linux/drivers/scsi/ncr53c8xx.c
<<
>>
Prefs
   1/******************************************************************************
   2**  Device driver for the PCI-SCSI NCR538XX controller family.
   3**
   4**  Copyright (C) 1994  Wolfgang Stanglmeier
   5**
   6**  This program is free software; you can redistribute it and/or modify
   7**  it under the terms of the GNU General Public License as published by
   8**  the Free Software Foundation; either version 2 of the License, or
   9**  (at your option) any later version.
  10**
  11**  This program is distributed in the hope that it will be useful,
  12**  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13**  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14**  GNU General Public License for more details.
  15**
  16**  You should have received a copy of the GNU General Public License
  17**  along with this program; if not, write to the Free Software
  18**  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  19**
  20**-----------------------------------------------------------------------------
  21**
  22**  This driver has been ported to Linux from the FreeBSD NCR53C8XX driver
  23**  and is currently maintained by
  24**
  25**          Gerard Roudier              <groudier@free.fr>
  26**
  27**  Being given that this driver originates from the FreeBSD version, and
  28**  in order to keep synergy on both, any suggested enhancements and corrections
  29**  received on Linux are automatically a potential candidate for the FreeBSD 
  30**  version.
  31**
  32**  The original driver has been written for 386bsd and FreeBSD by
  33**          Wolfgang Stanglmeier        <wolf@cologne.de>
  34**          Stefan Esser                <se@mi.Uni-Koeln.de>
  35**
  36**  And has been ported to NetBSD by
  37**          Charles M. Hannum           <mycroft@gnu.ai.mit.edu>
  38**
  39**-----------------------------------------------------------------------------
  40**
  41**                     Brief history
  42**
  43**  December 10 1995 by Gerard Roudier:
  44**     Initial port to Linux.
  45**
  46**  June 23 1996 by Gerard Roudier:
  47**     Support for 64 bits architectures (Alpha).
  48**
  49**  November 30 1996 by Gerard Roudier:
  50**     Support for Fast-20 scsi.
  51**     Support for large DMA fifo and 128 dwords bursting.
  52**
  53**  February 27 1997 by Gerard Roudier:
  54**     Support for Fast-40 scsi.
  55**     Support for on-Board RAM.
  56**
  57**  May 3 1997 by Gerard Roudier:
  58**     Full support for scsi scripts instructions pre-fetching.
  59**
  60**  May 19 1997 by Richard Waltham <dormouse@farsrobt.demon.co.uk>:
  61**     Support for NvRAM detection and reading.
  62**
  63**  August 18 1997 by Cort <cort@cs.nmt.edu>:
  64**     Support for Power/PC (Big Endian).
  65**
  66**  June 20 1998 by Gerard Roudier
  67**     Support for up to 64 tags per lun.
  68**     O(1) everywhere (C and SCRIPTS) for normal cases.
  69**     Low PCI traffic for command handling when on-chip RAM is present.
  70**     Aggressive SCSI SCRIPTS optimizations.
  71**
  72**  2005 by Matthew Wilcox and James Bottomley
  73**     PCI-ectomy.  This driver now supports only the 720 chip (see the
  74**     NCR_Q720 and zalon drivers for the bus probe logic).
  75**
  76*******************************************************************************
  77*/
  78
  79/*
  80**      Supported SCSI-II features:
  81**          Synchronous negotiation
  82**          Wide negotiation        (depends on the NCR Chip)
  83**          Enable disconnection
  84**          Tagged command queuing
  85**          Parity checking
  86**          Etc...
  87**
  88**      Supported NCR/SYMBIOS chips:
  89**              53C720          (Wide,   Fast SCSI-2, intfly problems)
  90*/
  91
  92/* Name and version of the driver */
  93#define SCSI_NCR_DRIVER_NAME    "ncr53c8xx-3.4.3g"
  94
  95#define SCSI_NCR_DEBUG_FLAGS    (0)
  96
  97#include <linux/blkdev.h>
  98#include <linux/delay.h>
  99#include <linux/dma-mapping.h>
 100#include <linux/errno.h>
 101#include <linux/gfp.h>
 102#include <linux/init.h>
 103#include <linux/interrupt.h>
 104#include <linux/ioport.h>
 105#include <linux/mm.h>
 106#include <linux/module.h>
 107#include <linux/sched.h>
 108#include <linux/signal.h>
 109#include <linux/spinlock.h>
 110#include <linux/stat.h>
 111#include <linux/string.h>
 112#include <linux/time.h>
 113#include <linux/timer.h>
 114#include <linux/types.h>
 115
 116#include <asm/dma.h>
 117#include <asm/io.h>
 118#include <asm/system.h>
 119
 120#include <scsi/scsi.h>
 121#include <scsi/scsi_cmnd.h>
 122#include <scsi/scsi_dbg.h>
 123#include <scsi/scsi_device.h>
 124#include <scsi/scsi_tcq.h>
 125#include <scsi/scsi_transport.h>
 126#include <scsi/scsi_transport_spi.h>
 127
 128#include "ncr53c8xx.h"
 129
 130#define NAME53C8XX              "ncr53c8xx"
 131
 132/*==========================================================
 133**
 134**      Debugging tags
 135**
 136**==========================================================
 137*/
 138
 139#define DEBUG_ALLOC    (0x0001)
 140#define DEBUG_PHASE    (0x0002)
 141#define DEBUG_QUEUE    (0x0008)
 142#define DEBUG_RESULT   (0x0010)
 143#define DEBUG_POINTER  (0x0020)
 144#define DEBUG_SCRIPT   (0x0040)
 145#define DEBUG_TINY     (0x0080)
 146#define DEBUG_TIMING   (0x0100)
 147#define DEBUG_NEGO     (0x0200)
 148#define DEBUG_TAGS     (0x0400)
 149#define DEBUG_SCATTER  (0x0800)
 150#define DEBUG_IC        (0x1000)
 151
 152/*
 153**    Enable/Disable debug messages.
 154**    Can be changed at runtime too.
 155*/
 156
 157#ifdef SCSI_NCR_DEBUG_INFO_SUPPORT
 158static int ncr_debug = SCSI_NCR_DEBUG_FLAGS;
 159        #define DEBUG_FLAGS ncr_debug
 160#else
 161        #define DEBUG_FLAGS     SCSI_NCR_DEBUG_FLAGS
 162#endif
 163
 164static inline struct list_head *ncr_list_pop(struct list_head *head)
 165{
 166        if (!list_empty(head)) {
 167                struct list_head *elem = head->next;
 168
 169                list_del(elem);
 170                return elem;
 171        }
 172
 173        return NULL;
 174}
 175
 176/*==========================================================
 177**
 178**      Simple power of two buddy-like allocator.
 179**
 180**      This simple code is not intended to be fast, but to 
 181**      provide power of 2 aligned memory allocations.
 182**      Since the SCRIPTS processor only supplies 8 bit 
 183**      arithmetic, this allocator allows simple and fast 
 184**      address calculations  from the SCRIPTS code.
 185**      In addition, cache line alignment is guaranteed for 
 186**      power of 2 cache line size.
 187**      Enhanced in linux-2.3.44 to provide a memory pool 
 188**      per pcidev to support dynamic dma mapping. (I would 
 189**      have preferred a real bus abstraction, btw).
 190**
 191**==========================================================
 192*/
 193
 194#define MEMO_SHIFT      4       /* 16 bytes minimum memory chunk */
 195#if PAGE_SIZE >= 8192
 196#define MEMO_PAGE_ORDER 0       /* 1 PAGE  maximum */
 197#else
 198#define MEMO_PAGE_ORDER 1       /* 2 PAGES maximum */
 199#endif
 200#define MEMO_FREE_UNUSED        /* Free unused pages immediately */
 201#define MEMO_WARN       1
 202#define MEMO_GFP_FLAGS  GFP_ATOMIC
 203#define MEMO_CLUSTER_SHIFT      (PAGE_SHIFT+MEMO_PAGE_ORDER)
 204#define MEMO_CLUSTER_SIZE       (1UL << MEMO_CLUSTER_SHIFT)
 205#define MEMO_CLUSTER_MASK       (MEMO_CLUSTER_SIZE-1)
 206
 207typedef u_long m_addr_t;        /* Enough bits to bit-hack addresses */
 208typedef struct device *m_bush_t;        /* Something that addresses DMAable */
 209
 210typedef struct m_link {         /* Link between free memory chunks */
 211        struct m_link *next;
 212} m_link_s;
 213
 214typedef struct m_vtob {         /* Virtual to Bus address translation */
 215        struct m_vtob *next;
 216        m_addr_t vaddr;
 217        m_addr_t baddr;
 218} m_vtob_s;
 219#define VTOB_HASH_SHIFT         5
 220#define VTOB_HASH_SIZE          (1UL << VTOB_HASH_SHIFT)
 221#define VTOB_HASH_MASK          (VTOB_HASH_SIZE-1)
 222#define VTOB_HASH_CODE(m)       \
 223        ((((m_addr_t) (m)) >> MEMO_CLUSTER_SHIFT) & VTOB_HASH_MASK)
 224
 225typedef struct m_pool {         /* Memory pool of a given kind */
 226        m_bush_t bush;
 227        m_addr_t (*getp)(struct m_pool *);
 228        void (*freep)(struct m_pool *, m_addr_t);
 229        int nump;
 230        m_vtob_s *(vtob[VTOB_HASH_SIZE]);
 231        struct m_pool *next;
 232        struct m_link h[PAGE_SHIFT-MEMO_SHIFT+MEMO_PAGE_ORDER+1];
 233} m_pool_s;
 234
 235static void *___m_alloc(m_pool_s *mp, int size)
 236{
 237        int i = 0;
 238        int s = (1 << MEMO_SHIFT);
 239        int j;
 240        m_addr_t a;
 241        m_link_s *h = mp->h;
 242
 243        if (size > (PAGE_SIZE << MEMO_PAGE_ORDER))
 244                return NULL;
 245
 246        while (size > s) {
 247                s <<= 1;
 248                ++i;
 249        }
 250
 251        j = i;
 252        while (!h[j].next) {
 253                if (s == (PAGE_SIZE << MEMO_PAGE_ORDER)) {
 254                        h[j].next = (m_link_s *)mp->getp(mp);
 255                        if (h[j].next)
 256                                h[j].next->next = NULL;
 257                        break;
 258                }
 259                ++j;
 260                s <<= 1;
 261        }
 262        a = (m_addr_t) h[j].next;
 263        if (a) {
 264                h[j].next = h[j].next->next;
 265                while (j > i) {
 266                        j -= 1;
 267                        s >>= 1;
 268                        h[j].next = (m_link_s *) (a+s);
 269                        h[j].next->next = NULL;
 270                }
 271        }
 272#ifdef DEBUG
 273        printk("___m_alloc(%d) = %p\n", size, (void *) a);
 274#endif
 275        return (void *) a;
 276}
 277
 278static void ___m_free(m_pool_s *mp, void *ptr, int size)
 279{
 280        int i = 0;
 281        int s = (1 << MEMO_SHIFT);
 282        m_link_s *q;
 283        m_addr_t a, b;
 284        m_link_s *h = mp->h;
 285
 286#ifdef DEBUG
 287        printk("___m_free(%p, %d)\n", ptr, size);
 288#endif
 289
 290        if (size > (PAGE_SIZE << MEMO_PAGE_ORDER))
 291                return;
 292
 293        while (size > s) {
 294                s <<= 1;
 295                ++i;
 296        }
 297
 298        a = (m_addr_t) ptr;
 299
 300        while (1) {
 301#ifdef MEMO_FREE_UNUSED
 302                if (s == (PAGE_SIZE << MEMO_PAGE_ORDER)) {
 303                        mp->freep(mp, a);
 304                        break;
 305                }
 306#endif
 307                b = a ^ s;
 308                q = &h[i];
 309                while (q->next && q->next != (m_link_s *) b) {
 310                        q = q->next;
 311                }
 312                if (!q->next) {
 313                        ((m_link_s *) a)->next = h[i].next;
 314                        h[i].next = (m_link_s *) a;
 315                        break;
 316                }
 317                q->next = q->next->next;
 318                a = a & b;
 319                s <<= 1;
 320                ++i;
 321        }
 322}
 323
 324static DEFINE_SPINLOCK(ncr53c8xx_lock);
 325
 326static void *__m_calloc2(m_pool_s *mp, int size, char *name, int uflags)
 327{
 328        void *p;
 329
 330        p = ___m_alloc(mp, size);
 331
 332        if (DEBUG_FLAGS & DEBUG_ALLOC)
 333                printk ("new %-10s[%4d] @%p.\n", name, size, p);
 334
 335        if (p)
 336                memset(p, 0, size);
 337        else if (uflags & MEMO_WARN)
 338                printk (NAME53C8XX ": failed to allocate %s[%d]\n", name, size);
 339
 340        return p;
 341}
 342
 343#define __m_calloc(mp, s, n)    __m_calloc2(mp, s, n, MEMO_WARN)
 344
 345static void __m_free(m_pool_s *mp, void *ptr, int size, char *name)
 346{
 347        if (DEBUG_FLAGS & DEBUG_ALLOC)
 348                printk ("freeing %-10s[%4d] @%p.\n", name, size, ptr);
 349
 350        ___m_free(mp, ptr, size);
 351
 352}
 353
 354/*
 355 * With pci bus iommu support, we use a default pool of unmapped memory 
 356 * for memory we donnot need to DMA from/to and one pool per pcidev for 
 357 * memory accessed by the PCI chip. `mp0' is the default not DMAable pool.
 358 */
 359
 360static m_addr_t ___mp0_getp(m_pool_s *mp)
 361{
 362        m_addr_t m = __get_free_pages(MEMO_GFP_FLAGS, MEMO_PAGE_ORDER);
 363        if (m)
 364                ++mp->nump;
 365        return m;
 366}
 367
 368static void ___mp0_freep(m_pool_s *mp, m_addr_t m)
 369{
 370        free_pages(m, MEMO_PAGE_ORDER);
 371        --mp->nump;
 372}
 373
 374static m_pool_s mp0 = {NULL, ___mp0_getp, ___mp0_freep};
 375
 376/*
 377 * DMAable pools.
 378 */
 379
 380/*
 381 * With pci bus iommu support, we maintain one pool per pcidev and a 
 382 * hashed reverse table for virtual to bus physical address translations.
 383 */
 384static m_addr_t ___dma_getp(m_pool_s *mp)
 385{
 386        m_addr_t vp;
 387        m_vtob_s *vbp;
 388
 389        vbp = __m_calloc(&mp0, sizeof(*vbp), "VTOB");
 390        if (vbp) {
 391                dma_addr_t daddr;
 392                vp = (m_addr_t) dma_alloc_coherent(mp->bush,
 393                                                PAGE_SIZE<<MEMO_PAGE_ORDER,
 394                                                &daddr, GFP_ATOMIC);
 395                if (vp) {
 396                        int hc = VTOB_HASH_CODE(vp);
 397                        vbp->vaddr = vp;
 398                        vbp->baddr = daddr;
 399                        vbp->next = mp->vtob[hc];
 400                        mp->vtob[hc] = vbp;
 401                        ++mp->nump;
 402                        return vp;
 403                }
 404        }
 405        if (vbp)
 406                __m_free(&mp0, vbp, sizeof(*vbp), "VTOB");
 407        return 0;
 408}
 409
 410static void ___dma_freep(m_pool_s *mp, m_addr_t m)
 411{
 412        m_vtob_s **vbpp, *vbp;
 413        int hc = VTOB_HASH_CODE(m);
 414
 415        vbpp = &mp->vtob[hc];
 416        while (*vbpp && (*vbpp)->vaddr != m)
 417                vbpp = &(*vbpp)->next;
 418        if (*vbpp) {
 419                vbp = *vbpp;
 420                *vbpp = (*vbpp)->next;
 421                dma_free_coherent(mp->bush, PAGE_SIZE<<MEMO_PAGE_ORDER,
 422                                  (void *)vbp->vaddr, (dma_addr_t)vbp->baddr);
 423                __m_free(&mp0, vbp, sizeof(*vbp), "VTOB");
 424                --mp->nump;
 425        }
 426}
 427
 428static inline m_pool_s *___get_dma_pool(m_bush_t bush)
 429{
 430        m_pool_s *mp;
 431        for (mp = mp0.next; mp && mp->bush != bush; mp = mp->next);
 432        return mp;
 433}
 434
 435static m_pool_s *___cre_dma_pool(m_bush_t bush)
 436{
 437        m_pool_s *mp;
 438        mp = __m_calloc(&mp0, sizeof(*mp), "MPOOL");
 439        if (mp) {
 440                memset(mp, 0, sizeof(*mp));
 441                mp->bush = bush;
 442                mp->getp = ___dma_getp;
 443                mp->freep = ___dma_freep;
 444                mp->next = mp0.next;
 445                mp0.next = mp;
 446        }
 447        return mp;
 448}
 449
 450static void ___del_dma_pool(m_pool_s *p)
 451{
 452        struct m_pool **pp = &mp0.next;
 453
 454        while (*pp && *pp != p)
 455                pp = &(*pp)->next;
 456        if (*pp) {
 457                *pp = (*pp)->next;
 458                __m_free(&mp0, p, sizeof(*p), "MPOOL");
 459        }
 460}
 461
 462static void *__m_calloc_dma(m_bush_t bush, int size, char *name)
 463{
 464        u_long flags;
 465        struct m_pool *mp;
 466        void *m = NULL;
 467
 468        spin_lock_irqsave(&ncr53c8xx_lock, flags);
 469        mp = ___get_dma_pool(bush);
 470        if (!mp)
 471                mp = ___cre_dma_pool(bush);
 472        if (mp)
 473                m = __m_calloc(mp, size, name);
 474        if (mp && !mp->nump)
 475                ___del_dma_pool(mp);
 476        spin_unlock_irqrestore(&ncr53c8xx_lock, flags);
 477
 478        return m;
 479}
 480
 481static void __m_free_dma(m_bush_t bush, void *m, int size, char *name)
 482{
 483        u_long flags;
 484        struct m_pool *mp;
 485
 486        spin_lock_irqsave(&ncr53c8xx_lock, flags);
 487        mp = ___get_dma_pool(bush);
 488        if (mp)
 489                __m_free(mp, m, size, name);
 490        if (mp && !mp->nump)
 491                ___del_dma_pool(mp);
 492        spin_unlock_irqrestore(&ncr53c8xx_lock, flags);
 493}
 494
 495static m_addr_t __vtobus(m_bush_t bush, void *m)
 496{
 497        u_long flags;
 498        m_pool_s *mp;
 499        int hc = VTOB_HASH_CODE(m);
 500        m_vtob_s *vp = NULL;
 501        m_addr_t a = ((m_addr_t) m) & ~MEMO_CLUSTER_MASK;
 502
 503        spin_lock_irqsave(&ncr53c8xx_lock, flags);
 504        mp = ___get_dma_pool(bush);
 505        if (mp) {
 506                vp = mp->vtob[hc];
 507                while (vp && (m_addr_t) vp->vaddr != a)
 508                        vp = vp->next;
 509        }
 510        spin_unlock_irqrestore(&ncr53c8xx_lock, flags);
 511        return vp ? vp->baddr + (((m_addr_t) m) - a) : 0;
 512}
 513
 514#define _m_calloc_dma(np, s, n)         __m_calloc_dma(np->dev, s, n)
 515#define _m_free_dma(np, p, s, n)        __m_free_dma(np->dev, p, s, n)
 516#define m_calloc_dma(s, n)              _m_calloc_dma(np, s, n)
 517#define m_free_dma(p, s, n)             _m_free_dma(np, p, s, n)
 518#define _vtobus(np, p)                  __vtobus(np->dev, p)
 519#define vtobus(p)                       _vtobus(np, p)
 520
 521/*
 522 *  Deal with DMA mapping/unmapping.
 523 */
 524
 525/* To keep track of the dma mapping (sg/single) that has been set */
 526#define __data_mapped   SCp.phase
 527#define __data_mapping  SCp.have_data_in
 528
 529static void __unmap_scsi_data(struct device *dev, struct scsi_cmnd *cmd)
 530{
 531        switch(cmd->__data_mapped) {
 532        case 2:
 533                scsi_dma_unmap(cmd);
 534                break;
 535        }
 536        cmd->__data_mapped = 0;
 537}
 538
 539static int __map_scsi_sg_data(struct device *dev, struct scsi_cmnd *cmd)
 540{
 541        int use_sg;
 542
 543        use_sg = scsi_dma_map(cmd);
 544        if (!use_sg)
 545                return 0;
 546
 547        cmd->__data_mapped = 2;
 548        cmd->__data_mapping = use_sg;
 549
 550        return use_sg;
 551}
 552
 553#define unmap_scsi_data(np, cmd)        __unmap_scsi_data(np->dev, cmd)
 554#define map_scsi_sg_data(np, cmd)       __map_scsi_sg_data(np->dev, cmd)
 555
 556/*==========================================================
 557**
 558**      Driver setup.
 559**
 560**      This structure is initialized from linux config 
 561**      options. It can be overridden at boot-up by the boot 
 562**      command line.
 563**
 564**==========================================================
 565*/
 566static struct ncr_driver_setup
 567        driver_setup                    = SCSI_NCR_DRIVER_SETUP;
 568
 569#ifndef MODULE
 570#ifdef  SCSI_NCR_BOOT_COMMAND_LINE_SUPPORT
 571static struct ncr_driver_setup
 572        driver_safe_setup __initdata    = SCSI_NCR_DRIVER_SAFE_SETUP;
 573#endif
 574#endif /* !MODULE */
 575
 576#define initverbose (driver_setup.verbose)
 577#define bootverbose (np->verbose)
 578
 579
 580/*===================================================================
 581**
 582**      Driver setup from the boot command line
 583**
 584**===================================================================
 585*/
 586
 587#ifdef MODULE
 588#define ARG_SEP ' '
 589#else
 590#define ARG_SEP ','
 591#endif
 592
 593#define OPT_TAGS                1
 594#define OPT_MASTER_PARITY       2
 595#define OPT_SCSI_PARITY         3
 596#define OPT_DISCONNECTION       4
 597#define OPT_SPECIAL_FEATURES    5
 598#define OPT_UNUSED_1            6
 599#define OPT_FORCE_SYNC_NEGO     7
 600#define OPT_REVERSE_PROBE       8
 601#define OPT_DEFAULT_SYNC        9
 602#define OPT_VERBOSE             10
 603#define OPT_DEBUG               11
 604#define OPT_BURST_MAX           12
 605#define OPT_LED_PIN             13
 606#define OPT_MAX_WIDE            14
 607#define OPT_SETTLE_DELAY        15
 608#define OPT_DIFF_SUPPORT        16
 609#define OPT_IRQM                17
 610#define OPT_PCI_FIX_UP          18
 611#define OPT_BUS_CHECK           19
 612#define OPT_OPTIMIZE            20
 613#define OPT_RECOVERY            21
 614#define OPT_SAFE_SETUP          22
 615#define OPT_USE_NVRAM           23
 616#define OPT_EXCLUDE             24
 617#define OPT_HOST_ID             25
 618
 619#ifdef SCSI_NCR_IARB_SUPPORT
 620#define OPT_IARB                26
 621#endif
 622
 623#ifdef MODULE
 624#define ARG_SEP ' '
 625#else
 626#define ARG_SEP ','
 627#endif
 628
 629#ifndef MODULE
 630static char setup_token[] __initdata = 
 631        "tags:"   "mpar:"
 632        "spar:"   "disc:"
 633        "specf:"  "ultra:"
 634        "fsn:"    "revprob:"
 635        "sync:"   "verb:"
 636        "debug:"  "burst:"
 637        "led:"    "wide:"
 638        "settle:" "diff:"
 639        "irqm:"   "pcifix:"
 640        "buschk:" "optim:"
 641        "recovery:"
 642        "safe:"   "nvram:"
 643        "excl:"   "hostid:"
 644#ifdef SCSI_NCR_IARB_SUPPORT
 645        "iarb:"
 646#endif
 647        ;       /* DONNOT REMOVE THIS ';' */
 648
 649static int __init get_setup_token(char *p)
 650{
 651        char *cur = setup_token;
 652        char *pc;
 653        int i = 0;
 654
 655        while (cur != NULL && (pc = strchr(cur, ':')) != NULL) {
 656                ++pc;
 657                ++i;
 658                if (!strncmp(p, cur, pc - cur))
 659                        return i;
 660                cur = pc;
 661        }
 662        return 0;
 663}
 664
 665static int __init sym53c8xx__setup(char *str)
 666{
 667#ifdef SCSI_NCR_BOOT_COMMAND_LINE_SUPPORT
 668        char *cur = str;
 669        char *pc, *pv;
 670        int i, val, c;
 671        int xi = 0;
 672
 673        while (cur != NULL && (pc = strchr(cur, ':')) != NULL) {
 674                char *pe;
 675
 676                val = 0;
 677                pv = pc;
 678                c = *++pv;
 679
 680                if      (c == 'n')
 681                        val = 0;
 682                else if (c == 'y')
 683                        val = 1;
 684                else
 685                        val = (int) simple_strtoul(pv, &pe, 0);
 686
 687                switch (get_setup_token(cur)) {
 688                case OPT_TAGS:
 689                        driver_setup.default_tags = val;
 690                        if (pe && *pe == '/') {
 691                                i = 0;
 692                                while (*pe && *pe != ARG_SEP && 
 693                                        i < sizeof(driver_setup.tag_ctrl)-1) {
 694                                        driver_setup.tag_ctrl[i++] = *pe++;
 695                                }
 696                                driver_setup.tag_ctrl[i] = '\0';
 697                        }
 698                        break;
 699                case OPT_MASTER_PARITY:
 700                        driver_setup.master_parity = val;
 701                        break;
 702                case OPT_SCSI_PARITY:
 703                        driver_setup.scsi_parity = val;
 704                        break;
 705                case OPT_DISCONNECTION:
 706                        driver_setup.disconnection = val;
 707                        break;
 708                case OPT_SPECIAL_FEATURES:
 709                        driver_setup.special_features = val;
 710                        break;
 711                case OPT_FORCE_SYNC_NEGO:
 712                        driver_setup.force_sync_nego = val;
 713                        break;
 714                case OPT_REVERSE_PROBE:
 715                        driver_setup.reverse_probe = val;
 716                        break;
 717                case OPT_DEFAULT_SYNC:
 718                        driver_setup.default_sync = val;
 719                        break;
 720                case OPT_VERBOSE:
 721                        driver_setup.verbose = val;
 722                        break;
 723                case OPT_DEBUG:
 724                        driver_setup.debug = val;
 725                        break;
 726                case OPT_BURST_MAX:
 727                        driver_setup.burst_max = val;
 728                        break;
 729                case OPT_LED_PIN:
 730                        driver_setup.led_pin = val;
 731                        break;
 732                case OPT_MAX_WIDE:
 733                        driver_setup.max_wide = val? 1:0;
 734                        break;
 735                case OPT_SETTLE_DELAY:
 736                        driver_setup.settle_delay = val;
 737                        break;
 738                case OPT_DIFF_SUPPORT:
 739                        driver_setup.diff_support = val;
 740                        break;
 741                case OPT_IRQM:
 742                        driver_setup.irqm = val;
 743                        break;
 744                case OPT_PCI_FIX_UP:
 745                        driver_setup.pci_fix_up = val;
 746                        break;
 747                case OPT_BUS_CHECK:
 748                        driver_setup.bus_check = val;
 749                        break;
 750                case OPT_OPTIMIZE:
 751                        driver_setup.optimize = val;
 752                        break;
 753                case OPT_RECOVERY:
 754                        driver_setup.recovery = val;
 755                        break;
 756                case OPT_USE_NVRAM:
 757                        driver_setup.use_nvram = val;
 758                        break;
 759                case OPT_SAFE_SETUP:
 760                        memcpy(&driver_setup, &driver_safe_setup,
 761                                sizeof(driver_setup));
 762                        break;
 763                case OPT_EXCLUDE:
 764                        if (xi < SCSI_NCR_MAX_EXCLUDES)
 765                                driver_setup.excludes[xi++] = val;
 766                        break;
 767                case OPT_HOST_ID:
 768                        driver_setup.host_id = val;
 769                        break;
 770#ifdef SCSI_NCR_IARB_SUPPORT
 771                case OPT_IARB:
 772                        driver_setup.iarb = val;
 773                        break;
 774#endif
 775                default:
 776                        printk("sym53c8xx_setup: unexpected boot option '%.*s' ignored\n", (int)(pc-cur+1), cur);
 777                        break;
 778                }
 779
 780                if ((cur = strchr(cur, ARG_SEP)) != NULL)
 781                        ++cur;
 782        }
 783#endif /* SCSI_NCR_BOOT_COMMAND_LINE_SUPPORT */
 784        return 1;
 785}
 786#endif /* !MODULE */
 787
 788/*===================================================================
 789**
 790**      Get device queue depth from boot command line.
 791**
 792**===================================================================
 793*/
 794#define DEF_DEPTH       (driver_setup.default_tags)
 795#define ALL_TARGETS     -2
 796#define NO_TARGET       -1
 797#define ALL_LUNS        -2
 798#define NO_LUN          -1
 799
 800static int device_queue_depth(int unit, int target, int lun)
 801{
 802        int c, h, t, u, v;
 803        char *p = driver_setup.tag_ctrl;
 804        char *ep;
 805
 806        h = -1;
 807        t = NO_TARGET;
 808        u = NO_LUN;
 809        while ((c = *p++) != 0) {
 810                v = simple_strtoul(p, &ep, 0);
 811                switch(c) {
 812                case '/':
 813                        ++h;
 814                        t = ALL_TARGETS;
 815                        u = ALL_LUNS;
 816                        break;
 817                case 't':
 818                        if (t != target)
 819                                t = (target == v) ? v : NO_TARGET;
 820                        u = ALL_LUNS;
 821                        break;
 822                case 'u':
 823                        if (u != lun)
 824                                u = (lun == v) ? v : NO_LUN;
 825                        break;
 826                case 'q':
 827                        if (h == unit &&
 828                                (t == ALL_TARGETS || t == target) &&
 829                                (u == ALL_LUNS    || u == lun))
 830                                return v;
 831                        break;
 832                case '-':
 833                        t = ALL_TARGETS;
 834                        u = ALL_LUNS;
 835                        break;
 836                default:
 837                        break;
 838                }
 839                p = ep;
 840        }
 841        return DEF_DEPTH;
 842}
 843
 844
 845/*==========================================================
 846**
 847**      The CCB done queue uses an array of CCB virtual 
 848**      addresses. Empty entries are flagged using the bogus 
 849**      virtual address 0xffffffff.
 850**
 851**      Since PCI ensures that only aligned DWORDs are accessed 
 852**      atomically, 64 bit little-endian architecture requires 
 853**      to test the high order DWORD of the entry to determine 
 854**      if it is empty or valid.
 855**
 856**      BTW, I will make things differently as soon as I will 
 857**      have a better idea, but this is simple and should work.
 858**
 859**==========================================================
 860*/
 861 
 862#define SCSI_NCR_CCB_DONE_SUPPORT
 863#ifdef  SCSI_NCR_CCB_DONE_SUPPORT
 864
 865#define MAX_DONE 24
 866#define CCB_DONE_EMPTY 0xffffffffUL
 867
 868/* All 32 bit architectures */
 869#if BITS_PER_LONG == 32
 870#define CCB_DONE_VALID(cp)  (((u_long) cp) != CCB_DONE_EMPTY)
 871
 872/* All > 32 bit (64 bit) architectures regardless endian-ness */
 873#else
 874#define CCB_DONE_VALID(cp)  \
 875        ((((u_long) cp) & 0xffffffff00000000ul) &&      \
 876         (((u_long) cp) & 0xfffffffful) != CCB_DONE_EMPTY)
 877#endif
 878
 879#endif /* SCSI_NCR_CCB_DONE_SUPPORT */
 880
 881/*==========================================================
 882**
 883**      Configuration and Debugging
 884**
 885**==========================================================
 886*/
 887
 888/*
 889**    SCSI address of this device.
 890**    The boot routines should have set it.
 891**    If not, use this.
 892*/
 893
 894#ifndef SCSI_NCR_MYADDR
 895#define SCSI_NCR_MYADDR      (7)
 896#endif
 897
 898/*
 899**    The maximum number of tags per logic unit.
 900**    Used only for disk devices that support tags.
 901*/
 902
 903#ifndef SCSI_NCR_MAX_TAGS
 904#define SCSI_NCR_MAX_TAGS    (8)
 905#endif
 906
 907/*
 908**    TAGS are actually limited to 64 tags/lun.
 909**    We need to deal with power of 2, for alignment constraints.
 910*/
 911#if     SCSI_NCR_MAX_TAGS > 64
 912#define MAX_TAGS (64)
 913#else
 914#define MAX_TAGS SCSI_NCR_MAX_TAGS
 915#endif
 916
 917#define NO_TAG  (255)
 918
 919/*
 920**      Choose appropriate type for tag bitmap.
 921*/
 922#if     MAX_TAGS > 32
 923typedef u64 tagmap_t;
 924#else
 925typedef u32 tagmap_t;
 926#endif
 927
 928/*
 929**    Number of targets supported by the driver.
 930**    n permits target numbers 0..n-1.
 931**    Default is 16, meaning targets #0..#15.
 932**    #7 .. is myself.
 933*/
 934
 935#ifdef SCSI_NCR_MAX_TARGET
 936#define MAX_TARGET  (SCSI_NCR_MAX_TARGET)
 937#else
 938#define MAX_TARGET  (16)
 939#endif
 940
 941/*
 942**    Number of logic units supported by the driver.
 943**    n enables logic unit numbers 0..n-1.
 944**    The common SCSI devices require only
 945**    one lun, so take 1 as the default.
 946*/
 947
 948#ifdef SCSI_NCR_MAX_LUN
 949#define MAX_LUN    SCSI_NCR_MAX_LUN
 950#else
 951#define MAX_LUN    (1)
 952#endif
 953
 954/*
 955**    Asynchronous pre-scaler (ns). Shall be 40
 956*/
 957 
 958#ifndef SCSI_NCR_MIN_ASYNC
 959#define SCSI_NCR_MIN_ASYNC (40)
 960#endif
 961
 962/*
 963**    The maximum number of jobs scheduled for starting.
 964**    There should be one slot per target, and one slot
 965**    for each tag of each target in use.
 966**    The calculation below is actually quite silly ...
 967*/
 968
 969#ifdef SCSI_NCR_CAN_QUEUE
 970#define MAX_START   (SCSI_NCR_CAN_QUEUE + 4)
 971#else
 972#define MAX_START   (MAX_TARGET + 7 * MAX_TAGS)
 973#endif
 974
 975/*
 976**   We limit the max number of pending IO to 250.
 977**   since we donnot want to allocate more than 1 
 978**   PAGE for 'scripth'.
 979*/
 980#if     MAX_START > 250
 981#undef  MAX_START
 982#define MAX_START 250
 983#endif
 984
 985/*
 986**    The maximum number of segments a transfer is split into.
 987**    We support up to 127 segments for both read and write.
 988**    The data scripts are broken into 2 sub-scripts.
 989**    80 (MAX_SCATTERL) segments are moved from a sub-script
 990**    in on-chip RAM. This makes data transfers shorter than 
 991**    80k (assuming 1k fs) as fast as possible.
 992*/
 993
 994#define MAX_SCATTER (SCSI_NCR_MAX_SCATTER)
 995
 996#if (MAX_SCATTER > 80)
 997#define MAX_SCATTERL    80
 998#define MAX_SCATTERH    (MAX_SCATTER - MAX_SCATTERL)
 999#else
1000#define MAX_SCATTERL    (MAX_SCATTER-1)
1001#define MAX_SCATTERH    1
1002#endif
1003
1004/*
1005**      other
1006*/
1007
1008#define NCR_SNOOP_TIMEOUT (1000000)
1009
1010/*
1011**      Other definitions
1012*/
1013
1014#define ScsiResult(host_code, scsi_code) (((host_code) << 16) + ((scsi_code) & 0x7f))
1015
1016#define initverbose (driver_setup.verbose)
1017#define bootverbose (np->verbose)
1018
1019/*==========================================================
1020**
1021**      Command control block states.
1022**
1023**==========================================================
1024*/
1025
1026#define HS_IDLE         (0)
1027#define HS_BUSY         (1)
1028#define HS_NEGOTIATE    (2)     /* sync/wide data transfer*/
1029#define HS_DISCONNECT   (3)     /* Disconnected by target */
1030
1031#define HS_DONEMASK     (0x80)
1032#define HS_COMPLETE     (4|HS_DONEMASK)
1033#define HS_SEL_TIMEOUT  (5|HS_DONEMASK) /* Selection timeout      */
1034#define HS_RESET        (6|HS_DONEMASK) /* SCSI reset             */
1035#define HS_ABORTED      (7|HS_DONEMASK) /* Transfer aborted       */
1036#define HS_TIMEOUT      (8|HS_DONEMASK) /* Software timeout       */
1037#define HS_FAIL         (9|HS_DONEMASK) /* SCSI or PCI bus errors */
1038#define HS_UNEXPECTED   (10|HS_DONEMASK)/* Unexpected disconnect  */
1039
1040/*
1041**      Invalid host status values used by the SCRIPTS processor 
1042**      when the nexus is not fully identified.
1043**      Shall never appear in a CCB.
1044*/
1045
1046#define HS_INVALMASK    (0x40)
1047#define HS_SELECTING    (0|HS_INVALMASK)
1048#define HS_IN_RESELECT  (1|HS_INVALMASK)
1049#define HS_STARTING     (2|HS_INVALMASK)
1050
1051/*
1052**      Flags set by the SCRIPT processor for commands 
1053**      that have been skipped.
1054*/
1055#define HS_SKIPMASK     (0x20)
1056
1057/*==========================================================
1058**
1059**      Software Interrupt Codes
1060**
1061**==========================================================
1062*/
1063
1064#define SIR_BAD_STATUS          (1)
1065#define SIR_XXXXXXXXXX          (2)
1066#define SIR_NEGO_SYNC           (3)
1067#define SIR_NEGO_WIDE           (4)
1068#define SIR_NEGO_FAILED         (5)
1069#define SIR_NEGO_PROTO          (6)
1070#define SIR_REJECT_RECEIVED     (7)
1071#define SIR_REJECT_SENT         (8)
1072#define SIR_IGN_RESIDUE         (9)
1073#define SIR_MISSING_SAVE        (10)
1074#define SIR_RESEL_NO_MSG_IN     (11)
1075#define SIR_RESEL_NO_IDENTIFY   (12)
1076#define SIR_RESEL_BAD_LUN       (13)
1077#define SIR_RESEL_BAD_TARGET    (14)
1078#define SIR_RESEL_BAD_I_T_L     (15)
1079#define SIR_RESEL_BAD_I_T_L_Q   (16)
1080#define SIR_DONE_OVERFLOW       (17)
1081#define SIR_INTFLY              (18)
1082#define SIR_MAX                 (18)
1083
1084/*==========================================================
1085**
1086**      Extended error codes.
1087**      xerr_status field of struct ccb.
1088**
1089**==========================================================
1090*/
1091
1092#define XE_OK           (0)
1093#define XE_EXTRA_DATA   (1)     /* unexpected data phase */
1094#define XE_BAD_PHASE    (2)     /* illegal phase (4/5)   */
1095
1096/*==========================================================
1097**
1098**      Negotiation status.
1099**      nego_status field       of struct ccb.
