[qemu.git] / hw / scsi-bus.c

#include "hw.h"
#include "qemu-error.h"
#include "scsi.h"
#include "scsi-defs.h"
#include "qdev.h"
#include "blockdev.h"

static struct BusInfo scsi_bus_info = {
    .name  = "SCSI",
    .size  = sizeof(SCSIBus),
    .props = (Property[]) {
        DEFINE_PROP_UINT32("scsi-id", SCSIDevice, id, -1),
        DEFINE_PROP_END_OF_LIST(),
    },
};
static int next_scsi_bus;

/* Create a scsi bus, and attach devices to it.  */
void scsi_bus_new(SCSIBus *bus, DeviceState *host, int tcq, int ndev,
                  scsi_completionfn complete)
{
    qbus_create_inplace(&bus->qbus, &scsi_bus_info, host, NULL);
    bus->busnr = next_scsi_bus++;
    bus->tcq = tcq;
    bus->ndev = ndev;
    bus->complete = complete;
    bus->qbus.allow_hotplug = 1;
}

static int scsi_qdev_init(DeviceState *qdev, DeviceInfo *base)
{
    SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
    SCSIDeviceInfo *info = DO_UPCAST(SCSIDeviceInfo, qdev, base);
    SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
    int rc = -1;

    if (dev->id == -1) {
        for (dev->id = 0; dev->id < bus->ndev; dev->id++) {
            if (bus->devs[dev->id] == NULL)
                break;
        }
    }
    if (dev->id >= bus->ndev) {
        error_report("bad scsi device id: %d", dev->id);
        goto err;
    }

    if (bus->devs[dev->id]) {
        qdev_free(&bus->devs[dev->id]->qdev);
    }
    bus->devs[dev->id] = dev;

    dev->info = info;
    QTAILQ_INIT(&dev->requests);
    rc = dev->info->init(dev);
    if (rc != 0) {
        bus->devs[dev->id] = NULL;
    }

err:
    return rc;
}

static int scsi_qdev_exit(DeviceState *qdev)
{
    SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
    SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);

    assert(bus->devs[dev->id] != NULL);
    if (bus->devs[dev->id]->info->destroy) {
        bus->devs[dev->id]->info->destroy(bus->devs[dev->id]);
    }
    bus->devs[dev->id] = NULL;
    return 0;
}

void scsi_qdev_register(SCSIDeviceInfo *info)
{
    info->qdev.bus_info = &scsi_bus_info;
    info->qdev.init     = scsi_qdev_init;
    info->qdev.unplug   = qdev_simple_unplug_cb;
    info->qdev.exit     = scsi_qdev_exit;
    qdev_register(&info->qdev);
}

/* handle legacy '-drive if=scsi,...' cmd line args */
SCSIDevice *scsi_bus_legacy_add_drive(SCSIBus *bus, BlockDriverState *bdrv, int unit)
{
    const char *driver;
    DeviceState *dev;

    driver = bdrv_is_sg(bdrv) ? "scsi-generic" : "scsi-disk";
    dev = qdev_create(&bus->qbus, driver);
    qdev_prop_set_uint32(dev, "scsi-id", unit);
    if (qdev_prop_set_drive(dev, "drive", bdrv) < 0) {
        qdev_free(dev);
        return NULL;
    }
    if (qdev_init(dev) < 0)
        return NULL;
    return DO_UPCAST(SCSIDevice, qdev, dev);
}

int scsi_bus_legacy_handle_cmdline(SCSIBus *bus)
{
    Location loc;
    DriveInfo *dinfo;
    int res = 0, unit;

    loc_push_none(&loc);
    for (unit = 0; unit < MAX_SCSI_DEVS; unit++) {
        dinfo = drive_get(IF_SCSI, bus->busnr, unit);
        if (dinfo == NULL) {
            continue;
        }
        qemu_opts_loc_restore(dinfo->opts);
        if (!scsi_bus_legacy_add_drive(bus, dinfo->bdrv, unit)) {
            res = -1;
            break;
        }
    }
    loc_pop(&loc);
    return res;
}

void scsi_dev_clear_sense(SCSIDevice *dev)
{
    memset(&dev->sense, 0, sizeof(dev->sense));
}

void scsi_dev_set_sense(SCSIDevice *dev, uint8_t key)
{
    dev->sense.key = key;
}

SCSIRequest *scsi_req_alloc(size_t size, SCSIDevice *d, uint32_t tag, uint32_t lun)
{
    SCSIRequest *req;

    req = qemu_mallocz(size);
    req->bus = scsi_bus_from_device(d);
    req->dev = d;
    req->tag = tag;
    req->lun = lun;
    req->status = -1;
    req->enqueued = true;
    QTAILQ_INSERT_TAIL(&d->requests, req, next);
    return req;
}

SCSIRequest *scsi_req_find(SCSIDevice *d, uint32_t tag)
{
    SCSIRequest *req;

