dpti.c revision 1.46 1 /* $NetBSD: dpti.c,v 1.46 2014/03/16 05:20:27 dholland Exp $ */
2
3 /*-
4 * Copyright (c) 2001, 2007 The NetBSD Foundation, Inc.
5 * All rights reserved.
6 *
7 * This code is derived from software contributed to The NetBSD Foundation
8 * by Andrew Doran.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
20 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
21 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
22 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
23 * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
24 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
25 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
26 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
27 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
28 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29 * POSSIBILITY OF SUCH DAMAGE.
30 */
31
32 /*
33 * Copyright (c) 1996-2000 Distributed Processing Technology Corporation
34 * Copyright (c) 2000 Adaptec Corporation
35 * All rights reserved.
36 *
37 * TERMS AND CONDITIONS OF USE
38 *
39 * Redistribution and use in source form, with or without modification, are
40 * permitted provided that redistributions of source code must retain the
41 * above copyright notice, this list of conditions and the following disclaimer.
42 *
43 * This software is provided `as is' by Adaptec and any express or implied
44 * warranties, including, but not limited to, the implied warranties of
45 * merchantability and fitness for a particular purpose, are disclaimed. In no
46 * event shall Adaptec be liable for any direct, indirect, incidental, special,
47 * exemplary or consequential damages (including, but not limited to,
48 * procurement of substitute goods or services; loss of use, data, or profits;
49 * or business interruptions) however caused and on any theory of liability,
50 * whether in contract, strict liability, or tort (including negligence or
51 * otherwise) arising in any way out of the use of this driver software, even
52 * if advised of the possibility of such damage.
53 */
54
55 /*
56 * Adaptec/DPT I2O control interface.
57 */
58
59 #include <sys/cdefs.h>
60 __KERNEL_RCSID(0, "$NetBSD: dpti.c,v 1.46 2014/03/16 05:20:27 dholland Exp $");
61
62 #include <sys/param.h>
63 #include <sys/systm.h>
64 #include <sys/kernel.h>
65 #include <sys/device.h>
66 #include <sys/queue.h>
67 #include <sys/proc.h>
68 #include <sys/endian.h>
69 #include <sys/malloc.h>
70 #include <sys/conf.h>
71 #include <sys/ioctl.h>
72 #include <sys/kauth.h>
73
74 #include <sys/bus.h>
75 #ifdef __i386__
76 #include <machine/pio.h>
77 #include <machine/cputypes.h>
78 #endif
79
80 #include <dev/i2o/i2o.h>
81 #include <dev/i2o/i2odpt.h>
82 #include <dev/i2o/iopio.h>
83 #include <dev/i2o/iopvar.h>
84 #include <dev/i2o/dptivar.h>
85
86 #ifdef I2ODEBUG
87 #define DPRINTF(x) printf x
88 #else
89 #define DPRINTF(x)
90 #endif
91
92 static struct dpt_sig dpti_sig = {
93 { 'd', 'P', 't', 'S', 'i', 'G'},
94 SIG_VERSION,
95 #if defined(__i386__)
96 PROC_INTEL,
97 #elif defined(__powerpc__)
98 PROC_POWERPC,
99 #elif defined(__alpha__)
100 PROC_ALPHA,
101 #elif defined(__mips__)
102 PROC_MIPS,
103 #elif defined(__sparc64__)
104 PROC_ULTRASPARC,
105 #endif
106 #if defined(__i386__)
107 PROC_386 | PROC_486 | PROC_PENTIUM | PROC_SEXIUM,
108 #else
109 0,
110 #endif
111 FT_HBADRVR,
112 0,
113 OEM_DPT,
114 OS_FREE_BSD, /* XXX */
115 CAP_ABOVE16MB,
116 DEV_ALL,
117 ADF_ALL_SC5,
118 0,
119 0,
120 DPTI_VERSION,
121 DPTI_REVISION,
122 DPTI_SUBREVISION,
123 DPTI_MONTH,
124 DPTI_DAY,
125 DPTI_YEAR,
