2 * CDB emulation for non-READ/WRITE commands.
4 * Copyright (c) 2002, 2003, 2004, 2005 PyX Technologies, Inc.
5 * Copyright (c) 2005, 2006, 2007 SBE, Inc.
6 * Copyright (c) 2007-2010 Rising Tide Systems
7 * Copyright (c) 2008-2010 Linux-iSCSI.org
9 * Nicholas A. Bellinger <nab@kernel.org>
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License as published by
13 * the Free Software Foundation; either version 2 of the License, or
14 * (at your option) any later version.
16 * This program is distributed in the hope that it will be useful,
17 * but WITHOUT ANY WARRANTY; without even the implied warranty of
18 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 * GNU General Public License for more details.
21 * You should have received a copy of the GNU General Public License
22 * along with this program; if not, write to the Free Software
23 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
26 #include <linux/kernel.h>
27 #include <linux/module.h>
28 #include <asm/unaligned.h>
29 #include <scsi/scsi.h>
31 #include <target/target_core_base.h>
32 #include <target/target_core_transport.h>
33 #include <target/target_core_fabric_ops.h>
34 #include "target_core_ua.h"
35 #include "target_core_cdb.h"
38 target_fill_alua_data(struct se_port
*port
, unsigned char *buf
)
40 struct t10_alua_tg_pt_gp
*tg_pt_gp
;
41 struct t10_alua_tg_pt_gp_member
*tg_pt_gp_mem
;
44 * Set SCCS for MAINTENANCE_IN + REPORT_TARGET_PORT_GROUPS.
49 * Set TPGS field for explict and/or implict ALUA access type
52 * See spc4r17 section 6.4.2 Table 135
56 tg_pt_gp_mem
= port
->sep_alua_tg_pt_gp_mem
;
60 spin_lock(&tg_pt_gp_mem
->tg_pt_gp_mem_lock
);
61 tg_pt_gp
= tg_pt_gp_mem
->tg_pt_gp
;
63 buf
[5] |= tg_pt_gp
->tg_pt_gp_alua_access_type
;
64 spin_unlock(&tg_pt_gp_mem
->tg_pt_gp_mem_lock
);
68 target_emulate_inquiry_std(struct se_cmd
*cmd
)
70 struct se_lun
*lun
= cmd
->se_lun
;
71 struct se_device
*dev
= cmd
->se_dev
;
72 struct se_portal_group
*tpg
= lun
->lun_sep
->sep_tpg
;
76 * Make sure we at least have 6 bytes of INQUIRY response
77 * payload going back for EVPD=0
79 if (cmd
->data_length
< 6) {
80 pr_err("SCSI Inquiry payload length: %u"
81 " too small for EVPD=0\n", cmd
->data_length
);
85 buf
= transport_kmap_first_data_page(cmd
);
87 if (dev
== tpg
->tpg_virt_lun0
.lun_se_dev
) {
88 buf
[0] = 0x3f; /* Not connected */
90 buf
[0] = dev
->transport
->get_device_type(dev
);
91 if (buf
[0] == TYPE_TAPE
)
94 buf
[2] = dev
->transport
->get_device_rev(dev
);
97 * Enable SCCS and TPGS fields for Emulated ALUA
99 if (dev
->se_sub_dev
->t10_alua
.alua_type
== SPC3_ALUA_EMULATED
)
100 target_fill_alua_data(lun
->lun_sep
, buf
);
102 if (cmd
->data_length
< 8) {
103 buf
[4] = 1; /* Set additional length to 1 */
107 buf
[7] = 0x32; /* Sync=1 and CmdQue=1 */
110 * Do not include vendor, product, reversion info in INQUIRY
111 * response payload for cdbs with a small allocation length.
113 if (cmd
->data_length
< 36) {
114 buf
[4] = 3; /* Set additional length to 3 */
118 snprintf((unsigned char *)&buf
[8], 8, "LIO-ORG");
119 snprintf((unsigned char *)&buf
[16], 16, "%s",
120 &dev
->se_sub_dev
->t10_wwn
.model
[0]);
121 snprintf((unsigned char *)&buf
[32], 4, "%s",
122 &dev
->se_sub_dev
->t10_wwn
.revision
[0]);
123 buf
[4] = 31; /* Set additional length to 31 */
126 transport_kunmap_first_data_page(cmd
);
130 /* unit serial number */
132 target_emulate_evpd_80(struct se_cmd
*cmd
, unsigned char *buf
)
134 struct se_device
*dev
= cmd
->se_dev
;
137 if (dev
->se_sub_dev
->su_dev_flags
&
138 SDF_EMULATED_VPD_UNIT_SERIAL
) {
142 strlen(&dev
->se_sub_dev
->t10_wwn
.unit_serial
[0]);
143 unit_serial_len
++; /* For NULL Terminator */
145 if (((len
+ 4) + unit_serial_len
) > cmd
->data_length
) {
146 len
+= unit_serial_len
;
147 buf
[2] = ((len
>> 8) & 0xff);
148 buf
[3] = (len
& 0xff);
151 len
+= sprintf((unsigned char *)&buf
[4], "%s",
152 &dev
->se_sub_dev
->t10_wwn
.unit_serial
[0]);
153 len
++; /* Extra Byte for NULL Terminator */
160 target_parse_naa_6h_vendor_specific(struct se_device
*dev
, unsigned char *buf
)
162 unsigned char *p
= &dev
->se_sub_dev
->t10_wwn
.unit_serial
[0];
167 * Generate up to 36 bits of VENDOR SPECIFIC IDENTIFIER starting on
168 * byte 3 bit 3-0 for NAA IEEE Registered Extended DESIGNATOR field
169 * format, followed by 64 bits of VENDOR SPECIFIC IDENTIFIER EXTENSION
170 * to complete the payload. These are based from VPD=0x80 PRODUCT SERIAL
171 * NUMBER set via vpd_unit_serial in target_core_configfs.c to ensure
172 * per device uniqeness.
