err.no Git - linux-2.6/blob - drivers/scsi/scsi_debug.c

   1 /*
   2  * vvvvvvvvvvvvvvvvvvvvvvv Original vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv
   3  *  Copyright (C) 1992  Eric Youngdale
   4  *  Simulate a host adapter with 2 disks attached.  Do a lot of checking
   5  *  to make sure that we are not getting blocks mixed up, and PANIC if
   6  *  anything out of the ordinary is seen.
   7  * ^^^^^^^^^^^^^^^^^^^^^^^ Original ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   8  *
   9  *  This version is more generic, simulating a variable number of disk
  10  *  (or disk like devices) sharing a common amount of RAM. To be more
  11  *  realistic, the simulated devices have the transport attributes of
  12  *  SAS disks.
  13  *
  14  *
  15  *  For documentation see http://www.torque.net/sg/sdebug26.html
  16  *
  17  *   D. Gilbert (dpg) work for Magneto-Optical device test [20010421]
  18  *   dpg: work for devfs large number of disks [20010809]
  19  *        forked for lk 2.5 series [20011216, 20020101]
  20  *        use vmalloc() more inquiry+mode_sense [20020302]
  21  *        add timers for delayed responses [20020721]
  22  *   Patrick Mansfield <patmans@us.ibm.com> max_luns+scsi_level [20021031]
  23  *   Mike Anderson <andmike@us.ibm.com> sysfs work [20021118]
  24  *   dpg: change style of boot options to "scsi_debug.num_tgts=2" and
  25  *        module options to "modprobe scsi_debug num_tgts=2" [20021221]
  26  */
  27
  28 #include <linux/module.h>
  29
  30 #include <linux/kernel.h>
  31 #include <linux/errno.h>
  32 #include <linux/timer.h>
  33 #include <linux/types.h>
  34 #include <linux/string.h>
  35 #include <linux/genhd.h>
  36 #include <linux/fs.h>
  37 #include <linux/init.h>
  38 #include <linux/proc_fs.h>
  39 #include <linux/vmalloc.h>
  40 #include <linux/moduleparam.h>
  41 #include <linux/scatterlist.h>
  42
  43 #include <linux/blkdev.h>
  44 #include "scsi.h"
  45 #include <scsi/scsi_host.h>
  46 #include <scsi/scsicam.h>
  47
  48 #include <linux/stat.h>
  49
  50 #include "scsi_logging.h"
  51 #include "scsi_debug.h"
  52
  53 #define SCSI_DEBUG_VERSION "1.81"
  54 static const char * scsi_debug_version_date = "20070104";
  55
  56 /* Additional Sense Code (ASC) */
  57 #define NO_ADDITIONAL_SENSE 0x0
  58 #define LOGICAL_UNIT_NOT_READY 0x4
  59 #define UNRECOVERED_READ_ERR 0x11
  60 #define PARAMETER_LIST_LENGTH_ERR 0x1a
  61 #define INVALID_OPCODE 0x20
  62 #define ADDR_OUT_OF_RANGE 0x21
  63 #define INVALID_FIELD_IN_CDB 0x24
  64 #define INVALID_FIELD_IN_PARAM_LIST 0x26
  65 #define POWERON_RESET 0x29
  66 #define SAVING_PARAMS_UNSUP 0x39
  67 #define TRANSPORT_PROBLEM 0x4b
  68 #define THRESHOLD_EXCEEDED 0x5d
  69 #define LOW_POWER_COND_ON 0x5e
  70
  71 /* Additional Sense Code Qualifier (ASCQ) */
  72 #define ACK_NAK_TO 0x3
  73
  74 #define SDEBUG_TAGGED_QUEUING 0 /* 0 | MSG_SIMPLE_TAG | MSG_ORDERED_TAG */
  75
  76 /* Default values for driver parameters */
  77 #define DEF_NUM_HOST   1
  78 #define DEF_NUM_TGTS   1
  79 #define DEF_MAX_LUNS   1
  80 /* With these defaults, this driver will make 1 host with 1 target
  81  * (id 0) containing 1 logical unit (lun 0). That is 1 device.
  82  */
  83 #define DEF_DELAY   1
  84 #define DEF_DEV_SIZE_MB   8
  85 #define DEF_EVERY_NTH   0
  86 #define DEF_NUM_PARTS   0
  87 #define DEF_OPTS   0
  88 #define DEF_SCSI_LEVEL   5    /* INQUIRY, byte2 [5->SPC-3] */
  89 #define DEF_PTYPE   0
  90 #define DEF_D_SENSE   0
  91 #define DEF_NO_LUN_0   0
  92 #define DEF_VIRTUAL_GB   0
  93 #define DEF_FAKE_RW     0
  94 #define DEF_VPD_USE_HOSTNO 1
  95
  96 /* bit mask values for scsi_debug_opts */
  97 #define SCSI_DEBUG_OPT_NOISE   1
  98 #define SCSI_DEBUG_OPT_MEDIUM_ERR   2
  99 #define SCSI_DEBUG_OPT_TIMEOUT   4
 100 #define SCSI_DEBUG_OPT_RECOVERED_ERR   8
 101 #define SCSI_DEBUG_OPT_TRANSPORT_ERR   16
 102 /* When "every_nth" > 0 then modulo "every_nth" commands:
 103  *   - a no response is simulated if SCSI_DEBUG_OPT_TIMEOUT is set
 104  *   - a RECOVERED_ERROR is simulated on successful read and write
 105  *     commands if SCSI_DEBUG_OPT_RECOVERED_ERR is set.
 106  *   - a TRANSPORT_ERROR is simulated on successful read and write
 107  *     commands if SCSI_DEBUG_OPT_TRANSPORT_ERR is set.
 108  *
 109  * When "every_nth" < 0 then after "- every_nth" commands:
 110  *   - a no response is simulated if SCSI_DEBUG_OPT_TIMEOUT is set
 111  *   - a RECOVERED_ERROR is simulated on successful read and write
 112  *     commands if SCSI_DEBUG_OPT_RECOVERED_ERR is set.
 113  *   - a TRANSPORT_ERROR is simulated on successful read and write
 114  *     commands if SCSI_DEBUG_OPT_TRANSPORT_ERR is set.
 115  * This will continue until some other action occurs (e.g. the user
 116  * writing a new value (other than -1 or 1) to every_nth via sysfs).
 117  */
 118
 119 /* when 1==SCSI_DEBUG_OPT_MEDIUM_ERR, a medium error is simulated at this
 120  * sector on read commands: */
 121 #define OPT_MEDIUM_ERR_ADDR   0x1234 /* that's sector 4660 in decimal */
 122
 123 /* If REPORT LUNS has luns >= 256 it can choose "flat space" (value 1)
 124  * or "peripheral device" addressing (value 0) */
 125 #define SAM2_LUN_ADDRESS_METHOD 0
 126 #define SAM2_WLUN_REPORT_LUNS 0xc101
 127
 128 static int scsi_debug_add_host = DEF_NUM_HOST;
 129 static int scsi_debug_delay = DEF_DELAY;
 130 static int scsi_debug_dev_size_mb = DEF_DEV_SIZE_MB;
 131 static int scsi_debug_every_nth = DEF_EVERY_NTH;
 132 static int scsi_debug_max_luns = DEF_MAX_LUNS;
 133 static int scsi_debug_num_parts = DEF_NUM_PARTS;
 134 static int scsi_debug_num_tgts = DEF_NUM_TGTS; /* targets per host */
 135 static int scsi_debug_opts = DEF_OPTS;
 136 static int scsi_debug_scsi_level = DEF_SCSI_LEVEL;
 137 static int scsi_debug_ptype = DEF_PTYPE; /* SCSI peripheral type (0==disk) */
 138 static int scsi_debug_dsense = DEF_D_SENSE;
 139 static int scsi_debug_no_lun_0 = DEF_NO_LUN_0;
 140 static int scsi_debug_virtual_gb = DEF_VIRTUAL_GB;
 141 static int scsi_debug_fake_rw = DEF_FAKE_RW;
 142 static int scsi_debug_vpd_use_hostno = DEF_VPD_USE_HOSTNO;
 143
 144 static int scsi_debug_cmnd_count = 0;
 145
 146 #define DEV_READONLY(TGT)      (0)
 147 #define DEV_REMOVEABLE(TGT)    (0)
 148
 149 static unsigned int sdebug_store_size;  /* in bytes */
 150 static unsigned int sdebug_store_sectors;
 151 static sector_t sdebug_capacity;        /* in sectors */
 152
 153 /* old BIOS stuff, kernel may get rid of them but some mode sense pages
 154    may still need them */
 155 static int sdebug_heads;                /* heads per disk */
 156 static int sdebug_cylinders_per;        /* cylinders per surface */
 157 static int sdebug_sectors_per;          /* sectors per cylinder */
 158
 159 /* default sector size is 512 bytes, 2**9 bytes */
 160 #define POW2_SECT_SIZE 9
 161 #define SECT_SIZE (1 << POW2_SECT_SIZE)
 162 #define SECT_SIZE_PER(TGT) SECT_SIZE
 163
 164 #define SDEBUG_MAX_PARTS 4
 165
 166 #define SDEBUG_SENSE_LEN 32
 167
 168 struct sdebug_dev_info {
 169         struct list_head dev_list;
 170         unsigned char sense_buff[SDEBUG_SENSE_LEN];     /* weak nexus */
 171         unsigned int channel;
 172         unsigned int target;
 173         unsigned int lun;
 174         struct sdebug_host_info *sdbg_host;
 175         unsigned int wlun;
 176         char reset;
 177         char stopped;
 178         char used;
 179 };
 180
 181 struct sdebug_host_info {
 182         struct list_head host_list;
 183         struct Scsi_Host *shost;
 184         struct device dev;
 185         struct list_head dev_info_list;
 186 };
 187
 188 #define to_sdebug_host(d)       \
 189         container_of(d, struct sdebug_host_info, dev)
 190
 191 static LIST_HEAD(sdebug_host_list);
 192 static DEFINE_SPINLOCK(sdebug_host_list_lock);
 193
 194 typedef void (* done_funct_t) (struct scsi_cmnd *);
 195
 196 struct sdebug_queued_cmd {
 197         int in_use;
 198         struct timer_list cmnd_timer;
 199         done_funct_t done_funct;
 200         struct scsi_cmnd * a_cmnd;
 201         int scsi_result;
 202 };
 203 static struct sdebug_queued_cmd queued_arr[SCSI_DEBUG_CANQUEUE];
 204
 205 static struct scsi_host_template sdebug_driver_template = {
 206         .proc_info =            scsi_debug_proc_info,
 207         .name =                 "SCSI DEBUG",
 208         .info =                 scsi_debug_info,
 209         .slave_alloc =          scsi_debug_slave_alloc,
 210         .slave_configure =      scsi_debug_slave_configure,
 211         .slave_destroy =        scsi_debug_slave_destroy,
 212         .ioctl =                scsi_debug_ioctl,
 213         .queuecommand =         scsi_debug_queuecommand,
 214         .eh_abort_handler =     scsi_debug_abort,
 215         .eh_bus_reset_handler = scsi_debug_bus_reset,
 216         .eh_device_reset_handler = scsi_debug_device_reset,
 217         .eh_host_reset_handler = scsi_debug_host_reset,
 218         .bios_param =           scsi_debug_biosparam,
 219         .can_queue =            SCSI_DEBUG_CANQUEUE,
 220         .this_id =              7,
 221         .sg_tablesize =         256,
 222         .cmd_per_lun =          16,
 223         .max_sectors =          0xffff,
 224         .unchecked_isa_dma =    0,
 225         .use_clustering =       DISABLE_CLUSTERING,
 226         .module =               THIS_MODULE,
 227 };
 228
 229 static unsigned char * fake_storep;     /* ramdisk storage */
 230
 231 static int num_aborts = 0;
 232 static int num_dev_resets = 0;
 233 static int num_bus_resets = 0;
 234 static int num_host_resets = 0;
 235
 236 static DEFINE_SPINLOCK(queued_arr_lock);
 237 static DEFINE_RWLOCK(atomic_rw);
 238
 239 static char sdebug_proc_name[] = "scsi_debug";
 240
 241 static int sdebug_driver_probe(struct device *);
 242 static int sdebug_driver_remove(struct device *);
 243 static struct bus_type pseudo_lld_bus;
 244
 245 static struct device_driver sdebug_driverfs_driver = {
 246         .name           = sdebug_proc_name,
 247         .bus            = &pseudo_lld_bus,
 248 };
 249
 250 static const int check_condition_result =
 251                 (DRIVER_SENSE << 24) | SAM_STAT_CHECK_CONDITION;
 252
 253 static unsigned char ctrl_m_pg[] = {0xa, 10, 2, 0, 0, 0, 0, 0,
 254                                     0, 0, 0x2, 0x4b};
 255 static unsigned char iec_m_pg[] = {0x1c, 0xa, 0x08, 0, 0, 0, 0, 0,
 256                                    0, 0, 0x0, 0x0};
 257
 258 /* function declarations */
 259 static int resp_inquiry(struct scsi_cmnd * SCpnt, int target,
 260                         struct sdebug_dev_info * devip);
 261 static int resp_requests(struct scsi_cmnd * SCpnt,
 262                          struct sdebug_dev_info * devip);
 263 static int resp_start_stop(struct scsi_cmnd * scp,
 264                            struct sdebug_dev_info * devip);
 265 static int resp_report_tgtpgs(struct scsi_cmnd * scp,
 266                               struct sdebug_dev_info * devip);
 267 static int resp_readcap(struct scsi_cmnd * SCpnt,
 268                         struct sdebug_dev_info * devip);
 269 static int resp_readcap16(struct scsi_cmnd * SCpnt,
 270                           struct sdebug_dev_info * devip);
 271 static int resp_mode_sense(struct scsi_cmnd * scp, int target,
 272                            struct sdebug_dev_info * devip);
 273 static int resp_mode_select(struct scsi_cmnd * scp, int mselect6,
 274                             struct sdebug_dev_info * devip);
 275 static int resp_log_sense(struct scsi_cmnd * scp,
 276                           struct sdebug_dev_info * devip);
 277 static int resp_read(struct scsi_cmnd * SCpnt, unsigned long long lba,
 278                      unsigned int num, struct sdebug_dev_info * devip);
 279 static int resp_write(struct scsi_cmnd * SCpnt, unsigned long long lba,
 280                       unsigned int num, struct sdebug_dev_info * devip);
 281 static int resp_report_luns(struct scsi_cmnd * SCpnt,
 282                             struct sdebug_dev_info * devip);
 283 static int resp_xdwriteread(struct scsi_cmnd *scp, unsigned long long lba,
 284                             unsigned int num, struct sdebug_dev_info *devip);
 285 static int fill_from_dev_buffer(struct scsi_cmnd * scp, unsigned char * arr,
 286                                 int arr_len);
 287 static int fetch_to_dev_buffer(struct scsi_cmnd * scp, unsigned char * arr,
 288                                int max_arr_len);
 289 static void timer_intr_handler(unsigned long);
 290 static struct sdebug_dev_info * devInfoReg(struct scsi_device * sdev);
 291 static void mk_sense_buffer(struct sdebug_dev_info * devip, int key,
 292                             int asc, int asq);
 293 static int check_readiness(struct scsi_cmnd * SCpnt, int reset_only,
 294                            struct sdebug_dev_info * devip);
 295 static int schedule_resp(struct scsi_cmnd * cmnd,
 296                          struct sdebug_dev_info * devip,
 297                          done_funct_t done, int scsi_result, int delta_jiff);
 298 static void __init sdebug_build_parts(unsigned char * ramp);
 299 static void __init init_all_queued(void);
 300 static void stop_all_queued(void);
 301 static int stop_queued_cmnd(struct scsi_cmnd * cmnd);
 302 static int inquiry_evpd_83(unsigned char * arr, int port_group_id,
 303                            int target_dev_id, int dev_id_num,
 304                            const char * dev_id_str, int dev_id_str_len);
 305 static int inquiry_evpd_88(unsigned char * arr, int target_dev_id);
 306 static int do_create_driverfs_files(void);
 307 static void do_remove_driverfs_files(void);
 308
 309 static int sdebug_add_adapter(void);
 310 static void sdebug_remove_adapter(void);
 311 static void sdebug_max_tgts_luns(void);
 312
 313 static struct device pseudo_primary;
 314 static struct bus_type pseudo_lld_bus;
 315
 316 static void get_data_transfer_info(unsigned char *cmd,
 317                                    unsigned long long *lba, unsigned int *num)
 318 {
 319         int i;
 320
 321         switch (*cmd) {
 322         case WRITE_16:
 323         case READ_16:
 324                 for (*lba = 0, i = 0; i < 8; ++i) {
 325                         if (i > 0)
 326                                 *lba <<= 8;
 327                         *lba += cmd[2 + i];
 328                 }
 329                 *num = cmd[13] + (cmd[12] << 8) +
 330                         (cmd[11] << 16) + (cmd[10] << 24);
 331                 break;
 332         case WRITE_12:
 333         case READ_12:
 334                 *lba = cmd[5] + (cmd[4] << 8) + (cmd[3] << 16) + (cmd[2] << 24);
 335                 *num = cmd[9] + (cmd[8] << 8) + (cmd[7] << 16) + (cmd[6] << 24);
 336                 break;
 337         case WRITE_10:
 338         case READ_10:
 339         case XDWRITEREAD_10:
 340                 *lba = cmd[5] + (cmd[4] << 8) + (cmd[3] << 16) + (cmd[2] << 24);
 341                 *num = cmd[8] + (cmd[7] << 8);
 342                 break;
 343         case WRITE_6:
 344         case READ_6:
 345                 *lba = cmd[3] + (cmd[2] << 8) + ((cmd[1] & 0x1f) << 16);
 346                 *num = (0 == cmd[4]) ? 256 : cmd[4];
 347                 break;
 348         default:
 349                 break;
 350         }
 351 }
 352
 353 static
 354 int scsi_debug_queuecommand(struct scsi_cmnd * SCpnt, done_funct_t done)
 355 {
 356         unsigned char *cmd = (unsigned char *) SCpnt->cmnd;
 357         int len, k;
 358         unsigned int num;
 359         unsigned long long lba;
 360         int errsts = 0;
 361         int target = SCpnt->device->id;
 362         struct sdebug_dev_info * devip = NULL;
 363         int inj_recovered = 0;
 364         int inj_transport = 0;
 365         int delay_override = 0;
 366
 367         if (done == NULL)
 368                 return 0;       /* assume mid level reprocessing command */
 369
 370         scsi_set_resid(SCpnt, 0);
 371         if ((SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) && cmd) {
 372                 printk(KERN_INFO "scsi_debug: cmd ");
 373                 for (k = 0, len = SCpnt->cmd_len; k < len; ++k)
 374                         printk("%02x ", (int)cmd[k]);
 375                 printk("\n");
 376         }
 377         if(target == sdebug_driver_template.this_id) {
 378                 printk(KERN_INFO "scsi_debug: initiator's id used as "
 379                        "target!\n");
 380                 return schedule_resp(SCpnt, NULL, done,
 381                                      DID_NO_CONNECT << 16, 0);
 382         }
 383
 384         if ((SCpnt->device->lun >= scsi_debug_max_luns) &&
 385             (SCpnt->device->lun != SAM2_WLUN_REPORT_LUNS))
 386                 return schedule_resp(SCpnt, NULL, done,
 387                                      DID_NO_CONNECT << 16, 0);
 388         devip = devInfoReg(SCpnt->device);
 389         if (NULL == devip)
 390                 return schedule_resp(SCpnt, NULL, done,
 391                                      DID_NO_CONNECT << 16, 0);
 392
 393         if ((scsi_debug_every_nth != 0) &&
 394             (++scsi_debug_cmnd_count >= abs(scsi_debug_every_nth))) {
 395                 scsi_debug_cmnd_count = 0;
 396                 if (scsi_debug_every_nth < -1)
 397                         scsi_debug_every_nth = -1;
 398                 if (SCSI_DEBUG_OPT_TIMEOUT & scsi_debug_opts)
 399                         return 0; /* ignore command causing timeout */
 400                 else if (SCSI_DEBUG_OPT_RECOVERED_ERR & scsi_debug_opts)
 401                         inj_recovered = 1; /* to reads and writes below */
 402                 else if (SCSI_DEBUG_OPT_TRANSPORT_ERR & scsi_debug_opts)
 403                         inj_transport = 1; /* to reads and writes below */
 404         }
 405
 406         if (devip->wlun) {
 407                 switch (*cmd) {
 408                 case INQUIRY:
 409                 case REQUEST_SENSE:
