Merge from vendor branch OPENSSH:
[dragonfly.git] / sys / dev / disk / aha / aha.c
1 /*
2  * Generic register and struct definitions for the Adaptech 154x/164x
3  * SCSI host adapters. Product specific probe and attach routines can
4  * be found in:
5  *      aha 1540/1542B/1542C/1542CF/1542CP      aha_isa.c
6  *
7  * Copyright (c) 1998 M. Warner Losh.
8  * All Rights Reserved.
9  *
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions, and the following disclaimer,
16  *    without modification, immediately at the beginning of the file.
17  * 2. The name of the author may not be used to endorse or promote products
18  *    derived from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
24  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  * Derived from bt.c written by:
33  *
34  * Copyright (c) 1998 Justin T. Gibbs.
35  * All rights reserved.
36  *
37  * Redistribution and use in source and binary forms, with or without
38  * modification, are permitted provided that the following conditions
39  * are met:
40  * 1. Redistributions of source code must retain the above copyright
41  *    notice, this list of conditions, and the following disclaimer,
42  *    without modification, immediately at the beginning of the file.
43  * 2. The name of the author may not be used to endorse or promote products
44  *    derived from this software without specific prior written permission.
45  *
46  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
47  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
48  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
49  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
50  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
51  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
52  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
53  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
54  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
55  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
56  * SUCH DAMAGE.
57  *
58  * $FreeBSD: src/sys/dev/aha/aha.c,v 1.34.2.1 2000/08/02 22:24:39 peter Exp $
59  * $DragonFly: src/sys/dev/disk/aha/aha.c,v 1.7 2004/05/13 19:44:31 dillon Exp $
60  */
61
62 #include <sys/param.h>
63 #include <sys/systm.h> 
64 #include <sys/malloc.h>
65 #include <sys/buf.h>
66 #include <sys/kernel.h>
67  
68 #include <machine/bus_pio.h>
69 #include <machine/bus.h>
70 #include <machine/clock.h>
71
72 #include <bus/cam/cam.h>
73 #include <bus/cam/cam_ccb.h>
74 #include <bus/cam/cam_sim.h>
75 #include <bus/cam/cam_xpt_sim.h>
76 #include <bus/cam/cam_debug.h>
77
78 #include <bus/cam/scsi/scsi_message.h>
79
80 #include <vm/vm.h>
81 #include <vm/pmap.h>
82
83 #include "ahareg.h"
84
85 struct aha_softc *aha_softcs[NAHATOT];
86
87 #define PRVERB(x) if (bootverbose) printf x
88
89 /* Macro to determine that a rev is potentially a new valid one
90  * so that the driver doesn't keep breaking on new revs as it
91  * did for the CF and CP.
92  */
93 #define PROBABLY_NEW_BOARD(REV) (REV > 0x43 && REV < 0x56)
94
95 /* MailBox Management functions */
96 static __inline void    ahanextinbox(struct aha_softc *aha);
97 static __inline void    ahanextoutbox(struct aha_softc *aha);
98
99 static __inline void
100 ahanextinbox(struct aha_softc *aha)
101 {
102         if (aha->cur_inbox == aha->last_inbox)
103                 aha->cur_inbox = aha->in_boxes;
104         else
105                 aha->cur_inbox++;
106 }
107
108 static __inline void
109 ahanextoutbox(struct aha_softc *aha)
110 {
111         if (aha->cur_outbox == aha->last_outbox)
112                 aha->cur_outbox = aha->out_boxes;
113         else
114                 aha->cur_outbox++;
115 }
116
117 #define ahautoa24(u,s3)                 \
118         (s3)[0] = ((u) >> 16) & 0xff;   \
119         (s3)[1] = ((u) >> 8) & 0xff;    \
120         (s3)[2] = (u) & 0xff;
121
122 #define aha_a24tou(s3) \
123         (((s3)[0] << 16) | ((s3)[1] << 8) | (s3)[2])
124
125 /* CCB Mangement functions */
126 static __inline u_int32_t               ahaccbvtop(struct aha_softc *aha,
127                                                   struct aha_ccb *accb);
128 static __inline struct aha_ccb*         ahaccbptov(struct aha_softc *aha,
129                                                   u_int32_t ccb_addr);
130
131 static __inline u_int32_t
132 ahaccbvtop(struct aha_softc *aha, struct aha_ccb *accb)
133 {
134         return (aha->aha_ccb_physbase
135               + (u_int32_t)((caddr_t)accb - (caddr_t)aha->aha_ccb_array));
136 }
137 static __inline struct aha_ccb *
138 ahaccbptov(struct aha_softc *aha, u_int32_t ccb_addr)
139 {
140         return (aha->aha_ccb_array +
141               + ((struct aha_ccb*)ccb_addr-(struct aha_ccb*)aha->aha_ccb_physbase));
142 }
143
144 static struct aha_ccb*  ahagetccb(struct aha_softc *aha);
145 static __inline void    ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb);
146 static void             ahaallocccbs(struct aha_softc *aha);
147 static bus_dmamap_callback_t ahaexecuteccb;
148 static void             ahadone(struct aha_softc *aha, struct aha_ccb *accb,
149                                aha_mbi_comp_code_t comp_code);
150
151 /* Host adapter command functions */
152 static int      ahareset(struct aha_softc* aha, int hard_reset);
153
154 /* Initialization functions */
155 static int                      ahainitmboxes(struct aha_softc *aha);
156 static bus_dmamap_callback_t    ahamapmboxes;
157 static bus_dmamap_callback_t    ahamapccbs;
158 static bus_dmamap_callback_t    ahamapsgs;
159
160 /* Transfer Negotiation Functions */
161 static void ahafetchtransinfo(struct aha_softc *aha,
162                              struct ccb_trans_settings *cts);
163
164 /* CAM SIM entry points */
165 #define ccb_accb_ptr spriv_ptr0
166 #define ccb_aha_ptr spriv_ptr1
167 static void     ahaaction(struct cam_sim *sim, union ccb *ccb);
168 static void     ahapoll(struct cam_sim *sim);
169
170 /* Our timeout handler */
171 static timeout_t ahatimeout;
172
173 u_long aha_unit = 0;
174
175 /*
176  * Do our own re-probe protection until a configuration
177  * manager can do it for us.  This ensures that we don't
178  * reprobe a card already found by the EISA or PCI probes.
179  */
180 static struct aha_isa_port aha_isa_ports[] =
181 {
182         { 0x130, 4 },
183         { 0x134, 5 },
184         { 0x230, 2 },
185         { 0x234, 3 },
186         { 0x330, 0 },
187         { 0x334, 1 }
188 };
189
190 /*
191  * I/O ports listed in the order enumerated by the
192  * card for certain op codes.
193  */
194 static u_int16_t aha_board_ports[] =
195 {
196         0x330,
197         0x334,
198         0x230,
199         0x234,
200         0x130,
201         0x134
202 };
203
204 /* Exported functions */
205 struct aha_softc *
206 aha_alloc(int unit, bus_space_tag_t tag, bus_space_handle_t bsh)
207 {
208         struct  aha_softc *aha;  
209
210         if (unit != AHA_TEMP_UNIT) {
211                 if (unit >= NAHATOT) {
212                         printf("aha: unit number (%d) too high\n", unit);
213                         return NULL;
214                 }
215
216                 /*
217                  * Allocate a storage area for us
218                  */
219                 if (aha_softcs[unit]) {    
220                         printf("aha%d: memory already allocated\n", unit);
221                         return NULL;    
222                 }
223         }
224
225         aha = malloc(sizeof(struct aha_softc), M_DEVBUF, M_INTWAIT | M_ZERO);
226         SLIST_INIT(&aha->free_aha_ccbs);
227         LIST_INIT(&aha->pending_ccbs);
228         SLIST_INIT(&aha->sg_maps);
229         aha->unit = unit;
230         aha->tag = tag;
231         aha->bsh = bsh;
232         aha->ccb_sg_opcode = INITIATOR_SG_CCB_WRESID;
233         aha->ccb_ccb_opcode = INITIATOR_CCB_WRESID;
234
235         if (aha->unit != AHA_TEMP_UNIT) {
236                 aha_softcs[unit] = aha;
237         }
238         return (aha);
239 }
240
241 void
242 aha_free(struct aha_softc *aha)
243 {
244         switch (aha->init_level) {
245         default:
246         case 8:
247         {
248                 struct sg_map_node *sg_map;
249
250                 while ((sg_map = SLIST_FIRST(&aha->sg_maps))!= NULL) {
251                         SLIST_REMOVE_HEAD(&aha->sg_maps, links);
252                         bus_dmamap_unload(aha->sg_dmat,
253                                           sg_map->sg_dmamap);
254                         bus_dmamem_free(aha->sg_dmat, sg_map->sg_vaddr,
255                                         sg_map->sg_dmamap);
256                         free(sg_map, M_DEVBUF);
257                 }
258                 bus_dma_tag_destroy(aha->sg_dmat);
259         }
260                 /* fall through */
261         case 7:
262                 bus_dmamap_unload(aha->ccb_dmat, aha->ccb_dmamap);
263                 /* fall through */
264         case 6:
265                 bus_dmamap_destroy(aha->ccb_dmat, aha->ccb_dmamap);
266                 bus_dmamem_free(aha->ccb_dmat, aha->aha_ccb_array,
267                                 aha->ccb_dmamap);
268                 /* fall through */
269         case 5:
270                 bus_dma_tag_destroy(aha->ccb_dmat);
271                 /* fall through */
272         case 4:
273                 bus_dmamap_unload(aha->mailbox_dmat, aha->mailbox_dmamap);
274                 /* fall through */
275         case 3:
276                 bus_dmamem_free(aha->mailbox_dmat, aha->in_boxes,
277                                 aha->mailbox_dmamap);
278                 bus_dmamap_destroy(aha->mailbox_dmat, aha->mailbox_dmamap);
279                 /* fall through */
280         case 2:
281                 bus_dma_tag_destroy(aha->buffer_dmat);
282                 /* fall through */
283         case 1:
284                 bus_dma_tag_destroy(aha->mailbox_dmat);
285                 /* fall through */
286         case 0:
287                 break;
288         }
289         if (aha->unit != AHA_TEMP_UNIT) {
290                 aha_softcs[aha->unit] = NULL;
291         }
292         free(aha, M_DEVBUF);
293 }
294
295 /*
296  * Probe the adapter and verify that the card is an Adaptec.
