Home | History | Annotate | Line # | Download | only in iscsi
iscsi_send.c revision 1.1.2.1
      1 /*	$NetBSD: iscsi_send.c,v 1.1.2.1 2012/10/30 17:21:17 yamt Exp $	*/
      2 
      3 /*-
      4  * Copyright (c) 2004,2005,2006,2011 The NetBSD Foundation, Inc.
      5  * All rights reserved.
      6  *
      7  * This code is derived from software contributed to The NetBSD Foundation
      8  * by Wasabi Systems, Inc.
      9  *
     10  * Redistribution and use in source and binary forms, with or without
     11  * modification, are permitted provided that the following conditions
     12  * are met:
     13  * 1. Redistributions of source code must retain the above copyright
     14  *    notice, this list of conditions and the following disclaimer.
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
     20  * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
     21  * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
     22  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
     23  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
     24  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
     25  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
     26  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
     27  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
     28  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
     29  * POSSIBILITY OF SUCH DAMAGE.
     30  */
     31 #include "iscsi_globals.h"
     32 
     33 #include <sys/file.h>
     34 #include <sys/filedesc.h>
     35 #include <sys/socket.h>
     36 #include <sys/socketvar.h>
     37 
     38 /*#define LUN_1  1 */
     39 
     40 /*****************************************************************************/
     41 
     42 /*
     43  * my_soo_write:
     44  *    Replacement for soo_write with flag handling.
     45  *
     46  *    Parameter:
     47  *          conn     The connection
     48  *          u        The uio descriptor
     49  *
     50  *    Returns:    0 on success, else EIO.
     51  */
     52 
     53 STATIC int
     54 my_soo_write(connection_t *conn, struct uio *u)
     55 {
     56 	struct socket *so = (struct socket *) conn->sock->f_data;
     57 	size_t resid = u->uio_resid;
     58 	int ret;
     59 
     60 	assert(resid != 0);
     61 
     62 #if (__NetBSD_Version__ >= 300000000)
     63 	ret = sosend(so, NULL, u, NULL, NULL, 0, conn->threadobj);
     64 #else
     65 	ret = sosend(so, NULL, u, NULL, NULL, 0);
     66 #endif
     67 
     68 	DEB(99, ("soo_write done: len = %zu\n", u->uio_resid));
     69 
     70 	if (ret != 0 || u->uio_resid) {
     71 		DEBC(conn, 0, ("Write failed sock %p (ret: %d, req: %zu, resid: %zu)\n",
     72 			conn->sock, ret, resid, u->uio_resid));
     73 		handle_connection_error(conn, ISCSI_STATUS_SOCKET_ERROR, NO_LOGOUT);
     74 		return EIO;
     75 	}
     76 	return 0;
     77 }
     78 
     79 /*****************************************************************************/
     80 
     81 /*
     82  * assign_connection:
     83  *    This function returns the connection to use for the next transaction.
     84  *
     85  *    Parameter:  The session
     86  *
     87  *    Returns:    The connection
     88  */
     89 
     90 connection_t *
     91 assign_connection(session_t *session, bool waitok)
     92 {
     93 	connection_t *conn, *next;
     94 
     95 	do {
     96 		if ((conn = session->mru_connection) == NULL) {
     97 			return NULL;
     98 		}
     99 		next = conn;
    100 		do {
    101 			next = TAILQ_NEXT(next, connections);
    102 			if (next == NULL) {
    103 				next = TAILQ_FIRST(&session->conn_list);
    104 			}
    105 		} while (next != NULL && next != conn &&
    106 				 next->state != ST_FULL_FEATURE);
    107 
    108 		if (next->state != ST_FULL_FEATURE) {
    109 			if (waitok) {
    110 				tsleep(session, PRIBIO, "iscsi_assign_connection", 0);
    111 				next = TAILQ_FIRST(&session->conn_list);
    112 			} else {
    113 				return NULL;
    114 			}
    115 		} else {
    116 			session->mru_connection = next;
    117 		}
    118 	} while (next != NULL && next->state != ST_FULL_FEATURE);
    119 
    120 	return next;
    121 }
    122 
    123 
    124 /*
    125  * reassign_tasks:
    126  *    Reassign pending commands to one of the still existing connections
    127  *    of a session.
    128  *
    129  *    Parameter:
    130  *          oldconn		The terminating connection
    131  */
    132 
    133 STATIC void
    134 reassign_tasks(connection_t *oldconn)
    135 {
    136 	session_t *sess = oldconn->session;
    137 	connection_t *conn;
    138 	ccb_t *ccb;
    139 	pdu_t *pdu = NULL;
    140 	pdu_t *opdu;
    141 	int no_tm = 1;
    142 	int rc = 1;
    143 
    144 	if ((conn = assign_connection(sess, FALSE)) == NULL) {
    145 		DEB(1, ("Reassign_tasks of Session %d, connection %d failed, "
    146 			    "no active connection\n",
    147 			    sess->id, oldconn->id));
    148 		return;
    149 	}
    150 
    151 	if (sess->ErrorRecoveryLevel >= 2) {
    152 		if (oldconn->loggedout == NOT_LOGGED_OUT) {
    153 			oldconn->loggedout = LOGOUT_SENT;
    154 			no_tm = send_logout(conn, oldconn, RECOVER_CONNECTION, TRUE);
    155 			oldconn->loggedout = (rc) ? LOGOUT_FAILED : LOGOUT_SUCCESS;
    156 			if (!oldconn->Time2Retain) {
    157 				DEBC(conn, 1, ("Time2Retain is zero, setting no_tm\n"));
    158 				no_tm = 1;
    159 			}
    160 		} else if (oldconn->loggedout == LOGOUT_SUCCESS) {
    161 			no_tm = 0;
    162 		}
    163 		if (!no_tm && oldconn->Time2Wait) {
    164 			DEBC(conn, 1, ("Time2Wait=%d, hz=%d, waiting...\n",
    165 						   oldconn->Time2Wait, hz));
    166 			tsleep(&no_tm, PRIBIO, "Time2Wait", oldconn->Time2Wait * hz);
    167 		}
    168 	}
    169 
    170 	DEBC(conn, 1, ("Reassign_tasks: Session %d, conn %d -> conn %d, no_tm=%d\n",
    171 		sess->id, oldconn->id, conn->id, no_tm));
    172 
    173 	TAILQ_FOREACH(ccb, &oldconn->ccbs_waiting, chain) {
    174 		/* Copy PDU contents (PDUs are bound to connection) */
    175 		if ((pdu = get_pdu(conn)) == NULL) {
    176 			break;
    177 		}
    178 		opdu = ccb->pdu_waiting;
    179 		*pdu = *opdu;
    180 		/* restore overwritten back ptr */
    181 		pdu->connection = conn;
    182 
    183 		/* fixup saved UIO and IOVEC (regular one will be overwritten anyway) */
    184 		pdu->save_uio.uio_iov = pdu->io_vec;
    185 		pdu->save_iovec [0].iov_base = &pdu->pdu;
    186 
    187 		if (conn->DataDigest && pdu->save_uio.uio_iovcnt > 1) {
    188 			if (pdu->save_iovec [2].iov_base == NULL) {
    189 				pdu->save_iovec [2].iov_base = &pdu->data_digest;
    190 				pdu->save_uio.uio_iovcnt = 3;
    191 			} else {
    192 				pdu->save_iovec [3].iov_base = &pdu->data_digest;
    193 				pdu->save_uio.uio_iovcnt = 4;
    194 			}
    195 		}
    196 		pdu->save_iovec [0].iov_len =
    197 			(conn->HeaderDigest) ? BHS_SIZE + 4 : BHS_SIZE;
    198 
    199 		ccb->pdu_waiting = pdu;
    200 		ccb->connection = conn;
    201 		ccb->num_timeouts = 0;
    202 		oldconn->usecount--;
    203 		conn->usecount++;
    204 
    205 		DEBC(conn, 1, ("CCB %p: Copied PDU %p to %p\n",
    206 					   ccb, opdu, pdu));
    207 
    208 		/* free the old PDU */
    209 		opdu->temp_data = NULL;
    210 		free_pdu(opdu);
    211 	}
    212 
    213 	if (pdu == NULL) {
    214 		DEBC(conn, 1, ("Error while copying PDUs in reassign_tasks!\n"));
    215 		/* give up recovering, the other connection is screwed up as well... */
    216 		while ((ccb = TAILQ_FIRST(&oldconn->ccbs_waiting)) != NULL) {
    217 			ccb->status = oldconn->terminating;
    218 			wake_ccb(ccb);
    219 		}
    220 		return;
    221 	}
    222 
    223 	while ((ccb = TAILQ_FIRST(&oldconn->ccbs_waiting)) != NULL) {
    224 		TAILQ_REMOVE(&oldconn->ccbs_waiting, ccb, chain);
    225 		TAILQ_INSERT_TAIL(&conn->ccbs_waiting, ccb, chain);
    226 
    227 		if (!no_tm) {
    228 			rc = send_task_management(conn, ccb, NULL, TASK_REASSIGN);
    229 		}
    230 		/* if we get an error on reassign, restart the original request */
    231 		if (no_tm || rc) {
    232 			if (ccb->CmdSN < sess->ExpCmdSN) {
    233 				pdu = ccb->pdu_waiting;
    234 
    235 				/* update CmdSN */
    236 				DEBC(conn, 1, ("Resend Updating CmdSN - old %d, new %d\n",
    237 					   ccb->CmdSN, sess->CmdSN));
    238 				ccb->CmdSN = sess->CmdSN;
    239 				if (!(pdu->pdu.Opcode & OP_IMMEDIATE)) {
    240 					sess->CmdSN++;
    241 				}
    242 				pdu->pdu.p.command.CmdSN = htonl(ccb->CmdSN);
    243 			}
    244 			resend_pdu(ccb);
    245 		} else {
    246 			SET_CCB_TIMEOUT(conn, ccb, COMMAND_TIMEOUT);
    247 		}
    248 		DEBC(conn, 1, ("Reassign ccb %p, no_tm=%d, rc=%d\n",
    249 					   ccb, no_tm, rc));
    250 	}
    251 }
    252 
    253 
    254 /*
    255  * iscsi_send_thread:
    256  *    This thread services the send queue, writing the PDUs to the socket.
