struct hpt_iop_hba *hba);
131 static int  hptiop_reset_adapter(struct hpt_iop_hba *hba);
132
133 static d_open_t hptiop_open;
134 static d_close_t hptiop_close;
135 static d_ioctl_t hptiop_ioctl;
136
137 static struct dev_ops hptiop_ops = {
138         { driver_name, 0, 0 },
139         .d_open = hptiop_open,
140         .d_close = hptiop_close,
141         .d_ioctl = hptiop_ioctl,
142 };
143
144 #define hba_from_dev(dev) ((struct hpt_iop_hba *)(dev)->si_drv1)
145
146 #define BUS_SPACE_WRT4_ITL(offset, value) bus_space_write_4(hba->bar0t,\
147                 hba->bar0h, offsetof(struct hpt_iopmu_itl, offset), (value))
148 #define BUS_SPACE_RD4_ITL(offset) bus_space_read_4(hba->bar0t,\
149                 hba->bar0h, offsetof(struct hpt_iopmu_itl, offset))
150
151 #define BUS_SPACE_WRT4_MV0(offset, value) bus_space_write_4(hba->bar0t,\
152                 hba->bar0h, offsetof(struct hpt_iopmv_regs, offset), value)
153 #define BUS_SPACE_RD4_MV0(offset) bus_space_read_4(hba->bar0t,\
154                 hba->bar0h, offsetof(struct hpt_iopmv_regs, offset))
155 #define BUS_SPACE_WRT4_MV2(offset, value) bus_space_write_4(hba->bar2t,\
156                 hba->bar2h, offsetof(struct hpt_iopmu_mv, offset), value)
157 #define BUS_SPACE_RD4_MV2(offset) bus_space_read_4(hba->bar2t,\
158                 hba->bar2h, offsetof(struct hpt_iopmu_mv, offset))
159
160 static int hptiop_open(struct dev_open_args *ap)
161 {
162         cdev_t dev = ap->a_head.a_dev;
163         struct hpt_iop_hba *hba = hba_from_dev(dev);
164
165         if (hba==NULL)
166                 return ENXIO;
167         if (hba->flag & HPT_IOCTL_FLAG_OPEN)
168                 return EBUSY;
169         hba->flag |= HPT_IOCTL_FLAG_OPEN;
170         return 0;
171 }
172
173 static int hptiop_close(struct dev_close_args *ap)
174 {
175         cdev_t dev = ap->a_head.a_dev;
176         struct hpt_iop_hba *hba = hba_from_dev(dev);
177         hba->flag &= ~(u_int32_t)HPT_IOCTL_FLAG_OPEN;
178         return 0;
179 }
180
181 static int hptiop_ioctl(struct dev_ioctl_args *ap)
182 {
183         cdev_t dev = ap->a_head.a_dev;
184         u_long cmd = ap->a_cmd;
185         caddr_t data = ap->a_data;
186         int ret = EFAULT;
187         struct hpt_iop_hba *hba = hba_from_dev(dev);
188
189         get_mplock();
190
191         switch (cmd) {
192         case HPT_DO_IOCONTROL:
193                 ret = hba->ops->do_ioctl(hba,
194                                 (struct hpt_iop_ioctl_param *)data);
195                 break;
196         case HPT_SCAN_BUS:
197                 ret = hptiop_rescan_bus(hba);
198                 break;
199         }
200
201         rel_mplock();
202
203         return ret;
204 }
205
206 static u_int64_t hptiop_mv_outbound_read(struct hpt_iop_hba *hba)
207 {
208         u_int64_t p;
209         u_int32_t outbound_tail = BUS_SPACE_RD4_MV2(outbound_tail);
210         u_int32_t outbound_head = BUS_SPACE_RD4_MV2(outbound_head);
211
212         if (outbound_tail != outbound_head) {
213                 bus_space_read_region_4(hba->bar2t, hba->bar2h,
214                         offsetof(struct hpt_iopmu_mv,
215                                 outbound_q[outbound_tail]),
216                         (u_int32_t *)&p, 2);
217
218                 outbound_tail++;
219
220                 if (outbound_tail == MVIOP_QUEUE_LEN)
221                         outbound_tail = 0;
222
223                 BUS_SPACE_WRT4_MV2(outbound_tail, outbound_tail);
224                 return p;
225         } else
226                 return 0;
227 }
228
229 static void hptiop_mv_inbound_write(u_int64_t p, struct hpt_iop_hba *hba)
230 {
231         u_int32_t inbound_head = BUS_SPACE_RD4_MV2(inbound_head);
232         u_int32_t head = inbound_head + 1;
233
234         if (head == MVIOP_QUEUE_LEN)
235                 head = 0;
236
237         bus_space_write_region_4(hba->bar2t, hba->bar2h,
238                         offsetof(struct hpt_iopmu_mv, inbound_q[inbound_head]),
239                         (u_int32_t *)&p, 2);
240         BUS_SPACE_WRT4_MV2(inbound_head, head);
241         BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_POSTQUEUE);
242 }
243
244 static void hptiop_post_msg_itl(struct hpt_iop_hba *hba, u_int32_t msg)
245 {
246         BUS_SPACE_WRT4_ITL(inbound_msgaddr0, msg);
247         BUS_SPACE_RD4_ITL(outbound_intstatus);
248 }
249
250 static void hptiop_post_msg_mv(struct hpt_iop_hba *hba, u_int32_t msg)
251 {
252
253         BUS_SPACE_WRT4_MV2(inbound_msg, msg);
254         BUS_SPACE_WRT4_MV0(inbound_doorbell, MVIOP_MU_INBOUND_INT_MSG);
255
256         BUS_SPACE_RD4_MV0(outbound_intmask);
257 }
258
259 static int hptiop_wait_ready_itl(struct hpt_iop_hba * hba, u_int32_t millisec)
260 {
261         u_int32_t req=0;
262         int i;
263
264         for (i = 0; i < millisec; i++) {
265                 req = BUS_SPACE_RD4_ITL(inbound_queue);
266                 if (req != IOPMU_QUEUE_EMPTY)
267                         break;
268                 DELAY(1000);
269         }
270
271         if (req!=IOPMU_QUEUE_EMPTY) {
272                 BUS_SPACE_WRT4_ITL(outbound_queue, req);
273                 BUS_SPACE_RD4_ITL(outbound_intstatus);
274                 return 0;
275         }
276
277         return -1;
278 }
279
280 static int hptiop_wait_ready_mv(struct hpt_iop_hba * hba, u_int32_t millisec)
281 {
282         if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_NOP, millisec))
283                 return -1;
284
285         return 0;
286 }
287
288 static void hptiop_request_callback_itl(struct hpt_iop_hba * hba,
289                                                         u_int32_t index)
290 {
291         struct hpt_iop_srb *srb;
292         struct hpt_iop_request_scsi_command *req=NULL;
293         union ccb *ccb;
294         u_int8_t *cdb;
295         u_int32_t result, temp, dxfer;
296         u_int64_t temp64;
297
298         if (index & IOPMU_QUEUE_MASK_HOST_BITS) { /*host req*/
299                 if (hba->firmware_version > 0x01020000 ||
300                         hba->interface_version > 0x01020000) {
301                         srb = hba->srb[index & ~(u_int32_t)
302                                 (IOPMU_QUEUE_ADDR_HOST_BIT
303                                 | IOPMU_QUEUE_REQUEST_RESULT_BIT)];
304                         req = (struct hpt_iop_request_scsi_command *)srb;
305                         if (index & IOPMU_QUEUE_REQUEST_RESULT_BIT)
306                                 result = IOP_RESULT_SUCCESS;
307                         else
308                                 result = req->header.result;
309                 } else {
310                         srb = hba->srb[index &
311                                 ~(u_int32_t)IOPMU_QUEUE_ADDR_HOST_BIT];
312                         req = (struct hpt_iop_request_scsi_command *)srb;
313                         result = req->header.result;
314                 }
315                 dxfer = req->dataxfer_length;
316                 goto srb_complete;
317         }
318
319         /*iop req*/
320         temp = bus_space_read_4(hba->bar0t, hba->bar0h, index +
321                 offsetof(struct hpt_iop_request_header, type));
322         result = bus_space_read_4(hba->bar0t, hba->bar0h, index +
323                 offsetof(struct hpt_iop_request_header, result));
324         switch(temp) {
325         case IOP_REQUEST_TYPE_IOCTL_COMMAND:
326         {
327                 temp64 = 0;
328                 bus_space_write_region_4(hba->bar0t, hba->bar0h, index +
329                         offsetof(struct hpt_iop_request_header, context),
330                         (u_int32_t *)&temp64, 2);
331                 wakeup((void *)((unsigned long)hba->u.itl.mu + index));
332                 break;
333         }
334
335         case IOP_REQUEST_TYPE_SCSI_COMMAND:
336                 bus_space_read_region_4(hba->bar0t, hba->bar0h, index +
337                         offsetof(struct hpt_iop_request_header, context),
338                         (u_int32_t *)&temp64, 2);
339                 srb = (struct hpt_iop_srb *)(unsigned long)temp64;
340                 dxfer = bus_space_read_4(hba->bar0t, hba->bar0h,
341                                 index + offsetof(struct hpt_iop_request_scsi_command,
342                                 dataxfer_length));
343 srb_complete:
344                 ccb = (union ccb *)srb->ccb;
345                 if (ccb->ccb_h.flags & CAM_CDB_POINTER)
346                         cdb = ccb->csio.cdb_io.cdb_ptr;
347                 else
348                         cdb = ccb->csio.cdb_io.cdb_bytes;
349
350                 if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
351                         ccb->ccb_h.status = CAM_REQ_CMP;
352                         goto scsi_done;
353                 }
354
355                 switch (result) {
356                 case IOP_RESULT_SUCCESS:
357                         switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
358                         case CAM_DIR_IN:
359                                 bus_dmamap_sync(hba->io_dmat,
360                                         srb->dma_map, BUS_DMASYNC_POSTREAD);
361                                 bus_dmamap_unload(hba->io_dmat, srb->dma_map);
362                                 break;
363                         case CAM_DIR_OUT:
364                                 bus_dmamap_sync(hba->io_dmat,
365                                         srb->dma_map, BUS_DMASYNC_POSTWRITE);
366                                 bus_dmamap_unload(hba->io_dmat, srb->dma_map);
367                                 break;
368                         }
369
370                         ccb->ccb_h.status = CAM_REQ_CMP;
371                         break;
372
373                 case IOP_RESULT_BAD_TARGET:
374                         ccb->ccb_h.status = CAM_DEV_NOT_THERE;
375                         break;
376                 case IOP_RESULT_BUSY:
377                         ccb->ccb_h.status = CAM_BUSY;
378                         break;
379                 case IOP_RESULT_INVALID_REQUEST:
380                         ccb->ccb_h.status = CAM_REQ_INVALID;
381                         break;
382                 case IOP_RESULT_FAIL:
383                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
384                         break;
385                 case IOP_RESULT_RESET:
386                         ccb->ccb_h.status = CAM_BUSY;
387                         break;
388                 case IOP_RESULT_CHECK_CONDITION:
389                         memset(&ccb->csio.sense_data, 0,