174 for (cnt
= 0; *p
&& cnt
< 13; p
++) {
175 int val
= hex_to_bin(*p
);
191 * Device identification VPD, for a complete list of
192 * DESIGNATOR TYPEs see spc4r17 Table 459.
195 target_emulate_evpd_83(struct se_cmd
*cmd
, unsigned char *buf
)
197 struct se_device
*dev
= cmd
->se_dev
;
198 struct se_lun
*lun
= cmd
->se_lun
;
199 struct se_port
*port
= NULL
;
200 struct se_portal_group
*tpg
= NULL
;
201 struct t10_alua_lu_gp_member
*lu_gp_mem
;
202 struct t10_alua_tg_pt_gp
*tg_pt_gp
;
203 struct t10_alua_tg_pt_gp_member
*tg_pt_gp_mem
;
204 unsigned char *prod
= &dev
->se_sub_dev
->t10_wwn
.model
[0];
206 u32 unit_serial_len
, off
= 0;
212 * NAA IEEE Registered Extended Assigned designator format, see
213 * spc4r17 section 7.7.3.6.5
215 * We depend upon a target_core_mod/ConfigFS provided
216 * /sys/kernel/config/target/core/$HBA/$DEV/wwn/vpd_unit_serial
217 * value in order to return the NAA id.
219 if (!(dev
->se_sub_dev
->su_dev_flags
& SDF_EMULATED_VPD_UNIT_SERIAL
))
220 goto check_t10_vend_desc
;
222 if (off
+ 20 > cmd
->data_length
)
223 goto check_t10_vend_desc
;
225 /* CODE SET == Binary */
228 /* Set ASSOCIATION == addressed logical unit: 0)b */
231 /* Identifier/Designator type == NAA identifier */
235 /* Identifier/Designator length */
239 * Start NAA IEEE Registered Extended Identifier/Designator
241 buf
[off
++] = (0x6 << 4);
244 * Use OpenFabrics IEEE Company ID: 00 14 05
248 buf
[off
] = (0x5 << 4);
251 * Return ConfigFS Unit Serial Number information for
252 * VENDOR_SPECIFIC_IDENTIFIER and
253 * VENDOR_SPECIFIC_IDENTIFIER_EXTENTION
255 target_parse_naa_6h_vendor_specific(dev
, &buf
[off
]);
262 * T10 Vendor Identifier Page, see spc4r17 section 7.7.3.4
264 id_len
= 8; /* For Vendor field */
265 prod_len
= 4; /* For VPD Header */
266 prod_len
+= 8; /* For Vendor field */
267 prod_len
+= strlen(prod
);
268 prod_len
++; /* For : */
270 if (dev
->se_sub_dev
->su_dev_flags
&
271 SDF_EMULATED_VPD_UNIT_SERIAL
) {
273 strlen(&dev
->se_sub_dev
->t10_wwn
.unit_serial
[0]);
274 unit_serial_len
++; /* For NULL Terminator */
276 if ((len
+ (id_len
+ 4) +
277 (prod_len
+ unit_serial_len
)) >
279 len
+= (prod_len
+ unit_serial_len
);
282 id_len
+= sprintf((unsigned char *)&buf
[off
+12],
284 &dev
->se_sub_dev
->t10_wwn
.unit_serial
[0]);
286 buf
[off
] = 0x2; /* ASCII */
287 buf
[off
+1] = 0x1; /* T10 Vendor ID */
289 memcpy((unsigned char *)&buf
[off
+4], "LIO-ORG", 8);
290 /* Extra Byte for NULL Terminator */
292 /* Identifier Length */
294 /* Header size for Designation descriptor */
298 * struct se_port is only set for INQUIRY VPD=1 through $FABRIC_MOD
303 struct t10_alua_lu_gp
*lu_gp
;
304 u32 padding
, scsi_name_len
;
311 * Relative target port identifer, see spc4r17
314 * Get the PROTOCOL IDENTIFIER as defined by spc4r17
315 * section 7.5.1 Table 362
317 if (((len
+ 4) + 8) > cmd
->data_length
) {
322 (tpg
->se_tpg_tfo
->get_fabric_proto_ident(tpg
) << 4);
323 buf
[off
++] |= 0x1; /* CODE SET == Binary */
324 buf
[off
] = 0x80; /* Set PIV=1 */
325 /* Set ASSOCIATION == target port: 01b */
327 /* DESIGNATOR TYPE == Relative target port identifer */
329 off
++; /* Skip over Reserved */
330 buf
[off
++] = 4; /* DESIGNATOR LENGTH */
331 /* Skip over Obsolete field in RTPI payload
334 buf
[off
++] = ((port
->sep_rtpi
