1/*
2 * Copyright (c) 2005 Intel Inc. All rights reserved.
3 * Copyright (c) 2005-2006 Voltaire, Inc. All rights reserved.
4 *
5 * This software is available to you under a choice of one of two
6 * licenses.  You may choose to be licensed under the terms of the GNU
7 * General Public License (GPL) Version 2, available from the file
8 * COPYING in the main directory of this source tree, or the
9 * OpenIB.org BSD license below:
10 *
11 *     Redistribution and use in source and binary forms, with or
12 *     without modification, are permitted provided that the following
13 *     conditions are met:
14 *
15 *      - Redistributions of source code must retain the above
16 *        copyright notice, this list of conditions and the following
17 *        disclaimer.
18 *
19 *      - Redistributions in binary form must reproduce the above
20 *        copyright notice, this list of conditions and the following
21 *        disclaimer in the documentation and/or other materials
22 *        provided with the distribution.
23 *
24 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
25 * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
26 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
27 * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
28 * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
29 * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
30 * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
31 * SOFTWARE.
32 *
33 * $Id: mad_rmpp.c,v 1.1.1.1 2007/10/11 23:31:50 Exp $
34 */
35
36#include "mad_priv.h"
37#include "mad_rmpp.h"
38
39enum rmpp_state {
40	RMPP_STATE_ACTIVE,
41	RMPP_STATE_TIMEOUT,
42	RMPP_STATE_COMPLETE
43};
44
45struct mad_rmpp_recv {
46	struct ib_mad_agent_private *agent;
47	struct list_head list;
48	struct delayed_work timeout_work;
49	struct delayed_work cleanup_work;
50	struct completion comp;
51	enum rmpp_state state;
52	spinlock_t lock;
53	atomic_t refcount;
54
55	struct ib_ah *ah;
56	struct ib_mad_recv_wc *rmpp_wc;
57	struct ib_mad_recv_buf *cur_seg_buf;
58	int last_ack;
59	int seg_num;
60	int newwin;
61	int repwin;
62
63	__be64 tid;
64	u32 src_qp;
65	u16 slid;
66	u8 mgmt_class;
67	u8 class_version;
68	u8 method;
69};
70
71static inline void deref_rmpp_recv(struct mad_rmpp_recv *rmpp_recv)
72{
73	if (atomic_dec_and_test(&rmpp_recv->refcount))
74		complete(&rmpp_recv->comp);
75}
76
77static void destroy_rmpp_recv(struct mad_rmpp_recv *rmpp_recv)
78{
79	deref_rmpp_recv(rmpp_recv);
80	wait_for_completion(&rmpp_recv->comp);
81	ib_destroy_ah(rmpp_recv->ah);
82	kfree(rmpp_recv);
83}
84
85void ib_cancel_rmpp_recvs(struct ib_mad_agent_private *agent)
86{
87	struct mad_rmpp_recv *rmpp_recv, *temp_rmpp_recv;
88	unsigned long flags;
89
90	spin_lock_irqsave(&agent->lock, flags);
91	list_for_each_entry(rmpp_recv, &agent->rmpp_list, list) {
92		cancel_delayed_work(&rmpp_recv->timeout_work);
93		cancel_delayed_work(&rmpp_recv->cleanup_work);
94	}
95	spin_unlock_irqrestore(&agent->lock, flags);
96
97	flush_workqueue(agent->qp_info->port_priv->wq);
98
99	list_for_each_entry_safe(rmpp_recv, temp_rmpp_recv,
100				 &agent->rmpp_list, list) {
101		list_del(&rmpp_recv->list);
102		if (rmpp_recv->state != RMPP_STATE_COMPLETE)
103			ib_free_recv_mad(rmpp_recv->rmpp_wc);
104		destroy_rmpp_recv(rmpp_recv);
105	}
106}
107
108static void format_ack(struct ib_mad_send_buf *msg,
109		       struct ib_rmpp_mad *data,
110		       struct mad_rmpp_recv *rmpp_recv)
111{
112	struct ib_rmpp_mad *ack = msg->mad;
113	unsigned long flags;
114
115	memcpy(ack, &data->mad_hdr, msg->hdr_len);
116
117	ack->mad_hdr.method ^= IB_MGMT_METHOD_RESP;
118	ack->rmpp_hdr.rmpp_type = IB_MGMT_RMPP_TYPE_ACK;
119	ib_set_rmpp_flags(&ack->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
120