390                             sizeof(ccb->csio.sense_data));
391                         if (dxfer < ccb->csio.sense_len)
392                                 ccb->csio.sense_resid = ccb->csio.sense_len -
393                                     dxfer;
394                         else
395                                 ccb->csio.sense_resid = 0;
396                         if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {/*iop*/
397                                 bus_space_read_region_1(hba->bar0t, hba->bar0h,
398                                         index + offsetof(struct hpt_iop_request_scsi_command,
399                                         sg_list), (u_int8_t *)&ccb->csio.sense_data,
400                                         MIN(dxfer, sizeof(ccb->csio.sense_data)));
401                         } else {
402                                 memcpy(&ccb->csio.sense_data, &req->sg_list,
403                                         MIN(dxfer, sizeof(ccb->csio.sense_data)));
404                         }
405                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
406                         ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
407                         ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
408                         break;
409                 default:
410                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
411                         break;
412                 }
413 scsi_done:
414                 if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS)
415                         BUS_SPACE_WRT4_ITL(outbound_queue, index);
416
417                 ccb->csio.resid = ccb->csio.dxfer_len - dxfer;
418
419                 hptiop_free_srb(hba, srb);
420                 xpt_done(ccb);
421                 break;
422         }
423 }
424
425 static void hptiop_drain_outbound_queue_itl(struct hpt_iop_hba *hba)
426 {
427         u_int32_t req, temp;
428
429         while ((req = BUS_SPACE_RD4_ITL(outbound_queue)) !=IOPMU_QUEUE_EMPTY) {
430                 if (req & IOPMU_QUEUE_MASK_HOST_BITS)
431                         hptiop_request_callback_itl(hba, req);
432                 else {
433                         struct hpt_iop_request_header *p;
434
435                         p = (struct hpt_iop_request_header *)
436                                 ((char *)hba->u.itl.mu + req);
437                         temp = bus_space_read_4(hba->bar0t,
438                                         hba->bar0h,req +
439                                         offsetof(struct hpt_iop_request_header,
440                                                 flags));
441                         if (temp & IOP_REQUEST_FLAG_SYNC_REQUEST) {
442                                 u_int64_t temp64;
443                                 bus_space_read_region_4(hba->bar0t,
444                                         hba->bar0h,req +
445                                         offsetof(struct hpt_iop_request_header,
446                                                 context),
447                                         (u_int32_t *)&temp64, 2);
448                                 if (temp64) {
449                                         hptiop_request_callback_itl(hba, req);
450                                 } else {
451                                         temp64 = 1;
452                                         bus_space_write_region_4(hba->bar0t,
453                                                 hba->bar0h,req +
454                                                 offsetof(struct hpt_iop_request_header,
455                                                         context),
456                                                 (u_int32_t *)&temp64, 2);
457                                 }
458                         } else
459                                 hptiop_request_callback_itl(hba, req);
460                 }
461         }
462 }
463
464 static int hptiop_intr_itl(struct hpt_iop_hba * hba)
465 {
466         u_int32_t status;
467         int ret = 0;
468
469         status = BUS_SPACE_RD4_ITL(outbound_intstatus);
470
471         if (status & IOPMU_OUTBOUND_INT_MSG0) {
472                 u_int32_t msg = BUS_SPACE_RD4_ITL(outbound_msgaddr0);
473                 KdPrint(("hptiop: received outbound msg %x\n", msg));
474                 BUS_SPACE_WRT4_ITL(outbound_intstatus, IOPMU_OUTBOUND_INT_MSG0);
475                 hptiop_os_message_callback(hba, msg);
476                 ret = 1;
477         }
478
479         if (status & IOPMU_OUTBOUND_INT_POSTQUEUE) {
480                 hptiop_drain_outbound_queue_itl(hba);
481                 ret = 1;
482         }
483
484         return ret;
485 }
486
487 static void hptiop_request_callback_mv(struct hpt_iop_hba * hba,
488                                                         u_int64_t _tag)
489 {
490         u_int32_t context = (u_int32_t)_tag;
491
492         if (context & MVIOP_CMD_TYPE_SCSI) {
493                 struct hpt_iop_srb *srb;
494                 struct hpt_iop_request_scsi_command *req;
495                 union ccb *ccb;
496                 u_int8_t *cdb;
497
498                 srb = hba->srb[context >> MVIOP_REQUEST_NUMBER_START_BIT];
499                 req = (struct hpt_iop_request_scsi_command *)srb;
500                 ccb = (union ccb *)srb->ccb;
501                 if (ccb->ccb_h.flags & CAM_CDB_POINTER)
502                         cdb = ccb->csio.cdb_io.cdb_ptr;
503                 else
504                         cdb = ccb->csio.cdb_io.cdb_bytes;
505
506                 if (cdb[0] == SYNCHRONIZE_CACHE) { /* ??? */
507                         ccb->ccb_h.status = CAM_REQ_CMP;
508                         goto scsi_done;
509                 }
510                 if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
511                         req->header.result = IOP_RESULT_SUCCESS;
512
513                 switch (req->header.result) {
514                 case IOP_RESULT_SUCCESS:
515                         switch (ccb->ccb_h.flags & CAM_DIR_MASK) {
516                         case CAM_DIR_IN:
517                                 bus_dmamap_sync(hba->io_dmat,
518                                         srb->dma_map, BUS_DMASYNC_POSTREAD);
519                                 bus_dmamap_unload(hba->io_dmat, srb->dma_map);
520                                 break;
521                         case CAM_DIR_OUT:
522                                 bus_dmamap_sync(hba->io_dmat,
523                                         srb->dma_map, BUS_DMASYNC_POSTWRITE);
524                                 bus_dmamap_unload(hba->io_dmat, srb->dma_map);
525                                 break;
526                         }
527                         ccb->ccb_h.status = CAM_REQ_CMP;
528                         break;
529                 case IOP_RESULT_BAD_TARGET:
530                         ccb->ccb_h.status = CAM_DEV_NOT_THERE;
531                         break;
532                 case IOP_RESULT_BUSY:
533                         ccb->ccb_h.status = CAM_BUSY;
534                         break;
535                 case IOP_RESULT_INVALID_REQUEST:
536                         ccb->ccb_h.status = CAM_REQ_INVALID;
537                         break;
538                 case IOP_RESULT_FAIL:
539                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
540                         break;
541                 case IOP_RESULT_RESET:
542                         ccb->ccb_h.status = CAM_BUSY;
543                         break;
544                 case IOP_RESULT_CHECK_CONDITION:
545                         memset(&ccb->csio.sense_data, 0,
546                             sizeof(ccb->csio.sense_data));
547                         if (req->dataxfer_length < ccb->csio.sense_len)
548                                 ccb->csio.sense_resid = ccb->csio.sense_len -
549                                     req->dataxfer_length;
550                         else
551                                 ccb->csio.sense_resid = 0;
552                         memcpy(&ccb->csio.sense_data, &req->sg_list,
553                                 MIN(req->dataxfer_length, sizeof(ccb->csio.sense_data)));
554                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
555                         ccb->ccb_h.status |= CAM_AUTOSNS_VALID;
556                         ccb->csio.scsi_status = SCSI_STATUS_CHECK_COND;
557                         break;
558                 default:
559                         ccb->ccb_h.status = CAM_SCSI_STATUS_ERROR;
560                         break;
561                 }
562 scsi_done:
563                 ccb->csio.resid = ccb->csio.dxfer_len - req->dataxfer_length;
564
565                 hptiop_free_srb(hba, srb);
566                 xpt_done(ccb);
567         } else if (context & MVIOP_CMD_TYPE_IOCTL) {
568                 struct hpt_iop_request_ioctl_command *req = hba->ctlcfg_ptr;
569                 if (context & MVIOP_MU_QUEUE_REQUEST_RESULT_BIT)
570                         hba->config_done = 1;
571                 else
572                         hba->config_done = -1;
573                 wakeup(req);
574         } else if (context &
575                         (MVIOP_CMD_TYPE_SET_CONFIG |
576                                 MVIOP_CMD_TYPE_GET_CONFIG))
577                 hba->config_done = 1;
578         else {
579                 device_printf(hba->pcidev, "wrong callback type\n");
580         }
581 }
582
583 static void hptiop_drain_outbound_queue_mv(struct hpt_iop_hba * hba)
584 {
585         u_int64_t req;
586
587         while ((req = hptiop_mv_outbound_read(hba))) {
588                 if (req & MVIOP_MU_QUEUE_ADDR_HOST_BIT) {
589                         if (req & MVIOP_MU_QUEUE_REQUEST_RETURN_CONTEXT) {
590                                 hptiop_request_callback_mv(hba, req);
591                         }
592                 }
593         }
594 }
595
596 static int hptiop_intr_mv(struct hpt_iop_hba * hba)
597 {
598         u_int32_t status;
599         int ret = 0;
600
601         status = BUS_SPACE_RD4_MV0(outbound_doorbell);
602
603         if (status)
604                 BUS_SPACE_WRT4_MV0(outbound_doorbell, ~status);
605
606         if (status & MVIOP_MU_OUTBOUND_INT_MSG) {
607                 u_int32_t msg = BUS_SPACE_RD4_MV2(outbound_msg);
608                 KdPrint(("hptiop: received outbound msg %x\n", msg));
609                 hptiop_os_message_callback(hba, msg);
610                 ret = 1;
611         }
612
