dpti.c revision 1.44 1 /* $NetBSD: dpti.c,v 1.44 2011/08/07 13:39:23 rmind Exp $ */
2
3 /*-
4 * Copyright (c) 2001, 2007 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Andrew Doran.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 /*
33 * Copyright (c) 1996-2000 Distributed Processing Technology Corporation
34 * Copyright (c) 2000 Adaptec Corporation
35 * All rights reserved.
36 *
37 * TERMS AND CONDITIONS OF USE
38 *
39 * Redistribution and use in source form, with or without modification, are
40 * permitted provided that redistributions of source code must retain the
41 * above copyright notice, this list of conditions and the following disclaimer.
42 *
43 * This software is provided `as is' by Adaptec and any express or implied
44 * warranties, including, but not limited to, the implied warranties of
45 * merchantability and fitness for a particular purpose, are disclaimed. In no
46 * event shall Adaptec be liable for any direct, indirect, incidental, special,
47 * exemplary or consequential damages (including, but not limited to,
48 * procurement of substitute goods or services; loss of use, data, or profits;
49 * or business interruptions) however caused and on any theory of liability,
50 * whether in contract, strict liability, or tort (including negligence or
51 * otherwise) arising in any way out of the use of this driver software, even
52 * if advised of the possibility of such damage.
53 */
54
55 /*
56 * Adaptec/DPT I2O control interface.
57 */
58
59 #include <sys/cdefs.h>
60 __KERNEL_RCSID(0, "$NetBSD: dpti.c,v 1.44 2011/08/07 13:39:23 rmind Exp $");
61
62 #include <sys/param.h>
63 #include <sys/systm.h>
64 #include <sys/kernel.h>
65 #include <sys/device.h>
66 #include <sys/queue.h>
67 #include <sys/proc.h>
68 #include <sys/endian.h>
69 #include <sys/malloc.h>
70 #include <sys/conf.h>
71 #include <sys/ioctl.h>
72 #include <sys/kauth.h>
73
74 #include <sys/bus.h>
75 #ifdef __i386__
76 #include <machine/pio.h>
77 #include <machine/cputypes.h>
78 #endif
79
80 #include <dev/i2o/i2o.h>
81 #include <dev/i2o/i2odpt.h>
82 #include <dev/i2o/iopio.h>
83 #include <dev/i2o/iopvar.h>
84 #include <dev/i2o/dptivar.h>
85
86 #ifdef I2ODEBUG
87 #define DPRINTF(x) printf x
88 #else
89 #define DPRINTF(x)
90 #endif
91
92 static struct dpt_sig dpti_sig = {
93 { 'd', 'P', 't', 'S', 'i', 'G'},
94 SIG_VERSION,
95 #if defined(__i386__)
96 PROC_INTEL,
97 #elif defined(__powerpc__)
98 PROC_POWERPC,
99 #elif defined(__alpha__)
100 PROC_ALPHA,
101 #elif defined(__mips__)
102 PROC_MIPS,
103 #elif defined(__sparc64__)
104 PROC_ULTRASPARC,
105 #endif
106 #if defined(__i386__)
107 PROC_386 | PROC_486 | PROC_PENTIUM | PROC_SEXIUM,
108 #else
109 0,
110 #endif
111 FT_HBADRVR,
112 0,
113 OEM_DPT,
114 OS_FREE_BSD, /* XXX */
115 CAP_ABOVE16MB,
116 DEV_ALL,
117 ADF_ALL_SC5,
118 0,
119 0,
120 DPTI_VERSION,
121 DPTI_REVISION,
122 DPTI_SUBREVISION,
123 DPTI_MONTH,
124 DPTI_DAY,
125 DPTI_YEAR,
126 "" /* Will be filled later */
127 };
128
129 void dpti_attach(device_t, device_t, void *);
130 int dpti_blinkled(struct dpti_softc *);
131 int dpti_ctlrinfo(struct dpti_softc *, int, void *);
132 int dpti_match(device_t, cfdata_t, void *);