    QTAILQ_FOREACH(req, &d->requests, next) {
        if (req->tag == tag) {
            return req;
        }
    }
    return NULL;
}

static void scsi_req_dequeue(SCSIRequest *req)
{
    if (req->enqueued) {
        QTAILQ_REMOVE(&req->dev->requests, req, next);
        req->enqueued = false;
    }
}

void scsi_req_free(SCSIRequest *req)
{
    scsi_req_dequeue(req);
    qemu_free(req);
}

static int scsi_req_length(SCSIRequest *req, uint8_t *cmd)
{
    switch (cmd[0] >> 5) {
    case 0:
        req->cmd.xfer = cmd[4];
        req->cmd.len = 6;
        /* length 0 means 256 blocks */
        if (req->cmd.xfer == 0)
            req->cmd.xfer = 256;
        break;
    case 1:
    case 2:
        req->cmd.xfer = cmd[8] | (cmd[7] << 8);
        req->cmd.len = 10;
        break;
    case 4:
        req->cmd.xfer = cmd[13] | (cmd[12] << 8) | (cmd[11] << 16) | (cmd[10] << 24);
        req->cmd.len = 16;
        break;
    case 5:
        req->cmd.xfer = cmd[9] | (cmd[8] << 8) | (cmd[7] << 16) | (cmd[6] << 24);
        req->cmd.len = 12;
        break;
    default:
        return -1;
    }

    switch(cmd[0]) {
    case TEST_UNIT_READY:
    case REZERO_UNIT:
    case START_STOP:
    case SEEK_6:
    case WRITE_FILEMARKS:
    case SPACE:
    case RESERVE:
    case RELEASE:
    case ERASE:
    case ALLOW_MEDIUM_REMOVAL:
    case VERIFY:
    case SEEK_10:
    case SYNCHRONIZE_CACHE:
    case LOCK_UNLOCK_CACHE:
    case LOAD_UNLOAD:
    case SET_CD_SPEED:
    case SET_LIMITS:
    case WRITE_LONG:
    case MOVE_MEDIUM:
    case UPDATE_BLOCK:
        req->cmd.xfer = 0;
        break;
    case MODE_SENSE:
        break;
    case WRITE_SAME:
        req->cmd.xfer = 1;
        break;
    case READ_CAPACITY:
        req->cmd.xfer = 8;
        break;
    case READ_BLOCK_LIMITS:
        req->cmd.xfer = 6;
        break;
    case READ_POSITION:
        req->cmd.xfer = 20;
        break;
    case SEND_VOLUME_TAG:
        req->cmd.xfer *= 40;
        break;
    case MEDIUM_SCAN:
        req->cmd.xfer *= 8;
        break;
    case WRITE_10:
    case WRITE_VERIFY:
    case WRITE_6:
    case WRITE_12:
    case WRITE_VERIFY_12:
    case WRITE_16:
    case WRITE_VERIFY_16:
        req->cmd.xfer *= req->dev->blocksize;
        break;
    case READ_10:
    case READ_6:
    case READ_REVERSE:
    case RECOVER_BUFFERED_DATA:
    case READ_12:
    case READ_16:
        req->cmd.xfer *= req->dev->blocksize;
        break;
    case INQUIRY:
        req->cmd.xfer = cmd[4] | (cmd[3] << 8);
        break;
    case MAINTENANCE_OUT:
    case MAINTENANCE_IN:
        if (req->dev->type == TYPE_ROM) {
            /* GPCMD_REPORT_KEY and GPCMD_SEND_KEY from multi media commands */
            req->cmd.xfer = cmd[9] | (cmd[8] << 8);
        }
        break;
    }
    return 0;
}

static int scsi_req_stream_length(SCSIRequest *req, uint8_t *cmd)
{
    switch(cmd[0]) {
    /* stream commands */
    case READ_6:
    case READ_REVERSE:
    case RECOVER_BUFFERED_DATA:
    case WRITE_6:
        req->cmd.len = 6;
        req->cmd.xfer = cmd[4] | (cmd[3] << 8) | (cmd[2] << 16);
        if (cmd[1] & 0x01) /* fixed */
            req->cmd.xfer *= req->dev->blocksize;
        break;
    case REWIND:
    case START_STOP:
        req->cmd.len = 6;
        req->cmd.xfer = 0;
        break;
    /* generic commands */
    default:
        return scsi_req_length(req, cmd);
    }
    return 0;
}

static void scsi_req_xfer_mode(SCSIRequest *req)
{
    switch (req->cmd.buf[0]) {
    case WRITE_6:
    case WRITE_10:
    case WRITE_VERIFY:
    case WRITE_12:
    case WRITE_VERIFY_12:
    case WRITE_16:
    case WRITE_VERIFY_16:
    case COPY:
    case COPY_VERIFY:
    case COMPARE:
    case CHANGE_DEFINITION:
    case LOG_SELECT:
    case MODE_SELECT:
    case MODE_SELECT_10:
    case SEND_DIAGNOSTIC:
    case WRITE_BUFFER:
    case FORMAT_UNIT:
    case REASSIGN_BLOCKS:
    case SEARCH_EQUAL:
    case SEARCH_HIGH:
    case SEARCH_LOW:
    case UPDATE_BLOCK:
    case WRITE_LONG:
    case WRITE_SAME:
    case SEARCH_HIGH_12:
    case SEARCH_EQUAL_12:
    case SEARCH_LOW_12:
    case SET_WINDOW:
    case MEDIUM_SCAN:
    case SEND_VOLUME_TAG:
    case WRITE_LONG_2:
    case PERSISTENT_RESERVE_OUT:
    case MAINTENANCE_OUT:
        req->cmd.mode = SCSI_XFER_TO_DEV;
        break;
    default:
        if (req->cmd.xfer)
            req->cmd.mode = SCSI_XFER_FROM_DEV;
        else {
            req->cmd.mode = SCSI_XFER_NONE;
        }
        break;
    }
}

static uint64_t scsi_req_lba(SCSIRequest *req)
{
    uint8_t *buf = req->cmd.buf;
    uint64_t lba;