613         if (status & MVIOP_MU_OUTBOUND_INT_POSTQUEUE) {
614                 hptiop_drain_outbound_queue_mv(hba);
615                 ret = 1;
616         }
617
618         return ret;
619 }
620
621 static int hptiop_send_sync_request_itl(struct hpt_iop_hba * hba,
622                                         u_int32_t req32, u_int32_t millisec)
623 {
624         u_int32_t i;
625         u_int64_t temp64;
626
627         BUS_SPACE_WRT4_ITL(inbound_queue, req32);
628         BUS_SPACE_RD4_ITL(outbound_intstatus);
629
630         for (i = 0; i < millisec; i++) {
631                 hptiop_intr_itl(hba);
632                 bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
633                         offsetof(struct hpt_iop_request_header, context),
634                         (u_int32_t *)&temp64, 2);
635                 if (temp64)
636                         return 0;
637                 DELAY(1000);
638         }
639
640         return -1;
641 }
642
643 static int hptiop_send_sync_request_mv(struct hpt_iop_hba *hba,
644                                         void *req, u_int32_t millisec)
645 {
646         u_int32_t i;
647         u_int64_t phy_addr;
648         hba->config_done = 0;
649
650         phy_addr = hba->ctlcfgcmd_phy |
651                         (u_int64_t)MVIOP_MU_QUEUE_ADDR_HOST_BIT;
652         ((struct hpt_iop_request_get_config *)req)->header.flags |=
653                 IOP_REQUEST_FLAG_SYNC_REQUEST |
654                 IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
655         hptiop_mv_inbound_write(phy_addr, hba);
656         BUS_SPACE_RD4_MV0(outbound_intmask);
657
658         for (i = 0; i < millisec; i++) {
659                 hptiop_intr_mv(hba);
660                 if (hba->config_done)
661                         return 0;
662                 DELAY(1000);
663         }
664         return -1;
665 }
666
667 static int hptiop_send_sync_msg(struct hpt_iop_hba *hba,
668                                         u_int32_t msg, u_int32_t millisec)
669 {
670         u_int32_t i;
671
672         hba->msg_done = 0;
673         hba->ops->post_msg(hba, msg);
674
675         for (i=0; i<millisec; i++) {
676                 hba->ops->iop_intr(hba);
677                 if (hba->msg_done)
678                         break;
679                 DELAY(1000);
680         }
681
682         return hba->msg_done? 0 : -1;
683 }
684
685 static int hptiop_get_config_itl(struct hpt_iop_hba * hba,
686                                 struct hpt_iop_request_get_config * config)
687 {
688         u_int32_t req32;
689
690         config->header.size = sizeof(struct hpt_iop_request_get_config);
691         config->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
692         config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
693         config->header.result = IOP_RESULT_PENDING;
694         config->header.context = 0;
695
696         req32 = BUS_SPACE_RD4_ITL(inbound_queue);
697         if (req32 == IOPMU_QUEUE_EMPTY)
698                 return -1;
699
700         bus_space_write_region_4(hba->bar0t, hba->bar0h,
701                         req32, (u_int32_t *)config,
702                         sizeof(struct hpt_iop_request_header) >> 2);
703
704         if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
705                 KdPrint(("hptiop: get config send cmd failed"));
706                 return -1;
707         }
708
709         bus_space_read_region_4(hba->bar0t, hba->bar0h,
710                         req32, (u_int32_t *)config,
711                         sizeof(struct hpt_iop_request_get_config) >> 2);
712
713         BUS_SPACE_WRT4_ITL(outbound_queue, req32);
714
715         return 0;
716 }
717
718 static int hptiop_get_config_mv(struct hpt_iop_hba * hba,
719                                 struct hpt_iop_request_get_config * config)
720 {
721         struct hpt_iop_request_get_config *req;
722
723         if (!(req = hba->ctlcfg_ptr))
724                 return -1;
725
726         req->header.flags = 0;
727         req->header.type = IOP_REQUEST_TYPE_GET_CONFIG;
728         req->header.size = sizeof(struct hpt_iop_request_get_config);
729         req->header.result = IOP_RESULT_PENDING;
730         req->header.context = MVIOP_CMD_TYPE_GET_CONFIG;
731
732         if (hptiop_send_sync_request_mv(hba, req, 20000)) {
733                 KdPrint(("hptiop: get config send cmd failed"));
734                 return -1;
735         }
736
737         *config = *req;
738         return 0;
739 }
740
741 static int hptiop_set_config_itl(struct hpt_iop_hba *hba,
742                                 struct hpt_iop_request_set_config *config)
743 {
744         u_int32_t req32;
745
746         req32 = BUS_SPACE_RD4_ITL(inbound_queue);
747
748         if (req32 == IOPMU_QUEUE_EMPTY)
749                 return -1;
750
751         config->header.size = sizeof(struct hpt_iop_request_set_config);
752         config->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
753         config->header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
754         config->header.result = IOP_RESULT_PENDING;
755         config->header.context = 0;
756
757         bus_space_write_region_4(hba->bar0t, hba->bar0h, req32,
758                 (u_int32_t *)config,
759                 sizeof(struct hpt_iop_request_set_config) >> 2);
760
761         if (hptiop_send_sync_request_itl(hba, req32, 20000)) {
762                 KdPrint(("hptiop: set config send cmd failed"));
763                 return -1;
764         }
765
766         BUS_SPACE_WRT4_ITL(outbound_queue, req32);
767
768         return 0;
769 }
770
771 static int hptiop_set_config_mv(struct hpt_iop_hba *hba,
772                                 struct hpt_iop_request_set_config *config)
773 {
774         struct hpt_iop_request_set_config *req;
775
776         if (!(req = hba->ctlcfg_ptr))
777                 return -1;
778
779         memcpy((u_int8_t *)req + sizeof(struct hpt_iop_request_header),
780                 (u_int8_t *)config + sizeof(struct hpt_iop_request_header),
781                 sizeof(struct hpt_iop_request_set_config) -
782                         sizeof(struct hpt_iop_request_header));
783
784         req->header.flags = 0;
785         req->header.type = IOP_REQUEST_TYPE_SET_CONFIG;
786         req->header.size = sizeof(struct hpt_iop_request_set_config);
787         req->header.result = IOP_RESULT_PENDING;
788         req->header.context = MVIOP_CMD_TYPE_SET_CONFIG;
789
790         if (hptiop_send_sync_request_mv(hba, req, 20000)) {
791                 KdPrint(("hptiop: set config send cmd failed"));
792                 return -1;
793         }
794
795         return 0;
796 }
797
798 static int hptiop_post_ioctl_command_itl(struct hpt_iop_hba *hba,
799                                 u_int32_t req32,
800                                 struct hpt_iop_ioctl_param *pParams)
801 {
802         u_int64_t temp64;
803         struct hpt_iop_request_ioctl_command req;
804
805         if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
806                         (hba->max_request_size -
807                         offsetof(struct hpt_iop_request_ioctl_command, buf))) {
808                 device_printf(hba->pcidev, "request size beyond max value");
809                 return -1;
810         }
811
812         req.header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
813                 + pParams->nInBufferSize;
814         req.header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
815         req.header.flags = IOP_REQUEST_FLAG_SYNC_REQUEST;
816         req.header.result = IOP_RESULT_PENDING;
817         req.header.context = req32 + (u_int64_t)(unsigned long)hba->u.itl.mu;
818         req.ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
819         req.inbuf_size = pParams->nInBufferSize;
820         req.outbuf_size = pParams->nOutBufferSize;
821         req.bytes_returned = 0;
822
823         bus_space_write_region_4(hba->bar0t, hba->bar0h, req32, (u_int32_t *)&req,
824                 offsetof(struct hpt_iop_request_ioctl_command, buf)>>2);
825
826         hptiop_lock_adapter(hba);
827
828         BUS_SPACE_WRT4_ITL(inbound_queue, req32);
829         BUS_SPACE_RD4_ITL(outbound_intstatus);
830
831         bus_space_read_region_4(hba->bar0t, hba->bar0h, req32 +
832                 offsetof(struct hpt_iop_request_ioctl_command, header.context),
833                 (u_int32_t *)&temp64, 2);
834         while (temp64) {
835                 if (hptiop_sleep(hba, (void *)((unsigned long)hba->u.itl.mu + req32),
836                                 0, "hptctl", HPT_OSM_TIMEOUT)==0)
837                         break;
838                 hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
839                 bus_space_read_region_4(hba->bar0t, hba->bar0h,req32 +
840                         offsetof(struct hpt_iop_request_ioctl_command,
841                                 header.context),
842                         (u_int32_t *)&temp64, 2);
843         }
844
845         hptiop_unlock_adapter(hba);
846         return 0;
847 }
848
849 static int hptiop_bus_space_copyin(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
850 {
851         unsigned char byte;
852         int i;
853
854         for (i=0; i<size; i++) {
855                 if (copyin((u_int8_t *)user + i, &byte, 1))
856                         return -1;
857                 bus_space_write_1(hba->bar0t, hba->bar0h, bus + i, byte);
858         }
859
860         return 0;
861 }
862
863 static int hptiop_bus_space_copyout(struct hpt_iop_hba *hba, u_int32_t bus, void *user, int size)
864 {
865         unsigned char byte;
866         int i;
867
868         for (i=0; i<size; i++) {
869                 byte = bus_space_read_1(hba->bar0t, hba->bar0h, bus + i);
870                 if (copyout(&byte, (u_int8_t *)user + i, 1))
871                         return -1;
872         }
873
874         return 0;
875 }
876
877 static int hptiop_do_ioctl_itl(struct hpt_iop_hba *hba,
878                                 struct hpt_iop_ioctl_param * pParams)
879 {
880         u_int32_t req32;
881         u_int32_t result;
882
883         if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
884                 (pParams->Magic != HPT_IOCTL_MAGIC32))
885                 return EFAULT;
886
887         req32 = BUS_SPACE_RD4_ITL(inbound_queue);
888         if (req32 == IOPMU_QUEUE_EMPTY)
889                 return EFAULT;
890
891         if (pParams->nInBufferSize)
892                 if (hptiop_bus_space_copyin(hba, req32 +