>> 8) & 0xff);
335 buf
[off
++] = (port
->sep_rtpi
& 0xff);
336 len
+= 8; /* Header size + Designation descriptor */
338 * Target port group identifier, see spc4r17
341 * Get the PROTOCOL IDENTIFIER as defined by spc4r17
342 * section 7.5.1 Table 362
345 if (dev
->se_sub_dev
->t10_alua
.alua_type
!=
347 goto check_scsi_name
;
349 if (((len
+ 4) + 8) > cmd
->data_length
) {
353 tg_pt_gp_mem
= port
->sep_alua_tg_pt_gp_mem
;
357 spin_lock(&tg_pt_gp_mem
->tg_pt_gp_mem_lock
);
358 tg_pt_gp
= tg_pt_gp_mem
->tg_pt_gp
;
360 spin_unlock(&tg_pt_gp_mem
->tg_pt_gp_mem_lock
);
363 tg_pt_gp_id
= tg_pt_gp
->tg_pt_gp_id
;
364 spin_unlock(&tg_pt_gp_mem
->tg_pt_gp_mem_lock
);
367 (tpg
->se_tpg_tfo
->get_fabric_proto_ident(tpg
) << 4);
368 buf
[off
++] |= 0x1; /* CODE SET == Binary */
369 buf
[off
] = 0x80; /* Set PIV=1 */
370 /* Set ASSOCIATION == target port: 01b */
372 /* DESIGNATOR TYPE == Target port group identifier */
374 off
++; /* Skip over Reserved */
375 buf
[off
++] = 4; /* DESIGNATOR LENGTH */
376 off
+= 2; /* Skip over Reserved Field */
377 buf
[off
++] = ((tg_pt_gp_id
>> 8) & 0xff);
378 buf
[off
++] = (tg_pt_gp_id
& 0xff);
379 len
+= 8; /* Header size + Designation descriptor */
381 * Logical Unit Group identifier, see spc4r17
385 if (((len
+ 4) + 8) > cmd
->data_length
) {
387 goto check_scsi_name
;
389 lu_gp_mem
= dev
->dev_alua_lu_gp_mem
;
391 goto check_scsi_name
;
393 spin_lock(&lu_gp_mem
->lu_gp_mem_lock
);
394 lu_gp
= lu_gp_mem
->lu_gp
;
396 spin_unlock(&lu_gp_mem
->lu_gp_mem_lock
);
397 goto check_scsi_name
;
399 lu_gp_id
= lu_gp
->lu_gp_id
;
400 spin_unlock(&lu_gp_mem
->lu_gp_mem_lock
);
402 buf
[off
++] |= 0x1; /* CODE SET == Binary */
403 /* DESIGNATOR TYPE == Logical Unit Group identifier */
405 off
++; /* Skip over Reserved */
406 buf
[off
++] = 4; /* DESIGNATOR LENGTH */
407 off
+= 2; /* Skip over Reserved Field */
408 buf
[off
++] = ((lu_gp_id
>> 8) & 0xff);
409 buf
[off
++] = (lu_gp_id
& 0xff);
410 len
+= 8; /* Header size + Designation descriptor */
412 * SCSI name string designator, see spc4r17
415 * Get the PROTOCOL IDENTIFIER as defined by spc4r17
416 * section 7.5.1 Table 362
419 scsi_name_len
= strlen(tpg
->se_tpg_tfo
->tpg_get_wwn(tpg
));
420 /* UTF-8 ",t,0x<16-bit TPGT>" + NULL Terminator */
422 /* Check for 4-byte padding */
423 padding
= ((-scsi_name_len
) & 3);
425 scsi_name_len
+= padding
;
426 /* Header size + Designation descriptor */
429 if (((len
+ 4) + scsi_name_len
) > cmd
->data_length
) {
430 len
+= scsi_name_len
;
434 (tpg
->se_tpg_tfo
->get_fabric_proto_ident(tpg
) << 4);
435 buf
[off
++] |= 0x3; /* CODE SET == UTF-8 */
436 buf
[off
] = 0x80; /* Set PIV=1 */
437 /* Set ASSOCIATION == target port: 01b */
439 /* DESIGNATOR TYPE == SCSI name string */
441 off
+= 2; /* Skip over Reserved and length */
443 * SCSI name string identifer containing, $FABRIC_MOD
444 * dependent information. For LIO-Target and iSCSI
445 * Target Port, this means "<iSCSI name>,t,0x<TPGT> in
448 tpgt
= tpg
->se_tpg_tfo
->tpg_get_tag(tpg
);
449 scsi_name_len
= sprintf(&buf
[off
], "%s,t,0x%04x",
450 tpg
->se_tpg_tfo
->tpg_get_wwn(tpg
), tpgt
);
451 scsi_name_len
+= 1 /* Include NULL terminator */;
453 * The null-terminated, null-padded (see 4.4.2) SCSI
454 * NAME STRING field contains a UTF-8 format string.