126 "" /* Will be filled later */
127 };
128
129 void dpti_attach(device_t, device_t, void *);
130 int dpti_blinkled(struct dpti_softc *);
131 int dpti_ctlrinfo(struct dpti_softc *, int, void *);
132 int dpti_match(device_t, cfdata_t, void *);
133 int dpti_passthrough(struct dpti_softc *, void *, struct proc *);
134 int dpti_sysinfo(struct dpti_softc *, int, void *);
135
136 dev_type_open(dptiopen);
137 dev_type_ioctl(dptiioctl);
138
139 const struct cdevsw dpti_cdevsw = {
140 .d_open = dptiopen,
141 .d_close = nullclose,
142 .d_read = noread,
143 .d_write = nowrite,
144 .d_ioctl = dptiioctl,
145 .d_stop = nostop,
146 .d_tty = notty,
147 .d_poll = nopoll,
148 .d_mmap = nommap,
149 .d_kqfilter = nokqfilter,
150 .d_flag = D_OTHER,
151 };
152
153 extern struct cfdriver dpti_cd;
154
155 CFATTACH_DECL_NEW(dpti, sizeof(struct dpti_softc),
156 dpti_match, dpti_attach, NULL, NULL);
157
158 int
159 dpti_match(device_t parent, cfdata_t match, void *aux)
160 {
161 struct iop_attach_args *ia;
162 struct iop_softc *iop;
163
164 ia = aux;
165 iop = device_private(parent);
166
167 if (ia->ia_class != I2O_CLASS_ANY || ia->ia_tid != I2O_TID_IOP)
168 return (0);
169
170 if (le16toh(iop->sc_status.orgid) != I2O_ORG_DPT)
171 return (0);
172
173 return (1);
174 }
175
176 void
177 dpti_attach(device_t parent, device_t self, void *aux)
178 {
179 struct iop_softc *iop;
180 struct dpti_softc *sc;
181 struct {
182 struct i2o_param_op_results pr;
183 struct i2o_param_read_results prr;
184 struct i2o_dpt_param_exec_iop_buffers dib;
185 } __packed param;
186 int rv;
187
188 sc = device_private(self);
189 sc->sc_dev = self;
190 iop = device_private(parent);
191
192 /*
193 * Tell the world what we are. The description in the signature
194 * must be no more than 46 bytes long (see dptivar.h).
195 */
196 printf(": DPT/Adaptec RAID management interface\n");
197 snprintf(dpti_sig.dsDescription, sizeof(dpti_sig.dsDescription),
198 "NetBSD %s I2O OSM", osrelease);
199
200 rv = iop_field_get_all(iop, I2O_TID_IOP,
201 I2O_DPT_PARAM_EXEC_IOP_BUFFERS, ¶m,
202 sizeof(param), NULL);
203 if (rv != 0)
204 return;
205
206 sc->sc_blinkled = le32toh(param.dib.serialoutputoff) + 8;
207 }
208
209 int
210 dptiopen(dev_t dev, int flag, int mode,
211 struct lwp *l)
212 {
213
214 if (device_lookup(&dpti_cd, minor(dev)) == NULL)
215 return (ENXIO);
216
217 return (0);
218 }
219
220 int
221 dptiioctl(dev_t dev, u_long cmd, void *data, int flag, struct lwp *l)
222 {
223 struct iop_softc *iop;
224 struct dpti_softc *sc;
225 struct ioctl_pt *pt;
226 int i, size, rv, linux;
227
228 sc = device_lookup_private(&dpti_cd, minor(dev));
229 iop = device_private(device_parent(sc->sc_dev));
230 rv = 0;
231
232 if (cmd == PTIOCLINUX) {
233 pt = (struct ioctl_pt *)data;
234 size = IOCPARM_LEN(pt->com);
235 cmd = pt->com & 0xffff;
236 data = pt->data;
237 linux = 1;
238 } else {
239 size = IOCPARM_LEN(cmd);
240 cmd = cmd & 0xffff;
241 linux = 0;
242 }
243
244 switch (cmd) {
245 case DPT_SIGNATURE:
246 if (size > sizeof(dpti_sig))
247 size = sizeof(dpti_sig);
248 memcpy(data, &dpti_sig, size);
249 break;
250
251 case DPT_CTRLINFO:
252 rv = dpti_ctlrinfo(sc, size, data);
253 break;
254
255 case DPT_SYSINFO:
256 rv = dpti_sysinfo(sc, size, data);
257 break;
258
259 case DPT_BLINKLED:
260 if ((i = dpti_blinkled(sc)) == -1)
261 i = 0;
262
263 if (size == 0) {
264 rv = copyout(&i, *(void **)data, sizeof(i));
265 break;
266 }
267
268 *(int *)data = i;
269 break;
270
271 case DPT_TARGET_BUSY:
272 /*
273 * XXX This is here to stop linux_machdepioctl() from
274 * whining about an unknown ioctl.