893                         offsetof(struct hpt_iop_request_ioctl_command, buf),
894                         (void *)pParams->lpInBuffer, pParams->nInBufferSize))
895                         goto invalid;
896
897         if (hptiop_post_ioctl_command_itl(hba, req32, pParams))
898                 goto invalid;
899
900         result = bus_space_read_4(hba->bar0t, hba->bar0h, req32 +
901                         offsetof(struct hpt_iop_request_ioctl_command,
902                                 header.result));
903
904         if (result == IOP_RESULT_SUCCESS) {
905                 if (pParams->nOutBufferSize)
906                         if (hptiop_bus_space_copyout(hba, req32 +
907                                 offsetof(struct hpt_iop_request_ioctl_command, buf) +
908                                         ((pParams->nInBufferSize + 3) & ~3),
909                                 (void *)pParams->lpOutBuffer, pParams->nOutBufferSize))
910                                 goto invalid;
911
912                 if (pParams->lpBytesReturned) {
913                         if (hptiop_bus_space_copyout(hba, req32 +
914                                 offsetof(struct hpt_iop_request_ioctl_command, bytes_returned),
915                                 (void *)pParams->lpBytesReturned, sizeof(unsigned  long)))
916                                 goto invalid;
917                 }
918
919                 BUS_SPACE_WRT4_ITL(outbound_queue, req32);
920
921                 return 0;
922         } else{
923 invalid:
924                 BUS_SPACE_WRT4_ITL(outbound_queue, req32);
925
926                 return EFAULT;
927         }
928 }
929
930 static int hptiop_post_ioctl_command_mv(struct hpt_iop_hba *hba,
931                                 struct hpt_iop_request_ioctl_command *req,
932                                 struct hpt_iop_ioctl_param *pParams)
933 {
934         u_int64_t req_phy;
935         int size = 0;
936
937         if ((((pParams->nInBufferSize + 3) & ~3) + pParams->nOutBufferSize) >
938                         (hba->max_request_size -
939                         offsetof(struct hpt_iop_request_ioctl_command, buf))) {
940                 device_printf(hba->pcidev, "request size beyond max value");
941                 return -1;
942         }
943
944         req->ioctl_code = HPT_CTL_CODE_BSD_TO_IOP(pParams->dwIoControlCode);
945         req->inbuf_size = pParams->nInBufferSize;
946         req->outbuf_size = pParams->nOutBufferSize;
947         req->header.size = offsetof(struct hpt_iop_request_ioctl_command, buf)
948                                         + pParams->nInBufferSize;
949         req->header.context = (u_int64_t)MVIOP_CMD_TYPE_IOCTL;
950         req->header.type = IOP_REQUEST_TYPE_IOCTL_COMMAND;
951         req->header.result = IOP_RESULT_PENDING;
952         req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
953         size = req->header.size >> 8;
954         size = size > 3 ? 3 : size;
955         req_phy = hba->ctlcfgcmd_phy | MVIOP_MU_QUEUE_ADDR_HOST_BIT | size;
956         hptiop_mv_inbound_write(req_phy, hba);
957
958         BUS_SPACE_RD4_MV0(outbound_intmask);
959
960         while (hba->config_done == 0) {
961                 if (hptiop_sleep(hba, req, 0,
962                         "hptctl", HPT_OSM_TIMEOUT)==0)
963                         continue;
964                 hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
965         }
966         return 0;
967 }
968
969 static int hptiop_do_ioctl_mv(struct hpt_iop_hba *hba,
970                                 struct hpt_iop_ioctl_param *pParams)
971 {
972         struct hpt_iop_request_ioctl_command *req;
973
974         if ((pParams->Magic != HPT_IOCTL_MAGIC) &&
975                 (pParams->Magic != HPT_IOCTL_MAGIC32))
976                 return EFAULT;
977
978         req = (struct hpt_iop_request_ioctl_command *)(hba->ctlcfg_ptr);
979         hba->config_done = 0;
980         hptiop_lock_adapter(hba);
981         if (pParams->nInBufferSize)
982                 if (copyin((void *)pParams->lpInBuffer,
983                                 req->buf, pParams->nInBufferSize))
984                         goto invalid;
985         if (hptiop_post_ioctl_command_mv(hba, req, pParams))
986                 goto invalid;
987
988         if (hba->config_done == 1) {
989                 if (pParams->nOutBufferSize)
990                         if (copyout(req->buf +
991                                 ((pParams->nInBufferSize + 3) & ~3),
992                                 (void *)pParams->lpOutBuffer,
993                                 pParams->nOutBufferSize))
994                                 goto invalid;
995
996                 if (pParams->lpBytesReturned)
997                         if (copyout(&req->bytes_returned,
998                                 (void*)pParams->lpBytesReturned,
999                                 sizeof(u_int32_t)))
1000                                 goto invalid;
1001                 hptiop_unlock_adapter(hba);
1002                 return 0;
1003         } else{
1004 invalid:
1005                 hptiop_unlock_adapter(hba);
1006                 return EFAULT;
1007         }
1008 }
1009
1010 static int  hptiop_rescan_bus(struct hpt_iop_hba * hba)
1011 {
1012         union ccb           *ccb;
1013
1014         if ((ccb = xpt_alloc_ccb()) == NULL)
1015                 return(ENOMEM);
1016         if (xpt_create_path(&ccb->ccb_h.path, xpt_periph, cam_sim_path(hba->sim),
1017                 CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1018                 xpt_free_ccb(ccb);
1019                 return(EIO);
1020         }
1021
1022         xpt_setup_ccb(&ccb->ccb_h, ccb->ccb_h.path, 5/*priority (low)*/);
1023         ccb->ccb_h.func_code = XPT_SCAN_BUS;
1024         ccb->ccb_h.cbfcnp = hptiop_bus_scan_cb;
1025         ccb->crcn.flags = CAM_FLAG_NONE;
1026         xpt_action(ccb);
1027         return(0);
1028 }
1029
1030 static void hptiop_bus_scan_cb(struct cam_periph *periph, union ccb *ccb)
1031 {
1032         xpt_free_path(ccb->ccb_h.path);
1033         kfree(ccb, M_TEMP);
1034 }
1035
1036 static  bus_dmamap_callback_t   hptiop_map_srb;
1037 static  bus_dmamap_callback_t   hptiop_post_scsi_command;
1038 static  bus_dmamap_callback_t   hptiop_mv_map_ctlcfg;
1039
1040 static int hptiop_alloc_pci_res_itl(struct hpt_iop_hba *hba)
1041 {
1042         hba->bar0_rid = 0x10;
1043         hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1044                         SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1045
1046         if (hba->bar0_res == NULL) {
1047                 device_printf(hba->pcidev,
1048                         "failed to get iop base adrress.\n");
1049                 return -1;
1050         }
1051         hba->bar0t = rman_get_bustag(hba->bar0_res);
1052         hba->bar0h = rman_get_bushandle(hba->bar0_res);
1053         hba->u.itl.mu = (struct hpt_iopmu_itl *)
1054                                 rman_get_virtual(hba->bar0_res);
1055
1056         if (!hba->u.itl.mu) {
1057                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1058                                         hba->bar0_rid, hba->bar0_res);
1059                 device_printf(hba->pcidev, "alloc mem res failed\n");
1060                 return -1;
1061         }
1062
1063         return 0;
1064 }
1065
1066 static int hptiop_alloc_pci_res_mv(struct hpt_iop_hba *hba)
1067 {
1068         hba->bar0_rid = 0x10;
1069         hba->bar0_res = bus_alloc_resource_any(hba->pcidev,
1070                         SYS_RES_MEMORY, &hba->bar0_rid, RF_ACTIVE);
1071
1072         if (hba->bar0_res == NULL) {
1073                 device_printf(hba->pcidev, "failed to get iop bar0.\n");
1074                 return -1;
1075         }
1076         hba->bar0t = rman_get_bustag(hba->bar0_res);
1077         hba->bar0h = rman_get_bushandle(hba->bar0_res);
1078         hba->u.mv.regs = (struct hpt_iopmv_regs *)
1079                                 rman_get_virtual(hba->bar0_res);
1080
1081         if (!hba->u.mv.regs) {
1082                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1083                                         hba->bar0_rid, hba->bar0_res);
1084                 device_printf(hba->pcidev, "alloc bar0 mem res failed\n");
1085                 return -1;
1086         }
1087
1088         hba->bar2_rid = 0x18;
1089         hba->bar2_res = bus_alloc_resource_any(hba->pcidev,
1090                         SYS_RES_MEMORY, &hba->bar2_rid, RF_ACTIVE);
1091
1092         if (hba->bar2_res == NULL) {
1093                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1094                                         hba->bar0_rid, hba->bar0_res);
1095                 device_printf(hba->pcidev, "failed to get iop bar2.\n");
1096                 return -1;
1097         }
1098
1099         hba->bar2t = rman_get_bustag(hba->bar2_res);
1100         hba->bar2h = rman_get_bushandle(hba->bar2_res);
1101         hba->u.mv.mu = (struct hpt_iopmu_mv *)rman_get_virtual(hba->bar2_res);
1102
1103         if (!hba->u.mv.mu) {
1104                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1105                                         hba->bar0_rid, hba->bar0_res);
1106                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1107                                         hba->bar2_rid, hba->bar2_res);
1108                 device_printf(hba->pcidev, "alloc mem bar2 res failed\n");
1109                 return -1;
1110         }
1111
1112         return 0;
1113 }
1114
1115 static void hptiop_release_pci_res_itl(struct hpt_iop_hba *hba)
1116 {
1117         if (hba->bar0_res)
1118                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1119                         hba->bar0_rid, hba->bar0_res);
1120 }
1121
1122 static void hptiop_release_pci_res_mv(struct hpt_iop_hba *hba)
1123 {
1124         if (hba->bar0_res)
1125                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1126                         hba->bar0_rid, hba->bar0_res);
1127         if (hba->bar2_res)
1128                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
1129                         hba->bar2_rid, hba->bar2_res);
1130 }
1131
1132 static int hptiop_internal_memalloc_mv(struct hpt_iop_hba *hba)
1133 {
1134         if (bus_dma_tag_create(hba->parent_dmat,
1135                                 1,
1136                                 0,
1137                                 BUS_SPACE_MAXADDR_32BIT,
1138                                 BUS_SPACE_MAXADDR,