121	spin_lock_irqsave(&rmpp_recv->lock, flags);
122	rmpp_recv->last_ack = rmpp_recv->seg_num;
123	ack->rmpp_hdr.seg_num = cpu_to_be32(rmpp_recv->seg_num);
124	ack->rmpp_hdr.paylen_newwin = cpu_to_be32(rmpp_recv->newwin);
125	spin_unlock_irqrestore(&rmpp_recv->lock, flags);
126}
127
128static void ack_recv(struct mad_rmpp_recv *rmpp_recv,
129		     struct ib_mad_recv_wc *recv_wc)
130{
131	struct ib_mad_send_buf *msg;
132	int ret, hdr_len;
133
134	hdr_len = ib_get_mad_data_offset(recv_wc->recv_buf.mad->mad_hdr.mgmt_class);
135	msg = ib_create_send_mad(&rmpp_recv->agent->agent, recv_wc->wc->src_qp,
136				 recv_wc->wc->pkey_index, 1, hdr_len,
137				 0, GFP_KERNEL);
138	if (!msg)
139		return;
140
141	format_ack(msg, (struct ib_rmpp_mad *) recv_wc->recv_buf.mad, rmpp_recv);
142	msg->ah = rmpp_recv->ah;
143	ret = ib_post_send_mad(msg, NULL);
144	if (ret)
145		ib_free_send_mad(msg);
146}
147
148static struct ib_mad_send_buf *alloc_response_msg(struct ib_mad_agent *agent,
149						  struct ib_mad_recv_wc *recv_wc)
150{
151	struct ib_mad_send_buf *msg;
152	struct ib_ah *ah;
153	int hdr_len;
154
155	ah = ib_create_ah_from_wc(agent->qp->pd, recv_wc->wc,
156				  recv_wc->recv_buf.grh, agent->port_num);
157	if (IS_ERR(ah))
158		return (void *) ah;
159
160	hdr_len = ib_get_mad_data_offset(recv_wc->recv_buf.mad->mad_hdr.mgmt_class);
161	msg = ib_create_send_mad(agent, recv_wc->wc->src_qp,
162				 recv_wc->wc->pkey_index, 1,
163				 hdr_len, 0, GFP_KERNEL);
164	if (IS_ERR(msg))
165		ib_destroy_ah(ah);
166	else
167		msg->ah = ah;
168
169	return msg;
170}
171
172static void ack_ds_ack(struct ib_mad_agent_private *agent,
173		       struct ib_mad_recv_wc *recv_wc)
174{
175	struct ib_mad_send_buf *msg;
176	struct ib_rmpp_mad *rmpp_mad;
177	int ret;
178
179	msg = alloc_response_msg(&agent->agent, recv_wc);
180	if (IS_ERR(msg))
181		return;
182
183	rmpp_mad = msg->mad;
184	memcpy(rmpp_mad, recv_wc->recv_buf.mad, msg->hdr_len);
185
186	rmpp_mad->mad_hdr.method ^= IB_MGMT_METHOD_RESP;
187	ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
188	rmpp_mad->rmpp_hdr.seg_num = 0;
189	rmpp_mad->rmpp_hdr.paylen_newwin = cpu_to_be32(1);
190
191	ret = ib_post_send_mad(msg, NULL);
192	if (ret) {
193		ib_destroy_ah(msg->ah);
194		ib_free_send_mad(msg);
195	}
196}
197
198void ib_rmpp_send_handler(struct ib_mad_send_wc *mad_send_wc)
199{
200	struct ib_rmpp_mad *rmpp_mad = mad_send_wc->send_buf->mad;
201
202	if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_ACK)
203		ib_destroy_ah(mad_send_wc->send_buf->ah);
204	ib_free_send_mad(mad_send_wc->send_buf);
205}
206
207static void nack_recv(struct ib_mad_agent_private *agent,
208		      struct ib_mad_recv_wc *recv_wc, u8 rmpp_status)
209{
210	struct ib_mad_send_buf *msg;
211	struct ib_rmpp_mad *rmpp_mad;
212	int ret;
213
214	msg = alloc_response_msg(&agent->agent, recv_wc);
215	if (IS_ERR(msg))
216		return;
217
218	rmpp_mad = msg->mad;
219	memcpy(rmpp_mad, recv_wc->recv_buf.mad, msg->hdr_len);
220
221	rmpp_mad->mad_hdr.method ^= IB_MGMT_METHOD_RESP;
222	rmpp_mad->rmpp_hdr.rmpp_version = IB_MGMT_RMPP_VERSION;
223	rmpp_mad->rmpp_hdr.rmpp_type = IB_MGMT_RMPP_TYPE_ABORT;
224	ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
225	rmpp_mad->rmpp_hdr.rmpp_status = rmpp_status;
226	rmpp_mad->rmpp_hdr.seg_num = 0;
227	rmpp_mad->rmpp_hdr.paylen_newwin = 0;
228
229	ret = ib_post_send_mad(msg, NULL);
230	if (ret) {
231		ib_destroy_ah(msg->ah);
232		ib_free_send_mad(msg);
233	}
234}
235
236static void recv_timeout_handler(struct work_struct *work)
237{
238	struct mad_rmpp_recv *rmpp_recv =
239		container_of(work, struct mad_rmpp_recv, timeout_work.work);
240	struct ib_mad_recv_wc *rmpp_wc;
241	unsigned long flags;
242
243	spin_lock_irqsave(&rmpp_recv->agent->lock, flags);
244	if (rmpp_recv->state != RMPP_STATE_ACTIVE) {