297  */
298 int
299 aha_probe(struct aha_softc* aha)
300 {
301         u_int    status;
302         u_int    intstat;
303         int      error;
304         board_id_data_t board_id;
305
306         /*
307          * See if the three I/O ports look reasonable.
308          * Touch the minimal number of registers in the
309          * failure case.
310          */
311         status = aha_inb(aha, STATUS_REG);
312         if ((status == 0)
313          || (status & (DIAG_ACTIVE|CMD_REG_BUSY|
314                        STATUS_REG_RSVD)) != 0) {
315                 PRVERB(("%s: status reg test failed %x\n", aha_name(aha),
316                         status));
317                 return (ENXIO);
318         }
319
320         intstat = aha_inb(aha, INTSTAT_REG);
321         if ((intstat & INTSTAT_REG_RSVD) != 0) {
322                 PRVERB(("%s: Failed Intstat Reg Test\n", aha_name(aha)));
323                 return (ENXIO);
324         }
325
326         /*
327          * Looking good so far.  Final test is to reset the
328          * adapter and fetch the board ID and ensure we aren't
329          * looking at a BusLogic.
330          */
331         if ((error = ahareset(aha, /*hard_reset*/TRUE)) != 0) {
332                 PRVERB(("%s: Failed Reset\n", aha_name(aha)));
333                 return (ENXIO);
334         }
335
336         /*
337          * Get the board ID.  We use this to see if we're dealing with
338          * a buslogic card or a aha card (or clone).
339          */
340         error = aha_cmd(aha, AOP_INQUIRE_BOARD_ID, NULL, /*parmlen*/0,
341                        (u_int8_t*)&board_id, sizeof(board_id),
342                        DEFAULT_CMD_TIMEOUT);
343         if (error != 0) {
344                 PRVERB(("%s: INQUIRE failed %x\n", aha_name(aha), error));
345                 return (ENXIO);
346         }
347         aha->fw_major = board_id.firmware_rev_major;
348         aha->fw_minor = board_id.firmware_rev_minor;
349         aha->boardid = board_id.board_type;
350
351         /*
352          * The Buslogic cards have an id of either 0x41 or 0x42.  So
353          * if those come up in the probe, we test the geometry register
354          * of the board.  Adaptec boards that are this old will not have
355          * this register, and return 0xff, while buslogic cards will return
356          * something different.
357          *
358          * It appears that for reasons unknow, for the for the
359          * aha-1542B cards, we need to wait a little bit before trying
360          * to read the geometry register.  I picked 10ms since we have
361          * reports that a for loop to 1000 did the trick, and this
362          * errs on the side of conservatism.  Besides, no one will
363          * notice a 10mS delay here, even the 1542B card users :-)
364          *
365          * Some compatible cards return 0 here.  Some cards also
366          * seem to return 0x7f.
367          *
368          * XXX I'm not sure how this will impact other cloned cards 
369          *
370          * This really should be replaced with the esetup command, since
371          * that appears to be more reliable.  This becomes more and more
372          * true over time as we discover more cards that don't read the
373          * geometry register consistantly.
374          */
375         if (aha->boardid <= 0x42) {
376                 /* Wait 10ms before reading */
377                 DELAY(10000);
378                 status = aha_inb(aha, GEOMETRY_REG);
379                 if (status != 0xff && status != 0x00 && status != 0x7f) {
380                         PRVERB(("%s: Geometry Register test failed 0x%x\n",
381                                 aha_name(aha), status));
382                         return (ENXIO);
383                 }
384         }
385         
386         return (0);
387 }
388
389 /*
390  * Pull the boards setup information and record it in our softc.
391  */
392 int
393 aha_fetch_adapter_info(struct aha_softc *aha)
394 {
395         setup_data_t    setup_info;
396         config_data_t config_data;
397         u_int8_t length_param;
398         int      error;
399         struct  aha_extbios extbios;
400         
401         switch (aha->boardid) {
402         case BOARD_1540_16HEAD_BIOS:
403                 snprintf(aha->model, sizeof(aha->model), "1540 16 head BIOS");
404                 break;
405         case BOARD_1540_64HEAD_BIOS:
406                 snprintf(aha->model, sizeof(aha->model), "1540 64 head BIOS");
407                 break;
408         case BOARD_1542:
409                 snprintf(aha->model, sizeof(aha->model), "1540/1542 64 head BIOS");
410                 break;
411         case BOARD_1640:
412                 snprintf(aha->model, sizeof(aha->model), "1640");
413                 break;
414         case BOARD_1740:
415                 snprintf(aha->model, sizeof(aha->model), "1740A/1742A/1744");
416                 break;
417         case BOARD_1542C:
418                 snprintf(aha->model, sizeof(aha->model), "1542C");
419                 break;
420         case BOARD_1542CF:
421                 snprintf(aha->model, sizeof(aha->model), "1542CF");
422                 break;
423         case BOARD_1542CP:
424                 snprintf(aha->model, sizeof(aha->model), "1542CP");
425                 break;
426         default:
427                 snprintf(aha->model, sizeof(aha->model), "Unknown");
428                 break;
429         }
430         /*
431          * If we are a new type of 1542 board (anything newer than a 1542C)
432          * then disable the extended bios so that the
433          * mailbox interface is unlocked.
434          * This is also true for the 1542B Version 3.20. First Adaptec
435          * board that supports >1Gb drives.
436          * No need to check the extended bios flags as some of the
437          * extensions that cause us problems are not flagged in that byte.
438          */
439         if (PROBABLY_NEW_BOARD(aha->boardid) ||
440                 (aha->boardid == 0x41
441                 && aha->fw_major == 0x31 && 
442                 aha->fw_minor >= 0x34)) {
443                 error = aha_cmd(aha, AOP_RETURN_EXT_BIOS_INFO, NULL,
444                         /*paramlen*/0, (u_char *)&extbios, sizeof(extbios),
445                         DEFAULT_CMD_TIMEOUT);
446                 error = aha_cmd(aha, AOP_MBOX_IF_ENABLE, (u_int8_t *)&extbios,
447                         /*paramlen*/2, NULL, 0, DEFAULT_CMD_TIMEOUT);
448         }
449         if (aha->boardid < 0x41)
450                 printf("%s: Warning: aha-1542A won't likely work.\n",
451                         aha_name(aha));
452
453         aha->max_sg = 17;               /* Need >= 17 to do 64k I/O */
454         aha->diff_bus = 0;
455         aha->extended_lun = 0;
456         aha->extended_trans = 0;
457         aha->max_ccbs = 16;
458         /* Determine Sync/Wide/Disc settings */
459         length_param = sizeof(setup_info);
460         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &length_param,
461                        /*paramlen*/1, (u_int8_t*)&setup_info,
462                        sizeof(setup_info), DEFAULT_CMD_TIMEOUT);
463         if (error != 0) {
464                 printf("%s: aha_fetch_adapter_info - Failed "
465                        "Get Setup Info\n", aha_name(aha));
466                 return (error);
467         }
468         if (setup_info.initiate_sync != 0) {
469                 aha->sync_permitted = ALL_TARGETS;
470         }
471         aha->disc_permitted = ALL_TARGETS;
472
473         /* We need as many mailboxes as we can have ccbs */
474         aha->num_boxes = aha->max_ccbs;
475
476         /* Determine our SCSI ID */
477         
478         error = aha_cmd(aha, AOP_INQUIRE_CONFIG, NULL, /*parmlen*/0,
479                        (u_int8_t*)&config_data, sizeof(config_data),
480                        DEFAULT_CMD_TIMEOUT);
481         if (error != 0) {
482                 printf("%s: aha_fetch_adapter_info - Failed Get Config\n",
483                        aha_name(aha));
484                 return (error);
485         }
486         aha->scsi_id = config_data.scsi_id;
487         return (0);
488 }
489
490 /*
491  * Start the board, ready for normal operation
492  */
493 int
494 aha_init(struct aha_softc* aha)
495 {
496         /* Announce the Adapter */
497         printf("%s: AHA-%s FW Rev. %c.%c (ID=%x) ", aha_name(aha),
498                aha->model, aha->fw_major, aha->fw_minor, aha->boardid);
499
500         if (aha->diff_bus != 0)
501                 printf("Diff ");
502
503         printf("SCSI Host Adapter, SCSI ID %d, %d CCBs\n", aha->scsi_id,
504                aha->max_ccbs);
505
506         /*
507          * Create our DMA tags.  These tags define the kinds of device
508          * accessible memory allocations and memory mappings we will 
509          * need to perform during normal operation.
