vserver 1.9.5.x5
[linux-2.6.git] / drivers / scsi / sg.c
index 7b0665d..f5feebf 100644 (file)
@@ -7,7 +7,7 @@
  * Original driver (sg.c):
  *        Copyright (C) 1992 Lawrence Foard
  * Version 2 and 3 extensions to driver:
- *        Copyright (C) 1998 - 2004 Douglas Gilbert
+ *        Copyright (C) 1998 - 2005 Douglas Gilbert
  *
  *  Modified  19-JAN-1998  Richard Gooch <rgooch@atnf.csiro.au>  Devfs support
  *
@@ -18,8 +18,8 @@
  *
  */
 
-static int sg_version_num = 30531;     /* 2 digits for each component */
-#define SG_VERSION_STR "3.5.31"
+static int sg_version_num = 30532;     /* 2 digits for each component */
+#define SG_VERSION_STR "3.5.32"
 
 /*
  *  D. P. Gilbert (dgilbert@interlog.com, dougg@triode.net.au), notes:
@@ -47,8 +47,9 @@ static int sg_version_num = 30531;    /* 2 digits for each component */
 #include <linux/devfs_fs_kernel.h>
 #include <linux/cdev.h>
 #include <linux/seq_file.h>
-
 #include <linux/blkdev.h>
+#include <linux/delay.h>
+
 #include "scsi.h"
 #include <scsi/scsi_host.h>
 #include <scsi/scsi_driver.h>
@@ -59,7 +60,7 @@ static int sg_version_num = 30531;    /* 2 digits for each component */
 
 #ifdef CONFIG_SCSI_PROC_FS
 #include <linux/proc_fs.h>
-static char *sg_version_date = "20040516";
+static char *sg_version_date = "20050117";
 
 static int sg_proc_init(void);
 static void sg_proc_cleanup(void);
@@ -107,7 +108,7 @@ static void sg_remove(struct class_device *);
 
 static Scsi_Request *dummy_cmdp;       /* only used for sizeof */
 
-static rwlock_t sg_dev_arr_lock = RW_LOCK_UNLOCKED;    /* Also used to lock
+static DEFINE_RWLOCK(sg_dev_arr_lock); /* Also used to lock
                                                           file descriptor list for device */
 
 static struct class_interface sg_interface = {
@@ -205,8 +206,6 @@ static Sg_request *sg_get_rq_mark(Sg_fd * sfp, int pack_id);
 static Sg_request *sg_add_request(Sg_fd * sfp);
 static int sg_remove_request(Sg_fd * sfp, Sg_request * srp);
 static int sg_res_in_use(Sg_fd * sfp);
-static int sg_ms_to_jif(unsigned int msecs);
-static inline unsigned sg_jif_to_ms(int jifs);
 static int sg_allow_access(unsigned char opcode, char dev_type);
 static int sg_build_direct(Sg_request * srp, Sg_fd * sfp, int dxfer_len);
 static Sg_device *sg_get_dev(int dev);
@@ -564,6 +563,20 @@ sg_write(struct file *filp, const char __user *buf, size_t count, loff_t * ppos)
        hp->usr_ptr = NULL;
        if (__copy_from_user(cmnd, buf, cmd_size))
                return -EFAULT;
+       /*
+        * SG_DXFER_TO_FROM_DEV is functionally equivalent to SG_DXFER_FROM_DEV,
+        * but is is possible that the app intended SG_DXFER_TO_DEV, because there
+        * is a non-zero input_size, so emit a warning.
+        */
+       if (hp->dxfer_direction == SG_DXFER_TO_FROM_DEV)
+               if (printk_ratelimit())
+                       printk(KERN_WARNING
+                              "sg_write: data in/out %d/%d bytes for SCSI command 0x%x--"
+                              "guessing data in;\n" KERN_WARNING "   "
+                              "program %s not setting count and/or reply_len properly\n",
+                              old_hdr.reply_len - (int)SZ_SG_HEADER,
+                              input_size, (unsigned int) cmnd[0],
+                              current->comm);
        k = sg_common_write(sfp, srp, cmnd, sfp->timeout, blocking);
        return (k < 0) ? k : count;
 }
@@ -577,6 +590,7 @@ sg_new_write(Sg_fd * sfp, const char __user *buf, size_t count,
        sg_io_hdr_t *hp;
        unsigned char cmnd[sizeof (dummy_cmdp->sr_cmnd)];
        int timeout;
+       unsigned long ul_timeout;
 
        if (count < SZ_SG_IO_HDR)
                return -EINVAL;
@@ -611,7 +625,8 @@ sg_new_write(Sg_fd * sfp, const char __user *buf, size_t count,
                        return -EBUSY;  /* reserve buffer already being used */
                }
        }
-       timeout = sg_ms_to_jif(srp->header.timeout);
+       ul_timeout = msecs_to_jiffies(srp->header.timeout);
+       timeout = (ul_timeout < INT_MAX) ? ul_timeout : INT_MAX;
        if ((!hp->cmdp) || (hp->cmd_len < 6) || (hp->cmd_len > sizeof (cmnd))) {
                sg_remove_request(sfp, srp);
                return -EMSGSIZE;
@@ -719,17 +734,16 @@ sg_common_write(Sg_fd * sfp, Sg_request * srp,
        return 0;
 }
 