133 int dpti_passthrough(struct dpti_softc *, void *, struct proc *);
134 int dpti_sysinfo(struct dpti_softc *, int, void *);
135
136 dev_type_open(dptiopen);
137 dev_type_ioctl(dptiioctl);
138
139 const struct cdevsw dpti_cdevsw = {
140 dptiopen, nullclose, noread, nowrite, dptiioctl,
141 nostop, notty, nopoll, nommap, nokqfilter, D_OTHER,
142 };
143
144 extern struct cfdriver dpti_cd;
145
146 CFATTACH_DECL(dpti, sizeof(struct dpti_softc),
147 dpti_match, dpti_attach, NULL, NULL);
148
149 int
150 dpti_match(device_t parent, cfdata_t match, void *aux)
151 {
152 struct iop_attach_args *ia;
153 struct iop_softc *iop;
154
155 ia = aux;
156 iop = (struct iop_softc *)parent;
157
158 if (ia->ia_class != I2O_CLASS_ANY || ia->ia_tid != I2O_TID_IOP)
159 return (0);
160
161 if (le16toh(iop->sc_status.orgid) != I2O_ORG_DPT)
162 return (0);
163
164 return (1);
165 }
166
167 void
168 dpti_attach(device_t parent, device_t self, void *aux)
169 {
170 struct iop_softc *iop;
171 struct dpti_softc *sc;
172 struct {
173 struct i2o_param_op_results pr;
174 struct i2o_param_read_results prr;
175 struct i2o_dpt_param_exec_iop_buffers dib;
176 } __packed param;
177 int rv;
178
179 sc = device_private(self);
180 iop = device_private(parent);
181
182 /*
183 * Tell the world what we are. The description in the signature
184 * must be no more than 46 bytes long (see dptivar.h).
185 */
186 printf(": DPT/Adaptec RAID management interface\n");
187 snprintf(dpti_sig.dsDescription, sizeof(dpti_sig.dsDescription),
188 "NetBSD %s I2O OSM", osrelease);
189
190 rv = iop_field_get_all(iop, I2O_TID_IOP,
191 I2O_DPT_PARAM_EXEC_IOP_BUFFERS, ¶m,
192 sizeof(param), NULL);
193 if (rv != 0)
194 return;
195
196 sc->sc_blinkled = le32toh(param.dib.serialoutputoff) + 8;
197 }
198
199 int
200 dptiopen(dev_t dev, int flag, int mode,
201 struct lwp *l)
202 {
203
204 if (device_lookup(&dpti_cd, minor(dev)) == NULL)
205 return (ENXIO);
206
207 return (0);
208 }
209
210 int
211 dptiioctl(dev_t dev, u_long cmd, void *data, int flag, struct lwp *l)
212 {
213 struct iop_softc *iop;
214 struct dpti_softc *sc;
215 struct ioctl_pt *pt;
216 int i, size, rv, linux;
217
218 sc = device_lookup_private(&dpti_cd, minor(dev));
219 iop = (struct iop_softc *)device_parent(&sc->sc_dv);
220 rv = 0;
221
222 if (cmd == PTIOCLINUX) {
223 pt = (struct ioctl_pt *)data;
224 size = IOCPARM_LEN(pt->com);
225 cmd = pt->com & 0xffff;
226 data = pt->data;
227 linux = 1;
228 } else {
229 size = IOCPARM_LEN(cmd);
230 cmd = cmd & 0xffff;
231 linux = 0;
232 }
233
234 switch (cmd) {
235 case DPT_SIGNATURE:
236 if (size > sizeof(dpti_sig))
237 size = sizeof(dpti_sig);
238 memcpy(data, &dpti_sig, size);
239 break;
240
241 case DPT_CTRLINFO:
242 rv = dpti_ctlrinfo(sc, size, data);
243 break;
244
245 case DPT_SYSINFO:
246 rv = dpti_sysinfo(sc, size, data);
247 break;
248
249 case DPT_BLINKLED:
250 if ((i = dpti_blinkled(sc)) == -1)
251 i = 0;
252
253 if (size == 0) {
254 rv = copyout(&i, *(void **)data, sizeof(i));
255 break;
256 }
257
258 *(int *)data = i;
259 break;
260
261 case DPT_TARGET_BUSY:
262 /*
263 * XXX This is here to stop linux_machdepioctl() from
264 * whining about an unknown ioctl.