    switch (buf[0] >> 5) {
    case 0:
        lba = (uint64_t) buf[3] | ((uint64_t) buf[2] << 8) |
              (((uint64_t) buf[1] & 0x1f) << 16);
        break;
    case 1:
    case 2:
        lba = (uint64_t) buf[5] | ((uint64_t) buf[4] << 8) |
              ((uint64_t) buf[3] << 16) | ((uint64_t) buf[2] << 24);
        break;
    case 4:
        lba = (uint64_t) buf[9] | ((uint64_t) buf[8] << 8) |
              ((uint64_t) buf[7] << 16) | ((uint64_t) buf[6] << 24) |
              ((uint64_t) buf[5] << 32) | ((uint64_t) buf[4] << 40) |
              ((uint64_t) buf[3] << 48) | ((uint64_t) buf[2] << 56);
        break;
    case 5:
        lba = (uint64_t) buf[5] | ((uint64_t) buf[4] << 8) |
              ((uint64_t) buf[3] << 16) | ((uint64_t) buf[2] << 24);
        break;
    default:
        lba = -1;

    }
    return lba;
}

int scsi_req_parse(SCSIRequest *req, uint8_t *buf)
{
    int rc;

    if (req->dev->type == TYPE_TAPE) {
        rc = scsi_req_stream_length(req, buf);
    } else {
        rc = scsi_req_length(req, buf);
    }
    if (rc != 0)
        return rc;

    memcpy(req->cmd.buf, buf, req->cmd.len);
    scsi_req_xfer_mode(req);
    req->cmd.lba = scsi_req_lba(req);
    return 0;
}

static const char *scsi_command_name(uint8_t cmd)
{
    static const char *names[] = {
        [ TEST_UNIT_READY          ] = "TEST_UNIT_READY",
        [ REZERO_UNIT              ] = "REZERO_UNIT",
        /* REWIND and REZERO_UNIT use the same operation code */
        [ REQUEST_SENSE            ] = "REQUEST_SENSE",
        [ FORMAT_UNIT              ] = "FORMAT_UNIT",
        [ READ_BLOCK_LIMITS        ] = "READ_BLOCK_LIMITS",
        [ REASSIGN_BLOCKS          ] = "REASSIGN_BLOCKS",
        [ READ_6                   ] = "READ_6",
        [ WRITE_6                  ] = "WRITE_6",
        [ SEEK_6                   ] = "SEEK_6",
        [ READ_REVERSE             ] = "READ_REVERSE",
        [ WRITE_FILEMARKS          ] = "WRITE_FILEMARKS",
        [ SPACE                    ] = "SPACE",
        [ INQUIRY                  ] = "INQUIRY",
        [ RECOVER_BUFFERED_DATA    ] = "RECOVER_BUFFERED_DATA",
        [ MAINTENANCE_IN           ] = "MAINTENANCE_IN",
        [ MAINTENANCE_OUT          ] = "MAINTENANCE_OUT",
        [ MODE_SELECT              ] = "MODE_SELECT",
        [ RESERVE                  ] = "RESERVE",
        [ RELEASE                  ] = "RELEASE",
        [ COPY                     ] = "COPY",
        [ ERASE                    ] = "ERASE",
        [ MODE_SENSE               ] = "MODE_SENSE",
        [ START_STOP               ] = "START_STOP",
        [ RECEIVE_DIAGNOSTIC       ] = "RECEIVE_DIAGNOSTIC",
        [ SEND_DIAGNOSTIC          ] = "SEND_DIAGNOSTIC",
        [ ALLOW_MEDIUM_REMOVAL     ] = "ALLOW_MEDIUM_REMOVAL",

        [ SET_WINDOW               ] = "SET_WINDOW",
        [ READ_CAPACITY            ] = "READ_CAPACITY",
        [ READ_10                  ] = "READ_10",
        [ WRITE_10                 ] = "WRITE_10",
        [ SEEK_10                  ] = "SEEK_10",
        [ WRITE_VERIFY             ] = "WRITE_VERIFY",
        [ VERIFY                   ] = "VERIFY",
        [ SEARCH_HIGH              ] = "SEARCH_HIGH",
        [ SEARCH_EQUAL             ] = "SEARCH_EQUAL",
        [ SEARCH_LOW               ] = "SEARCH_LOW",
        [ SET_LIMITS               ] = "SET_LIMITS",
        [ PRE_FETCH                ] = "PRE_FETCH",
        /* READ_POSITION and PRE_FETCH use the same operation code */
        [ SYNCHRONIZE_CACHE        ] = "SYNCHRONIZE_CACHE",
        [ LOCK_UNLOCK_CACHE        ] = "LOCK_UNLOCK_CACHE",
        [ READ_DEFECT_DATA         ] = "READ_DEFECT_DATA",
        [ MEDIUM_SCAN              ] = "MEDIUM_SCAN",
        [ COMPARE                  ] = "COMPARE",
        [ COPY_VERIFY              ] = "COPY_VERIFY",
        [ WRITE_BUFFER             ] = "WRITE_BUFFER",
        [ READ_BUFFER              ] = "READ_BUFFER",
        [ UPDATE_BLOCK             ] = "UPDATE_BLOCK",
        [ READ_LONG                ] = "READ_LONG",
        [ WRITE_LONG               ] = "WRITE_LONG",
        [ CHANGE_DEFINITION        ] = "CHANGE_DEFINITION",
        [ WRITE_SAME               ] = "WRITE_SAME",
        [ READ_TOC                 ] = "READ_TOC",
        [ LOG_SELECT               ] = "LOG_SELECT",
        [ LOG_SENSE                ] = "LOG_SENSE",
        [ MODE_SELECT_10           ] = "MODE_SELECT_10",
        [ RESERVE_10               ] = "RESERVE_10",
        [ RELEASE_10               ] = "RELEASE_10",
        [ MODE_SENSE_10            ] = "MODE_SENSE_10",
        [ PERSISTENT_RESERVE_IN    ] = "PERSISTENT_RESERVE_IN",
        [ PERSISTENT_RESERVE_OUT   ] = "PERSISTENT_RESERVE_OUT",
        [ MOVE_MEDIUM              ] = "MOVE_MEDIUM",
        [ READ_12                  ] = "READ_12",
        [ WRITE_12                 ] = "WRITE_12",
        [ WRITE_VERIFY_12          ] = "WRITE_VERIFY_12",
        [ SEARCH_HIGH_12           ] = "SEARCH_HIGH_12",
        [ SEARCH_EQUAL_12          ] = "SEARCH_EQUAL_12",
        [ SEARCH_LOW_12            ] = "SEARCH_LOW_12",
        [ READ_ELEMENT_STATUS      ] = "READ_ELEMENT_STATUS",
        [ SEND_VOLUME_TAG          ] = "SEND_VOLUME_TAG",
        [ WRITE_LONG_2             ] = "WRITE_LONG_2",

