timeout/untimeout ==> callout_*
[dragonfly.git] / sys / dev / disk / aha / aha.c
1 /*
2  * Generic register and struct definitions for the Adaptech 154x/164x
3  * SCSI host adapters. Product specific probe and attach routines can
4  * be found in:
5  *      aha 1540/1542B/1542C/1542CF/1542CP      aha_isa.c
6  *
7  * Copyright (c) 1998 M. Warner Losh.
8  * All Rights Reserved.
9  *
10  *
11  * Redistribution and use in source and binary forms, with or without
12  * modification, are permitted provided that the following conditions
13  * are met:
14  * 1. Redistributions of source code must retain the above copyright
15  *    notice, this list of conditions, and the following disclaimer,
16  *    without modification, immediately at the beginning of the file.
17  * 2. The name of the author may not be used to endorse or promote products
18  *    derived from this software without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
24  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  * Derived from bt.c written by:
33  *
34  * Copyright (c) 1998 Justin T. Gibbs.
35  * All rights reserved.
36  *
37  * Redistribution and use in source and binary forms, with or without
38  * modification, are permitted provided that the following conditions
39  * are met:
40  * 1. Redistributions of source code must retain the above copyright
41  *    notice, this list of conditions, and the following disclaimer,
42  *    without modification, immediately at the beginning of the file.
43  * 2. The name of the author may not be used to endorse or promote products
44  *    derived from this software without specific prior written permission.
45  *
46  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
47  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
48  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
49  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
50  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
51  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
52  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
53  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
54  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
55  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
56  * SUCH DAMAGE.
57  *
58  * $FreeBSD: src/sys/dev/aha/aha.c,v 1.34.2.1 2000/08/02 22:24:39 peter Exp $
59  * $DragonFly: src/sys/dev/disk/aha/aha.c,v 1.8 2004/09/17 03:39:38 joerg Exp $
60  */
61
62 #include <sys/param.h>
63 #include <sys/systm.h> 
64 #include <sys/malloc.h>
65 #include <sys/buf.h>
66 #include <sys/kernel.h>
67  
68 #include <machine/bus_pio.h>
69 #include <machine/bus.h>
70 #include <machine/clock.h>
71
72 #include <bus/cam/cam.h>
73 #include <bus/cam/cam_ccb.h>
74 #include <bus/cam/cam_sim.h>
75 #include <bus/cam/cam_xpt_sim.h>
76 #include <bus/cam/cam_debug.h>
77
78 #include <bus/cam/scsi/scsi_message.h>
79
80 #include <vm/vm.h>
81 #include <vm/pmap.h>
82
83 #include "ahareg.h"
84
85 struct aha_softc *aha_softcs[NAHATOT];
86
87 #define PRVERB(x) if (bootverbose) printf x
88
89 /* Macro to determine that a rev is potentially a new valid one
90  * so that the driver doesn't keep breaking on new revs as it
91  * did for the CF and CP.
92  */
93 #define PROBABLY_NEW_BOARD(REV) (REV > 0x43 && REV < 0x56)
94
95 /* MailBox Management functions */
96 static __inline void    ahanextinbox(struct aha_softc *aha);
97 static __inline void    ahanextoutbox(struct aha_softc *aha);
98
99 static __inline void
100 ahanextinbox(struct aha_softc *aha)
101 {
102         if (aha->cur_inbox == aha->last_inbox)
103                 aha->cur_inbox = aha->in_boxes;
104         else
105                 aha->cur_inbox++;
106 }
107
108 static __inline void
109 ahanextoutbox(struct aha_softc *aha)
110 {
111         if (aha->cur_outbox == aha->last_outbox)
112                 aha->cur_outbox = aha->out_boxes;
113         else
114                 aha->cur_outbox++;
115 }
116
117 #define ahautoa24(u,s3)                 \
118         (s3)[0] = ((u) >> 16) & 0xff;   \
119         (s3)[1] = ((u) >> 8) & 0xff;    \
120         (s3)[2] = (u) & 0xff;
121
122 #define aha_a24tou(s3) \
123         (((s3)[0] << 16) | ((s3)[1] << 8) | (s3)[2])
124
125 /* CCB Mangement functions */
126 static __inline u_int32_t               ahaccbvtop(struct aha_softc *aha,
127                                                   struct aha_ccb *accb);
128 static __inline struct aha_ccb*         ahaccbptov(struct aha_softc *aha,
129                                                   u_int32_t ccb_addr);
130
131 static __inline u_int32_t
132 ahaccbvtop(struct aha_softc *aha, struct aha_ccb *accb)
133 {
134         return (aha->aha_ccb_physbase
135               + (u_int32_t)((caddr_t)accb - (caddr_t)aha->aha_ccb_array));
136 }
137 static __inline struct aha_ccb *
138 ahaccbptov(struct aha_softc *aha, u_int32_t ccb_addr)
139 {
140         return (aha->aha_ccb_array +
141               + ((struct aha_ccb*)ccb_addr-(struct aha_ccb*)aha->aha_ccb_physbase));
142 }
143
144 static struct aha_ccb*  ahagetccb(struct aha_softc *aha);
145 static __inline void    ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb);
146 static void             ahaallocccbs(struct aha_softc *aha);
147 static bus_dmamap_callback_t ahaexecuteccb;
148 static void             ahadone(struct aha_softc *aha, struct aha_ccb *accb,
149                                aha_mbi_comp_code_t comp_code);
150
151 /* Host adapter command functions */
152 static int      ahareset(struct aha_softc* aha, int hard_reset);
153
154 /* Initialization functions */
155 static int                      ahainitmboxes(struct aha_softc *aha);
156 static bus_dmamap_callback_t    ahamapmboxes;
157 static bus_dmamap_callback_t    ahamapccbs;
158 static bus_dmamap_callback_t    ahamapsgs;
159
160 /* Transfer Negotiation Functions */
161 static void ahafetchtransinfo(struct aha_softc *aha,
162                              struct ccb_trans_settings *cts);
163
164 /* CAM SIM entry points */
165 #define ccb_accb_ptr spriv_ptr0
166 #define ccb_aha_ptr spriv_ptr1
167 static void     ahaaction(struct cam_sim *sim, union ccb *ccb);
168 static void     ahapoll(struct cam_sim *sim);
169
170 /* Our timeout handler */
171 static timeout_t ahatimeout;
172
173 u_long aha_unit = 0;
174
175 /*
176  * Do our own re-probe protection until a configuration
177  * manager can do it for us.  This ensures that we don't
178  * reprobe a card already found by the EISA or PCI probes.
179  */
180 static struct aha_isa_port aha_isa_ports[] =
181 {
182         { 0x130, 4 },
183         { 0x134, 5 },
184         { 0x230, 2 },
185         { 0x234, 3 },
186         { 0x330, 0 },
187         { 0x334, 1 }
188 };
189
190 /*
191  * I/O ports listed in the order enumerated by the
192  * card for certain op codes.
193  */
194 static u_int16_t aha_board_ports[] =
195 {
196         0x330,
197         0x334,
198         0x230,
199         0x234,
200         0x130,
201         0x134
202 };
203
204 /* Exported functions */
205 struct aha_softc *
206 aha_alloc(int unit, bus_space_tag_t tag, bus_space_handle_t bsh)
207 {
208         struct  aha_softc *aha;  
209
210         if (unit != AHA_TEMP_UNIT) {
211                 if (unit >= NAHATOT) {
212                         printf("aha: unit number (%d) too high\n", unit);
213                         return NULL;
214                 }
215
216                 /*
217                  * Allocate a storage area for us
218                  */
219                 if (aha_softcs[unit]) {    
220                         printf("aha%d: memory already allocated\n", unit);
221                         return NULL;    
222                 }
223         }
224
225         aha = malloc(sizeof(struct aha_softc), M_DEVBUF, M_INTWAIT | M_ZERO);
226         SLIST_INIT(&aha->free_aha_ccbs);
227         LIST_INIT(&aha->pending_ccbs);
228         SLIST_INIT(&aha->sg_maps);
229         aha->unit = unit;
230         aha->tag = tag;
231         aha->bsh = bsh;
232         aha->ccb_sg_opcode = INITIATOR_SG_CCB_WRESID;
233         aha->ccb_ccb_opcode = INITIATOR_CCB_WRESID;
234
235         if (aha->unit != AHA_TEMP_UNIT) {
236                 aha_softcs[unit] = aha;
237         }
238         return (aha);
239 }
240
241 void
242 aha_free(struct aha_softc *aha)
243 {
244         switch (aha->init_level) {
245         default:
246         case 8:
247         {
248                 struct sg_map_node *sg_map;
249
250                 while ((sg_map = SLIST_FIRST(&aha->sg_maps))!= NULL) {
251                         SLIST_REMOVE_HEAD(&aha->sg_maps, links);
252                         bus_dmamap_unload(aha->sg_dmat,
253                                           sg_map->sg_dmamap);
254                         bus_dmamem_free(aha->sg_dmat, sg_map->sg_vaddr,
255                                         sg_map->sg_dmamap);
256                         free(sg_map, M_DEVBUF);
257                 }
258                 bus_dma_tag_destroy(aha->sg_dmat);
259         }
260                 /* fall through */
261         case 7:
262                 bus_dmamap_unload(aha->ccb_dmat, aha->ccb_dmamap);
263                 /* fall through */
264         case 6:
265                 bus_dmamap_destroy(aha->ccb_dmat, aha->ccb_dmamap);
266                 bus_dmamem_free(aha->ccb_dmat, aha->aha_ccb_array,
267                                 aha->ccb_dmamap);
268                 /* fall through */
269         case 5:
270                 bus_dma_tag_destroy(aha->ccb_dmat);
271                 /* fall through */
272         case 4:
273                 bus_dmamap_unload(aha->mailbox_dmat, aha->mailbox_dmamap);
274                 /* fall through */
275         case 3:
276                 bus_dmamem_free(aha->mailbox_dmat, aha->in_boxes,
277                                 aha->mailbox_dmamap);
278                 bus_dmamap_destroy(aha->mailbox_dmat, aha->mailbox_dmamap);
279                 /* fall through */
280         case 2:
281                 bus_dma_tag_destroy(aha->buffer_dmat);
282                 /* fall through */
283         case 1:
284                 bus_dma_tag_destroy(aha->mailbox_dmat);
285                 /* fall through */
286         case 0:
287                 break;
288         }
289         if (aha->unit != AHA_TEMP_UNIT) {
290                 aha_softcs[aha->unit] = NULL;
291         }
292         free(aha, M_DEVBUF);
293 }
294
295 /*
296  * Probe the adapter and verify that the card is an Adaptec.