455 * The number of bytes in the SCSI NAME STRING field
456 * (i.e., the value in the DESIGNATOR LENGTH field)
457 * shall be no larger than 256 and shall be a multiple
461 scsi_name_len
+= padding
;
463 buf
[off
-1] = scsi_name_len
;
464 off
+= scsi_name_len
;
465 /* Header size + Designation descriptor */
466 len
+= (scsi_name_len
+ 4);
469 buf
[2] = ((len
>> 8) & 0xff);
470 buf
[3] = (len
& 0xff); /* Page Length for VPD 0x83 */
474 /* Extended INQUIRY Data VPD Page */
476 target_emulate_evpd_86(struct se_cmd
*cmd
, unsigned char *buf
)
478 if (cmd
->data_length
< 60)
482 /* Set HEADSUP, ORDSUP, SIMPSUP */
485 /* If WriteCache emulation is enabled, set V_SUP */
486 if (cmd
->se_dev
->se_sub_dev
->se_dev_attrib
.emulate_write_cache
> 0)
491 /* Block Limits VPD page */
493 target_emulate_evpd_b0(struct se_cmd
*cmd
, unsigned char *buf
)
495 struct se_device
*dev
= cmd
->se_dev
;
499 * Following sbc3r22 section 6.5.3 Block Limits VPD page, when
500 * emulate_tpu=1 or emulate_tpws=1 we will be expect a
501 * different page length for Thin Provisioning.
503 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_tpu
|| dev
->se_sub_dev
->se_dev_attrib
.emulate_tpws
)
506 if (cmd
->data_length
< (0x10 + 4)) {
507 pr_debug("Received data_length: %u"
508 " too small for EVPD 0xb0\n",
513 if (have_tp
&& cmd
->data_length
< (0x3c + 4)) {
514 pr_debug("Received data_length: %u"
515 " too small for TPE=1 EVPD 0xb0\n",
520 buf
[0] = dev
->transport
->get_device_type(dev
);
521 buf
[3] = have_tp
? 0x3c : 0x10;
527 * Set OPTIMAL TRANSFER LENGTH GRANULARITY
529 put_unaligned_be16(1, &buf
[6]);
532 * Set MAXIMUM TRANSFER LENGTH
534 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.max_sectors
, &buf
[8]);
537 * Set OPTIMAL TRANSFER LENGTH
539 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.optimal_sectors
, &buf
[12]);
542 * Exit now if we don't support TP or the initiator sent a too
545 if (!have_tp
|| cmd
->data_length
< (0x3c + 4))
549 * Set MAXIMUM UNMAP LBA COUNT
551 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.max_unmap_lba_count
, &buf
[20]);
554 * Set MAXIMUM UNMAP BLOCK DESCRIPTOR COUNT
556 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.max_unmap_block_desc_count
,
560 * Set OPTIMAL UNMAP GRANULARITY
562 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.unmap_granularity
, &buf
[28]);
565 * UNMAP GRANULARITY ALIGNMENT
567 put_unaligned_be32(dev
->se_sub_dev
->se_dev_attrib
.unmap_granularity_alignment
,
569 if (dev
->se_sub_dev
->se_dev_attrib
.unmap_granularity_alignment
!= 0)
570 buf
[32] |= 0x80; /* Set the UGAVALID bit */
575 /* Block Device Characteristics VPD page */
577 target_emulate_evpd_b1(struct se_cmd
*cmd
, unsigned char *buf
)
579 struct se_device
*dev
= cmd
->se_dev
;
581 buf
[0] = dev
->transport
->get_device_type(dev
);
584 if (cmd
->data_length
>= 5 &&
585 dev
->se_sub_dev
->se_dev_attrib
.is_nonrot
)
591 /* Thin Provisioning VPD */
593 target_emulate_evpd_b2(struct se_cmd
*cmd
, unsigned char *buf
)
595 struct se_device
*dev
= cmd
->se_dev
;
598 * From sbc3r22 section 6.5.4 Thin Provisioning VPD page:
600 * The PAGE LENGTH field is defined in SPC-4. If the DP bit is set to
601 * zero, then the page length shall be set to 0004h. If the DP bit
602 * is set to one, then the page length shall be set to the value
603 * defined in table 162.
605 buf
[0] = dev
->transport
->get_device_type(dev
);
608 * Set Hardcoded length mentioned above for DP=0
610 put_unaligned_be16(0x0004, &buf
[2]);
613 * The THRESHOLD EXPONENT field indicates the threshold set size in
614 * LBAs as a power of 2 (i.e., the threshold set size is equal to
615 * 2(threshold exponent)).
617 * Note that this is currently set to 0x00 as mkp says it will be
618 * changing again. We can enable this once it has settled in T10
619 * and is actually used by Linux/SCSI ML code.
624 * A TPU bit set to one indicates that the device server supports
625 * the UNMAP command (see 5.25). A TPU bit set to zero indicates
626 * that the device server does not support the UNMAP command.
628 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_tpu
!= 0)
632 * A TPWS bit set to one indicates that the device server supports
633 * the use of the WRITE SAME (16) command (see 5.42) to unmap LBAs.
634 * A TPWS bit set to zero indicates that the device server does not
635 * support the use of the WRITE SAME (16) command to unmap LBAs.
637 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_tpws
!= 0)
644 target_emulate_evpd_00(struct se_cmd
*cmd
, unsigned char *buf
);
648 int (*emulate
)(struct se_cmd
*, unsigned char *);
649 } evpd_handlers
[] = {
650 { .page
= 0x00, .emulate
= target_emulate_evpd_00
},
651 { .page
= 0x80, .emulate
= target_emulate_evpd_80
},
652 { .page
= 0x83, .emulate
= target_emulate_evpd_83
},
653 { .page
= 0x86, .emulate
= target_emulate_evpd_86
},
654 { .page
= 0xb0, .emulate
= target_emulate_evpd_b0
},
655 { .page
= 0xb1, .emulate
= target_emulate_evpd_b1
},
656 { .page
= 0xb2, .emulate
= target_emulate_evpd_b2
},
659 /* supported vital product data pages */
661 target_emulate_evpd_00(struct se_cmd
*cmd
, unsigned char *buf
)
665 if (cmd
->data_length
< 8)
668 * Only report the INQUIRY EVPD=1 pages after a valid NAA
669 * Registered Extended LUN WWN has been set via ConfigFS
670 * during device creation/restart.