245		spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
246		return;
247	}
248	rmpp_recv->state = RMPP_STATE_TIMEOUT;
249	list_del(&rmpp_recv->list);
250	spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
251
252	rmpp_wc = rmpp_recv->rmpp_wc;
253	nack_recv(rmpp_recv->agent, rmpp_wc, IB_MGMT_RMPP_STATUS_T2L);
254	destroy_rmpp_recv(rmpp_recv);
255	ib_free_recv_mad(rmpp_wc);
256}
257
258static void recv_cleanup_handler(struct work_struct *work)
259{
260	struct mad_rmpp_recv *rmpp_recv =
261		container_of(work, struct mad_rmpp_recv, cleanup_work.work);
262	unsigned long flags;
263
264	spin_lock_irqsave(&rmpp_recv->agent->lock, flags);
265	list_del(&rmpp_recv->list);
266	spin_unlock_irqrestore(&rmpp_recv->agent->lock, flags);
267	destroy_rmpp_recv(rmpp_recv);
268}
269
270static struct mad_rmpp_recv *
271create_rmpp_recv(struct ib_mad_agent_private *agent,
272		 struct ib_mad_recv_wc *mad_recv_wc)
273{
274	struct mad_rmpp_recv *rmpp_recv;
275	struct ib_mad_hdr *mad_hdr;
276
277	rmpp_recv = kmalloc(sizeof *rmpp_recv, GFP_KERNEL);
278	if (!rmpp_recv)
279		return NULL;
280
281	rmpp_recv->ah = ib_create_ah_from_wc(agent->agent.qp->pd,
282					     mad_recv_wc->wc,
283					     mad_recv_wc->recv_buf.grh,
284					     agent->agent.port_num);
285	if (IS_ERR(rmpp_recv->ah))
286		goto error;
287
288	rmpp_recv->agent = agent;
289	init_completion(&rmpp_recv->comp);
290	INIT_DELAYED_WORK(&rmpp_recv->timeout_work, recv_timeout_handler);
291	INIT_DELAYED_WORK(&rmpp_recv->cleanup_work, recv_cleanup_handler);
292	spin_lock_init(&rmpp_recv->lock);
293	rmpp_recv->state = RMPP_STATE_ACTIVE;
294	atomic_set(&rmpp_recv->refcount, 1);
295
296	rmpp_recv->rmpp_wc = mad_recv_wc;
297	rmpp_recv->cur_seg_buf = &mad_recv_wc->recv_buf;
298	rmpp_recv->newwin = 1;
299	rmpp_recv->seg_num = 1;
300	rmpp_recv->last_ack = 0;
301	rmpp_recv->repwin = 1;
302
303	mad_hdr = &mad_recv_wc->recv_buf.mad->mad_hdr;
304	rmpp_recv->tid = mad_hdr->tid;
305	rmpp_recv->src_qp = mad_recv_wc->wc->src_qp;
306	rmpp_recv->slid = mad_recv_wc->wc->slid;
307	rmpp_recv->mgmt_class = mad_hdr->mgmt_class;
308	rmpp_recv->class_version = mad_hdr->class_version;
309	rmpp_recv->method  = mad_hdr->method;
310	return rmpp_recv;
311
312error:	kfree(rmpp_recv);
313	return NULL;
314}
315
316static struct mad_rmpp_recv *
317find_rmpp_recv(struct ib_mad_agent_private *agent,
318	       struct ib_mad_recv_wc *mad_recv_wc)
319{
320	struct mad_rmpp_recv *rmpp_recv;
321	struct ib_mad_hdr *mad_hdr = &mad_recv_wc->recv_buf.mad->mad_hdr;
322
323	list_for_each_entry(rmpp_recv, &agent->rmpp_list, list) {
324		if (rmpp_recv->tid == mad_hdr->tid &&
325		    rmpp_recv->src_qp == mad_recv_wc->wc->src_qp &&
326		    rmpp_recv->slid == mad_recv_wc->wc->slid &&
327		    rmpp_recv->mgmt_class == mad_hdr->mgmt_class &&
328		    rmpp_recv->class_version == mad_hdr->class_version &&
329		    rmpp_recv->method == mad_hdr->method)
330			return rmpp_recv;
331	}
332	return NULL;
333}
334
335static struct mad_rmpp_recv *
336acquire_rmpp_recv(struct ib_mad_agent_private *agent,
337		  struct ib_mad_recv_wc *mad_recv_wc)
338{
339	struct mad_rmpp_recv *rmpp_recv;
340	unsigned long flags;
341
342	spin_lock_irqsave(&agent->lock, flags);
343	rmpp_recv = find_rmpp_recv(agent, mad_recv_wc);
344	if (rmpp_recv)
345		atomic_inc(&rmpp_recv->refcount);
346	spin_unlock_irqrestore(&agent->lock, flags);
347	return rmpp_recv;
348}
349
350static struct mad_rmpp_recv *
351insert_rmpp_recv(struct ib_mad_agent_private *agent,
352		 struct mad_rmpp_recv *rmpp_recv)
353{
354	struct mad_rmpp_recv *cur_rmpp_recv;
355
356	cur_rmpp_recv = find_rmpp_recv(agent, rmpp_recv->rmpp_wc);
357	if (!cur_rmpp_recv)
358		list_add_tail(&rmpp_recv->list, &agent->rmpp_list);
359
360	return cur_rmpp_recv;