297  */
298 int
299 aha_probe(struct aha_softc* aha)
300 {
301         u_int    status;
302         u_int    intstat;
303         int      error;
304         board_id_data_t board_id;
305
306         /*
307          * See if the three I/O ports look reasonable.
308          * Touch the minimal number of registers in the
309          * failure case.
310          */
311         status = aha_inb(aha, STATUS_REG);
312         if ((status == 0)
313          || (status & (DIAG_ACTIVE|CMD_REG_BUSY|
314                        STATUS_REG_RSVD)) != 0) {
315                 PRVERB(("%s: status reg test failed %x\n", aha_name(aha),
316                         status));
317                 return (ENXIO);
318         }
319
320         intstat = aha_inb(aha, INTSTAT_REG);
321         if ((intstat & INTSTAT_REG_RSVD) != 0) {
322                 PRVERB(("%s: Failed Intstat Reg Test\n", aha_name(aha)));
323                 return (ENXIO);
324         }
325
326         /*
327          * Looking good so far.  Final test is to reset the
328          * adapter and fetch the board ID and ensure we aren't
329          * looking at a BusLogic.
330          */
331         if ((error = ahareset(aha, /*hard_reset*/TRUE)) != 0) {
332                 PRVERB(("%s: Failed Reset\n", aha_name(aha)));
333                 return (ENXIO);
334         }
335
336         /*
337          * Get the board ID.  We use this to see if we're dealing with
338          * a buslogic card or a aha card (or clone).
339          */
340         error = aha_cmd(aha, AOP_INQUIRE_BOARD_ID, NULL, /*parmlen*/0,
341                        (u_int8_t*)&board_id, sizeof(board_id),
342                        DEFAULT_CMD_TIMEOUT);
343         if (error != 0) {
344                 PRVERB(("%s: INQUIRE failed %x\n", aha_name(aha), error));
345                 return (ENXIO);
346         }
347         aha->fw_major = board_id.firmware_rev_major;
348         aha->fw_minor = board_id.firmware_rev_minor;
349         aha->boardid = board_id.board_type;
350
351         /*
352          * The Buslogic cards have an id of either 0x41 or 0x42.  So
353          * if those come up in the probe, we test the geometry register
354          * of the board.  Adaptec boards that are this old will not have
355          * this register, and return 0xff, while buslogic cards will return
356          * something different.
357          *
358          * It appears that for reasons unknow, for the for the
359          * aha-1542B cards, we need to wait a little bit before trying
360          * to read the geometry register.  I picked 10ms since we have
361          * reports that a for loop to 1000 did the trick, and this
362          * errs on the side of conservatism.  Besides, no one will
363          * notice a 10mS delay here, even the 1542B card users :-)
364          *
365          * Some compatible cards return 0 here.  Some cards also
366          * seem to return 0x7f.
367          *
368          * XXX I'm not sure how this will impact other cloned cards 
369          *
370          * This really should be replaced with the esetup command, since
371          * that appears to be more reliable.  This becomes more and more
372          * true over time as we discover more cards that don't read the
373          * geometry register consistantly.
374          */
375         if (aha->boardid <= 0x42) {
376                 /* Wait 10ms before reading */
377                 DELAY(10000);
378                 status = aha_inb(aha, GEOMETRY_REG);
379                 if (status != 0xff && status != 0x00 && status != 0x7f) {
380                         PRVERB(("%s: Geometry Register test failed 0x%x\n",
381                                 aha_name(aha), status));
382                         return (ENXIO);
383                 }
384         }
385         
386         return (0);
387 }
388
389 /*
390  * Pull the boards setup information and record it in our softc.
391  */
392 int
393 aha_fetch_adapter_info(struct aha_softc *aha)
394 {
395         setup_data_t    setup_info;
396         config_data_t config_data;
397         u_int8_t length_param;
398         int      error;
399         struct  aha_extbios extbios;
400         
401         switch (aha->boardid) {
402         case BOARD_1540_16HEAD_BIOS:
403                 snprintf(aha->model, sizeof(aha->model), "1540 16 head BIOS");
404                 break;
405         case BOARD_1540_64HEAD_BIOS:
406                 snprintf(aha->model, sizeof(aha->model), "1540 64 head BIOS");
407                 break;
408         case BOARD_1542:
409                 snprintf(aha->model, sizeof(aha->model), "1540/1542 64 head BIOS");
410                 break;
411         case BOARD_1640:
412                 snprintf(aha->model, sizeof(aha->model), "1640");
413                 break;
414         case BOARD_1740:
415                 snprintf(aha->model, sizeof(aha->model), "1740A/1742A/1744");
416                 break;
417         case BOARD_1542C:
418                 snprintf(aha->model, sizeof(aha->model), "1542C");
419                 break;
420         case BOARD_1542CF:
421                 snprintf(aha->model, sizeof(aha->model), "1542CF");
422                 break;
423         case BOARD_1542CP:
424                 snprintf(aha->model, sizeof(aha->model), "1542CP");
425                 break;
426         default:
427                 snprintf(aha->model, sizeof(aha->model), "Unknown");
428                 break;
429         }
430         /*
431          * If we are a new type of 1542 board (anything newer than a 1542C)
432          * then disable the extended bios so that the
433          * mailbox interface is unlocked.
434          * This is also true for the 1542B Version 3.20. First Adaptec
435          * board that supports >1Gb drives.
436          * No need to check the extended bios flags as some of the
437          * extensions that cause us problems are not flagged in that byte.
438          */
439         if (PROBABLY_NEW_BOARD(aha->boardid) ||
440                 (aha->boardid == 0x41
441                 && aha->fw_major == 0x31 && 
442                 aha->fw_minor >= 0x34)) {
443                 error = aha_cmd(aha, AOP_RETURN_EXT_BIOS_INFO, NULL,
444                         /*paramlen*/0, (u_char *)&extbios, sizeof(extbios),
445                         DEFAULT_CMD_TIMEOUT);
446                 error = aha_cmd(aha, AOP_MBOX_IF_ENABLE, (u_int8_t *)&extbios,
447                         /*paramlen*/2, NULL, 0, DEFAULT_CMD_TIMEOUT);
448         }
449         if (aha->boardid < 0x41)
450                 printf("%s: Warning: aha-1542A won't likely work.\n",
451                         aha_name(aha));
452
453         aha->max_sg = 17;               /* Need >= 17 to do 64k I/O */
454         aha->diff_bus = 0;
455         aha->extended_lun = 0;
456         aha->extended_trans = 0;
457         aha->max_ccbs = 16;
458         /* Determine Sync/Wide/Disc settings */
459         length_param = sizeof(setup_info);
460         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &length_param,
461                        /*paramlen*/1, (u_int8_t*)&setup_info,
462                        sizeof(setup_info), DEFAULT_CMD_TIMEOUT);
463         if (error != 0) {
464                 printf("%s: aha_fetch_adapter_info - Failed "
465                        "Get Setup Info\n", aha_name(aha));
466                 return (error);
467         }
468         if (setup_info.initiate_sync != 0) {
469                 aha->sync_permitted = ALL_TARGETS;
470         }
471         aha->disc_permitted = ALL_TARGETS;
472
473         /* We need as many mailboxes as we can have ccbs */
474         aha->num_boxes = aha->max_ccbs;
475
476         /* Determine our SCSI ID */
477         
478         error = aha_cmd(aha, AOP_INQUIRE_CONFIG, NULL, /*parmlen*/0,
479                        (u_int8_t*)&config_data, sizeof(config_data),
480                        DEFAULT_CMD_TIMEOUT);
481         if (error != 0) {
482                 printf("%s: aha_fetch_adapter_info - Failed Get Config\n",
483                        aha_name(aha));
484                 return (error);
485         }
486         aha->scsi_id = config_data.scsi_id;
487         return (0);
488 }
489
490 /*
491  * Start the board, ready for normal operation
492  */
493 int
494 aha_init(struct aha_softc* aha)
495 {
496         /* Announce the Adapter */
497         printf("%s: AHA-%s FW Rev. %c.%c (ID=%x) ", aha_name(aha),
498                aha->model, aha->fw_major, aha->fw_minor, aha->boardid);
499
500         if (aha->diff_bus != 0)
501                 printf("Diff ");
502
503         printf("SCSI Host Adapter, SCSI ID %d, %d CCBs\n", aha->scsi_id,
504                aha->max_ccbs);
505
506         /*
507          * Create our DMA tags.  These tags define the kinds of device
508          * accessible memory allocations and memory mappings we will 
509          * need to perform during normal operation.
510          *
511          * Unless we need to further restrict the allocation, we rely
512          * on the restrictions of the parent dmat, hence the common
513          * use of MAXADDR and MAXSIZE.