672 if (cmd
->se_dev
->se_sub_dev
->su_dev_flags
&
673 SDF_EMULATED_VPD_UNIT_SERIAL
) {
674 buf
[3] = ARRAY_SIZE(evpd_handlers
);
675 for (p
= 0; p
< min_t(int, ARRAY_SIZE(evpd_handlers
),
676 cmd
->data_length
- 4); ++p
)
677 buf
[p
+ 4] = evpd_handlers
[p
].page
;
683 int target_emulate_inquiry(struct se_task
*task
)
685 struct se_cmd
*cmd
= task
->task_se_cmd
;
686 struct se_device
*dev
= cmd
->se_dev
;
688 unsigned char *cdb
= cmd
->t_task_cdb
;
691 if (!(cdb
[1] & 0x1)) {
692 ret
= target_emulate_inquiry_std(cmd
);
697 * Make sure we at least have 4 bytes of INQUIRY response
698 * payload for 0x00 going back for EVPD=1. Note that 0x80
699 * and 0x83 will check for enough payload data length and
700 * jump to set_len: label when there is not enough inquiry EVPD
701 * payload length left for the next outgoing EVPD metadata
703 if (cmd
->data_length
< 4) {
704 pr_err("SCSI Inquiry payload length: %u"
705 " too small for EVPD=1\n", cmd
->data_length
);
709 buf
= transport_kmap_first_data_page(cmd
);
711 buf
[0] = dev
->transport
->get_device_type(dev
);
713 for (p
= 0; p
< ARRAY_SIZE(evpd_handlers
); ++p
) {
714 if (cdb
[2] == evpd_handlers
[p
].page
) {
716 ret
= evpd_handlers
[p
].emulate(cmd
, buf
);
721 pr_err("Unknown VPD Code: 0x%02x\n", cdb
[2]);
725 transport_kunmap_first_data_page(cmd
);
728 task
->task_scsi_status
= GOOD
;
729 transport_complete_task(task
, 1);
734 int target_emulate_readcapacity(struct se_task
*task
)
736 struct se_cmd
*cmd
= task
->task_se_cmd
;
737 struct se_device
*dev
= cmd
->se_dev
;
739 unsigned long long blocks_long
= dev
->transport
->get_blocks(dev
);
742 if (blocks_long
>= 0x00000000ffffffff)
745 blocks
= (u32
)blocks_long
;
747 buf
= transport_kmap_first_data_page(cmd
);
749 buf
[0] = (blocks
>> 24) & 0xff;
750 buf
[1] = (blocks
>> 16) & 0xff;
751 buf
[2] = (blocks
>> 8) & 0xff;
752 buf
[3] = blocks
& 0xff;
753 buf
[4] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 24) & 0xff;
754 buf
[5] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 16) & 0xff;
755 buf
[6] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 8) & 0xff;
756 buf
[7] = dev
->se_sub_dev
->se_dev_attrib
.block_size
& 0xff;
758 * Set max 32-bit blocks to signal SERVICE ACTION READ_CAPACITY_16
760 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_tpu
|| dev
->se_sub_dev
->se_dev_attrib
.emulate_tpws
)
761 put_unaligned_be32(0xFFFFFFFF, &buf
[0]);
763 transport_kunmap_first_data_page(cmd
);
765 task
->task_scsi_status
= GOOD
;
766 transport_complete_task(task
, 1);
770 int target_emulate_readcapacity_16(struct se_task
*task
)
772 struct se_cmd
*cmd
= task
->task_se_cmd
;
773 struct se_device
*dev
= cmd
->se_dev
;
775 unsigned long long blocks
= dev
->transport
->get_blocks(dev
);
777 buf
= transport_kmap_first_data_page(cmd
);
779 buf
[0] = (blocks
>> 56) & 0xff;
780 buf
[1] = (blocks
>> 48) & 0xff;
781 buf
[2] = (blocks
>> 40) & 0xff;
782 buf
[3] = (blocks
>> 32) & 0xff;
783 buf
[4] = (blocks
>> 24) & 0xff;
784 buf
[5] = (blocks
>> 16) & 0xff;
785 buf
[6] = (blocks
>> 8) & 0xff;
786 buf
[7] = blocks
& 0xff;
787 buf
[8] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 24) & 0xff;
788 buf
[9] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 16) & 0xff;
789 buf
[10] = (dev
->se_sub_dev
->se_dev_attrib
.block_size
>> 8) & 0xff;
790 buf
[11] = dev
->se_sub_dev
->se_dev_attrib
.block_size
& 0xff;
792 * Set Thin Provisioning Enable bit following sbc3r22 in section
793 * READ CAPACITY (16) byte 14 if emulate_tpu or emulate_tpws is enabled.