-static inline unsigned
-sg_jif_to_ms(int jifs)
+static int
+sg_srp_done(Sg_request *srp, Sg_fd *sfp)
 {
-       if (jifs <= 0)
-               return 0U;
-       else {
-               unsigned int j = (unsigned int) jifs;
-               return (j <
-                       (UINT_MAX / 1000)) ? ((j * 1000) / HZ) : ((j / HZ) *
-                                                                 1000);
-       }
+       unsigned long iflags;
+       int done;
+
+       read_lock_irqsave(&sfp->rq_list_lock, iflags);
+       done = srp->done;
+       read_unlock_irqrestore(&sfp->rq_list_lock, iflags);
+       return done;
 }
 
 static int
@@ -771,7 +785,7 @@ sg_ioctl(struct inode *inode, struct file *filp,
                        while (1) {
                                result = 0;     /* following macro to beat race condition */
                                __wait_event_interruptible(sfp->read_wait,
-                                       (sdp->detached || sfp->closed || srp->done),
+                                       (sdp->detached || sfp->closed || sg_srp_done(srp, sfp)),
                                                           result);
                                if (sdp->detached)
                                        return -ENODEV;
@@ -782,7 +796,9 @@ sg_ioctl(struct inode *inode, struct file *filp,
                                srp->orphan = 1;
                                return result;  /* -ERESTARTSYS because signal hit process */
                        }
+                       write_lock_irqsave(&sfp->rq_list_lock, iflags);
                        srp->done = 2;
+                       write_unlock_irqrestore(&sfp->rq_list_lock, iflags);
                        result = sg_new_read(sfp, p, SZ_SG_IO_HDR, srp);
                        return (result < 0) ? result : 0;
                }
@@ -941,7 +957,7 @@ sg_ioctl(struct inode *inode, struct file *filp,
                                            srp->header.driver_status;
                                        rinfo[val].duration =
                                            srp->done ? srp->header.duration :
-                                           sg_jif_to_ms(
+                                           jiffies_to_msecs(
                                                jiffies - srp->header.duration);
                                        rinfo[val].orphan = srp->orphan;
                                        rinfo[val].sg_io_owned = srp->sg_io_owned;
@@ -1225,6 +1241,7 @@ sg_cmd_done(Scsi_Cmnd * SCpnt)
        Sg_device *sdp = NULL;
        Sg_fd *sfp;
        Sg_request *srp = NULL;
+       unsigned long iflags;
 
        if (SCpnt && (SRpnt = SCpnt->sc_request))
                srp = (Sg_request *) SRpnt->upper_private_data;
@@ -1263,8 +1280,10 @@ sg_cmd_done(Scsi_Cmnd * SCpnt)
        srp->header.resid = SCpnt->resid;
        /* N.B. unit of duration changes here from jiffies to millisecs */
        srp->header.duration =
-           sg_jif_to_ms(jiffies - (int) srp->header.duration);
+           jiffies_to_msecs(jiffies - srp->header.duration);
        if (0 != SRpnt->sr_result) {
+               struct scsi_sense_hdr sshdr;
+
                memcpy(srp->sense_b, SRpnt->sr_sense_buffer,
                       sizeof (srp->sense_b));
                srp->header.status = 0xff & SRpnt->sr_result;
@@ -1279,11 +1298,12 @@ sg_cmd_done(Scsi_Cmnd * SCpnt)
 
                /* Following if statement is a patch supplied by Eric Youngdale */
                if (driver_byte(SRpnt->sr_result) != 0
-                   && (SRpnt->sr_sense_buffer[0] & 0x7f) == 0x70
-                   && (SRpnt->sr_sense_buffer[2] & 0xf) == UNIT_ATTENTION
+                   && scsi_command_normalize_sense(SCpnt, &sshdr)
+                   && !scsi_sense_is_deferred(&sshdr)
+                   && sshdr.sense_key == UNIT_ATTENTION
                    && sdp->device->removable) {
-                       /* Detected disc change. Set the bit - this may be used if */
-                       /* there are filesystems using this device. */
+                       /* Detected possible disc change. Set the bit - this */
+                       /* may be used if there are filesystems using this device */
                        sdp->device->changed = 1;
                }
        }
@@ -1313,8 +1333,10 @@ sg_cmd_done(Scsi_Cmnd * SCpnt)
        if (sfp && srp) {
                /* Now wake up any sg_read() that is waiting for this packet. */
                kill_fasync(&sfp->async_qp, SIGPOLL, POLL_IN);
+               write_lock_irqsave(&sfp->rq_list_lock, iflags);
                srp->done = 1;
                wake_up_interruptible(&sfp->read_wait);
+               write_unlock_irqrestore(&sfp->rq_list_lock, iflags);
        }
 }
 