    257  *    It also handles the cleanup when the connection is terminated.
    258  *
    259  *    Parameter:
    260  *          par		The connection this thread services
    261  */
    262 
    263 void
    264 iscsi_send_thread(void *par)
    265 {
    266 	connection_t *conn = (connection_t *) par;
    267 	session_t *sess;
    268 	ccb_t *ccb, *nccb;
    269 	pdu_t *pdu;
    270 	struct file *fp;
    271 	int s;
    272 
    273 	sess = conn->session;
    274 	/* so cleanup thread knows there's someone left */
    275 	iscsi_num_send_threads++;
    276 
    277 	do {
    278 		while (!conn->terminating) {
    279 			s = splbio();
    280 			while (!conn->terminating &&
    281 				(pdu = TAILQ_FIRST(&conn->pdus_to_send)) != NULL) {
    282 				TAILQ_REMOVE(&conn->pdus_to_send, pdu, send_chain);
    283 				pdu->flags &= ~PDUF_INQUEUE;
    284 				splx(s);
    285 
    286 				PERF_PDUSNAPB(pdu);
    287 
    288 #ifdef ISCSI_DEBUG
    289 				if (!pdu->uio.uio_resid) {
    290 					DEBOUT(("uio.resid = 0 in iscsi_send_thread! pdu=%p\n",
    291 							pdu));
    292 					assert(pdu->uio.uio_resid != 0);
    293 				}
    294 #endif
    295 				/*DEB (99,("Send thread woke up, pdu = %x)\n", (int)pdu)); */
    296 
    297 #ifdef ISCSI_TEST_MODE
    298 				if (!test_mode_tx(conn, pdu)) {
    299 					 if (!(pdu->flags & PDUF_NOUPDATE)) {
    300 #endif
    301 						 /* update ExpStatSN here to avoid discontinuities */
    302 						 /* and delays in updating target */
    303 						 pdu->pdu.p.command.ExpStatSN =
    304 							 htonl(conn->StatSN_buf.ExpSN);
    305 
    306 						 if (conn->HeaderDigest)
    307 							 pdu->pdu.HeaderDigest =
    308 								gen_digest(&pdu->pdu, BHS_SIZE);
    309 #ifdef ISCSI_TEST_MODE
    310 					 }
    311 #endif
    312 					 my_soo_write(conn, &pdu->uio);
    313 #ifdef ISCSI_TEST_MODE
    314 				}
    315 #endif
    316 				PERF_PDUSNAPE(pdu);
    317 
    318 				if (pdu->disp <= PDUDISP_FREE) {
    319 					free_pdu(pdu);
    320 				} else {
    321 					pdu->flags &= ~PDUF_BUSY;
    322 				}
    323 				s = splbio();
    324 			}
    325 
    326 			/*DEB (99,("Send thread done, waiting (conn->terminating = %d)\n", */
    327 			/* 		conn->terminating)); */
    328 
    329 			if (!conn->terminating) {
    330 				tsleep(&conn->pdus_to_send, PRIBIO,
    331 						"iscsisend", 0);
    332 			}
    333 
    334 			splx(s);
    335 		}
    336 
    337 		/* ------------------------------------------------------------------------
    338 		 *    Here this thread takes over cleanup of the terminating connection.
    339 		 * ------------------------------------------------------------------------
    340 		 */
    341 		callout_stop(&conn->timeout);
    342 		conn->idle_timeout_val = CONNECTION_IDLE_TIMEOUT;
    343 
    344 		fp = conn->sock;
    345 
    346 		/*
    347 		 * We shutdown the socket here to force the receive
    348 		 * thread to wake up
    349 		 */
    350 		DEBC(conn, 9, ("Closing Socket %p\n", conn->sock));
    351 		solock((struct socket *) fp->f_data);
    352 		soshutdown((struct socket *) fp->f_data, SHUT_RDWR);
    353 		sounlock((struct socket *) fp->f_data);
    354 
    355 		/* wake up any non-reassignable waiting CCBs */
    356 		for (ccb = TAILQ_FIRST(&conn->ccbs_waiting); ccb != NULL; ccb = nccb) {
    357 			nccb = TAILQ_NEXT(ccb, chain);
    358 			if (!(ccb->flags & CCBF_REASSIGN) || ccb->pdu_waiting == NULL) {
    359 				DEBC(conn, 9, ("Terminating CCB %p (t=%p)\n",
    360 					ccb,&ccb->timeout));
    361 				ccb->status = conn->terminating;
    362 				wake_ccb(ccb);
    363 			} else {
    364 				callout_stop(&ccb->timeout);
    365 				ccb->num_timeouts = 0;
    366 			}
    367 		}
    368 
    369 		/* clean out anything left in send queue */
    370 		while ((pdu = TAILQ_FIRST(&conn->pdus_to_send)) != NULL) {
    371 			TAILQ_REMOVE(&conn->pdus_to_send, pdu, send_chain);
    372 			pdu->flags &= ~(PDUF_INQUEUE | PDUF_BUSY);
    373 			/* if it's not attached to a waiting CCB, free it */
    374 			if (pdu->owner == NULL ||
    375 			    pdu->owner->pdu_waiting != pdu) {
    376 				free_pdu(pdu);
    377 			}
    378 		}
    379 
    380         /* If there's another connection available, transfer pending tasks */
    381 		if (sess->active_connections &&
    382 			TAILQ_FIRST(&conn->ccbs_waiting) != NULL) {
    383 			reassign_tasks (conn);
    384 		} else if (!conn->destroy && conn->Time2Wait) {
    385 			tsleep(&s, PRIBIO, "Time2Wait", conn->Time2Wait * hz);
    386 		}
    387 		/* notify event handlers of connection shutdown */
    388 		add_event((conn->destroy) ? ISCSI_CONNECTION_TERMINATED
    389 								  : ISCSI_RECOVER_CONNECTION,
    390 				  sess->id, conn->id, conn->terminating);
    391 
    392 		if (!conn->destroy)
    393 			tsleep(conn, PRIBIO, "conn_idle", 0);
    394 
    395 	} while (!conn->destroy);
    396 
    397 	/* wake up anyone waiting for a PDU */
    398 	wakeup(&conn->pdu_pool);
    399 
    400 	/* wake up any waiting CCBs */
    401 	while ((ccb = TAILQ_FIRST(&conn->ccbs_waiting)) != NULL) {
    402 		ccb->status = conn->terminating;
    403 		wake_ccb(ccb);
    404 		/* NOTE: wake_ccb will remove the CCB from the queue */
    405 	}
    406 
    407 	s = splbio();
    408 	if (conn->in_session) {
    409 		conn->in_session = FALSE;
    410 		TAILQ_REMOVE(&sess->conn_list, conn, connections);
    411 		sess->mru_connection = TAILQ_FIRST(&sess->conn_list);
    412 	}
    413 
    414 	TAILQ_INSERT_TAIL(&iscsi_cleanup_list, conn, connections);
    415 	splx(s);
    416 
    417 	wakeup(&iscsi_cleanup_list);
    418 
    419 	conn->sendproc = NULL;
    420 	DEBC(conn, 5, ("Send thread exits\n"));
    421 	iscsi_num_send_threads--;
    422 	kthread_exit(0);
    423 }
    424 
    425 
    426 /*
    427  * send_pdu:
    428  *    Enqueue a PDU to be sent, and handle its disposition as well as
    429  *    the disposition of its associated CCB.