514          */
515
516         /* DMA tag for mapping buffers into device visible space. */
517         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
518                                /*lowaddr*/BUS_SPACE_MAXADDR,
519                                /*highaddr*/BUS_SPACE_MAXADDR,
520                                /*filter*/NULL, /*filterarg*/NULL,
521                                /*maxsize*/MAXBSIZE, /*nsegments*/AHA_NSEG,
522                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
523                                /*flags*/BUS_DMA_ALLOCNOW,
524                                &aha->buffer_dmat) != 0) {
525                 goto error_exit;
526         }
527
528         aha->init_level++;
529         /* DMA tag for our mailboxes */
530         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
531                                /*lowaddr*/BUS_SPACE_MAXADDR,
532                                /*highaddr*/BUS_SPACE_MAXADDR,
533                                /*filter*/NULL, /*filterarg*/NULL,
534                                aha->num_boxes * (sizeof(aha_mbox_in_t)
535                                                + sizeof(aha_mbox_out_t)),
536                                /*nsegments*/1,
537                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
538                                /*flags*/0, &aha->mailbox_dmat) != 0) {
539                 goto error_exit;
540         }
541
542         aha->init_level++;
543
544         /* Allocation for our mailboxes */
545         if (bus_dmamem_alloc(aha->mailbox_dmat, (void **)&aha->out_boxes,
546                              BUS_DMA_NOWAIT, &aha->mailbox_dmamap) != 0) {
547                 goto error_exit;
548         }
549
550         aha->init_level++;
551
552         /* And permanently map them */
553         bus_dmamap_load(aha->mailbox_dmat, aha->mailbox_dmamap,
554                         aha->out_boxes,
555                         aha->num_boxes * (sizeof(aha_mbox_in_t)
556                                        + sizeof(aha_mbox_out_t)),
557                         ahamapmboxes, aha, /*flags*/0);
558
559         aha->init_level++;
560
561         aha->in_boxes = (aha_mbox_in_t *)&aha->out_boxes[aha->num_boxes];
562
563         ahainitmboxes(aha);
564
565         /* DMA tag for our ccb structures */
566         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
567                                /*lowaddr*/BUS_SPACE_MAXADDR,
568                                /*highaddr*/BUS_SPACE_MAXADDR,
569                                /*filter*/NULL, /*filterarg*/NULL,
570                                aha->max_ccbs * sizeof(struct aha_ccb),
571                                /*nsegments*/1,
572                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
573                                /*flags*/0, &aha->ccb_dmat) != 0) {
574                 goto error_exit;
575         }
576
577         aha->init_level++;
578
579         /* Allocation for our ccbs */
580         if (bus_dmamem_alloc(aha->ccb_dmat, (void **)&aha->aha_ccb_array,
581                              BUS_DMA_NOWAIT, &aha->ccb_dmamap) != 0) {
582                 goto error_exit;
583         }
584
585         aha->init_level++;
586
587         /* And permanently map them */
588         bus_dmamap_load(aha->ccb_dmat, aha->ccb_dmamap,
589                         aha->aha_ccb_array,
590                         aha->max_ccbs * sizeof(struct aha_ccb),
591                         ahamapccbs, aha, /*flags*/0);
592
593         aha->init_level++;
594
595         /* DMA tag for our S/G structures.  We allocate in page sized chunks */
596         if (bus_dma_tag_create(aha->parent_dmat, /*alignment*/1, /*boundary*/0,
597                                /*lowaddr*/BUS_SPACE_MAXADDR,
598                                /*highaddr*/BUS_SPACE_MAXADDR,
599                                /*filter*/NULL, /*filterarg*/NULL,
600                                PAGE_SIZE, /*nsegments*/1,
601                                /*maxsegsz*/BUS_SPACE_MAXSIZE_24BIT,
602                                /*flags*/0, &aha->sg_dmat) != 0) {
603                 goto error_exit;
604         }
605
606         aha->init_level++;
607
608         /* Perform initial CCB allocation */
609         bzero(aha->aha_ccb_array, aha->max_ccbs * sizeof(struct aha_ccb));
610         ahaallocccbs(aha);
611
612         if (aha->num_ccbs == 0) {
613                 printf("%s: aha_init - Unable to allocate initial ccbs\n",
614                        aha_name(aha));
615                 goto error_exit;
616         }
617
618         /*
619          * Note that we are going and return (to probe)
620          */
621         return 0;
622
623 error_exit:
624
625         return (ENXIO);
626 }
627
628 int
629 aha_attach(struct aha_softc *aha)
630 {
631         int tagged_dev_openings;
632         struct cam_devq *devq;
633
634         /*
635          * We don't do tagged queueing, since the aha cards don't
636          * support it.
637          */
638         tagged_dev_openings = 0;
639
640         /*
641          * Create the device queue for our SIM.
642          */
643         devq = cam_simq_alloc(aha->max_ccbs - 1);
644         if (devq == NULL)
645                 return (ENOMEM);
646
647         /*
648          * Construct our SIM entry
649          */
650         aha->sim = cam_sim_alloc(ahaaction, ahapoll, "aha", aha, aha->unit,
651                                 2, tagged_dev_openings, devq);
652         cam_simq_release(devq);
653         if (aha->sim == NULL) {
654                 return (ENOMEM);
655         }
656         
657         if (xpt_bus_register(aha->sim, 0) != CAM_SUCCESS) {
658                 cam_sim_free(aha->sim);
659                 return (ENXIO);
660         }
661         
662         if (xpt_create_path(&aha->path, /*periph*/NULL,
663                             cam_sim_path(aha->sim), CAM_TARGET_WILDCARD,
664                             CAM_LUN_WILDCARD) != CAM_REQ_CMP) {
665                 xpt_bus_deregister(cam_sim_path(aha->sim));
666                 cam_sim_free(aha->sim);
667                 return (ENXIO);
668         }
669                 
670         return (0);
671 }
672
673 char *
674 aha_name(struct aha_softc *aha)
675 {
676         static char name[10];
677
678         snprintf(name, sizeof(name), "aha%d", aha->unit);
679         return (name);
680 }
681
682 void
683 aha_find_probe_range(int ioport, int *port_index, int *max_port_index)
684 {
685         if (ioport > 0) {
686                 int i;
687
688                 for (i = 0;i < AHA_NUM_ISAPORTS; i++)
689                         if (ioport <= aha_isa_ports[i].addr)
690                                 break;
691                 if ((i >= AHA_NUM_ISAPORTS)
692                  || (ioport != aha_isa_ports[i].addr)) {
693                         printf("\n"
694 "aha_isa_probe: Invalid baseport of 0x%x specified.\n"
695 "aha_isa_probe: Nearest valid baseport is 0x%x.\n"
696 "aha_isa_probe: Failing probe.\n",
697                                ioport,
698                                (i < AHA_NUM_ISAPORTS)
699                                     ? aha_isa_ports[i].addr
700                                     : aha_isa_ports[AHA_NUM_ISAPORTS - 1].addr);
701                         *port_index = *max_port_index = -1;
702                         return;
703                 }
704                 *port_index = *max_port_index = aha_isa_ports[i].bio;
705         } else {
706                 *port_index = 0;
707                 *max_port_index = AHA_NUM_ISAPORTS - 1;
708         }
709 }
710
711 int
712 aha_iop_from_bio(isa_compat_io_t bio_index)
713 {
714         if (bio_index >= 0 && bio_index < AHA_NUM_ISAPORTS)
715                 return (aha_board_ports[bio_index]);
716         return (-1);
717 }
718
719 static void
720 ahaallocccbs(struct aha_softc *aha)
721 {
722         struct aha_ccb *next_ccb;
723         struct sg_map_node *sg_map;
724         bus_addr_t physaddr;
725         aha_sg_t *segs;
726         int newcount;
727         int i;
728
729         next_ccb = &aha->aha_ccb_array[aha->num_ccbs];
730
731         sg_map = malloc(sizeof(*sg_map), M_DEVBUF, M_INTWAIT);
732
733         /* Allocate S/G space for the next batch of CCBS */
734         if (bus_dmamem_alloc(aha->sg_dmat, (void **)&sg_map->sg_vaddr,
735                              BUS_DMA_NOWAIT, &sg_map->sg_dmamap) != 0) {
736                 free(sg_map, M_DEVBUF);
737                 return;
738         }
739
740         SLIST_INSERT_HEAD(&aha->sg_maps, sg_map, links);
741
742         bus_dmamap_load(aha->sg_dmat, sg_map->sg_dmamap, sg_map->sg_vaddr,
743                         PAGE_SIZE, ahamapsgs, aha, /*flags*/0);
744         
745         segs = sg_map->sg_vaddr;
746         physaddr = sg_map->sg_physaddr;
747
748         newcount = (PAGE_SIZE / (AHA_NSEG * sizeof(aha_sg_t)));
749         for (i = 0; aha->num_ccbs < aha->max_ccbs && i < newcount; i++) {
750                 int error;
751
752                 next_ccb->sg_list = segs;
753                 next_ccb->sg_list_phys = physaddr;
754                 next_ccb->flags = ACCB_FREE;
755                 error = bus_dmamap_create(aha->buffer_dmat, /*flags*/0,
756                                           &next_ccb->dmamap);
757                 if (error != 0)
758                         break;
759                 SLIST_INSERT_HEAD(&aha->free_aha_ccbs, next_ccb, links);
760                 segs += AHA_NSEG;
761                 physaddr += (AHA_NSEG * sizeof(aha_sg_t));
762                 next_ccb++;
763                 aha->num_ccbs++;
764         }
765
766         /* Reserve a CCB for error recovery */
767         if (aha->recovery_accb == NULL) {
768                 aha->recovery_accb = SLIST_FIRST(&aha->free_aha_ccbs);
769                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
770         }
771 }
772
773 static __inline void
774 ahafreeccb(struct aha_softc *aha, struct aha_ccb *accb)
775 {
776         int s;
777
778         s = splcam();
779         if ((accb->flags & ACCB_ACTIVE) != 0)
780                 LIST_REMOVE(&accb->ccb->ccb_h, sim_links.le);
781         if (aha->resource_shortage != 0
782          && (accb->ccb->ccb_h.status & CAM_RELEASE_SIMQ) == 0) {
783                 accb->ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
784                 aha->resource_shortage = FALSE;
785         }
786         accb->flags = ACCB_FREE;
787         SLIST_INSERT_HEAD(&aha->free_aha_ccbs, accb, links);
788         aha->active_ccbs--;
789         splx(s);
790 }
791
792 static struct aha_ccb*
793 ahagetccb(struct aha_softc *aha)
794 {
795         struct  aha_ccb* accb;
796         int     s;
797
798         s = splcam();
799         if ((accb = SLIST_FIRST(&aha->free_aha_ccbs)) != NULL) {
800                 SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
801                 aha->active_ccbs++;
802         } else if (aha->num_ccbs < aha->max_ccbs) {
803                 ahaallocccbs(aha);
804                 accb = SLIST_FIRST(&aha->free_aha_ccbs);
805                 if (accb == NULL)
806                         printf("%s: Can't malloc ACCB\n", aha_name(aha));
807                 else {
808                         SLIST_REMOVE_HEAD(&aha->free_aha_ccbs, links);
809                         aha->active_ccbs++;
810                 }
811         }
812         splx(s);
813
814         return (accb);
815 }
816
817 static void
818 ahaaction(struct cam_sim *sim, union ccb *ccb)
819 {
820         struct  aha_softc *aha;
821
822         CAM_DEBUG(ccb->ccb_h.path, CAM_DEBUG_TRACE, ("ahaaction\n"));
823         
824         aha = (struct aha_softc *)cam_sim_softc(sim);
825         
826         switch (ccb->ccb_h.func_code) {
827         /* Common cases first */
828         case XPT_SCSI_IO:       /* Execute the requested I/O operation */
829         case XPT_RESET_DEV:     /* Bus Device Reset the specified SCSI device */
830         {
831                 struct  aha_ccb *accb;
832                 struct  aha_hccb *hccb;
833
834                 /*
835                  * get a accb to use.
