xref: /freebsd/sys/cam/scsi/scsi_ch.c (revision 7bd6fde3)
1 /*-
2  * Copyright (c) 1997 Justin T. Gibbs.
3  * Copyright (c) 1997, 1998, 1999 Kenneth D. Merry.
4  * All rights reserved.
5  *
6  * Redistribution and use in source and binary forms, with or without
7  * modification, are permitted provided that the following conditions
8  * are met:
9  * 1. Redistributions of source code must retain the above copyright
10  *    notice, this list of conditions, and the following disclaimer,
11  *    without modification, immediately at the beginning of the file.
12  * 2. The name of the author may not be used to endorse or promote products
13  *    derived from this software without specific prior written permission.
14  *
15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18  * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR
19  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25  * SUCH DAMAGE.
26  */
27 
28 /*
29  * Derived from the NetBSD SCSI changer driver.
30  *
31  *	$NetBSD: ch.c,v 1.32 1998/01/12 09:49:12 thorpej Exp $
32  *
33  */
34 /*-
35  * Copyright (c) 1996, 1997 Jason R. Thorpe <thorpej@and.com>
36  * All rights reserved.
37  *
38  * Partially based on an autochanger driver written by Stefan Grefen
39  * and on an autochanger driver written by the Systems Programming Group
40  * at the University of Utah Computer Science Department.
41  *
42  * Redistribution and use in source and binary forms, with or without
43  * modification, are permitted provided that the following conditions
44  * are met:
45  * 1. Redistributions of source code must retain the above copyright
46  *    notice, this list of conditions and the following disclaimer.
47  * 2. Redistributions in binary form must reproduce the above copyright
48  *    notice, this list of conditions and the following disclaimer in the
49  *    documentation and/or other materials provided with the distribution.
50  * 3. All advertising materials mentioning features or use of this software
51  *    must display the following acknowledgements:
52  *	This product includes software developed by Jason R. Thorpe
53  *	for And Communications, http://www.and.com/
54  * 4. The name of the author may not be used to endorse or promote products
55  *    derived from this software without specific prior written permission.
56  *
57  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
58  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
59  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
60  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
61  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
62  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
63  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
64  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
65  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
66  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
67  * SUCH DAMAGE.
68  */
69 
70 #include <sys/cdefs.h>
71 __FBSDID("$FreeBSD$");
72 
73 #include <sys/param.h>
74 #include <sys/queue.h>
75 #include <sys/systm.h>
76 #include <sys/kernel.h>
77 #include <sys/types.h>
78 #include <sys/malloc.h>
79 #include <sys/fcntl.h>
80 #include <sys/conf.h>
81 #include <sys/chio.h>
82 #include <sys/errno.h>
83 #include <sys/devicestat.h>
84 
85 #include <cam/cam.h>
86 #include <cam/cam_ccb.h>
87 #include <cam/cam_periph.h>
88 #include <cam/cam_xpt_periph.h>
89 #include <cam/cam_debug.h>
90 
91 #include <cam/scsi/scsi_all.h>
92 #include <cam/scsi/scsi_message.h>
93 #include <cam/scsi/scsi_ch.h>
94 
95 /*
96  * Timeout definitions for various changer related commands.  They may
97  * be too short for some devices (especially the timeout for INITIALIZE
98  * ELEMENT STATUS).
99  */
100 
101 static const u_int32_t	CH_TIMEOUT_MODE_SENSE                = 6000;
102 static const u_int32_t	CH_TIMEOUT_MOVE_MEDIUM               = 100000;
103 static const u_int32_t	CH_TIMEOUT_EXCHANGE_MEDIUM           = 100000;
104 static const u_int32_t	CH_TIMEOUT_POSITION_TO_ELEMENT       = 100000;
105 static const u_int32_t	CH_TIMEOUT_READ_ELEMENT_STATUS       = 10000;
106 static const u_int32_t	CH_TIMEOUT_SEND_VOLTAG		     = 10000;
107 static const u_int32_t	CH_TIMEOUT_INITIALIZE_ELEMENT_STATUS = 500000;
108 
109 typedef enum {
110 	CH_FLAG_INVALID		= 0x001,
111 	CH_FLAG_OPEN		= 0x002
112 } ch_flags;
113 
114 typedef enum {
115 	CH_STATE_PROBE,
116 	CH_STATE_NORMAL
117 } ch_state;
118 
119 typedef enum {
120 	CH_CCB_PROBE,
121 	CH_CCB_WAITING
122 } ch_ccb_types;
123 
124 typedef enum {
125 	CH_Q_NONE	= 0x00,
126 	CH_Q_NO_DBD	= 0x01
127 } ch_quirks;
128 
129 #define ccb_state	ppriv_field0
130 #define ccb_bp		ppriv_ptr1
131 
132 struct scsi_mode_sense_data {
133 	struct scsi_mode_header_6 header;
134 	struct scsi_mode_blk_desc blk_desc;
135 	union {
136 		struct page_element_address_assignment ea;
137 		struct page_transport_geometry_parameters tg;
138 		struct page_device_capabilities cap;
139 	} pages;
140 };
141 
142 struct ch_softc {
143 	ch_flags	flags;
144 	ch_state	state;
145 	ch_quirks	quirks;
146 	union ccb	saved_ccb;
147 	struct devstat	*device_stats;
148 	struct cdev *dev;
149 
150 	int		sc_picker;	/* current picker */
151 
152 	/*
153 	 * The following information is obtained from the
154 	 * element address assignment page.
155 	 */
156 	int		sc_firsts[CHET_MAX + 1];	/* firsts */
157 	int		sc_counts[CHET_MAX + 1];	/* counts */
158 
159 	/*
160 	 * The following mask defines the legal combinations
161 	 * of elements for the MOVE MEDIUM command.
162 	 */
163 	u_int8_t	sc_movemask[CHET_MAX + 1];
164 
165 	/*
166 	 * As above, but for EXCHANGE MEDIUM.
167 	 */
168 	u_int8_t	sc_exchangemask[CHET_MAX + 1];
169 
170 	/*
171 	 * Quirks; see below.  XXX KDM not implemented yet
172 	 */
173 	int		sc_settledelay;	/* delay for settle */
174 };
175 
176 #define CHUNIT(x)       (minor((x)))
177 
178 static	d_open_t	chopen;
179 static	d_close_t	chclose;
180 static	d_ioctl_t	chioctl;
181 static	periph_init_t	chinit;
182 static  periph_ctor_t	chregister;
183 static	periph_oninv_t	choninvalidate;
184 static  periph_dtor_t   chcleanup;
185 static  periph_start_t  chstart;
186 static	void		chasync(void *callback_arg, u_int32_t code,
187 				struct cam_path *path, void *arg);
188 static	void		chdone(struct cam_periph *periph,
189 			       union ccb *done_ccb);
190 static	int		cherror(union ccb *ccb, u_int32_t cam_flags,
191 				u_int32_t sense_flags);
192 static	int		chmove(struct cam_periph *periph,
193 			       struct changer_move *cm);
194 static	int		chexchange(struct cam_periph *periph,
195 				   struct changer_exchange *ce);
196 static	int		chposition(struct cam_periph *periph,
197 				   struct changer_position *cp);
198 static	int		chgetelemstatus(struct cam_periph *periph,
199 				struct changer_element_status_request *csr);
200 static	int		chsetvoltag(struct cam_periph *periph,
201 				    struct changer_set_voltag_request *csvr);
202 static	int		chielem(struct cam_periph *periph,
203 				unsigned int timeout);
204 static	int		chgetparams(struct cam_periph *periph);
205 
206 static struct periph_driver chdriver =
207 {
208 	chinit, "ch",
209 	TAILQ_HEAD_INITIALIZER(chdriver.units), /* generation */ 0
210 };
211 
212 PERIPHDRIVER_DECLARE(ch, chdriver);
213 
214 static struct cdevsw ch_cdevsw = {
215 	.d_version =	D_VERSION,
216 	.d_flags =	D_NEEDGIANT,
217 	.d_open =	chopen,
218 	.d_close =	chclose,
219 	.d_ioctl =	chioctl,
220 	.d_name =	"ch",
221 };
222 
223 static void
224 chinit(void)
225 {
226 	cam_status status;
227 	struct cam_path *path;
228 
229 	/*
230 	 * Install a global async callback.  This callback will
231 	 * receive async callbacks like "new device found".