        [ REPORT_DENSITY_SUPPORT   ] = "REPORT_DENSITY_SUPPORT",
        [ GET_CONFIGURATION        ] = "GET_CONFIGURATION",
        [ READ_16                  ] = "READ_16",
        [ WRITE_16                 ] = "WRITE_16",
        [ WRITE_VERIFY_16          ] = "WRITE_VERIFY_16",
        [ SERVICE_ACTION_IN        ] = "SERVICE_ACTION_IN",
        [ REPORT_LUNS              ] = "REPORT_LUNS",
        [ LOAD_UNLOAD              ] = "LOAD_UNLOAD",
        [ SET_CD_SPEED             ] = "SET_CD_SPEED",
        [ BLANK                    ] = "BLANK",
    };

    if (cmd >= ARRAY_SIZE(names) || names[cmd] == NULL)
        return "*UNKNOWN*";
    return names[cmd];
}

void scsi_req_print(SCSIRequest *req)
{
    FILE *fp = stderr;
    int i;

    fprintf(fp, "[%s id=%d] %s",
            req->dev->qdev.parent_bus->name,
            req->dev->id,
            scsi_command_name(req->cmd.buf[0]));
    for (i = 1; i < req->cmd.len; i++) {
        fprintf(fp, " 0x%02x", req->cmd.buf[i]);
    }
    switch (req->cmd.mode) {
    case SCSI_XFER_NONE:
        fprintf(fp, " - none\n");
        break;
    case SCSI_XFER_FROM_DEV:
        fprintf(fp, " - from-dev len=%zd\n", req->cmd.xfer);
        break;
    case SCSI_XFER_TO_DEV:
        fprintf(fp, " - to-dev len=%zd\n", req->cmd.xfer);
        break;
    default:
        fprintf(fp, " - Oops\n");
        break;
    }
}