    430  *
    431  *    Parameter:
    432  *          ccb      The associated CCB. May be NULL if cdisp is CCBDISP_NOWAIT
    433  *                   and pdisp is not PDUDISP_WAIT
    434  *          cdisp    The CCB's disposition
    435  *          pdu      The PDU
    436  *          pdisp    The PDU's disposition
    437  */
    438 
    439 STATIC void
    440 send_pdu(ccb_t *ccb, pdu_t *pdu, ccb_disp_t cdisp, pdu_disp_t pdisp)
    441 {
    442 	connection_t *conn = pdu->connection;
    443 	ccb_disp_t prev_cdisp = 0;
    444 
    445 	if (ccb != NULL) {
    446 		prev_cdisp = ccb->disp;
    447 		pdu->pdu.InitiatorTaskTag = ccb->ITT;
    448 		pdu->owner = ccb;
    449 		if (cdisp != CCBDISP_NOWAIT)
    450 			ccb->disp = cdisp;
    451 	}
    452 
    453 	pdu->disp = pdisp;
    454 
    455 	DEBC(conn, 10, ("Send_pdu: ccb=%p, pcd=%d, cdsp=%d, pdu=%p, pdsp=%d\n",
    456 			ccb, prev_cdisp, cdisp, pdu, pdisp));
    457 
    458 	CS_BEGIN;
    459 	if (pdisp == PDUDISP_WAIT) {
    460 		ccb->pdu_waiting = pdu;
    461 
    462 		/* save UIO and IOVEC for retransmit */
    463 		pdu->save_uio = pdu->uio;
    464 		memcpy(pdu->save_iovec, pdu->io_vec, sizeof(pdu->save_iovec));
    465 
    466 		pdu->flags |= PDUF_BUSY;
    467 	}
    468 	/* Enqueue for sending */
    469 	pdu->flags |= PDUF_INQUEUE;
    470 
    471 	if (pdu->flags & PDUF_PRIORITY)
    472 		TAILQ_INSERT_HEAD(&conn->pdus_to_send, pdu, send_chain);
    473 	else
    474 		TAILQ_INSERT_TAIL(&conn->pdus_to_send, pdu, send_chain);
    475 
    476 	wakeup(&conn->pdus_to_send);
    477 
    478 	if (cdisp != CCBDISP_NOWAIT) {
    479 		SET_CCB_TIMEOUT(conn, ccb, COMMAND_TIMEOUT);
    480 
    481 		if (prev_cdisp <= CCBDISP_NOWAIT)
    482 			TAILQ_INSERT_TAIL(&conn->ccbs_waiting, ccb, chain);
    483 
    484 		if (cdisp == CCBDISP_WAIT)
    485 			tsleep(ccb, PWAIT, "sendpdu", 0);
    486 	}
    487 	CS_END;
    488 }
    489 
    490 
    491 /*
    492  * resend_pdu:
    493  *    Re-Enqueue a PDU that has apparently gotten lost.
    494  *
    495  *    Parameter:
    496  *          ccb      The associated CCB.
    497  */
    498 
    499 void
    500 resend_pdu(ccb_t *ccb)
    501 {
    502 	connection_t *conn = ccb->connection;
    503 	pdu_t *pdu = ccb->pdu_waiting;
    504 	int s;
    505 
    506 	s = splbio ();
    507 	if (pdu == NULL || (pdu->flags & PDUF_BUSY)) {
    508 		splx (s);
    509 		return;
    510 	}
    511 	pdu->flags |= PDUF_BUSY;
    512 	splx (s);
    513 
    514 	/* restore UIO and IOVEC */
    515 	pdu->uio = pdu->save_uio;
    516 	memcpy(pdu->io_vec, pdu->save_iovec, sizeof(pdu->io_vec));
    517 
    518 	DEBC(conn, 8, ("ReSend_pdu ccb=%p, pdu=%p\n", ccb, pdu));
    519 
    520 	s = splbio ();
    521 
    522 	/* Enqueue for sending */
    523 	pdu->flags |= PDUF_INQUEUE;
    524 
    525 	if (pdu->flags & PDUF_PRIORITY) {
    526 		TAILQ_INSERT_HEAD(&conn->pdus_to_send, pdu, send_chain);
    527 	} else {
    528 		TAILQ_INSERT_TAIL(&conn->pdus_to_send, pdu, send_chain);
    529 	}
    530 	SET_CCB_TIMEOUT(conn, ccb, COMMAND_TIMEOUT);
    531 	splx (s);
    532 
    533 	wakeup(&conn->pdus_to_send);
    534 }
    535 
    536 
    537 /*
    538  * setup_tx_uio:
    539  *    Initialize the uio structure for sending, including header,
    540  *    data (if present), padding, and Data Digest.
    541  *    Header Digest is generated in send thread.
    542  *
    543  *    Parameter:
    544  *          pdu      The PDU
    545  *          dsl      The Data Segment Length
    546  *          data     The data pointer
    547  *          read     TRUE if this is a read operation
    548  */
    549 
    550 STATIC void
    551 setup_tx_uio(pdu_t *pdu, uint32_t dsl, void *data, bool read)
    552 {
    553 	static uint8_t pad_bytes[4] = { 0 };
    554 	struct uio *uio;
    555 	int i, pad, hlen;
    556 	connection_t *conn = pdu->connection;
    557 
    558 	DEB(99, ("SetupTxUio: dlen = %d, dptr: %p, read: %d\n",
    559 			 dsl, data, read));
    560 
    561 	if (!read && dsl) {
    562 		hton3(dsl, pdu->pdu.DataSegmentLength);
    563 	}
    564 	hlen = (conn->HeaderDigest) ? BHS_SIZE + 4 : BHS_SIZE;
    565 
    566 	pdu->io_vec[0].iov_base = &pdu->pdu;
    567 	pdu->io_vec[0].iov_len = hlen;
    568 
    569 	uio = &pdu->uio;
    570 
    571 	uio->uio_iov = pdu->io_vec;
    572 	uio->uio_iovcnt = 1;
    573 	uio->uio_rw = UIO_WRITE;
    574 	uio->uio_resid = hlen;
    575 	UIO_SETUP_SYSSPACE(uio);
    576 
    577 	if (!read && dsl) {
    578 		uio->uio_iovcnt++;
    579 		pdu->io_vec[1].iov_base = data;
    580 		pdu->io_vec[1].iov_len = dsl;
    581 		uio->uio_resid += dsl;
    582 
    583 		/* Pad to next multiple of 4 */
    584 		pad = uio->uio_resid & 0x03;
    585 		if (pad) {
    586 			i = uio->uio_iovcnt++;
    587 			pad = 4 - pad;
    588 			pdu->io_vec[i].iov_base = pad_bytes;
    589 			pdu->io_vec[i].iov_len = pad;
    590 			uio->uio_resid += pad;
    591 		}
    592 
    593 		if (conn->DataDigest) {
    594 			pdu->data_digest = gen_digest_2(data, dsl, pad_bytes, pad);
    595 			i = uio->uio_iovcnt++;
    596 			pdu->io_vec[i].iov_base = &pdu->data_digest;
    597 			pdu->io_vec[i].iov_len = 4;
    598 			uio->uio_resid += 4;
    599 		}
    600 	}
    601 }
    602 
    603 /*
    604  * init_login_pdu:
    605  *    Initialize the login PDU.
    606  *
    607  *    Parameter:
    608  *          conn     The connection
    609  *          pdu      The PDU
    610  */
    611 
    612 STATIC void
    613 init_login_pdu(connection_t *conn, pdu_t *ppdu, bool next)
    614 {
    615 	pdu_header_t *pdu = &ppdu->pdu;
    616 	login_isid_t *isid = (login_isid_t *) & pdu->LUN;
    617 	uint8_t c_phase;
    618 
    619 	pdu->Opcode = IOP_Login_Request | OP_IMMEDIATE;
    620 
    621 	if (next) {
    622 		c_phase = (pdu->Flags >> CSG_SHIFT) & SG_MASK;
    623 		pdu->Flags = FLAG_TRANSIT | (c_phase << CSG_SHIFT) |
    624 					 NEXT_PHASE(c_phase);
    625 	}
    626 
    627 	memcpy(isid, &iscsi_InitiatorISID, 6);
    628 	isid->TSIH = conn->session->TSIH;
    629 
    630 	pdu->p.login_req.CID = htons(conn->id);
    631 	pdu->p.login_req.CmdSN = htonl(conn->session->CmdSN);
    632 }
    633 
    634 
    635 /*
    636  * negotiate_login:
    637  *    Control login negotiation.