232 	 */
233 	status = xpt_create_path(&path, /*periph*/NULL, CAM_XPT_PATH_ID,
234 				 CAM_TARGET_WILDCARD, CAM_LUN_WILDCARD);
235 
236 	if (status == CAM_REQ_CMP) {
237 		struct ccb_setasync csa;
238 
239                 xpt_setup_ccb(&csa.ccb_h, path, /*priority*/5);
240                 csa.ccb_h.func_code = XPT_SASYNC_CB;
241                 csa.event_enable = AC_FOUND_DEVICE;
242                 csa.callback = chasync;
243                 csa.callback_arg = NULL;
244                 xpt_action((union ccb *)&csa);
245 		status = csa.ccb_h.status;
246                 xpt_free_path(path);
247         }
248 
249 	if (status != CAM_REQ_CMP) {
250 		printf("ch: Failed to attach master async callback "
251 		       "due to status 0x%x!\n", status);
252 	}
253 }
254 
255 static void
256 choninvalidate(struct cam_periph *periph)
257 {
258 	struct ch_softc *softc;
259 	struct ccb_setasync csa;
260 
261 	softc = (struct ch_softc *)periph->softc;
262 
263 	/*
264 	 * De-register any async callbacks.
265 	 */
266 	xpt_setup_ccb(&csa.ccb_h, periph->path,
267 		      /* priority */ 5);
268 	csa.ccb_h.func_code = XPT_SASYNC_CB;
269 	csa.event_enable = 0;
270 	csa.callback = chasync;
271 	csa.callback_arg = periph;
272 	xpt_action((union ccb *)&csa);
273 
274 	softc->flags |= CH_FLAG_INVALID;
275 
276 	xpt_print(periph->path, "lost device\n");
277 
278 }
279 
280 static void
281 chcleanup(struct cam_periph *periph)
282 {
283 	struct ch_softc *softc;
284 
285 	softc = (struct ch_softc *)periph->softc;
286 
287 	devstat_remove_entry(softc->device_stats);
288 	destroy_dev(softc->dev);
289 	xpt_print(periph->path, "removing device entry\n");
290 	free(softc, M_DEVBUF);
291 }
292 
293 static void
294 chasync(void *callback_arg, u_int32_t code, struct cam_path *path, void *arg)
295 {
296 	struct cam_periph *periph;
297 
298 	periph = (struct cam_periph *)callback_arg;
299 
300 	switch(code) {
301 	case AC_FOUND_DEVICE:
302 	{
303 		struct ccb_getdev *cgd;
304 		cam_status status;
305 
306 		cgd = (struct ccb_getdev *)arg;
307 		if (cgd == NULL)
308 			break;
309 
310 		if (SID_TYPE(&cgd->inq_data)!= T_CHANGER)
311 			break;
312 
313 		/*
314 		 * Allocate a peripheral instance for
315 		 * this device and start the probe
316 		 * process.
317 		 */
318 		status = cam_periph_alloc(chregister, choninvalidate,
319 					  chcleanup, chstart, "ch",
320 					  CAM_PERIPH_BIO, cgd->ccb_h.path,
321 					  chasync, AC_FOUND_DEVICE, cgd);
322 
323 		if (status != CAM_REQ_CMP
324 		 && status != CAM_REQ_INPROG)
325 			printf("chasync: Unable to probe new device "
326 			       "due to status 0x%x\n", status);
327 
328 		break;
329 
330 	}
331 	default:
332 		cam_periph_async(periph, code, path, arg);
333 		break;
334 	}
335 }
336 
337 static cam_status
338 chregister(struct cam_periph *periph, void *arg)
339 {
340 	struct ch_softc *softc;
341 	struct ccb_setasync csa;
342 	struct ccb_getdev *cgd;
343 
344 	cgd = (struct ccb_getdev *)arg;
345 	if (periph == NULL) {
346 		printf("chregister: periph was NULL!!\n");
347 		return(CAM_REQ_CMP_ERR);
348 	}
349 
350 	if (cgd == NULL) {
351 		printf("chregister: no getdev CCB, can't register device\n");
352 		return(CAM_REQ_CMP_ERR);
353 	}
354 
355 	softc = (struct ch_softc *)malloc(sizeof(*softc),M_DEVBUF,M_NOWAIT);
356 
357 	if (softc == NULL) {
358 		printf("chregister: Unable to probe new device. "
359 		       "Unable to allocate softc\n");
360 		return(CAM_REQ_CMP_ERR);
361 	}
362 
363 	bzero(softc, sizeof(*softc));
364 	softc->state = CH_STATE_PROBE;
365 	periph->softc = softc;
366 	softc->quirks = CH_Q_NONE;
367 
368 	/*
369 	 * Changers don't have a blocksize, and obviously don't support
370 	 * tagged queueing.
371 	 */
372 	softc->device_stats = devstat_new_entry("ch",
373 			  periph->unit_number, 0,
374 			  DEVSTAT_NO_BLOCKSIZE | DEVSTAT_NO_ORDERED_TAGS,
375 			  SID_TYPE(&cgd->inq_data)| DEVSTAT_TYPE_IF_SCSI,
376 			  DEVSTAT_PRIORITY_OTHER);
377 
378 	/* Register the device */
379 	softc->dev = make_dev(&ch_cdevsw, periph->unit_number, UID_ROOT,
380 			      GID_OPERATOR, 0600, "%s%d", periph->periph_name,
381 			      periph->unit_number);
382 	softc->dev->si_drv1 = periph;
383 
384 	/*
385 	 * Add an async callback so that we get
386 	 * notified if this device goes away.
387 	 */
388 	xpt_setup_ccb(&csa.ccb_h, periph->path, /* priority */ 5);
389 	csa.ccb_h.func_code = XPT_SASYNC_CB;
390 	csa.event_enable = AC_LOST_DEVICE;
391 	csa.callback = chasync;
392 	csa.callback_arg = periph;
393 	xpt_action((union ccb *)&csa);
394 
395 	/*
396 	 * Lock this peripheral until we are setup.
397 	 * This first call can't block
398 	 */
399 	(void)cam_periph_lock(periph, PRIBIO);
400 	xpt_schedule(periph, /*priority*/5);
401 
402 	return(CAM_REQ_CMP);
403 }
404 
405 static int
406 chopen(struct cdev *dev, int flags, int fmt, struct thread *td)
407 {
408 	struct cam_periph *periph;
409 	struct ch_softc *softc;
410 	int error;
411 	int s;
412 
413 	periph = (struct cam_periph *)dev->si_drv1;
414 	if (periph == NULL)
415 		return(ENXIO);
416 
417 	softc = (struct ch_softc *)periph->softc;
418 
419 	s = splsoftcam();
420 	if (softc->flags & CH_FLAG_INVALID) {
421 		splx(s);
422 		return(ENXIO);
423 	}
424 
425 	if ((error = cam_periph_lock(periph, PRIBIO | PCATCH)) != 0) {
426 		splx(s);
427 		return (error);
428 	}
429 
430 	splx(s);
431 
432 	if ((softc->flags & CH_FLAG_OPEN) == 0) {
433 		if (cam_periph_acquire(periph) != CAM_REQ_CMP)
434 			return(ENXIO);
435 		softc->flags |= CH_FLAG_OPEN;
436 	}
437 
438 	/*
439 	 * Load information about this changer device into the softc.