1100**
1101**==========================================================
1102*/
1103
1104#define NS_NOCHANGE     (0)
1105#define NS_SYNC         (1)
1106#define NS_WIDE         (2)
1107#define NS_PPR          (4)
1108
1109/*==========================================================
1110**
1111**      Misc.
1112**
1113**==========================================================
1114*/
1115
1116#define CCB_MAGIC       (0xf2691ad2)
1117
1118/*==========================================================
1119**
1120**      Declaration of structs.
1121**
1122**==========================================================
1123*/
1124
1125static struct scsi_transport_template *ncr53c8xx_transport_template = NULL;
1126
1127struct tcb;
1128struct lcb;
1129struct ccb;
1130struct ncb;
1131struct script;
1132
1133struct link {
1134        ncrcmd  l_cmd;
1135        ncrcmd  l_paddr;
1136};
1137
1138struct  usrcmd {
1139        u_long  target;
1140        u_long  lun;
1141        u_long  data;
1142        u_long  cmd;
1143};
1144
1145#define UC_SETSYNC      10
1146#define UC_SETTAGS      11
1147#define UC_SETDEBUG     12
1148#define UC_SETORDER     13
1149#define UC_SETWIDE      14
1150#define UC_SETFLAG      15
1151#define UC_SETVERBOSE   17
1152
1153#define UF_TRACE        (0x01)
1154#define UF_NODISC       (0x02)
1155#define UF_NOSCAN       (0x04)
1156
1157/*========================================================================
1158**
1159**      Declaration of structs:         target control block
1160**
1161**========================================================================
1162*/
1163struct tcb {
1164        /*----------------------------------------------------------------
1165        **      During reselection the ncr jumps to this point with SFBR 
1166        **      set to the encoded target number with bit 7 set.
1167        **      if it's not this target, jump to the next.
1168        **
1169        **      JUMP  IF (SFBR != #target#), @(next tcb)
1170        **----------------------------------------------------------------
1171        */
1172        struct link   jump_tcb;
1173
1174        /*----------------------------------------------------------------
1175        **      Load the actual values for the sxfer and the scntl3
1176        **      register (sync/wide mode).
1177        **
1178        **      SCR_COPY (1), @(sval field of this tcb), @(sxfer  register)
1179        **      SCR_COPY (1), @(wval field of this tcb), @(scntl3 register)
1180        **----------------------------------------------------------------
1181        */
1182        ncrcmd  getscr[6];
1183
1184        /*----------------------------------------------------------------
1185        **      Get the IDENTIFY message and load the LUN to SFBR.
1186        **
1187        **      CALL, <RESEL_LUN>
1188        **----------------------------------------------------------------
1189        */
1190        struct link   call_lun;
1191
1192        /*----------------------------------------------------------------
1193        **      Now look for the right lun.
1194        **
1195        **      For i = 0 to 3
1196        **              SCR_JUMP ^ IFTRUE(MASK(i, 3)), @(first lcb mod. i)
1197        **
1198        **      Recent chips will prefetch the 4 JUMPS using only 1 burst.
1199        **      It is kind of hashcoding.
1200        **----------------------------------------------------------------
1201        */
1202        struct link     jump_lcb[4];    /* JUMPs for reselection        */
1203        struct lcb *    lp[MAX_LUN];    /* The lcb's of this tcb        */
1204
1205        /*----------------------------------------------------------------
1206        **      Pointer to the ccb used for negotiation.
1207        **      Prevent from starting a negotiation for all queued commands 
1208        **      when tagged command queuing is enabled.
1209        **----------------------------------------------------------------
1210        */
1211        struct ccb *   nego_cp;
1212
1213        /*----------------------------------------------------------------
1214        **      statistical data
1215        **----------------------------------------------------------------
1216        */
1217        u_long  transfers;
1218        u_long  bytes;
1219
1220        /*----------------------------------------------------------------
1221        **      negotiation of wide and synch transfer and device quirks.
1222        **----------------------------------------------------------------
1223        */
1224#ifdef SCSI_NCR_BIG_ENDIAN
1225/*0*/   u16     period;
1226/*2*/   u_char  sval;
1227/*3*/   u_char  minsync;
1228/*0*/   u_char  wval;
1229/*1*/   u_char  widedone;
1230/*2*/   u_char  quirks;
1231/*3*/   u_char  maxoffs;
1232#else
1233/*0*/   u_char  minsync;
1234/*1*/   u_char  sval;
1235/*2*/   u16     period;
1236/*0*/   u_char  maxoffs;
1237/*1*/   u_char  quirks;
1238/*2*/   u_char  widedone;
1239/*3*/   u_char  wval;
1240#endif
1241
1242        /* User settable limits and options.  */
1243        u_char  usrsync;
1244        u_char  usrwide;
1245        u_char  usrtags;
1246        u_char  usrflag;
1247        struct scsi_target *starget;
1248};
1249
1250/*========================================================================
1251**
1252**      Declaration of structs:         lun control block
1253**
1254**========================================================================
1255*/
1256struct lcb {
1257        /*----------------------------------------------------------------
1258        **      During reselection the ncr jumps to this point
1259        **      with SFBR set to the "Identify" message.
1260        **      if it's not this lun, jump to the next.
1261        **
1262        **      JUMP  IF (SFBR != #lun#), @(next lcb of this target)
1263        **
1264        **      It is this lun. Load TEMP with the nexus jumps table 
1265        **      address and jump to RESEL_TAG (or RESEL_NOTAG).
1266        **
1267        **              SCR_COPY (4), p_jump_ccb, TEMP,
1268        **              SCR_JUMP, <RESEL_TAG>
1269        **----------------------------------------------------------------
1270        */
1271        struct link     jump_lcb;
1272        ncrcmd          load_jump_ccb[3];
1273        struct link     jump_tag;
1274        ncrcmd          p_jump_ccb;     /* Jump table bus address       */
1275
1276        /*----------------------------------------------------------------
1277        **      Jump table used by the script processor to directly jump 
1278        **      to the CCB corresponding to the reselected nexus.
1279        **      Address is allocated on 256 bytes boundary in order to 
1280        **      allow 8 bit calculation of the tag jump entry for up to 
1281        **      64 possible tags.
1282        **----------------------------------------------------------------
1283        */
1284        u32             jump_ccb_0;     /* Default table if no tags     */
1285        u32             *jump_ccb;      /* Virtual address              */
1286
1287        /*----------------------------------------------------------------
1288        **      CCB queue management.
1289        **----------------------------------------------------------------
1290        */
1291        struct list_head free_ccbq;     /* Queue of available CCBs      */
1292        struct list_head busy_ccbq;     /* Queue of busy CCBs           */
1293        struct list_head wait_ccbq;     /* Queue of waiting for IO CCBs */
1294        struct list_head skip_ccbq;     /* Queue of skipped CCBs        */
1295        u_char          actccbs;        /* Number of allocated CCBs     */
1296        u_char          busyccbs;       /* CCBs busy for this lun       */
1297        u_char          queuedccbs;     /* CCBs queued to the controller*/
1298        u_char          queuedepth;     /* Queue depth for this lun     */
1299        u_char          scdev_depth;    /* SCSI device queue depth      */
1300        u_char          maxnxs;         /* Max possible nexuses         */
1301
1302        /*----------------------------------------------------------------
1303        **      Control of tagged command queuing.
1304        **      Tags allocation is performed using a circular buffer.
1305        **      This avoids using a loop for tag allocation.
1306        **----------------------------------------------------------------
1307        */
1308        u_char          ia_tag;         /* Allocation index             */
1309        u_char          if_tag;         /* Freeing index                */
1310        u_char cb_tags[MAX_TAGS];       /* Circular tags buffer */
1311        u_char          usetags;        /* Command queuing is active    */
1312        u_char          maxtags;        /* Max nr of tags asked by user */
1313        u_char          numtags;        /* Current number of tags       */
1314
1315        /*----------------------------------------------------------------
1316        **      QUEUE FULL control and ORDERED tag control.
1317        **----------------------------------------------------------------
1318        */
1319        /*----------------------------------------------------------------
1320        **      QUEUE FULL and ORDERED tag control.
1321        **----------------------------------------------------------------
1322        */
1323        u16             num_good;       /* Nr of GOOD since QUEUE FULL  */
1324        tagmap_t        tags_umap;      /* Used tags bitmap             */
1325        tagmap_t        tags_smap;      /* Tags in use at 'tag_stime'   */
1326        u_long          tags_stime;     /* Last time we set smap=umap   */
1327        struct ccb *    held_ccb;       /* CCB held for QUEUE FULL      */
1328};
1329
1330/*========================================================================
1331**
1332**      Declaration of structs:     the launch script.
1333**
1334**========================================================================
1335**
1336**      It is part of the CCB and is called by the scripts processor to 
1337**      start or restart the data structure (nexus).
1338**      This 6 DWORDs mini script makes use of prefetching.
1339**
1340**------------------------------------------------------------------------
1341*/
1342struct launch {
1343        /*----------------------------------------------------------------
1344        **      SCR_COPY(4),    @(p_phys), @(dsa register)
1345        **      SCR_JUMP,       @(scheduler_point)
1346        **----------------------------------------------------------------
1347        */
1348        ncrcmd          setup_dsa[3];   /* Copy 'phys' address to dsa   */
1349        struct link     schedule;       /* Jump to scheduler point      */
1350        ncrcmd          p_phys;         /* 'phys' header bus address    */
1351};
1352
1353/*========================================================================
1354**
1355**      Declaration of structs:     global HEADER.
1356**
1357**========================================================================
1358**
1359**      This substructure is copied from the ccb to a global address after 
1360**      selection (or reselection) and copied back before disconnect.
1361**
1362**      These fields are accessible to the script processor.
1363**
1364**------------------------------------------------------------------------
1365*/
1366
1367struct head {
1368        /*----------------------------------------------------------------
1369        **      Saved data pointer.
1370        **      Points to the position in the script responsible for the
1371        **      actual transfer transfer of data.
1372        **      It's written after reception of a SAVE_DATA_POINTER message.
1373        **      The goalpointer points after the last transfer command.
1374        **----------------------------------------------------------------
1375        */
1376        u32             savep;
1377        u32             lastp;
1378        u32             goalp;
1379
1380        /*----------------------------------------------------------------
1381        **      Alternate data pointer.
1382        **      They are copied back to savep/lastp/goalp by the SCRIPTS 
1383        **      when the direction is unknown and the device claims data out.
1384        **----------------------------------------------------------------
1385        */
1386        u32             wlastp;
1387        u32             wgoalp;
1388
1389        /*----------------------------------------------------------------
1390        **      The virtual address of the ccb containing this header.
1391        **----------------------------------------------------------------
1392        */
1393        struct ccb *    cp;
1394
1395        /*----------------------------------------------------------------
1396        **      Status fields.
1397        **----------------------------------------------------------------
1398        */
1399        u_char          scr_st[4];      /* script status                */
1400        u_char          status[4];      /* host status. must be the     */
1401                                        /*  last DWORD of the header.   */
1402};
1403
1404/*
1405**      The status bytes are used by the host and the script processor.
1406**
1407**      The byte corresponding to the host_status must be stored in the 
1408**      last DWORD of the CCB header since it is used for command 
1409**      completion (ncr_wakeup()). Doing so, we are sure that the header 
1410**      has been entirely copied back to the CCB when the host_status is 
1411**      seen complete by the CPU.
1412**
1413**      The last four bytes (status[4]) are copied to the scratchb register
1414**      (declared as scr0..scr3 in ncr_reg.h) just after the select/reselect,
1415**      and copied back just after disconnecting.
1416**      Inside the script the XX_REG are used.
1417**
1418**      The first four bytes (scr_st[4]) are used inside the script by 
1419**      "COPY" commands.
1420**      Because source and destination must have the same alignment
1421**      in a DWORD, the fields HAVE to be at the chosen offsets.
1422**              xerr_st         0       (0x34)  scratcha
1423**              sync_st         1       (0x05)  sxfer
1424**              wide_st         3       (0x03)  scntl3
1425*/
1426
1427/*
1428**      Last four bytes (script)
1429*/
1430#define  QU_REG scr0
1431#define  HS_REG scr1
1432#define  HS_PRT nc_scr1
1433#define  SS_REG scr2
1434#define  SS_PRT nc_scr2
1435#define  PS_REG scr3
1436
1437/*
1438**      Last four bytes (host)
1439*/
1440#ifdef SCSI_NCR_BIG_ENDIAN
1441#define  actualquirks  phys.header.status[3]
1442#define  host_status   phys.header.status[2]
1443#define  scsi_status   phys.header.status[1]
1444#define  parity_status phys.header.status[0]
1445#else
1446#define  actualquirks  phys.header.status[0]
1447#define  host_status   phys.header.status[1]
1448#define  scsi_status   phys.header.status[2]
1449#define  parity_status phys.header.status[3]
1450#endif
1451
1452/*
1453**      First four bytes (script)
1454*/
1455#define  xerr_st       header.scr_st[0]
1456#define  sync_st       header.scr_st[1]
1457#define  nego_st       header.scr_st[2]
1458#define  wide_st       header.scr_st[3]
1459
1460/*
1461**      First four bytes (host)
1462*/
1463#define  xerr_status   phys.xerr_st
1464#define  nego_status   phys.nego_st
1465
1466#if 0
1467#define  sync_status   phys.sync_st
1468#define  wide_status   phys.wide_st
1469#endif
1470
1471/*==========================================================
1472**
1473**      Declaration of structs:     Data structure block
1474**
1475**==========================================================
1476**
1477**      During execution of a ccb by the script processor,
1478**      the DSA (data structure address) register points
1479**      to this substructure of the ccb.
1480**      This substructure contains the header with
1481**      the script-processor-changeable data and
1482**      data blocks for the indirect move commands.
1483**
1484**----------------------------------------------------------
1485*/
1486
1487struct dsb {
1488
1489        /*
1490        **      Header.
1491        */
1492
1493        struct head     header;
1494
1495        /*
1496        **      Table data for Script
1497        */
1498
1499        struct scr_tblsel  select;
1500        struct scr_tblmove smsg  ;
1501        struct scr_tblmove cmd   ;
1502        struct scr_tblmove sense ;
1503        struct scr_tblmove data[MAX_SCATTER];
1504};
1505
1506
1507/*========================================================================
1508**
1509**      Declaration of structs:     Command control block.
1510**
1511**========================================================================
1512*/
1513struct ccb {
1514        /*----------------------------------------------------------------
1515        **      This is the data structure which is pointed by the DSA 
1516        **      register when it is executed by the script processor.
1517        **      It must be the first entry because it contains the header 
1518        **      as first entry that must be cache line aligned.
1519        **----------------------------------------------------------------
1520        */
1521        struct dsb      phys;
1522
1523        /*----------------------------------------------------------------
1524        **      Mini-script used at CCB execution start-up.
1525        **      Load the DSA with the data structure address (phys) and 
1526        **      jump to SELECT. Jump to CANCEL if CCB is to be canceled.
1527        **----------------------------------------------------------------
1528        */
1529        struct launch   start;
1530
1531        /*----------------------------------------------------------------
1532        **      Mini-script used at CCB relection to restart the nexus.
1533        **      Load the DSA with the data structure address (phys) and 
1534        **      jump to RESEL_DSA. Jump to ABORT if CCB is to be aborted.
1535        **----------------------------------------------------------------
1536        */
1537        struct launch   restart;
1538
1539        /*----------------------------------------------------------------
1540        **      If a data transfer phase is terminated too early
1541        **      (after reception of a message (i.e. DISCONNECT)),
1542        **      we have to prepare a mini script to transfer
1543        **      the rest of the data.
1544        **----------------------------------------------------------------
1545        */
1546        ncrcmd          patch[8];
1547
1548        /*----------------------------------------------------------------
1549        **      The general SCSI driver provides a
1550        **      pointer to a control block.
1551        **----------------------------------------------------------------
1552        */
1553        struct scsi_cmnd        *cmd;           /* SCSI command                 */
1554        u_char          cdb_buf[16];    /* Copy of CDB                  */
1555        u_char          sense_buf[64];
1556        int             data_len;       /* Total data length            */
1557
1558        /*----------------------------------------------------------------
1559        **      Message areas.
1560        **      We prepare a message to be sent after selection.
1561        **      We may use a second one if the command is rescheduled 
1562        **      due to GETCC or QFULL.
1563        **      Contents are IDENTIFY and SIMPLE_TAG.
1564        **      While negotiating sync or wide transfer,
1565        **      a SDTR or WDTR message is appended.
1566        **----------------------------------------------------------------
1567        */
1568        u_char          scsi_smsg [8];
1569        u_char          scsi_smsg2[8];
1570
1571        /*----------------------------------------------------------------
1572        **      Other fields.
1573        **----------------------------------------------------------------
1574        */
1575        u_long          p_ccb;          /* BUS address of this CCB      */
1576        u_char          sensecmd[6];    /* Sense command                */
1577        u_char          tag;            /* Tag for this transfer        */
1578                                        /*  255 means no tag            */
1579        u_char          target;
1580        u_char          lun;
1581        u_char          queued;
1582        u_char          auto_sense;
1583        struct ccb *    link_ccb;       /* Host adapter CCB chain       */
1584        struct list_head link_ccbq;     /* Link to unit CCB queue       */
1585        u32             startp;         /* Initial data pointer         */
1586        u_long          magic;          /* Free / busy  CCB flag        */
1587};
1588
1589#define CCB_PHYS(cp,lbl)        (cp->p_ccb + offsetof(struct ccb, lbl))
1590
1591
1592/*========================================================================
1593**
1594**      Declaration of structs:     NCR device descriptor
1595**
1596**========================================================================
1597*/
1598struct ncb {
1599        /*----------------------------------------------------------------
1600        **      The global header.
1601        **      It is accessible to both the host and the script processor.
1602        **      Must be cache line size aligned (32 for x86) in order to 
1603        **      allow cache line bursting when it is copied to/from CCB.
1604        **----------------------------------------------------------------
1605        */
1606        struct head     header;
1607
1608        /*----------------------------------------------------------------
1609        **      CCBs management queues.
1610        **----------------------------------------------------------------
1611        */
1612        struct scsi_cmnd        *waiting_list;  /* Commands waiting for a CCB   */
1613                                        /*  when lcb is not allocated.  */
1614        struct scsi_cmnd        *done_list;     /* Commands waiting for done()  */
1615                                        /* callback to be invoked.      */ 
1616        spinlock_t      smp_lock;       /* Lock for SMP threading       */
1617
1618        /*----------------------------------------------------------------
1619        **      Chip and controller indentification.
1620        **----------------------------------------------------------------
1621        */
1622        int             unit;           /* Unit number                  */
1623        char            inst_name[16];  /* ncb instance name            */
1624
1625        /*----------------------------------------------------------------
1626        **      Initial value of some IO register bits.
1627        **      These values are assumed to have been set by BIOS, and may 
1628        **      be used for probing adapter implementation differences.
1629        **----------------------------------------------------------------
1630        */
1631        u_char  sv_scntl0, sv_scntl3, sv_dmode, sv_dcntl, sv_ctest0, sv_ctest3,
1632                sv_ctest4, sv_ctest5, sv_gpcntl, sv_stest2, sv_stest4;
1633
1634        /*----------------------------------------------------------------
1635        **      Actual initial value of IO register bits used by the 
1636        **      driver. They are loaded at initialisation according to  
1637        **      features that are to be enabled.
1638        **----------------------------------------------------------------
1639        */
1640        u_char  rv_scntl0, rv_scntl3, rv_dmode, rv_dcntl, rv_ctest0, rv_ctest3,
1641                rv_ctest4, rv_ctest5, rv_stest2;
1642
1643        /*----------------------------------------------------------------
1644        **      Targets management.
1645        **      During reselection the ncr jumps to jump_tcb.
1646        **      The SFBR register is loaded with the encoded target id.
1647        **      For i = 0 to 3
1648        **              SCR_JUMP ^ IFTRUE(MASK(i, 3)), @(next tcb mod. i)
1649        **
1650        **      Recent chips will prefetch the 4 JUMPS using only 1 burst.
1651        **      It is kind of hashcoding.
1652        **----------------------------------------------------------------
1653        */
1654        struct link     jump_tcb[4];    /* JUMPs for reselection        */
1655        struct tcb  target[MAX_TARGET]; /* Target data                  */
1656
1657        /*----------------------------------------------------------------
1658        **      Virtual and physical bus addresses of the chip.
1659        **----------------------------------------------------------------
1660        */
1661        void __iomem *vaddr;            /* Virtual and bus address of   */
1662        unsigned long   paddr;          /*  chip's IO registers.        */
1663        unsigned long   paddr2;         /* On-chip RAM bus address.     */
1664        volatile                        /* Pointer to volatile for      */
1665        struct ncr_reg  __iomem *reg;   /*  memory mapped IO.           */
1666
1667        /*----------------------------------------------------------------
1668        **      SCRIPTS virtual and physical bus addresses.
1669        **      'script'  is loaded in the on-chip RAM if present.
1670        **      'scripth' stays in main memory.
1671        **----------------------------------------------------------------
1672        */
1673        struct script   *script0;       /* Copies of script and scripth */
1674        struct scripth  *scripth0;      /*  relocated for this ncb.     */
1675        struct scripth  *scripth;       /* Actual scripth virt. address */
1676        u_long          p_script;       /* Actual script and scripth    */
1677        u_long          p_scripth;      /*  bus addresses.              */
1678
1679        /*----------------------------------------------------------------
1680        **      General controller parameters and configuration.
1681        **----------------------------------------------------------------
1682        */
1683        struct device   *dev;
1684        u_char          revision_id;    /* PCI device revision id       */
1685        u32             irq;            /* IRQ level                    */
1686        u32             features;       /* Chip features map            */
1687        u_char          myaddr;         /* SCSI id of the adapter       */
1688        u_char          maxburst;       /* log base 2 of dwords burst   */
1689        u_char          maxwide;        /* Maximum transfer width       */
1690        u_char          minsync;        /* Minimum sync period factor   */
1691        u_char          maxsync;        /* Maximum sync period factor   */
1692        u_char          maxoffs;        /* Max scsi offset              */
1693        u_char          multiplier;     /* Clock multiplier (1,2,4)     */
1694        u_char          clock_divn;     /* Number of clock divisors     */
1695        u_long          clock_khz;      /* SCSI clock frequency in KHz  */
1696
1697        /*----------------------------------------------------------------
1698        **      Start queue management.
1699        **      It is filled up by the host processor and accessed by the 
1700        **      SCRIPTS processor in order to start SCSI commands.
1701        **----------------------------------------------------------------
1702        */
1703        u16             squeueput;      /* Next free slot of the queue  */
1704        u16             actccbs;        /* Number of allocated CCBs     */
1705        u16             queuedccbs;     /* Number of CCBs in start queue*/
1706        u16             queuedepth;     /* Start queue depth            */
1707
1708        /*----------------------------------------------------------------
1709        **      Timeout handler.
1710        **----------------------------------------------------------------
1711        */
1712        struct timer_list timer;        /* Timer handler link header    */
1713        u_long          lasttime;
1714        u_long          settle_time;    /* Resetting the SCSI BUS       */
1715
1716        /*----------------------------------------------------------------
1717        **      Debugging and profiling.
1718        **----------------------------------------------------------------
1719        */
1720        struct ncr_reg  regdump;        /* Register dump                */
1721        u_long          regtime;        /* Time it has been done        */
1722
1723        /*----------------------------------------------------------------
1724        **      Miscellaneous buffers accessed by the scripts-processor.
1725        **      They shall be DWORD aligned, because they may be read or 
1726        **      written with a SCR_COPY script command.
1727        **----------------------------------------------------------------
1728        */
1729        u_char          msgout[8];      /* Buffer for MESSAGE OUT       */
1730        u_char          msgin [8];      /* Buffer for MESSAGE IN        */
1731        u32             lastmsg;        /* Last SCSI message sent       */
1732        u_char          scratch;        /* Scratch for SCSI receive     */
1733
1734        /*----------------------------------------------------------------
1735        **      Miscellaneous configuration and status parameters.
1736        **----------------------------------------------------------------
1737        */
1738        u_char          disc;           /* Diconnection allowed         */
1739        u_char          scsi_mode;      /* Current SCSI BUS mode        */
1740        u_char          order;          /* Tag order to use             */
1741        u_char          verbose;        /* Verbosity for this controller*/
1742        int             ncr_cache;      /* Used for cache test at init. */
1743        u_long          p_ncb;          /* BUS address of this NCB      */
1744
1745        /*----------------------------------------------------------------
1746        **      Command completion handling.
1747        **----------------------------------------------------------------
1748        */
1749#ifdef SCSI_NCR_CCB_DONE_SUPPORT
1750        struct ccb      *(ccb_done[MAX_DONE]);
1751        int             ccb_done_ic;
1752#endif
1753        /*----------------------------------------------------------------
1754        **      Fields that should be removed or changed.
1755        **----------------------------------------------------------------
1756        */
1757        struct ccb      *ccb;           /* Global CCB                   */
1758        struct usrcmd   user;           /* Command from user            */
1759        volatile u_char release_stage;  /* Synchronisation stage on release  */
1760};
1761
1762#define NCB_SCRIPT_PHYS(np,lbl)  (np->p_script  + offsetof (struct script, lbl))
1763#define NCB_SCRIPTH_PHYS(np,lbl) (np->p_scripth + offsetof (struct scripth,lbl))
1764
1765/*==========================================================
1766**
1767**
1768**      Script for NCR-Processor.
1769**
1770**      Use ncr_script_fill() to create the variable parts.
1771**      Use ncr_script_copy_and_bind() to make a copy and
1772**      bind to physical addresses.
1773**
1774**
1775**==========================================================
1776**
1777**      We have to know the offsets of all labels before
1778**      we reach them (for forward jumps).
1779**      Therefore we declare a struct here.
1780**      If you make changes inside the script,
1781**      DONT FORGET TO CHANGE THE LENGTHS HERE!
1782**
1783**----------------------------------------------------------
1784*/
1785
1786/*
1787**      For HP Zalon/53c720 systems, the Zalon interface
1788**      between CPU and 53c720 does prefetches, which causes
1789**      problems with self modifying scripts.  The problem
1790**      is overcome by calling a dummy subroutine after each
1791**      modification, to force a refetch of the script on
1792**      return from the subroutine.
1793*/
1794
1795#ifdef CONFIG_NCR53C8XX_PREFETCH
1796#define PREFETCH_FLUSH_CNT      2
1797#define PREFETCH_FLUSH          SCR_CALL, PADDRH (wait_dma),
1798#else
1799#define PREFETCH_FLUSH_CNT      0
1800#define PREFETCH_FLUSH
1801#endif
1802
1803/*
1804**      Script fragments which are loaded into the on-chip RAM 
1805**      of 825A, 875 and 895 chips.
1806*/
1807struct script {
1808        ncrcmd  start           [  5];
1809        ncrcmd  startpos        [  1];
1810        ncrcmd  select          [  6];
1811        ncrcmd  select2         [  9 + PREFETCH_FLUSH_CNT];
1812        ncrcmd  loadpos         [  4];
1813        ncrcmd  send_ident      [  9];
1814        ncrcmd  prepare         [  6];
1815        ncrcmd  prepare2        [  7];
1816        ncrcmd  command         [  6];
1817        ncrcmd  dispatch        [ 32];
1818        ncrcmd  clrack          [  4];
1819        ncrcmd  no_data         [ 17];
1820        ncrcmd  status          [  8];
1821        ncrcmd  msg_in          [  2];
1822        ncrcmd  msg_in2         [ 16];
1823        ncrcmd  msg_bad         [  4];
1824        ncrcmd  setmsg          [  7];
1825        ncrcmd  cleanup         [  6];
1826        ncrcmd  complete        [  9];
1827        ncrcmd  cleanup_ok      [  8 + PREFETCH_FLUSH_CNT];
1828        ncrcmd  cleanup0        [  1];
1829#ifndef SCSI_NCR_CCB_DONE_SUPPORT
1830        ncrcmd  signal          [ 12];
1831#else
1832        ncrcmd  signal          [  9];
1833        ncrcmd  done_pos        [  1];
1834        ncrcmd  done_plug       [  2];
1835        ncrcmd  done_end        [  7];
1836#endif
1837        ncrcmd  save_dp         [  7];
1838        ncrcmd  restore_dp      [  5];
1839        ncrcmd  disconnect      [ 10];
1840        ncrcmd  msg_out         [  9];
1841        ncrcmd  msg_out_done    [  7];
1842        ncrcmd  idle            [  2];
1843        ncrcmd  reselect        [  8];
1844        ncrcmd  reselected      [  8];
1845        ncrcmd  resel_dsa       [  6 + PREFETCH_FLUSH_CNT];
1846        ncrcmd  loadpos1        [  4];
1847        ncrcmd  resel_lun       [  6];
1848        ncrcmd  resel_tag       [  6];
1849        ncrcmd  jump_to_nexus   [  4 + PREFETCH_FLUSH_CNT];
1850        ncrcmd  nexus_indirect  [  4];
1851        ncrcmd  resel_notag     [  4];
1852        ncrcmd  data_in         [MAX_SCATTERL * 4];
1853        ncrcmd  data_in2        [  4];
1854        ncrcmd  data_out        [MAX_SCATTERL * 4];
1855        ncrcmd  data_out2       [  4];
1856};
1857
1858/*
1859**      Script fragments which stay in main memory for all chips.
1860*/
1861struct scripth {
1862        ncrcmd  tryloop         [MAX_START*2];
1863        ncrcmd  tryloop2        [  2];
1864#ifdef SCSI_NCR_CCB_DONE_SUPPORT
1865        ncrcmd  done_queue      [MAX_DONE*5];
1866        ncrcmd  done_queue2     [  2];
1867#endif
1868        ncrcmd  select_no_atn   [  8];
1869        ncrcmd  cancel          [  4];
1870        ncrcmd  skip            [  9 + PREFETCH_FLUSH_CNT];
1871        ncrcmd  skip2           [ 19];
1872        ncrcmd  par_err_data_in [  6];
1873        ncrcmd  par_err_other   [  4];
1874        ncrcmd  msg_reject      [  8];
1875        ncrcmd  msg_ign_residue [ 24];
1876        ncrcmd  msg_extended    [ 10];
1877        ncrcmd  msg_ext_2       [ 10];
1878        ncrcmd  msg_wdtr        [ 14];
1879        ncrcmd  send_wdtr       [  7];
1880        ncrcmd  msg_ext_3       [ 10];
1881        ncrcmd  msg_sdtr        [ 14];
1882        ncrcmd  send_sdtr       [  7];
1883        ncrcmd  nego_bad_phase  [  4];
1884        ncrcmd  msg_out_abort   [ 10];
1885        ncrcmd  hdata_in        [MAX_SCATTERH * 4];
1886        ncrcmd  hdata_in2       [  2];
1887        ncrcmd  hdata_out       [MAX_SCATTERH * 4];
1888        ncrcmd  hdata_out2      [  2];
1889        ncrcmd  reset           [  4];
1890        ncrcmd  aborttag        [  4];
1891        ncrcmd  abort           [  2];
1892        ncrcmd  abort_resel     [ 20];
1893        ncrcmd  resend_ident    [  4];
1894        ncrcmd  clratn_go_on    [  3];
1895        ncrcmd  nxtdsp_go_on    [  1];
1896        ncrcmd  sdata_in        [  8];
1897        ncrcmd  data_io         [ 18];
1898        ncrcmd  bad_identify    [ 12];
1899        ncrcmd  bad_i_t_l       [  4];
1900        ncrcmd  bad_i_t_l_q     [  4];
1901        ncrcmd  bad_target      [  8];
1902        ncrcmd  bad_status      [  8];
1903        ncrcmd  start_ram       [  4 + PREFETCH_FLUSH_CNT];
1904        ncrcmd  start_ram0      [  4];
1905        ncrcmd  sto_restart     [  5];
1906        ncrcmd  wait_dma        [  2];
1907        ncrcmd  snooptest       [  9];
1908        ncrcmd  snoopend        [  2];
1909};
1910
1911/*==========================================================
1912**
1913**
1914**      Function headers.
1915**
1916**
1917**==========================================================
1918*/
1919
1920static  void    ncr_alloc_ccb   (struct ncb *np, u_char tn, u_char ln);
1921static  void    ncr_complete    (struct ncb *np, struct ccb *cp);
1922static  void    ncr_exception   (struct ncb *np);
1923static  void    ncr_free_ccb    (struct ncb *np, struct ccb *cp);
1924static  void    ncr_init_ccb    (struct ncb *np, struct ccb *cp);
1925static  void    ncr_init_tcb    (struct ncb *np, u_char tn);
1926static  struct lcb *    ncr_alloc_lcb   (struct ncb *np, u_char tn, u_char ln);
1927static  struct lcb *    ncr_setup_lcb   (struct ncb *np, struct scsi_device *sdev);
1928static  void    ncr_getclock    (struct ncb *np, int mult);
1929static  void    ncr_selectclock (struct ncb *np, u_char scntl3);
1930static  struct ccb *ncr_get_ccb (struct ncb *np, struct scsi_cmnd *cmd);
1931static  void    ncr_chip_reset  (struct ncb *np, int delay);
1932static  void    ncr_init        (struct ncb *np, int reset, char * msg, u_long code);
1933static  int     ncr_int_sbmc    (struct ncb *np);
1934static  int     ncr_int_par     (struct ncb *np);
1935static  void    ncr_int_ma      (struct ncb *np);
1936static  void    ncr_int_sir     (struct ncb *np);
1937static  void    ncr_int_sto     (struct ncb *np);
1938static  void    ncr_negotiate   (struct ncb* np, struct tcb* tp);
1939static  int     ncr_prepare_nego(struct ncb *np, struct ccb *cp, u_char *msgptr);
1940
1941static  void    ncr_script_copy_and_bind
1942                                (struct ncb *np, ncrcmd *src, ncrcmd *dst, int len);
1943static  void    ncr_script_fill (struct script * scr, struct scripth * scripth);
1944static  int     ncr_scatter     (struct ncb *np, struct ccb *cp, struct scsi_cmnd *cmd);
1945static  void    ncr_getsync     (struct ncb *np, u_char sfac, u_char *fakp, u_char *scntl3p);
1946static  void    ncr_setsync     (struct ncb *np, struct ccb *cp, u_char scntl3, u_char sxfer);
1947static  void    ncr_setup_tags  (struct ncb *np, struct scsi_device *sdev);
1948static  void    ncr_setwide     (struct ncb *np, struct ccb *cp, u_char wide, u_char ack);
1949static  int     ncr_snooptest   (struct ncb *np);
1950static  void    ncr_timeout     (struct ncb *np);
1951static  void    ncr_wakeup      (struct ncb *np, u_long code);
1952static  void    ncr_wakeup_done (struct ncb *np);
1953static  void    ncr_start_next_ccb (struct ncb *np, struct lcb * lp, int maxn);
1954static  void    ncr_put_start_queue(struct ncb *np, struct ccb *cp);
1955
1956static void insert_into_waiting_list(struct ncb *np, struct scsi_cmnd *cmd);
1957static struct scsi_cmnd *retrieve_from_waiting_list(int to_remove, struct ncb *np, struct scsi_cmnd *cmd);
1958static void process_waiting_list(struct ncb *np, int sts);
1959
1960#define remove_from_waiting_list(np, cmd) \
1961                retrieve_from_waiting_list(1, (np), (cmd))
1962#define requeue_waiting_list(np) process_waiting_list((np), DID_OK)
1963#define reset_waiting_list(np) process_waiting_list((np), DID_RESET)
1964
1965static inline char *ncr_name (struct ncb *np)
1966{
1967        return np->inst_name;
1968}
1969
1970
1971/*==========================================================
1972**
1973**
1974**      Scripts for NCR-Processor.
1975**
1976**      Use ncr_script_bind for binding to physical addresses.
1977**
1978**
1979**==========================================================
1980**
1981**      NADDR generates a reference to a field of the controller data.
1982**      PADDR generates a reference to another part of the script.
1983**      RADDR generates a reference to a script processor register.
1984**      FADDR generates a reference to a script processor register
1985**              with offset.
1986**
1987**----------------------------------------------------------
1988*/
1989
1990#define RELOC_SOFTC     0x40000000
1991#define RELOC_LABEL     0x50000000
1992#define RELOC_REGISTER  0x60000000
1993#if 0
1994#define RELOC_KVAR      0x70000000
1995#endif
1996#define RELOC_LABELH    0x80000000
1997#define RELOC_MASK      0xf0000000
1998
1999#define NADDR(label)    (RELOC_SOFTC | offsetof(struct ncb, label))
2000#define PADDR(label)    (RELOC_LABEL | offsetof(struct script, label))
2001#define PADDRH(label)   (RELOC_LABELH | offsetof(struct scripth, label))
2002#define RADDR(label)    (RELOC_REGISTER | REG(label))
2003#define FADDR(label,ofs)(RELOC_REGISTER | ((REG(label))+(ofs)))
2004#if 0
2005#define KVAR(which)     (RELOC_KVAR | (which))
2006#endif
2007
2008#if 0
2009#define SCRIPT_KVAR_JIFFIES     (0)
2010#define SCRIPT_KVAR_FIRST               SCRIPT_KVAR_JIFFIES
2011#define SCRIPT_KVAR_LAST                SCRIPT_KVAR_JIFFIES
2012/*
2013 * Kernel variables referenced in the scripts.
2014 * THESE MUST ALL BE ALIGNED TO A 4-BYTE BOUNDARY.
2015 */
2016static void *script_kvars[] __initdata =
2017        { (void *)&jiffies };
2018#endif
2019
2020static  struct script script0 __initdata = {
2021/*--------------------------< START >-----------------------*/ {
2022        /*
2023        **      This NOP will be patched with LED ON
2024        **      SCR_REG_REG (gpreg, SCR_AND, 0xfe)
2025        */
2026        SCR_NO_OP,
2027                0,
2028        /*
2029        **      Clear SIGP.
2030        */
2031        SCR_FROM_REG (ctest2),
2032                0,
2033        /*
2034        **      Then jump to a certain point in tryloop.
2035        **      Due to the lack of indirect addressing the code
2036        **      is self modifying here.
2037        */
2038        SCR_JUMP,
2039}/*-------------------------< STARTPOS >--------------------*/,{
2040                PADDRH(tryloop),
2041
2042}/*-------------------------< SELECT >----------------------*/,{
2043        /*
2044        **      DSA     contains the address of a scheduled
2045        **              data structure.
2046        **
2047        **      SCRATCHA contains the address of the script,
2048        **              which starts the next entry.
2049        **
2050        **      Set Initiator mode.
2051        **
2052        **      (Target mode is left as an exercise for the reader)
2053        */
2054
2055        SCR_CLR (SCR_TRG),
2056                0,
2057        SCR_LOAD_REG (HS_REG, HS_SELECTING),
2058                0,
2059
2060        /*
2061        **      And try to select this target.
2062        */
2063        SCR_SEL_TBL_ATN ^ offsetof (struct dsb, select),
2064                PADDR (reselect),
2065
2066}/*-------------------------< SELECT2 >----------------------*/,{
2067        /*
2068        **      Now there are 4 possibilities:
2069        **
2070        **      (1) The ncr loses arbitration.
2071        **      This is ok, because it will try again,
2072        **      when the bus becomes idle.
2073        **      (But beware of the timeout function!)
2074        **
2075        **      (2) The ncr is reselected.
2076        **      Then the script processor takes the jump
2077        **      to the RESELECT label.