    638  *
    639  *    Parameter:
    640  *          conn     The connection
    641  *          rx_pdu   The received login response PDU
    642  *          tx_ccb   The originally sent login CCB
    643  */
    644 
    645 void
    646 negotiate_login(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
    647 {
    648 	int rc;
    649 	bool next = TRUE;
    650 	pdu_t *tx_pdu;
    651 	uint8_t c_phase;
    652 
    653 	if (rx_pdu->pdu.Flags & FLAG_TRANSIT)
    654 		c_phase = rx_pdu->pdu.Flags & SG_MASK;
    655 	else
    656 		c_phase = (rx_pdu->pdu.Flags >> CSG_SHIFT) & SG_MASK;
    657 
    658 	DEB(99, ("NegotiateLogin: Flags=%x Phase=%x\n",
    659 			 rx_pdu->pdu.Flags, c_phase));
    660 
    661 	if (c_phase == SG_FULL_FEATURE_PHASE) {
    662 		session_t *sess = conn->session;
    663 
    664 		if (!sess->TSIH)
    665 			sess->TSIH = ((login_isid_t *) &rx_pdu->pdu.LUN)->TSIH;
    666 
    667 		if (rx_pdu->temp_data != NULL)
    668 			assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, NULL);
    669 
    670 		/* negotiated values are now valid */
    671 		set_negotiated_parameters(tx_ccb);
    672 
    673 		DEBC(conn, 5, ("Login Successful!\n"));
    674 		wake_ccb(tx_ccb);
    675 		return;
    676 	}
    677 
    678 	tx_pdu = get_pdu(conn);
    679 	if (tx_pdu == NULL)
    680 		return;
    681 
    682 	tx_pdu->pdu.Flags = c_phase << CSG_SHIFT;
    683 
    684 	switch (c_phase) {
    685 	case SG_SECURITY_NEGOTIATION:
    686 		rc = assemble_security_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
    687 		if (rc < 0)
    688 			next = FALSE;
    689 		break;
    690 
    691 	case SG_LOGIN_OPERATIONAL_NEGOTIATION:
    692 		rc = assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
    693 		break;
    694 
    695 	default:
    696 		DEBOUT(("Invalid phase %x in negotiate_login\n", c_phase));
    697 		rc = ISCSI_STATUS_TARGET_ERROR;
    698 		break;
    699 	}
    700 
    701 	if (rc > 0) {
    702 		tx_ccb->status = rc;
    703 		wake_ccb(tx_ccb);
    704 		free_pdu(tx_pdu);
    705 	} else {
    706 		init_login_pdu(conn, tx_pdu, next);
    707 		setup_tx_uio(tx_pdu, tx_pdu->temp_data_len, tx_pdu->temp_data, FALSE);
    708 		send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
    709 	}
    710 }
    711 
    712 
    713 /*
    714  * init_text_pdu:
    715  *    Initialize the text PDU.
    716  *
    717  *    Parameter:
    718  *          conn     The connection
    719  *          ppdu     The transmit PDU
    720  *          rx_pdu   The received PDU if this is an unsolicited negotiation
    721  */
    722 
    723 STATIC void
    724 init_text_pdu(connection_t *conn, pdu_t *ppdu, pdu_t *rx_pdu)
    725 {
    726 	pdu_header_t *pdu = &ppdu->pdu;
    727 
    728 	pdu->Opcode = IOP_Text_Request | OP_IMMEDIATE;
    729 	pdu->Flags = FLAG_FINAL;
    730 
    731 	if (rx_pdu != NULL) {
    732 		pdu->p.text_req.TargetTransferTag =
    733 			rx_pdu->pdu.p.text_rsp.TargetTransferTag;
    734 		pdu->LUN = rx_pdu->pdu.LUN;
    735 	} else
    736 		pdu->p.text_req.TargetTransferTag = 0xffffffff;
    737 
    738 	pdu->p.text_req.CmdSN = htonl(conn->session->CmdSN);
    739 }
    740 
    741 
    742 /*
    743  * acknowledge_text:
    744  *    Acknowledge a continued login or text response.
    745  *
    746  *    Parameter:
    747  *          conn     The connection
    748  *          rx_pdu   The received login/text response PDU
    749  *          tx_ccb   The originally sent login/text request CCB
    750  */
    751 
    752 void
    753 acknowledge_text(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
    754 {
    755 	pdu_t *tx_pdu;
    756 
    757 	tx_pdu = get_pdu(conn);
    758 	if (tx_pdu == NULL)
    759 		return;
    760 
    761 	if (rx_pdu != NULL &&
    762 		(rx_pdu->pdu.Opcode & OPCODE_MASK) == IOP_Login_Request)
    763 		init_login_pdu(conn, tx_pdu, FALSE);
    764 	else
    765 		init_text_pdu(conn, tx_pdu, rx_pdu);
    766 
    767 	setup_tx_uio(tx_pdu, 0, NULL, FALSE);
    768 	send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
    769 }
    770 
    771 
    772 /*
    773  * start_text_negotiation:
    774  *    Handle target request to negotiate (via asynch event)
    775  *
    776  *    Parameter:
    777  *          conn     The connection
    778  */
    779 
    780 void
    781 start_text_negotiation(connection_t *conn)
    782 {
    783 	pdu_t *pdu;
    784 	ccb_t *ccb;
    785 
    786 	ccb = get_ccb(conn, TRUE);
    787 	if (ccb == NULL)
    788 		return;
    789 	pdu = get_pdu(conn);
    790 	if (pdu == NULL) {
    791 		free_ccb(ccb);
    792 		return;
    793 	}
    794 
    795 	if (init_text_parameters(conn, ccb)) {
    796 		free_ccb(ccb);
    797 		free_pdu(pdu);
    798 		return;
    799 	}
    800 
    801 	init_text_pdu(conn, pdu, NULL);
    802 	setup_tx_uio(pdu, 0, NULL, FALSE);
    803 	send_pdu(ccb, pdu, CCBDISP_FREE, PDUDISP_WAIT);
    804 }
    805 
    806 
    807 /*
    808  * negotiate_text:
    809  *    Handle received text negotiation.
    810  *
    811  *    Parameter:
    812  *          conn     The connection
    813  *          rx_pdu   The received text response PDU
    814  *          tx_ccb   The original CCB
    815  */
    816 
    817 void
    818 negotiate_text(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb)
    819 {
    820 	int rc;
    821 	pdu_t *tx_pdu;
    822 
    823 	if (tx_ccb->flags & CCBF_SENDTARGET) {
    824 		if (!(rx_pdu->pdu.Flags & FLAG_FINAL)) {
    825 			handle_connection_error(conn, ISCSI_STATUS_PROTOCOL_ERROR,
    826 									LOGOUT_CONNECTION);
    827 			return;
    828 		}
    829 		/* transfer ownership of text to CCB */
    830 		tx_ccb->text_data = rx_pdu->temp_data;
    831 		tx_ccb->text_len = rx_pdu->temp_data_len;
    832 		rx_pdu->temp_data = NULL;
    833 		wake_ccb(tx_ccb);
    834 	} else {
    835 		if (!(rx_pdu->pdu.Flags & FLAG_FINAL))
    836 			tx_pdu = get_pdu(conn);
    837 		else
    838 			tx_pdu = NULL;
    839 
    840 		rc = assemble_negotiation_parameters(conn, tx_ccb, rx_pdu, tx_pdu);
    841 		if (rc) {
    842 			if (tx_pdu != NULL)
    843 				free_pdu(tx_pdu);
    844 
    845 			handle_connection_error(conn, rc, LOGOUT_CONNECTION);
    846 		} else if (tx_pdu != NULL) {
    847 			init_text_pdu(conn, tx_pdu, rx_pdu);
    848 			setup_tx_uio(tx_pdu, tx_pdu->temp_data_len, tx_pdu->temp_data,
    849 						 FALSE);
    850 			send_pdu(tx_ccb, tx_pdu, CCBDISP_NOWAIT, PDUDISP_FREE);
    851 		} else {
    852 			set_negotiated_parameters(tx_ccb);
    853 			wake_ccb(tx_ccb);
    854 		}
    855 	}
    856 }
    857 
    858 
    859 /*
    860  * send_send_targets:
    861  *    Send out a SendTargets text request.