440 	 */
441 	if ((error = chgetparams(periph)) != 0) {
442 		softc->flags &= ~CH_FLAG_OPEN;
443 		cam_periph_unlock(periph);
444 		cam_periph_release(periph);
445 		return(error);
446 	}
447 
448 	cam_periph_unlock(periph);
449 
450 	return(error);
451 }
452 
453 static int
454 chclose(struct cdev *dev, int flag, int fmt, struct thread *td)
455 {
456 	struct	cam_periph *periph;
457 	struct	ch_softc *softc;
458 	int	error;
459 
460 	error = 0;
461 
462 	periph = (struct cam_periph *)dev->si_drv1;
463 	if (periph == NULL)
464 		return(ENXIO);
465 
466 	softc = (struct ch_softc *)periph->softc;
467 
468 	if ((error = cam_periph_lock(periph, PRIBIO)) != 0)
469 		return(error);
470 
471 	softc->flags &= ~CH_FLAG_OPEN;
472 
473 	cam_periph_unlock(periph);
474 	cam_periph_release(periph);
475 
476 	return(0);
477 }
478 
479 static void
480 chstart(struct cam_periph *periph, union ccb *start_ccb)
481 {
482 	struct ch_softc *softc;
483 	int s;
484 
485 	softc = (struct ch_softc *)periph->softc;
486 
487 	switch (softc->state) {
488 	case CH_STATE_NORMAL:
489 	{
490 		s = splbio();
491 		if (periph->immediate_priority <= periph->pinfo.priority){
492 			start_ccb->ccb_h.ccb_state = CH_CCB_WAITING;
493 
494 			SLIST_INSERT_HEAD(&periph->ccb_list, &start_ccb->ccb_h,
495 					  periph_links.sle);
496 			periph->immediate_priority = CAM_PRIORITY_NONE;
497 			splx(s);
498 			wakeup(&periph->ccb_list);
499 		} else
500 			splx(s);
501 		break;
502 	}
503 	case CH_STATE_PROBE:
504 	{
505 		int mode_buffer_len;
506 		void *mode_buffer;
507 
508 		/*
509 		 * Include the block descriptor when calculating the mode
510 		 * buffer length,
511 		 */
512 		mode_buffer_len = sizeof(struct scsi_mode_header_6) +
513 				  sizeof(struct scsi_mode_blk_desc) +
514 				 sizeof(struct page_element_address_assignment);
515 
516 		mode_buffer = malloc(mode_buffer_len, M_TEMP, M_NOWAIT);
517 
518 		if (mode_buffer == NULL) {
519 			printf("chstart: couldn't malloc mode sense data\n");
520 			break;
521 		}
522 		bzero(mode_buffer, mode_buffer_len);
523 
524 		/*
525 		 * Get the element address assignment page.
526 		 */
527 		scsi_mode_sense(&start_ccb->csio,
528 				/* retries */ 1,
529 				/* cbfcnp */ chdone,
530 				/* tag_action */ MSG_SIMPLE_Q_TAG,
531 				/* dbd */ (softc->quirks & CH_Q_NO_DBD) ?
532 					FALSE : TRUE,
533 				/* page_code */ SMS_PAGE_CTRL_CURRENT,
534 				/* page */ CH_ELEMENT_ADDR_ASSIGN_PAGE,
535 				/* param_buf */ (u_int8_t *)mode_buffer,
536 				/* param_len */ mode_buffer_len,
537 				/* sense_len */ SSD_FULL_SIZE,
538 				/* timeout */ CH_TIMEOUT_MODE_SENSE);
539 
540 		start_ccb->ccb_h.ccb_bp = NULL;
541 		start_ccb->ccb_h.ccb_state = CH_CCB_PROBE;
542 		xpt_action(start_ccb);
543 		break;
544 	}
545 	}
546 }
547 
548 static void
549 chdone(struct cam_periph *periph, union ccb *done_ccb)
550 {
551 	struct ch_softc *softc;
552 	struct ccb_scsiio *csio;
553 
554 	softc = (struct ch_softc *)periph->softc;
555 	csio = &done_ccb->csio;
556 
557 	switch(done_ccb->ccb_h.ccb_state) {
558 	case CH_CCB_PROBE:
559 	{
560 		struct scsi_mode_header_6 *mode_header;
561 		struct page_element_address_assignment *ea;
562 		char announce_buf[80];
563 
564 
565 		mode_header = (struct scsi_mode_header_6 *)csio->data_ptr;
566 
567 		ea = (struct page_element_address_assignment *)
568 			find_mode_page_6(mode_header);
569 
570 		if ((done_ccb->ccb_h.status & CAM_STATUS_MASK) == CAM_REQ_CMP){
571 
572 			softc->sc_firsts[CHET_MT] = scsi_2btoul(ea->mtea);
573 			softc->sc_counts[CHET_MT] = scsi_2btoul(ea->nmte);
574 			softc->sc_firsts[CHET_ST] = scsi_2btoul(ea->fsea);
575 			softc->sc_counts[CHET_ST] = scsi_2btoul(ea->nse);
576 			softc->sc_firsts[CHET_IE] = scsi_2btoul(ea->fieea);
577 			softc->sc_counts[CHET_IE] = scsi_2btoul(ea->niee);
578 			softc->sc_firsts[CHET_DT] = scsi_2btoul(ea->fdtea);
579 			softc->sc_counts[CHET_DT] = scsi_2btoul(ea->ndte);
580 			softc->sc_picker = softc->sc_firsts[CHET_MT];
581 
582 #define PLURAL(c)	(c) == 1 ? "" : "s"
583 			snprintf(announce_buf, sizeof(announce_buf),
584 				"%d slot%s, %d drive%s, "
585 				"%d picker%s, %d portal%s",
586 		    		softc->sc_counts[CHET_ST],
587 				PLURAL(softc->sc_counts[CHET_ST]),
588 		    		softc->sc_counts[CHET_DT],
589 				PLURAL(softc->sc_counts[CHET_DT]),
590 		    		softc->sc_counts[CHET_MT],
591 				PLURAL(softc->sc_counts[CHET_MT]),
592 		    		softc->sc_counts[CHET_IE],
593 				PLURAL(softc->sc_counts[CHET_IE]));
594 #undef PLURAL
595 		} else {
596 			int error;
597 
598 			error = cherror(done_ccb, CAM_RETRY_SELTO,
599 					SF_RETRY_UA | SF_NO_PRINT);
600 			/*
601 			 * Retry any UNIT ATTENTION type errors.  They
602 			 * are expected at boot.
603 			 */
604 			if (error == ERESTART) {
605 				/*
606 				 * A retry was scheuled, so
607 				 * just return.
608 				 */
609 				return;
610 			} else if (error != 0) {
611 				int retry_scheduled;
612 				struct scsi_mode_sense_6 *sms;
613 
614 				sms = (struct scsi_mode_sense_6 *)
615 					done_ccb->csio.cdb_io.cdb_bytes;
616 
617 				/*
618 				 * Check to see if block descriptors were
619 				 * disabled.  Some devices don't like that.
620 				 * We're taking advantage of the fact that
621 				 * the first few bytes of the 6 and 10 byte
622 				 * mode sense commands are the same.  If
623 				 * block descriptors were disabled, enable
624 				 * them and re-send the command.
625 				 */
626 				if (sms->byte2 & SMS_DBD) {
627 					sms->byte2 &= ~SMS_DBD;
628 					xpt_action(done_ccb);
629 					softc->quirks |= CH_Q_NO_DBD;
630 					retry_scheduled = 1;
631 				} else
632 					retry_scheduled = 0;
633 
634 				/* Don't wedge this device's queue */
635 				cam_release_devq(done_ccb->ccb_h.path,
636 						 /*relsim_flags*/0,
637 						 /*reduction*/0,
638 						 /*timeout*/0,
639 						 /*getcount_only*/0);
640 
641 				if (retry_scheduled)
642 					return;
643 
644 				if ((done_ccb->ccb_h.status & CAM_STATUS_MASK)
645 				    == CAM_SCSI_STATUS_ERROR)
646 					scsi_sense_print(&done_ccb->csio);
647 				else {
648 					xpt_print(periph->path,
649 					    "got CAM status %#x\n",
650 					    done_ccb->ccb_h.status);
651 				}
652 				xpt_print(periph->path, "fatal error, failed "
653 				    "to attach to device\n");
654 
655 				cam_periph_invalidate(periph);
656 
657 				announce_buf[0] = '\0';
658 			}
659 		}
660 		if (announce_buf[0] != '\0')
661 			xpt_announce_periph(periph, announce_buf);
662 		softc->state = CH_STATE_NORMAL;
663 		free(mode_header, M_TEMP);
664 		/*
665 		 * Since our peripheral may be invalidated by an error
666 		 * above or an external event, we must release our CCB
667 		 * before releasing the probe lock on the peripheral.