361}
362
363static inline int get_last_flag(struct ib_mad_recv_buf *seg)
364{
365	struct ib_rmpp_mad *rmpp_mad;
366
367	rmpp_mad = (struct ib_rmpp_mad *) seg->mad;
368	return ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) & IB_MGMT_RMPP_FLAG_LAST;
369}
370
371static inline int get_seg_num(struct ib_mad_recv_buf *seg)
372{
373	struct ib_rmpp_mad *rmpp_mad;
374
375	rmpp_mad = (struct ib_rmpp_mad *) seg->mad;
376	return be32_to_cpu(rmpp_mad->rmpp_hdr.seg_num);
377}
378
379static inline struct ib_mad_recv_buf * get_next_seg(struct list_head *rmpp_list,
380						    struct ib_mad_recv_buf *seg)
381{
382	if (seg->list.next == rmpp_list)
383		return NULL;
384
385	return container_of(seg->list.next, struct ib_mad_recv_buf, list);
386}
387
388static inline int window_size(struct ib_mad_agent_private *agent)
389{
390	return max(agent->qp_info->recv_queue.max_active >> 3, 1);
391}
392
393static struct ib_mad_recv_buf * find_seg_location(struct list_head *rmpp_list,
394						  int seg_num)
395{
396	struct ib_mad_recv_buf *seg_buf;
397	int cur_seg_num;
398
399	list_for_each_entry_reverse(seg_buf, rmpp_list, list) {
400		cur_seg_num = get_seg_num(seg_buf);
401		if (seg_num > cur_seg_num)
402			return seg_buf;
403		if (seg_num == cur_seg_num)
404			break;
405	}
406	return NULL;
407}
408
409static void update_seg_num(struct mad_rmpp_recv *rmpp_recv,
410			   struct ib_mad_recv_buf *new_buf)
411{
412	struct list_head *rmpp_list = &rmpp_recv->rmpp_wc->rmpp_list;
413
414	while (new_buf && (get_seg_num(new_buf) == rmpp_recv->seg_num + 1)) {
415		rmpp_recv->cur_seg_buf = new_buf;
416		rmpp_recv->seg_num++;
417		new_buf = get_next_seg(rmpp_list, new_buf);
418	}
419}
420
421static inline int get_mad_len(struct mad_rmpp_recv *rmpp_recv)
422{
423	struct ib_rmpp_mad *rmpp_mad;
424	int hdr_size, data_size, pad;
425
426	rmpp_mad = (struct ib_rmpp_mad *)rmpp_recv->cur_seg_buf->mad;
427
428	hdr_size = ib_get_mad_data_offset(rmpp_mad->mad_hdr.mgmt_class);
429	data_size = sizeof(struct ib_rmpp_mad) - hdr_size;
430	pad = IB_MGMT_RMPP_DATA - be32_to_cpu(rmpp_mad->rmpp_hdr.paylen_newwin);
431	if (pad > IB_MGMT_RMPP_DATA || pad < 0)
432		pad = 0;
433
434	return hdr_size + rmpp_recv->seg_num * data_size - pad;
435}
436
437static struct ib_mad_recv_wc * complete_rmpp(struct mad_rmpp_recv *rmpp_recv)
438{
439	struct ib_mad_recv_wc *rmpp_wc;
440
441	ack_recv(rmpp_recv, rmpp_recv->rmpp_wc);
442	if (rmpp_recv->seg_num > 1)
443		cancel_delayed_work(&rmpp_recv->timeout_work);
444
445	rmpp_wc = rmpp_recv->rmpp_wc;
446	rmpp_wc->mad_len = get_mad_len(rmpp_recv);
447	/* 10 seconds until we can find the packet lifetime */
448	queue_delayed_work(rmpp_recv->agent->qp_info->port_priv->wq,
449			   &rmpp_recv->cleanup_work, msecs_to_jiffies(10000));
450	return rmpp_wc;
451}
452
453static struct ib_mad_recv_wc *
454continue_rmpp(struct ib_mad_agent_private *agent,
455	      struct ib_mad_recv_wc *mad_recv_wc)
456{
457	struct mad_rmpp_recv *rmpp_recv;
458	struct ib_mad_recv_buf *prev_buf;
459	struct ib_mad_recv_wc *done_wc;
460	int seg_num;
461	unsigned long flags;
462
463	rmpp_recv = acquire_rmpp_recv(agent, mad_recv_wc);
464	if (!rmpp_recv)
465		goto drop1;
466
467	seg_num = get_seg_num(&mad_recv_wc->recv_buf);
468
469	spin_lock_irqsave(&rmpp_recv->lock, flags);
470	if ((rmpp_recv->state == RMPP_STATE_TIMEOUT) ||
471	    (seg_num > rmpp_recv->newwin))
472		goto drop3;
473
474	if ((seg_num <= rmpp_recv->last_ack) ||
475	    (rmpp_recv->state == RMPP_STATE_COMPLETE)) {
476		spin_unlock_irqrestore(&rmpp_recv->lock, flags);
477		ack_recv(rmpp_recv, mad_recv_wc);
478		goto drop2;
479	}
480
481	prev_buf = find_seg_location(&rmpp_recv->rmpp_wc->rmpp_list, seg_num);
482	if (!prev_buf)
483		goto drop3;
484
485	done_wc = NULL;