    862  *    The result is stored in the fields in the session structure.
    863  *
    864  *    Parameter:
    865  *          session  The session
    866  *          key      The text key to use
    867  *
    868  *    Returns:    0 on success, else an error code.
    869  */
    870 
    871 int
    872 send_send_targets(session_t *session, uint8_t *key)
    873 {
    874 	ccb_t *ccb;
    875 	pdu_t *pdu;
    876 	int rc = 0;
    877 	connection_t *conn;
    878 
    879 	DEB(9, ("Send_send_targets\n"));
    880 
    881 	conn = assign_connection(session, TRUE);
    882 	if (conn == NULL || conn->terminating || conn->state != ST_FULL_FEATURE)
    883 		return (conn != NULL && conn->terminating) ? conn->terminating
    884 			: ISCSI_STATUS_CONNECTION_FAILED;
    885 
    886 	ccb = get_ccb(conn, TRUE);
    887 	if (ccb == NULL)
    888 		return conn->terminating;
    889 	pdu = get_pdu(conn);
    890 	if (pdu == NULL) {
    891 		free_ccb(ccb);
    892 		return conn->terminating;
    893 	}
    894 
    895 	ccb->flags |= CCBF_SENDTARGET;
    896 
    897 	if ((rc = assemble_send_targets(pdu, key)) != 0) {
    898 		free_ccb(ccb);
    899 		free_pdu(pdu);
    900 		return rc;
    901 	}
    902 
    903 	init_text_pdu(conn, pdu, NULL);
    904 
    905 	setup_tx_uio(pdu, pdu->temp_data_len, pdu->temp_data, FALSE);
    906 	send_pdu(ccb, pdu, CCBDISP_WAIT, PDUDISP_WAIT);
    907 
    908 	rc = ccb->status;
    909 	if (!rc) {
    910 		/* transfer ownership of data */
    911 		session->target_list = ccb->text_data;
    912 		session->target_list_len = ccb->text_len;
    913 		ccb->text_data = NULL;
    914 	}
    915 	free_ccb(ccb);
    916 	return rc;
    917 }
    918 
    919 
    920 /*
    921  * send_nop_out:
    922  *    Send nop out request.
    923  *
    924  *    Parameter:
    925  *          conn     The connection
    926  *          rx_pdu   The received Nop-In PDU
    927  *
    928  *    Returns:    0 on success, else an error code.
    929  */
    930 
    931 int
    932 send_nop_out(connection_t *conn, pdu_t *rx_pdu)
    933 {
    934 	ccb_t *ccb;
    935 	pdu_t *ppdu;
    936 	pdu_header_t *pdu;
    937 
    938 	DEBC(conn, 10, ("Send NOP_Out rx_pdu=%p\n", rx_pdu));
    939 
    940 	if (rx_pdu != NULL) {
    941 		ccb = NULL;
    942 		ppdu = get_pdu(conn);
    943 		if (ppdu == NULL)
    944 			return 1;
    945 	} else {
    946 		ccb = get_ccb(conn, FALSE);
    947 		if (ccb == NULL) {
    948 			DEBOUT(("Can't get CCB in send_nop_out\n"));
    949 			return 1;
    950 		}
    951 		ppdu = get_pdu_c(conn, FALSE);
    952 		if (ppdu == NULL) {
    953 			free_ccb(ccb);
    954 			DEBOUT(("Can't get PDU in send_nop_out\n"));
    955 			return 1;
    956 		}
    957 	}
    958 
    959 	pdu = &ppdu->pdu;
    960 	pdu->Flags = FLAG_FINAL;
    961 	pdu->Opcode = IOP_NOP_Out | OP_IMMEDIATE;
    962 
    963 	if (rx_pdu != NULL) {
    964 		pdu->p.nop_out.TargetTransferTag =
    965 			rx_pdu->pdu.p.nop_in.TargetTransferTag;
    966 		pdu->InitiatorTaskTag = rx_pdu->pdu.InitiatorTaskTag;
    967 		pdu->p.nop_out.CmdSN = htonl(conn->session->CmdSN);
    968 		pdu->LUN = rx_pdu->pdu.LUN;
    969 	} else {
    970 		pdu->p.nop_out.TargetTransferTag = 0xffffffff;
    971 		ccb->CmdSN = ccb->session->CmdSN;
    972 		pdu->p.nop_out.CmdSN = htonl(ccb->CmdSN);
    973 	}
    974 
    975 	setup_tx_uio(ppdu, 0, NULL, FALSE);
    976 	send_pdu(ccb, ppdu, (rx_pdu != NULL) ? CCBDISP_NOWAIT : CCBDISP_FREE,
    977 			 PDUDISP_FREE);
    978 	return 0;
    979 }
    980 
    981 
    982 /*
    983  * snack_missing:
    984  *    Send SNACK request for missing data.
    985  *
    986  *    Parameter:
    987  *          conn     The connection
    988  *          ccb      The task's CCB (for Data NAK only)
    989  *          type     The SNACK type
    990  *          BegRun   The BegRun field
    991  *          RunLength   The RunLength field
    992  */
    993 
    994 void
    995 snack_missing(connection_t *conn, ccb_t *ccb, uint8_t type,
    996 			  uint32_t BegRun, uint32_t RunLength)
    997 {
    998 	pdu_t *ppdu;
    999 	pdu_header_t *pdu;
   1000 
   1001 	PDEBC(conn, 1, ("SNACK Missing type = %d, BegRun %d RunLength %d\n",
   1002 			 type, BegRun, RunLength));
   1003 
   1004 	ppdu = get_pdu(conn);
   1005 	if (ppdu == NULL)
   1006 		return;
   1007 	pdu = &ppdu->pdu;
   1008 	pdu->Opcode = IOP_SNACK_Request;
   1009 	pdu->Flags = FLAG_FINAL | type;
   1010 
   1011 	pdu->InitiatorTaskTag = (type == SNACK_DATA_NAK) ? ccb->ITT : 0xffffffff;
   1012 	pdu->p.snack.TargetTransferTag = 0xffffffff;
   1013 	pdu->p.snack.BegRun = htonl(BegRun);
   1014 	pdu->p.snack.RunLength = htonl(RunLength);
   1015 
   1016 	ppdu->flags = PDUF_PRIORITY;
   1017 
   1018 	setup_tx_uio(ppdu, 0, NULL, FALSE);
   1019 	send_pdu(NULL, ppdu, CCBDISP_NOWAIT, PDUDISP_FREE);
   1020 }
   1021 
   1022 
   1023 /*
   1024  * send_snack:
   1025  *    Send SNACK request.
   1026  *
   1027  *    Parameter:
   1028  *          conn     The connection
   1029  *          rx_pdu   The received data in PDU
   1030  *          tx_ccb   The original command CCB (required for Data ACK only)
   1031  *          type     The SNACK type
   1032  *
   1033  *    Returns:    0 on success, else an error code.
   1034  */
   1035 
   1036 void
   1037 send_snack(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb, uint8_t type)
   1038 {
   1039 	pdu_t *ppdu;
   1040 	pdu_header_t *pdu;
   1041 
   1042 	PDEBC(conn, 1, ("Send SNACK type = %d\n", type));
   1043 
   1044 	ppdu = get_pdu(conn);
   1045 	if (ppdu == NULL)
   1046 		return;
   1047 	pdu = &ppdu->pdu;
   1048 	pdu->Opcode = IOP_SNACK_Request;
   1049 	pdu->Flags = FLAG_FINAL | type;
   1050 
   1051 	switch (type) {
   1052 	case SNACK_DATA_NAK:
   1053 		pdu->InitiatorTaskTag = rx_pdu->pdu.InitiatorTaskTag;
   1054 		pdu->p.snack.TargetTransferTag = 0xffffffff;
   1055 		pdu->p.snack.BegRun = rx_pdu->pdu.p.data_in.DataSN;
   1056 		pdu->p.snack.RunLength = htonl(1);
   1057 		break;
   1058 
   1059 	case SNACK_STATUS_NAK:
   1060 		pdu->InitiatorTaskTag = 0xffffffff;
   1061 		pdu->p.snack.TargetTransferTag = 0xffffffff;
   1062 		pdu->p.snack.BegRun = rx_pdu->pdu.p.response.StatSN;
   1063 		pdu->p.snack.RunLength = htonl(1);
   1064 		break;
   1065 
   1066 	case SNACK_DATA_ACK:
   1067 		pdu->InitiatorTaskTag = 0xffffffff;
   1068 		pdu->p.snack.TargetTransferTag =
   1069 			rx_pdu->pdu.p.data_in.TargetTransferTag;
   1070 		pdu->p.snack.BegRun = tx_ccb->DataSN_buf.ExpSN;
   1071 		pdu->p.snack.RunLength = 0;
   1072 		break;
   1073 
   1074 	default:
   1075 		DEBOUT(("Invalid type %d in send_snack\n", type));
   1076 		return;
   1077 	}
   1078 
   1079 	pdu->LUN = rx_pdu->pdu.LUN;
   1080 
   1081 	ppdu->flags = PDUF_PRIORITY;
   1082 
   1083 	setup_tx_uio(ppdu, 0, NULL, FALSE);
   1084 	send_pdu(NULL, ppdu, CCBDISP_NOWAIT, PDUDISP_FREE);
   1085 }
   1086 
   1087 
   1088 /*
   1089  * send_login:
   1090  *    Send login request.