836                  */
837                 if ((accb = ahagetccb(aha)) == NULL) {
838                         int s;
839
840                         s = splcam();
841                         aha->resource_shortage = TRUE;
842                         splx(s);
843                         xpt_freeze_simq(aha->sim, /*count*/1);
844                         ccb->ccb_h.status = CAM_REQUEUE_REQ;
845                         xpt_done(ccb);
846                         return;
847                 }
848                 
849                 hccb = &accb->hccb;
850
851                 /*
852                  * So we can find the ACCB when an abort is requested
853                  */
854                 accb->ccb = ccb;
855                 ccb->ccb_h.ccb_accb_ptr = accb;
856                 ccb->ccb_h.ccb_aha_ptr = aha;
857
858                 /*
859                  * Put all the arguments for the xfer in the accb
860                  */
861                 hccb->target = ccb->ccb_h.target_id;
862                 hccb->lun = ccb->ccb_h.target_lun;
863                 hccb->ahastat = 0;
864                 hccb->sdstat = 0;
865
866                 if (ccb->ccb_h.func_code == XPT_SCSI_IO) {
867                         struct ccb_scsiio *csio;
868                         struct ccb_hdr *ccbh;
869
870                         csio = &ccb->csio;
871                         ccbh = &csio->ccb_h;
872                         hccb->opcode = aha->ccb_ccb_opcode;
873                         hccb->datain = (ccb->ccb_h.flags & CAM_DIR_IN) != 0;
874                         hccb->dataout = (ccb->ccb_h.flags & CAM_DIR_OUT) != 0;
875                         hccb->cmd_len = csio->cdb_len;
876                         if (hccb->cmd_len > sizeof(hccb->scsi_cdb)) {
877                                 ccb->ccb_h.status = CAM_REQ_INVALID;
878                                 ahafreeccb(aha, accb);
879                                 xpt_done(ccb);
880                                 return;
881                         }
882                         hccb->sense_len = csio->sense_len;
883                         if ((ccbh->flags & CAM_CDB_POINTER) != 0) {
884                                 if ((ccbh->flags & CAM_CDB_PHYS) == 0) {
885                                         bcopy(csio->cdb_io.cdb_ptr,
886                                               hccb->scsi_cdb, hccb->cmd_len);
887                                 } else {
888                                         /* I guess I could map it in... */
889                                         ccbh->status = CAM_REQ_INVALID;
890                                         ahafreeccb(aha, accb);
891                                         xpt_done(ccb);
892                                         return;
893                                 }
894                         } else {
895                                 bcopy(csio->cdb_io.cdb_bytes,
896                                       hccb->scsi_cdb, hccb->cmd_len);
897                         }
898                         /*
899                          * If we have any data to send with this command,
900                          * map it into bus space.
901                          */
902                         /* Only use S/G if there is a transfer */
903                         if ((ccbh->flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
904                                 if ((ccbh->flags & CAM_SCATTER_VALID) == 0) {
905                                         /*
906                                          * We've been given a pointer
907                                          * to a single buffer.
908                                          */
909                                         if ((ccbh->flags & CAM_DATA_PHYS)==0) {
910                                                 int s;
911                                                 int error;
912
913                                                 s = splsoftvm();
914                                                 error = bus_dmamap_load(
915                                                     aha->buffer_dmat,
916                                                     accb->dmamap,
917                                                     csio->data_ptr,
918                                                     csio->dxfer_len,
919                                                     ahaexecuteccb,
920                                                     accb,
921                                                     /*flags*/0);
922                                                 if (error == EINPROGRESS) {
923                                                         /*
924                                                          * So as to maintain
925                                                          * ordering, freeze the
926                                                          * controller queue
927                                                          * until our mapping is
928                                                          * returned.
929                                                          */
930                                                         xpt_freeze_simq(aha->sim,
931                                                                         1);
932                                                         csio->ccb_h.status |=
933                                                             CAM_RELEASE_SIMQ;
934                                                 }
935                                                 splx(s);
936                                         } else {
937                                                 struct bus_dma_segment seg; 
938
939                                                 /* Pointer to physical buffer */
940                                                 seg.ds_addr =
941                                                     (bus_addr_t)csio->data_ptr;
942                                                 seg.ds_len = csio->dxfer_len;
943                                                 ahaexecuteccb(accb, &seg, 1, 0);
944                                         }
945                                 } else {
946                                         struct bus_dma_segment *segs;
947
948                                         if ((ccbh->flags & CAM_DATA_PHYS) != 0)
949                                                 panic("ahaaction - Physical "
950                                                       "segment pointers "
951                                                       "unsupported");
952
953                                         if ((ccbh->flags&CAM_SG_LIST_PHYS)==0)
954                                                 panic("ahaaction - Virtual "
955                                                       "segment addresses "
956                                                       "unsupported");
957
958                                         /* Just use the segments provided */
959                                         segs = (struct bus_dma_segment *)
960                                             csio->data_ptr;
961                                         ahaexecuteccb(accb, segs,
962                                                      csio->sglist_cnt, 0);
963                                 }
964                         } else {
965                                 ahaexecuteccb(accb, NULL, 0, 0);
966                         }
967                 } else {
968                         hccb->opcode = INITIATOR_BUS_DEV_RESET;
969                         /* No data transfer */
970                         hccb->datain = TRUE;
971                         hccb->dataout = TRUE;
972                         hccb->cmd_len = 0;
973                         hccb->sense_len = 0;
974                         ahaexecuteccb(accb, NULL, 0, 0);
975                 }
976                 break;
977         }
978         case XPT_EN_LUN:                /* Enable LUN as a target */
979         case XPT_TARGET_IO:             /* Execute target I/O request */
980         case XPT_ACCEPT_TARGET_IO:      /* Accept Host Target Mode CDB */
981         case XPT_CONT_TARGET_IO:        /* Continue Host Target I/O Connection*/
982         case XPT_ABORT:                 /* Abort the specified CCB */
983                 /* XXX Implement */
984                 ccb->ccb_h.status = CAM_REQ_INVALID;
985                 xpt_done(ccb);
986                 break;
987         case XPT_SET_TRAN_SETTINGS:
988         {
989                 /* XXX Implement */
990                 ccb->ccb_h.status = CAM_PROVIDE_FAIL;
991                 xpt_done(ccb);
992                 break;
993         }
994         case XPT_GET_TRAN_SETTINGS:
995         /* Get default/user set transfer settings for the target */
996         {
997                 struct  ccb_trans_settings *cts;
998                 u_int   target_mask;
999
1000                 cts = &ccb->cts;
1001                 target_mask = 0x01 << ccb->ccb_h.target_id;
1002                 if ((cts->flags & CCB_TRANS_USER_SETTINGS) != 0) {
1003                         cts->flags = 0;
1004                         if ((aha->disc_permitted & target_mask) != 0)
1005                                 cts->flags |= CCB_TRANS_DISC_ENB;
1006                         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1007                         if ((aha->sync_permitted & target_mask) != 0) {
1008                                 if (aha->boardid >= BOARD_1542CF)
1009                                         cts->sync_period = 25;
1010                                 else
1011                                         cts->sync_period = 50;
1012                         } else
1013                                 cts->sync_period = 0;
1014
1015                         if (cts->sync_period != 0)
1016                                 cts->sync_offset = 15;
1017
1018                         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1019                                    | CCB_TRANS_SYNC_OFFSET_VALID
1020                                    | CCB_TRANS_BUS_WIDTH_VALID
1021                                    | CCB_TRANS_DISC_VALID
1022                                    | CCB_TRANS_TQ_VALID;
1023                 } else {
1024                         ahafetchtransinfo(aha, cts);
1025                 }
1026
1027                 ccb->ccb_h.status = CAM_REQ_CMP;
1028                 xpt_done(ccb);
1029                 break;
1030         }
