isp.c revision 77776
1/* $FreeBSD: head/sys/dev/isp/isp.c 77776 2001-06-05 17:11:06Z mjacob $ */
2/*
3 * Machine and OS Independent (well, as best as possible)
4 * code for the Qlogic ISP SCSI adapters.
5 *
6 * Copyright (c) 1997, 1998, 1999, 2000, 2001 by Matthew Jacob
7 * Feral Software
8 * All rights reserved.
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 * 1. Redistributions of source code must retain the above copyright
14 *    notice immediately at the beginning of the file, without modification,
15 *    this list of conditions, and the following disclaimer.
16 * 2. The name of the author may not be used to endorse or promote products
17 *    derived from this software without specific prior written permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
20 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
21 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
22 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
23 * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
24 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
25 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
26 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
27 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 * SUCH DAMAGE.
30 */
31
32/*
33 * Inspiration and ideas about this driver are from Erik Moe's Linux driver
34 * (qlogicisp.c) and Dave Miller's SBus version of same (qlogicisp.c). Some
35 * ideas dredged from the Solaris driver.
36 */
37
38/*
39 * Include header file appropriate for platform we're building on.
40 */
41
42#ifdef	__NetBSD__
43#include <dev/ic/isp_netbsd.h>
44#endif
45#ifdef	__FreeBSD__
46#include <dev/isp/isp_freebsd.h>
47#endif
48#ifdef	__OpenBSD__
49#include <dev/ic/isp_openbsd.h>
50#endif
51#ifdef	__linux__
52#include "isp_linux.h"
53#endif
54#ifdef	__svr4__
55#include "isp_solaris.h"
56#endif
57
58/*
59 * General defines
60 */
61
62#define	MBOX_DELAY_COUNT	1000000 / 100
63
64/*
65 * Local static data
66 */
67static const char warnlun[] =
68    "WARNING- cannot determine Expanded LUN capability- limiting to one LUN";
69static const char portshift[] =
70    "Target %d Loop ID 0x%x (Port 0x%x) => Loop 0x%x (Port 0x%x)";
71static const char portdup[] =
72    "Target %d duplicates Target %d- killing off both";
73static const char retained[] =
74    "Retaining Loop ID 0x%x for Target %d (Port 0x%x)";
75static const char lretained[] =
76    "Retained login of Target %d (Loop ID 0x%x) Port 0x%x";
77static const char plogout[] =
78    "Logging out Target %d at Loop ID 0x%x (Port 0x%x)";
79static const char plogierr[] =
80    "Command Error in PLOGI for Port 0x%x (0x%x)";
81static const char nopdb[] =
82    "Could not get PDB for Device @ Port 0x%x";
83static const char pdbmfail1[] =
84    "PDB Loop ID info for Device @ Port 0x%x does not match up (0x%x)";
85static const char pdbmfail2[] =
86    "PDB Port info for Device @ Port 0x%x does not match up (0x%x)";
87static const char ldumped[] =
88    "Target %d (Loop ID 0x%x) Port 0x%x dumped after login info mismatch";
89static const char notresp[] =
90  "Not RESPONSE in RESPONSE Queue (type 0x%x) @ idx %d (next %d) nlooked %d";
91static const char xact1[] =
92    "HBA attempted queued transaction with disconnect not set for %d.%d.%d";
93static const char xact2[] =
94    "HBA attempted queued transaction to target routine %d on target %d bus %d";
95static const char xact3[] =
96    "HBA attempted queued cmd for %d.%d.%d when queueing disabled";
97static const char pskip[] =
98    "SCSI phase skipped for target %d.%d.%d";
99static const char topology[] =
100    "Loop ID %d, AL_PA 0x%x, Port ID 0x%x, Loop State 0x%x, Topology '%s'";
101static const char finmsg[] =
102    "(%d.%d.%d): FIN dl%d resid %d STS 0x%x SKEY %c XS_ERR=0x%x";
103/*
104 * Local function prototypes.
105 */
106static int isp_parse_async __P((struct ispsoftc *, int));
107static int isp_handle_other_response
108__P((struct ispsoftc *, ispstatusreq_t *, u_int16_t *));
109static void isp_parse_status
110__P((struct ispsoftc *, ispstatusreq_t *, XS_T *));
111static void isp_fastpost_complete __P((struct ispsoftc *, u_int16_t));
112static void isp_scsi_init __P((struct ispsoftc *));
113static void isp_scsi_channel_init __P((struct ispsoftc *, int));
114static void isp_fibre_init __P((struct ispsoftc *));
115static void isp_mark_getpdb_all __P((struct ispsoftc *));
116static int isp_getmap __P((struct ispsoftc *, fcpos_map_t *));
117static int isp_getpdb __P((struct ispsoftc *, int, isp_pdb_t *));
118static u_int64_t isp_get_portname __P((struct ispsoftc *, int, int));
119static int isp_fclink_test __P((struct ispsoftc *, int));
120static char *isp2100_fw_statename __P((int));
121static int isp_pdb_sync __P((struct ispsoftc *));
122static int isp_scan_loop __P((struct ispsoftc *));
123static int isp_scan_fabric __P((struct ispsoftc *));
124static void isp_register_fc4_type __P((struct ispsoftc *));
125static void isp_fw_state __P((struct ispsoftc *));
126static void isp_mboxcmd __P((struct ispsoftc *, mbreg_t *, int));
127
128static void isp_update __P((struct ispsoftc *));
129static void isp_update_bus __P((struct ispsoftc *, int));
130static void isp_setdfltparm __P((struct ispsoftc *, int));
131static int isp_read_nvram __P((struct ispsoftc *));
132static void isp_rdnvram_word __P((struct ispsoftc *, int, u_int16_t *));
133static void isp_parse_nvram_1020 __P((struct ispsoftc *, u_int8_t *));
134static void isp_parse_nvram_1080 __P((struct ispsoftc *, int, u_int8_t *));
135static void isp_parse_nvram_12160 __P((struct ispsoftc *, int, u_int8_t *));
136static void isp_parse_nvram_2100 __P((struct ispsoftc *, u_int8_t *));
137
138/*
139 * Reset Hardware.
140 *
141 * Hit the chip over the head, download new f/w if available and set it running.
142 *
143 * Locking done elsewhere.
144 */
145void
146isp_reset(struct ispsoftc *isp)
147{
148	mbreg_t mbs;
149	int loops, i, touched, dodnld = 1;
150	char *revname = "????";
151
152	isp->isp_state = ISP_NILSTATE;
153
154
155	/*
156	 * Basic types (SCSI, FibreChannel and PCI or SBus)
157	 * have been set in the MD code. We figure out more
158	 * here.
159	 *
160	 * After we've fired this chip up, zero out the conf1 register
161	 * for SCSI adapters and do other settings for the 2100.
162	 */
163
164	/*
165	 * Get the current running firmware revision out of the
166	 * chip before we hit it over the head (if this is our
167	 * first time through). Note that we store this as the
168	 * 'ROM' firmware revision- which it may not be. In any
169	 * case, we don't really use this yet, but we may in
170	 * the future.
171	 */
172	if ((touched = isp->isp_touched) == 0) {
173		/*
174		 * First see whether or not we're sitting in the ISP PROM.
175		 * If we've just been reset, we'll have the string "ISP   "
176		 * spread through outgoing mailbox registers 1-3.
177		 */
178		if (ISP_READ(isp, OUTMAILBOX1) != 0x4953 ||
179		    ISP_READ(isp, OUTMAILBOX2) != 0x5020 ||
180		    ISP_READ(isp, OUTMAILBOX3) != 0x2020) {
181			/*
182			 * Just in case it was paused...
183			 */
184			ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE);
185			mbs.param[0] = MBOX_ABOUT_FIRMWARE;
186			isp_mboxcmd(isp, &mbs, MBOX_COMMAND_ERROR);
187			/*
188			 * This *shouldn't* fail.....
189			 */
190			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
191				isp->isp_romfw_rev[0] = mbs.param[1];
192				isp->isp_romfw_rev[1] = mbs.param[2];
193				isp->isp_romfw_rev[2] = mbs.param[3];
194			}
195		}
196		isp->isp_touched = 1;
197	}
198
199	DISABLE_INTS(isp);
200
201	/*
202	 * Put the board into PAUSE mode (so we can read the SXP registers
203	 * or write FPM/FBM registers).
204	 */
205	ISP_WRITE(isp, HCCR, HCCR_CMD_PAUSE);
206
207	if (IS_FC(isp)) {
208		switch (isp->isp_type) {
209		case ISP_HA_FC_2100:
210			revname = "2100";
211			break;
212		case ISP_HA_FC_2200:
213			revname = "2200";
214			break;
215		case ISP_HA_FC_2300:
216			revname = "2300";
217			break;
218		default:
219			break;
220		}
221		/*
222		 * While we're paused, reset the FPM module and FBM fifos.
223		 */
224		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FPM0_REGS);
225		ISP_WRITE(isp, FPM_DIAG_CONFIG, FPM_SOFT_RESET);
226		ISP_WRITE(isp, BIU2100_CSR, BIU2100_FB_REGS);
227		ISP_WRITE(isp, FBM_CMD, FBMCMD_FIFO_RESET_ALL);
228		ISP_WRITE(isp, BIU2100_CSR, BIU2100_RISC_REGS);
229	} else if (IS_1240(isp)) {
230		sdparam *sdp = isp->isp_param;
231		revname = "1240";
232		isp->isp_clock = 60;
233		sdp->isp_ultramode = 1;
234		sdp++;
235		sdp->isp_ultramode = 1;
236		/*
237		 * XXX: Should probably do some bus sensing.
238		 */
239	} else if (IS_ULTRA2(isp)) {
240		static const char m[] = "bus %d is in %s Mode";
241		u_int16_t l;
242		sdparam *sdp = isp->isp_param;
243
244		isp->isp_clock = 100;
245
246		if (IS_1280(isp))
247			revname = "1280";
248		else if (IS_1080(isp))
249			revname = "1080";
250		else if (IS_12160(isp))
251			revname = "12160";
252		else
253			revname = "<UNKLVD>";
254
255		l = ISP_READ(isp, SXP_PINS_DIFF) & ISP1080_MODE_MASK;
256		switch (l) {
257		case ISP1080_LVD_MODE:
258			sdp->isp_lvdmode = 1;
259			isp_prt(isp, ISP_LOGCONFIG, m, 0, "LVD");
260			break;
261		case ISP1080_HVD_MODE:
262			sdp->isp_diffmode = 1;
263			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Differential");
264			break;
265		case ISP1080_SE_MODE:
266			sdp->isp_ultramode = 1;
267			isp_prt(isp, ISP_LOGCONFIG, m, 0, "Single-Ended");
268			break;
269		default:
270			isp_prt(isp, ISP_LOGERR,
271			    "unknown mode on bus %d (0x%x)", 0, l);
272			break;
273		}
274
275		if (IS_DUALBUS(isp)) {
276			sdp++;
277			l = ISP_READ(isp, SXP_PINS_DIFF|SXP_BANK1_SELECT);
278			l &= ISP1080_MODE_MASK;
279			switch(l) {
280			case ISP1080_LVD_MODE:
281				sdp->isp_lvdmode = 1;
282				isp_prt(isp, ISP_LOGCONFIG, m, 1, "LVD");
283				break;
284			case ISP1080_HVD_MODE:
285				sdp->isp_diffmode = 1;
286				isp_prt(isp, ISP_LOGCONFIG,
287				    m, 1, "Differential");
288				break;
289			case ISP1080_SE_MODE:
290				sdp->isp_ultramode = 1;
291				isp_prt(isp, ISP_LOGCONFIG,
292				    m, 1, "Single-Ended");
293				break;
294			default:
295				isp_prt(isp, ISP_LOGERR,
296				    "unknown mode on bus %d (0x%x)", 1, l);
297				break;
298			}
299		}
300	} else {
301		sdparam *sdp = isp->isp_param;
302		i = ISP_READ(isp, BIU_CONF0) & BIU_CONF0_HW_MASK;
303		switch (i) {
304		default:
305			isp_prt(isp, ISP_LOGALL, "Unknown Chip Type 0x%x", i);
306			/* FALLTHROUGH */
307		case 1:
308			revname = "1020";
309			isp->isp_type = ISP_HA_SCSI_1020;
310			isp->isp_clock = 40;
311			break;
312		case 2:
313			/*
314			 * Some 1020A chips are Ultra Capable, but don't
315			 * run the clock rate up for that unless told to
316			 * do so by the Ultra Capable bits being set.
317			 */
318			revname = "1020A";
319			isp->isp_type = ISP_HA_SCSI_1020A;
320			isp->isp_clock = 40;
321			break;
322		case 3:
323			revname = "1040";
324			isp->isp_type = ISP_HA_SCSI_1040;
325			isp->isp_clock = 60;
326			break;
327		case 4:
328			revname = "1040A";
329			isp->isp_type = ISP_HA_SCSI_1040A;
330			isp->isp_clock = 60;
331			break;
332		case 5:
333			revname = "1040B";
334			isp->isp_type = ISP_HA_SCSI_1040B;
335			isp->isp_clock = 60;
336			break;
337		case 6:
338			revname = "1040C";
339			isp->isp_type = ISP_HA_SCSI_1040C;
340			isp->isp_clock = 60;
341                        break;
342		}
343		/*
344		 * Now, while we're at it, gather info about ultra
345		 * and/or differential mode.
346		 */
347		if (ISP_READ(isp, SXP_PINS_DIFF) & SXP_PINS_DIFF_MODE) {
348			isp_prt(isp, ISP_LOGCONFIG, "Differential Mode");
349			sdp->isp_diffmode = 1;
350		} else {
351			sdp->isp_diffmode = 0;
352		}
353		i = ISP_READ(isp, RISC_PSR);
354		if (isp->isp_bustype == ISP_BT_SBUS) {
355			i &= RISC_PSR_SBUS_ULTRA;
356		} else {
357			i &= RISC_PSR_PCI_ULTRA;
358		}
359		if (i != 0) {
360			isp_prt(isp, ISP_LOGCONFIG, "Ultra Mode Capable");
361			sdp->isp_ultramode = 1;
362			/*
363			 * If we're in Ultra Mode, we have to be 60Mhz clock-
364			 * even for the SBus version.
365			 */
366			isp->isp_clock = 60;
367		} else {
368			sdp->isp_ultramode = 0;
369			/*
370			 * Clock is known. Gronk.
371			 */
372		}
373
374		/*
375		 * Machine dependent clock (if set) overrides
376		 * our generic determinations.
377		 */
378		if (isp->isp_mdvec->dv_clock) {
379			if (isp->isp_mdvec->dv_clock < isp->isp_clock) {
380				isp->isp_clock = isp->isp_mdvec->dv_clock;
381			}
382		}
383
384	}
385
386	/*
387	 * Clear instrumentation
388	 */
389	isp->isp_intcnt = isp->isp_intbogus = 0;
390
391	/*
392	 * Do MD specific pre initialization
393	 */
394	ISP_RESET0(isp);
395
396again:
397
398	/*
399	 * Hit the chip over the head with hammer,
400	 * and give the ISP a chance to recover.
401	 */
402
403	if (IS_SCSI(isp)) {
404		ISP_WRITE(isp, BIU_ICR, BIU_ICR_SOFT_RESET);
405		/*
406		 * A slight delay...
407		 */
408		USEC_DELAY(100);
409
410		/*
411		 * Clear data && control DMA engines.
412		 */
413		ISP_WRITE(isp, CDMA_CONTROL,
414		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
415		ISP_WRITE(isp, DDMA_CONTROL,
416		    DMA_CNTRL_CLEAR_CHAN | DMA_CNTRL_RESET_INT);
417
418
419	} else {
420		ISP_WRITE(isp, BIU2100_CSR, BIU2100_SOFT_RESET);
421		/*
422		 * A slight delay...
423		 */
424		USEC_DELAY(100);
425
426		/*
427		 * Clear data && control DMA engines.
428		 */
429		ISP_WRITE(isp, CDMA2100_CONTROL,
430			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
431		ISP_WRITE(isp, TDMA2100_CONTROL,
432			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
433		ISP_WRITE(isp, RDMA2100_CONTROL,
434			DMA_CNTRL2100_CLEAR_CHAN | DMA_CNTRL2100_RESET_INT);
435	}
436
437	/*
438	 * Wait for ISP to be ready to go...
439	 */
440	loops = MBOX_DELAY_COUNT;
441	for (;;) {
442		if (IS_SCSI(isp)) {
443			if (!(ISP_READ(isp, BIU_ICR) & BIU_ICR_SOFT_RESET))
444				break;
445		} else {
446			if (!(ISP_READ(isp, BIU2100_CSR) & BIU2100_SOFT_RESET))
447				break;
448		}
449		USEC_DELAY(100);
450		if (--loops < 0) {
451			ISP_DUMPREGS(isp, "chip reset timed out");
452			return;
453		}
454	}
455
456	/*
457	 * After we've fired this chip up, zero out the conf1 register
458	 * for SCSI adapters and other settings for the 2100.
459	 */
460
461	if (IS_SCSI(isp)) {
462		ISP_WRITE(isp, BIU_CONF1, 0);
463	} else {
464		ISP_WRITE(isp, BIU2100_CSR, 0);
465	}
466
467	/*
468	 * Reset RISC Processor
469	 */
470	ISP_WRITE(isp, HCCR, HCCR_CMD_RESET);
471	USEC_DELAY(100);
472	/* Clear semaphore register (just to be sure) */
473	ISP_WRITE(isp, BIU_SEMA, 0);
474
475	/*
476	 * Establish some initial burst rate stuff.
477	 * (only for the 1XX0 boards). This really should
478	 * be done later after fetching from NVRAM.
479	 */
480	if (IS_SCSI(isp)) {
481		u_int16_t tmp = isp->isp_mdvec->dv_conf1;
482		/*
483		 * Busted FIFO. Turn off all but burst enables.
484		 */
485		if (isp->isp_type == ISP_HA_SCSI_1040A) {
486			tmp &= BIU_BURST_ENABLE;
487		}
488		ISP_SETBITS(isp, BIU_CONF1, tmp);
489		if (tmp & BIU_BURST_ENABLE) {
490			ISP_SETBITS(isp, CDMA_CONF, DMA_ENABLE_BURST);
491			ISP_SETBITS(isp, DDMA_CONF, DMA_ENABLE_BURST);
492		}
493#ifdef	PTI_CARDS
494		if (((sdparam *) isp->isp_param)->isp_ultramode) {
495			while (ISP_READ(isp, RISC_MTR) != 0x1313) {
496				ISP_WRITE(isp, RISC_MTR, 0x1313);
497				ISP_WRITE(isp, HCCR, HCCR_CMD_STEP);
498			}
499		} else {
500			ISP_WRITE(isp, RISC_MTR, 0x1212);
501		}
502		/*
503		 * PTI specific register
504		 */
505		ISP_WRITE(isp, RISC_EMB, DUAL_BANK)
506#else
507		ISP_WRITE(isp, RISC_MTR, 0x1212);
508#endif
509	} else {
510		ISP_WRITE(isp, RISC_MTR2100, 0x1212);
511		if (IS_2200(isp) || IS_2300(isp)) {
512			ISP_WRITE(isp, HCCR, HCCR_2X00_DISABLE_PARITY_PAUSE);
513		}
514	}
515
516	ISP_WRITE(isp, HCCR, HCCR_CMD_RELEASE); /* release paused processor */
517
518	/*
519	 * Do MD specific post initialization
520	 */
521	ISP_RESET1(isp);
522
523	/*
524	 * Wait for everything to finish firing up...
525	 */
526	loops = MBOX_DELAY_COUNT;
527	while (ISP_READ(isp, OUTMAILBOX0) == MBOX_BUSY) {
528		USEC_DELAY(100);
529		if (--loops < 0) {
530			isp_prt(isp, ISP_LOGERR,
531			    "MBOX_BUSY never cleared on reset");
532			return;
533		}
534	}
535
536	/*
537	 * Up until this point we've done everything by just reading or
538	 * setting registers. From this point on we rely on at least *some*
539	 * kind of firmware running in the card.
540	 */
541
542	/*
543	 * Do some sanity checking.
544	 */
545	mbs.param[0] = MBOX_NO_OP;
546	isp_mboxcmd(isp, &mbs, MBLOGALL);
547	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
548		return;
549	}
550
551	if (IS_SCSI(isp)) {
552		mbs.param[0] = MBOX_MAILBOX_REG_TEST;
553		mbs.param[1] = 0xdead;
554		mbs.param[2] = 0xbeef;
555		mbs.param[3] = 0xffff;
556		mbs.param[4] = 0x1111;
557		mbs.param[5] = 0xa5a5;
558		isp_mboxcmd(isp, &mbs, MBLOGALL);
559		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
560			return;
561		}
562		if (mbs.param[1] != 0xdead || mbs.param[2] != 0xbeef ||
563		    mbs.param[3] != 0xffff || mbs.param[4] != 0x1111 ||
564		    mbs.param[5] != 0xa5a5) {
565			isp_prt(isp, ISP_LOGERR,
566			    "Register Test Failed (0x%x 0x%x 0x%x 0x%x 0x%x)",
567			    mbs.param[1], mbs.param[2], mbs.param[3],
568			    mbs.param[4], mbs.param[5]);
569			return;
570		}
571
572	}
573
574	/*
575	 * Download new Firmware, unless requested not to do so.
576	 * This is made slightly trickier in some cases where the
577	 * firmware of the ROM revision is newer than the revision
578	 * compiled into the driver. So, where we used to compare
579	 * versions of our f/w and the ROM f/w, now we just see
580	 * whether we have f/w at all and whether a config flag
581	 * has disabled our download.
582	 */
583	if ((isp->isp_mdvec->dv_ispfw == NULL) ||
584	    (isp->isp_confopts & ISP_CFG_NORELOAD)) {
585		dodnld = 0;
586	}
587
588	if (dodnld) {
589		u_int16_t fwlen  = isp->isp_mdvec->dv_ispfw[3];
590		for (i = 0; i < fwlen; i++) {
591			mbs.param[0] = MBOX_WRITE_RAM_WORD;
592			mbs.param[1] = ISP_CODE_ORG + i;
593			mbs.param[2] = isp->isp_mdvec->dv_ispfw[i];
594			isp_mboxcmd(isp, &mbs, MBLOGNONE);
595			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
596				isp_prt(isp, ISP_LOGERR,
597				    "F/W download failed at word %d", i);
598				dodnld = 0;
599				goto again;
600			}
601		}
602
603		/*
604		 * Verify that it downloaded correctly.
605		 */
606		mbs.param[0] = MBOX_VERIFY_CHECKSUM;
607		mbs.param[1] = ISP_CODE_ORG;
608		isp_mboxcmd(isp, &mbs, MBLOGNONE);
609		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
610			isp_prt(isp, ISP_LOGERR, "Ram Checksum Failure");
611			return;
612		}
613		isp->isp_loaded_fw = 1;
614	} else {
615		isp->isp_loaded_fw = 0;
616		isp_prt(isp, ISP_LOGDEBUG2, "skipping f/w download");
617	}
618
619	/*
620	 * Now start it rolling.
621	 *
622	 * If we didn't actually download f/w,
623	 * we still need to (re)start it.
624	 */
625
626	mbs.param[0] = MBOX_EXEC_FIRMWARE;
627	mbs.param[1] = ISP_CODE_ORG;
628	isp_mboxcmd(isp, &mbs, MBLOGNONE);
629	/* give it a chance to start */
630	USEC_SLEEP(isp, 500);
631
632	if (IS_SCSI(isp)) {
633		/*
634		 * Set CLOCK RATE, but only if asked to.
635		 */
636		if (isp->isp_clock) {
637			mbs.param[0] = MBOX_SET_CLOCK_RATE;
638			mbs.param[1] = isp->isp_clock;
639			isp_mboxcmd(isp, &mbs, MBLOGALL);
640			/* we will try not to care if this fails */
641		}
642	}
643
644	mbs.param[0] = MBOX_ABOUT_FIRMWARE;
645	isp_mboxcmd(isp, &mbs, MBLOGALL);
646	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
647		return;
648	}
649	isp_prt(isp, ISP_LOGCONFIG,
650	    "Board Revision %s, %s F/W Revision %d.%d.%d", revname,
651	    dodnld? "loaded" : "resident", mbs.param[1], mbs.param[2],
652	    mbs.param[3]);
653	if (IS_FC(isp)) {
654		isp_prt(isp, ISP_LOGCONFIG, "Firmware Attributes = 0x%x",
655		    mbs.param[6]);
656		if (ISP_READ(isp, BIU2100_CSR) & BIU2100_PCI64) {
657			isp_prt(isp, ISP_LOGCONFIG,
658			    "Installed in 64-Bit PCI slot");
659		}
660	}
661
662	isp->isp_fwrev[0] = mbs.param[1];
663	isp->isp_fwrev[1] = mbs.param[2];
664	isp->isp_fwrev[2] = mbs.param[3];
665	if (isp->isp_romfw_rev[0] || isp->isp_romfw_rev[1] ||
666	    isp->isp_romfw_rev[2]) {
667		isp_prt(isp, ISP_LOGCONFIG, "Last F/W revision was %d.%d.%d",
668		    isp->isp_romfw_rev[0], isp->isp_romfw_rev[1],
669		    isp->isp_romfw_rev[2]);
670	}
671
672	mbs.param[0] = MBOX_GET_FIRMWARE_STATUS;
673	isp_mboxcmd(isp, &mbs, MBLOGALL);
674	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
675		return;
676	}
677	isp->isp_maxcmds = mbs.param[2];
678	isp_prt(isp, ISP_LOGINFO,
679	    "%d max I/O commands supported", mbs.param[2]);
680	isp_fw_state(isp);
681
682	/*
683	 * Set up DMA for the request and result mailboxes.
684	 */
685	if (ISP_MBOXDMASETUP(isp) != 0) {
686		isp_prt(isp, ISP_LOGERR, "Cannot setup DMA");
687		return;
688	}
689	isp->isp_state = ISP_RESETSTATE;
690
691	/*
692	 * Okay- now that we have new firmware running, we now (re)set our
693	 * notion of how many luns we support. This is somewhat tricky because
694	 * if we haven't loaded firmware, we don't have an easy way of telling
695	 * how many luns we support.
696	 *
697	 * We'll make a simplifying assumption- if we loaded firmware, we
698	 * are running with expanded lun firmware, otherwise not.
699	 *
700	 * Expanded lun firmware gives you 32 luns for SCSI cards and
701	 * 65536 luns for Fibre Channel cards.
702	 *
703	 * Because the lun is in a a different position in the Request Queue
704	 * Entry structure for Fibre Channel with expanded lun firmware, we
705	 * can only support one lun (lun zero) when we don't know what kind
706	 * of firmware we're running.
707	 *
708	 * Note that we only do this once (the first time thru isp_reset)
709	 * because we may be called again after firmware has been loaded once
710	 * and released.
711	 */
712	if (touched == 0) {
713		if (dodnld) {
714			if (IS_SCSI(isp)) {
715				isp->isp_maxluns = 32;
716			} else {
717				isp->isp_maxluns = 65536;
718			}
719		} else {
720			if (IS_SCSI(isp)) {
721				isp->isp_maxluns = 8;
722			} else {
723				isp_prt(isp, ISP_LOGALL, warnlun);
724				isp->isp_maxluns = 1;
725			}
726		}
727	}
728}
729
730/*
731 * Initialize Parameters of Hardware to a known state.
732 *
733 * Locks are held before coming here.
734 */
735
736void
737isp_init(struct ispsoftc *isp)
738{
739	/*
740	 * Must do this first to get defaults established.