486	list_add(&mad_recv_wc->recv_buf.list, &prev_buf->list);
487	if (rmpp_recv->cur_seg_buf == prev_buf) {
488		update_seg_num(rmpp_recv, &mad_recv_wc->recv_buf);
489		if (get_last_flag(rmpp_recv->cur_seg_buf)) {
490			rmpp_recv->state = RMPP_STATE_COMPLETE;
491			spin_unlock_irqrestore(&rmpp_recv->lock, flags);
492			done_wc = complete_rmpp(rmpp_recv);
493			goto out;
494		} else if (rmpp_recv->seg_num == rmpp_recv->newwin) {
495			rmpp_recv->newwin += window_size(agent);
496			spin_unlock_irqrestore(&rmpp_recv->lock, flags);
497			ack_recv(rmpp_recv, mad_recv_wc);
498			goto out;
499		}
500	}
501	spin_unlock_irqrestore(&rmpp_recv->lock, flags);
502out:
503	deref_rmpp_recv(rmpp_recv);
504	return done_wc;
505
506drop3:	spin_unlock_irqrestore(&rmpp_recv->lock, flags);
507drop2:	deref_rmpp_recv(rmpp_recv);
508drop1:	ib_free_recv_mad(mad_recv_wc);
509	return NULL;
510}
511
512static struct ib_mad_recv_wc *
513start_rmpp(struct ib_mad_agent_private *agent,
514	   struct ib_mad_recv_wc *mad_recv_wc)
515{
516	struct mad_rmpp_recv *rmpp_recv;
517	unsigned long flags;
518
519	rmpp_recv = create_rmpp_recv(agent, mad_recv_wc);
520	if (!rmpp_recv) {
521		ib_free_recv_mad(mad_recv_wc);
522		return NULL;
523	}
524
525	spin_lock_irqsave(&agent->lock, flags);
526	if (insert_rmpp_recv(agent, rmpp_recv)) {
527		spin_unlock_irqrestore(&agent->lock, flags);
528		/* duplicate first MAD */
529		destroy_rmpp_recv(rmpp_recv);
530		return continue_rmpp(agent, mad_recv_wc);
531	}
532	atomic_inc(&rmpp_recv->refcount);
533
534	if (get_last_flag(&mad_recv_wc->recv_buf)) {
535		rmpp_recv->state = RMPP_STATE_COMPLETE;
536		spin_unlock_irqrestore(&agent->lock, flags);
537		complete_rmpp(rmpp_recv);
538	} else {
539		spin_unlock_irqrestore(&agent->lock, flags);
540		/* 40 seconds until we can find the packet lifetimes */
541		queue_delayed_work(agent->qp_info->port_priv->wq,
542				   &rmpp_recv->timeout_work,
543				   msecs_to_jiffies(40000));
544		rmpp_recv->newwin += window_size(agent);
545		ack_recv(rmpp_recv, mad_recv_wc);
546		mad_recv_wc = NULL;
547	}
548	deref_rmpp_recv(rmpp_recv);
549	return mad_recv_wc;
550}
551
552static int send_next_seg(struct ib_mad_send_wr_private *mad_send_wr)
553{
554	struct ib_rmpp_mad *rmpp_mad;
555	int timeout;
556	u32 paylen = 0;
557
558	rmpp_mad = mad_send_wr->send_buf.mad;
559	ib_set_rmpp_flags(&rmpp_mad->rmpp_hdr, IB_MGMT_RMPP_FLAG_ACTIVE);
560	rmpp_mad->rmpp_hdr.seg_num = cpu_to_be32(++mad_send_wr->seg_num);
561
562	if (mad_send_wr->seg_num == 1) {
563		rmpp_mad->rmpp_hdr.rmpp_rtime_flags |= IB_MGMT_RMPP_FLAG_FIRST;
564		paylen = mad_send_wr->send_buf.seg_count * IB_MGMT_RMPP_DATA -
565			 mad_send_wr->pad;
566	}
567
568	if (mad_send_wr->seg_num == mad_send_wr->send_buf.seg_count) {
569		rmpp_mad->rmpp_hdr.rmpp_rtime_flags |= IB_MGMT_RMPP_FLAG_LAST;
570		paylen = IB_MGMT_RMPP_DATA - mad_send_wr->pad;
571	}
572	rmpp_mad->rmpp_hdr.paylen_newwin = cpu_to_be32(paylen);
573
574	/* 2 seconds for an ACK until we can find the packet lifetime */
575	timeout = mad_send_wr->send_buf.timeout_ms;
576	if (!timeout || timeout > 2000)
577		mad_send_wr->timeout = msecs_to_jiffies(2000);
578
579	return ib_send_mad(mad_send_wr);
580}
581
582static void abort_send(struct ib_mad_agent_private *agent,
583		       struct ib_mad_recv_wc *mad_recv_wc, u8 rmpp_status)
584{
585	struct ib_mad_send_wr_private *mad_send_wr;
586	struct ib_mad_send_wc wc;
587	unsigned long flags;
588
589	spin_lock_irqsave(&agent->lock, flags);
590	mad_send_wr = ib_find_send_mad(agent, mad_recv_wc);
591	if (!mad_send_wr)
592		goto out;	/* Unmatched send */
593
594	if ((mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) ||
595	    (!mad_send_wr->timeout) || (mad_send_wr->status != IB_WC_SUCCESS))
596		goto out;	/* Send is already done */
597