275 */
276 rv = EIO;
277 break;
278
279 case DPT_I2OUSRCMD:
280 rv = kauth_authorize_device_passthru(l->l_cred, dev,
281 KAUTH_REQ_DEVICE_RAWIO_PASSTHRU_ALL, data);
282 if (rv)
283 break;
284
285 mutex_enter(&iop->sc_conflock);
286 if (linux) {
287 rv = dpti_passthrough(sc, data, l->l_proc);
288 } else {
289 rv = dpti_passthrough(sc, *(void **)data, l->l_proc);
290 }
291 mutex_exit(&iop->sc_conflock);
292 break;
293
294 case DPT_I2ORESETCMD:
295 printf("%s: I2ORESETCMD not implemented\n",
296 device_xname(sc->sc_dev));
297 rv = EOPNOTSUPP;
298 break;
299
300 case DPT_I2ORESCANCMD:
301 mutex_enter(&iop->sc_conflock);
302 rv = iop_reconfigure(iop, 0);
303 mutex_exit(&iop->sc_conflock);
304 break;
305
306 default:
307 rv = ENOTTY;
308 break;
309 }
310
311 return (rv);
312 }
313
314 int
315 dpti_blinkled(struct dpti_softc *sc)
316 {
317 struct iop_softc *iop;
318 u_int v;
319
320 iop = device_private(device_parent(sc->sc_dev));
321
322 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh, sc->sc_blinkled + 0);
323 if (v == 0xbc) {
324 v = bus_space_read_1(iop->sc_iot, iop->sc_ioh,
325 sc->sc_blinkled + 1);
326 return (v);
327 }
328
329 return (-1);
330 }
331
332 int
333 dpti_ctlrinfo(struct dpti_softc *sc, int size, void *data)
334 {
335 struct dpt_ctlrinfo info;
336 struct iop_softc *iop;
337 int rv, i;
338
339 iop = device_private(device_parent(sc->sc_dev));
340
341 memset(&info, 0, sizeof(info));
342
343 info.length = sizeof(info) - sizeof(u_int16_t);
344 info.drvrHBAnum = device_unit(sc->sc_dev);
345 info.baseAddr = iop->sc_memaddr;
346 if ((i = dpti_blinkled(sc)) == -1)
347 i = 0;
348 info.blinkState = i;
349 info.pciBusNum = iop->sc_pcibus;
350 info.pciDeviceNum = iop->sc_pcidev;
351 info.hbaFlags = FLG_OSD_PCI_VALID | FLG_OSD_DMA | FLG_OSD_I2O;
352 info.Interrupt = 10; /* XXX */
353
354 if (size > sizeof(char)) {
355 memcpy(data, &info, min(sizeof(info), size));
356 rv = 0;
357 } else
358 rv = copyout(&info, *(void **)data, sizeof(info));
359
360 return (rv);
361 }
362
363 int
364 dpti_sysinfo(struct dpti_softc *sc, int size, void *data)
365 {
366 struct dpt_sysinfo info;
367 int rv;
368 #ifdef __i386__
369 int i, j;
370 #endif
371
372 memset(&info, 0, sizeof(info));
373
374 #ifdef __i386__
375 outb (0x70, 0x12);
376 i = inb(0x71);
377 j = i >> 4;
378 if (i == 0x0f) {
379 outb (0x70, 0x19);
380 j = inb (0x71);
381 }
382 info.drive0CMOS = j;
383
384 j = i & 0x0f;
385 if (i == 0x0f) {
386 outb (0x70, 0x1a);
387 j = inb (0x71);
388 }
389 info.drive1CMOS = j;
390 info.processorFamily = dpti_sig.dsProcessorFamily;
391
392 /*
393 * Get the conventional memory size from CMOS.