void scsi_req_complete(SCSIRequest *req)
{
    assert(req->status != -1);
    scsi_req_dequeue(req);
    req->bus->complete(req->bus, SCSI_REASON_DONE,
                       req->tag,
                       req->status);
}
Commit	Line	Data
d52affa7	1	#include "hw.h"
2f792016	2	#include "qemu-error.h"
43b443b6	3	#include "scsi.h"
2ec749cb	4	#include "scsi-defs.h"
d52affa7	5	#include "qdev.h"
2446333c	6	#include "blockdev.h"
d52affa7 GH	7
	8	static struct BusInfo scsi_bus_info = {
	9	.name = "SCSI",
	10	.size = sizeof(SCSIBus),
	11	.props = (Property[]) {
	12	DEFINE_PROP_UINT32("scsi-id", SCSIDevice, id, -1),
	13	DEFINE_PROP_END_OF_LIST(),
	14	},
	15	};
	16	static int next_scsi_bus;
	17
	18	/* Create a scsi bus, and attach devices to it. */
ca9c39fa GH	19	void scsi_bus_new(SCSIBus bus, DeviceState host, int tcq, int ndev,
ca9c39fa GH	20	scsi_completionfn complete)
d52affa7	21	{
ca9c39fa	22	qbus_create_inplace(&bus->qbus, &scsi_bus_info, host, NULL);
d52affa7 GH	23	bus->busnr = next_scsi_bus++;
	24	bus->tcq = tcq;
	25	bus->ndev = ndev;
	26	bus->complete = complete;
cb23117b	27	bus->qbus.allow_hotplug = 1;
d52affa7 GH	28	}
	29
	30	static int scsi_qdev_init(DeviceState qdev, DeviceInfo base)
	31	{
	32	SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
	33	SCSIDeviceInfo *info = DO_UPCAST(SCSIDeviceInfo, qdev, base);
	34	SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
01985dcf	35	int rc = -1;
d52affa7 GH	36
	37	if (dev->id == -1) {
	38	for (dev->id = 0; dev->id < bus->ndev; dev->id++) {
	39	if (bus->devs[dev->id] == NULL)
	40	break;
	41	}
	42	}
	43	if (dev->id >= bus->ndev) {
1ecda02b	44	error_report("bad scsi device id: %d", dev->id);
d52affa7 GH	45	goto err;
	46	}
	47
	48	if (bus->devs[dev->id]) {
01985dcf	49	qdev_free(&bus->devs[dev->id]->qdev);
d52affa7 GH	50	}
	51	bus->devs[dev->id] = dev;
	52
	53	dev->info = info;
9af99d98	54	QTAILQ_INIT(&dev->requests);
01985dcf GH	55	rc = dev->info->init(dev);
	56	if (rc != 0) {
	57	bus->devs[dev->id] = NULL;
	58	}
d52affa7 GH	59
d52affa7 GH	60	err:
01985dcf GH	61	return rc;
	62	}
	63
	64	static int scsi_qdev_exit(DeviceState *qdev)
	65	{
	66	SCSIDevice *dev = DO_UPCAST(SCSIDevice, qdev, qdev);
	67	SCSIBus *bus = DO_UPCAST(SCSIBus, qbus, dev->qdev.parent_bus);
	68
	69	assert(bus->devs[dev->id] != NULL);
	70	if (bus->devs[dev->id]->info->destroy) {
	71	bus->devs[dev->id]->info->destroy(bus->devs[dev->id]);
	72	}
	73	bus->devs[dev->id] = NULL;
	74	return 0;
d52affa7 GH	75	}
	76
	77	void scsi_qdev_register(SCSIDeviceInfo *info)
	78	{
	79	info->qdev.bus_info = &scsi_bus_info;
	80	info->qdev.init = scsi_qdev_init;
cb23117b	81	info->qdev.unplug = qdev_simple_unplug_cb;
01985dcf	82	info->qdev.exit = scsi_qdev_exit;
d52affa7 GH	83	qdev_register(&info->qdev);
	84	}
	85
	86	/* handle legacy '-drive if=scsi,...' cmd line args */
f8b6cc00	87	SCSIDevice scsi_bus_legacy_add_drive(SCSIBus bus, BlockDriverState *bdrv, int unit)
d52affa7 GH	88	{
	89	const char *driver;
	90	DeviceState *dev;
	91
f8b6cc00	92	driver = bdrv_is_sg(bdrv) ? "scsi-generic" : "scsi-disk";
d52affa7 GH	93	dev = qdev_create(&bus->qbus, driver);
d52affa7 GH	94	qdev_prop_set_uint32(dev, "scsi-id", unit);
18846dee MA	95	if (qdev_prop_set_drive(dev, "drive", bdrv) < 0) {
	96	qdev_free(dev);
	97	return NULL;
	98	}
33e66b86 MA	99	if (qdev_init(dev) < 0)
33e66b86 MA	100	return NULL;
d52affa7 GH	101	return DO_UPCAST(SCSIDevice, qdev, dev);
	102	}
	103
fa66b909	104	int scsi_bus_legacy_handle_cmdline(SCSIBus *bus)
d52affa7	105	{
42e766a2	106	Location loc;
d52affa7	107	DriveInfo *dinfo;
fa66b909	108	int res = 0, unit;
d52affa7	109
42e766a2	110	loc_push_none(&loc);
d52affa7 GH	111	for (unit = 0; unit < MAX_SCSI_DEVS; unit++) {
	112	dinfo = drive_get(IF_SCSI, bus->busnr, unit);
	113	if (dinfo == NULL) {
	114	continue;
	115	}
42e766a2	116	qemu_opts_loc_restore(dinfo->opts);
f8b6cc00	117	if (!scsi_bus_legacy_add_drive(bus, dinfo->bdrv, unit)) {