1031         case XPT_CALC_GEOMETRY:
1032         {
1033                 struct    ccb_calc_geometry *ccg;
1034                 u_int32_t size_mb;
1035                 u_int32_t secs_per_cylinder;
1036
1037                 ccg = &ccb->ccg;
1038                 size_mb = ccg->volume_size
1039                         / ((1024L * 1024L) / ccg->block_size);
1040                 
1041                 if (size_mb >= 1024 && (aha->extended_trans != 0)) {
1042                         if (size_mb >= 2048) {
1043                                 ccg->heads = 255;
1044                                 ccg->secs_per_track = 63;
1045                         } else {
1046                                 ccg->heads = 128;
1047                                 ccg->secs_per_track = 32;
1048                         }
1049                 } else {
1050                         ccg->heads = 64;
1051                         ccg->secs_per_track = 32;
1052                 }
1053                 secs_per_cylinder = ccg->heads * ccg->secs_per_track;
1054                 ccg->cylinders = ccg->volume_size / secs_per_cylinder;
1055                 ccb->ccb_h.status = CAM_REQ_CMP;
1056                 xpt_done(ccb);
1057                 break;
1058         }
1059         case XPT_RESET_BUS:             /* Reset the specified SCSI bus */
1060         {
1061                 ahareset(aha, /*hardreset*/TRUE);
1062                 ccb->ccb_h.status = CAM_REQ_CMP;
1063                 xpt_done(ccb);
1064                 break;
1065         }
1066         case XPT_TERM_IO:               /* Terminate the I/O process */
1067                 /* XXX Implement */
1068                 ccb->ccb_h.status = CAM_REQ_INVALID;
1069                 xpt_done(ccb);
1070                 break;
1071         case XPT_PATH_INQ:              /* Path routing inquiry */
1072         {
1073                 struct ccb_pathinq *cpi = &ccb->cpi;
1074                 
1075                 cpi->version_num = 1; /* XXX??? */
1076                 cpi->hba_inquiry = PI_SDTR_ABLE;
1077                 cpi->target_sprt = 0;
1078                 cpi->hba_misc = 0;
1079                 cpi->hba_eng_cnt = 0;
1080                 cpi->max_target = 7;
1081                 cpi->max_lun = 7;
1082                 cpi->initiator_id = aha->scsi_id;
1083                 cpi->bus_id = cam_sim_bus(sim);
1084                 cpi->base_transfer_speed = 3300;
1085                 strncpy(cpi->sim_vid, "FreeBSD", SIM_IDLEN);
1086                 strncpy(cpi->hba_vid, "Adaptec", HBA_IDLEN);
1087                 strncpy(cpi->dev_name, cam_sim_name(sim), DEV_IDLEN);
1088                 cpi->unit_number = cam_sim_unit(sim);
1089                 cpi->ccb_h.status = CAM_REQ_CMP;
1090                 xpt_done(ccb);
1091                 break;
1092         }
1093         default:
1094                 ccb->ccb_h.status = CAM_REQ_INVALID;
1095                 xpt_done(ccb);
1096                 break;
1097         }
1098 }
1099
1100 static void
1101 ahaexecuteccb(void *arg, bus_dma_segment_t *dm_segs, int nseg, int error)
1102 {
1103         struct   aha_ccb *accb;
1104         union    ccb *ccb;
1105         struct   aha_softc *aha;
1106         int      s;
1107         u_int32_t paddr;
1108
1109         accb = (struct aha_ccb *)arg;
1110         ccb = accb->ccb;
1111         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1112
1113         if (error != 0) {
1114                 if (error != EFBIG)
1115                         printf("%s: Unexepected error 0x%x returned from "
1116                                "bus_dmamap_load\n", aha_name(aha), error);
1117                 if (ccb->ccb_h.status == CAM_REQ_INPROG) {
1118                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1119                         ccb->ccb_h.status = CAM_REQ_TOO_BIG|CAM_DEV_QFRZN;
1120                 }
1121                 ahafreeccb(aha, accb);
1122                 xpt_done(ccb);
1123                 return;
1124         }
1125                 
1126         if (nseg != 0) {
1127                 aha_sg_t *sg;
1128                 bus_dma_segment_t *end_seg;
1129                 bus_dmasync_op_t op;
1130
1131                 end_seg = dm_segs + nseg;
1132
1133                 /* Copy the segments into our SG list */
1134                 sg = accb->sg_list;
1135                 while (dm_segs < end_seg) {
1136                         ahautoa24(dm_segs->ds_len, sg->len);
1137                         ahautoa24(dm_segs->ds_addr, sg->addr);
1138                         sg++;
1139                         dm_segs++;
1140                 }
1141
1142                 if (nseg > 1) {
1143                         accb->hccb.opcode = aha->ccb_sg_opcode;
1144                         ahautoa24((sizeof(aha_sg_t) * nseg),
1145                                   accb->hccb.data_len);
1146                         ahautoa24(accb->sg_list_phys, accb->hccb.data_addr);
1147                 } else {
1148                         bcopy(accb->sg_list->len, accb->hccb.data_len, 3);
1149                         bcopy(accb->sg_list->addr, accb->hccb.data_addr, 3);
1150                 }
1151
1152                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1153                         op = BUS_DMASYNC_PREREAD;
1154                 else
1155                         op = BUS_DMASYNC_PREWRITE;
1156
1157                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1158
1159         } else {
1160                 accb->hccb.opcode = INITIATOR_CCB;
1161                 ahautoa24(0, accb->hccb.data_len);
1162                 ahautoa24(0, accb->hccb.data_addr);
1163         }
1164
1165         s = splcam();
1166
1167         /*
1168          * Last time we need to check if this CCB needs to
1169          * be aborted.
1170          */
1171         if (ccb->ccb_h.status != CAM_REQ_INPROG) {
1172                 if (nseg != 0)
1173                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1174                 ahafreeccb(aha, accb);
1175                 xpt_done(ccb);
1176                 splx(s);
1177                 return;
1178         }
1179                 
1180         accb->flags = ACCB_ACTIVE;
1181         ccb->ccb_h.status |= CAM_SIM_QUEUED;
1182         LIST_INSERT_HEAD(&aha->pending_ccbs, &ccb->ccb_h, sim_links.le);
1183
1184         callout_reset(&ccb->ccb_h.timeout_ch, (ccb->ccb_h.timeout * hz) / 1000,
1185             ahatimeout, accb);
1186
1187         /* Tell the adapter about this command */
1188         if (aha->cur_outbox->action_code != AMBO_FREE) {
1189                 /*
1190                  * We should never encounter a busy mailbox.
1191                  * If we do, warn the user, and treat it as
1192                  * a resource shortage.  If the controller is
1193                  * hung, one of the pending transactions will
1194                  * timeout causing us to start recovery operations.
1195                  */
1196                 printf("%s: Encountered busy mailbox with %d out of %d "
1197                        "commands active!!!", aha_name(aha), aha->active_ccbs,
1198                        aha->max_ccbs);
1199                 callout_stop(&ccb->ccb_h.timeout_ch);
1200                 if (nseg != 0)
1201                         bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1202                 ahafreeccb(aha, accb);
1203                 aha->resource_shortage = TRUE;
1204                 xpt_freeze_simq(aha->sim, /*count*/1);
1205                 ccb->ccb_h.status = CAM_REQUEUE_REQ;
1206                 xpt_done(ccb);
1207                 return;
1208         }
1209         paddr = ahaccbvtop(aha, accb);
1210         ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1211         aha->cur_outbox->action_code = AMBO_START;      
1212         aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1213
1214         ahanextoutbox(aha);
1215         splx(s);
1216 }
1217
1218 void
1219 aha_intr(void *arg)
1220 {
1221         struct  aha_softc *aha;
1222         u_int   intstat;
1223
1224         aha = (struct aha_softc *)arg;
1225         while (((intstat = aha_inb(aha, INTSTAT_REG)) & INTR_PENDING) != 0) {
1226                 if ((intstat & CMD_COMPLETE) != 0) {
1227                         aha->latched_status = aha_inb(aha, STATUS_REG);
1228                         aha->command_cmp = TRUE;
1229                 }
1230
1231                 aha_outb(aha, CONTROL_REG, RESET_INTR);
1232
1233                 if ((intstat & IMB_LOADED) != 0) {
1234                         while (aha->cur_inbox->comp_code != AMBI_FREE) {
1235                                 u_int32_t       paddr;
1236                                 paddr = aha_a24tou(aha->cur_inbox->ccb_addr);
1237                                 ahadone(aha,
1238                                        ahaccbptov(aha, paddr),
1239                                        aha->cur_inbox->comp_code);
1240                                 aha->cur_inbox->comp_code = AMBI_FREE;
1241                                 ahanextinbox(aha);
1242                         }
1243                 }
1244
1245                 if ((intstat & SCSI_BUS_RESET) != 0) {
1246                         ahareset(aha, /*hardreset*/FALSE);
1247                 }
1248         }
1249 }
1250
1251 static void
1252 ahadone(struct aha_softc *aha, struct aha_ccb *accb, aha_mbi_comp_code_t comp_code)
1253 {
1254         union  ccb        *ccb;
1255         struct ccb_scsiio *csio;
1256
1257         ccb = accb->ccb;
1258         csio = &accb->ccb->csio;
1259
1260         if ((accb->flags & ACCB_ACTIVE) == 0) {
1261                 printf("%s: ahadone - Attempt to free non-active ACCB %p\n",
1262                        aha_name(aha), (void *)accb);
1263                 return;
1264         }
1265
1266         if ((ccb->ccb_h.flags & CAM_DIR_MASK) != CAM_DIR_NONE) {
1267                 bus_dmasync_op_t op;
1268
1269                 if ((ccb->ccb_h.flags & CAM_DIR_MASK) == CAM_DIR_IN)
1270                         op = BUS_DMASYNC_POSTREAD;
1271                 else
1272                         op = BUS_DMASYNC_POSTWRITE;
1273                 bus_dmamap_sync(aha->buffer_dmat, accb->dmamap, op);
1274                 bus_dmamap_unload(aha->buffer_dmat, accb->dmamap);
1275         }
1276
1277         if (accb == aha->recovery_accb) {
1278                 /*
1279                  * The recovery ACCB does not have a CCB associated
1280                  * with it, so short circuit the normal error handling.