795 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_tpu
|| dev
->se_sub_dev
->se_dev_attrib
.emulate_tpws
)
798 transport_kunmap_first_data_page(cmd
);
800 task
->task_scsi_status
= GOOD
;
801 transport_complete_task(task
, 1);
806 target_modesense_rwrecovery(unsigned char *p
)
815 target_modesense_control(struct se_device
*dev
, unsigned char *p
)
821 * From spc4r23, 7.4.7 Control mode page
823 * The QUEUE ALGORITHM MODIFIER field (see table 368) specifies
824 * restrictions on the algorithm used for reordering commands
825 * having the SIMPLE task attribute (see SAM-4).
827 * Table 368 -- QUEUE ALGORITHM MODIFIER field
829 * 0h Restricted reordering
830 * 1h Unrestricted reordering allowed
832 * 8h to Fh Vendor specific
834 * A value of zero in the QUEUE ALGORITHM MODIFIER field specifies that
835 * the device server shall order the processing sequence of commands
836 * having the SIMPLE task attribute such that data integrity is maintained
837 * for that I_T nexus (i.e., if the transmission of new SCSI transport protocol
838 * requests is halted at any time, the final value of all data observable
839 * on the medium shall be the same as if all the commands had been processed
840 * with the ORDERED task attribute).
842 * A value of one in the QUEUE ALGORITHM MODIFIER field specifies that the
843 * device server may reorder the processing sequence of commands having the
844 * SIMPLE task attribute in any manner. Any data integrity exposures related to
845 * command sequence order shall be explicitly handled by the application client
846 * through the selection of appropriate ommands and task attributes.
848 p
[3] = (dev
->se_sub_dev
->se_dev_attrib
.emulate_rest_reord
== 1) ? 0x00 : 0x10;
850 * From spc4r17, section 7.4.6 Control mode Page
852 * Unit Attention interlocks control (UN_INTLCK_CTRL) to code 00b
854 * 00b: The logical unit shall clear any unit attention condition
855 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION
856 * status and shall not establish a unit attention condition when a com-
857 * mand is completed with BUSY, TASK SET FULL, or RESERVATION CONFLICT
860 * 10b: The logical unit shall not clear any unit attention condition
861 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION
862 * status and shall not establish a unit attention condition when
863 * a command is completed with BUSY, TASK SET FULL, or RESERVATION
866 * 11b a The logical unit shall not clear any unit attention condition
867 * reported in the same I_T_L_Q nexus transaction as a CHECK CONDITION
868 * status and shall establish a unit attention condition for the
869 * initiator port associated with the I_T nexus on which the BUSY,
870 * TASK SET FULL, or RESERVATION CONFLICT status is being returned.
871 * Depending on the status, the additional sense code shall be set to
872 * PREVIOUS BUSY STATUS, PREVIOUS TASK SET FULL STATUS, or PREVIOUS
873 * RESERVATION CONFLICT STATUS. Until it is cleared by a REQUEST SENSE
874 * command, a unit attention condition shall be established only once
875 * for a BUSY, TASK SET FULL, or RESERVATION CONFLICT status regardless
876 * to the number of commands completed with one of those status codes.
878 p
[4] = (dev
->se_sub_dev
->se_dev_attrib
.emulate_ua_intlck_ctrl
== 2) ? 0x30 :
879 (dev
->se_sub_dev
->se_dev_attrib
.emulate_ua_intlck_ctrl
== 1) ? 0x20 : 0x00;
881 * From spc4r17, section 7.4.6 Control mode Page
883 * Task Aborted Status (TAS) bit set to zero.
885 * A task aborted status (TAS) bit set to zero specifies that aborted
886 * tasks shall be terminated by the device server without any response
887 * to the application client. A TAS bit set to one specifies that tasks
888 * aborted by the actions of an I_T nexus other than the I_T nexus on
889 * which the command was received shall be completed with TASK ABORTED
890 * status (see SAM-4).