2078        **
2079        **      (3) The ncr wins arbitration.
2080        **      Then it will execute SCRIPTS instruction until 
2081        **      the next instruction that checks SCSI phase.
2082        **      Then will stop and wait for selection to be 
2083        **      complete or selection time-out to occur.
2084        **      As a result the SCRIPTS instructions until 
2085        **      LOADPOS + 2 should be executed in parallel with 
2086        **      the SCSI core performing selection.
2087        */
2088
2089        /*
2090        **      The MESSAGE_REJECT problem seems to be due to a selection 
2091        **      timing problem.
2092        **      Wait immediately for the selection to complete. 
2093        **      (2.5x behaves so)
2094        */
2095        SCR_JUMPR ^ IFFALSE (WHEN (SCR_MSG_OUT)),
2096                0,
2097
2098        /*
2099        **      Next time use the next slot.
2100        */
2101        SCR_COPY (4),
2102                RADDR (temp),
2103                PADDR (startpos),
2104        /*
2105        **      The ncr doesn't have an indirect load
2106        **      or store command. So we have to
2107        **      copy part of the control block to a
2108        **      fixed place, where we can access it.
2109        **
2110        **      We patch the address part of a
2111        **      COPY command with the DSA-register.
2112        */
2113        SCR_COPY_F (4),
2114                RADDR (dsa),
2115                PADDR (loadpos),
2116        /*
2117        **      Flush script prefetch if required
2118        */
2119        PREFETCH_FLUSH
2120        /*
2121        **      then we do the actual copy.
2122        */
2123        SCR_COPY (sizeof (struct head)),
2124        /*
2125        **      continued after the next label ...
2126        */
2127}/*-------------------------< LOADPOS >---------------------*/,{
2128                0,
2129                NADDR (header),
2130        /*
2131        **      Wait for the next phase or the selection
2132        **      to complete or time-out.
2133        */
2134        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_OUT)),
2135                PADDR (prepare),
2136
2137}/*-------------------------< SEND_IDENT >----------------------*/,{
2138        /*
2139        **      Selection complete.
2140        **      Send the IDENTIFY and SIMPLE_TAG messages
2141        **      (and the EXTENDED_SDTR message)
2142        */
2143        SCR_MOVE_TBL ^ SCR_MSG_OUT,
2144                offsetof (struct dsb, smsg),
2145        SCR_JUMP ^ IFTRUE (WHEN (SCR_MSG_OUT)),
2146                PADDRH (resend_ident),
2147        SCR_LOAD_REG (scratcha, 0x80),
2148                0,
2149        SCR_COPY (1),
2150                RADDR (scratcha),
2151                NADDR (lastmsg),
2152}/*-------------------------< PREPARE >----------------------*/,{
2153        /*
2154        **      load the savep (saved pointer) into
2155        **      the TEMP register (actual pointer)
2156        */
2157        SCR_COPY (4),
2158                NADDR (header.savep),
2159                RADDR (temp),
2160        /*
2161        **      Initialize the status registers
2162        */
2163        SCR_COPY (4),
2164                NADDR (header.status),
2165                RADDR (scr0),
2166}/*-------------------------< PREPARE2 >---------------------*/,{
2167        /*
2168        **      Initialize the msgout buffer with a NOOP message.
2169        */
2170        SCR_LOAD_REG (scratcha, NOP),
2171                0,
2172        SCR_COPY (1),
2173                RADDR (scratcha),
2174                NADDR (msgout),
2175#if 0
2176        SCR_COPY (1),
2177                RADDR (scratcha),
2178                NADDR (msgin),
2179#endif
2180        /*
2181        **      Anticipate the COMMAND phase.
2182        **      This is the normal case for initial selection.
2183        */
2184        SCR_JUMP ^ IFFALSE (WHEN (SCR_COMMAND)),
2185                PADDR (dispatch),
2186
2187}/*-------------------------< COMMAND >--------------------*/,{
2188        /*
2189        **      ... and send the command
2190        */
2191        SCR_MOVE_TBL ^ SCR_COMMAND,
2192                offsetof (struct dsb, cmd),
2193        /*
2194        **      If status is still HS_NEGOTIATE, negotiation failed.
2195        **      We check this here, since we want to do that 
2196        **      only once.
2197        */
2198        SCR_FROM_REG (HS_REG),
2199                0,
2200        SCR_INT ^ IFTRUE (DATA (HS_NEGOTIATE)),
2201                SIR_NEGO_FAILED,
2202
2203}/*-----------------------< DISPATCH >----------------------*/,{
2204        /*
2205        **      MSG_IN is the only phase that shall be 
2206        **      entered at least once for each (re)selection.
2207        **      So we test it first.
2208        */
2209        SCR_JUMP ^ IFTRUE (WHEN (SCR_MSG_IN)),
2210                PADDR (msg_in),
2211
2212        SCR_RETURN ^ IFTRUE (IF (SCR_DATA_OUT)),
2213                0,
2214        /*
2215        **      DEL 397 - 53C875 Rev 3 - Part Number 609-0392410 - ITEM 4.
2216        **      Possible data corruption during Memory Write and Invalidate.
2217        **      This work-around resets the addressing logic prior to the 
2218        **      start of the first MOVE of a DATA IN phase.
2219        **      (See Documentation/scsi/ncr53c8xx.txt for more information)
2220        */
2221        SCR_JUMPR ^ IFFALSE (IF (SCR_DATA_IN)),
2222                20,
2223        SCR_COPY (4),
2224                RADDR (scratcha),
2225                RADDR (scratcha),
2226        SCR_RETURN,
2227                0,
2228        SCR_JUMP ^ IFTRUE (IF (SCR_STATUS)),
2229                PADDR (status),
2230        SCR_JUMP ^ IFTRUE (IF (SCR_COMMAND)),
2231                PADDR (command),
2232        SCR_JUMP ^ IFTRUE (IF (SCR_MSG_OUT)),
2233                PADDR (msg_out),
2234        /*
2235        **      Discard one illegal phase byte, if required.
2236        */
2237        SCR_LOAD_REG (scratcha, XE_BAD_PHASE),
2238                0,
2239        SCR_COPY (1),
2240                RADDR (scratcha),
2241                NADDR (xerr_st),
2242        SCR_JUMPR ^ IFFALSE (IF (SCR_ILG_OUT)),
2243                8,
2244        SCR_MOVE_ABS (1) ^ SCR_ILG_OUT,
2245                NADDR (scratch),
2246        SCR_JUMPR ^ IFFALSE (IF (SCR_ILG_IN)),
2247                8,
2248        SCR_MOVE_ABS (1) ^ SCR_ILG_IN,
2249                NADDR (scratch),
2250        SCR_JUMP,
2251                PADDR (dispatch),
2252
2253}/*-------------------------< CLRACK >----------------------*/,{
2254        /*
2255        **      Terminate possible pending message phase.
2256        */
2257        SCR_CLR (SCR_ACK),
2258                0,
2259        SCR_JUMP,
2260                PADDR (dispatch),
2261
2262}/*-------------------------< NO_DATA >--------------------*/,{
2263        /*
2264        **      The target wants to tranfer too much data
2265        **      or in the wrong direction.
2266        **      Remember that in extended error.
2267        */
2268        SCR_LOAD_REG (scratcha, XE_EXTRA_DATA),
2269                0,
2270        SCR_COPY (1),
2271                RADDR (scratcha),
2272                NADDR (xerr_st),
2273        /*
2274        **      Discard one data byte, if required.
2275        */
2276        SCR_JUMPR ^ IFFALSE (WHEN (SCR_DATA_OUT)),
2277                8,
2278        SCR_MOVE_ABS (1) ^ SCR_DATA_OUT,
2279                NADDR (scratch),
2280        SCR_JUMPR ^ IFFALSE (IF (SCR_DATA_IN)),
2281                8,
2282        SCR_MOVE_ABS (1) ^ SCR_DATA_IN,
2283                NADDR (scratch),
2284        /*
2285        **      .. and repeat as required.
2286        */
2287        SCR_CALL,
2288                PADDR (dispatch),
2289        SCR_JUMP,
2290                PADDR (no_data),
2291
2292}/*-------------------------< STATUS >--------------------*/,{
2293        /*
2294        **      get the status
2295        */
2296        SCR_MOVE_ABS (1) ^ SCR_STATUS,
2297                NADDR (scratch),
2298        /*
2299        **      save status to scsi_status.
2300        **      mark as complete.
2301        */
2302        SCR_TO_REG (SS_REG),
2303                0,
2304        SCR_LOAD_REG (HS_REG, HS_COMPLETE),
2305                0,
2306        SCR_JUMP,
2307                PADDR (dispatch),
2308}/*-------------------------< MSG_IN >--------------------*/,{
2309        /*
2310        **      Get the first byte of the message
2311        **      and save it to SCRATCHA.
2312        **
2313        **      The script processor doesn't negate the
2314        **      ACK signal after this transfer.
2315        */
2316        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
2317                NADDR (msgin[0]),
2318}/*-------------------------< MSG_IN2 >--------------------*/,{
2319        /*
2320        **      Handle this message.
2321        */
2322        SCR_JUMP ^ IFTRUE (DATA (COMMAND_COMPLETE)),
2323                PADDR (complete),
2324        SCR_JUMP ^ IFTRUE (DATA (DISCONNECT)),
2325                PADDR (disconnect),
2326        SCR_JUMP ^ IFTRUE (DATA (SAVE_POINTERS)),
2327                PADDR (save_dp),
2328        SCR_JUMP ^ IFTRUE (DATA (RESTORE_POINTERS)),
2329                PADDR (restore_dp),
2330        SCR_JUMP ^ IFTRUE (DATA (EXTENDED_MESSAGE)),
2331                PADDRH (msg_extended),
2332        SCR_JUMP ^ IFTRUE (DATA (NOP)),
2333                PADDR (clrack),
2334        SCR_JUMP ^ IFTRUE (DATA (MESSAGE_REJECT)),
2335                PADDRH (msg_reject),
2336        SCR_JUMP ^ IFTRUE (DATA (IGNORE_WIDE_RESIDUE)),
2337                PADDRH (msg_ign_residue),
2338        /*
2339        **      Rest of the messages left as
2340        **      an exercise ...
2341        **
2342        **      Unimplemented messages:
2343        **      fall through to MSG_BAD.
2344        */
2345}/*-------------------------< MSG_BAD >------------------*/,{
2346        /*
2347        **      unimplemented message - reject it.
2348        */
2349        SCR_INT,
2350                SIR_REJECT_SENT,
2351        SCR_LOAD_REG (scratcha, MESSAGE_REJECT),
2352                0,
2353}/*-------------------------< SETMSG >----------------------*/,{
2354        SCR_COPY (1),
2355                RADDR (scratcha),
2356                NADDR (msgout),
2357        SCR_SET (SCR_ATN),
2358                0,
2359        SCR_JUMP,
2360                PADDR (clrack),
2361}/*-------------------------< CLEANUP >-------------------*/,{
2362        /*
2363        **      dsa:    Pointer to ccb
2364        **            or xxxxxxFF (no ccb)
2365        **
2366        **      HS_REG:   Host-Status (<>0!)
2367        */
2368        SCR_FROM_REG (dsa),
2369                0,
2370        SCR_JUMP ^ IFTRUE (DATA (0xff)),
2371                PADDR (start),
2372        /*
2373        **      dsa is valid.
2374        **      complete the cleanup.
2375        */
2376        SCR_JUMP,
2377                PADDR (cleanup_ok),
2378
2379}/*-------------------------< COMPLETE >-----------------*/,{
2380        /*
2381        **      Complete message.
2382        **
2383        **      Copy TEMP register to LASTP in header.
2384        */
2385        SCR_COPY (4),
2386                RADDR (temp),
2387                NADDR (header.lastp),
2388        /*
2389        **      When we terminate the cycle by clearing ACK,
2390        **      the target may disconnect immediately.
2391        **
2392        **      We don't want to be told of an
2393        **      "unexpected disconnect",
2394        **      so we disable this feature.
2395        */
2396        SCR_REG_REG (scntl2, SCR_AND, 0x7f),
2397                0,
2398        /*
2399        **      Terminate cycle ...
2400        */
2401        SCR_CLR (SCR_ACK|SCR_ATN),
2402                0,
2403        /*
2404        **      ... and wait for the disconnect.
2405        */
2406        SCR_WAIT_DISC,
2407                0,
2408}/*-------------------------< CLEANUP_OK >----------------*/,{
2409        /*
2410        **      Save host status to header.
2411        */
2412        SCR_COPY (4),
2413                RADDR (scr0),
2414                NADDR (header.status),
2415        /*
2416        **      and copy back the header to the ccb.
2417        */
2418        SCR_COPY_F (4),
2419                RADDR (dsa),
2420                PADDR (cleanup0),
2421        /*
2422        **      Flush script prefetch if required
2423        */
2424        PREFETCH_FLUSH
2425        SCR_COPY (sizeof (struct head)),
2426                NADDR (header),
2427}/*-------------------------< CLEANUP0 >--------------------*/,{
2428                0,
2429}/*-------------------------< SIGNAL >----------------------*/,{
2430        /*
2431        **      if job not completed ...
2432        */
2433        SCR_FROM_REG (HS_REG),
2434                0,
2435        /*
2436        **      ... start the next command.
2437        */
2438        SCR_JUMP ^ IFTRUE (MASK (0, (HS_DONEMASK|HS_SKIPMASK))),
2439                PADDR(start),
2440        /*
2441        **      If command resulted in not GOOD status,
2442        **      call the C code if needed.
2443        */
2444        SCR_FROM_REG (SS_REG),
2445                0,
2446        SCR_CALL ^ IFFALSE (DATA (S_GOOD)),
2447                PADDRH (bad_status),
2448
2449#ifndef SCSI_NCR_CCB_DONE_SUPPORT
2450
2451        /*
2452        **      ... signal completion to the host
2453        */
2454        SCR_INT,
2455                SIR_INTFLY,
2456        /*
2457        **      Auf zu neuen Schandtaten!
2458        */
2459        SCR_JUMP,
2460                PADDR(start),
2461
2462#else   /* defined SCSI_NCR_CCB_DONE_SUPPORT */
2463
2464        /*
2465        **      ... signal completion to the host
2466        */
2467        SCR_JUMP,
2468}/*------------------------< DONE_POS >---------------------*/,{
2469                PADDRH (done_queue),
2470}/*------------------------< DONE_PLUG >--------------------*/,{
2471        SCR_INT,
2472                SIR_DONE_OVERFLOW,
2473}/*------------------------< DONE_END >---------------------*/,{
2474        SCR_INT,
2475                SIR_INTFLY,
2476        SCR_COPY (4),
2477                RADDR (temp),
2478                PADDR (done_pos),
2479        SCR_JUMP,
2480                PADDR (start),
2481
2482#endif  /* SCSI_NCR_CCB_DONE_SUPPORT */
2483
2484}/*-------------------------< SAVE_DP >------------------*/,{
2485        /*
2486        **      SAVE_DP message:
2487        **      Copy TEMP register to SAVEP in header.
2488        */
2489        SCR_COPY (4),
2490                RADDR (temp),
2491                NADDR (header.savep),
2492        SCR_CLR (SCR_ACK),
2493                0,
2494        SCR_JUMP,
2495                PADDR (dispatch),
2496}/*-------------------------< RESTORE_DP >---------------*/,{
2497        /*
2498        **      RESTORE_DP message:
2499        **      Copy SAVEP in header to TEMP register.
2500        */
2501        SCR_COPY (4),
2502                NADDR (header.savep),
2503                RADDR (temp),
2504        SCR_JUMP,
2505                PADDR (clrack),
2506
2507}/*-------------------------< DISCONNECT >---------------*/,{
2508        /*
2509        **      DISCONNECTing  ...
2510        **
2511        **      disable the "unexpected disconnect" feature,
2512        **      and remove the ACK signal.
2513        */
2514        SCR_REG_REG (scntl2, SCR_AND, 0x7f),
2515                0,
2516        SCR_CLR (SCR_ACK|SCR_ATN),
2517                0,
2518        /*
2519        **      Wait for the disconnect.
2520        */
2521        SCR_WAIT_DISC,
2522                0,
2523        /*
2524        **      Status is: DISCONNECTED.
2525        */
2526        SCR_LOAD_REG (HS_REG, HS_DISCONNECT),
2527                0,
2528        SCR_JUMP,
2529                PADDR (cleanup_ok),
2530
2531}/*-------------------------< MSG_OUT >-------------------*/,{
2532        /*
2533        **      The target requests a message.
2534        */
2535        SCR_MOVE_ABS (1) ^ SCR_MSG_OUT,
2536                NADDR (msgout),
2537        SCR_COPY (1),
2538                NADDR (msgout),
2539                NADDR (lastmsg),
2540        /*
2541        **      If it was no ABORT message ...
2542        */
2543        SCR_JUMP ^ IFTRUE (DATA (ABORT_TASK_SET)),
2544                PADDRH (msg_out_abort),
2545        /*
2546        **      ... wait for the next phase
2547        **      if it's a message out, send it again, ...
2548        */
2549        SCR_JUMP ^ IFTRUE (WHEN (SCR_MSG_OUT)),
2550                PADDR (msg_out),
2551}/*-------------------------< MSG_OUT_DONE >--------------*/,{
2552        /*
2553        **      ... else clear the message ...
2554        */
2555        SCR_LOAD_REG (scratcha, NOP),
2556                0,
2557        SCR_COPY (4),
2558                RADDR (scratcha),
2559                NADDR (msgout),
2560        /*
2561        **      ... and process the next phase
2562        */
2563        SCR_JUMP,
2564                PADDR (dispatch),
2565}/*-------------------------< IDLE >------------------------*/,{
2566        /*
2567        **      Nothing to do?
2568        **      Wait for reselect.
2569        **      This NOP will be patched with LED OFF
2570        **      SCR_REG_REG (gpreg, SCR_OR, 0x01)
2571        */
2572        SCR_NO_OP,
2573                0,
2574}/*-------------------------< RESELECT >--------------------*/,{
2575        /*
2576        **      make the DSA invalid.
2577        */
2578        SCR_LOAD_REG (dsa, 0xff),
2579                0,
2580        SCR_CLR (SCR_TRG),
2581                0,
2582        SCR_LOAD_REG (HS_REG, HS_IN_RESELECT),
2583                0,
2584        /*
2585        **      Sleep waiting for a reselection.
2586        **      If SIGP is set, special treatment.
2587        **
2588        **      Zu allem bereit ..
2589        */
2590        SCR_WAIT_RESEL,
2591                PADDR(start),
2592}/*-------------------------< RESELECTED >------------------*/,{
2593        /*
2594        **      This NOP will be patched with LED ON
2595        **      SCR_REG_REG (gpreg, SCR_AND, 0xfe)
2596        */
2597        SCR_NO_OP,
2598                0,
2599        /*
2600        **      ... zu nichts zu gebrauchen ?
2601        **
2602        **      load the target id into the SFBR
2603        **      and jump to the control block.
2604        **
2605        **      Look at the declarations of
2606        **      - struct ncb
2607        **      - struct tcb
2608        **      - struct lcb
2609        **      - struct ccb
2610        **      to understand what's going on.
2611        */
2612        SCR_REG_SFBR (ssid, SCR_AND, 0x8F),
2613                0,
2614        SCR_TO_REG (sdid),
2615                0,
2616        SCR_JUMP,
2617                NADDR (jump_tcb),
2618
2619}/*-------------------------< RESEL_DSA >-------------------*/,{
2620        /*
2621        **      Ack the IDENTIFY or TAG previously received.
2622        */
2623        SCR_CLR (SCR_ACK),
2624                0,
2625        /*
2626        **      The ncr doesn't have an indirect load
2627        **      or store command. So we have to
2628        **      copy part of the control block to a
2629        **      fixed place, where we can access it.
2630        **
2631        **      We patch the address part of a
2632        **      COPY command with the DSA-register.
2633        */
2634        SCR_COPY_F (4),
2635                RADDR (dsa),
2636                PADDR (loadpos1),
2637        /*
2638        **      Flush script prefetch if required
2639        */
2640        PREFETCH_FLUSH
2641        /*
2642        **      then we do the actual copy.
2643        */
2644        SCR_COPY (sizeof (struct head)),
2645        /*
2646        **      continued after the next label ...
2647        */
2648
2649}/*-------------------------< LOADPOS1 >-------------------*/,{
2650                0,
2651                NADDR (header),
2652        /*
2653        **      The DSA contains the data structure address.
2654        */
2655        SCR_JUMP,
2656                PADDR (prepare),
2657
2658}/*-------------------------< RESEL_LUN >-------------------*/,{
2659        /*
2660        **      come back to this point
2661        **      to get an IDENTIFY message
2662        **      Wait for a msg_in phase.
2663        */
2664        SCR_INT ^ IFFALSE (WHEN (SCR_MSG_IN)),
2665                SIR_RESEL_NO_MSG_IN,
2666        /*
2667        **      message phase.
2668        **      Read the data directly from the BUS DATA lines.
2669        **      This helps to support very old SCSI devices that 
2670        **      may reselect without sending an IDENTIFY.
2671        */
2672        SCR_FROM_REG (sbdl),
2673                0,
2674        /*
2675        **      It should be an Identify message.
2676        */
2677        SCR_RETURN,
2678                0,
2679}/*-------------------------< RESEL_TAG >-------------------*/,{
2680        /*
2681        **      Read IDENTIFY + SIMPLE + TAG using a single MOVE.
2682        **      Agressive optimization, is'nt it?
2683        **      No need to test the SIMPLE TAG message, since the 
2684        **      driver only supports conformant devices for tags. ;-)
2685        */
2686        SCR_MOVE_ABS (3) ^ SCR_MSG_IN,
2687                NADDR (msgin),
2688        /*
2689        **      Read the TAG from the SIDL.
2690        **      Still an aggressive optimization. ;-)
2691        **      Compute the CCB indirect jump address which 
2692        **      is (#TAG*2 & 0xfc) due to tag numbering using 
2693        **      1,3,5..MAXTAGS*2+1 actual values.
2694        */
2695        SCR_REG_SFBR (sidl, SCR_SHL, 0),
2696                0,
2697        SCR_SFBR_REG (temp, SCR_AND, 0xfc),
2698                0,
2699}/*-------------------------< JUMP_TO_NEXUS >-------------------*/,{
2700        SCR_COPY_F (4),
2701                RADDR (temp),
2702                PADDR (nexus_indirect),
2703        /*
2704        **      Flush script prefetch if required
2705        */
2706        PREFETCH_FLUSH
2707        SCR_COPY (4),
2708}/*-------------------------< NEXUS_INDIRECT >-------------------*/,{
2709                0,
2710                RADDR (temp),
2711        SCR_RETURN,
2712                0,
2713}/*-------------------------< RESEL_NOTAG >-------------------*/,{
2714        /*
2715        **      No tag expected.
2716        **      Read an throw away the IDENTIFY.
2717        */
2718        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
2719                NADDR (msgin),
2720        SCR_JUMP,
2721                PADDR (jump_to_nexus),
2722}/*-------------------------< DATA_IN >--------------------*/,{
2723/*
2724**      Because the size depends on the
2725**      #define MAX_SCATTERL parameter,
2726**      it is filled in at runtime.
2727**
2728**  ##===========< i=0; i<MAX_SCATTERL >=========
2729**  ||  SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_IN)),
2730**  ||          PADDR (dispatch),
2731**  ||  SCR_MOVE_TBL ^ SCR_DATA_IN,
2732**  ||          offsetof (struct dsb, data[ i]),
2733**  ##==========================================
2734**
2735**---------------------------------------------------------
2736*/
27370
2738}/*-------------------------< DATA_IN2 >-------------------*/,{
2739        SCR_CALL,
2740                PADDR (dispatch),
2741        SCR_JUMP,
2742                PADDR (no_data),
2743}/*-------------------------< DATA_OUT >--------------------*/,{
2744/*
2745**      Because the size depends on the
2746**      #define MAX_SCATTERL parameter,
2747**      it is filled in at runtime.
2748**
2749**  ##===========< i=0; i<MAX_SCATTERL >=========
2750**  ||  SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_OUT)),
2751**  ||          PADDR (dispatch),
2752**  ||  SCR_MOVE_TBL ^ SCR_DATA_OUT,
2753**  ||          offsetof (struct dsb, data[ i]),
2754**  ##==========================================
2755**
2756**---------------------------------------------------------
2757*/
27580
2759}/*-------------------------< DATA_OUT2 >-------------------*/,{
2760        SCR_CALL,
2761                PADDR (dispatch),
2762        SCR_JUMP,
2763                PADDR (no_data),
2764}/*--------------------------------------------------------*/
2765};
2766
2767static  struct scripth scripth0 __initdata = {
2768/*-------------------------< TRYLOOP >---------------------*/{
2769/*
2770**      Start the next entry.
2771**      Called addresses point to the launch script in the CCB.
2772**      They are patched by the main processor.
2773**
2774**      Because the size depends on the
2775**      #define MAX_START parameter, it is filled
2776**      in at runtime.
2777**
2778**-----------------------------------------------------------
2779**
2780**  ##===========< I=0; i<MAX_START >===========
2781**  ||  SCR_CALL,
2782**  ||          PADDR (idle),
2783**  ##==========================================
2784**
2785**-----------------------------------------------------------
2786*/
27870
2788}/*------------------------< TRYLOOP2 >---------------------*/,{
2789        SCR_JUMP,
2790                PADDRH(tryloop),
2791
2792#ifdef SCSI_NCR_CCB_DONE_SUPPORT
2793
2794}/*------------------------< DONE_QUEUE >-------------------*/,{
2795/*
2796**      Copy the CCB address to the next done entry.
2797**      Because the size depends on the
2798**      #define MAX_DONE parameter, it is filled
2799**      in at runtime.
2800**
2801**-----------------------------------------------------------
2802**
2803**  ##===========< I=0; i<MAX_DONE >===========
2804**  ||  SCR_COPY (sizeof(struct ccb *),
2805**  ||          NADDR (header.cp),
2806**  ||          NADDR (ccb_done[i]),
2807**  ||  SCR_CALL,
2808**  ||          PADDR (done_end),
2809**  ##==========================================
2810**
2811**-----------------------------------------------------------
2812*/
28130
2814}/*------------------------< DONE_QUEUE2 >------------------*/,{
2815        SCR_JUMP,
2816                PADDRH (done_queue),
2817
2818#endif /* SCSI_NCR_CCB_DONE_SUPPORT */
2819}/*------------------------< SELECT_NO_ATN >-----------------*/,{
2820        /*
2821        **      Set Initiator mode.
2822        **      And try to select this target without ATN.
2823        */
2824
2825        SCR_CLR (SCR_TRG),
2826                0,
2827        SCR_LOAD_REG (HS_REG, HS_SELECTING),
2828                0,
2829        SCR_SEL_TBL ^ offsetof (struct dsb, select),
2830                PADDR (reselect),
2831        SCR_JUMP,
2832                PADDR (select2),
2833
2834}/*-------------------------< CANCEL >------------------------*/,{
2835
2836        SCR_LOAD_REG (scratcha, HS_ABORTED),
2837                0,
2838        SCR_JUMPR,
2839                8,
2840}/*-------------------------< SKIP >------------------------*/,{
2841        SCR_LOAD_REG (scratcha, 0),
2842                0,
2843        /*
2844        **      This entry has been canceled.
2845        **      Next time use the next slot.
2846        */
2847        SCR_COPY (4),
2848                RADDR (temp),
2849                PADDR (startpos),
2850        /*
2851        **      The ncr doesn't have an indirect load
2852        **      or store command. So we have to
2853        **      copy part of the control block to a
2854        **      fixed place, where we can access it.
2855        **
2856        **      We patch the address part of a
2857        **      COPY command with the DSA-register.
2858        */
2859        SCR_COPY_F (4),
2860                RADDR (dsa),
2861                PADDRH (skip2),
2862        /*
2863        **      Flush script prefetch if required
2864        */
2865        PREFETCH_FLUSH
2866        /*
2867        **      then we do the actual copy.
2868        */
2869        SCR_COPY (sizeof (struct head)),
2870        /*
2871        **      continued after the next label ...
2872        */
2873}/*-------------------------< SKIP2 >---------------------*/,{
2874                0,
2875                NADDR (header),
2876        /*
2877        **      Initialize the status registers
2878        */
2879        SCR_COPY (4),
2880                NADDR (header.status),
2881                RADDR (scr0),
2882        /*
2883        **      Force host status.
2884        */
2885        SCR_FROM_REG (scratcha),
2886                0,
2887        SCR_JUMPR ^ IFFALSE (MASK (0, HS_DONEMASK)),
2888                16,
2889        SCR_REG_REG (HS_REG, SCR_OR, HS_SKIPMASK),
2890                0,
2891        SCR_JUMPR,
2892                8,
2893        SCR_TO_REG (HS_REG),
2894                0,
2895        SCR_LOAD_REG (SS_REG, S_GOOD),
2896                0,
2897        SCR_JUMP,
2898                PADDR (cleanup_ok),
2899
2900},/*-------------------------< PAR_ERR_DATA_IN >---------------*/{
2901        /*
2902        **      Ignore all data in byte, until next phase
2903        */
2904        SCR_JUMP ^ IFFALSE (WHEN (SCR_DATA_IN)),
2905                PADDRH (par_err_other),
2906        SCR_MOVE_ABS (1) ^ SCR_DATA_IN,
2907                NADDR (scratch),
2908        SCR_JUMPR,
2909                -24,
2910},/*-------------------------< PAR_ERR_OTHER >------------------*/{
2911        /*
2912        **      count it.
2913        */
2914        SCR_REG_REG (PS_REG, SCR_ADD, 0x01),
2915                0,
2916        /*
2917        **      jump to dispatcher.
2918        */
2919        SCR_JUMP,
2920                PADDR (dispatch),
2921}/*-------------------------< MSG_REJECT >---------------*/,{
2922        /*
2923        **      If a negotiation was in progress,
2924        **      negotiation failed.
2925        **      Otherwise, let the C code print 
2926        **      some message.
2927        */
2928        SCR_FROM_REG (HS_REG),
2929                0,
2930        SCR_INT ^ IFFALSE (DATA (HS_NEGOTIATE)),
2931                SIR_REJECT_RECEIVED,
2932        SCR_INT ^ IFTRUE (DATA (HS_NEGOTIATE)),
2933                SIR_NEGO_FAILED,
2934        SCR_JUMP,
2935                PADDR (clrack),
2936
2937}/*-------------------------< MSG_IGN_RESIDUE >----------*/,{
2938        /*
2939        **      Terminate cycle
2940        */
2941        SCR_CLR (SCR_ACK),
2942                0,
2943        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
2944                PADDR (dispatch),
2945        /*
2946        **      get residue size.
2947        */
2948        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
2949                NADDR (msgin[1]),
2950        /*
2951        **      Size is 0 .. ignore message.
2952        */
2953        SCR_JUMP ^ IFTRUE (DATA (0)),
2954                PADDR (clrack),
2955        /*
2956        **      Size is not 1 .. have to interrupt.
2957        */
2958        SCR_JUMPR ^ IFFALSE (DATA (1)),
2959                40,
2960        /*
2961        **      Check for residue byte in swide register
2962        */
2963        SCR_FROM_REG (scntl2),
2964                0,
2965        SCR_JUMPR ^ IFFALSE (MASK (WSR, WSR)),
2966                16,
2967        /*
2968        **      There IS data in the swide register.
2969        **      Discard it.
2970        */
2971        SCR_REG_REG (scntl2, SCR_OR, WSR),
2972                0,
2973        SCR_JUMP,
2974                PADDR (clrack),
2975        /*
2976        **      Load again the size to the sfbr register.
2977        */
2978        SCR_FROM_REG (scratcha),
2979                0,
2980        SCR_INT,
2981                SIR_IGN_RESIDUE,
2982        SCR_JUMP,
2983                PADDR (clrack),
2984
2985}/*-------------------------< MSG_EXTENDED >-------------*/,{
2986        /*
2987        **      Terminate cycle
2988        */
2989        SCR_CLR (SCR_ACK),
2990                0,
2991        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
2992                PADDR (dispatch),
2993        /*
2994        **      get length.
2995        */
2996        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
2997                NADDR (msgin[1]),
2998        /*
2999        */
3000        SCR_JUMP ^ IFTRUE (DATA (3)),
3001                PADDRH (msg_ext_3),
3002        SCR_JUMP ^ IFFALSE (DATA (2)),
3003                PADDR (msg_bad),
3004}/*-------------------------< MSG_EXT_2 >----------------*/,{
3005        SCR_CLR (SCR_ACK),
3006                0,
3007        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
3008                PADDR (dispatch),
3009        /*
3010        **      get extended message code.
3011        */
3012        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
3013                NADDR (msgin[2]),
3014        SCR_JUMP ^ IFTRUE (DATA (EXTENDED_WDTR)),
3015                PADDRH (msg_wdtr),
3016        /*
3017        **      unknown extended message
3018        */
3019        SCR_JUMP,
3020                PADDR (msg_bad)
3021}/*-------------------------< MSG_WDTR >-----------------*/,{
3022        SCR_CLR (SCR_ACK),
3023                0,
3024        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
3025                PADDR (dispatch),
3026        /*
3027        **      get data bus width
3028        */
3029        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
3030                NADDR (msgin[3]),
3031        /*
3032        **      let the host do the real work.
3033        */
3034        SCR_INT,
3035                SIR_NEGO_WIDE,
3036        /*
3037        **      let the target fetch our answer.
3038        */
3039        SCR_SET (SCR_ATN),
3040                0,
3041        SCR_CLR (SCR_ACK),
3042                0,
3043        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_OUT)),
3044                PADDRH (nego_bad_phase),
3045
3046}/*-------------------------< SEND_WDTR >----------------*/,{
3047        /*
3048        **      Send the EXTENDED_WDTR
3049        */
3050        SCR_MOVE_ABS (4) ^ SCR_MSG_OUT,
3051                NADDR (msgout),
3052        SCR_COPY (1),
3053                NADDR (msgout),
3054                NADDR (lastmsg),
3055        SCR_JUMP,
3056                PADDR (msg_out_done),
3057
3058}/*-------------------------< MSG_EXT_3 >----------------*/,{
3059        SCR_CLR (SCR_ACK),
3060                0,
3061        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
3062                PADDR (dispatch),
3063        /*
3064        **      get extended message code.
3065        */
3066        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
3067                NADDR (msgin[2]),
3068        SCR_JUMP ^ IFTRUE (DATA (EXTENDED_SDTR)),
3069                PADDRH (msg_sdtr),
3070        /*
3071        **      unknown extended message
3072        */
3073        SCR_JUMP,
3074                PADDR (msg_bad)
3075
3076}/*-------------------------< MSG_SDTR >-----------------*/,{
3077        SCR_CLR (SCR_ACK),
3078                0,
3079        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_IN)),
3080                PADDR (dispatch),
3081        /*
3082        **      get period and offset
3083        */
3084        SCR_MOVE_ABS (2) ^ SCR_MSG_IN,
3085                NADDR (msgin[3]),
3086        /*
3087        **      let the host do the real work.
3088        */
3089        SCR_INT,
3090                SIR_NEGO_SYNC,
3091        /*
3092        **      let the target fetch our answer.
3093        */
3094        SCR_SET (SCR_ATN),
3095                0,
3096        SCR_CLR (SCR_ACK),
3097                0,
3098        SCR_JUMP ^ IFFALSE (WHEN (SCR_MSG_OUT)),
3099                PADDRH (nego_bad_phase),
3100
3101}/*-------------------------< SEND_SDTR >-------------*/,{
3102        /*
3103        **      Send the EXTENDED_SDTR
3104        */
3105        SCR_MOVE_ABS (5) ^ SCR_MSG_OUT,
3106                NADDR (msgout),
3107        SCR_COPY (1),
3108                NADDR (msgout),
3109                NADDR (lastmsg),
3110        SCR_JUMP,
3111                PADDR (msg_out_done),
3112
3113}/*-------------------------< NEGO_BAD_PHASE >------------*/,{
3114        SCR_INT,
3115                SIR_NEGO_PROTO,
3116        SCR_JUMP,
3117                PADDR (dispatch),
3118
3119}/*-------------------------< MSG_OUT_ABORT >-------------*/,{
3120        /*
3121        **      After ABORT message,
3122        **
3123        **      expect an immediate disconnect, ...
3124        */
3125        SCR_REG_REG (scntl2, SCR_AND, 0x7f),
3126                0,
3127        SCR_CLR (SCR_ACK|SCR_ATN),
3128                0,
3129        SCR_WAIT_DISC,
3130                0,
3131        /*
3132        **      ... and set the status to "ABORTED"
3133        */
3134        SCR_LOAD_REG (HS_REG, HS_ABORTED),
3135                0,
3136        SCR_JUMP,
3137                PADDR (cleanup),
3138
3139}/*-------------------------< HDATA_IN >-------------------*/,{
3140/*
3141**      Because the size depends on the
3142**      #define MAX_SCATTERH parameter,
3143**      it is filled in at runtime.
3144**
3145**  ##==< i=MAX_SCATTERL; i<MAX_SCATTERL+MAX_SCATTERH >==
3146**  ||  SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_IN)),
3147**  ||          PADDR (dispatch),
3148**  ||  SCR_MOVE_TBL ^ SCR_DATA_IN,
3149**  ||          offsetof (struct dsb, data[ i]),
3150**  ##===================================================
3151**
3152**---------------------------------------------------------
3153*/
31540
3155}/*-------------------------< HDATA_IN2 >------------------*/,{
3156        SCR_JUMP,
3157                PADDR (data_in),
3158
3159}/*-------------------------< HDATA_OUT >-------------------*/,{
3160/*
3161**      Because the size depends on the
3162**      #define MAX_SCATTERH parameter,
3163**      it is filled in at runtime.
3164**
3165**  ##==< i=MAX_SCATTERL; i<MAX_SCATTERL+MAX_SCATTERH >==
3166**  ||  SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_OUT)),
3167**  ||          PADDR (dispatch),
3168**  ||  SCR_MOVE_TBL ^ SCR_DATA_OUT,
3169**  ||          offsetof (struct dsb, data[ i]),
3170**  ##===================================================
3171**
3172**---------------------------------------------------------
3173*/
31740
3175}/*-------------------------< HDATA_OUT2 >------------------*/,{
3176        SCR_JUMP,
3177                PADDR (data_out),
3178
3179}/*-------------------------< RESET >----------------------*/,{
3180        /*
3181        **      Send a TARGET_RESET message if bad IDENTIFY 
3182        **      received on reselection.
3183        */
3184        SCR_LOAD_REG (scratcha, ABORT_TASK),
3185                0,
3186        SCR_JUMP,
3187                PADDRH (abort_resel),
3188}/*-------------------------< ABORTTAG >-------------------*/,{
3189        /*
3190        **      Abort a wrong tag received on reselection.
3191        */
3192        SCR_LOAD_REG (scratcha, ABORT_TASK),
3193                0,
3194        SCR_JUMP,
3195                PADDRH (abort_resel),
3196}/*-------------------------< ABORT >----------------------*/,{
3197        /*
3198        **      Abort a reselection when no active CCB.
3199        */
3200        SCR_LOAD_REG (scratcha, ABORT_TASK_SET),
3201                0,
3202}/*-------------------------< ABORT_RESEL >----------------*/,{
3203        SCR_COPY (1),
3204                RADDR (scratcha),
3205                NADDR (msgout),
3206        SCR_SET (SCR_ATN),
3207                0,
3208        SCR_CLR (SCR_ACK),
3209                0,
3210        /*
3211        **      and send it.