 410                 case TEST_UNIT_READY:
 411                 case REPORT_LUNS:
 412                         break;  /* only allowable wlun commands */
 413                 default:
 414                         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
 415                                 printk(KERN_INFO "scsi_debug: Opcode: 0x%x "
 416                                        "not supported for wlun\n", *cmd);
 417                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
 418                                         INVALID_OPCODE, 0);
 419                         errsts = check_condition_result;
 420                         return schedule_resp(SCpnt, devip, done, errsts,
 421                                              0);
 422                 }
 423         }
 424
 425         switch (*cmd) {
 426         case INQUIRY:     /* mandatory, ignore unit attention */
 427                 delay_override = 1;
 428                 errsts = resp_inquiry(SCpnt, target, devip);
 429                 break;
 430         case REQUEST_SENSE:     /* mandatory, ignore unit attention */
 431                 delay_override = 1;
 432                 errsts = resp_requests(SCpnt, devip);
 433                 break;
 434         case REZERO_UNIT:       /* actually this is REWIND for SSC */
 435         case START_STOP:
 436                 errsts = resp_start_stop(SCpnt, devip);
 437                 break;
 438         case ALLOW_MEDIUM_REMOVAL:
 439                 if ((errsts = check_readiness(SCpnt, 1, devip)))
 440                         break;
 441                 if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
 442                         printk(KERN_INFO "scsi_debug: Medium removal %s\n",
 443                                 cmd[4] ? "inhibited" : "enabled");
 444                 break;
 445         case SEND_DIAGNOSTIC:     /* mandatory */
 446                 errsts = check_readiness(SCpnt, 1, devip);
 447                 break;
 448         case TEST_UNIT_READY:     /* mandatory */
 449                 delay_override = 1;
 450                 errsts = check_readiness(SCpnt, 0, devip);
 451                 break;
 452         case RESERVE:
 453                 errsts = check_readiness(SCpnt, 1, devip);
 454                 break;
 455         case RESERVE_10:
 456                 errsts = check_readiness(SCpnt, 1, devip);
 457                 break;
 458         case RELEASE:
 459                 errsts = check_readiness(SCpnt, 1, devip);
 460                 break;
 461         case RELEASE_10:
 462                 errsts = check_readiness(SCpnt, 1, devip);
 463                 break;
 464         case READ_CAPACITY:
 465                 errsts = resp_readcap(SCpnt, devip);
 466                 break;
 467         case SERVICE_ACTION_IN:
 468                 if (SAI_READ_CAPACITY_16 != cmd[1]) {
 469                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
 470                                         INVALID_OPCODE, 0);
 471                         errsts = check_condition_result;
 472                         break;
 473                 }
 474                 errsts = resp_readcap16(SCpnt, devip);
 475                 break;
 476         case MAINTENANCE_IN:
 477                 if (MI_REPORT_TARGET_PGS != cmd[1]) {
 478                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
 479                                         INVALID_OPCODE, 0);
 480                         errsts = check_condition_result;
 481                         break;
 482                 }
 483                 errsts = resp_report_tgtpgs(SCpnt, devip);
 484                 break;
 485         case READ_16:
 486         case READ_12:
 487         case READ_10:
 488         case READ_6:
 489                 if ((errsts = check_readiness(SCpnt, 0, devip)))
 490                         break;
 491                 if (scsi_debug_fake_rw)
 492                         break;
 493                 get_data_transfer_info(cmd, &lba, &num);
 494                 errsts = resp_read(SCpnt, lba, num, devip);
 495                 if (inj_recovered && (0 == errsts)) {
 496                         mk_sense_buffer(devip, RECOVERED_ERROR,
 497                                         THRESHOLD_EXCEEDED, 0);
 498                         errsts = check_condition_result;
 499                 } else if (inj_transport && (0 == errsts)) {
 500                         mk_sense_buffer(devip, ABORTED_COMMAND,
 501                                         TRANSPORT_PROBLEM, ACK_NAK_TO);
 502                         errsts = check_condition_result;
 503                 }
 504                 break;
 505         case REPORT_LUNS:       /* mandatory, ignore unit attention */
 506                 delay_override = 1;
 507                 errsts = resp_report_luns(SCpnt, devip);
 508                 break;
 509         case VERIFY:            /* 10 byte SBC-2 command */
 510                 errsts = check_readiness(SCpnt, 0, devip);
 511                 break;
 512         case WRITE_16:
 513         case WRITE_12:
 514         case WRITE_10:
 515         case WRITE_6:
 516                 if ((errsts = check_readiness(SCpnt, 0, devip)))
 517                         break;
 518                 if (scsi_debug_fake_rw)
 519                         break;
 520                 get_data_transfer_info(cmd, &lba, &num);
 521                 errsts = resp_write(SCpnt, lba, num, devip);
 522                 if (inj_recovered && (0 == errsts)) {
 523                         mk_sense_buffer(devip, RECOVERED_ERROR,
 524                                         THRESHOLD_EXCEEDED, 0);
 525                         errsts = check_condition_result;
 526                 }
 527                 break;
 528         case MODE_SENSE:
 529         case MODE_SENSE_10:
 530                 errsts = resp_mode_sense(SCpnt, target, devip);
 531                 break;
 532         case MODE_SELECT:
 533                 errsts = resp_mode_select(SCpnt, 1, devip);
 534                 break;
 535         case MODE_SELECT_10:
 536                 errsts = resp_mode_select(SCpnt, 0, devip);
 537                 break;
 538         case LOG_SENSE:
 539                 errsts = resp_log_sense(SCpnt, devip);
 540                 break;
 541         case SYNCHRONIZE_CACHE:
 542                 delay_override = 1;
 543                 errsts = check_readiness(SCpnt, 0, devip);
 544                 break;
 545         case WRITE_BUFFER:
 546                 errsts = check_readiness(SCpnt, 1, devip);
 547                 break;
 548         case XDWRITEREAD_10:
 549                 if (!scsi_bidi_cmnd(SCpnt)) {
 550                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
 551                                         INVALID_FIELD_IN_CDB, 0);
 552                         errsts = check_condition_result;
 553                         break;
 554                 }
 555
 556                 errsts = check_readiness(SCpnt, 0, devip);
 557                 if (errsts)
 558                         break;
 559                 if (scsi_debug_fake_rw)
 560                         break;
 561                 get_data_transfer_info(cmd, &lba, &num);
 562                 errsts = resp_read(SCpnt, lba, num, devip);
 563                 if (errsts)
 564                         break;
 565                 errsts = resp_write(SCpnt, lba, num, devip);
 566                 if (errsts)
 567                         break;
 568                 errsts = resp_xdwriteread(SCpnt, lba, num, devip);
 569                 break;
 570         default:
 571                 if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
 572                         printk(KERN_INFO "scsi_debug: Opcode: 0x%x not "
 573                                "supported\n", *cmd);
 574                 if ((errsts = check_readiness(SCpnt, 1, devip)))
 575                         break;  /* Unit attention takes precedence */
 576                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_OPCODE, 0);
 577                 errsts = check_condition_result;
 578                 break;
 579         }
 580         return schedule_resp(SCpnt, devip, done, errsts,
 581                              (delay_override ? 0 : scsi_debug_delay));
 582 }
 583
 584 static int scsi_debug_ioctl(struct scsi_device *dev, int cmd, void __user *arg)
 585 {
 586         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) {
 587                 printk(KERN_INFO "scsi_debug: ioctl: cmd=0x%x\n", cmd);
 588         }
 589         return -EINVAL;
 590         /* return -ENOTTY; // correct return but upsets fdisk */
 591 }
 592
 593 static int check_readiness(struct scsi_cmnd * SCpnt, int reset_only,
 594                            struct sdebug_dev_info * devip)
 595 {
 596         if (devip->reset) {
 597                 if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
 598                         printk(KERN_INFO "scsi_debug: Reporting Unit "
 599                                "attention: power on reset\n");
 600                 devip->reset = 0;
 601                 mk_sense_buffer(devip, UNIT_ATTENTION, POWERON_RESET, 0);
 602                 return check_condition_result;
 603         }
 604         if ((0 == reset_only) && devip->stopped) {
 605                 if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
 606                         printk(KERN_INFO "scsi_debug: Reporting Not "
 607                                "ready: initializing command required\n");
 608                 mk_sense_buffer(devip, NOT_READY, LOGICAL_UNIT_NOT_READY,
 609                                 0x2);
 610                 return check_condition_result;
 611         }
 612         return 0;
 613 }
 614
 615 /* Returns 0 if ok else (DID_ERROR << 16). Sets scp->resid . */
 616 static int fill_from_dev_buffer(struct scsi_cmnd * scp, unsigned char * arr,
 617                                 int arr_len)
 618 {
 619         int k, req_len, act_len, len, active;
 620         void * kaddr;
 621         void * kaddr_off;
 622         struct scatterlist *sg;
 623         struct scsi_data_buffer *sdb = scsi_in(scp);
 624
 625         if (!sdb->length)
 626                 return 0;
 627         if (!sdb->table.sgl)
 628                 return (DID_ERROR << 16);
 629         if (!(scsi_bidi_cmnd(scp) || scp->sc_data_direction == DMA_FROM_DEVICE))
 630                 return (DID_ERROR << 16);
 631         active = 1;
 632         req_len = act_len = 0;
 633         for_each_sg(sdb->table.sgl, sg, sdb->table.nents, k) {
 634                 if (active) {
 635                         kaddr = (unsigned char *)
 636                                 kmap_atomic(sg_page(sg), KM_USER0);
 637                         if (NULL == kaddr)
 638                                 return (DID_ERROR << 16);
 639                         kaddr_off = (unsigned char *)kaddr + sg->offset;
 640                         len = sg->length;
 641                         if ((req_len + len) > arr_len) {
 642                                 active = 0;
 643                                 len = arr_len - req_len;
 644                         }
 645                         memcpy(kaddr_off, arr + req_len, len);
 646                         kunmap_atomic(kaddr, KM_USER0);
 647                         act_len += len;
 648                 }
 649                 req_len += sg->length;
 650         }
 651         if (sdb->resid)
 652                 sdb->resid -= act_len;
 653         else
 654                 sdb->resid = req_len - act_len;
 655         return 0;
 656 }
 657
 658 /* Returns number of bytes fetched into 'arr' or -1 if error. */
 659 static int fetch_to_dev_buffer(struct scsi_cmnd * scp, unsigned char * arr,
 660                                int max_arr_len)
 661 {
 662         int k, req_len, len, fin;
 663         void * kaddr;
 664         void * kaddr_off;
 665         struct scatterlist * sg;
 666
 667         if (0 == scsi_bufflen(scp))
 668                 return 0;
 669         if (NULL == scsi_sglist(scp))
 670                 return -1;
 671         if (!(scsi_bidi_cmnd(scp) || scp->sc_data_direction == DMA_TO_DEVICE))
 672                 return -1;
 673         req_len = fin = 0;
 674         scsi_for_each_sg(scp, sg, scsi_sg_count(scp), k) {
 675                 kaddr = (unsigned char *)kmap_atomic(sg_page(sg), KM_USER0);
 676                 if (NULL == kaddr)
 677                         return -1;
 678                 kaddr_off = (unsigned char *)kaddr + sg->offset;
 679                 len = sg->length;
 680                 if ((req_len + len) > max_arr_len) {
 681                         len = max_arr_len - req_len;
 682                         fin = 1;
 683                 }
 684                 memcpy(arr + req_len, kaddr_off, len);
 685                 kunmap_atomic(kaddr, KM_USER0);
 686                 if (fin)
 687                         return req_len + len;
 688                 req_len += sg->length;
 689         }
 690         return req_len;
 691 }
 692
 693
 694 static const char * inq_vendor_id = "Linux   ";
 695 static const char * inq_product_id = "scsi_debug      ";
 696 static const char * inq_product_rev = "0004";
 697
 698 static int inquiry_evpd_83(unsigned char * arr, int port_group_id,
 699                            int target_dev_id, int dev_id_num,
 700                            const char * dev_id_str,
 701                            int dev_id_str_len)
 702 {
 703         int num, port_a;
 704         char b[32];
 705
 706         port_a = target_dev_id + 1;
 707         /* T10 vendor identifier field format (faked) */
 708         arr[0] = 0x2;   /* ASCII */
 709         arr[1] = 0x1;
 710         arr[2] = 0x0;
 711         memcpy(&arr[4], inq_vendor_id, 8);
 712         memcpy(&arr[12], inq_product_id, 16);
 713         memcpy(&arr[28], dev_id_str, dev_id_str_len);
 714         num = 8 + 16 + dev_id_str_len;
 715         arr[3] = num;
 716         num += 4;
 717         if (dev_id_num >= 0) {
 718                 /* NAA-5, Logical unit identifier (binary) */
 719                 arr[num++] = 0x1;       /* binary (not necessarily sas) */
 720                 arr[num++] = 0x3;       /* PIV=0, lu, naa */
 721                 arr[num++] = 0x0;
 722                 arr[num++] = 0x8;
 723                 arr[num++] = 0x53;  /* naa-5 ieee company id=0x333333 (fake) */
 724                 arr[num++] = 0x33;
 725                 arr[num++] = 0x33;
 726                 arr[num++] = 0x30;
 727                 arr[num++] = (dev_id_num >> 24);
 728                 arr[num++] = (dev_id_num >> 16) & 0xff;
 729                 arr[num++] = (dev_id_num >> 8) & 0xff;
 730                 arr[num++] = dev_id_num & 0xff;
 731                 /* Target relative port number */
 732                 arr[num++] = 0x61;      /* proto=sas, binary */
 733                 arr[num++] = 0x94;      /* PIV=1, target port, rel port */
 734                 arr[num++] = 0x0;       /* reserved */
 735                 arr[num++] = 0x4;       /* length */
 736                 arr[num++] = 0x0;       /* reserved */
 737                 arr[num++] = 0x0;       /* reserved */
 738                 arr[num++] = 0x0;
 739                 arr[num++] = 0x1;       /* relative port A */
 740         }
 741         /* NAA-5, Target port identifier */
 742         arr[num++] = 0x61;      /* proto=sas, binary */
 743         arr[num++] = 0x93;      /* piv=1, target port, naa */
 744         arr[num++] = 0x0;
 745         arr[num++] = 0x8;
 746         arr[num++] = 0x52;      /* naa-5, company id=0x222222 (fake) */
 747         arr[num++] = 0x22;
 748         arr[num++] = 0x22;
 749         arr[num++] = 0x20;
 750         arr[num++] = (port_a >> 24);
 751         arr[num++] = (port_a >> 16) & 0xff;
 752         arr[num++] = (port_a >> 8) & 0xff;
 753         arr[num++] = port_a & 0xff;
 754         /* NAA-5, Target port group identifier */
 755         arr[num++] = 0x61;      /* proto=sas, binary */
 756         arr[num++] = 0x95;      /* piv=1, target port group id */
 757         arr[num++] = 0x0;
 758         arr[num++] = 0x4;
 759         arr[num++] = 0;
 760         arr[num++] = 0;
 761         arr[num++] = (port_group_id >> 8) & 0xff;
 762         arr[num++] = port_group_id & 0xff;
 763         /* NAA-5, Target device identifier */
 764         arr[num++] = 0x61;      /* proto=sas, binary */
 765         arr[num++] = 0xa3;      /* piv=1, target device, naa */
 766         arr[num++] = 0x0;
 767         arr[num++] = 0x8;
 768         arr[num++] = 0x52;      /* naa-5, company id=0x222222 (fake) */
 769         arr[num++] = 0x22;
 770         arr[num++] = 0x22;
 771         arr[num++] = 0x20;
 772         arr[num++] = (target_dev_id >> 24);
 773         arr[num++] = (target_dev_id >> 16) & 0xff;
 774         arr[num++] = (target_dev_id >> 8) & 0xff;
 775         arr[num++] = target_dev_id & 0xff;
 776         /* SCSI name string: Target device identifier */
 777         arr[num++] = 0x63;      /* proto=sas, UTF-8 */
 778         arr[num++] = 0xa8;      /* piv=1, target device, SCSI name string */
 779         arr[num++] = 0x0;
 780         arr[num++] = 24;
 781         memcpy(arr + num, "naa.52222220", 12);
 782         num += 12;
 783         snprintf(b, sizeof(b), "%08X", target_dev_id);
 784         memcpy(arr + num, b, 8);
 785         num += 8;
 786         memset(arr + num, 0, 4);
 787         num += 4;
 788         return num;
 789 }
 790
 791
 792 static unsigned char vpd84_data[] = {
 793 /* from 4th byte */ 0x22,0x22,0x22,0x0,0xbb,0x0,
 794     0x22,0x22,0x22,0x0,0xbb,0x1,
 795     0x22,0x22,0x22,0x0,0xbb,0x2,
 796 };
 797
 798 static int inquiry_evpd_84(unsigned char * arr)
 799 {
 800         memcpy(arr, vpd84_data, sizeof(vpd84_data));
 801         return sizeof(vpd84_data);
 802 }
 803
 804 static int inquiry_evpd_85(unsigned char * arr)
 805 {
 806         int num = 0;
 807         const char * na1 = "https://www.kernel.org/config";