668 		 * The peripheral will only go away once the last lock
669 		 * is removed, and we need it around for the CCB release
670 		 * operation.
671 		 */
672 		xpt_release_ccb(done_ccb);
673 		cam_periph_unlock(periph);
674 		return;
675 	}
676 	case CH_CCB_WAITING:
677 	{
678 		/* Caller will release the CCB */
679 		wakeup(&done_ccb->ccb_h.cbfcnp);
680 		return;
681 	}
682 	default:
683 		break;
684 	}
685 	xpt_release_ccb(done_ccb);
686 }
687 
688 static int
689 cherror(union ccb *ccb, u_int32_t cam_flags, u_int32_t sense_flags)
690 {
691 	struct ch_softc *softc;
692 	struct cam_periph *periph;
693 
694 	periph = xpt_path_periph(ccb->ccb_h.path);
695 	softc = (struct ch_softc *)periph->softc;
696 
697 	return (cam_periph_error(ccb, cam_flags, sense_flags,
698 				 &softc->saved_ccb));
699 }
700 
701 static int
702 chioctl(struct cdev *dev, u_long cmd, caddr_t addr, int flag, struct thread *td)
703 {
704 	struct cam_periph *periph;
705 	struct ch_softc *softc;
706 	int error;
707 
708 	periph = (struct cam_periph *)dev->si_drv1;
709 	if (periph == NULL)
710 		return(ENXIO);
711 
712 	CAM_DEBUG(periph->path, CAM_DEBUG_TRACE, ("entering chioctl\n"));
713 
714 	softc = (struct ch_softc *)periph->softc;
715 
716 	error = 0;
717 
718 	CAM_DEBUG(periph->path, CAM_DEBUG_TRACE,
719 		  ("trying to do ioctl %#lx\n", cmd));
720 
721 	/*
722 	 * If this command can change the device's state, we must
723 	 * have the device open for writing.
724 	 */
725 	switch (cmd) {
726 	case CHIOGPICKER:
727 	case CHIOGPARAMS:
728 	case CHIOGSTATUS:
729 		break;
730 
731 	default:
732 		if ((flag & FWRITE) == 0)
733 			return (EBADF);
734 	}
735 
736 	switch (cmd) {
737 	case CHIOMOVE:
738 		error = chmove(periph, (struct changer_move *)addr);
739 		break;
740 
741 	case CHIOEXCHANGE:
742 		error = chexchange(periph, (struct changer_exchange *)addr);
743 		break;
744 
745 	case CHIOPOSITION:
746 		error = chposition(periph, (struct changer_position *)addr);
747 		break;
748 
749 	case CHIOGPICKER:
750 		*(int *)addr = softc->sc_picker - softc->sc_firsts[CHET_MT];
751 		break;
752 
753 	case CHIOSPICKER:
754 	{
755 		int new_picker = *(int *)addr;
756 
757 		if (new_picker > (softc->sc_counts[CHET_MT] - 1))
758 			return (EINVAL);
759 		softc->sc_picker = softc->sc_firsts[CHET_MT] + new_picker;
760 		break;
761 	}
762 	case CHIOGPARAMS:
763 	{
764 		struct changer_params *cp = (struct changer_params *)addr;
765 
766 		cp->cp_npickers = softc->sc_counts[CHET_MT];
767 		cp->cp_nslots = softc->sc_counts[CHET_ST];
768 		cp->cp_nportals = softc->sc_counts[CHET_IE];
769 		cp->cp_ndrives = softc->sc_counts[CHET_DT];
770 		break;
771 	}
772 	case CHIOIELEM:
773 		error = chielem(periph, *(unsigned int *)addr);
774 		break;
775 
776 	case CHIOGSTATUS:
777 	{
778 		error = chgetelemstatus(periph,
779 			       (struct changer_element_status_request *) addr);
780 		break;
781 	}
782 
783 	case CHIOSETVOLTAG:
784 	{
785 		error = chsetvoltag(periph,
786 				    (struct changer_set_voltag_request *) addr);
787 		break;
788 	}
789 
790 	/* Implement prevent/allow? */
791 
792 	default:
793 		error = cam_periph_ioctl(periph, cmd, addr, cherror);
794 		break;
795 	}
796 
797 	return (error);
798 }
799 
800 static int
801 chmove(struct cam_periph *periph, struct changer_move *cm)
802 {
803 	struct ch_softc *softc;
804 	u_int16_t fromelem, toelem;
805 	union ccb *ccb;
806 	int error;
807 
808 	error = 0;
809 	softc = (struct ch_softc *)periph->softc;
810 
811 	/*
812 	 * Check arguments.
813 	 */
814 	if ((cm->cm_fromtype > CHET_DT) || (cm->cm_totype > CHET_DT))
815 		return (EINVAL);
816 	if ((cm->cm_fromunit > (softc->sc_counts[cm->cm_fromtype] - 1)) ||
817 	    (cm->cm_tounit > (softc->sc_counts[cm->cm_totype] - 1)))
818 		return (ENODEV);
819 
820 	/*
821 	 * Check the request against the changer's capabilities.
822 	 */
823 	if ((softc->sc_movemask[cm->cm_fromtype] & (1 << cm->cm_totype)) == 0)
824 		return (ENODEV);
825 
826 	/*
827 	 * Calculate the source and destination elements.
828 	 */
829 	fromelem = softc->sc_firsts[cm->cm_fromtype] + cm->cm_fromunit;
830 	toelem = softc->sc_firsts[cm->cm_totype] + cm->cm_tounit;
831 
832 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
833 
834 	scsi_move_medium(&ccb->csio,
835 			 /* retries */ 1,
836 			 /* cbfcnp */ chdone,
837 			 /* tag_action */ MSG_SIMPLE_Q_TAG,
838 			 /* tea */ softc->sc_picker,
839 			 /* src */ fromelem,
840 			 /* dst */ toelem,
841 			 /* invert */ (cm->cm_flags & CM_INVERT) ? TRUE : FALSE,
842 			 /* sense_len */ SSD_FULL_SIZE,
843 			 /* timeout */ CH_TIMEOUT_MOVE_MEDIUM);
844 
845 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/CAM_RETRY_SELTO,
846 				  /*sense_flags*/ SF_RETRY_UA,
847 				  softc->device_stats);
848 
849 	xpt_release_ccb(ccb);
850 
851 	return(error);
852 }
853 
854 static int
855 chexchange(struct cam_periph *periph, struct changer_exchange *ce)
856 {
857 	struct ch_softc *softc;
858 	u_int16_t src, dst1, dst2;
859 	union ccb *ccb;
860 	int error;
861 
862 	error = 0;
863 	softc = (struct ch_softc *)periph->softc;
864 	/*
865 	 * Check arguments.
866 	 */
867 	if ((ce->ce_srctype > CHET_DT) || (ce->ce_fdsttype > CHET_DT) ||
868 	    (ce->ce_sdsttype > CHET_DT))
869 		return (EINVAL);
870 	if ((ce->ce_srcunit > (softc->sc_counts[ce->ce_srctype] - 1)) ||
871 	    (ce->ce_fdstunit > (softc->sc_counts[ce->ce_fdsttype] - 1)) ||
872 	    (ce->ce_sdstunit > (softc->sc_counts[ce->ce_sdsttype] - 1)))
873 		return (ENODEV);
874 
875 	/*
876 	 * Check the request against the changer's capabilities.
877 	 */
878 	if (((softc->sc_exchangemask[ce->ce_srctype] &
879 	     (1 << ce->ce_fdsttype)) == 0) ||
880 	    ((softc->sc_exchangemask[ce->ce_fdsttype] &
881 	     (1 << ce->ce_sdsttype)) == 0))
882 		return (ENODEV);
883 
884 	/*
885 	 * Calculate the source and destination elements.
886 	 */
887 	src = softc->sc_firsts[ce->ce_srctype] + ce->ce_srcunit;
888 	dst1 = softc->sc_firsts[ce->ce_fdsttype] + ce->ce_fdstunit;
889 	dst2 = softc->sc_firsts[ce->ce_sdsttype] + ce->ce_sdstunit;
890 
891 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
892 
893 	scsi_exchange_medium(&ccb->csio,
894 			     /* retries */ 1,
895 			     /* cbfcnp */ chdone,
896 			     /* tag_action */ MSG_SIMPLE_Q_TAG,
897 			     /* tea */ softc->sc_picker,
898 			     /* src */ src,
899 			     /* dst1 */ dst1,
900 			     /* dst2 */ dst2,
901 			     /* invert1 */ (ce->ce_flags & CE_INVERT1) ?