265 */
266 rv = EIO;
267 break;
268
269 case DPT_I2OUSRCMD:
270 rv = kauth_authorize_device_passthru(l->l_cred, dev,
271 KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_ALL, data);
272 if (rv)
273 break;
274
275 mutex_enter(&iop->sc_conflock);
276 if (linux) {
277 rv = dpti_passthrough(sc, data, l->l_proc);
278 } else {
279 rv = dpti_passthrough(sc, *(void **)data, l->l_proc);
280 }
281 mutex_exit(&iop->sc_conflock);
282 break;
283
284 case DPT_I2ORESETCMD:
285 printf("%s: I2ORESETCMD not implemented\n",
286 device_xname(&sc->sc_dv));
287 rv = EOPNOTSUPP;
288 break;
289
290 case DPT_I2ORESCANCMD:
291 mutex_enter(&iop->sc_conflock);
292 rv = iop_reconfigure(iop, 0);
293 mutex_exit(&iop->sc_conflock);
294 break;
295
296 default:
297 rv = ENOTTY;
298 break;
299 }
300
301 return (rv);
302 }
303
304 int
305 dpti_blinkled(struct dpti_softc *sc)
306 {
307 struct iop_softc *iop;
308 u_int v;
309
310 iop = (struct iop_softc *)device_parent(&sc->sc_dv);
311
312 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh, sc->sc_blinkled + 0);
313 if (v == 0xbc) {
314 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh,
315 sc->sc_blinkled + 1);
316 return (v);
317 }
318
319 return (-1);
320 }
321
322 int
323 dpti_ctlrinfo(struct dpti_softc *sc, int size, void *data)
324 {
325 struct dpt_ctlrinfo info;
326 struct iop_softc *iop;
327 int rv, i;
328
329 iop = (struct iop_softc *)device_parent(&sc->sc_dv);
330
331 memset(&info, 0, sizeof(info));
332
333 info.length = sizeof(info) - sizeof(u_int16_t);
334 info.drvrHBAnum = device_unit(&sc->sc_dv);
335 info.baseAddr = iop->sc_memaddr;
336 if ((i = dpti_blinkled(sc)) == -1)
337 i = 0;
338 info.blinkState = i;
339 info.pciBusNum = iop->sc_pcibus;
340 info.pciDeviceNum = iop->sc_pcidev;
341 info.hbaFlags = FLG_OSD_PCI_VALID | FLG_OSD_DMA | FLG_OSD_I2O;
342 info.Interrupt = 10; /* XXX */
343
344 if (size > sizeof(char)) {
345 memcpy(data, &info, min(sizeof(info), size));
346 rv = 0;
347 } else
348 rv = copyout(&info, *(void **)data, sizeof(info));
349
350 return (rv);
351 }
352
353 int
354 dpti_sysinfo(struct dpti_softc *sc, int size, void *data)
355 {
356 struct dpt_sysinfo info;
357 int rv;
358 #ifdef __i386__
359 int i, j;
360 #endif
361
362 memset(&info, 0, sizeof(info));
363
364 #ifdef __i386__
365 outb (0x70, 0x12);
366 i = inb(0x71);
367 j = i >> 4;
368 if (i == 0x0f) {
369 outb (0x70, 0x19);
370 j = inb (0x71);
371 }
372 info.drive0CMOS = j;
373
374 j = i & 0x0f;
375 if (i == 0x0f) {
376 outb (0x70, 0x1a);
377 j = inb (0x71);
378 }
379 info.drive1CMOS = j;
380 info.processorFamily = dpti_sig.dsProcessorFamily;
381
382 /*
383 * Get the conventional memory size from CMOS.
384 */
385 outb(0x70, 0x16);
386 j = inb(0x71);
387 j <<= 8;
388 outb(0x70, 0x15);
389 j |= inb(0x71);
390 info.conventionalMemSize = j;
391
392 /*
393 * Get the extended memory size from CMOS.