3212        **      we expect an immediate disconnect
3213        */
3214        SCR_REG_REG (scntl2, SCR_AND, 0x7f),
3215                0,
3216        SCR_MOVE_ABS (1) ^ SCR_MSG_OUT,
3217                NADDR (msgout),
3218        SCR_COPY (1),
3219                NADDR (msgout),
3220                NADDR (lastmsg),
3221        SCR_CLR (SCR_ACK|SCR_ATN),
3222                0,
3223        SCR_WAIT_DISC,
3224                0,
3225        SCR_JUMP,
3226                PADDR (start),
3227}/*-------------------------< RESEND_IDENT >-------------------*/,{
3228        /*
3229        **      The target stays in MSG OUT phase after having acked 
3230        **      Identify [+ Tag [+ Extended message ]]. Targets shall
3231        **      behave this way on parity error.
3232        **      We must send it again all the messages.
3233        */
3234        SCR_SET (SCR_ATN), /* Shall be asserted 2 deskew delays before the  */
3235                0,         /* 1rst ACK = 90 ns. Hope the NCR is'nt too fast */
3236        SCR_JUMP,
3237                PADDR (send_ident),
3238}/*-------------------------< CLRATN_GO_ON >-------------------*/,{
3239        SCR_CLR (SCR_ATN),
3240                0,
3241        SCR_JUMP,
3242}/*-------------------------< NXTDSP_GO_ON >-------------------*/,{
3243                0,
3244}/*-------------------------< SDATA_IN >-------------------*/,{
3245        SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_IN)),
3246                PADDR (dispatch),
3247        SCR_MOVE_TBL ^ SCR_DATA_IN,
3248                offsetof (struct dsb, sense),
3249        SCR_CALL,
3250                PADDR (dispatch),
3251        SCR_JUMP,
3252                PADDR (no_data),
3253}/*-------------------------< DATA_IO >--------------------*/,{
3254        /*
3255        **      We jump here if the data direction was unknown at the 
3256        **      time we had to queue the command to the scripts processor.
3257        **      Pointers had been set as follow in this situation:
3258        **        savep   -->   DATA_IO
3259        **        lastp   -->   start pointer when DATA_IN
3260        **        goalp   -->   goal  pointer when DATA_IN
3261        **        wlastp  -->   start pointer when DATA_OUT
3262        **        wgoalp  -->   goal  pointer when DATA_OUT
3263        **      This script sets savep/lastp/goalp according to the 
3264        **      direction chosen by the target.
3265        */
3266        SCR_JUMPR ^ IFTRUE (WHEN (SCR_DATA_OUT)),
3267                32,
3268        /*
3269        **      Direction is DATA IN.
3270        **      Warning: we jump here, even when phase is DATA OUT.
3271        */
3272        SCR_COPY (4),
3273                NADDR (header.lastp),
3274                NADDR (header.savep),
3275
3276        /*
3277        **      Jump to the SCRIPTS according to actual direction.
3278        */
3279        SCR_COPY (4),
3280                NADDR (header.savep),
3281                RADDR (temp),
3282        SCR_RETURN,
3283                0,
3284        /*
3285        **      Direction is DATA OUT.
3286        */
3287        SCR_COPY (4),
3288                NADDR (header.wlastp),
3289                NADDR (header.lastp),
3290        SCR_COPY (4),
3291                NADDR (header.wgoalp),
3292                NADDR (header.goalp),
3293        SCR_JUMPR,
3294                -64,
3295}/*-------------------------< BAD_IDENTIFY >---------------*/,{
3296        /*
3297        **      If message phase but not an IDENTIFY,
3298        **      get some help from the C code.
3299        **      Old SCSI device may behave so.
3300        */
3301        SCR_JUMPR ^ IFTRUE (MASK (0x80, 0x80)),
3302                16,
3303        SCR_INT,
3304                SIR_RESEL_NO_IDENTIFY,
3305        SCR_JUMP,
3306                PADDRH (reset),
3307        /*
3308        **      Message is an IDENTIFY, but lun is unknown.
3309        **      Read the message, since we got it directly 
3310        **      from the SCSI BUS data lines.
3311        **      Signal problem to C code for logging the event.
3312        **      Send an ABORT_TASK_SET to clear all pending tasks.
3313        */
3314        SCR_INT,
3315                SIR_RESEL_BAD_LUN,
3316        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
3317                NADDR (msgin),
3318        SCR_JUMP,
3319                PADDRH (abort),
3320}/*-------------------------< BAD_I_T_L >------------------*/,{
3321        /*
3322        **      We donnot have a task for that I_T_L.
3323        **      Signal problem to C code for logging the event.
3324        **      Send an ABORT_TASK_SET message.
3325        */
3326        SCR_INT,
3327                SIR_RESEL_BAD_I_T_L,
3328        SCR_JUMP,
3329                PADDRH (abort),
3330}/*-------------------------< BAD_I_T_L_Q >----------------*/,{
3331        /*
3332        **      We donnot have a task that matches the tag.
3333        **      Signal problem to C code for logging the event.
3334        **      Send an ABORT_TASK message.
3335        */
3336        SCR_INT,
3337                SIR_RESEL_BAD_I_T_L_Q,
3338        SCR_JUMP,
3339                PADDRH (aborttag),
3340}/*-------------------------< BAD_TARGET >-----------------*/,{
3341        /*
3342        **      We donnot know the target that reselected us.
3343        **      Grab the first message if any (IDENTIFY).
3344        **      Signal problem to C code for logging the event.
3345        **      TARGET_RESET message.
3346        */
3347        SCR_INT,
3348                SIR_RESEL_BAD_TARGET,
3349        SCR_JUMPR ^ IFFALSE (WHEN (SCR_MSG_IN)),
3350                8,
3351        SCR_MOVE_ABS (1) ^ SCR_MSG_IN,
3352                NADDR (msgin),
3353        SCR_JUMP,
3354                PADDRH (reset),
3355}/*-------------------------< BAD_STATUS >-----------------*/,{
3356        /*
3357        **      If command resulted in either QUEUE FULL,
3358        **      CHECK CONDITION or COMMAND TERMINATED,
3359        **      call the C code.
3360        */
3361        SCR_INT ^ IFTRUE (DATA (S_QUEUE_FULL)),
3362                SIR_BAD_STATUS,
3363        SCR_INT ^ IFTRUE (DATA (S_CHECK_COND)),
3364                SIR_BAD_STATUS,
3365        SCR_INT ^ IFTRUE (DATA (S_TERMINATED)),
3366                SIR_BAD_STATUS,
3367        SCR_RETURN,
3368                0,
3369}/*-------------------------< START_RAM >-------------------*/,{
3370        /*
3371        **      Load the script into on-chip RAM, 
3372        **      and jump to start point.
3373        */
3374        SCR_COPY_F (4),
3375                RADDR (scratcha),
3376                PADDRH (start_ram0),
3377        /*
3378        **      Flush script prefetch if required
3379        */
3380        PREFETCH_FLUSH
3381        SCR_COPY (sizeof (struct script)),
3382}/*-------------------------< START_RAM0 >--------------------*/,{
3383                0,
3384                PADDR (start),
3385        SCR_JUMP,
3386                PADDR (start),
3387}/*-------------------------< STO_RESTART >-------------------*/,{
3388        /*
3389        **
3390        **      Repair start queue (e.g. next time use the next slot) 
3391        **      and jump to start point.
3392        */
3393        SCR_COPY (4),
3394                RADDR (temp),
3395                PADDR (startpos),
3396        SCR_JUMP,
3397                PADDR (start),
3398}/*-------------------------< WAIT_DMA >-------------------*/,{
3399        /*
3400        **      For HP Zalon/53c720 systems, the Zalon interface
3401        **      between CPU and 53c720 does prefetches, which causes
3402        **      problems with self modifying scripts.  The problem
3403        **      is overcome by calling a dummy subroutine after each
3404        **      modification, to force a refetch of the script on
3405        **      return from the subroutine.
3406        */
3407        SCR_RETURN,
3408                0,
3409}/*-------------------------< SNOOPTEST >-------------------*/,{
3410        /*
3411        **      Read the variable.
3412        */
3413        SCR_COPY (4),
3414                NADDR(ncr_cache),
3415                RADDR (scratcha),
3416        /*
3417        **      Write the variable.
3418        */
3419        SCR_COPY (4),
3420                RADDR (temp),
3421                NADDR(ncr_cache),
3422        /*
3423        **      Read back the variable.
3424        */
3425        SCR_COPY (4),
3426                NADDR(ncr_cache),
3427                RADDR (temp),
3428}/*-------------------------< SNOOPEND >-------------------*/,{
3429        /*
3430        **      And stop.
3431        */
3432        SCR_INT,
3433                99,
3434}/*--------------------------------------------------------*/
3435};
3436
3437/*==========================================================
3438**
3439**
3440**      Fill in #define dependent parts of the script
3441**
3442**
3443**==========================================================
3444*/
3445
3446void __init ncr_script_fill (struct script * scr, struct scripth * scrh)
3447{
3448        int     i;
3449        ncrcmd  *p;
3450
3451        p = scrh->tryloop;
3452        for (i=0; i<MAX_START; i++) {
3453                *p++ =SCR_CALL;
3454                *p++ =PADDR (idle);
3455        }
3456
3457        BUG_ON((u_long)p != (u_long)&scrh->tryloop + sizeof (scrh->tryloop));
3458
3459#ifdef SCSI_NCR_CCB_DONE_SUPPORT
3460
3461        p = scrh->done_queue;
3462        for (i = 0; i<MAX_DONE; i++) {
3463                *p++ =SCR_COPY (sizeof(struct ccb *));
3464                *p++ =NADDR (header.cp);
3465                *p++ =NADDR (ccb_done[i]);
3466                *p++ =SCR_CALL;
3467                *p++ =PADDR (done_end);
3468        }
3469
3470        BUG_ON((u_long)p != (u_long)&scrh->done_queue+sizeof(scrh->done_queue));
3471
3472#endif /* SCSI_NCR_CCB_DONE_SUPPORT */
3473
3474        p = scrh->hdata_in;
3475        for (i=0; i<MAX_SCATTERH; i++) {
3476                *p++ =SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_IN));
3477                *p++ =PADDR (dispatch);
3478                *p++ =SCR_MOVE_TBL ^ SCR_DATA_IN;
3479                *p++ =offsetof (struct dsb, data[i]);
3480        }
3481
3482        BUG_ON((u_long)p != (u_long)&scrh->hdata_in + sizeof (scrh->hdata_in));
3483
3484        p = scr->data_in;
3485        for (i=MAX_SCATTERH; i<MAX_SCATTERH+MAX_SCATTERL; i++) {
3486                *p++ =SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_IN));
3487                *p++ =PADDR (dispatch);
3488                *p++ =SCR_MOVE_TBL ^ SCR_DATA_IN;
3489                *p++ =offsetof (struct dsb, data[i]);
3490        }
3491
3492        BUG_ON((u_long)p != (u_long)&scr->data_in + sizeof (scr->data_in));
3493
3494        p = scrh->hdata_out;
3495        for (i=0; i<MAX_SCATTERH; i++) {
3496                *p++ =SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_OUT));
3497                *p++ =PADDR (dispatch);
3498                *p++ =SCR_MOVE_TBL ^ SCR_DATA_OUT;
3499                *p++ =offsetof (struct dsb, data[i]);
3500        }
3501
3502        BUG_ON((u_long)p != (u_long)&scrh->hdata_out + sizeof (scrh->hdata_out));
3503
3504        p = scr->data_out;
3505        for (i=MAX_SCATTERH; i<MAX_SCATTERH+MAX_SCATTERL; i++) {
3506                *p++ =SCR_CALL ^ IFFALSE (WHEN (SCR_DATA_OUT));
3507                *p++ =PADDR (dispatch);
3508                *p++ =SCR_MOVE_TBL ^ SCR_DATA_OUT;
3509                *p++ =offsetof (struct dsb, data[i]);
3510        }
3511
3512        BUG_ON((u_long) p != (u_long)&scr->data_out + sizeof (scr->data_out));
3513}
3514
3515/*==========================================================
3516**
3517**
3518**      Copy and rebind a script.
3519**
3520**
3521**==========================================================
3522*/
3523
3524static void __init 
3525ncr_script_copy_and_bind (struct ncb *np, ncrcmd *src, ncrcmd *dst, int len)
3526{
3527        ncrcmd  opcode, new, old, tmp1, tmp2;
3528        ncrcmd  *start, *end;
3529        int relocs;
3530        int opchanged = 0;
3531
3532        start = src;
3533        end = src + len/4;
3534
3535        while (src < end) {
3536
3537                opcode = *src++;
3538                *dst++ = cpu_to_scr(opcode);
3539
3540                /*
3541                **      If we forget to change the length
3542                **      in struct script, a field will be
3543                **      padded with 0. This is an illegal
3544                **      command.
3545                */
3546
3547                if (opcode == 0) {
3548                        printk (KERN_ERR "%s: ERROR0 IN SCRIPT at %d.\n",
3549                                ncr_name(np), (int) (src-start-1));
3550                        mdelay(1000);
3551                }
3552
3553                if (DEBUG_FLAGS & DEBUG_SCRIPT)
3554                        printk (KERN_DEBUG "%p:  <%x>\n",
3555                                (src-1), (unsigned)opcode);
3556
3557                /*
3558                **      We don't have to decode ALL commands
3559                */
3560                switch (opcode >> 28) {
3561
3562                case 0xc:
3563                        /*
3564                        **      COPY has TWO arguments.
3565                        */
3566                        relocs = 2;
3567                        tmp1 = src[0];
3568#ifdef  RELOC_KVAR
3569                        if ((tmp1 & RELOC_MASK) == RELOC_KVAR)
3570                                tmp1 = 0;
3571#endif
3572                        tmp2 = src[1];
3573#ifdef  RELOC_KVAR
3574                        if ((tmp2 & RELOC_MASK) == RELOC_KVAR)
3575                                tmp2 = 0;
3576#endif
3577                        if ((tmp1 ^ tmp2) & 3) {
3578                                printk (KERN_ERR"%s: ERROR1 IN SCRIPT at %d.\n",
3579                                        ncr_name(np), (int) (src-start-1));
3580                                mdelay(1000);
3581                        }
3582                        /*
3583                        **      If PREFETCH feature not enabled, remove 
3584                        **      the NO FLUSH bit if present.
3585                        */
3586                        if ((opcode & SCR_NO_FLUSH) && !(np->features & FE_PFEN)) {
3587                                dst[-1] = cpu_to_scr(opcode & ~SCR_NO_FLUSH);
3588                                ++opchanged;
3589                        }
3590                        break;
3591
3592                case 0x0:
3593                        /*
3594                        **      MOVE (absolute address)
3595                        */
3596                        relocs = 1;
3597                        break;
3598
3599                case 0x8:
3600                        /*
3601                        **      JUMP / CALL
3602                        **      don't relocate if relative :-)
3603                        */
3604                        if (opcode & 0x00800000)
3605                                relocs = 0;
3606                        else
3607                                relocs = 1;
3608                        break;
3609
3610                case 0x4:
3611                case 0x5:
3612                case 0x6:
3613                case 0x7:
3614                        relocs = 1;
3615                        break;
3616
3617                default:
3618                        relocs = 0;
3619                        break;
3620                }
3621
3622                if (relocs) {
3623                        while (relocs--) {
3624                                old = *src++;
3625
3626                                switch (old & RELOC_MASK) {
3627                                case RELOC_REGISTER:
3628                                        new = (old & ~RELOC_MASK) + np->paddr;
3629                                        break;
3630                                case RELOC_LABEL:
3631                                        new = (old & ~RELOC_MASK) + np->p_script;
3632                                        break;
3633                                case RELOC_LABELH:
3634                                        new = (old & ~RELOC_MASK) + np->p_scripth;
3635                                        break;
3636                                case RELOC_SOFTC:
3637                                        new = (old & ~RELOC_MASK) + np->p_ncb;
3638                                        break;
3639#ifdef  RELOC_KVAR
3640                                case RELOC_KVAR:
3641                                        if (((old & ~RELOC_MASK) <
3642                                             SCRIPT_KVAR_FIRST) ||
3643                                            ((old & ~RELOC_MASK) >
3644                                             SCRIPT_KVAR_LAST))
3645                                                panic("ncr KVAR out of range");
3646                                        new = vtophys(script_kvars[old &
3647                                            ~RELOC_MASK]);
3648                                        break;
3649#endif
3650                                case 0:
3651                                        /* Don't relocate a 0 address. */
3652                                        if (old == 0) {
3653                                                new = old;
3654                                                break;
3655                                        }
3656                                        /* fall through */
3657                                default:
3658                                        panic("ncr_script_copy_and_bind: weird relocation %x\n", old);
3659                                        break;
3660                                }
3661
3662                                *dst++ = cpu_to_scr(new);
3663                        }
3664                } else
3665                        *dst++ = cpu_to_scr(*src++);
3666
3667        }
3668}
3669
3670/*
3671**      Linux host data structure
3672*/
3673
3674struct host_data {
3675     struct ncb *ncb;
3676};
3677
3678#define PRINT_ADDR(cmd, arg...) dev_info(&cmd->device->sdev_gendev , ## arg)
3679
3680static void ncr_print_msg(struct ccb *cp, char *label, u_char *msg)
3681{
3682        PRINT_ADDR(cp->cmd, "%s: ", label);
3683
3684        spi_print_msg(msg);
3685        printk("\n");
3686}
3687
3688/*==========================================================
3689**
3690**      NCR chip clock divisor table.
3691**      Divisors are multiplied by 10,000,000 in order to make 
3692**      calculations more simple.
3693**
3694**==========================================================
3695*/
3696
3697#define _5M 5000000
3698static u_long div_10M[] =
3699        {2*_5M, 3*_5M, 4*_5M, 6*_5M, 8*_5M, 12*_5M, 16*_5M};
3700
3701
3702/*===============================================================
3703**
3704**      Prepare io register values used by ncr_init() according 
3705**      to selected and supported features.
3706**
3707**      NCR chips allow burst lengths of 2, 4, 8, 16, 32, 64, 128 
3708**      transfers. 32,64,128 are only supported by 875 and 895 chips.
3709**      We use log base 2 (burst length) as internal code, with 
3710**      value 0 meaning "burst disabled".
3711**
3712**===============================================================
3713*/
3714
3715/*
3716 *      Burst length from burst code.
3717 */
3718#define burst_length(bc) (!(bc))? 0 : 1 << (bc)
3719
3720/*
3721 *      Burst code from io register bits.  Burst enable is ctest0 for c720
3722 */
3723#define burst_code(dmode, ctest0) \
3724        (ctest0) & 0x80 ? 0 : (((dmode) & 0xc0) >> 6) + 1
3725
3726/*
3727 *      Set initial io register bits from burst code.
3728 */
3729static inline void ncr_init_burst(struct ncb *np, u_char bc)
3730{
3731        u_char *be = &np->rv_ctest0;
3732        *be             &= ~0x80;
3733        np->rv_dmode    &= ~(0x3 << 6);
3734        np->rv_ctest5   &= ~0x4;
3735
3736        if (!bc) {
3737                *be             |= 0x80;
3738        } else {
3739                --bc;
3740                np->rv_dmode    |= ((bc & 0x3) << 6);
3741                np->rv_ctest5   |= (bc & 0x4);
3742        }
3743}
3744
3745static void __init ncr_prepare_setting(struct ncb *np)
3746{
3747        u_char  burst_max;
3748        u_long  period;
3749        int i;
3750
3751        /*
3752        **      Save assumed BIOS setting
3753        */
3754
3755        np->sv_scntl0   = INB(nc_scntl0) & 0x0a;
3756        np->sv_scntl3   = INB(nc_scntl3) & 0x07;
3757        np->sv_dmode    = INB(nc_dmode)  & 0xce;
3758        np->sv_dcntl    = INB(nc_dcntl)  & 0xa8;
3759        np->sv_ctest0   = INB(nc_ctest0) & 0x84;
3760        np->sv_ctest3   = INB(nc_ctest3) & 0x01;
3761        np->sv_ctest4   = INB(nc_ctest4) & 0x80;
3762        np->sv_ctest5   = INB(nc_ctest5) & 0x24;
3763        np->sv_gpcntl   = INB(nc_gpcntl);
3764        np->sv_stest2   = INB(nc_stest2) & 0x20;
3765        np->sv_stest4   = INB(nc_stest4);
3766
3767        /*
3768        **      Wide ?
3769        */
3770
3771        np->maxwide     = (np->features & FE_WIDE)? 1 : 0;
3772
3773        /*
3774         *  Guess the frequency of the chip's clock.
3775         */
3776        if (np->features & FE_ULTRA)
3777                np->clock_khz = 80000;
3778        else
3779                np->clock_khz = 40000;
3780
3781        /*
3782         *  Get the clock multiplier factor.
3783         */
3784        if      (np->features & FE_QUAD)
3785                np->multiplier  = 4;
3786        else if (np->features & FE_DBLR)
3787                np->multiplier  = 2;
3788        else
3789                np->multiplier  = 1;
3790
3791        /*
3792         *  Measure SCSI clock frequency for chips 
3793         *  it may vary from assumed one.
3794         */
3795        if (np->features & FE_VARCLK)
3796                ncr_getclock(np, np->multiplier);
3797
3798        /*
3799         * Divisor to be used for async (timer pre-scaler).
3800         */
3801        i = np->clock_divn - 1;
3802        while (--i >= 0) {
3803                if (10ul * SCSI_NCR_MIN_ASYNC * np->clock_khz > div_10M[i]) {
3804                        ++i;
3805                        break;
3806                }
3807        }
3808        np->rv_scntl3 = i+1;
3809
3810        /*
3811         * Minimum synchronous period factor supported by the chip.
3812         * Btw, 'period' is in tenths of nanoseconds.
3813         */
3814
3815        period = (4 * div_10M[0] + np->clock_khz - 1) / np->clock_khz;
3816        if      (period <= 250)         np->minsync = 10;
3817        else if (period <= 303)         np->minsync = 11;
3818        else if (period <= 500)         np->minsync = 12;
3819        else                            np->minsync = (period + 40 - 1) / 40;
3820
3821        /*
3822         * Check against chip SCSI standard support (SCSI-2,ULTRA,ULTRA2).
3823         */
3824
3825        if      (np->minsync < 25 && !(np->features & FE_ULTRA))
3826                np->minsync = 25;
3827
3828        /*
3829         * Maximum synchronous period factor supported by the chip.
3830         */
3831
3832        period = (11 * div_10M[np->clock_divn - 1]) / (4 * np->clock_khz);
3833        np->maxsync = period > 2540 ? 254 : period / 10;
3834
3835        /*
3836        **      Prepare initial value of other IO registers
3837        */
3838#if defined SCSI_NCR_TRUST_BIOS_SETTING
3839        np->rv_scntl0   = np->sv_scntl0;
3840        np->rv_dmode    = np->sv_dmode;
3841        np->rv_dcntl    = np->sv_dcntl;
3842        np->rv_ctest0   = np->sv_ctest0;
3843        np->rv_ctest3   = np->sv_ctest3;
3844        np->rv_ctest4   = np->sv_ctest4;
3845        np->rv_ctest5   = np->sv_ctest5;
3846        burst_max       = burst_code(np->sv_dmode, np->sv_ctest0);
3847#else
3848
3849        /*
3850        **      Select burst length (dwords)
3851        */
3852        burst_max       = driver_setup.burst_max;
3853        if (burst_max == 255)
3854                burst_max = burst_code(np->sv_dmode, np->sv_ctest0);
3855        if (burst_max > 7)
3856                burst_max = 7;
3857        if (burst_max > np->maxburst)
3858                burst_max = np->maxburst;
3859
3860        /*
3861        **      Select all supported special features
3862        */
3863        if (np->features & FE_ERL)
3864                np->rv_dmode    |= ERL;         /* Enable Read Line */
3865        if (np->features & FE_BOF)
3866                np->rv_dmode    |= BOF;         /* Burst Opcode Fetch */
3867        if (np->features & FE_ERMP)
3868                np->rv_dmode    |= ERMP;        /* Enable Read Multiple */
3869        if (np->features & FE_PFEN)
3870                np->rv_dcntl    |= PFEN;        /* Prefetch Enable */
3871        if (np->features & FE_CLSE)
3872                np->rv_dcntl    |= CLSE;        /* Cache Line Size Enable */
3873        if (np->features & FE_WRIE)
3874                np->rv_ctest3   |= WRIE;        /* Write and Invalidate */
3875        if (np->features & FE_DFS)
3876                np->rv_ctest5   |= DFS;         /* Dma Fifo Size */
3877        if (np->features & FE_MUX)
3878                np->rv_ctest4   |= MUX;         /* Host bus multiplex mode */
3879        if (np->features & FE_EA)
3880                np->rv_dcntl    |= EA;          /* Enable ACK */
3881        if (np->features & FE_EHP)
3882                np->rv_ctest0   |= EHP;         /* Even host parity */
3883
3884        /*
3885        **      Select some other
3886        */
3887        if (driver_setup.master_parity)
3888                np->rv_ctest4   |= MPEE;        /* Master parity checking */
3889        if (driver_setup.scsi_parity)
3890                np->rv_scntl0   |= 0x0a;        /*  full arb., ena parity, par->ATN  */
3891
3892        /*
3893        **  Get SCSI addr of host adapter (set by bios?).
3894        */
3895        if (np->myaddr == 255) {
3896                np->myaddr = INB(nc_scid) & 0x07;
3897                if (!np->myaddr)
3898                        np->myaddr = SCSI_NCR_MYADDR;
3899        }
3900
3901#endif /* SCSI_NCR_TRUST_BIOS_SETTING */
3902
3903        /*
3904         *      Prepare initial io register bits for burst length
3905         */
3906        ncr_init_burst(np, burst_max);
3907
3908        /*
3909        **      Set SCSI BUS mode.
3910        **
3911        **      - ULTRA2 chips (895/895A/896) report the current 
3912        **        BUS mode through the STEST4 IO register.
3913        **      - For previous generation chips (825/825A/875), 
3914        **        user has to tell us how to check against HVD, 
3915        **        since a 100% safe algorithm is not possible.
3916        */
3917        np->scsi_mode = SMODE_SE;
3918        if (np->features & FE_DIFF) {
3919                switch(driver_setup.diff_support) {
3920                case 4: /* Trust previous settings if present, then GPIO3 */
3921                        if (np->sv_scntl3) {
3922                                if (np->sv_stest2 & 0x20)
3923                                        np->scsi_mode = SMODE_HVD;
3924                                break;
3925                        }
3926                case 3: /* SYMBIOS controllers report HVD through GPIO3 */
3927                        if (INB(nc_gpreg) & 0x08)
3928                                break;
3929                case 2: /* Set HVD unconditionally */
3930                        np->scsi_mode = SMODE_HVD;
3931                case 1: /* Trust previous settings for HVD */
3932                        if (np->sv_stest2 & 0x20)
3933                                np->scsi_mode = SMODE_HVD;
3934                        break;
3935                default:/* Don't care about HVD */      
3936                        break;
3937                }
3938        }
3939        if (np->scsi_mode == SMODE_HVD)
3940                np->rv_stest2 |= 0x20;
3941
3942        /*
3943        **      Set LED support from SCRIPTS.
3944        **      Ignore this feature for boards known to use a 
3945        **      specific GPIO wiring and for the 895A or 896 
3946        **      that drive the LED directly.
3947        **      Also probe initial setting of GPIO0 as output.
3948        */
3949        if ((driver_setup.led_pin) &&
3950            !(np->features & FE_LEDC) && !(np->sv_gpcntl & 0x01))
3951                np->features |= FE_LED0;
3952
3953        /*
3954        **      Set irq mode.
3955        */
3956        switch(driver_setup.irqm & 3) {
3957        case 2:
3958                np->rv_dcntl    |= IRQM;
3959                break;
3960        case 1:
3961                np->rv_dcntl    |= (np->sv_dcntl & IRQM);
3962                break;
3963        default:
3964                break;
3965        }
3966
3967        /*
3968        **      Configure targets according to driver setup.
3969        **      Allow to override sync, wide and NOSCAN from 
3970        **      boot command line.
3971        */
3972        for (i = 0 ; i < MAX_TARGET ; i++) {
3973                struct tcb *tp = &np->target[i];
3974
3975                tp->usrsync = driver_setup.default_sync;
3976                tp->usrwide = driver_setup.max_wide;
3977                tp->usrtags = MAX_TAGS;
3978                tp->period = 0xffff;
3979                if (!driver_setup.disconnection)
3980                        np->target[i].usrflag = UF_NODISC;
3981        }
3982
3983        /*
3984        **      Announce all that stuff to user.
3985        */
3986
3987        printk(KERN_INFO "%s: ID %d, Fast-%d%s%s\n", ncr_name(np),
3988                np->myaddr,
3989                np->minsync < 12 ? 40 : (np->minsync < 25 ? 20 : 10),
3990                (np->rv_scntl0 & 0xa)   ? ", Parity Checking"   : ", NO Parity",
3991                (np->rv_stest2 & 0x20)  ? ", Differential"      : "");
3992
3993        if (bootverbose > 1) {
3994                printk (KERN_INFO "%s: initial SCNTL3/DMODE/DCNTL/CTEST3/4/5 = "
3995                        "(hex) %02x/%02x/%02x/%02x/%02x/%02x\n",
3996                        ncr_name(np), np->sv_scntl3, np->sv_dmode, np->sv_dcntl,
3997                        np->sv_ctest3, np->sv_ctest4, np->sv_ctest5);
3998
3999                printk (KERN_INFO "%s: final   SCNTL3/DMODE/DCNTL/CTEST3/4/5 = "
4000                        "(hex) %02x/%02x/%02x/%02x/%02x/%02x\n",
4001                        ncr_name(np), np->rv_scntl3, np->rv_dmode, np->rv_dcntl,
4002                        np->rv_ctest3, np->rv_ctest4, np->rv_ctest5);
4003        }
4004
4005        if (bootverbose && np->paddr2)
4006                printk (KERN_INFO "%s: on-chip RAM at 0x%lx\n",
4007                        ncr_name(np), np->paddr2);
4008}
4009
4010/*==========================================================
4011**
4012**
4013**      Done SCSI commands list management.
4014**
4015**      We donnot enter the scsi_done() callback immediately 
4016**      after a command has been seen as completed but we 
4017**      insert it into a list which is flushed outside any kind 
4018**      of driver critical section.
4019**      This allows to do minimal stuff under interrupt and 
4020**      inside critical sections and to also avoid locking up 
4021**      on recursive calls to driver entry points under SMP.
4022**      In fact, the only kernel point which is entered by the 
4023**      driver with a driver lock set is kmalloc(GFP_ATOMIC) 
4024**      that shall not reenter the driver under any circumstances,
4025**      AFAIK.
4026**
4027**==========================================================
4028*/
4029static inline void ncr_queue_done_cmd(struct ncb *np, struct scsi_cmnd *cmd)
4030{
4031        unmap_scsi_data(np, cmd);
4032        cmd->host_scribble = (char *) np->done_list;
4033        np->done_list = cmd;
4034}
4035
4036static inline void ncr_flush_done_cmds(struct scsi_cmnd *lcmd)
4037{
4038        struct scsi_cmnd *cmd;
4039
4040        while (lcmd) {
4041                cmd = lcmd;
4042                lcmd = (struct scsi_cmnd *) cmd->host_scribble;
4043                cmd->scsi_done(cmd);
4044        }
4045}
4046
4047/*==========================================================
4048**
4049**
4050**      Prepare the next negotiation message if needed.
4051**
4052**      Fill in the part of message buffer that contains the 
4053**      negotiation and the nego_status field of the CCB.
4054**      Returns the size of the message in bytes.
4055**
4056**
4057**==========================================================
4058*/
4059
4060
4061static int ncr_prepare_nego(struct ncb *np, struct ccb *cp, u_char *msgptr)
4062{
4063        struct tcb *tp = &np->target[cp->target];
4064        int msglen = 0;
4065        int nego = 0;
4066        struct scsi_target *starget = tp->starget;
4067
4068        /* negotiate wide transfers ?  */
4069        if (!tp->widedone) {
4070                if (spi_support_wide(starget)) {
4071                        nego = NS_WIDE;
4072                } else
4073                        tp->widedone=1;
4074        }
4075
4076        /* negotiate synchronous transfers?  */
4077        if (!nego && !tp->period) {
4078                if (spi_support_sync(starget)) {
4079                        nego = NS_SYNC;
4080                } else {
4081                        tp->period  =0xffff;
4082                        dev_info(&starget->dev, "target did not report SYNC.\n");
4083                }
4084        }
4085
4086        switch (nego) {
4087        case NS_SYNC:
4088                msglen += spi_populate_sync_msg(msgptr + msglen,
4089                                tp->maxoffs ? tp->minsync : 0, tp->maxoffs);
4090                break;
4091        case NS_WIDE:
4092                msglen += spi_populate_width_msg(msgptr + msglen, tp->usrwide);
4093                break;
4094        }
4095
4096        cp->nego_status = nego;
4097
4098        if (nego) {
4099                tp->nego_cp = cp;
4100                if (DEBUG_FLAGS & DEBUG_NEGO) {
4101                        ncr_print_msg(cp, nego == NS_WIDE ?
4102                                          "wide msgout":"sync_msgout", msgptr);
4103                }
4104        }
4105
4106        return msglen;
4107}
4108
4109
4110
4111/*==========================================================
4112**
4113**
4114**      Start execution of a SCSI command.
4115**      This is called from the generic SCSI driver.
4116**
4117**
4118**==========================================================
4119*/
4120static int ncr_queue_command (struct ncb *np, struct scsi_cmnd *cmd)
4121{
4122        struct scsi_device *sdev = cmd->device;
4123        struct tcb *tp = &np->target[sdev->id];
4124        struct lcb *lp = tp->lp[sdev->lun];
4125        struct ccb *cp;
4126
4127        int     segments;
4128        u_char  idmsg, *msgptr;
4129        u32     msglen;
4130        int     direction;
4131        u32     lastp, goalp;
4132
4133        /*---------------------------------------------
4134        **
4135        **      Some shortcuts ...
4136        **
4137        **---------------------------------------------
4138        */
4139        if ((sdev->id == np->myaddr       ) ||
4140                (sdev->id >= MAX_TARGET) ||
4141                (sdev->lun    >= MAX_LUN   )) {
4142                return(DID_BAD_TARGET);
4143        }
4144
4145        /*---------------------------------------------
4146        **
4147        **      Complete the 1st TEST UNIT READY command
4148        **      with error condition if the device is 
4149        **      flagged NOSCAN, in order to speed up 
4150        **      the boot.
4151        **
4152        **---------------------------------------------
4153        */
4154        if ((cmd->cmnd[0] == 0 || cmd->cmnd[0] == 0x12) && 
4155            (tp->usrflag & UF_NOSCAN)) {
4156                tp->usrflag &= ~UF_NOSCAN;
4157                return DID_BAD_TARGET;
4158        }
4159
4160        if (DEBUG_FLAGS & DEBUG_TINY) {
4161                PRINT_ADDR(cmd, "CMD=%x ", cmd->cmnd[0]);
4162        }
4163
4164        /*---------------------------------------------------
4165        **
4166        **      Assign a ccb / bind cmd.
4167        **      If resetting, shorten settle_time if necessary
4168        **      in order to avoid spurious timeouts.
4169        **      If resetting or no free ccb,
4170        **      insert cmd into the waiting list.
4171        **
4172        **----------------------------------------------------
4173        */
4174        if (np->settle_time && cmd->request->timeout >= HZ) {
4175                u_long tlimit = jiffies + cmd->request->timeout - HZ;
4176                if (time_after(np->settle_time, tlimit))
4177                        np->settle_time = tlimit;
4178        }
4179
4180        if (np->settle_time || !(cp=ncr_get_ccb (np, cmd))) {
4181                insert_into_waiting_list(np, cmd);
4182                return(DID_OK);
4183        }
4184        cp->cmd = cmd;
4185
4186        /*----------------------------------------------------
4187        **
4188        **      Build the identify / tag / sdtr message
4189        **
4190        **----------------------------------------------------
4191        */
4192
4193        idmsg = IDENTIFY(0, sdev->lun);
4194
4195        if (cp ->tag != NO_TAG ||
4196                (cp != np->ccb && np->disc && !(tp->usrflag & UF_NODISC)))
4197                idmsg |= 0x40;
4198
4199        msgptr = cp->scsi_smsg;
4200        msglen = 0;
4201        msgptr[msglen++] = idmsg;
4202
4203        if (cp->tag != NO_TAG) {
4204                char order = np->order;
4205
4206                /*
4207                **      Force ordered tag if necessary to avoid timeouts 
4208                **      and to preserve interactivity.
4209                */
4210                if (lp && time_after(jiffies, lp->tags_stime)) {
4211                        if (lp->tags_smap) {
4212                                order = ORDERED_QUEUE_TAG;
4213                                if ((DEBUG_FLAGS & DEBUG_TAGS)||bootverbose>2){ 
4214                                        PRINT_ADDR(cmd,
4215                                                "ordered tag forced.\n");
4216                                }
4217                        }
4218                        lp->tags_stime = jiffies + 3*HZ;
4219                        lp->tags_smap = lp->tags_umap;
4220                }
4221
4222                if (order == 0) {
4223                        /*
4224                        **      Ordered write ops, unordered read ops.
4225                        */
4226                        switch (cmd->cmnd[0]) {
4227                        case 0x08:  /* READ_SMALL (6) */
4228                        case 0x28:  /* READ_BIG  (10) */
4229                        case 0xa8:  /* READ_HUGE (12) */
4230                                order = SIMPLE_QUEUE_TAG;
4231                                break;
4232                        default:
4233                                order = ORDERED_QUEUE_TAG;
4234                        }
4235                }
4236                msgptr[msglen++] = order;
4237                /*
4238                **      Actual tags are numbered 1,3,5,..2*MAXTAGS+1,
4239                **      since we may have to deal with devices that have 
4240                **      problems with #TAG 0 or too great #TAG numbers.
4241                */
4242                msgptr[msglen++] = (cp->tag << 1) + 1;
4243        }
4244
4245        /*----------------------------------------------------
4246        **
4247        **      Build the data descriptors
4248        **
4249        **----------------------------------------------------
4250        */
4251
4252        direction = cmd->sc_data_direction;
4253        if (direction != DMA_NONE) {
4254                segments = ncr_scatter(np, cp, cp->cmd);
4255                if (segments < 0) {
4256                        ncr_free_ccb(np, cp);
4257                        return(DID_ERROR);
4258                }
4259        }
4260        else {
4261                cp->data_len = 0;
4262                segments = 0;
4263        }
4264
4265        /*---------------------------------------------------
4266        **
4267        **      negotiation required?
4268        **
4269        **      (nego_status is filled by ncr_prepare_nego())
4270        **
4271        **---------------------------------------------------
4272        */
4273
4274        cp->nego_status = 0;
4275
4276        if ((!tp->widedone || !tp->period) && !tp->nego_cp && lp) {
4277                msglen += ncr_prepare_nego (np, cp, msgptr + msglen);
4278        }
4279
4280        /*----------------------------------------------------
4281        **
4282        **      Determine xfer direction.