510          *
511          * Unless we need to further restrict the allocation, we rely
512          * on the restrictions of the parent dmat, hence the common
513          * use of MAXADDR and MAXSIZE.
514          */
515
516         /* DMA tag for mapping buffers into device visible space. */
517         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
518                                /*lowaddr*/BUS_SPACE_MAXADDR,
519                                /*highaddr*/BUS_SPACE_MAXADDR,
520                                /*filter*/NULL, /*filterarg*/NULL,
521                                /*maxsize*/MAXBSIZE, /*nsegments*/AHA_NSEG,
522                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
523                                /*flags*/BUS_DMA_ALLOCNOW,
524                                &aha->buffer_dmat) != 0) {
525                 goto error_exit;
526         }
527
528         aha->init_level++;
529         /* DMA tag for our mailboxes */
530         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
531                                /*lowaddr*/BUS_SPACE_MAXADDR,
532                                /*highaddr*/BUS_SPACE_MAXADDR,
533                                /*filter*/NULL, /*filterarg*/NULL,
534                                aha->num_boxes * (sizeof(aha_mbox_in_t)
535                                                + sizeof(aha_mbox_out_t)),
536                                /*nsegments*/1,
537                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
538                                /*flags*/0, &aha->mailbox_dmat) != 0) {
539                 goto error_exit;
540         }
541
542         aha->init_level++;
543
544         /* Allocation for our mailboxes */
545         if (bus_dmamem_alloc(aha->mailbox_dmat, (void **)&aha->out_boxes,
546                              BUS_DMA_NOWAIT, &aha->mailbox_dmamap) != 0) {
547                 goto error_exit;
548         }
549
550         aha->init_level++;
551
552         /* And permanently map them */
553         bus_dmamap_load(aha->mailbox_dmat, aha->mailbox_dmamap,
554                         aha->out_boxes,
555                         aha->num_boxes * (sizeof(aha_mbox_in_t)
556                                        + sizeof(aha_mbox_out_t)),
557                         ahamapmboxes, aha, /*flags*/0);
558
559         aha->init_level++;
560
561         aha->in_boxes = (aha_mbox_in_t *)&aha->out_boxes[aha->num_boxes];
562
563         ahainitmboxes(aha);
564
565         /* DMA tag for our ccb structures */
566         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
567                                /*lowaddr*/BUS_SPACE_MAXADDR,
568                                /*highaddr*/BUS_SPACE_MAXADDR,
569                                /*filter*/NULL, /*filterarg*/NULL,
570                                aha->max_ccbs * sizeof(struct aha_ccb),
571                                /*nsegments*/1,
572                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
573                                /*flags*/0, &aha->ccb_dmat) != 0) {
574                 goto error_exit;
575         }
576
577         aha->init_level++;
578
579         /* Allocation for our ccbs */
580         if (bus_dmamem_alloc(aha->ccb_dmat, (void **)&aha->aha_ccb_array,
581                              BUS_DMA_NOWAIT, &aha->ccb_dmamap) != 0) {
582                 goto error_exit;
583         }
584
585         aha->init_level++;
586
587         /* And permanently map them */
588         bus_dmamap_load(aha->ccb_dmat, aha->ccb_dmamap,
589                         aha->aha_ccb_array,
590                         aha->max_ccbs * sizeof(struct aha_ccb),
591                         ahamapccbs, aha, /*flags*/0);
592
593         aha->init_level++;
594
595         /* DMA tag for our S/G structures.  We allocate in page sized chunks */
596         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
597                                /*lowaddr*/BUS_SPACE_MAXADDR,
598                                /*highaddr*/BUS_SPACE_MAXADDR,
599                                /*filter*/NULL, /*filterarg*/NULL,
600                                PAGE_SIZE, /*nsegments*/1,
601                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
602                                /*flags*/0, &aha->sg_dmat) != 0) {
603                 goto error_exit;
604         }
605
606         aha->init_level++;
607
608         /* Perform initial CCB allocation */
609         bzero(aha->aha_ccb_array, aha->max_ccbs * sizeof(struct aha_ccb));
610         ahaallocccbs(aha);
611
612         if (aha->num_ccbs == 0) {
613                 printf("%s: aha_init - Unable to allocate initial ccbs\n",
614                        aha_name(aha));
615                 goto error_exit;
616         }
617
618         /*
619          * Note that we are going and return (to probe)
620          */
621         return 0;
622
623 error_exit:
624
625         return (ENXIO);
626 }
627
628 int
629 aha_attach(struct aha_softc *aha)
630 {
631         int tagged_dev_openings;
632         struct cam_devq *devq;
633
634         /*
635          * We don't do tagged queueing, since the aha cards don't
636          * support it.
637          */
638         tagged_dev_openings = 0;
639
640         /*
641          * Create the device queue for our SIM.
642          */
643         devq = cam_simq_alloc(aha->max_ccbs - 1);
644         if (devq == NULL)
645                 return (ENOMEM);
646
647         /*
648          * Construct our SIM entry
649          */
650         aha->sim = cam_sim_alloc(ahaaction, ahapoll, "aha", aha, aha->unit,
651                                 2, tagged_dev_openings, devq);
652         cam_simq_release(devq);
653         if (aha->sim == NULL) {
654                 return (ENOMEM);
655         }
656         
657         if (xpt_bus_register(aha->sim, 0) != CAM_SUCCESS) {
658                 cam_sim_free(aha->sim);
659                 return (ENXIO);
660         }
661         
662         if (xpt_create_path(&aha->path, /*periph*/NULL,
663                             cam_sim_path(aha->sim), CAM_TARGET_WILDCARD,
664                             CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
665                 xpt_bus_deregister(cam_sim_path(aha->sim));
666                 cam_sim_free(aha->sim);
667                 return (ENXIO);
668         }
669                 
670         return (0);
671 }
672
673 char *
674 aha_name(struct aha_softc *aha)
675 {
676         static char name[10];
677
678         snprintf(name, sizeof(name), "aha%d", aha->unit);
679         return (name);
680 }
681
682 void
683 aha_find_probe_range(int ioport, int *port_index, int *max_port_index)
684 {
685         if (ioport > 0) {
686                 int i;
687
688                 for (i = 0;i < AHA_NUM_ISAPORTS; i++)
689                         if (ioport <= aha_isa_ports[i].addr)
690                                 break;
691                 if ((i >= AHA_NUM_ISAPORTS)
692                  || (ioport != aha_isa_ports[i].addr)) {
693                         printf("\n"
694 "aha_isa_probe: Invalid baseport of 0x%x specified.\n"
695 "aha_isa_probe: Nearest valid baseport is 0x%x.\n"
696 "aha_isa_probe: Failing probe.\n",
697                                ioport,
698                                (i < AHA_NUM_ISAPORTS)
699                                     ? aha_isa_ports[i].addr
700                                     : aha_isa_ports[AHA_NUM_ISAPORTS - 1].addr);
701                         *port_index = *max_port_index = -1;
702                         return;
703                 }
704                 *port_index = *max_port_index = aha_isa_ports[i].bio;
705         } else {
706                 *port_index = 0;
707                 *max_port_index = AHA_NUM_ISAPORTS - 1;
708         }
709 }
710
711 int
712 aha_iop_from_bio(isa_compat_io_t bio_index)
713 {
714         if (bio_index >= 0 && bio_index < AHA_NUM_ISAPORTS)
715                 return (aha_board_ports[bio_index]);
716         return (-1);
717 }
718
719 static void
720 ahaallocccbs(struct aha_softc *aha)
721 {
722         struct aha_ccb *next_ccb;
723         struct sg_map_node *sg_map;
724         bus_addr_t physaddr;
725         aha_sg_t *segs;
726         int newcount;
727         int i;
728
729         next_ccb = &aha->aha_ccb_array[aha->num_ccbs];
730
731         sg_map = malloc(sizeof(*sg_map), M_DEVBUF, M_INTWAIT);
732
733         /* Allocate S/G space for the next batch of CCBS */
734         if (bus_dmamem_alloc(aha->sg_dmat, (void **)&sg_map->sg_vaddr,
735                              BUS_DMA_NOWAIT, &sg_map->sg_dmamap) != 0) {
736                 free(sg_map, M_DEVBUF);
737                 return;
738         }
739
740         SLIST_INSERT_HEAD(&aha->sg_maps, sg_map, links);
741
742         bus_dmamap_load(aha->sg_dmat, sg_map->sg_dmamap, sg_map->sg_vaddr,
743                         PAGE_SIZE, ahamapsgs, aha, /*flags*/0);
744         
745         segs = sg_map->sg_vaddr;
746         physaddr = sg_map->sg_physaddr;
747
748         newcount = (PAGE_SIZE / (AHA_NSEG * sizeof(aha_sg_t)));
749         for (i = 0; aha->num_ccbs < aha->max_ccbs && i < newcount; i++) {
750                 int error;
751
752                 next_ccb->sg_list = segs;
753                 next_ccb->sg_list_phys = physaddr;
754                 next_ccb->flags = ACCB_FREE;
755                 error = bus_dmamap_create(aha->buffer_dmat, /*flags*/0,
756                                           &next_ccb->dmamap);
757                 if (error != 0)
758                         break;
759                 SLIST_INSERT_HEAD(&aha->free_aha_ccbs, next_ccb, links);
760                 segs += AHA_NSEG;
761                 physaddr += (AHA_NSEG * sizeof(aha_sg_t));
762                 next_ccb++;
763                 aha->num_ccbs++;
764         }
765
766         /* Reserve a CCB for error recovery */
767         if (aha->recovery_accb == NULL) {
768                 aha->recovery_accb = SLIST_FIRST(&aha->free_aha_ccbs);
769                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
770         }
771 }
772
773 static __inline void
774 ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb)
775 {
776         int s;
777
778         s = splcam();
779         if ((accb->flags & ACCB_ACTIVE) != 0)
780                 LIST_REMOVE(&accb->ccb->ccb_h, sim_links.le);
781         if (aha->resource_shortage != 0
782          && (accb->ccb->ccb_h.status & CAM_RELEASE_SIMQ) == 0) {
783                 accb->ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
784                 aha->resource_shortage = FALSE;
785         }
786         accb->flags = ACCB_FREE;
787         SLIST_INSERT_HEAD(&aha->free_aha_ccbs, accb, links);
788         aha->active_ccbs--;
789         splx(s);
790 }
791
792 static struct aha_ccb*
793 ahagetccb(struct aha_softc *aha)
794 {
795         struct  aha_ccb* accb;
796         int     s;
797
798         s = splcam();
799         if ((accb = SLIST_FIRST(&aha->free_aha_ccbs)) != NULL) {
800                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
801                 aha->active_ccbs++;
802         } else if (aha->num_ccbs < aha->max_ccbs) {
803                 ahaallocccbs(aha);
804                 accb = SLIST_FIRST(&aha->free_aha_ccbs);
805                 if (accb == NULL)
806                         printf("%s: Can't malloc ACCB\n", aha_name(aha));
807                 else {
808                         SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
809                         aha->active_ccbs++;
810                 }
811         }
812         splx(s);
813
814         return (accb);
815 }
816
817 static void
818 ahaaction(struct cam_sim *sim, union ccb *ccb)
819 {
820         struct  aha_softc *aha;
821
822         CAM_DEBUG(ccb->ccb_h.path, CAM_DEBUG_TRACE, ("ahaaction\n"));
823         
824         aha = (struct aha_softc *)cam_sim_softc(sim);
825         
826         switch (ccb->ccb_h.func_code) {
827         /* Common cases first */
828         case XPT_SCSI_IO:       /* Execute the requested I/O operation */
829         case XPT_RESET_DEV:     /* Bus Device Reset the specified SCSI device */
830         {
831                 struct  aha_ccb *accb;
832                 struct  aha_hccb *hccb;
833
834                 /*
835                  * get a accb to use.