394 */
395 outb(0x70, 0x31);
396 j = inb(0x71);
397 j <<= 8;
398 outb(0x70, 0x30);
399 j |= inb(0x71);
400 info.extendedMemSize = j;
401
402 switch (cpu_class) {
403 case CPUCLASS_386:
404 info.processorType = PROC_386;
405 break;
406 case CPUCLASS_486:
407 info.processorType = PROC_486;
408 break;
409 case CPUCLASS_586:
410 info.processorType = PROC_PENTIUM;
411 break;
412 case CPUCLASS_686:
413 default:
414 info.processorType = PROC_SEXIUM;
415 break;
416 }
417
418 info.flags = SI_CMOS_Valid | SI_BusTypeValid |
419 SI_MemorySizeValid | SI_NO_SmartROM;
420 #else
421 info.flags = SI_BusTypeValid | SI_NO_SmartROM;
422 #endif
423
424 info.busType = SI_PCI_BUS;
425
426 /*
427 * Copy out the info structure to the user.
428 */
429 if (size > sizeof(char)) {
430 memcpy(data, &info, min(sizeof(info), size));
431 rv = 0;
432 } else
433 rv = copyout(&info, *(void **)data, sizeof(info));
434
435 return (rv);
436 }
437
438 int
439 dpti_passthrough(struct dpti_softc *sc, void *data, struct proc *proc)
440 {
441 struct iop_softc *iop;
442 struct i2o_msg mh, *mf;
443 struct i2o_reply rh;
444 struct iop_msg *im;
445 struct dpti_ptbuf bufs[IOP_MAX_MSG_XFERS];
446 u_int32_t mbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)];
447 u_int32_t rbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)];
448 int rv, msgsize, repsize, sgoff, i, mapped, nbuf, nfrag, j, sz;
449 u_int32_t *p, *pmax;
450
451 iop = (struct iop_softc *)device_parent(&sc->sc_dv);
452 im = NULL;
453
454 if ((rv = dpti_blinkled(sc)) != -1) {
455 if (rv != 0) {
456 aprint_error_dev(&sc->sc_dv, "adapter blinkled = 0x%02x\n", rv);
457 return (EIO);
458 }
459 }
460
461 /*
462 * Copy in the message frame header and determine the size of the
463 * full message frame.
464 */
465 if ((rv = copyin(data, &mh, sizeof(mh))) != 0) {
466 DPRINTF(("%s: message copyin failed\n",
467 device_xname(&sc->sc_dv)));
468 return (rv);
469 }
470
471 msgsize = (mh.msgflags >> 14) & ~3;
472 if (msgsize < sizeof(mh) || msgsize >= IOP_MAX_MSG_SIZE) {
473 DPRINTF(("%s: bad message frame size\n",
474 device_xname(&sc->sc_dv)));
475 return (EINVAL);
476 }
477
478 /*
479 * Handle special commands.
480 */
481 switch (mh.msgfunc >> 24) {
482 case I2O_EXEC_IOP_RESET:
483 printf("%s: I2O_EXEC_IOP_RESET not implemented\n",
484 device_xname(&sc->sc_dv));
485 return (EOPNOTSUPP);
486
487 case I2O_EXEC_OUTBOUND_INIT:
488 printf("%s: I2O_EXEC_OUTBOUND_INIT not implemented\n",
489 device_xname(&sc->sc_dv));
490 return (EOPNOTSUPP);
491
492 case I2O_EXEC_SYS_TAB_SET:
493 printf("%s: I2O_EXEC_SYS_TAB_SET not implemented\n",
494 device_xname(&sc->sc_dv));
495 return (EOPNOTSUPP);
496
497 case I2O_EXEC_STATUS_GET:
498 if ((rv = iop_status_get(iop, 0)) == 0)
499 rv = copyout(&iop->sc_status, (char *)data + msgsize,
500 sizeof(iop->sc_status));
501 return (rv);
502 }
503
504 /*
505 * Copy in the full message frame.
506 */
507 if ((rv = copyin(data, mbtmp, msgsize)) != 0) {
508 DPRINTF(("%s: full message copyin failed\n",
509 device_xname(&sc->sc_dv)));
510 return (rv);
511 }
512
513 /*
514 * Determine the size of the reply frame, and copy it in.