 808         const char * na2 = "http://www.kernel.org/log";
 809         int plen, olen;
 810
 811         arr[num++] = 0x1;       /* lu, storage config */
 812         arr[num++] = 0x0;       /* reserved */
 813         arr[num++] = 0x0;
 814         olen = strlen(na1);
 815         plen = olen + 1;
 816         if (plen % 4)
 817                 plen = ((plen / 4) + 1) * 4;
 818         arr[num++] = plen;      /* length, null termianted, padded */
 819         memcpy(arr + num, na1, olen);
 820         memset(arr + num + olen, 0, plen - olen);
 821         num += plen;
 822
 823         arr[num++] = 0x4;       /* lu, logging */
 824         arr[num++] = 0x0;       /* reserved */
 825         arr[num++] = 0x0;
 826         olen = strlen(na2);
 827         plen = olen + 1;
 828         if (plen % 4)
 829                 plen = ((plen / 4) + 1) * 4;
 830         arr[num++] = plen;      /* length, null terminated, padded */
 831         memcpy(arr + num, na2, olen);
 832         memset(arr + num + olen, 0, plen - olen);
 833         num += plen;
 834
 835         return num;
 836 }
 837
 838 /* SCSI ports VPD page */
 839 static int inquiry_evpd_88(unsigned char * arr, int target_dev_id)
 840 {
 841         int num = 0;
 842         int port_a, port_b;
 843
 844         port_a = target_dev_id + 1;
 845         port_b = port_a + 1;
 846         arr[num++] = 0x0;       /* reserved */
 847         arr[num++] = 0x0;       /* reserved */
 848         arr[num++] = 0x0;
 849         arr[num++] = 0x1;       /* relative port 1 (primary) */
 850         memset(arr + num, 0, 6);
 851         num += 6;
 852         arr[num++] = 0x0;
 853         arr[num++] = 12;        /* length tp descriptor */
 854         /* naa-5 target port identifier (A) */
 855         arr[num++] = 0x61;      /* proto=sas, binary */
 856         arr[num++] = 0x93;      /* PIV=1, target port, NAA */
 857         arr[num++] = 0x0;       /* reserved */
 858         arr[num++] = 0x8;       /* length */
 859         arr[num++] = 0x52;      /* NAA-5, company_id=0x222222 (fake) */
 860         arr[num++] = 0x22;
 861         arr[num++] = 0x22;
 862         arr[num++] = 0x20;
 863         arr[num++] = (port_a >> 24);
 864         arr[num++] = (port_a >> 16) & 0xff;
 865         arr[num++] = (port_a >> 8) & 0xff;
 866         arr[num++] = port_a & 0xff;
 867
 868         arr[num++] = 0x0;       /* reserved */
 869         arr[num++] = 0x0;       /* reserved */
 870         arr[num++] = 0x0;
 871         arr[num++] = 0x2;       /* relative port 2 (secondary) */
 872         memset(arr + num, 0, 6);
 873         num += 6;
 874         arr[num++] = 0x0;
 875         arr[num++] = 12;        /* length tp descriptor */
 876         /* naa-5 target port identifier (B) */
 877         arr[num++] = 0x61;      /* proto=sas, binary */
 878         arr[num++] = 0x93;      /* PIV=1, target port, NAA */
 879         arr[num++] = 0x0;       /* reserved */
 880         arr[num++] = 0x8;       /* length */
 881         arr[num++] = 0x52;      /* NAA-5, company_id=0x222222 (fake) */
 882         arr[num++] = 0x22;
 883         arr[num++] = 0x22;
 884         arr[num++] = 0x20;
 885         arr[num++] = (port_b >> 24);
 886         arr[num++] = (port_b >> 16) & 0xff;
 887         arr[num++] = (port_b >> 8) & 0xff;
 888         arr[num++] = port_b & 0xff;
 889
 890         return num;
 891 }
 892
 893
 894 static unsigned char vpd89_data[] = {
 895 /* from 4th byte */ 0,0,0,0,
 896 'l','i','n','u','x',' ',' ',' ',
 897 'S','A','T',' ','s','c','s','i','_','d','e','b','u','g',' ',' ',
 898 '1','2','3','4',
 899 0x34,0,0,0,1,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,
 900 0xec,0,0,0,
 901 0x5a,0xc,0xff,0x3f,0x37,0xc8,0x10,0,0,0,0,0,0x3f,0,0,0,
 902 0,0,0,0,0x58,0x58,0x58,0x58,0x58,0x58,0x58,0x58,0x20,0x20,0x20,0x20,
 903 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0,0,0,0x40,0x4,0,0x2e,0x33,
 904 0x38,0x31,0x20,0x20,0x20,0x20,0x54,0x53,0x38,0x33,0x30,0x30,0x33,0x31,
 905 0x53,0x41,
 906 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,
 907 0x20,0x20,
 908 0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,0x20,
 909 0x10,0x80,
 910 0,0,0,0x2f,0,0,0,0x2,0,0x2,0x7,0,0xff,0xff,0x1,0,
 911 0x3f,0,0xc1,0xff,0x3e,0,0x10,0x1,0xb0,0xf8,0x50,0x9,0,0,0x7,0,
 912 0x3,0,0x78,0,0x78,0,0xf0,0,0x78,0,0,0,0,0,0,0,
 913 0,0,0,0,0,0,0,0,0x2,0,0,0,0,0,0,0,
 914 0x7e,0,0x1b,0,0x6b,0x34,0x1,0x7d,0x3,0x40,0x69,0x34,0x1,0x3c,0x3,0x40,
 915 0x7f,0x40,0,0,0,0,0xfe,0xfe,0,0,0,0,0,0xfe,0,0,
 916 0,0,0,0,0,0,0,0,0xb0,0xf8,0x50,0x9,0,0,0,0,
 917 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 918 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 919 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 920 0x1,0,0xb0,0xf8,0x50,0x9,0xb0,0xf8,0x50,0x9,0x20,0x20,0x2,0,0xb6,0x42,
 921 0,0x80,0x8a,0,0x6,0x3c,0xa,0x3c,0xff,0xff,0xc6,0x7,0,0x1,0,0x8,
 922 0xf0,0xf,0,0x10,0x2,0,0x30,0,0,0,0,0,0,0,0x6,0xfe,
 923 0,0,0x2,0,0x50,0,0x8a,0,0x4f,0x95,0,0,0x21,0,0xb,0,
 924 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 925 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 926 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 927 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 928 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 929 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 930 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 931 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 932 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 933 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 934 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,
 935 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0xa5,0x51,
 936 };
 937
 938 static int inquiry_evpd_89(unsigned char * arr)
 939 {
 940         memcpy(arr, vpd89_data, sizeof(vpd89_data));
 941         return sizeof(vpd89_data);
 942 }
 943
 944
 945 static unsigned char vpdb0_data[] = {
 946         /* from 4th byte */ 0,0,0,4,
 947         0,0,0x4,0,
 948         0,0,0,64,
 949 };
 950
 951 static int inquiry_evpd_b0(unsigned char * arr)
 952 {
 953         memcpy(arr, vpdb0_data, sizeof(vpdb0_data));
 954         if (sdebug_store_sectors > 0x400) {
 955                 arr[4] = (sdebug_store_sectors >> 24) & 0xff;
 956                 arr[5] = (sdebug_store_sectors >> 16) & 0xff;
 957                 arr[6] = (sdebug_store_sectors >> 8) & 0xff;
 958                 arr[7] = sdebug_store_sectors & 0xff;
 959         }
 960         return sizeof(vpdb0_data);
 961 }
 962
 963
 964 #define SDEBUG_LONG_INQ_SZ 96
 965 #define SDEBUG_MAX_INQ_ARR_SZ 584
 966
 967 static int resp_inquiry(struct scsi_cmnd * scp, int target,
 968                         struct sdebug_dev_info * devip)
 969 {
 970         unsigned char pq_pdt;
 971         unsigned char * arr;
 972         unsigned char *cmd = (unsigned char *)scp->cmnd;
 973         int alloc_len, n, ret;
 974
 975         alloc_len = (cmd[3] << 8) + cmd[4];
 976         arr = kzalloc(SDEBUG_MAX_INQ_ARR_SZ, GFP_ATOMIC);
 977         if (! arr)
 978                 return DID_REQUEUE << 16;
 979         if (devip->wlun)
 980                 pq_pdt = 0x1e;  /* present, wlun */
 981         else if (scsi_debug_no_lun_0 && (0 == devip->lun))
 982                 pq_pdt = 0x7f;  /* not present, no device type */
 983         else
 984                 pq_pdt = (scsi_debug_ptype & 0x1f);
 985         arr[0] = pq_pdt;
 986         if (0x2 & cmd[1]) {  /* CMDDT bit set */
 987                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
 988                                 0);
 989                 kfree(arr);
 990                 return check_condition_result;
 991         } else if (0x1 & cmd[1]) {  /* EVPD bit set */
 992                 int lu_id_num, port_group_id, target_dev_id, len;
 993                 char lu_id_str[6];
 994                 int host_no = devip->sdbg_host->shost->host_no;
 995
 996                 port_group_id = (((host_no + 1) & 0x7f) << 8) +
 997                     (devip->channel & 0x7f);
 998                 if (0 == scsi_debug_vpd_use_hostno)
 999                         host_no = 0;
1000                 lu_id_num = devip->wlun ? -1 : (((host_no + 1) * 2000) +
1001                             (devip->target * 1000) + devip->lun);
1002                 target_dev_id = ((host_no + 1) * 2000) +
1003                                  (devip->target * 1000) - 3;
1004                 len = scnprintf(lu_id_str, 6, "%d", lu_id_num);
1005                 if (0 == cmd[2]) { /* supported vital product data pages */
1006                         arr[1] = cmd[2];        /*sanity */
1007                         n = 4;
1008                         arr[n++] = 0x0;   /* this page */
1009                         arr[n++] = 0x80;  /* unit serial number */
1010                         arr[n++] = 0x83;  /* device identification */
1011                         arr[n++] = 0x84;  /* software interface ident. */
1012                         arr[n++] = 0x85;  /* management network addresses */
1013                         arr[n++] = 0x86;  /* extended inquiry */
1014                         arr[n++] = 0x87;  /* mode page policy */
1015                         arr[n++] = 0x88;  /* SCSI ports */
1016                         arr[n++] = 0x89;  /* ATA information */
1017                         arr[n++] = 0xb0;  /* Block limits (SBC) */
1018                         arr[3] = n - 4;   /* number of supported VPD pages */
1019                 } else if (0x80 == cmd[2]) { /* unit serial number */
1020                         arr[1] = cmd[2];        /*sanity */
1021                         arr[3] = len;
1022                         memcpy(&arr[4], lu_id_str, len);
1023                 } else if (0x83 == cmd[2]) { /* device identification */
1024                         arr[1] = cmd[2];        /*sanity */
1025                         arr[3] = inquiry_evpd_83(&arr[4], port_group_id,
1026                                                  target_dev_id, lu_id_num,
1027                                                  lu_id_str, len);
1028                 } else if (0x84 == cmd[2]) { /* Software interface ident. */
1029                         arr[1] = cmd[2];        /*sanity */
1030                         arr[3] = inquiry_evpd_84(&arr[4]);
1031                 } else if (0x85 == cmd[2]) { /* Management network addresses */
1032                         arr[1] = cmd[2];        /*sanity */
1033                         arr[3] = inquiry_evpd_85(&arr[4]);
1034                 } else if (0x86 == cmd[2]) { /* extended inquiry */
1035                         arr[1] = cmd[2];        /*sanity */
1036                         arr[3] = 0x3c;  /* number of following entries */
1037                         arr[4] = 0x0;   /* no protection stuff */
1038                         arr[5] = 0x7;   /* head of q, ordered + simple q's */
1039                 } else if (0x87 == cmd[2]) { /* mode page policy */
1040                         arr[1] = cmd[2];        /*sanity */
1041                         arr[3] = 0x8;   /* number of following entries */
1042                         arr[4] = 0x2;   /* disconnect-reconnect mp */
1043                         arr[6] = 0x80;  /* mlus, shared */
1044                         arr[8] = 0x18;   /* protocol specific lu */
1045                         arr[10] = 0x82;  /* mlus, per initiator port */
1046                 } else if (0x88 == cmd[2]) { /* SCSI Ports */
1047                         arr[1] = cmd[2];        /*sanity */
1048                         arr[3] = inquiry_evpd_88(&arr[4], target_dev_id);
1049                 } else if (0x89 == cmd[2]) { /* ATA information */
1050                         arr[1] = cmd[2];        /*sanity */
1051                         n = inquiry_evpd_89(&arr[4]);
1052                         arr[2] = (n >> 8);
1053                         arr[3] = (n & 0xff);
1054                 } else if (0xb0 == cmd[2]) { /* Block limits (SBC) */
1055                         arr[1] = cmd[2];        /*sanity */
1056                         arr[3] = inquiry_evpd_b0(&arr[4]);
1057                 } else {
1058                         /* Illegal request, invalid field in cdb */
1059                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1060                                         INVALID_FIELD_IN_CDB, 0);
1061                         kfree(arr);
1062                         return check_condition_result;
1063                 }
1064                 len = min(((arr[2] << 8) + arr[3]) + 4, alloc_len);
1065                 ret = fill_from_dev_buffer(scp, arr,
1066                             min(len, SDEBUG_MAX_INQ_ARR_SZ));
1067                 kfree(arr);
1068                 return ret;
1069         }
1070         /* drops through here for a standard inquiry */
1071         arr[1] = DEV_REMOVEABLE(target) ? 0x80 : 0;     /* Removable disk */
1072         arr[2] = scsi_debug_scsi_level;
1073         arr[3] = 2;    /* response_data_format==2 */
1074         arr[4] = SDEBUG_LONG_INQ_SZ - 5;
1075         if (0 == scsi_debug_vpd_use_hostno)
1076                 arr[5] = 0x10; /* claim: implicit TGPS */
1077         arr[6] = 0x10; /* claim: MultiP */
1078         /* arr[6] |= 0x40; ... claim: EncServ (enclosure services) */
1079         arr[7] = 0xa; /* claim: LINKED + CMDQUE */
1080         memcpy(&arr[8], inq_vendor_id, 8);
1081         memcpy(&arr[16], inq_product_id, 16);
1082         memcpy(&arr[32], inq_product_rev, 4);
1083         /* version descriptors (2 bytes each) follow */
1084         arr[58] = 0x0; arr[59] = 0x77; /* SAM-3 ANSI */
1085         arr[60] = 0x3; arr[61] = 0x14;  /* SPC-3 ANSI */
1086         n = 62;
1087         if (scsi_debug_ptype == 0) {
1088                 arr[n++] = 0x3; arr[n++] = 0x3d; /* SBC-2 ANSI */
1089         } else if (scsi_debug_ptype == 1) {
1090                 arr[n++] = 0x3; arr[n++] = 0x60; /* SSC-2 no version */
1091         }
1092         arr[n++] = 0xc; arr[n++] = 0xf;  /* SAS-1.1 rev 10 */
1093         ret = fill_from_dev_buffer(scp, arr,
1094                             min(alloc_len, SDEBUG_LONG_INQ_SZ));
1095         kfree(arr);
1096         return ret;
1097 }
1098
1099 static int resp_requests(struct scsi_cmnd * scp,
1100                          struct sdebug_dev_info * devip)
1101 {
1102         unsigned char * sbuff;
1103         unsigned char *cmd = (unsigned char *)scp->cmnd;
1104         unsigned char arr[SDEBUG_SENSE_LEN];
1105         int want_dsense;
1106         int len = 18;
1107
1108         memset(arr, 0, sizeof(arr));
1109         if (devip->reset == 1)
1110                 mk_sense_buffer(devip, 0, NO_ADDITIONAL_SENSE, 0);
1111         want_dsense = !!(cmd[1] & 1) || scsi_debug_dsense;
1112         sbuff = devip->sense_buff;
1113         if ((iec_m_pg[2] & 0x4) && (6 == (iec_m_pg[3] & 0xf))) {
1114                 if (want_dsense) {
1115                         arr[0] = 0x72;
1116                         arr[1] = 0x0;           /* NO_SENSE in sense_key */
1117                         arr[2] = THRESHOLD_EXCEEDED;
1118                         arr[3] = 0xff;          /* TEST set and MRIE==6 */
1119                 } else {
1120                         arr[0] = 0x70;
1121                         arr[2] = 0x0;           /* NO_SENSE in sense_key */
1122                         arr[7] = 0xa;           /* 18 byte sense buffer */
1123                         arr[12] = THRESHOLD_EXCEEDED;
1124                         arr[13] = 0xff;         /* TEST set and MRIE==6 */
1125                 }
1126         } else {
1127                 memcpy(arr, sbuff, SDEBUG_SENSE_LEN);
1128                 if ((cmd[1] & 1) && (! scsi_debug_dsense)) {
1129                         /* DESC bit set and sense_buff in fixed format */
1130                         memset(arr, 0, sizeof(arr));
1131                         arr[0] = 0x72;
1132                         arr[1] = sbuff[2];     /* sense key */
1133                         arr[2] = sbuff[12];    /* asc */
1134                         arr[3] = sbuff[13];    /* ascq */
1135                         len = 8;
1136                 }
1137         }
1138         mk_sense_buffer(devip, 0, NO_ADDITIONAL_SENSE, 0);
1139         return fill_from_dev_buffer(scp, arr, len);
1140 }
1141
1142 static int resp_start_stop(struct scsi_cmnd * scp,
1143                            struct sdebug_dev_info * devip)
1144 {
1145         unsigned char *cmd = (unsigned char *)scp->cmnd;
1146         int power_cond, errsts, start;
1147
1148         if ((errsts = check_readiness(scp, 1, devip)))
1149                 return errsts;
1150         power_cond = (cmd[4] & 0xf0) >> 4;
1151         if (power_cond) {
1152                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1153                                 0);
1154                 return check_condition_result;
1155         }
1156         start = cmd[4] & 1;
1157         if (start == devip->stopped)
1158                 devip->stopped = !start;
1159         return 0;
1160 }
1161
1162 #define SDEBUG_READCAP_ARR_SZ 8
1163 static int resp_readcap(struct scsi_cmnd * scp,
1164                         struct sdebug_dev_info * devip)
1165 {
1166         unsigned char arr[SDEBUG_READCAP_ARR_SZ];
1167         unsigned int capac;
1168         int errsts;
1169
1170         if ((errsts = check_readiness(scp, 1, devip)))
1171                 return errsts;
1172         /* following just in case virtual_gb changed */
1173         if (scsi_debug_virtual_gb > 0) {
1174                 sdebug_capacity = 2048 * 1024;
1175                 sdebug_capacity *= scsi_debug_virtual_gb;
1176         } else
1177                 sdebug_capacity = sdebug_store_sectors;
1178         memset(arr, 0, SDEBUG_READCAP_ARR_SZ);
1179         if (sdebug_capacity < 0xffffffff) {
1180                 capac = (unsigned int)sdebug_capacity - 1;
1181                 arr[0] = (capac >> 24);
1182                 arr[1] = (capac >> 16) & 0xff;
1183                 arr[2] = (capac >> 8) & 0xff;
1184                 arr[3] = capac & 0xff;