892 p
[5] = (dev
->se_sub_dev
->se_dev_attrib
.emulate_tas
) ? 0x40 : 0x00;
901 target_modesense_caching(struct se_device
*dev
, unsigned char *p
)
905 if (dev
->se_sub_dev
->se_dev_attrib
.emulate_write_cache
> 0)
906 p
[2] = 0x04; /* Write Cache Enable */
907 p
[12] = 0x20; /* Disabled Read Ahead */
913 target_modesense_write_protect(unsigned char *buf
, int type
)
916 * I believe that the WP bit (bit 7) in the mode header is the same for
923 buf
[0] |= 0x80; /* WP bit */
929 target_modesense_dpofua(unsigned char *buf
, int type
)
933 buf
[0] |= 0x10; /* DPOFUA bit */
940 int target_emulate_modesense(struct se_task
*task
)
942 struct se_cmd
*cmd
= task
->task_se_cmd
;
943 struct se_device
*dev
= cmd
->se_dev
;
944 char *cdb
= cmd
->t_task_cdb
;
946 int type
= dev
->transport
->get_device_type(dev
);
947 int ten
= (cmd
->t_task_cdb
[0] == MODE_SENSE_10
);
948 int offset
= ten
? 8 : 4;
950 unsigned char buf
[SE_MODE_PAGE_BUF
];
952 memset(buf
, 0, SE_MODE_PAGE_BUF
);
954 switch (cdb
[2] & 0x3f) {
956 length
= target_modesense_rwrecovery(&buf
[offset
]);
959 length
= target_modesense_caching(dev
, &buf
[offset
]);
962 length
= target_modesense_control(dev
, &buf
[offset
]);
965 length
= target_modesense_rwrecovery(&buf
[offset
]);
966 length
+= target_modesense_caching(dev
, &buf
[offset
+length
]);
967 length
+= target_modesense_control(dev
, &buf
[offset
+length
]);
970 pr_err("MODE SENSE: unimplemented page/subpage: 0x%02x/0x%02x\n",
971 cdb
[2] & 0x3f, cdb
[3]);
972 return PYX_TRANSPORT_UNKNOWN_MODE_PAGE
;
978 buf
[0] = (offset
>> 8) & 0xff;
979 buf
[1] = offset
& 0xff;
981 if ((cmd
->se_lun
->lun_access
& TRANSPORT_LUNFLAGS_READ_ONLY
) ||
983 (cmd
->se_deve
->lun_flags
& TRANSPORT_LUNFLAGS_READ_ONLY
)))
984 target_modesense_write_protect(&buf
[3], type
);
986 if ((dev
->se_sub_dev
->se_dev_attrib
.emulate_write_cache
> 0) &&
987 (dev
->se_sub_dev
->se_dev_attrib
.emulate_fua_write
> 0))
988 target_modesense_dpofua(&buf
[3], type
);
990 if ((offset
+ 2) > cmd
->data_length
)
991 offset
= cmd
->data_length
;
995 buf
[0] = offset
& 0xff;
997 if ((cmd
->se_lun
->lun_access
& TRANSPORT_LUNFLAGS_READ_ONLY
) ||
999 (cmd
->se_deve
->lun_flags
& TRANSPORT_LUNFLAGS_READ_ONLY
)))
1000 target_modesense_write_protect(&buf
[2], type
);
1002 if ((dev
->se_sub_dev
->se_dev_attrib
.emulate_write_cache
> 0) &&
1003 (dev
->se_sub_dev
->se_dev_attrib
.emulate_fua_write
> 0))
1004 target_modesense_dpofua(&buf
[2], type
);
1006 if ((offset
+ 1) > cmd
->data_length
)
1007 offset
= cmd
->data_length
;
1010 rbuf
= transport_kmap_first_data_page(cmd
);
1011 memcpy(rbuf
, buf
, offset
);
1012 transport_kunmap_first_data_page(cmd
);
1014 task
->task_scsi_status
= GOOD
;
1015 transport_complete_task(task
, 1);
1019 int target_emulate_request_sense(struct se_task
*task
)
1021 struct se_cmd
*cmd
= task
->task_se_cmd
;
1022 unsigned char *cdb
= cmd
->t_task_cdb
;
1024 u8 ua_asc
= 0, ua_ascq
= 0;
1027 if (cdb
[1] & 0x01) {
1028 pr_err("REQUEST_SENSE description emulation not"
1030 return PYX_TRANSPORT_INVALID_CDB_FIELD
;
1033 buf
= transport_kmap_first_data_page(cmd
);
1035 if (!core_scsi3_ua_clear_for_request_sense(cmd
, &ua_asc
, &ua_ascq
)) {
1037 * CURRENT ERROR, UNIT ATTENTION
1040 buf
[SPC_SENSE_KEY_OFFSET
] = UNIT_ATTENTION
;
1042 * Make sure request data length is enough for additional
1045 if (cmd
->data_length
<= 18) {
1051 * The Additional Sense Code (ASC) from the UNIT ATTENTION
1053 buf
[SPC_ASC_KEY_OFFSET
] = ua_asc
;
1054 buf
[SPC_ASCQ_KEY_OFFSET
] = ua_ascq
;
1058 * CURRENT ERROR, NO SENSE
1061 buf
[SPC_SENSE_KEY_OFFSET
] = NO_SENSE
;
1063 * Make sure request data length is enough for additional
1066 if (cmd
->data_length
<= 18) {
1072 * NO ADDITIONAL SENSE INFORMATION
1074 buf
[SPC_ASC_KEY_OFFSET
] = 0x00;
1079 transport_kunmap_first_data_page(cmd
);
1080 task
->task_scsi_status
= GOOD
;
1081 transport_complete_task(task
, 1);
1086 * Used for TCM/IBLOCK and TCM/FILEIO for block/blk-lib.c level discard support.
1087 * Note this is not used for TCM/pSCSI passthrough
1089 int target_emulate_unmap(struct se_task
*task
)
1091 struct se_cmd
*cmd
= task
->task_se_cmd
;
1092 struct se_device
*dev
= cmd
->se_dev
;
1093 unsigned char *buf
, *ptr
= NULL
;
1094 unsigned char *cdb
= &cmd
->t_task_cdb
[0];
1096 unsigned int size
= cmd
->data_length
, range
;
1097 int ret
= 0, offset
;
1098 unsigned short dl
, bd_dl
;
1100 if (!dev
->transport
->do_discard
) {
1101 pr_err("UNMAP emulation not supported for: %s\n",
1102 dev
->transport
->name
);
1103 return PYX_TRANSPORT_UNKNOWN_SAM_OPCODE
;
1106 /* First UNMAP block descriptor starts at 8 byte offset */
1109 dl
= get_unaligned_be16(&cdb
[0]);
1110 bd_dl
= get_unaligned_be16(&cdb
[2]);
1112 buf
= transport_kmap_first_data_page(cmd
);
1115 pr_debug("UNMAP: Sub: %s Using dl: %hu bd_dl: %hu size: %hu"
1116 " ptr: %p\n", dev
->transport
->name
, dl
, bd_dl
, size
, ptr
);
1119 lba
= get_unaligned_be64(&ptr
[0]);
1120 range
= get_unaligned_be32(&ptr
[8]);
1121 pr_debug("UNMAP: Using lba: %llu and range: %u\n",
1122 (unsigned long long)lba
, range
);
1124 ret
= dev
->transport
->do_discard(dev
, lba
, range
);
1126 pr_err("blkdev_issue_discard() failed: %d\n",
1136 transport_kunmap_first_data_page(cmd
);
1138 task
->task_scsi_status
= GOOD
;
1139 transport_complete_task(task
, 1);
1145 * Used for TCM/IBLOCK and TCM/FILEIO for block/blk-lib.c level discard support.