515 */
516 if ((rv = copyin((char *)data + msgsize, &rh, sizeof(rh))) != 0) {
517 DPRINTF(("%s: reply copyin failed\n",
518 device_xname(&sc->sc_dv)));
519 return (rv);
520 }
521
522 repsize = (rh.msgflags >> 14) & ~3;
523 if (repsize < sizeof(rh) || repsize >= IOP_MAX_MSG_SIZE) {
524 DPRINTF(("%s: bad reply header size\n",
525 device_xname(&sc->sc_dv)));
526 return (EINVAL);
527 }
528
529 if ((rv = copyin((char *)data + msgsize, rbtmp, repsize)) != 0) {
530 DPRINTF(("%s: reply too large\n", device_xname(&sc->sc_dv)));
531 return (rv);
532 }
533
534 /*
535 * If the message has a scatter gather list, it must be comprised of
536 * simple elements. If any one transfer contains multiple segments,
537 * we allocate a temporary buffer for it; otherwise, the buffer will
538 * be mapped directly.
539 */
540 mapped = 0;
541 if ((sgoff = ((mh.msgflags >> 4) & 15)) != 0) {
542 if ((sgoff + 2) > (msgsize >> 2)) {
543 DPRINTF(("%s: invalid message size fields\n",
544 device_xname(&sc->sc_dv)));
545 return (EINVAL);
546 }
547
548 memset(bufs, 0, sizeof(bufs));
549
550 p = mbtmp + sgoff;
551 pmax = mbtmp + (msgsize >> 2) - 2;
552
553 for (nbuf = 0; nbuf < IOP_MAX_MSG_XFERS; nbuf++, p += 2) {
554 if (p > pmax) {
555 DPRINTF(("%s: invalid SGL (1)\n",
556 device_xname(&sc->sc_dv)));
557 goto bad;
558 }
559
560 if ((p[0] & 0x30000000) != I2O_SGL_SIMPLE) {
561 DPRINTF(("%s: invalid SGL (2)\n",
562 device_xname(&sc->sc_dv)));
563 goto bad;
564 }
565
566 bufs[nbuf].db_out = (p[0] & I2O_SGL_DATA_OUT) != 0;
567 bufs[nbuf].db_ptr = NULL;
568
569 if ((p[0] & I2O_SGL_END_BUFFER) != 0) {
570 if ((p[0] & 0x00ffffff) > IOP_MAX_XFER) {
571 DPRINTF(("%s: buffer too large\n",
572 device_xname(&sc->sc_dv)));
573 goto bad;
574 }
575
576 bufs[nbuf].db_ptr = (void *)p[1];
577 bufs[nbuf].db_proc = proc;
578 bufs[nbuf].db_size = p[0] & 0x00ffffff;
579
580 if ((p[0] & I2O_SGL_END) != 0)
581 break;
582
583 continue;
584 }
585
586 /*
587 * The buffer has multiple segments. Determine the
588 * total size.