741	 */
742	isp_setdfltparm(isp, 0);
743	if (IS_DUALBUS(isp)) {
744		isp_setdfltparm(isp, 1);
745	}
746	if (IS_FC(isp)) {
747		isp_fibre_init(isp);
748	} else {
749		isp_scsi_init(isp);
750	}
751}
752
753static void
754isp_scsi_init(struct ispsoftc *isp)
755{
756	sdparam *sdp_chan0, *sdp_chan1;
757	mbreg_t mbs;
758
759	sdp_chan0 = isp->isp_param;
760	sdp_chan1 = sdp_chan0;
761	if (IS_DUALBUS(isp)) {
762		sdp_chan1++;
763	}
764
765	/*
766	 * If we have no role (neither target nor initiator), return.
767	 */
768	if (isp->isp_role == ISP_ROLE_NONE) {
769		return;
770	}
771
772	/* First do overall per-card settings. */
773
774	/*
775	 * If we have fast memory timing enabled, turn it on.
776	 */
777	if (sdp_chan0->isp_fast_mttr) {
778		ISP_WRITE(isp, RISC_MTR, 0x1313);
779	}
780
781	/*
782	 * Set Retry Delay and Count.
783	 * You set both channels at the same time.
784	 */
785	mbs.param[0] = MBOX_SET_RETRY_COUNT;
786	mbs.param[1] = sdp_chan0->isp_retry_count;
787	mbs.param[2] = sdp_chan0->isp_retry_delay;
788	mbs.param[6] = sdp_chan1->isp_retry_count;
789	mbs.param[7] = sdp_chan1->isp_retry_delay;
790
791	isp_mboxcmd(isp, &mbs, MBLOGALL);
792	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
793		return;
794	}
795
796	/*
797	 * Set ASYNC DATA SETUP time. This is very important.
798	 */
799	mbs.param[0] = MBOX_SET_ASYNC_DATA_SETUP_TIME;
800	mbs.param[1] = sdp_chan0->isp_async_data_setup;
801	mbs.param[2] = sdp_chan1->isp_async_data_setup;
802	isp_mboxcmd(isp, &mbs, MBLOGALL);
803	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
804		return;
805	}
806
807	/*
808	 * Set ACTIVE Negation State.
809	 */
810	mbs.param[0] = MBOX_SET_ACT_NEG_STATE;
811	mbs.param[1] =
812	    (sdp_chan0->isp_req_ack_active_neg << 4) |
813	    (sdp_chan0->isp_data_line_active_neg << 5);
814	mbs.param[2] =
815	    (sdp_chan1->isp_req_ack_active_neg << 4) |
816	    (sdp_chan1->isp_data_line_active_neg << 5);
817
818	isp_mboxcmd(isp, &mbs, MBLOGNONE);
819	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
820		isp_prt(isp, ISP_LOGERR,
821		    "failed to set active negation state (%d,%d), (%d,%d)",
822		    sdp_chan0->isp_req_ack_active_neg,
823		    sdp_chan0->isp_data_line_active_neg,
824		    sdp_chan1->isp_req_ack_active_neg,
825		    sdp_chan1->isp_data_line_active_neg);
826		/*
827		 * But don't return.
828		 */
829	}
830
831	/*
832	 * Set the Tag Aging limit
833	 */
834	mbs.param[0] = MBOX_SET_TAG_AGE_LIMIT;
835	mbs.param[1] = sdp_chan0->isp_tag_aging;
836	mbs.param[2] = sdp_chan1->isp_tag_aging;
837	isp_mboxcmd(isp, &mbs, MBLOGALL);
838	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
839		isp_prt(isp, ISP_LOGERR, "failed to set tag age limit (%d,%d)",
840		    sdp_chan0->isp_tag_aging, sdp_chan1->isp_tag_aging);
841		return;
842	}
843
844	/*
845	 * Set selection timeout.
846	 */
847	mbs.param[0] = MBOX_SET_SELECT_TIMEOUT;
848	mbs.param[1] = sdp_chan0->isp_selection_timeout;
849	mbs.param[2] = sdp_chan1->isp_selection_timeout;
850	isp_mboxcmd(isp, &mbs, MBLOGALL);
851	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
852		return;
853	}
854
855	/* now do per-channel settings */
856	isp_scsi_channel_init(isp, 0);
857	if (IS_DUALBUS(isp))
858		isp_scsi_channel_init(isp, 1);
859
860	/*
861	 * Now enable request/response queues
862	 */
863
864	mbs.param[0] = MBOX_INIT_RES_QUEUE;
865	mbs.param[1] = RESULT_QUEUE_LEN(isp);
866	mbs.param[2] = DMA_MSW(isp->isp_result_dma);
867	mbs.param[3] = DMA_LSW(isp->isp_result_dma);
868	mbs.param[4] = 0;
869	mbs.param[5] = 0;
870	isp_mboxcmd(isp, &mbs, MBLOGALL);
871	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
872		return;
873	}
874	isp->isp_residx = mbs.param[5];
875
876	mbs.param[0] = MBOX_INIT_REQ_QUEUE;
877	mbs.param[1] = RQUEST_QUEUE_LEN(isp);
878	mbs.param[2] = DMA_MSW(isp->isp_rquest_dma);
879	mbs.param[3] = DMA_LSW(isp->isp_rquest_dma);
880	mbs.param[4] = 0;
881	isp_mboxcmd(isp, &mbs, MBLOGALL);
882	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
883		return;
884	}
885	isp->isp_reqidx = isp->isp_reqodx = mbs.param[4];
886
887	/*
888	 * Turn on Fast Posting, LVD transitions
889	 *
890	 * Ultra2 F/W always has had fast posting (and LVD transitions)
891	 *
892	 * Ultra and older (i.e., SBus) cards may not. It's just safer
893	 * to assume not for them.
894	 */
895
896	mbs.param[0] = MBOX_SET_FW_FEATURES;
897	mbs.param[1] = 0;
898	if (IS_ULTRA2(isp))
899		mbs.param[1] |= FW_FEATURE_LVD_NOTIFY;
900	if (IS_ULTRA2(isp) || IS_1240(isp))
901		mbs.param[1] |= FW_FEATURE_FAST_POST;
902	if (mbs.param[1] != 0) {
903		u_int16_t sfeat = mbs.param[1];
904		isp_mboxcmd(isp, &mbs, MBLOGALL);
905		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
906			isp_prt(isp, ISP_LOGINFO,
907			    "Enabled FW features (0x%x)", sfeat);
908		}
909	}
910
911	/*
912	 * Let the outer layers decide whether to issue a SCSI bus reset.
913	 */
914	isp->isp_state = ISP_INITSTATE;
915}
916
917static void
918isp_scsi_channel_init(struct ispsoftc *isp, int channel)
919{
920	sdparam *sdp;
921	mbreg_t mbs;
922	int tgt;
923
924	sdp = isp->isp_param;
925	sdp += channel;
926
927	/*
928	 * Set (possibly new) Initiator ID.
929	 */
930	mbs.param[0] = MBOX_SET_INIT_SCSI_ID;
931	mbs.param[1] = (channel << 7) | sdp->isp_initiator_id;
932	isp_mboxcmd(isp, &mbs, MBLOGALL);
933	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
934		return;
935	}
936	isp_prt(isp, ISP_LOGINFO, "Initiator ID is %d on Channel %d",
937	    sdp->isp_initiator_id, channel);
938
939
940	/*
941	 * Set current per-target parameters to a safe minimum.
942	 */
943	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
944		int lun;
945		u_int16_t sdf;
946
947		if (sdp->isp_devparam[tgt].dev_enable == 0) {
948			continue;
949		}
950#ifndef	ISP_TARGET_MODE
951		if (tgt == sdp->isp_initiator_id) {
952			sdf = DPARM_DEFAULT;
953		} else {
954			sdf = DPARM_SAFE_DFLT;
955			/*
956			 * It is not quite clear when this changed over so that
957			 * we could force narrow and async for 1000/1020 cards,
958			 * but assume that this is only the case for loaded
959			 * firmware.
960			 */
961			if (isp->isp_loaded_fw) {
962				sdf |= DPARM_NARROW | DPARM_ASYNC;
963			}
964		}
965#else
966		/*
967		 * The !$*!)$!$)* f/w uses the same index into some
968		 * internal table to decide how to respond to negotiations,
969		 * so if we've said "let's be safe" for ID X, and ID X
970		 * selects *us*, the negotiations will back to 'safe'
971		 * (as in narrow/async). What the f/w *should* do is
972		 * use the initiator id settings to decide how to respond.
973		 */
974		sdf = DPARM_DEFAULT;
975#endif
976		mbs.param[0] = MBOX_SET_TARGET_PARAMS;
977		mbs.param[1] = (channel << 15) | (tgt << 8);
978		mbs.param[2] = sdf;
979		if ((sdf & DPARM_SYNC) == 0) {
980			mbs.param[3] = 0;
981		} else {
982			mbs.param[3] =
983			    (sdp->isp_devparam[tgt].sync_offset << 8) |
984			    (sdp->isp_devparam[tgt].sync_period);
985		}
986		isp_prt(isp, ISP_LOGDEBUG0,
987		    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
988		    channel, tgt, mbs.param[2], mbs.param[3] >> 8,
989		    mbs.param[3] & 0xff);
990		isp_mboxcmd(isp, &mbs, MBLOGNONE);
991		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
992			sdf = DPARM_SAFE_DFLT;
993			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
994			mbs.param[1] = (tgt << 8) | (channel << 15);
995			mbs.param[2] = sdf;
996			mbs.param[3] = 0;
997			isp_mboxcmd(isp, &mbs, MBLOGALL);
998			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
999				continue;
1000			}
1001		}
1002
1003		/*
1004		 * We don't update any information directly from the f/w
1005		 * because we need to run at least one command to cause a
1006		 * new state to be latched up. So, we just assume that we
1007		 * converge to the values we just had set.
1008		 *
1009		 * Ensure that we don't believe tagged queuing is enabled yet.
1010		 * It turns out that sometimes the ISP just ignores our
1011		 * attempts to set parameters for devices that it hasn't
1012		 * seen yet.
1013		 */
1014		sdp->isp_devparam[tgt].cur_dflags = sdf & ~DPARM_TQING;
1015		for (lun = 0; lun < (int) isp->isp_maxluns; lun++) {
1016			mbs.param[0] = MBOX_SET_DEV_QUEUE_PARAMS;
1017			mbs.param[1] = (channel << 15) | (tgt << 8) | lun;
1018			mbs.param[2] = sdp->isp_max_queue_depth;
1019			mbs.param[3] = sdp->isp_devparam[tgt].exc_throttle;
1020			isp_mboxcmd(isp, &mbs, MBLOGALL);
1021			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1022				break;
1023			}
1024		}
1025	}
1026	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
1027		if (sdp->isp_devparam[tgt].dev_refresh) {
1028			isp->isp_sendmarker |= (1 << channel);
1029			isp->isp_update |= (1 << channel);
1030			break;
1031		}
1032	}
1033}
1034
1035/*
1036 * Fibre Channel specific initialization.
1037 *
1038 * Locks are held before coming here.
1039 */
1040static void
1041isp_fibre_init(struct ispsoftc *isp)
1042{
1043	fcparam *fcp;
1044	isp_icb_t *icbp;
1045	mbreg_t mbs;
1046	int loopid;
1047	u_int64_t nwwn, pwwn;
1048
1049	fcp = isp->isp_param;
1050
1051	/*
1052	 * Do this *before* initializing the firmware.
1053	 */
1054	isp_mark_getpdb_all(isp);
1055	fcp->isp_fwstate = FW_CONFIG_WAIT;
1056	fcp->isp_loopstate = LOOP_NIL;
1057
1058	/*
1059	 * If we have no role (neither target nor initiator), return.
1060	 */
1061	if (isp->isp_role == ISP_ROLE_NONE) {
1062		return;
1063	}
1064
1065	loopid = DEFAULT_LOOPID(isp);
1066	icbp = (isp_icb_t *) fcp->isp_scratch;
1067	MEMZERO(icbp, sizeof (*icbp));
1068
1069	icbp->icb_version = ICB_VERSION1;
1070
1071	/*
1072	 * Firmware Options are either retrieved from NVRAM or
1073	 * are patched elsewhere. We check them for sanity here
1074	 * and make changes based on board revision, but otherwise
1075	 * let others decide policy.
1076	 */
1077
1078	/*
1079	 * If this is a 2100 < revision 5, we have to turn off FAIRNESS.
1080	 */
1081	if ((isp->isp_type == ISP_HA_FC_2100) && isp->isp_revision < 5) {
1082		fcp->isp_fwoptions &= ~ICBOPT_FAIRNESS;
1083	}
1084
1085	/*
1086	 * We have to use FULL LOGIN even though it resets the loop too much
1087	 * because otherwise port database entries don't get updated after
1088	 * a LIP- this is a known f/w bug for 2100 f/w less than 1.17.0.
1089	 */
1090	if (ISP_FW_REVX(isp->isp_fwrev) < ISP_FW_REV(1, 17, 0)) {
1091		fcp->isp_fwoptions |= ICBOPT_FULL_LOGIN;
1092	}
1093
1094	/*
1095	 * Insist on Port Database Update Async notifications
1096	 */
1097	fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
1098
1099
1100	/*
1101	 * Make sure that target role reflects into fwoptions.
1102	 */
1103	if (isp->isp_role & ISP_ROLE_TARGET) {
1104		fcp->isp_fwoptions |= ICBOPT_TGT_ENABLE;
1105	} else {
1106		fcp->isp_fwoptions &= ~ICBOPT_TGT_ENABLE;
1107	}
1108
1109	/*
1110	 * Propagate all of this into the ICB structure.
1111	 */
1112	icbp->icb_fwoptions = fcp->isp_fwoptions;
1113	icbp->icb_maxfrmlen = fcp->isp_maxfrmlen;
1114	if (icbp->icb_maxfrmlen < ICB_MIN_FRMLEN ||
1115	    icbp->icb_maxfrmlen > ICB_MAX_FRMLEN) {
1116		isp_prt(isp, ISP_LOGERR,
1117		    "bad frame length (%d) from NVRAM- using %d",
1118		    fcp->isp_maxfrmlen, ICB_DFLT_FRMLEN);
1119		icbp->icb_maxfrmlen = ICB_DFLT_FRMLEN;
1120	}
1121	icbp->icb_maxalloc = fcp->isp_maxalloc;
1122	if (icbp->icb_maxalloc < 1) {
1123		isp_prt(isp, ISP_LOGERR,
1124		    "bad maximum allocation (%d)- using 16", fcp->isp_maxalloc);
1125		icbp->icb_maxalloc = 16;
1126	}
1127	icbp->icb_execthrottle = fcp->isp_execthrottle;
1128	if (icbp->icb_execthrottle < 1) {
1129		isp_prt(isp, ISP_LOGERR,
1130		    "bad execution throttle of %d- using 16",
1131		    fcp->isp_execthrottle);
1132		icbp->icb_execthrottle = ICB_DFLT_THROTTLE;
1133	}
1134	icbp->icb_retry_delay = fcp->isp_retry_delay;
1135	icbp->icb_retry_count = fcp->isp_retry_count;
1136	icbp->icb_hardaddr = loopid;
1137	/*
1138	 * Right now we just set extended options to prefer point-to-point
1139	 * over loop based upon some soft config options.
1140	 */
1141	if (IS_2200(isp) || IS_2300(isp)) {
1142		icbp->icb_fwoptions |= ICBOPT_EXTENDED;
1143		/*
1144		 * Prefer or force Point-To-Point instead Loop?
1145		 */
1146		switch(isp->isp_confopts & ISP_CFG_PORT_PREF) {
1147		case ISP_CFG_NPORT:
1148			icbp->icb_xfwoptions = ICBXOPT_PTP_2_LOOP;
1149			break;
1150		case ISP_CFG_NPORT_ONLY:
1151			icbp->icb_xfwoptions = ICBXOPT_PTP_ONLY;
1152			break;
1153		case ISP_CFG_LPORT_ONLY:
1154			icbp->icb_xfwoptions = ICBXOPT_LOOP_ONLY;
1155			break;
1156		default:
1157			icbp->icb_xfwoptions = ICBXOPT_LOOP_2_PTP;
1158			break;
1159		}
1160	}
1161	icbp->icb_logintime = 60;	/* 60 second login timeout */
1162
1163	nwwn = ISP_NODEWWN(isp);
1164	pwwn = ISP_PORTWWN(isp);
1165	if (nwwn && pwwn) {
1166		icbp->icb_fwoptions |= ICBOPT_BOTH_WWNS;
1167		MAKE_NODE_NAME_FROM_WWN(icbp->icb_nodename, nwwn);
1168		MAKE_NODE_NAME_FROM_WWN(icbp->icb_portname, pwwn);
1169		isp_prt(isp, ISP_LOGDEBUG1,
1170		    "Setting ICB Node 0x%08x%08x Port 0x%08x%08x",
1171		    ((u_int32_t) (nwwn >> 32)),
1172		    ((u_int32_t) (nwwn & 0xffffffff)),
1173		    ((u_int32_t) (pwwn >> 32)),
1174		    ((u_int32_t) (pwwn & 0xffffffff)));
1175	} else {
1176		isp_prt(isp, ISP_LOGDEBUG1, "Not using any WWNs");
1177		icbp->icb_fwoptions &= ~(ICBOPT_BOTH_WWNS|ICBOPT_FULL_LOGIN);
1178	}
1179	icbp->icb_rqstqlen = RQUEST_QUEUE_LEN(isp);
1180	icbp->icb_rsltqlen = RESULT_QUEUE_LEN(isp);
1181	icbp->icb_rqstaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_rquest_dma);
1182	icbp->icb_rqstaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_rquest_dma);
1183	icbp->icb_respaddr[RQRSP_ADDR0015] = DMA_LSW(isp->isp_result_dma);
1184	icbp->icb_respaddr[RQRSP_ADDR1631] = DMA_MSW(isp->isp_result_dma);
1185	isp_prt(isp, ISP_LOGDEBUG1,
1186	    "isp_fibre_init: fwoptions 0x%x", fcp->isp_fwoptions);
1187	ISP_SWIZZLE_ICB(isp, icbp);
1188
1189
1190	/*
1191	 * Init the firmware
1192	 */
1193	mbs.param[0] = MBOX_INIT_FIRMWARE;
1194	mbs.param[1] = 0;
1195	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1196	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1197	mbs.param[4] = 0;
1198	mbs.param[5] = 0;
1199	mbs.param[6] = 0;
1200	mbs.param[7] = 0;
1201	isp_mboxcmd(isp, &mbs, MBLOGALL);
1202	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1203		return;
1204	}
1205	isp->isp_reqidx = isp->isp_reqodx = 0;
1206	isp->isp_residx = 0;
1207	isp->isp_sendmarker = 1;
1208
1209	/*
1210	 * Whatever happens, we're now committed to being here.
1211	 */
1212	isp->isp_state = ISP_INITSTATE;
1213}
1214
1215/*
1216 * Fibre Channel Support- get the port database for the id.
1217 *
1218 * Locks are held before coming here. Return 0 if success,
1219 * else failure.
1220 */
1221
1222static int
1223isp_getmap(struct ispsoftc *isp, fcpos_map_t *map)
1224{
1225	fcparam *fcp = (fcparam *) isp->isp_param;
1226	mbreg_t mbs;
1227
1228	mbs.param[0] = MBOX_GET_FC_AL_POSITION_MAP;
1229	mbs.param[1] = 0;
1230	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1231	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1232	/*
1233	 * Unneeded. For the 2100, except for initializing f/w, registers
1234	 * 4/5 have to not be written to.
1235	 *	mbs.param[4] = 0;
1236	 *	mbs.param[5] = 0;
1237	 *
1238	 */
1239	mbs.param[6] = 0;
1240	mbs.param[7] = 0;
1241	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1242	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1243		MEMCPY(map, fcp->isp_scratch, sizeof (fcpos_map_t));
1244		map->fwmap = mbs.param[1] != 0;
1245		return (0);
1246	}
1247	return (-1);
1248}
1249
1250static void
1251isp_mark_getpdb_all(struct ispsoftc *isp)
1252{
1253	fcparam *fcp = (fcparam *) isp->isp_param;
1254	int i;
1255	for (i = 0; i < MAX_FC_TARG; i++) {
1256		fcp->portdb[i].valid = fcp->portdb[i].fabric_dev = 0;
1257	}
1258}
1259
1260static int
1261isp_getpdb(struct ispsoftc *isp, int id, isp_pdb_t *pdbp)
1262{
1263	fcparam *fcp = (fcparam *) isp->isp_param;
1264	mbreg_t mbs;
1265
1266	mbs.param[0] = MBOX_GET_PORT_DB;
1267	mbs.param[1] = id << 8;
1268	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
1269	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
1270	/*
1271	 * Unneeded. For the 2100, except for initializing f/w, registers
1272	 * 4/5 have to not be written to.
1273	 *	mbs.param[4] = 0;
1274	 *	mbs.param[5] = 0;
1275	 *
1276	 */
1277	mbs.param[6] = 0;
1278	mbs.param[7] = 0;
1279	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1280	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1281		ISP_UNSWIZZLE_AND_COPY_PDBP(isp, pdbp, fcp->isp_scratch);
1282		return (0);
1283	}
1284	return (-1);
1285}
1286
1287static u_int64_t
1288isp_get_portname(struct ispsoftc *isp, int loopid, int nodename)
1289{
1290	u_int64_t wwn = 0;
1291	mbreg_t mbs;
1292
1293	mbs.param[0] = MBOX_GET_PORT_NAME;
1294	mbs.param[1] = loopid << 8;
1295	if (nodename)
1296		mbs.param[1] |= 1;
1297	isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_PARAM_ERROR);
1298	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
1299		wwn =
1300		    (((u_int64_t)(mbs.param[2] & 0xff)) << 56) |
1301		    (((u_int64_t)(mbs.param[2] >> 8))	<< 48) |
1302		    (((u_int64_t)(mbs.param[3] & 0xff))	<< 40) |
1303		    (((u_int64_t)(mbs.param[3] >> 8))	<< 32) |
1304		    (((u_int64_t)(mbs.param[6] & 0xff))	<< 24) |
1305		    (((u_int64_t)(mbs.param[6] >> 8))	<< 16) |
1306		    (((u_int64_t)(mbs.param[7] & 0xff))	<<  8) |
1307		    (((u_int64_t)(mbs.param[7] >> 8)));
1308	}
1309	return (wwn);
1310}
1311
1312/*
1313 * Make sure we have good FC link and know our Loop ID.
1314 */
1315
1316static int
1317isp_fclink_test(struct ispsoftc *isp, int usdelay)
1318{
1319	static char *toponames[] = {
1320		"Private Loop",
1321		"FL Port",
1322		"N-Port to N-Port",
1323		"F Port",
1324		"F Port (no FLOGI_ACC response)"
1325	};
1326	mbreg_t mbs;
1327	int count, check_for_fabric;
1328	u_int8_t lwfs;
1329	fcparam *fcp;
1330	struct lportdb *lp;
1331	isp_pdb_t pdb;
1332
1333	fcp = isp->isp_param;
1334
1335	/*
1336	 * XXX: Here is where we would start a 'loop dead' timeout
1337	 */
1338
1339	/*
1340	 * Wait up to N microseconds for F/W to go to a ready state.
1341	 */
1342	lwfs = FW_CONFIG_WAIT;
1343	count = 0;
1344	while (count < usdelay) {
1345		u_int64_t enano;
1346		u_int32_t wrk;
1347		NANOTIME_T hra, hrb;
1348
1349		GET_NANOTIME(&hra);
1350		isp_fw_state(isp);
1351		if (lwfs != fcp->isp_fwstate) {
1352			isp_prt(isp, ISP_LOGINFO, "Firmware State <%s->%s>",
1353			    isp2100_fw_statename((int)lwfs),
1354			    isp2100_fw_statename((int)fcp->isp_fwstate));
1355			lwfs = fcp->isp_fwstate;
1356		}
1357		if (fcp->isp_fwstate == FW_READY) {
1358			break;
1359		}
1360		GET_NANOTIME(&hrb);
1361
1362		/*
1363		 * Get the elapsed time in nanoseconds.
1364		 * Always guaranteed to be non-zero.
1365		 */
1366		enano = NANOTIME_SUB(&hrb, &hra);
1367
1368		isp_prt(isp, ISP_LOGDEBUG1,
1369		    "usec%d: 0x%lx->0x%lx enano 0x%x%08x",
1370		    count, (long) GET_NANOSEC(&hra), (long) GET_NANOSEC(&hrb),
1371		    (u_int32_t)(enano >> 32), (u_int32_t)(enano & 0xffffffff));
1372
1373		/*
1374		 * If the elapsed time is less than 1 millisecond,
1375		 * delay a period of time up to that millisecond of
1376		 * waiting.
1377		 *
1378		 * This peculiar code is an attempt to try and avoid
1379		 * invoking u_int64_t math support functions for some
1380		 * platforms where linkage is a problem.
1381		 */
1382		if (enano < (1000 * 1000)) {
1383			count += 1000;
1384			enano = (1000 * 1000) - enano;
1385			while (enano > (u_int64_t) 4000000000U) {
1386				USEC_SLEEP(isp, 4000000);
1387				enano -= (u_int64_t) 4000000000U;
1388			}
1389			wrk = enano;
1390			wrk /= 1000;
1391			USEC_SLEEP(isp, wrk);
1392		} else {
1393			while (enano > (u_int64_t) 4000000000U) {
1394				count += 4000000;
1395				enano -= (u_int64_t) 4000000000U;
1396			}
1397			wrk = enano;
1398			count += (wrk / 1000);
1399		}
1400	}
1401
1402	/*
1403	 * If we haven't gone to 'ready' state, return.
1404	 */
1405	if (fcp->isp_fwstate != FW_READY) {
1406		return (-1);
1407	}
1408
1409	/*
1410	 * Get our Loop ID (if possible). We really need to have it.
1411	 */
1412	mbs.param[0] = MBOX_GET_LOOP_ID;
1413	isp_mboxcmd(isp, &mbs, MBLOGALL);
1414	if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
1415		return (-1);
1416	}
1417	fcp->isp_loopid = mbs.param[1];
1418	if (IS_2200(isp) || IS_2300(isp)) {
1419		int topo = (int) mbs.param[6];
1420		if (topo < TOPO_NL_PORT || topo > TOPO_PTP_STUB)
1421			topo = TOPO_PTP_STUB;
1422		fcp->isp_topo = topo;
1423	} else {
1424		fcp->isp_topo = TOPO_NL_PORT;
1425	}
1426	fcp->isp_portid = fcp->isp_alpa = mbs.param[2] & 0xff;
1427
1428	/*
1429	 * Check to see if we're on a fabric by trying to see if we
1430	 * can talk to the fabric name server. This can be a bit
1431	 * tricky because if we're a 2100, we should check always
1432	 * (in case we're connected to an server doing aliasing).
1433	 */
1434	fcp->isp_onfabric = 0;
1435
1436	if (IS_2100(isp))
1437		check_for_fabric = 1;
1438	else if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_F_PORT)
1439		check_for_fabric = 1;
1440	else
1441		check_for_fabric = 0;
1442
1443	if (check_for_fabric && isp_getpdb(isp, FL_PORT_ID, &pdb) == 0) {
1444		int loopid = FL_PORT_ID;
1445		if (IS_2100(isp)) {
1446			fcp->isp_topo = TOPO_FL_PORT;
1447		}
1448
1449		if (BITS2WORD(pdb.pdb_portid_bits) == 0) {
1450			/*
1451			 * Crock.
1452			 */
1453			fcp->isp_topo = TOPO_NL_PORT;
1454			goto not_on_fabric;
1455		}
1456		fcp->isp_portid = mbs.param[2] | ((int) mbs.param[3] << 16);
1457
1458		/*
1459		 * Save the Fabric controller's port database entry.