902 			                   TRUE : FALSE,
903 			     /* invert2 */ (ce->ce_flags & CE_INVERT2) ?
904 			                   TRUE : FALSE,
905 			     /* sense_len */ SSD_FULL_SIZE,
906 			     /* timeout */ CH_TIMEOUT_EXCHANGE_MEDIUM);
907 
908 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/CAM_RETRY_SELTO,
909 				  /*sense_flags*/ SF_RETRY_UA,
910 				  softc->device_stats);
911 
912 	xpt_release_ccb(ccb);
913 
914 	return(error);
915 }
916 
917 static int
918 chposition(struct cam_periph *periph, struct changer_position *cp)
919 {
920 	struct ch_softc *softc;
921 	u_int16_t dst;
922 	union ccb *ccb;
923 	int error;
924 
925 	error = 0;
926 	softc = (struct ch_softc *)periph->softc;
927 
928 	/*
929 	 * Check arguments.
930 	 */
931 	if (cp->cp_type > CHET_DT)
932 		return (EINVAL);
933 	if (cp->cp_unit > (softc->sc_counts[cp->cp_type] - 1))
934 		return (ENODEV);
935 
936 	/*
937 	 * Calculate the destination element.
938 	 */
939 	dst = softc->sc_firsts[cp->cp_type] + cp->cp_unit;
940 
941 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
942 
943 	scsi_position_to_element(&ccb->csio,
944 				 /* retries */ 1,
945 				 /* cbfcnp */ chdone,
946 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
947 				 /* tea */ softc->sc_picker,
948 				 /* dst */ dst,
949 				 /* invert */ (cp->cp_flags & CP_INVERT) ?
950 					      TRUE : FALSE,
951 				 /* sense_len */ SSD_FULL_SIZE,
952 				 /* timeout */ CH_TIMEOUT_POSITION_TO_ELEMENT);
953 
954 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
955 				  /*sense_flags*/ SF_RETRY_UA,
956 				  softc->device_stats);
957 
958 	xpt_release_ccb(ccb);
959 
960 	return(error);
961 }
962 
963 /*
964  * Copy a volume tag to a volume_tag struct, converting SCSI byte order
965  * to host native byte order in the volume serial number.  The volume
966  * label as returned by the changer is transferred to user mode as
967  * nul-terminated string.  Volume labels are truncated at the first
968  * space, as suggested by SCSI-2.
969  */
970 static	void
971 copy_voltag(struct changer_voltag *uvoltag, struct volume_tag *voltag)
972 {
973 	int i;
974 	for (i=0; i<CH_VOLTAG_MAXLEN; i++) {
975 		char c = voltag->vif[i];
976 		if (c && c != ' ')
977 			uvoltag->cv_volid[i] = c;
978 	        else
979 			break;
980 	}
981 	uvoltag->cv_serial = scsi_2btoul(voltag->vsn);
982 }
983 
984 /*
985  * Copy an an element status descriptor to a user-mode
986  * changer_element_status structure.
987  */
988 
989 static	void
990 copy_element_status(struct ch_softc *softc,
991 		    u_int16_t flags,
992 		    struct read_element_status_descriptor *desc,
993 		    struct changer_element_status *ces)
994 {
995 	u_int16_t eaddr = scsi_2btoul(desc->eaddr);
996 	u_int16_t et;
997 
998 	ces->ces_int_addr = eaddr;
999 	/* set up logical address in element status */
1000 	for (et = CHET_MT; et <= CHET_DT; et++) {
1001 		if ((softc->sc_firsts[et] <= eaddr)
1002 		    && ((softc->sc_firsts[et] + softc->sc_counts[et])
1003 			> eaddr)) {
1004 			ces->ces_addr = eaddr - softc->sc_firsts[et];
1005 			ces->ces_type = et;
1006 			break;
1007 		}
1008 	}
1009 
1010 	ces->ces_flags = desc->flags1;
1011 
1012 	ces->ces_sensecode = desc->sense_code;
1013 	ces->ces_sensequal = desc->sense_qual;
1014 
1015 	if (desc->flags2 & READ_ELEMENT_STATUS_INVERT)
1016 		ces->ces_flags |= CES_INVERT;
1017 
1018 	if (desc->flags2 & READ_ELEMENT_STATUS_SVALID) {
1019 
1020 		eaddr = scsi_2btoul(desc->ssea);
1021 
1022 		/* convert source address to logical format */
1023 		for (et = CHET_MT; et <= CHET_DT; et++) {
1024 			if ((softc->sc_firsts[et] <= eaddr)
1025 			    && ((softc->sc_firsts[et] + softc->sc_counts[et])
1026 				> eaddr)) {
1027 				ces->ces_source_addr =
1028 					eaddr - softc->sc_firsts[et];
1029 				ces->ces_source_type = et;
1030 				ces->ces_flags |= CES_SOURCE_VALID;
1031 				break;
1032 			}
1033 		}
1034 
1035 		if (!(ces->ces_flags & CES_SOURCE_VALID))
1036 			printf("ch: warning: could not map element source "
1037 			       "address %ud to a valid element type\n",
1038 			       eaddr);
1039 	}
1040 
1041 
1042 	if (flags & READ_ELEMENT_STATUS_PVOLTAG)
1043 		copy_voltag(&(ces->ces_pvoltag), &(desc->pvoltag));
1044 	if (flags & READ_ELEMENT_STATUS_AVOLTAG)
1045 		copy_voltag(&(ces->ces_avoltag), &(desc->avoltag));
1046 
1047 	if (desc->dt_scsi_flags & READ_ELEMENT_STATUS_DT_IDVALID) {
1048 		ces->ces_flags |= CES_SCSIID_VALID;
1049 		ces->ces_scsi_id = desc->dt_scsi_addr;
1050 	}
1051 
1052 	if (desc->dt_scsi_addr & READ_ELEMENT_STATUS_DT_LUVALID) {
1053 		ces->ces_flags |= CES_LUN_VALID;
1054 		ces->ces_scsi_lun =
1055 			desc->dt_scsi_flags & READ_ELEMENT_STATUS_DT_LUNMASK;
1056 	}
1057 }
1058 
1059 static int
1060 chgetelemstatus(struct cam_periph *periph,
1061 		struct changer_element_status_request *cesr)
1062 {
1063 	struct read_element_status_header *st_hdr;
1064 	struct read_element_status_page_header *pg_hdr;
1065 	struct read_element_status_descriptor *desc;
1066 	caddr_t data = NULL;
1067 	size_t size, desclen;
1068 	int avail, i, error = 0;
1069 	struct changer_element_status *user_data = NULL;
1070 	struct ch_softc *softc;
1071 	union ccb *ccb;
1072 	int chet = cesr->cesr_element_type;
1073 	int want_voltags = (cesr->cesr_flags & CESR_VOLTAGS) ? 1 : 0;
1074 
1075 	softc = (struct ch_softc *)periph->softc;
1076 
1077 	/* perform argument checking */
1078 
1079 	/*
1080 	 * Perform a range check on the cesr_element_{base,count}
1081 	 * request argument fields.
1082 	 */
1083 	if ((softc->sc_counts[chet] - cesr->cesr_element_base) <= 0
1084 	    || (cesr->cesr_element_base + cesr->cesr_element_count)
1085 	        > softc->sc_counts[chet])
1086 		return (EINVAL);
1087 
1088 	/*
1089 	 * Request one descriptor for the given element type.  This
1090 	 * is used to determine the size of the descriptor so that
1091 	 * we can allocate enough storage for all of them.  We assume
1092 	 * that the first one can fit into 1k.