fa66b909 MA	118	res = -1;
	119	break;
	120	}
d52affa7	121	}
42e766a2	122	loc_pop(&loc);
fa66b909	123	return res;
d52affa7	124	}
89b08ae1	125
37659e51 GH	126	void scsi_dev_clear_sense(SCSIDevice *dev)
	127	{
	128	memset(&dev->sense, 0, sizeof(dev->sense));
	129	}
	130
	131	void scsi_dev_set_sense(SCSIDevice *dev, uint8_t key)
	132	{
	133	dev->sense.key = key;
	134	}
	135
89b08ae1 GH	136	SCSIRequest scsi_req_alloc(size_t size, SCSIDevice d, uint32_t tag, uint32_t lun)
	137	{
	138	SCSIRequest *req;
	139
	140	req = qemu_mallocz(size);
	141	req->bus = scsi_bus_from_device(d);
	142	req->dev = d;
	143	req->tag = tag;
	144	req->lun = lun;
ed3a34a3	145	req->status = -1;
e8637c90	146	req->enqueued = true;
89b08ae1 GH	147	QTAILQ_INSERT_TAIL(&d->requests, req, next);
	148	return req;
	149	}
	150
	151	SCSIRequest scsi_req_find(SCSIDevice d, uint32_t tag)
	152	{
	153	SCSIRequest *req;
	154
	155	QTAILQ_FOREACH(req, &d->requests, next) {
	156	if (req->tag == tag) {
	157	return req;
	158	}
	159	}
	160	return NULL;
	161	}
	162
e8637c90 JK	163	static void scsi_req_dequeue(SCSIRequest *req)
	164	{
	165	if (req->enqueued) {
	166	QTAILQ_REMOVE(&req->dev->requests, req, next);
	167	req->enqueued = false;
	168	}
	169	}
	170
89b08ae1 GH	171	void scsi_req_free(SCSIRequest *req)
89b08ae1 GH	172	{
e8637c90	173	scsi_req_dequeue(req);
89b08ae1 GH	174	qemu_free(req);
89b08ae1 GH	175	}
2ec749cb GH	176
	177	static int scsi_req_length(SCSIRequest req, uint8_t cmd)
	178	{
	179	switch (cmd[0] >> 5) {
	180	case 0:
	181	req->cmd.xfer = cmd[4];
	182	req->cmd.len = 6;
	183	/* length 0 means 256 blocks */
	184	if (req->cmd.xfer == 0)
	185	req->cmd.xfer = 256;
	186	break;
	187	case 1:
	188	case 2:
	189	req->cmd.xfer = cmd[8] \| (cmd[7] << 8);
	190	req->cmd.len = 10;
	191	break;
	192	case 4:
	193	req->cmd.xfer = cmd[13] \| (cmd[12] << 8) \| (cmd[11] << 16) \| (cmd[10] << 24);
	194	req->cmd.len = 16;
	195	break;
	196	case 5:
	197	req->cmd.xfer = cmd[9] \| (cmd[8] << 8) \| (cmd[7] << 16) \| (cmd[6] << 24);
	198	req->cmd.len = 12;
	199	break;
	200	default:
	201	return -1;
	202	}
	203
	204	switch(cmd[0]) {
	205	case TEST_UNIT_READY:
	206	case REZERO_UNIT:
	207	case START_STOP:
	208	case SEEK_6:
	209	case WRITE_FILEMARKS:
	210	case SPACE:
a5e3d9ef BK	211	case RESERVE:
a5e3d9ef BK	212	case RELEASE:
2ec749cb GH	213	case ERASE:
	214	case ALLOW_MEDIUM_REMOVAL:
	215	case VERIFY:
	216	case SEEK_10:
	217	case SYNCHRONIZE_CACHE:
	218	case LOCK_UNLOCK_CACHE:
	219	case LOAD_UNLOAD:
	220	case SET_CD_SPEED:
	221	case SET_LIMITS:
	222	case WRITE_LONG:
	223	case MOVE_MEDIUM:
	224	case UPDATE_BLOCK:
	225	req->cmd.xfer = 0;
	226	break;
	227	case MODE_SENSE:
	228	break;
	229	case WRITE_SAME:
	230	req->cmd.xfer = 1;
	231	break;
	232	case READ_CAPACITY:
	233	req->cmd.xfer = 8;
	234	break;
	235	case READ_BLOCK_LIMITS:
	236	req->cmd.xfer = 6;
	237	break;
	238	case READ_POSITION:
	239	req->cmd.xfer = 20;
	240	break;
	241	case SEND_VOLUME_TAG:
	242	req->cmd.xfer *= 40;
	243	break;
	244	case MEDIUM_SCAN:
	245	req->cmd.xfer *= 8;
	246	break;
	247	case WRITE_10:
	248	case WRITE_VERIFY:
	249	case WRITE_6:
	250	case WRITE_12:
	251	case WRITE_VERIFY_12:
bd536cf3 GH	252	case WRITE_16:
bd536cf3 GH	253	case WRITE_VERIFY_16:
2ec749cb GH	254	req->cmd.xfer *= req->dev->blocksize;
	255	break;
	256	case READ_10:
	257	case READ_6:
	258	case READ_REVERSE:
	259	case RECOVER_BUFFERED_DATA:
	260	case READ_12:
bd536cf3	261	case READ_16:
2ec749cb GH	262	req->cmd.xfer *= req->dev->blocksize;
	263	break;
	264	case INQUIRY:
	265	req->cmd.xfer = cmd[4] \| (cmd[3] << 8);
	266	break;
c7126d5b NB	267	case MAINTENANCE_OUT:
	268	case MAINTENANCE_IN:
	269	if (req->dev->type == TYPE_ROM) {
	270	/* GPCMD_REPORT_KEY and GPCMD_SEND_KEY from multi media commands */
	271	req->cmd.xfer = cmd[9] \| (cmd[8] << 8);
	272	}
	273	break;
2ec749cb GH	274	}
	275	return 0;
	276	}
	277