394 */
395 outb(0x70, 0x16);
396 j = inb(0x71);
397 j <<= 8;
398 outb(0x70, 0x15);
399 j |= inb(0x71);
400 info.conventionalMemSize = j;
401
402 /*
403 * Get the extended memory size from CMOS.
404 */
405 outb(0x70, 0x31);
406 j = inb(0x71);
407 j <<= 8;
408 outb(0x70, 0x30);
409 j |= inb(0x71);
410 info.extendedMemSize = j;
411
412 switch (cpu_class) {
413 case CPUCLASS_386:
414 info.processorType = PROC_386;
415 break;
416 case CPUCLASS_486:
417 info.processorType = PROC_486;
418 break;
419 case CPUCLASS_586:
420 info.processorType = PROC_PENTIUM;
421 break;
422 case CPUCLASS_686:
423 default:
424 info.processorType = PROC_SEXIUM;
425 break;
426 }
427
428 info.flags = SI_CMOS_Valid | SI_BusTypeValid |
429 SI_MemorySizeValid | SI_NO_SmartROM;
430 #else
431 info.flags = SI_BusTypeValid | SI_NO_SmartROM;
432 #endif
433
434 info.busType = SI_PCI_BUS;
435
436 /*
437 * Copy out the info structure to the user.
438 */
439 if (size > sizeof(char)) {
440 memcpy(data, &info, min(sizeof(info), size));
441 rv = 0;
442 } else
443 rv = copyout(&info, *(void **)data, sizeof(info));
444
445 return (rv);
446 }
447
448 int
449 dpti_passthrough(struct dpti_softc *sc, void *data, struct proc *proc)
450 {
451 struct iop_softc *iop;
452 struct i2o_msg mh, *mf;
453 struct i2o_reply rh;
454 struct iop_msg *im;
455 struct dpti_ptbuf bufs[IOP_MAX_MSG_XFERS];
456 u_int32_t mbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)];
457 u_int32_t rbtmp[IOP_MAX_MSG_SIZE / sizeof(u_int32_t)];
458 int rv, msgsize, repsize, sgoff, i, mapped, nbuf, nfrag, j, sz;
459 u_int32_t *p, *pmax;
460
461 iop = device_private(device_parent(sc->sc_dev));
462 im = NULL;
463
464 if ((rv = dpti_blinkled(sc)) != -1) {
465 if (rv != 0) {
466 aprint_error_dev(sc->sc_dev, "adapter blinkled = 0x%02x\n", rv);
467 return (EIO);
468 }
469 }
470
471 /*
472 * Copy in the message frame header and determine the size of the
473 * full message frame.
474 */
475 if ((rv = copyin(data, &mh, sizeof(mh))) != 0) {
476 DPRINTF(("%s: message copyin failed\n",
477 device_xname(sc->sc_dev)));
478 return (rv);
479 }
480
481 msgsize = (mh.msgflags >> 14) & ~3;
482 if (msgsize < sizeof(mh) || msgsize >= IOP_MAX_MSG_SIZE) {
483 DPRINTF(("%s: bad message frame size\n",
484 device_xname(sc->sc_dev)));
485 return (EINVAL);
486 }
487
488 /*
489 * Handle special commands.
490 */
491 switch (mh.msgfunc >> 24) {
492 case I2O_EXEC_IOP_RESET:
493 printf("%s: I2O_EXEC_IOP_RESET not implemented\n",
494 device_xname(sc->sc_dev));
495 return (EOPNOTSUPP);
496
497 case I2O_EXEC_OUTBOUND_INIT:
498 printf("%s: I2O_EXEC_OUTBOUND_INIT not implemented\n",
499 device_xname(sc->sc_dev));
500 return (EOPNOTSUPP);
501
502 case I2O_EXEC_SYS_TAB_SET:
503 printf("%s: I2O_EXEC_SYS_TAB_SET not implemented\n",
504 device_xname(sc->sc_dev));
505 return (EOPNOTSUPP);
506
507 case I2O_EXEC_STATUS_GET:
508 if ((rv = iop_status_get(iop, 0)) == 0)
509 rv = copyout(&iop->sc_status, (char *)data + msgsize,
510 sizeof(iop->sc_status));
511 return (rv);
512 }
513
514 /*
515 * Copy in the full message frame.