1093 	 */
1094 	data = (caddr_t)malloc(1024, M_DEVBUF, M_WAITOK);
1095 
1096 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
1097 
1098 	scsi_read_element_status(&ccb->csio,
1099 				 /* retries */ 1,
1100 				 /* cbfcnp */ chdone,
1101 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
1102 				 /* voltag */ want_voltags,
1103 				 /* sea */ softc->sc_firsts[chet],
1104 				 /* count */ 1,
1105 				 /* data_ptr */ data,
1106 				 /* dxfer_len */ 1024,
1107 				 /* sense_len */ SSD_FULL_SIZE,
1108 				 /* timeout */ CH_TIMEOUT_READ_ELEMENT_STATUS);
1109 
1110 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1111 				  /*sense_flags*/ SF_RETRY_UA,
1112 				  softc->device_stats);
1113 
1114 	if (error)
1115 		goto done;
1116 
1117 	st_hdr = (struct read_element_status_header *)data;
1118 	pg_hdr = (struct read_element_status_page_header *)((uintptr_t)st_hdr +
1119 		  sizeof(struct read_element_status_header));
1120 	desclen = scsi_2btoul(pg_hdr->edl);
1121 
1122 	size = sizeof(struct read_element_status_header) +
1123 	       sizeof(struct read_element_status_page_header) +
1124 	       (desclen * cesr->cesr_element_count);
1125 
1126 	/*
1127 	 * Reallocate storage for descriptors and get them from the
1128 	 * device.
1129 	 */
1130 	free(data, M_DEVBUF);
1131 	data = (caddr_t)malloc(size, M_DEVBUF, M_WAITOK);
1132 
1133 	scsi_read_element_status(&ccb->csio,
1134 				 /* retries */ 1,
1135 				 /* cbfcnp */ chdone,
1136 				 /* tag_action */ MSG_SIMPLE_Q_TAG,
1137 				 /* voltag */ want_voltags,
1138 				 /* sea */ softc->sc_firsts[chet]
1139 				 + cesr->cesr_element_base,
1140 				 /* count */ cesr->cesr_element_count,
1141 				 /* data_ptr */ data,
1142 				 /* dxfer_len */ size,
1143 				 /* sense_len */ SSD_FULL_SIZE,
1144 				 /* timeout */ CH_TIMEOUT_READ_ELEMENT_STATUS);
1145 
1146 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1147 				  /*sense_flags*/ SF_RETRY_UA,
1148 				  softc->device_stats);
1149 
1150 	if (error)
1151 		goto done;
1152 
1153 	/*
1154 	 * Fill in the user status array.
1155 	 */
1156 	st_hdr = (struct read_element_status_header *)data;
1157 	pg_hdr = (struct read_element_status_page_header *)((uintptr_t)st_hdr +
1158 		  sizeof(struct read_element_status_header));
1159 	avail = scsi_2btoul(st_hdr->count);
1160 
1161 	if (avail != cesr->cesr_element_count) {
1162 		xpt_print(periph->path,
1163 		    "warning, READ ELEMENT STATUS avail != count\n");
1164 	}
1165 
1166 	user_data = (struct changer_element_status *)
1167 		malloc(avail * sizeof(struct changer_element_status),
1168 		       M_DEVBUF, M_WAITOK | M_ZERO);
1169 
1170 	desc = (struct read_element_status_descriptor *)((uintptr_t)data +
1171 		sizeof(struct read_element_status_header) +
1172 		sizeof(struct read_element_status_page_header));
1173 	/*
1174 	 * Set up the individual element status structures
1175 	 */
1176 	for (i = 0; i < avail; ++i) {
1177 		struct changer_element_status *ces = &(user_data[i]);
1178 
1179 		copy_element_status(softc, pg_hdr->flags, desc, ces);
1180 
1181 		desc = (struct read_element_status_descriptor *)
1182 		       ((uintptr_t)desc + desclen);
1183 	}
1184 
1185 	/* Copy element status structures out to userspace. */
1186 	error = copyout(user_data,
1187 			cesr->cesr_element_status,
1188 			avail * sizeof(struct changer_element_status));
1189 
1190  done:
1191 	xpt_release_ccb(ccb);
1192 
1193 	if (data != NULL)
1194 		free(data, M_DEVBUF);
1195 	if (user_data != NULL)
1196 		free(user_data, M_DEVBUF);
1197 
1198 	return (error);
1199 }
1200 
1201 static int
1202 chielem(struct cam_periph *periph,
1203 	unsigned int timeout)
1204 {
1205 	union ccb *ccb;
1206 	struct ch_softc *softc;
1207 	int error;
1208 
1209 	if (!timeout) {
1210 		timeout = CH_TIMEOUT_INITIALIZE_ELEMENT_STATUS;
1211 	} else {
1212 		timeout *= 1000;
1213 	}
1214 
1215 	error = 0;
1216 	softc = (struct ch_softc *)periph->softc;
1217 
1218 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
1219 
1220 	scsi_initialize_element_status(&ccb->csio,
1221 				      /* retries */ 1,
1222 				      /* cbfcnp */ chdone,
1223 				      /* tag_action */ MSG_SIMPLE_Q_TAG,
1224 				      /* sense_len */ SSD_FULL_SIZE,
1225 				      /* timeout */ timeout);
1226 
1227 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1228 				  /*sense_flags*/ SF_RETRY_UA,
1229 				  softc->device_stats);
1230 
1231 	xpt_release_ccb(ccb);
1232 
1233 	return(error);
1234 }
1235 
1236 static int
1237 chsetvoltag(struct cam_periph *periph,
1238 	    struct changer_set_voltag_request *csvr)
1239 {
1240 	union ccb *ccb;
1241 	struct ch_softc *softc;
1242 	u_int16_t ea;
1243 	u_int8_t sac;
1244 	struct scsi_send_volume_tag_parameters ssvtp;
1245 	int error;
1246 	int i;
1247 
1248 	error = 0;
1249 	softc = (struct ch_softc *)periph->softc;
1250 
1251 	bzero(&ssvtp, sizeof(ssvtp));
1252 	for (i=0; i<sizeof(ssvtp.vitf); i++) {
1253 		ssvtp.vitf[i] = ' ';
1254 	}
1255 
1256 	/*
1257 	 * Check arguments.
1258 	 */
1259 	if (csvr->csvr_type > CHET_DT)
1260 		return EINVAL;
1261 	if (csvr->csvr_addr > (softc->sc_counts[csvr->csvr_type] - 1))
1262 		return ENODEV;
1263 
1264 	ea = softc->sc_firsts[csvr->csvr_type] + csvr->csvr_addr;
1265 
1266 	if (csvr->csvr_flags & CSVR_ALTERNATE) {
1267 		switch (csvr->csvr_flags & CSVR_MODE_MASK) {
1268 		case CSVR_MODE_SET:
1269 			sac = SEND_VOLUME_TAG_ASSERT_ALTERNATE;
1270 			break;
1271 		case CSVR_MODE_REPLACE:
1272 			sac = SEND_VOLUME_TAG_REPLACE_ALTERNATE;
1273 			break;
1274 		case CSVR_MODE_CLEAR:
1275 			sac = SEND_VOLUME_TAG_UNDEFINED_ALTERNATE;
1276 			break;
1277 		default:
1278 			error = EINVAL;
1279 			goto out;
1280 		}
1281 	} else {
1282 		switch (csvr->csvr_flags & CSVR_MODE_MASK) {
1283 		case CSVR_MODE_SET:
1284 			sac = SEND_VOLUME_TAG_ASSERT_PRIMARY;
1285 			break;
1286 		case CSVR_MODE_REPLACE:
1287 			sac = SEND_VOLUME_TAG_REPLACE_PRIMARY;
1288 			break;
1289 		case CSVR_MODE_CLEAR:
1290 			sac = SEND_VOLUME_TAG_UNDEFINED_PRIMARY;
1291 			break;
1292 		default:
1293 			error = EINVAL;
1294 			goto out;
1295 		}
1296 	}
1297 
1298 	memcpy(ssvtp.vitf, csvr->csvr_voltag.cv_volid,
1299 	       min(strlen(csvr->csvr_voltag.cv_volid), sizeof(ssvtp.vitf)));
1300 	scsi_ulto2b(csvr->csvr_voltag.cv_serial, ssvtp.minvsn);
1301 
1302 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
1303 
1304 	scsi_send_volume_tag(&ccb->csio,
1305 			     /* retries */ 1,
1306 			     /* cbfcnp */ chdone,
1307 			     /* tag_action */ MSG_SIMPLE_Q_TAG,
1308 			     /* element_address */ ea,
1309 			     /* send_action_code */ sac,
1310 			     /* parameters */ &ssvtp,
1311 			     /* sense_len */ SSD_FULL_SIZE,
1312 			     /* timeout */ CH_TIMEOUT_SEND_VOLTAG);
1313 
1314 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1315 				  /*sense_flags*/ SF_RETRY_UA,
1316 				  softc->device_stats);
1317 
1318 	xpt_release_ccb(ccb);
1319 
1320  out:
1321 	return error;
1322 }
1323 
1324 static int
1325 chgetparams(struct cam_periph *periph)
1326 {
1327 	union ccb *ccb;
1328 	struct ch_softc *softc;
1329 	void *mode_buffer;
1330 	int mode_buffer_len;
1331 	struct page_element_address_assignment *ea;
1332 	struct page_device_capabilities *cap;
1333 	int error, from, dbd;
1334 	u_int8_t *moves, *exchanges;
1335 
1336 	error = 0;
1337 
1338 	softc = (struct ch_softc *)periph->softc;
1339 
1340 	ccb = cam_periph_getccb(periph, /*priority*/ 1);
1341 
1342 	/*
1343 	 * The scsi_mode_sense_data structure is just a convenience
1344 	 * structure that allows us to easily calculate the worst-case
1345 	 * storage size of the mode sense buffer.