1460		 */
1461		lp = &fcp->portdb[loopid];
1462		lp->node_wwn =
1463		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1464		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1465		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1466		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1467		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1468		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1469		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1470		    (((u_int64_t)pdb.pdb_nodename[7]));
1471		lp->port_wwn =
1472		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1473		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1474		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1475		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1476		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1477		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1478		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1479		    (((u_int64_t)pdb.pdb_portname[7]));
1480		lp->roles =
1481		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1482		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1483		lp->loopid = pdb.pdb_loopid;
1484		lp->loggedin = lp->valid = 1;
1485		fcp->isp_onfabric = 1;
1486		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1487		isp_register_fc4_type(isp);
1488	} else {
1489not_on_fabric:
1490		fcp->isp_onfabric = 0;
1491		fcp->portdb[FL_PORT_ID].valid = 0;
1492	}
1493
1494	isp_prt(isp, ISP_LOGINFO, topology, fcp->isp_loopid, fcp->isp_alpa,
1495	    fcp->isp_portid, fcp->isp_loopstate, toponames[fcp->isp_topo]);
1496
1497	/*
1498	 * Announce ourselves, too. This involves synthesizing an entry.
1499	 */
1500	if (fcp->isp_iid_set == 0) {
1501		fcp->isp_iid_set = 1;
1502		fcp->isp_iid = fcp->isp_loopid;
1503		lp = &fcp->portdb[fcp->isp_iid];
1504	} else {
1505		lp = &fcp->portdb[fcp->isp_iid];
1506		if (fcp->isp_portid != lp->portid ||
1507		    fcp->isp_loopid != lp->loopid ||
1508		    fcp->isp_nodewwn != ISP_NODEWWN(isp) ||
1509		    fcp->isp_portwwn != ISP_PORTWWN(isp)) {
1510			lp->valid = 0;
1511			count = fcp->isp_iid;
1512			(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1513		}
1514	}
1515	lp->loopid = fcp->isp_loopid;
1516	lp->portid = fcp->isp_portid;
1517	lp->node_wwn = ISP_NODEWWN(isp);
1518	lp->port_wwn = ISP_PORTWWN(isp);
1519	switch (isp->isp_role) {
1520	case ISP_ROLE_NONE:
1521		lp->roles = 0;
1522		break;
1523	case ISP_ROLE_TARGET:
1524		lp->roles = SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT;
1525		break;
1526	case ISP_ROLE_INITIATOR:
1527		lp->roles = SVC3_INI_ROLE >> SVC3_ROLE_SHIFT;
1528		break;
1529	case ISP_ROLE_BOTH:
1530		lp->roles = (SVC3_INI_ROLE|SVC3_TGT_ROLE) >> SVC3_ROLE_SHIFT;
1531		break;
1532	}
1533	lp->loggedin = lp->valid = 1;
1534	count = fcp->isp_iid;
1535	(void) isp_async(isp, ISPASYNC_PROMENADE, &count);
1536	return (0);
1537}
1538
1539static char *
1540isp2100_fw_statename(int state)
1541{
1542	switch(state) {
1543	case FW_CONFIG_WAIT:	return "Config Wait";
1544	case FW_WAIT_AL_PA:	return "Waiting for AL_PA";
1545	case FW_WAIT_LOGIN:	return "Wait Login";
1546	case FW_READY:		return "Ready";
1547	case FW_LOSS_OF_SYNC:	return "Loss Of Sync";
1548	case FW_ERROR:		return "Error";
1549	case FW_REINIT:		return "Re-Init";
1550	case FW_NON_PART:	return "Nonparticipating";
1551	default:		return "?????";
1552	}
1553}
1554
1555/*
1556 * Synchronize our soft copy of the port database with what the f/w thinks
1557 * (with a view toward possibly for a specific target....)
1558 */
1559
1560static int
1561isp_pdb_sync(struct ispsoftc *isp)
1562{
1563	struct lportdb *lp;
1564	fcparam *fcp = isp->isp_param;
1565	isp_pdb_t pdb;
1566	int loopid, base, lim;
1567
1568	/*
1569	 * Make sure we're okay for doing this right now.
1570	 */
1571	if (fcp->isp_loopstate != LOOP_PDB_RCVD &&
1572	    fcp->isp_loopstate != LOOP_FSCAN_DONE &&
1573	    fcp->isp_loopstate != LOOP_LSCAN_DONE) {
1574		return (-1);
1575	}
1576
1577	if (fcp->isp_topo == TOPO_FL_PORT || fcp->isp_topo == TOPO_NL_PORT ||
1578	    fcp->isp_topo == TOPO_N_PORT) {
1579		if (fcp->isp_loopstate < LOOP_LSCAN_DONE) {
1580			if (isp_scan_loop(isp) != 0) {
1581				return (-1);
1582			}
1583		}
1584	}
1585	fcp->isp_loopstate = LOOP_SYNCING_PDB;
1586
1587	/*
1588	 * If we get this far, we've settled our differences with the f/w
1589	 * (for local loop device) and we can say that the loop state is ready.
1590	 */
1591
1592	if (fcp->isp_topo == TOPO_NL_PORT) {
1593		fcp->loop_seen_once = 1;
1594		fcp->isp_loopstate = LOOP_READY;
1595		return (0);
1596	}
1597
1598	/*
1599	 * Find all Fabric Entities that didn't make it from one scan to the
1600	 * next and let the world know they went away. Scan the whole database.
1601	 */
1602	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[MAX_FC_TARG]; lp++) {
1603		if (lp->was_fabric_dev && lp->fabric_dev == 0) {
1604			loopid = lp - fcp->portdb;
1605			lp->valid = 0;	/* should already be set */
1606			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1607			MEMZERO((void *) lp, sizeof (*lp));
1608			continue;
1609		}
1610		lp->was_fabric_dev = lp->fabric_dev;
1611	}
1612
1613	if (fcp->isp_topo == TOPO_FL_PORT)
1614		base = FC_SNS_ID+1;
1615	else
1616		base = 0;
1617
1618	if (fcp->isp_topo == TOPO_N_PORT)
1619		lim = 1;
1620	else
1621		lim = MAX_FC_TARG;
1622
1623	/*
1624	 * Now log in any fabric devices that the outer layer has
1625	 * left for us to see. This seems the most sane policy
1626	 * for the moment.
1627	 */
1628	for (lp = &fcp->portdb[base]; lp < &fcp->portdb[lim]; lp++) {
1629		u_int32_t portid;
1630		mbreg_t mbs;
1631
1632		loopid = lp - fcp->portdb;
1633		if (loopid >= FL_PORT_ID && loopid <= FC_SNS_ID) {
1634			continue;
1635		}
1636
1637		/*
1638		 * Anything here?
1639		 */
1640		if (lp->port_wwn == 0) {
1641			continue;
1642		}
1643
1644		/*
1645		 * Don't try to log into yourself.
1646		 */
1647		if ((portid = lp->portid) == fcp->isp_portid) {
1648			continue;
1649		}
1650
1651
1652		/*
1653		 * If we'd been logged in- see if we still are and we haven't
1654		 * changed. If so, no need to log ourselves out, etc..
1655		 *
1656		 * Unfortunately, our charming Qlogic f/w has decided to
1657		 * return a valid port database entry for a fabric device
1658		 * that has, in fact, gone away. And it hangs trying to
1659		 * log it out.
1660		 */
1661		if (lp->loggedin &&
1662		    isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1663			int nrole;
1664			u_int64_t nwwnn, nwwpn;
1665			nwwnn =
1666			    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1667			    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1668			    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1669			    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1670			    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1671			    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1672			    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1673			    (((u_int64_t)pdb.pdb_nodename[7]));
1674			nwwpn =
1675			    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1676			    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1677			    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1678			    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1679			    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1680			    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1681			    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1682			    (((u_int64_t)pdb.pdb_portname[7]));
1683			nrole = (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >>
1684			    SVC3_ROLE_SHIFT;
1685			if (pdb.pdb_loopid == lp->loopid && lp->portid ==
1686			    (u_int32_t) BITS2WORD(pdb.pdb_portid_bits) &&
1687			    nwwnn == lp->node_wwn && nwwpn == lp->port_wwn &&
1688			    lp->roles == nrole && lp->force_logout == 0) {
1689				lp->loggedin = lp->valid = 1;
1690				isp_prt(isp, ISP_LOGINFO, lretained,
1691				    (int) (lp - fcp->portdb),
1692				    (int) lp->loopid, lp->portid);
1693				continue;
1694			}
1695		}
1696
1697		lp->force_logout = 0;
1698
1699		if (fcp->isp_fwstate != FW_READY ||
1700		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1701			return (-1);
1702		}
1703
1704		/*
1705		 * Force a logout if we were logged in.
1706		 */
1707		if (lp->loggedin) {
1708			if (isp_getpdb(isp, lp->loopid, &pdb) == 0) {
1709				mbs.param[0] = MBOX_FABRIC_LOGOUT;
1710				mbs.param[1] = lp->loopid << 8;
1711				mbs.param[2] = 0;
1712				mbs.param[3] = 0;
1713				isp_mboxcmd(isp, &mbs, MBLOGNONE);
1714				lp->loggedin = 0;
1715				isp_prt(isp, ISP_LOGINFO, plogout,
1716				    (int) (lp - fcp->portdb), lp->loopid,
1717				    lp->portid);
1718			}
1719			lp->loggedin = 0;
1720			if (fcp->isp_fwstate != FW_READY ||
1721			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1722				return (-1);
1723			}
1724		}
1725
1726		/*
1727		 * And log in....
1728		 */
1729		loopid = lp - fcp->portdb;
1730		lp->loopid = FL_PORT_ID;
1731		do {
1732			mbs.param[0] = MBOX_FABRIC_LOGIN;
1733			mbs.param[1] = loopid << 8;
1734			mbs.param[2] = portid >> 16;
1735			mbs.param[3] = portid & 0xffff;
1736			if (IS_2200(isp) || IS_2300(isp)) {
1737				/* only issue a PLOGI if not logged in */
1738				mbs.param[1] |= 0x1;
1739			}
1740			isp_mboxcmd(isp, &mbs, MBLOGALL & ~(MBOX_LOOP_ID_USED |
1741			    MBOX_PORT_ID_USED | MBOX_COMMAND_ERROR));
1742			if (fcp->isp_fwstate != FW_READY ||
1743			    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1744				return (-1);
1745			}
1746			switch (mbs.param[0]) {
1747			case MBOX_LOOP_ID_USED:
1748				/*
1749				 * Try the next available loop id.
1750				 */
1751				loopid++;
1752				break;
1753			case MBOX_PORT_ID_USED:
1754				/*
1755				 * This port is already logged in.
1756				 * Snaffle the loop id it's using if it's
1757				 * nonzero, otherwise we're hosed.
1758				 */
1759				if (mbs.param[1] != 0) {
1760					loopid = mbs.param[1];
1761					isp_prt(isp, ISP_LOGINFO, retained,
1762					    loopid, (int) (lp - fcp->portdb),
1763					    lp->portid);
1764				} else {
1765					loopid = MAX_FC_TARG;
1766					break;
1767				}
1768				/* FALLTHROUGH */
1769			case MBOX_COMMAND_COMPLETE:
1770				lp->loggedin = 1;
1771				lp->loopid = loopid;
1772				break;
1773			case MBOX_COMMAND_ERROR:
1774				isp_prt(isp, ISP_LOGINFO, plogierr,
1775				    portid, mbs.param[1]);
1776				/* FALLTHROUGH */
1777			case MBOX_ALL_IDS_USED: /* We're outta IDs */
1778			default:
1779				loopid = MAX_FC_TARG;
1780				break;
1781			}
1782		} while (lp->loopid == FL_PORT_ID && loopid < MAX_FC_TARG);
1783
1784		/*
1785		 * If we get here and we haven't set a Loop ID,
1786		 * we failed to log into this device.
1787		 */
1788
1789		if (lp->loopid == FL_PORT_ID) {
1790			lp->loopid = 0;
1791			continue;
1792		}
1793
1794		/*
1795		 * Make sure we can get the approriate port information.
1796		 */
1797		if (isp_getpdb(isp, lp->loopid, &pdb) != 0) {
1798			isp_prt(isp, ISP_LOGWARN, nopdb, lp->portid);
1799			goto dump_em;
1800		}
1801
1802		if (fcp->isp_fwstate != FW_READY ||
1803		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1804			return (-1);
1805		}
1806
1807		if (pdb.pdb_loopid != lp->loopid) {
1808			isp_prt(isp, ISP_LOGWARN, pdbmfail1,
1809			    lp->portid, pdb.pdb_loopid);
1810			goto dump_em;
1811		}
1812
1813		if (lp->portid != (u_int32_t) BITS2WORD(pdb.pdb_portid_bits)) {
1814			isp_prt(isp, ISP_LOGWARN, pdbmfail2,
1815			    lp->portid, BITS2WORD(pdb.pdb_portid_bits));
1816			goto dump_em;
1817		}
1818
1819		lp->roles =
1820		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1821		lp->node_wwn =
1822		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1823		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1824		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1825		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1826		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1827		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1828		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1829		    (((u_int64_t)pdb.pdb_nodename[7]));
1830		lp->port_wwn =
1831		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1832		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1833		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1834		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1835		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1836		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1837		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1838		    (((u_int64_t)pdb.pdb_portname[7]));
1839		/*
1840		 * Check to make sure this all makes sense.
1841		 */
1842		if (lp->node_wwn && lp->port_wwn) {
1843			lp->valid = 1;
1844			loopid = lp - fcp->portdb;
1845			(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
1846			continue;
1847		}
1848dump_em:
1849		lp->valid = 0;
1850		isp_prt(isp, ISP_LOGINFO,
1851		    ldumped, loopid, lp->loopid, lp->portid);
1852		mbs.param[0] = MBOX_FABRIC_LOGOUT;
1853		mbs.param[1] = lp->loopid << 8;
1854		mbs.param[2] = 0;
1855		mbs.param[3] = 0;
1856		isp_mboxcmd(isp, &mbs, MBLOGNONE);
1857		if (fcp->isp_fwstate != FW_READY ||
1858		    fcp->isp_loopstate != LOOP_SYNCING_PDB) {
1859			return (-1);
1860		}
1861	}
1862	/*
1863	 * If we get here, we've for sure seen not only a valid loop
1864	 * but know what is or isn't on it, so mark this for usage
1865	 * in isp_start.
1866	 */
1867	fcp->loop_seen_once = 1;
1868	fcp->isp_loopstate = LOOP_READY;
1869	return (0);
1870}
1871
1872static int
1873isp_scan_loop(struct ispsoftc *isp)
1874{
1875	struct lportdb *lp;
1876	fcparam *fcp = isp->isp_param;
1877	isp_pdb_t pdb;
1878	int loopid, lim, hival;
1879
1880	switch (fcp->isp_topo) {
1881	case TOPO_NL_PORT:
1882		hival = FL_PORT_ID;
1883		break;
1884	case TOPO_N_PORT:
1885		hival = 2;
1886		break;
1887	case TOPO_FL_PORT:
1888		hival = FC_PORT_ID;
1889		break;
1890	default:
1891		fcp->isp_loopstate = LOOP_LSCAN_DONE;
1892		return (0);
1893	}
1894	fcp->isp_loopstate = LOOP_SCANNING_LOOP;
1895
1896	/*
1897	 * make sure the temp port database is clean...
1898	 */
1899	MEMZERO((void *)fcp->tport, sizeof (fcp->tport));
1900
1901	/*
1902	 * Run through the local loop ports and get port database info
1903	 * for each loop ID.
1904	 *
1905	 * There's a somewhat unexplained situation where the f/w passes back
1906	 * the wrong database entity- if that happens, just restart (up to
1907	 * FL_PORT_ID times).
1908	 */
1909	for (lim = loopid = 0; loopid < hival; loopid++) {
1910		lp = &fcp->tport[loopid];
1911
1912		/*
1913		 * Don't even try for ourselves...
1914	 	 */
1915		if (loopid == fcp->isp_loopid)
1916			continue;
1917
1918		lp->node_wwn = isp_get_portname(isp, loopid, 1);
1919		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1920			return (-1);
1921		if (lp->node_wwn == 0)
1922			continue;
1923		lp->port_wwn = isp_get_portname(isp, loopid, 0);
1924		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1925			return (-1);
1926		if (lp->port_wwn == 0) {
1927			lp->node_wwn = 0;
1928			continue;
1929		}
1930
1931		/*
1932		 * Get an entry....
1933		 */
1934		if (isp_getpdb(isp, loopid, &pdb) != 0) {
1935			if (fcp->isp_loopstate < LOOP_SCANNING_LOOP)
1936				return (-1);
1937			continue;
1938		}
1939		if (fcp->isp_loopstate < LOOP_SCANNING_LOOP) {
1940			return (-1);
1941		}
1942
1943		/*
1944		 * If the returned database element doesn't match what we
1945		 * asked for, restart the process entirely (up to a point...).
1946		 */
1947		if (pdb.pdb_loopid != loopid) {
1948			loopid = 0;
1949			if (lim++ < hival) {
1950				continue;
1951			}
1952			isp_prt(isp, ISP_LOGWARN,
1953			    "giving up on synchronizing the port database");
1954			return (-1);
1955		}
1956
1957		/*
1958		 * Save the pertinent info locally.
1959		 */
1960		lp->node_wwn =
1961		    (((u_int64_t)pdb.pdb_nodename[0]) << 56) |
1962		    (((u_int64_t)pdb.pdb_nodename[1]) << 48) |
1963		    (((u_int64_t)pdb.pdb_nodename[2]) << 40) |
1964		    (((u_int64_t)pdb.pdb_nodename[3]) << 32) |
1965		    (((u_int64_t)pdb.pdb_nodename[4]) << 24) |
1966		    (((u_int64_t)pdb.pdb_nodename[5]) << 16) |
1967		    (((u_int64_t)pdb.pdb_nodename[6]) <<  8) |
1968		    (((u_int64_t)pdb.pdb_nodename[7]));
1969		lp->port_wwn =
1970		    (((u_int64_t)pdb.pdb_portname[0]) << 56) |
1971		    (((u_int64_t)pdb.pdb_portname[1]) << 48) |
1972		    (((u_int64_t)pdb.pdb_portname[2]) << 40) |
1973		    (((u_int64_t)pdb.pdb_portname[3]) << 32) |
1974		    (((u_int64_t)pdb.pdb_portname[4]) << 24) |
1975		    (((u_int64_t)pdb.pdb_portname[5]) << 16) |
1976		    (((u_int64_t)pdb.pdb_portname[6]) <<  8) |
1977		    (((u_int64_t)pdb.pdb_portname[7]));
1978		lp->roles =
1979		    (pdb.pdb_prli_svc3 & SVC3_ROLE_MASK) >> SVC3_ROLE_SHIFT;
1980		lp->portid = BITS2WORD(pdb.pdb_portid_bits);
1981		lp->loopid = pdb.pdb_loopid;
1982	}
1983
1984	/*
1985	 * Mark all of the permanent local loop database entries as invalid
1986	 * (except our own entry).
1987	 */
1988	for (loopid = 0; loopid < hival; loopid++) {
1989		if (loopid == fcp->isp_iid) {
1990			fcp->portdb[loopid].valid = 1;
1991			fcp->portdb[loopid].loopid = fcp->isp_loopid;
1992			continue;
1993		}
1994		fcp->portdb[loopid].valid = 0;
1995	}
1996
1997	/*
1998	 * Now merge our local copy of the port database into our saved copy.
1999	 * Notify the outer layers of new devices arriving.
2000	 */
2001	for (loopid = 0; loopid < hival; loopid++) {
2002		int i;
2003
2004		/*
2005		 * If we don't have a non-zero Port WWN, we're not here.
2006		 */
2007		if (fcp->tport[loopid].port_wwn == 0) {
2008			continue;
2009		}
2010
2011		/*
2012		 * Skip ourselves.
2013		 */
2014		if (loopid == fcp->isp_iid) {
2015			continue;
2016		}
2017
2018		/*
2019		 * For the purposes of deciding whether this is the
2020		 * 'same' device or not, we only search for an identical
2021		 * Port WWN. Node WWNs may or may not be the same as
2022		 * the Port WWN, and there may be multiple different
2023		 * Port WWNs with the same Node WWN. It would be chaos
2024		 * to have multiple identical Port WWNs, so we don't
2025		 * allow that.
2026		 */
2027
2028		for (i = 0; i < hival; i++) {
2029			int j;
2030			if (fcp->portdb[i].port_wwn == 0)
2031				continue;
2032			if (fcp->portdb[i].port_wwn !=
2033			    fcp->tport[loopid].port_wwn)
2034				continue;
2035			/*
2036			 * We found this WWN elsewhere- it's changed
2037			 * loopids then. We don't change it's actual
2038			 * position in our cached port database- we
2039			 * just change the actual loop ID we'd use.
2040			 */
2041			if (fcp->portdb[i].loopid != loopid) {
2042				isp_prt(isp, ISP_LOGINFO, portshift, i,
2043				    fcp->portdb[i].loopid,
2044				    fcp->portdb[i].portid, loopid,
2045				    fcp->tport[loopid].portid);
2046			}
2047			fcp->portdb[i].portid = fcp->tport[loopid].portid;
2048			fcp->portdb[i].loopid = loopid;
2049			fcp->portdb[i].valid = 1;
2050			fcp->portdb[i].roles = fcp->tport[loopid].roles;
2051
2052			/*
2053			 * Now make sure this Port WWN doesn't exist elsewhere
2054			 * in the port database.
2055			 */
2056			for (j = i+1; j < hival; j++) {
2057				if (fcp->portdb[i].port_wwn !=
2058				    fcp->portdb[j].port_wwn) {
2059					continue;
2060				}
2061				isp_prt(isp, ISP_LOGWARN, portdup, j, i);
2062				/*
2063				 * Invalidate the 'old' *and* 'new' ones.
2064				 * This is really harsh and not quite right,
2065				 * but if this happens, we really don't know
2066				 * who is what at this point.
2067				 */
2068				fcp->portdb[i].valid = 0;
2069				fcp->portdb[j].valid = 0;
2070			}
2071			break;
2072		}
2073
2074		/*
2075		 * If we didn't traverse the entire port database,
2076		 * then we found (and remapped) an existing entry.
2077		 * No need to notify anyone- go for the next one.
2078		 */
2079		if (i < hival) {
2080			isp_prt(isp, ISP_LOGINFO, retained,
2081			    fcp->portdb[i].loopid, i, fcp->portdb[i].portid);
2082			continue;
2083		}
2084
2085		/*
2086		 * We've not found this Port WWN anywhere. It's a new entry.
2087		 * See if we can leave it where it is (with target == loopid).
2088		 */
2089		if (fcp->portdb[loopid].port_wwn != 0) {
2090			for (lim = 0; lim < hival; lim++) {
2091				if (fcp->portdb[lim].port_wwn == 0)
2092					break;
2093			}
2094			/* "Cannot Happen" */
2095			if (lim == hival) {
2096				isp_prt(isp, ISP_LOGWARN, "Remap Overflow");
2097				continue;
2098			}
2099			i = lim;
2100		} else {
2101			i = loopid;
2102		}
2103
2104		/*
2105		 * NB:	The actual loopid we use here is loopid- we may
2106		 *	in fact be at a completely different index (target).
2107		 */
2108		fcp->portdb[i].loopid = loopid;
2109		fcp->portdb[i].port_wwn = fcp->tport[loopid].port_wwn;
2110		fcp->portdb[i].node_wwn = fcp->tport[loopid].node_wwn;
2111		fcp->portdb[i].roles = fcp->tport[loopid].roles;
2112		fcp->portdb[i].portid = fcp->tport[loopid].portid;
2113		fcp->portdb[i].valid = 1;
2114
2115		/*
2116		 * Tell the outside world we've arrived.
2117		 */
2118		(void) isp_async(isp, ISPASYNC_PROMENADE, &i);
2119	}
2120
2121	/*
2122	 * Now find all previously used targets that are now invalid and
2123	 * notify the outer layers that they're gone.
2124	 */
2125	for (lp = &fcp->portdb[0]; lp < &fcp->portdb[hival]; lp++) {
2126		if (lp->valid || lp->port_wwn == 0) {
2127			continue;
2128		}
2129
2130		/*
2131		 * Tell the outside world we've gone
2132		 * away and erase our pdb entry.
2133		 *
2134		 */
2135		loopid = lp - fcp->portdb;
2136		(void) isp_async(isp, ISPASYNC_PROMENADE, &loopid);
2137		MEMZERO((void *) lp, sizeof (*lp));
2138	}
2139	fcp->isp_loopstate = LOOP_LSCAN_DONE;
2140	return (0);
2141}
2142
2143static int
2144isp_scan_fabric(struct ispsoftc *isp)
2145{
2146	fcparam *fcp = isp->isp_param;
2147	u_int32_t portid, first_portid;
2148	sns_screq_t *reqp;
2149	sns_scrsp_t *resp;
2150	mbreg_t mbs;
2151	int hicap, first_portid_seen;
2152
2153	if (fcp->isp_onfabric == 0) {
2154		fcp->isp_loopstate = LOOP_FSCAN_DONE;
2155		return (0);
2156	}
2157
2158	reqp = (sns_screq_t *) fcp->isp_scratch;
2159	resp = (sns_scrsp_t *) (&((char *)fcp->isp_scratch)[0x100]);
2160	/*
2161	 * Since Port IDs are 24 bits, we can check against having seen
2162	 * anything yet with this value.
2163	 */
2164	first_portid = portid = fcp->isp_portid;
2165	fcp->isp_loopstate = LOOP_SCANNING_FABRIC;
2166
2167	for (first_portid_seen = hicap = 0; hicap < 65535; hicap++) {
2168		MEMZERO((void *) reqp, SNS_GAN_REQ_SIZE);
2169		reqp->snscb_rblen = SNS_GAN_RESP_SIZE >> 1;
2170		reqp->snscb_addr[RQRSP_ADDR0015] =
2171			DMA_LSW(fcp->isp_scdma + 0x100);
2172		reqp->snscb_addr[RQRSP_ADDR1631] =
2173			DMA_MSW(fcp->isp_scdma + 0x100);
2174		reqp->snscb_sblen = 6;
2175		reqp->snscb_data[0] = SNS_GAN;
2176		reqp->snscb_data[4] = portid & 0xffff;
2177		reqp->snscb_data[5] = (portid >> 16) & 0xff;
2178		ISP_SWIZZLE_SNS_REQ(isp, reqp);
2179		mbs.param[0] = MBOX_SEND_SNS;
2180		mbs.param[1] = SNS_GAN_REQ_SIZE >> 1;
2181		mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2182		mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2183		mbs.param[6] = 0;
2184		mbs.param[7] = 0;
2185		isp_mboxcmd(isp, &mbs, MBLOGALL);
2186		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2187			if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC) {
2188				fcp->isp_loopstate = LOOP_PDB_RCVD;
2189			}
2190			return (-1);
2191		}
2192		if (fcp->isp_fwstate != FW_READY ||
2193		    fcp->isp_loopstate < LOOP_SCANNING_FABRIC) {
2194			return (-1);
2195		}
2196		ISP_UNSWIZZLE_SNS_RSP(isp, resp, SNS_GAN_RESP_SIZE >> 1);
2197		portid = (((u_int32_t) resp->snscb_port_id[0]) << 16) |
2198		    (((u_int32_t) resp->snscb_port_id[1]) << 8) |
2199		    (((u_int32_t) resp->snscb_port_id[2]));
2200		(void) isp_async(isp, ISPASYNC_FABRIC_DEV, resp);
2201		if (first_portid == portid) {
2202			fcp->isp_loopstate = LOOP_FSCAN_DONE;
2203			return (0);
2204		}
2205	}
2206
2207	isp_prt(isp, ISP_LOGWARN, "broken fabric nameserver...*wheeze*...");
2208
2209	/*
2210	 * We either have a broken name server or a huge fabric if we get here.