   1091  *
   1092  *    Parameter:
   1093  *          conn     The connection
   1094  *          par      The login parameters (for negotiation)
   1095  *
   1096  *    Returns:       0 on success, else an error code.
   1097  */
   1098 
   1099 int
   1100 send_login(connection_t *conn)
   1101 {
   1102 	ccb_t *ccb;
   1103 	pdu_t *pdu;
   1104 	int rc;
   1105 
   1106 	DEBC(conn, 9, ("Send_login\n"));
   1107 	ccb = get_ccb(conn, TRUE);
   1108 	/* only if terminating (which couldn't possibly happen here, but...) */
   1109 	if (ccb == NULL)
   1110 		return conn->terminating;
   1111 	pdu = get_pdu(conn);
   1112 	if (pdu == NULL) {
   1113 		free_ccb(ccb);
   1114 		return conn->terminating;
   1115 	}
   1116 
   1117 	if ((rc = assemble_login_parameters(conn, ccb, pdu)) <= 0) {
   1118 		init_login_pdu(conn, pdu, !rc);
   1119 		setup_tx_uio(pdu, pdu->temp_data_len, pdu->temp_data, FALSE);
   1120 		send_pdu(ccb, pdu, CCBDISP_WAIT, PDUDISP_FREE);
   1121 		rc = ccb->status;
   1122 	} else {
   1123 		free_pdu(pdu);
   1124 	}
   1125 	free_ccb(ccb);
   1126 	return rc;
   1127 }
   1128 
   1129 
   1130 /*
   1131  * send_logout:
   1132  *    Send logout request.
   1133  *	  NOTE: This function does not wait for the logout to complete.
   1134  *
   1135  *    Parameter:
   1136  *          conn	The connection
   1137  *			refconn	The referenced connection
   1138  *			reason	The reason code
   1139  *			wait	Wait for completion if TRUE
   1140  *
   1141  *    Returns:       0 on success (logout sent), else an error code.
   1142  */
   1143 
   1144 int
   1145 send_logout(connection_t *conn, connection_t *refconn, int reason,
   1146 			bool wait)
   1147 {
   1148 	ccb_t *ccb;
   1149 	pdu_t *ppdu;
   1150 	pdu_header_t *pdu;
   1151 
   1152 	DEBC(conn, 5, ("Send_logout\n"));
   1153 	ccb = get_ccb(conn, TRUE);
   1154 	/* can only happen if terminating... */
   1155 	if (ccb == NULL)
   1156 		return conn->terminating;
   1157 	ppdu = get_pdu(conn);
   1158 	if (ppdu == NULL) {
   1159 		free_ccb(ccb);
   1160 		return conn->terminating;
   1161 	}
   1162 
   1163 	pdu = &ppdu->pdu;
   1164 	pdu->Opcode = IOP_Logout_Request | OP_IMMEDIATE;
   1165 
   1166 	pdu->Flags = FLAG_FINAL | reason;
   1167 	ccb->CmdSN = conn->session->CmdSN;
   1168 	pdu->p.logout_req.CmdSN = htonl(ccb->CmdSN);
   1169 	if (reason > 0)
   1170 		pdu->p.logout_req.CID = htons(refconn->id);
   1171 
   1172 	ccb->par = refconn;
   1173 	if (refconn != conn) {
   1174 		ccb->flags |= CCBF_OTHERCONN;
   1175 	} else {
   1176 		conn->state = ST_LOGOUT_SENT;
   1177 		conn->loggedout = LOGOUT_SENT;
   1178 	}
   1179 
   1180 	setup_tx_uio(ppdu, 0, NULL, FALSE);
   1181 
   1182 	send_pdu(ccb, ppdu, (wait) ? CCBDISP_WAIT : CCBDISP_FREE, PDUDISP_FREE);
   1183 
   1184 	if (wait) {
   1185 		int rc = ccb->status;
   1186 		free_ccb (ccb);
   1187 		return rc;
   1188 	}
   1189 	return 0;
   1190 }
   1191 
   1192 
   1193 /*
   1194  * send_task_management:
   1195  *    Send task management request.
   1196  *
   1197  *    Parameter:
   1198  *          conn     The connection
   1199  *          ref_ccb  The referenced command (NULL if none)
   1200  *          xs       The scsipi command structure (NULL if not a scsipi request)
   1201  *          function The function code
   1202  *
   1203  *    Returns:       0 on success, else an error code.
   1204  */
   1205 
   1206 int
   1207 send_task_management(connection_t *conn, ccb_t *ref_ccb, struct scsipi_xfer *xs,
   1208 					 int function)
   1209 {
   1210 	ccb_t *ccb;
   1211 	pdu_t *ppdu;
   1212 	pdu_header_t *pdu;
   1213 
   1214 	DEBC(conn, 5, ("Send_task_management, ref_ccb=%p, func = %d\n",
   1215 			ref_ccb, function));
   1216 
   1217 	if (function == TASK_REASSIGN && conn->session->ErrorRecoveryLevel < 2)
   1218 		return ISCSI_STATUS_CANT_REASSIGN;
   1219 
   1220 	ccb = get_ccb(conn, xs == NULL);
   1221 	/* can only happen if terminating... */
   1222 	if (ccb == NULL)
   1223 		return conn->terminating;
   1224 	ppdu = get_pdu(conn);
   1225 	if (ppdu == NULL) {
   1226 		free_ccb(ccb);
   1227 		return conn->terminating;
   1228 	}
   1229 
   1230 	ccb->xs = xs;
   1231 
   1232 	pdu = &ppdu->pdu;
   1233 	pdu->Opcode = IOP_SCSI_Task_Management | OP_IMMEDIATE;
   1234 	pdu->Flags = FLAG_FINAL | function;
   1235 
   1236 	ccb->CmdSN = conn->session->CmdSN;
   1237 	pdu->p.task_req.CmdSN = htonl(ccb->CmdSN);
   1238 
   1239 	if (ref_ccb != NULL) {
   1240 		pdu->p.task_req.ReferencedTaskTag = ref_ccb->ITT;
   1241 		pdu->p.task_req.RefCmdSN = htonl(ref_ccb->CmdSN);
   1242 		pdu->p.task_req.ExpDataSN = htonl(ref_ccb->DataSN_buf.ExpSN);
   1243 	} else
   1244 		pdu->p.task_req.ReferencedTaskTag = 0xffffffff;
   1245 
   1246 	ppdu->flags |= PDUF_PRIORITY;
   1247 
   1248 	setup_tx_uio(ppdu, 0, NULL, FALSE);
   1249 	send_pdu(ccb, ppdu, (xs) ? CCBDISP_SCSIPI : CCBDISP_WAIT, PDUDISP_FREE);
   1250 
   1251 	if (xs == NULL) {
   1252 		int rc = ccb->status;
   1253 		free_ccb(ccb);
   1254 		return rc;
   1255 	}
   1256 	return 0;
   1257 }
   1258 
   1259 
   1260 /*
   1261  * send_data_out:
   1262  *    Send data to target in response to an R2T or as unsolicited data.