1139                                 NULL, NULL,
1140                                 0x800 - 0x8,
1141                                 1,
1142                                 BUS_SPACE_MAXSIZE_32BIT,
1143                                 BUS_DMA_ALLOCNOW,
1144                                 &hba->ctlcfg_dmat)) {
1145                 device_printf(hba->pcidev, "alloc ctlcfg_dmat failed\n");
1146                 return -1;
1147         }
1148
1149         if (bus_dmamem_alloc(hba->ctlcfg_dmat, (void **)&hba->ctlcfg_ptr,
1150                 BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1151                 &hba->ctlcfg_dmamap) != 0) {
1152                         device_printf(hba->pcidev,
1153                                         "bus_dmamem_alloc failed!\n");
1154                         bus_dma_tag_destroy(hba->ctlcfg_dmat);
1155                         return -1;
1156         }
1157
1158         if (bus_dmamap_load(hba->ctlcfg_dmat,
1159                         hba->ctlcfg_dmamap, hba->ctlcfg_ptr,
1160                         MVIOP_IOCTLCFG_SIZE,
1161                         hptiop_mv_map_ctlcfg, hba, 0)) {
1162                 device_printf(hba->pcidev, "bus_dmamap_load failed!\n");
1163                 if (hba->ctlcfg_dmat)
1164                         bus_dmamem_free(hba->ctlcfg_dmat,
1165                                 hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1166                         bus_dma_tag_destroy(hba->ctlcfg_dmat);
1167                 return -1;
1168         }
1169
1170         return 0;
1171 }
1172
1173 static int hptiop_internal_memfree_mv(struct hpt_iop_hba *hba)
1174 {
1175         if (hba->ctlcfg_dmat) {
1176                 bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
1177                 bus_dmamem_free(hba->ctlcfg_dmat,
1178                                         hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
1179                 bus_dma_tag_destroy(hba->ctlcfg_dmat);
1180         }
1181
1182         return 0;
1183 }
1184
1185 /*
1186  * CAM driver interface
1187  */
1188 static device_method_t driver_methods[] = {
1189         /* Device interface */
1190         DEVMETHOD(device_probe,     hptiop_probe),
1191         DEVMETHOD(device_attach,    hptiop_attach),
1192         DEVMETHOD(device_detach,    hptiop_detach),
1193         DEVMETHOD(device_shutdown,  hptiop_shutdown),
1194         { 0, 0 }
1195 };
1196
1197 static struct hptiop_adapter_ops hptiop_itl_ops = {
1198         .iop_wait_ready    = hptiop_wait_ready_itl,
1199         .internal_memalloc = 0,
1200         .internal_memfree  = 0,
1201         .alloc_pci_res     = hptiop_alloc_pci_res_itl,
1202         .release_pci_res   = hptiop_release_pci_res_itl,
1203         .enable_intr       = hptiop_enable_intr_itl,
1204         .disable_intr      = hptiop_disable_intr_itl,
1205         .get_config        = hptiop_get_config_itl,
1206         .set_config        = hptiop_set_config_itl,
1207         .iop_intr          = hptiop_intr_itl,
1208         .post_msg          = hptiop_post_msg_itl,
1209         .post_req          = hptiop_post_req_itl,
1210         .do_ioctl          = hptiop_do_ioctl_itl,
1211 };
1212
1213 static struct hptiop_adapter_ops hptiop_mv_ops = {
1214         .iop_wait_ready    = hptiop_wait_ready_mv,
1215         .internal_memalloc = hptiop_internal_memalloc_mv,
1216         .internal_memfree  = hptiop_internal_memfree_mv,
1217         .alloc_pci_res     = hptiop_alloc_pci_res_mv,
1218         .release_pci_res   = hptiop_release_pci_res_mv,
1219         .enable_intr       = hptiop_enable_intr_mv,
1220         .disable_intr      = hptiop_disable_intr_mv,
1221         .get_config        = hptiop_get_config_mv,
1222         .set_config        = hptiop_set_config_mv,
1223         .iop_intr          = hptiop_intr_mv,
1224         .post_msg          = hptiop_post_msg_mv,
1225         .post_req          = hptiop_post_req_mv,
1226         .do_ioctl          = hptiop_do_ioctl_mv,
1227 };
1228
1229 static driver_t hptiop_pci_driver = {
1230         driver_name,
1231         driver_methods,
1232         sizeof(struct hpt_iop_hba)
1233 };
1234
1235 DRIVER_MODULE(hptiop, pci, hptiop_pci_driver, hptiop_devclass, NULL, NULL);
1236 MODULE_VERSION(hptiop, 1);
1237
1238 static int hptiop_probe(device_t dev)
1239 {
1240         struct hpt_iop_hba *hba;
1241         u_int32_t id;
1242         static char buf[256];
1243         int sas = 0;
1244         struct hptiop_adapter_ops *ops;
1245
1246         if (pci_get_vendor(dev) != 0x1103)
1247                 return (ENXIO);
1248
1249         id = pci_get_device(dev);
1250
1251         switch (id) {
1252                 case 0x4322:
1253                 case 0x4321:
1254                 case 0x4320:
1255                         sas = 1;
1256                 case 0x3220:
1257                 case 0x3320:
1258                 case 0x3410:
1259                 case 0x3520:
1260                 case 0x3510:
1261                 case 0x3511:
1262                 case 0x3521:
1263                 case 0x3522:
1264                 case 0x3540:
1265                         ops = &hptiop_itl_ops;
1266                         break;
1267                 case 0x3120:
1268                 case 0x3122:
1269                 case 0x3020:
1270                         ops = &hptiop_mv_ops;
1271                         break;
1272                 default:
1273                         return (ENXIO);
1274         }
1275
1276         device_printf(dev, "adapter at PCI %d:%d:%d, IRQ %d\n",
1277                 pci_get_bus(dev), pci_get_slot(dev),
1278                 pci_get_function(dev), pci_get_irq(dev));
1279
1280         ksprintf(buf, "RocketRAID %x %s Controller",
1281                                 id, sas ? "SAS" : "SATA");
1282         device_set_desc_copy(dev, buf);
1283
1284         hba = (struct hpt_iop_hba *)device_get_softc(dev);
1285         bzero(hba, sizeof(struct hpt_iop_hba));
1286         hba->ops = ops;
1287
1288         KdPrint(("hba->ops=%p\n", hba->ops));
1289         return 0;
1290 }
1291
1292 static int hptiop_attach(device_t dev)
1293 {
1294         struct hpt_iop_hba *hba = (struct hpt_iop_hba *)device_get_softc(dev);
1295         struct hpt_iop_request_get_config  iop_config;
1296         struct hpt_iop_request_set_config  set_config;
1297         int rid = 0;
1298         struct cam_devq *devq;
1299         struct ccb_setasync ccb;
1300         u_int32_t unit = device_get_unit(dev);
1301
1302         device_printf(dev, "RocketRAID 3xxx/4xxx controller driver %s\n",
1303             driver_version);
1304
1305         KdPrint(("hptiop: attach(%d, %d/%d/%d) ops=%p\n", unit,
1306                 pci_get_bus(dev), pci_get_slot(dev),
1307                 pci_get_function(dev), hba->ops));
1308
1309         pci_enable_busmaster(dev);
1310         hba->pcidev = dev;
1311
1312         if (hba->ops->alloc_pci_res(hba))
1313                 return ENXIO;
1314
1315         if (hba->ops->iop_wait_ready(hba, 2000)) {
1316                 device_printf(dev, "adapter is not ready\n");
1317                 goto release_pci_res;
1318         }
1319
1320         lockinit(&hba->lock, "hptioplock", 0, LK_CANRECURSE);
1321
1322         if (bus_dma_tag_create(NULL,/* parent */
1323                         1,  /* alignment */
1324                         0, /* boundary */
1325                         BUS_SPACE_MAXADDR,  /* lowaddr */
1326                         BUS_SPACE_MAXADDR,  /* highaddr */
1327                         NULL, NULL,         /* filter, filterarg */
1328                         BUS_SPACE_MAXSIZE_32BIT,    /* maxsize */
1329                         BUS_SPACE_UNRESTRICTED, /* nsegments */
1330                         BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1331                         0,      /* flags */
1332                         &hba->parent_dmat   /* tag */))
1333         {
1334                 device_printf(dev, "alloc parent_dmat failed\n");
1335                 goto release_pci_res;
1336         }
1337
1338         if (hba->ops->internal_memalloc) {
1339                 if (hba->ops->internal_memalloc(hba)) {
1340                         device_printf(dev, "alloc srb_dmat failed\n");
1341                         goto destroy_parent_tag;
1342                 }
1343         }
1344
1345         if (hba->ops->get_config(hba, &iop_config)) {
1346                 device_printf(dev, "get iop config failed.\n");
1347                 goto get_config_failed;
1348         }
1349
1350         hba->firmware_version = iop_config.firmware_version;
1351         hba->interface_version = iop_config.interface_version;
1352         hba->max_requests = iop_config.max_requests;
1353         hba->max_devices = iop_config.max_devices;
1354         hba->max_request_size = iop_config.request_size;
1355         hba->max_sg_count = iop_config.max_sg_count;
1356
1357         if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1358                         4,  /* alignment */
1359                         BUS_SPACE_MAXADDR_32BIT+1, /* boundary */
1360                         BUS_SPACE_MAXADDR,  /* lowaddr */
1361                         BUS_SPACE_MAXADDR,  /* highaddr */
1362                         NULL, NULL,         /* filter, filterarg */
1363                         PAGE_SIZE * (hba->max_sg_count-1),  /* maxsize */
1364                         hba->max_sg_count,  /* nsegments */
1365                         0x20000,    /* maxsegsize */
1366                         BUS_DMA_ALLOCNOW,       /* flags */
1367                         &hba->io_dmat   /* tag */))
1368         {
1369                 device_printf(dev, "alloc io_dmat failed\n");
1370                 goto get_config_failed;
1371         }
1372
1373         if (bus_dma_tag_create(hba->parent_dmat,/* parent */
1374                         1,  /* alignment */
1375                         0, /* boundary */
1376                         BUS_SPACE_MAXADDR_32BIT,    /* lowaddr */
1377                         BUS_SPACE_MAXADDR,  /* highaddr */
1378                         NULL, NULL,         /* filter, filterarg */
1379                         HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE + 0x20,
1380                         1,  /* nsegments */
1381                         BUS_SPACE_MAXSIZE_32BIT,    /* maxsegsize */
1382                         0,      /* flags */
1383                         &hba->srb_dmat  /* tag */))
1384         {
1385                 device_printf(dev, "alloc srb_dmat failed\n");
1386                 goto destroy_io_dmat;