1185         } else {
1186                 arr[0] = 0xff;
1187                 arr[1] = 0xff;
1188                 arr[2] = 0xff;
1189                 arr[3] = 0xff;
1190         }
1191         arr[6] = (SECT_SIZE_PER(target) >> 8) & 0xff;
1192         arr[7] = SECT_SIZE_PER(target) & 0xff;
1193         return fill_from_dev_buffer(scp, arr, SDEBUG_READCAP_ARR_SZ);
1194 }
1195
1196 #define SDEBUG_READCAP16_ARR_SZ 32
1197 static int resp_readcap16(struct scsi_cmnd * scp,
1198                           struct sdebug_dev_info * devip)
1199 {
1200         unsigned char *cmd = (unsigned char *)scp->cmnd;
1201         unsigned char arr[SDEBUG_READCAP16_ARR_SZ];
1202         unsigned long long capac;
1203         int errsts, k, alloc_len;
1204
1205         if ((errsts = check_readiness(scp, 1, devip)))
1206                 return errsts;
1207         alloc_len = ((cmd[10] << 24) + (cmd[11] << 16) + (cmd[12] << 8)
1208                      + cmd[13]);
1209         /* following just in case virtual_gb changed */
1210         if (scsi_debug_virtual_gb > 0) {
1211                 sdebug_capacity = 2048 * 1024;
1212                 sdebug_capacity *= scsi_debug_virtual_gb;
1213         } else
1214                 sdebug_capacity = sdebug_store_sectors;
1215         memset(arr, 0, SDEBUG_READCAP16_ARR_SZ);
1216         capac = sdebug_capacity - 1;
1217         for (k = 0; k < 8; ++k, capac >>= 8)
1218                 arr[7 - k] = capac & 0xff;
1219         arr[8] = (SECT_SIZE_PER(target) >> 24) & 0xff;
1220         arr[9] = (SECT_SIZE_PER(target) >> 16) & 0xff;
1221         arr[10] = (SECT_SIZE_PER(target) >> 8) & 0xff;
1222         arr[11] = SECT_SIZE_PER(target) & 0xff;
1223         return fill_from_dev_buffer(scp, arr,
1224                                     min(alloc_len, SDEBUG_READCAP16_ARR_SZ));
1225 }
1226
1227 #define SDEBUG_MAX_TGTPGS_ARR_SZ 1412
1228
1229 static int resp_report_tgtpgs(struct scsi_cmnd * scp,
1230                               struct sdebug_dev_info * devip)
1231 {
1232         unsigned char *cmd = (unsigned char *)scp->cmnd;
1233         unsigned char * arr;
1234         int host_no = devip->sdbg_host->shost->host_no;
1235         int n, ret, alen, rlen;
1236         int port_group_a, port_group_b, port_a, port_b;
1237
1238         alen = ((cmd[6] << 24) + (cmd[7] << 16) + (cmd[8] << 8)
1239                 + cmd[9]);
1240
1241         arr = kzalloc(SDEBUG_MAX_TGTPGS_ARR_SZ, GFP_ATOMIC);
1242         if (! arr)
1243                 return DID_REQUEUE << 16;
1244         /*
1245          * EVPD page 0x88 states we have two ports, one
1246          * real and a fake port with no device connected.
1247          * So we create two port groups with one port each
1248          * and set the group with port B to unavailable.
1249          */
1250         port_a = 0x1; /* relative port A */
1251         port_b = 0x2; /* relative port B */
1252         port_group_a = (((host_no + 1) & 0x7f) << 8) +
1253             (devip->channel & 0x7f);
1254         port_group_b = (((host_no + 1) & 0x7f) << 8) +
1255             (devip->channel & 0x7f) + 0x80;
1256
1257         /*
1258          * The asymmetric access state is cycled according to the host_id.
1259          */
1260         n = 4;
1261         if (0 == scsi_debug_vpd_use_hostno) {
1262             arr[n++] = host_no % 3; /* Asymm access state */
1263             arr[n++] = 0x0F; /* claim: all states are supported */
1264         } else {
1265             arr[n++] = 0x0; /* Active/Optimized path */
1266             arr[n++] = 0x01; /* claim: only support active/optimized paths */
1267         }
1268         arr[n++] = (port_group_a >> 8) & 0xff;
1269         arr[n++] = port_group_a & 0xff;
1270         arr[n++] = 0;    /* Reserved */
1271         arr[n++] = 0;    /* Status code */
1272         arr[n++] = 0;    /* Vendor unique */
1273         arr[n++] = 0x1;  /* One port per group */
1274         arr[n++] = 0;    /* Reserved */
1275         arr[n++] = 0;    /* Reserved */
1276         arr[n++] = (port_a >> 8) & 0xff;
1277         arr[n++] = port_a & 0xff;
1278         arr[n++] = 3;    /* Port unavailable */
1279         arr[n++] = 0x08; /* claim: only unavailalbe paths are supported */
1280         arr[n++] = (port_group_b >> 8) & 0xff;
1281         arr[n++] = port_group_b & 0xff;
1282         arr[n++] = 0;    /* Reserved */
1283         arr[n++] = 0;    /* Status code */
1284         arr[n++] = 0;    /* Vendor unique */
1285         arr[n++] = 0x1;  /* One port per group */
1286         arr[n++] = 0;    /* Reserved */
1287         arr[n++] = 0;    /* Reserved */
1288         arr[n++] = (port_b >> 8) & 0xff;
1289         arr[n++] = port_b & 0xff;
1290
1291         rlen = n - 4;
1292         arr[0] = (rlen >> 24) & 0xff;
1293         arr[1] = (rlen >> 16) & 0xff;
1294         arr[2] = (rlen >> 8) & 0xff;
1295         arr[3] = rlen & 0xff;
1296
1297         /*
1298          * Return the smallest value of either
1299          * - The allocated length
1300          * - The constructed command length
1301          * - The maximum array size
1302          */
1303         rlen = min(alen,n);
1304         ret = fill_from_dev_buffer(scp, arr,
1305                                    min(rlen, SDEBUG_MAX_TGTPGS_ARR_SZ));
1306         kfree(arr);
1307         return ret;
1308 }
1309
1310 /* <<Following mode page info copied from ST318451LW>> */
1311
1312 static int resp_err_recov_pg(unsigned char * p, int pcontrol, int target)
1313 {       /* Read-Write Error Recovery page for mode_sense */
1314         unsigned char err_recov_pg[] = {0x1, 0xa, 0xc0, 11, 240, 0, 0, 0,
1315                                         5, 0, 0xff, 0xff};
1316
1317         memcpy(p, err_recov_pg, sizeof(err_recov_pg));
1318         if (1 == pcontrol)
1319                 memset(p + 2, 0, sizeof(err_recov_pg) - 2);
1320         return sizeof(err_recov_pg);
1321 }
1322
1323 static int resp_disconnect_pg(unsigned char * p, int pcontrol, int target)
1324 {       /* Disconnect-Reconnect page for mode_sense */
1325         unsigned char disconnect_pg[] = {0x2, 0xe, 128, 128, 0, 10, 0, 0,
1326                                          0, 0, 0, 0, 0, 0, 0, 0};
1327
1328         memcpy(p, disconnect_pg, sizeof(disconnect_pg));
1329         if (1 == pcontrol)
1330                 memset(p + 2, 0, sizeof(disconnect_pg) - 2);
1331         return sizeof(disconnect_pg);
1332 }
1333
1334 static int resp_format_pg(unsigned char * p, int pcontrol, int target)
1335 {       /* Format device page for mode_sense */
1336         unsigned char format_pg[] = {0x3, 0x16, 0, 0, 0, 0, 0, 0,
1337                                      0, 0, 0, 0, 0, 0, 0, 0,
1338                                      0, 0, 0, 0, 0x40, 0, 0, 0};
1339
1340         memcpy(p, format_pg, sizeof(format_pg));
1341         p[10] = (sdebug_sectors_per >> 8) & 0xff;
1342         p[11] = sdebug_sectors_per & 0xff;
1343         p[12] = (SECT_SIZE >> 8) & 0xff;
1344         p[13] = SECT_SIZE & 0xff;
1345         if (DEV_REMOVEABLE(target))
1346                 p[20] |= 0x20; /* should agree with INQUIRY */
1347         if (1 == pcontrol)
1348                 memset(p + 2, 0, sizeof(format_pg) - 2);
1349         return sizeof(format_pg);
1350 }
1351
1352 static int resp_caching_pg(unsigned char * p, int pcontrol, int target)
1353 {       /* Caching page for mode_sense */
1354         unsigned char caching_pg[] = {0x8, 18, 0x14, 0, 0xff, 0xff, 0, 0,
1355                 0xff, 0xff, 0xff, 0xff, 0x80, 0x14, 0, 0,     0, 0, 0, 0};
1356
1357         memcpy(p, caching_pg, sizeof(caching_pg));
1358         if (1 == pcontrol)
1359                 memset(p + 2, 0, sizeof(caching_pg) - 2);
1360         return sizeof(caching_pg);
1361 }
1362
1363 static int resp_ctrl_m_pg(unsigned char * p, int pcontrol, int target)
1364 {       /* Control mode page for mode_sense */
1365         unsigned char ch_ctrl_m_pg[] = {/* 0xa, 10, */ 0x6, 0, 0, 0, 0, 0,
1366                                         0, 0, 0, 0};
1367         unsigned char d_ctrl_m_pg[] = {0xa, 10, 2, 0, 0, 0, 0, 0,
1368                                      0, 0, 0x2, 0x4b};
1369
1370         if (scsi_debug_dsense)
1371                 ctrl_m_pg[2] |= 0x4;
1372         else
1373                 ctrl_m_pg[2] &= ~0x4;
1374         memcpy(p, ctrl_m_pg, sizeof(ctrl_m_pg));
1375         if (1 == pcontrol)
1376                 memcpy(p + 2, ch_ctrl_m_pg, sizeof(ch_ctrl_m_pg));
1377         else if (2 == pcontrol)
1378                 memcpy(p, d_ctrl_m_pg, sizeof(d_ctrl_m_pg));
1379         return sizeof(ctrl_m_pg);
1380 }
1381
1382
1383 static int resp_iec_m_pg(unsigned char * p, int pcontrol, int target)
1384 {       /* Informational Exceptions control mode page for mode_sense */
1385         unsigned char ch_iec_m_pg[] = {/* 0x1c, 0xa, */ 0x4, 0xf, 0, 0, 0, 0,
1386                                        0, 0, 0x0, 0x0};
1387         unsigned char d_iec_m_pg[] = {0x1c, 0xa, 0x08, 0, 0, 0, 0, 0,
1388                                       0, 0, 0x0, 0x0};
1389
1390         memcpy(p, iec_m_pg, sizeof(iec_m_pg));
1391         if (1 == pcontrol)
1392                 memcpy(p + 2, ch_iec_m_pg, sizeof(ch_iec_m_pg));
1393         else if (2 == pcontrol)
1394                 memcpy(p, d_iec_m_pg, sizeof(d_iec_m_pg));
1395         return sizeof(iec_m_pg);
1396 }
1397
1398 static int resp_sas_sf_m_pg(unsigned char * p, int pcontrol, int target)
1399 {       /* SAS SSP mode page - short format for mode_sense */
1400         unsigned char sas_sf_m_pg[] = {0x19, 0x6,
1401                 0x6, 0x0, 0x7, 0xd0, 0x0, 0x0};
1402
1403         memcpy(p, sas_sf_m_pg, sizeof(sas_sf_m_pg));
1404         if (1 == pcontrol)
1405                 memset(p + 2, 0, sizeof(sas_sf_m_pg) - 2);
1406         return sizeof(sas_sf_m_pg);
1407 }
1408
1409
1410 static int resp_sas_pcd_m_spg(unsigned char * p, int pcontrol, int target,
1411                               int target_dev_id)
1412 {       /* SAS phy control and discover mode page for mode_sense */
1413         unsigned char sas_pcd_m_pg[] = {0x59, 0x1, 0, 0x64, 0, 0x6, 0, 2,
1414                     0, 0, 0, 0, 0x10, 0x9, 0x8, 0x0,
1415                     0x52, 0x22, 0x22, 0x20, 0x0, 0x0, 0x0, 0x0,
1416                     0x51, 0x11, 0x11, 0x10, 0x0, 0x0, 0x0, 0x1,
1417                     0x2, 0, 0, 0, 0, 0, 0, 0,
1418                     0x88, 0x99, 0, 0, 0, 0, 0, 0,
1419                     0, 0, 0, 0, 0, 0, 0, 0,
1420                     0, 1, 0, 0, 0x10, 0x9, 0x8, 0x0,
1421                     0x52, 0x22, 0x22, 0x20, 0x0, 0x0, 0x0, 0x0,
1422                     0x51, 0x11, 0x11, 0x10, 0x0, 0x0, 0x0, 0x1,
1423                     0x3, 0, 0, 0, 0, 0, 0, 0,
1424                     0x88, 0x99, 0, 0, 0, 0, 0, 0,
1425                     0, 0, 0, 0, 0, 0, 0, 0,
1426                 };
1427         int port_a, port_b;
1428
1429         port_a = target_dev_id + 1;
1430         port_b = port_a + 1;
1431         memcpy(p, sas_pcd_m_pg, sizeof(sas_pcd_m_pg));
1432         p[20] = (port_a >> 24);
1433         p[21] = (port_a >> 16) & 0xff;
1434         p[22] = (port_a >> 8) & 0xff;
1435         p[23] = port_a & 0xff;
1436         p[48 + 20] = (port_b >> 24);
1437         p[48 + 21] = (port_b >> 16) & 0xff;
1438         p[48 + 22] = (port_b >> 8) & 0xff;
1439         p[48 + 23] = port_b & 0xff;
1440         if (1 == pcontrol)
1441                 memset(p + 4, 0, sizeof(sas_pcd_m_pg) - 4);
1442         return sizeof(sas_pcd_m_pg);
1443 }
1444
1445 static int resp_sas_sha_m_spg(unsigned char * p, int pcontrol)
1446 {       /* SAS SSP shared protocol specific port mode subpage */
1447         unsigned char sas_sha_m_pg[] = {0x59, 0x2, 0, 0xc, 0, 0x6, 0x10, 0,
1448                     0, 0, 0, 0, 0, 0, 0, 0,
1449                 };
1450
1451         memcpy(p, sas_sha_m_pg, sizeof(sas_sha_m_pg));
1452         if (1 == pcontrol)
1453                 memset(p + 4, 0, sizeof(sas_sha_m_pg) - 4);
1454         return sizeof(sas_sha_m_pg);
1455 }
1456
1457 #define SDEBUG_MAX_MSENSE_SZ 256
1458
1459 static int resp_mode_sense(struct scsi_cmnd * scp, int target,
1460                            struct sdebug_dev_info * devip)
1461 {
1462         unsigned char dbd, llbaa;
1463         int pcontrol, pcode, subpcode, bd_len;
1464         unsigned char dev_spec;
1465         int k, alloc_len, msense_6, offset, len, errsts, target_dev_id;
1466         unsigned char * ap;
1467         unsigned char arr[SDEBUG_MAX_MSENSE_SZ];
1468         unsigned char *cmd = (unsigned char *)scp->cmnd;
1469
1470         if ((errsts = check_readiness(scp, 1, devip)))
1471                 return errsts;
1472         dbd = !!(cmd[1] & 0x8);
1473         pcontrol = (cmd[2] & 0xc0) >> 6;
1474         pcode = cmd[2] & 0x3f;
1475         subpcode = cmd[3];
1476         msense_6 = (MODE_SENSE == cmd[0]);
1477         llbaa = msense_6 ? 0 : !!(cmd[1] & 0x10);
1478         if ((0 == scsi_debug_ptype) && (0 == dbd))
1479                 bd_len = llbaa ? 16 : 8;
1480         else
1481                 bd_len = 0;
1482         alloc_len = msense_6 ? cmd[4] : ((cmd[7] << 8) | cmd[8]);
1483         memset(arr, 0, SDEBUG_MAX_MSENSE_SZ);
1484         if (0x3 == pcontrol) {  /* Saving values not supported */
1485                 mk_sense_buffer(devip, ILLEGAL_REQUEST, SAVING_PARAMS_UNSUP,
1486                                 0);
1487                 return check_condition_result;
1488         }
1489         target_dev_id = ((devip->sdbg_host->shost->host_no + 1) * 2000) +
1490                         (devip->target * 1000) - 3;
1491         /* set DPOFUA bit for disks */
1492         if (0 == scsi_debug_ptype)
1493                 dev_spec = (DEV_READONLY(target) ? 0x80 : 0x0) | 0x10;
1494         else
1495                 dev_spec = 0x0;
1496         if (msense_6) {
1497                 arr[2] = dev_spec;
1498                 arr[3] = bd_len;
1499                 offset = 4;
1500         } else {
1501                 arr[3] = dev_spec;
1502                 if (16 == bd_len)
1503                         arr[4] = 0x1;   /* set LONGLBA bit */
1504                 arr[7] = bd_len;        /* assume 255 or less */
1505                 offset = 8;
1506         }
1507         ap = arr + offset;
1508         if ((bd_len > 0) && (0 == sdebug_capacity)) {
1509                 if (scsi_debug_virtual_gb > 0) {
1510                         sdebug_capacity = 2048 * 1024;
1511                         sdebug_capacity *= scsi_debug_virtual_gb;
1512                 } else
1513                         sdebug_capacity = sdebug_store_sectors;
1514         }
1515         if (8 == bd_len) {
1516                 if (sdebug_capacity > 0xfffffffe) {
1517                         ap[0] = 0xff;
1518                         ap[1] = 0xff;
1519                         ap[2] = 0xff;
1520                         ap[3] = 0xff;
1521                 } else {
1522                         ap[0] = (sdebug_capacity >> 24) & 0xff;
1523                         ap[1] = (sdebug_capacity >> 16) & 0xff;
1524                         ap[2] = (sdebug_capacity >> 8) & 0xff;
1525                         ap[3] = sdebug_capacity & 0xff;
1526                 }
1527                 ap[6] = (SECT_SIZE_PER(target) >> 8) & 0xff;
1528                 ap[7] = SECT_SIZE_PER(target) & 0xff;
1529                 offset += bd_len;
1530                 ap = arr + offset;
1531         } else if (16 == bd_len) {
1532                 unsigned long long capac = sdebug_capacity;
1533
1534                 for (k = 0; k < 8; ++k, capac >>= 8)
1535                         ap[7 - k] = capac & 0xff;
1536                 ap[12] = (SECT_SIZE_PER(target) >> 24) & 0xff;
1537                 ap[13] = (SECT_SIZE_PER(target) >> 16) & 0xff;
1538                 ap[14] = (SECT_SIZE_PER(target) >> 8) & 0xff;
1539                 ap[15] = SECT_SIZE_PER(target) & 0xff;
1540                 offset += bd_len;
1541                 ap = arr + offset;
1542         }
1543
1544         if ((subpcode > 0x0) && (subpcode < 0xff) && (0x19 != pcode)) {
1545                 /* TODO: Control Extension page */
1546                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1547                                 0);
1548                 return check_condition_result;
1549         }
1550         switch (pcode) {
1551         case 0x1:       /* Read-Write error recovery page, direct access */
1552                 len = resp_err_recov_pg(ap, pcontrol, target);
1553                 offset += len;
1554                 break;
1555         case 0x2:       /* Disconnect-Reconnect page, all devices */
1556                 len = resp_disconnect_pg(ap, pcontrol, target);
1557                 offset += len;
1558                 break;
1559         case 0x3:       /* Format device page, direct access */
1560                 len = resp_format_pg(ap, pcontrol, target);
1561                 offset += len;
1562                 break;
1563         case 0x8:       /* Caching page, direct access */
1564                 len = resp_caching_pg(ap, pcontrol, target);
1565                 offset += len;
1566                 break;
1567         case 0xa:       /* Control Mode page, all devices */
1568                 len = resp_ctrl_m_pg(ap, pcontrol, target);
1569                 offset += len;
1570                 break;
1571         case 0x19:      /* if spc==1 then sas phy, control+discover */
1572                 if ((subpcode > 0x2) && (subpcode < 0xff)) {
1573                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1574                                         INVALID_FIELD_IN_CDB, 0);
1575                         return check_condition_result;
1576                 }
1577                 len = 0;
1578                 if ((0x0 == subpcode) || (0xff == subpcode))
1579                         len += resp_sas_sf_m_pg(ap + len, pcontrol, target);
1580                 if ((0x1 == subpcode) || (0xff == subpcode))
1581                         len += resp_sas_pcd_m_spg(ap + len, pcontrol, target,
1582                                                   target_dev_id);