4283        **
4284        **----------------------------------------------------
4285        */
4286        if (!cp->data_len)
4287                direction = DMA_NONE;
4288
4289        /*
4290        **      If data direction is BIDIRECTIONAL, speculate FROM_DEVICE
4291        **      but prepare alternate pointers for TO_DEVICE in case 
4292        **      of our speculation will be just wrong.
4293        **      SCRIPTS will swap values if needed.
4294        */
4295        switch(direction) {
4296        case DMA_BIDIRECTIONAL:
4297        case DMA_TO_DEVICE:
4298                goalp = NCB_SCRIPT_PHYS (np, data_out2) + 8;
4299                if (segments <= MAX_SCATTERL)
4300                        lastp = goalp - 8 - (segments * 16);
4301                else {
4302                        lastp = NCB_SCRIPTH_PHYS (np, hdata_out2);
4303                        lastp -= (segments - MAX_SCATTERL) * 16;
4304                }
4305                if (direction != DMA_BIDIRECTIONAL)
4306                        break;
4307                cp->phys.header.wgoalp  = cpu_to_scr(goalp);
4308                cp->phys.header.wlastp  = cpu_to_scr(lastp);
4309                /* fall through */
4310        case DMA_FROM_DEVICE:
4311                goalp = NCB_SCRIPT_PHYS (np, data_in2) + 8;
4312                if (segments <= MAX_SCATTERL)
4313                        lastp = goalp - 8 - (segments * 16);
4314                else {
4315                        lastp = NCB_SCRIPTH_PHYS (np, hdata_in2);
4316                        lastp -= (segments - MAX_SCATTERL) * 16;
4317                }
4318                break;
4319        default:
4320        case DMA_NONE:
4321                lastp = goalp = NCB_SCRIPT_PHYS (np, no_data);
4322                break;
4323        }
4324
4325        /*
4326        **      Set all pointers values needed by SCRIPTS.
4327        **      If direction is unknown, start at data_io.
4328        */
4329        cp->phys.header.lastp = cpu_to_scr(lastp);
4330        cp->phys.header.goalp = cpu_to_scr(goalp);
4331
4332        if (direction == DMA_BIDIRECTIONAL)
4333                cp->phys.header.savep = 
4334                        cpu_to_scr(NCB_SCRIPTH_PHYS (np, data_io));
4335        else
4336                cp->phys.header.savep= cpu_to_scr(lastp);
4337
4338        /*
4339        **      Save the initial data pointer in order to be able 
4340        **      to redo the command.
4341        */
4342        cp->startp = cp->phys.header.savep;
4343
4344        /*----------------------------------------------------
4345        **
4346        **      fill in ccb
4347        **
4348        **----------------------------------------------------
4349        **
4350        **
4351        **      physical -> virtual backlink
4352        **      Generic SCSI command
4353        */
4354
4355        /*
4356        **      Startqueue
4357        */
4358        cp->start.schedule.l_paddr   = cpu_to_scr(NCB_SCRIPT_PHYS (np, select));
4359        cp->restart.schedule.l_paddr = cpu_to_scr(NCB_SCRIPT_PHYS (np, resel_dsa));
4360        /*
4361        **      select
4362        */
4363        cp->phys.select.sel_id          = sdev_id(sdev);
4364        cp->phys.select.sel_scntl3      = tp->wval;
4365        cp->phys.select.sel_sxfer       = tp->sval;
4366        /*
4367        **      message
4368        */
4369        cp->phys.smsg.addr              = cpu_to_scr(CCB_PHYS (cp, scsi_smsg));
4370        cp->phys.smsg.size              = cpu_to_scr(msglen);
4371
4372        /*
4373        **      command
4374        */
4375        memcpy(cp->cdb_buf, cmd->cmnd, min_t(int, cmd->cmd_len, sizeof(cp->cdb_buf)));
4376        cp->phys.cmd.addr               = cpu_to_scr(CCB_PHYS (cp, cdb_buf[0]));
4377        cp->phys.cmd.size               = cpu_to_scr(cmd->cmd_len);
4378
4379        /*
4380        **      status
4381        */
4382        cp->actualquirks                = 0;
4383        cp->host_status                 = cp->nego_status ? HS_NEGOTIATE : HS_BUSY;
4384        cp->scsi_status                 = S_ILLEGAL;
4385        cp->parity_status               = 0;
4386
4387        cp->xerr_status                 = XE_OK;
4388#if 0
4389        cp->sync_status                 = tp->sval;
4390        cp->wide_status                 = tp->wval;
4391#endif
4392
4393        /*----------------------------------------------------
4394        **
4395        **      Critical region: start this job.
4396        **
4397        **----------------------------------------------------
4398        */
4399
4400        /* activate this job.  */
4401        cp->magic               = CCB_MAGIC;
4402
4403        /*
4404        **      insert next CCBs into start queue.
4405        **      2 max at a time is enough to flush the CCB wait queue.
4406        */
4407        cp->auto_sense = 0;
4408        if (lp)
4409                ncr_start_next_ccb(np, lp, 2);
4410        else
4411                ncr_put_start_queue(np, cp);
4412
4413        /* Command is successfully queued.  */
4414
4415        return DID_OK;
4416}
4417
4418
4419/*==========================================================
4420**
4421**
4422**      Insert a CCB into the start queue and wake up the 
4423**      SCRIPTS processor.
4424**
4425**
4426**==========================================================
4427*/
4428
4429static void ncr_start_next_ccb(struct ncb *np, struct lcb *lp, int maxn)
4430{
4431        struct list_head *qp;
4432        struct ccb *cp;
4433
4434        if (lp->held_ccb)
4435                return;
4436
4437        while (maxn-- && lp->queuedccbs < lp->queuedepth) {
4438                qp = ncr_list_pop(&lp->wait_ccbq);
4439                if (!qp)
4440                        break;
4441                ++lp->queuedccbs;
4442                cp = list_entry(qp, struct ccb, link_ccbq);
4443                list_add_tail(qp, &lp->busy_ccbq);
4444                lp->jump_ccb[cp->tag == NO_TAG ? 0 : cp->tag] =
4445                        cpu_to_scr(CCB_PHYS (cp, restart));
4446                ncr_put_start_queue(np, cp);
4447        }
4448}
4449
4450static void ncr_put_start_queue(struct ncb *np, struct ccb *cp)
4451{
4452        u16     qidx;
4453
4454        /*
4455        **      insert into start queue.
4456        */
4457        if (!np->squeueput) np->squeueput = 1;
4458        qidx = np->squeueput + 2;
4459        if (qidx >= MAX_START + MAX_START) qidx = 1;
4460
4461        np->scripth->tryloop [qidx] = cpu_to_scr(NCB_SCRIPT_PHYS (np, idle));
4462        MEMORY_BARRIER();
4463        np->scripth->tryloop [np->squeueput] = cpu_to_scr(CCB_PHYS (cp, start));
4464
4465        np->squeueput = qidx;
4466        ++np->queuedccbs;
4467        cp->queued = 1;
4468
4469        if (DEBUG_FLAGS & DEBUG_QUEUE)
4470                printk ("%s: queuepos=%d.\n", ncr_name (np), np->squeueput);
4471
4472        /*
4473        **      Script processor may be waiting for reselect.
4474        **      Wake it up.
4475        */
4476        MEMORY_BARRIER();
4477        OUTB (nc_istat, SIGP);
4478}
4479
4480
4481static int ncr_reset_scsi_bus(struct ncb *np, int enab_int, int settle_delay)
4482{
4483        u32 term;
4484        int retv = 0;
4485
4486        np->settle_time = jiffies + settle_delay * HZ;
4487
4488        if (bootverbose > 1)
4489                printk("%s: resetting, "
4490                        "command processing suspended for %d seconds\n",
4491                        ncr_name(np), settle_delay);
4492
4493        ncr_chip_reset(np, 100);
4494        udelay(2000);   /* The 895 needs time for the bus mode to settle */
4495        if (enab_int)
4496                OUTW (nc_sien, RST);
4497        /*
4498        **      Enable Tolerant, reset IRQD if present and 
4499        **      properly set IRQ mode, prior to resetting the bus.
4500        */
4501        OUTB (nc_stest3, TE);
4502        OUTB (nc_scntl1, CRST);
4503        udelay(200);
4504
4505        if (!driver_setup.bus_check)
4506                goto out;
4507        /*
4508        **      Check for no terminators or SCSI bus shorts to ground.
4509        **      Read SCSI data bus, data parity bits and control signals.
4510        **      We are expecting RESET to be TRUE and other signals to be 
4511        **      FALSE.
4512        */
4513
4514        term =  INB(nc_sstat0);
4515        term =  ((term & 2) << 7) + ((term & 1) << 17); /* rst sdp0 */
4516        term |= ((INB(nc_sstat2) & 0x01) << 26) |       /* sdp1     */
4517                ((INW(nc_sbdl) & 0xff)   << 9)  |       /* d7-0     */
4518                ((INW(nc_sbdl) & 0xff00) << 10) |       /* d15-8    */
4519                INB(nc_sbcl);   /* req ack bsy sel atn msg cd io    */
4520
4521        if (!(np->features & FE_WIDE))
4522                term &= 0x3ffff;
4523
4524        if (term != (2<<7)) {
4525                printk("%s: suspicious SCSI data while resetting the BUS.\n",
4526                        ncr_name(np));
4527                printk("%s: %sdp0,d7-0,rst,req,ack,bsy,sel,atn,msg,c/d,i/o = "
4528                        "0x%lx, expecting 0x%lx\n",
4529                        ncr_name(np),
4530                        (np->features & FE_WIDE) ? "dp1,d15-8," : "",
4531                        (u_long)term, (u_long)(2<<7));
4532                if (driver_setup.bus_check == 1)
4533                        retv = 1;
4534        }
4535out:
4536        OUTB (nc_scntl1, 0);
4537        return retv;
4538}
4539
4540/*
4541 * Start reset process.
4542 * If reset in progress do nothing.
4543 * The interrupt handler will reinitialize the chip.
4544 * The timeout handler will wait for settle_time before 
4545 * clearing it and so resuming command processing.
4546 */
4547static void ncr_start_reset(struct ncb *np)
4548{
4549        if (!np->settle_time) {
4550                ncr_reset_scsi_bus(np, 1, driver_setup.settle_delay);
4551        }
4552}
4553 
4554/*==========================================================
4555**
4556**
4557**      Reset the SCSI BUS.
4558**      This is called from the generic SCSI driver.
4559**
4560**
4561**==========================================================
4562*/
4563static int ncr_reset_bus (struct ncb *np, struct scsi_cmnd *cmd, int sync_reset)
4564{
4565/*      struct scsi_device        *device    = cmd->device; */
4566        struct ccb *cp;
4567        int found;
4568
4569/*
4570 * Return immediately if reset is in progress.
4571 */
4572        if (np->settle_time) {
4573                return FAILED;
4574        }
4575/*
4576 * Start the reset process.
4577 * The script processor is then assumed to be stopped.
4578 * Commands will now be queued in the waiting list until a settle 
4579 * delay of 2 seconds will be completed.
4580 */
4581        ncr_start_reset(np);
4582/*
4583 * First, look in the wakeup list
4584 */
4585        for (found=0, cp=np->ccb; cp; cp=cp->link_ccb) {
4586                /*
4587                **      look for the ccb of this command.
4588                */
4589                if (cp->host_status == HS_IDLE) continue;
4590                if (cp->cmd == cmd) {
4591                        found = 1;
4592                        break;
4593                }
4594        }
4595/*
4596 * Then, look in the waiting list
4597 */
4598        if (!found && retrieve_from_waiting_list(0, np, cmd))
4599                found = 1;
4600/*
4601 * Wake-up all awaiting commands with DID_RESET.
4602 */
4603        reset_waiting_list(np);
4604/*
4605 * Wake-up all pending commands with HS_RESET -> DID_RESET.
4606 */
4607        ncr_wakeup(np, HS_RESET);
4608/*
4609 * If the involved command was not in a driver queue, and the 
4610 * scsi driver told us reset is synchronous, and the command is not 
4611 * currently in the waiting list, complete it with DID_RESET status,
4612 * in order to keep it alive.
4613 */
4614        if (!found && sync_reset && !retrieve_from_waiting_list(0, np, cmd)) {
4615                cmd->result = ScsiResult(DID_RESET, 0);
4616                ncr_queue_done_cmd(np, cmd);
4617        }
4618
4619        return SUCCESS;
4620}
4621
4622#if 0 /* unused and broken.. */
4623/*==========================================================
4624**
4625**
4626**      Abort an SCSI command.
4627**      This is called from the generic SCSI driver.
4628**
4629**
4630**==========================================================
4631*/
4632static int ncr_abort_command (struct ncb *np, struct scsi_cmnd *cmd)
4633{
4634/*      struct scsi_device        *device    = cmd->device; */
4635        struct ccb *cp;
4636        int found;
4637        int retv;
4638
4639/*
4640 * First, look for the scsi command in the waiting list
4641 */
4642        if (remove_from_waiting_list(np, cmd)) {
4643                cmd->result = ScsiResult(DID_ABORT, 0);
4644                ncr_queue_done_cmd(np, cmd);
4645                return SCSI_ABORT_SUCCESS;
4646        }
4647
4648/*
4649 * Then, look in the wakeup list
4650 */
4651        for (found=0, cp=np->ccb; cp; cp=cp->link_ccb) {
4652                /*
4653                **      look for the ccb of this command.
4654                */
4655                if (cp->host_status == HS_IDLE) continue;
4656                if (cp->cmd == cmd) {
4657                        found = 1;
4658                        break;
4659                }
4660        }
4661
4662        if (!found) {
4663                return SCSI_ABORT_NOT_RUNNING;
4664        }
4665
4666        if (np->settle_time) {
4667                return SCSI_ABORT_SNOOZE;
4668        }
4669
4670        /*
4671        **      If the CCB is active, patch schedule jumps for the 
4672        **      script to abort the command.
4673        */
4674
4675        switch(cp->host_status) {
4676        case HS_BUSY:
4677        case HS_NEGOTIATE:
4678                printk ("%s: abort ccb=%p (cancel)\n", ncr_name (np), cp);
4679                        cp->start.schedule.l_paddr =
4680                                cpu_to_scr(NCB_SCRIPTH_PHYS (np, cancel));
4681                retv = SCSI_ABORT_PENDING;
4682                break;
4683        case HS_DISCONNECT:
4684                cp->restart.schedule.l_paddr =
4685                                cpu_to_scr(NCB_SCRIPTH_PHYS (np, abort));
4686                retv = SCSI_ABORT_PENDING;
4687                break;
4688        default:
4689                retv = SCSI_ABORT_NOT_RUNNING;
4690                break;
4691
4692        }
4693
4694        /*
4695        **      If there are no requests, the script
4696        **      processor will sleep on SEL_WAIT_RESEL.
4697        **      Let's wake it up, since it may have to work.
4698        */
4699        OUTB (nc_istat, SIGP);
4700
4701        return retv;
4702}
4703#endif
4704
4705static void ncr_detach(struct ncb *np)
4706{
4707        struct ccb *cp;
4708        struct tcb *tp;
4709        struct lcb *lp;
4710        int target, lun;
4711        int i;
4712        char inst_name[16];
4713
4714        /* Local copy so we don't access np after freeing it! */
4715        strlcpy(inst_name, ncr_name(np), sizeof(inst_name));
4716
4717        printk("%s: releasing host resources\n", ncr_name(np));
4718
4719/*
4720**      Stop the ncr_timeout process
4721**      Set release_stage to 1 and wait that ncr_timeout() set it to 2.
4722*/
4723
4724#ifdef DEBUG_NCR53C8XX
4725        printk("%s: stopping the timer\n", ncr_name(np));
4726#endif
4727        np->release_stage = 1;
4728        for (i = 50 ; i && np->release_stage != 2 ; i--)
4729                mdelay(100);
4730        if (np->release_stage != 2)
4731                printk("%s: the timer seems to be already stopped\n", ncr_name(np));
4732        else np->release_stage = 2;
4733
4734/*
4735**      Disable chip interrupts
4736*/
4737
4738#ifdef DEBUG_NCR53C8XX
4739        printk("%s: disabling chip interrupts\n", ncr_name(np));
4740#endif
4741        OUTW (nc_sien , 0);
4742        OUTB (nc_dien , 0);
4743
4744        /*
4745        **      Reset NCR chip
4746        **      Restore bios setting for automatic clock detection.
4747        */
4748
4749        printk("%s: resetting chip\n", ncr_name(np));
4750        ncr_chip_reset(np, 100);
4751
4752        OUTB(nc_dmode,  np->sv_dmode);
4753        OUTB(nc_dcntl,  np->sv_dcntl);
4754        OUTB(nc_ctest0, np->sv_ctest0);
4755        OUTB(nc_ctest3, np->sv_ctest3);
4756        OUTB(nc_ctest4, np->sv_ctest4);
4757        OUTB(nc_ctest5, np->sv_ctest5);
4758        OUTB(nc_gpcntl, np->sv_gpcntl);
4759        OUTB(nc_stest2, np->sv_stest2);
4760
4761        ncr_selectclock(np, np->sv_scntl3);
4762
4763        /*
4764        **      Free allocated ccb(s)
4765        */
4766
4767        while ((cp=np->ccb->link_ccb) != NULL) {
4768                np->ccb->link_ccb = cp->link_ccb;
4769                if (cp->host_status) {
4770                printk("%s: shall free an active ccb (host_status=%d)\n",
4771                        ncr_name(np), cp->host_status);
4772                }
4773#ifdef DEBUG_NCR53C8XX
4774        printk("%s: freeing ccb (%lx)\n", ncr_name(np), (u_long) cp);
4775#endif
4776                m_free_dma(cp, sizeof(*cp), "CCB");
4777        }
4778
4779        /* Free allocated tp(s) */
4780
4781        for (target = 0; target < MAX_TARGET ; target++) {
4782                tp=&np->target[target];
4783                for (lun = 0 ; lun < MAX_LUN ; lun++) {
4784                        lp = tp->lp[lun];
4785                        if (lp) {
4786#ifdef DEBUG_NCR53C8XX
4787        printk("%s: freeing lp (%lx)\n", ncr_name(np), (u_long) lp);
4788#endif
4789                                if (lp->jump_ccb != &lp->jump_ccb_0)
4790                                        m_free_dma(lp->jump_ccb,256,"JUMP_CCB");
4791                                m_free_dma(lp, sizeof(*lp), "LCB");
4792                        }
4793                }
4794        }
4795
4796        if (np->scripth0)
4797                m_free_dma(np->scripth0, sizeof(struct scripth), "SCRIPTH");
4798        if (np->script0)
4799                m_free_dma(np->script0, sizeof(struct script), "SCRIPT");
4800        if (np->ccb)
4801                m_free_dma(np->ccb, sizeof(struct ccb), "CCB");
4802        m_free_dma(np, sizeof(struct ncb), "NCB");
4803
4804        printk("%s: host resources successfully released\n", inst_name);
4805}
4806
4807/*==========================================================
4808**
4809**
4810**      Complete execution of a SCSI command.
4811**      Signal completion to the generic SCSI driver.
4812**
4813**
4814**==========================================================
4815*/
4816
4817void ncr_complete (struct ncb *np, struct ccb *cp)
4818{
4819        struct scsi_cmnd *cmd;
4820        struct tcb *tp;
4821        struct lcb *lp;
4822
4823        /*
4824        **      Sanity check
4825        */
4826
4827        if (!cp || cp->magic != CCB_MAGIC || !cp->cmd)
4828                return;
4829
4830        /*
4831        **      Print minimal debug information.
4832        */
4833
4834        if (DEBUG_FLAGS & DEBUG_TINY)
4835                printk ("CCB=%lx STAT=%x/%x\n", (unsigned long)cp,
4836                        cp->host_status,cp->scsi_status);
4837
4838        /*
4839        **      Get command, target and lun pointers.
4840        */
4841
4842        cmd = cp->cmd;
4843        cp->cmd = NULL;
4844        tp = &np->target[cmd->device->id];
4845        lp = tp->lp[cmd->device->lun];
4846
4847        /*
4848        **      We donnot queue more than 1 ccb per target 
4849        **      with negotiation at any time. If this ccb was 
4850        **      used for negotiation, clear this info in the tcb.
4851        */
4852
4853        if (cp == tp->nego_cp)
4854                tp->nego_cp = NULL;
4855
4856        /*
4857        **      If auto-sense performed, change scsi status.
4858        */
4859        if (cp->auto_sense) {
4860                cp->scsi_status = cp->auto_sense;
4861        }
4862
4863        /*
4864        **      If we were recovering from queue full or performing 
4865        **      auto-sense, requeue skipped CCBs to the wait queue.
4866        */
4867
4868        if (lp && lp->held_ccb) {
4869                if (cp == lp->held_ccb) {
4870                        list_splice_init(&lp->skip_ccbq, &lp->wait_ccbq);
4871                        lp->held_ccb = NULL;
4872                }
4873        }
4874
4875        /*
4876        **      Check for parity errors.
4877        */
4878
4879        if (cp->parity_status > 1) {
4880                PRINT_ADDR(cmd, "%d parity error(s).\n",cp->parity_status);
4881        }
4882
4883        /*
4884        **      Check for extended errors.
4885        */
4886
4887        if (cp->xerr_status != XE_OK) {
4888                switch (cp->xerr_status) {
4889                case XE_EXTRA_DATA:
4890                        PRINT_ADDR(cmd, "extraneous data discarded.\n");
4891                        break;
4892                case XE_BAD_PHASE:
4893                        PRINT_ADDR(cmd, "invalid scsi phase (4/5).\n");
4894                        break;
4895                default:
4896                        PRINT_ADDR(cmd, "extended error %d.\n",
4897                                        cp->xerr_status);
4898                        break;
4899                }
4900                if (cp->host_status==HS_COMPLETE)
4901                        cp->host_status = HS_FAIL;
4902        }
4903
4904        /*
4905        **      Print out any error for debugging purpose.
4906        */
4907        if (DEBUG_FLAGS & (DEBUG_RESULT|DEBUG_TINY)) {
4908                if (cp->host_status!=HS_COMPLETE || cp->scsi_status!=S_GOOD) {
4909                        PRINT_ADDR(cmd, "ERROR: cmd=%x host_status=%x "
4910                                        "scsi_status=%x\n", cmd->cmnd[0],
4911                                        cp->host_status, cp->scsi_status);
4912                }
4913        }
4914
4915        /*
4916        **      Check the status.
4917        */
4918        if (   (cp->host_status == HS_COMPLETE)
4919                && (cp->scsi_status == S_GOOD ||
4920                    cp->scsi_status == S_COND_MET)) {
4921                /*
4922                 *      All went well (GOOD status).
4923                 *      CONDITION MET status is returned on 
4924                 *      `Pre-Fetch' or `Search data' success.
4925                 */
4926                cmd->result = ScsiResult(DID_OK, cp->scsi_status);
4927
4928                /*
4929                **      @RESID@
4930                **      Could dig out the correct value for resid,
4931                **      but it would be quite complicated.
4932                */
4933                /* if (cp->phys.header.lastp != cp->phys.header.goalp) */
4934
4935                /*
4936                **      Allocate the lcb if not yet.
4937                */
4938                if (!lp)
4939                        ncr_alloc_lcb (np, cmd->device->id, cmd->device->lun);
4940
4941                tp->bytes     += cp->data_len;
4942                tp->transfers ++;
4943
4944                /*
4945                **      If tags was reduced due to queue full,
4946                **      increase tags if 1000 good status received.
4947                */
4948                if (lp && lp->usetags && lp->numtags < lp->maxtags) {
4949                        ++lp->num_good;
4950                        if (lp->num_good >= 1000) {
4951                                lp->num_good = 0;
4952                                ++lp->numtags;
4953                                ncr_setup_tags (np, cmd->device);
4954                        }
4955                }
4956        } else if ((cp->host_status == HS_COMPLETE)
4957                && (cp->scsi_status == S_CHECK_COND)) {
4958                /*
4959                **   Check condition code
4960                */
4961                cmd->result = ScsiResult(DID_OK, S_CHECK_COND);
4962
4963                /*
4964                **      Copy back sense data to caller's buffer.
4965                */
4966                memcpy(cmd->sense_buffer, cp->sense_buf,
4967                       min_t(size_t, SCSI_SENSE_BUFFERSIZE,
4968                             sizeof(cp->sense_buf)));
4969
4970                if (DEBUG_FLAGS & (DEBUG_RESULT|DEBUG_TINY)) {
4971                        u_char *p = cmd->sense_buffer;
4972                        int i;
4973                        PRINT_ADDR(cmd, "sense data:");
4974                        for (i=0; i<14; i++) printk (" %x", *p++);
4975                        printk (".\n");
4976                }
4977        } else if ((cp->host_status == HS_COMPLETE)
4978                && (cp->scsi_status == S_CONFLICT)) {
4979                /*
4980                **   Reservation Conflict condition code
4981                */
4982                cmd->result = ScsiResult(DID_OK, S_CONFLICT);
4983        
4984        } else if ((cp->host_status == HS_COMPLETE)
4985                && (cp->scsi_status == S_BUSY ||
4986                    cp->scsi_status == S_QUEUE_FULL)) {
4987
4988                /*
4989                **   Target is busy.
4990                */
4991                cmd->result = ScsiResult(DID_OK, cp->scsi_status);
4992
4993        } else if ((cp->host_status == HS_SEL_TIMEOUT)
4994                || (cp->host_status == HS_TIMEOUT)) {
4995
4996                /*
4997                **   No response
4998                */
4999                cmd->result = ScsiResult(DID_TIME_OUT, cp->scsi_status);
5000
5001        } else if (cp->host_status == HS_RESET) {
5002
5003                /*
5004                **   SCSI bus reset
5005                */
5006                cmd->result = ScsiResult(DID_RESET, cp->scsi_status);
5007
5008        } else if (cp->host_status == HS_ABORTED) {
5009
5010                /*
5011                **   Transfer aborted
5012                */
5013                cmd->result = ScsiResult(DID_ABORT, cp->scsi_status);
5014
5015        } else {
5016
5017                /*
5018                **  Other protocol messes
5019                */
5020                PRINT_ADDR(cmd, "COMMAND FAILED (%x %x) @%p.\n",
5021                        cp->host_status, cp->scsi_status, cp);
5022
5023                cmd->result = ScsiResult(DID_ERROR, cp->scsi_status);
5024        }
5025
5026        /*
5027        **      trace output
5028        */
5029
5030        if (tp->usrflag & UF_TRACE) {
5031                u_char * p;
5032                int i;
5033                PRINT_ADDR(cmd, " CMD:");
5034                p = (u_char*) &cmd->cmnd[0];
5035                for (i=0; i<cmd->cmd_len; i++) printk (" %x", *p++);
5036
5037                if (cp->host_status==HS_COMPLETE) {
5038                        switch (cp->scsi_status) {
5039                        case S_GOOD:
5040                                printk ("  GOOD");
5041                                break;
5042                        case S_CHECK_COND:
5043                                printk ("  SENSE:");
5044                                p = (u_char*) &cmd->sense_buffer;
5045                                for (i=0; i<14; i++)
5046                                        printk (" %x", *p++);
5047                                break;
5048                        default:
5049                                printk ("  STAT: %x\n", cp->scsi_status);
5050                                break;
5051                        }
5052                } else printk ("  HOSTERROR: %x", cp->host_status);
5053                printk ("\n");
5054        }
5055
5056        /*
5057        **      Free this ccb
5058        */
5059        ncr_free_ccb (np, cp);
5060
5061        /*
5062        **      requeue awaiting scsi commands for this lun.
5063        */
5064        if (lp && lp->queuedccbs < lp->queuedepth &&
5065            !list_empty(&lp->wait_ccbq))
5066                ncr_start_next_ccb(np, lp, 2);
5067
5068        /*
5069        **      requeue awaiting scsi commands for this controller.
5070        */
5071        if (np->waiting_list)
5072                requeue_waiting_list(np);
5073
5074        /*
5075        **      signal completion to generic driver.
5076        */
5077        ncr_queue_done_cmd(np, cmd);
5078}
5079
5080/*==========================================================
5081**
5082**
5083**      Signal all (or one) control block done.
5084**
5085**
5086**==========================================================
5087*/
5088
5089/*
5090**      This CCB has been skipped by the NCR.
5091**      Queue it in the corresponding unit queue.
5092*/
5093static void ncr_ccb_skipped(struct ncb *np, struct ccb *cp)
5094{
5095        struct tcb *tp = &np->target[cp->target];
5096        struct lcb *lp = tp->lp[cp->lun];
5097
5098        if (lp && cp != np->ccb) {
5099                cp->host_status &= ~HS_SKIPMASK;
5100                cp->start.schedule.l_paddr = 
5101                        cpu_to_scr(NCB_SCRIPT_PHYS (np, select));
5102                list_move_tail(&cp->link_ccbq, &lp->skip_ccbq);
5103                if (cp->queued) {
5104                        --lp->queuedccbs;
5105                }
5106        }
5107        if (cp->queued) {
5108                --np->queuedccbs;
5109                cp->queued = 0;
5110        }
5111}
5112
5113/*
5114**      The NCR has completed CCBs.
5115**      Look at the DONE QUEUE if enabled, otherwise scan all CCBs
5116*/
5117void ncr_wakeup_done (struct ncb *np)
5118{
5119        struct ccb *cp;
5120#ifdef SCSI_NCR_CCB_DONE_SUPPORT
5121        int i, j;
5122
5123        i = np->ccb_done_ic;
5124        while (1) {
5125                j = i+1;
5126                if (j >= MAX_DONE)
5127                        j = 0;
5128
5129                cp = np->ccb_done[j];
5130                if (!CCB_DONE_VALID(cp))
5131                        break;
5132
5133                np->ccb_done[j] = (struct ccb *)CCB_DONE_EMPTY;
5134                np->scripth->done_queue[5*j + 4] =
5135                                cpu_to_scr(NCB_SCRIPT_PHYS (np, done_plug));
5136                MEMORY_BARRIER();
5137                np->scripth->done_queue[5*i + 4] =
5138                                cpu_to_scr(NCB_SCRIPT_PHYS (np, done_end));
5139
5140                if (cp->host_status & HS_DONEMASK)
5141                        ncr_complete (np, cp);
5142                else if (cp->host_status & HS_SKIPMASK)
5143                        ncr_ccb_skipped (np, cp);
5144
5145                i = j;
5146        }
5147        np->ccb_done_ic = i;
5148#else
5149        cp = np->ccb;
5150        while (cp) {
5151                if (cp->host_status & HS_DONEMASK)
5152                        ncr_complete (np, cp);
5153                else if (cp->host_status & HS_SKIPMASK)
5154                        ncr_ccb_skipped (np, cp);
5155                cp = cp->link_ccb;
5156        }
5157#endif
5158}
5159
5160/*
5161**      Complete all active CCBs.
5162*/
5163void ncr_wakeup (struct ncb *np, u_long code)
5164{
5165        struct ccb *cp = np->ccb;
5166
5167        while (cp) {
5168                if (cp->host_status != HS_IDLE) {
5169                        cp->host_status = code;
5170                        ncr_complete (np, cp);
5171                }
5172                cp = cp->link_ccb;
5173        }
5174}
5175
5176/*
5177** Reset ncr chip.
5178*/
5179
5180/* Some initialisation must be done immediately following reset, for 53c720,
5181 * at least.  EA (dcntl bit 5) isn't set here as it is set once only in
5182 * the _detect function.
5183 */
5184static void ncr_chip_reset(struct ncb *np, int delay)
5185{
5186        OUTB (nc_istat,  SRST);
5187        udelay(delay);
5188        OUTB (nc_istat,  0   );
5189
5190        if (np->features & FE_EHP)
5191                OUTB (nc_ctest0, EHP);
5192        if (np->features & FE_MUX)
5193                OUTB (nc_ctest4, MUX);
5194}
5195
5196
5197/*==========================================================
5198**
5199**
5200**      Start NCR chip.
5201**
5202**
5203**==========================================================
5204*/
5205
5206void ncr_init (struct ncb *np, int reset, char * msg, u_long code)
5207{
5208        int     i;
5209
5210        /*
5211        **      Reset chip if asked, otherwise just clear fifos.
5212        */
5213
5214        if (reset) {
5215                OUTB (nc_istat,  SRST);
5216                udelay(100);
5217        }
5218        else {
5219                OUTB (nc_stest3, TE|CSF);
5220                OUTONB (nc_ctest3, CLF);
5221        }
5222 
5223        /*
5224        **      Message.
5225        */
5226
5227        if (msg) printk (KERN_INFO "%s: restart (%s).\n", ncr_name (np), msg);
5228
5229        /*
5230        **      Clear Start Queue
5231        */
5232        np->queuedepth = MAX_START - 1; /* 1 entry needed as end marker */
5233        for (i = 1; i < MAX_START + MAX_START; i += 2)
5234                np->scripth0->tryloop[i] =
5235                                cpu_to_scr(NCB_SCRIPT_PHYS (np, idle));
5236
5237        /*
5238        **      Start at first entry.
5239        */
5240        np->squeueput = 0;
5241        np->script0->startpos[0] = cpu_to_scr(NCB_SCRIPTH_PHYS (np, tryloop));
5242
5243#ifdef SCSI_NCR_CCB_DONE_SUPPORT
5244        /*
5245        **      Clear Done Queue
5246        */
5247        for (i = 0; i < MAX_DONE; i++) {
5248                np->ccb_done[i] = (struct ccb *)CCB_DONE_EMPTY;
5249                np->scripth0->done_queue[5*i + 4] =
5250                        cpu_to_scr(NCB_SCRIPT_PHYS (np, done_end));
5251        }
5252#endif
5253
5254        /*
5255        **      Start at first entry.
5256        */
5257        np->script0->done_pos[0] = cpu_to_scr(NCB_SCRIPTH_PHYS (np,done_queue));
5258        np->ccb_done_ic = MAX_DONE-1;
5259        np->scripth0->done_queue[5*(MAX_DONE-1) + 4] =
5260                        cpu_to_scr(NCB_SCRIPT_PHYS (np, done_plug));
5261
5262        /*
5263        **      Wakeup all pending jobs.
5264        */
5265        ncr_wakeup (np, code);
5266
5267        /*
5268        **      Init chip.
5269        */
5270
5271        /*
5272        ** Remove reset; big delay because the 895 needs time for the
5273        ** bus mode to settle
5274        */
5275        ncr_chip_reset(np, 2000);
5276
5277        OUTB (nc_scntl0, np->rv_scntl0 | 0xc0);
5278                                        /*  full arb., ena parity, par->ATN  */
5279        OUTB (nc_scntl1, 0x00);         /*  odd parity, and remove CRST!! */
5280
5281        ncr_selectclock(np, np->rv_scntl3);     /* Select SCSI clock */
5282
5283        OUTB (nc_scid  , RRE|np->myaddr);       /* Adapter SCSI address */
5284        OUTW (nc_respid, 1ul<<np->myaddr);      /* Id to respond to */
5285        OUTB (nc_istat , SIGP   );              /*  Signal Process */
5286        OUTB (nc_dmode , np->rv_dmode);         /* Burst length, dma mode */
5287        OUTB (nc_ctest5, np->rv_ctest5);        /* Large fifo + large burst */
5288
5289        OUTB (nc_dcntl , NOCOM|np->rv_dcntl);   /* Protect SFBR */
5290        OUTB (nc_ctest0, np->rv_ctest0);        /* 720: CDIS and EHP */
5291        OUTB (nc_ctest3, np->rv_ctest3);        /* Write and invalidate */
5292        OUTB (nc_ctest4, np->rv_ctest4);        /* Master parity checking */
5293
5294        OUTB (nc_stest2, EXT|np->rv_stest2);    /* Extended Sreq/Sack filtering */
5295        OUTB (nc_stest3, TE);                   /* TolerANT enable */
5296        OUTB (nc_stime0, 0x0c   );              /* HTH disabled  STO 0.25 sec */
5297
5298        /*
5299        **      Disable disconnects.
5300        */
5301
5302        np->disc = 0;
5303
5304        /*
5305        **    Enable GPIO0 pin for writing if LED support.
5306        */
5307
5308        if (np->features & FE_LED0) {
5309                OUTOFFB (nc_gpcntl, 0x01);
5310        }
5311
5312        /*
5313        **      enable ints
5314        */
5315
5316        OUTW (nc_sien , STO|HTH|MA|SGE|UDC|RST|PAR);
5317        OUTB (nc_dien , MDPE|BF|ABRT|SSI|SIR|IID);
5318
5319        /*
5320        **      Fill in target structure.
5321        **      Reinitialize usrsync.
5322        **      Reinitialize usrwide.
5323        **      Prepare sync negotiation according to actual SCSI bus mode.
5324        */
5325
5326        for (i=0;i<MAX_TARGET;i++) {
5327                struct tcb *tp = &np->target[i];
5328
5329                tp->sval    = 0;
5330                tp->wval    = np->rv_scntl3;
5331
5332                if (tp->usrsync != 255) {
5333                        if (tp->usrsync <= np->maxsync) {
5334                                if (tp->usrsync < np->minsync) {
5335                                        tp->usrsync = np->minsync;
5336                                }
5337                        }
5338                        else
5339                                tp->usrsync = 255;
5340                }
5341
5342                if (tp->usrwide > np->maxwide)
5343                        tp->usrwide = np->maxwide;
5344
5345        }
5346
5347        /*
5348        **    Start script processor.
5349        */
5350        if (np->paddr2) {
5351                if (bootverbose)
5352                        printk ("%s: Downloading SCSI SCRIPTS.\n",
5353                                ncr_name(np));
5354                OUTL (nc_scratcha, vtobus(np->script0));
5355                OUTL_DSP (NCB_SCRIPTH_PHYS (np, start_ram));
5356        }
5357        else
5358                OUTL_DSP (NCB_SCRIPT_PHYS (np, start));
5359}
5360
5361/*==========================================================
5362**
5363**      Prepare the negotiation values for wide and
5364**      synchronous transfers.
5365**
5366**==========================================================
5367*/
5368
5369static void ncr_negotiate (struct ncb* np, struct tcb* tp)
5370{
5371        /*
5372        **      minsync unit is 4ns !
5373        */
5374
5375        u_long minsync = tp->usrsync;
5376
5377        /*
5378        **      SCSI bus mode limit
5379        */
5380
5381        if (np->scsi_mode && np->scsi_mode == SMODE_SE) {
5382                if (minsync < 12) minsync = 12;
5383        }
5384
5385        /*
5386        **      our limit ..
5387        */
5388
5389        if (minsync < np->minsync)
5390                minsync = np->minsync;
5391
5392        /*
5393        **      divider limit
5394        */
5395
5396        if (minsync > np->maxsync)
5397                minsync = 255;
5398
5399        if (tp->maxoffs > np->maxoffs)
5400                tp->maxoffs = np->maxoffs;
5401
5402        tp->minsync = minsync;
5403        tp->maxoffs = (minsync<255 ? tp->maxoffs : 0);
5404
5405        /*
5406        **      period=0: has to negotiate sync transfer
5407        */
5408
5409        tp->period=0;
5410
5411        /*
5412        **      widedone=0: has to negotiate wide transfer
5413        */
5414        tp->widedone=0;
5415}
5416
5417/*==========================================================
5418**
5419**      Get clock factor and sync divisor for a given 
5420**      synchronous factor period.
5421**      Returns the clock factor (in sxfer) and scntl3 
5422**      synchronous divisor field.