@@ -1508,7 +1530,7 @@ sg_remove(struct class_device *cl_dev)
                                tsfp = sfp->nextfp;
                                for (srp = sfp->headrp; srp; srp = tsrp) {
                                        tsrp = srp->nextrp;
-                                       if (sfp->closed || (0 == srp->done))
+                                       if (sfp->closed || (0 == sg_srp_done(srp, sfp)))
                                                sg_finish_rem_req(srp);
                                }
                                if (sfp->closed) {
@@ -1547,15 +1569,15 @@ sg_remove(struct class_device *cl_dev)
        }
 
        if (delay)
-               scsi_sleep(2);  /* dirty detach so delay device destruction */
+               msleep(10);     /* dirty detach so delay device destruction */
 }
 
 /* Set 'perm' (4th argument) to 0 to disable module_param's definition
  * of sysfs parameters (which module_param doesn't yet support).
  * Sysfs parameters defined explicitly below.
  */
-module_param_named(def_reserved_size, def_reserved_size, int, 0);
-module_param_named(allow_dio, sg_allow_dio, int, 0);
+module_param_named(def_reserved_size, def_reserved_size, int, S_IRUGO);
+module_param_named(allow_dio, sg_allow_dio, int, S_IRUGO | S_IWUSR);
 
 MODULE_AUTHOR("Douglas Gilbert");
 MODULE_DESCRIPTION("SCSI generic (sg) driver");
@@ -2421,7 +2443,7 @@ sg_add_sfp(Sg_device * sdp, int dev)
                return NULL;
        memset(sfp, 0, sizeof (Sg_fd));
        init_waitqueue_head(&sfp->read_wait);
-       sfp->rq_list_lock = RW_LOCK_UNLOCKED;
+       rwlock_init(&sfp->rq_list_lock);
 
        sfp->timeout = SG_DEFAULT_TIMEOUT;
        sfp->timeout_user = SG_DEFAULT_TIMEOUT_USER;
@@ -2490,7 +2512,7 @@ sg_remove_sfp(Sg_device * sdp, Sg_fd * sfp)
 
        for (srp = sfp->headrp; srp; srp = tsrp) {
                tsrp = srp->nextrp;
-               if (srp->done)
+               if (sg_srp_done(srp, sfp))
                        sg_finish_rem_req(srp);
                else
                        ++dirty;
@@ -2587,20 +2609,14 @@ sg_page_free(char *buff, int size)
        free_pages((unsigned long) buff, order);
 }
 
-static int
-sg_ms_to_jif(unsigned int msecs)
-{
-       if ((UINT_MAX / 2U) < msecs)
-               return INT_MAX; /* special case, set largest possible */
-       else
-               return ((int) msecs <
-                       (INT_MAX / 1000)) ? (((int) msecs * HZ) / 1000)
-                   : (((int) msecs / 1000) * HZ);
-}
+#ifndef MAINTENANCE_IN_CMD
+#define MAINTENANCE_IN_CMD 0xa3
+#endif
 
 static unsigned char allow_ops[] = { TEST_UNIT_READY, REQUEST_SENSE,
        INQUIRY, READ_CAPACITY, READ_BUFFER, READ_6, READ_10, READ_12,
-       MODE_SENSE, MODE_SENSE_10, LOG_SENSE
+       READ_16, MODE_SENSE, MODE_SENSE_10, LOG_SENSE, REPORT_LUNS,
+       SERVICE_ACTION_IN, RECEIVE_DIAGNOSTIC, READ_LONG, MAINTENANCE_IN_CMD
 };
 
 static int
@@ -2960,7 +2976,7 @@ static void sg_proc_debug_helper(struct seq_file *s, Sg_device * sdp)
        for (k = 0; (fp = sg_get_nth_sfp(sdp, k)); ++k) {
                seq_printf(s, "   FD(%d): timeout=%dms bufflen=%d "
                           "(res)sgat=%d low_dma=%d\n", k + 1,
-                          sg_jif_to_ms(fp->timeout),
+                          jiffies_to_msecs(fp->timeout),
                           fp->reserve.bufflen,
                           (int) fp->reserve.k_use_sg,
                           (int) fp->low_dma);
@@ -2996,8 +3012,8 @@ static void sg_proc_debug_helper(struct seq_file *s, Sg_device * sdp)
                                seq_printf(s, " dur=%d", hp->duration);
                        else
                                seq_printf(s, " t_o/elap=%d/%d",
-                                 new_interface ? hp->timeout : sg_jif_to_ms(fp->timeout),
-                                 sg_jif_to_ms(hp->duration ? (jiffies - hp->duration) : 0));
+                                 new_interface ? hp->timeout : jiffies_to_msecs(fp->timeout),
+                                 jiffies_to_msecs(hp->duration ? (jiffies - hp->duration) : 0));
                        seq_printf(s, "ms sgat=%d op=0x%02x\n", usg,
                                   (int) srp->data.cmd_opcode);
                }