1387         }
1388
1389         if (bus_dmamem_alloc(hba->srb_dmat, (void **)&hba->uncached_ptr,
1390                         BUS_DMA_WAITOK | BUS_DMA_COHERENT,
1391                         &hba->srb_dmamap) != 0)
1392         {
1393                 device_printf(dev, "srb bus_dmamem_alloc failed!\n");
1394                 goto destroy_srb_dmat;
1395         }
1396
1397         if (bus_dmamap_load(hba->srb_dmat,
1398                         hba->srb_dmamap, hba->uncached_ptr,
1399                         (HPT_SRB_MAX_SIZE * HPT_SRB_MAX_QUEUE_SIZE) + 0x20,
1400                         hptiop_map_srb, hba, 0))
1401         {
1402                 device_printf(dev, "bus_dmamap_load failed!\n");
1403                 goto srb_dmamem_free;
1404         }
1405
1406         if ((devq = cam_simq_alloc(hba->max_requests - 1 )) == NULL) {
1407                 device_printf(dev, "cam_simq_alloc failed\n");
1408                 goto srb_dmamap_unload;
1409         }
1410
1411         hba->sim = cam_sim_alloc(hptiop_action, hptiop_poll, driver_name,
1412                         hba, unit, &sim_mplock, hba->max_requests - 1, 1, devq);
1413         if (!hba->sim) {
1414                 device_printf(dev, "cam_sim_alloc failed\n");
1415                 cam_simq_release(devq);
1416                 goto srb_dmamap_unload;
1417         }
1418         if (xpt_bus_register(hba->sim, 0) != CAM_SUCCESS)
1419         {
1420                 device_printf(dev, "xpt_bus_register failed\n");
1421                 goto free_cam_sim;
1422         }
1423
1424         if (xpt_create_path(&hba->path, /*periph */ NULL,
1425                         cam_sim_path(hba->sim), CAM_TARGET_WILDCARD,
1426                         CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
1427                 device_printf(dev, "xpt_create_path failed\n");
1428                 goto deregister_xpt_bus;
1429         }
1430
1431         bzero(&set_config, sizeof(set_config));
1432         set_config.iop_id = unit;
1433         set_config.vbus_id = cam_sim_path(hba->sim);
1434         set_config.max_host_request_size = HPT_SRB_MAX_REQ_SIZE;
1435
1436         if (hba->ops->set_config(hba, &set_config)) {
1437                 device_printf(dev, "set iop config failed.\n");
1438                 goto free_hba_path;
1439         }
1440
1441         xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
1442         ccb.ccb_h.func_code = XPT_SASYNC_CB;
1443         ccb.event_enable = (AC_FOUND_DEVICE | AC_LOST_DEVICE);
1444         ccb.callback = hptiop_async;
1445         ccb.callback_arg = hba->sim;
1446         xpt_action((union ccb *)&ccb);
1447
1448         rid = 0;
1449         if ((hba->irq_res = bus_alloc_resource(hba->pcidev, SYS_RES_IRQ,
1450                         &rid, 0, ~0ul, 1, RF_SHAREABLE | RF_ACTIVE)) == NULL) {
1451                 device_printf(dev, "allocate irq failed!\n");
1452                 goto free_hba_path;
1453         }
1454
1455         if (bus_setup_intr(hba->pcidev, hba->irq_res, 0,
1456                                 hptiop_pci_intr, hba, &hba->irq_handle, NULL))
1457         {
1458                 device_printf(dev, "allocate intr function failed!\n");
1459                 goto free_irq_resource;
1460         }
1461
1462         if (hptiop_send_sync_msg(hba,
1463                         IOPMU_INBOUND_MSG0_START_BACKGROUND_TASK, 5000)) {
1464                 device_printf(dev, "fail to start background task\n");
1465                 goto teartown_irq_resource;
1466         }
1467
1468         hba->ops->enable_intr(hba);
1469
1470         hba->ioctl_dev = make_dev(&hptiop_ops, unit,
1471                                 UID_ROOT, GID_WHEEL /*GID_OPERATOR*/,
1472                                 S_IRUSR | S_IWUSR, "%s%d", driver_name, unit);
1473
1474         hba->ioctl_dev->si_drv1 = hba;
1475
1476         hptiop_rescan_bus(hba);
1477
1478         return 0;
1479
1480
1481 teartown_irq_resource:
1482         bus_teardown_intr(dev, hba->irq_res, hba->irq_handle);
1483
1484 free_irq_resource:
1485         bus_release_resource(dev, SYS_RES_IRQ, 0, hba->irq_res);
1486
1487 free_hba_path:
1488         xpt_free_path(hba->path);
1489
1490 deregister_xpt_bus:
1491         xpt_bus_deregister(cam_sim_path(hba->sim));
1492
1493 free_cam_sim:
1494         cam_sim_free(hba->sim);
1495
1496 srb_dmamap_unload:
1497         if (hba->uncached_ptr)
1498                 bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
1499
1500 srb_dmamem_free:
1501         if (hba->uncached_ptr)
1502                 bus_dmamem_free(hba->srb_dmat,
1503                         hba->uncached_ptr, hba->srb_dmamap);
1504
1505 destroy_srb_dmat:
1506         if (hba->srb_dmat)
1507                 bus_dma_tag_destroy(hba->srb_dmat);
1508
1509 destroy_io_dmat:
1510         if (hba->io_dmat)
1511                 bus_dma_tag_destroy(hba->io_dmat);
1512
1513 get_config_failed:
1514         if (hba->ops->internal_memfree)
1515                 hba->ops->internal_memfree(hba);
1516
1517 destroy_parent_tag:
1518         if (hba->parent_dmat)
1519                 bus_dma_tag_destroy(hba->parent_dmat);
1520
1521 release_pci_res:
1522         if (hba->ops->release_pci_res)
1523                 hba->ops->release_pci_res(hba);
1524
1525         return ENXIO;
1526 }
1527
1528 static int hptiop_detach(device_t dev)
1529 {
1530         struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1531         int i;
1532         int error = EBUSY;
1533
1534         hptiop_lock_adapter(hba);
1535         for (i = 0; i < hba->max_devices; i++)
1536                 if (hptiop_os_query_remove_device(hba, i)) {
1537                         device_printf(dev, "file system is busy. id=%d", i);
1538                         goto out;
1539                 }
1540
1541         if ((error = hptiop_shutdown(dev)) != 0)
1542                 goto out;
1543         if (hptiop_send_sync_msg(hba,
1544                 IOPMU_INBOUND_MSG0_STOP_BACKGROUND_TASK, 60000))
1545                 goto out;
1546
1547         hptiop_release_resource(hba);
1548         error = 0;
1549 out:
1550         hptiop_unlock_adapter(hba);
1551         return error;
1552 }
1553
1554 static int hptiop_shutdown(device_t dev)
1555 {
1556         struct hpt_iop_hba * hba = (struct hpt_iop_hba *)device_get_softc(dev);
1557
1558         int error = 0;
1559
1560         if (hba->flag & HPT_IOCTL_FLAG_OPEN) {
1561                 device_printf(dev, "device is busy");
1562                 return EBUSY;
1563         }
1564
1565         hba->ops->disable_intr(hba);
1566
1567         if (hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_SHUTDOWN, 60000))
1568                 error = EBUSY;
1569
1570         return error;
1571 }
1572
1573 static void hptiop_pci_intr(void *arg)
1574 {
1575         struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
1576         hptiop_lock_adapter(hba);
1577         hba->ops->iop_intr(hba);
1578         hptiop_unlock_adapter(hba);
1579 }
1580
1581 static void hptiop_poll(struct cam_sim *sim)
1582 {
1583         hptiop_pci_intr(cam_sim_softc(sim));
1584 }
1585
1586 static void hptiop_async(void * callback_arg, u_int32_t code,
1587                                         struct cam_path * path, void * arg)
1588 {
1589 }
1590
1591 static void hptiop_enable_intr_itl(struct hpt_iop_hba *hba)
1592 {
1593         BUS_SPACE_WRT4_ITL(outbound_intmask,
1594                 ~(IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0));
1595 }
1596
1597 static void hptiop_enable_intr_mv(struct hpt_iop_hba *hba)
1598 {
1599         u_int32_t int_mask;
1600
1601         int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1602
1603         int_mask |= MVIOP_MU_OUTBOUND_INT_POSTQUEUE
1604                         | MVIOP_MU_OUTBOUND_INT_MSG;
1605         BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1606 }
1607
1608 static void hptiop_disable_intr_itl(struct hpt_iop_hba *hba)
1609 {
1610         u_int32_t int_mask;
1611
1612         int_mask = BUS_SPACE_RD4_ITL(outbound_intmask);
1613
1614         int_mask |= IOPMU_OUTBOUND_INT_POSTQUEUE | IOPMU_OUTBOUND_INT_MSG0;
1615         BUS_SPACE_WRT4_ITL(outbound_intmask, int_mask);
1616         BUS_SPACE_RD4_ITL(outbound_intstatus);
1617 }
1618
1619 static void hptiop_disable_intr_mv(struct hpt_iop_hba *hba)
1620 {
1621         u_int32_t int_mask;
1622         int_mask = BUS_SPACE_RD4_MV0(outbound_intmask);
1623
1624         int_mask &= ~(MVIOP_MU_OUTBOUND_INT_MSG
1625                         | MVIOP_MU_OUTBOUND_INT_POSTQUEUE);
1626         BUS_SPACE_WRT4_MV0(outbound_intmask,int_mask);
1627         BUS_SPACE_RD4_MV0(outbound_intmask);
1628 }
1629
1630 static int hptiop_reset_adapter(struct hpt_iop_hba * hba)
1631 {
1632         return hptiop_send_sync_msg(hba, IOPMU_INBOUND_MSG0_RESET, 60000);
1633 }
1634
1635 static void *hptiop_get_srb(struct hpt_iop_hba * hba)
1636 {
1637         struct hpt_iop_srb * srb;
1638
1639         if (hba->srb_list) {
1640                 srb = hba->srb_list;
1641                 hba->srb_list = srb->next;
1642                 return srb;
1643         }
1644
1645         return NULL;
1646 }
1647
1648 static void hptiop_free_srb(struct hpt_iop_hba *hba, struct hpt_iop_srb *srb)
1649 {
1650         srb->next = hba->srb_list;
1651         hba->srb_list = srb;
1652 }
1653
1654 static void hptiop_action(struct cam_sim *sim, union ccb *ccb)
1655 {
1656         struct hpt_iop_hba * hba = (struct hpt_iop_hba *)cam_sim_softc(sim);
1657         struct hpt_iop_srb * srb;
1658
1659         switch (ccb->ccb_h.func_code) {
1660
1661         case XPT_SCSI_IO:
1662                 hptiop_lock_adapter(hba);
1663                 if (ccb->ccb_h.target_lun != 0 ||
1664                         ccb->ccb_h.target_id >= hba->max_devices ||
1665                         (ccb->ccb_h.flags & CAM_CDB_PHYS))
1666                 {
1667                         ccb->ccb_h.status = CAM_TID_INVALID;
1668                         xpt_done(ccb);
1669                         goto scsi_done;
1670                 }
1671
1672                 if ((srb = hptiop_get_srb(hba)) == NULL) {
1673                         device_printf(hba->pcidev, "srb allocated failed");
1674                         ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1675                         xpt_done(ccb);
1676                         goto scsi_done;
1677                 }
1678
1679                 srb->ccb = ccb;
1680
1681                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_NONE)