5423**
5424**==========================================================
5425*/
5426
5427static void ncr_getsync(struct ncb *np, u_char sfac, u_char *fakp, u_char *scntl3p)
5428{
5429        u_long  clk = np->clock_khz;    /* SCSI clock frequency in kHz  */
5430        int     div = np->clock_divn;   /* Number of divisors supported */
5431        u_long  fak;                    /* Sync factor in sxfer         */
5432        u_long  per;                    /* Period in tenths of ns       */
5433        u_long  kpc;                    /* (per * clk)                  */
5434
5435        /*
5436        **      Compute the synchronous period in tenths of nano-seconds
5437        */
5438        if      (sfac <= 10)    per = 250;
5439        else if (sfac == 11)    per = 303;
5440        else if (sfac == 12)    per = 500;
5441        else                    per = 40 * sfac;
5442
5443        /*
5444        **      Look for the greatest clock divisor that allows an 
5445        **      input speed faster than the period.
5446        */
5447        kpc = per * clk;
5448        while (--div > 0)
5449                if (kpc >= (div_10M[div] << 2)) break;
5450
5451        /*
5452        **      Calculate the lowest clock factor that allows an output 
5453        **      speed not faster than the period.
5454        */
5455        fak = (kpc - 1) / div_10M[div] + 1;
5456
5457#if 0   /* This optimization does not seem very useful */
5458
5459        per = (fak * div_10M[div]) / clk;
5460
5461        /*
5462        **      Why not to try the immediate lower divisor and to choose 
5463        **      the one that allows the fastest output speed ?
5464        **      We don't want input speed too much greater than output speed.
5465        */
5466        if (div >= 1 && fak < 8) {
5467                u_long fak2, per2;
5468                fak2 = (kpc - 1) / div_10M[div-1] + 1;
5469                per2 = (fak2 * div_10M[div-1]) / clk;
5470                if (per2 < per && fak2 <= 8) {
5471                        fak = fak2;
5472                        per = per2;
5473                        --div;
5474                }
5475        }
5476#endif
5477
5478        if (fak < 4) fak = 4;   /* Should never happen, too bad ... */
5479
5480        /*
5481        **      Compute and return sync parameters for the ncr
5482        */
5483        *fakp           = fak - 4;
5484        *scntl3p        = ((div+1) << 4) + (sfac < 25 ? 0x80 : 0);
5485}
5486
5487
5488/*==========================================================
5489**
5490**      Set actual values, sync status and patch all ccbs of 
5491**      a target according to new sync/wide agreement.
5492**
5493**==========================================================
5494*/
5495
5496static void ncr_set_sync_wide_status (struct ncb *np, u_char target)
5497{
5498        struct ccb *cp;
5499        struct tcb *tp = &np->target[target];
5500
5501        /*
5502        **      set actual value and sync_status
5503        */
5504        OUTB (nc_sxfer, tp->sval);
5505        np->sync_st = tp->sval;
5506        OUTB (nc_scntl3, tp->wval);
5507        np->wide_st = tp->wval;
5508
5509        /*
5510        **      patch ALL ccbs of this target.
5511        */
5512        for (cp = np->ccb; cp; cp = cp->link_ccb) {
5513                if (!cp->cmd) continue;
5514                if (scmd_id(cp->cmd) != target) continue;
5515#if 0
5516                cp->sync_status = tp->sval;
5517                cp->wide_status = tp->wval;
5518#endif
5519                cp->phys.select.sel_scntl3 = tp->wval;
5520                cp->phys.select.sel_sxfer  = tp->sval;
5521        }
5522}
5523
5524/*==========================================================
5525**
5526**      Switch sync mode for current job and it's target
5527**
5528**==========================================================
5529*/
5530
5531static void ncr_setsync (struct ncb *np, struct ccb *cp, u_char scntl3, u_char sxfer)
5532{
5533        struct scsi_cmnd *cmd = cp->cmd;
5534        struct tcb *tp;
5535        u_char target = INB (nc_sdid) & 0x0f;
5536        u_char idiv;
5537
5538        BUG_ON(target != (scmd_id(cmd) & 0xf));
5539
5540        tp = &np->target[target];
5541
5542        if (!scntl3 || !(sxfer & 0x1f))
5543                scntl3 = np->rv_scntl3;
5544        scntl3 = (scntl3 & 0xf0) | (tp->wval & EWS) | (np->rv_scntl3 & 0x07);
5545
5546        /*
5547        **      Deduce the value of controller sync period from scntl3.
5548        **      period is in tenths of nano-seconds.
5549        */
5550
5551        idiv = ((scntl3 >> 4) & 0x7);
5552        if ((sxfer & 0x1f) && idiv)
5553                tp->period = (((sxfer>>5)+4)*div_10M[idiv-1])/np->clock_khz;
5554        else
5555                tp->period = 0xffff;
5556
5557        /* Stop there if sync parameters are unchanged */
5558        if (tp->sval == sxfer && tp->wval == scntl3)
5559                return;
5560        tp->sval = sxfer;
5561        tp->wval = scntl3;
5562
5563        if (sxfer & 0x01f) {
5564                /* Disable extended Sreq/Sack filtering */
5565                if (tp->period <= 2000)
5566                        OUTOFFB(nc_stest2, EXT);
5567        }
5568 
5569        spi_display_xfer_agreement(tp->starget);
5570
5571        /*
5572        **      set actual value and sync_status
5573        **      patch ALL ccbs of this target.
5574        */
5575        ncr_set_sync_wide_status(np, target);
5576}
5577
5578/*==========================================================
5579**
5580**      Switch wide mode for current job and it's target
5581**      SCSI specs say: a SCSI device that accepts a WDTR 
5582**      message shall reset the synchronous agreement to 
5583**      asynchronous mode.
5584**
5585**==========================================================
5586*/
5587
5588static void ncr_setwide (struct ncb *np, struct ccb *cp, u_char wide, u_char ack)
5589{
5590        struct scsi_cmnd *cmd = cp->cmd;
5591        u16 target = INB (nc_sdid) & 0x0f;
5592        struct tcb *tp;
5593        u_char  scntl3;
5594        u_char  sxfer;
5595
5596        BUG_ON(target != (scmd_id(cmd) & 0xf));
5597
5598        tp = &np->target[target];
5599        tp->widedone  =  wide+1;
5600        scntl3 = (tp->wval & (~EWS)) | (wide ? EWS : 0);
5601
5602        sxfer = ack ? 0 : tp->sval;
5603
5604        /*
5605        **       Stop there if sync/wide parameters are unchanged
5606        */
5607        if (tp->sval == sxfer && tp->wval == scntl3) return;
5608        tp->sval = sxfer;
5609        tp->wval = scntl3;
5610
5611        /*
5612        **      Bells and whistles   ;-)
5613        */
5614        if (bootverbose >= 2) {
5615                dev_info(&cmd->device->sdev_target->dev, "WIDE SCSI %sabled.\n",
5616                                (scntl3 & EWS) ? "en" : "dis");
5617        }
5618
5619        /*
5620        **      set actual value and sync_status
5621        **      patch ALL ccbs of this target.
5622        */
5623        ncr_set_sync_wide_status(np, target);
5624}
5625
5626/*==========================================================
5627**
5628**      Switch tagged mode for a target.
5629**
5630**==========================================================
5631*/
5632
5633static void ncr_setup_tags (struct ncb *np, struct scsi_device *sdev)
5634{
5635        unsigned char tn = sdev->id, ln = sdev->lun;
5636        struct tcb *tp = &np->target[tn];
5637        struct lcb *lp = tp->lp[ln];
5638        u_char   reqtags, maxdepth;
5639
5640        /*
5641        **      Just in case ...
5642        */
5643        if ((!tp) || (!lp) || !sdev)
5644                return;
5645
5646        /*
5647        **      If SCSI device queue depth is not yet set, leave here.
5648        */
5649        if (!lp->scdev_depth)
5650                return;
5651
5652        /*
5653        **      Donnot allow more tags than the SCSI driver can queue 
5654        **      for this device.
5655        **      Donnot allow more tags than we can handle.
5656        */
5657        maxdepth = lp->scdev_depth;
5658        if (maxdepth > lp->maxnxs)      maxdepth    = lp->maxnxs;
5659        if (lp->maxtags > maxdepth)     lp->maxtags = maxdepth;
5660        if (lp->numtags > maxdepth)     lp->numtags = maxdepth;
5661
5662        /*
5663        **      only devices conformant to ANSI Version >= 2
5664        **      only devices capable of tagged commands
5665        **      only if enabled by user ..
5666        */
5667        if (sdev->tagged_supported && lp->numtags > 1) {
5668                reqtags = lp->numtags;
5669        } else {
5670                reqtags = 1;
5671        }
5672
5673        /*
5674        **      Update max number of tags
5675        */
5676        lp->numtags = reqtags;
5677        if (lp->numtags > lp->maxtags)
5678                lp->maxtags = lp->numtags;
5679
5680        /*
5681        **      If we want to switch tag mode, we must wait 
5682        **      for no CCB to be active.
5683        */
5684        if      (reqtags > 1 && lp->usetags) {   /* Stay in tagged mode    */
5685                if (lp->queuedepth == reqtags)   /* Already announced      */
5686                        return;
5687                lp->queuedepth  = reqtags;
5688        }
5689        else if (reqtags <= 1 && !lp->usetags) { /* Stay in untagged mode  */
5690                lp->queuedepth  = reqtags;
5691                return;
5692        }
5693        else {                                   /* Want to switch tag mode */
5694                if (lp->busyccbs)                /* If not yet safe, return */
5695                        return;
5696                lp->queuedepth  = reqtags;
5697                lp->usetags     = reqtags > 1 ? 1 : 0;
5698        }
5699
5700        /*
5701        **      Patch the lun mini-script, according to tag mode.
5702        */
5703        lp->jump_tag.l_paddr = lp->usetags?
5704                        cpu_to_scr(NCB_SCRIPT_PHYS(np, resel_tag)) :
5705                        cpu_to_scr(NCB_SCRIPT_PHYS(np, resel_notag));
5706
5707        /*
5708        **      Announce change to user.
5709        */
5710        if (bootverbose) {
5711                if (lp->usetags) {
5712                        dev_info(&sdev->sdev_gendev,
5713                                "tagged command queue depth set to %d\n",
5714                                reqtags);
5715                } else {
5716                        dev_info(&sdev->sdev_gendev,
5717                                        "tagged command queueing disabled\n");
5718                }
5719        }
5720}
5721
5722/*==========================================================
5723**
5724**
5725**      ncr timeout handler.
5726**
5727**
5728**==========================================================
5729**
5730**      Misused to keep the driver running when
5731**      interrupts are not configured correctly.
5732**
5733**----------------------------------------------------------
5734*/
5735
5736static void ncr_timeout (struct ncb *np)
5737{
5738        u_long  thistime = jiffies;
5739
5740        /*
5741        **      If release process in progress, let's go
5742        **      Set the release stage from 1 to 2 to synchronize
5743        **      with the release process.
5744        */
5745
5746        if (np->release_stage) {
5747                if (np->release_stage == 1) np->release_stage = 2;
5748                return;
5749        }
5750
5751        np->timer.expires = jiffies + SCSI_NCR_TIMER_INTERVAL;
5752        add_timer(&np->timer);
5753
5754        /*
5755        **      If we are resetting the ncr, wait for settle_time before 
5756        **      clearing it. Then command processing will be resumed.
5757        */
5758        if (np->settle_time) {
5759                if (np->settle_time <= thistime) {
5760                        if (bootverbose > 1)
5761                                printk("%s: command processing resumed\n", ncr_name(np));
5762                        np->settle_time = 0;
5763                        np->disc        = 1;
5764                        requeue_waiting_list(np);
5765                }
5766                return;
5767        }
5768
5769        /*
5770        **      Since the generic scsi driver only allows us 0.5 second 
5771        **      to perform abort of a command, we must look at ccbs about 
5772        **      every 0.25 second.
5773        */
5774        if (np->lasttime + 4*HZ < thistime) {
5775                /*
5776                **      block ncr interrupts
5777                */
5778                np->lasttime = thistime;
5779        }
5780
5781#ifdef SCSI_NCR_BROKEN_INTR
5782        if (INB(nc_istat) & (INTF|SIP|DIP)) {
5783
5784                /*
5785                **      Process pending interrupts.
5786                */
5787                if (DEBUG_FLAGS & DEBUG_TINY) printk ("{");
5788                ncr_exception (np);
5789                if (DEBUG_FLAGS & DEBUG_TINY) printk ("}");
5790        }
5791#endif /* SCSI_NCR_BROKEN_INTR */
5792}
5793
5794/*==========================================================
5795**
5796**      log message for real hard errors
5797**
5798**      "ncr0 targ 0?: ERROR (ds:si) (so-si-sd) (sxfer/scntl3) @ name (dsp:dbc)."
5799**      "             reg: r0 r1 r2 r3 r4 r5 r6 ..... rf."
5800**
5801**      exception register:
5802**              ds:     dstat
5803**              si:     sist
5804**
5805**      SCSI bus lines:
5806**              so:     control lines as driver by NCR.
5807**              si:     control lines as seen by NCR.
5808**              sd:     scsi data lines as seen by NCR.
5809**
5810**      wide/fastmode:
5811**              sxfer:  (see the manual)
5812**              scntl3: (see the manual)
5813**
5814**      current script command:
5815**              dsp:    script address (relative to start of script).
5816**              dbc:    first word of script command.
5817**
5818**      First 16 register of the chip:
5819**              r0..rf
5820**
5821**==========================================================
5822*/
5823
5824static void ncr_log_hard_error(struct ncb *np, u16 sist, u_char dstat)
5825{
5826        u32     dsp;
5827        int     script_ofs;
5828        int     script_size;
5829        char    *script_name;
5830        u_char  *script_base;
5831        int     i;
5832
5833        dsp     = INL (nc_dsp);
5834
5835        if (dsp > np->p_script && dsp <= np->p_script + sizeof(struct script)) {
5836                script_ofs      = dsp - np->p_script;
5837                script_size     = sizeof(struct script);
5838                script_base     = (u_char *) np->script0;
5839                script_name     = "script";
5840        }
5841        else if (np->p_scripth < dsp && 
5842                 dsp <= np->p_scripth + sizeof(struct scripth)) {
5843                script_ofs      = dsp - np->p_scripth;
5844                script_size     = sizeof(struct scripth);
5845                script_base     = (u_char *) np->scripth0;
5846                script_name     = "scripth";
5847        } else {
5848                script_ofs      = dsp;
5849                script_size     = 0;
5850                script_base     = NULL;
5851                script_name     = "mem";
5852        }
5853
5854        printk ("%s:%d: ERROR (%x:%x) (%x-%x-%x) (%x/%x) @ (%s %x:%08x).\n",
5855                ncr_name (np), (unsigned)INB (nc_sdid)&0x0f, dstat, sist,
5856                (unsigned)INB (nc_socl), (unsigned)INB (nc_sbcl), (unsigned)INB (nc_sbdl),
5857                (unsigned)INB (nc_sxfer),(unsigned)INB (nc_scntl3), script_name, script_ofs,
5858                (unsigned)INL (nc_dbc));
5859
5860        if (((script_ofs & 3) == 0) &&
5861            (unsigned)script_ofs < script_size) {
5862                printk ("%s: script cmd = %08x\n", ncr_name(np),
5863                        scr_to_cpu((int) *(ncrcmd *)(script_base + script_ofs)));
5864        }
5865
5866        printk ("%s: regdump:", ncr_name(np));
5867        for (i=0; i<16;i++)
5868            printk (" %02x", (unsigned)INB_OFF(i));
5869        printk (".\n");
5870}
5871
5872/*============================================================
5873**
5874**      ncr chip exception handler.
5875**
5876**============================================================
5877**
5878**      In normal cases, interrupt conditions occur one at a 
5879**      time. The ncr is able to stack in some extra registers 
5880**      other interrupts that will occur after the first one.
5881**      But, several interrupts may occur at the same time.
5882**
5883**      We probably should only try to deal with the normal 
5884**      case, but it seems that multiple interrupts occur in 
5885**      some cases that are not abnormal at all.
5886**
5887**      The most frequent interrupt condition is Phase Mismatch.
5888**      We should want to service this interrupt quickly.
5889**      A SCSI parity error may be delivered at the same time.
5890**      The SIR interrupt is not very frequent in this driver, 
5891**      since the INTFLY is likely used for command completion 
5892**      signaling.
5893**      The Selection Timeout interrupt may be triggered with 
5894**      IID and/or UDC.
5895**      The SBMC interrupt (SCSI Bus Mode Change) may probably 
5896**      occur at any time.
5897**
5898**      This handler try to deal as cleverly as possible with all
5899**      the above.
5900**
5901**============================================================
5902*/
5903
5904void ncr_exception (struct ncb *np)
5905{
5906        u_char  istat, dstat;
5907        u16     sist;
5908        int     i;
5909
5910        /*
5911        **      interrupt on the fly ?
5912        **      Since the global header may be copied back to a CCB 
5913        **      using a posted PCI memory write, the last operation on 
5914        **      the istat register is a READ in order to flush posted 
5915        **      PCI write commands.
5916        */
5917        istat = INB (nc_istat);
5918        if (istat & INTF) {
5919                OUTB (nc_istat, (istat & SIGP) | INTF);
5920                istat = INB (nc_istat);
5921                if (DEBUG_FLAGS & DEBUG_TINY) printk ("F ");
5922                ncr_wakeup_done (np);
5923        }
5924
5925        if (!(istat & (SIP|DIP)))
5926                return;
5927
5928        if (istat & CABRT)
5929                OUTB (nc_istat, CABRT);
5930
5931        /*
5932        **      Steinbach's Guideline for Systems Programming:
5933        **      Never test for an error condition you don't know how to handle.
5934        */
5935
5936        sist  = (istat & SIP) ? INW (nc_sist)  : 0;
5937        dstat = (istat & DIP) ? INB (nc_dstat) : 0;
5938
5939        if (DEBUG_FLAGS & DEBUG_TINY)
5940                printk ("<%d|%x:%x|%x:%x>",
5941                        (int)INB(nc_scr0),
5942                        dstat,sist,
5943                        (unsigned)INL(nc_dsp),
5944                        (unsigned)INL(nc_dbc));
5945
5946        /*========================================================
5947        **      First, interrupts we want to service cleanly.
5948        **
5949        **      Phase mismatch is the most frequent interrupt, and 
5950        **      so we have to service it as quickly and as cleanly 
5951        **      as possible.
5952        **      Programmed interrupts are rarely used in this driver,
5953        **      but we must handle them cleanly anyway.
5954        **      We try to deal with PAR and SBMC combined with 
5955        **      some other interrupt(s).
5956        **=========================================================
5957        */
5958
5959        if (!(sist  & (STO|GEN|HTH|SGE|UDC|RST)) &&
5960            !(dstat & (MDPE|BF|ABRT|IID))) {
5961                if ((sist & SBMC) && ncr_int_sbmc (np))
5962                        return;
5963                if ((sist & PAR)  && ncr_int_par  (np))
5964                        return;
5965                if (sist & MA) {
5966                        ncr_int_ma (np);
5967                        return;
5968                }
5969                if (dstat & SIR) {
5970                        ncr_int_sir (np);
5971                        return;
5972                }
5973                /*
5974                **  DEL 397 - 53C875 Rev 3 - Part Number 609-0392410 - ITEM 2.
5975                */
5976                if (!(sist & (SBMC|PAR)) && !(dstat & SSI)) {
5977                        printk( "%s: unknown interrupt(s) ignored, "
5978                                "ISTAT=%x DSTAT=%x SIST=%x\n",
5979                                ncr_name(np), istat, dstat, sist);
5980                        return;
5981                }
5982                OUTONB_STD ();
5983                return;
5984        }
5985
5986        /*========================================================
5987        **      Now, interrupts that need some fixing up.
5988        **      Order and multiple interrupts is so less important.
5989        **
5990        **      If SRST has been asserted, we just reset the chip.
5991        **
5992        **      Selection is intirely handled by the chip. If the 
5993        **      chip says STO, we trust it. Seems some other 
5994        **      interrupts may occur at the same time (UDC, IID), so 
5995        **      we ignore them. In any case we do enough fix-up 
5996        **      in the service routine.
5997        **      We just exclude some fatal dma errors.
5998        **=========================================================
5999        */
6000
6001        if (sist & RST) {
6002                ncr_init (np, 1, bootverbose ? "scsi reset" : NULL, HS_RESET);
6003                return;
6004        }
6005
6006        if ((sist & STO) &&
6007                !(dstat & (MDPE|BF|ABRT))) {
6008        /*
6009        **      DEL 397 - 53C875 Rev 3 - Part Number 609-0392410 - ITEM 1.
6010        */
6011                OUTONB (nc_ctest3, CLF);
6012
6013                ncr_int_sto (np);
6014                return;
6015        }
6016
6017        /*=========================================================
6018        **      Now, interrupts we are not able to recover cleanly.
6019        **      (At least for the moment).
6020        **
6021        **      Do the register dump.
6022        **      Log message for real hard errors.
6023        **      Clear all fifos.
6024        **      For MDPE, BF, ABORT, IID, SGE and HTH we reset the 
6025        **      BUS and the chip.
6026        **      We are more soft for UDC.
6027        **=========================================================
6028        */
6029
6030        if (time_after(jiffies, np->regtime)) {
6031                np->regtime = jiffies + 10*HZ;
6032                for (i = 0; i<sizeof(np->regdump); i++)
6033                        ((char*)&np->regdump)[i] = INB_OFF(i);
6034                np->regdump.nc_dstat = dstat;
6035                np->regdump.nc_sist  = sist;
6036        }
6037
6038        ncr_log_hard_error(np, sist, dstat);
6039
6040        printk ("%s: have to clear fifos.\n", ncr_name (np));
6041        OUTB (nc_stest3, TE|CSF);
6042        OUTONB (nc_ctest3, CLF);
6043
6044        if ((sist & (SGE)) ||
6045                (dstat & (MDPE|BF|ABRT|IID))) {
6046                ncr_start_reset(np);
6047                return;
6048        }
6049
6050        if (sist & HTH) {
6051                printk ("%s: handshake timeout\n", ncr_name(np));
6052                ncr_start_reset(np);
6053                return;
6054        }
6055
6056        if (sist & UDC) {
6057                printk ("%s: unexpected disconnect\n", ncr_name(np));
6058                OUTB (HS_PRT, HS_UNEXPECTED);
6059                OUTL_DSP (NCB_SCRIPT_PHYS (np, cleanup));
6060                return;
6061        }
6062
6063        /*=========================================================
6064        **      We just miss the cause of the interrupt. :(
6065        **      Print a message. The timeout will do the real work.
6066        **=========================================================
6067        */
6068        printk ("%s: unknown interrupt\n", ncr_name(np));
6069}
6070
6071/*==========================================================
6072**
6073**      ncr chip exception handler for selection timeout
6074**
6075**==========================================================
6076**
6077**      There seems to be a bug in the 53c810.
6078**      Although a STO-Interrupt is pending,
6079**      it continues executing script commands.
6080**      But it will fail and interrupt (IID) on
6081**      the next instruction where it's looking
6082**      for a valid phase.
6083**
6084**----------------------------------------------------------
6085*/
6086
6087void ncr_int_sto (struct ncb *np)
6088{
6089        u_long dsa;
6090        struct ccb *cp;
6091        if (DEBUG_FLAGS & DEBUG_TINY) printk ("T");
6092
6093        /*
6094        **      look for ccb and set the status.
6095        */
6096
6097        dsa = INL (nc_dsa);
6098        cp = np->ccb;
6099        while (cp && (CCB_PHYS (cp, phys) != dsa))
6100                cp = cp->link_ccb;
6101
6102        if (cp) {
6103                cp-> host_status = HS_SEL_TIMEOUT;
6104                ncr_complete (np, cp);
6105        }
6106
6107        /*
6108        **      repair start queue and jump to start point.
6109        */
6110
6111        OUTL_DSP (NCB_SCRIPTH_PHYS (np, sto_restart));
6112        return;
6113}
6114
6115/*==========================================================
6116**
6117**      ncr chip exception handler for SCSI bus mode change
6118**
6119**==========================================================
6120**
6121**      spi2-r12 11.2.3 says a transceiver mode change must 
6122**      generate a reset event and a device that detects a reset 
6123**      event shall initiate a hard reset. It says also that a
6124**      device that detects a mode change shall set data transfer 
6125**      mode to eight bit asynchronous, etc...
6126**      So, just resetting should be enough.
6127**       
6128**
6129**----------------------------------------------------------
6130*/
6131
6132static int ncr_int_sbmc (struct ncb *np)
6133{
6134        u_char scsi_mode = INB (nc_stest4) & SMODE;
6135
6136        if (scsi_mode != np->scsi_mode) {
6137                printk("%s: SCSI bus mode change from %x to %x.\n",
6138                        ncr_name(np), np->scsi_mode, scsi_mode);
6139
6140                np->scsi_mode = scsi_mode;
6141
6142
6143                /*
6144                **      Suspend command processing for 1 second and 
6145                **      reinitialize all except the chip.
6146                */
6147                np->settle_time = jiffies + HZ;
6148                ncr_init (np, 0, bootverbose ? "scsi mode change" : NULL, HS_RESET);
6149                return 1;
6150        }
6151        return 0;
6152}
6153
6154/*==========================================================
6155**
6156**      ncr chip exception handler for SCSI parity error.
6157**
6158**==========================================================
6159**
6160**
6161**----------------------------------------------------------
6162*/
6163
6164static int ncr_int_par (struct ncb *np)
6165{
6166        u_char  hsts    = INB (HS_PRT);
6167        u32     dbc     = INL (nc_dbc);
6168        u_char  sstat1  = INB (nc_sstat1);
6169        int phase       = -1;
6170        int msg         = -1;
6171        u32 jmp;
6172
6173        printk("%s: SCSI parity error detected: SCR1=%d DBC=%x SSTAT1=%x\n",
6174                ncr_name(np), hsts, dbc, sstat1);
6175
6176        /*
6177         *      Ignore the interrupt if the NCR is not connected 
6178         *      to the SCSI bus, since the right work should have  
6179         *      been done on unexpected disconnection handling.
6180         */
6181        if (!(INB (nc_scntl1) & ISCON))
6182                return 0;
6183
6184        /*
6185         *      If the nexus is not clearly identified, reset the bus.
6186         *      We will try to do better later.
6187         */
6188        if (hsts & HS_INVALMASK)
6189                goto reset_all;
6190
6191        /*
6192         *      If the SCSI parity error occurs in MSG IN phase, prepare a 
6193         *      MSG PARITY message. Otherwise, prepare a INITIATOR DETECTED 
6194         *      ERROR message and let the device decide to retry the command 
6195         *      or to terminate with check condition. If we were in MSG IN 
6196         *      phase waiting for the response of a negotiation, we will 
6197         *      get SIR_NEGO_FAILED at dispatch.
6198         */
6199        if (!(dbc & 0xc0000000))
6200                phase = (dbc >> 24) & 7;
6201        if (phase == 7)
6202                msg = MSG_PARITY_ERROR;
6203        else
6204                msg = INITIATOR_ERROR;
6205
6206
6207        /*
6208         *      If the NCR stopped on a MOVE ^ DATA_IN, we jump to a 
6209         *      script that will ignore all data in bytes until phase 
6210         *      change, since we are not sure the chip will wait the phase 
6211         *      change prior to delivering the interrupt.
6212         */
6213        if (phase == 1)
6214                jmp = NCB_SCRIPTH_PHYS (np, par_err_data_in);
6215        else
6216                jmp = NCB_SCRIPTH_PHYS (np, par_err_other);
6217
6218        OUTONB (nc_ctest3, CLF );       /* clear dma fifo  */
6219        OUTB (nc_stest3, TE|CSF);       /* clear scsi fifo */
6220
6221        np->msgout[0] = msg;
6222        OUTL_DSP (jmp);
6223        return 1;
6224
6225reset_all:
6226        ncr_start_reset(np);
6227        return 1;
6228}
6229
6230/*==========================================================
6231**
6232**
6233**      ncr chip exception handler for phase errors.
6234**
6235**
6236**==========================================================
6237**
6238**      We have to construct a new transfer descriptor,
6239**      to transfer the rest of the current block.
6240**
6241**----------------------------------------------------------
6242*/
6243
6244static void ncr_int_ma (struct ncb *np)
6245{
6246        u32     dbc;
6247        u32     rest;
6248        u32     dsp;
6249        u32     dsa;
6250        u32     nxtdsp;
6251        u32     newtmp;
6252        u32     *vdsp;
6253        u32     oadr, olen;
6254        u32     *tblp;
6255        ncrcmd *newcmd;
6256        u_char  cmd, sbcl;
6257        struct ccb *cp;
6258
6259        dsp     = INL (nc_dsp);
6260        dbc     = INL (nc_dbc);
6261        sbcl    = INB (nc_sbcl);
6262
6263        cmd     = dbc >> 24;
6264        rest    = dbc & 0xffffff;
6265
6266        /*
6267        **      Take into account dma fifo and various buffers and latches,
6268        **      only if the interrupted phase is an OUTPUT phase.
6269        */
6270
6271        if ((cmd & 1) == 0) {
6272                u_char  ctest5, ss0, ss2;
6273                u16     delta;
6274
6275                ctest5 = (np->rv_ctest5 & DFS) ? INB (nc_ctest5) : 0;
6276                if (ctest5 & DFS)
6277                        delta=(((ctest5 << 8) | (INB (nc_dfifo) & 0xff)) - rest) & 0x3ff;
6278                else
6279                        delta=(INB (nc_dfifo) - rest) & 0x7f;
6280
6281                /*
6282                **      The data in the dma fifo has not been transferred to
6283                **      the target -> add the amount to the rest
6284                **      and clear the data.
6285                **      Check the sstat2 register in case of wide transfer.
6286                */
6287
6288                rest += delta;
6289                ss0  = INB (nc_sstat0);
6290                if (ss0 & OLF) rest++;
6291                if (ss0 & ORF) rest++;
6292                if (INB(nc_scntl3) & EWS) {
6293                        ss2 = INB (nc_sstat2);
6294                        if (ss2 & OLF1) rest++;
6295                        if (ss2 & ORF1) rest++;
6296                }
6297
6298                if (DEBUG_FLAGS & (DEBUG_TINY|DEBUG_PHASE))
6299                        printk ("P%x%x RL=%d D=%d SS0=%x ", cmd&7, sbcl&7,
6300                                (unsigned) rest, (unsigned) delta, ss0);
6301
6302        } else  {
6303                if (DEBUG_FLAGS & (DEBUG_TINY|DEBUG_PHASE))
6304                        printk ("P%x%x RL=%d ", cmd&7, sbcl&7, rest);
6305        }
6306
6307        /*
6308        **      Clear fifos.
6309        */
6310        OUTONB (nc_ctest3, CLF );       /* clear dma fifo  */
6311        OUTB (nc_stest3, TE|CSF);       /* clear scsi fifo */
6312
6313        /*
6314        **      locate matching cp.
6315        **      if the interrupted phase is DATA IN or DATA OUT,
6316        **      trust the global header.
6317        */
6318        dsa = INL (nc_dsa);
6319        if (!(cmd & 6)) {
6320                cp = np->header.cp;
6321                if (CCB_PHYS(cp, phys) != dsa)
6322                        cp = NULL;
6323        } else {
6324                cp  = np->ccb;
6325                while (cp && (CCB_PHYS (cp, phys) != dsa))
6326                        cp = cp->link_ccb;
6327        }
6328
6329        /*
6330        **      try to find the interrupted script command,
6331        **      and the address at which to continue.
6332        */
6333        vdsp    = NULL;
6334        nxtdsp  = 0;
6335        if      (dsp >  np->p_script &&
6336                 dsp <= np->p_script + sizeof(struct script)) {
6337                vdsp = (u32 *)((char*)np->script0 + (dsp-np->p_script-8));
6338                nxtdsp = dsp;
6339        }
6340        else if (dsp >  np->p_scripth &&
6341                 dsp <= np->p_scripth + sizeof(struct scripth)) {
6342                vdsp = (u32 *)((char*)np->scripth0 + (dsp-np->p_scripth-8));
6343                nxtdsp = dsp;
6344        }
6345        else if (cp) {
6346                if      (dsp == CCB_PHYS (cp, patch[2])) {
6347                        vdsp = &cp->patch[0];
6348                        nxtdsp = scr_to_cpu(vdsp[3]);
6349                }
6350                else if (dsp == CCB_PHYS (cp, patch[6])) {
6351                        vdsp = &cp->patch[4];
6352                        nxtdsp = scr_to_cpu(vdsp[3]);
6353                }
6354        }
6355
6356        /*
6357        **      log the information
6358        */
6359
6360        if (DEBUG_FLAGS & DEBUG_PHASE) {
6361                printk ("\nCP=%p CP2=%p DSP=%x NXT=%x VDSP=%p CMD=%x ",
6362                        cp, np->header.cp,
6363                        (unsigned)dsp,
6364                        (unsigned)nxtdsp, vdsp, cmd);
6365        }
6366
6367        /*
6368        **      cp=0 means that the DSA does not point to a valid control 
6369        **      block. This should not happen since we donnot use multi-byte 
6370        **      move while we are being reselected ot after command complete.
6371        **      We are not able to recover from such a phase error.
6372        */
6373        if (!cp) {
6374                printk ("%s: SCSI phase error fixup: "
6375                        "CCB already dequeued (0x%08lx)\n", 
6376                        ncr_name (np), (u_long) np->header.cp);
6377                goto reset_all;
6378        }
6379
6380        /*
6381        **      get old startaddress and old length.
6382        */
6383
6384        oadr = scr_to_cpu(vdsp[1]);
6385
6386        if (cmd & 0x10) {       /* Table indirect */
6387                tblp = (u32 *) ((char*) &cp->phys + oadr);
6388                olen = scr_to_cpu(tblp[0]);
6389                oadr = scr_to_cpu(tblp[1]);
6390        } else {
6391                tblp = (u32 *) 0;
6392                olen = scr_to_cpu(vdsp[0]) & 0xffffff;
6393        }
6394
6395        if (DEBUG_FLAGS & DEBUG_PHASE) {
6396                printk ("OCMD=%x\nTBLP=%p OLEN=%x OADR=%x\n",
6397                        (unsigned) (scr_to_cpu(vdsp[0]) >> 24),
6398                        tblp,
6399                        (unsigned) olen,
6400                        (unsigned) oadr);
6401        }
6402
6403        /*
6404        **      check cmd against assumed interrupted script command.
6405        */
6406
6407        if (cmd != (scr_to_cpu(vdsp[0]) >> 24)) {
6408                PRINT_ADDR(cp->cmd, "internal error: cmd=%02x != %02x=(vdsp[0] "
6409                                ">> 24)\n", cmd, scr_to_cpu(vdsp[0]) >> 24);
6410
6411                goto reset_all;
6412        }
6413
6414        /*
6415        **      cp != np->header.cp means that the header of the CCB 
6416        **      currently being processed has not yet been copied to 
6417        **      the global header area. That may happen if the device did 
6418        **      not accept all our messages after having been selected.
6419        */
6420        if (cp != np->header.cp) {
6421                printk ("%s: SCSI phase error fixup: "
6422                        "CCB address mismatch (0x%08lx != 0x%08lx)\n", 
6423                        ncr_name (np), (u_long) cp, (u_long) np->header.cp);
6424        }
6425
6426        /*
6427        **      if old phase not dataphase, leave here.
6428        */
6429
6430        if (cmd & 0x06) {
6431                PRINT_ADDR(cp->cmd, "phase change %x-%x %d@%08x resid=%d.\n",
6432                        cmd&7, sbcl&7, (unsigned)olen,
6433                        (unsigned)oadr, (unsigned)rest);
6434                goto unexpected_phase;
6435        }
6436
6437        /*
6438        **      choose the correct patch area.
6439        **      if savep points to one, choose the other.
6440        */
6441
6442        newcmd = cp->patch;
6443        newtmp = CCB_PHYS (cp, patch);
6444        if (newtmp == scr_to_cpu(cp->phys.header.savep)) {
6445                newcmd = &cp->patch[4];
6446                newtmp = CCB_PHYS (cp, patch[4]);
6447        }
6448
6449        /*
6450        **      fillin the commands
6451        */
6452
6453        newcmd[0] = cpu_to_scr(((cmd & 0x0f) << 24) | rest);
6454        newcmd[1] = cpu_to_scr(oadr + olen - rest);
6455        newcmd[2] = cpu_to_scr(SCR_JUMP);
6456        newcmd[3] = cpu_to_scr(nxtdsp);
6457
6458        if (DEBUG_FLAGS & DEBUG_PHASE) {
6459                PRINT_ADDR(cp->cmd, "newcmd[%d] %x %x %x %x.\n",
6460                        (int) (newcmd - cp->patch),
6461                        (unsigned)scr_to_cpu(newcmd[0]),
6462                        (unsigned)scr_to_cpu(newcmd[1]),
6463                        (unsigned)scr_to_cpu(newcmd[2]),
6464                        (unsigned)scr_to_cpu(newcmd[3]));
6465        }
6466        /*
6467        **      fake the return address (to the patch).
6468        **      and restart script processor at dispatcher.
6469        */
6470        OUTL (nc_temp, newtmp);
6471        OUTL_DSP (NCB_SCRIPT_PHYS (np, dispatch));
6472        return;
6473
6474        /*
6475        **      Unexpected phase changes that occurs when the current phase 
6476        **      is not a DATA IN or DATA OUT phase are due to error conditions.
6477        **      Such event may only happen when the SCRIPTS is using a 
6478        **      multibyte SCSI MOVE.
6479        **
6480        **      Phase change            Some possible cause
6481        **
6482        **      COMMAND  --> MSG IN     SCSI parity error detected by target.
6483        **      COMMAND  --> STATUS     Bad command or refused by target.
6484        **      MSG OUT  --> MSG IN     Message rejected by target.
6485        **      MSG OUT  --> COMMAND    Bogus target that discards extended
6486        **                              negotiation messages.
6487        **
6488        **      The code below does not care of the new phase and so 
6489        **      trusts the target. Why to annoy it ?
6490        **      If the interrupted phase is COMMAND phase, we restart at
6491        **      dispatcher.
6492        **      If a target does not get all the messages after selection, 
6493        **      the code assumes blindly that the target discards extended 
6494        **      messages and clears the negotiation status.
6495        **      If the target does not want all our response to negotiation,
6496        **      we force a SIR_NEGO_PROTO interrupt (it is a hack that avoids 
6497        **      bloat for such a should_not_happen situation).
6498        **      In all other situation, we reset the BUS.
6499        **      Are these assumptions reasonable ? (Wait and see ...)