1583                 if ((0x2 == subpcode) || (0xff == subpcode))
1584                         len += resp_sas_sha_m_spg(ap + len, pcontrol);
1585                 offset += len;
1586                 break;
1587         case 0x1c:      /* Informational Exceptions Mode page, all devices */
1588                 len = resp_iec_m_pg(ap, pcontrol, target);
1589                 offset += len;
1590                 break;
1591         case 0x3f:      /* Read all Mode pages */
1592                 if ((0 == subpcode) || (0xff == subpcode)) {
1593                         len = resp_err_recov_pg(ap, pcontrol, target);
1594                         len += resp_disconnect_pg(ap + len, pcontrol, target);
1595                         len += resp_format_pg(ap + len, pcontrol, target);
1596                         len += resp_caching_pg(ap + len, pcontrol, target);
1597                         len += resp_ctrl_m_pg(ap + len, pcontrol, target);
1598                         len += resp_sas_sf_m_pg(ap + len, pcontrol, target);
1599                         if (0xff == subpcode) {
1600                                 len += resp_sas_pcd_m_spg(ap + len, pcontrol,
1601                                                   target, target_dev_id);
1602                                 len += resp_sas_sha_m_spg(ap + len, pcontrol);
1603                         }
1604                         len += resp_iec_m_pg(ap + len, pcontrol, target);
1605                 } else {
1606                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1607                                         INVALID_FIELD_IN_CDB, 0);
1608                         return check_condition_result;
1609                 }
1610                 offset += len;
1611                 break;
1612         default:
1613                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1614                                 0);
1615                 return check_condition_result;
1616         }
1617         if (msense_6)
1618                 arr[0] = offset - 1;
1619         else {
1620                 arr[0] = ((offset - 2) >> 8) & 0xff;
1621                 arr[1] = (offset - 2) & 0xff;
1622         }
1623         return fill_from_dev_buffer(scp, arr, min(alloc_len, offset));
1624 }
1625
1626 #define SDEBUG_MAX_MSELECT_SZ 512
1627
1628 static int resp_mode_select(struct scsi_cmnd * scp, int mselect6,
1629                             struct sdebug_dev_info * devip)
1630 {
1631         int pf, sp, ps, md_len, bd_len, off, spf, pg_len;
1632         int param_len, res, errsts, mpage;
1633         unsigned char arr[SDEBUG_MAX_MSELECT_SZ];
1634         unsigned char *cmd = (unsigned char *)scp->cmnd;
1635
1636         if ((errsts = check_readiness(scp, 1, devip)))
1637                 return errsts;
1638         memset(arr, 0, sizeof(arr));
1639         pf = cmd[1] & 0x10;
1640         sp = cmd[1] & 0x1;
1641         param_len = mselect6 ? cmd[4] : ((cmd[7] << 8) + cmd[8]);
1642         if ((0 == pf) || sp || (param_len > SDEBUG_MAX_MSELECT_SZ)) {
1643                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1644                                 INVALID_FIELD_IN_CDB, 0);
1645                 return check_condition_result;
1646         }
1647         res = fetch_to_dev_buffer(scp, arr, param_len);
1648         if (-1 == res)
1649                 return (DID_ERROR << 16);
1650         else if ((res < param_len) &&
1651                  (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts))
1652                 printk(KERN_INFO "scsi_debug: mode_select: cdb indicated=%d, "
1653                        " IO sent=%d bytes\n", param_len, res);
1654         md_len = mselect6 ? (arr[0] + 1) : ((arr[0] << 8) + arr[1] + 2);
1655         bd_len = mselect6 ? arr[3] : ((arr[6] << 8) + arr[7]);
1656         if (md_len > 2) {
1657                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1658                                 INVALID_FIELD_IN_PARAM_LIST, 0);
1659                 return check_condition_result;
1660         }
1661         off = bd_len + (mselect6 ? 4 : 8);
1662         mpage = arr[off] & 0x3f;
1663         ps = !!(arr[off] & 0x80);
1664         if (ps) {
1665                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1666                                 INVALID_FIELD_IN_PARAM_LIST, 0);
1667                 return check_condition_result;
1668         }
1669         spf = !!(arr[off] & 0x40);
1670         pg_len = spf ? ((arr[off + 2] << 8) + arr[off + 3] + 4) :
1671                        (arr[off + 1] + 2);
1672         if ((pg_len + off) > param_len) {
1673                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1674                                 PARAMETER_LIST_LENGTH_ERR, 0);
1675                 return check_condition_result;
1676         }
1677         switch (mpage) {
1678         case 0xa:      /* Control Mode page */
1679                 if (ctrl_m_pg[1] == arr[off + 1]) {
1680                         memcpy(ctrl_m_pg + 2, arr + off + 2,
1681                                sizeof(ctrl_m_pg) - 2);
1682                         scsi_debug_dsense = !!(ctrl_m_pg[2] & 0x4);
1683                         return 0;
1684                 }
1685                 break;
1686         case 0x1c:      /* Informational Exceptions Mode page */
1687                 if (iec_m_pg[1] == arr[off + 1]) {
1688                         memcpy(iec_m_pg + 2, arr + off + 2,
1689                                sizeof(iec_m_pg) - 2);
1690                         return 0;
1691                 }
1692                 break;
1693         default:
1694                 break;
1695         }
1696         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1697                         INVALID_FIELD_IN_PARAM_LIST, 0);
1698         return check_condition_result;
1699 }
1700
1701 static int resp_temp_l_pg(unsigned char * arr)
1702 {
1703         unsigned char temp_l_pg[] = {0x0, 0x0, 0x3, 0x2, 0x0, 38,
1704                                      0x0, 0x1, 0x3, 0x2, 0x0, 65,
1705                 };
1706
1707         memcpy(arr, temp_l_pg, sizeof(temp_l_pg));
1708         return sizeof(temp_l_pg);
1709 }
1710
1711 static int resp_ie_l_pg(unsigned char * arr)
1712 {
1713         unsigned char ie_l_pg[] = {0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 38,
1714                 };
1715
1716         memcpy(arr, ie_l_pg, sizeof(ie_l_pg));
1717         if (iec_m_pg[2] & 0x4) {        /* TEST bit set */
1718                 arr[4] = THRESHOLD_EXCEEDED;
1719                 arr[5] = 0xff;
1720         }
1721         return sizeof(ie_l_pg);
1722 }
1723
1724 #define SDEBUG_MAX_LSENSE_SZ 512
1725
1726 static int resp_log_sense(struct scsi_cmnd * scp,
1727                           struct sdebug_dev_info * devip)
1728 {
1729         int ppc, sp, pcontrol, pcode, subpcode, alloc_len, errsts, len, n;
1730         unsigned char arr[SDEBUG_MAX_LSENSE_SZ];
1731         unsigned char *cmd = (unsigned char *)scp->cmnd;
1732
1733         if ((errsts = check_readiness(scp, 1, devip)))
1734                 return errsts;
1735         memset(arr, 0, sizeof(arr));
1736         ppc = cmd[1] & 0x2;
1737         sp = cmd[1] & 0x1;
1738         if (ppc || sp) {
1739                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1740                                 INVALID_FIELD_IN_CDB, 0);
1741                 return check_condition_result;
1742         }
1743         pcontrol = (cmd[2] & 0xc0) >> 6;
1744         pcode = cmd[2] & 0x3f;
1745         subpcode = cmd[3] & 0xff;
1746         alloc_len = (cmd[7] << 8) + cmd[8];
1747         arr[0] = pcode;
1748         if (0 == subpcode) {
1749                 switch (pcode) {
1750                 case 0x0:       /* Supported log pages log page */
1751                         n = 4;
1752                         arr[n++] = 0x0;         /* this page */
1753                         arr[n++] = 0xd;         /* Temperature */
1754                         arr[n++] = 0x2f;        /* Informational exceptions */
1755                         arr[3] = n - 4;
1756                         break;
1757                 case 0xd:       /* Temperature log page */
1758                         arr[3] = resp_temp_l_pg(arr + 4);
1759                         break;
1760                 case 0x2f:      /* Informational exceptions log page */
1761                         arr[3] = resp_ie_l_pg(arr + 4);
1762                         break;
1763                 default:
1764                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1765                                         INVALID_FIELD_IN_CDB, 0);
1766                         return check_condition_result;
1767                 }
1768         } else if (0xff == subpcode) {
1769                 arr[0] |= 0x40;
1770                 arr[1] = subpcode;
1771                 switch (pcode) {
1772                 case 0x0:       /* Supported log pages and subpages log page */
1773                         n = 4;
1774                         arr[n++] = 0x0;
1775                         arr[n++] = 0x0;         /* 0,0 page */
1776                         arr[n++] = 0x0;
1777                         arr[n++] = 0xff;        /* this page */
1778                         arr[n++] = 0xd;
1779                         arr[n++] = 0x0;         /* Temperature */
1780                         arr[n++] = 0x2f;
1781                         arr[n++] = 0x0; /* Informational exceptions */
1782                         arr[3] = n - 4;
1783                         break;
1784                 case 0xd:       /* Temperature subpages */
1785                         n = 4;
1786                         arr[n++] = 0xd;
1787                         arr[n++] = 0x0;         /* Temperature */
1788                         arr[3] = n - 4;
1789                         break;
1790                 case 0x2f:      /* Informational exceptions subpages */
1791                         n = 4;
1792                         arr[n++] = 0x2f;
1793                         arr[n++] = 0x0;         /* Informational exceptions */
1794                         arr[3] = n - 4;
1795                         break;
1796                 default:
1797                         mk_sense_buffer(devip, ILLEGAL_REQUEST,
1798                                         INVALID_FIELD_IN_CDB, 0);
1799                         return check_condition_result;
1800                 }
1801         } else {
1802                 mk_sense_buffer(devip, ILLEGAL_REQUEST,
1803                                 INVALID_FIELD_IN_CDB, 0);
1804                 return check_condition_result;
1805         }
1806         len = min(((arr[2] << 8) + arr[3]) + 4, alloc_len);
1807         return fill_from_dev_buffer(scp, arr,
1808                     min(len, SDEBUG_MAX_INQ_ARR_SZ));
1809 }
1810
1811 static int resp_read(struct scsi_cmnd * SCpnt, unsigned long long lba,
1812                      unsigned int num, struct sdebug_dev_info * devip)
1813 {
1814         unsigned long iflags;
1815         unsigned int block, from_bottom;
1816         unsigned long long u;
1817         int ret;
1818
1819         if (lba + num > sdebug_capacity) {
1820                 mk_sense_buffer(devip, ILLEGAL_REQUEST, ADDR_OUT_OF_RANGE,
1821                                 0);
1822                 return check_condition_result;
1823         }
1824         /* transfer length excessive (tie in to block limits VPD page) */
1825         if (num > sdebug_store_sectors) {
1826                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1827                                 0);
1828                 return check_condition_result;
1829         }
1830         if ((SCSI_DEBUG_OPT_MEDIUM_ERR & scsi_debug_opts) &&
1831             (lba <= OPT_MEDIUM_ERR_ADDR) &&
1832             ((lba + num) > OPT_MEDIUM_ERR_ADDR)) {
1833                 /* claim unrecoverable read error */
1834                 mk_sense_buffer(devip, MEDIUM_ERROR, UNRECOVERED_READ_ERR,
1835                                 0);
1836                 /* set info field and valid bit for fixed descriptor */
1837                 if (0x70 == (devip->sense_buff[0] & 0x7f)) {
1838                         devip->sense_buff[0] |= 0x80;   /* Valid bit */
1839                         ret = OPT_MEDIUM_ERR_ADDR;
1840                         devip->sense_buff[3] = (ret >> 24) & 0xff;
1841                         devip->sense_buff[4] = (ret >> 16) & 0xff;
1842                         devip->sense_buff[5] = (ret >> 8) & 0xff;
1843                         devip->sense_buff[6] = ret & 0xff;
1844                 }
1845                 return check_condition_result;
1846         }
1847         read_lock_irqsave(&atomic_rw, iflags);
1848         if ((lba + num) <= sdebug_store_sectors)
1849                 ret = fill_from_dev_buffer(SCpnt,
1850                                            fake_storep + (lba * SECT_SIZE),
1851                                            num * SECT_SIZE);
1852         else {
1853                 /* modulo when one arg is 64 bits needs do_div() */
1854                 u = lba;
1855                 block = do_div(u, sdebug_store_sectors);
1856                 from_bottom = 0;
1857                 if ((block + num) > sdebug_store_sectors)
1858                         from_bottom = (block + num) - sdebug_store_sectors;
1859                 ret = fill_from_dev_buffer(SCpnt,
1860                                            fake_storep + (block * SECT_SIZE),
1861                                            (num - from_bottom) * SECT_SIZE);
1862                 if ((0 == ret) && (from_bottom > 0))
1863                         ret = fill_from_dev_buffer(SCpnt, fake_storep,
1864                                                    from_bottom * SECT_SIZE);
1865         }
1866         read_unlock_irqrestore(&atomic_rw, iflags);
1867         return ret;
1868 }
1869
1870 static int resp_write(struct scsi_cmnd * SCpnt, unsigned long long lba,
1871                       unsigned int num, struct sdebug_dev_info * devip)
1872 {
1873         unsigned long iflags;
1874         unsigned int block, to_bottom;
1875         unsigned long long u;
1876         int res;
1877
1878         if (lba + num > sdebug_capacity) {
1879                 mk_sense_buffer(devip, ILLEGAL_REQUEST, ADDR_OUT_OF_RANGE,
1880                                 0);
1881                 return check_condition_result;
1882         }
1883         /* transfer length excessive (tie in to block limits VPD page) */
1884         if (num > sdebug_store_sectors) {
1885                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1886                                 0);
1887                 return check_condition_result;
1888         }
1889
1890         write_lock_irqsave(&atomic_rw, iflags);
1891         if ((lba + num) <= sdebug_store_sectors)
1892                 res = fetch_to_dev_buffer(SCpnt,
1893                                           fake_storep + (lba * SECT_SIZE),
1894                                           num * SECT_SIZE);
1895         else {
1896                 /* modulo when one arg is 64 bits needs do_div() */
1897                 u = lba;
1898                 block = do_div(u, sdebug_store_sectors);
1899                 to_bottom = 0;
1900                 if ((block + num) > sdebug_store_sectors)
1901                         to_bottom = (block + num) - sdebug_store_sectors;
1902                 res = fetch_to_dev_buffer(SCpnt,
1903                                           fake_storep + (block * SECT_SIZE),
1904                                           (num - to_bottom) * SECT_SIZE);
1905                 if ((0 == res) && (to_bottom > 0))
1906                         res = fetch_to_dev_buffer(SCpnt, fake_storep,
1907                                                   to_bottom * SECT_SIZE);
1908         }
1909         write_unlock_irqrestore(&atomic_rw, iflags);
1910         if (-1 == res)
1911                 return (DID_ERROR << 16);
1912         else if ((res < (num * SECT_SIZE)) &&
1913                  (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts))
1914                 printk(KERN_INFO "scsi_debug: write: cdb indicated=%u, "
1915                        " IO sent=%d bytes\n", num * SECT_SIZE, res);
1916         return 0;
1917 }
1918
1919 #define SDEBUG_RLUN_ARR_SZ 256
1920
1921 static int resp_report_luns(struct scsi_cmnd * scp,
1922                             struct sdebug_dev_info * devip)
1923 {
1924         unsigned int alloc_len;
1925         int lun_cnt, i, upper, num, n, wlun, lun;
1926         unsigned char *cmd = (unsigned char *)scp->cmnd;
1927         int select_report = (int)cmd[2];
1928         struct scsi_lun *one_lun;
1929         unsigned char arr[SDEBUG_RLUN_ARR_SZ];
1930         unsigned char * max_addr;
1931
1932         alloc_len = cmd[9] + (cmd[8] << 8) + (cmd[7] << 16) + (cmd[6] << 24);
1933         if ((alloc_len < 4) || (select_report > 2)) {
1934                 mk_sense_buffer(devip, ILLEGAL_REQUEST, INVALID_FIELD_IN_CDB,
1935                                 0);
1936                 return check_condition_result;
1937         }
1938         /* can produce response with up to 16k luns (lun 0 to lun 16383) */
1939         memset(arr, 0, SDEBUG_RLUN_ARR_SZ);
1940         lun_cnt = scsi_debug_max_luns;
1941         if (1 == select_report)
1942                 lun_cnt = 0;
1943         else if (scsi_debug_no_lun_0 && (lun_cnt > 0))
1944                 --lun_cnt;
1945         wlun = (select_report > 0) ? 1 : 0;
1946         num = lun_cnt + wlun;
1947         arr[2] = ((sizeof(struct scsi_lun) * num) >> 8) & 0xff;
1948         arr[3] = (sizeof(struct scsi_lun) * num) & 0xff;
1949         n = min((int)((SDEBUG_RLUN_ARR_SZ - 8) /
1950                             sizeof(struct scsi_lun)), num);
1951         if (n < num) {
1952                 wlun = 0;
1953                 lun_cnt = n;
1954         }
1955         one_lun = (struct scsi_lun *) &arr[8];
1956         max_addr = arr + SDEBUG_RLUN_ARR_SZ;