2211	 */
2212	fcp->isp_loopstate = LOOP_FSCAN_DONE;
2213	return (0);
2214}
2215
2216static void
2217isp_register_fc4_type(struct ispsoftc *isp)
2218{
2219	fcparam *fcp = isp->isp_param;
2220	sns_screq_t *reqp;
2221	mbreg_t mbs;
2222
2223	reqp = (sns_screq_t *) fcp->isp_scratch;
2224	MEMZERO((void *) reqp, SNS_RFT_REQ_SIZE);
2225	reqp->snscb_rblen = SNS_RFT_RESP_SIZE >> 1;
2226	reqp->snscb_addr[RQRSP_ADDR0015] = DMA_LSW(fcp->isp_scdma + 0x100);
2227	reqp->snscb_addr[RQRSP_ADDR1631] = DMA_MSW(fcp->isp_scdma + 0x100);
2228	reqp->snscb_sblen = 22;
2229	reqp->snscb_data[0] = SNS_RFT;
2230	reqp->snscb_data[4] = fcp->isp_portid & 0xffff;
2231	reqp->snscb_data[5] = (fcp->isp_portid >> 16) & 0xff;
2232	reqp->snscb_data[6] = 0x100;	/* SCS - FCP */
2233#if	0
2234	reqp->snscb_data[6] |= 20;	/* ISO/IEC 8802-2 LLC/SNAP */
2235#endif
2236	ISP_SWIZZLE_SNS_REQ(isp, reqp);
2237	mbs.param[0] = MBOX_SEND_SNS;
2238	mbs.param[1] = SNS_RFT_REQ_SIZE >> 1;
2239	mbs.param[2] = DMA_MSW(fcp->isp_scdma);
2240	mbs.param[3] = DMA_LSW(fcp->isp_scdma);
2241	mbs.param[6] = 0;
2242	mbs.param[7] = 0;
2243	isp_mboxcmd(isp, &mbs, MBLOGALL);
2244	if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2245		isp_prt(isp, ISP_LOGDEBUG0, "Register FC4 types succeeded");
2246	}
2247}
2248
2249/*
2250 * Start a command. Locking is assumed done in the caller.
2251 */
2252
2253int
2254isp_start(XS_T *xs)
2255{
2256	struct ispsoftc *isp;
2257	u_int16_t iptr, optr, handle;
2258	union {
2259		ispreq_t *_reqp;
2260		ispreqt2_t *_t2reqp;
2261	} _u;
2262#define	reqp	_u._reqp
2263#define	t2reqp	_u._t2reqp
2264#define	UZSIZE	max(sizeof (ispreq_t), sizeof (ispreqt2_t))
2265	int target, i;
2266
2267	XS_INITERR(xs);
2268	isp = XS_ISP(xs);
2269
2270	/*
2271	 * Check to make sure we're supporting initiator role.
2272	 */
2273	if ((isp->isp_role & ISP_ROLE_INITIATOR) == 0) {
2274		XS_SETERR(xs, HBA_SELTIMEOUT);
2275		return (CMD_COMPLETE);
2276	}
2277
2278	/*
2279	 * Now make sure we're running.
2280	 */
2281
2282	if (isp->isp_state != ISP_RUNSTATE) {
2283		isp_prt(isp, ISP_LOGERR, "Adapter not at RUNSTATE");
2284		XS_SETERR(xs, HBA_BOTCH);
2285		return (CMD_COMPLETE);
2286	}
2287
2288	/*
2289	 * Check command CDB length, etc.. We really are limited to 16 bytes
2290	 * for Fibre Channel, but can do up to 44 bytes in parallel SCSI,
2291	 * but probably only if we're running fairly new firmware (we'll
2292	 * let the old f/w choke on an extended command queue entry).
2293	 */
2294
2295	if (XS_CDBLEN(xs) > (IS_FC(isp)? 16 : 44) || XS_CDBLEN(xs) == 0) {
2296		isp_prt(isp, ISP_LOGERR,
2297		    "unsupported cdb length (%d, CDB[0]=0x%x)",
2298		    XS_CDBLEN(xs), XS_CDBP(xs)[0] & 0xff);
2299		XS_SETERR(xs, HBA_BOTCH);
2300		return (CMD_COMPLETE);
2301	}
2302
2303	/*
2304	 * Check to see whether we have good firmware state still or
2305	 * need to refresh our port database for this target.
2306	 */
2307	target = XS_TGT(xs);
2308	if (IS_FC(isp)) {
2309		fcparam *fcp = isp->isp_param;
2310		struct lportdb *lp;
2311#ifdef	HANDLE_LOOPSTATE_IN_OUTER_LAYERS
2312		if (fcp->isp_fwstate != FW_READY ||
2313		    fcp->isp_loopstate != LOOP_READY) {
2314			return (CMD_RQLATER);
2315		}
2316
2317		/*
2318		 * If we're not on a Fabric, we can't have a target
2319		 * above FL_PORT_ID-1.
2320		 *
2321		 * If we're on a fabric and *not* connected as an F-port,
2322		 * we can't have a target less than FC_SNS_ID+1. This
2323		 * keeps us from having to sort out the difference between
2324		 * local public loop devices and those which we might get
2325		 * from a switch's database.
2326		 */
2327		if (fcp->isp_onfabric == 0) {
2328			if (target >= FL_PORT_ID) {
2329				XS_SETERR(xs, HBA_SELTIMEOUT);
2330				return (CMD_COMPLETE);
2331			}
2332		} else {
2333			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2334				XS_SETERR(xs, HBA_SELTIMEOUT);
2335				return (CMD_COMPLETE);
2336			}
2337			if (fcp->isp_topo != TOPO_F_PORT &&
2338			    target < FL_PORT_ID) {
2339				XS_SETERR(xs, HBA_SELTIMEOUT);
2340				return (CMD_COMPLETE);
2341			}
2342		}
2343#else
2344		/*
2345		 * Check for f/w being in ready state. If the f/w
2346		 * isn't in ready state, then we don't know our
2347		 * loop ID and the f/w hasn't completed logging
2348		 * into all targets on the loop. If this is the
2349		 * case, then bounce the command. We pretend this is
2350		 * a SELECTION TIMEOUT error if we've never gone to
2351		 * FW_READY state at all- in this case we may not
2352		 * be hooked to a loop at all and we shouldn't hang
2353		 * the machine for this. Otherwise, defer this command
2354		 * until later.
2355		 */
2356		if (fcp->isp_fwstate != FW_READY) {
2357			/*
2358			 * Give ourselves at most a 250ms delay.
2359			 */
2360			if (isp_fclink_test(isp, 250000)) {
2361				XS_SETERR(xs, HBA_SELTIMEOUT);
2362				if (fcp->loop_seen_once) {
2363					return (CMD_RQLATER);
2364				} else {
2365					return (CMD_COMPLETE);
2366				}
2367			}
2368		}
2369
2370		/*
2371		 * If we're not on a Fabric, we can't have a target
2372		 * above FL_PORT_ID-1.
2373		 *
2374		 * If we're on a fabric and *not* connected as an F-port,
2375		 * we can't have a target less than FC_SNS_ID+1. This
2376		 * keeps us from having to sort out the difference between
2377		 * local public loop devices and those which we might get
2378		 * from a switch's database.
2379		 */
2380		if (fcp->isp_onfabric == 0) {
2381			if (target >= FL_PORT_ID) {
2382				XS_SETERR(xs, HBA_SELTIMEOUT);
2383				return (CMD_COMPLETE);
2384			}
2385		} else {
2386			if (target >= FL_PORT_ID && target <= FC_SNS_ID) {
2387				XS_SETERR(xs, HBA_SELTIMEOUT);
2388				return (CMD_COMPLETE);
2389			}
2390			if (fcp->isp_topo != TOPO_F_PORT &&
2391			    target < FL_PORT_ID) {
2392				XS_SETERR(xs, HBA_SELTIMEOUT);
2393				return (CMD_COMPLETE);
2394			}
2395		}
2396
2397		/*
2398		 * If our loop state is such that we haven't yet received
2399		 * a "Port Database Changed" notification (after a LIP or
2400		 * a Loop Reset or firmware initialization), then defer
2401		 * sending commands for a little while, but only if we've
2402		 * seen a valid loop at one point (otherwise we can get
2403		 * stuck at initialization time).
2404		 */
2405		if (fcp->isp_loopstate < LOOP_PDB_RCVD) {
2406			XS_SETERR(xs, HBA_SELTIMEOUT);
2407			if (fcp->loop_seen_once) {
2408				return (CMD_RQLATER);
2409			} else {
2410				return (CMD_COMPLETE);
2411			}
2412		}
2413
2414		/*
2415		 * If we're in the middle of loop or fabric scanning
2416		 * or merging the port databases, retry this command later.
2417		 */
2418		if (fcp->isp_loopstate == LOOP_SCANNING_FABRIC ||
2419		    fcp->isp_loopstate == LOOP_SCANNING_LOOP ||
2420		    fcp->isp_loopstate == LOOP_SYNCING_PDB) {
2421			return (CMD_RQLATER);
2422		}
2423
2424		/*
2425		 * If our loop state is now such that we've just now
2426		 * received a Port Database Change notification, then
2427		 * we have to go off and (re)scan the fabric. We back
2428		 * out and try again later if this doesn't work.
2429		 */
2430		if (fcp->isp_loopstate == LOOP_PDB_RCVD && fcp->isp_onfabric) {
2431			if (isp_scan_fabric(isp)) {
2432				return (CMD_RQLATER);
2433			}
2434			if (fcp->isp_fwstate != FW_READY ||
2435			    fcp->isp_loopstate < LOOP_PDB_RCVD) {
2436				return (CMD_RQLATER);
2437			}
2438		}
2439
2440		/*
2441		 * If our loop state is now such that we've just now
2442		 * received a Port Database Change notification, then
2443		 * we have to go off and (re)synchronize our port
2444		 * database.
2445		 */
2446		if (fcp->isp_loopstate < LOOP_READY) {
2447			if (isp_pdb_sync(isp)) {
2448				return (CMD_RQLATER);
2449			}
2450			if (fcp->isp_fwstate != FW_READY ||
2451			    fcp->isp_loopstate != LOOP_READY) {
2452				return (CMD_RQLATER);
2453			}
2454		}
2455
2456		/*
2457		 * XXX: Here's were we would cancel any loop_dead flag
2458		 * XXX: also cancel in dead_loop timeout that's running
2459		 */
2460#endif
2461
2462		/*
2463		 * Now check whether we should even think about pursuing this.
2464		 */
2465		lp = &fcp->portdb[target];
2466		if (lp->valid == 0) {
2467			XS_SETERR(xs, HBA_SELTIMEOUT);
2468			return (CMD_COMPLETE);
2469		}
2470		if ((lp->roles & (SVC3_TGT_ROLE >> SVC3_ROLE_SHIFT)) == 0) {
2471			isp_prt(isp, ISP_LOGDEBUG2,
2472			    "Target %d does not have target service", target);
2473			XS_SETERR(xs, HBA_SELTIMEOUT);
2474			return (CMD_COMPLETE);
2475		}
2476		/*
2477		 * Now turn target into what the actual Loop ID is.
2478		 */
2479		target = lp->loopid;
2480	}
2481
2482	/*
2483	 * Next check to see if any HBA or Device
2484	 * parameters need to be updated.
2485	 */
2486	if (isp->isp_update != 0) {
2487		isp_update(isp);
2488	}
2489
2490	if (isp_getrqentry(isp, &iptr, &optr, (void **) &reqp)) {
2491		isp_prt(isp, ISP_LOGDEBUG0, "Request Queue Overflow");
2492		XS_SETERR(xs, HBA_BOTCH);
2493		return (CMD_EAGAIN);
2494	}
2495
2496	/*
2497	 * Now see if we need to synchronize the ISP with respect to anything.
2498	 * We do dual duty here (cough) for synchronizing for busses other
2499	 * than which we got here to send a command to.
2500	 */
2501	if (isp->isp_sendmarker) {
2502		u_int8_t n = (IS_DUALBUS(isp)? 2: 1);
2503		/*
2504		 * Check ports to send markers for...
2505		 */
2506		for (i = 0; i < n; i++) {
2507			if ((isp->isp_sendmarker & (1 << i)) == 0) {
2508				continue;
2509			}
2510			MEMZERO((void *) reqp, sizeof (*reqp));
2511			reqp->req_header.rqs_entry_count = 1;
2512			reqp->req_header.rqs_entry_type = RQSTYPE_MARKER;
2513			reqp->req_modifier = SYNC_ALL;
2514			reqp->req_target = i << 7;	/* insert bus number */
2515			ISP_SWIZZLE_REQUEST(isp, reqp);
2516			ISP_ADD_REQUEST(isp, iptr);
2517
2518			if (isp_getrqentry(isp, &iptr, &optr, (void **)&reqp)) {
2519				isp_prt(isp, ISP_LOGDEBUG0,
2520				    "Request Queue Overflow+");
2521				XS_SETERR(xs, HBA_BOTCH);
2522				return (CMD_EAGAIN);
2523			}
2524		}
2525	}
2526
2527	MEMZERO((void *) reqp, UZSIZE);
2528	reqp->req_header.rqs_entry_count = 1;
2529	if (IS_FC(isp)) {
2530		reqp->req_header.rqs_entry_type = RQSTYPE_T2RQS;
2531	} else {
2532		if (XS_CDBLEN(xs) > 12)
2533			reqp->req_header.rqs_entry_type = RQSTYPE_CMDONLY;
2534		else
2535			reqp->req_header.rqs_entry_type = RQSTYPE_REQUEST;
2536	}
2537	reqp->req_header.rqs_flags = 0;
2538	reqp->req_header.rqs_seqno = 0;
2539	if (IS_FC(isp)) {
2540		/*
2541		 * See comment in isp_intr
2542		 */
2543		XS_RESID(xs) = 0;
2544
2545		/*
2546		 * Fibre Channel always requires some kind of tag.
2547		 * The Qlogic drivers seem be happy not to use a tag,
2548		 * but this breaks for some devices (IBM drives).
2549		 */
2550		if (XS_TAG_P(xs)) {
2551			t2reqp->req_flags = XS_TAG_TYPE(xs);
2552		} else {
2553			/*
2554			 * If we don't know what tag to use, use HEAD OF QUEUE
2555			 * for Request Sense or Ordered (for safety's sake).
2556			 */
2557			if (XS_CDBP(xs)[0] == 0x3)	/* REQUEST SENSE */
2558				t2reqp->req_flags = REQFLAG_HTAG;
2559			else
2560				t2reqp->req_flags = REQFLAG_OTAG;
2561		}
2562	} else {
2563		sdparam *sdp = (sdparam *)isp->isp_param;
2564		if ((sdp->isp_devparam[target].cur_dflags & DPARM_TQING) &&
2565		    XS_TAG_P(xs)) {
2566			reqp->req_flags = XS_TAG_TYPE(xs);
2567		}
2568	}
2569	reqp->req_target = target | (XS_CHANNEL(xs) << 7);
2570	if (IS_SCSI(isp)) {
2571		reqp->req_lun_trn = XS_LUN(xs);
2572		reqp->req_cdblen = XS_CDBLEN(xs);
2573	} else {
2574		if (isp->isp_maxluns > 16)
2575			t2reqp->req_scclun = XS_LUN(xs);
2576		else
2577			t2reqp->req_lun_trn = XS_LUN(xs);
2578	}
2579	MEMCPY(reqp->req_cdb, XS_CDBP(xs), XS_CDBLEN(xs));
2580
2581	reqp->req_time = XS_TIME(xs) / 1000;
2582	if (reqp->req_time == 0 && XS_TIME(xs))
2583		reqp->req_time = 1;
2584
2585	/*
2586	 * Always give a bit more leeway to commands after a bus reset.
2587	 * XXX: DOES NOT DISTINGUISH WHICH PORT MAY HAVE BEEN SYNCED
2588	 */
2589	if (isp->isp_sendmarker && reqp->req_time < 5) {
2590		reqp->req_time = 5;
2591	}
2592	if (isp_save_xs(isp, xs, &handle)) {
2593		isp_prt(isp, ISP_LOGDEBUG1, "out of xflist pointers");
2594		XS_SETERR(xs, HBA_BOTCH);
2595		return (CMD_EAGAIN);
2596	}
2597	reqp->req_handle = handle;
2598	/*
2599	 * Set up DMA and/or do any bus swizzling of the request entry
2600	 * so that the Qlogic F/W understands what is being asked of it.
2601 	*/
2602	i = ISP_DMASETUP(isp, xs, reqp, &iptr, optr);
2603	if (i != CMD_QUEUED) {
2604		isp_destroy_handle(isp, handle);
2605		/*
2606		 * dmasetup sets actual error in packet, and
2607		 * return what we were given to return.
2608		 */
2609		return (i);
2610	}
2611	XS_SETERR(xs, HBA_NOERROR);
2612	isp_prt(isp, ISP_LOGDEBUG2,
2613	    "START cmd for %d.%d.%d cmd 0x%x datalen %ld",
2614	    XS_CHANNEL(xs), target, XS_LUN(xs), XS_CDBP(xs)[0],
2615	    (long) XS_XFRLEN(xs));
2616	ISP_ADD_REQUEST(isp, iptr);
2617	isp->isp_nactive++;
2618	if (isp->isp_sendmarker)
2619		isp->isp_sendmarker = 0;
2620	return (CMD_QUEUED);
2621#undef	reqp
2622#undef	t2reqp
2623}
2624
2625/*
2626 * isp control
2627 * Locks (ints blocked) assumed held.
2628 */
2629
2630int
2631isp_control(struct ispsoftc *isp, ispctl_t ctl, void *arg)
2632{
2633	XS_T *xs;
2634	mbreg_t mbs;
2635	int bus, tgt;
2636	u_int16_t handle;
2637
2638	switch (ctl) {
2639	default:
2640		isp_prt(isp, ISP_LOGERR, "Unknown Control Opcode 0x%x", ctl);
2641		break;
2642
2643	case ISPCTL_RESET_BUS:
2644		/*
2645		 * Issue a bus reset.
2646		 */
2647		mbs.param[0] = MBOX_BUS_RESET;
2648		mbs.param[2] = 0;
2649		if (IS_SCSI(isp)) {
2650			mbs.param[1] =
2651			    ((sdparam *) isp->isp_param)->isp_bus_reset_delay;
2652			if (mbs.param[1] < 2)
2653				mbs.param[1] = 2;
2654			bus = *((int *) arg);
2655			if (IS_DUALBUS(isp))
2656				mbs.param[2] = bus;
2657		} else {
2658			mbs.param[1] = 10;
2659			bus = 0;
2660		}
2661		isp->isp_sendmarker |= (1 << bus);
2662		isp_mboxcmd(isp, &mbs, MBLOGALL);
2663		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2664			break;
2665		}
2666		isp_prt(isp, ISP_LOGINFO,
2667		    "driver initiated bus reset of bus %d", bus);
2668		return (0);
2669
2670	case ISPCTL_RESET_DEV:
2671		tgt = (*((int *) arg)) & 0xffff;
2672		bus = (*((int *) arg)) >> 16;
2673		mbs.param[0] = MBOX_ABORT_TARGET;
2674		mbs.param[1] = (tgt << 8) | (bus << 15);
2675		mbs.param[2] = 3;	/* 'delay', in seconds */
2676		isp_mboxcmd(isp, &mbs, MBLOGALL);
2677		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2678			break;
2679		}
2680		isp_prt(isp, ISP_LOGINFO,
2681		    "Target %d on Bus %d Reset Succeeded", tgt, bus);
2682		isp->isp_sendmarker |= (1 << bus);
2683		return (0);
2684
2685	case ISPCTL_ABORT_CMD:
2686		xs = (XS_T *) arg;
2687		tgt = XS_TGT(xs);
2688		handle = isp_find_handle(isp, xs);
2689		if (handle == 0) {
2690			isp_prt(isp, ISP_LOGWARN,
2691			    "cannot find handle for command to abort");
2692			break;
2693		}
2694		bus = XS_CHANNEL(xs);
2695		mbs.param[0] = MBOX_ABORT;
2696		if (IS_FC(isp)) {
2697			if (isp->isp_maxluns > 16) {
2698				mbs.param[1] = tgt << 8;
2699				mbs.param[4] = 0;
2700				mbs.param[5] = 0;
2701				mbs.param[6] = XS_LUN(xs);
2702			} else {
2703				mbs.param[1] = tgt << 8 | XS_LUN(xs);
2704			}
2705		} else {
2706			mbs.param[1] =
2707			    (bus << 15) | (XS_TGT(xs) << 8) | XS_LUN(xs);
2708		}
2709		mbs.param[3] = 0;
2710		mbs.param[2] = handle;
2711		isp_mboxcmd(isp, &mbs, MBLOGALL & ~MBOX_COMMAND_ERROR);
2712		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2713			return (0);
2714		}
2715		/*
2716		 * XXX: Look for command in the REQUEST QUEUE. That is,
2717		 * XXX: It hasen't been picked up by firmware yet.
2718		 */
2719		break;
2720
2721	case ISPCTL_UPDATE_PARAMS:
2722
2723		isp_update(isp);
2724		return (0);
2725
2726	case ISPCTL_FCLINK_TEST:
2727
2728		if (IS_FC(isp)) {
2729			int usdelay = (arg)? *((int *) arg) : 250000;
2730			return (isp_fclink_test(isp, usdelay));
2731		}
2732		break;
2733
2734	case ISPCTL_SCAN_FABRIC:
2735
2736		if (IS_FC(isp)) {
2737			return (isp_scan_fabric(isp));
2738		}
2739		break;
2740
2741	case ISPCTL_SCAN_LOOP:
2742
2743		if (IS_FC(isp)) {
2744			return (isp_scan_loop(isp));
2745		}
2746		break;
2747
2748	case ISPCTL_PDB_SYNC:
2749
2750		if (IS_FC(isp)) {
2751			return (isp_pdb_sync(isp));
2752		}
2753		break;
2754
2755	case ISPCTL_SEND_LIP:
2756
2757		if (IS_FC(isp)) {
2758			mbs.param[0] = MBOX_INIT_LIP;
2759			isp_mboxcmd(isp, &mbs, MBLOGALL);
2760			if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
2761				return (0);
2762			}
2763		}
2764		break;
2765
2766	case ISPCTL_GET_POSMAP:
2767
2768		if (IS_FC(isp) && arg) {
2769			return (isp_getmap(isp, arg));
2770		}
2771		break;
2772
2773	case ISPCTL_RUN_MBOXCMD:
2774
2775		isp_mboxcmd(isp, arg, MBLOGALL);
2776		return(0);
2777
2778#ifdef	ISP_TARGET_MODE
2779	case ISPCTL_TOGGLE_TMODE:
2780	{
2781
2782		/*
2783		 * We don't check/set against role here- that's the
2784		 * responsibility for the outer layer to coordinate.
2785		 */
2786		if (IS_SCSI(isp)) {
2787			int param = *(int *)arg;
2788			mbs.param[0] = MBOX_ENABLE_TARGET_MODE;
2789			mbs.param[1] = param & 0xffff;
2790			mbs.param[2] = param >> 16;
2791			isp_mboxcmd(isp, &mbs, MBLOGALL);
2792			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
2793				break;
2794			}
2795		}
2796		return (0);
2797	}
2798#endif
2799	}
2800	return (-1);
2801}
2802
2803/*
2804 * Interrupt Service Routine(s).
2805 *
2806 * External (OS) framework has done the appropriate locking,
2807 * and the locking will be held throughout this function.
2808 */
2809
2810/*
2811 * Limit our stack depth by sticking with the max likely number
2812 * of completions on a request queue at any one time.
2813 */
2814#define	MAX_REQUESTQ_COMPLETIONS	32
2815
2816int
2817isp_intr(void *arg)
2818{
2819	struct ispsoftc *isp = arg;
2820	XS_T *complist[MAX_REQUESTQ_COMPLETIONS], *xs;
2821	u_int16_t iptr, optr, isr, sema, junk;
2822	int i, nlooked = 0, ndone = 0;
2823
2824	if (IS_2100(isp)) {
2825		i = 0;
2826		do {
2827			isr = ISP_READ(isp, BIU_ISR);
2828			junk = ISP_READ(isp, BIU_ISR);
2829		} while (isr != junk && ++i < 1000);
2830		if (isr != junk) {
2831			isp_prt(isp, ISP_LOGWARN,
2832			    "isr unsteady (%x, %x)", isr, junk);
2833		}
2834		i = 0;
2835		do {
2836			sema = ISP_READ(isp, BIU_SEMA);
2837			junk = ISP_READ(isp, BIU_SEMA);
2838		} while (sema != junk && ++i < 1000);
2839		if (sema != junk) {
2840			isp_prt(isp, ISP_LOGWARN,
2841			    "sema unsteady (%x, %x)", sema, junk);
2842		}
2843	} else {
2844		isr = ISP_READ(isp, BIU_ISR);
2845		sema = ISP_READ(isp, BIU_SEMA);
2846	}
2847	isp_prt(isp, ISP_LOGDEBUG3, "isp_intr isr %x sem %x", isr, sema);
2848	isr &= INT_PENDING_MASK(isp);
2849	sema &= BIU_SEMA_LOCK;
2850	isp->isp_intcnt++;
2851	if (isr == 0 && sema == 0) {
2852		isp->isp_intbogus++;
2853		return (0);
2854	}
2855
2856	if (sema) {
2857		u_int16_t mbox;
2858
2859		if (IS_2100(isp)) {
2860			i = 0;
2861			do {
2862				mbox = ISP_READ(isp, OUTMAILBOX0);
2863				junk = ISP_READ(isp, OUTMAILBOX0);;
2864			} while (junk != mbox && ++i < 1000);
2865			if (mbox != junk) {
2866				isp_prt(isp, ISP_LOGWARN,
2867				    "mailbox0 unsteady (%x, %x)", mbox, junk);
2868				ISP_WRITE(isp, BIU_SEMA, 0);
2869				ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2870				return (1);
2871			}
2872		} else {
2873			mbox = ISP_READ(isp, OUTMAILBOX0);
2874		}
2875		if (mbox & 0x4000) {
2876			int obits, i = 0;
2877			if ((obits = isp->isp_mboxbsy) != 0) {
2878				isp->isp_mboxtmp[i++] = mbox;
2879				for (i = 1; i < MAX_MAILBOX; i++) {
2880					if ((obits & (1 << i)) == 0) {
2881						continue;
2882					}
2883					isp->isp_mboxtmp[i] =
2884					    ISP_READ(isp, MBOX_OFF(i));
2885				}
2886				MBOX_NOTIFY_COMPLETE(isp);
2887			} else {
2888				isp_prt(isp, ISP_LOGWARN,
2889				    "Mbox Command Async (0x%x) with no waiters",
2890				    mbox);
2891			}
2892		} else {
2893			int fhandle = isp_parse_async(isp, (int) mbox);
2894			isp_prt(isp, ISP_LOGDEBUG2, "Async Mbox 0x%x", mbox);
2895			if (fhandle > 0) {
2896				isp_fastpost_complete(isp, (u_int16_t) fhandle);
2897			}
2898		}
2899		if (IS_FC(isp) || isp->isp_state != ISP_RUNSTATE) {
2900			ISP_WRITE(isp, BIU_SEMA, 0);
2901			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2902			return (1);
2903		}
2904	}
2905
2906	/*
2907	 * We can't be getting this now.
2908	 */
2909	if (isp->isp_state != ISP_RUNSTATE) {
2910		isp_prt(isp, ISP_LOGWARN,
2911		    "interrupt (isr=%x, sema=%x) when not ready", isr, sema);
2912		ISP_WRITE(isp, INMAILBOX5, ISP_READ(isp, OUTMAILBOX5));
2913		ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2914		ISP_WRITE(isp, BIU_SEMA, 0);
2915		return (1);
2916	}
2917
2918	/*
2919	 * You *must* read OUTMAILBOX5 prior to clearing the RISC interrupt.