1682                         hptiop_post_scsi_command(srb, NULL, 0, 0);
1683                 else if ((ccb->ccb_h.flags & CAM_SCATTER_VALID) == 0) {
1684                         if ((ccb->ccb_h.flags & CAM_DATA_PHYS) == 0) {
1685                                 int error;
1686
1687                                 error = bus_dmamap_load(hba->io_dmat,
1688                                                 srb->dma_map,
1689                                                 ccb->csio.data_ptr,
1690                                                 ccb->csio.dxfer_len,
1691                                                 hptiop_post_scsi_command,
1692                                                 srb, 0);
1693
1694                                 if (error && error != EINPROGRESS) {
1695                                         device_printf(hba->pcidev,
1696                                             "bus_dmamap_load error %d", error);
1697                                         xpt_freeze_simq(hba->sim, 1);
1698                                         ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1699 invalid:
1700                                         hptiop_free_srb(hba, srb);
1701                                         xpt_done(ccb);
1702                                         goto scsi_done;
1703                                 }
1704                         }
1705                         else {
1706                                 device_printf(hba->pcidev,
1707                                         "CAM_DATA_PHYS not supported");
1708                                 ccb->ccb_h.status = CAM_REQ_CMP_ERR;
1709                                 goto invalid;
1710                         }
1711                 }
1712                 else {
1713                         struct bus_dma_segment *segs;
1714
1715                         if ((ccb->ccb_h.flags & CAM_SG_LIST_PHYS) == 0 ||
1716                                 (ccb->ccb_h.flags & CAM_DATA_PHYS) != 0) {
1717                                 device_printf(hba->pcidev, "SCSI cmd failed");
1718                                 ccb->ccb_h.status=CAM_PROVIDE_FAIL;
1719                                 goto invalid;
1720                         }
1721
1722                         segs = (struct bus_dma_segment *)ccb->csio.data_ptr;
1723                         hptiop_post_scsi_command(srb, segs,
1724                                                 ccb->csio.sglist_cnt, 0);
1725                 }
1726
1727 scsi_done:
1728                 hptiop_unlock_adapter(hba);
1729                 return;
1730
1731         case XPT_RESET_BUS:
1732                 device_printf(hba->pcidev, "reset adapter");
1733                 hptiop_lock_adapter(hba);
1734                 hba->msg_done = 0;
1735                 hptiop_reset_adapter(hba);
1736                 hptiop_unlock_adapter(hba);
1737                 break;
1738
1739         case XPT_GET_TRAN_SETTINGS:
1740         case XPT_SET_TRAN_SETTINGS:
1741                 ccb->ccb_h.status = CAM_FUNC_NOTAVAIL;
1742                 break;
1743
1744         case XPT_CALC_GEOMETRY:
1745                 ccb->ccg.heads = 255;
1746                 ccb->ccg.secs_per_track = 63;
1747                 ccb->ccg.cylinders = ccb->ccg.volume_size /
1748                                 (ccb->ccg.heads * ccb->ccg.secs_per_track);
1749                 ccb->ccb_h.status = CAM_REQ_CMP;
1750                 break;
1751
1752         case XPT_PATH_INQ:
1753         {
1754                 struct ccb_pathinq *cpi = &ccb->cpi;
1755
1756                 cpi->version_num = 1;
1757                 cpi->hba_inquiry = PI_SDTR_ABLE;
1758                 cpi->target_sprt = 0;
1759                 cpi->hba_misc = PIM_NOBUSRESET;
1760                 cpi->hba_eng_cnt = 0;
1761                 cpi->max_target = hba->max_devices;
1762                 cpi->max_lun = 0;
1763                 cpi->unit_number = cam_sim_unit(sim);
1764                 cpi->bus_id = cam_sim_bus(sim);
1765                 cpi->initiator_id = hba->max_devices;
1766                 cpi->base_transfer_speed = 3300;
1767
1768                 strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1769                 strncpy(cpi->hba_vid, "HPT   ", HBA_IDLEN);
1770                 strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1771                 cpi->transport = XPORT_SPI;
1772                 cpi->transport_version = 2;
1773                 cpi->protocol = PROTO_SCSI;
1774                 cpi->protocol_version = SCSI_REV_2;
1775                 cpi->ccb_h.status = CAM_REQ_CMP;
1776                 break;
1777         }
1778
1779         default:
1780                 ccb->ccb_h.status = CAM_REQ_INVALID;
1781                 break;
1782         }
1783
1784         xpt_done(ccb);
1785         return;
1786 }
1787
1788 static void hptiop_post_req_itl(struct hpt_iop_hba *hba,
1789                                 struct hpt_iop_srb *srb,
1790                                 bus_dma_segment_t *segs, int nsegs)
1791 {
1792         int idx;
1793         union ccb *ccb = srb->ccb;
1794         u_int8_t *cdb;
1795
1796         if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1797                 cdb = ccb->csio.cdb_io.cdb_ptr;
1798         else
1799                 cdb = ccb->csio.cdb_io.cdb_bytes;
1800
1801         KdPrint(("ccb=%p %x-%x-%x\n",
1802                 ccb, *(u_int32_t *)cdb, *((u_int32_t *)cdb+1), *((u_int32_t *)cdb+2)));
1803
1804         if (srb->srb_flag & HPT_SRB_FLAG_HIGH_MEM_ACESS) {
1805                 u_int32_t iop_req32;
1806                 struct hpt_iop_request_scsi_command req;
1807
1808                 iop_req32 = BUS_SPACE_RD4_ITL(inbound_queue);
1809
1810                 if (iop_req32 == IOPMU_QUEUE_EMPTY) {
1811                         device_printf(hba->pcidev, "invaild req offset\n");
1812                         ccb->ccb_h.status = CAM_BUSY;
1813                         bus_dmamap_unload(hba->io_dmat, srb->dma_map);
1814                         hptiop_free_srb(hba, srb);
1815                         xpt_done(ccb);
1816                         return;
1817                 }
1818
1819                 if (ccb->csio.dxfer_len && nsegs > 0) {
1820                         struct hpt_iopsg *psg = req.sg_list;
1821                         for (idx = 0; idx < nsegs; idx++, psg++) {
1822                                 psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1823                                 psg->size = segs[idx].ds_len;
1824                                 psg->eot = 0;
1825                         }
1826                         psg[-1].eot = 1;
1827                 }
1828
1829                 bcopy(cdb, req.cdb, ccb->csio.cdb_len);
1830
1831                 req.header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1832                                 + nsegs*sizeof(struct hpt_iopsg);
1833                 req.header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1834                 req.header.flags = 0;
1835                 req.header.result = IOP_RESULT_PENDING;
1836                 req.header.context = (u_int64_t)(unsigned long)srb;
1837                 req.dataxfer_length = ccb->csio.dxfer_len;
1838                 req.channel =  0;
1839                 req.target =  ccb->ccb_h.target_id;
1840                 req.lun =  ccb->ccb_h.target_lun;
1841
1842                 bus_space_write_region_1(hba->bar0t, hba->bar0h, iop_req32,
1843                         (u_int8_t *)&req, req.header.size);
1844
1845                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1846                         bus_dmamap_sync(hba->io_dmat,
1847                                 srb->dma_map, BUS_DMASYNC_PREREAD);
1848                 }
1849                 else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
1850                         bus_dmamap_sync(hba->io_dmat,
1851                                 srb->dma_map, BUS_DMASYNC_PREWRITE);
1852
1853                 BUS_SPACE_WRT4_ITL(inbound_queue,iop_req32);
1854         } else {
1855                 struct hpt_iop_request_scsi_command *req;
1856
1857                 req = (struct hpt_iop_request_scsi_command *)srb;
1858                 if (ccb->csio.dxfer_len && nsegs > 0) {
1859                         struct hpt_iopsg *psg = req->sg_list;
1860                         for (idx = 0; idx < nsegs; idx++, psg++) {
1861                                 psg->pci_address =
1862                                         (u_int64_t)segs[idx].ds_addr;
1863                                 psg->size = segs[idx].ds_len;
1864                                 psg->eot = 0;
1865                         }
1866                         psg[-1].eot = 1;
1867                 }
1868
1869                 bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1870
1871                 req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1872                 req->header.result = IOP_RESULT_PENDING;
1873                 req->dataxfer_length = ccb->csio.dxfer_len;
1874                 req->channel =  0;
1875                 req->target =  ccb->ccb_h.target_id;
1876                 req->lun =  ccb->ccb_h.target_lun;
1877                 req->header.size = offsetof(struct hpt_iop_request_scsi_command, sg_list)
1878                         + nsegs*sizeof(struct hpt_iopsg);
1879                 req->header.context = (u_int64_t)srb->index |
1880                                                 IOPMU_QUEUE_ADDR_HOST_BIT;
1881                 req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1882
1883                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1884                         bus_dmamap_sync(hba->io_dmat,
1885                                 srb->dma_map, BUS_DMASYNC_PREREAD);
1886                 }else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT) {
1887                         bus_dmamap_sync(hba->io_dmat,
1888                                 srb->dma_map, BUS_DMASYNC_PREWRITE);
1889                 }
1890
1891                 if (hba->firmware_version > 0x01020000
1892                         || hba->interface_version > 0x01020000) {
1893                         u_int32_t size_bits;
1894
1895                         if (req->header.size < 256)
1896                                 size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT;
1897                         else if (req->header.size < 512)
1898                                 size_bits = IOPMU_QUEUE_ADDR_HOST_BIT;
1899                         else
1900                                 size_bits = IOPMU_QUEUE_REQUEST_SIZE_BIT