598	ib_mark_mad_done(mad_send_wr);
599	spin_unlock_irqrestore(&agent->lock, flags);
600
601	wc.status = IB_WC_REM_ABORT_ERR;
602	wc.vendor_err = rmpp_status;
603	wc.send_buf = &mad_send_wr->send_buf;
604	ib_mad_complete_send_wr(mad_send_wr, &wc);
605	return;
606out:
607	spin_unlock_irqrestore(&agent->lock, flags);
608}
609
610static inline void adjust_last_ack(struct ib_mad_send_wr_private *wr,
611				   int seg_num)
612{
613	struct list_head *list;
614
615	wr->last_ack = seg_num;
616	list = &wr->last_ack_seg->list;
617	list_for_each_entry(wr->last_ack_seg, list, list)
618		if (wr->last_ack_seg->num == seg_num)
619			break;
620}
621
622static void process_ds_ack(struct ib_mad_agent_private *agent,
623			   struct ib_mad_recv_wc *mad_recv_wc, int newwin)
624{
625	struct mad_rmpp_recv *rmpp_recv;
626
627	rmpp_recv = find_rmpp_recv(agent, mad_recv_wc);
628	if (rmpp_recv && rmpp_recv->state == RMPP_STATE_COMPLETE)
629		rmpp_recv->repwin = newwin;
630}
631
632static void process_rmpp_ack(struct ib_mad_agent_private *agent,
633			     struct ib_mad_recv_wc *mad_recv_wc)
634{
635	struct ib_mad_send_wr_private *mad_send_wr;
636	struct ib_rmpp_mad *rmpp_mad;
637	unsigned long flags;
638	int seg_num, newwin, ret;
639
640	rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
641	if (rmpp_mad->rmpp_hdr.rmpp_status) {
642		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
643		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
644		return;
645	}
646
647	seg_num = be32_to_cpu(rmpp_mad->rmpp_hdr.seg_num);
648	newwin = be32_to_cpu(rmpp_mad->rmpp_hdr.paylen_newwin);
649	if (newwin < seg_num) {
650		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_W2S);
651		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_W2S);
652		return;
653	}
654
655	spin_lock_irqsave(&agent->lock, flags);
656	mad_send_wr = ib_find_send_mad(agent, mad_recv_wc);
657	if (!mad_send_wr) {
658		if (!seg_num)
659			process_ds_ack(agent, mad_recv_wc, newwin);
660		goto out;	/* Unmatched or DS RMPP ACK */
661	}
662
663	if ((mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) &&
664	    (mad_send_wr->timeout)) {
665		spin_unlock_irqrestore(&agent->lock, flags);
666		ack_ds_ack(agent, mad_recv_wc);
667		return;		/* Repeated ACK for DS RMPP transaction */
668	}
669
670	if ((mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) ||
671	    (!mad_send_wr->timeout) || (mad_send_wr->status != IB_WC_SUCCESS))
672		goto out;	/* Send is already done */
673
674	if (seg_num > mad_send_wr->send_buf.seg_count ||
675	    seg_num > mad_send_wr->newwin) {
676		spin_unlock_irqrestore(&agent->lock, flags);
677		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_S2B);
678		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_S2B);
679		return;
680	}
681
682	if (newwin < mad_send_wr->newwin || seg_num < mad_send_wr->last_ack)
683		goto out;	/* Old ACK */
684
685	if (seg_num > mad_send_wr->last_ack) {
686		adjust_last_ack(mad_send_wr, seg_num);
687		mad_send_wr->retries = mad_send_wr->send_buf.retries;
688	}
689	mad_send_wr->newwin = newwin;
690	if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) {
691		/* If no response is expected, the ACK completes the send */
692		if (!mad_send_wr->send_buf.timeout_ms) {
693			struct ib_mad_send_wc wc;
694
695			ib_mark_mad_done(mad_send_wr);
696			spin_unlock_irqrestore(&agent->lock, flags);
697
698			wc.status = IB_WC_SUCCESS;
699			wc.vendor_err = 0;
700			wc.send_buf = &mad_send_wr->send_buf;
701			ib_mad_complete_send_wr(mad_send_wr, &wc);
702			return;
703		}
704		if (mad_send_wr->refcount == 1)
705			ib_reset_mad_timeout(mad_send_wr,
706					     mad_send_wr->send_buf.timeout_ms);
707		spin_unlock_irqrestore(&agent->lock, flags);
708		ack_ds_ack(agent, mad_recv_wc);
709		return;