1146 * Note this is not used for TCM/pSCSI passthrough
1148 int target_emulate_write_same(struct se_task
*task
)
1150 struct se_cmd
*cmd
= task
->task_se_cmd
;
1151 struct se_device
*dev
= cmd
->se_dev
;
1153 sector_t lba
= cmd
->t_task_lba
;
1157 if (!dev
->transport
->do_discard
) {
1158 pr_err("WRITE_SAME emulation not supported"
1159 " for: %s\n", dev
->transport
->name
);
1160 return PYX_TRANSPORT_UNKNOWN_SAM_OPCODE
;
1163 if (cmd
->t_task_cdb
[0] == WRITE_SAME
)
1164 num_blocks
= get_unaligned_be16(&cmd
->t_task_cdb
[7]);
1165 else if (cmd
->t_task_cdb
[0] == WRITE_SAME_16
)
1166 num_blocks
= get_unaligned_be32(&cmd
->t_task_cdb
[10]);
1167 else /* WRITE_SAME_32 via VARIABLE_LENGTH_CMD */
1168 num_blocks
= get_unaligned_be32(&cmd
->t_task_cdb
[28]);
1171 * Use the explicit range when non zero is supplied, otherwise calculate
1172 * the remaining range based on ->get_blocks() - starting LBA.
1174 if (num_blocks
!= 0)
1177 range
= (dev
->transport
->get_blocks(dev
) - lba
);
1179 pr_debug("WRITE_SAME UNMAP: LBA: %llu Range: %llu\n",
1180 (unsigned long long)lba
, (unsigned long long)range
);
1182 ret
= dev
->transport
->do_discard(dev
, lba
, range
);
1184 pr_debug("blkdev_issue_discard() failed for WRITE_SAME\n");
1188 task
->task_scsi_status
= GOOD
;
1189 transport_complete_task(task
, 1);
1193 int target_emulate_synchronize_cache(struct se_task
*task
)
1195 struct se_device
*dev
= task
->task_se_cmd
->se_dev
;
1197 if (!dev
->transport
->do_sync_cache
) {
1198 pr_err("SYNCHRONIZE_CACHE emulation not supported"
1199 " for: %s\n", dev
->transport
->name
);
1200 return PYX_TRANSPORT_UNKNOWN_SAM_OPCODE
;
1203 dev
->transport
->do_sync_cache(task
);
1207 int target_emulate_noop(struct se_task
*task
)
1209 task
->task_scsi_status
= GOOD
;
1210 transport_complete_task(task
, 1);
1215 * Write a CDB into @cdb that is based on the one the intiator sent us,
1216 * but updated to only cover the sectors that the current task handles.
1218 void target_get_task_cdb(struct se_task
*task
, unsigned char *cdb
)
1220 struct se_cmd
*cmd
= task
->task_se_cmd
;
1221 unsigned int cdb_len
= scsi_command_size(cmd
->t_task_cdb
);
1223 memcpy(cdb
, cmd
->t_task_cdb
, cdb_len
);
1224 if (cmd
->se_cmd_flags
& SCF_SCSI_DATA_SG_IO_CDB
) {
1225 unsigned long long lba
= task
->task_lba
;
1226 u32 sectors
= task
->task_sectors
;
1230 /* 21-bit LBA and 8-bit sectors */
1231 cdb
[1] = (lba
>> 16) & 0x1f;
1232 cdb
[2] = (lba
>> 8) & 0xff;
1233 cdb
[3] = lba
& 0xff;
1234 cdb
[4] = sectors
& 0xff;
1237 /* 32-bit LBA and 16-bit sectors */
1238 put_unaligned_be32(lba
, &cdb
[2]);
1239 put_unaligned_be16(sectors
, &cdb
[7]);
1242 /* 32-bit LBA and 32-bit sectors */
1243 put_unaligned_be32(lba
, &cdb
[2]);
1244 put_unaligned_be32(sectors
, &cdb
[6]);
1247 /* 64-bit LBA and 32-bit sectors */
1248 put_unaligned_be64(lba
, &cdb
[2]);
1249 put_unaligned_be32(sectors
, &cdb
[10]);
1252 /* 64-bit LBA and 32-bit sectors, extended CDB */
1253 put_unaligned_be64(lba
, &cdb
[12]);
1254 put_unaligned_be32(sectors
, &cdb
[28]);
1261 EXPORT_SYMBOL(target_get_task_cdb
);