1957         for (i = 0, lun = (scsi_debug_no_lun_0 ? 1 : 0);
1958              ((i < lun_cnt) && ((unsigned char *)(one_lun + i) < max_addr));
1959              i++, lun++) {
1960                 upper = (lun >> 8) & 0x3f;
1961                 if (upper)
1962                         one_lun[i].scsi_lun[0] =
1963                             (upper | (SAM2_LUN_ADDRESS_METHOD << 6));
1964                 one_lun[i].scsi_lun[1] = lun & 0xff;
1965         }
1966         if (wlun) {
1967                 one_lun[i].scsi_lun[0] = (SAM2_WLUN_REPORT_LUNS >> 8) & 0xff;
1968                 one_lun[i].scsi_lun[1] = SAM2_WLUN_REPORT_LUNS & 0xff;
1969                 i++;
1970         }
1971         alloc_len = (unsigned char *)(one_lun + i) - arr;
1972         return fill_from_dev_buffer(scp, arr,
1973                                     min((int)alloc_len, SDEBUG_RLUN_ARR_SZ));
1974 }
1975
1976 static int resp_xdwriteread(struct scsi_cmnd *scp, unsigned long long lba,
1977                             unsigned int num, struct sdebug_dev_info *devip)
1978 {
1979         int i, j, ret = -1;
1980         unsigned char *kaddr, *buf;
1981         unsigned int offset;
1982         struct scatterlist *sg;
1983         struct scsi_data_buffer *sdb = scsi_in(scp);
1984
1985         /* better not to use temporary buffer. */
1986         buf = kmalloc(scsi_bufflen(scp), GFP_ATOMIC);
1987         if (!buf)
1988                 return ret;
1989
1990         offset = 0;
1991         scsi_for_each_sg(scp, sg, scsi_sg_count(scp), i) {
1992                 kaddr = (unsigned char *)kmap_atomic(sg_page(sg), KM_USER0);
1993                 if (!kaddr)
1994                         goto out;
1995
1996                 memcpy(buf + offset, kaddr + sg->offset, sg->length);
1997                 offset += sg->length;
1998                 kunmap_atomic(kaddr, KM_USER0);
1999         }
2000
2001         offset = 0;
2002         for_each_sg(sdb->table.sgl, sg, sdb->table.nents, i) {
2003                 kaddr = (unsigned char *)kmap_atomic(sg_page(sg), KM_USER0);
2004                 if (!kaddr)
2005                         goto out;
2006
2007                 for (j = 0; j < sg->length; j++)
2008                         *(kaddr + sg->offset + j) ^= *(buf + offset + j);
2009
2010                 offset += sg->length;
2011                 kunmap_atomic(kaddr, KM_USER0);
2012         }
2013         ret = 0;
2014 out:
2015         kfree(buf);
2016
2017         return ret;
2018 }
2019
2020 /* When timer goes off this function is called. */
2021 static void timer_intr_handler(unsigned long indx)
2022 {
2023         struct sdebug_queued_cmd * sqcp;
2024         unsigned long iflags;
2025
2026         if (indx >= SCSI_DEBUG_CANQUEUE) {
2027                 printk(KERN_ERR "scsi_debug:timer_intr_handler: indx too "
2028                        "large\n");
2029                 return;
2030         }
2031         spin_lock_irqsave(&queued_arr_lock, iflags);
2032         sqcp = &queued_arr[(int)indx];
2033         if (! sqcp->in_use) {
2034                 printk(KERN_ERR "scsi_debug:timer_intr_handler: Unexpected "
2035                        "interrupt\n");
2036                 spin_unlock_irqrestore(&queued_arr_lock, iflags);
2037                 return;
2038         }
2039         sqcp->in_use = 0;
2040         if (sqcp->done_funct) {
2041                 sqcp->a_cmnd->result = sqcp->scsi_result;
2042                 sqcp->done_funct(sqcp->a_cmnd); /* callback to mid level */
2043         }
2044         sqcp->done_funct = NULL;
2045         spin_unlock_irqrestore(&queued_arr_lock, iflags);
2046 }
2047
2048 static int scsi_debug_slave_alloc(struct scsi_device * sdp)
2049 {
2050         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2051                 printk(KERN_INFO "scsi_debug: slave_alloc <%u %u %u %u>\n",
2052                        sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2053         set_bit(QUEUE_FLAG_BIDI, &sdp->request_queue->queue_flags);
2054         return 0;
2055 }
2056
2057 static int scsi_debug_slave_configure(struct scsi_device * sdp)
2058 {
2059         struct sdebug_dev_info * devip;
2060
2061         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2062                 printk(KERN_INFO "scsi_debug: slave_configure <%u %u %u %u>\n",
2063                        sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2064         if (sdp->host->max_cmd_len != SCSI_DEBUG_MAX_CMD_LEN)
2065                 sdp->host->max_cmd_len = SCSI_DEBUG_MAX_CMD_LEN;
2066         devip = devInfoReg(sdp);
2067         if (NULL == devip)
2068                 return 1;       /* no resources, will be marked offline */
2069         sdp->hostdata = devip;
2070         if (sdp->host->cmd_per_lun)
2071                 scsi_adjust_queue_depth(sdp, SDEBUG_TAGGED_QUEUING,
2072                                         sdp->host->cmd_per_lun);
2073         blk_queue_max_segment_size(sdp->request_queue, 256 * 1024);
2074         return 0;
2075 }
2076
2077 static void scsi_debug_slave_destroy(struct scsi_device * sdp)
2078 {
2079         struct sdebug_dev_info * devip =
2080                                 (struct sdebug_dev_info *)sdp->hostdata;
2081
2082         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2083                 printk(KERN_INFO "scsi_debug: slave_destroy <%u %u %u %u>\n",
2084                        sdp->host->host_no, sdp->channel, sdp->id, sdp->lun);
2085         if (devip) {
2086                 /* make this slot avaliable for re-use */
2087                 devip->used = 0;
2088                 sdp->hostdata = NULL;
2089         }
2090 }
2091
2092 static struct sdebug_dev_info * devInfoReg(struct scsi_device * sdev)
2093 {
2094         struct sdebug_host_info * sdbg_host;
2095         struct sdebug_dev_info * open_devip = NULL;
2096         struct sdebug_dev_info * devip =
2097                         (struct sdebug_dev_info *)sdev->hostdata;
2098
2099         if (devip)
2100                 return devip;
2101         sdbg_host = *(struct sdebug_host_info **) sdev->host->hostdata;
2102         if(! sdbg_host) {
2103                 printk(KERN_ERR "Host info NULL\n");
2104                 return NULL;
2105         }
2106         list_for_each_entry(devip, &sdbg_host->dev_info_list, dev_list) {
2107                 if ((devip->used) && (devip->channel == sdev->channel) &&
2108                     (devip->target == sdev->id) &&
2109                     (devip->lun == sdev->lun))
2110                         return devip;
2111                 else {
2112                         if ((!devip->used) && (!open_devip))
2113                                 open_devip = devip;
2114                 }
2115         }
2116         if (NULL == open_devip) { /* try and make a new one */
2117                 open_devip = kzalloc(sizeof(*open_devip),GFP_ATOMIC);
2118                 if (NULL == open_devip) {
2119                         printk(KERN_ERR "%s: out of memory at line %d\n",
2120                                 __FUNCTION__, __LINE__);
2121                         return NULL;
2122                 }
2123                 open_devip->sdbg_host = sdbg_host;
2124                 list_add_tail(&open_devip->dev_list,
2125                 &sdbg_host->dev_info_list);
2126         }
2127         if (open_devip) {
2128                 open_devip->channel = sdev->channel;
2129                 open_devip->target = sdev->id;
2130                 open_devip->lun = sdev->lun;
2131                 open_devip->sdbg_host = sdbg_host;
2132                 open_devip->reset = 1;
2133                 open_devip->used = 1;
2134                 memset(open_devip->sense_buff, 0, SDEBUG_SENSE_LEN);
2135                 if (scsi_debug_dsense)
2136                         open_devip->sense_buff[0] = 0x72;
2137                 else {
2138                         open_devip->sense_buff[0] = 0x70;
2139                         open_devip->sense_buff[7] = 0xa;
2140                 }
2141                 if (sdev->lun == SAM2_WLUN_REPORT_LUNS)
2142                         open_devip->wlun = SAM2_WLUN_REPORT_LUNS & 0xff;
2143                 return open_devip;
2144         }
2145         return NULL;
2146 }
2147
2148 static void mk_sense_buffer(struct sdebug_dev_info * devip, int key,
2149                             int asc, int asq)
2150 {
2151         unsigned char * sbuff;
2152
2153         sbuff = devip->sense_buff;
2154         memset(sbuff, 0, SDEBUG_SENSE_LEN);
2155         if (scsi_debug_dsense) {
2156                 sbuff[0] = 0x72;  /* descriptor, current */
2157                 sbuff[1] = key;
2158                 sbuff[2] = asc;
2159                 sbuff[3] = asq;
2160         } else {
2161                 sbuff[0] = 0x70;  /* fixed, current */
2162                 sbuff[2] = key;
2163                 sbuff[7] = 0xa;   /* implies 18 byte sense buffer */
2164                 sbuff[12] = asc;
2165                 sbuff[13] = asq;
2166         }
2167         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2168                 printk(KERN_INFO "scsi_debug:    [sense_key,asc,ascq]: "
2169                       "[0x%x,0x%x,0x%x]\n", key, asc, asq);
2170 }
2171
2172 static int scsi_debug_abort(struct scsi_cmnd * SCpnt)
2173 {
2174         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2175                 printk(KERN_INFO "scsi_debug: abort\n");
2176         ++num_aborts;
2177         stop_queued_cmnd(SCpnt);
2178         return SUCCESS;
2179 }
2180
2181 static int scsi_debug_biosparam(struct scsi_device *sdev,
2182                 struct block_device * bdev, sector_t capacity, int *info)
2183 {
2184         int res;
2185         unsigned char *buf;
2186
2187         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2188                 printk(KERN_INFO "scsi_debug: biosparam\n");
2189         buf = scsi_bios_ptable(bdev);
2190         if (buf) {
2191                 res = scsi_partsize(buf, capacity,
2192                                     &info[2], &info[0], &info[1]);
2193                 kfree(buf);
2194                 if (! res)
2195                         return res;
2196         }
2197         info[0] = sdebug_heads;
2198         info[1] = sdebug_sectors_per;
2199         info[2] = sdebug_cylinders_per;
2200         return 0;
2201 }
2202
2203 static int scsi_debug_device_reset(struct scsi_cmnd * SCpnt)
2204 {
2205         struct sdebug_dev_info * devip;
2206
2207         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2208                 printk(KERN_INFO "scsi_debug: device_reset\n");
2209         ++num_dev_resets;
2210         if (SCpnt) {
2211                 devip = devInfoReg(SCpnt->device);
2212                 if (devip)
2213                         devip->reset = 1;
2214         }
2215         return SUCCESS;
2216 }
2217
2218 static int scsi_debug_bus_reset(struct scsi_cmnd * SCpnt)
2219 {
2220         struct sdebug_host_info *sdbg_host;
2221         struct sdebug_dev_info * dev_info;
2222         struct scsi_device * sdp;
2223         struct Scsi_Host * hp;
2224
2225         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2226                 printk(KERN_INFO "scsi_debug: bus_reset\n");
2227         ++num_bus_resets;
2228         if (SCpnt && ((sdp = SCpnt->device)) && ((hp = sdp->host))) {
2229                 sdbg_host = *(struct sdebug_host_info **) hp->hostdata;
2230                 if (sdbg_host) {
2231                         list_for_each_entry(dev_info,
2232                                             &sdbg_host->dev_info_list,
2233                                             dev_list)
2234                                 dev_info->reset = 1;
2235                 }
2236         }
2237         return SUCCESS;
2238 }
2239
2240 static int scsi_debug_host_reset(struct scsi_cmnd * SCpnt)
2241 {
2242         struct sdebug_host_info * sdbg_host;
2243         struct sdebug_dev_info * dev_info;
2244
2245         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2246                 printk(KERN_INFO "scsi_debug: host_reset\n");
2247         ++num_host_resets;
2248         spin_lock(&sdebug_host_list_lock);
2249         list_for_each_entry(sdbg_host, &sdebug_host_list, host_list) {
2250                 list_for_each_entry(dev_info, &sdbg_host->dev_info_list,
2251                                     dev_list)
2252                         dev_info->reset = 1;
2253         }
2254         spin_unlock(&sdebug_host_list_lock);
2255         stop_all_queued();
2256         return SUCCESS;
2257 }
2258
2259 /* Returns 1 if found 'cmnd' and deleted its timer. else returns 0 */
2260 static int stop_queued_cmnd(struct scsi_cmnd * cmnd)
2261 {
2262         unsigned long iflags;
2263         int k;
2264         struct sdebug_queued_cmd * sqcp;
2265
2266         spin_lock_irqsave(&queued_arr_lock, iflags);
2267         for (k = 0; k < SCSI_DEBUG_CANQUEUE; ++k) {
2268                 sqcp = &queued_arr[k];
2269                 if (sqcp->in_use && (cmnd == sqcp->a_cmnd)) {
2270                         del_timer_sync(&sqcp->cmnd_timer);
2271                         sqcp->in_use = 0;
2272                         sqcp->a_cmnd = NULL;
2273                         break;
2274                 }
2275         }
2276         spin_unlock_irqrestore(&queued_arr_lock, iflags);
2277         return (k < SCSI_DEBUG_CANQUEUE) ? 1 : 0;
2278 }
2279
2280 /* Deletes (stops) timers of all queued commands */
2281 static void stop_all_queued(void)
2282 {
2283         unsigned long iflags;
2284         int k;
2285         struct sdebug_queued_cmd * sqcp;
2286
2287         spin_lock_irqsave(&queued_arr_lock, iflags);
2288         for (k = 0; k < SCSI_DEBUG_CANQUEUE; ++k) {
2289                 sqcp = &queued_arr[k];
2290                 if (sqcp->in_use && sqcp->a_cmnd) {
2291                         del_timer_sync(&sqcp->cmnd_timer);
2292                         sqcp->in_use = 0;
2293                         sqcp->a_cmnd = NULL;
2294                 }
2295         }
2296         spin_unlock_irqrestore(&queued_arr_lock, iflags);
2297 }
2298
2299 /* Initializes timers in queued array */
2300 static void __init init_all_queued(void)
2301 {
2302         unsigned long iflags;
2303         int k;
2304         struct sdebug_queued_cmd * sqcp;
2305
2306         spin_lock_irqsave(&queued_arr_lock, iflags);
2307         for (k = 0; k < SCSI_DEBUG_CANQUEUE; ++k) {
2308                 sqcp = &queued_arr[k];
2309                 init_timer(&sqcp->cmnd_timer);
2310                 sqcp->in_use = 0;
2311                 sqcp->a_cmnd = NULL;
2312         }
2313         spin_unlock_irqrestore(&queued_arr_lock, iflags);
2314 }
2315
2316 static void __init sdebug_build_parts(unsigned char * ramp)
2317 {
2318         struct partition * pp;
2319         int starts[SDEBUG_MAX_PARTS + 2];
2320         int sectors_per_part, num_sectors, k;
2321         int heads_by_sects, start_sec, end_sec;
2322
2323         /* assume partition table already zeroed */
2324         if ((scsi_debug_num_parts < 1) || (sdebug_store_size < 1048576))
2325                 return;
2326         if (scsi_debug_num_parts > SDEBUG_MAX_PARTS) {
2327                 scsi_debug_num_parts = SDEBUG_MAX_PARTS;
2328                 printk(KERN_WARNING "scsi_debug:build_parts: reducing "
2329                                     "partitions to %d\n", SDEBUG_MAX_PARTS);
2330         }
2331         num_sectors = (int)sdebug_store_sectors;
2332         sectors_per_part = (num_sectors - sdebug_sectors_per)
2333                            / scsi_debug_num_parts;
2334         heads_by_sects = sdebug_heads * sdebug_sectors_per;
2335         starts[0] = sdebug_sectors_per;
2336         for (k = 1; k < scsi_debug_num_parts; ++k)
2337                 starts[k] = ((k * sectors_per_part) / heads_by_sects)
2338                             * heads_by_sects;
2339         starts[scsi_debug_num_parts] = num_sectors;
2340         starts[scsi_debug_num_parts + 1] = 0;
2341
2342         ramp[510] = 0x55;       /* magic partition markings */
2343         ramp[511] = 0xAA;
2344         pp = (struct partition *)(ramp + 0x1be);
2345         for (k = 0; starts[k + 1]; ++k, ++pp) {
2346                 start_sec = starts[k];
2347                 end_sec = starts[k + 1] - 1;
2348                 pp->boot_ind = 0;
2349
2350                 pp->cyl = start_sec / heads_by_sects;
2351                 pp->head = (start_sec - (pp->cyl * heads_by_sects))
2352                            / sdebug_sectors_per;
2353                 pp->sector = (start_sec % sdebug_sectors_per) + 1;
2354
2355                 pp->end_cyl = end_sec / heads_by_sects;
2356                 pp->end_head = (end_sec - (pp->end_cyl * heads_by_sects))
2357                                / sdebug_sectors_per;
2358                 pp->end_sector = (end_sec % sdebug_sectors_per) + 1;
2359
2360                 pp->start_sect = start_sec;
2361                 pp->nr_sects = end_sec - start_sec + 1;
2362                 pp->sys_ind = 0x83;     /* plain Linux partition */
2363         }
2364 }
2365
2366 static int schedule_resp(struct scsi_cmnd * cmnd,
2367                          struct sdebug_dev_info * devip,
2368                          done_funct_t done, int scsi_result, int delta_jiff)
2369 {
2370         if ((SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) && cmnd) {
2371                 if (scsi_result) {
2372                         struct scsi_device * sdp = cmnd->device;
2373
2374                         printk(KERN_INFO "scsi_debug:    <%u %u %u %u> "
2375                                "non-zero result=0x%x\n", sdp->host->host_no,
2376                                sdp->channel, sdp->id, sdp->lun, scsi_result);
2377                 }
2378         }
2379         if (cmnd && devip) {
2380                 /* simulate autosense by this driver */
2381                 if (SAM_STAT_CHECK_CONDITION == (scsi_result & 0xff))
2382                         memcpy(cmnd->sense_buffer, devip->sense_buff,
2383                                (SCSI_SENSE_BUFFERSIZE > SDEBUG_SENSE_LEN) ?