1901                                                 | IOPMU_QUEUE_ADDR_HOST_BIT;
1902
1903                         BUS_SPACE_WRT4_ITL(inbound_queue,
1904                                 (u_int32_t)srb->phy_addr | size_bits);
1905                 } else
1906                         BUS_SPACE_WRT4_ITL(inbound_queue, (u_int32_t)srb->phy_addr
1907                                 |IOPMU_QUEUE_ADDR_HOST_BIT);
1908         }
1909 }
1910
1911 static void hptiop_post_req_mv(struct hpt_iop_hba *hba,
1912                                 struct hpt_iop_srb *srb,
1913                                 bus_dma_segment_t *segs, int nsegs)
1914 {
1915         int idx, size;
1916         union ccb *ccb = srb->ccb;
1917         u_int8_t *cdb;
1918         struct hpt_iop_request_scsi_command *req;
1919         u_int64_t req_phy;
1920
1921         req = (struct hpt_iop_request_scsi_command *)srb;
1922         req_phy = srb->phy_addr;
1923
1924         if (ccb->csio.dxfer_len && nsegs > 0) {
1925                 struct hpt_iopsg *psg = req->sg_list;
1926                 for (idx = 0; idx < nsegs; idx++, psg++) {
1927                         psg->pci_address = (u_int64_t)segs[idx].ds_addr;
1928                         psg->size = segs[idx].ds_len;
1929                         psg->eot = 0;
1930                 }
1931                 psg[-1].eot = 1;
1932         }
1933         if (ccb->ccb_h.flags & CAM_CDB_POINTER)
1934                 cdb = ccb->csio.cdb_io.cdb_ptr;
1935         else
1936                 cdb = ccb->csio.cdb_io.cdb_bytes;
1937
1938         bcopy(cdb, req->cdb, ccb->csio.cdb_len);
1939         req->header.type = IOP_REQUEST_TYPE_SCSI_COMMAND;
1940         req->header.result = IOP_RESULT_PENDING;
1941         req->dataxfer_length = ccb->csio.dxfer_len;
1942         req->channel = 0;
1943         req->target =  ccb->ccb_h.target_id;
1944         req->lun =  ccb->ccb_h.target_lun;
1945         req->header.size = sizeof(struct hpt_iop_request_scsi_command)
1946                                 - sizeof(struct hpt_iopsg)
1947                                 + nsegs * sizeof(struct hpt_iopsg);
1948         if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN) {
1949                 bus_dmamap_sync(hba->io_dmat,
1950                         srb->dma_map, BUS_DMASYNC_PREREAD);
1951         }
1952         else if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_OUT)
1953                 bus_dmamap_sync(hba->io_dmat,
1954                         srb->dma_map, BUS_DMASYNC_PREWRITE);
1955         req->header.context = (u_int64_t)srb->index
1956                                         << MVIOP_REQUEST_NUMBER_START_BIT
1957                                         | MVIOP_CMD_TYPE_SCSI;
1958         req->header.flags = IOP_REQUEST_FLAG_OUTPUT_CONTEXT;
1959         size = req->header.size >> 8;
1960         hptiop_mv_inbound_write(req_phy
1961                         | MVIOP_MU_QUEUE_ADDR_HOST_BIT
1962                         | (size > 3 ? 3 : size), hba);
1963 }
1964
1965 static void hptiop_post_scsi_command(void *arg, bus_dma_segment_t *segs,
1966                                         int nsegs, int error)
1967 {
1968         struct hpt_iop_srb *srb = (struct hpt_iop_srb *)arg;
1969         union ccb *ccb = srb->ccb;
1970         struct hpt_iop_hba *hba = srb->hba;
1971
1972         if (error || nsegs > hba->max_sg_count) {
1973                 KdPrint(("hptiop: func_code=%x tid=%x lun=%x nsegs=%d\n",
1974                         ccb->ccb_h.func_code,
1975                         ccb->ccb_h.target_id,
1976                         ccb->ccb_h.target_lun, nsegs));
1977                 ccb->ccb_h.status = CAM_BUSY;
1978                 bus_dmamap_unload(hba->io_dmat, srb->dma_map);
1979                 hptiop_free_srb(hba, srb);
1980                 xpt_done(ccb);
1981                 return;
1982         }
1983
1984         hba->ops->post_req(hba, srb, segs, nsegs);
1985 }
1986
1987 static void hptiop_mv_map_ctlcfg(void *arg, bus_dma_segment_t *segs,
1988                                 int nsegs, int error)
1989 {
1990         struct hpt_iop_hba *hba = (struct hpt_iop_hba *)arg;
1991         hba->ctlcfgcmd_phy = ((u_int64_t)segs->ds_addr + 0x1F)
1992                                 & ~(u_int64_t)0x1F;
1993         hba->ctlcfg_ptr = (u_int8_t *)(((unsigned long)hba->ctlcfg_ptr + 0x1F)
1994                                 & ~0x1F);
1995 }
1996
1997 static void hptiop_map_srb(void *arg, bus_dma_segment_t *segs,
1998                                 int nsegs, int error)
1999 {
2000         struct hpt_iop_hba * hba = (struct hpt_iop_hba *)arg;
2001         bus_addr_t phy_addr = (segs->ds_addr + 0x1F) & ~(bus_addr_t)0x1F;
2002         struct hpt_iop_srb *srb, *tmp_srb;
2003         int i;
2004
2005         if (error || nsegs == 0) {
2006                 device_printf(hba->pcidev, "hptiop_map_srb error");
2007                 return;
2008         }
2009
2010         /* map srb */
2011         srb = (struct hpt_iop_srb *)
2012                 (((unsigned long)hba->uncached_ptr + 0x1F)
2013                 & ~(unsigned long)0x1F);
2014
2015         for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2016                 tmp_srb = (struct hpt_iop_srb *)
2017                                         ((char *)srb + i * HPT_SRB_MAX_SIZE);
2018                 if (((unsigned long)tmp_srb & 0x1F) == 0) {
2019                         if (bus_dmamap_create(hba->io_dmat,
2020                                                 0, &tmp_srb->dma_map)) {
2021                                 device_printf(hba->pcidev, "dmamap create failed");
2022                                 return;
2023                         }
2024
2025                         bzero(tmp_srb, sizeof(struct hpt_iop_srb));
2026                         tmp_srb->hba = hba;
2027                         tmp_srb->index = i;
2028                         if (hba->ctlcfg_ptr == 0) {/*itl iop*/
2029                                 tmp_srb->phy_addr = (u_int64_t)(u_int32_t)
2030                                                         (phy_addr >> 5);
2031                                 if (phy_addr & IOPMU_MAX_MEM_SUPPORT_MASK_32G)
2032                                         tmp_srb->srb_flag =
2033                                                 HPT_SRB_FLAG_HIGH_MEM_ACESS;
2034                         } else {
2035                                 tmp_srb->phy_addr = phy_addr;
2036                         }
2037
2038                         hptiop_free_srb(hba, tmp_srb);
2039                         hba->srb[i] = tmp_srb;
2040                         phy_addr += HPT_SRB_MAX_SIZE;
2041                 }
2042                 else {
2043                         device_printf(hba->pcidev, "invalid alignment");
2044                         return;
2045                 }
2046         }
2047 }
2048
2049 static void hptiop_os_message_callback(struct hpt_iop_hba * hba, u_int32_t msg)
2050 {
2051                 hba->msg_done = 1;
2052 }
2053
2054 static  int hptiop_os_query_remove_device(struct hpt_iop_hba * hba,
2055                                                 int target_id)
2056 {
2057         struct cam_periph       *periph = NULL;
2058         struct cam_path         *path;
2059         int                     status, retval = 0;
2060
2061         status = xpt_create_path(&path, NULL, hba->sim->path_id, target_id, 0);
2062
2063         if (status == CAM_REQ_CMP) {
2064                 if ((periph = cam_periph_find(path, "da")) != NULL) {
2065                         if (periph->refcount >= 1) {
2066                                 device_printf(hba->pcidev, "target_id=0x%x,"
2067                                     "refcount=%d", target_id, periph->refcount);
2068                                 retval = -1;
2069                         }
2070                 }
2071                 xpt_free_path(path);
2072         }
2073         return retval;
2074 }
2075
2076 static void hptiop_release_resource(struct hpt_iop_hba *hba)
2077 {
2078         int i;
2079         if (hba->path) {
2080                 struct ccb_setasync ccb;
2081
2082                 xpt_setup_ccb(&ccb.ccb_h, hba->path, /*priority*/5);
2083                 ccb.ccb_h.func_code = XPT_SASYNC_CB;
2084                 ccb.event_enable = 0;
2085                 ccb.callback = hptiop_async;
2086                 ccb.callback_arg = hba->sim;
2087                 xpt_action((union ccb *)&ccb);
2088                 xpt_free_path(hba->path);
2089         }
2090
2091         if (hba->sim) {
2092                 xpt_bus_deregister(cam_sim_path(hba->sim));
2093                 cam_sim_free(hba->sim);
2094         }
2095
2096         if (hba->ctlcfg_dmat) {
2097                 bus_dmamap_unload(hba->ctlcfg_dmat, hba->ctlcfg_dmamap);
2098                 bus_dmamem_free(hba->ctlcfg_dmat,
2099                                         hba->ctlcfg_ptr, hba->ctlcfg_dmamap);
2100                 bus_dma_tag_destroy(hba->ctlcfg_dmat);
2101         }
2102
2103         for (i = 0; i < HPT_SRB_MAX_QUEUE_SIZE; i++) {
2104                 struct hpt_iop_srb *srb = hba->srb[i];
2105                 if (srb->dma_map)
2106                         bus_dmamap_destroy(hba->io_dmat, srb->dma_map);
2107         }
2108
2109         if (hba->srb_dmat) {
2110                 bus_dmamap_unload(hba->srb_dmat, hba->srb_dmamap);
2111                 bus_dmamap_destroy(hba->srb_dmat, hba->srb_dmamap);
2112                 bus_dma_tag_destroy(hba->srb_dmat);
2113         }
2114
2115         if (hba->io_dmat)
2116                 bus_dma_tag_destroy(hba->io_dmat);
2117
2118         if (hba->parent_dmat)
2119                 bus_dma_tag_destroy(hba->parent_dmat);
2120
2121         if (hba->irq_handle)
2122                 bus_teardown_intr(hba->pcidev, hba->irq_res, hba->irq_handle);
2123
2124         if (hba->irq_res)
2125                 bus_release_resource(hba->pcidev, SYS_RES_IRQ,
2126                                         0, hba->irq_res);
2127
2128         if (hba->bar0_res)
2129                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2130                                         hba->bar0_rid, hba->bar0_res);
2131         if (hba->bar2_res)
2132                 bus_release_resource(hba->pcidev, SYS_RES_MEMORY,
2133                                         hba->bar2_rid, hba->bar2_res);
2134         if (hba->ioctl_dev)
2135                 destroy_dev(hba->ioctl_dev);
2136         dev_ops_remove_minor(&hptiop_ops, device_get_unit(hba->pcidev));
2137 }