2920	 */
2921	optr = isp->isp_residx;
2922
2923	if (IS_2100(isp)) {
2924		i = 0;
2925		do {
2926			iptr = ISP_READ(isp, OUTMAILBOX5);
2927			junk = ISP_READ(isp, OUTMAILBOX5);
2928		} while (junk != iptr && ++i < 1000);
2929
2930		if (iptr != junk) {
2931			ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2932			isp_prt(isp, ISP_LOGWARN,
2933			    "mailbox5 unsteady (%x, %x)", iptr, junk);
2934			return (1);
2935		}
2936	} else {
2937		iptr = ISP_READ(isp, OUTMAILBOX5);
2938	}
2939
2940	if (sema) {
2941		ISP_WRITE(isp, BIU_SEMA, 0);
2942	}
2943	ISP_WRITE(isp, HCCR, HCCR_CMD_CLEAR_RISC_INT);
2944
2945	if (optr == iptr && sema == 0) {
2946		/*
2947		 * There are a lot of these- reasons unknown- mostly on
2948		 * faster Alpha machines.
2949		 *
2950		 * I tried delaying after writing HCCR_CMD_CLEAR_RISC_INT to
2951		 * make sure the old interrupt went away (to avoid 'ringing'
2952		 * effects), but that didn't stop this from occurring.
2953		 */
2954		junk = ISP_READ(isp, BIU_ISR);
2955		isp_prt(isp, ISP_LOGDEBUG2,
2956		    "bogus intr- isr %x (%x) iptr %x optr %x",
2957		    isr, junk, iptr, optr);
2958		isp->isp_intbogus++;
2959	}
2960
2961	while (optr != iptr) {
2962		ispstatusreq_t *sp;
2963		u_int16_t oop;
2964		int buddaboom = 0;
2965
2966		sp = (ispstatusreq_t *) ISP_QUEUE_ENTRY(isp->isp_result, optr);
2967		oop = optr;
2968		optr = ISP_NXT_QENTRY(optr, RESULT_QUEUE_LEN(isp));
2969		nlooked++;
2970		/*
2971		 * Do any appropriate unswizzling of what the Qlogic f/w has
2972		 * written into memory so it makes sense to us. This is a
2973		 * per-platform thing. Also includes any memory barriers.
2974		 */
2975		ISP_UNSWIZZLE_RESPONSE(isp, sp, oop);
2976		if (sp->req_header.rqs_entry_type != RQSTYPE_RESPONSE) {
2977			if (isp_handle_other_response(isp, sp, &optr) == 0) {
2978				MEMZERO(sp, sizeof (isphdr_t));
2979				continue;
2980			}
2981			/*
2982			 * It really has to be a bounced request just copied
2983			 * from the request queue to the response queue. If
2984			 * not, something bad has happened.
2985			 */
2986			if (sp->req_header.rqs_entry_type != RQSTYPE_REQUEST) {
2987				isp_prt(isp, ISP_LOGERR, notresp,
2988				    sp->req_header.rqs_entry_type, oop, optr,
2989				    nlooked);
2990				if (isp->isp_dblev & ISP_LOGDEBUG0) {
2991					isp_print_bytes(isp, "Queue Entry",
2992					    QENTRY_LEN, sp);
2993				}
2994				MEMZERO(sp, sizeof (isphdr_t));
2995				continue;
2996			}
2997			buddaboom = 1;
2998		}
2999
3000		if (sp->req_header.rqs_flags & 0xf) {
3001#define	_RQS_OFLAGS	\
3002	~(RQSFLAG_CONTINUATION|RQSFLAG_FULL|RQSFLAG_BADHEADER|RQSFLAG_BADPACKET)
3003			if (sp->req_header.rqs_flags & RQSFLAG_CONTINUATION) {
3004				isp_prt(isp, ISP_LOGWARN,
3005				    "continuation segment");
3006				ISP_WRITE(isp, INMAILBOX5, optr);
3007				continue;
3008			}
3009			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3010				isp_prt(isp, ISP_LOGDEBUG1,
3011				    "internal queues full");
3012				/*
3013				 * We'll synthesize a QUEUE FULL message below.
3014				 */
3015			}
3016			if (sp->req_header.rqs_flags & RQSFLAG_BADHEADER) {
3017				isp_prt(isp, ISP_LOGERR,  "bad header flag");
3018				buddaboom++;
3019			}
3020			if (sp->req_header.rqs_flags & RQSFLAG_BADPACKET) {
3021				isp_prt(isp, ISP_LOGERR, "bad request packet");
3022				buddaboom++;
3023			}
3024			if (sp->req_header.rqs_flags & _RQS_OFLAGS) {
3025				isp_prt(isp, ISP_LOGERR,
3026				    "unknown flags (0x%x) in response",
3027				    sp->req_header.rqs_flags);
3028				buddaboom++;
3029			}
3030#undef	_RQS_OFLAGS
3031		}
3032		if (sp->req_handle > isp->isp_maxcmds || sp->req_handle < 1) {
3033			MEMZERO(sp, sizeof (isphdr_t));
3034			isp_prt(isp, ISP_LOGERR,
3035			    "bad request handle %d (type 0x%x, flags 0x%x)",
3036			    sp->req_handle, sp->req_header.rqs_entry_type,
3037			    sp->req_header.rqs_flags);
3038			ISP_WRITE(isp, INMAILBOX5, optr);
3039			continue;
3040		}
3041		xs = isp_find_xs(isp, sp->req_handle);
3042		if (xs == NULL) {
3043			MEMZERO(sp, sizeof (isphdr_t));
3044			isp_prt(isp, ISP_LOGERR,
3045			    "cannot find handle 0x%x in xflist",
3046			    sp->req_handle);
3047			ISP_WRITE(isp, INMAILBOX5, optr);
3048			continue;
3049		}
3050		isp_destroy_handle(isp, sp->req_handle);
3051		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3052			isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3053		}
3054		if (buddaboom) {
3055			XS_SETERR(xs, HBA_BOTCH);
3056		}
3057
3058		if (IS_FC(isp) && (sp->req_scsi_status & RQCS_SV)) {
3059			/*
3060			 * Fibre Channel F/W doesn't say we got status
3061			 * if there's Sense Data instead. I guess they
3062			 * think it goes w/o saying.
3063			 */
3064			sp->req_state_flags |= RQSF_GOT_STATUS;
3065		}
3066		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3067			*XS_STSP(xs) = sp->req_scsi_status & 0xff;
3068		}
3069
3070		switch (sp->req_header.rqs_entry_type) {
3071		case RQSTYPE_RESPONSE:
3072			XS_SET_STATE_STAT(isp, xs, sp);
3073			isp_parse_status(isp, sp, xs);
3074			if ((XS_NOERR(xs) || XS_ERR(xs) == HBA_NOERROR) &&
3075			    (*XS_STSP(xs) == SCSI_BUSY)) {
3076				XS_SETERR(xs, HBA_TGTBSY);
3077			}
3078			if (IS_SCSI(isp)) {
3079				XS_RESID(xs) = sp->req_resid;
3080				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3081				    (*XS_STSP(xs) == SCSI_CHECK) &&
3082				    (sp->req_state_flags & RQSF_GOT_SENSE)) {
3083					XS_SAVE_SENSE(xs, sp);
3084				}
3085				/*
3086				 * A new synchronous rate was negotiated for
3087				 * this target. Mark state such that we'll go
3088				 * look up that which has changed later.
3089				 */
3090				if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3091					int t = XS_TGT(xs);
3092					sdparam *sdp = isp->isp_param;
3093					sdp += XS_CHANNEL(xs);
3094					sdp->isp_devparam[t].dev_refresh = 1;
3095					isp->isp_update |=
3096					    (1 << XS_CHANNEL(xs));
3097				}
3098			} else {
3099				if (sp->req_status_flags & RQSF_XFER_COMPLETE) {
3100					XS_RESID(xs) = 0;
3101				} else if (sp->req_scsi_status & RQCS_RESID) {
3102					XS_RESID(xs) = sp->req_resid;
3103				} else {
3104					XS_RESID(xs) = 0;
3105				}
3106				if ((sp->req_state_flags & RQSF_GOT_STATUS) &&
3107				    (*XS_STSP(xs) == SCSI_CHECK) &&
3108				    (sp->req_scsi_status & RQCS_SV)) {
3109					XS_SAVE_SENSE(xs, sp);
3110					/* solely for the benefit of debug */
3111					sp->req_state_flags |= RQSF_GOT_SENSE;
3112				}
3113			}
3114			isp_prt(isp, ISP_LOGDEBUG2,
3115			   "asked for %ld got resid %ld", (long) XS_XFRLEN(xs),
3116			   (long) sp->req_resid);
3117			break;
3118		case RQSTYPE_REQUEST:
3119			if (sp->req_header.rqs_flags & RQSFLAG_FULL) {
3120				/*
3121				 * Force Queue Full status.
3122				 */
3123				*XS_STSP(xs) = SCSI_QFULL;
3124				XS_SETERR(xs, HBA_NOERROR);
3125			} else if (XS_NOERR(xs)) {
3126				XS_SETERR(xs, HBA_BOTCH);
3127			}
3128			XS_RESID(xs) = XS_XFRLEN(xs);
3129			break;
3130		default:
3131			isp_prt(isp, ISP_LOGWARN,
3132			    "unhandled response queue type 0x%x",
3133			    sp->req_header.rqs_entry_type);
3134			if (XS_NOERR(xs)) {
3135				XS_SETERR(xs, HBA_BOTCH);
3136			}
3137			break;
3138		}
3139
3140		/*
3141		 * Free any dma resources. As a side effect, this may
3142		 * also do any cache flushing necessary for data coherence.			 */
3143		if (XS_XFRLEN(xs)) {
3144			ISP_DMAFREE(isp, xs, sp->req_handle);
3145		}
3146
3147		if (((isp->isp_dblev & (ISP_LOGDEBUG2|ISP_LOGDEBUG3))) ||
3148		    ((isp->isp_dblev & ISP_LOGDEBUG1) && ((!XS_NOERR(xs)) ||
3149		    (*XS_STSP(xs) != SCSI_GOOD)))) {
3150			char skey;
3151			if (sp->req_state_flags & RQSF_GOT_SENSE) {
3152				skey = XS_SNSKEY(xs) & 0xf;
3153				if (skey < 10)
3154					skey += '0';
3155				else
3156					skey += 'a' - 10;
3157			} else if (*XS_STSP(xs) == SCSI_CHECK) {
3158				skey = '?';
3159			} else {
3160				skey = '.';
3161			}
3162			isp_prt(isp, ISP_LOGALL, finmsg, XS_CHANNEL(xs),
3163			    XS_TGT(xs), XS_LUN(xs), XS_XFRLEN(xs), XS_RESID(xs),
3164			    *XS_STSP(xs), skey, XS_ERR(xs));
3165		}
3166
3167		if (isp->isp_nactive > 0)
3168		    isp->isp_nactive--;
3169		complist[ndone++] = xs;	/* defer completion call until later */
3170		MEMZERO(sp, sizeof (isphdr_t));
3171		if (ndone == MAX_REQUESTQ_COMPLETIONS) {
3172			break;
3173		}
3174	}
3175
3176	/*
3177	 * If we looked at any commands, then it's valid to find out
3178	 * what the outpointer is. It also is a trigger to update the
3179	 * ISP's notion of what we've seen so far.
3180	 */
3181	if (nlooked) {
3182		ISP_WRITE(isp, INMAILBOX5, optr);
3183		isp->isp_reqodx = ISP_READ(isp, OUTMAILBOX4);
3184	}
3185
3186	isp->isp_residx = optr;
3187	for (i = 0; i < ndone; i++) {
3188		xs = complist[i];
3189		if (xs) {
3190			isp_done(xs);
3191		}
3192	}
3193	return (1);
3194}
3195
3196/*
3197 * Support routines.
3198 */
3199
3200static int
3201isp_parse_async(struct ispsoftc *isp, int mbox)
3202{
3203	int bus;
3204	u_int16_t fast_post_handle = 0;
3205
3206	if (IS_DUALBUS(isp)) {
3207		bus = ISP_READ(isp, OUTMAILBOX6);
3208	} else {
3209		bus = 0;
3210	}
3211
3212	switch (mbox) {
3213	case ASYNC_BUS_RESET:
3214		isp->isp_sendmarker |= (1 << bus);
3215#ifdef	ISP_TARGET_MODE
3216		isp_target_async(isp, bus, mbox);
3217#endif
3218		isp_async(isp, ISPASYNC_BUS_RESET, &bus);
3219		break;
3220	case ASYNC_SYSTEM_ERROR:
3221		mbox = ISP_READ(isp, OUTMAILBOX1);
3222		isp_prt(isp, ISP_LOGERR,
3223		    "Internal Firmware Error @ RISC Addr 0x%x", mbox);
3224		ISP_DUMPREGS(isp, "Firmware Error");
3225		isp_reinit(isp);
3226#ifdef	ISP_TARGET_MODE
3227		isp_target_async(isp, bus, ASYNC_SYSTEM_ERROR);
3228#endif
3229		/* no point continuing after this */
3230		return (-1);
3231
3232	case ASYNC_RQS_XFER_ERR:
3233		isp_prt(isp, ISP_LOGERR, "Request Queue Transfer Error");
3234		break;
3235
3236	case ASYNC_RSP_XFER_ERR:
3237		isp_prt(isp, ISP_LOGERR, "Response Queue Transfer Error");
3238		break;
3239
3240	case ASYNC_QWAKEUP:
3241		/*
3242		 * We've just been notified that the Queue has woken up.
3243		 * We don't need to be chatty about this- just unlatch things
3244		 * and move on.
3245		 */
3246		mbox = ISP_READ(isp, OUTMAILBOX4);
3247		break;
3248
3249	case ASYNC_TIMEOUT_RESET:
3250		isp_prt(isp, ISP_LOGWARN,
3251		    "timeout initiated SCSI bus reset of bus %d", bus);
3252		isp->isp_sendmarker |= (1 << bus);
3253#ifdef	ISP_TARGET_MODE
3254		isp_target_async(isp, bus, mbox);
3255#endif
3256		break;
3257
3258	case ASYNC_DEVICE_RESET:
3259		isp_prt(isp, ISP_LOGINFO, "device reset on bus %d", bus);
3260		isp->isp_sendmarker |= (1 << bus);
3261#ifdef	ISP_TARGET_MODE
3262		isp_target_async(isp, bus, mbox);
3263#endif
3264		break;
3265
3266	case ASYNC_EXTMSG_UNDERRUN:
3267		isp_prt(isp, ISP_LOGWARN, "extended message underrun");
3268		break;
3269
3270	case ASYNC_SCAM_INT:
3271		isp_prt(isp, ISP_LOGINFO, "SCAM interrupt");
3272		break;
3273
3274	case ASYNC_HUNG_SCSI:
3275		isp_prt(isp, ISP_LOGERR,
3276		    "stalled SCSI Bus after DATA Overrun");
3277		/* XXX: Need to issue SCSI reset at this point */
3278		break;
3279
3280	case ASYNC_KILLED_BUS:
3281		isp_prt(isp, ISP_LOGERR, "SCSI Bus reset after DATA Overrun");
3282		break;
3283
3284	case ASYNC_BUS_TRANSIT:
3285		mbox = ISP_READ(isp, OUTMAILBOX2);
3286		switch (mbox & 0x1c00) {
3287		case SXP_PINS_LVD_MODE:
3288			isp_prt(isp, ISP_LOGINFO, "Transition to LVD mode");
3289			SDPARAM(isp)->isp_diffmode = 0;
3290			SDPARAM(isp)->isp_ultramode = 0;
3291			SDPARAM(isp)->isp_lvdmode = 1;
3292			break;
3293		case SXP_PINS_HVD_MODE:
3294			isp_prt(isp, ISP_LOGINFO,
3295			    "Transition to Differential mode");
3296			SDPARAM(isp)->isp_diffmode = 1;
3297			SDPARAM(isp)->isp_ultramode = 0;
3298			SDPARAM(isp)->isp_lvdmode = 0;
3299			break;
3300		case SXP_PINS_SE_MODE:
3301			isp_prt(isp, ISP_LOGINFO,
3302			    "Transition to Single Ended mode");
3303			SDPARAM(isp)->isp_diffmode = 0;
3304			SDPARAM(isp)->isp_ultramode = 1;
3305			SDPARAM(isp)->isp_lvdmode = 0;
3306			break;
3307		default:
3308			isp_prt(isp, ISP_LOGWARN,
3309			    "Transition to Unknown Mode 0x%x", mbox);
3310			break;
3311		}
3312		/*
3313		 * XXX: Set up to renegotiate again!
3314		 */
3315		/* Can only be for a 1080... */
3316		isp->isp_sendmarker |= (1 << bus);
3317		break;
3318
3319	case ASYNC_CMD_CMPLT:
3320		fast_post_handle = ISP_READ(isp, OUTMAILBOX1);
3321		isp_prt(isp, ISP_LOGDEBUG3, "fast post completion of %u",
3322		    fast_post_handle);
3323		break;
3324
3325	case ASYNC_CTIO_DONE:
3326#ifdef	ISP_TARGET_MODE
3327		/*
3328		 * Bus gets overloaded with the handle. Dual bus
3329		 * cards don't put bus# into the handle.
3330		 */
3331		bus = (ISP_READ(isp, OUTMAILBOX2) << 16) |
3332		    ISP_READ(isp, OUTMAILBOX1);
3333		isp_target_async(isp, bus, mbox);
3334#else
3335		isp_prt(isp, ISP_LOGINFO, "Fast Posting CTIO done");
3336#endif
3337		break;
3338
3339	case ASYNC_LIP_OCCURRED:
3340		FCPARAM(isp)->isp_lipseq =
3341		    ISP_READ(isp, OUTMAILBOX1);
3342		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3343		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3344		isp->isp_sendmarker = 1;
3345		isp_mark_getpdb_all(isp);
3346		isp_async(isp, ISPASYNC_LIP, NULL);
3347#ifdef	ISP_TARGET_MODE
3348		isp_target_async(isp, bus, mbox);
3349#endif
3350		break;
3351
3352	case ASYNC_LOOP_UP:
3353		isp->isp_sendmarker = 1;
3354		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3355		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3356		isp_mark_getpdb_all(isp);
3357		isp_async(isp, ISPASYNC_LOOP_UP, NULL);
3358#ifdef	ISP_TARGET_MODE
3359		isp_target_async(isp, bus, mbox);
3360#endif
3361		break;
3362
3363	case ASYNC_LOOP_DOWN:
3364		isp->isp_sendmarker = 1;
3365		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3366		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3367		isp_mark_getpdb_all(isp);
3368		isp_async(isp, ISPASYNC_LOOP_DOWN, NULL);
3369#ifdef	ISP_TARGET_MODE
3370		isp_target_async(isp, bus, mbox);
3371#endif
3372		break;
3373
3374	case ASYNC_LOOP_RESET:
3375		isp->isp_sendmarker = 1;
3376		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3377		FCPARAM(isp)->isp_loopstate = LOOP_NIL;
3378		isp_mark_getpdb_all(isp);
3379		isp_async(isp, ISPASYNC_LOOP_RESET, NULL);
3380#ifdef	ISP_TARGET_MODE
3381		isp_target_async(isp, bus, mbox);
3382#endif
3383		break;
3384
3385	case ASYNC_PDB_CHANGED:
3386		isp->isp_sendmarker = 1;
3387		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3388		isp_mark_getpdb_all(isp);
3389		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_PDB);
3390		break;
3391
3392	case ASYNC_CHANGE_NOTIFY:
3393		/*
3394		 * Not correct, but it will force us to rescan the loop.
3395		 */
3396		FCPARAM(isp)->isp_loopstate = LOOP_PDB_RCVD;
3397		isp_mark_getpdb_all(isp);
3398		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_SNS);
3399		break;
3400
3401	case ASYNC_PTPMODE:
3402		if (FCPARAM(isp)->isp_onfabric)
3403			FCPARAM(isp)->isp_topo = TOPO_F_PORT;
3404		else
3405			FCPARAM(isp)->isp_topo = TOPO_N_PORT;
3406		isp_mark_getpdb_all(isp);
3407		isp->isp_sendmarker = 1;
3408		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3409		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3410		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3411#ifdef	ISP_TARGET_MODE
3412		isp_target_async(isp, bus, mbox);
3413#endif
3414		isp_prt(isp, ISP_LOGINFO, "Point-to-Point mode");
3415		break;
3416
3417	case ASYNC_CONNMODE:
3418		mbox = ISP_READ(isp, OUTMAILBOX1);
3419		isp_mark_getpdb_all(isp);
3420		switch (mbox) {
3421		case ISP_CONN_LOOP:
3422			isp_prt(isp, ISP_LOGINFO,
3423			    "Point-to-Point -> Loop mode");
3424			break;
3425		case ISP_CONN_PTP:
3426			isp_prt(isp, ISP_LOGINFO,
3427			    "Loop -> Point-to-Point mode");
3428			break;
3429		case ISP_CONN_BADLIP:
3430			isp_prt(isp, ISP_LOGWARN,
3431			    "Point-to-Point -> Loop mode (BAD LIP)");
3432			break;
3433		case ISP_CONN_FATAL:
3434			isp_prt(isp, ISP_LOGERR, "FATAL CONNECTION ERROR");
3435			isp_reinit(isp);
3436#ifdef	ISP_TARGET_MODE
3437			isp_target_async(isp, bus, ASYNC_SYSTEM_ERROR);
3438#endif
3439			/* no point continuing after this */
3440			return (-1);
3441		case ISP_CONN_LOOPBACK:
3442			isp_prt(isp, ISP_LOGWARN,
3443			    "Looped Back in Point-to-Point mode");
3444			break;
3445		default:
3446			isp_prt(isp, ISP_LOGWARN,
3447			    "Unknown connection mode (0x%x)", mbox);
3448			break;
3449		}
3450		isp_async(isp, ISPASYNC_CHANGE_NOTIFY, ISPASYNC_CHANGE_OTHER);
3451		isp->isp_sendmarker = 1;
3452		FCPARAM(isp)->isp_fwstate = FW_CONFIG_WAIT;
3453		FCPARAM(isp)->isp_loopstate = LOOP_LIP_RCVD;
3454		break;
3455
3456	default:
3457		isp_prt(isp, ISP_LOGWARN, "Unknown Async Code 0x%x", mbox);
3458		break;
3459	}
3460	return (fast_post_handle);
3461}
3462
3463/*
3464 * Handle other response entries. A pointer to the request queue output
3465 * index is here in case we want to eat several entries at once, although
3466 * this is not used currently.