2384                                SDEBUG_SENSE_LEN : SCSI_SENSE_BUFFERSIZE);
2385         }
2386         if (delta_jiff <= 0) {
2387                 if (cmnd)
2388                         cmnd->result = scsi_result;
2389                 if (done)
2390                         done(cmnd);
2391                 return 0;
2392         } else {
2393                 unsigned long iflags;
2394                 int k;
2395                 struct sdebug_queued_cmd * sqcp = NULL;
2396
2397                 spin_lock_irqsave(&queued_arr_lock, iflags);
2398                 for (k = 0; k < SCSI_DEBUG_CANQUEUE; ++k) {
2399                         sqcp = &queued_arr[k];
2400                         if (! sqcp->in_use)
2401                                 break;
2402                 }
2403                 if (k >= SCSI_DEBUG_CANQUEUE) {
2404                         spin_unlock_irqrestore(&queued_arr_lock, iflags);
2405                         printk(KERN_WARNING "scsi_debug: can_queue exceeded\n");
2406                         return 1;       /* report busy to mid level */
2407                 }
2408                 sqcp->in_use = 1;
2409                 sqcp->a_cmnd = cmnd;
2410                 sqcp->scsi_result = scsi_result;
2411                 sqcp->done_funct = done;
2412                 sqcp->cmnd_timer.function = timer_intr_handler;
2413                 sqcp->cmnd_timer.data = k;
2414                 sqcp->cmnd_timer.expires = jiffies + delta_jiff;
2415                 add_timer(&sqcp->cmnd_timer);
2416                 spin_unlock_irqrestore(&queued_arr_lock, iflags);
2417                 if (cmnd)
2418                         cmnd->result = 0;
2419                 return 0;
2420         }
2421 }
2422
2423 /* Note: The following macros create attribute files in the
2424    /sys/module/scsi_debug/parameters directory. Unfortunately this
2425    driver is unaware of a change and cannot trigger auxiliary actions
2426    as it can when the corresponding attribute in the
2427    /sys/bus/pseudo/drivers/scsi_debug directory is changed.
2428  */
2429 module_param_named(add_host, scsi_debug_add_host, int, S_IRUGO | S_IWUSR);
2430 module_param_named(delay, scsi_debug_delay, int, S_IRUGO | S_IWUSR);
2431 module_param_named(dev_size_mb, scsi_debug_dev_size_mb, int, S_IRUGO);
2432 module_param_named(dsense, scsi_debug_dsense, int, S_IRUGO | S_IWUSR);
2433 module_param_named(every_nth, scsi_debug_every_nth, int, S_IRUGO | S_IWUSR);
2434 module_param_named(fake_rw, scsi_debug_fake_rw, int, S_IRUGO | S_IWUSR);
2435 module_param_named(max_luns, scsi_debug_max_luns, int, S_IRUGO | S_IWUSR);
2436 module_param_named(no_lun_0, scsi_debug_no_lun_0, int, S_IRUGO | S_IWUSR);
2437 module_param_named(num_parts, scsi_debug_num_parts, int, S_IRUGO);
2438 module_param_named(num_tgts, scsi_debug_num_tgts, int, S_IRUGO | S_IWUSR);
2439 module_param_named(opts, scsi_debug_opts, int, S_IRUGO | S_IWUSR);
2440 module_param_named(ptype, scsi_debug_ptype, int, S_IRUGO | S_IWUSR);
2441 module_param_named(scsi_level, scsi_debug_scsi_level, int, S_IRUGO);
2442 module_param_named(virtual_gb, scsi_debug_virtual_gb, int, S_IRUGO | S_IWUSR);
2443 module_param_named(vpd_use_hostno, scsi_debug_vpd_use_hostno, int,
2444                    S_IRUGO | S_IWUSR);
2445
2446 MODULE_AUTHOR("Eric Youngdale + Douglas Gilbert");
2447 MODULE_DESCRIPTION("SCSI debug adapter driver");
2448 MODULE_LICENSE("GPL");
2449 MODULE_VERSION(SCSI_DEBUG_VERSION);
2450
2451 MODULE_PARM_DESC(add_host, "0..127 hosts allowed(def=1)");
2452 MODULE_PARM_DESC(delay, "# of jiffies to delay response(def=1)");
2453 MODULE_PARM_DESC(dev_size_mb, "size in MB of ram shared by devs(def=8)");
2454 MODULE_PARM_DESC(dsense, "use descriptor sense format(def=0 -> fixed)");
2455 MODULE_PARM_DESC(every_nth, "timeout every nth command(def=0)");
2456 MODULE_PARM_DESC(fake_rw, "fake reads/writes instead of copying (def=0)");
2457 MODULE_PARM_DESC(max_luns, "number of LUNs per target to simulate(def=1)");
2458 MODULE_PARM_DESC(no_lun_0, "no LU number 0 (def=0 -> have lun 0)");
2459 MODULE_PARM_DESC(num_parts, "number of partitions(def=0)");
2460 MODULE_PARM_DESC(num_tgts, "number of targets per host to simulate(def=1)");
2461 MODULE_PARM_DESC(opts, "1->noise, 2->medium_err, 4->timeout, 8->recovered_err... (def=0)");
2462 MODULE_PARM_DESC(ptype, "SCSI peripheral type(def=0[disk])");
2463 MODULE_PARM_DESC(scsi_level, "SCSI level to simulate(def=5[SPC-3])");
2464 MODULE_PARM_DESC(virtual_gb, "virtual gigabyte size (def=0 -> use dev_size_mb)");
2465 MODULE_PARM_DESC(vpd_use_hostno, "0 -> dev ids ignore hostno (def=1 -> unique dev ids)");
2466
2467
2468 static char sdebug_info[256];
2469
2470 static const char * scsi_debug_info(struct Scsi_Host * shp)
2471 {
2472         sprintf(sdebug_info, "scsi_debug, version %s [%s], "
2473                 "dev_size_mb=%d, opts=0x%x", SCSI_DEBUG_VERSION,
2474                 scsi_debug_version_date, scsi_debug_dev_size_mb,
2475                 scsi_debug_opts);
2476         return sdebug_info;
2477 }
2478
2479 /* scsi_debug_proc_info
2480  * Used if the driver currently has no own support for /proc/scsi
2481  */
2482 static int scsi_debug_proc_info(struct Scsi_Host *host, char *buffer, char **start, off_t offset,
2483                                 int length, int inout)
2484 {
2485         int len, pos, begin;
2486         int orig_length;
2487
2488         orig_length = length;
2489
2490         if (inout == 1) {
2491                 char arr[16];
2492                 int minLen = length > 15 ? 15 : length;
2493
2494                 if (!capable(CAP_SYS_ADMIN) || !capable(CAP_SYS_RAWIO))
2495                         return -EACCES;
2496                 memcpy(arr, buffer, minLen);
2497                 arr[minLen] = '\0';
2498                 if (1 != sscanf(arr, "%d", &pos))
2499                         return -EINVAL;
2500                 scsi_debug_opts = pos;
2501                 if (scsi_debug_every_nth != 0)
2502                         scsi_debug_cmnd_count = 0;
2503                 return length;
2504         }
2505         begin = 0;
2506         pos = len = sprintf(buffer, "scsi_debug adapter driver, version "
2507             "%s [%s]\n"
2508             "num_tgts=%d, shared (ram) size=%d MB, opts=0x%x, "
2509             "every_nth=%d(curr:%d)\n"
2510             "delay=%d, max_luns=%d, scsi_level=%d\n"
2511             "sector_size=%d bytes, cylinders=%d, heads=%d, sectors=%d\n"
2512             "number of aborts=%d, device_reset=%d, bus_resets=%d, "
2513             "host_resets=%d\n",
2514             SCSI_DEBUG_VERSION, scsi_debug_version_date, scsi_debug_num_tgts,
2515             scsi_debug_dev_size_mb, scsi_debug_opts, scsi_debug_every_nth,
2516             scsi_debug_cmnd_count, scsi_debug_delay,
2517             scsi_debug_max_luns, scsi_debug_scsi_level,
2518             SECT_SIZE, sdebug_cylinders_per, sdebug_heads, sdebug_sectors_per,
2519             num_aborts, num_dev_resets, num_bus_resets, num_host_resets);
2520         if (pos < offset) {
2521                 len = 0;
2522                 begin = pos;
2523         }
2524         *start = buffer + (offset - begin);     /* Start of wanted data */
2525         len -= (offset - begin);
2526         if (len > length)
2527                 len = length;
2528         return len;
2529 }
2530
2531 static ssize_t sdebug_delay_show(struct device_driver * ddp, char * buf)
2532 {
2533         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_delay);
2534 }
2535
2536 static ssize_t sdebug_delay_store(struct device_driver * ddp,
2537                                   const char * buf, size_t count)
2538 {
2539         int delay;
2540         char work[20];
2541
2542         if (1 == sscanf(buf, "%10s", work)) {
2543                 if ((1 == sscanf(work, "%d", &delay)) && (delay >= 0)) {
2544                         scsi_debug_delay = delay;
2545                         return count;
2546                 }
2547         }
2548         return -EINVAL;
2549 }
2550 DRIVER_ATTR(delay, S_IRUGO | S_IWUSR, sdebug_delay_show,
2551             sdebug_delay_store);
2552
2553 static ssize_t sdebug_opts_show(struct device_driver * ddp, char * buf)
2554 {
2555         return scnprintf(buf, PAGE_SIZE, "0x%x\n", scsi_debug_opts);
2556 }
2557
2558 static ssize_t sdebug_opts_store(struct device_driver * ddp,
2559                                  const char * buf, size_t count)
2560 {
2561         int opts;
2562         char work[20];
2563
2564         if (1 == sscanf(buf, "%10s", work)) {
2565                 if (0 == strnicmp(work,"0x", 2)) {
2566                         if (1 == sscanf(&work[2], "%x", &opts))
2567                                 goto opts_done;
2568                 } else {
2569                         if (1 == sscanf(work, "%d", &opts))
2570                                 goto opts_done;
2571                 }
2572         }
2573         return -EINVAL;
2574 opts_done:
2575         scsi_debug_opts = opts;
2576         scsi_debug_cmnd_count = 0;
2577         return count;
2578 }
2579 DRIVER_ATTR(opts, S_IRUGO | S_IWUSR, sdebug_opts_show,
2580             sdebug_opts_store);
2581
2582 static ssize_t sdebug_ptype_show(struct device_driver * ddp, char * buf)
2583 {
2584         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_ptype);
2585 }
2586 static ssize_t sdebug_ptype_store(struct device_driver * ddp,
2587                                   const char * buf, size_t count)
2588 {
2589         int n;
2590
2591         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2592                 scsi_debug_ptype = n;
2593                 return count;
2594         }
2595         return -EINVAL;
2596 }
2597 DRIVER_ATTR(ptype, S_IRUGO | S_IWUSR, sdebug_ptype_show, sdebug_ptype_store);
2598
2599 static ssize_t sdebug_dsense_show(struct device_driver * ddp, char * buf)
2600 {
2601         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dsense);
2602 }
2603 static ssize_t sdebug_dsense_store(struct device_driver * ddp,
2604                                   const char * buf, size_t count)
2605 {
2606         int n;
2607
2608         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2609                 scsi_debug_dsense = n;
2610                 return count;
2611         }
2612         return -EINVAL;
2613 }
2614 DRIVER_ATTR(dsense, S_IRUGO | S_IWUSR, sdebug_dsense_show,
2615             sdebug_dsense_store);
2616
2617 static ssize_t sdebug_fake_rw_show(struct device_driver * ddp, char * buf)
2618 {
2619         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_fake_rw);
2620 }
2621 static ssize_t sdebug_fake_rw_store(struct device_driver * ddp,
2622                                     const char * buf, size_t count)
2623 {
2624         int n;
2625
2626         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2627                 scsi_debug_fake_rw = n;
2628                 return count;
2629         }
2630         return -EINVAL;
2631 }
2632 DRIVER_ATTR(fake_rw, S_IRUGO | S_IWUSR, sdebug_fake_rw_show,
2633             sdebug_fake_rw_store);
2634
2635 static ssize_t sdebug_no_lun_0_show(struct device_driver * ddp, char * buf)
2636 {
2637         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_no_lun_0);
2638 }
2639 static ssize_t sdebug_no_lun_0_store(struct device_driver * ddp,
2640                                      const char * buf, size_t count)
2641 {
2642         int n;
2643
2644         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2645                 scsi_debug_no_lun_0 = n;
2646                 return count;
2647         }
2648         return -EINVAL;
2649 }
2650 DRIVER_ATTR(no_lun_0, S_IRUGO | S_IWUSR, sdebug_no_lun_0_show,
2651             sdebug_no_lun_0_store);
2652
2653 static ssize_t sdebug_num_tgts_show(struct device_driver * ddp, char * buf)
2654 {
2655         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_num_tgts);
2656 }
2657 static ssize_t sdebug_num_tgts_store(struct device_driver * ddp,
2658                                      const char * buf, size_t count)
2659 {
2660         int n;
2661
2662         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2663                 scsi_debug_num_tgts = n;
2664                 sdebug_max_tgts_luns();
2665                 return count;
2666         }
2667         return -EINVAL;
2668 }
2669 DRIVER_ATTR(num_tgts, S_IRUGO | S_IWUSR, sdebug_num_tgts_show,
2670             sdebug_num_tgts_store);
2671
2672 static ssize_t sdebug_dev_size_mb_show(struct device_driver * ddp, char * buf)
2673 {
2674         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_dev_size_mb);
2675 }
2676 DRIVER_ATTR(dev_size_mb, S_IRUGO, sdebug_dev_size_mb_show, NULL);
2677
2678 static ssize_t sdebug_num_parts_show(struct device_driver * ddp, char * buf)
2679 {
2680         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_num_parts);
2681 }
2682 DRIVER_ATTR(num_parts, S_IRUGO, sdebug_num_parts_show, NULL);
2683
2684 static ssize_t sdebug_every_nth_show(struct device_driver * ddp, char * buf)
2685 {
2686         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_every_nth);
2687 }
2688 static ssize_t sdebug_every_nth_store(struct device_driver * ddp,
2689                                       const char * buf, size_t count)
2690 {
2691         int nth;
2692
2693         if ((count > 0) && (1 == sscanf(buf, "%d", &nth))) {
2694                 scsi_debug_every_nth = nth;
2695                 scsi_debug_cmnd_count = 0;
2696                 return count;
2697         }
2698         return -EINVAL;
2699 }
2700 DRIVER_ATTR(every_nth, S_IRUGO | S_IWUSR, sdebug_every_nth_show,
2701             sdebug_every_nth_store);
2702
2703 static ssize_t sdebug_max_luns_show(struct device_driver * ddp, char * buf)
2704 {
2705         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_max_luns);
2706 }
2707 static ssize_t sdebug_max_luns_store(struct device_driver * ddp,
2708                                      const char * buf, size_t count)
2709 {
2710         int n;
2711
2712         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2713                 scsi_debug_max_luns = n;
2714                 sdebug_max_tgts_luns();
2715                 return count;
2716         }
2717         return -EINVAL;
2718 }
2719 DRIVER_ATTR(max_luns, S_IRUGO | S_IWUSR, sdebug_max_luns_show,
2720             sdebug_max_luns_store);
2721
2722 static ssize_t sdebug_scsi_level_show(struct device_driver * ddp, char * buf)
2723 {
2724         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_scsi_level);
2725 }
2726 DRIVER_ATTR(scsi_level, S_IRUGO, sdebug_scsi_level_show, NULL);
2727
2728 static ssize_t sdebug_virtual_gb_show(struct device_driver * ddp, char * buf)
2729 {
2730         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_virtual_gb);
2731 }
2732 static ssize_t sdebug_virtual_gb_store(struct device_driver * ddp,
2733                                        const char * buf, size_t count)
2734 {
2735         int n;
2736
2737         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2738                 scsi_debug_virtual_gb = n;
2739                 if (scsi_debug_virtual_gb > 0) {
2740                         sdebug_capacity = 2048 * 1024;
2741                         sdebug_capacity *= scsi_debug_virtual_gb;
2742                 } else
2743                         sdebug_capacity = sdebug_store_sectors;
2744                 return count;
2745         }
2746         return -EINVAL;
2747 }
2748 DRIVER_ATTR(virtual_gb, S_IRUGO | S_IWUSR, sdebug_virtual_gb_show,
2749             sdebug_virtual_gb_store);
2750
2751 static ssize_t sdebug_add_host_show(struct device_driver * ddp, char * buf)
2752 {
2753         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_add_host);
2754 }
2755
2756 static ssize_t sdebug_add_host_store(struct device_driver * ddp,
2757                                      const char * buf, size_t count)
2758 {
2759         int delta_hosts;
2760         char work[20];
2761
2762         if (1 != sscanf(buf, "%10s", work))
2763                 return -EINVAL;
2764         {       /* temporary hack around sscanf() problem with -ve nums */
2765                 int neg = 0;
2766
2767                 if ('-' == *work)
2768                         neg = 1;
2769                 if (1 != sscanf(work + neg, "%d", &delta_hosts))
2770                         return -EINVAL;
2771                 if (neg)
2772                         delta_hosts = -delta_hosts;
2773         }
2774         if (delta_hosts > 0) {
2775                 do {
2776                         sdebug_add_adapter();
2777                 } while (--delta_hosts);
2778         } else if (delta_hosts < 0) {
2779                 do {
2780                         sdebug_remove_adapter();
2781                 } while (++delta_hosts);
2782         }
2783         return count;
2784 }
2785 DRIVER_ATTR(add_host, S_IRUGO | S_IWUSR, sdebug_add_host_show,
2786             sdebug_add_host_store);
2787
2788 static ssize_t sdebug_vpd_use_hostno_show(struct device_driver * ddp,
2789                                           char * buf)
2790 {
2791         return scnprintf(buf, PAGE_SIZE, "%d\n", scsi_debug_vpd_use_hostno);
2792 }
2793 static ssize_t sdebug_vpd_use_hostno_store(struct device_driver * ddp,
2794                                            const char * buf, size_t count)
2795 {
2796         int n;
2797
2798         if ((count > 0) && (1 == sscanf(buf, "%d", &n)) && (n >= 0)) {
2799                 scsi_debug_vpd_use_hostno = n;
2800                 return count;
2801         }
2802         return -EINVAL;
2803 }
2804 DRIVER_ATTR(vpd_use_hostno, S_IRUGO | S_IWUSR, sdebug_vpd_use_hostno_show,
2805             sdebug_vpd_use_hostno_store);
2806
2807 /* Note: The following function creates attribute files in the
2808    /sys/bus/pseudo/drivers/scsi_debug directory. The advantage of these
2809    files (over those found in the /sys/module/scsi_debug/parameters
2810    directory) is that auxiliary actions can be triggered when an attribute
2811    is changed. For example see: sdebug_add_host_store() above.