   1263  *
   1264  *    Parameter:
   1265  *          conn     The connection
   1266  *          rx_pdu   The received R2T PDU (NULL if unsolicited)
   1267  *          tx_ccb   The originally sent command CCB
   1268  *          waitok   Whether it's OK to wait for an available PDU or not
   1269  */
   1270 
   1271 int
   1272 send_data_out(connection_t *conn, pdu_t *rx_pdu, ccb_t *tx_ccb,
   1273 			  ccb_disp_t disp, bool waitok)
   1274 {
   1275 	pdu_header_t *pdu;
   1276 	uint32_t totlen, len, offs, sn;
   1277 	pdu_t *tx_pdu;
   1278 
   1279 	assert(conn->max_transfer != 0);
   1280 
   1281 	if (rx_pdu) {
   1282 		offs = ntohl(rx_pdu->pdu.p.r2t.BufferOffset);
   1283 		totlen = ntohl(rx_pdu->pdu.p.r2t.DesiredDataTransferLength);
   1284 	} else {
   1285 		offs = conn->max_firstimmed;
   1286 		totlen = min(conn->max_firstdata - offs, tx_ccb->data_len - offs);
   1287 	}
   1288 	sn = 0;
   1289 
   1290 	while (totlen) {
   1291 		len = min(totlen, conn->max_transfer);
   1292 
   1293 		tx_pdu = get_pdu_c(conn, waitok);
   1294 		if (tx_pdu == NULL) {
   1295 			DEBOUT(("No PDU in send_data_out\n"));
   1296 
   1297 			tx_ccb->status = ISCSI_STATUS_NO_RESOURCES;
   1298 			handle_connection_error(conn, ISCSI_STATUS_NO_RESOURCES, NO_LOGOUT);
   1299 
   1300 			return ISCSI_STATUS_NO_RESOURCES;
   1301 		}
   1302 
   1303 		totlen -= len;
   1304 		pdu = &tx_pdu->pdu;
   1305 		pdu->Opcode = IOP_SCSI_Data_out;
   1306 		if (!totlen)
   1307 			pdu->Flags = FLAG_FINAL;
   1308 
   1309 		if (rx_pdu != NULL)
   1310 			pdu->p.data_out.TargetTransferTag =
   1311 				rx_pdu->pdu.p.r2t.TargetTransferTag;
   1312 		else
   1313 			pdu->p.data_out.TargetTransferTag = 0xffffffff;
   1314 		pdu->p.data_out.BufferOffset = htonl(offs);
   1315 		pdu->p.data_out.DataSN = htonl(sn);
   1316 
   1317 		PERF_PDUSET(tx_pdu, tx_ccb, PERF_BEGIN_PDUWRITEDATA);
   1318 
   1319 		DEBC(conn, 10, ("Send DataOut: DataSN %d, len %d offs %x totlen %d\n",
   1320 				sn, len, offs, totlen));
   1321 
   1322 		setup_tx_uio(tx_pdu, len, tx_ccb->data_ptr + offs, FALSE);
   1323 
   1324 		send_pdu(tx_ccb, tx_pdu, (totlen) ? CCBDISP_NOWAIT : disp, PDUDISP_FREE);
   1325 
   1326 		sn++;
   1327 		offs += len;
   1328 	}
   1329 	return 0;
   1330 }
   1331 
   1332 
   1333 /*
   1334  * send_command:
   1335  *    Send a SCSI command request.
   1336  *
   1337  *    Parameter:
   1338  *          CCB      The CCB
   1339  *          disp     The CCB disposition
   1340  */
   1341 
   1342 void
   1343 send_command(ccb_t *ccb, ccb_disp_t disp, bool waitok, bool immed)
   1344 {
   1345 	uint32_t totlen, len;
   1346 	connection_t *conn = ccb->connection;
   1347 	session_t *sess = ccb->session;
   1348 	pdu_t *ppdu;
   1349 	pdu_header_t *pdu;
   1350 	int s;
   1351 
   1352 	PERF_BEGIN(ccb, !waitok);
   1353 
   1354 	if (!waitok) {
   1355 		s = splbio();
   1356 		if (/*CONSTCOND*/ISCSI_TROTTLING_ENABLED &&
   1357 		    /*CONSTCOND*/ISCSI_SERVER_TRUSTED &&
   1358 		    !sn_a_le_b(sess->CmdSN, sess->MaxCmdSN)) {
   1359 			ccb->disp = disp;
   1360 			TAILQ_INSERT_TAIL(&sess->ccbs_throttled, ccb, chain);
   1361 			splx(s);
   1362 			PDEBOUT(("Throttling S - CmdSN = %d, MaxCmdSN = %d\n",
   1363 					 sess->CmdSN, sess->MaxCmdSN));
   1364 			return;
   1365 		}
   1366 		splx(s);
   1367 		ppdu = get_pdu_c(conn, FALSE);
   1368 		if (ppdu == NULL) {
   1369 			ccb->status = ISCSI_STATUS_NO_RESOURCES;
   1370 			iscsi_done(ccb);
   1371 			return;
   1372 		}
   1373 	} else {
   1374 		s = splbio();
   1375 		while (/*CONSTCOND*/ISCSI_TROTTLING_ENABLED &&
   1376 		       /*CONSTCOND*/ISCSI_SERVER_TRUSTED &&
   1377 		       !sn_a_le_b(sess->CmdSN, sess->MaxCmdSN)) {
   1378 			ccb->disp = disp;
   1379 			ccb->flags |= CCBF_WAITING;
   1380 			TAILQ_INSERT_TAIL(&sess->ccbs_throttled, ccb, chain);
   1381 			PDEBOUT(("Throttling W - CmdSN = %d, MaxCmdSN = %d\n",
   1382 					 sess->CmdSN, sess->MaxCmdSN));
   1383 			tsleep(ccb, PWAIT, "waitMaxCmd", 0);
   1384 			splbio();
   1385 		}
   1386 		splx(s);
   1387 		ppdu = get_pdu(conn);
   1388 	}
   1389 
   1390 	pdu = &ppdu->pdu;
   1391 	pdu->LUN = htonq(ccb->lun);
   1392 	memcpy(pdu->p.command.SCSI_CDB, ccb->cmd, ccb->cmdlen);
   1393 	totlen = len = ccb->data_len;
   1394 	pdu->Opcode = IOP_SCSI_Command;
   1395 	if (immed)
   1396 		pdu->Opcode |= OP_IMMEDIATE;
   1397 	pdu->p.command.ExpectedDataTransferLength = htonl(totlen);
   1398 
   1399 
   1400 	if (totlen) {
   1401 		if (ccb->data_in) {
   1402 			pdu->Flags = FLAG_READ;
   1403 			totlen = 0;
   1404 		} else {
   1405 			pdu->Flags = FLAG_WRITE;
   1406 			/* immediate data we can send */
   1407 			len = min(totlen, conn->max_firstimmed);
   1408 
   1409 			/* can we send more unsolicited data ? */
   1410 			totlen = conn->max_firstdata ? totlen - len : 0;
   1411 		}
   1412 	}
   1413 
   1414 	if (!totlen)
   1415 		pdu->Flags |= FLAG_FINAL;
   1416 
   1417 	if (ccb->data_in)
   1418 		init_sernum(&ccb->DataSN_buf);
   1419 
   1420 	ccb->sense_len_got = 0;
   1421 	ccb->xfer_len = 0;
   1422 	ccb->residual = 0;
   1423 	ccb->flags |= CCBF_REASSIGN;
   1424 
   1425 	s = splbio();
   1426 	ccb->CmdSN = sess->CmdSN;
   1427 	if (!immed)
   1428 		sess->CmdSN++;
   1429 	splx(s);
   1430 
   1431 	pdu->p.command.CmdSN = htonl(ccb->CmdSN);
   1432 
   1433 	DEBC(conn, 10, ("Send Command: CmdSN %d, data_in %d, len %d, totlen %d\n",
   1434 			ccb->CmdSN, ccb->data_in, len, totlen));
   1435 
   1436 	PERF_PDUSET(ppdu, ccb, PERF_BEGIN_PDUWRITECMD);
   1437 
   1438 	setup_tx_uio(ppdu, len, ccb->data_ptr, ccb->data_in);
   1439 
   1440 	send_pdu(ccb, ppdu, (totlen) ? CCBDISP_DEFER : disp, PDUDISP_WAIT);
   1441 
   1442 	if (totlen)
   1443 		send_data_out(conn, NULL, ccb, disp, waitok);
   1444 }
   1445 
   1446 
   1447 /*
   1448  * send_run_xfer:
   1449  *    Handle a SCSI command transfer request from scsipi.