3467 */
3468
3469static int
3470isp_handle_other_response(struct ispsoftc *isp,
3471    ispstatusreq_t *sp, u_int16_t *optrp)
3472{
3473	switch (sp->req_header.rqs_entry_type) {
3474	case RQSTYPE_STATUS_CONT:
3475		isp_prt(isp, ISP_LOGINFO, "Ignored Continuation Response");
3476		return (0);
3477	case RQSTYPE_ATIO:
3478	case RQSTYPE_CTIO:
3479	case RQSTYPE_ENABLE_LUN:
3480	case RQSTYPE_MODIFY_LUN:
3481	case RQSTYPE_NOTIFY:
3482	case RQSTYPE_NOTIFY_ACK:
3483	case RQSTYPE_CTIO1:
3484	case RQSTYPE_ATIO2:
3485	case RQSTYPE_CTIO2:
3486	case RQSTYPE_CTIO3:
3487#ifdef	ISP_TARGET_MODE
3488		return (isp_target_notify(isp, sp, optrp));
3489#else
3490		optrp = optrp;
3491		/* FALLTHROUGH */
3492#endif
3493	case RQSTYPE_REQUEST:
3494	default:
3495		if (isp_async(isp, ISPASYNC_UNHANDLED_RESPONSE, sp)) {
3496			return (0);
3497		}
3498		isp_prt(isp, ISP_LOGWARN, "Unhandled Response Type 0x%x",
3499		    sp->req_header.rqs_entry_type);
3500		return (-1);
3501	}
3502}
3503
3504static void
3505isp_parse_status(struct ispsoftc *isp, ispstatusreq_t *sp, XS_T *xs)
3506{
3507	switch (sp->req_completion_status & 0xff) {
3508	case RQCS_COMPLETE:
3509		if (XS_NOERR(xs)) {
3510			XS_SETERR(xs, HBA_NOERROR);
3511		}
3512		return;
3513
3514	case RQCS_INCOMPLETE:
3515		if ((sp->req_state_flags & RQSF_GOT_TARGET) == 0) {
3516			isp_prt(isp, ISP_LOGDEBUG1,
3517			    "Selection Timeout for %d.%d.%d",
3518			    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3519			if (XS_NOERR(xs)) {
3520				XS_SETERR(xs, HBA_SELTIMEOUT);
3521			}
3522			return;
3523		}
3524		isp_prt(isp, ISP_LOGERR,
3525		    "command incomplete for %d.%d.%d, state 0x%x",
3526		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs),
3527		    sp->req_state_flags);
3528		break;
3529
3530	case RQCS_DMA_ERROR:
3531		isp_prt(isp, ISP_LOGERR, "DMA error for command on %d.%d.%d",
3532		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3533		break;
3534
3535	case RQCS_TRANSPORT_ERROR:
3536	{
3537		char buf[172];
3538		buf[0] = 0;
3539		STRNCAT(buf, "states=>", sizeof buf);
3540		if (sp->req_state_flags & RQSF_GOT_BUS) {
3541			STRNCAT(buf, " GOT_BUS", sizeof buf);
3542		}
3543		if (sp->req_state_flags & RQSF_GOT_TARGET) {
3544			STRNCAT(buf, " GOT_TGT", sizeof buf);
3545		}
3546		if (sp->req_state_flags & RQSF_SENT_CDB) {
3547			STRNCAT(buf, " SENT_CDB", sizeof buf);
3548		}
3549		if (sp->req_state_flags & RQSF_XFRD_DATA) {
3550			STRNCAT(buf, " XFRD_DATA", sizeof buf);
3551		}
3552		if (sp->req_state_flags & RQSF_GOT_STATUS) {
3553			STRNCAT(buf, " GOT_STS", sizeof buf);
3554		}
3555		if (sp->req_state_flags & RQSF_GOT_SENSE) {
3556			STRNCAT(buf, " GOT_SNS", sizeof buf);
3557		}
3558		if (sp->req_state_flags & RQSF_XFER_COMPLETE) {
3559			STRNCAT(buf, " XFR_CMPLT", sizeof buf);
3560		}
3561		STRNCAT(buf, "\nstatus=>", sizeof buf);
3562		if (sp->req_status_flags & RQSTF_DISCONNECT) {
3563			STRNCAT(buf, " Disconnect", sizeof buf);
3564		}
3565		if (sp->req_status_flags & RQSTF_SYNCHRONOUS) {
3566			STRNCAT(buf, " Sync_xfr", sizeof buf);
3567		}
3568		if (sp->req_status_flags & RQSTF_PARITY_ERROR) {
3569			STRNCAT(buf, " Parity", sizeof buf);
3570		}
3571		if (sp->req_status_flags & RQSTF_BUS_RESET) {
3572			STRNCAT(buf, " Bus_Reset", sizeof buf);
3573		}
3574		if (sp->req_status_flags & RQSTF_DEVICE_RESET) {
3575			STRNCAT(buf, " Device_Reset", sizeof buf);
3576		}
3577		if (sp->req_status_flags & RQSTF_ABORTED) {
3578			STRNCAT(buf, " Aborted", sizeof buf);
3579		}
3580		if (sp->req_status_flags & RQSTF_TIMEOUT) {
3581			STRNCAT(buf, " Timeout", sizeof buf);
3582		}
3583		if (sp->req_status_flags & RQSTF_NEGOTIATION) {
3584			STRNCAT(buf, " Negotiation", sizeof buf);
3585		}
3586		isp_prt(isp, ISP_LOGERR, "%s", buf);
3587		isp_prt(isp, ISP_LOGERR, "transport error for %d.%d.%d:\n%s",
3588		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs), buf);
3589		break;
3590	}
3591	case RQCS_RESET_OCCURRED:
3592		isp_prt(isp, ISP_LOGWARN,
3593		    "bus reset destroyed command for %d.%d.%d",
3594		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3595		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3596		if (XS_NOERR(xs)) {
3597			XS_SETERR(xs, HBA_BUSRESET);
3598		}
3599		return;
3600
3601	case RQCS_ABORTED:
3602		isp_prt(isp, ISP_LOGERR, "command aborted for %d.%d.%d",
3603		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3604		isp->isp_sendmarker |= (1 << XS_CHANNEL(xs));
3605		if (XS_NOERR(xs)) {
3606			XS_SETERR(xs, HBA_ABORTED);
3607		}
3608		return;
3609
3610	case RQCS_TIMEOUT:
3611		isp_prt(isp, ISP_LOGWARN, "command timed out for %d.%d.%d",
3612		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3613		if (XS_NOERR(xs)) {
3614			XS_SETERR(xs, HBA_CMDTIMEOUT);
3615		}
3616		return;
3617
3618	case RQCS_DATA_OVERRUN:
3619		XS_RESID(xs) = sp->req_resid;
3620		isp_prt(isp, ISP_LOGERR, "data overrun for command on %d.%d.%d",
3621		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3622		if (XS_NOERR(xs)) {
3623			XS_SETERR(xs, HBA_DATAOVR);
3624		}
3625		return;
3626
3627	case RQCS_COMMAND_OVERRUN:
3628		isp_prt(isp, ISP_LOGERR,
3629		    "command overrun for command on %d.%d.%d",
3630		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3631		break;
3632
3633	case RQCS_STATUS_OVERRUN:
3634		isp_prt(isp, ISP_LOGERR,
3635		    "status overrun for command on %d.%d.%d",
3636		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3637		break;
3638
3639	case RQCS_BAD_MESSAGE:
3640		isp_prt(isp, ISP_LOGERR,
3641		    "msg not COMMAND COMPLETE after status %d.%d.%d",
3642		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3643		break;
3644
3645	case RQCS_NO_MESSAGE_OUT:
3646		isp_prt(isp, ISP_LOGERR,
3647		    "No MESSAGE OUT phase after selection on %d.%d.%d",
3648		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3649		break;
3650
3651	case RQCS_EXT_ID_FAILED:
3652		isp_prt(isp, ISP_LOGERR, "EXTENDED IDENTIFY failed %d.%d.%d",
3653		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3654		break;
3655
3656	case RQCS_IDE_MSG_FAILED:
3657		isp_prt(isp, ISP_LOGERR,
3658		    "INITIATOR DETECTED ERROR rejected by %d.%d.%d",
3659		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3660		break;
3661
3662	case RQCS_ABORT_MSG_FAILED:
3663		isp_prt(isp, ISP_LOGERR, "ABORT OPERATION rejected by %d.%d.%d",
3664		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3665		break;
3666
3667	case RQCS_REJECT_MSG_FAILED:
3668		isp_prt(isp, ISP_LOGERR, "MESSAGE REJECT rejected by %d.%d.%d",
3669		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3670		break;
3671
3672	case RQCS_NOP_MSG_FAILED:
3673		isp_prt(isp, ISP_LOGERR, "NOP rejected by %d.%d.%d",
3674		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3675		break;
3676
3677	case RQCS_PARITY_ERROR_MSG_FAILED:
3678		isp_prt(isp, ISP_LOGERR,
3679		    "MESSAGE PARITY ERROR rejected by %d.%d.%d",
3680		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3681		break;
3682
3683	case RQCS_DEVICE_RESET_MSG_FAILED:
3684		isp_prt(isp, ISP_LOGWARN,
3685		    "BUS DEVICE RESET rejected by %d.%d.%d",
3686		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3687		break;
3688
3689	case RQCS_ID_MSG_FAILED:
3690		isp_prt(isp, ISP_LOGERR, "IDENTIFY rejected by %d.%d.%d",
3691		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3692		break;
3693
3694	case RQCS_UNEXP_BUS_FREE:
3695		isp_prt(isp, ISP_LOGERR, "%d.%d.%d had an unexpected bus free",
3696		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3697		break;
3698
3699	case RQCS_DATA_UNDERRUN:
3700		XS_RESID(xs) = sp->req_resid;
3701		if (XS_NOERR(xs)) {
3702			XS_SETERR(xs, HBA_NOERROR);
3703		}
3704		return;
3705
3706	case RQCS_XACT_ERR1:
3707		isp_prt(isp, ISP_LOGERR, xact1, XS_CHANNEL(xs),
3708		    XS_TGT(xs), XS_LUN(xs));
3709		break;
3710
3711	case RQCS_XACT_ERR2:
3712		isp_prt(isp, ISP_LOGERR, xact2,
3713		    XS_LUN(xs), XS_TGT(xs), XS_CHANNEL(xs));
3714		break;
3715
3716	case RQCS_XACT_ERR3:
3717		isp_prt(isp, ISP_LOGERR, xact3, XS_TGT(xs),
3718		    XS_LUN(xs), XS_CHANNEL(xs));
3719		break;
3720
3721	case RQCS_BAD_ENTRY:
3722		isp_prt(isp, ISP_LOGERR, "Invalid IOCB entry type detected");
3723		break;
3724
3725	case RQCS_QUEUE_FULL:
3726		isp_prt(isp, ISP_LOGDEBUG1,
3727		    "internal queues full for %d.%d.%d status 0x%x", XS_TGT(xs),
3728		    XS_LUN(xs), XS_CHANNEL(xs), *XS_STSP(xs));
3729		/*
3730		 * If QFULL or some other status byte is set, then this
3731		 * isn't an error, per se.
3732		 */
3733		if (*XS_STSP(xs) != SCSI_GOOD && XS_NOERR(xs)) {
3734			XS_SETERR(xs, HBA_NOERROR);
3735			return;
3736		}
3737		break;
3738
3739	case RQCS_PHASE_SKIPPED:
3740		isp_prt(isp, ISP_LOGERR, pskip,
3741		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3742		break;
3743
3744	case RQCS_ARQS_FAILED:
3745		isp_prt(isp, ISP_LOGERR,
3746		    "Auto Request Sense failed for %d.%d.%d",
3747		    XS_CHANNEL(xs), XS_TGT(xs), XS_LUN(xs));
3748		if (XS_NOERR(xs)) {
3749			XS_SETERR(xs, HBA_ARQFAIL);
3750		}
3751		return;
3752
3753	case RQCS_WIDE_FAILED:
3754		isp_prt(isp, ISP_LOGERR,
3755		    "Wide Negotiation failed for %d.%d.%d",
3756		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3757		if (IS_SCSI(isp)) {
3758			sdparam *sdp = isp->isp_param;
3759			sdp += XS_CHANNEL(xs);
3760			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_WIDE;
3761			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3762			isp->isp_update |= (1 << XS_CHANNEL(xs));
3763		}
3764		if (XS_NOERR(xs)) {
3765			XS_SETERR(xs, HBA_NOERROR);
3766		}
3767		return;
3768
3769	case RQCS_SYNCXFER_FAILED:
3770		isp_prt(isp, ISP_LOGERR,
3771		    "SDTR Message failed for target %d.%d.%d",
3772		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3773		if (IS_SCSI(isp)) {
3774			sdparam *sdp = isp->isp_param;
3775			sdp += XS_CHANNEL(xs);
3776			sdp->isp_devparam[XS_TGT(xs)].dev_flags &= ~DPARM_SYNC;
3777			sdp->isp_devparam[XS_TGT(xs)].dev_update = 1;
3778			isp->isp_update |= (1 << XS_CHANNEL(xs));
3779		}
3780		break;
3781
3782	case RQCS_LVD_BUSERR:
3783		isp_prt(isp, ISP_LOGERR,
3784		    "Bad LVD condition while talking to %d.%d.%d",
3785		    XS_TGT(xs), XS_LUN(xs), XS_CHANNEL(xs));
3786		break;
3787
3788	case RQCS_PORT_UNAVAILABLE:
3789		/*
3790		 * No such port on the loop. Moral equivalent of SELTIMEO
3791		 */
3792		isp_prt(isp, ISP_LOGINFO,
3793		    "Port Unavailable for target %d", XS_TGT(xs));
3794		if (XS_NOERR(xs)) {
3795			XS_SETERR(xs, HBA_SELTIMEOUT);
3796		}
3797		return;
3798	case RQCS_PORT_LOGGED_OUT:
3799		/*
3800		 * It was there (maybe)- treat as a selection timeout.
3801		 */
3802		isp_prt(isp, ISP_LOGINFO,
3803		    "port logout for target %d", XS_TGT(xs));
3804		if (XS_NOERR(xs)) {
3805			XS_SETERR(xs, HBA_SELTIMEOUT);
3806		}
3807		return;
3808
3809	case RQCS_PORT_CHANGED:
3810		isp_prt(isp, ISP_LOGWARN,
3811		    "port changed for target %d", XS_TGT(xs));
3812		if (XS_NOERR(xs)) {
3813			XS_SETERR(xs, HBA_SELTIMEOUT);
3814		}
3815		return;
3816
3817	case RQCS_PORT_BUSY:
3818		isp_prt(isp, ISP_LOGWARN,
3819		    "port busy for target %d", XS_TGT(xs));
3820		if (XS_NOERR(xs)) {
3821			XS_SETERR(xs, HBA_TGTBSY);
3822		}
3823		return;
3824
3825	default:
3826		isp_prt(isp, ISP_LOGERR, "Unknown Completion Status 0x%x",
3827		    sp->req_completion_status);
3828		break;
3829	}
3830	if (XS_NOERR(xs)) {
3831		XS_SETERR(xs, HBA_BOTCH);
3832	}
3833}
3834
3835static void
3836isp_fastpost_complete(struct ispsoftc *isp, u_int16_t fph)
3837{
3838	XS_T *xs;
3839
3840	if (fph == 0) {
3841		return;
3842	}
3843	xs = isp_find_xs(isp, fph);
3844	if (xs == NULL) {
3845		isp_prt(isp, ISP_LOGWARN,
3846		    "Command for fast post handle 0x%x not found", fph);
3847		return;
3848	}
3849	isp_destroy_handle(isp, fph);
3850
3851	/*
3852	 * Since we don't have a result queue entry item,
3853	 * we must believe that SCSI status is zero and
3854	 * that all data transferred.
3855	 */
3856	XS_SET_STATE_STAT(isp, xs, NULL);
3857	XS_RESID(xs) = 0;
3858	*XS_STSP(xs) = SCSI_GOOD;
3859	if (XS_XFRLEN(xs)) {
3860		ISP_DMAFREE(isp, xs, fph);
3861	}
3862	if (isp->isp_nactive)
3863		isp->isp_nactive--;
3864	isp_done(xs);
3865}
3866
3867#define	HIBYT(x)			((x) >> 0x8)
3868#define	LOBYT(x)			((x)  & 0xff)
3869#define	ISPOPMAP(a, b)			(((a) << 8) | (b))
3870static u_int16_t mbpscsi[] = {
3871	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
3872	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
3873	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
3874	ISPOPMAP(0x1f, 0x01),	/* 0x03: MBOX_DUMP_RAM */
3875	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
3876	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
3877	ISPOPMAP(0x3f, 0x3f),	/* 0x06: MBOX_MAILBOX_REG_TEST */
3878	ISPOPMAP(0x03, 0x07),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
3879	ISPOPMAP(0x01, 0x4f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
3880	ISPOPMAP(0x00, 0x00),	/* 0x09: */
3881	ISPOPMAP(0x00, 0x00),	/* 0x0a: */
3882	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
3883	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
3884	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
3885	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
3886	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
3887	ISPOPMAP(0x1f, 0x1f),	/* 0x10: MBOX_INIT_REQ_QUEUE */
3888	ISPOPMAP(0x3f, 0x3f),	/* 0x11: MBOX_INIT_RES_QUEUE */
3889	ISPOPMAP(0x0f, 0x0f),	/* 0x12: MBOX_EXECUTE_IOCB */
3890	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
3891	ISPOPMAP(0x01, 0x3f),	/* 0x14: MBOX_STOP_FIRMWARE */
3892	ISPOPMAP(0x0f, 0x0f),	/* 0x15: MBOX_ABORT */
3893	ISPOPMAP(0x03, 0x03),	/* 0x16: MBOX_ABORT_DEVICE */
3894	ISPOPMAP(0x07, 0x07),	/* 0x17: MBOX_ABORT_TARGET */
3895	ISPOPMAP(0x07, 0x07),	/* 0x18: MBOX_BUS_RESET */
3896	ISPOPMAP(0x03, 0x07),	/* 0x19: MBOX_STOP_QUEUE */
3897	ISPOPMAP(0x03, 0x07),	/* 0x1a: MBOX_START_QUEUE */
3898	ISPOPMAP(0x03, 0x07),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
3899	ISPOPMAP(0x03, 0x07),	/* 0x1c: MBOX_ABORT_QUEUE */
3900	ISPOPMAP(0x03, 0x4f),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
3901	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
3902	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
3903	ISPOPMAP(0x01, 0x07),	/* 0x20: MBOX_GET_INIT_SCSI_ID */
3904	ISPOPMAP(0x01, 0x07),	/* 0x21: MBOX_GET_SELECT_TIMEOUT */
3905	ISPOPMAP(0x01, 0xc7),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
3906	ISPOPMAP(0x01, 0x07),	/* 0x23: MBOX_GET_TAG_AGE_LIMIT */
3907	ISPOPMAP(0x01, 0x03),	/* 0x24: MBOX_GET_CLOCK_RATE */
3908	ISPOPMAP(0x01, 0x07),	/* 0x25: MBOX_GET_ACT_NEG_STATE */
3909	ISPOPMAP(0x01, 0x07),	/* 0x26: MBOX_GET_ASYNC_DATA_SETUP_TIME */
3910	ISPOPMAP(0x01, 0x07),	/* 0x27: MBOX_GET_PCI_PARAMS */
3911	ISPOPMAP(0x03, 0x4f),	/* 0x28: MBOX_GET_TARGET_PARAMS */
3912	ISPOPMAP(0x03, 0x0f),	/* 0x29: MBOX_GET_DEV_QUEUE_PARAMS */
3913	ISPOPMAP(0x01, 0x07),	/* 0x2a: MBOX_GET_RESET_DELAY_PARAMS */
3914	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
3915	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
3916	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
3917	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
3918	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
3919	ISPOPMAP(0x03, 0x03),	/* 0x30: MBOX_SET_INIT_SCSI_ID */
3920	ISPOPMAP(0x07, 0x07),	/* 0x31: MBOX_SET_SELECT_TIMEOUT */
3921	ISPOPMAP(0xc7, 0xc7),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
3922	ISPOPMAP(0x07, 0x07),	/* 0x33: MBOX_SET_TAG_AGE_LIMIT */
3923	ISPOPMAP(0x03, 0x03),	/* 0x34: MBOX_SET_CLOCK_RATE */
3924	ISPOPMAP(0x07, 0x07),	/* 0x35: MBOX_SET_ACT_NEG_STATE */
3925	ISPOPMAP(0x07, 0x07),	/* 0x36: MBOX_SET_ASYNC_DATA_SETUP_TIME */
3926	ISPOPMAP(0x07, 0x07),	/* 0x37: MBOX_SET_PCI_CONTROL_PARAMS */
3927	ISPOPMAP(0x4f, 0x4f),	/* 0x38: MBOX_SET_TARGET_PARAMS */
3928	ISPOPMAP(0x0f, 0x0f),	/* 0x39: MBOX_SET_DEV_QUEUE_PARAMS */
3929	ISPOPMAP(0x07, 0x07),	/* 0x3a: MBOX_SET_RESET_DELAY_PARAMS */
3930	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
3931	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
3932	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
3933	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
3934	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
3935	ISPOPMAP(0x01, 0x03),	/* 0x40: MBOX_RETURN_BIOS_BLOCK_ADDR */
3936	ISPOPMAP(0x3f, 0x01),	/* 0x41: MBOX_WRITE_FOUR_RAM_WORDS */
3937	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_EXEC_BIOS_IOCB */
3938	ISPOPMAP(0x00, 0x00),	/* 0x43: */
3939	ISPOPMAP(0x00, 0x00),	/* 0x44: */
3940	ISPOPMAP(0x03, 0x03),	/* 0x45: SET SYSTEM PARAMETER */
3941	ISPOPMAP(0x01, 0x03),	/* 0x46: GET SYSTEM PARAMETER */
3942	ISPOPMAP(0x00, 0x00),	/* 0x47: */
3943	ISPOPMAP(0x01, 0xcf),	/* 0x48: GET SCAM CONFIGURATION */
3944	ISPOPMAP(0xcf, 0xcf),	/* 0x49: SET SCAM CONFIGURATION */
3945	ISPOPMAP(0x03, 0x03),	/* 0x4a: MBOX_SET_FIRMWARE_FEATURES */
3946	ISPOPMAP(0x01, 0x03),	/* 0x4b: MBOX_GET_FIRMWARE_FEATURES */
3947	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
3948	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
3949	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
3950	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
3951	ISPOPMAP(0xdf, 0xdf),	/* 0x50: LOAD RAM A64 */
3952	ISPOPMAP(0xdf, 0xdf),	/* 0x51: DUMP RAM A64 */
3953	ISPOPMAP(0xdf, 0xdf),	/* 0x52: INITIALIZE REQUEST QUEUE A64 */
3954	ISPOPMAP(0xff, 0xff),	/* 0x53: INITIALIZE RESPONSE QUEUE A64 */
3955	ISPOPMAP(0xcf, 0xff),	/* 0x54: EXECUTE IOCB A64 */
3956	ISPOPMAP(0x07, 0x01),	/* 0x55: ENABLE TARGET MODE */
3957	ISPOPMAP(0x03, 0x0f),	/* 0x56: GET TARGET STATUS */
3958	ISPOPMAP(0x00, 0x00),	/* 0x57: */
3959	ISPOPMAP(0x00, 0x00),	/* 0x58: */
3960	ISPOPMAP(0x00, 0x00),	/* 0x59: */
3961	ISPOPMAP(0x03, 0x03),	/* 0x5a: SET DATA OVERRUN RECOVERY MODE */
3962	ISPOPMAP(0x01, 0x03),	/* 0x5b: GET DATA OVERRUN RECOVERY MODE */
3963	ISPOPMAP(0x0f, 0x0f),	/* 0x5c: SET HOST DATA */
3964	ISPOPMAP(0x01, 0x01)	/* 0x5d: GET NOST DATA */
3965};
3966
3967#ifndef	ISP_STRIPPED
3968static char *scsi_mbcmd_names[] = {
3969	"NO-OP",
3970	"LOAD RAM",
3971	"EXEC FIRMWARE",
3972	"DUMP RAM",
3973	"WRITE RAM WORD",
3974	"READ RAM WORD",
3975	"MAILBOX REG TEST",
3976	"VERIFY CHECKSUM",
3977	"ABOUT FIRMWARE",
3978	NULL,
3979	NULL,
3980	NULL,
3981	NULL,
3982	NULL,
3983	"CHECK FIRMWARE",
3984	NULL,
3985	"INIT REQUEST QUEUE",
3986	"INIT RESULT QUEUE",
3987	"EXECUTE IOCB",
3988	"WAKE UP",
3989	"STOP FIRMWARE",
3990	"ABORT",
3991	"ABORT DEVICE",
3992	"ABORT TARGET",
3993	"BUS RESET",
3994	"STOP QUEUE",
3995	"START QUEUE",
3996	"SINGLE STEP QUEUE",
3997	"ABORT QUEUE",
3998	"GET DEV QUEUE STATUS",
3999	NULL,
4000	"GET FIRMWARE STATUS",
4001	"GET INIT SCSI ID",
4002	"GET SELECT TIMEOUT",
4003	"GET RETRY COUNT",
4004	"GET TAG AGE LIMIT",
4005	"GET CLOCK RATE",
4006	"GET ACT NEG STATE",
4007	"GET ASYNC DATA SETUP TIME",
4008	"GET PCI PARAMS",
4009	"GET TARGET PARAMS",
4010	"GET DEV QUEUE PARAMS",
4011	"GET RESET DELAY PARAMS",
4012	NULL,
4013	NULL,
4014	NULL,
4015	NULL,
4016	NULL,
4017	"SET INIT SCSI ID",
4018	"SET SELECT TIMEOUT",
4019	"SET RETRY COUNT",
4020	"SET TAG AGE LIMIT",
4021	"SET CLOCK RATE",
4022	"SET ACT NEG STATE",
4023	"SET ASYNC DATA SETUP TIME",
4024	"SET PCI CONTROL PARAMS",
4025	"SET TARGET PARAMS",
4026	"SET DEV QUEUE PARAMS",
4027	"SET RESET DELAY PARAMS",
4028	NULL,
4029	NULL,
4030	NULL,
4031	NULL,
4032	NULL,
4033	"RETURN BIOS BLOCK ADDR",
4034	"WRITE FOUR RAM WORDS",
4035	"EXEC BIOS IOCB",
4036	NULL,
4037	NULL,
4038	"SET SYSTEM PARAMETER",
4039	"GET SYSTEM PARAMETER",
4040	NULL,
4041	"GET SCAM CONFIGURATION",
4042	"SET SCAM CONFIGURATION",
4043	"SET FIRMWARE FEATURES",
4044	"GET FIRMWARE FEATURES",
4045	NULL,
4046	NULL,
4047	NULL,
4048	NULL,
4049	"LOAD RAM A64",
4050	"DUMP RAM A64",
4051	"INITIALIZE REQUEST QUEUE A64",
4052	"INITIALIZE RESPONSE QUEUE A64",
4053	"EXECUTE IOCB A64",
4054	"ENABLE TARGET MODE",
4055	"GET TARGET MODE STATE",
4056	NULL,
4057	NULL,
4058	NULL,
4059	"SET DATA OVERRUN RECOVERY MODE",
4060	"GET DATA OVERRUN RECOVERY MODE",
4061	"SET HOST DATA",
4062	"GET NOST DATA",
4063};
4064#endif
4065
4066static u_int16_t mbpfc[] = {
4067	ISPOPMAP(0x01, 0x01),	/* 0x00: MBOX_NO_OP */
4068	ISPOPMAP(0x1f, 0x01),	/* 0x01: MBOX_LOAD_RAM */
4069	ISPOPMAP(0x03, 0x01),	/* 0x02: MBOX_EXEC_FIRMWARE */
4070	ISPOPMAP(0xdf, 0x01),	/* 0x03: MBOX_DUMP_RAM */
4071	ISPOPMAP(0x07, 0x07),	/* 0x04: MBOX_WRITE_RAM_WORD */