1346 	 */
1347 	mode_buffer_len = sizeof(struct scsi_mode_sense_data);
1348 
1349 	mode_buffer = malloc(mode_buffer_len, M_TEMP, M_NOWAIT);
1350 
1351 	if (mode_buffer == NULL) {
1352 		printf("chgetparams: couldn't malloc mode sense data\n");
1353 		return(ENOSPC);
1354 	}
1355 
1356 	bzero(mode_buffer, mode_buffer_len);
1357 
1358 	if (softc->quirks & CH_Q_NO_DBD)
1359 		dbd = FALSE;
1360 	else
1361 		dbd = TRUE;
1362 
1363 	/*
1364 	 * Get the element address assignment page.
1365 	 */
1366 	scsi_mode_sense(&ccb->csio,
1367 			/* retries */ 1,
1368 			/* cbfcnp */ chdone,
1369 			/* tag_action */ MSG_SIMPLE_Q_TAG,
1370 			/* dbd */ dbd,
1371 			/* page_code */ SMS_PAGE_CTRL_CURRENT,
1372 			/* page */ CH_ELEMENT_ADDR_ASSIGN_PAGE,
1373 			/* param_buf */ (u_int8_t *)mode_buffer,
1374 			/* param_len */ mode_buffer_len,
1375 			/* sense_len */ SSD_FULL_SIZE,
1376 			/* timeout */ CH_TIMEOUT_MODE_SENSE);
1377 
1378 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1379 				  /* sense_flags */ SF_RETRY_UA|SF_NO_PRINT,
1380 				  softc->device_stats);
1381 
1382 	if (error) {
1383 		if (dbd) {
1384 			struct scsi_mode_sense_6 *sms;
1385 
1386 			sms = (struct scsi_mode_sense_6 *)
1387 				ccb->csio.cdb_io.cdb_bytes;
1388 
1389 			sms->byte2 &= ~SMS_DBD;
1390 			error = cam_periph_runccb(ccb, cherror,
1391 						  /*cam_flags*/ CAM_RETRY_SELTO,
1392 				  		  /*sense_flags*/ SF_RETRY_UA,
1393 						  softc->device_stats);
1394 		} else {
1395 			/*
1396 			 * Since we disabled sense printing above, print
1397 			 * out the sense here since we got an error.
1398 			 */
1399 			scsi_sense_print(&ccb->csio);
1400 		}
1401 
1402 		if (error) {
1403 			xpt_print(periph->path,
1404 			    "chgetparams: error getting element "
1405 			    "address page\n");
1406 			xpt_release_ccb(ccb);
1407 			free(mode_buffer, M_TEMP);
1408 			return(error);
1409 		}
1410 	}
1411 
1412 	ea = (struct page_element_address_assignment *)
1413 		find_mode_page_6((struct scsi_mode_header_6 *)mode_buffer);
1414 
1415 	softc->sc_firsts[CHET_MT] = scsi_2btoul(ea->mtea);
1416 	softc->sc_counts[CHET_MT] = scsi_2btoul(ea->nmte);
1417 	softc->sc_firsts[CHET_ST] = scsi_2btoul(ea->fsea);
1418 	softc->sc_counts[CHET_ST] = scsi_2btoul(ea->nse);
1419 	softc->sc_firsts[CHET_IE] = scsi_2btoul(ea->fieea);
1420 	softc->sc_counts[CHET_IE] = scsi_2btoul(ea->niee);
1421 	softc->sc_firsts[CHET_DT] = scsi_2btoul(ea->fdtea);
1422 	softc->sc_counts[CHET_DT] = scsi_2btoul(ea->ndte);
1423 
1424 	bzero(mode_buffer, mode_buffer_len);
1425 
1426 	/*
1427 	 * Now get the device capabilities page.
1428 	 */
1429 	scsi_mode_sense(&ccb->csio,
1430 			/* retries */ 1,
1431 			/* cbfcnp */ chdone,
1432 			/* tag_action */ MSG_SIMPLE_Q_TAG,
1433 			/* dbd */ dbd,
1434 			/* page_code */ SMS_PAGE_CTRL_CURRENT,
1435 			/* page */ CH_DEVICE_CAP_PAGE,
1436 			/* param_buf */ (u_int8_t *)mode_buffer,
1437 			/* param_len */ mode_buffer_len,
1438 			/* sense_len */ SSD_FULL_SIZE,
1439 			/* timeout */ CH_TIMEOUT_MODE_SENSE);
1440 
1441 	error = cam_periph_runccb(ccb, cherror, /*cam_flags*/ CAM_RETRY_SELTO,
1442 				  /* sense_flags */ SF_RETRY_UA | SF_NO_PRINT,
1443 				  softc->device_stats);
1444 
1445 	if (error) {
1446 		if (dbd) {
1447 			struct scsi_mode_sense_6 *sms;
1448 
1449 			sms = (struct scsi_mode_sense_6 *)
1450 				ccb->csio.cdb_io.cdb_bytes;
1451 
1452 			sms->byte2 &= ~SMS_DBD;
1453 			error = cam_periph_runccb(ccb, cherror,
1454 						  /*cam_flags*/ CAM_RETRY_SELTO,
1455 				  		  /*sense_flags*/ SF_RETRY_UA,
1456 						  softc->device_stats);
1457 		} else {
1458 			/*
1459 			 * Since we disabled sense printing above, print
1460 			 * out the sense here since we got an error.