1281                  * We now traverse our list of pending CCBs and process
1282                  * any that were terminated by the recovery CCBs action.
1283                  * We also reinstate timeouts for all remaining, pending,
1284                  * CCBs.
1285                  */
1286                 struct cam_path *path;
1287                 struct ccb_hdr *ccb_h;
1288                 cam_status error;
1289
1290                 /* Notify all clients that a BDR occured */
1291                 error = xpt_create_path(&path, /*periph*/NULL,
1292                                         cam_sim_path(aha->sim),
1293                                         accb->hccb.target,
1294                                         CAM_LUN_WILDCARD);
1295                 
1296                 if (error == CAM_REQ_CMP)
1297                         xpt_async(AC_SENT_BDR, path, NULL);
1298
1299                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1300                 while (ccb_h != NULL) {
1301                         struct aha_ccb *pending_accb;
1302
1303                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1304                         if (pending_accb->hccb.target == accb->hccb.target) {
1305                                 pending_accb->hccb.ahastat = AHASTAT_HA_BDR;
1306                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1307                                 ahadone(aha, pending_accb, AMBI_ERROR);
1308                         } else {
1309                                 callout_reset(&ccb_h->timeout_ch,
1310                                     (ccb_h->timeout * hz) / 1000,
1311                                     ahatimeout, pending_accb);
1312                                 ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1313                         }
1314                 }
1315                 printf("%s: No longer in timeout\n", aha_name(aha));
1316                 return;
1317         }
1318
1319         callout_stop(&ccb->ccb_h.timeout_ch);
1320
1321         switch (comp_code) {
1322         case AMBI_FREE:
1323                 printf("%s: ahadone - CCB completed with free status!\n",
1324                        aha_name(aha));
1325                 break;
1326         case AMBI_NOT_FOUND:
1327                 printf("%s: ahadone - CCB Abort failed to find CCB\n",
1328                        aha_name(aha));
1329                 break;
1330         case AMBI_ABORT:
1331         case AMBI_ERROR:
1332                 /* An error occured */
1333                 if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1334                         csio->resid = 0;
1335                 else
1336                         csio->resid = aha_a24tou(accb->hccb.data_len);
1337                 switch(accb->hccb.ahastat) {
1338                 case AHASTAT_DATARUN_ERROR:
1339                 {
1340                         if (csio->resid <= 0) {
1341                                 csio->ccb_h.status = CAM_DATA_RUN_ERR;
1342                                 break;
1343                         }
1344                         /* FALLTHROUGH */
1345                 }
1346                 case AHASTAT_NOERROR:
1347                         csio->scsi_status = accb->hccb.sdstat;
1348                         csio->ccb_h.status |= CAM_SCSI_STATUS_ERROR;
1349                         switch(csio->scsi_status) {
1350                         case SCSI_STATUS_CHECK_COND:
1351                         case SCSI_STATUS_CMD_TERMINATED:
1352                                 csio->ccb_h.status |= CAM_AUTOSNS_VALID;
1353                                 /*
1354                                  * The aha writes the sense data at different
1355                                  * offsets based on the scsi cmd len
1356                                  */
1357                                 bcopy((caddr_t) &accb->hccb.scsi_cdb +
1358                                         accb->hccb.cmd_len, 
1359                                         (caddr_t) &csio->sense_data,
1360                                         accb->hccb.sense_len);
1361                                 break;
1362                         default:
1363                                 break;
1364                         case SCSI_STATUS_OK:
1365                                 csio->ccb_h.status = CAM_REQ_CMP;
1366                                 break;
1367                         }
1368                         break;
1369                 case AHASTAT_SELTIMEOUT:
1370                         csio->ccb_h.status = CAM_SEL_TIMEOUT;
1371                         break;
1372                 case AHASTAT_UNEXPECTED_BUSFREE:
1373                         csio->ccb_h.status = CAM_UNEXP_BUSFREE;
1374                         break;
1375                 case AHASTAT_INVALID_PHASE:
1376                         csio->ccb_h.status = CAM_SEQUENCE_FAIL;
1377                         break;
1378                 case AHASTAT_INVALID_ACTION_CODE:
1379                         panic("%s: Inavlid Action code", aha_name(aha));
1380                         break;
1381                 case AHASTAT_INVALID_OPCODE:
1382                         if (accb->hccb.opcode < INITIATOR_CCB_WRESID)
1383                                 panic("%s: Invalid CCB Opcode %x hccb = %p",
1384                                         aha_name(aha), accb->hccb.opcode,
1385                                         &accb->hccb);
1386                         printf("%s: AHA-1540A detected, compensating\n",
1387                                 aha_name(aha));
1388                         aha->ccb_sg_opcode = INITIATOR_SG_CCB;
1389                         aha->ccb_ccb_opcode = INITIATOR_CCB;
1390                         xpt_freeze_devq(ccb->ccb_h.path, /*count*/1);
1391                         csio->ccb_h.status = CAM_REQUEUE_REQ;
1392                         break;
1393                 case AHASTAT_LINKED_CCB_LUN_MISMATCH:
1394                         /* We don't even support linked commands... */
1395                         panic("%s: Linked CCB Lun Mismatch", aha_name(aha));
1396                         break;
1397                 case AHASTAT_INVALID_CCB_OR_SG_PARAM:
1398                         panic("%s: Invalid CCB or SG list", aha_name(aha));
1399                         break;
1400                 case AHASTAT_HA_SCSI_BUS_RESET:
1401                         if ((csio->ccb_h.status & CAM_STATUS_MASK)
1402                             != CAM_CMD_TIMEOUT)
1403                                 csio->ccb_h.status = CAM_SCSI_BUS_RESET;
1404                         break;
1405                 case AHASTAT_HA_BDR:
1406                         if ((accb->flags & ACCB_DEVICE_RESET) == 0)
1407                                 csio->ccb_h.status = CAM_BDR_SENT;
1408                         else
1409                                 csio->ccb_h.status = CAM_CMD_TIMEOUT;
1410                         break;
1411                 }
1412                 if (csio->ccb_h.status != CAM_REQ_CMP) {
1413                         xpt_freeze_devq(csio->ccb_h.path, /*count*/1);
1414                         csio->ccb_h.status |= CAM_DEV_QFRZN;
1415                 }
1416                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1417                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1418                 ahafreeccb(aha, accb);
1419                 xpt_done(ccb);
1420                 break;
1421         case AMBI_OK:
1422                 /* All completed without incident */
1423                 /* XXX DO WE NEED TO COPY SENSE BYTES HERE???? XXX */
1424                 /* I don't think so since it works???? */
1425                 ccb->ccb_h.status |= CAM_REQ_CMP;
1426                 if ((accb->flags & ACCB_RELEASE_SIMQ) != 0)
1427                         ccb->ccb_h.status |= CAM_RELEASE_SIMQ;
1428                 ahafreeccb(aha, accb);
1429                 xpt_done(ccb);
1430                 break;
1431         }
1432 }
1433
1434 static int
1435 ahareset(struct aha_softc* aha, int hard_reset)
1436 {
1437         struct   ccb_hdr *ccb_h;
1438         u_int    status;
1439         u_int    timeout;
1440         u_int8_t reset_type;
1441
1442         if (hard_reset != 0)
1443                 reset_type = HARD_RESET;
1444         else
1445                 reset_type = SOFT_RESET;
1446         aha_outb(aha, CONTROL_REG, reset_type);
1447
1448         /* Wait 5sec. for Diagnostic start */
1449         timeout = 5 * 10000;
1450         while (--timeout) {
1451                 status = aha_inb(aha, STATUS_REG);
1452                 if ((status & DIAG_ACTIVE) != 0)
1453                         break;
1454                 DELAY(100);
1455         }
1456         if (timeout == 0) {
1457                 PRVERB(("%s: ahareset - Diagnostic Active failed to "
1458                         "assert. status = 0x%x\n", aha_name(aha),
1459                         status));
1460                 return (ETIMEDOUT);
1461         }
1462
1463         /* Wait 10sec. for Diagnostic end */
1464         timeout = 10 * 10000;
1465         while (--timeout) {
1466                 status = aha_inb(aha, STATUS_REG);
1467                 if ((status & DIAG_ACTIVE) == 0)
1468                         break;
1469                 DELAY(100);
1470         }
1471         if (timeout == 0) {
1472                 panic("%s: ahareset - Diagnostic Active failed to drop. "
1473                        "status = 0x%x\n", aha_name(aha), status);
1474                 return (ETIMEDOUT);
1475         }
1476
1477         /* Wait for the host adapter to become ready or report a failure */
1478         timeout = 10000;
1479         while (--timeout) {
1480                 status = aha_inb(aha, STATUS_REG);
1481                 if ((status & (DIAG_FAIL|HA_READY|DATAIN_REG_READY)) != 0)
1482                         break;
1483                 DELAY(100);
1484         }
1485         if (timeout == 0) {
1486                 printf("%s: ahareset - Host adapter failed to come ready. "
1487                        "status = 0x%x\n", aha_name(aha), status);
1488                 return (ETIMEDOUT);
1489         }
1490
1491         /* If the diagnostics failed, tell the user */
1492         if ((status & DIAG_FAIL) != 0
1493          || (status & HA_READY) == 0) {
1494                 printf("%s: ahareset - Adapter failed diagnostics\n",
1495                        aha_name(aha));
1496
1497                 if ((status & DATAIN_REG_READY) != 0)
1498                         printf("%s: ahareset - Host Adapter Error "
1499                                "code = 0x%x\n", aha_name(aha),
1500                                aha_inb(aha, DATAIN_REG));
1501                 return (ENXIO);
1502         }
1503
1504         /* If we've allocated mailboxes, initialize them */
1505         if (aha->init_level > 4)
1506                 ahainitmboxes(aha);
1507
1508         /* If we've attached to the XPT, tell it about the event */
1509         if (aha->path != NULL)
1510                 xpt_async(AC_BUS_RESET, aha->path, NULL);
1511
1512         /*
1513          * Perform completion processing for all outstanding CCBs.