836                  */
837                 if ((accb = ahagetccb(aha)) == NULL) {
838                         int s;
839
840                         s = splcam();
841                         aha->resource_shortage = TRUE;
842                         splx(s);
843                         xpt_freeze_simq(aha->sim, /*count*/1);
844                         ccb->ccb_h.status = CAM_REQUEUE_REQ;
845                         xpt_done(ccb);
846                         return;
847                 }
848                 
849                 hccb = &accb->hccb;
850
851                 /*
852                  * So we can find the ACCB when an abort is requested
853                  */
854                 accb->ccb = ccb;
855                 ccb->ccb_h.ccb_accb_ptr = accb;
856                 ccb->ccb_h.ccb_aha_ptr = aha;
857
858                 /*
859                  * Put all the arguments for the xfer in the accb
860                  */
861                 hccb->target = ccb->ccb_h.target_id;
862                 hccb->lun = ccb->ccb_h.target_lun;
863                 hccb->ahastat = 0;
864                 hccb->sdstat = 0;
865
866                 if (ccb->ccb_h.func_code == XPT_SCSI_IO) {
867                         struct ccb_scsiio *csio;
868                         struct ccb_hdr *ccbh;
869
870                         csio = &ccb->csio;
871                         ccbh = &csio->ccb_h;
872                         hccb->opcode = aha->ccb_ccb_opcode;
873                         hccb->datain = (ccb->ccb_h.flags & CAM_DIR_IN) != 0;
874                         hccb->dataout = (ccb->ccb_h.flags & CAM_DIR_OUT) != 0;
875                         hccb->cmd_len = csio->cdb_len;
876                         if (hccb->cmd_len > sizeof(hccb->scsi_cdb)) {
877                                 ccb->ccb_h.status = CAM_REQ_INVALID;
878                                 ahafreeccb(aha, accb);
879                                 xpt_done(ccb);
880                                 return;
881                         }
882                         hccb->sense_len = csio->sense_len;
883                         if ((ccbh->flags & CAM_CDB_POINTER) != 0) {
884                                 if ((ccbh->flags & CAM_CDB_PHYS) == 0) {
885                                         bcopy(csio->cdb_io.cdb_ptr,
886                                               hccb->scsi_cdb, hccb->cmd_len);
887                                 } else {
888                                         /* I guess I could map it in... */
889                                         ccbh->status = CAM_REQ_INVALID;
890                                         ahafreeccb(aha, accb);
891                                         xpt_done(ccb);
892                                         return;
893                                 }
894                         } else {
895                                 bcopy(csio->cdb_io.cdb_bytes,
896                                       hccb->scsi_cdb, hccb->cmd_len);
897                         }
898                         /*
899                          * If we have any data to send with this command,
900                          * map it into bus space.
901                          */
902                         /* Only use S/G if there is a transfer */
903                         if ((ccbh->flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
904                                 if ((ccbh->flags & CAM_SCATTER_VALID) == 0) {
905                                         /*
906                                          * We've been given a pointer
907                                          * to a single buffer.
908                                          */
909                                         if ((ccbh->flags & CAM_DATA_PHYS)==0) {
910                                                 int s;
911                                                 int error;
912
913                                                 s = splsoftvm();
914                                                 error = bus_dmamap_load(
915                                                     aha->buffer_dmat,
916                                                     accb->dmamap,
917                                                     csio->data_ptr,
918                                                     csio->dxfer_len,
919                                                     ahaexecuteccb,
920                                                     accb,
921                                                     /*flags*/0);
922                                                 if (error == EINPROGRESS) {
923                                                         /*
924                                                          * So as to maintain
925                                                          * ordering, freeze the
926                                                          * controller queue
927                                                          * until our mapping is
928                                                          * returned.
929                                                          */
930                                                         xpt_freeze_simq(aha->sim,
931                                                                         1);
932                                                         csio->ccb_h.status |=
933                                                             CAM_RELEASE_SIMQ;
934                                                 }
935                                                 splx(s);
936                                         } else {
937                                                 struct bus_dma_segment seg; 
938
939                                                 /* Pointer to physical buffer */
940                                                 seg.ds_addr =
941                                                     (bus_addr_t)csio->data_ptr;
942                                                 seg.ds_len = csio->dxfer_len;
943                                                 ahaexecuteccb(accb, &seg, 1, 0);
944                                         }
945                                 } else {
946                                         struct bus_dma_segment *segs;
947
948                                         if ((ccbh->flags & CAM_DATA_PHYS) != 0)
949                                                 panic("ahaaction - Physical "
950                                                       "segment pointers "
951                                                       "unsupported");
952
953                                         if ((ccbh->flags&CAM_SG_LIST_PHYS)==0)
954                                                 panic("ahaaction - Virtual "
955                                                       "segment addresses "
956                                                       "unsupported");
957
958                                         /* Just use the segments provided */
959                                         segs = (struct bus_dma_segment *)
960                                             csio->data_ptr;
961                                         ahaexecuteccb(accb, segs,
962                                                      csio->sglist_cnt, 0);
963                                 }
964                         } else {
965                                 ahaexecuteccb(accb, NULL, 0, 0);
966                         }
967                 } else {
968                         hccb->opcode = INITIATOR_BUS_DEV_RESET;
969                         /* No data transfer */
970                         hccb->datain = TRUE;
971                         hccb->dataout = TRUE;
972                         hccb->cmd_len = 0;
973                         hccb->sense_len = 0;
974                         ahaexecuteccb(accb, NULL, 0, 0);
975                 }
976                 break;
977         }
978         case XPT_EN_LUN:                /* Enable LUN as a target */
979         case XPT_TARGET_IO:             /* Execute target I/O request */
980         case XPT_ACCEPT_TARGET_IO:      /* Accept Host Target Mode CDB */
981         case XPT_CONT_TARGET_IO:        /* Continue Host Target I/O Connection*/
982         case XPT_ABORT:                 /* Abort the specified CCB */
983                 /* XXX Implement */
984                 ccb->ccb_h.status = CAM_REQ_INVALID;
985                 xpt_done(ccb);
986                 break;
987         case XPT_SET_TRAN_SETTINGS:
988         {
989                 /* XXX Implement */
990                 ccb->ccb_h.status = CAM_PROVIDE_FAIL;
991                 xpt_done(ccb);
992                 break;
993         }
994         case XPT_GET_TRAN_SETTINGS:
995         /* Get default/user set transfer settings for the target */
996         {
997                 struct  ccb_trans_settings *cts;
998                 u_int   target_mask;
999
1000                 cts = &ccb->cts;
1001                 target_mask = 0x01 << ccb->ccb_h.target_id;
1002                 if ((cts->flags & CCB_TRANS_USER_SETTINGS) != 0) {
1003                         cts->flags = 0;
1004                         if ((aha->disc_permitted & target_mask) != 0)
1005                                 cts->flags |= CCB_TRANS_DISC_ENB;
1006                         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1007                         if ((aha->sync_permitted & target_mask) != 0) {
1008                                 if (aha->boardid >= BOARD_1542CF)
1009                                         cts->sync_period = 25;
1010                                 else
1011                                         cts->sync_period = 50;
1012                         } else
1013                                 cts->sync_period = 0;
1014
1015                         if (cts->sync_period != 0)
1016                                 cts->sync_offset = 15;
1017
1018                         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1019                                    | CCB_TRANS_SYNC_OFFSET_VALID
1020                                    | CCB_TRANS_BUS_WIDTH_VALID
1021                                    | CCB_TRANS_DISC_VALID
1022                                    | CCB_TRANS_TQ_VALID;
1023                 } else {
1024                         ahafetchtransinfo(aha, cts);
1025                 }
1026
1027                 ccb->ccb_h.status = CAM_REQ_CMP;
1028                 xpt_done(ccb);
1029                 break;
1030         }
1031         case XPT_CALC_GEOMETRY:
1032         {
1033                 struct    ccb_calc_geometry *ccg;
1034                 u_int32_t size_mb;
1035                 u_int32_t secs_per_cylinder;
1036
1037                 ccg = &ccb->ccg;
1038                 size_mb = ccg->volume_size
1039                         / ((1024L * 1024L) / ccg->block_size);
1040                 
1041                 if (size_mb >= 1024 && (aha->extended_trans != 0)) {
1042                         if (size_mb >= 2048) {
1043                                 ccg->heads = 255;
1044                                 ccg->secs_per_track = 63;
1045                         } else {
1046                                 ccg->heads = 128;
1047                                 ccg->secs_per_track = 32;
1048                         }
1049                 } else {
1050                         ccg->heads = 64;
1051                         ccg->secs_per_track = 32;
1052                 }
1053                 secs_per_cylinder = ccg->heads * ccg->secs_per_track;
1054                 ccg->cylinders = ccg->volume_size / secs_per_cylinder;
1055                 ccb->ccb_h.status = CAM_REQ_CMP;
1056                 xpt_done(ccb);
1057                 break;
1058         }
1059         case XPT_RESET_BUS:             /* Reset the specified SCSI bus */
1060         {
1061                 ahareset(aha, /*hardreset*/TRUE);
1062                 ccb->ccb_h.status = CAM_REQ_CMP;
1063                 xpt_done(ccb);
1064                 break;
1065         }
1066         case XPT_TERM_IO:               /* Terminate the I/O process */
1067                 /* XXX Implement */
1068                 ccb->ccb_h.status = CAM_REQ_INVALID;
1069                 xpt_done(ccb);
1070                 break;
1071         case XPT_PATH_INQ:              /* Path routing inquiry */
1072         {
1073                 struct ccb_pathinq *cpi = &ccb->cpi;
1074                 
1075                 cpi->version_num = 1; /* XXX??? */
1076                 cpi->hba_inquiry = PI_SDTR_ABLE;
1077                 cpi->target_sprt = 0;
1078                 cpi->hba_misc = 0;
1079                 cpi->hba_eng_cnt = 0;
1080                 cpi->max_target = 7;
1081                 cpi->max_lun = 7;
1082                 cpi->initiator_id = aha->scsi_id;
1083                 cpi->bus_id = cam_sim_bus(sim);
1084                 cpi->base_transfer_speed = 3300;
1085                 strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1086                 strncpy(cpi->hba_vid, "Adaptec", HBA_IDLEN);
1087                 strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1088                 cpi->unit_number = cam_sim_unit(sim);
1089                 cpi->ccb_h.status = CAM_REQ_CMP;
1090                 xpt_done(ccb);
1091                 break;
1092         }
1093         default:
1094                 ccb->ccb_h.status = CAM_REQ_INVALID;
1095                 xpt_done(ccb);
1096                 break;
1097         }
1098 }
1099
1100 static void
1101 ahaexecuteccb(void *arg, bus_dma_segment_t *dm_segs, int nseg, int error)
1102 {
1103         struct   aha_ccb *accb;
1104         union    ccb *ccb;
1105         struct   aha_softc *aha;
1106         int      s;
1107         u_int32_t paddr;
1108
1109         accb = (struct aha_ccb *)arg;
1110         ccb = accb->ccb;
1111         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1112
1113         if (error != 0) {
1114                 if (error != EFBIG)
1115                         printf("%s: Unexepected error 0x%x returned from "
1116                                "bus_dmamap_load\n", aha_name(aha), error);
1117                 if (ccb->ccb_h.status == CAM_REQ_INPROG) {
1118                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1119                         ccb->ccb_h.status = CAM_REQ_TOO_BIG|CAM_DEV_QFRZN;
1120                 }
1121                 ahafreeccb(aha, accb);
1122                 xpt_done(ccb);
1123                 return;
1124         }
1125                 
1126         if (nseg != 0) {
1127                 aha_sg_t *sg;
1128                 bus_dma_segment_t *end_seg;
1129                 bus_dmasync_op_t op;
1130
1131                 end_seg = dm_segs + nseg;
1132
1133                 /* Copy the segments into our SG list */
1134                 sg = accb->sg_list;
1135                 while (dm_segs < end_seg) {
1136                         ahautoa24(dm_segs->ds_len, sg->len);
1137                         ahautoa24(dm_segs->ds_addr, sg->addr);
1138                         sg++;
1139                         dm_segs++;
1140                 }
1141
1142                 if (nseg > 1) {
1143                         accb->hccb.opcode = aha->ccb_sg_opcode;
1144                         ahautoa24((sizeof(aha_sg_t) * nseg),
1145                                   accb->hccb.data_len);
1146                         ahautoa24(accb->sg_list_phys, accb->hccb.data_addr);
1147                 } else {
1148                         bcopy(accb->sg_list->len, accb->hccb.data_len, 3);
1149                         bcopy(accb->sg_list->addr, accb->hccb.data_addr, 3);
1150                 }
1151
1152                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1153                         op = BUS_DMASYNC_PREREAD;
1154                 else
1155                         op = BUS_DMASYNC_PREWRITE;
1156
1157                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1158
1159         } else {
1160                 accb->hccb.opcode = INITIATOR_CCB;
1161                 ahautoa24(0, accb->hccb.data_len);
1162                 ahautoa24(0, accb->hccb.data_addr);
1163         }
1164
1165         s = splcam();
1166
1167         /*
1168          * Last time we need to check if this CCB needs to
1169          * be aborted.
1170          */
1171         if (ccb->ccb_h.status != CAM_REQ_INPROG) {
1172                 if (nseg != 0)
1173                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1174                 ahafreeccb(aha, accb);
1175                 xpt_done(ccb);
1176                 splx(s);
1177                 return;
1178         }
1179                 
1180         accb->flags = ACCB_ACTIVE;
1181         ccb->ccb_h.status |= CAM_SIM_QUEUED;
1182         LIST_INSERT_HEAD(&aha->pending_ccbs, &ccb->ccb_h, sim_links.le);
1183
1184         ccb->ccb_h.timeout_ch =
1185             timeout(ahatimeout, (caddr_t)accb,
1186                     (ccb->ccb_h.timeout * hz) / 1000);
1187
1188         /* Tell the adapter about this command */
1189         if (aha->cur_outbox->action_code != AMBO_FREE) {
1190                 /*
1191                  * We should never encounter a busy mailbox.
1192                  * If we do, warn the user, and treat it as
1193                  * a resource shortage.  If the controller is
1194                  * hung, one of the pending transactions will
1195                  * timeout causing us to start recovery operations.
1196                  */
1197                 printf("%s: Encountered busy mailbox with %d out of %d "
1198                        "commands active!!!", aha_name(aha), aha->active_ccbs,
1199                        aha->max_ccbs);
1200                 untimeout(ahatimeout, accb, ccb->ccb_h.timeout_ch);
1201                 if (nseg != 0)
1202                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1203                 ahafreeccb(aha, accb);
1204                 aha->resource_shortage = TRUE;
1205                 xpt_freeze_simq(aha->sim, /*count*/1);
1206                 ccb->ccb_h.status = CAM_REQUEUE_REQ;
1207                 xpt_done(ccb);
1208                 return;
1209         }
1210         paddr = ahaccbvtop(aha, accb);
1211         ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1212         aha->cur_outbox->action_code = AMBO_START;      
1213         aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1214
1215         ahanextoutbox(aha);
1216         splx(s);
1217 }
1218
1219 void
1220 aha_intr(void *arg)
1221 {
1222         struct  aha_softc *aha;
1223         u_int   intstat;
1224
1225         aha = (struct aha_softc *)arg;
1226         while (((intstat = aha_inb(aha, INTSTAT_REG)) & INTR_PENDING) != 0) {
1227                 if ((intstat & CMD_COMPLETE) != 0) {
1228                         aha->latched_status = aha_inb(aha, STATUS_REG);
1229                         aha->command_cmp = TRUE;
1230                 }
1231
1232                 aha_outb(aha, CONTROL_REG, RESET_INTR);
1233
1234                 if ((intstat & IMB_LOADED) != 0) {
1235                         while (aha->cur_inbox->comp_code != AMBI_FREE) {
1236                                 u_int32_t       paddr;
1237                                 paddr = aha_a24tou(aha->cur_inbox->ccb_addr);
1238                                 ahadone(aha,
1239                                        ahaccbptov(aha, paddr),
1240                                        aha->cur_inbox->comp_code);
1241                                 aha->cur_inbox->comp_code = AMBI_FREE;
1242                                 ahanextinbox(aha);
1243                         }
1244                 }
1245
1246                 if ((intstat & SCSI_BUS_RESET) != 0) {
1247                         ahareset(aha, /*hardreset*/FALSE);
1248                 }
1249         }
1250 }
1251
1252 static void
1253 ahadone(struct aha_softc *aha, struct aha_ccb *accb, aha_mbi_comp_code_t comp_code)
1254 {
1255         union  ccb        *ccb;
1256         struct ccb_scsiio *csio;
1257
1258         ccb = accb->ccb;
1259         csio = &accb->ccb->csio;
1260
1261         if ((accb->flags & ACCB_ACTIVE) == 0) {
1262                 printf("%s: ahadone - Attempt to free non-active ACCB %p\n",
1263                        aha_name(aha), (void *)accb);
1264                 return;
1265         }
1266
1267         if ((ccb->ccb_h.flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
1268                 bus_dmasync_op_t op;
1269
1270                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1271                         op = BUS_DMASYNC_POSTREAD;
1272                 else
1273                         op = BUS_DMASYNC_POSTWRITE;
1274                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1275                 bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1276         }
1277
1278         if (accb == aha->recovery_accb) {
1279                 /*
1280                  * The recovery ACCB does not have a CCB associated
1281                  * with it, so short circuit the normal error handling.