	278	static int scsi_req_stream_length(SCSIRequest req, uint8_t cmd)
	279	{
	280	switch(cmd[0]) {
	281	/* stream commands */
	282	case READ_6:
	283	case READ_REVERSE:
	284	case RECOVER_BUFFERED_DATA:
	285	case WRITE_6:
	286	req->cmd.len = 6;
	287	req->cmd.xfer = cmd[4] \| (cmd[3] << 8) \| (cmd[2] << 16);
	288	if (cmd[1] & 0x01) /* fixed */
	289	req->cmd.xfer *= req->dev->blocksize;
	290	break;
	291	case REWIND:
	292	case START_STOP:
	293	req->cmd.len = 6;
	294	req->cmd.xfer = 0;
	295	break;
	296	/* generic commands */
	297	default:
	298	return scsi_req_length(req, cmd);
	299	}
	300	return 0;
	301	}
	302
97a06435 GH	303	static void scsi_req_xfer_mode(SCSIRequest *req)
	304	{
	305	switch (req->cmd.buf[0]) {
	306	case WRITE_6:
	307	case WRITE_10:
	308	case WRITE_VERIFY:
	309	case WRITE_12:
	310	case WRITE_VERIFY_12:
bd536cf3 GH	311	case WRITE_16:
bd536cf3 GH	312	case WRITE_VERIFY_16:
97a06435 GH	313	case COPY:
	314	case COPY_VERIFY:
	315	case COMPARE:
	316	case CHANGE_DEFINITION:
	317	case LOG_SELECT:
	318	case MODE_SELECT:
	319	case MODE_SELECT_10:
	320	case SEND_DIAGNOSTIC:
	321	case WRITE_BUFFER:
	322	case FORMAT_UNIT:
	323	case REASSIGN_BLOCKS:
97a06435 GH	324	case SEARCH_EQUAL:
	325	case SEARCH_HIGH:
	326	case SEARCH_LOW:
	327	case UPDATE_BLOCK:
	328	case WRITE_LONG:
	329	case WRITE_SAME:
	330	case SEARCH_HIGH_12:
	331	case SEARCH_EQUAL_12:
	332	case SEARCH_LOW_12:
	333	case SET_WINDOW:
	334	case MEDIUM_SCAN:
	335	case SEND_VOLUME_TAG:
	336	case WRITE_LONG_2:
01bedeba	337	case PERSISTENT_RESERVE_OUT:
c7126d5b	338	case MAINTENANCE_OUT:
97a06435 GH	339	req->cmd.mode = SCSI_XFER_TO_DEV;
	340	break;
	341	default:
	342	if (req->cmd.xfer)
	343	req->cmd.mode = SCSI_XFER_FROM_DEV;
	344	else {
	345	req->cmd.mode = SCSI_XFER_NONE;
	346	}
	347	break;
	348	}
	349	}
	350
2ec749cb GH	351	static uint64_t scsi_req_lba(SCSIRequest *req)
	352	{
	353	uint8_t *buf = req->cmd.buf;
	354	uint64_t lba;
	355
	356	switch (buf[0] >> 5) {
	357	case 0:
	358	lba = (uint64_t) buf[3] \| ((uint64_t) buf[2] << 8) \|
	359	(((uint64_t) buf[1] & 0x1f) << 16);
	360	break;
	361	case 1:
	362	case 2:
	363	lba = (uint64_t) buf[5] \| ((uint64_t) buf[4] << 8) \|
	364	((uint64_t) buf[3] << 16) \| ((uint64_t) buf[2] << 24);
	365	break;
	366	case 4:
	367	lba = (uint64_t) buf[9] \| ((uint64_t) buf[8] << 8) \|
	368	((uint64_t) buf[7] << 16) \| ((uint64_t) buf[6] << 24) \|
	369	((uint64_t) buf[5] << 32) \| ((uint64_t) buf[4] << 40) \|
	370	((uint64_t) buf[3] << 48) \| ((uint64_t) buf[2] << 56);
	371	break;
	372	case 5:
	373	lba = (uint64_t) buf[5] \| ((uint64_t) buf[4] << 8) \|
	374	((uint64_t) buf[3] << 16) \| ((uint64_t) buf[2] << 24);
	375	break;
	376	default:
	377	lba = -1;
	378
	379	}
	380	return lba;
	381	}
	382
	383	int scsi_req_parse(SCSIRequest req, uint8_t buf)
	384	{
	385	int rc;
	386
	387	if (req->dev->type == TYPE_TAPE) {
	388	rc = scsi_req_stream_length(req, buf);
	389	} else {
	390	rc = scsi_req_length(req, buf);
	391	}
	392	if (rc != 0)
	393	return rc;
	394
	395	memcpy(req->cmd.buf, buf, req->cmd.len);
97a06435	396	scsi_req_xfer_mode(req);
2ec749cb GH	397	req->cmd.lba = scsi_req_lba(req);
	398	return 0;
	399	}
ed3a34a3	400
ec766865 GH	401	static const char *scsi_command_name(uint8_t cmd)
	402	{
	403	static const char *names[] = {
	404	[ TEST_UNIT_READY ] = "TEST_UNIT_READY",
	405	[ REZERO_UNIT ] = "REZERO_UNIT",
545557d4	406	/* REWIND and REZERO_UNIT use the same operation code */
ec766865 GH	407	[ REQUEST_SENSE ] = "REQUEST_SENSE",
	408	[ FORMAT_UNIT ] = "FORMAT_UNIT",
	409	[ READ_BLOCK_LIMITS ] = "READ_BLOCK_LIMITS",
	410	[ REASSIGN_BLOCKS ] = "REASSIGN_BLOCKS",
	411	[ READ_6 ] = "READ_6",
	412	[ WRITE_6 ] = "WRITE_6",
	413	[ SEEK_6 ] = "SEEK_6",
	414	[ READ_REVERSE ] = "READ_REVERSE",
	415	[ WRITE_FILEMARKS ] = "WRITE_FILEMARKS",
	416	[ SPACE ] = "SPACE",
	417	[ INQUIRY ] = "INQUIRY",
	418	[ RECOVER_BUFFERED_DATA ] = "RECOVER_BUFFERED_DATA",