1514          */
1515         while ((ccb_h = LIST_FIRST(&aha->pending_ccbs)) != NULL) {
1516                 struct aha_ccb *pending_accb;
1517
1518                 pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1519                 pending_accb->hccb.ahastat = AHASTAT_HA_SCSI_BUS_RESET;
1520                 ahadone(aha, pending_accb, AMBI_ERROR);
1521         }
1522
1523         return (0);
1524 }
1525
1526 /*
1527  * Send a command to the adapter.
1528  */
1529 int
1530 aha_cmd(struct aha_softc *aha, aha_op_t opcode, u_int8_t *params, 
1531         u_int param_len, u_int8_t *reply_data, u_int reply_len, 
1532         u_int cmd_timeout)
1533 {
1534         u_int   timeout;
1535         u_int   status;
1536         u_int   saved_status;
1537         u_int   intstat;
1538         u_int   reply_buf_size;
1539         int     s;
1540         int     cmd_complete;
1541         int     error;
1542
1543         /* No data returned to start */
1544         reply_buf_size = reply_len;
1545         reply_len = 0;
1546         intstat = 0;
1547         cmd_complete = 0;
1548         saved_status = 0;
1549         error = 0;
1550
1551         /*
1552          * All commands except for the "start mailbox" and the "enable
1553          * outgoing mailbox read interrupt" commands cannot be issued
1554          * while there are pending transactions.  Freeze our SIMQ
1555          * and wait for all completions to occur if necessary.
1556          */
1557         timeout = 100000;
1558         s = splcam();
1559         while (LIST_FIRST(&aha->pending_ccbs) != NULL && --timeout) {
1560                 /* Fire the interrupt handler in case interrupts are blocked */
1561                 aha_intr(aha);
1562                 splx(s);
1563                 DELAY(100);
1564                 s = splcam();
1565         }
1566         splx(s);
1567
1568         if (timeout == 0) {
1569                 printf("%s: aha_cmd: Timeout waiting for adapter idle\n",
1570                        aha_name(aha));
1571                 return (ETIMEDOUT);
1572         }
1573         aha->command_cmp = 0;
1574         /*
1575          * Wait up to 10 sec. for the adapter to become
1576          * ready to accept commands.
1577          */
1578         timeout = 100000;
1579         while (--timeout) {
1580
1581                 status = aha_inb(aha, STATUS_REG);
1582                 if ((status & HA_READY) != 0
1583                  && (status & CMD_REG_BUSY) == 0)
1584                         break;
1585                 /*
1586                  * Throw away any pending data which may be
1587                  * left over from earlier commands that we
1588                  * timedout on.
1589                  */
1590                 if ((status & DATAIN_REG_READY) != 0)
1591                         (void)aha_inb(aha, DATAIN_REG);
1592                 DELAY(100);
1593         }
1594         if (timeout == 0) {
1595                 printf("%s: aha_cmd: Timeout waiting for adapter ready, "
1596                        "status = 0x%x\n", aha_name(aha), status);
1597                 return (ETIMEDOUT);
1598         }
1599
1600         /*
1601          * Send the opcode followed by any necessary parameter bytes.
1602          */
1603         aha_outb(aha, COMMAND_REG, opcode);
1604
1605         /*
1606          * Wait for up to 1sec to get the parameter list sent
1607          */
1608         timeout = 10000;
1609         while (param_len && --timeout) {
1610                 DELAY(100);
1611                 s = splcam();
1612                 status = aha_inb(aha, STATUS_REG);
1613                 intstat = aha_inb(aha, INTSTAT_REG);
1614                 splx(s);
1615
1616                 if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1617                  == (INTR_PENDING|CMD_COMPLETE)) {
1618                         saved_status = status;
1619                         cmd_complete = 1;
1620                         break;
1621                 }
1622
1623                 if (aha->command_cmp != 0) {
1624                         saved_status = aha->latched_status;
1625                         cmd_complete = 1;
1626                         break;
1627                 }
1628                 if ((status & DATAIN_REG_READY) != 0)
1629                         break;
1630                 if ((status & CMD_REG_BUSY) == 0) {
1631                         aha_outb(aha, COMMAND_REG, *params++);
1632                         param_len--;
1633                         timeout = 10000;
1634                 }
1635         }
1636         if (timeout == 0) {
1637                 printf("%s: aha_cmd: Timeout sending parameters, "
1638                        "status = 0x%x\n", aha_name(aha), status);
1639                 error = ETIMEDOUT;
1640         }
1641
1642         /*
1643          * For all other commands, we wait for any output data
1644          * and the final comand completion interrupt.
1645          */
1646         while (cmd_complete == 0 && --cmd_timeout) {
1647
1648                 s = splcam();
1649                 status = aha_inb(aha, STATUS_REG);
1650                 intstat = aha_inb(aha, INTSTAT_REG);
1651                 splx(s);
1652
1653                 if (aha->command_cmp != 0) {
1654                         cmd_complete = 1;
1655                         saved_status = aha->latched_status;
1656                 } else if ((intstat & (INTR_PENDING|CMD_COMPLETE))
1657                         == (INTR_PENDING|CMD_COMPLETE)) {
1658                         /*
1659                          * Our poll (in case interrupts are blocked)
1660                          * saw the CMD_COMPLETE interrupt.
1661                          */
1662                         cmd_complete = 1;
1663                         saved_status = status;
1664                 }
1665                 if ((status & DATAIN_REG_READY) != 0) {
1666                         u_int8_t data;
1667
1668                         data = aha_inb(aha, DATAIN_REG);
1669                         if (reply_len < reply_buf_size) {
1670                                 *reply_data++ = data;
1671                         } else {
1672                                 printf("%s: aha_cmd - Discarded reply data "
1673                                        "byte for opcode 0x%x\n", aha_name(aha),
1674                                        opcode);
1675                         }
1676                         /*
1677                          * Reset timeout to ensure at least a second
1678                          * between response bytes.
1679                          */
1680                         cmd_timeout = MAX(cmd_timeout, 10000);
1681                         reply_len++;
1682                 }
1683                 DELAY(100);
1684         }
1685         if (cmd_timeout == 0) {
1686                 printf("%s: aha_cmd: Timeout waiting for reply data and "
1687                        "command complete.\n%s: status = 0x%x, intstat = 0x%x, "
1688                        "reply_len = %d\n", aha_name(aha), aha_name(aha), status,
1689                        intstat, reply_len);
1690                 return (ETIMEDOUT);
1691         }
1692
1693         /*
1694          * Clear any pending interrupts.  Block interrupts so our
1695          * interrupt handler is not re-entered.
1696          */
1697         s = splcam();
1698         aha_intr(aha);
1699         splx(s);
1700         
1701         if (error != 0)
1702                 return (error);
1703
1704         /*
1705          * If the command was rejected by the controller, tell the caller.
1706          */
1707         if ((saved_status & CMD_INVALID) != 0) {
1708                 PRVERB(("%s: Invalid Command 0x%x\n", aha_name(aha), opcode));
1709                 /*
1710                  * Some early adapters may not recover properly from
1711                  * an invalid command.  If it appears that the controller
1712                  * has wedged (i.e. status was not cleared by our interrupt
1713                  * reset above), perform a soft reset.