589 */
590 nfrag = 0;
591 sz = 0;
592 for (; p <= pmax; p += 2) {
593 if (nfrag == DPTI_MAX_SEGS) {
594 DPRINTF(("%s: too many segments\n",
595 device_xname(&sc->sc_dv)));
596 goto bad;
597 }
598
599 bufs[nbuf].db_frags[nfrag].iov_len =
600 p[0] & 0x00ffffff;
601 bufs[nbuf].db_frags[nfrag].iov_base =
602 (void *)p[1];
603
604 sz += p[0] & 0x00ffffff;
605 nfrag++;
606
607 if ((p[0] & I2O_SGL_END) != 0) {
608 if ((p[0] & I2O_SGL_END_BUFFER) == 0) {
609 DPRINTF((
610 "%s: invalid SGL (3)\n",
611 device_xname(&sc->sc_dv)));
612 goto bad;
613 }
614 break;
615 }
616 if ((p[0] & I2O_SGL_END_BUFFER) != 0)
617 break;
618 }
619 bufs[nbuf].db_nfrag = nfrag;
620
621 if (p > pmax) {
622 DPRINTF(("%s: invalid SGL (4)\n",
623 device_xname(&sc->sc_dv)));
624 goto bad;
625 }
626
627 if (sz > IOP_MAX_XFER) {
628 DPRINTF(("%s: buffer too large\n",
629 device_xname(&sc->sc_dv)));
630 goto bad;
631 }
632
633 bufs[nbuf].db_size = sz;
634 bufs[nbuf].db_ptr = malloc(sz, M_DEVBUF, M_WAITOK);
635 if (bufs[nbuf].db_ptr == NULL) {
636 DPRINTF(("%s: allocation failure\n",
637 device_xname(&sc->sc_dv)));
638 rv = ENOMEM;
639 goto bad;
640 }
641
642 for (i = 0, sz = 0; i < bufs[nbuf].db_nfrag; i++) {
643 rv = copyin(bufs[nbuf].db_frags[i].iov_base,
644 (char *)bufs[nbuf].db_ptr + sz,
645 bufs[nbuf].db_frags[i].iov_len);
646 if (rv != 0) {
647 DPRINTF(("%s: frag copyin\n",
648 device_xname(&sc->sc_dv)));
649 goto bad;
650 }
651 sz += bufs[nbuf].db_frags[i].iov_len;
652 }
653
654 if ((p[0] & I2O_SGL_END) != 0)
655 break;
656 }
657
658 if (nbuf == IOP_MAX_MSG_XFERS) {
659 DPRINTF(("%s: too many transfers\n",
660 device_xname(&sc->sc_dv)));
661 goto bad;
662 }
663 } else
664 nbuf = -1;
665
666 /*
667 * Allocate a wrapper, and adjust the message header fields to
668 * indicate that no scatter-gather list is currently present.
669 */
670
671 im = iop_msg_alloc(iop, IM_WAIT | IM_NOSTATUS);
672 im->im_rb = (struct i2o_reply *)rbtmp;
673 mf = (struct i2o_msg *)mbtmp;
674 mf->msgictx = IOP_ICTX;
675 mf->msgtctx = im->im_tctx;
676
677 if (sgoff != 0)
678 mf->msgflags = (mf->msgflags & 0xff0f) | (sgoff << 16);
679
680 /*
681 * Map the data transfer(s).
682 */
683 for (i = 0; i <= nbuf; i++) {
684 rv = iop_msg_map(iop, im, mbtmp, bufs[i].db_ptr,
685 bufs[i].db_size, bufs[i].db_out, bufs[i].db_proc);
686 if (rv != 0) {
687 DPRINTF(("%s: msg_map failed, rv = %d\n",
688 device_xname(&sc->sc_dv), rv));
689 goto bad;
690 }
691 mapped = 1;
692 }
693
694 /*
695 * Start the command and sleep until it completes.
696 */
697 if ((rv = iop_msg_post(iop, im, mbtmp, 5*60*1000)) != 0)
698 goto bad;
699
700 /*
701 * Copy out the reply frame.
702 */
703 if ((rv = copyout(rbtmp, (char *)data + msgsize, repsize)) != 0) {
704 DPRINTF(("%s: reply copyout() failed\n",
705 device_xname(&sc->sc_dv)));
706 }
707
708 bad:
709 /*
710 * Free resources and return to the caller.
711 */
712 if (im != NULL) {
713 if (mapped)
714 iop_msg_unmap(iop, im);
715 iop_msg_free(iop, im);
716 }
717
718 for (i = 0; i <= nbuf; i++) {
719 if (bufs[i].db_proc != NULL)
720 continue;
721
722 if (!bufs[i].db_out && rv == 0) {
723 for (j = 0, sz = 0; j < bufs[i].db_nfrag; j++) {
724 rv = copyout((char *)bufs[i].db_ptr + sz,
725 bufs[i].db_frags[j].iov_base,
726 bufs[i].db_frags[j].iov_len);
727 if (rv != 0)
728 break;
729 sz += bufs[i].db_frags[j].iov_len;
730 }
731 }
732
733 if (bufs[i].db_ptr != NULL)
734 free(bufs[i].db_ptr, M_DEVBUF);
735 }
736
737 return (rv);
738 }
739