   1450  *
   1451  *    Parameter:
   1452  *          session  The session
   1453  *          xs       The transfer parameters
   1454  */
   1455 
   1456 void
   1457 send_run_xfer(session_t *session, struct scsipi_xfer *xs)
   1458 {
   1459 	ccb_t *ccb;
   1460 	connection_t *conn;
   1461 	bool waitok;
   1462 
   1463 	waitok = !(xs->xs_control & XS_CTL_NOSLEEP);
   1464 
   1465 	DEB(10, ("RunXfer: flags=%x, data=%p, datalen=%d, resid=%d, cmdlen=%d, "
   1466 			"waitok=%d\n", xs->xs_control, xs->data, xs->datalen,
   1467 			xs->resid, xs->cmdlen, waitok));
   1468 
   1469 	conn = assign_connection(session, waitok);
   1470 
   1471 	if (conn == NULL || conn->terminating || conn->state != ST_FULL_FEATURE) {
   1472 		xs->error = XS_SELTIMEOUT;
   1473 		DEBC(conn, 10, ("run_xfer on dead connection\n"));
   1474 		scsipi_done(xs);
   1475 		return;
   1476 	}
   1477 
   1478 	if (xs->xs_control & XS_CTL_RESET) {
   1479 		if (send_task_management(conn, NULL, xs, TARGET_WARM_RESET)) {
   1480 			xs->error = XS_SELTIMEOUT;
   1481 			scsipi_done(xs);
   1482 		}
   1483 		return;
   1484 	}
   1485 
   1486 	ccb = get_ccb(conn, waitok);
   1487 	if (ccb == NULL) {
   1488 		xs->error = XS_RESOURCE_SHORTAGE;
   1489 		DEBC(conn, 0, ("No CCB in run_xfer\n"));
   1490 		scsipi_done(xs);
   1491 		return;
   1492 	}
   1493 	/* copy parameters into CCB for easier access */
   1494 	ccb->xs = xs;
   1495 
   1496 	ccb->data_in = (xs->xs_control & XS_CTL_DATA_IN) != 0;
   1497 	ccb->data_len = (uint32_t) xs->datalen;
   1498 	ccb->data_ptr = xs->data;
   1499 
   1500 	ccb->sense_len_req = sizeof(xs->sense.scsi_sense);
   1501 	ccb->sense_ptr = &xs->sense;
   1502 
   1503 	ccb->lun = (uint64_t) xs->xs_periph->periph_lun << 48;
   1504 	ccb->cmd = (uint8_t *) xs->cmd;
   1505 	ccb->cmdlen = xs->cmdlen;
   1506 	DEB(10, ("RunXfer: Periph_lun = %d, cmd[1] = %x, cmdlen = %d\n",
   1507 			xs->xs_periph->periph_lun, ccb->cmd[1], xs->cmdlen));
   1508 
   1509 #ifdef LUN_1
   1510 	ccb->lun += 0x1000000000000LL;
   1511 	ccb->cmd[1] += 0x10;
   1512 #endif
   1513 	send_command(ccb, CCBDISP_SCSIPI, waitok, FALSE);
   1514 }
   1515 
   1516 
   1517 #ifndef ISCSI_MINIMAL
   1518 /*
   1519  * send_io_command:
   1520  *    Handle a SCSI io command request from user space.
   1521  *
   1522  *    Parameter:
   1523  *          session 	The session
   1524  *          lun		    The LUN to use
   1525  *          req			The SCSI request block
   1526  *			immed		Immediate command if TRUE
   1527  *			conn_id		Assign to this connection ID if nonzero
   1528  */
   1529 
   1530 int
   1531 send_io_command(session_t *session, uint64_t lun, scsireq_t *req,
   1532 				bool immed, uint32_t conn_id)
   1533 {
   1534 	ccb_t *ccb;
   1535 	connection_t *conn;
   1536 	int rc;
   1537 
   1538 	DEB(9, ("IoCommand: lun=%x, datalen=%d, cmdlen=%d, immed=%d, cid=%d\n",
   1539 			(int) lun, (int) req->datalen, (int) req->cmdlen, immed, conn_id));
   1540 
   1541 	conn = (conn_id) ? find_connection(session, conn_id)
   1542 					 : assign_connection(session, TRUE);
   1543 
   1544 	if (conn == NULL || conn->terminating || conn->state != ST_FULL_FEATURE) {
   1545 		DEBOUT(("io_command on dead connection (state = %d)\n",
   1546 				(conn != NULL) ? conn->state : -1));
   1547 		return ISCSI_STATUS_INVALID_CONNECTION_ID;
   1548 	}
   1549 
   1550 	ccb = get_ccb(conn, TRUE);
   1551 	if (ccb == NULL) {
   1552 		DEBOUT(("No CCB in io_command\n"));
   1553 		return ISCSI_STATUS_NO_RESOURCES;
   1554 	}
   1555 
   1556 	ccb->data_in = (req->flags & SCCMD_READ) != 0;
   1557 	ccb->data_len = (uint32_t) req->datalen;
   1558 	ccb->data_ptr = req->databuf;
   1559 
   1560 	ccb->sense_len_req = req->senselen;
   1561 	ccb->sense_ptr = &req->sense;
   1562 
   1563 	ccb->lun = lun;
   1564 	ccb->cmd = (uint8_t *) req->cmd;
   1565 	ccb->cmdlen = req->cmdlen;
   1566 	DEBC(conn, 10, ("IoCommand: cmd[1] = %x, cmdlen = %d\n",
   1567 			 ccb->cmd[1], ccb->cmdlen));
   1568 
   1569 	send_command(ccb, CCBDISP_WAIT, TRUE, immed);
   1570 
   1571 	rc = ccb->status;
   1572 
   1573 	req->senselen_used = ccb->sense_len_got;
   1574 	req->datalen_used = req->datalen - ccb->residual;
   1575 
   1576 	free_ccb(ccb);
   1577 
   1578 	return rc;
   1579 }
   1580 #endif
   1581 
   1582 
   1583 /*****************************************************************************
   1584  * Timeout handlers
   1585  *****************************************************************************/
   1586 /*
   1587  * connection_timeout:
   1588  *    Handle prolonged silence on a connection by checking whether
   1589  *    it's still alive.
   1590  *    This has the side effect of discovering missing status or lost commands
   1591  *    before those time out.
   1592  *
   1593  *    Parameter:
   1594  *          par      The connection
   1595  */
   1596 
   1597 void
   1598 connection_timeout(void *par)
   1599 {
   1600 	connection_t *conn = (connection_t *) par;
   1601 
   1602 	PDEBC(conn, 1, ("Connection Timeout, num_timeouts=%d\n",
   1603 					conn->num_timeouts));
   1604 
   1605 	if (++conn->num_timeouts > MAX_CONN_TIMEOUTS)
   1606 		handle_connection_error(conn, ISCSI_STATUS_TIMEOUT, NO_LOGOUT);
   1607 	else {
   1608 		if (conn->state == ST_FULL_FEATURE)
   1609 			send_nop_out(conn, NULL);
   1610 
   1611 		SET_CONN_TIMEOUT(conn, CONNECTION_TIMEOUT);
   1612 	}
   1613 }
   1614 
   1615 /*
   1616  * ccb_timeout:
   1617  *    Handle timeout of a sent command.
   1618  *
   1619  *    Parameter:
   1620  *          par      The CCB
   1621  */
   1622 
   1623 void
   1624 ccb_timeout(void *par)
   1625 {
   1626 	ccb_t *ccb = (ccb_t *) par;
   1627 	connection_t *conn = ccb->connection;
   1628 	PDEBC(conn, 1, ("CCB Timeout, ccb=%x, num_timeouts=%d\n",
   1629 			 (int) ccb, ccb->num_timeouts));
   1630 
   1631 	ccb->total_tries++;
   1632 
   1633 	if (++ccb->num_timeouts > MAX_CCB_TIMEOUTS ||
   1634 		ccb->total_tries > MAX_CCB_TRIES ||
   1635 		ccb->disp <= CCBDISP_FREE ||
   1636 		!ccb->session->ErrorRecoveryLevel) {
   1637 		ccb->status = ISCSI_STATUS_TIMEOUT;
   1638 		complete_ccb(ccb);
   1639 
   1640 		handle_connection_error(conn, ISCSI_STATUS_TIMEOUT, RECOVER_CONNECTION);
   1641 	} else {
   1642 		if (ccb->data_in && ccb->xfer_len < ccb->data_len) {
   1643 			/* request resend of all missing data */
   1644 			snack_missing(conn, ccb, SNACK_DATA_NAK, 0, 0);
   1645 		} else {
   1646 			/* request resend of all missing status */
   1647 			snack_missing(conn, NULL, SNACK_STATUS_NAK, 0, 0);
   1648 		}
   1649 		SET_CCB_TIMEOUT(conn, ccb, COMMAND_TIMEOUT);
   1650 	}
   1651 }
   1652