1461 			 */
1462 			scsi_sense_print(&ccb->csio);
1463 		}
1464 
1465 		if (error) {
1466 			xpt_print(periph->path,
1467 			    "chgetparams: error getting device "
1468 			    "capabilities page\n");
1469 			xpt_release_ccb(ccb);
1470 			free(mode_buffer, M_TEMP);
1471 			return(error);
1472 		}
1473 	}
1474 
1475 	xpt_release_ccb(ccb);
1476 
1477 	cap = (struct page_device_capabilities *)
1478 		find_mode_page_6((struct scsi_mode_header_6 *)mode_buffer);
1479 
1480 	bzero(softc->sc_movemask, sizeof(softc->sc_movemask));
1481 	bzero(softc->sc_exchangemask, sizeof(softc->sc_exchangemask));
1482 	moves = cap->move_from;
1483 	exchanges = cap->exchange_with;
1484 	for (from = CHET_MT; from <= CHET_MAX; ++from) {
1485 		softc->sc_movemask[from] = moves[from];
1486 		softc->sc_exchangemask[from] = exchanges[from];
1487 	}
1488 
1489 	free(mode_buffer, M_TEMP);
1490 
1491 	return(error);
1492 }
1493 
1494 void
1495 scsi_move_medium(struct ccb_scsiio *csio, u_int32_t retries,
1496 		 void (*cbfcnp)(struct cam_periph *, union ccb *),
1497 		 u_int8_t tag_action, u_int32_t tea, u_int32_t src,
1498 		 u_int32_t dst, int invert, u_int8_t sense_len,
1499 		 u_int32_t timeout)
1500 {
1501 	struct scsi_move_medium *scsi_cmd;
1502 
1503 	scsi_cmd = (struct scsi_move_medium *)&csio->cdb_io.cdb_bytes;
1504 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1505 
1506 	scsi_cmd->opcode = MOVE_MEDIUM;
1507 
1508 	scsi_ulto2b(tea, scsi_cmd->tea);
1509 	scsi_ulto2b(src, scsi_cmd->src);
1510 	scsi_ulto2b(dst, scsi_cmd->dst);
1511 
1512 	if (invert)
1513 		scsi_cmd->invert |= MOVE_MEDIUM_INVERT;
1514 
1515 	cam_fill_csio(csio,
1516 		      retries,
1517 		      cbfcnp,
1518 		      /*flags*/ CAM_DIR_NONE,
1519 		      tag_action,
1520 		      /*data_ptr*/ NULL,
1521 		      /*dxfer_len*/ 0,
1522 		      sense_len,
1523 		      sizeof(*scsi_cmd),
1524 		      timeout);
1525 }
1526 
1527 void
1528 scsi_exchange_medium(struct ccb_scsiio *csio, u_int32_t retries,
1529 		     void (*cbfcnp)(struct cam_periph *, union ccb *),
1530 		     u_int8_t tag_action, u_int32_t tea, u_int32_t src,
1531 		     u_int32_t dst1, u_int32_t dst2, int invert1,
1532 		     int invert2, u_int8_t sense_len, u_int32_t timeout)
1533 {
1534 	struct scsi_exchange_medium *scsi_cmd;
1535 
1536 	scsi_cmd = (struct scsi_exchange_medium *)&csio->cdb_io.cdb_bytes;
1537 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1538 
1539 	scsi_cmd->opcode = EXCHANGE_MEDIUM;
1540 
1541 	scsi_ulto2b(tea, scsi_cmd->tea);
1542 	scsi_ulto2b(src, scsi_cmd->src);
1543 	scsi_ulto2b(dst1, scsi_cmd->fdst);
1544 	scsi_ulto2b(dst2, scsi_cmd->sdst);
1545 
1546 	if (invert1)
1547 		scsi_cmd->invert |= EXCHANGE_MEDIUM_INV1;
1548 
1549 	if (invert2)
1550 		scsi_cmd->invert |= EXCHANGE_MEDIUM_INV2;
1551 
1552 	cam_fill_csio(csio,
1553 		      retries,
1554 		      cbfcnp,
1555 		      /*flags*/ CAM_DIR_NONE,
1556 		      tag_action,
1557 		      /*data_ptr*/ NULL,
1558 		      /*dxfer_len*/ 0,
1559 		      sense_len,
1560 		      sizeof(*scsi_cmd),
1561 		      timeout);
1562 }
1563 
1564 void
1565 scsi_position_to_element(struct ccb_scsiio *csio, u_int32_t retries,
1566 			 void (*cbfcnp)(struct cam_periph *, union ccb *),
1567 			 u_int8_t tag_action, u_int32_t tea, u_int32_t dst,
1568 			 int invert, u_int8_t sense_len, u_int32_t timeout)
1569 {
1570 	struct scsi_position_to_element *scsi_cmd;
1571 
1572 	scsi_cmd = (struct scsi_position_to_element *)&csio->cdb_io.cdb_bytes;
1573 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1574 
1575 	scsi_cmd->opcode = POSITION_TO_ELEMENT;
1576 
1577 	scsi_ulto2b(tea, scsi_cmd->tea);
1578 	scsi_ulto2b(dst, scsi_cmd->dst);
1579 
1580 	if (invert)
1581 		scsi_cmd->invert |= POSITION_TO_ELEMENT_INVERT;
1582 
1583 	cam_fill_csio(csio,
1584 		      retries,
1585 		      cbfcnp,
1586 		      /*flags*/ CAM_DIR_NONE,
1587 		      tag_action,
1588 		      /*data_ptr*/ NULL,
1589 		      /*dxfer_len*/ 0,
1590 		      sense_len,
1591 		      sizeof(*scsi_cmd),
1592 		      timeout);
1593 }
1594 
1595 void
1596 scsi_read_element_status(struct ccb_scsiio *csio, u_int32_t retries,
1597 			 void (*cbfcnp)(struct cam_periph *, union ccb *),
1598 			 u_int8_t tag_action, int voltag, u_int32_t sea,
1599 			 u_int32_t count, u_int8_t *data_ptr,
1600 			 u_int32_t dxfer_len, u_int8_t sense_len,
1601 			 u_int32_t timeout)
1602 {
1603 	struct scsi_read_element_status *scsi_cmd;
1604 
1605 	scsi_cmd = (struct scsi_read_element_status *)&csio->cdb_io.cdb_bytes;
1606 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1607 
1608 	scsi_cmd->opcode = READ_ELEMENT_STATUS;
1609 
1610 	scsi_ulto2b(sea, scsi_cmd->sea);
1611 	scsi_ulto2b(count, scsi_cmd->count);
1612 	scsi_ulto3b(dxfer_len, scsi_cmd->len);
1613 
1614 	if (voltag)
1615 		scsi_cmd->byte2 |= READ_ELEMENT_STATUS_VOLTAG;
1616 
1617 	cam_fill_csio(csio,
1618 		      retries,
1619 		      cbfcnp,
1620 		      /*flags*/ CAM_DIR_IN,
1621 		      tag_action,
1622 		      data_ptr,
1623 		      dxfer_len,
1624 		      sense_len,
1625 		      sizeof(*scsi_cmd),
1626 		      timeout);
1627 }
1628 
1629 void
1630 scsi_initialize_element_status(struct ccb_scsiio *csio, u_int32_t retries,
1631 			       void (*cbfcnp)(struct cam_periph *, union ccb *),
1632 			       u_int8_t tag_action, u_int8_t sense_len,
1633 			       u_int32_t timeout)
1634 {
1635 	struct scsi_initialize_element_status *scsi_cmd;
1636 
1637 	scsi_cmd = (struct scsi_initialize_element_status *)
1638 		    &csio->cdb_io.cdb_bytes;
1639 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1640 
1641 	scsi_cmd->opcode = INITIALIZE_ELEMENT_STATUS;
1642 
1643 	cam_fill_csio(csio,
1644 		      retries,
1645 		      cbfcnp,
1646 		      /*flags*/ CAM_DIR_NONE,
1647 		      tag_action,
1648 		      /* data_ptr */ NULL,
1649 		      /* dxfer_len */ 0,
1650 		      sense_len,
1651 		      sizeof(*scsi_cmd),
1652 		      timeout);
1653 }
1654 
1655 void
1656 scsi_send_volume_tag(struct ccb_scsiio *csio, u_int32_t retries,
1657 		     void (*cbfcnp)(struct cam_periph *, union ccb *),
1658 		     u_int8_t tag_action,
1659 		     u_int16_t element_address,
1660 		     u_int8_t send_action_code,
1661 		     struct scsi_send_volume_tag_parameters *parameters,
1662 		     u_int8_t sense_len, u_int32_t timeout)
1663 {
1664 	struct scsi_send_volume_tag *scsi_cmd;
1665 
1666 	scsi_cmd = (struct scsi_send_volume_tag *) &csio->cdb_io.cdb_bytes;
1667 	bzero(scsi_cmd, sizeof(*scsi_cmd));
1668 
1669 	scsi_cmd->opcode = SEND_VOLUME_TAG;
1670 	scsi_ulto2b(element_address, scsi_cmd->ea);
1671 	scsi_cmd->sac = send_action_code;
1672 	scsi_ulto2b(sizeof(*parameters), scsi_cmd->pll);
1673 
1674 	cam_fill_csio(csio,
1675 		      retries,
1676 		      cbfcnp,
1677 		      /*flags*/ CAM_DIR_OUT,
1678 		      tag_action,
1679 		      /* data_ptr */ (u_int8_t *) parameters,
1680 		      sizeof(*parameters),
1681 		      sense_len,
1682 		      sizeof(*scsi_cmd),
1683 		      timeout);
1684 }
1685