710	} else if (mad_send_wr->refcount == 1 &&
711		   mad_send_wr->seg_num < mad_send_wr->newwin &&
712		   mad_send_wr->seg_num < mad_send_wr->send_buf.seg_count) {
713		/* Send failure will just result in a timeout/retry */
714		ret = send_next_seg(mad_send_wr);
715		if (ret)
716			goto out;
717
718		mad_send_wr->refcount++;
719		list_move_tail(&mad_send_wr->agent_list,
720			      &mad_send_wr->mad_agent_priv->send_list);
721	}
722out:
723	spin_unlock_irqrestore(&agent->lock, flags);
724}
725
726static struct ib_mad_recv_wc *
727process_rmpp_data(struct ib_mad_agent_private *agent,
728		  struct ib_mad_recv_wc *mad_recv_wc)
729{
730	struct ib_rmpp_hdr *rmpp_hdr;
731	u8 rmpp_status;
732
733	rmpp_hdr = &((struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad)->rmpp_hdr;
734
735	if (rmpp_hdr->rmpp_status) {
736		rmpp_status = IB_MGMT_RMPP_STATUS_BAD_STATUS;
737		goto bad;
738	}
739
740	if (rmpp_hdr->seg_num == __constant_htonl(1)) {
741		if (!(ib_get_rmpp_flags(rmpp_hdr) & IB_MGMT_RMPP_FLAG_FIRST)) {
742			rmpp_status = IB_MGMT_RMPP_STATUS_BAD_SEG;
743			goto bad;
744		}
745		return start_rmpp(agent, mad_recv_wc);
746	} else {
747		if (ib_get_rmpp_flags(rmpp_hdr) & IB_MGMT_RMPP_FLAG_FIRST) {
748			rmpp_status = IB_MGMT_RMPP_STATUS_BAD_SEG;
749			goto bad;
750		}
751		return continue_rmpp(agent, mad_recv_wc);
752	}
753bad:
754	nack_recv(agent, mad_recv_wc, rmpp_status);
755	ib_free_recv_mad(mad_recv_wc);
756	return NULL;
757}
758
759static void process_rmpp_stop(struct ib_mad_agent_private *agent,
760			      struct ib_mad_recv_wc *mad_recv_wc)
761{
762	struct ib_rmpp_mad *rmpp_mad;
763
764	rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
765
766	if (rmpp_mad->rmpp_hdr.rmpp_status != IB_MGMT_RMPP_STATUS_RESX) {
767		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
768		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
769	} else
770		abort_send(agent, mad_recv_wc, rmpp_mad->rmpp_hdr.rmpp_status);
771}
772
773static void process_rmpp_abort(struct ib_mad_agent_private *agent,
774			       struct ib_mad_recv_wc *mad_recv_wc)
775{
776	struct ib_rmpp_mad *rmpp_mad;
777
778	rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
779
780	if (rmpp_mad->rmpp_hdr.rmpp_status < IB_MGMT_RMPP_STATUS_ABORT_MIN ||
781	    rmpp_mad->rmpp_hdr.rmpp_status > IB_MGMT_RMPP_STATUS_ABORT_MAX) {
782		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
783		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BAD_STATUS);
784	} else
785		abort_send(agent, mad_recv_wc, rmpp_mad->rmpp_hdr.rmpp_status);
786}
787
788struct ib_mad_recv_wc *
789ib_process_rmpp_recv_wc(struct ib_mad_agent_private *agent,
790			struct ib_mad_recv_wc *mad_recv_wc)
791{
792	struct ib_rmpp_mad *rmpp_mad;
793
794	rmpp_mad = (struct ib_rmpp_mad *)mad_recv_wc->recv_buf.mad;
795	if (!(rmpp_mad->rmpp_hdr.rmpp_rtime_flags & IB_MGMT_RMPP_FLAG_ACTIVE))
796		return mad_recv_wc;
797
798	if (rmpp_mad->rmpp_hdr.rmpp_version != IB_MGMT_RMPP_VERSION) {
799		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_UNV);
800		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_UNV);
801		goto out;
802	}
803
804	switch (rmpp_mad->rmpp_hdr.rmpp_type) {
805	case IB_MGMT_RMPP_TYPE_DATA:
806		return process_rmpp_data(agent, mad_recv_wc);
807	case IB_MGMT_RMPP_TYPE_ACK:
808		process_rmpp_ack(agent, mad_recv_wc);
809		break;
810	case IB_MGMT_RMPP_TYPE_STOP:
811		process_rmpp_stop(agent, mad_recv_wc);
812		break;
813	case IB_MGMT_RMPP_TYPE_ABORT:
814		process_rmpp_abort(agent, mad_recv_wc);
815		break;
816	default:
817		abort_send(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BADT);
818		nack_recv(agent, mad_recv_wc, IB_MGMT_RMPP_STATUS_BADT);
819		break;
820	}
821out:
822	ib_free_recv_mad(mad_recv_wc);
823	return NULL;
824}
825