1282                  * We now traverse our list of pending CCBs and process
1283                  * any that were terminated by the recovery CCBs action.
1284                  * We also reinstate timeouts for all remaining, pending,
1285                  * CCBs.
1286                  */
1287                 struct cam_path *path;
1288                 struct ccb_hdr *ccb_h;
1289                 cam_status error;
1290
1291                 /* Notify all clients that a BDR occured */
1292                 error = xpt_create_path(&path, /*periph*/NULL,
1293                                         cam_sim_path(aha->sim),
1294                                         accb->hccb.target,
1295                                         CAM_LUN_WILDCARD);
1296                 
1297                 if (error == CAM_REQ_CMP)
1298                         xpt_async(AC_SENT_BDR, path, NULL);
1299
1300                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1301                 while (ccb_h != NULL) {
1302                         struct aha_ccb *pending_accb;
1303
1304                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1305                         if (pending_accb->hccb.target == accb->hccb.target) {
1306                                 pending_accb->hccb.ahastat = AHASTAT_HA_BDR;
1307                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1308                                 ahadone(aha, pending_accb, AMBI_ERROR);
1309                         } else {
1310                                 ccb_h->timeout_ch =
1311                                     timeout(ahatimeout, (caddr_t)pending_accb,
1312                                             (ccb_h->timeout * hz) / 1000);
1313                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1314                         }
1315                 }
1316                 printf("%s: No longer in timeout\n", aha_name(aha));
1317                 return;
1318         }
1319
1320         untimeout(ahatimeout, accb, ccb->ccb_h.timeout_ch);
1321
1322         switch (comp_code) {
1323         case AMBI_FREE:
1324                 printf("%s: ahadone - CCB completed with free status!\n",
1325                        aha_name(aha));
1326                 break;
1327         case AMBI_NOT_FOUND:
1328                 printf("%s: ahadone - CCB Abort failed to find CCB\n",
1329                        aha_name(aha));
1330                 break;
1331         case AMBI_ABORT:
1332         case AMBI_ERROR:
1333                 /* An error occured */
1334                 if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1335                         csio->resid = 0;
1336                 else
1337                         csio->resid = aha_a24tou(accb->hccb.data_len);
1338                 switch(accb->hccb.ahastat) {
1339                 case AHASTAT_DATARUN_ERROR:
1340                 {
1341                         if (csio->resid <= 0) {
1342                                 csio->ccb_h.status = CAM_DATA_RUN_ERR;
1343                                 break;
1344                         }
1345                         /* FALLTHROUGH */
1346                 }
1347                 case AHASTAT_NOERROR:
1348                         csio->scsi_status = accb->hccb.sdstat;
1349                         csio->ccb_h.status |= CAM_SCSI_STATUS_ERROR;
1350                         switch(csio->scsi_status) {
1351                         case SCSI_STATUS_CHECK_COND:
1352                         case SCSI_STATUS_CMD_TERMINATED:
1353                                 csio->ccb_h.status |= CAM_AUTOSNS_VALID;
1354                                 /*
1355                                  * The aha writes the sense data at different
1356                                  * offsets based on the scsi cmd len
1357                                  */
1358                                 bcopy((caddr_t) &accb->hccb.scsi_cdb +
1359                                         accb->hccb.cmd_len, 
1360                                         (caddr_t) &csio->sense_data,
1361                                         accb->hccb.sense_len);
1362                                 break;
1363                         default:
1364                                 break;
1365                         case SCSI_STATUS_OK:
1366                                 csio->ccb_h.status = CAM_REQ_CMP;
1367                                 break;
1368                         }
1369                         break;
1370                 case AHASTAT_SELTIMEOUT:
1371                         csio->ccb_h.status = CAM_SEL_TIMEOUT;
1372                         break;
1373                 case AHASTAT_UNEXPECTED_BUSFREE:
1374                         csio->ccb_h.status = CAM_UNEXP_BUSFREE;
1375                         break;
1376                 case AHASTAT_INVALID_PHASE:
1377                         csio->ccb_h.status = CAM_SEQUENCE_FAIL;
1378                         break;
1379                 case AHASTAT_INVALID_ACTION_CODE:
1380                         panic("%s: Inavlid Action code", aha_name(aha));
1381                         break;
1382                 case AHASTAT_INVALID_OPCODE:
1383                         if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1384                                 panic("%s: Invalid CCB Opcode %x hccb = %p",
1385                                         aha_name(aha), accb->hccb.opcode,
1386                                         &accb->hccb);
1387                         printf("%s: AHA-1540A detected, compensating\n",
1388                                 aha_name(aha));
1389                         aha->ccb_sg_opcode = INITIATOR_SG_CCB;
1390                         aha->ccb_ccb_opcode = INITIATOR_CCB;
1391                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1392                         csio->ccb_h.status = CAM_REQUEUE_REQ;
1393                         break;
1394                 case AHASTAT_LINKED_CCB_LUN_MISMATCH:
1395                         /* We don't even support linked commands... */
1396                         panic("%s: Linked CCB Lun Mismatch", aha_name(aha));
1397                         break;
1398                 case AHASTAT_INVALID_CCB_OR_SG_PARAM:
1399                         panic("%s: Invalid CCB or SG list", aha_name(aha));
1400                         break;
1401                 case AHASTAT_HA_SCSI_BUS_RESET:
1402                         if ((csio->ccb_h.status & CAM_STATUS_MASK)
1403                             != CAM_CMD_TIMEOUT)
1404                                 csio->ccb_h.status = CAM_SCSI_BUS_RESET;
1405                         break;
1406                 case AHASTAT_HA_BDR:
1407                         if ((accb->flags & ACCB_DEVICE_RESET) == 0)
1408                                 csio->ccb_h.status = CAM_BDR_SENT;
1409                         else
1410                                 csio->ccb_h.status = CAM_CMD_TIMEOUT;
1411                         break;
1412                 }
1413                 if (csio->ccb_h.status != CAM_REQ_CMP) {
1414                         xpt_freeze_devq(csio->ccb_h.path, /*count*/1);
1415                         csio->ccb_h.status |= CAM_DEV_QFRZN;
1416                 }
1417                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1418                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1419                 ahafreeccb(aha, accb);
1420                 xpt_done(ccb);
1421                 break;
1422         case AMBI_OK:
1423                 /* All completed without incident */
1424                 /* XXX DO WE NEED TO COPY SENSE BYTES HERE???? XXX */
1425                 /* I don't think so since it works???? */
1426                 ccb->ccb_h.status |= CAM_REQ_CMP;
1427                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1428                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1429                 ahafreeccb(aha, accb);
1430                 xpt_done(ccb);
1431                 break;
1432         }
1433 }
1434
1435 static int
1436 ahareset(struct aha_softc* aha, int hard_reset)
1437 {
1438         struct   ccb_hdr *ccb_h;
1439         u_int    status;
1440         u_int    timeout;
1441         u_int8_t reset_type;
1442
1443         if (hard_reset != 0)
1444                 reset_type = HARD_RESET;
1445         else
1446                 reset_type = SOFT_RESET;
1447         aha_outb(aha, CONTROL_REG, reset_type);
1448
1449         /* Wait 5sec. for Diagnostic start */
1450         timeout = 5 * 10000;
1451         while (--timeout) {
1452                 status = aha_inb(aha, STATUS_REG);
1453                 if ((status & DIAG_ACTIVE) != 0)
1454                         break;
1455                 DELAY(100);
1456         }
1457         if (timeout == 0) {
1458                 PRVERB(("%s: ahareset - Diagnostic Active failed to "
1459                         "assert. status = 0x%x\n", aha_name(aha),
1460                         status));
1461                 return (ETIMEDOUT);
1462         }
1463
1464         /* Wait 10sec. for Diagnostic end */
1465         timeout = 10 * 10000;
1466         while (--timeout) {
1467                 status = aha_inb(aha, STATUS_REG);
1468                 if ((status & DIAG_ACTIVE) == 0)
1469                         break;
1470                 DELAY(100);
1471         }
1472         if (timeout == 0) {
1473                 panic("%s: ahareset - Diagnostic Active failed to drop. "
1474                        "status = 0x%x\n", aha_name(aha), status);
1475                 return (ETIMEDOUT);
1476         }
1477
1478         /* Wait for the host adapter to become ready or report a failure */
1479         timeout = 10000;
1480         while (--timeout) {
1481                 status = aha_inb(aha, STATUS_REG);
1482                 if ((status & (DIAG_FAIL|HA_READY|DATAIN_REG_READY)) != 0)
1483                         break;
1484                 DELAY(100);
1485         }
1486         if (timeout == 0) {
1487                 printf("%s: ahareset - Host adapter failed to come ready. "
1488                        "status = 0x%x\n", aha_name(aha), status);
1489                 return (ETIMEDOUT);
1490         }
1491
1492         /* If the diagnostics failed, tell the user */
1493         if ((status & DIAG_FAIL) != 0
1494          || (status & HA_READY) == 0) {
1495                 printf("%s: ahareset - Adapter failed diagnostics\n",
1496                        aha_name(aha));
1497
1498                 if ((status & DATAIN_REG_READY) != 0)
1499                         printf("%s: ahareset - Host Adapter Error "
1500                                "code = 0x%x\n", aha_name(aha),
1501                                aha_inb(aha, DATAIN_REG));
1502                 return (ENXIO);
1503         }
1504
1505         /* If we've allocated mailboxes, initialize them */
1506         if (aha->init_level > 4)
1507                 ahainitmboxes(aha);
1508
1509         /* If we've attached to the XPT, tell it about the event */
1510         if (aha->path != NULL)
1511                 xpt_async(AC_BUS_RESET, aha->path, NULL);
1512
1513         /*
1514          * Perform completion processing for all outstanding CCBs.