4072	ISPOPMAP(0x03, 0x07),	/* 0x05: MBOX_READ_RAM_WORD */
4073	ISPOPMAP(0xff, 0xff),	/* 0x06: MBOX_MAILBOX_REG_TEST */
4074	ISPOPMAP(0x03, 0x05),	/* 0x07: MBOX_VERIFY_CHECKSUM	*/
4075	ISPOPMAP(0x01, 0x0f),	/* 0x08: MBOX_ABOUT_FIRMWARE */
4076	ISPOPMAP(0xdf, 0x01),	/* 0x09: LOAD RAM */
4077	ISPOPMAP(0xdf, 0x01),	/* 0x0a: DUMP RAM */
4078	ISPOPMAP(0x00, 0x00),	/* 0x0b: */
4079	ISPOPMAP(0x00, 0x00),	/* 0x0c: */
4080	ISPOPMAP(0x00, 0x00),	/* 0x0d: */
4081	ISPOPMAP(0x01, 0x05),	/* 0x0e: MBOX_CHECK_FIRMWARE */
4082	ISPOPMAP(0x00, 0x00),	/* 0x0f: */
4083	ISPOPMAP(0x1f, 0x11),	/* 0x10: MBOX_INIT_REQ_QUEUE */
4084	ISPOPMAP(0x2f, 0x21),	/* 0x11: MBOX_INIT_RES_QUEUE */
4085	ISPOPMAP(0x0f, 0x01),	/* 0x12: MBOX_EXECUTE_IOCB */
4086	ISPOPMAP(0x03, 0x03),	/* 0x13: MBOX_WAKE_UP	*/
4087	ISPOPMAP(0x01, 0xff),	/* 0x14: MBOX_STOP_FIRMWARE */
4088	ISPOPMAP(0x4f, 0x01),	/* 0x15: MBOX_ABORT */
4089	ISPOPMAP(0x07, 0x01),	/* 0x16: MBOX_ABORT_DEVICE */
4090	ISPOPMAP(0x07, 0x01),	/* 0x17: MBOX_ABORT_TARGET */
4091	ISPOPMAP(0x03, 0x03),	/* 0x18: MBOX_BUS_RESET */
4092	ISPOPMAP(0x07, 0x05),	/* 0x19: MBOX_STOP_QUEUE */
4093	ISPOPMAP(0x07, 0x05),	/* 0x1a: MBOX_START_QUEUE */
4094	ISPOPMAP(0x07, 0x05),	/* 0x1b: MBOX_SINGLE_STEP_QUEUE */
4095	ISPOPMAP(0x07, 0x05),	/* 0x1c: MBOX_ABORT_QUEUE */
4096	ISPOPMAP(0x07, 0x03),	/* 0x1d: MBOX_GET_DEV_QUEUE_STATUS */
4097	ISPOPMAP(0x00, 0x00),	/* 0x1e: */
4098	ISPOPMAP(0x01, 0x07),	/* 0x1f: MBOX_GET_FIRMWARE_STATUS */
4099	ISPOPMAP(0x01, 0x4f),	/* 0x20: MBOX_GET_LOOP_ID */
4100	ISPOPMAP(0x00, 0x00),	/* 0x21: */
4101	ISPOPMAP(0x01, 0x07),	/* 0x22: MBOX_GET_RETRY_COUNT	*/
4102	ISPOPMAP(0x00, 0x00),	/* 0x23: */
4103	ISPOPMAP(0x00, 0x00),	/* 0x24: */
4104	ISPOPMAP(0x00, 0x00),	/* 0x25: */
4105	ISPOPMAP(0x00, 0x00),	/* 0x26: */
4106	ISPOPMAP(0x00, 0x00),	/* 0x27: */
4107	ISPOPMAP(0x0f, 0x1),	/* 0x28: MBOX_GET_FIRMWARE_OPTIONS */
4108	ISPOPMAP(0x03, 0x07),	/* 0x29: MBOX_GET_PORT_QUEUE_PARAMS */
4109	ISPOPMAP(0x00, 0x00),	/* 0x2a: */
4110	ISPOPMAP(0x00, 0x00),	/* 0x2b: */
4111	ISPOPMAP(0x00, 0x00),	/* 0x2c: */
4112	ISPOPMAP(0x00, 0x00),	/* 0x2d: */
4113	ISPOPMAP(0x00, 0x00),	/* 0x2e: */
4114	ISPOPMAP(0x00, 0x00),	/* 0x2f: */
4115	ISPOPMAP(0x00, 0x00),	/* 0x30: */
4116	ISPOPMAP(0x00, 0x00),	/* 0x31: */
4117	ISPOPMAP(0x07, 0x07),	/* 0x32: MBOX_SET_RETRY_COUNT	*/
4118	ISPOPMAP(0x00, 0x00),	/* 0x33: */
4119	ISPOPMAP(0x00, 0x00),	/* 0x34: */
4120	ISPOPMAP(0x00, 0x00),	/* 0x35: */
4121	ISPOPMAP(0x00, 0x00),	/* 0x36: */
4122	ISPOPMAP(0x00, 0x00),	/* 0x37: */
4123	ISPOPMAP(0x0f, 0x01),	/* 0x38: MBOX_SET_FIRMWARE_OPTIONS */
4124	ISPOPMAP(0x0f, 0x07),	/* 0x39: MBOX_SET_PORT_QUEUE_PARAMS */
4125	ISPOPMAP(0x00, 0x00),	/* 0x3a: */
4126	ISPOPMAP(0x00, 0x00),	/* 0x3b: */
4127	ISPOPMAP(0x00, 0x00),	/* 0x3c: */
4128	ISPOPMAP(0x00, 0x00),	/* 0x3d: */
4129	ISPOPMAP(0x00, 0x00),	/* 0x3e: */
4130	ISPOPMAP(0x00, 0x00),	/* 0x3f: */
4131	ISPOPMAP(0x03, 0x01),	/* 0x40: MBOX_LOOP_PORT_BYPASS */
4132	ISPOPMAP(0x03, 0x01),	/* 0x41: MBOX_LOOP_PORT_ENABLE */
4133	ISPOPMAP(0x03, 0x07),	/* 0x42: MBOX_GET_RESOURCE_COUNTS */
4134	ISPOPMAP(0x01, 0x01),	/* 0x43: MBOX_REQUEST_NON_PARTICIPATING_MODE */
4135	ISPOPMAP(0x00, 0x00),	/* 0x44: */
4136	ISPOPMAP(0x00, 0x00),	/* 0x45: */
4137	ISPOPMAP(0x00, 0x00),	/* 0x46: */
4138	ISPOPMAP(0xcf, 0x03),	/* 0x47: GET PORT_DATABASE ENHANCED */
4139	ISPOPMAP(0x00, 0x00),	/* 0x48: */
4140	ISPOPMAP(0x00, 0x00),	/* 0x49: */
4141	ISPOPMAP(0x00, 0x00),	/* 0x4a: */
4142	ISPOPMAP(0x00, 0x00),	/* 0x4b: */
4143	ISPOPMAP(0x00, 0x00),	/* 0x4c: */
4144	ISPOPMAP(0x00, 0x00),	/* 0x4d: */
4145	ISPOPMAP(0x00, 0x00),	/* 0x4e: */
4146	ISPOPMAP(0x00, 0x00),	/* 0x4f: */
4147	ISPOPMAP(0x00, 0x00),	/* 0x50: */
4148	ISPOPMAP(0x00, 0x00),	/* 0x51: */
4149	ISPOPMAP(0x00, 0x00),	/* 0x52: */
4150	ISPOPMAP(0x00, 0x00),	/* 0x53: */
4151	ISPOPMAP(0xcf, 0x01),	/* 0x54: EXECUTE IOCB A64 */
4152	ISPOPMAP(0x00, 0x00),	/* 0x55: */
4153	ISPOPMAP(0x00, 0x00),	/* 0x56: */
4154	ISPOPMAP(0x00, 0x00),	/* 0x57: */
4155	ISPOPMAP(0x00, 0x00),	/* 0x58: */
4156	ISPOPMAP(0x00, 0x00),	/* 0x59: */
4157	ISPOPMAP(0x00, 0x00),	/* 0x5a: */
4158	ISPOPMAP(0x00, 0x00),	/* 0x5b: */
4159	ISPOPMAP(0x00, 0x00),	/* 0x5c: */
4160	ISPOPMAP(0x00, 0x00),	/* 0x5d: */
4161	ISPOPMAP(0x00, 0x00),	/* 0x5e: */
4162	ISPOPMAP(0x00, 0x00),	/* 0x5f: */
4163	ISPOPMAP(0xfd, 0x31),	/* 0x60: MBOX_INIT_FIRMWARE */
4164	ISPOPMAP(0x00, 0x00),	/* 0x61: */
4165	ISPOPMAP(0x01, 0x01),	/* 0x62: MBOX_INIT_LIP */
4166	ISPOPMAP(0xcd, 0x03),	/* 0x63: MBOX_GET_FC_AL_POSITION_MAP */
4167	ISPOPMAP(0xcf, 0x01),	/* 0x64: MBOX_GET_PORT_DB */
4168	ISPOPMAP(0x07, 0x01),	/* 0x65: MBOX_CLEAR_ACA */
4169	ISPOPMAP(0x07, 0x01),	/* 0x66: MBOX_TARGET_RESET */
4170	ISPOPMAP(0x07, 0x01),	/* 0x67: MBOX_CLEAR_TASK_SET */
4171	ISPOPMAP(0x07, 0x01),	/* 0x68: MBOX_ABORT_TASK_SET */
4172	ISPOPMAP(0x01, 0x07),	/* 0x69: MBOX_GET_FW_STATE */
4173	ISPOPMAP(0x03, 0xcf),	/* 0x6a: MBOX_GET_PORT_NAME */
4174	ISPOPMAP(0xcf, 0x01),	/* 0x6b: MBOX_GET_LINK_STATUS */
4175	ISPOPMAP(0x0f, 0x01),	/* 0x6c: MBOX_INIT_LIP_RESET */
4176	ISPOPMAP(0x00, 0x00),	/* 0x6d: */
4177	ISPOPMAP(0xcf, 0x03),	/* 0x6e: MBOX_SEND_SNS */
4178	ISPOPMAP(0x0f, 0x07),	/* 0x6f: MBOX_FABRIC_LOGIN */
4179	ISPOPMAP(0x03, 0x01),	/* 0x70: MBOX_SEND_CHANGE_REQUEST */
4180	ISPOPMAP(0x03, 0x03),	/* 0x71: MBOX_FABRIC_LOGOUT */
4181	ISPOPMAP(0x0f, 0x0f),	/* 0x72: MBOX_INIT_LIP_LOGIN */
4182	ISPOPMAP(0x00, 0x00),	/* 0x73: */
4183	ISPOPMAP(0x07, 0x01),	/* 0x74: LOGIN LOOP PORT */
4184	ISPOPMAP(0xcf, 0x03),	/* 0x75: GET PORT/NODE NAME LIST */
4185	ISPOPMAP(0x4f, 0x01),	/* 0x76: SET VENDOR ID */
4186	ISPOPMAP(0xcd, 0x01),	/* 0x77: INITIALIZE IP MAILBOX */
4187	ISPOPMAP(0x00, 0x00),	/* 0x78: */
4188	ISPOPMAP(0x00, 0x00),	/* 0x79: */
4189	ISPOPMAP(0x00, 0x00),	/* 0x7a: */
4190	ISPOPMAP(0x00, 0x00),	/* 0x7b: */
4191	ISPOPMAP(0x4f, 0x03),	/* 0x7c: Get ID List */
4192	ISPOPMAP(0xcf, 0x01),	/* 0x7d: SEND LFA */
4193	ISPOPMAP(0x07, 0x01)	/* 0x7e: Lun RESET */
4194};
4195
4196#ifndef	ISP_STRIPPED
4197static char *fc_mbcmd_names[] = {
4198	"NO-OP",
4199	"LOAD RAM",
4200	"EXEC FIRMWARE",
4201	"DUMP RAM",
4202	"WRITE RAM WORD",
4203	"READ RAM WORD",
4204	"MAILBOX REG TEST",
4205	"VERIFY CHECKSUM",
4206	"ABOUT FIRMWARE",
4207	"LOAD RAM",
4208	"DUMP RAM",
4209	NULL,
4210	NULL,
4211	NULL,
4212	"CHECK FIRMWARE",
4213	NULL,
4214	"INIT REQUEST QUEUE",
4215	"INIT RESULT QUEUE",
4216	"EXECUTE IOCB",
4217	"WAKE UP",
4218	"STOP FIRMWARE",
4219	"ABORT",
4220	"ABORT DEVICE",
4221	"ABORT TARGET",
4222	"BUS RESET",
4223	"STOP QUEUE",
4224	"START QUEUE",
4225	"SINGLE STEP QUEUE",
4226	"ABORT QUEUE",
4227	"GET DEV QUEUE STATUS",
4228	NULL,
4229	"GET FIRMWARE STATUS",
4230	"GET LOOP ID",
4231	NULL,
4232	"GET RETRY COUNT",
4233	NULL,
4234	NULL,
4235	NULL,
4236	NULL,
4237	NULL,
4238	"GET FIRMWARE OPTIONS",
4239	"GET PORT QUEUE PARAMS",
4240	NULL,
4241	NULL,
4242	NULL,
4243	NULL,
4244	NULL,
4245	NULL,
4246	NULL,
4247	NULL,
4248	"SET RETRY COUNT",
4249	NULL,
4250	NULL,
4251	NULL,
4252	NULL,
4253	NULL,
4254	"SET FIRMWARE OPTIONS",
4255	"SET PORT QUEUE PARAMS",
4256	NULL,
4257	NULL,
4258	NULL,
4259	NULL,
4260	NULL,
4261	NULL,
4262	"LOOP PORT BYPASS",
4263	"LOOP PORT ENABLE",
4264	"GET RESOURCE COUNTS",
4265	"REQUEST NON PARTICIPATING MODE",
4266	NULL,
4267	NULL,
4268	NULL,
4269	"GET PORT DATABASE,, ENHANCED",
4270	NULL,
4271	NULL,
4272	NULL,
4273	NULL,
4274	NULL,
4275	NULL,
4276	NULL,
4277	NULL,
4278	NULL,
4279	NULL,
4280	NULL,
4281	NULL,
4282	"EXECUTE IOCB A64",
4283	NULL,
4284	NULL,
4285	NULL,
4286	NULL,
4287	NULL,
4288	NULL,
4289	NULL,
4290	NULL,
4291	NULL,
4292	NULL,
4293	NULL,
4294	"INIT FIRMWARE",
4295	NULL,
4296	"INIT LIP",
4297	"GET FC-AL POSITION MAP",
4298	"GET PORT DATABASE",
4299	"CLEAR ACA",
4300	"TARGET RESET",
4301	"CLEAR TASK SET",
4302	"ABORT TASK SET",
4303	"GET FW STATE",
4304	"GET PORT NAME",
4305	"GET LINK STATUS",
4306	"INIT LIP RESET",
4307	NULL,
4308	"SEND SNS",
4309	"FABRIC LOGIN",
4310	"SEND CHANGE REQUEST",
4311	"FABRIC LOGOUT",
4312	"INIT LIP LOGIN",
4313	NULL,
4314	"LOGIN LOOP PORT",
4315	"GET PORT/NODE NAME LIST",
4316	"SET VENDOR ID",
4317	"INITIALIZE IP MAILBOX",
4318	NULL,
4319	NULL,
4320	NULL,
4321	NULL,
4322	"Get ID List",
4323	"SEND LFA",
4324	"Lun RESET"
4325};
4326#endif
4327
4328static void
4329isp_mboxcmd(struct ispsoftc *isp, mbreg_t *mbp, int logmask)
4330{
4331	char *cname, *xname, tname[16], mname[16];
4332	unsigned int lim, ibits, obits, box, opcode;
4333	u_int16_t *mcp;
4334
4335	if (IS_FC(isp)) {
4336		mcp = mbpfc;
4337		lim = (sizeof (mbpfc) / sizeof (mbpfc[0]));
4338	} else {
4339		mcp = mbpscsi;
4340		lim = (sizeof (mbpscsi) / sizeof (mbpscsi[0]));
4341	}
4342
4343	if ((opcode = mbp->param[0]) >= lim) {
4344		mbp->param[0] = MBOX_INVALID_COMMAND;
4345		isp_prt(isp, ISP_LOGERR, "Unknown Command 0x%x", opcode);
4346		return;
4347	}
4348
4349	ibits = HIBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4350	obits = LOBYT(mcp[opcode]) & NMBOX_BMASK(isp);
4351
4352	if (ibits == 0 && obits == 0) {
4353		mbp->param[0] = MBOX_COMMAND_PARAM_ERROR;
4354		isp_prt(isp, ISP_LOGERR, "no parameters for 0x%x", opcode);
4355		return;
4356	}
4357
4358	/*
4359	 * Get exclusive usage of mailbox registers.
4360	 */
4361	MBOX_ACQUIRE(isp);
4362
4363	for (box = 0; box < MAX_MAILBOX; box++) {
4364		if (ibits & (1 << box)) {
4365			ISP_WRITE(isp, MBOX_OFF(box), mbp->param[box]);
4366		}
4367		isp->isp_mboxtmp[box] = mbp->param[box] = 0;
4368	}
4369
4370	isp->isp_lastmbxcmd = opcode;
4371
4372	/*
4373	 * We assume that we can't overwrite a previous command.
4374	 */
4375	isp->isp_mboxbsy = obits;
4376
4377	/*
4378	 * Set Host Interrupt condition so that RISC will pick up mailbox regs.
4379	 */
4380	ISP_WRITE(isp, HCCR, HCCR_CMD_SET_HOST_INT);
4381
4382	/*
4383	 * While we haven't finished the command, spin our wheels here.
4384	 */
4385	MBOX_WAIT_COMPLETE(isp);
4386
4387	/*
4388	 * Copy back output registers.
4389	 */
4390	for (box = 0; box < MAX_MAILBOX; box++) {
4391		if (obits & (1 << box)) {
4392			mbp->param[box] = isp->isp_mboxtmp[box];
4393		}
4394	}
4395
4396	MBOX_RELEASE(isp);
4397
4398	if (logmask == 0 || opcode == MBOX_EXEC_FIRMWARE) {
4399		return;
4400	}
4401#ifdef	ISP_STRIPPED
4402	cname = NULL;
4403#else
4404	cname = (IS_FC(isp))? fc_mbcmd_names[opcode] : scsi_mbcmd_names[opcode];
4405#endif
4406	if (cname == NULL) {
4407		cname = tname;
4408		SNPRINTF(tname, sizeof tname, "opcode %x", opcode);
4409	}
4410
4411	/*
4412	 * Just to be chatty here...
4413	 */
4414	xname = NULL;
4415	switch (mbp->param[0]) {
4416	case MBOX_COMMAND_COMPLETE:
4417		break;
4418	case MBOX_INVALID_COMMAND:
4419		if (logmask & MBLOGMASK(MBOX_COMMAND_COMPLETE))
4420			xname = "INVALID COMMAND";
4421		break;
4422	case MBOX_HOST_INTERFACE_ERROR:
4423		if (logmask & MBLOGMASK(MBOX_HOST_INTERFACE_ERROR))
4424			xname = "HOST INTERFACE ERROR";
4425		break;
4426	case MBOX_TEST_FAILED:
4427		if (logmask & MBLOGMASK(MBOX_TEST_FAILED))
4428			xname = "TEST FAILED";
4429		break;
4430	case MBOX_COMMAND_ERROR:
4431		if (logmask & MBLOGMASK(MBOX_COMMAND_ERROR))
4432			xname = "COMMAND ERROR";
4433		break;
4434	case MBOX_COMMAND_PARAM_ERROR:
4435		if (logmask & MBLOGMASK(MBOX_COMMAND_PARAM_ERROR))
4436			xname = "COMMAND PARAMETER ERROR";
4437		break;
4438	case MBOX_LOOP_ID_USED:
4439		if (logmask & MBLOGMASK(MBOX_LOOP_ID_USED))
4440			xname = "LOOP ID ALREADY IN USE";
4441		break;
4442	case MBOX_PORT_ID_USED:
4443		if (logmask & MBLOGMASK(MBOX_PORT_ID_USED))
4444			xname = "PORT ID ALREADY IN USE";
4445		break;
4446	case MBOX_ALL_IDS_USED:
4447		if (logmask & MBLOGMASK(MBOX_ALL_IDS_USED))
4448			xname = "ALL LOOP IDS IN USE";
4449		break;
4450	case 0:		/* special case */
4451		xname = "TIMEOUT";
4452		break;
4453	default:
4454		SNPRINTF(mname, sizeof mname, "error 0x%x", mbp->param[0]);
4455		xname = mname;
4456		break;
4457	}
4458	if (xname)
4459		isp_prt(isp, ISP_LOGALL, "Mailbox Command '%s' failed (%s)",
4460		    cname, xname);
4461}
4462
4463static void
4464isp_fw_state(struct ispsoftc *isp)
4465{
4466	if (IS_FC(isp)) {
4467		mbreg_t mbs;
4468		fcparam *fcp = isp->isp_param;
4469
4470		mbs.param[0] = MBOX_GET_FW_STATE;
4471		isp_mboxcmd(isp, &mbs, MBLOGALL);
4472		if (mbs.param[0] == MBOX_COMMAND_COMPLETE) {
4473			fcp->isp_fwstate = mbs.param[1];
4474		}
4475	}
4476}
4477
4478static void
4479isp_update(struct ispsoftc *isp)
4480{
4481	int bus, upmask;
4482
4483	for (bus = 0, upmask = isp->isp_update; upmask != 0; bus++) {
4484		if (upmask & (1 << bus)) {
4485			isp_update_bus(isp, bus);
4486		}
4487		upmask &= ~(1 << bus);
4488	}
4489}
4490
4491static void
4492isp_update_bus(struct ispsoftc *isp, int bus)
4493{
4494	int tgt;
4495	mbreg_t mbs;
4496	sdparam *sdp;
4497
4498	isp->isp_update &= ~(1 << bus);
4499	if (IS_FC(isp)) {
4500		/*
4501		 * There are no 'per-bus' settings for Fibre Channel.
4502		 */
4503		return;
4504	}
4505	sdp = isp->isp_param;
4506	sdp += bus;
4507
4508	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4509		u_int16_t flags, period, offset;
4510		int get;
4511
4512		if (sdp->isp_devparam[tgt].dev_enable == 0) {
4513			sdp->isp_devparam[tgt].dev_update = 0;
4514			sdp->isp_devparam[tgt].dev_refresh = 0;
4515			isp_prt(isp, ISP_LOGDEBUG0,
4516	 		    "skipping target %d bus %d update", tgt, bus);
4517			continue;
4518		}
4519		/*
4520		 * If the goal is to update the status of the device,
4521		 * take what's in dev_flags and try and set the device
4522		 * toward that. Otherwise, if we're just refreshing the
4523		 * current device state, get the current parameters.
4524		 */
4525
4526		/*
4527		 * Refresh overrides set
4528		 */
4529		if (sdp->isp_devparam[tgt].dev_refresh) {
4530			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4531			sdp->isp_devparam[tgt].dev_refresh = 0;
4532			get = 1;
4533		} else if (sdp->isp_devparam[tgt].dev_update) {
4534			mbs.param[0] = MBOX_SET_TARGET_PARAMS;
4535			/*
4536			 * Make sure dev_flags has "Renegotiate on Error"
4537			 * on and "Freeze Queue on Error" off.
4538			 */
4539			sdp->isp_devparam[tgt].dev_flags |= DPARM_RENEG;
4540			sdp->isp_devparam[tgt].dev_flags &= ~DPARM_QFRZ;
4541
4542			mbs.param[2] = sdp->isp_devparam[tgt].dev_flags;
4543
4544			/*
4545			 * Insist that PARITY must be enabled
4546			 * if SYNC or WIDE is enabled.
4547			 */
4548			if ((mbs.param[2] & (DPARM_SYNC|DPARM_WIDE)) != 0) {
4549				mbs.param[2] |= DPARM_PARITY;
4550			}
4551
4552			if ((mbs.param[2] & DPARM_SYNC) == 0) {
4553				mbs.param[3] = 0;
4554			} else {
4555				mbs.param[3] =
4556				    (sdp->isp_devparam[tgt].sync_offset << 8) |
4557				    (sdp->isp_devparam[tgt].sync_period);
4558			}
4559			/*
4560			 * A command completion later that has
4561			 * RQSTF_NEGOTIATION set canl cause
4562			 * the dev_refresh/announce cycle also.
4563			 &
4564			 *
4565			 * Note: It is really important to update our current
4566			 * flags with at least the state of TAG capabilities-
4567			 * otherwise we might try and send a tagged command
4568			 * when we have it all turned off. So change it here
4569			 * to say that current already matches goal.
4570			 */
4571			sdp->isp_devparam[tgt].cur_dflags &= ~DPARM_TQING;
4572			sdp->isp_devparam[tgt].cur_dflags |=
4573			    (sdp->isp_devparam[tgt].dev_flags & DPARM_TQING);
4574			isp_prt(isp, ISP_LOGDEBUG0,
4575			    "bus %d set tgt %d flags 0x%x off 0x%x period 0x%x",
4576			    bus, tgt, mbs.param[2], mbs.param[3] >> 8,
4577			    mbs.param[3] & 0xff);
4578			sdp->isp_devparam[tgt].dev_update = 0;
4579			sdp->isp_devparam[tgt].dev_refresh = 1;
4580			get = 0;
4581		} else {
4582			continue;
4583		}
4584		mbs.param[1] = (bus << 15) | (tgt << 8);
4585		isp_mboxcmd(isp, &mbs, MBLOGALL);
4586		if (get == 0) {
4587			isp->isp_sendmarker |= (1 << bus);
4588			continue;
4589		}
4590		flags = mbs.param[2];
4591		period = mbs.param[3] & 0xff;
4592		offset = mbs.param[3] >> 8;
4593		sdp->isp_devparam[tgt].cur_dflags = flags;
4594		sdp->isp_devparam[tgt].cur_period = period;
4595		sdp->isp_devparam[tgt].cur_offset = offset;
4596		get = (bus << 16) | tgt;
4597		(void) isp_async(isp, ISPASYNC_NEW_TGT_PARAMS, &get);
4598	}
4599
4600	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4601		if (sdp->isp_devparam[tgt].dev_update ||
4602		    sdp->isp_devparam[tgt].dev_refresh) {
4603			isp->isp_update |= (1 << bus);
4604			break;
4605		}
4606	}
4607}
4608
4609static void
4610isp_setdfltparm(struct ispsoftc *isp, int channel)
4611{
4612	int tgt;
4613	mbreg_t mbs;
4614	sdparam *sdp;
4615
4616	if (IS_FC(isp)) {
4617		fcparam *fcp = (fcparam *) isp->isp_param;
4618		int nvfail;
4619
4620		fcp += channel;
4621		if (fcp->isp_gotdparms) {
4622			return;
4623		}
4624		fcp->isp_gotdparms = 1;
4625		fcp->isp_maxfrmlen = ICB_DFLT_FRMLEN;
4626		fcp->isp_maxalloc = ICB_DFLT_ALLOC;
4627		fcp->isp_execthrottle = ISP_EXEC_THROTTLE;
4628		fcp->isp_retry_delay = ICB_DFLT_RDELAY;
4629		fcp->isp_retry_count = ICB_DFLT_RCOUNT;
4630		/* Platform specific.... */
4631		fcp->isp_loopid = DEFAULT_LOOPID(isp);
4632		fcp->isp_nodewwn = DEFAULT_NODEWWN(isp);
4633		fcp->isp_portwwn = DEFAULT_PORTWWN(isp);
4634		fcp->isp_fwoptions = 0;
4635		fcp->isp_fwoptions |= ICBOPT_FAIRNESS;
4636		fcp->isp_fwoptions |= ICBOPT_PDBCHANGE_AE;
4637		fcp->isp_fwoptions |= ICBOPT_HARD_ADDRESS;
4638#ifndef	ISP_NO_FASTPOST_FC
4639		fcp->isp_fwoptions |= ICBOPT_FAST_POST;
4640#endif
4641		if (isp->isp_confopts & ISP_CFG_FULL_DUPLEX)
4642			fcp->isp_fwoptions |= ICBOPT_FULL_DUPLEX;
4643
4644		/*
4645		 * Make sure this is turned off now until we get
4646		 * extended options from NVRAM
4647		 */
4648		fcp->isp_fwoptions &= ~ICBOPT_EXTENDED;
4649
4650		/*
4651		 * Now try and read NVRAM unless told to not do so.
4652		 * This will set fcparam's isp_nodewwn && isp_portwwn.
4653		 */
4654		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4655		    	nvfail = isp_read_nvram(isp);
4656			if (nvfail)
4657				isp->isp_confopts |= ISP_CFG_NONVRAM;
4658		} else {
4659			nvfail = 1;
4660		}
4661		/*
4662		 * Set node && port to override platform set defaults
4663		 * unless the nvram read failed (or none was done),
4664		 * or the platform code wants to use what had been
4665		 * set in the defaults.
4666		 */
4667		if (nvfail || (isp->isp_confopts & ISP_CFG_OWNWWN)) {
4668			isp_prt(isp, ISP_LOGCONFIG,
4669			    "Using Node WWN 0x%08x%08x, Port WWN 0x%08x%08x",
4670			    (u_int32_t) (DEFAULT_NODEWWN(isp) >> 32),
4671			    (u_int32_t) (DEFAULT_NODEWWN(isp) & 0xffffffff),
4672			    (u_int32_t) (DEFAULT_PORTWWN(isp) >> 32),
4673			    (u_int32_t) (DEFAULT_PORTWWN(isp) & 0xffffffff));
4674			isp->isp_confopts |= ISP_CFG_OWNWWN;
4675			ISP_NODEWWN(isp) = DEFAULT_NODEWWN(isp);
4676			ISP_PORTWWN(isp) = DEFAULT_PORTWWN(isp);
4677		} else {
4678			/*
4679			 * We always start out with values derived
4680			 * from NVRAM or our platform default.
4681			 */
4682			ISP_NODEWWN(isp) = fcp->isp_nodewwn;
4683			ISP_PORTWWN(isp) = fcp->isp_portwwn;
4684		}
4685		return;
4686	}
4687
4688	sdp = (sdparam *) isp->isp_param;
4689	sdp += channel;
4690
4691	/*
4692	 * Been there, done that, got the T-shirt...
4693	 */
4694	if (sdp->isp_gotdparms) {
4695		return;
4696	}
4697	sdp->isp_gotdparms = 1;
4698
4699	/*
4700	 * Establish some default parameters.
4701	 */
4702	sdp->isp_cmd_dma_burst_enable = 1;
4703	sdp->isp_data_dma_burst_enabl = 1;
4704	sdp->isp_fifo_threshold = 0;
4705	sdp->isp_initiator_id = DEFAULT_IID(isp);
4706	if (isp->isp_type >= ISP_HA_SCSI_1040) {
4707		sdp->isp_async_data_setup = 9;
4708	} else {
4709		sdp->isp_async_data_setup = 6;
4710	}
4711	sdp->isp_selection_timeout = 250;
4712	sdp->isp_max_queue_depth = MAXISPREQUEST(isp);
4713	sdp->isp_tag_aging = 8;
4714	sdp->isp_bus_reset_delay = 3;
4715	sdp->isp_retry_count = 2;
4716	sdp->isp_retry_delay = 2;
4717
4718	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4719		sdp->isp_devparam[tgt].exc_throttle = ISP_EXEC_THROTTLE;
4720		sdp->isp_devparam[tgt].dev_enable = 1;
4721	}
4722
4723	/*
4724	 * If we've not been told to avoid reading NVRAM, try and read it.
4725	 * If we're successful reading it, we can return since NVRAM will
4726	 * tell us the right thing to do. Otherwise, establish some reasonable
4727	 * defaults.
4728	 */
4729	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4730		if (isp_read_nvram(isp) == 0) {
4731			return;
4732		}
4733	}
4734
4735	/*
4736	 * Now try and see whether we have specific values for them.