826static int init_newwin(struct ib_mad_send_wr_private *mad_send_wr)
827{
828	struct ib_mad_agent_private *agent = mad_send_wr->mad_agent_priv;
829	struct ib_mad_hdr *mad_hdr = mad_send_wr->send_buf.mad;
830	struct mad_rmpp_recv *rmpp_recv;
831	struct ib_ah_attr ah_attr;
832	unsigned long flags;
833	int newwin = 1;
834
835	if (!(mad_hdr->method & IB_MGMT_METHOD_RESP))
836		goto out;
837
838	spin_lock_irqsave(&agent->lock, flags);
839	list_for_each_entry(rmpp_recv, &agent->rmpp_list, list) {
840		if (rmpp_recv->tid != mad_hdr->tid ||
841		    rmpp_recv->mgmt_class != mad_hdr->mgmt_class ||
842		    rmpp_recv->class_version != mad_hdr->class_version ||
843		    (rmpp_recv->method & IB_MGMT_METHOD_RESP))
844			continue;
845
846		if (ib_query_ah(mad_send_wr->send_buf.ah, &ah_attr))
847			continue;
848
849		if (rmpp_recv->slid == ah_attr.dlid) {
850			newwin = rmpp_recv->repwin;
851			break;
852		}
853	}
854	spin_unlock_irqrestore(&agent->lock, flags);
855out:
856	return newwin;
857}
858
859int ib_send_rmpp_mad(struct ib_mad_send_wr_private *mad_send_wr)
860{
861	struct ib_rmpp_mad *rmpp_mad;
862	int ret;
863
864	rmpp_mad = mad_send_wr->send_buf.mad;
865	if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
866	      IB_MGMT_RMPP_FLAG_ACTIVE))
867		return IB_RMPP_RESULT_UNHANDLED;
868
869	if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_DATA) {
870		mad_send_wr->seg_num = 1;
871		return IB_RMPP_RESULT_INTERNAL;
872	}
873
874	mad_send_wr->newwin = init_newwin(mad_send_wr);
875
876	/* We need to wait for the final ACK even if there isn't a response */
877	mad_send_wr->refcount += (mad_send_wr->timeout == 0);
878	ret = send_next_seg(mad_send_wr);
879	if (!ret)
880		return IB_RMPP_RESULT_CONSUMED;
881	return ret;
882}
883
884int ib_process_rmpp_send_wc(struct ib_mad_send_wr_private *mad_send_wr,
885			    struct ib_mad_send_wc *mad_send_wc)
886{
887	struct ib_rmpp_mad *rmpp_mad;
888	int ret;
889
890	rmpp_mad = mad_send_wr->send_buf.mad;
891	if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
892	      IB_MGMT_RMPP_FLAG_ACTIVE))
893		return IB_RMPP_RESULT_UNHANDLED; /* RMPP not active */
894
895	if (rmpp_mad->rmpp_hdr.rmpp_type != IB_MGMT_RMPP_TYPE_DATA)
896		return IB_RMPP_RESULT_INTERNAL;	 /* ACK, STOP, or ABORT */
897
898	if (mad_send_wc->status != IB_WC_SUCCESS ||
899	    mad_send_wr->status != IB_WC_SUCCESS)
900		return IB_RMPP_RESULT_PROCESSED; /* Canceled or send error */
901
902	if (!mad_send_wr->timeout)
903		return IB_RMPP_RESULT_PROCESSED; /* Response received */
904
905	if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count) {
906		mad_send_wr->timeout =
907			msecs_to_jiffies(mad_send_wr->send_buf.timeout_ms);
908		return IB_RMPP_RESULT_PROCESSED; /* Send done */
909	}
910
911	if (mad_send_wr->seg_num == mad_send_wr->newwin ||
912	    mad_send_wr->seg_num == mad_send_wr->send_buf.seg_count)
913		return IB_RMPP_RESULT_PROCESSED; /* Wait for ACK */
914
915	ret = send_next_seg(mad_send_wr);
916	if (ret) {
917		mad_send_wc->status = IB_WC_GENERAL_ERR;
918		return IB_RMPP_RESULT_PROCESSED;
919	}
920	return IB_RMPP_RESULT_CONSUMED;
921}
922
923int ib_retry_rmpp(struct ib_mad_send_wr_private *mad_send_wr)
924{
925	struct ib_rmpp_mad *rmpp_mad;
926	int ret;
927
928	rmpp_mad = mad_send_wr->send_buf.mad;
929	if (!(ib_get_rmpp_flags(&rmpp_mad->rmpp_hdr) &
930	      IB_MGMT_RMPP_FLAG_ACTIVE))
931		return IB_RMPP_RESULT_UNHANDLED; /* RMPP not active */
932
933	if (mad_send_wr->last_ack == mad_send_wr->send_buf.seg_count)
934		return IB_RMPP_RESULT_PROCESSED;
935
936	mad_send_wr->seg_num = mad_send_wr->last_ack;
937	mad_send_wr->cur_seg = mad_send_wr->last_ack_seg;
938
939	ret = send_next_seg(mad_send_wr);
940	if (ret)
941		return IB_RMPP_RESULT_PROCESSED;
942
943	return IB_RMPP_RESULT_CONSUMED;
944}
945