1714                  */
1715                 DELAY(1000);
1716                 status = aha_inb(aha, STATUS_REG);
1717                 if ((status & (CMD_INVALID|STATUS_REG_RSVD|DATAIN_REG_READY|
1718                               CMD_REG_BUSY|DIAG_FAIL|DIAG_ACTIVE)) != 0
1719                  || (status & (HA_READY|INIT_REQUIRED))
1720                   != (HA_READY|INIT_REQUIRED)) {
1721                         ahareset(aha, /*hard_reset*/FALSE);
1722                 }
1723                 return (EINVAL);
1724         }
1725
1726         if (param_len > 0) {
1727                 /* The controller did not accept the full argument list */
1728                 PRVERB(("%s: Controller did not accept full argument list "
1729                         "(%d > 0)\n",
1730                         aha_name(aha), param_len));
1731                 return (E2BIG);
1732         }
1733
1734         if (reply_len != reply_buf_size) {
1735                 /* Too much or too little data received */
1736                 PRVERB(("%s: Too much or too little data received (%d != %d)\n",
1737                         aha_name(aha), reply_len, reply_buf_size));
1738                 return (EMSGSIZE);
1739         }
1740
1741         /* We were successful */
1742         return (0);
1743 }
1744
1745 static int
1746 ahainitmboxes(struct aha_softc *aha) 
1747 {
1748         int error;
1749         init_24b_mbox_params_t init_mbox;
1750
1751         bzero(aha->in_boxes, sizeof(aha_mbox_in_t) * aha->num_boxes);
1752         bzero(aha->out_boxes, sizeof(aha_mbox_out_t) * aha->num_boxes);
1753         aha->cur_inbox = aha->in_boxes;
1754         aha->last_inbox = aha->in_boxes + aha->num_boxes - 1;
1755         aha->cur_outbox = aha->out_boxes;
1756         aha->last_outbox = aha->out_boxes + aha->num_boxes - 1;
1757
1758         /* Tell the adapter about them */
1759         init_mbox.num_mboxes = aha->num_boxes;
1760         ahautoa24(aha->mailbox_physbase, init_mbox.base_addr);
1761         error = aha_cmd(aha, AOP_INITIALIZE_MBOX, (u_int8_t *)&init_mbox,
1762                        /*parmlen*/sizeof(init_mbox), /*reply_buf*/NULL,
1763                        /*reply_len*/0, DEFAULT_CMD_TIMEOUT);
1764
1765         if (error != 0)
1766                 printf("ahainitmboxes: Initialization command failed\n");
1767         return (error);
1768 }
1769
1770 /*
1771  * Update the XPT's idea of the negotiated transfer
1772  * parameters for a particular target.
1773  */
1774 static void
1775 ahafetchtransinfo(struct aha_softc *aha, struct ccb_trans_settings* cts)
1776 {
1777         setup_data_t    setup_info;
1778         u_int           target;
1779         u_int           targ_offset;
1780         u_int           sync_period;
1781         int             error;
1782         u_int8_t        param;
1783         targ_syncinfo_t sync_info;
1784
1785         target = cts->ccb_h.target_id;
1786         targ_offset = (target & 0x7);
1787
1788         /*
1789          * Inquire Setup Information.  This command retreives
1790          * the sync info for older models.
1791          */
1792         param = sizeof(setup_info);
1793         error = aha_cmd(aha, AOP_INQUIRE_SETUP_INFO, &param, /*paramlen*/1,
1794                        (u_int8_t*)&setup_info, sizeof(setup_info),
1795                        DEFAULT_CMD_TIMEOUT);
1796
1797         if (error != 0) {
1798                 printf("%s: ahafetchtransinfo - Inquire Setup Info Failed %d\n",
1799                        aha_name(aha), error);
1800                 return;
1801         }
1802
1803         sync_info = setup_info.syncinfo[targ_offset];
1804
1805         if (sync_info.sync == 0)
1806                 cts->sync_offset = 0;
1807         else
1808                 cts->sync_offset = sync_info.offset;
1809
1810         cts->bus_width = MSG_EXT_WDTR_BUS_8_BIT;
1811
1812         if (aha->boardid >= BOARD_1542CF)
1813                 sync_period = 1000;
1814         else
1815                 sync_period = 2000;
1816         sync_period += 500 * sync_info.period;
1817
1818         /* Convert ns value to standard SCSI sync rate */
1819         if (cts->sync_offset != 0)
1820                 cts->sync_period = scsi_calc_syncparam(sync_period);
1821         else
1822                 cts->sync_period = 0;
1823         
1824         cts->valid = CCB_TRANS_SYNC_RATE_VALID
1825                    | CCB_TRANS_SYNC_OFFSET_VALID
1826                    | CCB_TRANS_BUS_WIDTH_VALID;
1827         xpt_async(AC_TRANSFER_NEG, cts->ccb_h.path, cts);
1828 }
1829
1830 static void
1831 ahamapmboxes(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1832 {
1833         struct aha_softc* aha;
1834
1835         aha = (struct aha_softc*)arg;
1836         aha->mailbox_physbase = segs->ds_addr;
1837 }
1838
1839 static void
1840 ahamapccbs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1841 {
1842         struct aha_softc* aha;
1843
1844         aha = (struct aha_softc*)arg;
1845         aha->aha_ccb_physbase = segs->ds_addr;
1846 }
1847
1848 static void
1849 ahamapsgs(void *arg, bus_dma_segment_t *segs, int nseg, int error)
1850 {
1851
1852         struct aha_softc* aha;
1853
1854         aha = (struct aha_softc*)arg;
1855         SLIST_FIRST(&aha->sg_maps)->sg_physaddr = segs->ds_addr;
1856 }
1857
1858 static void
1859 ahapoll(struct cam_sim *sim)
1860 {
1861         aha_intr(cam_sim_softc(sim));
1862 }
1863
1864 static void
1865 ahatimeout(void *arg)
1866 {
1867         struct aha_ccb  *accb;
1868         union  ccb      *ccb;
1869         struct aha_softc *aha;
1870         int              s;
1871         u_int32_t       paddr;
1872
1873         accb = (struct aha_ccb *)arg;
1874         ccb = accb->ccb;
1875         aha = (struct aha_softc *)ccb->ccb_h.ccb_aha_ptr;
1876         xpt_print_path(ccb->ccb_h.path);
1877         printf("CCB %p - timed out\n", (void *)accb);
1878
1879         s = splcam();
1880
1881         if ((accb->flags & ACCB_ACTIVE) == 0) {
1882                 xpt_print_path(ccb->ccb_h.path);
1883                 printf("CCB %p - timed out CCB already completed\n",
1884                        (void *)accb);
1885                 splx(s);
1886                 return;
1887         }
1888
1889         /*
1890          * In order to simplify the recovery process, we ask the XPT
1891          * layer to halt the queue of new transactions and we traverse
1892          * the list of pending CCBs and remove their timeouts. This
1893          * means that the driver attempts to clear only one error
1894          * condition at a time.  In general, timeouts that occur
1895          * close together are related anyway, so there is no benefit
1896          * in attempting to handle errors in parrallel.  Timeouts will
1897          * be reinstated when the recovery process ends.
1898          */
1899         if ((accb->flags & ACCB_DEVICE_RESET) == 0) {
1900                 struct ccb_hdr *ccb_h;
1901
1902                 if ((accb->flags & ACCB_RELEASE_SIMQ) == 0) {
1903                         xpt_freeze_simq(aha->sim, /*count*/1);
1904                         accb->flags |= ACCB_RELEASE_SIMQ;
1905                 }
1906
1907                 ccb_h = LIST_FIRST(&aha->pending_ccbs);
1908                 while (ccb_h != NULL) {
1909                         struct aha_ccb *pending_accb;
1910
1911                         pending_accb = (struct aha_ccb *)ccb_h->ccb_accb_ptr;
1912                         callout_stop(&ccb_h->timeout_ch);
1913                         ccb_h = LIST_NEXT(ccb_h, sim_links.le);
1914                 }
1915         }
1916
1917         if ((accb->flags & ACCB_DEVICE_RESET) != 0
1918          || aha->cur_outbox->action_code != AMBO_FREE) {
1919                 /*
1920                  * Try a full host adapter/SCSI bus reset.
1921                  * We do this only if we have already attempted
1922                  * to clear the condition with a BDR, or we cannot
1923                  * attempt a BDR for lack of mailbox resources.
1924                  */
1925                 ccb->ccb_h.status = CAM_CMD_TIMEOUT;
1926                 ahareset(aha, /*hardreset*/TRUE);
1927                 printf("%s: No longer in timeout\n", aha_name(aha));
1928         } else {
1929                 /*    
1930                  * Send a Bus Device Reset message:
1931                  * The target that is holding up the bus may not
1932                  * be the same as the one that triggered this timeout
1933                  * (different commands have different timeout lengths),
1934                  * but we have no way of determining this from our
1935                  * timeout handler.  Our strategy here is to queue a
1936                  * BDR message to the target of the timed out command.
1937                  * If this fails, we'll get another timeout 2 seconds
1938                  * later which will attempt a bus reset.
1939                  */
1940                 accb->flags |= ACCB_DEVICE_RESET;
1941                 callout_reset(&ccb->ccb_h.timeout_ch, 2 * hz, ahatimeout, accb);
1942                 aha->recovery_accb->hccb.opcode = INITIATOR_BUS_DEV_RESET;
1943
1944                 /* No Data Transfer */
1945                 aha->recovery_accb->hccb.datain = TRUE;
1946                 aha->recovery_accb->hccb.dataout = TRUE;
1947                 aha->recovery_accb->hccb.ahastat = 0;
1948                 aha->recovery_accb->hccb.sdstat = 0;
1949                 aha->recovery_accb->hccb.target = ccb->ccb_h.target_id;
1950
1951                 /* Tell the adapter about this command */
1952                 paddr = ahaccbvtop(aha, aha->recovery_accb);
1953                 ahautoa24(paddr, aha->cur_outbox->ccb_addr);
1954                 aha->cur_outbox->action_code = AMBO_START;
1955                 aha_outb(aha, COMMAND_REG, AOP_START_MBOX);
1956                 ahanextoutbox(aha);
1957         }
1958
1959         splx(s);
1960 }
1961
1962 int
1963 aha_detach(struct aha_softc *aha)
1964 {
1965         xpt_async(AC_LOST_DEVICE, aha->path, NULL);
1966         xpt_free_path(aha->path);
1967         xpt_bus_deregister(cam_sim_path(aha->sim));
1968         cam_sim_free(aha->sim);
1969         return (0);
1970 }