4737	 */
4738	if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4739		mbs.param[0] = MBOX_GET_ACT_NEG_STATE;
4740		isp_mboxcmd(isp, &mbs, MBLOGNONE);
4741		if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4742			sdp->isp_req_ack_active_neg = 1;
4743			sdp->isp_data_line_active_neg = 1;
4744		} else {
4745			sdp->isp_req_ack_active_neg =
4746			    (mbs.param[1+channel] >> 4) & 0x1;
4747			sdp->isp_data_line_active_neg =
4748			    (mbs.param[1+channel] >> 5) & 0x1;
4749		}
4750	}
4751
4752	isp_prt(isp, ISP_LOGDEBUG0,
4753	    "defaulting bus %d REQ/ACK Active Negation is %d",
4754	    channel, sdp->isp_req_ack_active_neg);
4755	isp_prt(isp, ISP_LOGDEBUG0,
4756	    "defaulting bus %d DATA Active Negation is %d",
4757	    channel, sdp->isp_data_line_active_neg);
4758
4759	/*
4760	 * The trick here is to establish a default for the default (honk!)
4761	 * state (dev_flags). Then try and get the current status from
4762	 * the card to fill in the current state. We don't, in fact, set
4763	 * the default to the SAFE default state- that's not the goal state.
4764	 */
4765	for (tgt = 0; tgt < MAX_TARGETS; tgt++) {
4766		sdp->isp_devparam[tgt].cur_offset = 0;
4767		sdp->isp_devparam[tgt].cur_period = 0;
4768		sdp->isp_devparam[tgt].dev_flags = DPARM_DEFAULT;
4769		sdp->isp_devparam[tgt].cur_dflags = 0;
4770		/*
4771		 * We default to Wide/Fast for versions less than a 1040
4772		 * (unless it's SBus).
4773		 */
4774		if ((isp->isp_bustype == ISP_BT_SBUS &&
4775		    isp->isp_type < ISP_HA_SCSI_1020A) ||
4776		    (isp->isp_bustype == ISP_BT_PCI &&
4777		    isp->isp_type < ISP_HA_SCSI_1040) ||
4778		    (isp->isp_clock && isp->isp_clock < 60) ||
4779		    (sdp->isp_ultramode == 0)) {
4780			sdp->isp_devparam[tgt].sync_offset =
4781			    ISP_10M_SYNCPARMS >> 8;
4782			sdp->isp_devparam[tgt].sync_period =
4783			    ISP_10M_SYNCPARMS & 0xff;
4784		} else if (IS_ULTRA3(isp)) {
4785			sdp->isp_devparam[tgt].sync_offset =
4786			    ISP_80M_SYNCPARMS >> 8;
4787			sdp->isp_devparam[tgt].sync_period =
4788			    ISP_80M_SYNCPARMS & 0xff;
4789		} else if (IS_ULTRA2(isp)) {
4790			sdp->isp_devparam[tgt].sync_offset =
4791			    ISP_40M_SYNCPARMS >> 8;
4792			sdp->isp_devparam[tgt].sync_period =
4793			    ISP_40M_SYNCPARMS & 0xff;
4794		} else if (IS_1240(isp)) {
4795			sdp->isp_devparam[tgt].sync_offset =
4796			    ISP_20M_SYNCPARMS >> 8;
4797			sdp->isp_devparam[tgt].sync_period =
4798			    ISP_20M_SYNCPARMS & 0xff;
4799		} else {
4800			sdp->isp_devparam[tgt].sync_offset =
4801			    ISP_20M_SYNCPARMS_1040 >> 8;
4802			sdp->isp_devparam[tgt].sync_period =
4803			    ISP_20M_SYNCPARMS_1040 & 0xff;
4804		}
4805
4806		/*
4807		 * Don't get current target parameters if we've been
4808		 * told not to use NVRAM- it's really the same thing.
4809		 */
4810		if ((isp->isp_confopts & ISP_CFG_NONVRAM) == 0) {
4811
4812			mbs.param[0] = MBOX_GET_TARGET_PARAMS;
4813			mbs.param[1] = tgt << 8;
4814			isp_mboxcmd(isp, &mbs, MBLOGALL);
4815			if (mbs.param[0] != MBOX_COMMAND_COMPLETE) {
4816				continue;
4817			}
4818			sdp->isp_devparam[tgt].cur_dflags = mbs.param[2];
4819			sdp->isp_devparam[tgt].dev_flags = mbs.param[2];
4820			sdp->isp_devparam[tgt].cur_period = mbs.param[3] & 0xff;
4821			sdp->isp_devparam[tgt].cur_offset = mbs.param[3] >> 8;
4822
4823			/*
4824			 * The maximum period we can really see
4825			 * here is 100 (decimal), or 400 ns.
4826			 * For some unknown reason we sometimes
4827			 * get back wildass numbers from the
4828			 * boot device's parameters (alpha only).
4829			 */
4830			if ((mbs.param[3] & 0xff) <= 0x64) {
4831				sdp->isp_devparam[tgt].sync_period =
4832				    mbs.param[3] & 0xff;
4833				sdp->isp_devparam[tgt].sync_offset =
4834				    mbs.param[3] >> 8;
4835			}
4836
4837			/*
4838			 * It is not safe to run Ultra Mode with a clock < 60.
4839			 */
4840			if (((isp->isp_clock && isp->isp_clock < 60) ||
4841			    (isp->isp_type < ISP_HA_SCSI_1020A)) &&
4842			    (sdp->isp_devparam[tgt].sync_period <=
4843			    (ISP_20M_SYNCPARMS & 0xff))) {
4844				sdp->isp_devparam[tgt].sync_offset =
4845				    ISP_10M_SYNCPARMS >> 8;
4846				sdp->isp_devparam[tgt].sync_period =
4847				    ISP_10M_SYNCPARMS & 0xff;
4848			}
4849		}
4850		isp_prt(isp, ISP_LOGDEBUG0,
4851		    "Initial bus %d tgt %d flags %x offset %x period %x",
4852		    channel, tgt, sdp->isp_devparam[tgt].dev_flags,
4853		    sdp->isp_devparam[tgt].sync_offset,
4854		    sdp->isp_devparam[tgt].sync_period);
4855	}
4856}
4857
4858/*
4859 * Re-initialize the ISP and complete all orphaned commands
4860 * with a 'botched' notice. The reset/init routines should
4861 * not disturb an already active list of commands.
4862 *
4863 * Locks held prior to coming here.
4864 */
4865
4866void
4867isp_reinit(struct ispsoftc *isp)
4868{
4869	XS_T *xs;
4870	u_int16_t handle;
4871
4872	isp_reset(isp);
4873	if (isp->isp_state != ISP_RESETSTATE) {
4874		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot reset card");
4875		goto skip;
4876	}
4877	isp_init(isp);
4878	if (isp->isp_role == ISP_ROLE_NONE) {
4879		goto skip;
4880	}
4881	if (isp->isp_state == ISP_INITSTATE) {
4882		isp->isp_state = ISP_RUNSTATE;
4883	}
4884	if (isp->isp_state != ISP_RUNSTATE) {
4885		isp_prt(isp, ISP_LOGERR, "isp_reinit cannot restart card");
4886	}
4887skip:
4888	isp->isp_nactive = 0;
4889
4890	for (handle = 1; (int) handle <= isp->isp_maxcmds; handle++) {
4891		xs = isp_find_xs(isp, handle);
4892		if (xs == NULL) {
4893			continue;
4894		}
4895		isp_destroy_handle(isp, handle);
4896		if (XS_XFRLEN(xs)) {
4897			ISP_DMAFREE(isp, xs, handle);
4898			XS_RESID(xs) = XS_XFRLEN(xs);
4899		} else {
4900			XS_RESID(xs) = 0;
4901		}
4902		XS_SETERR(xs, HBA_BUSRESET);
4903		isp_done(xs);
4904	}
4905}
4906
4907/*
4908 * NVRAM Routines
4909 */
4910static int
4911isp_read_nvram(struct ispsoftc *isp)
4912{
4913	int i, amt;
4914	u_int8_t csum, minversion;
4915	union {
4916		u_int8_t _x[ISP2100_NVRAM_SIZE];
4917		u_int16_t _s[ISP2100_NVRAM_SIZE>>1];
4918	} _n;
4919#define	nvram_data	_n._x
4920#define	nvram_words	_n._s
4921
4922	if (IS_FC(isp)) {
4923		amt = ISP2100_NVRAM_SIZE;
4924		minversion = 1;
4925	} else if (IS_ULTRA2(isp)) {
4926		amt = ISP1080_NVRAM_SIZE;
4927		minversion = 0;
4928	} else {
4929		amt = ISP_NVRAM_SIZE;
4930		minversion = 2;
4931	}
4932
4933	/*
4934	 * Just read the first two words first to see if we have a valid
4935	 * NVRAM to continue reading the rest with.
4936	 */
4937	for (i = 0; i < 2; i++) {
4938		isp_rdnvram_word(isp, i, &nvram_words[i]);
4939	}
4940	if (nvram_data[0] != 'I' || nvram_data[1] != 'S' ||
4941	    nvram_data[2] != 'P') {
4942		if (isp->isp_bustype != ISP_BT_SBUS) {
4943			isp_prt(isp, ISP_LOGWARN, "invalid NVRAM header");
4944			isp_prt(isp, ISP_LOGDEBUG0, "%x %x %x",
4945			    nvram_data[0], nvram_data[1], nvram_data[2]);
4946		}
4947		return (-1);
4948	}
4949	for (i = 2; i < amt>>1; i++) {
4950		isp_rdnvram_word(isp, i, &nvram_words[i]);
4951	}
4952	for (csum = 0, i = 0; i < amt; i++) {
4953		csum += nvram_data[i];
4954	}
4955	if (csum != 0) {
4956		isp_prt(isp, ISP_LOGWARN, "invalid NVRAM checksum");
4957		return (-1);
4958	}
4959	if (ISP_NVRAM_VERSION(nvram_data) < minversion) {
4960		isp_prt(isp, ISP_LOGWARN, "version %d NVRAM not understood",
4961		    ISP_NVRAM_VERSION(nvram_data));
4962		return (-1);
4963	}
4964
4965	if (IS_ULTRA3(isp)) {
4966		isp_parse_nvram_12160(isp, 0, nvram_data);
4967		isp_parse_nvram_12160(isp, 1, nvram_data);
4968	} else if (IS_1080(isp)) {
4969		isp_parse_nvram_1080(isp, 0, nvram_data);
4970	} else if (IS_1280(isp) || IS_1240(isp)) {
4971		isp_parse_nvram_1080(isp, 0, nvram_data);
4972		isp_parse_nvram_1080(isp, 1, nvram_data);
4973	} else if (IS_SCSI(isp)) {
4974		isp_parse_nvram_1020(isp, nvram_data);
4975	} else {
4976		isp_parse_nvram_2100(isp, nvram_data);
4977	}
4978	return (0);
4979#undef	nvram_data
4980#undef	nvram_words
4981}
4982
4983static void
4984isp_rdnvram_word(struct ispsoftc *isp, int wo, u_int16_t *rp)
4985{
4986	int i, cbits;
4987	u_int16_t bit, rqst;
4988
4989	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
4990	USEC_DELAY(2);
4991	ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
4992	USEC_DELAY(2);
4993
4994	if (IS_FC(isp)) {
4995		wo &= ((ISP2100_NVRAM_SIZE >> 1) - 1);
4996		rqst = (ISP_NVRAM_READ << 8) | wo;
4997		cbits = 10;
4998	} else if (IS_ULTRA2(isp)) {
4999		wo &= ((ISP1080_NVRAM_SIZE >> 1) - 1);
5000		rqst = (ISP_NVRAM_READ << 8) | wo;
5001		cbits = 10;
5002	} else {
5003		wo &= ((ISP_NVRAM_SIZE >> 1) - 1);
5004		rqst = (ISP_NVRAM_READ << 6) | wo;
5005		cbits = 8;
5006	}
5007
5008	/*
5009	 * Clock the word select request out...
5010	 */
5011	for (i = cbits; i >= 0; i--) {
5012		if ((rqst >> i) & 1) {
5013			bit = BIU_NVRAM_SELECT | BIU_NVRAM_DATAOUT;
5014		} else {
5015			bit = BIU_NVRAM_SELECT;
5016		}
5017		ISP_WRITE(isp, BIU_NVRAM, bit);
5018		USEC_DELAY(2);
5019		ISP_WRITE(isp, BIU_NVRAM, bit | BIU_NVRAM_CLOCK);
5020		USEC_DELAY(2);
5021		ISP_WRITE(isp, BIU_NVRAM, bit);
5022		USEC_DELAY(2);
5023	}
5024	/*
5025	 * Now read the result back in (bits come back in MSB format).
5026	 */
5027	*rp = 0;
5028	for (i = 0; i < 16; i++) {
5029		u_int16_t rv;
5030		*rp <<= 1;
5031		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT|BIU_NVRAM_CLOCK);
5032		USEC_DELAY(2);
5033		rv = ISP_READ(isp, BIU_NVRAM);
5034		if (rv & BIU_NVRAM_DATAIN) {
5035			*rp |= 1;
5036		}
5037		USEC_DELAY(2);
5038		ISP_WRITE(isp, BIU_NVRAM, BIU_NVRAM_SELECT);
5039		USEC_DELAY(2);
5040	}
5041	ISP_WRITE(isp, BIU_NVRAM, 0);
5042	USEC_DELAY(2);
5043	ISP_SWIZZLE_NVRAM_WORD(isp, rp);
5044}
5045
5046static void
5047isp_parse_nvram_1020(struct ispsoftc *isp, u_int8_t *nvram_data)
5048{
5049	int i;
5050	sdparam *sdp = (sdparam *) isp->isp_param;
5051
5052	sdp->isp_fifo_threshold =
5053		ISP_NVRAM_FIFO_THRESHOLD(nvram_data) |
5054		(ISP_NVRAM_FIFO_THRESHOLD_128(nvram_data) << 2);
5055
5056	sdp->isp_initiator_id =
5057		ISP_NVRAM_INITIATOR_ID(nvram_data);
5058
5059	sdp->isp_bus_reset_delay =
5060		ISP_NVRAM_BUS_RESET_DELAY(nvram_data);
5061
5062	sdp->isp_retry_count =
5063		ISP_NVRAM_BUS_RETRY_COUNT(nvram_data);
5064
5065	sdp->isp_retry_delay =
5066		ISP_NVRAM_BUS_RETRY_DELAY(nvram_data);
5067
5068	sdp->isp_async_data_setup =
5069		ISP_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data);
5070
5071	if (isp->isp_type >= ISP_HA_SCSI_1040) {
5072		if (sdp->isp_async_data_setup < 9) {
5073			sdp->isp_async_data_setup = 9;
5074		}
5075	} else {
5076		if (sdp->isp_async_data_setup != 6) {
5077			sdp->isp_async_data_setup = 6;
5078		}
5079	}
5080
5081	sdp->isp_req_ack_active_neg =
5082		ISP_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data);
5083
5084	sdp->isp_data_line_active_neg =
5085		ISP_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data);
5086
5087	sdp->isp_data_dma_burst_enabl =
5088		ISP_NVRAM_DATA_DMA_BURST_ENABLE(nvram_data);
5089
5090	sdp->isp_cmd_dma_burst_enable =
5091		ISP_NVRAM_CMD_DMA_BURST_ENABLE(nvram_data);
5092
5093	sdp->isp_tag_aging =
5094		ISP_NVRAM_TAG_AGE_LIMIT(nvram_data);
5095
5096	sdp->isp_selection_timeout =
5097		ISP_NVRAM_SELECTION_TIMEOUT(nvram_data);
5098
5099	sdp->isp_max_queue_depth =
5100		ISP_NVRAM_MAX_QUEUE_DEPTH(nvram_data);
5101
5102	sdp->isp_fast_mttr = ISP_NVRAM_FAST_MTTR_ENABLE(nvram_data);
5103	for (i = 0; i < MAX_TARGETS; i++) {
5104		sdp->isp_devparam[i].dev_enable =
5105			ISP_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i);
5106		sdp->isp_devparam[i].exc_throttle =
5107			ISP_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i);
5108		sdp->isp_devparam[i].sync_offset =
5109			ISP_NVRAM_TGT_SYNC_OFFSET(nvram_data, i);
5110		sdp->isp_devparam[i].sync_period =
5111			ISP_NVRAM_TGT_SYNC_PERIOD(nvram_data, i);
5112
5113		if (isp->isp_type < ISP_HA_SCSI_1040) {
5114			/*
5115			 * If we're not ultra, we can't possibly
5116			 * be a shorter period than this.
5117			 */
5118			if (sdp->isp_devparam[i].sync_period < 0x19) {
5119				sdp->isp_devparam[i].sync_period = 0x19;
5120			}
5121			if (sdp->isp_devparam[i].sync_offset > 0xc) {
5122				sdp->isp_devparam[i].sync_offset = 0x0c;
5123			}
5124		} else {
5125			if (sdp->isp_devparam[i].sync_offset > 0x8) {
5126				sdp->isp_devparam[i].sync_offset = 0x8;
5127			}
5128		}
5129		sdp->isp_devparam[i].dev_flags = 0;
5130		if (ISP_NVRAM_TGT_RENEG(nvram_data, i))
5131			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5132		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5133		if (ISP_NVRAM_TGT_TQING(nvram_data, i))
5134			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5135		if (ISP_NVRAM_TGT_SYNC(nvram_data, i))
5136			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5137		if (ISP_NVRAM_TGT_WIDE(nvram_data, i))
5138			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5139		if (ISP_NVRAM_TGT_PARITY(nvram_data, i))
5140			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5141		if (ISP_NVRAM_TGT_DISC(nvram_data, i))
5142			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5143		sdp->isp_devparam[i].cur_dflags = 0; /* we don't know */
5144	}
5145}
5146
5147static void
5148isp_parse_nvram_1080(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5149{
5150	int i;
5151	sdparam *sdp = (sdparam *) isp->isp_param;
5152	sdp += bus;
5153
5154	sdp->isp_fifo_threshold =
5155	    ISP1080_NVRAM_FIFO_THRESHOLD(nvram_data);
5156
5157	sdp->isp_initiator_id =
5158	    ISP1080_NVRAM_INITIATOR_ID(nvram_data, bus);
5159
5160	sdp->isp_bus_reset_delay =
5161	    ISP1080_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5162
5163	sdp->isp_retry_count =
5164	    ISP1080_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5165
5166	sdp->isp_retry_delay =
5167	    ISP1080_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5168
5169	sdp->isp_async_data_setup =
5170	    ISP1080_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5171	    bus);
5172
5173	sdp->isp_req_ack_active_neg =
5174	    ISP1080_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5175	    bus);
5176
5177	sdp->isp_data_line_active_neg =
5178	    ISP1080_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5179	    bus);
5180
5181	sdp->isp_data_dma_burst_enabl =
5182	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5183
5184	sdp->isp_cmd_dma_burst_enable =
5185	    ISP1080_NVRAM_BURST_ENABLE(nvram_data);
5186
5187	sdp->isp_selection_timeout =
5188	    ISP1080_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5189
5190	sdp->isp_max_queue_depth =
5191	     ISP1080_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5192
5193	for (i = 0; i < MAX_TARGETS; i++) {
5194		sdp->isp_devparam[i].dev_enable =
5195		    ISP1080_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5196		sdp->isp_devparam[i].exc_throttle =
5197			ISP1080_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5198		sdp->isp_devparam[i].sync_offset =
5199			ISP1080_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5200		sdp->isp_devparam[i].sync_period =
5201			ISP1080_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5202		sdp->isp_devparam[i].dev_flags = 0;
5203		if (ISP1080_NVRAM_TGT_RENEG(nvram_data, i, bus))
5204			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5205		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5206		if (ISP1080_NVRAM_TGT_TQING(nvram_data, i, bus))
5207			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5208		if (ISP1080_NVRAM_TGT_SYNC(nvram_data, i, bus))
5209			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5210		if (ISP1080_NVRAM_TGT_WIDE(nvram_data, i, bus))
5211			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5212		if (ISP1080_NVRAM_TGT_PARITY(nvram_data, i, bus))
5213			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5214		if (ISP1080_NVRAM_TGT_DISC(nvram_data, i, bus))
5215			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5216		sdp->isp_devparam[i].cur_dflags = 0;
5217	}
5218}
5219
5220static void
5221isp_parse_nvram_12160(struct ispsoftc *isp, int bus, u_int8_t *nvram_data)
5222{
5223	sdparam *sdp = (sdparam *) isp->isp_param;
5224	int i;
5225
5226	sdp += bus;
5227
5228	sdp->isp_fifo_threshold =
5229	    ISP12160_NVRAM_FIFO_THRESHOLD(nvram_data);
5230
5231	sdp->isp_initiator_id =
5232	    ISP12160_NVRAM_INITIATOR_ID(nvram_data, bus);
5233
5234	sdp->isp_bus_reset_delay =
5235	    ISP12160_NVRAM_BUS_RESET_DELAY(nvram_data, bus);
5236
5237	sdp->isp_retry_count =
5238	    ISP12160_NVRAM_BUS_RETRY_COUNT(nvram_data, bus);
5239
5240	sdp->isp_retry_delay =
5241	    ISP12160_NVRAM_BUS_RETRY_DELAY(nvram_data, bus);
5242
5243	sdp->isp_async_data_setup =
5244	    ISP12160_NVRAM_ASYNC_DATA_SETUP_TIME(nvram_data,
5245	    bus);
5246
5247	sdp->isp_req_ack_active_neg =
5248	    ISP12160_NVRAM_REQ_ACK_ACTIVE_NEGATION(nvram_data,
5249	    bus);
5250
5251	sdp->isp_data_line_active_neg =
5252	    ISP12160_NVRAM_DATA_LINE_ACTIVE_NEGATION(nvram_data,
5253	    bus);
5254
5255	sdp->isp_data_dma_burst_enabl =
5256	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5257
5258	sdp->isp_cmd_dma_burst_enable =
5259	    ISP12160_NVRAM_BURST_ENABLE(nvram_data);
5260
5261	sdp->isp_selection_timeout =
5262	    ISP12160_NVRAM_SELECTION_TIMEOUT(nvram_data, bus);
5263
5264	sdp->isp_max_queue_depth =
5265	     ISP12160_NVRAM_MAX_QUEUE_DEPTH(nvram_data, bus);
5266
5267	for (i = 0; i < MAX_TARGETS; i++) {
5268		sdp->isp_devparam[i].dev_enable =
5269		    ISP12160_NVRAM_TGT_DEVICE_ENABLE(nvram_data, i, bus);
5270		sdp->isp_devparam[i].exc_throttle =
5271			ISP12160_NVRAM_TGT_EXEC_THROTTLE(nvram_data, i, bus);
5272		sdp->isp_devparam[i].sync_offset =
5273			ISP12160_NVRAM_TGT_SYNC_OFFSET(nvram_data, i, bus);
5274		sdp->isp_devparam[i].sync_period =
5275			ISP12160_NVRAM_TGT_SYNC_PERIOD(nvram_data, i, bus);
5276		sdp->isp_devparam[i].dev_flags = 0;
5277		if (ISP12160_NVRAM_TGT_RENEG(nvram_data, i, bus))
5278			sdp->isp_devparam[i].dev_flags |= DPARM_RENEG;
5279		sdp->isp_devparam[i].dev_flags |= DPARM_ARQ;
5280		if (ISP12160_NVRAM_TGT_TQING(nvram_data, i, bus))
5281			sdp->isp_devparam[i].dev_flags |= DPARM_TQING;
5282		if (ISP12160_NVRAM_TGT_SYNC(nvram_data, i, bus))
5283			sdp->isp_devparam[i].dev_flags |= DPARM_SYNC;
5284		if (ISP12160_NVRAM_TGT_WIDE(nvram_data, i, bus))
5285			sdp->isp_devparam[i].dev_flags |= DPARM_WIDE;
5286		if (ISP12160_NVRAM_TGT_PARITY(nvram_data, i, bus))
5287			sdp->isp_devparam[i].dev_flags |= DPARM_PARITY;
5288		if (ISP12160_NVRAM_TGT_DISC(nvram_data, i, bus))
5289			sdp->isp_devparam[i].dev_flags |= DPARM_DISC;
5290		sdp->isp_devparam[i].cur_dflags = 0;
5291	}
5292}
5293
5294static void
5295isp_parse_nvram_2100(struct ispsoftc *isp, u_int8_t *nvram_data)
5296{
5297	fcparam *fcp = (fcparam *) isp->isp_param;
5298	u_int64_t wwn;
5299
5300	/*
5301	 * There is NVRAM storage for both Port and Node entities-
5302	 * but the Node entity appears to be unused on all the cards
5303	 * I can find. However, we should account for this being set
5304	 * at some point in the future.
5305	 *
5306	 * Qlogic WWNs have an NAA of 2, but usually nothing shows up in
5307	 * bits 48..60. In the case of the 2202, it appears that they do
5308	 * use bit 48 to distinguish between the two instances on the card.
5309	 * The 2204, which I've never seen, *probably* extends this method.
5310	 */
5311	wwn = ISP2100_NVRAM_PORT_NAME(nvram_data);
5312	if (wwn) {
5313		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Port WWN 0x%08x%08x",
5314		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5315		if ((wwn >> 60) == 0) {
5316			wwn |= (((u_int64_t) 2)<< 60);
5317		}
5318	}
5319	fcp->isp_portwwn = wwn;
5320	wwn = ISP2100_NVRAM_NODE_NAME(nvram_data);
5321	if (wwn) {
5322		isp_prt(isp, ISP_LOGCONFIG, "NVRAM Node WWN 0x%08x%08x",
5323		    (u_int32_t) (wwn >> 32), (u_int32_t) (wwn & 0xffffffff));
5324		if ((wwn >> 60) == 0) {
5325			wwn |= (((u_int64_t) 2)<< 60);
5326		}
5327	}
5328	fcp->isp_nodewwn = wwn;
5329
5330	/*
5331	 * Make sure we have both Node and Port as non-zero values.
5332	 */
5333	if (fcp->isp_nodewwn != 0 && fcp->isp_portwwn == 0) {
5334		fcp->isp_portwwn = fcp->isp_nodewwn;
5335	} else if (fcp->isp_nodewwn == 0 && fcp->isp_portwwn != 0) {
5336		fcp->isp_nodewwn = fcp->isp_portwwn;
5337	}
5338
5339	/*
5340	 * Make the Node and Port values sane if they're NAA == 2.
5341	 * This means to clear bits 48..56 for the Node WWN and
5342	 * make sure that there's some non-zero value in 48..56
5343	 * for the Port WWN.
5344	 */
5345	if (fcp->isp_nodewwn && fcp->isp_portwwn) {
5346		if ((fcp->isp_nodewwn & (((u_int64_t) 0xfff) << 48)) != 0 &&
5347		    (fcp->isp_nodewwn >> 60) == 2) {
5348			fcp->isp_nodewwn &= ~((u_int64_t) 0xfff << 48);
5349		}
5350		if ((fcp->isp_portwwn & (((u_int64_t) 0xfff) << 48)) == 0 &&
5351		    (fcp->isp_portwwn >> 60) == 2) {
5352			fcp->isp_portwwn |= ((u_int64_t) 1 << 56);
5353		}
5354	}
5355
5356	fcp->isp_maxalloc =
5357		ISP2100_NVRAM_MAXIOCBALLOCATION(nvram_data);
5358	fcp->isp_maxfrmlen =
5359		ISP2100_NVRAM_MAXFRAMELENGTH(nvram_data);
5360	fcp->isp_retry_delay =
5361		ISP2100_NVRAM_RETRY_DELAY(nvram_data);
5362	fcp->isp_retry_count =
5363		ISP2100_NVRAM_RETRY_COUNT(nvram_data);
5364	fcp->isp_loopid =
5365		ISP2100_NVRAM_HARDLOOPID(nvram_data);
5366	fcp->isp_execthrottle =
5367		ISP2100_NVRAM_EXECUTION_THROTTLE(nvram_data);
5368	fcp->isp_fwoptions = ISP2100_NVRAM_OPTIONS(nvram_data);
5369	isp_prt(isp, ISP_LOGDEBUG0,
5370	    "fwoptions from nvram are 0x%x", fcp->isp_fwoptions);
5371}
5372