6500        */
6501unexpected_phase:
6502        dsp -= 8;
6503        nxtdsp = 0;
6504
6505        switch (cmd & 7) {
6506        case 2: /* COMMAND phase */
6507                nxtdsp = NCB_SCRIPT_PHYS (np, dispatch);
6508                break;
6509#if 0
6510        case 3: /* STATUS  phase */
6511                nxtdsp = NCB_SCRIPT_PHYS (np, dispatch);
6512                break;
6513#endif
6514        case 6: /* MSG OUT phase */
6515                np->scripth->nxtdsp_go_on[0] = cpu_to_scr(dsp + 8);
6516                if      (dsp == NCB_SCRIPT_PHYS (np, send_ident)) {
6517                        cp->host_status = HS_BUSY;
6518                        nxtdsp = NCB_SCRIPTH_PHYS (np, clratn_go_on);
6519                }
6520                else if (dsp == NCB_SCRIPTH_PHYS (np, send_wdtr) ||
6521                         dsp == NCB_SCRIPTH_PHYS (np, send_sdtr)) {
6522                        nxtdsp = NCB_SCRIPTH_PHYS (np, nego_bad_phase);
6523                }
6524                break;
6525#if 0
6526        case 7: /* MSG IN  phase */
6527                nxtdsp = NCB_SCRIPT_PHYS (np, clrack);
6528                break;
6529#endif
6530        }
6531
6532        if (nxtdsp) {
6533                OUTL_DSP (nxtdsp);
6534                return;
6535        }
6536
6537reset_all:
6538        ncr_start_reset(np);
6539}
6540
6541
6542static void ncr_sir_to_redo(struct ncb *np, int num, struct ccb *cp)
6543{
6544        struct scsi_cmnd *cmd   = cp->cmd;
6545        struct tcb *tp  = &np->target[cmd->device->id];
6546        struct lcb *lp  = tp->lp[cmd->device->lun];
6547        struct list_head *qp;
6548        struct ccb *    cp2;
6549        int             disc_cnt = 0;
6550        int             busy_cnt = 0;
6551        u32             startp;
6552        u_char          s_status = INB (SS_PRT);
6553
6554        /*
6555        **      Let the SCRIPTS processor skip all not yet started CCBs,
6556        **      and count disconnected CCBs. Since the busy queue is in 
6557        **      the same order as the chip start queue, disconnected CCBs 
6558        **      are before cp and busy ones after.
6559        */
6560        if (lp) {
6561                qp = lp->busy_ccbq.prev;
6562                while (qp != &lp->busy_ccbq) {
6563                        cp2 = list_entry(qp, struct ccb, link_ccbq);
6564                        qp  = qp->prev;
6565                        ++busy_cnt;
6566                        if (cp2 == cp)
6567                                break;
6568                        cp2->start.schedule.l_paddr =
6569                        cpu_to_scr(NCB_SCRIPTH_PHYS (np, skip));
6570                }
6571                lp->held_ccb = cp;      /* Requeue when this one completes */
6572                disc_cnt = lp->queuedccbs - busy_cnt;
6573        }
6574
6575        switch(s_status) {
6576        default:        /* Just for safety, should never happen */
6577        case S_QUEUE_FULL:
6578                /*
6579                **      Decrease number of tags to the number of 
6580                **      disconnected commands.
6581                */
6582                if (!lp)
6583                        goto out;
6584                if (bootverbose >= 1) {
6585                        PRINT_ADDR(cmd, "QUEUE FULL! %d busy, %d disconnected "
6586                                        "CCBs\n", busy_cnt, disc_cnt);
6587                }
6588                if (disc_cnt < lp->numtags) {
6589                        lp->numtags     = disc_cnt > 2 ? disc_cnt : 2;
6590                        lp->num_good    = 0;
6591                        ncr_setup_tags (np, cmd->device);
6592                }
6593                /*
6594                **      Requeue the command to the start queue.
6595                **      If any disconnected commands,
6596                **              Clear SIGP.
6597                **              Jump to reselect.
6598                */
6599                cp->phys.header.savep = cp->startp;
6600                cp->host_status = HS_BUSY;
6601                cp->scsi_status = S_ILLEGAL;
6602
6603                ncr_put_start_queue(np, cp);
6604                if (disc_cnt)
6605                        INB (nc_ctest2);                /* Clear SIGP */
6606                OUTL_DSP (NCB_SCRIPT_PHYS (np, reselect));
6607                return;
6608        case S_TERMINATED:
6609        case S_CHECK_COND:
6610                /*
6611                **      If we were requesting sense, give up.
6612                */
6613                if (cp->auto_sense)
6614                        goto out;
6615
6616                /*
6617                **      Device returned CHECK CONDITION status.
6618                **      Prepare all needed data strutures for getting 
6619                **      sense data.
6620                **
6621                **      identify message
6622                */
6623                cp->scsi_smsg2[0]       = IDENTIFY(0, cmd->device->lun);
6624                cp->phys.smsg.addr      = cpu_to_scr(CCB_PHYS (cp, scsi_smsg2));
6625                cp->phys.smsg.size      = cpu_to_scr(1);
6626
6627                /*
6628                **      sense command
6629                */
6630                cp->phys.cmd.addr       = cpu_to_scr(CCB_PHYS (cp, sensecmd));
6631                cp->phys.cmd.size       = cpu_to_scr(6);
6632
6633                /*
6634                **      patch requested size into sense command
6635                */
6636                cp->sensecmd[0]         = 0x03;
6637                cp->sensecmd[1]         = cmd->device->lun << 5;
6638                cp->sensecmd[4]         = sizeof(cp->sense_buf);
6639
6640                /*
6641                **      sense data
6642                */
6643                memset(cp->sense_buf, 0, sizeof(cp->sense_buf));
6644                cp->phys.sense.addr     = cpu_to_scr(CCB_PHYS(cp,sense_buf[0]));
6645                cp->phys.sense.size     = cpu_to_scr(sizeof(cp->sense_buf));
6646
6647                /*
6648                **      requeue the command.
6649                */
6650                startp = cpu_to_scr(NCB_SCRIPTH_PHYS (np, sdata_in));
6651
6652                cp->phys.header.savep   = startp;
6653                cp->phys.header.goalp   = startp + 24;
6654                cp->phys.header.lastp   = startp;
6655                cp->phys.header.wgoalp  = startp + 24;
6656                cp->phys.header.wlastp  = startp;
6657
6658                cp->host_status = HS_BUSY;
6659                cp->scsi_status = S_ILLEGAL;
6660                cp->auto_sense  = s_status;
6661
6662                cp->start.schedule.l_paddr =
6663                        cpu_to_scr(NCB_SCRIPT_PHYS (np, select));
6664
6665                /*
6666                **      Select without ATN for quirky devices.
6667                */
6668                if (cmd->device->select_no_atn)
6669                        cp->start.schedule.l_paddr =
6670                        cpu_to_scr(NCB_SCRIPTH_PHYS (np, select_no_atn));
6671
6672                ncr_put_start_queue(np, cp);
6673
6674                OUTL_DSP (NCB_SCRIPT_PHYS (np, start));
6675                return;
6676        }
6677
6678out:
6679        OUTONB_STD ();
6680        return;
6681}
6682
6683
6684/*==========================================================
6685**
6686**
6687**      ncr chip exception handler for programmed interrupts.
6688**
6689**
6690**==========================================================
6691*/
6692
6693void ncr_int_sir (struct ncb *np)
6694{
6695        u_char scntl3;
6696        u_char chg, ofs, per, fak, wide;
6697        u_char num = INB (nc_dsps);
6698        struct ccb *cp=NULL;
6699        u_long  dsa    = INL (nc_dsa);
6700        u_char  target = INB (nc_sdid) & 0x0f;
6701        struct tcb *tp     = &np->target[target];
6702        struct scsi_target *starget = tp->starget;
6703
6704        if (DEBUG_FLAGS & DEBUG_TINY) printk ("I#%d", num);
6705
6706        switch (num) {
6707        case SIR_INTFLY:
6708                /*
6709                **      This is used for HP Zalon/53c720 where INTFLY
6710                **      operation is currently broken.
6711                */
6712                ncr_wakeup_done(np);
6713#ifdef SCSI_NCR_CCB_DONE_SUPPORT
6714                OUTL(nc_dsp, NCB_SCRIPT_PHYS (np, done_end) + 8);
6715#else
6716                OUTL(nc_dsp, NCB_SCRIPT_PHYS (np, start));
6717#endif
6718                return;
6719        case SIR_RESEL_NO_MSG_IN:
6720        case SIR_RESEL_NO_IDENTIFY:
6721                /*
6722                **      If devices reselecting without sending an IDENTIFY 
6723                **      message still exist, this should help.
6724                **      We just assume lun=0, 1 CCB, no tag.
6725                */
6726                if (tp->lp[0]) { 
6727                        OUTL_DSP (scr_to_cpu(tp->lp[0]->jump_ccb[0]));
6728                        return;
6729                }
6730        case SIR_RESEL_BAD_TARGET:      /* Will send a TARGET RESET message */
6731        case SIR_RESEL_BAD_LUN:         /* Will send a TARGET RESET message */
6732        case SIR_RESEL_BAD_I_T_L_Q:     /* Will send an ABORT TAG message   */
6733        case SIR_RESEL_BAD_I_T_L:       /* Will send an ABORT message       */
6734                printk ("%s:%d: SIR %d, "
6735                        "incorrect nexus identification on reselection\n",
6736                        ncr_name (np), target, num);
6737                goto out;
6738        case SIR_DONE_OVERFLOW:
6739                printk ("%s:%d: SIR %d, "
6740                        "CCB done queue overflow\n",
6741                        ncr_name (np), target, num);
6742                goto out;
6743        case SIR_BAD_STATUS:
6744                cp = np->header.cp;
6745                if (!cp || CCB_PHYS (cp, phys) != dsa)
6746                        goto out;
6747                ncr_sir_to_redo(np, num, cp);
6748                return;
6749        default:
6750                /*
6751                **      lookup the ccb
6752                */
6753                cp = np->ccb;
6754                while (cp && (CCB_PHYS (cp, phys) != dsa))
6755                        cp = cp->link_ccb;
6756
6757                BUG_ON(!cp);
6758                BUG_ON(cp != np->header.cp);
6759
6760                if (!cp || cp != np->header.cp)
6761                        goto out;
6762        }
6763
6764        switch (num) {
6765/*-----------------------------------------------------------------------------
6766**
6767**      Was Sie schon immer ueber transfermode negotiation wissen wollten ...
6768**      ("Everything you've always wanted to know about transfer mode
6769**        negotiation")
6770**
6771**      We try to negotiate sync and wide transfer only after
6772**      a successful inquire command. We look at byte 7 of the
6773**      inquire data to determine the capabilities of the target.
6774**
6775**      When we try to negotiate, we append the negotiation message
6776**      to the identify and (maybe) simple tag message.
6777**      The host status field is set to HS_NEGOTIATE to mark this
6778**      situation.
6779**
6780**      If the target doesn't answer this message immediately
6781**      (as required by the standard), the SIR_NEGO_FAIL interrupt
6782**      will be raised eventually.
6783**      The handler removes the HS_NEGOTIATE status, and sets the
6784**      negotiated value to the default (async / nowide).
6785**
6786**      If we receive a matching answer immediately, we check it
6787**      for validity, and set the values.
6788**
6789**      If we receive a Reject message immediately, we assume the
6790**      negotiation has failed, and fall back to standard values.
6791**
6792**      If we receive a negotiation message while not in HS_NEGOTIATE
6793**      state, it's a target initiated negotiation. We prepare a
6794**      (hopefully) valid answer, set our parameters, and send back 
6795**      this answer to the target.
6796**
6797**      If the target doesn't fetch the answer (no message out phase),
6798**      we assume the negotiation has failed, and fall back to default
6799**      settings.
6800**
6801**      When we set the values, we adjust them in all ccbs belonging 
6802**      to this target, in the controller's register, and in the "phys"
6803**      field of the controller's struct ncb.
6804**
6805**      Possible cases:            hs  sir   msg_in value  send   goto
6806**      We try to negotiate:
6807**      -> target doesn't msgin    NEG FAIL  noop   defa.  -      dispatch
6808**      -> target rejected our msg NEG FAIL  reject defa.  -      dispatch
6809**      -> target answered  (ok)   NEG SYNC  sdtr   set    -      clrack
6810**      -> target answered (!ok)   NEG SYNC  sdtr   defa.  REJ--->msg_bad
6811**      -> target answered  (ok)   NEG WIDE  wdtr   set    -      clrack
6812**      -> target answered (!ok)   NEG WIDE  wdtr   defa.  REJ--->msg_bad
6813**      -> any other msgin         NEG FAIL  noop   defa.  -      dispatch
6814**
6815**      Target tries to negotiate:
6816**      -> incoming message        --- SYNC  sdtr   set    SDTR   -
6817**      -> incoming message        --- WIDE  wdtr   set    WDTR   -
6818**      We sent our answer:
6819**      -> target doesn't msgout   --- PROTO ?      defa.  -      dispatch
6820**
6821**-----------------------------------------------------------------------------
6822*/
6823
6824        case SIR_NEGO_FAILED:
6825                /*-------------------------------------------------------
6826                **
6827                **      Negotiation failed.
6828                **      Target doesn't send an answer message,
6829                **      or target rejected our message.
6830                **
6831                **      Remove negotiation request.
6832                **
6833                **-------------------------------------------------------
6834                */
6835                OUTB (HS_PRT, HS_BUSY);
6836
6837                /* fall through */
6838
6839        case SIR_NEGO_PROTO:
6840                /*-------------------------------------------------------
6841                **
6842                **      Negotiation failed.
6843                **      Target doesn't fetch the answer message.
6844                **
6845                **-------------------------------------------------------
6846                */
6847
6848                if (DEBUG_FLAGS & DEBUG_NEGO) {
6849                        PRINT_ADDR(cp->cmd, "negotiation failed sir=%x "
6850                                        "status=%x.\n", num, cp->nego_status);
6851                }
6852
6853                /*
6854                **      any error in negotiation:
6855                **      fall back to default mode.
6856                */
6857                switch (cp->nego_status) {
6858
6859                case NS_SYNC:
6860                        spi_period(starget) = 0;
6861                        spi_offset(starget) = 0;
6862                        ncr_setsync (np, cp, 0, 0xe0);
6863                        break;
6864
6865                case NS_WIDE:
6866                        spi_width(starget) = 0;
6867                        ncr_setwide (np, cp, 0, 0);
6868                        break;
6869
6870                }
6871                np->msgin [0] = NOP;
6872                np->msgout[0] = NOP;
6873                cp->nego_status = 0;
6874                break;
6875
6876        case SIR_NEGO_SYNC:
6877                if (DEBUG_FLAGS & DEBUG_NEGO) {
6878                        ncr_print_msg(cp, "sync msgin", np->msgin);
6879                }
6880
6881                chg = 0;
6882                per = np->msgin[3];
6883                ofs = np->msgin[4];
6884                if (ofs==0) per=255;
6885
6886                /*
6887                **      if target sends SDTR message,
6888                **            it CAN transfer synch.
6889                */
6890
6891                if (ofs && starget)
6892                        spi_support_sync(starget) = 1;
6893
6894                /*
6895                **      check values against driver limits.
6896                */
6897
6898                if (per < np->minsync)
6899                        {chg = 1; per = np->minsync;}
6900                if (per < tp->minsync)
6901                        {chg = 1; per = tp->minsync;}
6902                if (ofs > tp->maxoffs)
6903                        {chg = 1; ofs = tp->maxoffs;}
6904
6905                /*
6906                **      Check against controller limits.
6907                */
6908                fak     = 7;
6909                scntl3  = 0;
6910                if (ofs != 0) {
6911                        ncr_getsync(np, per, &fak, &scntl3);
6912                        if (fak > 7) {
6913                                chg = 1;
6914                                ofs = 0;
6915                        }
6916                }
6917                if (ofs == 0) {
6918                        fak     = 7;
6919                        per     = 0;
6920                        scntl3  = 0;
6921                        tp->minsync = 0;
6922                }
6923
6924                if (DEBUG_FLAGS & DEBUG_NEGO) {
6925                        PRINT_ADDR(cp->cmd, "sync: per=%d scntl3=0x%x ofs=%d "
6926                                "fak=%d chg=%d.\n", per, scntl3, ofs, fak, chg);
6927                }
6928
6929                if (INB (HS_PRT) == HS_NEGOTIATE) {
6930                        OUTB (HS_PRT, HS_BUSY);
6931                        switch (cp->nego_status) {
6932
6933                        case NS_SYNC:
6934                                /* This was an answer message */
6935                                if (chg) {
6936                                        /* Answer wasn't acceptable.  */
6937                                        spi_period(starget) = 0;
6938                                        spi_offset(starget) = 0;
6939                                        ncr_setsync(np, cp, 0, 0xe0);
6940                                        OUTL_DSP(NCB_SCRIPT_PHYS (np, msg_bad));
6941                                } else {
6942                                        /* Answer is ok.  */
6943                                        spi_period(starget) = per;
6944                                        spi_offset(starget) = ofs;
6945                                        ncr_setsync(np, cp, scntl3, (fak<<5)|ofs);
6946                                        OUTL_DSP(NCB_SCRIPT_PHYS (np, clrack));
6947                                }
6948                                return;
6949
6950                        case NS_WIDE:
6951                                spi_width(starget) = 0;
6952                                ncr_setwide(np, cp, 0, 0);
6953                                break;
6954                        }
6955                }
6956
6957                /*
6958                **      It was a request. Set value and
6959                **      prepare an answer message
6960                */
6961
6962                spi_period(starget) = per;
6963                spi_offset(starget) = ofs;
6964                ncr_setsync(np, cp, scntl3, (fak<<5)|ofs);
6965
6966                spi_populate_sync_msg(np->msgout, per, ofs);
6967                cp->nego_status = NS_SYNC;
6968
6969                if (DEBUG_FLAGS & DEBUG_NEGO) {
6970                        ncr_print_msg(cp, "sync msgout", np->msgout);
6971                }
6972
6973                if (!ofs) {
6974                        OUTL_DSP (NCB_SCRIPT_PHYS (np, msg_bad));
6975                        return;
6976                }
6977                np->msgin [0] = NOP;
6978
6979                break;
6980
6981        case SIR_NEGO_WIDE:
6982                /*
6983                **      Wide request message received.
6984                */
6985                if (DEBUG_FLAGS & DEBUG_NEGO) {
6986                        ncr_print_msg(cp, "wide msgin", np->msgin);
6987                }
6988
6989                /*
6990                **      get requested values.
6991                */
6992
6993                chg  = 0;
6994                wide = np->msgin[3];
6995
6996                /*
6997                **      if target sends WDTR message,
6998                **            it CAN transfer wide.
6999                */
7000
7001                if (wide && starget)
7002                        spi_support_wide(starget) = 1;
7003
7004                /*
7005                **      check values against driver limits.
7006                */
7007
7008                if (wide > tp->usrwide)
7009                        {chg = 1; wide = tp->usrwide;}
7010
7011                if (DEBUG_FLAGS & DEBUG_NEGO) {
7012                        PRINT_ADDR(cp->cmd, "wide: wide=%d chg=%d.\n", wide,
7013                                        chg);
7014                }
7015
7016                if (INB (HS_PRT) == HS_NEGOTIATE) {
7017                        OUTB (HS_PRT, HS_BUSY);
7018                        switch (cp->nego_status) {
7019
7020                        case NS_WIDE:
7021                                /*
7022                                **      This was an answer message
7023                                */
7024                                if (chg) {
7025                                        /* Answer wasn't acceptable.  */
7026                                        spi_width(starget) = 0;
7027                                        ncr_setwide(np, cp, 0, 1);
7028                                        OUTL_DSP (NCB_SCRIPT_PHYS (np, msg_bad));
7029                                } else {
7030                                        /* Answer is ok.  */
7031                                        spi_width(starget) = wide;
7032                                        ncr_setwide(np, cp, wide, 1);
7033                                        OUTL_DSP (NCB_SCRIPT_PHYS (np, clrack));
7034                                }
7035                                return;
7036
7037                        case NS_SYNC:
7038                                spi_period(starget) = 0;
7039                                spi_offset(starget) = 0;
7040                                ncr_setsync(np, cp, 0, 0xe0);
7041                                break;
7042                        }
7043                }
7044
7045                /*
7046                **      It was a request, set value and
7047                **      prepare an answer message
7048                */
7049
7050                spi_width(starget) = wide;
7051                ncr_setwide(np, cp, wide, 1);
7052                spi_populate_width_msg(np->msgout, wide);
7053
7054                np->msgin [0] = NOP;
7055
7056                cp->nego_status = NS_WIDE;
7057
7058                if (DEBUG_FLAGS & DEBUG_NEGO) {
7059                        ncr_print_msg(cp, "wide msgout", np->msgin);
7060                }
7061                break;
7062
7063/*--------------------------------------------------------------------
7064**
7065**      Processing of special messages
7066**
7067**--------------------------------------------------------------------
7068*/
7069
7070        case SIR_REJECT_RECEIVED:
7071                /*-----------------------------------------------
7072                **
7073                **      We received a MESSAGE_REJECT.
7074                **
7075                **-----------------------------------------------
7076                */
7077
7078                PRINT_ADDR(cp->cmd, "MESSAGE_REJECT received (%x:%x).\n",
7079                        (unsigned)scr_to_cpu(np->lastmsg), np->msgout[0]);
7080                break;
7081
7082        case SIR_REJECT_SENT:
7083                /*-----------------------------------------------
7084                **
7085                **      We received an unknown message
7086                **
7087                **-----------------------------------------------
7088                */
7089
7090                ncr_print_msg(cp, "MESSAGE_REJECT sent for", np->msgin);
7091                break;
7092
7093/*--------------------------------------------------------------------
7094**
7095**      Processing of special messages
7096**
7097**--------------------------------------------------------------------
7098*/
7099
7100        case SIR_IGN_RESIDUE:
7101                /*-----------------------------------------------
7102                **
7103                **      We received an IGNORE RESIDUE message,
7104                **      which couldn't be handled by the script.
7105                **
7106                **-----------------------------------------------
7107                */
7108
7109                PRINT_ADDR(cp->cmd, "IGNORE_WIDE_RESIDUE received, but not yet "
7110                                "implemented.\n");
7111                break;
7112#if 0
7113        case SIR_MISSING_SAVE:
7114                /*-----------------------------------------------
7115                **
7116                **      We received an DISCONNECT message,
7117                **      but the datapointer wasn't saved before.
7118                **
7119                **-----------------------------------------------
7120                */
7121
7122                PRINT_ADDR(cp->cmd, "DISCONNECT received, but datapointer "
7123                                "not saved: data=%x save=%x goal=%x.\n",
7124                        (unsigned) INL (nc_temp),
7125                        (unsigned) scr_to_cpu(np->header.savep),
7126                        (unsigned) scr_to_cpu(np->header.goalp));
7127                break;
7128#endif
7129        }
7130
7131out:
7132        OUTONB_STD ();
7133}
7134
7135/*==========================================================
7136**
7137**
7138**      Acquire a control block
7139**
7140**
7141**==========================================================
7142*/
7143
7144static struct ccb *ncr_get_ccb(struct ncb *np, struct scsi_cmnd *cmd)
7145{
7146        u_char tn = cmd->device->id;
7147        u_char ln = cmd->device->lun;
7148        struct tcb *tp = &np->target[tn];
7149        struct lcb *lp = tp->lp[ln];
7150        u_char tag = NO_TAG;
7151        struct ccb *cp = NULL;
7152
7153        /*
7154        **      Lun structure available ?
7155        */
7156        if (lp) {
7157                struct list_head *qp;
7158                /*
7159                **      Keep from using more tags than we can handle.
7160                */
7161                if (lp->usetags && lp->busyccbs >= lp->maxnxs)
7162                        return NULL;
7163
7164                /*
7165                **      Allocate a new CCB if needed.
7166                */
7167                if (list_empty(&lp->free_ccbq))
7168                        ncr_alloc_ccb(np, tn, ln);
7169
7170                /*
7171                **      Look for free CCB
7172                */
7173                qp = ncr_list_pop(&lp->free_ccbq);
7174                if (qp) {
7175                        cp = list_entry(qp, struct ccb, link_ccbq);
7176                        if (cp->magic) {
7177                                PRINT_ADDR(cmd, "ccb free list corrupted "
7178                                                "(@%p)\n", cp);
7179                                cp = NULL;
7180                        } else {
7181                                list_add_tail(qp, &lp->wait_ccbq);
7182                                ++lp->busyccbs;
7183                        }
7184                }
7185
7186                /*
7187                **      If a CCB is available,
7188                **      Get a tag for this nexus if required.
7189                */
7190                if (cp) {
7191                        if (lp->usetags)
7192                                tag = lp->cb_tags[lp->ia_tag];
7193                }
7194                else if (lp->actccbs > 0)
7195                        return NULL;
7196        }
7197
7198        /*
7199        **      if nothing available, take the default.
7200        */
7201        if (!cp)
7202                cp = np->ccb;
7203
7204        /*
7205        **      Wait until available.
7206        */
7207#if 0
7208        while (cp->magic) {
7209                if (flags & SCSI_NOSLEEP) break;
7210                if (tsleep ((caddr_t)cp, PRIBIO|PCATCH, "ncr", 0))
7211                        break;
7212        }
7213#endif
7214
7215        if (cp->magic)
7216                return NULL;
7217
7218        cp->magic = 1;
7219
7220        /*
7221        **      Move to next available tag if tag used.
7222        */
7223        if (lp) {
7224                if (tag != NO_TAG) {
7225                        ++lp->ia_tag;
7226                        if (lp->ia_tag == MAX_TAGS)
7227                                lp->ia_tag = 0;
7228                        lp->tags_umap |= (((tagmap_t) 1) << tag);
7229                }
7230        }
7231
7232        /*
7233        **      Remember all informations needed to free this CCB.
7234        */
7235        cp->tag    = tag;
7236        cp->target = tn;
7237        cp->lun    = ln;
7238
7239        if (DEBUG_FLAGS & DEBUG_TAGS) {
7240                PRINT_ADDR(cmd, "ccb @%p using tag %d.\n", cp, tag);
7241        }
7242
7243        return cp;
7244}
7245
7246/*==========================================================
7247**
7248**
7249**      Release one control block
7250**
7251**
7252**==========================================================
7253*/
7254
7255static void ncr_free_ccb (struct ncb *np, struct ccb *cp)
7256{
7257        struct tcb *tp = &np->target[cp->target];
7258        struct lcb *lp = tp->lp[cp->lun];
7259
7260        if (DEBUG_FLAGS & DEBUG_TAGS) {
7261                PRINT_ADDR(cp->cmd, "ccb @%p freeing tag %d.\n", cp, cp->tag);
7262        }
7263
7264        /*
7265        **      If lun control block available,
7266        **      decrement active commands and increment credit, 
7267        **      free the tag if any and remove the JUMP for reselect.
7268        */
7269        if (lp) {
7270                if (cp->tag != NO_TAG) {
7271                        lp->cb_tags[lp->if_tag++] = cp->tag;
7272                        if (lp->if_tag == MAX_TAGS)
7273                                lp->if_tag = 0;
7274                        lp->tags_umap &= ~(((tagmap_t) 1) << cp->tag);
7275                        lp->tags_smap &= lp->tags_umap;
7276                        lp->jump_ccb[cp->tag] =
7277                                cpu_to_scr(NCB_SCRIPTH_PHYS(np, bad_i_t_l_q));
7278                } else {
7279                        lp->jump_ccb[0] =
7280                                cpu_to_scr(NCB_SCRIPTH_PHYS(np, bad_i_t_l));
7281                }
7282        }
7283
7284        /*
7285        **      Make this CCB available.
7286        */
7287
7288        if (lp) {
7289                if (cp != np->ccb)
7290                        list_move(&cp->link_ccbq, &lp->free_ccbq);
7291                --lp->busyccbs;
7292                if (cp->queued) {
7293                        --lp->queuedccbs;
7294                }
7295        }
7296        cp -> host_status = HS_IDLE;
7297        cp -> magic = 0;
7298        if (cp->queued) {
7299                --np->queuedccbs;
7300                cp->queued = 0;
7301        }
7302
7303#if 0
7304        if (cp == np->ccb)
7305                wakeup ((caddr_t) cp);
7306#endif
7307}
7308
7309
7310#define ncr_reg_bus_addr(r) (np->paddr + offsetof (struct ncr_reg, r))
7311
7312/*------------------------------------------------------------------------
7313**      Initialize the fixed part of a CCB structure.
7314**------------------------------------------------------------------------
7315**------------------------------------------------------------------------
7316*/
7317static void ncr_init_ccb(struct ncb *np, struct ccb *cp)
7318{
7319        ncrcmd copy_4 = np->features & FE_PFEN ? SCR_COPY(4) : SCR_COPY_F(4);
7320
7321        /*
7322        **      Remember virtual and bus address of this ccb.
7323        */
7324        cp->p_ccb          = vtobus(cp);
7325        cp->phys.header.cp = cp;
7326
7327        /*
7328        **      This allows list_del to work for the default ccb.
7329        */
7330        INIT_LIST_HEAD(&cp->link_ccbq);
7331
7332        /*
7333        **      Initialyze the start and restart launch script.
7334        **
7335        **      COPY(4) @(...p_phys), @(dsa)
7336        **      JUMP @(sched_point)
7337        */
7338        cp->start.setup_dsa[0]   = cpu_to_scr(copy_4);
7339        cp->start.setup_dsa[1]   = cpu_to_scr(CCB_PHYS(cp, start.p_phys));
7340        cp->start.setup_dsa[2]   = cpu_to_scr(ncr_reg_bus_addr(nc_dsa));
7341        cp->start.schedule.l_cmd = cpu_to_scr(SCR_JUMP);
7342        cp->start.p_phys         = cpu_to_scr(CCB_PHYS(cp, phys));
7343
7344        memcpy(&cp->restart, &cp->start, sizeof(cp->restart));
7345
7346        cp->start.schedule.l_paddr   = cpu_to_scr(NCB_SCRIPT_PHYS (np, idle));
7347        cp->restart.schedule.l_paddr = cpu_to_scr(NCB_SCRIPTH_PHYS (np, abort));
7348}
7349
7350
7351/*------------------------------------------------------------------------
7352**      Allocate a CCB and initialize its fixed part.
7353**------------------------------------------------------------------------
7354**------------------------------------------------------------------------
7355*/
7356static void ncr_alloc_ccb(struct ncb *np, u_char tn, u_char ln)
7357{
7358        struct tcb *tp = &np->target[tn];
7359        struct lcb *lp = tp->lp[ln];
7360        struct ccb *cp = NULL;
7361
7362        /*
7363        **      Allocate memory for this CCB.
7364        */
7365        cp = m_calloc_dma(sizeof(struct ccb), "CCB");
7366        if (!cp)
7367                return;
7368
7369        /*
7370        **      Count it and initialyze it.
7371        */
7372        lp->actccbs++;
7373        np->actccbs++;
7374        memset(cp, 0, sizeof (*cp));
7375        ncr_init_ccb(np, cp);
7376
7377        /*
7378        **      Chain into wakeup list and free ccb queue and take it 
7379        **      into account for tagged commands.
7380        */
7381        cp->link_ccb      = np->ccb->link_ccb;
7382        np->ccb->link_ccb = cp;
7383
7384        list_add(&cp->link_ccbq, &lp->free_ccbq);
7385}
7386
7387/*==========================================================
7388**
7389**
7390**      Allocation of resources for Targets/Luns/Tags.
7391**
7392**
7393**==========================================================
7394*/
7395
7396
7397/*------------------------------------------------------------------------
7398**      Target control block initialisation.
7399**------------------------------------------------------------------------
7400**      This data structure is fully initialized after a SCSI command 
7401**      has been successfully completed for this target.
7402**      It contains a SCRIPT that is called on target reselection.
7403**------------------------------------------------------------------------
7404*/
7405static void ncr_init_tcb (struct ncb *np, u_char tn)
7406{
7407        struct tcb *tp = &np->target[tn];
7408        ncrcmd copy_1 = np->features & FE_PFEN ? SCR_COPY(1) : SCR_COPY_F(1);
7409        int th = tn & 3;
7410        int i;
7411
7412        /*
7413        **      Jump to next tcb if SFBR does not match this target.
7414        **      JUMP  IF (SFBR != #target#), @(next tcb)
7415        */
7416        tp->jump_tcb.l_cmd   =
7417                cpu_to_scr((SCR_JUMP ^ IFFALSE (DATA (0x80 + tn))));
7418        tp->jump_tcb.l_paddr = np->jump_tcb[th].l_paddr;
7419
7420        /*
7421        **      Load the synchronous transfer register.
7422        **      COPY @(tp->sval), @(sxfer)
7423        */
7424        tp->getscr[0] = cpu_to_scr(copy_1);
7425        tp->getscr[1] = cpu_to_scr(vtobus (&tp->sval));
7426#ifdef SCSI_NCR_BIG_ENDIAN
7427        tp->getscr[2] = cpu_to_scr(ncr_reg_bus_addr(nc_sxfer) ^ 3);
7428#else
7429        tp->getscr[2] = cpu_to_scr(ncr_reg_bus_addr(nc_sxfer));
7430#endif
7431
7432        /*
7433        **      Load the timing register.
7434        **      COPY @(tp->wval), @(scntl3)
7435        */
7436        tp->getscr[3] = cpu_to_scr(copy_1);
7437        tp->getscr[4] = cpu_to_scr(vtobus (&tp->wval));
7438#ifdef SCSI_NCR_BIG_ENDIAN
7439        tp->getscr[5] = cpu_to_scr(ncr_reg_bus_addr(nc_scntl3) ^ 3);
7440#else
7441        tp->getscr[5] = cpu_to_scr(ncr_reg_bus_addr(nc_scntl3));
7442#endif
7443
7444        /*
7445        **      Get the IDENTIFY message and the lun.
7446        **      CALL @script(resel_lun)
7447        */
7448        tp->call_lun.l_cmd   = cpu_to_scr(SCR_CALL);
7449        tp->call_lun.l_paddr = cpu_to_scr(NCB_SCRIPT_PHYS (np, resel_lun));
7450
7451        /*
7452        **      Look for the lun control block of this nexus.
7453        **      For i = 0 to 3
7454        **              JUMP ^ IFTRUE (MASK (i, 3)), @(next_lcb)
7455        */
7456        for (i = 0 ; i < 4 ; i++) {
7457                tp->jump_lcb[i].l_cmd   =
7458                                cpu_to_scr((SCR_JUMP ^ IFTRUE (MASK (i, 3))));
7459                tp->jump_lcb[i].l_paddr =
7460                                cpu_to_scr(NCB_SCRIPTH_PHYS (np, bad_identify));
7461        }
7462
7463        /*
7464        **      Link this target control block to the JUMP chain.
7465        */
7466        np->jump_tcb[th].l_paddr = cpu_to_scr(vtobus (&tp->jump_tcb));
7467
7468        /*
7469        **      These assert's should be moved at driver initialisations.
7470        */
7471#ifdef SCSI_NCR_BIG_ENDIAN
7472        BUG_ON(((offsetof(struct ncr_reg, nc_sxfer) ^
7473                 offsetof(struct tcb    , sval    )) &3) != 3);
7474        BUG_ON(((offsetof(struct ncr_reg, nc_scntl3) ^
7475                 offsetof(struct tcb    , wval    )) &3) != 3);
7476#else
7477        BUG_ON(((offsetof(struct ncr_reg, nc_sxfer) ^
7478                 offsetof(struct tcb    , sval    )) &3) != 0);
7479        BUG_ON(((offsetof(struct ncr_reg, nc_scntl3) ^
7480                 offsetof(struct tcb    , wval    )) &3) != 0);
7481#endif
7482}
7483
7484
7485/*------------------------------------------------------------------------
7486**      Lun control block allocation and initialization.
7487**------------------------------------------------------------------------
7488**      This data structure is allocated and initialized after a SCSI 
7489**      command has been successfully completed for this target/lun.
7490**------------------------------------------------------------------------
7491*/
7492static struct lcb *ncr_alloc_lcb (struct ncb *np, u_char tn, u_char ln)
7493{
7494        struct tcb *tp = &np->target[tn];
7495        struct lcb *lp = tp->lp[ln];
7496        ncrcmd copy_4 = np->features & FE_PFEN ? SCR_COPY(4) : SCR_COPY_F(4);
7497        int lh = ln & 3;
7498
7499        /*
7500        **      Already done, return.
7501        */
7502        if (lp)
7503                return lp;
7504
7505        /*
7506        **      Allocate the lcb.
7507        */
7508        lp = m_calloc_dma(sizeof(struct lcb), "LCB");
7509        if (!lp)
7510                goto fail;
7511        memset(lp, 0, sizeof(*lp));
7512        tp->lp[ln] = lp;
7513
7514        /*
7515        **      Initialize the target control block if not yet.
7516        */
7517        if (!tp->jump_tcb.l_cmd)
7518                ncr_init_tcb(np, tn);
7519
7520        /*
7521        **      Initialize the CCB queue headers.
7522        */
7523        INIT_LIST_HEAD(&lp->free_ccbq);
7524        INIT_LIST_HEAD(&lp->busy_ccbq);
7525        INIT_LIST_HEAD(&lp->wait_ccbq);
7526        INIT_LIST_HEAD(&lp->skip_ccbq);
7527
7528        /*
7529        **      Set max CCBs to 1 and use the default 1 entry 
7530        **      jump table by default.
7531        */
7532        lp->maxnxs      = 1;
7533        lp->jump_ccb    = &lp->jump_ccb_0;
7534        lp->p_jump_ccb  = cpu_to_scr(vtobus(lp->jump_ccb));
7535
7536        /*
7537        **      Initilialyze the reselect script:
7538        **
7539        **      Jump to next lcb if SFBR does not match this lun.
7540        **      Load TEMP with the CCB direct jump table bus address.
7541        **      Get the SIMPLE TAG message and the tag.
7542        **
7543        **      JUMP  IF (SFBR != #lun#), @(next lcb)
7544        **      COPY @(lp->p_jump_ccb),   @(temp)
7545        **      JUMP @script(resel_notag)
7546        */
7547        lp->jump_lcb.l_cmd   =
7548                cpu_to_scr((SCR_JUMP ^ IFFALSE (MASK (0x80+ln, 0xff))));
7549        lp->jump_lcb.l_paddr = tp->jump_lcb[lh].l_paddr;
7550
7551        lp->load_jump_ccb[0] = cpu_to_scr(copy_4);
7552        lp->load_jump_ccb[1] = cpu_to_scr(vtobus (&lp->p_jump_ccb));
7553        lp->load_jump_ccb[2] = cpu_to_scr(ncr_reg_bus_addr(nc_temp));
7554
7555        lp->jump_tag.l_cmd   = cpu_to_scr(SCR_JUMP);
7556        lp->jump_tag.l_paddr = cpu_to_scr(NCB_SCRIPT_PHYS (np, resel_notag));
7557
7558        /*
7559        **      Link this lun control block to the JUMP chain.
7560        */
7561        tp->jump_lcb[lh].l_paddr = cpu_to_scr(vtobus (&lp->jump_lcb));
7562
7563        /*
7564        **      Initialize command queuing control.
7565        */
7566        lp->busyccbs    = 1;
7567        lp->queuedccbs  = 1;
7568        lp->queuedepth  = 1;
7569fail:
7570        return lp;
7571}
7572
7573
7574/*------------------------------------------------------------------------
7575**      Lun control block setup on INQUIRY data received.
7576**------------------------------------------------------------------------
7577**      We only support WIDE, SYNC for targets and CMDQ for logical units.
7578**      This setup is done on each INQUIRY since we are expecting user 
7579**      will play with CHANGE DEFINITION commands. :-)
7580**------------------------------------------------------------------------
7581*/
7582static struct lcb *ncr_setup_lcb (struct ncb *np, struct scsi_device *sdev)
7583{
7584        unsigned char tn = sdev->id, ln = sdev->lun;
7585        struct tcb *tp = &np->target[tn];
7586        struct lcb *lp = tp->lp[ln];
7587
7588        /* If no lcb, try to allocate it.  */
7589        if (!lp && !(lp = ncr_alloc_lcb(np, tn, ln)))
7590                goto fail;
7591
7592        /*
7593        **      If unit supports tagged commands, allocate the 
7594        **      CCB JUMP table if not yet.