1515          */
1516         while ((ccb_h = LIST_FIRST(&aha->pending_ccbs)) != NULL) {
1517                 struct aha_ccb *pending_accb;
1518
1519                 pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1520                 pending_accb->hccb.ahastat = AHASTAT_HA_SCSI_BUS_RESET;
1521                 ahadone(aha, pending_accb, AMBI_ERROR);
1522         }
1523
1524         return (0);
1525 }
1526
1527 /*
1528  * Send a command to the adapter.
1529  */
1530 int
1531 aha_cmd(struct aha_softc *aha, aha_op_t opcode, u_int8_t *params, 
1532         u_int param_len, u_int8_t *reply_data, u_int reply_len, 
1533         u_int cmd_timeout)
1534 {
1535         u_int   timeout;
1536         u_int   status;
1537         u_int   saved_status;
1538         u_int   intstat;
1539         u_int   reply_buf_size;
1540         int     s;
1541         int     cmd_complete;
1542         int     error;
1543
1544         /* No data returned to start */
1545         reply_buf_size = reply_len;
1546         reply_len = 0;
1547         intstat = 0;
1548         cmd_complete = 0;
1549         saved_status = 0;
1550         error = 0;
1551
1552         /*
1553          * All commands except for the "start mailbox" and the "enable
1554          * outgoing mailbox read interrupt" commands cannot be issued
1555          * while there are pending transactions.  Freeze our SIMQ
1556          * and wait for all completions to occur if necessary.
1557          */
1558         timeout = 100000;
1559         s = splcam();
1560         while (LIST_FIRST(&aha->pending_ccbs) != NULL && --timeout) {
1561                 /* Fire the interrupt handler in case interrupts are blocked */
1562                 aha_intr(aha);
1563                 splx(s);
1564                 DELAY(100);
1565                 s = splcam();
1566         }
1567         splx(s);
1568
1569         if (timeout == 0) {
1570                 printf("%s: aha_cmd: Timeout waiting for adapter idle\n",
1571                        aha_name(aha));
1572                 return (ETIMEDOUT);
1573         }
1574         aha->command_cmp = 0;
1575         /*
1576          * Wait up to 10 sec. for the adapter to become
1577          * ready to accept commands.
1578          */
1579         timeout = 100000;
1580         while (--timeout) {
1581
1582                 status = aha_inb(aha, STATUS_REG);
1583                 if ((status & HA_READY) != 0
1584                  && (status & CMD_REG_BUSY) == 0)
1585                         break;
1586                 /*
1587                  * Throw away any pending data which may be
1588                  * left over from earlier commands that we
1589                  * timedout on.
1590                  */
1591                 if ((status & DATAIN_REG_READY) != 0)
1592                         (void)aha_inb(aha, DATAIN_REG);
1593                 DELAY(100);
1594         }
1595         if (timeout == 0) {
1596                 printf("%s: aha_cmd: Timeout waiting for adapter ready, "
1597                        "status = 0x%x\n", aha_name(aha), status);
1598                 return (ETIMEDOUT);
1599         }
1600
1601         /*
1602          * Send the opcode followed by any necessary parameter bytes.
1603          */
1604         aha_outb(aha, COMMAND_REG, opcode);
1605
1606         /*
1607          * Wait for up to 1sec to get the parameter list sent
1608          */
1609         timeout = 10000;
1610         while (param_len && --timeout) {
1611                 DELAY(100);
1612                 s = splcam();
1613                 status = aha_inb(aha, STATUS_REG);
1614                 intstat = aha_inb(aha, INTSTAT_REG);
1615                 splx(s);
1616
1617                 if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1618                  == (INTR_PENDING|CMD_COMPLETE)) {
1619                         saved_status = status;
1620                         cmd_complete = 1;
1621                         break;
1622                 }
1623
1624                 if (aha->command_cmp != 0) {
1625                         saved_status = aha->latched_status;
1626                         cmd_complete = 1;
1627                         break;
1628                 }
1629                 if ((status & DATAIN_REG_READY) != 0)
1630                         break;
1631                 if ((status & CMD_REG_BUSY) == 0) {
1632                         aha_outb(aha, COMMAND_REG, *params++);
1633                         param_len--;
1634                         timeout = 10000;
1635                 }
1636         }
1637         if (timeout == 0) {
1638                 printf("%s: aha_cmd: Timeout sending parameters, "
1639                        "status = 0x%x\n", aha_name(aha), status);
1640                 error = ETIMEDOUT;
1641         }
1642
1643         /*
1644          * For all other commands, we wait for any output data
1645          * and the final comand completion interrupt.
1646          */
1647         while (cmd_complete == 0 && --cmd_timeout) {
1648
1649                 s = splcam();
1650                 status = aha_inb(aha, STATUS_REG);
1651                 intstat = aha_inb(aha, INTSTAT_REG);
1652                 splx(s);
1653
1654                 if (aha->command_cmp != 0) {
1655                         cmd_complete = 1;
1656                         saved_status = aha->latched_status;
1657                 } else if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1658                         == (INTR_PENDING|CMD_COMPLETE)) {
1659                         /*
1660                          * Our poll (in case interrupts are blocked)
1661                          * saw the CMD_COMPLETE interrupt.
1662                          */
1663                         cmd_complete = 1;
1664                         saved_status = status;
1665                 }
1666                 if ((status & DATAIN_REG_READY) != 0) {
1667                         u_int8_t data;
1668
1669                         data = aha_inb(aha, DATAIN_REG);
1670                         if (reply_len < reply_buf_size) {
1671                                 *reply_data++ = data;
1672                         } else {
1673                                 printf("%s: aha_cmd - Discarded reply data "
1674                                        "byte for opcode 0x%x\n", aha_name(aha),
1675                                        opcode);
1676                         }
1677                         /*
1678                          * Reset timeout to ensure at least a second
1679                          * between response bytes.
1680                          */
1681                         cmd_timeout = MAX(cmd_timeout, 10000);
1682                         reply_len++;
1683                 }
1684                 DELAY(100);
1685         }
1686         if (cmd_timeout == 0) {
1687                 printf("%s: aha_cmd: Timeout waiting for reply data and "
1688                        "command complete.\n%s: status = 0x%x, intstat = 0x%x, "
1689                        "reply_len = %d\n", aha_name(aha), aha_name(aha), status,
1690                        intstat, reply_len);
1691                 return (ETIMEDOUT);
1692         }
1693
1694         /*
1695          * Clear any pending interrupts.  Block interrupts so our
1696          * interrupt handler is not re-entered.
1697          */
1698         s = splcam();
1699         aha_intr(aha);
1700         splx(s);
1701         
1702         if (error != 0)
1703                 return (error);
1704
1705         /*
1706          * If the command was rejected by the controller, tell the caller.
1707          */
1708         if ((saved_status & CMD_INVALID) != 0) {
1709                 PRVERB(("%s: Invalid Command 0x%x\n", aha_name(aha), opcode));
1710                 /*
1711                  * Some early adapters may not recover properly from
1712                  * an invalid command.  If it appears that the controller
1713                  * has wedged (i.e. status was not cleared by our interrupt
1714                  * reset above), perform a soft reset.