2812  */
2813 static int do_create_driverfs_files(void)
2814 {
2815         int ret;
2816
2817         ret = driver_create_file(&sdebug_driverfs_driver, &driver_attr_add_host);
2818         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_delay);
2819         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dev_size_mb);
2820         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_dsense);
2821         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_every_nth);
2822         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_fake_rw);
2823         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_max_luns);
2824         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_no_lun_0);
2825         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_num_parts);
2826         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_num_tgts);
2827         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_ptype);
2828         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_opts);
2829         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_scsi_level);
2830         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_virtual_gb);
2831         ret |= driver_create_file(&sdebug_driverfs_driver, &driver_attr_vpd_use_hostno);
2832         return ret;
2833 }
2834
2835 static void do_remove_driverfs_files(void)
2836 {
2837         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_vpd_use_hostno);
2838         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_virtual_gb);
2839         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_scsi_level);
2840         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_opts);
2841         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_ptype);
2842         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_num_tgts);
2843         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_num_parts);
2844         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_no_lun_0);
2845         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_max_luns);
2846         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_fake_rw);
2847         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_every_nth);
2848         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dsense);
2849         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_dev_size_mb);
2850         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_delay);
2851         driver_remove_file(&sdebug_driverfs_driver, &driver_attr_add_host);
2852 }
2853
2854 static int __init scsi_debug_init(void)
2855 {
2856         unsigned int sz;
2857         int host_to_add;
2858         int k;
2859         int ret;
2860
2861         if (scsi_debug_dev_size_mb < 1)
2862                 scsi_debug_dev_size_mb = 1;  /* force minimum 1 MB ramdisk */
2863         sdebug_store_size = (unsigned int)scsi_debug_dev_size_mb * 1048576;
2864         sdebug_store_sectors = sdebug_store_size / SECT_SIZE;
2865         if (scsi_debug_virtual_gb > 0) {
2866                 sdebug_capacity = 2048 * 1024;
2867                 sdebug_capacity *= scsi_debug_virtual_gb;
2868         } else
2869                 sdebug_capacity = sdebug_store_sectors;
2870
2871         /* play around with geometry, don't waste too much on track 0 */
2872         sdebug_heads = 8;
2873         sdebug_sectors_per = 32;
2874         if (scsi_debug_dev_size_mb >= 16)
2875                 sdebug_heads = 32;
2876         else if (scsi_debug_dev_size_mb >= 256)
2877                 sdebug_heads = 64;
2878         sdebug_cylinders_per = (unsigned long)sdebug_capacity /
2879                                (sdebug_sectors_per * sdebug_heads);
2880         if (sdebug_cylinders_per >= 1024) {
2881                 /* other LLDs do this; implies >= 1GB ram disk ... */
2882                 sdebug_heads = 255;
2883                 sdebug_sectors_per = 63;
2884                 sdebug_cylinders_per = (unsigned long)sdebug_capacity /
2885                                (sdebug_sectors_per * sdebug_heads);
2886         }
2887
2888         sz = sdebug_store_size;
2889         fake_storep = vmalloc(sz);
2890         if (NULL == fake_storep) {
2891                 printk(KERN_ERR "scsi_debug_init: out of memory, 1\n");
2892                 return -ENOMEM;
2893         }
2894         memset(fake_storep, 0, sz);
2895         if (scsi_debug_num_parts > 0)
2896                 sdebug_build_parts(fake_storep);
2897
2898         ret = device_register(&pseudo_primary);
2899         if (ret < 0) {
2900                 printk(KERN_WARNING "scsi_debug: device_register error: %d\n",
2901                         ret);
2902                 goto free_vm;
2903         }
2904         ret = bus_register(&pseudo_lld_bus);
2905         if (ret < 0) {
2906                 printk(KERN_WARNING "scsi_debug: bus_register error: %d\n",
2907                         ret);
2908                 goto dev_unreg;
2909         }
2910         ret = driver_register(&sdebug_driverfs_driver);
2911         if (ret < 0) {
2912                 printk(KERN_WARNING "scsi_debug: driver_register error: %d\n",
2913                         ret);
2914                 goto bus_unreg;
2915         }
2916         ret = do_create_driverfs_files();
2917         if (ret < 0) {
2918                 printk(KERN_WARNING "scsi_debug: driver_create_file error: %d\n",
2919                         ret);
2920                 goto del_files;
2921         }
2922
2923         init_all_queued();
2924
2925         sdebug_driver_template.proc_name = sdebug_proc_name;
2926
2927         host_to_add = scsi_debug_add_host;
2928         scsi_debug_add_host = 0;
2929
2930         for (k = 0; k < host_to_add; k++) {
2931                 if (sdebug_add_adapter()) {
2932                         printk(KERN_ERR "scsi_debug_init: "
2933                                "sdebug_add_adapter failed k=%d\n", k);
2934                         break;
2935                 }
2936         }
2937
2938         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts) {
2939                 printk(KERN_INFO "scsi_debug_init: built %d host(s)\n",
2940                        scsi_debug_add_host);
2941         }
2942         return 0;
2943
2944 del_files:
2945         do_remove_driverfs_files();
2946         driver_unregister(&sdebug_driverfs_driver);
2947 bus_unreg:
2948         bus_unregister(&pseudo_lld_bus);
2949 dev_unreg:
2950         device_unregister(&pseudo_primary);
2951 free_vm:
2952         vfree(fake_storep);
2953
2954         return ret;
2955 }
2956
2957 static void __exit scsi_debug_exit(void)
2958 {
2959         int k = scsi_debug_add_host;
2960
2961         stop_all_queued();
2962         for (; k; k--)
2963                 sdebug_remove_adapter();
2964         do_remove_driverfs_files();
2965         driver_unregister(&sdebug_driverfs_driver);
2966         bus_unregister(&pseudo_lld_bus);
2967         device_unregister(&pseudo_primary);
2968
2969         vfree(fake_storep);
2970 }
2971
2972 device_initcall(scsi_debug_init);
2973 module_exit(scsi_debug_exit);
2974
2975 static void pseudo_0_release(struct device * dev)
2976 {
2977         if (SCSI_DEBUG_OPT_NOISE & scsi_debug_opts)
2978                 printk(KERN_INFO "scsi_debug: pseudo_0_release() called\n");
2979 }
2980
2981 static struct device pseudo_primary = {
2982         .bus_id         = "pseudo_0",
2983         .release        = pseudo_0_release,
2984 };
2985
2986 static int pseudo_lld_bus_match(struct device *dev,
2987                           struct device_driver *dev_driver)
2988 {
2989         return 1;
2990 }
2991
2992 static struct bus_type pseudo_lld_bus = {
2993         .name = "pseudo",
2994         .match = pseudo_lld_bus_match,
2995         .probe = sdebug_driver_probe,
2996         .remove = sdebug_driver_remove,
2997 };
2998
2999 static void sdebug_release_adapter(struct device * dev)
3000 {
3001         struct sdebug_host_info *sdbg_host;
3002
3003         sdbg_host = to_sdebug_host(dev);
3004         kfree(sdbg_host);
3005 }
3006
3007 static int sdebug_add_adapter(void)
3008 {
3009         int k, devs_per_host;
3010         int error = 0;
3011         struct sdebug_host_info *sdbg_host;
3012         struct sdebug_dev_info *sdbg_devinfo;
3013         struct list_head *lh, *lh_sf;
3014
3015         sdbg_host = kzalloc(sizeof(*sdbg_host),GFP_KERNEL);
3016         if (NULL == sdbg_host) {
3017                 printk(KERN_ERR "%s: out of memory at line %d\n",
3018                        __FUNCTION__, __LINE__);
3019                 return -ENOMEM;
3020         }
3021
3022         INIT_LIST_HEAD(&sdbg_host->dev_info_list);
3023
3024         devs_per_host = scsi_debug_num_tgts * scsi_debug_max_luns;
3025         for (k = 0; k < devs_per_host; k++) {
3026                 sdbg_devinfo = kzalloc(sizeof(*sdbg_devinfo),GFP_KERNEL);
3027                 if (NULL == sdbg_devinfo) {
3028                         printk(KERN_ERR "%s: out of memory at line %d\n",
3029                                __FUNCTION__, __LINE__);
3030                         error = -ENOMEM;
3031                         goto clean;
3032                 }
3033                 sdbg_devinfo->sdbg_host = sdbg_host;
3034                 list_add_tail(&sdbg_devinfo->dev_list,
3035                               &sdbg_host->dev_info_list);
3036         }
3037
3038         spin_lock(&sdebug_host_list_lock);
3039         list_add_tail(&sdbg_host->host_list, &sdebug_host_list);
3040         spin_unlock(&sdebug_host_list_lock);
3041
3042         sdbg_host->dev.bus = &pseudo_lld_bus;
3043         sdbg_host->dev.parent = &pseudo_primary;
3044         sdbg_host->dev.release = &sdebug_release_adapter;
3045         sprintf(sdbg_host->dev.bus_id, "adapter%d", scsi_debug_add_host);
3046
3047         error = device_register(&sdbg_host->dev);
3048
3049         if (error)
3050                 goto clean;
3051
3052         ++scsi_debug_add_host;
3053         return error;
3054
3055 clean:
3056         list_for_each_safe(lh, lh_sf, &sdbg_host->dev_info_list) {
3057                 sdbg_devinfo = list_entry(lh, struct sdebug_dev_info,
3058                                           dev_list);
3059                 list_del(&sdbg_devinfo->dev_list);
3060                 kfree(sdbg_devinfo);
3061         }
3062
3063         kfree(sdbg_host);
3064         return error;
3065 }
3066
3067 static void sdebug_remove_adapter(void)
3068 {
3069         struct sdebug_host_info * sdbg_host = NULL;
3070
3071         spin_lock(&sdebug_host_list_lock);
3072         if (!list_empty(&sdebug_host_list)) {
3073                 sdbg_host = list_entry(sdebug_host_list.prev,
3074                                        struct sdebug_host_info, host_list);
3075                 list_del(&sdbg_host->host_list);
3076         }
3077         spin_unlock(&sdebug_host_list_lock);
3078
3079         if (!sdbg_host)
3080                 return;
3081
3082         device_unregister(&sdbg_host->dev);
3083         --scsi_debug_add_host;
3084 }
3085
3086 static int sdebug_driver_probe(struct device * dev)
3087 {
3088         int error = 0;
3089         struct sdebug_host_info *sdbg_host;
3090         struct Scsi_Host *hpnt;
3091
3092         sdbg_host = to_sdebug_host(dev);
3093
3094         hpnt = scsi_host_alloc(&sdebug_driver_template, sizeof(sdbg_host));
3095         if (NULL == hpnt) {
3096                 printk(KERN_ERR "%s: scsi_register failed\n", __FUNCTION__);
3097                 error = -ENODEV;
3098                 return error;
3099         }
3100
3101         sdbg_host->shost = hpnt;
3102         *((struct sdebug_host_info **)hpnt->hostdata) = sdbg_host;
3103         if ((hpnt->this_id >= 0) && (scsi_debug_num_tgts > hpnt->this_id))
3104                 hpnt->max_id = scsi_debug_num_tgts + 1;
3105         else
3106                 hpnt->max_id = scsi_debug_num_tgts;
3107         hpnt->max_lun = SAM2_WLUN_REPORT_LUNS;  /* = scsi_debug_max_luns; */
3108
3109         error = scsi_add_host(hpnt, &sdbg_host->dev);
3110         if (error) {
3111                 printk(KERN_ERR "%s: scsi_add_host failed\n", __FUNCTION__);
3112                 error = -ENODEV;
3113                 scsi_host_put(hpnt);
3114         } else
3115                 scsi_scan_host(hpnt);
3116
3117
3118         return error;
3119 }
3120
3121 static int sdebug_driver_remove(struct device * dev)
3122 {
3123         struct list_head *lh, *lh_sf;
3124         struct sdebug_host_info *sdbg_host;
3125         struct sdebug_dev_info *sdbg_devinfo;
3126
3127         sdbg_host = to_sdebug_host(dev);
3128
3129         if (!sdbg_host) {
3130                 printk(KERN_ERR "%s: Unable to locate host info\n",
3131                        __FUNCTION__);
3132                 return -ENODEV;
3133         }
3134
3135         scsi_remove_host(sdbg_host->shost);
3136
3137         list_for_each_safe(lh, lh_sf, &sdbg_host->dev_info_list) {
3138                 sdbg_devinfo = list_entry(lh, struct sdebug_dev_info,
3139                                           dev_list);
3140                 list_del(&sdbg_devinfo->dev_list);
3141                 kfree(sdbg_devinfo);
3142         }
3143
3144         scsi_host_put(sdbg_host->shost);
3145         return 0;
3146 }
3147
3148 static void sdebug_max_tgts_luns(void)
3149 {
3150         struct sdebug_host_info * sdbg_host;
3151         struct Scsi_Host *hpnt;
3152
3153         spin_lock(&sdebug_host_list_lock);
3154         list_for_each_entry(sdbg_host, &sdebug_host_list, host_list) {
3155                 hpnt = sdbg_host->shost;
3156                 if ((hpnt->this_id >= 0) &&
3157                     (scsi_debug_num_tgts > hpnt->this_id))
3158                         hpnt->max_id = scsi_debug_num_tgts + 1;
3159                 else
3160                         hpnt->max_id = scsi_debug_num_tgts;
3161                 hpnt->max_lun = SAM2_WLUN_REPORT_LUNS; /* scsi_debug_max_luns; */
3162         }
3163         spin_unlock(&sdebug_host_list_lock);
3164 }