7595        */
7596        if (sdev->tagged_supported && lp->jump_ccb == &lp->jump_ccb_0) {
7597                int i;
7598                lp->jump_ccb = m_calloc_dma(256, "JUMP_CCB");
7599                if (!lp->jump_ccb) {
7600                        lp->jump_ccb = &lp->jump_ccb_0;
7601                        goto fail;
7602                }
7603                lp->p_jump_ccb = cpu_to_scr(vtobus(lp->jump_ccb));
7604                for (i = 0 ; i < 64 ; i++)
7605                        lp->jump_ccb[i] =
7606                                cpu_to_scr(NCB_SCRIPTH_PHYS (np, bad_i_t_l_q));
7607                for (i = 0 ; i < MAX_TAGS ; i++)
7608                        lp->cb_tags[i] = i;
7609                lp->maxnxs = MAX_TAGS;
7610                lp->tags_stime = jiffies + 3*HZ;
7611                ncr_setup_tags (np, sdev);
7612        }
7613
7614
7615fail:
7616        return lp;
7617}
7618
7619/*==========================================================
7620**
7621**
7622**      Build Scatter Gather Block
7623**
7624**
7625**==========================================================
7626**
7627**      The transfer area may be scattered among
7628**      several non adjacent physical pages.
7629**
7630**      We may use MAX_SCATTER blocks.
7631**
7632**----------------------------------------------------------
7633*/
7634
7635/*
7636**      We try to reduce the number of interrupts caused
7637**      by unexpected phase changes due to disconnects.
7638**      A typical harddisk may disconnect before ANY block.
7639**      If we wanted to avoid unexpected phase changes at all
7640**      we had to use a break point every 512 bytes.
7641**      Of course the number of scatter/gather blocks is
7642**      limited.
7643**      Under Linux, the scatter/gatter blocks are provided by 
7644**      the generic driver. We just have to copy addresses and 
7645**      sizes to the data segment array.
7646*/
7647
7648static int ncr_scatter(struct ncb *np, struct ccb *cp, struct scsi_cmnd *cmd)
7649{
7650        int segment     = 0;
7651        int use_sg      = scsi_sg_count(cmd);
7652
7653        cp->data_len    = 0;
7654
7655        use_sg = map_scsi_sg_data(np, cmd);
7656        if (use_sg > 0) {
7657                struct scatterlist *sg;
7658                struct scr_tblmove *data;
7659
7660                if (use_sg > MAX_SCATTER) {
7661                        unmap_scsi_data(np, cmd);
7662                        return -1;
7663                }
7664
7665                data = &cp->phys.data[MAX_SCATTER - use_sg];
7666
7667                scsi_for_each_sg(cmd, sg, use_sg, segment) {
7668                        dma_addr_t baddr = sg_dma_address(sg);
7669                        unsigned int len = sg_dma_len(sg);
7670
7671                        ncr_build_sge(np, &data[segment], baddr, len);
7672                        cp->data_len += len;
7673                }
7674        } else
7675                segment = -2;
7676
7677        return segment;
7678}
7679
7680/*==========================================================
7681**
7682**
7683**      Test the bus snoop logic :-(
7684**
7685**      Has to be called with interrupts disabled.
7686**
7687**
7688**==========================================================
7689*/
7690
7691static int __init ncr_regtest (struct ncb* np)
7692{
7693        register volatile u32 data;
7694        /*
7695        **      ncr registers may NOT be cached.
7696        **      write 0xffffffff to a read only register area,
7697        **      and try to read it back.
7698        */
7699        data = 0xffffffff;
7700        OUTL_OFF(offsetof(struct ncr_reg, nc_dstat), data);
7701        data = INL_OFF(offsetof(struct ncr_reg, nc_dstat));
7702#if 1
7703        if (data == 0xffffffff) {
7704#else
7705        if ((data & 0xe2f0fffd) != 0x02000080) {
7706#endif
7707                printk ("CACHE TEST FAILED: reg dstat-sstat2 readback %x.\n",
7708                        (unsigned) data);
7709                return (0x10);
7710        }
7711        return (0);
7712}
7713
7714static int __init ncr_snooptest (struct ncb* np)
7715{
7716        u32     ncr_rd, ncr_wr, ncr_bk, host_rd, host_wr, pc;
7717        int     i, err=0;
7718        if (np->reg) {
7719                err |= ncr_regtest (np);
7720                if (err)
7721                        return (err);
7722        }
7723
7724        /* init */
7725        pc  = NCB_SCRIPTH_PHYS (np, snooptest);
7726        host_wr = 1;
7727        ncr_wr  = 2;
7728        /*
7729        **      Set memory and register.
7730        */
7731        np->ncr_cache = cpu_to_scr(host_wr);
7732        OUTL (nc_temp, ncr_wr);
7733        /*
7734        **      Start script (exchange values)
7735        */
7736        OUTL_DSP (pc);
7737        /*
7738        **      Wait 'til done (with timeout)
7739        */
7740        for (i=0; i<NCR_SNOOP_TIMEOUT; i++)
7741                if (INB(nc_istat) & (INTF|SIP|DIP))
7742                        break;
7743        /*
7744        **      Save termination position.
7745        */
7746        pc = INL (nc_dsp);
7747        /*
7748        **      Read memory and register.
7749        */
7750        host_rd = scr_to_cpu(np->ncr_cache);
7751        ncr_rd  = INL (nc_scratcha);
7752        ncr_bk  = INL (nc_temp);
7753        /*
7754        **      Reset ncr chip
7755        */
7756        ncr_chip_reset(np, 100);
7757        /*
7758        **      check for timeout
7759        */
7760        if (i>=NCR_SNOOP_TIMEOUT) {
7761                printk ("CACHE TEST FAILED: timeout.\n");
7762                return (0x20);
7763        }
7764        /*
7765        **      Check termination position.
7766        */
7767        if (pc != NCB_SCRIPTH_PHYS (np, snoopend)+8) {
7768                printk ("CACHE TEST FAILED: script execution failed.\n");
7769                printk ("start=%08lx, pc=%08lx, end=%08lx\n", 
7770                        (u_long) NCB_SCRIPTH_PHYS (np, snooptest), (u_long) pc,
7771                        (u_long) NCB_SCRIPTH_PHYS (np, snoopend) +8);
7772                return (0x40);
7773        }
7774        /*
7775        **      Show results.
7776        */
7777        if (host_wr != ncr_rd) {
7778                printk ("CACHE TEST FAILED: host wrote %d, ncr read %d.\n",
7779                        (int) host_wr, (int) ncr_rd);
7780                err |= 1;
7781        }
7782        if (host_rd != ncr_wr) {
7783                printk ("CACHE TEST FAILED: ncr wrote %d, host read %d.\n",
7784                        (int) ncr_wr, (int) host_rd);
7785                err |= 2;
7786        }
7787        if (ncr_bk != ncr_wr) {
7788                printk ("CACHE TEST FAILED: ncr wrote %d, read back %d.\n",
7789                        (int) ncr_wr, (int) ncr_bk);
7790                err |= 4;
7791        }
7792        return (err);
7793}
7794
7795/*==========================================================
7796**
7797**      Determine the ncr's clock frequency.
7798**      This is essential for the negotiation
7799**      of the synchronous transfer rate.
7800**
7801**==========================================================
7802**
7803**      Note: we have to return the correct value.
7804**      THERE IS NO SAFE DEFAULT VALUE.
7805**
7806**      Most NCR/SYMBIOS boards are delivered with a 40 Mhz clock.
7807**      53C860 and 53C875 rev. 1 support fast20 transfers but 
7808**      do not have a clock doubler and so are provided with a 
7809**      80 MHz clock. All other fast20 boards incorporate a doubler 
7810**      and so should be delivered with a 40 MHz clock.
7811**      The future fast40 chips (895/895) use a 40 Mhz base clock 
7812**      and provide a clock quadrupler (160 Mhz). The code below 
7813**      tries to deal as cleverly as possible with all this stuff.
7814**
7815**----------------------------------------------------------
7816*/
7817
7818/*
7819 *      Select NCR SCSI clock frequency
7820 */
7821static void ncr_selectclock(struct ncb *np, u_char scntl3)
7822{
7823        if (np->multiplier < 2) {
7824                OUTB(nc_scntl3, scntl3);
7825                return;
7826        }
7827
7828        if (bootverbose >= 2)
7829                printk ("%s: enabling clock multiplier\n", ncr_name(np));
7830
7831        OUTB(nc_stest1, DBLEN);    /* Enable clock multiplier             */
7832        if (np->multiplier > 2) {  /* Poll bit 5 of stest4 for quadrupler */
7833                int i = 20;
7834                while (!(INB(nc_stest4) & LCKFRQ) && --i > 0)
7835                        udelay(20);
7836                if (!i)
7837                        printk("%s: the chip cannot lock the frequency\n", ncr_name(np));
7838        } else                  /* Wait 20 micro-seconds for doubler    */
7839                udelay(20);
7840        OUTB(nc_stest3, HSC);           /* Halt the scsi clock          */
7841        OUTB(nc_scntl3, scntl3);
7842        OUTB(nc_stest1, (DBLEN|DBLSEL));/* Select clock multiplier      */
7843        OUTB(nc_stest3, 0x00);          /* Restart scsi clock           */
7844}
7845
7846
7847/*
7848 *      calculate NCR SCSI clock frequency (in KHz)
7849 */
7850static unsigned __init ncrgetfreq (struct ncb *np, int gen)
7851{
7852        unsigned ms = 0;
7853        char count = 0;
7854
7855        /*
7856         * Measure GEN timer delay in order 
7857         * to calculate SCSI clock frequency
7858         *
7859         * This code will never execute too
7860         * many loop iterations (if DELAY is 
7861         * reasonably correct). It could get
7862         * too low a delay (too high a freq.)
7863         * if the CPU is slow executing the 
7864         * loop for some reason (an NMI, for
7865         * example). For this reason we will
7866         * if multiple measurements are to be 
7867         * performed trust the higher delay 
7868         * (lower frequency returned).
7869         */
7870        OUTB (nc_stest1, 0);    /* make sure clock doubler is OFF */
7871        OUTW (nc_sien , 0);     /* mask all scsi interrupts */
7872        (void) INW (nc_sist);   /* clear pending scsi interrupt */
7873        OUTB (nc_dien , 0);     /* mask all dma interrupts */
7874        (void) INW (nc_sist);   /* another one, just to be sure :) */
7875        OUTB (nc_scntl3, 4);    /* set pre-scaler to divide by 3 */
7876        OUTB (nc_stime1, 0);    /* disable general purpose timer */
7877        OUTB (nc_stime1, gen);  /* set to nominal delay of 1<<gen * 125us */
7878        while (!(INW(nc_sist) & GEN) && ms++ < 100000) {
7879                for (count = 0; count < 10; count ++)
7880                        udelay(100);    /* count ms */
7881        }
7882        OUTB (nc_stime1, 0);    /* disable general purpose timer */
7883        /*
7884         * set prescaler to divide by whatever 0 means
7885         * 0 ought to choose divide by 2, but appears
7886         * to set divide by 3.5 mode in my 53c810 ...
7887         */
7888        OUTB (nc_scntl3, 0);
7889
7890        if (bootverbose >= 2)
7891                printk ("%s: Delay (GEN=%d): %u msec\n", ncr_name(np), gen, ms);
7892        /*
7893         * adjust for prescaler, and convert into KHz 
7894         */
7895        return ms ? ((1 << gen) * 4340) / ms : 0;
7896}
7897
7898/*
7899 *      Get/probe NCR SCSI clock frequency
7900 */
7901static void __init ncr_getclock (struct ncb *np, int mult)
7902{
7903        unsigned char scntl3 = INB(nc_scntl3);
7904        unsigned char stest1 = INB(nc_stest1);
7905        unsigned f1;
7906
7907        np->multiplier = 1;
7908        f1 = 40000;
7909
7910        /*
7911        **      True with 875 or 895 with clock multiplier selected
7912        */
7913        if (mult > 1 && (stest1 & (DBLEN+DBLSEL)) == DBLEN+DBLSEL) {
7914                if (bootverbose >= 2)
7915                        printk ("%s: clock multiplier found\n", ncr_name(np));
7916                np->multiplier = mult;
7917        }
7918
7919        /*
7920        **      If multiplier not found or scntl3 not 7,5,3,
7921        **      reset chip and get frequency from general purpose timer.
7922        **      Otherwise trust scntl3 BIOS setting.
7923        */
7924        if (np->multiplier != mult || (scntl3 & 7) < 3 || !(scntl3 & 1)) {
7925                unsigned f2;
7926
7927                ncr_chip_reset(np, 5);
7928
7929                (void) ncrgetfreq (np, 11);     /* throw away first result */
7930                f1 = ncrgetfreq (np, 11);
7931                f2 = ncrgetfreq (np, 11);
7932
7933                if(bootverbose)
7934                        printk ("%s: NCR clock is %uKHz, %uKHz\n", ncr_name(np), f1, f2);
7935
7936                if (f1 > f2) f1 = f2;           /* trust lower result   */
7937
7938                if      (f1 <   45000)          f1 =  40000;
7939                else if (f1 <   55000)          f1 =  50000;
7940                else                            f1 =  80000;
7941
7942                if (f1 < 80000 && mult > 1) {
7943                        if (bootverbose >= 2)
7944                                printk ("%s: clock multiplier assumed\n", ncr_name(np));
7945                        np->multiplier  = mult;
7946                }
7947        } else {
7948                if      ((scntl3 & 7) == 3)     f1 =  40000;
7949                else if ((scntl3 & 7) == 5)     f1 =  80000;
7950                else                            f1 = 160000;
7951
7952                f1 /= np->multiplier;
7953        }
7954
7955        /*
7956        **      Compute controller synchronous parameters.
7957        */
7958        f1              *= np->multiplier;
7959        np->clock_khz   = f1;
7960}
7961
7962/*===================== LINUX ENTRY POINTS SECTION ==========================*/
7963
7964static int ncr53c8xx_slave_alloc(struct scsi_device *device)
7965{
7966        struct Scsi_Host *host = device->host;
7967        struct ncb *np = ((struct host_data *) host->hostdata)->ncb;
7968        struct tcb *tp = &np->target[device->id];
7969        tp->starget = device->sdev_target;
7970
7971        return 0;
7972}
7973
7974static int ncr53c8xx_slave_configure(struct scsi_device *device)
7975{
7976        struct Scsi_Host *host = device->host;
7977        struct ncb *np = ((struct host_data *) host->hostdata)->ncb;
7978        struct tcb *tp = &np->target[device->id];
7979        struct lcb *lp = tp->lp[device->lun];
7980        int numtags, depth_to_use;
7981
7982        ncr_setup_lcb(np, device);
7983
7984        /*
7985        **      Select queue depth from driver setup.
7986        **      Donnot use more than configured by user.
7987        **      Use at least 2.
7988        **      Donnot use more than our maximum.
7989        */
7990        numtags = device_queue_depth(np->unit, device->id, device->lun);
7991        if (numtags > tp->usrtags)
7992                numtags = tp->usrtags;
7993        if (!device->tagged_supported)
7994                numtags = 1;
7995        depth_to_use = numtags;
7996        if (depth_to_use < 2)
7997                depth_to_use = 2;
7998        if (depth_to_use > MAX_TAGS)
7999                depth_to_use = MAX_TAGS;
8000
8001        scsi_adjust_queue_depth(device,
8002                                (device->tagged_supported ?
8003                                 MSG_SIMPLE_TAG : 0),
8004                                depth_to_use);
8005
8006        /*
8007        **      Since the queue depth is not tunable under Linux,
8008        **      we need to know this value in order not to 
8009        **      announce stupid things to user.
8010        **
8011        **      XXX(hch): As of Linux 2.6 it certainly _is_ tunable..
8012        **                In fact we just tuned it, or did I miss
8013        **                something important? :)
8014        */
8015        if (lp) {
8016                lp->numtags = lp->maxtags = numtags;
8017                lp->scdev_depth = depth_to_use;
8018        }
8019        ncr_setup_tags (np, device);
8020
8021#ifdef DEBUG_NCR53C8XX
8022        printk("ncr53c8xx_select_queue_depth: host=%d, id=%d, lun=%d, depth=%d\n",
8023               np->unit, device->id, device->lun, depth_to_use);
8024#endif
8025
8026        if (spi_support_sync(device->sdev_target) &&
8027            !spi_initial_dv(device->sdev_target))
8028                spi_dv_device(device);
8029        return 0;
8030}
8031
8032static int ncr53c8xx_queue_command_lck (struct scsi_cmnd *cmd, void (*done)(struct scsi_cmnd *))
8033{
8034     struct ncb *np = ((struct host_data *) cmd->device->host->hostdata)->ncb;
8035     unsigned long flags;
8036     int sts;
8037
8038#ifdef DEBUG_NCR53C8XX
8039printk("ncr53c8xx_queue_command\n");
8040#endif
8041
8042     cmd->scsi_done     = done;
8043     cmd->host_scribble = NULL;
8044     cmd->__data_mapped = 0;
8045     cmd->__data_mapping = 0;
8046
8047     spin_lock_irqsave(&np->smp_lock, flags);
8048
8049     if ((sts = ncr_queue_command(np, cmd)) != DID_OK) {
8050          cmd->result = ScsiResult(sts, 0);
8051#ifdef DEBUG_NCR53C8XX
8052printk("ncr53c8xx : command not queued - result=%d\n", sts);
8053#endif
8054     }
8055#ifdef DEBUG_NCR53C8XX
8056     else
8057printk("ncr53c8xx : command successfully queued\n");
8058#endif
8059
8060     spin_unlock_irqrestore(&np->smp_lock, flags);
8061
8062     if (sts != DID_OK) {
8063          unmap_scsi_data(np, cmd);
8064          done(cmd);
8065          sts = 0;
8066     }
8067
8068     return sts;
8069}
8070
8071static DEF_SCSI_QCMD(ncr53c8xx_queue_command)
8072
8073irqreturn_t ncr53c8xx_intr(int irq, void *dev_id)
8074{
8075     unsigned long flags;
8076     struct Scsi_Host *shost = (struct Scsi_Host *)dev_id;
8077     struct host_data *host_data = (struct host_data *)shost->hostdata;
8078     struct ncb *np = host_data->ncb;
8079     struct scsi_cmnd *done_list;
8080
8081#ifdef DEBUG_NCR53C8XX
8082     printk("ncr53c8xx : interrupt received\n");
8083#endif
8084
8085     if (DEBUG_FLAGS & DEBUG_TINY) printk ("[");
8086
8087     spin_lock_irqsave(&np->smp_lock, flags);
8088     ncr_exception(np);
8089     done_list     = np->done_list;
8090     np->done_list = NULL;
8091     spin_unlock_irqrestore(&np->smp_lock, flags);
8092
8093     if (DEBUG_FLAGS & DEBUG_TINY) printk ("]\n");
8094
8095     if (done_list)
8096             ncr_flush_done_cmds(done_list);
8097     return IRQ_HANDLED;
8098}
8099
8100static void ncr53c8xx_timeout(unsigned long npref)
8101{
8102        struct ncb *np = (struct ncb *) npref;
8103        unsigned long flags;
8104        struct scsi_cmnd *done_list;
8105
8106        spin_lock_irqsave(&np->smp_lock, flags);
8107        ncr_timeout(np);
8108        done_list     = np->done_list;
8109        np->done_list = NULL;
8110        spin_unlock_irqrestore(&np->smp_lock, flags);
8111
8112        if (done_list)
8113                ncr_flush_done_cmds(done_list);
8114}
8115
8116static int ncr53c8xx_bus_reset(struct scsi_cmnd *cmd)
8117{
8118        struct ncb *np = ((struct host_data *) cmd->device->host->hostdata)->ncb;
8119        int sts;
8120        unsigned long flags;
8121        struct scsi_cmnd *done_list;
8122
8123        /*
8124         * If the mid-level driver told us reset is synchronous, it seems 
8125         * that we must call the done() callback for the involved command, 
8126         * even if this command was not queued to the low-level driver, 
8127         * before returning SUCCESS.
8128         */
8129
8130        spin_lock_irqsave(&np->smp_lock, flags);
8131        sts = ncr_reset_bus(np, cmd, 1);
8132
8133        done_list     = np->done_list;
8134        np->done_list = NULL;
8135        spin_unlock_irqrestore(&np->smp_lock, flags);
8136
8137        ncr_flush_done_cmds(done_list);
8138
8139        return sts;
8140}
8141
8142#if 0 /* unused and broken */
8143static int ncr53c8xx_abort(struct scsi_cmnd *cmd)
8144{
8145        struct ncb *np = ((struct host_data *) cmd->device->host->hostdata)->ncb;
8146        int sts;
8147        unsigned long flags;
8148        struct scsi_cmnd *done_list;
8149
8150        printk("ncr53c8xx_abort: command pid %lu\n", cmd->serial_number);
8151
8152        NCR_LOCK_NCB(np, flags);
8153
8154        sts = ncr_abort_command(np, cmd);
8155out:
8156        done_list     = np->done_list;
8157        np->done_list = NULL;
8158        NCR_UNLOCK_NCB(np, flags);
8159
8160        ncr_flush_done_cmds(done_list);
8161
8162        return sts;
8163}
8164#endif
8165
8166
8167/*
8168**      Scsi command waiting list management.
8169**
8170**      It may happen that we cannot insert a scsi command into the start queue,
8171**      in the following circumstances.
8172**              Too few preallocated ccb(s), 
8173**              maxtags < cmd_per_lun of the Linux host control block,
8174**              etc...
8175**      Such scsi commands are inserted into a waiting list.
8176**      When a scsi command complete, we try to requeue the commands of the
8177**      waiting list.
8178*/
8179
8180#define next_wcmd host_scribble
8181
8182static void insert_into_waiting_list(struct ncb *np, struct scsi_cmnd *cmd)
8183{
8184        struct scsi_cmnd *wcmd;
8185
8186#ifdef DEBUG_WAITING_LIST
8187        printk("%s: cmd %lx inserted into waiting list\n", ncr_name(np), (u_long) cmd);
8188#endif
8189        cmd->next_wcmd = NULL;
8190        if (!(wcmd = np->waiting_list)) np->waiting_list = cmd;
8191        else {
8192                while (wcmd->next_wcmd)
8193                        wcmd = (struct scsi_cmnd *) wcmd->next_wcmd;
8194                wcmd->next_wcmd = (char *) cmd;
8195        }
8196}
8197
8198static struct scsi_cmnd *retrieve_from_waiting_list(int to_remove, struct ncb *np, struct scsi_cmnd *cmd)
8199{
8200        struct scsi_cmnd **pcmd = &np->waiting_list;
8201
8202        while (*pcmd) {
8203                if (cmd == *pcmd) {
8204                        if (to_remove) {
8205                                *pcmd = (struct scsi_cmnd *) cmd->next_wcmd;
8206                                cmd->next_wcmd = NULL;
8207                        }
8208#ifdef DEBUG_WAITING_LIST
8209        printk("%s: cmd %lx retrieved from waiting list\n", ncr_name(np), (u_long) cmd);
8210#endif
8211                        return cmd;
8212                }
8213                pcmd = (struct scsi_cmnd **) &(*pcmd)->next_wcmd;
8214        }
8215        return NULL;
8216}
8217
8218static void process_waiting_list(struct ncb *np, int sts)
8219{
8220        struct scsi_cmnd *waiting_list, *wcmd;
8221
8222        waiting_list = np->waiting_list;
8223        np->waiting_list = NULL;
8224
8225#ifdef DEBUG_WAITING_LIST
8226        if (waiting_list) printk("%s: waiting_list=%lx processing sts=%d\n", ncr_name(np), (u_long) waiting_list, sts);
8227#endif
8228        while ((wcmd = waiting_list) != NULL) {
8229                waiting_list = (struct scsi_cmnd *) wcmd->next_wcmd;
8230                wcmd->next_wcmd = NULL;
8231                if (sts == DID_OK) {
8232#ifdef DEBUG_WAITING_LIST
8233        printk("%s: cmd %lx trying to requeue\n", ncr_name(np), (u_long) wcmd);
8234#endif
8235                        sts = ncr_queue_command(np, wcmd);
8236                }
8237                if (sts != DID_OK) {
8238#ifdef DEBUG_WAITING_LIST
8239        printk("%s: cmd %lx done forced sts=%d\n", ncr_name(np), (u_long) wcmd, sts);
8240#endif
8241                        wcmd->result = ScsiResult(sts, 0);
8242                        ncr_queue_done_cmd(np, wcmd);
8243                }
8244        }
8245}
8246
8247#undef next_wcmd
8248
8249static ssize_t show_ncr53c8xx_revision(struct device *dev,
8250                                       struct device_attribute *attr, char *buf)
8251{
8252        struct Scsi_Host *host = class_to_shost(dev);
8253        struct host_data *host_data = (struct host_data *)host->hostdata;
8254  
8255        return snprintf(buf, 20, "0x%x\n", host_data->ncb->revision_id);
8256}
8257  
8258static struct device_attribute ncr53c8xx_revision_attr = {
8259        .attr   = { .name = "revision", .mode = S_IRUGO, },
8260        .show   = show_ncr53c8xx_revision,
8261};
8262  
8263static struct device_attribute *ncr53c8xx_host_attrs[] = {
8264        &ncr53c8xx_revision_attr,
8265        NULL
8266};
8267
8268/*==========================================================
8269**
8270**      Boot command line.
8271**
8272**==========================================================
8273*/
8274#ifdef  MODULE
8275char *ncr53c8xx;        /* command line passed by insmod */
8276module_param(ncr53c8xx, charp, 0);
8277#endif
8278
8279#ifndef MODULE
8280static int __init ncr53c8xx_setup(char *str)
8281{
8282        return sym53c8xx__setup(str);
8283}
8284
8285__setup("ncr53c8xx=", ncr53c8xx_setup);
8286#endif
8287
8288
8289/*
8290 *      Host attach and initialisations.
8291 *
8292 *      Allocate host data and ncb structure.
8293 *      Request IO region and remap MMIO region.
8294 *      Do chip initialization.
8295 *      If all is OK, install interrupt handling and
8296 *      start the timer daemon.
8297 */
8298struct Scsi_Host * __init ncr_attach(struct scsi_host_template *tpnt,
8299                                        int unit, struct ncr_device *device)
8300{
8301        struct host_data *host_data;
8302        struct ncb *np = NULL;
8303        struct Scsi_Host *instance = NULL;
8304        u_long flags = 0;
8305        int i;
8306
8307        if (!tpnt->name)
8308                tpnt->name      = SCSI_NCR_DRIVER_NAME;
8309        if (!tpnt->shost_attrs)
8310                tpnt->shost_attrs = ncr53c8xx_host_attrs;
8311
8312        tpnt->queuecommand      = ncr53c8xx_queue_command;
8313        tpnt->slave_configure   = ncr53c8xx_slave_configure;
8314        tpnt->slave_alloc       = ncr53c8xx_slave_alloc;
8315        tpnt->eh_bus_reset_handler = ncr53c8xx_bus_reset;
8316        tpnt->can_queue         = SCSI_NCR_CAN_QUEUE;
8317        tpnt->this_id           = 7;
8318        tpnt->sg_tablesize      = SCSI_NCR_SG_TABLESIZE;
8319        tpnt->cmd_per_lun       = SCSI_NCR_CMD_PER_LUN;
8320        tpnt->use_clustering    = ENABLE_CLUSTERING;
8321
8322        if (device->differential)
8323                driver_setup.diff_support = device->differential;
8324
8325        printk(KERN_INFO "ncr53c720-%d: rev 0x%x irq %d\n",
8326                unit, device->chip.revision_id, device->slot.irq);
8327
8328        instance = scsi_host_alloc(tpnt, sizeof(*host_data));
8329        if (!instance)
8330                goto attach_error;
8331        host_data = (struct host_data *) instance->hostdata;
8332
8333        np = __m_calloc_dma(device->dev, sizeof(struct ncb), "NCB");
8334        if (!np)
8335                goto attach_error;
8336        spin_lock_init(&np->smp_lock);
8337        np->dev = device->dev;
8338        np->p_ncb = vtobus(np);
8339        host_data->ncb = np;
8340
8341        np->ccb = m_calloc_dma(sizeof(struct ccb), "CCB");
8342        if (!np->ccb)
8343                goto attach_error;
8344
8345        /* Store input information in the host data structure.  */
8346        np->unit        = unit;
8347        np->verbose     = driver_setup.verbose;
8348        sprintf(np->inst_name, "ncr53c720-%d", np->unit);
8349        np->revision_id = device->chip.revision_id;
8350        np->features    = device->chip.features;
8351        np->clock_divn  = device->chip.nr_divisor;
8352        np->maxoffs     = device->chip.offset_max;
8353        np->maxburst    = device->chip.burst_max;
8354        np->myaddr      = device->host_id;
8355
8356        /* Allocate SCRIPTS areas.  */
8357        np->script0 = m_calloc_dma(sizeof(struct script), "SCRIPT");
8358        if (!np->script0)
8359                goto attach_error;
8360        np->scripth0 = m_calloc_dma(sizeof(struct scripth), "SCRIPTH");
8361        if (!np->scripth0)
8362                goto attach_error;
8363
8364        init_timer(&np->timer);
8365        np->timer.data     = (unsigned long) np;
8366        np->timer.function = ncr53c8xx_timeout;
8367
8368        /* Try to map the controller chip to virtual and physical memory. */
8369
8370        np->paddr       = device->slot.base;
8371        np->paddr2      = (np->features & FE_RAM) ? device->slot.base_2 : 0;
8372
8373        if (device->slot.base_v)
8374                np->vaddr = device->slot.base_v;
8375        else
8376                np->vaddr = ioremap(device->slot.base_c, 128);
8377
8378        if (!np->vaddr) {
8379                printk(KERN_ERR
8380                        "%s: can't map memory mapped IO region\n",ncr_name(np));
8381                goto attach_error;
8382        } else {
8383                if (bootverbose > 1)
8384                        printk(KERN_INFO
8385                                "%s: using memory mapped IO at virtual address 0x%lx\n", ncr_name(np), (u_long) np->vaddr);
8386        }
8387
8388        /* Make the controller's registers available.  Now the INB INW INL
8389         * OUTB OUTW OUTL macros can be used safely.
8390         */
8391
8392        np->reg = (struct ncr_reg __iomem *)np->vaddr;
8393
8394        /* Do chip dependent initialization.  */
8395        ncr_prepare_setting(np);
8396
8397        if (np->paddr2 && sizeof(struct script) > 4096) {
8398                np->paddr2 = 0;
8399                printk(KERN_WARNING "%s: script too large, NOT using on chip RAM.\n",
8400                        ncr_name(np));
8401        }
8402
8403        instance->max_channel   = 0;
8404        instance->this_id       = np->myaddr;
8405        instance->max_id        = np->maxwide ? 16 : 8;
8406        instance->max_lun       = SCSI_NCR_MAX_LUN;
8407        instance->base          = (unsigned long) np->reg;
8408        instance->irq           = device->slot.irq;
8409        instance->unique_id     = device->slot.base;
8410        instance->dma_channel   = 0;
8411        instance->cmd_per_lun   = MAX_TAGS;
8412        instance->can_queue     = (MAX_START-4);
8413        /* This can happen if you forget to call ncr53c8xx_init from
8414         * your module_init */
8415        BUG_ON(!ncr53c8xx_transport_template);
8416        instance->transportt    = ncr53c8xx_transport_template;
8417
8418        /* Patch script to physical addresses */
8419        ncr_script_fill(&script0, &scripth0);
8420
8421        np->scripth     = np->scripth0;
8422        np->p_scripth   = vtobus(np->scripth);
8423        np->p_script    = (np->paddr2) ?  np->paddr2 : vtobus(np->script0);
8424
8425        ncr_script_copy_and_bind(np, (ncrcmd *) &script0,
8426                        (ncrcmd *) np->script0, sizeof(struct script));
8427        ncr_script_copy_and_bind(np, (ncrcmd *) &scripth0,
8428                        (ncrcmd *) np->scripth0, sizeof(struct scripth));
8429        np->ccb->p_ccb  = vtobus (np->ccb);
8430
8431        /* Patch the script for LED support.  */
8432
8433        if (np->features & FE_LED0) {
8434                np->script0->idle[0]  =
8435                                cpu_to_scr(SCR_REG_REG(gpreg, SCR_OR,  0x01));
8436                np->script0->reselected[0] =
8437                                cpu_to_scr(SCR_REG_REG(gpreg, SCR_AND, 0xfe));
8438                np->script0->start[0] =
8439                                cpu_to_scr(SCR_REG_REG(gpreg, SCR_AND, 0xfe));
8440        }
8441
8442        /*
8443         * Look for the target control block of this nexus.
8444         * For i = 0 to 3
8445         *   JUMP ^ IFTRUE (MASK (i, 3)), @(next_lcb)
8446         */
8447        for (i = 0 ; i < 4 ; i++) {
8448                np->jump_tcb[i].l_cmd   =
8449                                cpu_to_scr((SCR_JUMP ^ IFTRUE (MASK (i, 3))));
8450                np->jump_tcb[i].l_paddr =
8451                                cpu_to_scr(NCB_SCRIPTH_PHYS (np, bad_target));
8452        }
8453
8454        ncr_chip_reset(np, 100);
8455
8456        /* Now check the cache handling of the chipset.  */
8457
8458        if (ncr_snooptest(np)) {
8459                printk(KERN_ERR "CACHE INCORRECTLY CONFIGURED.\n");
8460                goto attach_error;
8461        }
8462
8463        /* Install the interrupt handler.  */
8464        np->irq = device->slot.irq;
8465
8466        /* Initialize the fixed part of the default ccb.  */
8467        ncr_init_ccb(np, np->ccb);
8468
8469        /*
8470         * After SCSI devices have been opened, we cannot reset the bus
8471         * safely, so we do it here.  Interrupt handler does the real work.
8472         * Process the reset exception if interrupts are not enabled yet.
8473         * Then enable disconnects.
8474         */
8475        spin_lock_irqsave(&np->smp_lock, flags);
8476        if (ncr_reset_scsi_bus(np, 0, driver_setup.settle_delay) != 0) {
8477                printk(KERN_ERR "%s: FATAL ERROR: CHECK SCSI BUS - CABLES, TERMINATION, DEVICE POWER etc.!\n", ncr_name(np));
8478
8479                spin_unlock_irqrestore(&np->smp_lock, flags);
8480                goto attach_error;
8481        }
8482        ncr_exception(np);
8483
8484        np->disc = 1;
8485
8486        /*
8487         * The middle-level SCSI driver does not wait for devices to settle.
8488         * Wait synchronously if more than 2 seconds.
8489         */
8490        if (driver_setup.settle_delay > 2) {
8491                printk(KERN_INFO "%s: waiting %d seconds for scsi devices to settle...\n",
8492                        ncr_name(np), driver_setup.settle_delay);
8493                mdelay(1000 * driver_setup.settle_delay);
8494        }
8495
8496        /* start the timeout daemon */
8497        np->lasttime=0;
8498        ncr_timeout (np);
8499
8500        /* use SIMPLE TAG messages by default */
8501#ifdef SCSI_NCR_ALWAYS_SIMPLE_TAG
8502        np->order = SIMPLE_QUEUE_TAG;
8503#endif
8504
8505        spin_unlock_irqrestore(&np->smp_lock, flags);
8506
8507        return instance;
8508
8509 attach_error:
8510        if (!instance)
8511                return NULL;
8512        printk(KERN_INFO "%s: detaching...\n", ncr_name(np));
8513        if (!np)
8514                goto unregister;
8515        if (np->scripth0)
8516                m_free_dma(np->scripth0, sizeof(struct scripth), "SCRIPTH");
8517        if (np->script0)
8518                m_free_dma(np->script0, sizeof(struct script), "SCRIPT");
8519        if (np->ccb)
8520                m_free_dma(np->ccb, sizeof(struct ccb), "CCB");
8521        m_free_dma(np, sizeof(struct ncb), "NCB");
8522        host_data->ncb = NULL;
8523
8524 unregister:
8525        scsi_host_put(instance);
8526
8527        return NULL;
8528}
8529
8530
8531void ncr53c8xx_release(struct Scsi_Host *host)
8532{
8533        struct host_data *host_data = shost_priv(host);
8534#ifdef DEBUG_NCR53C8XX
8535        printk("ncr53c8xx: release\n");
8536#endif
8537        if (host_data->ncb)
8538                ncr_detach(host_data->ncb);
8539        scsi_host_put(host);
8540}
8541
8542static void ncr53c8xx_set_period(struct scsi_target *starget, int period)
8543{
8544        struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
8545        struct ncb *np = ((struct host_data *)shost->hostdata)->ncb;
8546        struct tcb *tp = &np->target[starget->id];
8547
8548        if (period > np->maxsync)
8549                period = np->maxsync;
8550        else if (period < np->minsync)
8551                period = np->minsync;
8552
8553        tp->usrsync = period;
8554
8555        ncr_negotiate(np, tp);
8556}
8557
8558static void ncr53c8xx_set_offset(struct scsi_target *starget, int offset)
8559{
8560        struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
8561        struct ncb *np = ((struct host_data *)shost->hostdata)->ncb;
8562        struct tcb *tp = &np->target[starget->id];
8563
8564        if (offset > np->maxoffs)
8565                offset = np->maxoffs;
8566        else if (offset < 0)
8567                offset = 0;
8568
8569        tp->maxoffs = offset;
8570
8571        ncr_negotiate(np, tp);
8572}
8573
8574static void ncr53c8xx_set_width(struct scsi_target *starget, int width)
8575{
8576        struct Scsi_Host *shost = dev_to_shost(starget->dev.parent);
8577        struct ncb *np = ((struct host_data *)shost->hostdata)->ncb;
8578        struct tcb *tp = &np->target[starget->id];
8579
8580        if (width > np->maxwide)
8581                width = np->maxwide;
8582        else if (width < 0)
8583                width = 0;
8584
8585        tp->usrwide = width;
8586
8587        ncr_negotiate(np, tp);
8588}
8589
8590static void ncr53c8xx_get_signalling(struct Scsi_Host *shost)
8591{
8592        struct ncb *np = ((struct host_data *)shost->hostdata)->ncb;
8593        enum spi_signal_type type;
8594
8595        switch (np->scsi_mode) {
8596        case SMODE_SE:
8597                type = SPI_SIGNAL_SE;
8598                break;
8599        case SMODE_HVD:
8600                type = SPI_SIGNAL_HVD;
8601                break;
8602        default:
8603                type = SPI_SIGNAL_UNKNOWN;
8604                break;
8605        }
8606        spi_signalling(shost) = type;
8607}
8608
8609static struct spi_function_template ncr53c8xx_transport_functions =  {
8610        .set_period     = ncr53c8xx_set_period,
8611        .show_period    = 1,
8612        .set_offset     = ncr53c8xx_set_offset,
8613        .show_offset    = 1,
8614        .set_width      = ncr53c8xx_set_width,
8615        .show_width     = 1,
8616        .get_signalling = ncr53c8xx_get_signalling,
8617};
8618
8619int __init ncr53c8xx_init(void)
8620{
8621        ncr53c8xx_transport_template = spi_attach_transport(&ncr53c8xx_transport_functions);
8622        if (!ncr53c8xx_transport_template)
8623                return -ENODEV;
8624        return 0;
8625}
8626
8627void ncr53c8xx_exit(void)
8628{
8629        spi_release_transport(ncr53c8xx_transport_template);
8630}
8631