c7126d5b NB	419	[ MAINTENANCE_IN ] = "MAINTENANCE_IN",
c7126d5b NB	420	[ MAINTENANCE_OUT ] = "MAINTENANCE_OUT",
ec766865 GH	421	[ MODE_SELECT ] = "MODE_SELECT",
	422	[ RESERVE ] = "RESERVE",
	423	[ RELEASE ] = "RELEASE",
	424	[ COPY ] = "COPY",
	425	[ ERASE ] = "ERASE",
	426	[ MODE_SENSE ] = "MODE_SENSE",
	427	[ START_STOP ] = "START_STOP",
	428	[ RECEIVE_DIAGNOSTIC ] = "RECEIVE_DIAGNOSTIC",
	429	[ SEND_DIAGNOSTIC ] = "SEND_DIAGNOSTIC",
	430	[ ALLOW_MEDIUM_REMOVAL ] = "ALLOW_MEDIUM_REMOVAL",
	431
	432	[ SET_WINDOW ] = "SET_WINDOW",
	433	[ READ_CAPACITY ] = "READ_CAPACITY",
	434	[ READ_10 ] = "READ_10",
	435	[ WRITE_10 ] = "WRITE_10",
	436	[ SEEK_10 ] = "SEEK_10",
	437	[ WRITE_VERIFY ] = "WRITE_VERIFY",
	438	[ VERIFY ] = "VERIFY",
	439	[ SEARCH_HIGH ] = "SEARCH_HIGH",
	440	[ SEARCH_EQUAL ] = "SEARCH_EQUAL",
	441	[ SEARCH_LOW ] = "SEARCH_LOW",
	442	[ SET_LIMITS ] = "SET_LIMITS",
	443	[ PRE_FETCH ] = "PRE_FETCH",
545557d4	444	/* READ_POSITION and PRE_FETCH use the same operation code */
ec766865 GH	445	[ SYNCHRONIZE_CACHE ] = "SYNCHRONIZE_CACHE",
	446	[ LOCK_UNLOCK_CACHE ] = "LOCK_UNLOCK_CACHE",
	447	[ READ_DEFECT_DATA ] = "READ_DEFECT_DATA",
	448	[ MEDIUM_SCAN ] = "MEDIUM_SCAN",
	449	[ COMPARE ] = "COMPARE",
	450	[ COPY_VERIFY ] = "COPY_VERIFY",
	451	[ WRITE_BUFFER ] = "WRITE_BUFFER",
	452	[ READ_BUFFER ] = "READ_BUFFER",
	453	[ UPDATE_BLOCK ] = "UPDATE_BLOCK",
	454	[ READ_LONG ] = "READ_LONG",
	455	[ WRITE_LONG ] = "WRITE_LONG",
	456	[ CHANGE_DEFINITION ] = "CHANGE_DEFINITION",
	457	[ WRITE_SAME ] = "WRITE_SAME",
	458	[ READ_TOC ] = "READ_TOC",
	459	[ LOG_SELECT ] = "LOG_SELECT",
	460	[ LOG_SENSE ] = "LOG_SENSE",
	461	[ MODE_SELECT_10 ] = "MODE_SELECT_10",
	462	[ RESERVE_10 ] = "RESERVE_10",
	463	[ RELEASE_10 ] = "RELEASE_10",
	464	[ MODE_SENSE_10 ] = "MODE_SENSE_10",
	465	[ PERSISTENT_RESERVE_IN ] = "PERSISTENT_RESERVE_IN",
	466	[ PERSISTENT_RESERVE_OUT ] = "PERSISTENT_RESERVE_OUT",
	467	[ MOVE_MEDIUM ] = "MOVE_MEDIUM",
	468	[ READ_12 ] = "READ_12",
	469	[ WRITE_12 ] = "WRITE_12",
	470	[ WRITE_VERIFY_12 ] = "WRITE_VERIFY_12",
	471	[ SEARCH_HIGH_12 ] = "SEARCH_HIGH_12",
	472	[ SEARCH_EQUAL_12 ] = "SEARCH_EQUAL_12",
	473	[ SEARCH_LOW_12 ] = "SEARCH_LOW_12",
	474	[ READ_ELEMENT_STATUS ] = "READ_ELEMENT_STATUS",
	475	[ SEND_VOLUME_TAG ] = "SEND_VOLUME_TAG",
	476	[ WRITE_LONG_2 ] = "WRITE_LONG_2",
	477
ec766865	478	[ REPORT_DENSITY_SUPPORT ] = "REPORT_DENSITY_SUPPORT",
38215553	479	[ GET_CONFIGURATION ] = "GET_CONFIGURATION",
bd536cf3 GH	480	[ READ_16 ] = "READ_16",
	481	[ WRITE_16 ] = "WRITE_16",
	482	[ WRITE_VERIFY_16 ] = "WRITE_VERIFY_16",
5dd90e2a	483	[ SERVICE_ACTION_IN ] = "SERVICE_ACTION_IN",
39ec9a50	484	[ REPORT_LUNS ] = "REPORT_LUNS",
ec766865 GH	485	[ LOAD_UNLOAD ] = "LOAD_UNLOAD",
	486	[ SET_CD_SPEED ] = "SET_CD_SPEED",
	487	[ BLANK ] = "BLANK",
	488	};
	489
	490	if (cmd >= ARRAY_SIZE(names) \|\| names[cmd] == NULL)
	491	return "UNKNOWN";
	492	return names[cmd];
	493	}
	494
	495	void scsi_req_print(SCSIRequest *req)
	496	{
	497	FILE *fp = stderr;
	498	int i;
	499
	500	fprintf(fp, "[%s id=%d] %s",
	501	req->dev->qdev.parent_bus->name,
	502	req->dev->id,
	503	scsi_command_name(req->cmd.buf[0]));
	504	for (i = 1; i < req->cmd.len; i++) {
	505	fprintf(fp, " 0x%02x", req->cmd.buf[i]);
	506	}
	507	switch (req->cmd.mode) {
	508	case SCSI_XFER_NONE:
	509	fprintf(fp, " - none\n");
	510	break;
	511	case SCSI_XFER_FROM_DEV:
	512	fprintf(fp, " - from-dev len=%zd\n", req->cmd.xfer);
	513	break;
	514	case SCSI_XFER_TO_DEV:
	515	fprintf(fp, " - to-dev len=%zd\n", req->cmd.xfer);
	516	break;
	517	default:
	518	fprintf(fp, " - Oops\n");
	519	break;
	520	}
	521	}
	522
ed3a34a3 GH	523	void scsi_req_complete(SCSIRequest *req)
	524	{
	525	assert(req->status != -1);
e8637c90	526	scsi_req_dequeue(req);
ed3a34a3 GH	527	req->bus->complete(req->bus, SCSI_REASON_DONE,
	528	req->tag,
	529	req->status);
	530	}