516 */
517 if ((rv = copyin(data, mbtmp, msgsize)) != 0) {
518 DPRINTF(("%s: full message copyin failed\n",
519 device_xname(sc->sc_dev)));
520 return (rv);
521 }
522
523 /*
524 * Determine the size of the reply frame, and copy it in.
525 */
526 if ((rv = copyin((char *)data + msgsize, &rh, sizeof(rh))) != 0) {
527 DPRINTF(("%s: reply copyin failed\n",
528 device_xname(sc->sc_dev)));
529 return (rv);
530 }
531
532 repsize = (rh.msgflags >> 14) & ~3;
533 if (repsize < sizeof(rh) || repsize >= IOP_MAX_MSG_SIZE) {
534 DPRINTF(("%s: bad reply header size\n",
535 device_xname(sc->sc_dev)));
536 return (EINVAL);
537 }
538
539 if ((rv = copyin((char *)data + msgsize, rbtmp, repsize)) != 0) {
540 DPRINTF(("%s: reply too large\n", device_xname(sc->sc_dev)));
541 return (rv);
542 }
543
544 /*
545 * If the message has a scatter gather list, it must be comprised of
546 * simple elements. If any one transfer contains multiple segments,
547 * we allocate a temporary buffer for it; otherwise, the buffer will
548 * be mapped directly.
549 */
550 mapped = 0;
551 if ((sgoff = ((mh.msgflags >> 4) & 15)) != 0) {
552 if ((sgoff + 2) > (msgsize >> 2)) {
553 DPRINTF(("%s: invalid message size fields\n",
554 device_xname(sc->sc_dev)));
555 return (EINVAL);
556 }
557
558 memset(bufs, 0, sizeof(bufs));
559
560 p = mbtmp + sgoff;
561 pmax = mbtmp + (msgsize >> 2) - 2;
562
563 for (nbuf = 0; nbuf < IOP_MAX_MSG_XFERS; nbuf++, p += 2) {
564 if (p > pmax) {
565 DPRINTF(("%s: invalid SGL (1)\n",
566 device_xname(sc->sc_dev)));
567 goto bad;
568 }
569
570 if ((p[0] & 0x30000000) != I2O_SGL_SIMPLE) {
571 DPRINTF(("%s: invalid SGL (2)\n",
572 device_xname(sc->sc_dev)));
573 goto bad;
574 }
575
576 bufs[nbuf].db_out = (p[0] & I2O_SGL_DATA_OUT) != 0;
577 bufs[nbuf].db_ptr = NULL;
578
579 if ((p[0] & I2O_SGL_END_BUFFER) != 0) {
580 if ((p[0] & 0x00ffffff) > IOP_MAX_XFER) {
581 DPRINTF(("%s: buffer too large\n",
582 device_xname(sc->sc_dev)));
583 goto bad;
584 }
585
586 bufs[nbuf].db_ptr = (void *)p[1];
587 bufs[nbuf].db_proc = proc;
588 bufs[nbuf].db_size = p[0] & 0x00ffffff;
589
590 if ((p[0] & I2O_SGL_END) != 0)
591 break;
592
593 continue;
594 }
595
596 /*
597 * The buffer has multiple segments. Determine the
598 * total size.