1715                  */
1716                 DELAY(1000);
1717                 status = aha_inb(aha, STATUS_REG);
1718                 if ((status & (CMD_INVALID|STATUS_REG_RSVD|DATAIN_REG_READY|
1719                               CMD_REG_BUSY|DIAG_FAIL|DIAG_ACTIVE)) != 0
1720                  || (status & (HA_READY|INIT_REQUIRED))
1721                   != (HA_READY|INIT_REQUIRED)) {
1722                         ahareset(aha, /*hard_reset*/FALSE);
1723                 }
1724                 return (EINVAL);
1725         }
1726
1727         if (param_len > 0) {
1728                 /* The controller did not accept the full argument list */
1729                 PRVERB(("%s: Controller did not accept full argument list "
1730                         "(%d > 0)\n",
1731                         aha_name(aha), param_len));
1732                 return (E2BIG);
1733         }
1734
1735         if (reply_len != reply_buf_size) {
1736                 /* Too much or too little data received */
1737                 PRVERB(("%s: Too much or too little data received (%d != %d)\n",
1738                         aha_name(aha), reply_len, reply_buf_size));
1739                 return (EMSGSIZE);
1740         }
1741
1742         /* We were successful */
1743         return (0);
1744 }
1745
1746 static int
1747 ahainitmboxes(struct aha_softc *aha) 
1748 {
1749         int error;
1750         init_24b_mbox_params_t init_mbox;
1751
1752         bzero(aha->in_boxes, sizeof(aha_mbox_in_t) * aha->num_boxes);
1753         bzero(aha->out_boxes, sizeof(aha_mbox_out_t) * aha->num_boxes);
1754         aha->cur_inbox = aha->in_boxes;
1755         aha->last_inbox = aha->in_boxes + aha->num_boxes - 1;
1756         aha->cur_outbox = aha->out_boxes;
1757         aha->last_outbox = aha->out_boxes + aha->num_boxes - 1;
1758
1759         /* Tell the adapter about them */
1760         init_mbox.num_mboxes = aha->num_boxes;
1761         ahautoa24(aha->mailbox_physbase, init_mbox.base_addr);
1762         error = aha_cmd(aha, AOP_INITIALIZE_MBOX, (u_int8_t *)&init_mbox,
1763                        /*parmlen*/sizeof(init_mbox), /*reply_buf*/NULL,
1764                        /*reply_len*/0, DEFAULT_CMD_TIMEOUT);
1765
1766         if (error != 0)
1767                 printf("ahainitmboxes: Initialization command failed\n");
1768         return (error);
1769 }
1770
1771 /*
1772  * Update the XPT's idea of the negotiated transfer
1773  * parameters for a particular target.
1774  */
1775 static void
1776 ahafetchtransinfo(struct aha_softc *aha, struct ccb_trans_settings* cts)
1777 {
1778         setup_data_t    setup_info;
1779         u_int           target;
1780         u_int           targ_offset;
1781         u_int           sync_period;
1782         int             error;
1783         u_int8_t        param;
1784         targ_syncinfo_t sync_info;
1785
1786         target = cts->ccb_h.target_id;
1787         targ_offset = (target & 0x7);
1788
1789         /*
1790          * Inquire Setup Information.  This command retreives
1791          * the sync info for older models.
1792          */
1793         param = sizeof(setup_info);
1794         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &param, /*paramlen*/1,
1795                        (u_int8_t*)&setup_info, sizeof(setup_info),
1796                        DEFAULT_CMD_TIMEOUT);
1797
1798         if (error != 0) {
1799                 printf("%s: ahafetchtransinfo - Inquire Setup Info Failed %d\n",
1800                        aha_name(aha), error);
1801                 return;
1802         }
1803
1804         sync_info = setup_info.syncinfo[targ_offset];
1805
1806         if (sync_info.sync == 0)
1807                 cts->sync_offset = 0;
1808         else
1809                 cts->sync_offset = sync_info.offset;
1810
1811         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1812
1813         if (aha->boardid >= BOARD_1542CF)
1814                 sync_period = 1000;
1815         else
1816                 sync_period = 2000;
1817         sync_period += 500 * sync_info.period;
1818
1819         /* Convert ns value to standard SCSI sync rate */
1820         if (cts->sync_offset != 0)
1821                 cts->sync_period = scsi_calc_syncparam(sync_period);
1822         else
1823                 cts->sync_period = 0;
1824         
1825         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1826                    | CCB_TRANS_SYNC_OFFSET_VALID
1827                    | CCB_TRANS_BUS_WIDTH_VALID;
1828         xpt_async(AC_TRANSFER_NEG, cts->ccb_h.path, cts);
1829 }
1830
1831 static void
1832 ahamapmboxes(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1833 {
1834         struct aha_softc* aha;
1835
1836         aha = (struct aha_softc*)arg;
1837         aha->mailbox_physbase = segs->ds_addr;
1838 }
1839
1840 static void
1841 ahamapccbs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1842 {
1843         struct aha_softc* aha;
1844
1845         aha = (struct aha_softc*)arg;
1846         aha->aha_ccb_physbase = segs->ds_addr;
1847 }
1848
1849 static void
1850 ahamapsgs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1851 {
1852
1853         struct aha_softc* aha;
1854
1855         aha = (struct aha_softc*)arg;
1856         SLIST_FIRST(&aha->sg_maps)->sg_physaddr = segs->ds_addr;
1857 }
1858
1859 static void
1860 ahapoll(struct cam_sim *sim)
1861 {
1862         aha_intr(cam_sim_softc(sim));
1863 }
1864
1865 static void
1866 ahatimeout(void *arg)
1867 {
1868         struct aha_ccb  *accb;
1869         union  ccb      *ccb;
1870         struct aha_softc *aha;
1871         int              s;
1872         u_int32_t       paddr;
1873
1874         accb = (struct aha_ccb *)arg;
1875         ccb = accb->ccb;
1876         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1877         xpt_print_path(ccb->ccb_h.path);
1878         printf("CCB %p - timed out\n", (void *)accb);
1879
1880         s = splcam();
1881
1882         if ((accb->flags & ACCB_ACTIVE) == 0) {
1883                 xpt_print_path(ccb->ccb_h.path);
1884                 printf("CCB %p - timed out CCB already completed\n",
1885                        (void *)accb);
1886                 splx(s);
1887                 return;
1888         }
1889
1890         /*
1891          * In order to simplify the recovery process, we ask the XPT
1892          * layer to halt the queue of new transactions and we traverse
1893          * the list of pending CCBs and remove their timeouts. This
1894          * means that the driver attempts to clear only one error
1895          * condition at a time.  In general, timeouts that occur
1896          * close together are related anyway, so there is no benefit
1897          * in attempting to handle errors in parrallel.  Timeouts will
1898          * be reinstated when the recovery process ends.
1899          */
1900         if ((accb->flags & ACCB_DEVICE_RESET) == 0) {
1901                 struct ccb_hdr *ccb_h;
1902
1903                 if ((accb->flags & ACCB_RELEASE_SIMQ) == 0) {
1904                         xpt_freeze_simq(aha->sim, /*count*/1);
1905                         accb->flags |= ACCB_RELEASE_SIMQ;
1906                 }
1907
1908                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1909                 while (ccb_h != NULL) {
1910                         struct aha_ccb *pending_accb;
1911
1912                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1913                         untimeout(ahatimeout, pending_accb, ccb_h->timeout_ch);
1914                         ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1915                 }
1916         }
1917
1918         if ((accb->flags & ACCB_DEVICE_RESET) != 0
1919          || aha->cur_outbox->action_code != AMBO_FREE) {
1920                 /*
1921                  * Try a full host adapter/SCSI bus reset.
1922                  * We do this only if we have already attempted
1923                  * to clear the condition with a BDR, or we cannot
1924                  * attempt a BDR for lack of mailbox resources.
1925                  */
1926                 ccb->ccb_h.status = CAM_CMD_TIMEOUT;
1927                 ahareset(aha, /*hardreset*/TRUE);
1928                 printf("%s: No longer in timeout\n", aha_name(aha));
1929         } else {
1930                 /*    
1931                  * Send a Bus Device Reset message:
1932                  * The target that is holding up the bus may not
1933                  * be the same as the one that triggered this timeout
1934                  * (different commands have different timeout lengths),
1935                  * but we have no way of determining this from our
1936                  * timeout handler.  Our strategy here is to queue a
1937                  * BDR message to the target of the timed out command.
1938                  * If this fails, we'll get another timeout 2 seconds
1939                  * later which will attempt a bus reset.
1940                  */
1941                 accb->flags |= ACCB_DEVICE_RESET;
1942                 ccb->ccb_h.timeout_ch = timeout(ahatimeout, (caddr_t)accb, 2 * hz);
1943                 aha->recovery_accb->hccb.opcode = INITIATOR_BUS_DEV_RESET;
1944
1945                 /* No Data Transfer */
1946                 aha->recovery_accb->hccb.datain = TRUE;
1947                 aha->recovery_accb->hccb.dataout = TRUE;
1948                 aha->recovery_accb->hccb.ahastat = 0;
1949                 aha->recovery_accb->hccb.sdstat = 0;
1950                 aha->recovery_accb->hccb.target = ccb->ccb_h.target_id;
1951
1952                 /* Tell the adapter about this command */
1953                 paddr = ahaccbvtop(aha, aha->recovery_accb);
1954                 ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1955                 aha->cur_outbox->action_code = AMBO_START;
1956                 aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1957                 ahanextoutbox(aha);
1958         }
1959
1960         splx(s);
1961 }
1962
1963 int
1964 aha_detach(struct aha_softc *aha)
1965 {
1966         xpt_async(AC_LOST_DEVICE, aha->path, NULL);
1967         xpt_free_path(aha->path);
1968         xpt_bus_deregister(cam_sim_path(aha->sim));
1969         cam_sim_free(aha->sim);
1970         return (0);
1971 }