599 */
600 nfrag = 0;
601 sz = 0;
602 for (; p <= pmax; p += 2) {
603 if (nfrag == DPTI_MAX_SEGS) {
604 DPRINTF(("%s: too many segments\n",
605 device_xname(sc->sc_dev)));
606 goto bad;
607 }
608
609 bufs[nbuf].db_frags[nfrag].iov_len =
610 p[0] & 0x00ffffff;
611 bufs[nbuf].db_frags[nfrag].iov_base =
612 (void *)p[1];
613
614 sz += p[0] & 0x00ffffff;
615 nfrag++;
616
617 if ((p[0] & I2O_SGL_END) != 0) {
618 if ((p[0] & I2O_SGL_END_BUFFER) == 0) {
619 DPRINTF((
620 "%s: invalid SGL (3)\n",
621 device_xname(sc->sc_dev)));
622 goto bad;
623 }
624 break;
625 }
626 if ((p[0] & I2O_SGL_END_BUFFER) != 0)
627 break;
628 }
629 bufs[nbuf].db_nfrag = nfrag;
630
631 if (p > pmax) {
632 DPRINTF(("%s: invalid SGL (4)\n",
633 device_xname(sc->sc_dev)));
634 goto bad;
635 }
636
637 if (sz > IOP_MAX_XFER) {
638 DPRINTF(("%s: buffer too large\n",
639 device_xname(sc->sc_dev)));
640 goto bad;
641 }
642
643 bufs[nbuf].db_size = sz;
644 bufs[nbuf].db_ptr = malloc(sz, M_DEVBUF, M_WAITOK);
645 if (bufs[nbuf].db_ptr == NULL) {
646 DPRINTF(("%s: allocation failure\n",
647 device_xname(sc->sc_dev)));
648 rv = ENOMEM;
649 goto bad;
650 }
651
652 for (i = 0, sz = 0; i < bufs[nbuf].db_nfrag; i++) {
653 rv = copyin(bufs[nbuf].db_frags[i].iov_base,
654 (char *)bufs[nbuf].db_ptr + sz,
655 bufs[nbuf].db_frags[i].iov_len);
656 if (rv != 0) {
657 DPRINTF(("%s: frag copyin\n",
658 device_xname(sc->sc_dev)));
659 goto bad;
660 }
661 sz += bufs[nbuf].db_frags[i].iov_len;
662 }
663
664 if ((p[0] & I2O_SGL_END) != 0)
665 break;
666 }
667
668 if (nbuf == IOP_MAX_MSG_XFERS) {
669 DPRINTF(("%s: too many transfers\n",
670 device_xname(sc->sc_dev)));
671 goto bad;
672 }
673 } else
674 nbuf = -1;
675
676 /*
677 * Allocate a wrapper, and adjust the message header fields to
678 * indicate that no scatter-gather list is currently present.
679 */
680
681 im = iop_msg_alloc(iop, IM_WAIT | IM_NOSTATUS);
682 im->im_rb = (struct i2o_reply *)rbtmp;
683 mf = (struct i2o_msg *)mbtmp;
684 mf->msgictx = IOP_ICTX;
685 mf->msgtctx = im->im_tctx;
686
687 if (sgoff != 0)
688 mf->msgflags = (mf->msgflags & 0xff0f) | (sgoff << 16);
689
690 /*
691 * Map the data transfer(s).
692 */
693 for (i = 0; i <= nbuf; i++) {
694 rv = iop_msg_map(iop, im, mbtmp, bufs[i].db_ptr,
695 bufs[i].db_size, bufs[i].db_out, bufs[i].db_proc);
696 if (rv != 0) {
697 DPRINTF(("%s: msg_map failed, rv = %d\n",
698 device_xname(sc->sc_dev), rv));
699 goto bad;
700 }
701 mapped = 1;
702 }
703
704 /*
705 * Start the command and sleep until it completes.
706 */
707 if ((rv = iop_msg_post(iop, im, mbtmp, 5*60*1000)) != 0)
708 goto bad;
709
710 /*
711 * Copy out the reply frame.
712 */
713 if ((rv = copyout(rbtmp, (char *)data + msgsize, repsize)) != 0) {
714 DPRINTF(("%s: reply copyout() failed\n",
715 device_xname(sc->sc_dev)));
716 }
717
718 bad:
719 /*
720 * Free resources and return to the caller.
721 */
722 if (im != NULL) {
723 if (mapped)
724 iop_msg_unmap(iop, im);
725 iop_msg_free(iop, im);
726 }
727
728 for (i = 0; i <= nbuf; i++) {
729 if (bufs[i].db_proc != NULL)
730 continue;
731
732 if (!bufs[i].db_out && rv == 0) {
733 for (j = 0, sz = 0; j < bufs[i].db_nfrag; j++) {
734 rv = copyout((char *)bufs[i].db_ptr + sz,
735 bufs[i].db_frags[j].iov_base,
736 bufs[i].db_frags[j].iov_len);
737 if (rv != 0)
738 break;
739 sz += bufs[i].db_frags[j].iov_len;
740 }
741 }
742
743 if (bufs[i].db_ptr != NULL)
744 free(bufs[i].db_ptr, M_DEVBUF);
745 }
746
747 return (rv);
748 }
749